OTL logfile created on: 2014-09-21 12:12:16 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Gerard\Desktop\OTL
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17280)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
4,00 Gb Total Physical Memory | 2,09 Gb Available Physical Memory | 52,39% Memory free
7,99 Gb Paging File | 5,69 Gb Available in Paging File | 71,22% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 285,00 Gb Total Space | 113,85 Gb Free Space | 39,95% Space Free | Partition Type: NTFS
Drive D: | 12,79 Gb Total Space | 2,14 Gb Free Space | 16,72% Space Free | Partition Type: NTFS
 
Computer Name: GERARD-KOMPUTER | User Name: Gerard | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2014-09-21 12:10:03 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Gerard\Desktop\OTL\OTL.exe
PRC - [2014-09-04 05:01:19 | 000,852,808 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2014-07-17 17:21:48 | 000,333,008 | ---- | M] (Unified Intents AB) -- C:\Program Files (x86)\Unified Remote\RemoteServer.exe
PRC - [2014-05-07 14:44:30 | 000,511,872 | ---- | M] (Oracle Corporation) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
PRC - [2014-04-17 21:07:28 | 004,672,920 | ---- | M] (Akamai Technologies, Inc.) -- C:\Users\Gerard\AppData\Local\Akamai\netsession_win.exe
PRC - [2014-02-25 19:38:48 | 000,105,448 | ---- | M] (Razer Inc.) -- C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
PRC - [2013-05-09 10:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2013-05-09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013-02-19 01:01:14 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2010-05-25 18:08:42 | 000,037,888 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Winamp\winampa.exe
PRC - [2009-06-25 16:12:42 | 001,414,144 | ---- | M] (Nokia) -- C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
PRC - [2009-06-02 11:10:08 | 000,637,952 | ---- | M] (Nokia.) -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
PRC - [2009-03-30 11:11:14 | 000,120,320 | ---- | M] (Nokia) -- C:\Program Files (x86)\PC Connectivity Solution\Transports\NclRSSrv.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2014-09-12 11:07:55 | 019,696,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\9614efdd4e4b30e71fdee7888135009f\System.ServiceModel.ni.dll
MOD - [2014-09-12 11:04:17 | 001,051,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\cdefa0dca788c8620ada966e500745ad\System.Management.ni.dll
MOD - [2014-09-12 10:43:57 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\f4292d91bd7d00b9a67d2ce630c665f3\PresentationFramework.Aero.ni.dll
MOD - [2014-09-12 10:43:35 | 000,774,144 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\bcc6d5bc2b51e98f0f438e3095410ba0\System.Runtime.Remoting.ni.dll
MOD - [2014-09-12 10:43:32 | 006,638,592 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\00ffa75242f4d49411c0edcaa28171d5\System.Data.ni.dll
MOD - [2014-09-12 10:43:18 | 014,340,096 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\091635768ce9c76a69a765d813b132c0\PresentationFramework.ni.dll
MOD - [2014-09-12 10:43:00 | 012,435,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\89bb9e925603dd26b7652b1785585261\System.Windows.Forms.ni.dll
MOD - [2014-09-12 10:42:52 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\fcf8233284849ce988d4ec0c8a554966\System.Drawing.ni.dll
MOD - [2014-09-12 10:42:50 | 000,185,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\61bea915a98d92c2748dc18d5fc594a7\UIAutomationTypes.ni.dll
MOD - [2014-09-12 10:42:45 | 005,467,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\8f46a462dfc64f7605e47f2db7cb4493\System.Xml.ni.dll
MOD - [2014-09-12 10:42:41 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\61033da65412d29e370145386ff78206\System.Configuration.ni.dll
MOD - [2014-09-12 10:42:39 | 012,236,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\fb42b13a9f38a9ba8082f21236d8882a\PresentationCore.ni.dll
MOD - [2014-09-12 10:42:24 | 003,348,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\e02ebc9ec127d36f3dd841ccc93c00c8\WindowsBase.ni.dll
MOD - [2014-09-12 10:42:18 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\fb7696e9f44bf9645085ba7be5264558\System.ni.dll
MOD - [2014-09-12 10:42:11 | 011,497,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
MOD - [2014-09-12 10:14:42 | 002,822,144 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\c2d1735e9f72e974cd34063a714a309f\System.Runtime.Serialization.ni.dll
MOD - [2014-09-12 10:14:38 | 007,668,736 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\3c777eb7042798554bcf10134595273e\System.Xml.ni.dll
MOD - [2014-09-12 10:14:32 | 007,409,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data\936468ae0e65d704cc703aae22697cd9\System.Data.ni.dll
MOD - [2014-09-12 10:14:31 | 000,976,384 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\5ee6a5fbbf59e1c3ca14631ff12dd6ec\System.Configuration.ni.dll
MOD - [2014-09-12 10:14:29 | 012,894,208 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\b51470d7e909c4fab01a25fd1e1c42dc\System.Windows.Forms.ni.dll
MOD - [2014-09-12 10:14:25 | 006,990,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\28684b3f787d06edd1de8b574521d867\System.Core.ni.dll
MOD - [2014-09-12 10:14:17 | 010,061,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\9b943fcb3af2101cfb3467161c6ac0ed\System.ni.dll
MOD - [2014-09-04 05:01:18 | 000,331,592 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\ppGoogleNaClPluginChrome.dll
MOD - [2014-09-04 05:01:16 | 008,577,864 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\pdf.dll
MOD - [2014-09-04 05:01:12 | 001,098,056 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\libglesv2.dll
MOD - [2014-09-04 05:01:10 | 000,174,408 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\libegl.dll
MOD - [2014-09-04 05:01:09 | 001,660,232 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\ffmpegsumo.dll
MOD - [2014-03-21 00:49:19 | 002,952,704 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2014-03-03 10:08:50 | 001,644,544 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\5cd2aee5e7c07227c694d89219688ab3\System.Drawing.ni.dll
MOD - [2014-03-03 10:08:14 | 016,953,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\ce5f61c5754789df97be8dc991c47d07\mscorlib.ni.dll
MOD - [2012-12-02 18:50:36 | 000,037,280 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\HP.ActiveSupportLibrary\2.0.0.1__01a974bc1760f423\HP.ActiveSupportLibrary.dll
MOD - [2010-11-13 04:37:37 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010-11-05 03:54:55 | 000,249,856 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_pl_31bf3856ad364e35\PresentationFramework.resources.dll
MOD - [2010-11-05 03:54:55 | 000,110,592 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationCore.resources\3.0.0.0_pl_31bf3856ad364e35\PresentationCore.resources.dll
MOD - [2009-07-15 17:51:04 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Pillars\PCAlerts\PCAlertsPillar.dll
MOD - [2009-07-15 17:51:02 | 000,131,072 | ---- | M] () -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Pillars\ECenter\ECLibrary.dll
MOD - [2009-07-15 17:50:58 | 000,040,960 | ---- | M] () -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\MessagingServer.dll
MOD - [2009-07-15 17:50:56 | 000,036,864 | ---- | M] () -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\MessagingClients.dll
MOD - [2009-07-15 17:50:56 | 000,007,680 | ---- | M] () -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\RemotingClient.dll
MOD - [2009-07-15 17:50:54 | 000,005,632 | ---- | M] () -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\MessagingInterface.dll
MOD - [2009-07-15 17:50:52 | 000,018,944 | ---- | M] () -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\MessagingMessages.dll
MOD - [2009-07-15 17:50:44 | 000,028,672 | ---- | M] () -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.Logging.dll
MOD - [2009-06-17 11:40:16 | 007,745,536 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll
MOD - [2009-06-17 11:40:16 | 002,121,728 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll
MOD - [2009-06-17 11:40:16 | 000,135,168 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
MOD - [2008-08-12 12:16:16 | 002,023,424 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia PC Suite 7\QtCore4.dll
MOD - [2008-07-29 15:47:56 | 000,016,384 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia PC Suite 7\imageformats\qsvg4.dll
MOD - [2008-07-29 15:47:38 | 000,135,168 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia PC Suite 7\imageformats\qjpeg4.dll
MOD - [2008-07-29 15:11:18 | 000,253,952 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia PC Suite 7\QtSvg4.dll
MOD - [2008-07-29 15:01:12 | 007,331,840 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia PC Suite 7\QtGui4.dll
MOD - [2008-07-29 14:50:26 | 000,364,544 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia PC Suite 7\QtXml4.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2014-08-19 00:03:37 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:[b]64bit:[/b] - [2013-05-27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2013-05-09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:[b]64bit:[/b] - [2009-07-22 03:33:32 | 000,240,128 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\stacsv64.exe -- (STacSV)
SRV:[b]64bit:[/b] - [2009-07-02 20:16:06 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:[b]64bit:[/b] - [2009-03-02 23:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe -- (AESTFilters)
SRV - [2014-03-21 00:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2014-02-25 19:38:48 | 000,105,448 | ---- | M] (Razer Inc.) [Auto | Running] -- C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe -- (RzKLService)
