GMER 2.1.19357 - http://www.gmer.net Rootkit scan 2015-01-02 21:06:20 Windows 5.1.2600 Dodatek Service Pack 3 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD16 rev.11.0 149,05GB Running: u6ry01ge.exe; Driver: C:\DOCUME~1\User\USTAWI~1\Temp\fxrcapod.sys ---- System - GMER 2.1 ---- SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwAddBootEntry [0x9A6A5AC4] SSDT \SystemRoot\system32\drivers\aswSP.sys ZwAllocateVirtualMemory [0x9A9700BA] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwAssignProcessToJobObject [0x9A6A65A2] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwClose [0x9A6EC5A0] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateEvent [0x9A6B263C] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateEventPair [0x9A6B2688] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateIoCompletion [0x9A6B2822] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateKey [0x9A6EBF54] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateMutant [0x9A6B25AA] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateSection [0x9A6B26CC] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateSemaphore [0x9A6B25F2] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateThread [0x9A6A6AD8] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateTimer [0x9A6B27DC] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwDebugActiveProcess [0x9A6A7390] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwDeleteBootEntry [0x9A6A5B2A] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwDeleteKey [0x9A6ECC66] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwDeleteValueKey [0x9A6ECF1C] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwDuplicateObject [0x9A6AAB86] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwEnumerateKey [0x9A6ECAD1] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwEnumerateValueKey [0x9A6EC93C] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwLoadDriver [0x9A6A5716] SSDT \SystemRoot\system32\drivers\aswSP.sys ZwMapViewOfSection [0x9A970574] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwModifyBootEntry [0x9A6A5B90] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwNotifyChangeKey [0x9A6AAF7C] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwNotifyChangeMultipleKeys [0x9A6A7E78] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenEvent [0x9A6B2666] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenEventPair [0x9A6B26AA] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenIoCompletion [0x9A6B2846] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenKey [0x9A6EC2B0] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenMutant [0x9A6B25D0] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenProcess [0x9A6AA47E] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenSection [0x9A6B275A] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenSemaphore [0x9A6B261A] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenThread [0x9A6AA86A] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenTimer [0x9A6B2800] SSDT \SystemRoot\system32\drivers\aswSP.sys ZwProtectVirtualMemory [0x9A970312] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwQueryKey [0x9A6EC7B7] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwQueryObject [0x9A6A7CEC] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwQueryValueKey [0x9A6EC609] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwQueueApcThread [0x9A6A7842] SSDT \SystemRoot\system32\drivers\aswSP.sys ZwRenameKey [0x9A97E358] SSDT \SystemRoot\system32\drivers\aswSP.sys ZwReplaceKey [0x9A97ECC4] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwRestoreKey [0x9A6EB597] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSetBootEntryOrder [0x9A6A5BF6] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSetBootOptions [0x9A6A5C5C] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSetContextThread [0x9A6A720A] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSetSystemInformation [0x9A6A57B0] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSetSystemPowerState [0x9A6A5982] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSetValueKey [0x9A6ECD6D] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwShutdownSystem [0x9A6A5910] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSuspendProcess [0x9A6A755A] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSuspendThread [0x9A6A76BC] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSystemDebugControl [0x9A6A5A0A] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwTerminateProcess [0x9A6A7048] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwTerminateThread [0x9A6A71EA] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwVdmControl [0x9A6A5CC2] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwWriteVirtualMemory [0x9A6A65FE] ---- Kernel code sections - GMER 2.1 ---- .text ntkrnlpa.exe!ZwCallbackReturn + 2FD4 805048BC 12 Bytes [F6, 5B, 6A, 9A, 5C, 5C, 6A, ...] {NEG BYTE [EBX+0x6a]; CALL FAR 0x720a:0x9a6a5c5c; PUSH -0x66} .text ntkrnlpa.exe!ZwCallbackReturn + 307C 80504964 12 Bytes [5A, 75, 6A, 9A, BC, 76, 6A, ...] {POP EDX; JNZ 0x6d; CALL FAR 0x5a0a:0x9a6a76bc; PUSH -0x66} PAGE ntkrnlpa.exe!ZwReplyWaitReceivePortEx + 5EC 805A64DC 4 Bytes CALL 9A6A8549 \SystemRoot\system32\drivers\aswSnx.sys .text C:\WINDOWS\system32\DRIVERS\atksgt.sys section is writeable [0x9A223300, 0x3AE88, 0xE8000020] .text