OTL logfile created on: 7/25/2012 4:00:07 PM - Run 4 OTL by OldTimer - Version 3.2.54.1 Folder = C:\SOFT WIN 7\OTL 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3.97 Gb Total Physical Memory | 2.83 Gb Available Physical Memory | 71.21% Memory free 7.93 Gb Paging File | 7.08 Gb Available in Paging File | 89.30% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 257.55 Gb Total Space | 11.95 Gb Free Space | 4.64% Space Free | Partition Type: NTFS Drive G: | 195.31 Gb Total Space | 2.16 Gb Free Space | 1.11% Space Free | Partition Type: NTFS Computer Name: BO-VAIO | User Name: BO | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012/07/24 22:55:29 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\SOFT WIN 7\OTL\OTL.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2012/07/25 00:16:25 | 000,108,392 | ---- | M] (SurfRight B.V.) [Auto | Stopped] -- C:\Program Files\HitmanPro\hmpsched.exe -- (HitmanProScheduler) SRV:[b]64bit:[/b] - [2009/11/25 00:51:35 | 000,138,680 | ---- | M] (ALWIL Software) [Auto | Stopped] -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus) SRV:[b]64bit:[/b] - [2009/11/25 00:51:21 | 000,254,040 | ---- | M] (ALWIL Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner) SRV:[b]64bit:[/b] - [2009/11/25 00:48:48 | 000,352,920 | ---- | M] (ALWIL Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner) SRV:[b]64bit:[/b] - [2009/11/25 00:43:56 | 000,018,752 | ---- | M] (ALWIL Software) [Auto | Stopped] -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv) SRV:[b]64bit:[/b] - [2009/08/22 23:19:06 | 000,411,496 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files\Sony\VAIO Power Management\SPMService.exe -- (VAIO Power Management) SRV:[b]64bit:[/b] - [2009/08/13 08:11:54 | 000,522,240 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files\Sony\VAIO Smart Network\VSNService.exe -- (VSNService) SRV:[b]64bit:[/b] - [2009/07/27 22:27:07 | 000,203,264 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009/07/24 06:34:31 | 000,189,984 | ---- | M] (Realtek Semiconductor) [Auto | Stopped] -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe -- (RtkAudioService) SRV:[b]64bit:[/b] - [2009/07/14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009/07/02 03:54:02 | 000,864,032 | ---- | M] (Broadcom Corporation.) [Auto | Stopped] -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins) SRV:[b]64bit:[/b] - [2009/06/26 23:56:10 | 000,357,672 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe -- (VcmINSMgr) SRV:[b]64bit:[/b] - [2009/06/26 23:35:04 | 000,468,264 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe -- (VcmIAlzMgr) SRV:[b]64bit:[/b] - [2009/06/18 03:50:30 | 000,110,888 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe -- (VcmXmlIfHelper) SRV - [2012/07/12 14:57:26 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012/06/18 19:39:30 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012/02/15 14:30:18 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012/01/03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011/10/01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa) SRV - [2011/10/01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist) SRV - [2011/01/11 23:26:23 | 000,008,192 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\srvany.exe -- (KMService) SRV - [2010/06/14 16:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010/03/18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon) SRV - [2010/02/01 16:51:07 | 000,759,048 | ---- | M] (ABBYY) [Auto | Stopped] -- C:\Program Files (x86)\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe -- (ABBYY.Licensing.PDFTransformer.Classic.3.0) SRV - [2009/10/14 16:44:38 | 000,090,112 | ---- | M] (France Telecom SA) [Auto | Stopped] -- C:\PROGRA~2\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe -- (FTRTSVC) SRV - [2009/07/28 01:58:40 | 000,091,432 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe -- (SOHPlMgr) SRV - [2009/07/28 01:58:38 | 000,427,304 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe -- (SOHDms) SRV - [2009/07/28 01:58:38 | 000,075,048 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe -- (SOHDs) SRV - [2009/07/28 01:58:38 | 000,070,952 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe -- (SOHDBSvr) SRV - [2009/07/28 01:58:36 | 000,120,104 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe -- (SOHCImp) SRV - [2009/07/23 19:39:38 | 000,313,264 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe -- (Vcsw) SRV - [2009/07/23 19:39:38 | 000,069,632 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe -- (VAIO Entertainment TV Device Arbitration Service) SRV - [2009/07/23 19:39:36 | 000,206,336 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe -- (VzCdbSvc) SRV - [2009/07/23 00:03:04 | 000,642,920 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe -- (VCFw) SRV - [2009/07/01 20:49:34 | 000,204,648 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe -- (VAIO Event Service) SRV - [2009/06/26 20:25:36 | 000,362,992 | ---- | M] (Sonic Solutions) [Auto | Stopped] -- C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe -- (Roxio Upnp Server 10) SRV - [2009/06/26 20:25:24 | 000,313,840 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe -- (Roxio UPnP Renderer 10) SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009/06/05 04:03:06 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe -- (IAANTMON) SRV - [2008/09/18 19:59:10 | 000,104,960 | ---- | M] (ArcSoft, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe -- (uCamMonitor) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2012/05/31 09:09:08 | 000,556,120 | ---- | M] (Kaspersky Lab) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF) DRV:[b]64bit:[/b] - [2012/03/01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2011/10/01 09:30:22 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol) DRV:[b]64bit:[/b] - [2011/10/01 09:30:18 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay) DRV:[b]64bit:[/b] - [2011/10/01 09:30:18 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir) DRV:[b]64bit:[/b] - [2011/10/01 09:30:10 | 000,764,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs) DRV:[b]64bit:[/b] - [2011/03/11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011/03/11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2010/11/25 23:42:46 | 000,086,016 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_jubusenum.sys -- (huawei_enumerator) DRV:[b]64bit:[/b] - [2010/11/25 23:42:44 | 000,256,000 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbnet.sys -- (ewusbnet) DRV:[b]64bit:[/b] - [2010/11/25 23:42:44 | 000,121,600 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbmdm.sys -- (hwdatacard) DRV:[b]64bit:[/b] - [2010/11/25 23:42:44 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys -- (ew_hwusbdev) DRV:[b]64bit:[/b] - [2010/11/20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010/11/20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010/11/20 12:43:57 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser) DRV:[b]64bit:[/b] - [2010/11/20 11:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2010/02/26 15:33:40 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64j.sys -- (UsbserFilt) DRV:[b]64bit:[/b] - [2010/02/26 15:33:24 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev) DRV:[b]64bit:[/b] - [2010/02/26 15:33:22 | 000,025,088 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdcx64) DRV:[b]64bit:[/b] - [2010/02/26 15:33:22 | 000,019,456 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcdx64) DRV:[b]64bit:[/b] - [2009/11/25 00:50:25 | 000,089,680 | ---- | M] (ALWIL Software) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP) DRV:[b]64bit:[/b] - [2009/11/25 00:50:05 | 000,022,096 | ---- | M] (ALWIL Software) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk) DRV:[b]64bit:[/b] - [2009/11/25 00:49:56 | 000,065,616 | ---- | M] (ALWIL Software) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:[b]64bit:[/b] - [2009/11/25 00:49:10 | 000,053,840 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi) DRV:[b]64bit:[/b] - [2009/11/25 00:49:00 | 000,027,216 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr.sys -- (aswRdr) DRV:[b]64bit:[/b] - [2009/11/19 17:55:17 | 000,834,544 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2009/08/05 03:22:40 | 000,139,264 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcHdmi.sys -- (IntcHdmiAddService) DRV:[b]64bit:[/b] - [2009/08/05 03:20:51 | 007,345,632 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2009/08/03 22:06:34 | 000,250,928 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService) DRV:[b]64bit:[/b] - [2009/07/31 22:29:11 | 001,484,800 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2009/07/31 22:14:14 | 000,076,288 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\risdsn64.sys -- (risdptsk) DRV:[b]64bit:[/b] - [2009/07/31 22:13:51 | 000,086,528 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rimssn64.sys -- (rimsptsk) DRV:[b]64bit:[/b] - [2009/07/31 22:02:03 | 000,393,216 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7) DRV:[b]64bit:[/b] - [2009/07/30 22:41:17 | 000,021,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid) DRV:[b]64bit:[/b] - [2009/07/30 22:41:16 | 000,132,648 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt) DRV:[b]64bit:[/b] - [2009/07/30 22:41:16 | 000,098,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio) DRV:[b]64bit:[/b] - [2009/07/30 22:40:45 | 000,035,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap) DRV:[b]64bit:[/b] - [2009/07/27 22:27:10 | 006,037,504 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2009/07/24 07:24:03 | 000,201,472 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService) DRV:[b]64bit:[/b] - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009/06/11 22:19:09 | 000,011,392 | ---- | M] (Sony Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SFEP.sys -- (SFEP) DRV:[b]64bit:[/b] - [2009/06/10 23:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92) DRV:[b]64bit:[/b] - [2009/06/10 23:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac) DRV:[b]64bit:[/b] - [2009/06/10 23:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA) DRV:[b]64bit:[/b] - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009/06/05 22:04:10 | 005,435,904 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETw5v64.sys -- (netw5v64) DRV:[b]64bit:[/b] - [2009/06/05 03:54:36 | 000,408,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2009/05/26 23:32:04 | 000,019,968 | ---- | M] (ArcSoft, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ArcSoftKsUFilter.sys -- (ArcSoftKsUFilter) DRV:[b]64bit:[/b] - [2009/05/20 12:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64) DRV:[b]64bit:[/b] - [2008/08/28 13:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd) DRV - [2010/01/07 16:49:39 | 000,012,464 | ---- | M] (Macrovision Europe Ltd) [Kernel | Auto | Stopped] -- C:\Windows\SysWOW64\drivers\CdaC15BA.SYS -- (CdaC15BA) DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll (Conduit Ltd.) IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2169132624-182560560-4016814292-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default Download Directory = C:\Users\BO\Desktop IE - HKU\S-1-5-21-2169132624-182560560-4016814292-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKU\S-1-5-21-2169132624-182560560-4016814292-1000\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll (Conduit Ltd.) IE - HKU\S-1-5-21-2169132624-182560560-4016814292-1000\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKU\S-1-5-21-2169132624-182560560-4016814292-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-2169132624-182560560-4016814292-1000\..