SRV - [2013-10-23 09:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013-09-11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2013-02-19 01:01:14 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2012-09-27 12:55:16 | 000,086,528 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe -- (HP Support Assistant Service)
SRV - [2009-07-22 03:33:32 | 000,240,128 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\STacSV64.exe -- (STacSV)
SRV - [2009-06-02 11:10:08 | 000,637,952 | ---- | M] (Nokia.) [On_Demand | Running] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2009-05-22 20:02:20 | 000,250,616 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService)
SRV - [2009-03-02 23:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe -- (AESTFilters)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2013-09-01 05:33:21 | 000,378,944 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:[b]64bit:[/b] - [2013-09-01 05:33:21 | 000,189,936 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:[b]64bit:[/b] - [2013-09-01 05:33:20 | 001,030,952 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:[b]64bit:[/b] - [2013-08-29 03:29:52 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:[b]64bit:[/b] - [2013-05-09 10:59:07 | 000,072,016 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:[b]64bit:[/b] - [2013-05-09 10:59:07 | 000,065,336 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:[b]64bit:[/b] - [2013-05-09 10:59:07 | 000,064,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:[b]64bit:[/b] - [2013-05-09 10:59:06 | 000,080,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:[b]64bit:[/b] - [2013-05-09 10:59:06 | 000,033,400 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:[b]64bit:[/b] - [2012-11-16 18:19:14 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcdx64)
DRV:[b]64bit:[/b] - [2012-11-16 18:19:14 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2011-07-19 17:05:17 | 000,082,048 | ---- | M] (VSO Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pcouffin.sys -- (pcouffin)
DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2011-03-07 00:23:31 | 000,254,528 | ---- | M] (DT Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:[b]64bit:[/b] - [2010-11-20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2010-11-20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2010-11-20 11:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2010-07-23 10:45:28 | 000,119,680 | ---- | M] (TCT International Mobile Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\jrdusbser.sys -- (jrdusbser)
DRV:[b]64bit:[/b] - [2010-03-02 16:45:24 | 001,594,368 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:[b]64bit:[/b] - [2009-07-22 03:33:32 | 000,487,936 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
DRV:[b]64bit:[/b] - [2009-07-15 01:16:34 | 000,273,456 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-07-14 02:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:[b]64bit:[/b] - [2009-07-02 20:51:30 | 006,036,480 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:[b]64bit:[/b] - [2009-06-24 21:00:18 | 000,216,576 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV:[b]64bit:[/b] - [2009-06-10 23:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92)
DRV:[b]64bit:[/b] - [2009-06-10 23:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac)
DRV:[b]64bit:[/b] - [2009-06-10 23:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA)
DRV:[b]64bit:[/b] - [2009-06-10 23:01:06 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem)
DRV:[b]64bit:[/b] - [2009-06-10 22:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2009-06-10 22:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
DRV:[b]64bit:[/b] - [2009-06-10 22:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-06-05 12:20:26 | 000,114,192 | ---- | M] (ATI Research Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:[b]64bit:[/b] - [2009-05-23 08:52:30 | 000,215,040 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2009-05-05 07:30:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie)
DRV:[b]64bit:[/b] - [2009-04-29 08:48:32 | 000,018,432 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys -- (HpqKbFiltr)
DRV:[b]64bit:[/b] - [2009-03-09 06:49:08 | 000,036,408 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:[b]64bit:[/b] - [2009-02-09 09:38:44 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64j.sys -- (UsbserFilt)
DRV:[b]64bit:[/b] - [2009-02-09 09:38:34 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
DRV:[b]64bit:[/b] - [2009-02-09 09:38:32 | 000,025,088 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdcx64)
DRV:[b]64bit:[/b] - [2008-08-28 13:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{CE478A33-2406-4F47-9F8C-73DD77C7A8CC}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1602&query={searchTerms}&invocationType=tb50hpcnnbie7-pl-pl
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\..\SearchScopes\{CE478A33-2406-4F47-9F8C-73DD77C7A8CC}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1602&query={searchTerms}&invocationType=tb50hpcnnbie7-pl-pl
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-21-264646996-2161709609-1433315882-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=pl_PL&c=94&bd=Presario&pf=cnnb
IE - HKU\S-1-5-21-264646996-2161709609-1433315882-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-264646996-2161709609-1433315882-1000\..\URLSearchHook: {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - No CLSID value found
IE - HKU\S-1-5-21-264646996-2161709609-1433315882-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-264646996-2161709609-1433315882-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7IRFC_pl
IE - HKU\S-1-5-21-264646996-2161709609-1433315882-1000\..\SearchScopes\{CE478A33-2406-4F47-9F8C-73DD77C7A8CC}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1602&query={searchTerms}&invocationType=tb50hpcnnbie7-pl-pl
IE - HKU\S-1-5-21-264646996-2161709609-1433315882-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-264646996-2161709609-1433315882-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1:9421;<local>
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.60.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.60.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8064.0206: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@zylom.com/ZylomGamesPlayer: C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Gerard\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Gerard\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files (x86)\Nokia\Nokia PC Suite 7\bkmrksync\ [2010-11-01 01:51:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-09-01 05:32:55 | 000,000,000 | ---D | M]
 
[2012-01-02 12:33:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Gerard\AppData\Roaming\mozilla\Extensions
[2011-01-11 03:55:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Gerard\AppData\Roaming\mozilla\Extensions\IMVUClientXUL@imvu.com
[2014-03-24 00:21:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Gerard\AppData\Roaming\mozilla\Firefox\Profiles\nk5c328r.default\extensions
[2014-03-24 00:44:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Gerard\AppData\Roaming\mozilla\Firefox\Profiles\nk5c328r.default\extensions\eran@whoislive.com
[2013-10-04 19:21:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2011-02-02 22:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2011-09-16 12:57:06 | 000,189,088 | ---- | M] ( ) -- C:\Program Files (x86)\mozilla firefox\plugins\npVividasPlayer.dll
[2010-05-25 18:09:48 | 000,063,488 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll
[2009-10-23 16:01:34 | 000,102,400 | ---- | M] (Zylom) -- C:\Program Files (x86)\mozilla firefox\plugins\npzylomgamesplayer.dll
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider:  (Enabled)
CHR - default_search_provider: search_url = 
CHR - default_search_provider: suggest_url = 
CHR - plugin: Error reading preferences file
CHR - Extension: No name found = C:\Users\Gerard\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\
CHR - Extension: No name found = C:\Users\Gerard\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: No name found = C:\Users\Gerard\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1\
CHR - Extension: No name found = C:\Users\Gerard\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: No name found = C:\Users\Gerard\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.7.13_0\
CHR - Extension: No name found = C:\Users\Gerard\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: No name found = C:\Users\Gerard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
CHR - Extension: No name found = C:\Users\Gerard\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\
CHR - Extension: No name found = C:\Users\Gerard\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: No name found = C:\Users\Gerard\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1\
CHR - Extension: No name found = C:\Users\Gerard\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: No name found = C:\Users\Gerard\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.7.13_0\
CHR - Extension: No name found = C:\Users\Gerard\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: No name found = C:\Users\Gerard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:[b]64bit:[/b] - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (AOL Toolbar BHO) - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files (x86)\AOL\Pasek narzędzi AOL 5.0\aoltb.dll (AOL LLC)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (AOL Toolbar) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files (x86)\AOL\Pasek narzędzi AOL 5.0\aoltb.dll (AOL LLC)
O3 - HKU\S-1-5-21-264646996-2161709609-1433315882-1000\..\Toolbar\WebBrowser: (no name) - {09EC805C-CB2E-4D53-B0D3-A75A428B81C7} - No CLSID value found.