C:\WINDOWS\system32\DRIVERS\lirsgt.sys section is writeable [0xA3E9F300, 0x1B7E, 0xE8000020] ---- User code sections - GMER 2.1 ---- .text C:\Program Files\AVAST Software\Avast\AvastSvc.exe[720] kernel32.dll!SetUnhandledExceptionFilter 7C844EE5 8 Bytes [31, C0, C2, 04, 00, 90, 90, ...] {XOR EAX, EAX; RET 0x4; NOP ; NOP ; NOP } .text C:\Program Files\Mozilla Firefox\firefox.exe[1448] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 01999870 C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[1448] ntdll.dll!NtFlushBuffersFile 7C90D32E 2 Bytes JMP 0168D335 C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[1448] ntdll.dll!NtFlushBuffersFile + 3 7C90D331 2 Bytes [D8, 84] .text C:\Program Files\Mozilla Firefox\firefox.exe[1448] ntdll.dll!NtQueryFullAttributesFile 7C90D7AE 5 Bytes JMP 0168D5B0 C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[1448] ntdll.dll!NtReadFile 7C90D9CE 5 Bytes JMP 0168D390 C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[1448] ntdll.dll!NtReadFileScatter 7C90D9DE 5 Bytes JMP 022F8330 C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[1448] ntdll.dll!NtWriteFile 7C90DF7E 5 Bytes JMP 0199A7F0 C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[1448] ntdll.dll!NtWriteFileGather 7C90DF8E 5 Bytes JMP 022F82DF C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[1448] ntdll.dll!LdrLoadDll 7C915C35 5 Bytes JMP 00881F42 C:\Program Files\Mozilla Firefox\mozglue.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[1448] ntdll.dll!LdrUnloadDll 7C916AD5 5 Bytes JMP 003003FC .text C:\Program Files\Mozilla Firefox\firefox.exe[1448] KERNEL32.dll!lstrlenW + 43 7C809AEC 7 Bytes JMP 02239983 C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[1448] KERNEL32.dll!MapViewOfFileEx + 6A 7C80B9A0 7 Bytes JMP 02239960 C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[1448] KERNEL32.dll!ValidateLocale + B648 7C844EE0 7 Bytes JMP 01996164 C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[1448] user32.dll!GetWindowInfo 7E37C49C 5 Bytes JMP 0213B65E C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[1448] GDI32.dll!SetDIBitsToDevice + 20A 77F19E14 7 Bytes JMP 022398E1 C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\AVAST Software\Avast\AvastUI.exe[2392] kernel32.dll!SetUnhandledExceptionFilter 7C844EE5 8 Bytes [31, C0, C2, 04, 00, 90, 90, ...] {XOR EAX, EAX; RET 0x4; NOP ; NOP ; NOP } .text C:\WINDOWS\system32\SearchIndexer.exe[2616] kernel32.dll!WriteFile 7C8112FF 7 Bytes JMP 00585C0C C:\WINDOWS\system32\MSSRCH.DLL ---- User IAT/EAT - GMER 2.1 ---- IAT C:\WINDOWS\system32\services.exe[1212] @ C:\WINDOWS\system32\services.exe [ADVAPI32.dll!CreateProcessAsUserW] 003D0002 IAT C:\WINDOWS\system32\services.exe[1212] @ C:\WINDOWS\system32\services.exe [KERNEL32.dll!CreateProcessW] 003D0000 ---- Devices - GMER 2.1 ---- AttachedDevice \Driver\Tcpip \Device\Ip aswTdi.sys AttachedDevice \Driver\Tcpip \Device\Tcp tcpipBM.sys AttachedDevice \Driver\Tcpip \Device\Tcp aswTdi.sys AttachedDevice \Driver\Tcpip \Device\Udp aswTdi.sys AttachedDevice \Driver\Tcpip \Device\RawIp aswTdi.sys ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Pro\ Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0xE8 0x46 0x5F 0xFD ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xC2 0xAA 0xB7 0x48 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x0A 0xF5 0x69 0x8C ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000002 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000002@hdf12 0xA6 0x6F 0xA4 0x57 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000002\gdq0 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000002\gdq0@hdf12 0xB1 0x61 0x03 0x52 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Pro\ Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0 Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0xE8 0x46 0x5F 0xFD ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xC2 0xAA 0xB7 0x48 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x0A 0xF5 0x69 0x8C ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000002 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000002@hdf12 0xA6 0x6F 0xA4 0x57 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000002\gdq0 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000002\gdq0@hdf12 0xB1 0x61 0x03 0x52 ... Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher@TracesProcessed 79 Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher@TracesSuccessful 64 ---- Files - GMER 2.1 ---- File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\577DC7EE14EE686B40EE5A7605F1F23AD46D19C3 900 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\5B6916DC3CB187151B2FB9B805E3C4E9DD413DE2 13606 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\0F5C289F9CF50D5B2B0258263F6560CD478BF4B0 12116 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\E528E0EDAA373570586FD0A16E3AB8EE79F05FEA 5410 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\D86D84F9D3A6F5584DD17D5C1B665EFCA871AD5D 4109 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\6D08934EDAEFB886BA37A1805CC1448D51B0FC39 5650 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\C62427AB978EDB922DBC15694A3E094957953168 3660 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\01EEDDD9B0188F33AFC0D57AF9D710275C5B0E63 34916 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\8CF989B658B8AA7110E55FB153681ADBFB94F47D 