\SearchScopes\{223FAB00-0323-4ACF-B817-849F78B10BB7}: "URL" = http://rover.ebay.com/rover/1/710-42480-16445-5/4?satitle={searchTerms} IE - HKU\S-1-5-21-2169132624-182560560-4016814292-1000\..\SearchScopes\{255F133A-C9CF-4080-94E0-B5B5053F1627}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=937811&p={searchTerms} IE - HKU\S-1-5-21-2169132624-182560560-4016814292-1000\..\SearchScopes\{66A7762F-A0E2-4C2D-BD96-B7297737ABC6}: "URL" = http://www.google.co.uk/search?hl=en&q={searchTerms}&meta= IE - HKU\S-1-5-21-2169132624-182560560-4016814292-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7SVEA_plPL354PL356 IE - HKU\S-1-5-21-2169132624-182560560-4016814292-1000\..\SearchScopes\{7B7023C5-D453-400B-B855-5D80F64E082A}: "URL" = http://services.zinio.com/search?s={selection}&rf=sonyslices IE - HKU\S-1-5-21-2169132624-182560560-4016814292-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultthis.engineName: " " FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2790392&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=937811" FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2 FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:3.0.8 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: wtxpcom@mybrowserbar.com:4.6 FF - prefs.js..extensions.enabledItems: youtubedownloader@mybrowserbar.com:4.6 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}:6.0.30 FF - prefs.js..extensions.enabledItems: virtualKeyboard@kaspersky.ru:12.0.0.470 FF - prefs.js..extensions.enabledItems: KavAntiBanner@Kaspersky.ru:12.0.0.470 FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:12.0.0.470 FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=937811&p=" FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.449: C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files (x86)\Nokia\Nokia PC Suite 7\bkmrksync\ [2010/12/13 01:14:55 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/04/04 19:10:54 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/06/18 19:39:30 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/04/12 13:11:03 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/04/04 19:10:54 | 000,000,000 | ---D | M] [2009/11/23 21:28:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\BO\AppData\Roaming\mozilla\Extensions [2012/07/18 15:35:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\BO\AppData\Roaming\mozilla\Firefox\Profiles\u7snpmaa.default\extensions [2012/07/18 15:35:17 | 000,000,000 | ---D | M] (BitTorrentBar Community Toolbar) -- C:\Users\BO\AppData\Roaming\mozilla\Firefox\Profiles\u7snpmaa.default\extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} [2010/12/12 04:07:44 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\BO\AppData\Roaming\mozilla\Firefox\Profiles\u7snpmaa.default\extensions\engine@conduit.com [2010/12/12 04:07:48 | 000,000,863 | ---- | M] () -- C:\Users\BO\AppData\Roaming\Mozilla\Firefox\Profiles\u7snpmaa.default\searchplugins\conduit.xml [2012/03/28 10:40:34 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2011/08/29 21:55:45 | 000,000,000 | ---D | M] (YouTube Downloader Toolbar) -- C:\PROGRAM FILES (X86)\YOUTUBE DOWNLOADER TOOLBAR\FF [2012/07/13 21:21:19 | 000,271,056 | ---- | M] () (No name found) -- C:\USERS\BO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\U7SNPMAA.DEFAULT\EXTENSIONS\{C50CA3C4-5656-43C2-A061-13E717F73FC8}.XPI [2012/06/18 19:39:30 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2012/03/20 02:30:06 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll [2012/03/05 13:04:02 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2012/03/05 13:04:02 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2012/03/05 13:04:02 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2012/03/05 13:04:02 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2012/03/05 13:04:02 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2012/03/05 13:04:01 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://www.google.com/ig/redirectdomain?brand=SVEA&bmod=SVEA CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms} CHR - homepage: http://www.google.com/ig/redirectdomain?brand=SVEA&bmod=SVEA CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\20.0.1132.57\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll CHR - plugin: Java Deployment Toolkit 6.0.240.7 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U24 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\plugins\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\plugins\nprpjplug.dll CHR - plugin: Microsoft Office 2003 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFFICE.DLL CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\20.0.1132.57\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\20.0.1132.57\pdf.dll CHR - plugin: Kaspersky Anti-Virus (Enabled) = C:\Users\BO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.0.374_0\plugin/npABPlugin.dll CHR - plugin: Kaspersky Anti-Virus (Enabled) = C:\Users\BO\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.0.374_0\plugin/npVKPlugin.dll CHR - plugin: Kaspersky Anti-Virus (Enabled) = C:\Users\BO\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.397_0\plugin/npUrlAdvisor.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: Awesome Screenshot: Capture & Annotate = C:\Users\BO\AppData\Local\Google\Chrome\User Data\Default\Extensions\alelhddbbhepgpmgidjdcjakblofbmce\3.3.6_0\ CHR - Extension: Adblock Plus (Beta) = C:\Users\BO\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.2_0\ O1 HOSTS File: ([2012/07/25 13:06:48 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll (Conduit Ltd.) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll File not found O3:[b]64bit:[/b] - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM\..\Toolbar: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-2169132624-182560560-4016814292-1000\..\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3:[b]64bit:[/b] - HKU\S-1-5-21-2169132624-182560560-4016814292-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKU\S-1-5-21-2169132624-182560560-4016814292-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKU\S-1-5-21-2169132624-182560560-4016814292-1000\..\Toolbar\WebBrowser: (BitTorrentBar Toolbar) - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll (Conduit Ltd.) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.) O4:[b]64bit:[/b] - HKLM..\Run: [TNOD UP] "C:\Program Files (x86)\TNod User & Password Finder\TNODUP.exe" /i File not found O4:[b]64bit:[/b] - HKLM..\Run: [wdscore] C:\Users\BO\AppData\Local\Microsoft\Windows\4136\wdscore.exe () O4 - HKLM..\Run: [BEWINTERNET-PL-IEWSessionManager] C:\Program Files (x86)\OrangeBS\BEWInternet-PL-IEW\SessionManager\SessionManager.exe (France Telecom SA) O4 - HKLM..\Run: [CardDetectorHUAWEI1752_1552] C:\Program Files (x86)\CardDetector\HUAWEI1752_1552\CardDetector.exe (France Telecom SA) O4 - HKLM..\Run: [SearchSettings] C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKU\S-1-5-21-2169132624-182560560-4016814292-1000..\Run: [PC Suite Tray] C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-2169132624-182560560-4016814292-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-2169132624-182560560-4016814292-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-2169132624-182560560-4016814292-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8:[b]64bit:[/b] - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8:[b]64bit:[/b] - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html File not found O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html File not found O9:[b]64bit:[/b] - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9:[b]64bit:[/b] - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe (PokerStars) O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{68D9F00B-C437-4609-9C3A-6AF6DE4FE951}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8F2BEC5E-9C84-4527-B85C-FEDA9DD32FB0}: NameServer = 212.2.96.54 212.2.96.53 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A5386B38-FB26-457B-A587-99843E2DBC71}: NameServer = 212.2.96.54 212.2.96.52 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EBE34174-6567-46B4-8404-1698FD169D4C}: DhcpNameServer = 192.168.1.254 O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-itss - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18:[b]64bit:[/b] - Protocol\Filter\text/xml - No CLSID value found O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O20 - Winlogon\Notify\VESWinlogon: DllName - (VESWinlogon.dll) - C:\Windows\SysWow64\VESWinlogon.dll (Sony Corporation) O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012/07/25 13:11:37 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2012/07/25 12:57:22 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe [2012/07/25 12:57:22 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe [2012/07/25 12:57:22 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe [2012/07/25 12:55:54 | 000,000,000 | ---D | C] -- C:\Qoobox [2012/07/25 12:55:43 | 000,000,000 | ---D | C] -- C:\Windows\erdnt [2012/07/25 00:27:07 | 000,012,872 | ---- | C] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe [2012/07/25 00:16:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro [2012/07/25 00:16:25 | 000,000,000 | ---D | C] -- C:\Program Files\HitmanPro [2012/07/25 00:15:05 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro [2012/07/24 23:13:15 | 000,000,000 | ---D | C] -- C:\_OTL [2012/07/24 22:24:29 | 000,000,000 | ---D | C] -- C:\Users\BO\AppData\Roaming\hellomoto [2012/07/12 10:13:46 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2012/07/12 10:13:46 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2012/07/12 10:13:44 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll [2012/07/12 10:13:44 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll [2012/07/12 10:13:43 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2012/07/12 10:13:43 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2012/07/12 10:13:43 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2012/07/12 10:13:42 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2012/07/12 10:13:41 | 002,311,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2012/07/12 10:13:41 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2012/07/12 10:13:41 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2012/07/12 10:13:40 | 000,818,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2012/07/12 10:13:40 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2012/07/11 09:53:54 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll [2012/07/11 09:53:54 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll [2012/07/11 09:53:46 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll [2012/07/11 09:53:43 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll [2012/07/11 09:53:42 | 001,133,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012/07/25 13:06:48 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts [2012/07/25 11:58:23 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl [2012/07/25 11:58:10 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012/07/25 11:57:50 | 3195,293,696 | -HS- | M] () -- C:\hiberfil.sys [2012/07/25 00:40:16 | 000,001,058 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012/07/25 00:27:07 | 000,012,872 | ---- | M] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe [2012/07/25 00:16:25 | 000,001,935 | ---- | M] () -- C:\Users\Public\Desktop\HitmanPro.lnk [2012/07/24 23:57:13 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012/07/24 22:39:41 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012/07/24 22:39:41 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012/07/24 22:26:11 | 000,000,017 | ---- | M] () -- C:\Windows\SysWow64\shortcut_ex.dat [2012/07/24 22:25:40 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\Tempok4952.html [2012/07/24 22:25:40 | 000,002,089 | ---- | M] () -- C:\Users\BO\AppData\Local\TempIo4952.html [2012/07/24 21:45:01 | 000,001,062 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012/07/24 01:35:23 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\TempUT1680.html [2012/07/23 02:47:31 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\TempHzG320.html [2012/07/21 02:35:18 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\TempQh5492.html [2012/07/20 00:43:28 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\Tempsh4908.html [2012/07/19 00:22:10 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\TempTk5460.html [2012/07/19 00:22:10 | 000,002,089 | ---- | M] () -- C:\Users\BO\AppData\Local\TempCe5460.html [2012/07/18 00:08:18 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\TempVU3336.html [2012/07/17 20:28:58 | 001,589,058 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012/07/17 20:28:58 | 000,711,556 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2012/07/17 20:28:58 | 000,628,366 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012/07/17 20:28:58 | 000,142,188 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2012/07/17 20:28:58 | 000,111,686 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012/07/16 22:57:40 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\Tempen3464.html [2012/07/16 10:58:29 | 000,001,905 | ---- | M] () -- C:\Users\Public\Desktop\avast! Antivirus.lnk [2012/07/16 09:47:44 | 000,000,324 | ---- | M] () -- C:\Users\BO\Desktop\Messages.url [2012/07/16 09:47:35 | 006,153,318 | ---- | M] () -- C:\Users\BO\Desktop\beznazwy.png [2012/07/15 23:30:34 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\TempeX4232.html [2012/07/13 18:10:05 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\TempnM3892.html [2012/07/13 15:01:58 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini [2012/07/13 10:01:00 | 000,449,632 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012/07/12 20:44:54 | 000,002,340 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2012/07/12 14:57:24 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2012/07/12 14:57:24 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012/07/11 00:02:14 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\TempUS6632.html [2012/07/08 21:01:44 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\TempxX6876.html [2012/07/08 19:33:48 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\TempxO5020.html [2012/07/07 16:46:55 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\TempeB4976.html [2012/07/07 16:46:55 | 000,002,089 | ---- | M] () -- C:\Users\BO\AppData\Local\TempJA4976.html [2012/07/06 23:04:30 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\TempqG5892.html [2012/07/06 00:09:24 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\TempSl4436.html [2012/07/04 23:37:10 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\Tempyq4556.html [2012/07/03 23:41:25 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\TempBY3884.html [2012/07/02 23:15:42 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\Tempoc4252.html [2012/07/01 19:30:13 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\Tempkc2568.html [2012/07/01 18:14:52 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\TempXO6332.html [2012/07/01 00:33:12 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\TempjS5812.html [2012/06/30 01:51:46 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\Tempkp4840.html [2012/06/28 23:08:18 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\TempiIU240.html [2012/06/28 00:10:59 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\TempCD1248.html [2012/06/25 23:48:19 | 000,002,432 | ---- | M] () -- C:\Users\BO\AppData\Local\Tempcw6332.html [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012/07/25 12:57:22 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe [2012/07/25 12:57:22 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe [2012/07/25 12:57:22 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2012/07/25 12:57:22 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2012/07/25 12:57:22 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2012/07/25 00:16:25 | 000,001,935 | ---- | C] () -- C:\Users\Public\Desktop\HitmanPro.lnk [2012/07/24 22:26:11 | 000,000,017 | ---- | C] () -- C:\Windows\SysWow64\shortcut_ex.dat [2012/07/24 10:53:40 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempok4952.html [2012/07/24 10:53:40 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempIo4952.html [2012/07/23 15:29:14 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempUT1680.html [2012/07/22 18:44:02 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempHzG320.html [2012/07/20 12:54:46 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempQh5492.html [2012/07/19 23:21:14 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempsh4908.html [2012/07/18 10:49:30 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempTk5460.html [2012/07/18 10:49:30 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempCe5460.html [2012/07/17 21:17:39 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempVU3336.html [2012/07/16 09:47:44 | 000,000,324 | ---- | C] () -- C:\Users\BO\Desktop\Messages.url [2012/07/16 09:47:34 | 006,153,318 | ---- | C] () -- C:\Users\BO\Desktop\beznazwy.png [2012/07/16 08:11:43 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempen3464.html [2012/07/15 15:31:35 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempeX4232.html [2012/07/13 14:42:56 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempnM3892.html [2012/07/09 18:12:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempUS6632.html [2012/07/08 19:59:33 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempxX6876.html [2012/07/08 10:20:36 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempxO5020.html [2012/07/07 11:11:37 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempeB4976.html [2012/07/07 11:11:37 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempJA4976.html [2012/07/06 10:32:27 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempqG5892.html [2012/07/05 16:07:30 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempSl4436.html [2012/07/04 16:09:34 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempyq4556.html [2012/07/03 10:28:06 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempBY3884.html [2012/07/02 11:35:23 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempoc4252.html [2012/07/01 19:11:59 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempkc2568.html [2012/07/01 15:14:14 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempXO6332.html [2012/06/30 21:31:59 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempjS5812.html [2012/06/29 12:36:34 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempkp4840.html [2012/06/28 11:02:36 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempiIU240.html [2012/06/27 19:09:32 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempCD1248.html [2012/06/25 13:16:17 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempcw6332.html [2012/06/24 21:00:34 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempYN2608.html [2012/06/24 19:49:10 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempEt5676.html [2012/06/21 20:41:48 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempeh6864.html [2012/06/20 15:25:48 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempUV3204.html [2012/06/18 10:11:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempCm6092.html [2012/06/17 20:58:22 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempzV5396.html [2012/06/17 19:52:07 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempxM1052.html [2012/06/15 11:58:08 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempvpW880.html [2012/06/13 09:53:21 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Templl4960.html [2012/06/12 10:08:11 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempXn3048.html [2012/06/11 16:13:00 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempAf5552.html [2012/06/09 11:54:10 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempWM4652.html [2012/06/08 14:29:39 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempjq5252.html [2012/06/07 10:37:02 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Temppn2600.html [2012/06/06 17:20:47 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempRx5072.html [2012/06/05 09:31:11 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempSP1196.html [2012/06/04 09:50:57 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPO4056.html [2012/06/03 22:01:49 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempnT4748.html [2012/06/03 15:42:38 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempQA3180.html [2012/06/01 09:45:07 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemppA3672.html [2012/05/31 19:16:27 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempVo1104.html [2012/05/29 14:22:13 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempvf6776.html [2012/05/28 16:09:13 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempVG1712.html [2012/05/27 22:21:00 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempbS2632.html [2012/05/27 20:30:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempub3272.html [2012/05/27 16:56:07 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempvn4016.html [2012/05/25 10:35:26 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempNZ1820.html [2012/05/24 21:13:49 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempBQ1768.html [2012/05/24 10:03:53 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempFn6076.html [2012/05/23 18:08:07 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempUi2668.html [2012/05/22 14:34:15 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempNy1020.html [2012/05/22 09:37:04 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempmn3872.html [2012/05/22 09:37:04 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempwY3872.html [2012/05/21 18:21:36 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempLT1844.html [2012/05/20 22:02:48 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempHf5776.html [2012/05/20 15:43:11 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemptU7128.html [2012/05/19 11:00:13 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempOV4852.html [2012/05/19 11:00:13 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempWp4852.html [2012/05/18 14:17:28 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemppZ5064.html [2012/05/17 22:31:57 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempwT5836.html [2012/05/17 21:04:39 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemplD3084.html [2012/05/17 16:48:48 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempJi1624.html [2012/05/16 11:57:41 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempSy1632.html [2012/05/15 21:20:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempvs7076.html [2012/05/15 21:20:09 