O3 - HKU\S-1-5-21-264646996-2161709609-1433315882-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-264646996-2161709609-1433315882-1000\..\Toolbar\WebBrowser: (AOL Toolbar) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files (x86)\AOL\Pasek narzędzi AOL 5.0\aoltb.dll (AOL LLC)
O4:[b]64bit:[/b] - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Freecorder FLV Service] "C:\Program Files (x86)\Freecorder\FLVSrvc.exe" /run File not found
O4 - HKLM..\Run: [UpdatePRCShortCut] C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-264646996-2161709609-1433315882-1000..\Run: [Akamai NetSession Interface] C:\Users\Gerard\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
O4 - HKU\S-1-5-21-264646996-2161709609-1433315882-1000..\Run: [dbcffdcdddgfdgfdgdfg] "đ˙" File not found
O4 - HKU\S-1-5-21-264646996-2161709609-1433315882-1000..\Run: [Facebook Update] C:\Users\Gerard\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKU\S-1-5-21-264646996-2161709609-1433315882-1000..\Run: [HP Deskjet 3050 J610 series (NET)] C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\ScanToPCActivationApp.exe (Hewlett-Packard Co.)
O4 - HKU\S-1-5-21-264646996-2161709609-1433315882-1000..\Run: [IPLA!] C:\Program Files (x86)\ipla\ipla.exe (Redefine Sp z o.o.)
O4 - HKU\S-1-5-21-264646996-2161709609-1433315882-1000..\Run: [PC Suite Tray] C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia)
O4 - HKU\S-1-5-21-264646996-2161709609-1433315882-1000..\Run: [Unified Remote v2] C:\Program Files (x86)\Unified Remote\RemoteServer.exe (Unified Intents AB)
O4:[b]64bit:[/b] - HKLM..\RunOnce: [NCPluginUpdater] C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe (Hewlett-Packard)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\Gerard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IMVU.lnk =  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: WallpaperStyle = 2
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: WallpaperStyle = 2
O7 - HKU\S-1-5-21-264646996-2161709609-1433315882-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: WallpaperStyle = 2
O8:[b]64bit:[/b] - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html File not found
O8:[b]64bit:[/b] - Extra context menu item: &Wyszukiwarka na pasku narzędzi AOL - C:\ProgramData\AOL\ieToolbar\resources\pl-PL\local\search.html ()
O8:[b]64bit:[/b] - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found
O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O8:[b]64bit:[/b] - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html File not found
O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html File not found
O8 - Extra context menu item: &Wyszukiwarka na pasku narzędzi AOL - C:\ProgramData\AOL\ieToolbar\resources\pl-PL\local\search.html ()
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html File not found
O9:[b]64bit:[/b] - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9 - Extra Button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe (Hewlett-Packard)
O9 - Extra 'Tools' menuitem : HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe (Hewlett-Packard)
O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:[b]64bit:[/b] - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O16:[b]64bit:[/b] - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O16:[b]64bit:[/b] - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.60.2)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.60.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{06A19EC2-F576-4E48-B6BA-5F4C9C7A94DB}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DF717098-BDF4-4033-B145-9D6CE0686149}: DhcpNameServer = 192.168.0.1
O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-itss - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2014-09-21 12:10:53 | 000,000,000 | ---D | C] -- C:\Users\Gerard\Desktop\OTL
[2014-09-21 11:54:18 | 000,000,000 | ---D | C] -- C:\Users\Gerard\Desktop\sdf
[2014-09-21 11:29:36 | 000,000,000 | ---D | C] -- C:\FRST
[2014-09-21 11:20:47 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\Windows\SysWow64\sqlite3.dll
[2014-09-21 10:38:05 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014-09-18 20:55:28 | 000,000,000 | ---D | C] -- C:\Users\Gerard\AppData\Local\Opera Software
[2014-09-18 20:55:27 | 000,000,000 | ---D | C] -- C:\Users\Gerard\AppData\Roaming\Opera Software
[2014-09-18 20:55:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Opera
[2014-09-12 10:02:12 | 000,596,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2014-09-12 10:02:11 | 000,440,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2014-09-12 10:02:07 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
[2014-09-12 10:02:07 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
[2014-09-12 10:02:07 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2014-09-12 10:02:06 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
[2014-09-12 10:02:06 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
[2014-09-12 10:02:06 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
[2014-09-12 10:02:05 | 000,446,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2014-09-12 10:02:05 | 000,289,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2014-09-12 10:02:05 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2014-09-12 10:02:05 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2014-09-12 10:02:04 | 000,547,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2014-09-12 10:02:04 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2014-09-12 10:02:03 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2014-09-12 10:02:03 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2014-09-12 10:02:03 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2014-09-12 10:02:02 | 000,727,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2014-09-12 10:02:02 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2014-09-12 10:02:01 | 000,707,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2014-09-12 10:02:01 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2014-09-12 10:02:01 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2014-09-12 10:01:58 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
[2014-09-12 10:01:58 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
[2014-09-12 10:01:55 | 000,775,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2014-09-12 10:01:55 | 000,678,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2014-09-12 10:01:55 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
[2014-09-12 10:01:54 | 001,249,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
[2014-09-12 10:01:54 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
[2014-09-12 10:01:53 | 001,068,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
[2014-09-12 10:01:53 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
[2014-09-12 10:01:52 | 000,940,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2014-09-12 10:01:44 | 005,833,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2014-09-12 10:01:41 | 002,104,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2014-09-12 10:01:41 | 002,014,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2014-09-12 09:40:46 | 002,777,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll
[2014-09-12 09:40:46 | 002,285,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll
[2014-09-11 17:20:00 | 001,031,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSWorkspace.dll
[2014-09-11 17:19:59 | 000,793,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TSWorkspace.dll
[2014-09-11 17:12:11 | 002,565,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2014-09-11 17:11:09 | 001,460,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2014-09-11 17:10:36 | 000,578,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
[2014-09-11 17:10:34 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
[2014-08-28 09:18:13 | 000,404,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll
[2011-07-19 17:05:16 | 000,082,048 | ---- | C] (VSO Software) -- C:\Users\Gerard\AppData\Roaming\pcouffin.sys
[2 C:\Users\Gerard\Documents\*.tmp files -> C:\Users\Gerard\Documents\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2014-09-21 11:40:16 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014-09-21 11:33:22 | 000,026,192 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014-09-21 11:33:21 | 000,026,192 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014-09-21 11:25:09 | 000,000,282 | ---- | M] () -- C:\ProgramData\hpqp.ini
[2014-09-21 11:24:36 | 000,001,978 | ---- | M] () -- C:\Users\Gerard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Powiadomienia monitorowania tuszu - HP Deskjet 3050 J610 series (sieć).lnk
[2014-09-21 11:23:24 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014-09-21 11:22:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014-09-21 11:22:39 | 3218,239,488 | -HS- | M] () -- C:\hiberfil.sys
[2014-09-21 11:18:24 | 001,373,475 | ---- | M] () -- C:\Users\Gerard\Desktop\AdwCleaner.exe
[2014-09-21 11:06:08 | 000,001,965 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2014-09-21 11:06:02 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2014-09-15 22:59:03 | 000,001,082 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-264646996-2161709609-1433315882-1000UA.job
[2014-09-15 16:35:09 | 000,000,336 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForGerard.job
[2014-09-15 13:14:11 | 000,077,286 | ---- | M] () -- C:\Users\Gerard\Desktop\10705013_831360046874862_1549382131_n.jpg
[2014-09-14 10:28:13 | 000,001,060 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-264646996-2161709609-1433315882-1000Core.job