3599 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\0CA6F1C79AF95D6185967ED1DEB6D6199EC003EE 11392 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\E629C91DC1C8EF6CA625D45BA58A377A91AA2045 4248 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\EB7CD9352345D06BDFF949C5CE3F78AA1DB51763 0 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\02FCCA4C2BBAAF7EF7621EC027D200E13FBCAB62 4817 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\F17DC2F0C75702CF0EBEA02538DFB1F59FF0535A 0 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\3C471A49A9DF489B90BB7636C5F22D003D7BA204 706 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\1CC30985684880CD9BF9B9EBE972BC5159A90A2B 3362 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\00AC66723DFF1C7E20C96A675A97D6B3511B9C88 17374 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\9765FB01BA4519CE1261F0955FE3F629B6DCF1B5 4026 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\CF8E3185DA37CEEE66F7C8837099F769415F52B9 897 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\82A76F7F34C1FAB58E540F7879D66EC9B7D66CE1 3751 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\353F6FD2275D1F51C33DCD13DA1141F8649FEFF3 4643 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\FDDE26C71F0AA216E0C2490555528FD2962AB608 3532 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\5AE2A5072BBD5A933A21F9478A32C2A623F5EAB8 5338 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\AF35F73E24A5A58665B114865905229743AA51D3 3522 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\539D44E49CBE391B88FE33DE6E0FE827F0B0BE2C 4016 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\3E09392A9484752C24E41EC6DC68C88FBF32FB9B 4164 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\C5C3589EAB7FDA0F63644703D91CC46A13A7C9CA 31833 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\AF87F35BD039CF9D7CE2328E5C8776B9387F5909 30749 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\BF63E10E539418FF9B84565601A30E364C1356D2 3399 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\4C474159D1CFF20A6DD4D8CF8756DF6BDC7208C3 7276 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\A6263D7D311DDE3C291FC8722B446C014616FC2A 3778 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\0A142B76BCF244B7F79A5E62CC12B2407699CDBB 7508 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\DA1B379F637E091514C46953D8FC6E7A54DE968D 4305 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\4B35BC274AC3BAA225B2D491DFC5272FAFA6A136 7600 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\CAAF77AB43E64BEBD6941D8AA8E2FB254C2DAF98 5244 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\469F9357F7740BF5A5D825063538352B89F9299E 6068 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\2C95B674DB59190987FBEBDC6DD493EC64783C7B 900 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\30D9088C900977A1D655BF8F36DCA63BBF66D4C8 4055 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\F37482301EB9FB7656938E448822464624F829CF 3774 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\2690A5EA004957268563DF57DBD974604DFB368A 3397 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\F1A86F2A26E192BE5BA489568E4E71520FCF993A 4393 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\85715CAF0DB32895CE1118EB4EF6CE3C455D2DB4 1135 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\4058092C014764A40FCB167524E0612A21C149D5 2365 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\CC9DE2AFC1C18435DA3036A40BDDD218ABF55EE2 4087 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\3F3DF8EF9E4663A06F8415D986CDEE787137D9B6 4139 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\3F5778DDB8A2374C5EC147D4593AFBE1990A892E 6691 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\3F57B0B42C727A2D01BAA4DA8778B390198A9C7C 3982 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\3F5D37152B0E1194312B1961B2649B0CFF700301 3421 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\2C00A91FA176837EACFD72091C886FDCA0F6C676 2489 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\F2821775693309DBD28103F59B644443B7FEDA32 3497 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\F2827190721F722AE4A02B6F23FDCCEDDBC3152B 7086 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\CBCD24528485C71FAFBE3B6158A1452355321146 0 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\4BD6B8E4769C5EB6215B1E1B54C1F3743B37E16A 6228 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\3DB3D0DB72210B7280222DC4545C5442770DC5C6 4910 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\CD55A7912B67FC3C285F871BDC25C84F41C93AA9 5727 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\62657C66E6F2B423D10C3A2822FE923A0AC94968 29144 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\92A1A8924CD4389E803D8C310F4584FBB65DE103 900 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\E27AB0241213B3FB526A183EFABCD6E6BCCB556C 1615 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\C5882F4CD20A671C68924333D6556947E937ABDF 3867 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\0DD990D4BF7B08FE4C008DDA981096B481E27F9E 1000 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\7E58F23BFAA8B2529447598C78AA8FA1F6E76B29 3932 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\79839D5A7AEE798E45C61FAE2E7B0946C7428282 1731 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\708AB666C8F9155A2753C8E39B3C12BCD5F7AA9B 