OTL logfile created on: 2011-09-26 16:49:16 - Run 1 OTL by OldTimer - Version 3.2.29.1 Folder = C:\Users\Mateusz\Downloads 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 2,64 Gb Available Physical Memory | 66,01% Memory free 8,00 Gb Paging File | 6,21 Gb Available in Paging File | 77,63% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 196,16 Gb Total Space | 102,01 Gb Free Space | 52,00% Space Free | Partition Type: NTFS Drive D: | 146,72 Gb Total Space | 47,64 Gb Free Space | 32,47% Space Free | Partition Type: NTFS Drive E: | 151,37 Gb Total Space | 106,57 Gb Free Space | 70,41% Space Free | Partition Type: NTFS Drive F: | 735,35 Gb Total Space | 659,17 Gb Free Space | 89,64% Space Free | Partition Type: NTFS Computer Name: MATEUSZOSOM | User Name: Mateusz | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-09-26 16:48:17 | 000,582,656 | ---- | M] (OldTimer Tools) -- C:\Users\Mateusz\Downloads\OTL.exe PRC - [2011-09-26 16:42:50 | 000,075,776 | ---- | M] () -- C:\Users\Mateusz\Downloads\jeefogui (1).com PRC - [2011-09-15 15:55:32 | 003,077,528 | ---- | M] () -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe PRC - [2011-08-13 01:44:12 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2011-08-03 14:18:22 | 001,242,448 | ---- | M] (Valve Corporation) -- E:\Steam\Steam.exe PRC - [2011-07-21 12:12:16 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe PRC - [2011-06-01 14:44:54 | 002,337,144 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe PRC - [2011-05-25 09:25:28 | 002,214,504 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe PRC - [2011-05-20 22:35:16 | 000,378,472 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2011-04-21 07:53:48 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe PRC - [2011-04-21 07:53:33 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe PRC - [2011-01-17 19:50:30 | 011,322,880 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe PRC - [2011-01-17 19:50:30 | 011,314,688 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin PRC - [2010-11-16 15:37:30 | 000,230,912 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\ProgramData\DatacardService\DCSHelper.exe PRC - [2010-01-22 12:29:40 | 000,106,496 | ---- | M] (NEC Electronics Corporation) -- C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011-09-26 16:42:50 | 000,075,776 | ---- | M] () -- C:\Users\Mateusz\Downloads\jeefogui (1).com MOD - [2011-09-25 07:10:35 | 014,410,024 | ---- | M] () -- E:\Steam\bin\libcef.dll MOD - [2011-09-25 07:10:35 | 000,914,216 | ---- | M] () -- E:\Steam\bin\avcodec-52.dll MOD - [2011-09-25 07:10:35 | 000,190,248 | ---- | M] () -- E:\Steam\bin\chromehtml.dll MOD - [2011-09-25 07:10:35 | 000,155,432 | ---- | M] () -- E:\Steam\bin\avformat-52.dll MOD - [2011-09-25 07:10:35 | 000,091,432 | ---- | M] () -- E:\Steam\bin\avutil-50.dll MOD - [2011-09-20 05:07:39 | 000,412,728 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Google\Chrome\Application\14.0.835.186\ppGoogleNaClPluginChrome.dll MOD - [2011-09-20 05:07:37 | 003,696,184 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Google\Chrome\Application\14.0.835.186\pdf.dll MOD - [2011-09-20 05:06:11 | 000,142,568 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Google\Chrome\Application\14.0.835.186\avutil-51.dll MOD - [2011-09-20 05:06:10 | 000,253,320 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Google\Chrome\Application\14.0.835.186\avformat-53.dll MOD - [2011-09-20 05:06:09 | 002,403,240 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Google\Chrome\Application\14.0.835.186\avcodec-53.dll MOD - [2011-09-20 02:32:41 | 006,338,720 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Google\Chrome\Application\14.0.835.186\gcswf32.dll MOD - [2011-09-20 02:32:41 | 006,338,720 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Google\Chrome\APPLIC~1\140835~1.186\gcswf32.dll MOD - [2011-09-16 14:56:07 | 000,985,088 | ---- | M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll MOD - [2011-09-15 15:55:32 | 003,077,528 | ---- | M] () -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2011-09-02 15:47:07 | 000,411,432 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2011-08-13 01:44:12 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2011-07-21 12:12:16 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2011-06-01 14:44:54 | 002,337,144 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6) SRV - [2011-05-25 09:25:28 | 002,214,504 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2011-05-20 22:35:16 | 000,378,472 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2011-04-21 07:53:48 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2011-07-21 12:15:16 | 000,123,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb) DRV:[b]64bit:[/b] - [2011-07-21 12:15:15 | 000,088,288 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt) DRV:[b]64bit:[/b] - [2011-05-25 09:25:48 | 000,174,184 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:[b]64bit:[/b] - [2010-03-04 21:43:00 | 000,346,144 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2010-03-02 19:30:20 | 001,301,504 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService) DRV:[b]64bit:[/b] - [2010-01-22 12:22:22 | 000,180,224 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc) DRV:[b]64bit:[/b] - [2010-01-22 12:22:18 | 000,077,824 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub) DRV:[b]64bit:[/b] - [2009-12-22 02:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-05-05 09:00:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie) AMD PCI Express (3GIO) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll (Conduit Ltd.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2790392 IE - HKCU\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll (Conduit Ltd.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Mateusz\AppData\Local\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Mateusz\AppData\Local\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Conduit (Enabled) CHR - default_search_provider: search_url = http://search.conduit.com/Results.aspx?q={searchTerms}&hl=en&SelfSearch=1&SearchSource=49&ctid=CT2790392 CHR - default_search_provider: suggest_url = http://search.conduit.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Mateusz\AppData\Local\Google\Chrome\Application\14.0.835.186\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Java Deployment Toolkit 6.0.220.4 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U22 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Mateusz\AppData\Local\Google\Chrome\Application\14.0.835.186\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Mateusz\AppData\Local\Google\Chrome\Application\14.0.835.186\pdf.dll CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll CHR - plugin: Google Update (Enabled) = C:\Users\Mateusz\AppData\Local\Google\Update\1.3.21.69\npGoogleUpdate3.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: BitTorrentBar = C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhfdcmehmjcclgopdodkjdicohagipid\2.0.1.4_0\ O1 HOSTS File: ([2011-09-25 07:45:05 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngin.dll (Conduit Ltd.) O2 - BHO: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngin.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (BitTorrentBar Toolbar) - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll (Conduit Ltd.) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA) O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (NEC Electronics Corporation) O4 - HKCU..