[2014-09-12 09:59:06 | 001,656,502 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2014-09-12 09:59:06 | 000,745,182 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2014-09-12 09:59:06 | 000,658,622 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014-09-12 09:59:06 | 000,158,740 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2014-09-12 09:59:06 | 000,124,296 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014-09-12 09:58:45 | 001,656,502 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014-09-07 15:19:32 | 000,035,448 | ---- | M] () -- C:\Users\Gerard\Desktop\71452_707181799303016_1402573194_n.jpg
[2014-09-06 01:14:32 | 000,075,663 | ---- | M] () -- C:\Users\Gerard\Desktop\10601311_818504534837408_759685094_n.jpg
[2014-09-05 04:10:43 | 000,578,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
[2014-09-05 04:05:42 | 000,424,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
[2014-09-02 00:16:18 | 000,000,994 | ---- | M] () -- C:\Users\Public\Desktop\ipla.lnk
[2014-08-29 03:21:23 | 000,394,848 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2014-08-28 01:42:49 | 000,085,319 | ---- | M] () -- C:\Users\Gerard\Desktop\10588956_814350518586143_1009238211_n.jpg
[2014-08-23 04:07:00 | 000,404,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll
[2 C:\Users\Gerard\Documents\*.tmp files -> C:\Users\Gerard\Documents\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2014-09-21 11:17:12 | 001,373,475 | ---- | C] () -- C:\Users\Gerard\Desktop\AdwCleaner.exe
[2014-09-21 11:06:08 | 000,001,965 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2014-09-15 13:12:08 | 000,077,286 | ---- | C] () -- C:\Users\Gerard\Desktop\10705013_831360046874862_1549382131_n.jpg
[2014-09-07 15:19:24 | 000,035,448 | ---- | C] () -- C:\Users\Gerard\Desktop\71452_707181799303016_1402573194_n.jpg
[2014-09-06 01:14:24 | 000,075,663 | ---- | C] () -- C:\Users\Gerard\Desktop\10601311_818504534837408_759685094_n.jpg
[2014-09-02 00:16:18 | 000,000,994 | ---- | C] () -- C:\Users\Public\Desktop\ipla.lnk
[2014-08-28 01:41:54 | 000,085,319 | ---- | C] () -- C:\Users\Gerard\Desktop\10588956_814350518586143_1009238211_n.jpg
[2014-03-01 11:58:34 | 001,656,502 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013-02-19 01:01:17 | 000,189,248 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2013-02-19 01:01:14 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2013-01-30 01:32:16 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempa18348.html
[2013-01-21 14:02:14 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
[2012-12-07 17:14:09 | 000,000,033 | ---- | C] () -- C:\ProgramData\droidcam-settings
[2012-10-05 18:32:35 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempt17052.html
[2012-08-28 13:28:15 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempJ18844.html
[2012-08-28 08:51:10 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempw19156.html
[2012-08-27 18:30:19 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Templ14180.html
[2012-08-10 17:39:00 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempxa4000.html
[2012-07-20 19:20:01 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempb22204.html
[2012-06-10 13:07:05 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempX15244.html
[2012-03-29 13:53:42 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempUu1700.html
[2012-03-23 08:50:57 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempAF1932.html
[2012-03-23 08:50:57 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempsW1932.html
[2012-03-21 14:04:34 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempGn9452.html
[2012-03-05 15:21:04 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempsP7912.html
[2012-03-05 15:13:45 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempXW7912.html
[2012-02-27 21:45:55 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempZpy924.html
[2012-01-22 00:30:57 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempGy7020.html
[2012-01-20 16:18:18 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempBc1564.html
[2012-01-18 15:51:27 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemphF2872.html
[2012-01-16 16:33:12 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempYY6892.html
[2012-01-16 00:34:05 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempax8292.html
[2012-01-15 20:24:24 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempFA8008.html
[2012-01-15 19:51:08 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Templi6436.html
[2012-01-15 18:12:35 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempQF5676.html
[2011-12-27 12:02:12 | 000,001,000 | ---- | C] () -- C:\Users\Gerard\AppData\Roaming\wklnhst.dat
[2011-12-17 21:37:41 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempRC1032.html
[2011-12-12 21:56:19 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempsy4628.html
[2011-12-12 21:56:19 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempmy4628.html
[2011-12-01 22:19:41 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempaT4828.html
[2011-11-18 15:32:37 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempdX4208.html
[2011-11-11 18:00:02 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempwyj364.html
[2011-11-11 18:00:02 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempnVF364.html
[2011-11-07 21:51:20 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemplE2544.html
[2011-10-07 23:02:24 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempIq1512.html
[2011-09-29 19:55:03 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempov3276.html
[2011-09-27 21:25:00 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Temptd5388.html
[2011-09-11 23:08:57 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempbB6064.html
[2011-09-11 22:55:59 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempaW5308.html
[2011-08-31 23:21:25 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempKR3140.html
[2011-08-30 19:29:21 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempzd4420.html
[2011-08-20 19:53:40 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempnv3316.html
[2011-08-20 19:53:40 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempom3316.html
[2011-08-19 11:11:59 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempRP2588.html
[2011-08-17 14:38:49 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempNe1168.html
[2011-07-21 15:18:38 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempAy2900.html
[2011-07-19 17:05:16 | 000,093,696 | ---- | C] () -- C:\Users\Gerard\AppData\Roaming\ezpinst.exe
[2011-07-19 17:05:16 | 000,007,176 | ---- | C] () -- C:\Users\Gerard\AppData\Roaming\pcouffin.cat
[2011-07-19 17:05:16 | 000,001,167 | ---- | C] () -- C:\Users\Gerard\AppData\Roaming\pcouffin.inf
[2011-06-29 21:26:53 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempJc3500.html
[2011-06-29 14:46:04 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempqPa148.html
[2011-06-27 23:08:12 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempRy2380.html
[2011-06-27 23:08:12 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempFc2380.html
[2011-06-21 17:55:29 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempYV5136.html
[2011-06-20 00:03:28 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempVl3000.html
[2011-06-19 17:32:49 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempPy3992.html
[2011-06-19 12:03:21 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempiU4108.html
[2011-06-13 18:49:25 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemphB4580.html
[2011-06-06 16:44:31 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempGR4084.html
[2011-06-01 20:32:26 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempgX1772.html
[2011-06-01 15:31:20 | 000,000,000 | ---- | C] () -- C:\Users\Gerard\AppData\Local\{0D940716-81FD-486A-850D-5FF2CD47249A}
[2011-05-27 15:06:23 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempcG4196.html
[2011-05-27 08:57:21 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Temphi1996.html
[2011-05-26 16:07:40 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempGh4628.html
[2011-05-25 21:56:26 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempIv4064.html
[2011-05-25 17:40:41 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempqJ4064.html
[2011-05-17 14:44:03 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempPy4772.html
[2011-05-13 09:33:35 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempmf3056.html
[2011-05-04 16:42:02 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempxV5092.html
[2011-04-27 01:08:43 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempqT2544.html
[2011-04-27 01:08:43 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempUH2544.html
[2011-04-27 01:05:28 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempME3752.html
[2011-04-14 23:59:54 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempmH4380.html
[2011-04-14 00:03:19 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempQU2388.html
[2011-04-13 22:50:41 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempRR3340.html
[2011-04-13 14:40:45 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempBD2188.html
[2011-04-12 12:46:28 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempwB2488.html
[2011-04-12 11:25:44 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempuU4396.html
[2011-04-12 10:31:18 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempVi4108.html
[2011-04-12 00:39:44 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempAD6140.html
[2011-04-07 23:11:02 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempNL3224.html
[2011-04-07 10:37:17 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempgZL628.html
[2011-04-04 20:25:26 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempMT5044.html
[2011-04-03 14:32:58 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempjO1400.html
[2011-03-31 15:54:10 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempFN3960.html