7075 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\4587488BDF69840A6A2F0EA05C2A3280A1659D02 5253 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\395CE15D2C470A9E18B5AAD5A5FE895BF379954B 3497 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\947BAD4D2B57BE1B84DF3096DAC53CA5B7BE4879 1656 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\AADDD042E295B57C0B3E26E3F53A9589DF658283 1758 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\BC362E801FA243A099463BAE6F08FB31214202EE 4764 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\6601BEF8A77007E38E3A8AC5CA444F3954C542A5 3553 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\D1EF21CBCDF8357B0DC792EAA4506B0A988F8B00 4059 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\9F16A76CBAB5637BC22789FF4956A49B6A7A12AB 3483 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\FBC57F7C9AB66250A35DC10119720E210B692438 931 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\D821149076F634410472F23FE8C9DFF31F38C9C0 8037 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\ED7FCEC4774956CEC165A519C8BACCA72A60B105 2300 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\4E35BE52C4E6B564087708D7FDB723F2DEA91B8B 3960 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\510C56C43C7E7F7E600A4F4BDFE64449D1A48729 2339 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\55B72D2D5AA370D052A7E9D6138E1C8A8217C706 6382 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\6D7CE1D028C18D08EC65EC96EBD414CE76954C22 1443 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\9A46FE6915BA1FB8E51CC30173EAE09ED1A368BF 6008 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\D278B807C2476A33FF323DD60D37E8CC8EA1B9EF 6170 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\863BD8127CE8A89E623C9D770A529E2C4165F31E 2699 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\C3B480CB3E8E343CD405E4524DFBFB97D6F0F0D6 515 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\C3B59869EF7232916C7A503071A7C113D9FAA058 3789 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\6904471E5AF324A91CB2B446BE7B2D184564BE02 14585 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\DF71D08D86027194C90BE2F1EDCBC34CDA1737CA 3100 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\18661A10C9AD079F44E7B8195FAE2E32EBB32DF8 2521 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\201BC8F851A8E0A207C3DCB000A7C539B8B0BF00 22583 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\20278BB797DB2F4132E5D818E9F0F5310AEBA0A5 17632 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\532B3C2880B301360D558E3E245AD016B6F1C1C4 5444 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\E9E9BBD9202E1AD779058253DABEB66EDD491666 3459 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\574BA30578A24E15481D2C0EB67EC280ED5C251C 4553 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\DE07BAC39D33E452C8C07D6FA1B0543738291C3F 2074 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\DE1C257D1CD9585F6401195DF968C42DC3801F85 13854 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\DE41E3992C526E59F7B9D59C6AEDE0537E629587 2450 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\EE95ECF08D018DF7903D01A70E02610A9D6952E8 3569 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\78F417327291727E60A9F9499DE06C22AD67D260 2451 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\B66A7F395F267E13FACDC6CBBB863036A09257BF 15594 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\B675A3761966DE57DECDEC3AA8A1D9A0CE8B431C 56316 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\9372A1F0CF979242A34EB6D3A5A1641FEF561F4F 3021 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\6BB6C14BEF06F60D72A1C0098482E8A6CAD7D04A 4201 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\052B00B7160C3F44A154A4768858ADA1F0A78C0C 4783 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\ED35AF221C5DCDED771EA71F3BE45755421A53AF 127800 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\FB4F02D1352E2E6FADA5C872FC80914DB0CE4360 5259 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\146ECA4BEF3B01698C40149CDA0A7547724ABBBD 1817 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\F8AB4344F8602E6E0605728468F704DE9EA7AD3B 3900 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\1BDC1C4CBD12BF1589FD4768CEE17AEA76E6C872 2234 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\228DB661E2991D1F45049DA08D610EA13B74BFC3 4061 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\B8DE2BBDCA46757FA1D5877E05B9543866C41F68 5736 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\26D7FBDA0A1BE8350E6499AAAA643EB167BDA84D 3541 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\26EB1E2C1CE7BA752DCC1D500BB87274389D03FC 7158 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\B62A0E9B828D0B37EB5B0840B624B78475F4C659 13039 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\B62F1CA34C4B38F22BD2D7F4EB8AD0B55106985C 3506 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\090F826F0649309196CCA30571CB488636021153 4596 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\0AED66EB2EC55465E57A334538D8E7AA9D4CFB78 4034 bytes File C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Mozilla\Firefox\Profiles\espnnb5z.default\cache2\entries\0AFE46FE5EAB49ABD6200506826FD78C7857DA25 900 bytes ---- EOF - GMER 2.1 ----