OTL logfile created on: 2012-05-01 11:38:41 - Run 2 OTL by OldTimer - Version 3.2.42.2 Folder = C:\Users\Łukasz\Desktop 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 2,19 Gb Available Physical Memory | 54,88% Memory free 7,99 Gb Paging File | 5,69 Gb Available in Paging File | 71,19% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 97,65 Gb Total Space | 27,75 Gb Free Space | 28,42% Space Free | Partition Type: NTFS Drive D: | 368,10 Gb Total Space | 134,35 Gb Free Space | 36,50% Space Free | Partition Type: NTFS Drive E: | 1,57 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Drive F: | 4,52 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: ŁUKASZ-KOMPUTER | User Name: Łukasz | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-05-01 01:32:42 | 000,000,000 | ---D | C] -- C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome [2012-05-01 01:31:12 | 000,000,000 | ---D | C] -- C:\Users\Łukasz\AppData\Local\Apps [2012-05-01 01:31:11 | 000,000,000 | ---D | C] -- C:\Users\Łukasz\AppData\Local\Deployment [2012-05-01 01:20:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VS Revo Group [2012-05-01 01:20:32 | 000,000,000 | ---D | C] -- C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller [2012-05-01 01:00:32 | 000,000,000 | ---D | C] -- C:\_OTL [2012-05-01 00:59:23 | 000,595,456 | ---- | C] (OldTimer Tools) -- C:\Users\Łukasz\Desktop\OTL.exe [2012-04-30 12:57:54 | 000,000,000 | ---D | C] -- C:\Users\Łukasz\Desktop\PayU_files [2012-04-30 10:17:52 | 000,000,000 | ---D | C] -- C:\Users\Łukasz\Desktop\kickoff [2012-04-29 12:05:38 | 000,024,408 | ---- | C] (IObit) -- C:\Windows\SysNative\RegistryDefragBootTime.exe [2012-04-29 11:50:51 | 000,551,936 | ---- | C] (FOF_SILENT Beijing Elex Technology Co., Ltd) -- C:\Windows\SysWow64\v9-toolbar.dll [2012-04-29 11:50:51 | 000,434,080 | ---- | C] (Beijing Elex Technology Co., Ltd) -- C:\Windows\SysWow64\v9loader.dll [2012-04-11 23:08:53 | 005,559,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2012-04-11 23:08:52 | 003,968,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2012-04-11 23:08:52 | 003,913,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2012-04-11 23:07:35 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll [2012-04-11 23:07:35 | 000,023,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fs_rec.sys [2012-04-11 23:07:34 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2012-04-11 23:06:22 | 000,702,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2012-04-11 23:06:21 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2012-04-11 23:06:21 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2012-04-11 23:06:21 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll [2012-04-11 23:06:21 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll [2012-04-11 23:06:21 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2012-04-11 23:06:21 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2012-04-08 20:16:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN [2012-04-08 19:08:32 | 000,000,000 | ---D | C] -- C:\Users\Łukasz\Desktop\Borixon_-_Kolejna_Czesc [2012-04-08 19:03:23 | 000,000,000 | ---D | C] -- C:\Users\Łukasz\Desktop\VA-Droga_Do_Odkupienia-PL-2012 [2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-05-01 11:29:04 | 000,001,062 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3476508730-2921113983-1971021170-1000UA.job [2012-05-01 11:27:47 | 000,014,976 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012-05-01 11:27:47 | 000,014,976 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012-05-01 11:20:02 | 000,157,376 | ---- | M] () -- C:\Windows\za_mv_raid.ev [2012-05-01 11:20:02 | 000,000,096 | ---- | M] () -- C:\Windows\za_mv_seqnum.ev [2012-05-01 11:19:59 | 000,000,008 | ---- | M] () -- C:\Windows\mvraidver.dat [2012-05-01 11:19:45 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-05-01 11:19:39 | 3217,678,336 | -HS- | M] () -- C:\hiberfil.sys [2012-05-01 01:32:42 | 000,002,328 | ---- | M] () -- C:\Users\Łukasz\Desktop\Google Chrome.lnk [2012-05-01 01:20:32 | 000,001,268 | ---- | M] () -- C:\Users\Łukasz\Desktop\Revo Uninstaller.lnk [2012-05-01 01:04:29 | 000,001,021 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2012-05-01 00:59:26 | 000,595,456 | ---- | M] (OldTimer Tools) -- C:\Users\Łukasz\Desktop\OTL.exe [2012-05-01 00:38:17 | 000,580,883 | ---- | M] () -- C:\Users\Łukasz\Desktop\adwcleaner.exe [2012-04-30 20:29:00 | 000,001,010 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3476508730-2921113983-1971021170-1000Core.job [2012-04-30 12:57:54 | 000,009,411 | ---- | M] () -- C:\Users\Łukasz\Desktop\PayU.htm [2012-04-30 10:29:38 | 001,586,452 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012-04-30 10:29:38 | 000,710,122 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2012-04-30 10:29:38 | 000,627,416 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012-04-30 10:29:38 | 000,141,734 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2012-04-30 10:29:38 | 000,111,652 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012-04-29 11:50:48 | 000,001,166 | ---- | M] () -- C:\Users\Łukasz\Desktop\Internet Explorer.lnk [2012-04-08 20:16:36 | 000,001,070 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk [2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-05-01 01:32:42 | 000,002,328 | ---- | C] () -- C:\Users\Łukasz\Desktop\Google Chrome.lnk [2012-05-01 01:20:32 | 000,001,268 | ---- | C] () -- C:\Users\Łukasz\Desktop\Revo Uninstaller.lnk [2012-05-01 00:38:14 | 000,580,883 | ---- | C] () -- C:\Users\Łukasz\Desktop\adwcleaner.exe [2012-04-30 12:57:53 | 000,009,411 | ---- | C] () -- C:\Users\Łukasz\Desktop\PayU.htm [2012-04-29 11:50:48 | 000,001,166 | ---- | C] () -- C:\Users\Łukasz\Desktop\Internet Explorer.lnk [2012-04-08 20:16:36 | 