[2011-03-29 00:48:48 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempoj5260.html
[2011-03-26 13:59:59 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempZc4140.html
[2011-03-26 13:59:59 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemptG4140.html
[2011-03-24 22:26:59 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempfo4164.html
[2011-03-14 23:14:41 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempte1952.html
[2011-03-13 22:52:11 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempgn2248.html
[2011-03-10 11:25:50 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempEG2148.html
[2011-03-09 11:02:43 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempPf3428.html
[2011-03-06 11:50:13 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempYK2796.html
[2011-03-06 00:10:04 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempQs6016.html
[2011-03-05 18:04:22 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempFB4360.html
[2011-03-04 17:49:57 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempTa3612.html
[2011-03-03 21:26:17 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemphN5616.html
[2011-02-28 15:28:08 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempGm1196.html
[2011-02-23 20:41:07 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempSd2936.html
[2011-02-14 11:45:48 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempkc4948.html
[2011-02-14 00:42:12 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempNz4068.html
[2011-02-12 13:46:29 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempQj5148.html
[2011-02-07 00:52:51 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempcv5216.html
[2011-02-07 00:52:44 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempQW5216.html
[2011-02-04 19:55:45 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempww4720.html
[2011-02-01 21:47:10 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempxK5664.html
[2011-01-28 13:14:16 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempIC1076.html
[2011-01-28 13:14:16 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempVb1076.html
[2011-01-27 01:00:39 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempub5440.html
[2011-01-25 22:16:10 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempSp4156.html
[2011-01-25 19:02:45 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempIh2400.html
[2011-01-22 01:19:45 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempeL2504.html
[2011-01-21 17:35:17 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempGe2504.html
[2011-01-21 13:24:33 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempAm2504.html
[2011-01-21 00:08:04 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempkg2292.html
[2011-01-21 00:03:58 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempJb2292.html
[2011-01-19 22:34:24 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempUH4792.html
[2011-01-19 22:34:24 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempgh4792.html
[2011-01-19 16:35:58 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempIA1140.html
[2011-01-11 20:08:57 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempqr5516.html
[2011-01-11 16:14:03 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempjm5896.html
[2011-01-09 02:11:30 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempue3752.html
[2011-01-08 11:13:48 | 000,001,854 | ---- | C] () -- C:\Users\Gerard\AppData\Roaming\GhostObjGAFix.xml
[2010-12-31 21:22:29 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Temptu3460.html
[2010-12-31 12:54:38 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempvnl568.html
[2010-12-31 12:50:47 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempNat568.html
[2010-12-28 15:39:40 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempIB3144.html
[2010-12-28 15:39:40 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempIj3144.html
[2010-12-27 22:36:01 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempaU4708.html
[2010-12-27 22:33:13 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempDe4708.html
[2010-12-26 23:21:43 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempBI4596.html
[2010-12-26 23:21:43 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempGP4596.html
[2010-12-26 23:15:21 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempoF4596.html
[2010-12-26 23:14:59 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempka4596.html
[2010-12-26 23:14:59 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempZN4596.html
[2010-12-26 16:43:25 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempyt1268.html
[2010-12-26 15:45:44 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempZD1268.html
[2010-12-26 14:35:01 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempfe1268.html
[2010-12-26 14:34:43 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempkf1268.html
[2010-12-26 13:13:11 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempex2500.html
[2010-12-25 02:50:19 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempCf5696.html
[2010-12-25 02:18:27 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempok5720.html
[2010-12-25 02:07:17 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempOW2704.html
[2010-12-25 02:07:17 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempWw2704.html
[2010-12-25 00:44:28 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempuU2704.html
[2010-12-25 00:44:28 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempoy2704.html
[2010-12-24 20:00:56 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemptT1772.html
[2010-12-24 02:24:41 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempXv2196.html
[2010-12-24 02:24:41 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempto2196.html
[2010-12-23 01:37:59 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempGp3048.html
[2010-12-23 01:37:59 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempqn3048.html
[2010-12-21 23:51:46 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempPV1444.html
[2010-12-21 23:51:46 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempbj1444.html
[2010-12-20 14:39:34 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempxu5032.html
[2010-12-19 13:45:04 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempzQ1600.html
[2010-12-18 23:46:42 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempBh1468.html
[2010-12-15 22:40:43 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempHeI388.html
[2010-12-11 00:19:08 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempVM2344.html
[2010-12-10 16:01:25 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempyTU348.html
[2010-12-10 12:11:08 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempcL3912.html
[2010-12-09 18:01:10 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempmR3896.html
[2010-12-08 19:04:58 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempoc4608.html
[2010-12-02 14:31:42 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempQG2288.html
[2010-12-01 11:00:38 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Temphk1252.html
[2010-11-30 14:31:14 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempGp2448.html
[2010-11-30 14:30:48 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempgJ3140.html
[2010-11-30 14:30:48 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempjM3140.html
[2010-11-29 22:27:34 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempwO4832.html
[2010-11-29 15:16:09 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Templn2744.html
[2010-11-27 00:24:35 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempYl2636.html
[2010-11-27 00:24:35 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempwF2636.html
[2010-11-26 21:20:29 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempGK5052.html
[2010-11-26 19:18:09 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempfy1052.html
[2010-11-26 10:55:32 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempXN3160.html
[2010-11-25 12:21:08 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempzh1660.html
[2010-11-24 12:11:11 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempkq2912.html
[2010-11-23 12:53:23 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempfy3040.html
[2010-11-23 12:53:23 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempPr3040.html
[2010-11-22 12:37:14 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempQN3424.html
[2010-11-21 23:30:33 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempLf2284.html
[2010-11-21 15:52:04 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempJX2284.html
[2010-11-20 22:50:52 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempqB2952.html
[2010-11-20 10:35:42 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Temphz2868.html
[2010-11-19 23:18:20 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempbg3044.html
[2010-11-19 22:15:16 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempyr2544.html
[2010-11-19 22:15:16 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Templf2544.html
[2010-11-19 15:25:58 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempil2936.html
[2010-11-19 09:41:29 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempee2644.html
[2010-11-19 09:41:29 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempUN2644.html
[2010-11-19 01:25:25 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempYx5844.html
[2010-11-18 11:50:40 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempaa2876.html
[2010-11-18 01:11:31 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempAT5764.html
[2010-11-18 01:11:31 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempif5764.html
[2010-11-17 10:39:14 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempHZ1596.html