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempXm7076.html [2012/05/14 18:30:05 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Temppkt952.html [2012/05/13 22:37:58 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempYV5000.html [2012/05/12 13:49:27 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempir4916.html [2012/05/11 10:01:40 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempMt4332.html [2012/05/10 20:24:10 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempwL5016.html [2012/05/09 10:52:55 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempFR1704.html [2012/05/08 22:38:16 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Temppm5684.html [2012/05/07 23:00:20 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempod2312.html [2012/05/07 14:40:37 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempdU5760.html [2012/05/06 22:14:19 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Temprd4892.html [2012/05/06 21:06:00 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempsF8384.html [2012/05/05 10:17:05 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Temphh2936.html [2012/05/04 21:03:13 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempbc2428.html [2012/05/04 08:21:06 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPd3776.html [2012/05/03 11:01:19 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemprI5896.html [2012/05/02 09:28:46 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempoC5636.html [2012/05/01 22:32:24 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempRN4648.html [2012/04/30 09:44:03 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempui2620.html [2012/04/29 22:43:19 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempzm2484.html [2012/04/29 20:57:49 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempTC1588.html [2012/04/29 20:13:02 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempFk3284.html [2012/04/29 10:47:23 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempUa3708.html [2012/04/28 19:47:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempng5672.html [2012/04/26 09:35:17 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Temphm4396.html [2012/04/25 13:27:36 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempGW5944.html [2012/04/25 08:26:13 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempRf4296.html [2012/04/24 21:34:35 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempJP3400.html [2012/04/23 20:06:44 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempkz1248.html [2012/04/22 21:31:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempAh4024.html [2012/04/22 10:55:27 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempZf4692.html [2012/04/21 18:03:05 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempzv2792.html [2012/04/20 22:17:21 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempNS4272.html [2012/04/20 18:27:22 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempcD4244.html [2012/04/19 14:59:52 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempZV3756.html [2012/04/17 11:13:40 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempVWH960.html [2012/04/16 19:07:12 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempLp1532.html [2012/04/15 21:49:25 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempjn4772.html [2012/04/15 21:15:53 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempGn3464.html [2012/04/15 21:10:44 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempLB4228.html [2012/04/15 20:46:14 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempsY5104.html [2012/04/15 20:46:14 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempDR5104.html [2012/04/14 10:42:12 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempZi5364.html [2012/04/12 13:10:34 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempRd6372.html [2012/04/12 13:10:34 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempMP6372.html [2012/04/08 18:27:47 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempeW4812.html [2012/04/08 18:27:47 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempAL4812.html [2012/04/07 12:27:51 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempKh7576.html [2012/04/05 13:19:03 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempqgX176.html [2012/04/05 09:59:14 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempAk1480.html [2012/04/05 09:59:14 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempFx1480.html [2012/04/04 19:06:17 | 000,172,022 | ---- | C] () -- C:\Windows\hpoins27.dat [2012/04/04 19:06:17 | 000,000,442 | ---- | C] () -- C:\Windows\hpomdl27.dat [2012/04/04 14:27:01 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Templa3320.html [2012/04/03 13:06:46 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempSn5300.html [2012/04/03 13:06:46 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempuT5300.html [2012/04/01 21:05:17 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempiG4928.html [2012/03/31 10:05:00 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempka1584.html [2012/03/30 12:55:58 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPV3076.html [2012/03/29 16:05:57 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPk6716.html [2012/03/29 16:05:57 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TemprU6716.html [2012/03/27 15:13:08 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemppH2424.html [2012/03/26 12:11:45 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempqh5616.html [2012/03/24 22:14:23 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempMo2688.html [2012/03/24 22:14:23 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\Templp2688.html [2012/03/18 07:50:17 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemppQM176.html [2012/03/15 10:56:59 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempHm4236.html [2012/03/14 12:08:01 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempga4864.html [2012/03/14 12:08:01 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempBm4864.html [2012/03/09 13:01:25 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemphQ2260.html [2012/03/04 13:30:02 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempkx1352.html [2012/03/02 13:02:55 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempDu6900.html [2012/02/29 14:33:36 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempfa2348.html [2012/02/28 14:38:49 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempkS5868.html [2012/02/26 11:19:36 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempwB1864.html [2012/02/22 18:02:47 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempId3812.html [2012/02/20 10:42:41 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempHW5648.html [2012/02/16 08:14:20 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempvs4940.html [2012/02/15 07:45:27 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempTU6204.html [2012/02/13 23:00:27 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempmH1932.html [2012/02/13 23:00:27 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempDC1932.html [2012/02/11 13:29:54 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPK6100.html [2012/02/10 10:00:02 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempeF5140.html [2012/02/07 11:57:58 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempLk5996.html [2012/02/06 13:30:56 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempDW5096.html [2012/02/05 13:25:13 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempFu5924.html [2012/02/03 12:55:08 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempRK3324.html [2012/02/02 13:25:24 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempaq5208.html [2012/02/01 12:39:22 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempVT3492.html [2012/01/31 12:10:35 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempiLY848.html [2012/01/28 12:44:35 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempWz5720.html [2012/01/27 12:07:55 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempoU1800.html [2012/01/25 14:01:55 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempsE5368.html [2012/01/23 11:47:19 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempgq5900.html [2012/01/22 23:51:31 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempu10224.html [2012/01/22 21:56:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempCH8144.html [2012/01/20 23:12:25 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempQl5516.html [2012/01/20 13:17:35 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempxe2028.html [2012/01/19 22:06:35 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempt11344.html [2012/01/17 13:33:16 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempdY2324.html [2012/01/15 22:45:41 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempAT4552.html [2012/01/15 00:05:15 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempuA3640.html [2012/01/12 23:43:56 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempfS7140.html [2012/01/12 23:43:56 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempKZ7140.html [2012/01/12 13:07:40 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPM5788.html [2012/01/10 14:58:43 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempqy5056.html [2012/01/10 14:58:43 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempDj5056.html [2012/01/09 12:26:42 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempqk3548.html [2012/01/08 23:27:06 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempIy2016.html [2012/01/05 14:49:01 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempZe2332.html [2012/01/05 12:22:56 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPa1300.html [2012/01/02 20:19:58 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempMW3352.html [2012/01/02 15:41:13 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempCL6956.html [2012/01/02 15:41:13 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempSz6956.html [2012/01/01 23:11:31 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPM6236.html [2011/12/30 21:26:07 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempys5968.html [2011/12/24 13:49:00 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempzG3008.html [2011/12/23 15:59:22 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempMh5132.html [2011/12/23 15:59:22 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempnv5132.html [2011/12/22 11:50:12 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempwI4996.html [2011/12/20 19:55:57 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempiH4952.html [2011/12/20 11:57:45 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempNY5044.html [2011/12/19 08:35:38 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempWv4012.html [2011/12/18 23:08:11 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempgM4644.html [2011/12/18 16:47:44 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempex2372.html [2011/12/17 13:38:15 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempYt2748.html [2011/12/16 16:05:50 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempWW1036.html [2011/12/15 18:40:21 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Templp4328.html [2011/12/14 17:59:36 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempOA1920.html [2011/12/11 22:31:32 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempgV5936.html [2011/12/11 22:08:59 