\Run: [ares] C:\Program Files (x86)\Ares\Ares.exe (Ares Development Group) O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe () O4 - Startup: C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9B5D25B4-1234-4F9D-8B82-60F24CCCFE1F}: DhcpNameServer = 192.168.1.1 O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - D:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-09-26 16:42:05 | 000,000,000 | ---D | C] -- C:\avrescue [2011-09-26 16:15:40 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\DoctorWeb [2011-09-25 17:47:51 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Desktop\Zdjęcia [2011-09-25 16:58:05 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Roaming\OpenFM [2011-09-25 07:51:46 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Roaming\Avira [2011-09-25 07:47:21 | 000,000,000 | ---D | C] -- C:\Windows\temp [2011-09-25 07:45:11 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN [2011-09-25 07:40:21 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe [2011-09-25 07:40:21 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe [2011-09-25 07:40:21 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe [2011-09-25 07:40:13 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT [2011-09-25 07:38:04 | 000,000,000 | ---D | C] -- C:\Qoobox [2011-09-25 07:14:17 | 000,000,000 | ---D | C] -- C:\SOPHTEMP [2011-09-25 07:05:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira [2011-09-25 07:05:35 | 000,123,784 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys [2011-09-25 07:05:35 | 000,088,288 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys [2011-09-25 07:05:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira [2011-09-25 07:05:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira [2011-09-23 15:49:57 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Documents\EA Games [2011-09-23 15:48:19 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Local\EA Games [2011-09-23 15:48:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dead Space 2 PL [2011-09-22 15:55:34 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Local\SKIDROW [2011-09-22 15:54:53 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Local\THQ [2011-09-22 15:51:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Warhammer 40K Space Marine [2011-09-21 13:52:28 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Local\BitTorrent [2011-09-21 12:48:48 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Desktop\Rap [2011-09-16 16:39:45 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\riotsGamesLogs [2011-09-16 16:39:27 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Roaming\LolClient [2011-09-16 15:03:17 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Desktop\3Ti RED HAT, ADAM.M i MATEUSZ.J [2011-09-16 14:57:32 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Roaming\OpenOffice.org [2011-09-16 14:55:58 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3 [2011-09-16 14:55:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenOffice.org 3 [2011-09-16 14:55:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2011-09-16 14:55:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2011-09-16 14:54:54 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2011-09-16 14:54:54 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2011-09-16 14:54:54 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2011-09-16 14:54:54 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2011-09-16 14:54:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java [2011-09-16 14:51:42 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Desktop\OpenOffice.org 3.3 (pl) Installation Files [2011-09-16 14:48:38 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll [2011-09-16 14:48:38 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll [2011-09-16 14:48:37 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll [2011-09-16 14:44:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games [2011-09-15 15:55:38 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Local\PMB Files [2011-09-15 15:55:37 | 000,000,000 | ---D | C] -- C:\ProgramData\PMB Files [2011-09-15 15:55:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pando Networks [2011-09-15 15:24:23 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Documents\FIFA 12 [2011-09-12 19:46:07 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Local\Adobe [2011-09-12 19:44:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2011-09-12 19:44:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe [2011-09-12 18:12:42 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Documents\Originals [2011-09-04 18:04:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PIXresizer [2011-09-04 18:04:44 | 001,703,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gdiplus.dll [2011-09-04 18:04:44 | 000,991,232 | ---- | C] (Viscom Software ) -- C:\Windows\SysWow64\imageviewer2.ocx [2011-09-04 18:04:44 | 000,608,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comctl32.ocx [2011-09-04 18:04:44 | 000,224,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tabctl32.ocx [2011-09-04 18:04:44 | 000,200,704 | ---- | C] (Sheridan Software Systems, Inc.) -- C:\Windows\SysWow64\threed32.ocx [2011-09-04 18:04:44 | 000,164,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comct232.ocx [2011-09-04 18:04:44 | 000,151,552 | ---- | C] (Domenico Statuto - CCRP) -- C:\Windows\SysWow64\ccrpfd6.ocx [2011-09-04 18:04:44 | 000,110,592 | ---- | C] (Common Controls Replacement Project (CCRP)) -- C:\Windows\SysWow64\ccrpbds6.dll [2011-09-04 18:04:44 | 000,106,496 | ---- | C] (Marco Bellinaso) -- C:\Windows\SysWow64\mbprgbar.ocx [2011-09-04 18:04:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PIXresizer [2011-09-04 10:37:33 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx [2011-08-31 12:29:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office [2011-08-31 12:28:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSECache [2011-08-31 12:19:33 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Desktop\masa mięśniowa [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-09-26 16:49:37 | 001,310,720 | -HS- | M] () -- C:\Users\Mateusz\NTUSER.DAT [2011-09-26 16:41:34 | 000,304,744 | ---- | M] () -- C:\Windows\SysWow64\nvStreaming.exe [2011-09-26 16:41:34 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2011-09-26 16:41:34 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2011-09-26 16:41:26 | 181,504,664 | ---- | M] (NVIDIA Corporation) -- C:\Users\Mateusz\Desktop\275.33-desktop-win7-winvista-64bit-international-whql.exe [2011-09-26 16:30:00 | 000,001,066 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3488090254-473268769-2033524579-1000UA.job [2011-09-26 16:07:23 | 000,010,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011-09-26 16:07:23 | 000,010,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011-09-26 16:04:49 | 001,523,412 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011-09-26 16:04:49 | 000,687,590 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2011-09-26 16:04:49 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011-09-26 16:04:49 | 000,131,176 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2011-09-26 16:04:49 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011-09-26 15:59:09 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2011-09-26 15:59:06 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011-09-26 15:59:02 | 3220,627,456 | -HS- | M] () -- C:\hiberfil.sys [2011-09-26 15:26:51 | 003,320,766 | -H-- | M] () -- C:\Users\Mateusz\AppData\Local\IconCache.db [2011-09-25 19:36:31 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempjP2352.html [2011-09-25 19:36:31 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempzh2352.html [2011-09-25 15:30:00 | 000,001,014 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3488090254-473268769-2033524579-1000Core.job [2011-09-25 07:45:19 | 000,000,215 | ---- | M] () -- C:\Windows\system.ini [2011-09-25 07:45:05 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts [2011-09-25 07:05:40 | 000,002,026 | ---- | M] () -- C:\Users\Public\Desktop\Avira AntiVir Control Center.lnk [2011-09-24 19:42:56 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempWo3828.html [2011-09-24 19:42:56 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempGA3828.html [2011-09-24 17:12:47 | 007,672,476 | ---- | M] () -- C:\Users\Mateusz\Desktop\mr bronkz & max farenthide - hey love enjoy [ dj mik 2007 mix].mp3 [2011-09-24 12:47:39 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemphB2228.html [2011-09-24 12:24:49 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempSL2228.html [2011-09-24 11:07:27 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempct2220.html [2011-09-24 11:07:27 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempNy2220.html [2011-09-23 20:41:54 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempBE3376.html [2011-09-23 20:41:54 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempaK3376.html [2011-09-23 19:06:18 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemptG2524.html [2011-09-23 18:54:19 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempvf2524.html [2011-09-23 15:03:34 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempQq2524.html [2011-09-22 19:45:20 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempIl3548.html [2011-09-22 19:07:01 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempZn3548.html [2011-09-21 19:23:53 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempYz9912.html [2011-09-21 19:23:51 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempxm9912.html [2011-09-21 14:34:03 | 000,002,369 | ---- | M] () -- C:\Users\Mateusz\Desktop\Google Chrome.lnk [2011-09-21 13:02:00 | 005,494,843 | ---- | M] () -- C:\Users\Mateusz\Desktop\chris brown feat lil wayne & swizz beatz - i can transform ya.mp3 [2011-09-21 12:58:51 | 006,567,252 | ---- | M] () -- C:\Users\Mateusz\Desktop\50 cent ft justin timberlake - she wants it (ayo technology)(2).mp3 [2011-09-21 12:56:12 | 006,414,336 | ---- | M] () -- C:\Users\Mateusz\Desktop\fat joe, ja rule and ashanti - j o s e - what's luv.mp3 [2011-09-21 12:54:30 | 006,327,588 | ---- | M] () -- C:\Users\Mateusz\Desktop\thalia ft fat joe - me pones sexy487.mp3 [2011-09-21 12:52:37 | 008,704,517 | ---- | M] () -- C:\Users\Mateusz\Desktop\kalwi _ remi feat amanda wilson - you and i (radio edit).mp3 [2011-09-21 12:47:51 | 008,814,021 | ---- | M] () -- C:\Users\Mateusz\Desktop\pitbull ft marc anthony - rain over me im1.mp3 [2011-09-21 12:47:50 | 008,448,128 | ---- | M] () -- C:\Users\Mateusz\Desktop\alexandra stan - get back.mp3 [2011-09-20 20:28:57 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempLf4664.html [2011-09-20 19:24:18 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempQU4664.html [2011-09-20 17:41:41 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempCP3964.html [2011-09-20 17:04:50 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempGS3964.html [2011-09-19 19:25:49 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempLS3980.html [2011-09-19 18:16:20 | 001,306,715 | ---- | M] () -- C:\Users\Mateusz\Documents\mateusz.jarczewski.odp [2011-09-18 19:35:49 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempGS4032.html [2011-09-18 19:15:15 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempxJ4032.html [2011-09-18 17:28:48 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempMi3796.html [2011-09-18 17:28:47 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempxM3796.html [2011-09-18 13:17:53 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempXM2984.html [2011-09-18 13:17:53 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempJj2984.html [2011-09-18 11:58:39 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempIb2984.html [2011-09-18 10:46:07 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemptF2456.html [2011-09-17 17:12:27 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempDR3384.html [2011-09-17 16:55:25 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemprW3384.html [2011-09-17 15:54:16 | 000,010,240 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-09-17 14:46:11 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempVa2004.html [2011-09-17 14:15:49 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempoB2004.html [2011-09-17 13:25:43 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempiD3548.html [2011-09-17 13:25:43 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempLV3548.html [2011-09-16 23:21:42 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempmL3900.html [2011-09-16 23:21:42 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempBA3900.html [2011-09-16 21:36:25 | 000,292,528 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2011-09-16 18:27:49 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempXs4764.html [2011-09-16 18:27:48 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempDb4764.html [2011-09-16 14:58:36 | 000,063,696 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\GDIPFONTCACHEV1.DAT [2011-09-16 14:58:01 | 000,001,195 | ---- | M] () -- C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk [2011-09-16 14:55:58 | 000,001,158 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice.org 3.3.lnk [2011-09-16 14:54:44 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2011-09-16 14:54:44 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2011-09-16 14:48:39 | 000,000,824 | ---- | M] () -- C:\Users\Public\Desktop\Graj w League of Legends.lnk [2011-09-15 19:40:15 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempnai280.html [2011-09-15 19:40:15 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempUTF280.html [2011-09-15 17:50:27 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempDhl280.html [2011-09-15 16:26:22 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemphD4084.html [2011-09-15 16:26:22 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempiW4084.html [2011-09-15 15:24:04 | 000,000,708 | ---- | M] () -- C:\Users\Mateusz\Desktop\WERSJA DEMONSTRACYJNA FIFA 12.lnk [2011-09-15 14:40:40 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempYW3920.html [2011-09-15 14:18:43 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempEL3920.html [2011-09-14 18:58:21 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempfL3128.html [2011-09-14 18:58:20 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempNk3128.html [2011-09-14 18:50:41 | 000,059,392 | -H-- | M] () -- C:\Users\Mateusz\Documents\photothumb.db [2011-09-14 17:06:16 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempQb2296.html [2011-09-14 15:34:59 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempBc2296.html [2011-09-13 20:02:14 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempmq1048.html [2011-09-13 13:33:56 | 000,138,567 | ---- | M] () -- C:\Users\Mateusz\Desktop\Zdjęcie4697.jpg [2011-09-13 13:33:32 | 000,050,600 | ---- | M] () -- C:\Users\Mateusz\Desktop\Zdjęcie4696.jpg [2011-09-13 13:33:20 | 000,041,010 | ---- | M] () -- C:\Users\Mateusz\Desktop\Zdjęcie4695.jpg [2011-09-13 13:33:08 | 000,039,146 | ---- | M] () -- C:\Users\Mateusz\Desktop\Zdjęcie4694.jpg [2011-09-13 13:32:56 | 000,037,164 | ---- | M] () -- C:\Users\Mateusz\Desktop\Zdjęcie4693.jpg [2011-09-13 13:32:38 | 000,120,896 | ---- | M] () -- C:\Users\Mateusz\Desktop\Zdjęcie4692.jpg [2011-09-13 13:32:06 | 000,096,897 | ---- | M] () -- C:\Users\Mateusz\Desktop\Zdjęcie4691.jpg [2011-09-13 13:31:42 | 000,138,185 | ---- | M] () -- C:\Users\Mateusz\Desktop\Zdjęcie4690.jpg [2011-09-13 07:01:30 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempuM4044.html [2011-09-13 07:01:30 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempuT4044.html [2011-09-12 19:44:47 | 000,001,974 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk [2011-09-12 18:37:51 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemphM1304.html [2011-09-12 18:37:37 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempXR1304.html [2011-09-12 15:06:13 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempAv3980.html [2011-09-12 15:06:13 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempHj3980.html [2011-09-11 12:48:50 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempDf3920.html [2011-09-11 11:59:37 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempcw3920.html [2011-09-11 11:36:22 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempDx2320.html [2011-09-11 11:36:22 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempUb2320.html [2011-09-10 17:22:02 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempXh3944.html [2011-09-10 17:22:02 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempsT3944.html [2011-09-10 15:10:50 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempJD2916.html [2011-09-10 15:10:50 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempvd2916.html [2011-09-10 12:59:36 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempja2916.html [2011-09-10 11:37:07 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempKh3172.html [2011-09-10 11:37:07 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempqq3172.html [2011-09-10 11:36:52 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempTy3172.html [2011-09-10 11:36:52 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempVB3172.html [2011-09-10 11:25:24 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempeW3960.html [2011-09-10 11:25:24 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempAL3960.html [2011-09-10 10:45:09 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempgq3960.html [2011-09-10 09:07:33 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempYi1408.html [2011-09-09 18:36:37 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempBC3180.html [2011-09-09 17:36:16 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempws1084.html [2011-09-09 17:14:45 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempSB2736.html [2011-09-09 17:11:19 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempQK2736.html [2011-09-09 16:42:17 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempBN4040.html [2011-09-09 16:42:17 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempBK4040.html [2011-09-09 16:37:14 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempEy4040.html [2011-09-09 07:09:55 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempoV2548.html [2011-09-09 07:09:55 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempGb2548.html [2011-09-08 21:14:25 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempfB2256.html [2011-09-08 21:14:25 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempVJ2256.html [2011-09-08 19:29:03 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempUI3556.html [2011-09-08 19:29:03 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Templf3556.html [2011-09-08 19:25:32 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempSL3556.html [2011-09-08 18:41:58 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempyI3556.html [2011-09-08 17:51:00 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempCj3720.html [2011-09-08 17:51:00 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempBO3720.html [2011-09-07 20:41:05 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemphdL212.html [2011-09-07 20:41:05 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempzqT212.html [2011-09-07 19:49:45 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempcvM212.html [2011-09-07 18:42:56 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempKO1476.html [2011-09-07 18:34:20 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempiV1476.html [2011-09-07 16:39:29 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempuq1476.html [2011-09-06 20:13:46 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempNu5756.html [2011-09-06 20:13:46 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempSm5756.html [2011-09-06 19:03:45 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempQc5756.html [2011-09-05 18:37:03 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempzQ3816.html [2011-09-05 18:33:44 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempcO3816.html [2011-09-05 18:30:57 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Temply3700.html [2011-09-05 18:29:42 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempAR3700.html [2011-09-05 18:29:29 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempos3700.html [2011-09-04 20:10:28 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempOL2744.html [2011-09-04 20:10:28 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempWV2744.html [2011-09-04 18:04:45 | 000,000,991 | ---- | M] () -- C:\Users\Mateusz\Desktop\PIXresizer.lnk [2011-09-04 17:26:26 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempsa4084.html [2011-09-04 17:20:52 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempBi4084.html [2011-09-04 17:04:08 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempii4084.html [2011-09-03 20:53:42 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempqP1232.html [2011-09-03 20:42:11 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempEc1232.html [2011-09-03 13:28:17 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempJH2304.html [2011-09-03 11:02:28 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempgz1052.html [2011-09-03 11:02:28 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempVZ1052.html [2011-09-02 14:55:28 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempxR3908.html [2011-09-02 14:36:19 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempja3908.html [2011-09-02 14:36:19 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemprZ3908.html [2011-09-01 20:13:50 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Templz3840.html [2011-09-01 20:13:50 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Templh3840.html [2011-09-01 18:42:15 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempIR3188.html [2011-09-01 18:42:15 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempkd3188.html [2011-09-01 17:56:59 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempIy3188.html [2011-09-01 17:11:10 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempNA2920.html [2011-09-01 17:11:10 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempSD2920.html [2011-09-01 14:44:04 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempYD2788.html [2011-09-01 14:05:27 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempDO2788.html [2011-09-01 07:21:21 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempYD1052.html [2011-09-01 07:21:21 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempEB1052.html [2011-08-31 16:08:17 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempru1492.html [2011-08-31 16:08:17 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempTU1492.html [2011-08-31 14:33:19 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempwH1724.html [2011-08-31 14:17:50 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempKU1724.html [2011-08-31 14:16:57 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempck3308.html [2011-08-31 12:42:50 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemplO2532.html [2011-08-31 12:42:50 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempFU2532.html [2011-08-31 11:12:09 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempEp2532.html [2011-08-30 18:02:00 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempGN4004.html [2011-08-30 17:21:24 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempwm4004.html [2011-08-30 13:36:55 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempbIn420.html [2011-08-30 12:41:02 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemphBt420.html [2011-08-29 17:20:42 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempwB3520.html [2011-08-29 15:52:34 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempgq3520.html [2011-08-29 14:39:27 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempVm3504.html [2011-08-29 14:39:27 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemprG3504.html [2011-08-29 10:59:52 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempDA2768.html [2011-08-29 09:37:20 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempPB2768.html [2011-08-28 19:27:25 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempqW3456.html [2011-08-28 18:15:16 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemplG3456.html [2011-08-28 16:53:23 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempFL3676.html [2011-08-28 13:09:34 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempxt3712.html [2011-08-28 12:10:52 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempLC3712.html [2011-08-27 18:12:44 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempJk2636.html [2011-08-27 17:00:07 | 000,067,584 | -H-- | M] () -- C:\Users\Mateusz\Desktop\photothumb.db [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-09-25 16:57:19 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempjP2352.html [2011-09-25 16:57:19 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempzh2352.html [2011-09-25 07:40:21 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe [2011-09-25 07:40:21 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe [2011-09-25 07:40:21 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2011-09-25 07:40:21 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2011-09-25 07:40:21 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2011-09-25 07:05:40 | 000,002,026 | ---- | C] () -- C:\Users\Public\Desktop\Avira AntiVir Control Center.lnk [2011-09-24 17:05:48 | 007,672,476 | ---- | C] () -- C:\Users\Mateusz\Desktop\mr bronkz & max farenthide - hey love enjoy [ dj mik 2007 mix].mp3 [2011-09-24 12:51:05 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempWo3828.html [2011-09-24 12:51:05 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempGA3828.html [2011-09-24 12:24:43 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemphB2228.html [2011-09-24 12:24:32 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempSL2228.html [2011-09-24 10:12:30 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempct2220.html [2011-09-24 10:12:30 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempNy2220.html [2011-09-23 20:10:25 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBE3376.html [2011-09-23 20:10:25 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempaK3376.html [2011-09-23 18:53:59 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemptG2524.html [2011-09-23 14:18:13 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempQq2524.html [2011-09-23 14:17:31 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempvf2524.html [2011-09-22 19:07:07 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempIl3548.html [2011-09-22 15:07:07 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempZn3548.html [2011-09-21 19:17:14 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempxm9912.html [2011-09-21 19:14:52 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempYz9912.html [2011-09-21 12:48:24 | 006,327,588 | ---- | C] () -- C:\Users\Mateusz\Desktop\thalia ft fat joe - me pones sexy487.mp3 [2011-09-21 12:48:17 | 006,414,336 | ---- | C] () -- C:\Users\Mateusz\Desktop\fat joe, ja rule and ashanti - j o s e - what's luv.mp3 [2011-09-21 12:48:01 | 006,567,252 | ---- | C] () -- C:\Users\Mateusz\Desktop\50 cent ft justin timberlake - she wants it (ayo technology)(2).mp3 [2011-09-21 12:47:24 | 005,494,843 | ---- | C] () -- C:\Users\Mateusz\Desktop\chris brown feat lil wayne & swizz beatz - i can transform ya.mp3 [2011-09-21 12:46:07 | 008,448,128 | ---- | C] () -- C:\Users\Mateusz\Desktop\alexandra stan - get back.mp3 [2011-09-21 12:45:02 | 008,814,021 | ---- | C] () -- C:\Users\Mateusz\Desktop\pitbull ft marc anthony - rain over me im1.mp3 [2011-09-21 12:44:45 | 008,704,517 | ---- | C] () -- C:\Users\Mateusz\Desktop\kalwi _ remi feat amanda wilson - you and i (radio edit).mp3 [2011-09-20 19:11:02 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempQU4664.html [2011-09-20 19:10:54 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempLf4664.html [2011-09-20 16:49:33 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempGS3964.html [2011-09-20 15:02:27 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempCP3964.html [2011-09-19 15:14:36 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempLS3980.html [2011-09-18 19:09:21 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempxJ4032.html [2011-09-18 19:08:49 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempGS4032.html [2011-09-18 17:25:47 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempxM3796.html [2011-09-18 17:25:28 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempMi3796.html [2011-09-18 11:49:52 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempIb2984.html [2011-09-18 11:27:01 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempXM2984.html [2011-09-18 11:27:01 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempJj2984.html [2011-09-18 10:25:14 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemptF2456.html [2011-09-17 16:10:46 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempDR3384.html [2011-09-17 16:10:35 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemprW3384.html [2011-09-17 13:43:43 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempVa2004.html [2011-09-17 13:43:25 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempoB2004.html [2011-09-17 11:18:34 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempiD3548.html [2011-09-17 11:18:34 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempLV3548.html [2011-09-16 22:30:29 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempmL3900.html [2011-09-16 22:30:29 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBA3900.html [2011-09-16 18:27:40 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempDb4764.html [2011-09-16 18:27:01 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempXs4764.html [2011-09-16 17:52:10 | 001,306,715 | ---- | C] () -- C:\Users\Mateusz\Documents\mateusz.jarczewski.odp [2011-09-16 14:58:01 | 000,001,195 | ---- | C] () -- C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk [2011-09-16 14:55:58 | 000,001,158 | ---- | C] () -- C:\Users\Public\Desktop\OpenOffice.org 3.3.lnk [2011-09-16 14:48:39 | 000,000,824 | ---- | C] () -- C:\Users\Public\Desktop\Graj w League of Legends.lnk [2011-09-15 17:47:00 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempDhl280.html [2011-09-15 17:46:52 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempnai280.html [2011-09-15 17:46:52 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempUTF280.html [2011-09-15 15:24:04 | 000,000,708 | ---- | C] () -- C:\Users\Mateusz\Desktop\WERSJA DEMONSTRACYJNA FIFA 12.lnk [2011-09-15 15:02:38 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemphD4084.html [2011-09-15 15:02:38 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempiW4084.html [2011-09-15 14:15:11 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempYW3920.html [2011-09-15 14:14:59 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempEL3920.html [2011-09-14 18:32:16 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempNk3128.html [2011-09-14 18:32:05 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempfL3128.html [2011-09-14 15:33:23 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempQb2296.html [2011-09-14 13:48:55 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBc2296.html [2011-09-13 13:41:18 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempmq1048.html [2011-09-13 13:37:51 | 000,138,567 | ---- | C] () -- C:\Users\Mateusz\Desktop\Zdjęcie4697.jpg [2011-09-13 13:37:51 | 000,138,185 | ---- | C] () -- C:\Users\Mateusz\Desktop\Zdjęcie4690.jpg [2011-09-13 13:37:51 | 000,120,896 | ---- | C] () -- C:\Users\Mateusz\Desktop\Zdjęcie4692.jpg [2011-09-13 13:37:51 | 000,096,897 | ---- | C] () -- C:\Users\Mateusz\Desktop\Zdjęcie4691.jpg [2011-09-13 13:37:51 | 000,050,600 | ---- | C] () -- C:\Users\Mateusz\Desktop\Zdjęcie4696.jpg [2011-09-13 13:37:51 | 000,041,010 | ---- | C] () -- C:\Users\Mateusz\Desktop\Zdjęcie4695.jpg [2011-09-13 13:37:51 | 000,039,146 | ---- | C] () -- C:\Users\Mateusz\Desktop\Zdjęcie4694.jpg [2011-09-13 13:37:51 | 000,037,164 | ---- | C] () -- C:\Users\Mateusz\Desktop\Zdjęcie4693.jpg [2011-09-13 06:43:55 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempuM4044.html [2011-09-13 06:43:55 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempuT4044.html [2011-09-12 19:44:47 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk [2011-09-12 19:44:47 | 000,001,974 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk [2011-09-12 18:11:12 | 000,059,392 | -H-- | C] () -- C:\Users\Mateusz\Documents\photothumb.db [2011-09-12 18:08:43 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemphM1304.html [2011-09-12 17:06:43 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempXR1304.html [2011-09-12 12:20:18 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempAv3980.html [2011-09-12 12:20:18 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempHj3980.html [2011-09-11 11:48:26 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempDf3920.html [2011-09-11 11:48:08 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempcw3920.html [2011-09-11 10:44:36 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempDx2320.html [2011-09-11 10:44:36 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempUb2320.html [2011-09-10 16:40:33 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempXh3944.html [2011-09-10 16:40:33 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempsT3944.html [2011-09-10 12:47:46 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempja2916.html [2011-09-10 12:47:39 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempJD2916.html [2011-09-10 12:47:39 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempvd2916.html [2011-09-10 11:37:07 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempKh3172.html [2011-09-10 11:37:07 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempqq3172.html [2011-09-10 11:36:52 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempTy3172.html [2011-09-10 11:36:52 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempVB3172.html [2011-09-10 10:44:44 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempgq3960.html [2011-09-10 10:02:45 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempeW3960.html [2011-09-10 10:02:45 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempAL3960.html [2011-09-10 07:43:58 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempYi1408.html [2011-09-09 17:41:37 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBC3180.html [2011-09-09 17:20:26 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempws1084.html [2011-09-09 17:11:06 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempSB2736.html [2011-09-09 17:10:56 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempQK2736.html [2011-09-09 16:06:32 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempEy4040.html [2011-09-09 11:34:53 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBN4040.html [2011-09-09 11:34:53 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBK4040.html [2011-09-09 06:38:01 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempoV2548.html [2011-09-09 06:38:01 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempGb2548.html [2011-09-08 21:14:11 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempfB2256.html [2011-09-08 21:14:11 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempVJ2256.html [2011-09-08 19:19:23 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempUI3556.html [2011-09-08 19:19:23 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Templf3556.html [2011-09-08 18:41:32 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempSL3556.html [2011-09-08 18:41:16 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempyI3556.html [2011-09-08 15:11:18 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempCj3720.html [2011-09-08 15:11:18 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBO3720.html [2011-09-07 19:47:11 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempcvM212.html [2011-09-07 18:45:04 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemphdL212.html [2011-09-07 18:45:04 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempzqT212.html [2011-09-07 18:29:21 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempKO1476.html [2011-09-07 16:02:12 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempuq1476.html [2011-09-07 16:01:55 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempiV1476.html [2011-09-06 18:33:33 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempQc5756.html [2011-09-06 18:07:54 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempNu5756.html [2011-09-06 18:07:54 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempSm5756.html [2011-09-05 18:31:10 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempzQ3816.html [2011-09-05 18:31:03 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempcO3816.html [2011-09-05 18:29:37 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temply3700.html [2011-09-05 18:18:38 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempos3700.html [2011-09-05 17:49:52 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempAR3700.html [2011-09-04 18:38:28 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempOL2744.html [2011-09-04 18:38:28 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempWV2744.html [2011-09-04 18:04:45 | 000,000,991 | ---- | C] () -- C:\Users\Mateusz\Desktop\PIXresizer.lnk [2011-09-04 17:10:57 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBi4084.html [2011-09-04 16:52:42 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempsa4084.html [2011-09-04 10:00:39 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempii4084.html [2011-09-03 20:41:47 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempEc1232.html [2011-09-03 20:41:41 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempqP1232.html [2011-09-03 13:08:14 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempJH2304.html [2011-09-03 10:50:44 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempgz1052.html [2011-09-03 10:50:44 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempVZ1052.html [2011-09-02 14:36:31 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempxR3908.html [2011-09-02 14:36:19 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempja3908.html [2011-09-02 14:36:19 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemprZ3908.html [2011-09-01 20:11:35 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Templz3840.html [2011-09-01 20:11:35 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Templh3840.html [2011-09-01 17:49:40 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempIy3188.html [2011-09-01 17:49:23 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempIR3188.html [2011-09-01 17:49:23 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempkd3188.html [2011-09-01 14:57:32 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempNA2920.html [2011-09-01 14:57:32 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempSD2920.html [2011-09-01 13:58:08 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempYD2788.html [2011-09-01 13:57:57 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempDO2788.html [2011-09-01 07:20:19 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempYD1052.html [2011-09-01 07:20:19 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempEB1052.html [2011-08-31 16:07:27 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempru1492.html [2011-08-31 16:07:27 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempTU1492.html [2011-08-31 14:17:32 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempwH1724.html [2011-08-31 14:17:19 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempKU1724.html [2011-08-31 13:50:10 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempck3308.html [2011-08-31 12:29:28 | 000,002,735 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Word Viewer 2003.lnk [2011-08-31 10:47:38 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempEp2532.html [2011-08-31 10:47:20 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemplO2532.html [2011-08-31 10:47:20 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempFU2532.html [2011-08-30 16:51:44 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempGN4004.html [2011-08-30 16:51:33 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempwm4004.html [2011-08-30 12:41:07 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempbIn420.html [2011-08-30 12:40:54 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemphBt420.html [2011-08-29 15:52:05 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempwB3520.html [2011-08-29 15:39:18 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempgq3520.html [2011-08-29 11:09:19 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempVm3504.html [2011-08-29 11:09:19 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemprG3504.html [2011-08-29 09:36:28 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempDA2768.html [2011-08-29 09:36:17 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempPB2768.html [2011-08-28 18:15:11 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempqW3456.html [2011-08-28 18:15:00 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemplG3456.html [2011-08-28 15:14:56 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempFL3676.html [2011-08-28 11:52:45 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempxt3712.html [2011-08-28 11:52:20 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempLC3712.html [2011-08-27 17:00:03 | 000,067,584 | -H-- | C] () -- C:\Users\Mateusz\Desktop\photothumb.db [2011-08-27 16:02:47 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempJk2636.html [2011-08-27 16:02:28 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempYO2636.html [2011-08-27 08:49:46 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempjXQ636.html [2011-08-27 08:49:27 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempTlq636.html [2011-08-26 17:44:15 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempAS2128.html [2011-08-26 17:44:15 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempbL2128.html [2011-08-26 17:43:37 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempoh2128.html [2011-08-26 10:22:37 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempcU3584.html [2011-08-26 10:22:26 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temphx3584.html [2011-08-25 17:08:46 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempXn2276.html [2011-08-25 17:08:46 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempWd2276.html [2011-08-25 12:33:57 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempgS2108.html [2011-08-25 10:01:06 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempfJ2896.html [2011-08-25 09:55:09 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempML2896.html [2011-08-24 18:08:27 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemppG2740.html [2011-08-24 18:08:17 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBz2740.html [2011-08-24 11:32:54 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempaq3360.html [2011-08-23 16:25:04 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempbp1556.html [2011-08-23 16:24:55 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempng1556.html [2011-08-23 14:23:41 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBE3616.html [2011-08-23 14:23:25 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temphu3616.html [2011-08-22 17:23:52 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempOi3420.html [2011-08-22 17:23:43 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempzr3420.html [2011-08-22 15:05:49 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempej3164.html [2011-08-22 15:05:49 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempYL3164.html [2011-08-21 19:34:39 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempWtq416.html [2011-08-21 19:34:31 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempYlb416.html [2011-08-21 11:08:20 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempZh3260.html [2011-08-21 11:01:02 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempsx3260.html [2011-08-21 09:39:40 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempFs4800.html [2011-08-21 09:39:28 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempez4800.html [2011-08-20 17:00:50 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempuS2144.html [2011-08-20 17:00:36 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempFW2144.html [2011-08-20 11:57:06 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempFg3992.html [2011-08-20 11:56:51 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempZo3992.html [2011-08-19 17:47:46 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempcD3288.html [2011-08-19 17:47:25 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempwJ3288.html [2011-08-19 12:49:50 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempJz1472.html [2011-08-19 12:49:37 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempLy1472.html [2011-08-18 17:28:55 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempyEG992.html [2011-08-18 17:28:17 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempDPO992.html [2011-08-18 16:16:30 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempWMz668.html [2011-08-18 16:15:59 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempqrf668.html [2011-08-18 14:36:38 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempZE3956.html [2011-08-18 14:36:32 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempCn3956.html [2011-08-18 13:38:25 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempMa3688.html [2011-08-18 13:05:00 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempxl3688.html [2011-08-18 13:04:39 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempXs3688.html [2011-08-18 10:09:24 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempnpE804.html [2011-08-18 10:09:06 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempApf804.html [2011-08-18 10:09:06 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempkWS804.html [2011-08-17 21:29:36 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempXj1900.html [2011-08-17 18:12:26 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempQQ3560.html [2011-08-17 18:12:10 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempkt3560.html [2011-08-17 12:48:24 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempoE3936.html [2011-08-17 12:48:24 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempUu3936.html [2011-08-17 12:35:16 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempFV3936.html [2011-08-17 12:35:04 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempFq3936.html [2011-08-16 19:06:15 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempib3720.html [2011-08-16 19:06:08 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempEr3720.html [2011-08-16 13:54:03 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempcD2372.html [2011-08-16 13:53:57 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temput2372.html [2011-08-16 08:43:11 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempllC920.html [2011-08-16 08:42:58 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemphNn920.html [2011-08-15 17:59:29 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempSZF900.html [2011-08-15 17:59:15 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempeNx900.html [2011-08-15 14:57:36 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temppv3460.html [2011-08-15 14:57:36 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempSB3460.html [2011-08-15 12:09:38 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempox3568.html [2011-08-15 11:15:19 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempgD3232.html [2011-08-15 11:15:06 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempIG3232.html [2011-08-14 18:37:01 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempXZe760.html [2011-08-14 17:59:08 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempqBH760.html [2011-08-14 17:59:01 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempseK760.html [2011-08-14 16:39:41 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempaq3796.html [2011-08-14 16:39:41 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempZJ3796.html [2011-08-14 15:35:37 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempKs3192.html [2011-08-14 15:35:29 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempbc3192.html [2011-08-14 12:17:59 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempms3484.html [2011-08-14 12:17:44 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempPn3484.html [2011-08-13 19:48:14 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempXU3180.html [2011-08-13 17:13:12 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemplS3180.html [2011-08-13 15:38:59 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempEiq976.html [2011-08-13 15:38:59 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempkfd976.html [2011-08-13 14:47:48 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempsv2440.html [2011-08-13 14:47:48 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempsP2440.html [2011-08-13 03:05:45 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempGX3584.html [2011-08-13 03:05:45 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempwP3584.html [2011-08-13 01:44:12 | 000,189,248 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2011-08-13 01:44:12 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2011-08-13 00:18:08 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempSj2332.html [2011-08-12 13:33:47 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempGL3616.html [2011-08-12 13:33:40 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempTy3616.html [2011-08-12 10:26:00 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempLcN688.html [2011-08-12 10:23:33 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemptXL688.html [2011-08-11 17:47:09 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempPr3380.html [2011-08-11 17:46:58 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBQ3380.html [2011-08-11 14:06:40 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBW2688.html [2011-08-11 14:02:40 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemprH2688.html [2011-08-11 13:12:37 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempTk1132.html [2011-08-11 13:12:07 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temphq1132.html [2011-08-11 10:51:53 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempeO2248.html [2011-08-11 10:51:38 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempny2248.html [2011-08-10 17:36:30 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempbJ2708.html [2011-08-10 17:36:22 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempjL2708.html [2011-08-10 16:00:48 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempMt2588.html [2011-08-10 13:15:28 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempzgA420.html [2011-08-10 13:15:14 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemprAw420.html [2011-08-09 16:39:40 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempWl3992.html [2011-08-09 16:39:32 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempJW3992.html [2011-08-09 15:12:26 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempvj3472.html [2011-08-09 15:12:19 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempMj3472.html [2011-08-09 13:02:54 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempzb1556.html [2011-08-09 13:02:46 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempcI1556.html [2011-08-09 10:30:51 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempOM3380.html [2011-08-09 10:30:45 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBX3380.html [2011-08-09 10:12:11 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempelZ212.html [2011-08-09 10:11:50 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempiAW212.html [2011-08-08 19:22:49 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempkG2280.html [2011-08-08 19:22:40 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempGt2280.html [2011-08-08 19:22:40 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempny2280.html [2011-08-08 18:45:11 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempAq1336.html [2011-08-08 18:45:11 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempbS1336.html [2011-08-08 17:02:11 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempwE1852.html [2011-08-08 17:02:11 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempNd1852.html [2011-08-08 14:17:34 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempvd3396.html [2011-08-08 14:17:15 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempcP3396.html [2011-08-08 13:04:53 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempNFU688.html [2011-08-08 13:04:53 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempnCG688.html [2011-08-08 12:18:09 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempCWO952.html [2011-08-08 12:18:09 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempmqZ952.html [2011-08-08 11:43:53 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempZZP216.html [2011-08-08 11:43:53 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempRuO216.html [2011-08-08 10:17:56 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempmRV216.html [2011-08-08 10:17:56 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempSEH216.html [2011-08-08 10:17:41 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempIUC216.html [2011-08-08 00:46:40 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempCW2704.html [2011-08-08 00:46:40 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempwf2704.html [2011-08-08 00:03:35 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempxr3376.html [2011-08-08 00:03:35 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempkb3376.html [2011-08-07 19:34:12 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempgz2672.html [2011-08-07 19:34:12 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempYy2672.html [2011-08-07 18:25:29 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempxa1392.html [2011-08-06 16:50:37 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempGP3964.html [2011-08-06 16:50:32 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemphM3964.html [2011-08-06 14:54:10 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempYk3772.html [2011-08-06 14:54:04 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempRn3772.html [2011-08-06 13:14:20 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempCR3088.html [2011-08-06 13:14:11 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempvJ3088.html [2011-08-06 10:20:55 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempLR2684.html [2011-08-06 10:20:39 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempxF2684.html [2011-08-05 15:55:40 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempfK2416.html [2011-08-05 12:04:37 | 000,010,240 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-08-05 09:04:56 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempjs1208.html [2011-08-05 09:04:43 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempuv1208.html [2011-08-03 14:52:48 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempwQ3048.html [2011-08-03 14:52:48 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempGr3048.html [2011-08-03 14:03:24 | 000,063,696 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\GDIPFONTCACHEV1.DAT [2011-08-03 13:41:01 | 003,320,766 | -H-- | C] () -- C:\Users\Mateusz\AppData\Local\IconCache.db [2011-05-20 22:35:28 | 000,304,744 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe [2010-08-02 00:20:46 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempcPg520.html [2010-08-01 23:39:40 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempzac520.html [2010-08-01 23:39:40 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempfDx520.html [2009-07-14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009-07-14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009-07-14 04:35:42 | 000,001,405 | ---- | C] () -- C:\Windows\msdfmap.ini [2009-07-14 04:34:57 | 000,000,403 | ---- | C] () -- C:\Windows\win.ini [2009-07-14 04:34:57 | 000,000,215 | ---- | C] () -- C:\Windows\system.ini [2009-07-14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2009-07-14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009-06-10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [color=#E56717]========== LOP Check ==========[/color] [2011-09-24 15:12:36 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\BitTorrent [2011-08-13 17:40:17 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Canneverbe Limited [2010-08-02 00:32:00 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\DAEMON Tools Lite [2011-08-03 14:31:58 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Gadu-Gadu 10 [2011-08-23 14:06:54 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Leadertech [2011-09-16 16:39:27 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\LolClient [2011-09-25 16:58:05 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\OpenFM [2011-09-16 14:57:32 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\OpenOffice.org [2011-08-09 14:34:46 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\PhotoScape [2011-08-03 14:03:28 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\PLAY ONLINE [2011-08-13 01:44:11 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\PunkBuster [2011-08-24 13:10:28 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\TeamViewer [2011-09-15 06:55:46 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] < End of report >