[2010-11-17 02:09:16 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempvZ4848.html
[2010-11-17 02:09:16 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempAs4848.html
[2010-11-16 10:25:28 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempJF2664.html
[2010-11-16 01:31:19 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempIE5540.html
[2010-11-16 01:31:19 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempGG5540.html
[2010-11-15 18:57:08 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempbq5540.html
[2010-11-15 18:57:08 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempaT5540.html
[2010-11-15 13:24:55 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemphS2372.html
[2010-11-15 09:46:57 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempFH3092.html
[2010-11-15 09:46:57 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempBr3092.html
[2010-11-14 21:58:50 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemppI3020.html
[2010-11-14 21:58:50 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempvv3020.html
[2010-11-13 19:44:00 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempKe3996.html
[2010-11-13 18:52:59 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempAo2800.html
[2010-11-13 18:02:21 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempCu3108.html
[2010-11-13 18:02:21 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempVL3108.html
[2010-11-12 22:32:44 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempAA4504.html
[2010-11-12 22:32:44 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempMr4504.html
[2010-11-12 12:01:19 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempEe2660.html
[2010-11-12 12:01:19 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempTD2660.html
[2010-11-12 00:57:05 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Templv4920.html
[2010-11-12 00:57:05 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempZc4920.html
[2010-11-11 18:22:15 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempMa4920.html
[2010-11-11 18:22:15 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempiv4920.html
[2010-11-11 11:04:00 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempLy2092.html
[2010-11-11 01:33:46 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempNi2324.html
[2010-11-10 12:04:04 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempnt1720.html
[2010-11-10 08:41:06 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempfu2784.html
[2010-11-10 00:35:33 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempOA4680.html
[2010-11-10 00:35:33 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempcf4680.html
[2010-11-09 22:56:13 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemppA3680.html
[2010-11-09 19:43:21 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Temprd3528.html
[2010-11-09 11:50:37 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempdk2600.html
[2010-11-09 11:50:37 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempmC2600.html
[2010-11-09 09:51:22 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempen3372.html
[2010-11-08 11:32:13 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempce3228.html
[2010-11-08 11:32:13 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempAZ3228.html
[2010-11-07 18:59:27 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempUs3552.html
[2010-11-06 20:59:40 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Templj2704.html
[2010-11-06 12:28:11 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempmK3124.html
[2010-11-06 01:15:02 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempOy3076.html
[2010-11-06 01:15:02 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempTf3076.html
[2010-11-05 11:10:46 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempPS3660.html
[2010-11-05 01:19:41 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempvED968.html
[2010-11-05 01:19:41 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemptgJ968.html
[2010-11-04 13:40:20 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempuc1668.html
[2010-11-03 09:45:45 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempaS2496.html
[2010-11-02 23:41:25 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempHy2128.html
[2010-11-02 23:41:25 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempuV2128.html
[2010-11-02 18:06:04 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempSs3764.html
[2010-11-02 10:48:15 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Temprz3128.html
[2010-11-02 10:48:15 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempGd3128.html
[2010-11-01 12:54:35 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempzM1064.html
[2010-11-01 12:54:35 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempGS1064.html
[2010-11-01 10:06:23 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempKv1064.html
[2010-11-01 10:06:23 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempTM1064.html
[2010-11-01 02:04:37 | 000,007,168 | ---- | C] () -- C:\Users\Gerard\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-10-31 15:02:30 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempDv2644.html
[2010-10-30 16:09:28 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempSy1264.html
[2010-10-30 16:09:28 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempHT1264.html
[2010-10-30 11:12:16 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempKf2420.html
[2010-10-30 02:57:09 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempwL2828.html
[2010-10-30 02:57:09 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempVG2828.html
[2010-10-29 10:31:46 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempkb2260.html
[2010-10-29 10:31:46 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempHe2260.html
[2010-10-28 21:05:13 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempBa2916.html
[2010-10-28 11:46:18 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempEF1452.html
[2010-10-28 11:46:18 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempYV1452.html
[2010-10-26 20:21:39 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempmG2252.html
[2010-10-26 13:49:19 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempzn1600.html
[2010-10-26 13:49:19 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempMk1600.html
[2010-10-26 12:04:52 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempgp1600.html
[2010-10-26 12:04:52 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempey1600.html
[2010-10-25 16:26:11 | 000,129,024 | ---- | C] () -- C:\Program Files (x86)\UNWISE.EXE
[2010-10-25 12:21:10 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempeA5920.html
[2010-10-25 12:21:10 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempDp5920.html
[2010-10-24 21:04:51 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempPS1656.html
[2010-10-24 21:04:51 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempTi1656.html
[2010-10-24 16:57:02 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempLf1800.html
[2010-10-23 14:15:36 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempoT2848.html
[2010-10-23 14:15:36 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempEd2848.html
[2010-10-23 00:33:11 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempgF2808.html
[2010-10-22 08:15:27 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempas1660.html
[2010-10-22 08:15:27 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempDS1660.html
[2010-10-22 00:58:54 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempHZ3336.html
[2010-10-22 00:58:54 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempvM3336.html
[2010-10-21 12:29:43 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempFT2420.html
[2010-10-21 12:01:03 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempzt2420.html
[2010-10-20 22:39:31 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempwd4748.html
[2010-10-20 21:16:22 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemprV4748.html
[2010-10-20 14:26:02 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempdq5112.html
[2010-10-20 09:29:30 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempYN1888.html
[2010-10-20 09:29:30 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempoo1888.html
[2010-10-19 19:30:14 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempel3068.html
[2010-10-19 19:30:14 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempds3068.html
[2010-10-19 10:52:37 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempre3068.html
[2010-10-19 07:46:26 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempmN1712.html
[2010-10-19 07:46:26 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempuR1712.html
[2010-10-18 17:54:30 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempYH2612.html
[2010-10-18 17:54:30 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempax2612.html
[2010-10-18 09:18:53 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempuj2612.html
[2010-10-18 09:18:53 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempuo2612.html
[2010-10-17 22:27:02 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempBm2812.html
[2010-10-17 22:27:02 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempcP2812.html
[2010-10-17 20:07:19 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Temper2724.html
[2010-10-17 19:16:15 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempYt2724.html
[2010-10-17 19:16:15 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemphF2724.html
[2010-10-16 10:01:48 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Temprr2948.html
[2010-10-15 09:15:50 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempsK2988.html
[2010-10-15 09:15:50 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempFQ2988.html