000,001,070 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk [2011-07-26 20:18:45 | 000,003,654 | ---- | C] () -- C:\Windows\SysWow64\drivers\Sonyhcp.dll [2011-07-09 07:32:57 | 000,005,632 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-02-07 20:02:17 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2011-01-27 21:16:40 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempPa3176.html [2011-01-27 21:16:40 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempto3176.html [2011-01-06 22:21:13 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempqB5428.html [2011-01-06 22:21:13 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempxu5428.html [2010-11-12 12:04:50 | 000,000,032 | -HS- | C] () -- C:\Users\Łukasz\AppData\Roaming\{F7D92AAA-C97A-488c-BC14-C061CF39647F}.dat [2010-10-26 22:38:58 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempQf4176.html [2010-10-26 22:38:58 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempTE4176.html [2010-10-24 15:32:33 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempks4644.html [2010-10-24 15:32:33 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TemprC4644.html [2010-10-08 21:45:38 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempoL4636.html [2010-10-08 21:45:38 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempTZ4636.html [2010-10-01 22:52:08 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempND6716.html [2010-10-01 22:52:08 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempFS6716.html [2010-09-26 22:55:06 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempjj1552.html [2010-09-26 22:55:06 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempiR1552.html [2010-09-26 11:07:33 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TemptGs988.html [2010-09-26 11:07:33 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempwEL988.html [2010-09-19 17:20:44 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempYJ5504.html [2010-09-19 17:20:44 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempoR5504.html [2010-09-12 22:39:27 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempic4292.html [2010-09-12 22:39:27 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempMs4292.html [2010-09-12 14:40:47 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempgs5460.html [2010-09-12 14:40:47 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempvF5460.html [2010-08-29 12:13:52 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempbZ5456.html [2010-08-29 12:13:52 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempYv5456.html [2010-08-28 11:28:08 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempZR5812.html [2010-08-28 11:28:08 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempxn5812.html [2010-08-23 20:51:54 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempYa6156.html [2010-08-23 20:51:54 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempnX6156.html [2010-08-15 23:56:04 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempaRT528.html [2010-08-15 23:56:04 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempQPE528.html [2010-08-15 23:54:27 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempPP6168.html [2010-08-15 23:54:27 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempwV6168.html [2010-07-28 21:42:43 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempba6448.html [2010-07-28 21:42:43 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempbN6448.html [2010-07-22 21:21:17 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempaC5804.html [2010-07-22 21:21:17 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempSZ5804.html [2010-07-13 21:38:35 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempee4208.html [2010-07-13 21:38:35 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempXX4208.html [2010-07-05 23:00:21 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempFJ7760.html [2010-07-05 23:00:21 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempcH7760.html [2010-07-02 22:48:07 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempCT5964.html [2010-07-02 22:48:07 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempAl5964.html [2010-06-21 23:02:13 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempJC5912.html [2010-06-21 23:02:13 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempGa5912.html [2010-06-21 18:51:53 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempbM6104.html [2010-06-21 18:51:53 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempnZ6104.html [2010-06-20 21:41:38 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempHD5976.html [2010-06-20 21:41:38 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempcT5976.html [2010-06-20 12:53:14 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempGGw180.html [2010-06-20 12:53:14 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempzDg180.html [2010-06-19 12:18:04 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempJJ5360.html [2010-06-19 12:18:04 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempVL5360.html [2010-06-06 08:54:14 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempiy5180.html [2010-06-06 08:54:14 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Temppu5180.html [2010-06-04 22:00:27 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempac1640.html [2010-06-04 22:00:27 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempvP1640.html [2010-06-04 13:35:00 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempoZ3856.html [2010-06-04 13:35:00 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempzg3856.html [2010-06-04 11:42:11 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempZc5044.html [2010-06-04 11:42:11 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempXf5044.html [2010-06-03 20:55:49 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempiz5052.html [2010-06-03 20:55:49 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempsu5052.html [2010-06-03 12:32:02 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempVn4720.html [2010-06-03 12:32:02 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempos4720.html [2010-06-03 00:57:34 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempZt1612.html [2010-06-03 00:57:34 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempCh1612.html [2010-06-02 11:47:34 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempRA3740.html [2010-06-02 11:47:34 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempQX3740.html [2010-06-01 23:52:36 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempSn6028.html [2010-06-01 23:52:36 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempuV6028.html [2010-06-01 09:55:51 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempQr4384.html [2010-06-01 09:55:51 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempfs4384.html [2010-05-31 14:57:38 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempke5020.html [2010-05-31 14:57:38 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempSC5020.html [2010-05-26 19:51:33 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TemphB2536.html [2010-05-26 19:51:33 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempGx2536.html [2010-05-25 17:06:21 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempcx2272.html [2010-05-25 17:06:21 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempAs2272.html [2010-05-24 16:38:44 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempuJ4772.html [2010-05-24 16:38:44 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempXT4772.html [2010-05-23 21:52:07 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempCR5128.html [2010-05-23 21:52:07 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Temptp5128.html [2010-05-22 01:49:35 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempxh5824.html [2010-05-22 01:49:35 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Temprx5824.html [2010-05-20 21:12:45 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempii5824.html [2010-05-20 21:12:45 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempZd5824.html [2010-05-17 18:43:58 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempWs4564.html [2010-05-17 18:43:58 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempfS4564.html [2010-05-17 15:54:20 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempuK4804.html [2010-05-17 15:54:20 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempIC4804.html [2010-05-17 10:15:40 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempRk4028.html [2010-05-17 10:15:40 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempXh4028.html [2010-05-16 15:33:45 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempvD4580.html [2010-05-16 15:33:45 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempPI4580.html [2010-05-15 11:28:28 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempDE3196.html [2010-05-15 11:28:28 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempoX3196.html [2010-05-14 22:44:32 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempgo3744.html [2010-05-14 22:44:32 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempkO3744.html [2010-05-13 19:45:47 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempaT2848.html [2010-05-13 19:45:47 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempqu2848.html [2010-05-13 12:42:47 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Temppa1644.html [2010-05-13 12:42:47 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempGa1644.html [2010-05-13 03:10:57 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempGZ1480.html [2010-05-13 03:10:57 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempZQ1480.html [2010-05-12 20:04:51 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempFV6088.html [2010-05-12 20:04:51 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempPu6088.html [2010-05-12 19:59:55 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempKr3684.html [2010-05-12 19:59:55 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempAh3684.html [2010-05-11 16:20:48 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempJmx376.html [2010-05-11 16:20:48 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempNgg376.html [2010-05-10 19:40:33 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempDy2696.html [2010-05-10 19:40:33 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempwc2696.html [2010-05-10 11:00:50 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempMQ2832.html [2010-05-10 11:00:50 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempdM2832.html [2010-05-09 20:01:42 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempLD4176.html [2010-05-09 20:01:42 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempCv4176.html [2010-05-09 10:31:27 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempyO4908.html [2010-05-09 10:31:27 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempNs4908.html [2010-05-08 23:05:25 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempAW2992.html [2010-05-08 23:05:25 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempsD2992.html [2010-05-04 20:37:44 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempyi4732.html [2010-05-04 20:37:44 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Temppp4732.html [2010-05-04 00:30:46 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempjI5256.html [2010-05-04 00:30:46 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempSa5256.html [2010-05-03 13:55:37 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempZp3576.html [2010-05-03 13:55:37 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempCj3576.html [2010-05-02 18:21:04 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempdI2792.html [2010-05-02 18:21:04 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempzL2792.html [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< hklm\software\clients\startmenuinternet|command /rs >[/color] HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\chrome.exe\shell\open\command\\: C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\HideIconsCommand: "C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe" /HideShortcuts HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ShowIconsCommand: "C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe" /ShowShortcuts HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ReinstallCommand: "C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe" /SetAsDefaultAppGlobal HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\open\command\\: C:\Program Files\Mozilla Firefox\firefox.exe HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\properties\command\\: "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -preferences HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\safemode\command\\: "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -safe-mode HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Users\Łukasz\AppData\Local\Google\Chrome\Application\chrome.exe" --show-icons [2012-04-28 04:07:02 | 001,224,176 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Users\Łukasz\AppData\Local\Google\Chrome\Application\chrome.exe" --hide-icons [2012-04-28 04:07:02 | 001,224,176 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Users\Łukasz\AppData\Local\Google\Chrome\Application\chrome.exe" --make-default-browser [2012-04-28 04:07:02 | 001,224,176 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome.Ewa\shell\open\command\\: C:\Users\Ewa\AppData\Local\Google\Chrome\Application\chrome.exe HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\Windows\System32\ie4uinit.exe" -show [2010-11-20 14:17:13 | 000,176,128 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\Windows\System32\ie4uinit.exe" -reinstall [2010-11-20 14:17:13 | 000,176,128 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\Windows\System32\ie4uinit.exe" -hide [2010-11-20 14:17:13 | 000,176,128 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -extoff [2010-11-20 14:22:51 | 000,673,040 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\Program Files\Internet Explorer\iexplore.exe [2010-11-20 15:28:25 | 000,695,056 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Safari.exe\shell\open\command\\: C:\Program Files\Safari\Safari.exe [color=#A23BEC]< hklm\software\clients\startmenuinternet|command /64 /rs >[/color] 64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\chrome.exe\shell\open\command\\: C:\DOCUMENTS AND SETTINGS\ELEKTRONIK\USTAWIENIA LOKALNE\DANE APLIKACJI\GOOGLE\CHROME\APPLICATION\CHROME.EXE 64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\HideIconsCommand: "C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\UNINSTALL\HELPER.EXE" /HIDESHORTCUTS 64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ShowIconsCommand: "C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\UNINSTALL\HELPER.EXE" /SHOWSHORTCUTS 64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ReinstallCommand: "C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\UNINSTALL\HELPER.EXE" /SETASDEFAULTAPPGLOBAL 64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\open\command\\: C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE 64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\properties\command\\: "C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE" -PREFERENCES 64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\safemode\command\\: "C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE" -SAFE-MODE 64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\USERS\ŁUKASZ\APPDATA\LOCAL\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --SHOW-ICONS [2012-04-28 04:07:02 | 001,224,176 | ---- | M] (Google Inc.) 64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\USERS\ŁUKASZ\APPDATA\LOCAL\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --HIDE-ICONS [2012-04-28 04:07:02 | 001,224,176 | ---- | M] (Google Inc.) 64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\USERS\ŁUKASZ\APPDATA\LOCAL\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --MAKE-DEFAULT-BROWSER [2012-04-28 04:07:02 | 001,224,176 | ---- | M] (Google Inc.) 64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: C:\DOCUMENTS AND SETTINGS\ELEKTRONIK\USTAWIENIA LOKALNE\DANE APLIKACJI\GOOGLE\CHROME\APPLICATION\CHROME.EXE 64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome.Ewa\shell\open\command\\: C:\USERS\EWA\APPDATA\LOCAL\GOOGLE\CHROME\APPLICATION\CHROME.EXE 64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\WINDOWS\SYSTEM32\IE4UINIT.EXE" -SHOW [2009-07-14 03:39:12 | 000,073,728 | ---- | M] (Microsoft Corporation) 64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\WINDOWS\SYSTEM32\IE4UINIT.EXE" -REINSTALL [2009-07-14 03:39:12 | 000,073,728 | ---- | M] (Microsoft Corporation) 64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\WINDOWS\SYSTEM32\IE4UINIT.EXE" -HIDE [2009-07-14 03:39:12 | 000,073,728 | ---- | M] (Microsoft Corporation) 64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\PROGRAM FILES (X86)\INTERNET EXPLORER\IEXPLORE.EXE" -EXTOFF [2010-11-20 14:22:51 | 000,673,040 | ---- | M] (Microsoft Corporation) 64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE [2010-11-20 15:28:25 | 000,695,056 | ---- | M] (Microsoft Corporation) 64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Safari.exe\shell\open\command\\: C:\PROGRAM FILES\SAFARI\SAFARI.EXE < End of report >