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempCc2132.html [2011/12/11 22:04:02 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempOL5992.html [2011/12/09 14:58:49 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemprS6548.html [2011/12/08 14:39:58 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempwc4876.html [2011/12/07 16:53:32 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPq6248.html [2011/12/07 16:53:32 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempAJ6248.html [2011/12/07 16:39:42 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempDU4760.html [2011/12/07 16:39:42 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempTV4760.html [2011/12/05 16:13:46 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempEq4876.html [2011/12/03 14:14:32 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempEF2440.html [2011/12/01 22:35:42 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempel1572.html [2011/12/01 22:35:42 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempRA1572.html [2011/11/28 17:01:08 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempNx6544.html [2011/11/25 17:25:12 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPD1432.html [2011/11/22 19:42:14 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempHx6228.html [2011/11/20 23:10:50 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempGZ6008.html [2011/11/17 15:58:50 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemprC3896.html [2011/11/16 13:41:20 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempbX5628.html [2011/11/14 12:51:36 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempNZ5656.html [2011/11/12 14:00:33 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempwY2492.html [2011/11/12 14:00:33 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempCJ2492.html [2011/11/07 01:00:51 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempUY7452.html [2011/11/06 12:55:37 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempKU4800.html [2011/11/04 11:26:33 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Temptj6160.html [2011/10/31 18:26:15 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempoq4608.html [2011/10/30 23:39:31 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPI4288.html [2011/10/30 21:45:41 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempuq7492.html [2011/10/28 15:35:33 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempuj6104.html [2011/10/28 15:35:33 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\Temphd6104.html [2011/10/27 17:41:11 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempQz5984.html [2011/10/23 23:40:33 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempmk7160.html [2011/10/23 23:40:33 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempeb7160.html [2011/10/21 16:36:16 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempEJ3296.html [2011/10/20 22:10:16 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemplF4540.html [2011/10/16 22:23:55 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempem5628.html [2011/10/15 16:09:05 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemprC4016.html [2011/10/14 21:30:46 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempyu5768.html [2011/10/11 11:21:39 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempdz2856.html [2011/10/09 22:25:38 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempbK1780.html [2011/10/07 09:17:18 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Templd4360.html [2011/10/06 14:22:35 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempzr3936.html [2011/10/05 19:52:01 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempNI5236.html [2011/10/05 19:52:01 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempje5236.html [2011/10/04 15:23:19 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempWQ6676.html [2011/10/03 07:06:53 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempyQ2832.html [2011/10/01 10:48:47 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Templf5404.html [2011/09/28 18:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2011/09/28 18:24:45 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempRv5492.html [2011/09/28 18:24:45 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempmt5492.html [2011/09/27 17:29:08 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempZn5580.html [2011/09/23 20:26:34 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempkh2416.html [2011/09/20 13:46:52 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempSd5884.html [2011/09/18 23:11:15 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Templj2692.html [2011/09/18 13:28:16 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempNy5916.html [2011/09/16 14:14:30 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempTq6608.html [2011/09/12 20:58:17 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempWg1796.html [2011/09/12 15:13:52 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempFG6048.html [2011/09/10 19:25:44 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempFU6056.html [2011/09/09 16:27:52 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempmu6208.html [2011/09/09 16:27:52 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempTi6208.html [2011/09/09 13:31:23 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempqB5244.html [2011/09/08 12:35:20 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempta5140.html [2011/09/08 12:35:20 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempgD5140.html [2011/09/06 19:00:28 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemphO4260.html [2011/09/06 14:53:16 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempBt5432.html [2011/09/06 14:53:16 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempHs5432.html [2011/09/05 18:50:41 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempjI5644.html [2011/09/03 11:13:21 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempgk2876.html [2011/09/02 13:03:00 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Templh1008.html [2011/09/02 13:03:00 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempQt1008.html [2011/09/01 19:19:42 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempXE4576.html [2011/09/01 10:55:42 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempkQ6032.html [2011/09/01 10:55:42 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPg6032.html [2011/09/01 10:09:38 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Temppp5684.html [2011/08/31 12:00:28 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemplN3320.html [2011/08/31 12:00:28 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempGa3320.html [2011/08/30 12:53:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempUY4568.html [2011/08/29 12:19:12 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemphZ4408.html [2011/08/29 12:00:45 | 000,017,408 | ---- | C] () -- C:\Users\BO\AppData\Local\WebpageIcons.db [2011/08/21 23:52:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempVp4912.html [2011/08/20 14:15:15 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempkk4912.html [2011/08/20 12:32:44 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempow5940.html [2011/08/19 12:02:46 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempRIi840.html [2011/08/18 11:33:51 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempnv5704.html [2011/08/17 11:40:59 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempOP5312.html [2011/08/16 11:58:01 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempOu5852.html [2011/08/16 11:58:01 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempeL5852.html [2011/08/15 11:54:18 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempra2828.html [2011/08/13 16:16:52 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempYG1488.html [2011/08/11 09:20:12 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempti4004.html [2011/08/10 11:00:50 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemplRn840.html [2011/08/09 12:44:27 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempgO5468.html [2011/08/06 17:05:21 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempOa4872.html [2011/08/03 11:30:12 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempED7160.html [2011/08/01 07:06:35 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempeg5176.html [2011/07/29 21:32:57 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempfY5604.html [2011/07/28 17:17:52 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempfp5128.html [2011/07/27 12:54:35 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Temppd3376.html [2011/07/26 12:15:29 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempOt5536.html [2011/07/25 20:46:49 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempoi5528.html [2011/07/24 11:34:24 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempjo5128.html [2011/07/20 20:09:08 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempUC6076.html [2011/07/20 15:42:18 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempvR3100.html [2011/07/16 13:03:29 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemplI3336.html [2011/07/15 11:01:03 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemphI1116.html [2011/07/14 17:50:26 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempXI5840.html [2011/07/07 23:12:33 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempaE5832.html [2011/07/04 20:54:45 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempnV1312.html [2011/07/04 20:54:45 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempDr1312.html [2011/07/03 12:50:30 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempAa3360.html [2011/07/03 12:50:30 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempdM3360.html [2011/06/30 14:39:53 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempiy3396.html [2011/06/30 09:47:37 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempWc2200.html [2011/06/29 11:32:45 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempdD1944.html [2011/06/29 11:32:45 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempHR1944.html [2011/06/24 13:35:24 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPq5248.html [2011/06/19 14:28:51 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempxAp640.html [2011/06/15 11:34:32 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemppH2952.html [2011/06/15 11:34:32 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempHw2952.html [2011/06/13 10:07:31 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempFuS696.html [2011/06/13 10:07:31 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempBJF696.html [2011/06/12 10:45:07 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemprH5432.html [2011/06/12 10:45:07 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempjh5432.html [2011/06/11 10:34:27 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempfA4500.html [2011/06/10 12:07:50 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempdI6000.html [2011/06/09 10:15:47 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempiz6708.html [2011/06/08 09:59:18 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempfr5676.html [2011/06/07 23:22:04 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempdw6524.html [2011/06/05 10:31:27 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempdd3648.html [2011/06/03 17:42:33 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempse5136.html [2011/06/02 13:29:51 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempJZ5624.html [2011/06/01 11:00:52 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempFt4500.html [2011/05/28 11:25:58 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempuA5696.html [2011/05/27 10:04:51 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempSe2488.html [2011/05/25 20:45:19 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempfI4028.html [2011/05/24 23:40:13 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Temptq3576.html [2011/05/23 08:44:19 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempNt2504.html [2011/05/21 13:52:55 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempqU2644.html [2011/05/20 10:24:24 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempQC1912.html [2011/05/19 17:31:58 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempiP5348.html [2011/05/18 11:32:00 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempIW6024.html [2011/05/17 15:59:45 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempUc7104.html [2011/05/16 14:17:23 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempCv4808.html [2011/05/15 12:53:27 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempdS3124.html [2011/05/13 10:24:19 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempbn5472.html [2011/05/12 14:04:03 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempvR3964.html [2011/05/11 07:20:13 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempiR5076.html [2011/05/10 15:25:03 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempDSe244.html [2011/05/09 09:29:51 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempaD4728.html [2011/05/08 18:52:53 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempgf4816.html [2011/05/07 09:05:14 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempee5984.html [2011/05/06 08:45:32 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempKK2580.html [2011/05/05 10:36:06 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempzO4420.html [2011/05/04 11:41:33 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempwS1608.html [2011/05/03 13:49:21 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempnR5876.html [2011/05/03 13:49:21 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempoV5876.html [2011/05/02 15:31:49 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempOd6096.html [2011/05/01 11:39:49 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempxN5196.html [2011/04/30 11:32:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempXt3812.html [2011/04/29 11:35:36 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempye5256.html [2011/04/28 14:50:34 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPo6048.html [2011/04/27 10:25:36 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempVf6088.html [2011/04/27 10:25:36 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempXQ6088.html [2011/04/26 08:53:56 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempOC2868.html [2011/04/24 10:52:49 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempme4052.html [2011/04/23 15:07:47 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempvP4040.html [2011/04/22 21:16:11 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Temphe4216.html [2011/04/22 21:16:11 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempWy4216.html [2011/04/22 18:34:07 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempgF2024.html [2011/04/21 09:47:24 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemppF3948.html [2011/04/18 08:58:35 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempqG5472.html [2011/04/17 09:42:57 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempZa3092.html [2011/04/17 09:42:57 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempVi3092.html [2011/04/16 23:32:04 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempJR4244.html [2011/04/16 11:04:42 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempfZ3440.html [2011/04/16 11:04:42 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\Temphp3440.html [2011/04/15 13:33:35 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempRZ3172.html [2011/04/14 10:09:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempMH5648.html [2011/04/13 11:41:47 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempEv3860.html [2011/04/12 12:32:42 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempaF4540.html [2011/04/11 13:20:42 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempBT5756.html [2011/04/10 11:55:24 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemprZ1492.html [2011/04/07 16:04:30 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempJu1512.html [2011/04/07 16:04:30 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPZ1512.html [2011/04/06 11:49:12 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempWU1400.html [2011/04/05 14:40:47 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempiN5384.html [2011/04/05 14:40:47 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempjw5384.html [2011/04/02 11:39:33 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempDB4204.html [2011/04/01 14:59:03 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempwD5028.html [2011/04/01 14:59:03 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempZc5028.html [2011/03/31 14:46:27 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempmQ3752.html [2011/03/30 15:24:25 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempuJ2628.html [2011/03/30 15:24:25 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempWb2628.html [2011/03/30 13:19:38 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempFe1324.html [2011/03/30 13:19:38 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempsA1324.html [2011/03/29 12:21:43 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempOo1460.html [2011/03/27 09:50:49 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempMd3228.html [2011/03/26 13:45:45 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempEa1404.html [2011/03/26 13:45:45 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempUM1404.html [2011/03/25 00:01:41 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempKE2188.html [2011/03/25 00:01:41 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempnh2188.html [2011/03/24 19:10:39 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempje4592.html [2011/03/23 09:46:51 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Templt3972.html [2011/03/23 09:46:51 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempYI3972.html [2011/03/22 17:35:27 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempGh5464.html [2011/03/19 15:31:06 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempnU3576.html [2011/03/18 18:38:45 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempbF3556.html [2011/03/17 11:47:48 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempBK5256.html [2011/03/16 13:25:04 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempAj1748.html [2011/03/15 19:18:47 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempek3956.html [2011/03/14 14:48:53 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempMI4620.html [2011/03/14 14:48:53 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempRT4620.html [2011/03/10 12:29:52 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempTd2516.html [2011/03/09 17:08:32 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempcu5044.html [2011/03/05 15:48:51 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempkI5864.html [2011/03/04 12:16:30 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempwI3732.html [2011/02/21 10:20:18 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempoD5888.html [2011/02/13 19:06:15 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPt1536.html [2011/02/08 11:22:20 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempCv6020.html [2011/02/03 17:00:40 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempsJZ836.html [2011/02/03 09:33:00 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempOS6004.html [2011/02/01 13:52:13 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempas3248.html [2011/02/01 13:52:13 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempAI3248.html [2011/01/31 11:59:34 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempYD5276.html [2011/01/28 16:21:17 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempyP4548.html [2011/01/26 11:59:18 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempSm4700.html [2011/01/25 10:27:23 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempnq3924.html [2011/01/18 11:20:44 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempuB5880.html [2011/01/17 21:52:15 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempJY1036.html [2011/01/15 14:13:17 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempbX1984.html [2011/01/11 23:26:47 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\srvany.exe [2011/01/08 13:00:40 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempXUI112.html [2011/01/06 14:29:35 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempno5804.html [2010/12/31 11:49:05 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempdih904.html [2010/12/30 13:28:19 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempvp1880.html [2010/12/30 13:28:19 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPO1880.html [2010/12/30 00:26:44 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini [2010/12/30 00:26:42 | 000,881,664 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2010/12/30 00:26:42 | 000,205,824 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2010/12/30 00:26:41 | 003,596,288 | ---- | C] () -- C:\Windows\SysWow64\qt-dx331.dll [2010/12/30 00:26:35 | 000,085,504 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2010/12/27 16:49:25 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempUp1300.html [2010/12/13 22:05:17 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempaC5540.html [2010/12/10 13:12:43 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempBm4444.html [2010/11/28 15:09:23 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempWA4120.html [2010/11/23 22:38:10 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempsp2284.html [2010/11/21 16:12:40 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempGj5060.html [2010/11/13 10:38:02 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempHz6080.html [2010/11/07 23:44:29 | 000,000,090 | ---- | C] () -- C:\Users\BO\AppData\Local\fusioncache.dat [2010/11/07 23:39:50 | 001,614,216 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2010/10/30 00:19:00 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempWG1488.html [2010/10/27 21:26:05 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempqo5564.html [2010/10/27 21:26:05 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempxa5564.html [2010/10/17 19:19:27 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempnnC832.html [2010/10/17 19:19:27 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempDuV832.html [2010/10/16 21:00:20 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Temphy4288.html [2010/10/15 20:07:52 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempask372.html [2010/10/14 17:00:47 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempfy4572.html [2010/10/14 17:00:47 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempxu4572.html [2010/10/12 11:07:49 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempJU6312.html [2010/10/12 11:07:49 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempYt6312.html [2010/10/11 16:34:26 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempMr6732.html [2010/10/08 10:39:06 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempuQ6008.html [2010/10/06 11:00:11 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempyp1748.html [2010/10/03 11:40:37 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempSn2080.html [2010/10/02 19:44:45 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempKK2256.html [2010/09/29 17:05:53 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempFL4588.html [2010/09/29 17:05:53 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempXh4588.html [2010/09/26 17:27:19 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempVO6968.html [2010/09/24 10:09:57 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempRE4444.html [2010/09/23 18:57:38 | 000,036,352 | ---- | C] () -- C:\Windows\SysWow64\SX32W.DLL [2010/09/23 17:05:08 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempnk5956.html [2010/09/22 18:18:32 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempvK3452.html [2010/09/22 10:38:16 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempue4408.html [2010/09/22 10:38:16 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempFQ4408.html [2010/09/21 14:14:21 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempmL4164.html [2010/09/21 10:21:13 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempyG2776.html [2010/09/21 10:21:13 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TemppT2776.html [2010/09/20 22:11:26 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempzoB804.html [2010/09/19 17:19:04 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempjo6456.html [2010/09/19 11:58:20 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempvN4800.html [2010/09/19 10:57:52 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempZY2056.html [2010/09/18 13:22:13 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempSc4248.html [2010/09/17 09:54:40 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempxM4788.html [2010/09/16 11:20:25 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempyf4024.html [2010/09/15 19:33:34 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempsM5396.html [2010/09/14 12:05:38 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempGN3364.html [2010/09/13 10:48:32 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempUL1264.html [2010/09/12 10:15:13 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempmRq596.html [2010/09/11 11:00:33 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Temppc5532.html [2010/09/10 11:49:12 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempEa4656.html [2010/09/09 09:20:49 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempIW4568.html [2010/09/09 06:59:14 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempgk6620.html [2010/09/08 16:44:04 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempoW4628.html [2010/09/07 10:50:16 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempSi4156.html [2010/09/06 15:59:48 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempzQQ848.html [2010/09/04 11:41:59 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempZK5808.html [2010/09/02 10:23:05 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempsy6016.html [2010/09/02 00:45:38 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempsq3288.html [2010/09/01 14:27:20 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempRI5864.html [2010/09/01 12:03:48 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempEnL364.html [2010/09/01 11:51:31 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempSN4988.html [2010/08/31 12:29:29 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempnn6940.html [2010/08/30 14:57:37 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempak5904.html [2010/08/30 11:57:07 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempbZ6064.html [2010/08/28 20:41:08 | 000,004,096 | -H-- | C] () -- C:\Users\BO\AppData\Local\keyfile3.drm [2010/08/28 15:34:16 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempKO3784.html [2010/08/28 01:35:34 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempiv4576.html [2010/08/27 12:13:36 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempZe3304.html [2010/08/27 12:11:20 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempNcw616.html [2010/08/24 12:56:30 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempua4608.html [2010/08/23 20:55:28 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempCA3612.html [2010/08/22 20:55:12 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempGK2488.html [2010/08/20 11:03:44 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempmE4060.html [2010/08/19 19:50:54 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempcj3472.html [2010/08/19 11:49:59 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempNW2156.html [2010/08/18 00:27:02 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempEs1768.html [2010/08/17 00:03:39 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempDR5776.html [2010/08/16 23:38:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempVk5324.html [2010/08/16 12:20:49 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempgP6092.html [2010/08/15 19:31:35 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempyO3800.html [2010/08/15 16:14:56 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempdw5884.html [2010/08/12 19:32:55 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempJB5500.html [2010/08/06 11:04:10 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempzg4936.html [2010/08/05 12:57:32 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempYD6940.html [2010/07/26 21:09:24 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempBqg472.html [2010/07/25 23:30:17 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempMF5936.html [2010/07/22 23:04:36 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempVw6048.html [2010/07/19 12:29:15 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempel5252.html [2010/07/17 00:59:25 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempuI2120.html [2010/07/16 14:36:53 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempXH1072.html [2010/07/14 17:48:57 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempMY5796.html [2010/07/13 19:19:43 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemplS6132.html [2010/07/13 10:42:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempND7052.html [2010/07/12 23:36:00 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempbf6224.html [2010/07/12 13:21:22 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Temphh5172.html [2010/07/11 15:31:55 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempuv3532.html [2010/07/10 23:00:03 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempUG4308.html [2010/07/09 10:15:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempoZ5592.html [2010/07/09 01:53:53 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempHc4972.html [2010/07/07 19:43:40 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempSo5884.html [2010/07/07 10:22:41 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempYX3980.html [2010/07/06 10:58:17 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempmU1892.html [2010/07/05 13:44:10 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Templn5456.html [2010/07/04 21:01:32 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempNF5160.html [2010/07/04 12:51:02 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempFi4372.html [2010/07/03 11:58:57 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempFW4500.html [2010/07/02 10:31:02 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempkh2124.html [2010/07/01 19:44:29 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempTH4212.html [2010/07/01 09:27:38 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempAO4116.html [2010/06/30 09:37:47 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempmi1912.html [2010/06/29 10:19:05 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempdR6064.html [2010/06/27 22:22:50 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempeF1588.html [2010/06/27 20:54:26 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempRI2416.html [2010/06/26 13:23:25 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempwS2684.html [2010/06/25 09:34:12 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempqI5924.html [2010/06/24 16:24:51 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempoh2180.html [2010/06/24 10:23:24 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempVD5500.html [2010/06/22 10:01:21 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempAN6096.html [2010/06/21 12:47:31 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempNGF172.html [2010/06/20 20:47:12 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempAx5412.html [2010/06/20 11:59:06 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempxv5200.html [2010/06/17 18:48:05 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempYJQ708.html [2010/06/17 14:48:39 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempna5072.html [2010/06/16 19:26:01 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempYL2888.html [2010/06/16 17:10:23 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempJj3648.html [2010/06/16 11:46:35 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempOw5996.html [2010/06/15 15:19:49 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempta3008.html [2010/06/14 20:55:45 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempVu5816.html [2010/06/14 20:54:54 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempJp2760.html [2010/06/14 20:54:54 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempye2760.html [2010/06/10 21:41:32 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemplK4436.html [2010/06/10 11:45:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempnX7108.html [2010/06/09 23:48:27 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempMd6388.html [2010/06/08 18:12:37 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempbP2300.html [2010/06/08 10:18:10 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempEr3712.html [2010/06/07 21:48:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempNw5400.html [2010/06/07 16:08:46 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempyI6084.html [2010/06/07 10:34:35 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempXJ5204.html [2010/06/06 19:04:02 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempuX3320.html [2010/06/06 17:46:16 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempeT1416.html [2010/06/05 22:51:39 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempKT6476.html [2010/06/04 13:53:37 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempwT6280.html [2010/06/03 16:16:49 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempxt4752.html [2010/06/02 20:02:56 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempmB6516.html [2010/06/02 19:11:23 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempxx4940.html [2010/06/02 16:04:17 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempVU6184.html [2010/06/02 15:58:08 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempxE7072.html [2010/06/02 15:58:08 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempIK7072.html [2010/06/02 10:41:42 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempkn6040.html [2010/06/02 08:49:38 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempgC5524.html [2010/06/01 22:47:14 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempOv2588.html [2010/06/01 17:02:28 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempol5972.html [2010/06/01 14:28:25 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempxl2288.html [2010/06/01 10:06:55 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempSu5856.html [2010/05/31 19:09:48 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempfu1440.html [2010/05/31 11:05:55 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempBO5272.html [2010/05/31 11:05:05 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempsC6108.html [2010/05/31 11:05:05 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempmd6108.html [2010/05/30 19:14:02 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemplV5864.html [2010/05/30 16:58:43 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempXp3228.html [2010/05/28 23:18:05 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempDt2848.html [2010/05/28 21:43:04 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempuE5440.html [2010/05/28 20:06:48 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempei5080.html [2010/05/28 12:27:44 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPA1212.html [2010/05/27 19:36:15 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempot2708.html [2010/05/27 11:29:25 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempbq4032.html [2010/05/26 14:12:01 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempXf5644.html [2010/05/25 15:58:05 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempKl4576.html [2010/05/24 17:06:27 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempnf5260.html [2010/05/23 09:59:51 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempkQ2376.html [2010/05/22 10:09:23 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempze5268.html [2010/05/21 11:55:06 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemppM4644.html [2010/05/18 14:47:02 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempmk6000.html [2010/05/18 12:54:05 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempgr1120.html [2010/05/17 10:13:52 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempzoV172.html [2010/05/15 12:09:47 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempmV3752.html [2010/05/14 09:51:28 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempzT3760.html [2010/05/13 23:57:51 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Temphg1848.html [2010/05/13 11:18:28 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempYQ5856.html [2010/05/12 22:38:48 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempYX2372.html [2010/05/12 20:35:45 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempvq5916.html [2010/05/12 10:35:59 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempjb5908.html [2010/05/12 10:33:07 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Temphh2988.html [2010/05/11 19:04:51 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempNS2576.html [2010/05/09 20:55:33 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempgt5676.html [2010/05/09 17:59:34 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempCy2348.html [2010/05/09 11:48:13 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempOE5352.html [2010/05/07 15:01:15 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempLC1244.html [2010/05/06 12:29:01 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempIH3360.html [2010/05/05 14:20:13 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempii5036.html [2010/05/04 21:49:05 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempBl3252.html [2010/05/04 16:52:22 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempMK5180.html [2010/05/04 13:21:37 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempRc4412.html [2010/05/04 09:18:39 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempvm4760.html [2010/05/03 21:36:41 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempOBl236.html [2010/05/03 12:09:48 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempmO5348.html [2010/05/02 20:20:27 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempfx5356.html [2010/05/02 19:15:20 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempMv4816.html [2010/05/02 12:34:08 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempcN4384.html [2010/05/01 12:35:50 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempSL5364.html [2010/04/30 20:34:13 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempiU4228.html [2010/04/30 11:20:29 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempey4564.html [2010/04/29 10:09:16 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemprV2116.html [2010/04/29 10:09:16 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempwn2116.html [2010/04/29 00:04:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempdV1236.html [2010/04/28 19:17:43 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempBV4932.html [2010/04/28 11:36:20 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempwA5148.html [2010/04/28 11:36:20 | 000,002,089 | ---- | C] () -- C:\Users\BO\AppData\Local\TempYC5148.html [2010/04/27 12:01:18 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempSB4424.html [2010/04/26 11:55:39 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempHu2360.html [2010/04/25 20:49:31 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempZl5364.html [2010/04/25 19:39:48 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempnf3152.html [2010/04/25 19:20:14 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempSL6736.html [2010/04/23 11:17:04 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPw1292.html [2010/04/22 11:42:34 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempEv5800.html [2010/04/21 16:36:05 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempAy6124.html [2010/04/21 15:16:36 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempvJ1084.html [2010/04/20 14:53:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempxv3660.html [2010/04/19 13:18:58 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempPm6080.html [2010/04/18 18:57:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempye5264.html [2010/04/18 11:32:08 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempmGG760.html [2010/04/16 21:00:14 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempaI5420.html [2010/04/16 20:31:22 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemphK5192.html [2010/04/16 14:04:18 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempwM5588.html [2010/04/15 23:16:17 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempas1572.html [2010/04/15 22:07:32 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempvi5988.html [2010/04/15 10:30:16 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempEx6124.html [2010/04/14 13:10:15 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempZP2684.html [2010/04/13 17:32:51 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempEv4404.html [2010/04/13 14:56:04 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempmO1644.html [2010/04/12 10:54:21 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempov3372.html [2010/04/12 01:31:56 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempRR3308.html [2010/04/11 18:30:43 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempYF6268.html [2010/04/11 16:27:48 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempCB2816.html [2010/04/10 18:25:02 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempuV6288.html [2010/04/10 17:17:19 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempGL5492.html [2010/04/08 15:55:34 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempSq1504.html [2010/04/08 12:46:32 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempnV6348.html [2010/04/07 16:24:06 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempfg3004.html [2010/04/07 12:24:27 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempbx4312.html [2010/04/07 12:05:00 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempJHs616.html [2010/04/06 22:17:15 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempgY5632.html [2010/04/05 16:05:49 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempTK5264.html [2010/04/05 11:46:13 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempbt4812.html [2010/04/04 21:58:57 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempNo1604.html [2010/04/04 18:07:09 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempGk4292.html [2010/04/03 16:51:42 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempJO5876.html [2010/04/03 11:33:36 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempGG1488.html [2010/04/02 14:30:36 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempqF3380.html [2010/04/02 12:42:19 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempDj4372.html [2010/04/01 14:05:07 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempRHR784.html [2010/04/01 11:37:46 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempnr2136.html [2010/03/31 23:26:42 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TemplG6100.html [2010/03/31 14:14:00 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\Tempnl5308.html [2010/03/30 19:46:54 | 000,002,432 | ---- | C] () -- C:\Users\BO\AppData\Local\TempjK1660.html [2010/03/16 13:31:06 | 000,007,168 | ---- | C] () -- C:\Users\BO\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009/12/15 16:28:10 | 000,000,220 | ---- | C] () -- C:\Users\BO\AppData\Roaming\default.rss [color=#E56717]========== LOP Check ==========[/color] [2012/06/06 19:50:46 | 000,000,000 | ---D | M] -- C:\Users\BO\AppData\Roaming\BESTplayer [2012/07/24 22:25:40 | 000,000,000 | ---D | M] -- C:\Users\BO\AppData\Roaming\BitTorrent [2009/11/19 18:15:37 | 000,000,000 | ---D | M] -- C:\Users\BO\AppData\Roaming\DAEMON Tools Lite [2010/12/09 21:00:21 | 000,000,000 | ---D | M] -- C:\Users\BO\AppData\Roaming\ESET [2010/03/30 19:53:47 | 000,000,000 | ---D | M] -- C:\Users\BO\AppData\Roaming\Gadu-Gadu 10 [2011/06/24 18:41:12 | 000,000,000 | ---D | M] -- C:\Users\BO\AppData\Roaming\GetRightToGo [2011/08/19 12:25:38 | 000,000,000 | ---D | M] -- C:\Users\BO\AppData\Roaming\GHISLER [2012/07/24 22:24:40 | 000,000,000 | ---D | M] -- C:\Users\BO\AppData\Roaming\hellomoto [2011/09/05 18:48:50 | 000,000,000 | ---D | M] -- C:\Users\BO\AppData\Roaming\iPlus [2012/02/01 16:00:27 | 000,000,000 | ---D | M] -- C:\Users\BO\AppData\Roaming\Microgaming [2011/02/04 21:42:18 | 000,000,000 | ---D | M] -- C:\Users\BO\AppData\Roaming\Nokia [2010/06/02 10:42:21 | 000,000,000 | ---D | M] -- C:\Users\BO\AppData\Roaming\OpenFM [2011/02/04 21:28:05 | 000,000,000 | ---D | M] -- C:\Users\BO\AppData\Roaming\PC Suite [2010/09/29 03:21:29 | 000,000,000 | ---D | M] -- C:\Users\BO\AppData\Roaming\SDL International [2012/07/24 22:25:52 | 000,000,000 | ---D | M] -- C:\Users\BO\AppData\Roaming\SoftGrid Client [2011/07/11 10:20:54 | 000,000,000 | ---D | M] -- C:\Users\BO\AppData\Roaming\TP [2010/11/07 23:48:09 | 000,000,000 | ---D | M] -- C:\Users\BO\AppData\Roaming\Trados [2011/01/29 18:17:11 | 000,000,000 | ---D | M] -- C:\Users\BO\AppData\Roaming\TransAng3 [2009/11/18 23:26:02 | 000,000,000 | ---D | M] -- C:\Users\BO\AppData\Roaming\URSoft [2012/07/01 19:09:32 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 149 bytes -> C:\ProgramData\TEMP:B3D74A13 < End of report >