[2010-10-14 23:45:10 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempFz4456.html
[2010-10-14 19:35:46 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempVc3692.html
[2010-10-14 08:10:25 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempME2432.html
[2010-10-14 08:10:25 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempQA2432.html
[2010-10-12 17:05:53 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempCL2032.html
[2010-10-12 17:05:53 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempat2032.html
[2010-10-11 13:54:30 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempSW2604.html
[2010-10-10 14:22:36 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempxg4132.html
[2010-10-08 09:27:36 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempEI2852.html
[2010-10-08 00:04:17 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempqC2540.html
[2010-10-08 00:04:17 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempES2540.html
[2010-10-07 14:12:04 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempKf1848.html
[2010-10-07 14:12:04 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempCX1848.html
[2010-10-06 12:42:18 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempsA2988.html
[2010-10-06 12:42:18 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempva2988.html
[2010-10-03 22:33:41 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempOE2172.html
[2010-10-03 22:33:41 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempKr2172.html
[2010-09-30 10:57:58 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempyi2992.html
[2010-09-29 23:02:30 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempxF1600.html
[2010-09-29 17:40:11 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempwx1600.html
[2010-09-29 12:01:37 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempuA2612.html
[2010-09-29 12:01:37 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempeh2612.html
[2010-09-28 15:17:16 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempBm2620.html
[2010-09-28 10:52:45 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Temptx2620.html
[2010-09-28 09:26:25 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempMh2620.html
[2010-09-27 20:00:00 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempWJ1028.html
[2010-09-27 15:47:55 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempZV1028.html
[2010-09-27 14:03:30 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Temphj4376.html
[2010-09-27 12:13:07 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempQY2204.html
[2010-09-27 09:55:56 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempGa2880.html
[2010-09-27 09:55:56 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempeh2880.html
[2010-09-27 07:53:24 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempmx2564.html
[2010-09-26 20:46:22 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempnm2152.html
[2010-09-24 14:29:23 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempzI3048.html
[2010-09-24 14:29:23 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempre3048.html
[2010-09-24 13:17:28 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempVe1588.html
[2010-09-24 13:17:28 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempem1588.html
[2010-09-24 11:07:59 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempLe1572.html
[2010-09-23 22:38:46 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempFl3816.html
[2010-09-23 22:38:46 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempda3816.html
[2010-09-23 21:18:24 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempFX5308.html
[2010-09-23 21:18:24 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempDV5308.html
[2010-09-23 20:57:37 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Templq5308.html
[2010-09-23 17:22:42 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemphQ4724.html
[2010-09-23 15:23:13 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempTI4724.html
[2010-09-23 12:50:17 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Temprg4724.html
[2010-09-22 17:59:10 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempMr4152.html
[2010-09-22 17:29:58 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemprL4152.html
[2010-09-22 13:47:33 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempSv2556.html
[2010-09-22 11:53:39 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Temphs2648.html
[2010-09-22 11:53:39 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempdK2648.html
[2010-09-22 11:02:49 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempKl2648.html
[2010-09-22 11:02:49 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempCH2648.html
[2010-09-22 10:24:12 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemplV2648.html
[2010-09-22 00:39:51 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempQu2700.html
[2010-09-21 19:20:18 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempRK2700.html
[2010-09-21 18:28:21 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempru2700.html
[2010-09-21 16:19:10 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempWz2700.html
[2010-09-21 13:01:12 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempGc3488.html
[2010-09-21 01:47:43 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempUt1740.html
[2010-09-20 21:39:12 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempFN1568.html
[2010-09-20 18:20:31 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempgH1568.html
[2010-09-20 16:01:21 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Temphj1568.html
[2010-09-19 22:16:12 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempgc4920.html
[2010-09-19 21:36:03 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempKz2180.html
[2010-09-15 13:22:08 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempdT2964.html
[2010-09-15 13:22:08 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempfM2964.html
[2010-09-15 11:29:16 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemppB2808.html
[2010-09-14 12:43:47 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempsL2596.html
[2010-09-14 10:57:34 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempUG2596.html
[2010-09-14 09:53:07 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempgC2596.html
[2010-09-13 23:18:46 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempEK2744.html
[2010-09-13 19:25:35 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempEz2744.html
[2010-09-13 16:38:26 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempVp2744.html
[2010-09-13 16:38:26 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempFn2744.html
[2010-09-13 14:31:06 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemphZ2652.html
[2010-09-13 13:38:31 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempuQ2652.html
[2010-09-13 12:25:42 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempFe2652.html
[2010-09-13 11:12:12 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempvM2652.html
[2010-09-12 23:44:05 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempIF2060.html
[2010-09-12 23:15:45 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempwL2060.html
[2010-09-12 10:48:28 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempcG2060.html
[2010-09-12 09:54:41 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempMO2060.html
[2010-09-11 23:20:32 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempCM2396.html
[2010-09-11 23:20:32 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempqH2396.html
[2010-09-11 20:02:26 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempLG2744.html
[2010-09-11 14:26:24 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempjN2692.html
[2010-09-11 10:37:50 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempme2692.html
[2010-09-11 10:37:50 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempyO2692.html
[2010-09-10 22:02:48 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempoQ2016.html
[2010-09-10 22:02:48 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempDh2016.html
[2010-09-10 17:21:37 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempYN2016.html
[2010-09-10 12:48:42 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempZe1932.html
[2010-09-10 11:30:20 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemplN2076.html
[2010-09-09 20:50:53 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempjy2440.html
[2010-09-09 10:47:18 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempAL2440.html
[2010-09-08 18:45:33 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempvW2100.html
[2010-09-08 14:22:47 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempAAY332.html
[2010-09-08 11:48:46 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempIqx332.html
[2010-09-08 11:48:46 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempLat332.html
[2010-09-08 11:38:09 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempnhP332.html
[2010-09-08 11:33:00 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempkQ2724.html
[2010-09-08 11:33:00 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempsn2724.html
[2010-09-08 09:52:10 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempef2724.html
[2010-09-08 09:52:10 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempas2724.html
[2010-09-07 18:01:37 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempqk2632.html
[2010-09-07 16:46:37 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempzU2632.html
[2010-09-07 13:13:12 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempio3088.html
[2010-09-07 13:13:12 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempsB3088.html
[2010-09-07 11:13:29 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempZv2992.html
[2010-09-07 10:59:01 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempeA2992.html
[2010-09-07 10:59:01 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempOz2992.html
[2010-09-07 02:05:35 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempjm5772.html
[2010-09-07 01:12:04 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempwi5772.html
[2010-09-06 23:33:00 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempQz5772.html
[2010-09-06 20:42:18 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempYl5772.html
[2010-09-06 20:42:18 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempRq5772.html
[2010-09-06 16:41:35 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempjt4220.html
[2010-08-30 10:17:34 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempYe2228.html
[2010-08-29 18:28:41 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempqT2096.html
[2010-08-29 18:28:41 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempVf2096.html
[2010-08-29 10:09:23 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempmX2128.html
[2010-08-29 00:57:35 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempqb3060.html
[2010-08-28 19:52:20 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempEH2928.html
[2010-08-28 10:01:58 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempVn2996.html
[2010-08-27 20:58:55 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempTO2236.html
[2010-08-27 19:26:45 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempLO1116.html
[2010-08-27 19:26:45 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempoq1116.html
[2010-08-27 09:57:40 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempJpY316.html
[2010-08-26 23:08:00 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempbZ5060.html
[2010-08-26 20:55:38 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempaZ1600.html
[2010-08-11 16:47:14 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempTM3084.html
[2010-08-06 10:17:58 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempET1168.html
[2010-08-05 10:19:58 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempsZ2596.html
[2010-08-05 01:01:16 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempow2580.html
[2010-08-04 19:26:58 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempAW3044.html
[2010-08-04 10:41:15 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempCR6284.html
[2010-08-04 10:41:15 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempFd6284.html
[2010-08-03 19:26:55 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempOR3228.html
[2010-08-03 10:15:53 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempfJ3204.html
[2010-08-03 10:15:53 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempoA3204.html
[2010-08-02 21:20:53 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempuV1464.html
[2010-08-02 14:30:47 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempIg2504.html
[2010-07-28 23:06:50 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempwT3964.html
[2010-07-28 23:06:50 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Templa3964.html
[2010-07-28 21:54:02 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempzi1584.html
[2010-07-28 21:54:02 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempjr1584.html
[2010-07-23 15:04:08 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempjk4892.html
[2010-07-23 12:46:48 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempWK1132.html
[2010-07-23 12:35:07 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempka4196.html
[2010-07-23 12:35:07 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempDw4196.html
[2010-07-22 20:25:22 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempht2780.html
[2010-07-22 19:37:35 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempHO2780.html
[2010-07-22 18:01:44 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempdo5316.html
[2010-07-22 15:13:42 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempoS5172.html
[2010-07-22 13:16:29 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Temped3900.html
[2010-07-22 01:25:48 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemplY2528.html
[2010-07-21 22:18:07 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemppM4896.html
[2010-07-21 21:26:24 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempvh4724.html
[2010-07-21 18:02:42 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempXJ3128.html
[2010-07-21 16:06:26 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempHa3128.html
[2010-07-21 10:29:30 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempwW3172.html
[2010-07-19 12:56:15 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempDF2548.html
[2010-07-19 12:48:47 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempQK2548.html
[2010-07-19 09:05:09 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempnX3040.html
[2010-07-19 09:04:47 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempFE3040.html
[2010-07-18 17:06:54 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempRT2776.html
[2010-07-18 17:06:54 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempqM2776.html
[2010-07-17 10:11:31 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempKm1508.html
[2010-07-17 10:10:56 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempBU1508.html
[2010-07-16 22:58:22 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TemphY2280.html
[2010-07-16 22:56:39 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempVh2280.html
[2010-07-16 18:25:13 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempAV4272.html
[2010-07-16 18:24:23 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempvk4272.html
[2010-07-16 10:48:38 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempdL2260.html
[2010-07-15 21:51:36 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempKv1724.html
[2010-07-15 21:51:36 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempjW1724.html
[2010-07-15 09:54:54 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempsJ2596.html
[2010-07-15 09:54:54 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempaZ2596.html
[2010-07-14 14:44:00 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempvF2956.html
[2010-07-14 14:44:00 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempJM2956.html
[2010-07-14 10:05:43 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempvs3308.html
[2010-07-14 10:05:43 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempjo3308.html
[2010-07-13 11:22:13 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempZp2664.html
[2010-07-13 11:22:13 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempXX2664.html
[2010-07-13 08:28:05 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Temper2300.html
[2010-07-13 08:28:05 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempuk2300.html
[2010-07-12 14:11:11 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempce3616.html
[2010-07-12 14:11:11 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempfS3616.html
[2010-07-08 18:40:38 | 000,002,432 | ---- | C] () -- C:\Users\Gerard\AppData\Local\Tempfs4196.html
[2010-07-08 18:40:38 | 000,002,089 | ---- | C] () -- C:\Users\Gerard\AppData\Local\TempKN4196.html
[2009-10-11 01:56:05 | 000,000,282 | ---- | C] () -- C:\ProgramData\hpqp.ini
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2014-06-25 04:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014-06-25 03:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-07-22 01:39:51 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\AutoUpdate
[2011-10-29 14:45:01 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\DAEMON Tools Lite
[2013-01-30 01:32:15 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\Gadu-Gadu 10
[2010-06-24 22:02:17 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\Gamelab
[2013-04-02 19:32:20 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\Grupa IMAGE
[2014-09-21 11:24:53 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\ipla
[2010-09-29 01:40:32 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\IrfanView
[2014-08-31 15:36:46 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\Kamerzysta
[2013-05-15 18:58:29 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\KTW
[2012-03-08 21:42:38 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\muvee Technologies
[2010-12-19 13:44:10 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\Nokia
[2010-07-08 19:14:10 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\OpenFM
[2014-09-18 20:55:27 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\Opera Software
[2010-11-01 01:54:15 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\PC Suite
[2010-06-23 11:33:30 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\PhotoFiltre
[2010-06-23 18:09:11 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\PlayFirst
[2013-02-19 01:01:09 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\PunkBuster
[2013-05-18 10:46:42 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\TeamViewer
[2011-12-27 12:02:14 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\Template
[2012-12-30 21:18:27 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\Unified Remote
[2013-10-04 23:04:40 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\Unity
[2013-05-07 10:21:48 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\uTorrent
[2011-01-11 04:00:49 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\Vivox
[2011-07-19 17:06:03 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\Vso
[2013-12-13 10:02:19 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\wargaming.net
[2010-06-21 16:56:35 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\WildTangent
[2010-07-01 14:41:40 | 000,000,000 | ---D | M] -- C:\Users\Gerard\AppData\Roaming\WildTangentv1001
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >