OTL logfile created on: 2012-12-28 02:04:32 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Iwo\Downloads Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.19088) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,99 Gb Total Physical Memory | 1,18 Gb Available Physical Memory | 39,25% Memory free 6,19 Gb Paging File | 4,31 Gb Available in Paging File | 69,61% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 190,09 Gb Total Space | 75,02 Gb Free Space | 39,47% Space Free | Partition Type: NTFS Drive D: | 98,00 Gb Total Space | 97,91 Gb Free Space | 99,91% Space Free | Partition Type: NTFS Drive E: | 130,84 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF Computer Name: IWO-LAPTI | User Name: Iwo | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-12-28 02:04:20 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Iwo\Downloads\OTL.exe PRC - [2012-12-22 12:10:59 | 001,807,800 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe PRC - [2012-12-17 20:20:32 | 000,916,960 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2012-10-30 23:50:59 | 004,297,136 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2012-10-30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2012-10-30 23:50:56 | 000,133,912 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\afwServ.exe PRC - [2012-10-08 19:21:22 | 000,766,400 | ---- | M] (Enigma Software Group USA, LLC.) -- C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe PRC - [2012-07-27 21:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2011-12-09 18:22:26 | 000,074,752 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Winamp\winampa.exe PRC - [2011-08-12 00:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCore.exe PRC - [2011-03-24 07:11:25 | 000,167,936 | ---- | M] (Applian Technologies, Inc.) -- C:\Program Files\Freecorder\FLVSrvc.exe PRC - [2011-01-29 23:11:36 | 003,372,856 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe PRC - [2011-01-29 17:00:40 | 000,146,232 | ---- | M] (Mobileleader Co., Ltd.) -- C:\Program Files\Samsung\Kies\External\DeviceModules\ConnectionManager.exe PRC - [2010-10-25 10:03:52 | 000,217,088 | ---- | M] (Teruten) -- C:\Windows\System32\FsUsbExService.Exe PRC - [2009-07-20 11:30:50 | 000,813,584 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech\SetPoint\SetPoint.exe PRC - [2009-07-20 11:28:26 | 000,059,920 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\SetPoint\LBTWiz.exe PRC - [2009-07-20 11:28:10 | 000,121,360 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe PRC - [2009-07-10 11:42:32 | 000,055,824 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe PRC - [2009-02-25 08:28:20 | 000,030,312 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe PRC - [2008-10-29 07:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2008-07-10 12:42:14 | 000,819,200 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe PRC - [2008-07-10 12:12:40 | 000,466,944 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe PRC - [2008-07-09 01:03:26 | 000,679,936 | ---- | M] (SAMSUNG Electronics) -- C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe PRC - [2008-07-08 03:27:00 | 006,273,568 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe PRC - [2008-07-02 11:22:52 | 000,565,248 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe PRC - [2008-06-25 15:44:28 | 002,666,496 | ---- | M] () -- C:\Program Files\Softex\OmniPass\scureapp.exe PRC - [2008-06-25 15:41:08 | 000,069,632 | ---- | M] () -- C:\Program Files\Softex\OmniPass\opvapp.exe PRC - [2008-06-25 15:40:50 | 000,040,960 | ---- | M] (Softex Inc.) -- C:\Program Files\Softex\OmniPass\OmniServ.exe PRC - [2008-05-13 00:47:20 | 000,077,480 | ---- | M] () -- C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe PRC - [2008-04-17 07:26:46 | 000,352,256 | ---- | M] (SAMSUNG Electronics co., LTD.) -- C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe PRC - [2008-03-18 04:27:12 | 000,013,312 | ---- | M] (Agere Systems) -- C:\Windows\System32\agrsmsvc.exe PRC - [2008-02-12 05:19:52 | 001,624,616 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe PRC - [2008-02-12 05:19:52 | 000,723,496 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe PRC - [2008-01-21 03:24:13 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe PRC - [2008-01-21 03:23:24 | 000,215,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\WindowsMobile\wmdSync.exe PRC - [2007-07-04 23:41:42 | 000,045,056 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-12-22 12:10:59 | 014,586,296 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_5_502_135.dll MOD - [2012-12-17 20:20:31 | 002,397,152 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2009-07-20 11:27:14 | 000,017,936 | ---- | M] () -- C:\Program Files\Logitech\SetPoint\khalwrapper.dll MOD - [2008-06-25 15:45:56 | 000,047,056 | ---- | M] () -- C:\Program Files\Softex\OmniPass\hdddrv.dll MOD - [2008-06-25 15:44:28 | 002,666,496 | ---- | M] () -- C:\Program Files\Softex\OmniPass\scureapp.exe MOD - [2008-06-25 15:34:24 | 000,061,440 | ---- | M] () -- C:\Program Files\Softex\OmniPass\scuredll.dll MOD - [2008-06-25 15:34:08 | 000,438,272 | ---- | M] () -- C:\Program Files\Softex\OmniPass\userdata.dll MOD - [2008-06-25 15:33:54 | 001,101,824 | ---- | M] () -- C:\Program Files\Softex\OmniPass\autheng.dll MOD - [2008-06-25 15:33:44 | 000,016,896 | ---- | M] () -- C:\Program Files\Softex\OmniPass\cryptodll.dll MOD - [2008-06-25 15:33:42 | 000,540,672 | ---- | M] () -- C:\Program Files\Softex\OmniPass\storeng.dll MOD - [2008-06-25 15:33:28 | 000,013,824 | ---- | M] () -- C:\Program Files\Softex\OmniPass\SSPLogon.dll MOD - [2007-08-14 05:59:54 | 006,365,184 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\QtGui4.dll MOD - [2007-07-12 05:55:52 | 000,131,072 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll MOD - [2007-07-12 05:55:28 | 001,581,056 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\QtCore4.dll MOD - [2006-08-12 04:48:40 | 000,049,152 | ---- | M] () -- C:\Program Files\Samsung\Samsung Magic Doctor\HookDllPS2.dll MOD - [2006-08-12 04:48:40 | 000,049,152 | ---- | M] () -- C:\Program Files\Samsung\EasySpeedUpManager\HookDllPS2.dll MOD - [2006-08-12 04:48:40 | 000,049,152 | ---- | M] () -- C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- C:\Users\Iwo\wgsdgsdgdsgsd.dll -- (Winmgmt) SRV - [2012-12-22 12:10:59 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012-12-17 20:20:31 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-11-09 11:21:24 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-10-30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV - [2012-10-30 23:50:56 | 000,133,912 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\afwServ.exe -- (avast! Firewall) SRV - [2012-10-08 19:21:22 | 000,766,400 | ---- | M] (Enigma Software Group USA, LLC.) [Auto | Running] -- C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe -- (SpyHunter 4 Service) SRV - [2012-07-27 21:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011-08-12 00:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCore.exe -- (!SASCORE) SRV - [2010-10-25 10:03:52 | 000,217,088 | ---- | M] (Teruten) [Auto | Running] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService) SRV - [2009-07-20 11:28:10 | 000,121,360 | ---- | M] (Logitech, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ) SRV - [2009-02-25 08:28:20 | 000,030,312 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe -- (BcmSqlStartupSvc) SRV - [2008-07-10 12:42:14 | 000,819,200 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) SRV - [2008-07-10 12:12:40 | 000,466,944 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) SRV - [2008-06-25 15:40:50 | 000,040,960 | ---- | M] (Softex Inc.) [Auto | Running] -- C:\Program Files\Softex\OmniPass\OmniServ.exe -- (omniserv) SRV - [2008-05-13 00:47:20 | 000,077,480 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe -- (Samsung Update Plus) SRV - [2008-03-18 04:27:12 | 000,013,312 | ---- | M] (Agere Systems) [Auto | Running] -- C:\Windows\System32\agrsmsvc.exe -- (AgereModemAudio) SRV - [2008-01-21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2008-01-21 03:23:24 | 000,365,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2008-01-21 03:23:24 | 000,167,936 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\ADMINI~1\AppData\Local\Temp\__Samsung_Update\ADDMEM.SYS -- (ADDMEM) DRV - [2012-10-30 23:51:58 | 000,738,504 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx) DRV - [2012-10-30 23:51:58 | 000,361,032 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP) DRV - [2012-10-30 23:51:58 | 000,199,320 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswNdis2.sys -- (aswNdis2) DRV - [2012-10-30 23:51:58 | 000,054,232 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2012-10-30 23:51:58 | 000,035,928 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (AswRdr) DRV - [2012-10-30 23:51:57 | 000,058,680 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt) DRV - [2012-10-30 23:51:56 | 000,106,560 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswFW.sys -- (aswFW) DRV - [2012-10-30 23:51:56 | 000,021,256 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2012-10-30 23:51:56 | 000,020,624 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswKbd.sys -- (aswKbd) DRV - [2012-09-21 10:26:08 | 000,012,112 | ---- | M] (ALWIL Software) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswNdis.sys -- (aswNdis) DRV - [2012-06-22 12:01:30 | 000,019,984 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\EsgScanner.sys -- (EsgScanner) DRV - [2011-07-22 17:27:02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV) DRV - [2011-07-12 22:55:22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL) DRV - [2011-01-29 17:00:20 | 000,020,032 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dgderdrv.sys -- (dgderdrv) DRV - [2011-01-03 09:38:36 | 000,136,680 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdm.sys -- (ssadmdm) DRV - [2011-01-03 09:38:36 | 000,121,192 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadbus.sys -- (ssadbus) DRV - [2011-01-03 09:38:36 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdfl.sys -- (ssadmdfl) DRV - [2010-12-30 10:41:56 | 000,180,672 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ssudmdm.sys -- (ssudmdm) DRV - [2010-12-30 10:41:56 | 000,066,112 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ssudbus.sys -- (dg_ssudbus) DRV - [2010-12-21 13:47:38 | 000,033,120 | ---- | M] (ESET) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\epfwndis.sys -- (Epfwndis) DRV - [2010-10-25 10:03:52 | 000,036,640 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk) DRV - [2010-08-27 05:32:30 | 000,123,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscemdm.sys -- (sscemdm) DRV - [2010-08-27 05:32:30 | 000,098,560 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscebus.sys -- (sscebus) DRV - [2010-08-27 05:32:30 | 000,014,848 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscemdfl.sys -- (sscemdfl) DRV - [2010-06-16 22:01:30 | 000,059,464 | ---- | M] (Ross-Tech LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RT-USB.SYS -- (RT-USB) DRV - [2009-06-17 17:56:16 | 000,037,392 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LMouFilt.Sys -- (LMouFilt) DRV - [2009-06-17 17:56:06 | 000,035,472 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LHidFilt.Sys -- (LHidFilt) DRV - [2008-10-08 04:54:00 | 000,013,312 | ---- | M] (SAMSUNG ELECTRONICS CO., LTD.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\KMDFMEMIO.sys -- (KMDFMEMIO) DRV - [2008-08-14 01:40:12 | 000,129,664 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\etDevice.sys -- (DCamUSBET) DRV - [2008-08-05 19:29:26 | 000,044,576 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA) DRV - [2008-07-26 20:24:00 | 007,548,000 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2008-07-11 01:43:08 | 000,239,232 | ---- | M] (eMPIA Technology Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\etFilter.sys -- (FiltUSBET) DRV - [2008-06-25 22:30:50 | 003,662,848 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32) DRV - [2008-05-30 05:44:42 | 000,146,944 | ---- | M] (AuthenTec, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atswpdrv.sys -- (ATSWPDRV) DRV - [2008-05-08 10:51:18 | 000,226,328 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\iaNvStor.sys -- (iaNvStor) DRV - [2008-03-21 04:13:00 | 001,203,776 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2008-01-21 03:23:26 | 000,045,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tpm.sys -- (TPM) DRV - [2008-01-21 03:23:26 | 000,031,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\winusb.sys -- (winusb) DRV - [2008-01-21 03:23:20 | 002,225,664 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETw3v32.sys -- (NETw3v32) DRV - [2007-09-07 06:43:56 | 000,006,656 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\etScan.sys -- (ScanUSBET) DRV - [2006-11-02 08:30:53 | 000,045,056 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\bcm4sbxp.sys -- (bcm4sbxp) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\URLSearchHook: {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\prxtbFree.dll (Conduit Ltd.) IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1060933 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-485226455-2533284332-1744201594-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT1060933 IE - HKU\S-1-5-21-485226455-2533284332-1744201594-1003\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-485226455-2533284332-1744201594-1003\..\URLSearchHook: {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\prxtbFree.dll (Conduit Ltd.) IE - HKU\S-1-5-21-485226455-2533284332-1744201594-1003\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-485226455-2533284332-1744201594-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKU\S-1-5-21-485226455-2533284332-1744201594-1003\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1060933 IE - HKU\S-1-5-21-485226455-2533284332-1744201594-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultthis.engineName: "Freecorder Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1060933&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.startup.homepage: "http://search.conduit.com/?ctid=CT1060933&SearchSource=13" FF - prefs.js..extensions.enabledAddons: coralietab%40mozdev.org:2.04.20110724 FF - prefs.js..extensions.enabledAddons: ytvdw%40pgport.com:1.1.10 FF - prefs.js..extensions.enabledAddons: %7B1392b8d2-5c05-419f-a8f6-b9f15a596612%7D:3.16.0.3 FF - prefs.js..extensions.enabledAddons: %7B33e0daa6-3af3-d8b5-6752-10e949c61516%7D:1.1 FF - prefs.js..extensions.enabledAddons: wrc%40avast.com:7.0.1474 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0.1 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6906 FF - prefs.js..extensions.enabledItems: coralietab_updater@mozdev.org:1.5 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: coralietab@mozdev.org:2.00.20110326 FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1060933&SearchSource=2&q=" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_135.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.10.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.10.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Users\Iwo\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll ( ) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-11-07 00:19:23 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-12-17 20:20:33 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-12-22 12:25:01 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-12-17 20:20:33 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-12-22 12:25:01 | 000,000,000 | ---D | M] [2011-03-22 13:56:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Iwo\AppData\Roaming\mozilla\Extensions [2011-03-22 13:56:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Iwo\AppData\Roaming\mozilla\Extensions\{ea278cf8-93cd-484f-b951-57360482d33a} [2012-11-11 15:57:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Iwo\AppData\Roaming\mozilla\Firefox\Profiles\wim4p1i3.default\extensions [2012-11-11 15:57:40 | 000,000,000 | ---D | M] (Freecorder Community Toolbar) -- C:\Users\Iwo\AppData\Roaming\mozilla\Firefox\Profiles\wim4p1i3.default\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612} [2010-05-12 23:25:03 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Iwo\AppData\Roaming\mozilla\Firefox\Profiles\wim4p1i3.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2012-02-10 01:56:56 | 000,000,000 | ---D | M] (Complitly - Speed up your search with your personal search suggestions tool) -- C:\Users\Iwo\AppData\Roaming\mozilla\Firefox\Profiles\wim4p1i3.default\extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516} [2012-11-10 00:33:59 | 000,000,000 | ---D | M] (Freecorder) -- C:\Users\Iwo\AppData\Roaming\mozilla\Firefox\Profiles\wim4p1i3.default\extensions\addon@freecorder.com [2011-08-16 23:39:41 | 000,000,000 | ---D | M] (IE Tab +) -- C:\Users\Iwo\AppData\Roaming\mozilla\Firefox\Profiles\wim4p1i3.default\extensions\coralietab@mozdev.org [2011-01-24 13:45:20 | 000,000,000 | ---D | M] (Plug-in by Integra Software) -- C:\Users\Iwo\AppData\Roaming\mozilla\Firefox\Profiles\wim4p1i3.default\extensions\coralietab_updater@mozdev.org [2012-05-05 16:37:31 | 000,000,000 | ---D | M] (IE Tab Plus) -- C:\Users\Iwo\AppData\Roaming\mozilla\Firefox\Profiles\wim4p1i3.default\extensions\ietab@ip.cn [2012-02-10 01:58:17 | 000,061,854 | ---- | M] () (No name found) -- C:\Users\Iwo\AppData\Roaming\mozilla\firefox\profiles\wim4p1i3.default\extensions\ytvdw@pgport.com.xpi [2012-02-08 17:23:38 | 000,000,923 | ---- | M] () -- C:\Users\Iwo\AppData\Roaming\mozilla\firefox\profiles\wim4p1i3.default\searchplugins\conduit.xml [2012-11-08 22:43:53 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-02-17 09:17:10 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2012-11-07 00:19:23 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF [2012-12-17 20:20:32 | 000,262,112 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011-12-09 18:23:32 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll [2012-12-17 20:20:29 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-12-17 20:20:29 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-12-17 20:20:29 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-12-17 20:20:29 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-12-17 20:20:29 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-12-17 20:20:29 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://www.google.com CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}, CHR - homepage: http://www.google.com CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.97\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.97\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.97\pdf.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: Java Deployment Toolkit 6.0.230.5 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U23 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npwachk.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll CHR - plugin: Facebook Plugin (Enabled) = C:\Users\Iwo\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll CHR - Extension: Complitly plugin for chrome = C:\Users\Iwo\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0\ CHR - Extension: Air Hockey = C:\Users\Iwo\AppData\Local\Google\Chrome\User Data\Default\Extensions\egnoihdknipkbmaciidjffkecbhcbnim\3.2.0_0\ CHR - Extension: Freecorder = C:\Users\Iwo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpicboiclhmnllnjdcfcffifpoaebgkm\7.0.0.7_0\ CHR - Extension: avast! WebRep = C:\Users\Iwo\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\ CHR - Extension: Mapy Google = C:\Users\Iwo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh\5.2.7_0\ CHR - Extension: Sprawdzanie poczty Google = C:\Users\Iwo\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0\ CHR - Extension: Tapatalk Notifier = C:\Users\Iwo\AppData\Local\Google\Chrome\User Data\Default\Extensions\plfhcjljnfjpfcbjpgnflfofmahljkjj\2.0.6_0\ O1 HOSTS File: ([2012-12-28 01:46:18 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Complitly) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\Iwo\AppData\Roaming\Complitly\Complitly.dll (SimplyGen) O2 - BHO: (Freecorder Toolbar) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\prxtbFree.dll (Conduit Ltd.) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Freecorder extension) - {B15BBE59-42F5-4206-B3F0-BE98F5DC4B93} - C:\Program Files\Freecorder extension\ScriptHost.dll (freecorder.com) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll File not found O3 - HKLM\..\Toolbar: (Freecorder Toolbar) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\prxtbFree.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O3 - HKU\S-1-5-21-485226455-2533284332-1744201594-1003\..\Toolbar\WebBrowser: (Freecorder Toolbar) - {1392B8D2-5C05-419F-A8F6-B9F15A596612} - C:\Program Files\Freecorder\prxtbFree.dll (Conduit Ltd.) O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [Bluetooth Connection Assistant] LBTWIZ.EXE -silent File not found O4 - HKLM..\Run: [Freecorder FLV Service] C:\Program Files\Freecorder\FLVSrvc.exe (Applian Technologies, Inc.) O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.) O4 - HKLM..\Run: [LanguageShortcut] C:\Program Files\CyberLink\PowerDVD\Language\Language.exe () O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [OmniPass] C:\Program Files\Softex\OmniPass\scureapp.exe () O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.) O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-485226455-2533284332-1744201594-1003..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKU\S-1-5-21-485226455-2533284332-1744201594-1003..\Run: [KiesHelper] C:\Program Files\Samsung\Kies\KiesHelper.exe (Samsung) O4 - HKU\S-1-5-21-485226455-2533284332-1744201594-1003..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.) O4 - Startup: C:\Users\Iwo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RT-Updater.lnk = C:\Ross-Tech\VCDS\VCDS.EXE (Ross-Tech, LLC) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-485226455-2533284332-1744201594-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-485226455-2533284332-1744201594-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8 - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe () O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe () O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O15 - HKU\S-1-5-21-485226455-2533284332-1744201594-1003\..Trusted Ranges: Range1979 ([http] in Zaufane witryny) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Reg Error: Value error.) O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 10.10.2) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D137AB36-5C15-4FD3-B8C8-B5D66A7BCEE6}: DhcpNameServer = 192.168.1.1 0.0.0.0 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com) O24 - Desktop WallPaper: C:\Users\Public\Pictures\Sample Pictures\Dock.jpg O24 - Desktop BackupWallPaper: C:\Users\Public\Pictures\Sample Pictures\Dock.jpg O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-09-18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2011-07-07 05:19:01 | 000,000,044 | R--- | M] () - E:\autorun.inf -- [ UDF ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-12-28 01:46:27 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN [2012-12-28 00:39:07 | 000,000,000 | ---D | C] -- C:\Windows\temp [2012-12-28 00:39:07 | 000,000,000 | ---D | C] -- C:\Users\Iwo\AppData\Local\temp [2012-12-28 00:26:38 | 000,000,000 | ---D | C] -- C:\Windows\erdnt [2012-12-27 19:20:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware [2012-12-27 19:20:54 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com [2012-12-27 19:20:54 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware [2012-12-27 19:01:47 | 000,000,000 | ---D | C] -- C:\sh4ldr [2012-12-26 14:21:53 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group [2012-12-26 14:21:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2012-12-26 13:22:37 | 000,000,000 | ---D | C] -- C:\found.000 [2012-12-26 11:33:55 | 000,201,288 | ---- | C] (McAfee, Inc.) -- C:\Windows\System32\drivers\mfehidk.sys [2012-12-26 11:33:55 | 000,125,728 | ---- | C] (McAfee, Inc.) -- C:\Windows\System32\drivers\Mpfp.sys [2012-12-26 11:33:55 | 000,079,304 | ---- | C] (McAfee, Inc.) -- C:\Windows\System32\drivers\mfeavfk.sys [2012-12-26 11:33:55 | 000,040,488 | ---- | C] (McAfee, Inc.) -- C:\Windows\System32\drivers\mfesmfk.sys [2012-12-26 11:33:55 | 000,035,240 | ---- | C] (McAfee, Inc.) -- C:\Windows\System32\drivers\mfebopk.sys [2012-12-26 11:33:55 | 000,033,800 | ---- | C] (McAfee, Inc.) -- C:\Windows\System32\drivers\mferkdk.sys [2012-12-26 03:08:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner [2012-12-26 03:08:49 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2012-12-26 03:08:31 | 004,178,040 | ---- | C] (Piriform Ltd) -- C:\Users\Iwo\Desktop\ccsetup326.exe [2012-12-26 00:51:53 | 000,000,000 | ---D | C] -- C:\Users\Iwo\NSU [2012-12-26 00:47:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZyXEL [2012-12-26 00:47:30 | 000,000,000 | ---D | C] -- C:\Program Files\ZyXEL [2012-12-22 12:24:48 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe [2012-12-22 12:24:48 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe [2012-12-22 12:11:50 | 000,000,000 | ---D | C] -- C:\Users\Iwo\AppData\Local\Macromedia [2012-12-22 12:04:27 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2012-12-06 20:54:03 | 000,000,000 | ---D | C] -- C:\Users\Iwo\Desktop\Bernenska [2012-12-02 18:33:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2012-12-02 18:33:30 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2012-11-29 23:40:22 | 000,000,000 | ---D | C] -- C:\Users\Iwo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Simple Port Forwarding [2012-11-29 23:40:19 | 000,000,000 | ---D | C] -- C:\Windows\Simple Port Forwarding [2012-11-29 23:40:19 | 000,000,000 | ---D | C] -- C:\Program Files\Simple Port Forwarding [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-12-28 02:01:33 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TemppL1884.html [2012-12-28 02:00:11 | 000,441,653 | ---- | M] () -- C:\ProgramData\nvModes.001 [2012-12-28 01:59:59 | 000,000,526 | ---- | M] () -- C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 0b048217-09d5-4e24-9615-43cb14d32e6a.job [2012-12-28 01:58:50 | 000,004,784 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2012-12-28 01:58:50 | 000,004,784 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2012-12-28 01:58:34 | 000,001,026 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012-12-28 01:58:04 | 000,372,632 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2012-12-28 01:57:53 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-12-28 01:57:41 | 3215,486,976 | -HS- | M] () -- C:\hiberfil.sys [2012-12-28 01:56:36 | 000,002,308 | ---- | M] () -- C:\Windows\bthservsdp.dat [2012-12-28 01:49:40 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\Tempws2032.html [2012-12-28 01:46:18 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts [2012-12-28 01:36:26 | 000,001,030 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012-12-28 01:33:15 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012-12-28 01:32:32 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempSE3792.html [2012-12-28 00:19:03 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempHt4116.html [2012-12-28 00:19:03 | 000,002,089 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempGY4116.html [2012-12-27 23:58:03 | 000,441,653 | ---- | M] () -- C:\ProgramData\nvModes.dat [2012-12-27 23:54:35 | 000,000,526 | ---- | M] () -- C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 2f293400-1bd8-494b-a7da-80201838a98c.job [2012-12-27 21:56:29 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempjR2912.html [2012-12-27 21:56:29 | 000,002,089 | ---- | M] () -- C:\Users\Iwo\AppData\Local\Tempbo2912.html [2012-12-27 19:38:14 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt [2012-12-27 19:20:57 | 000,001,800 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk [2012-12-27 18:47:56 | 000,000,680 | ---- | M] () -- C:\Users\Iwo\AppData\Local\d3d9caps.dat [2012-12-26 14:23:52 | 000,001,100 | ---- | M] () -- C:\Users\Iwo\Desktop\Dropbox.lnk [2012-12-26 13:57:41 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempVR6012.html [2012-12-26 13:57:41 | 000,002,089 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TemplO6012.html [2012-12-26 13:18:58 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\Tempsz5476.html [2012-12-26 13:18:58 | 000,002,089 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempTX5476.html [2012-12-26 03:08:51 | 000,000,804 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2012-12-26 03:08:37 | 004,178,040 | ---- | M] (Piriform Ltd) -- C:\Users\Iwo\Desktop\ccsetup326.exe [2012-12-26 03:01:03 | 000,002,842 | ---- | M] () -- C:\ProgramData\dsgsdgdsgdsgw.js [2012-12-26 02:51:55 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempzJ2844.html [2012-12-26 02:51:55 | 000,002,089 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempIR2844.html [2012-12-26 02:46:39 | 000,496,232 | ---- | M] () -- C:\Users\Iwo\Desktop\CCleaner(13061).exe [2012-12-26 02:31:10 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TemprM3256.html [2012-12-26 02:31:10 | 000,002,089 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempSS3256.html [2012-12-26 02:09:37 | 000,000,880 | ---- | M] () -- C:\Users\Iwo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\runctf.lnk [2012-12-26 00:47:30 | 000,001,479 | ---- | M] () -- C:\Users\Public\Desktop\ZyXEL NAS Starter Utility.lnk [2012-12-25 22:39:57 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempWS2720.html [2012-12-24 01:16:51 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TemptN1768.html [2012-12-24 01:16:51 | 000,002,089 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempZn1768.html [2012-12-22 23:08:04 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempGr4496.html [2012-12-22 17:29:04 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\Tempjt5000.html [2012-12-22 17:29:04 | 000,002,089 | ---- | M] () -- C:\Users\Iwo\AppData\Local\Tempud5000.html [2012-12-22 14:57:05 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempaD4076.html [2012-12-22 14:57:05 | 000,002,089 | ---- | M] () -- C:\Users\Iwo\AppData\Local\Tempai4076.html [2012-12-22 12:25:01 | 000,001,892 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk [2012-12-22 05:32:11 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempRk2552.html [2012-12-22 05:32:11 | 000,002,089 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TemphQ2552.html [2012-12-21 00:15:06 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempOR3392.html [2012-12-21 00:15:06 | 000,002,089 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempBb3392.html [2012-12-20 00:16:50 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempjI1340.html [2012-12-20 00:16:50 | 000,002,089 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempEW1340.html [2012-12-19 23:16:49 | 000,718,848 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2012-12-19 23:16:49 | 000,642,704 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012-12-19 23:16:49 | 000,148,038 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2012-12-19 23:16:49 | 000,121,592 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012-12-18 21:50:26 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempGyG472.html [2012-12-18 21:06:39 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempzQ3716.html [2012-12-18 21:06:39 | 000,002,089 | ---- | M] () -- C:\Users\Iwo\AppData\Local\Tempbx3716.html [2012-12-17 20:20:56 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempTQ4116.html [2012-12-16 20:27:57 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempoW2700.html [2012-12-15 02:46:49 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempkX2696.html [2012-12-15 02:46:49 | 000,002,089 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempoM2696.html [2012-12-14 19:50:03 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempKt3788.html [2012-12-14 19:50:03 | 000,002,089 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempnV3788.html [2012-12-14 12:40:06 | 000,001,971 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2012-12-12 01:01:49 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\Tempzu3784.html [2012-12-12 01:01:49 | 000,002,089 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempeK3784.html [2012-12-07 01:25:15 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempFd4252.html [2012-12-07 01:25:15 | 000,002,089 | ---- | M] () -- C:\Users\Iwo\AppData\Local\Tempgu4252.html [2012-12-05 21:10:44 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempDZ4504.html [2012-12-04 00:53:02 | 000,002,432 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempgF1080.html [2012-12-04 00:53:02 | 000,002,089 | ---- | M] () -- C:\Users\Iwo\AppData\Local\TempDF1080.html [2012-12-02 22:11:25 | 000,104,448 | ---- | M] () -- C:\Users\Iwo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-12-02 21:54:08 | 000,069,882 | ---- | M] () -- C:\Users\Iwo\Desktop\Source.Code.2011.DVDRip.XviD-MAXSPEED-[ Polskie-Napisy ][ www.napisy.jcom.pl ].srt [2012-12-02 18:33:30 | 000,001,880 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk [2012-11-29 23:40:22 | 000,001,755 | ---- | M] () -- C:\Users\Iwo\Desktop\Simple Port Forwarding.lnk [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-12-28 02:01:09 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemppL1884.html [2012-12-28 01:49:31 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempws2032.html [2012-12-28 01:26:26 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempSE3792.html [2012-12-28 01:22:09 | 3215,486,976 | -HS- | C] () -- C:\hiberfil.sys [2012-12-27 23:58:41 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempHt4116.html [2012-12-27 23:58:41 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempGY4116.html [2012-12-27 19:21:54 | 000,000,526 | ---- | C] () -- C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 2f293400-1bd8-494b-a7da-80201838a98c.job [2012-12-27 19:21:53 | 000,000,526 | ---- | C] () -- C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 0b048217-09d5-4e24-9615-43cb14d32e6a.job [2012-12-27 19:20:57 | 000,001,800 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk [2012-12-27 18:47:59 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempjR2912.html [2012-12-27 18:47:59 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempbo2912.html [2012-12-26 13:33:29 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempVR6012.html [2012-12-26 13:33:29 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemplO6012.html [2012-12-26 13:25:36 | 000,372,632 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2012-12-26 03:08:51 | 000,000,804 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk [2012-12-26 03:06:00 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempsz5476.html [2012-12-26 03:06:00 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempTX5476.html [2012-12-26 03:05:29 | 000,496,232 | ---- | C] () -- C:\Users\Iwo\Desktop\CCleaner(13061).exe [2012-12-26 02:51:55 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempzJ2844.html [2012-12-26 02:51:55 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempIR2844.html [2012-12-26 02:22:23 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemprM3256.html [2012-12-26 02:22:23 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempSS3256.html [2012-12-26 02:09:37 | 000,002,842 | ---- | C] () -- C:\ProgramData\dsgsdgdsgdsgw.js [2012-12-26 02:09:37 | 000,000,880 | ---- | C] () -- C:\Users\Iwo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\runctf.lnk [2012-12-26 00:47:30 | 000,001,479 | ---- | C] () -- C:\Users\Public\Desktop\ZyXEL NAS Starter Utility.lnk [2012-12-25 22:38:01 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempWS2720.html [2012-12-23 23:38:36 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemptN1768.html [2012-12-23 23:38:36 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempZn1768.html [2012-12-22 23:07:32 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempGr4496.html [2012-12-22 16:12:41 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempjt5000.html [2012-12-22 16:12:41 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempud5000.html [2012-12-22 12:25:01 | 000,001,892 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk [2012-12-22 12:25:01 | 000,001,804 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk [2012-12-22 12:11:00 | 000,000,930 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012-12-22 10:59:39 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempaD4076.html [2012-12-22 10:59:39 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempai4076.html [2012-12-22 04:03:52 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempRk2552.html [2012-12-22 04:03:52 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemphQ2552.html [2012-12-20 23:00:54 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempOR3392.html [2012-12-20 23:00:54 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempBb3392.html [2012-12-19 23:13:21 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempjI1340.html [2012-12-19 23:13:21 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempEW1340.html [2012-12-18 21:49:36 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempGyG472.html [2012-12-18 21:06:39 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempzQ3716.html [2012-12-18 21:06:39 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempbx3716.html [2012-12-17 20:19:54 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempTQ4116.html [2012-12-15 13:01:07 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempoW2700.html [2012-12-15 01:25:26 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempkX2696.html [2012-12-15 01:25:26 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempoM2696.html [2012-12-14 12:10:08 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempKt3788.html [2012-12-14 12:10:08 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempnV3788.html [2012-12-11 23:19:59 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempzu3784.html [2012-12-11 23:19:59 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempeK3784.html [2012-12-06 20:08:28 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempFd4252.html [2012-12-06 20:08:28 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempgu4252.html [2012-12-05 21:07:50 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempDZ4504.html [2012-12-03 23:25:24 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempgF1080.html [2012-12-03 23:25:24 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempDF1080.html [2012-12-02 22:02:15 | 832,064,772 | ---- | C] () -- C:\Users\Iwo\Desktop\Source Code {2011} DVDRIP. Jaybob.avi [2012-12-02 21:54:52 | 000,069,882 | ---- | C] () -- C:\Users\Iwo\Desktop\Source.Code.2011.DVDRip.XviD-MAXSPEED-[ Polskie-Napisy ][ www.napisy.jcom.pl ].srt [2012-11-29 23:40:22 | 000,001,755 | ---- | C] () -- C:\Users\Iwo\Desktop\Simple Port Forwarding.lnk [2012-11-26 21:42:13 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempdB7560.html [2012-11-26 21:42:13 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempPb7560.html [2012-11-26 19:43:59 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemptW2256.html [2012-11-26 19:43:59 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempDb2256.html [2012-11-25 21:49:39 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempOQ4152.html [2012-11-25 21:49:39 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempjt4152.html [2012-11-24 18:03:41 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempnE4292.html [2012-11-22 22:39:36 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempNA3816.html [2012-11-21 21:37:28 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temppf4392.html [2012-11-17 20:32:50 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempRa4296.html [2012-11-15 20:32:02 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemprT4656.html [2012-11-15 20:32:02 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempbc4656.html [2012-11-14 22:58:49 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempqQ4704.html [2012-11-14 22:58:49 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempCl4704.html [2012-11-13 20:33:09 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempBx3884.html [2012-11-10 20:44:56 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempeP4608.html [2012-11-10 20:44:56 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temprp4608.html [2012-11-05 21:45:15 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempGa3976.html [2012-11-04 15:19:44 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempIN3100.html [2012-11-04 15:19:44 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempyY3100.html [2012-11-04 12:09:14 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempdz3028.html [2012-11-03 20:34:03 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempCQ3648.html [2012-11-03 20:34:03 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempwi3648.html [2012-11-01 21:07:20 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempda2160.html [2012-11-01 21:07:20 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempPi2160.html [2012-11-01 20:40:20 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempcp3964.html [2012-11-01 20:40:20 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempNI3964.html [2012-10-29 22:26:33 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempwj2760.html [2012-10-29 22:26:33 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempxR2760.html [2012-10-28 11:58:23 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempGi3860.html [2012-10-28 11:58:23 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempLV3860.html [2012-10-09 16:47:02 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempcG4100.html [2012-10-03 20:22:43 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempqU1796.html [2012-10-03 20:22:43 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempyy1796.html [2012-10-01 20:32:17 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempzHs880.html [2012-10-01 20:32:17 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempUBH880.html [2012-10-01 18:05:26 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemppB4272.html [2012-09-29 20:16:15 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemplY3628.html [2012-09-29 20:16:15 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempnT3628.html [2012-09-25 11:09:30 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempiR1056.html [2012-09-25 11:09:30 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempTr1056.html [2012-09-15 20:39:20 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temprc5908.html [2012-09-15 20:19:17 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempho1888.html [2012-09-15 20:19:17 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempDJ1888.html [2012-09-11 23:02:14 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempSk1292.html [2012-09-11 23:02:14 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempaD1292.html [2012-08-31 21:51:17 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempFZ3824.html [2012-08-31 21:51:17 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempgh3824.html [2012-08-17 11:22:24 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempnG1372.html [2012-08-17 11:22:24 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempyx1372.html [2012-06-22 12:01:30 | 000,019,984 | ---- | C] () -- C:\Windows\System32\ESGScanner.sys [2012-06-22 12:01:30 | 000,019,984 | ---- | C] () -- C:\Windows\System32\drivers\EsgScanner.sys [2012-05-15 23:07:55 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempbX3408.html [2012-05-15 23:07:55 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempoh3408.html [2012-05-14 22:59:21 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempDF3952.html [2012-05-14 22:59:21 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempoD3952.html [2012-05-05 14:49:15 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempFYD736.html [2012-02-12 23:11:41 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempLW1772.html [2012-02-12 23:11:41 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempPH1772.html [2012-02-09 22:10:50 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempYc3676.html [2012-02-09 22:10:50 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempyM3676.html [2012-02-08 22:00:43 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempOf4028.html [2012-02-08 22:00:43 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempzg4028.html [2012-02-07 22:31:43 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempHC1020.html [2012-02-07 22:31:43 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempTk1020.html [2012-02-06 21:26:43 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempmt1712.html [2012-02-06 21:26:43 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temptn1712.html [2012-02-05 14:27:53 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempTd3012.html [2012-02-05 14:27:53 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempLr3012.html [2012-01-23 21:43:53 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemplM3424.html [2012-01-22 21:25:39 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempxxU776.html [2012-01-22 21:25:39 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempbIO776.html [2012-01-07 23:11:54 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempvk1000.html [2011-12-27 02:33:02 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempbs1352.html [2011-12-27 00:59:11 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempJH2968.html [2011-12-27 00:59:11 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempGT2968.html [2011-12-23 23:01:21 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempJX4060.html [2011-12-23 23:01:21 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemplR4060.html [2011-12-18 00:07:42 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempHGv332.html [2011-11-15 00:17:57 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempoF2176.html [2011-11-15 00:17:57 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempKY2176.html [2011-11-11 13:42:24 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempNAe948.html [2011-11-11 13:42:24 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempCFm948.html [2011-11-10 12:15:37 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempes1388.html [2011-11-10 12:15:37 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempKa1388.html [2011-11-04 19:59:36 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempmK3364.html [2011-10-22 13:36:36 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempJH3928.html [2011-10-21 23:54:48 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempHG1400.html [2011-10-21 23:54:48 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempok1400.html [2011-10-20 12:06:34 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempbX4716.html [2011-10-20 12:06:34 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempcP4716.html [2011-09-25 21:36:09 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempXp3344.html [2011-09-25 21:36:09 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempgh3344.html [2011-09-23 10:24:35 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempMY2192.html [2011-09-23 10:24:35 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempiA2192.html [2011-09-21 19:49:21 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempZq2572.html [2011-09-10 17:28:36 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempYj2692.html [2011-09-10 10:59:00 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempmx3220.html [2011-09-10 10:59:00 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempuW3220.html [2011-09-09 16:36:16 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempSg1356.html [2011-08-16 23:18:17 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempgX2240.html [2011-08-04 18:29:33 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll [2011-08-04 17:49:07 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempkI2480.html [2011-08-04 17:49:07 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempDh2480.html [2011-07-28 10:04:14 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temprq3032.html [2011-07-28 10:04:14 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempdB3032.html [2011-07-10 18:50:15 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempAN1336.html [2011-06-30 19:28:29 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempQy3416.html [2011-06-30 19:28:29 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempCl3416.html [2011-06-21 19:57:49 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempxQ2856.html [2011-06-21 19:57:49 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempDF2856.html [2011-06-21 15:57:23 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempWB2772.html [2011-06-21 15:57:23 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempAa2772.html [2011-06-13 07:21:24 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempgy2716.html [2011-06-13 07:21:24 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempaF2716.html [2011-06-12 11:27:07 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemppBP976.html [2011-06-11 15:19:51 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempCY1168.html [2011-06-11 15:19:51 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempzV1168.html [2011-06-11 11:55:14 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempQB3484.html [2011-06-11 11:55:14 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempep3484.html [2011-05-25 00:16:05 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempAl2352.html [2011-05-25 00:16:05 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempds2352.html [2011-05-16 07:17:02 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempcD1524.html [2011-05-16 07:17:01 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempdt1524.html [2011-05-10 22:22:16 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempdr3896.html [2011-05-10 22:22:16 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempBO3896.html [2011-05-10 08:17:23 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempBn3788.html [2011-05-10 08:17:23 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempnW3788.html [2011-05-09 07:56:06 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempyo1384.html [2011-05-09 07:56:06 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempNF1384.html [2011-05-06 08:11:11 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempQj3364.html [2011-05-06 08:11:11 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempDz3364.html [2011-05-05 08:00:58 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempEN1376.html [2011-05-05 08:00:58 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempve1376.html [2011-05-04 07:52:12 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempGD3088.html [2011-05-04 07:52:12 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempPF3088.html [2011-05-01 14:41:16 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemppJ4048.html [2011-04-29 08:20:37 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempVP3444.html [2011-04-29 08:20:37 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempnp3444.html [2011-04-28 08:05:30 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempHk3104.html [2011-04-28 08:05:30 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempNJ3104.html [2011-04-27 08:25:48 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempvZ2932.html [2011-04-27 08:25:48 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempNU2932.html [2011-04-26 17:51:33 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemptZ3404.html [2011-04-26 07:57:34 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemprlX948.html [2011-04-26 07:57:34 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempJug948.html [2011-04-22 08:38:52 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempvK2316.html [2011-04-22 08:38:52 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempAO2316.html [2011-04-21 08:08:48 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempXv2520.html [2011-04-21 08:08:48 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempdm2520.html [2011-04-20 08:05:42 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempzn2628.html [2011-04-20 08:05:42 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempSX2628.html [2011-04-19 08:02:24 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temptt3248.html [2011-04-19 08:02:24 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempGv3248.html [2011-04-18 08:24:19 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempPJ1400.html [2011-04-15 12:39:44 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempKc2880.html [2011-04-15 12:39:44 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempJp2880.html [2011-04-15 08:07:06 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempng3940.html [2011-04-15 08:07:06 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempUh3940.html [2011-04-14 08:04:33 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempdZ1680.html [2011-04-14 08:04:33 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempUd1680.html [2011-04-13 08:12:37 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempgtHi12.html [2011-04-13 08:12:37 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempfxEh12.html [2011-04-12 21:41:31 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempuz2964.html [2011-04-12 21:41:31 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemppQ2964.html [2011-04-12 08:05:38 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempqT3188.html [2011-04-12 08:05:38 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempQN3188.html [2011-04-11 08:06:35 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempwL2616.html [2011-04-11 08:06:35 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempQv2616.html [2011-04-10 14:36:42 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempiB3336.html [2011-04-10 14:36:42 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempQh3336.html [2011-04-09 17:51:29 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempfXu500.html [2011-04-08 08:07:52 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempZV3276.html [2011-04-08 08:07:52 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempSp3276.html [2011-04-07 18:36:03 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Templcq412.html [2011-04-07 08:12:45 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temppm2856.html [2011-04-07 08:12:45 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempTf2856.html [2011-04-06 23:03:13 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempUp3020.html [2011-04-06 08:16:41 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempRl3636.html [2011-04-06 08:16:41 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempdM3636.html [2011-04-05 20:41:43 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempVj3564.html [2011-04-05 20:41:43 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempDo3564.html [2011-04-05 08:08:23 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempOQa564.html [2011-04-05 08:08:23 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempDbV564.html [2011-04-04 20:56:56 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempvX2628.html [2011-04-04 18:08:19 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempij4276.html [2011-04-04 18:08:19 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempku4276.html [2011-04-04 08:17:37 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempFg2840.html [2011-04-04 08:17:37 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temppa2840.html [2011-04-03 12:45:18 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempea1768.html [2011-04-03 12:45:18 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemptG1768.html [2011-04-03 00:24:30 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempEk2984.html [2011-04-03 00:24:30 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempRa2984.html [2011-03-27 17:33:17 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempzQ3948.html [2011-03-27 17:33:17 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempMO3948.html [2011-03-25 09:04:21 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempBT3364.html [2011-03-25 09:04:21 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempnB3364.html [2011-03-24 22:23:47 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempZLI976.html [2011-03-24 22:23:47 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempvco976.html [2011-03-24 09:18:29 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempxq1428.html [2011-03-24 09:18:29 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempRm1428.html [2011-03-23 09:06:16 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempbC2020.html [2011-03-23 09:06:16 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempRB2020.html [2011-03-22 12:22:27 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempVPb872.html [2011-03-22 12:22:27 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempgMP872.html [2011-03-21 10:17:23 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempWn4780.html [2011-03-21 10:17:23 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temphz4780.html [2011-03-20 12:03:19 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Templf1388.html [2011-03-20 00:46:23 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempsz3560.html [2011-03-18 09:06:08 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemprL3192.html [2011-03-18 09:06:08 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempso3192.html [2011-03-17 15:04:14 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempMB2052.html [2011-03-17 15:04:14 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempVc2052.html [2011-03-17 13:28:51 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempNn2200.html [2011-03-17 09:06:32 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempHGu952.html [2011-03-17 09:06:32 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemptbH952.html [2011-03-16 20:22:15 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempBY4004.html [2011-03-16 09:05:54 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempzN2408.html [2011-03-16 09:05:54 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempcx2408.html [2011-03-15 08:45:18 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempiA1528.html [2011-03-15 08:45:18 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempPE1528.html [2011-03-14 11:11:23 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempiW3068.html [2011-03-14 11:11:23 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempsG3068.html [2011-03-13 23:41:43 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempwt4976.html [2011-03-13 23:41:43 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempBr4976.html [2011-03-11 22:10:09 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temppq3680.html [2011-03-11 22:10:09 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempqf3680.html [2011-03-11 21:39:48 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempYQ1676.html [2011-03-11 21:39:48 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempqd1676.html [2011-03-11 09:06:01 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempqV3236.html [2011-03-11 09:06:01 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempYk3236.html [2011-03-10 09:08:48 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempHK4512.html [2011-03-10 09:08:48 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempKz4512.html [2011-03-09 09:07:42 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempgi1672.html [2011-03-09 09:07:42 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempnq1672.html [2011-03-08 09:10:35 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempEf2220.html [2011-03-08 09:10:35 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempjH2220.html [2011-03-07 20:38:38 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempig3616.html [2011-03-07 20:38:38 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempAB3616.html [2011-03-07 09:12:59 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempII3532.html [2011-03-07 09:12:59 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempze3532.html [2011-03-04 09:06:35 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempLH3184.html [2011-03-04 09:06:35 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempsm3184.html [2011-03-03 09:12:53 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempyJ2808.html [2011-03-03 09:12:53 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempWW2808.html [2011-03-02 09:02:40 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempfS1472.html [2011-03-02 09:02:40 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempeE1472.html [2011-03-01 09:14:24 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempOP3012.html [2011-03-01 09:14:24 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempPb3012.html [2011-02-25 09:17:22 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempUX3072.html [2011-02-25 09:17:22 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempUZ3072.html [2011-02-24 08:43:31 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempYt2380.html [2011-02-24 08:43:31 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempSA2380.html [2011-02-23 09:09:10 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempMa3084.html [2011-02-23 09:09:10 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempfw3084.html [2011-02-22 13:41:02 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempOW2500.html [2011-02-22 13:41:02 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempFf2500.html [2011-02-22 09:04:32 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempCk2340.html [2011-02-22 09:04:32 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempQA2340.html [2011-02-21 09:07:57 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempPw1352.html [2011-02-21 09:07:57 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempey1352.html [2011-02-18 09:02:57 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempvWH884.html [2011-02-18 09:02:57 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempaEI884.html [2011-02-17 09:07:01 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempQI1572.html [2011-02-17 09:07:01 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempEr1572.html [2011-02-16 09:19:17 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempIE3584.html [2011-02-16 09:19:17 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemplR3584.html [2011-02-15 09:05:06 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempup2416.html [2011-02-15 09:05:06 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempME2416.html [2011-02-14 09:09:32 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempNv5860.html [2011-02-14 09:09:32 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Templi5860.html [2011-02-11 09:12:18 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempJs2844.html [2011-02-11 09:12:18 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempJx2844.html [2011-02-10 09:47:06 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempXL1672.html [2011-02-10 09:47:06 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempiK1672.html [2011-02-09 20:37:19 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemptF2472.html [2011-02-09 20:37:19 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempsY2472.html [2011-02-09 09:05:00 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempXv1988.html [2011-02-09 09:05:00 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempXQ1988.html [2011-02-08 21:27:09 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempUI4744.html [2011-02-08 21:27:09 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempmg4744.html [2011-02-07 19:00:59 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempuP2648.html [2011-02-04 09:08:05 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempdR2020.html [2011-02-04 09:08:05 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempWa2020.html [2011-02-03 09:10:09 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempOuF896.html [2011-02-03 09:10:09 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempRJZ896.html [2011-02-02 09:06:33 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempVG3144.html [2011-02-02 09:06:33 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempCB3144.html [2011-02-01 21:55:12 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempSg2612.html [2011-02-01 17:33:49 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemphpO816.html [2011-02-01 17:33:49 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempicD816.html [2011-02-01 09:03:02 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempPH3304.html [2011-02-01 09:03:02 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempOJ3304.html [2011-01-31 23:02:26 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempRib400.html [2011-01-31 23:02:26 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempWar400.html [2011-01-31 09:06:51 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempOF2580.html [2011-01-31 09:06:51 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempWB2580.html [2011-01-30 19:30:11 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempKE2844.html [2011-01-29 18:47:39 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempuX3116.html [2011-01-29 17:00:24 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe [2011-01-29 17:00:22 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll [2011-01-29 17:00:22 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll [2011-01-29 17:00:22 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll [2011-01-29 17:00:22 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll [2011-01-29 11:07:27 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temppp2724.html [2011-01-29 11:07:27 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempgF2724.html [2011-01-28 20:33:21 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempOl2424.html [2011-01-28 09:18:06 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempWy2460.html [2011-01-28 09:18:06 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempuf2460.html [2011-01-27 22:15:01 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempgW3348.html [2011-01-27 22:15:01 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempmC3348.html [2011-01-27 09:08:19 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempBj2972.html [2011-01-27 09:08:19 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemprK2972.html [2011-01-26 09:13:50 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempaJ1948.html [2011-01-26 09:13:50 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempMt1948.html [2011-01-25 09:26:27 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempvo1808.html [2011-01-25 09:26:27 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempvw1808.html [2011-01-24 09:07:19 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempMT2072.html [2011-01-24 09:07:19 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempIX2072.html [2011-01-21 09:14:07 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempPp1596.html [2011-01-21 09:14:07 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempHa1596.html [2011-01-20 09:25:16 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempfm3420.html [2011-01-20 09:25:16 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempcy3420.html [2011-01-19 09:14:31 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempaQ1748.html [2011-01-19 09:14:31 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempNB1748.html [2011-01-18 09:24:58 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempuZ3608.html [2011-01-17 09:27:17 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempKy2748.html [2011-01-14 10:13:24 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempof2616.html [2011-01-14 10:13:24 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temptt2616.html [2011-01-12 17:23:47 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemplO2704.html [2011-01-11 08:37:15 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempig3336.html [2011-01-07 13:47:38 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempTX3476.html [2011-01-07 00:29:54 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemphC6032.html [2011-01-07 00:29:54 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempYV6032.html [2011-01-06 18:32:26 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempcg1624.html [2011-01-03 21:55:30 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempGk2488.html [2010-12-20 10:56:56 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempbac352.html [2010-12-17 20:49:42 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempdJ3432.html [2010-12-17 20:49:42 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempJb3432.html [2010-12-17 09:56:18 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempuJ4392.html [2010-12-17 09:26:22 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempfZ2316.html [2010-12-07 00:38:59 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempax2324.html [2010-12-06 01:40:31 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempCh2768.html [2010-12-06 00:38:34 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempsv1672.html [2010-12-02 20:57:28 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempAUh820.html [2010-12-02 20:57:28 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempEes820.html [2010-12-02 13:29:53 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempxz2988.html [2010-12-02 13:29:53 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempZf2988.html [2010-11-09 10:11:38 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temprz4048.html [2010-11-09 10:11:38 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemprY4048.html [2010-09-20 20:21:27 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemprC2980.html [2010-09-20 20:21:27 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempCo2980.html [2010-09-20 20:21:06 | 000,000,680 | ---- | C] () -- C:\Users\Iwo\AppData\Local\d3d9caps.dat [2010-09-20 17:52:47 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempwb3980.html [2010-09-20 17:52:47 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Templk3980.html [2010-09-09 18:32:53 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempuY1392.html [2010-09-09 18:32:53 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempNe1392.html [2010-09-08 17:44:47 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempIm2940.html [2010-09-01 14:44:33 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempvg4896.html [2010-09-01 14:44:33 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempFB4896.html [2010-09-01 14:32:35 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempih3020.html [2010-09-01 14:32:35 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempIM3020.html [2010-09-01 11:49:53 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempYg2580.html [2010-09-01 11:49:53 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempSd2580.html [2010-08-29 11:43:54 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempvM3400.html [2010-08-29 11:43:54 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemppI3400.html [2010-08-28 20:53:29 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempjy2580.html [2010-08-28 20:53:29 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempOH2580.html [2010-08-28 20:09:34 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempwh1628.html [2010-08-28 20:09:34 | 000,000,000 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempDl1628.html [2010-08-28 18:20:35 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempHV3264.html [2010-08-28 18:20:35 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempig3264.html [2010-08-27 19:07:00 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempAx1776.html [2010-08-27 19:07:00 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempKG1776.html [2010-08-27 09:37:46 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempjz1628.html [2010-08-26 20:56:42 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempVT5128.html [2010-08-26 20:56:42 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempEH5128.html [2010-08-26 14:20:06 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempPY2840.html [2010-08-26 10:25:55 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempHt1064.html [2010-08-26 10:25:55 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempis1064.html [2010-08-25 09:28:36 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempBI2796.html [2010-08-25 09:28:36 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temphz2796.html [2010-08-23 18:05:18 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempWF3080.html [2010-08-22 23:26:20 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempnC1480.html [2010-08-22 23:26:20 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temptz1480.html [2010-08-22 22:22:25 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempFA3244.html [2010-08-22 22:22:25 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempyJ3244.html [2010-08-22 16:03:38 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempMr4004.html [2010-08-22 16:03:38 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempSh4004.html [2010-08-21 22:14:29 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempCy2680.html [2010-08-21 22:14:29 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemprU2680.html [2010-08-21 15:46:47 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Templrq896.html [2010-08-21 15:46:47 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempACp896.html [2010-08-20 16:08:29 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempgb3884.html [2010-08-20 11:17:23 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempLk3372.html [2010-08-19 23:00:26 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temprg3152.html [2010-08-19 12:51:08 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempbF5888.html [2010-08-19 12:51:08 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempho5888.html [2010-08-19 12:48:49 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempoq2988.html [2010-08-19 12:48:49 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempux2988.html [2010-08-19 12:32:47 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempmiK804.html [2010-08-19 12:32:47 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempkAl804.html [2010-08-18 17:26:44 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempzD2696.html [2010-08-17 20:46:06 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempsV1356.html [2010-08-17 20:46:06 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempXt1356.html [2010-08-16 13:51:08 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempqV2712.html [2010-08-16 13:51:08 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempsX2712.html [2010-08-02 14:25:07 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempvV2216.html [2010-08-02 14:25:07 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempSN2216.html [2010-08-01 16:54:41 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempGw3480.html [2010-08-01 16:54:41 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempAE3480.html [2010-07-17 11:30:37 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempRh2816.html [2010-07-17 11:30:37 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempTm2816.html [2010-07-16 18:19:52 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempMZ3252.html [2010-07-14 13:50:59 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempnc3216.html [2010-07-14 13:50:59 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempdZ3216.html [2010-07-14 13:22:29 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempzz3196.html [2010-07-14 13:22:29 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempye3196.html [2010-07-14 11:47:42 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temprg3108.html [2010-07-14 11:47:42 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempfv3108.html [2010-07-14 11:13:15 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempVb3928.html [2010-07-14 11:13:15 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempLQ3928.html [2010-07-14 04:56:35 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempAl2508.html [2010-07-14 04:56:35 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempKE2508.html [2010-07-13 20:41:03 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempbq3108.html [2010-07-13 20:41:03 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempHX3108.html [2010-07-13 12:38:39 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempDX2020.html [2010-07-13 12:38:39 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempfi2020.html [2010-07-13 00:27:43 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempwB2500.html [2010-07-13 00:27:43 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemplI2500.html [2010-07-12 18:34:04 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempDU2828.html [2010-07-12 18:34:04 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempaL2828.html [2010-07-12 14:59:27 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempOS3004.html [2010-07-12 14:59:27 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempxe3004.html [2010-07-12 10:16:50 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempYc2828.html [2010-07-12 10:16:50 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempAk2828.html [2010-07-11 16:33:20 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempSz1796.html [2010-07-11 16:33:20 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempae1796.html [2010-07-11 12:09:34 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempUw2308.html [2010-07-11 12:09:34 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemptA2308.html [2010-07-11 05:15:14 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempyq3800.html [2010-07-11 05:15:14 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempQP3800.html [2010-07-10 18:02:37 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempTv3272.html [2010-07-10 18:02:37 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempVe3272.html [2010-07-10 06:48:45 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempnS2868.html [2010-07-10 06:48:45 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempPI2868.html [2010-07-09 21:37:20 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempHb3476.html [2010-07-09 21:37:20 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempDo3476.html [2010-07-09 13:03:18 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempgu2524.html [2010-07-09 13:03:18 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempGI2524.html [2010-07-08 17:38:51 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempPJ1760.html [2010-07-08 17:38:51 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempOJ1760.html [2010-07-08 04:48:29 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempmz3884.html [2010-07-08 04:48:28 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempqz3884.html [2010-07-07 18:29:03 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemprJ3420.html [2010-07-07 18:29:03 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempVF3420.html [2010-07-07 12:38:41 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempof3976.html [2010-07-07 12:38:41 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempIb3976.html [2010-07-06 17:30:17 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempRr3360.html [2010-07-06 17:30:17 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempjC3360.html [2010-07-06 17:19:24 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempDa3928.html [2010-07-06 17:19:24 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempUf3928.html [2010-07-06 06:17:38 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempBd3444.html [2010-07-06 06:17:38 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempTM3444.html [2010-07-06 04:23:21 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempkV1696.html [2010-07-06 04:23:21 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempVC1696.html [2010-07-05 10:58:26 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempIC2732.html [2010-07-05 10:58:26 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempHz2732.html [2010-07-05 04:27:17 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempnG1696.html [2010-07-05 04:27:17 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempZr1696.html [2010-07-04 15:28:47 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemplM1632.html [2010-07-04 15:28:47 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempJt1632.html [2010-07-04 13:01:36 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempwf2684.html [2010-07-04 13:01:36 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempym2684.html [2010-07-03 21:46:32 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempJw4688.html [2010-07-03 21:46:32 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempaY4688.html [2010-07-03 12:35:41 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempvV1648.html [2010-07-01 21:05:02 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempnF3532.html [2010-07-01 21:05:02 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempSr3532.html [2010-07-01 10:30:47 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempXi4092.html [2010-07-01 10:30:47 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemphN4092.html [2010-07-01 05:52:34 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempOE3476.html [2010-07-01 05:52:34 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempRV3476.html [2010-06-30 17:55:36 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temprl2656.html [2010-06-30 17:55:36 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempwZ2656.html [2010-06-30 12:42:16 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempAa2952.html [2010-06-30 12:42:16 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempAM2952.html [2010-06-29 18:05:22 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempJy1928.html [2010-06-29 18:05:22 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempWG1928.html [2010-06-29 04:11:42 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempXMt904.html [2010-06-29 04:11:42 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempvks904.html [2010-06-28 21:41:22 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempCX2828.html [2010-06-28 21:41:22 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempaW2828.html [2010-06-28 14:15:47 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempxj2996.html [2010-06-28 14:15:47 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemprD2996.html [2010-06-28 08:42:51 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempWu2184.html [2010-06-28 08:42:51 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempXt2184.html [2010-06-26 03:44:37 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempnU3112.html [2010-06-26 03:44:37 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempLP3112.html [2010-06-25 18:15:45 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempKk4072.html [2010-06-25 18:15:45 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempVj4072.html [2010-06-25 15:40:24 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempaf1196.html [2010-06-25 15:40:24 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempMV1196.html [2010-06-24 15:33:22 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempWu2788.html [2010-06-24 15:33:22 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempSk2788.html [2010-06-24 05:05:01 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempTk3972.html [2010-06-24 05:05:01 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temptm3972.html [2010-06-23 20:04:09 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Temprl1592.html [2010-06-23 20:04:09 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempAe1592.html [2010-06-23 17:56:59 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\Tempex4060.html [2010-06-23 17:56:59 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempCp4060.html [2010-06-22 14:53:03 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010-06-22 13:45:15 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempHa3176.html [2010-06-22 13:45:15 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempAU3176.html [2010-06-14 11:58:08 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempUsZ232.html [2010-06-13 17:22:45 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempFi1524.html [2010-06-08 14:40:58 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempIT3888.html [2010-06-08 14:40:58 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TemphZ3888.html [2010-06-07 17:04:54 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempLk5332.html [2010-06-07 17:04:54 | 000,002,089 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempYe5332.html [2010-06-07 12:33:44 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempnU3828.html [2010-05-16 22:02:09 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempoP3088.html [2010-05-12 21:07:42 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempXh3468.html [2010-05-06 18:28:41 | 000,002,432 | ---- | C] () -- C:\Users\Iwo\AppData\Local\TempfIx544.html [2010-03-18 19:16:16 | 000,104,448 | ---- | C] () -- C:\Users\Iwo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-03-15 20:44:34 | 000,441,653 | ---- | C] () -- C:\ProgramData\nvModes.001 [2010-03-15 20:41:39 | 000,441,653 | ---- | C] () -- C:\ProgramData\nvModes.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2006-11-02 13:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2011-01-21 16:46:32 | 011,582,464 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2008-01-21 03:24:24 | 000,614,400 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2008-01-21 03:24:03 | 000,347,648 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2011-02-14 09:06:24 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\ESET [2012-12-26 03:10:45 | 000,000,000 | ---D | M] -- C:\Users\Iwo\AppData\Roaming\BitTorrent [2012-02-10 01:56:54 | 000,000,000 | ---D | M] -- C:\Users\Iwo\AppData\Roaming\Complitly [2011-09-25 21:53:34 | 000,000,000 | ---D | M] -- C:\Users\Iwo\AppData\Roaming\Dropbox [2010-05-11 15:28:27 | 000,000,000 | ---D | M] -- C:\Users\Iwo\AppData\Roaming\ESET [2010-06-25 06:13:34 | 000,000,000 | ---D | M] -- C:\Users\Iwo\AppData\Roaming\Facebook [2012-12-26 03:10:45 | 000,000,000 | ---D | M] -- C:\Users\Iwo\AppData\Roaming\FileZilla [2012-11-10 00:36:44 | 000,000,000 | ---D | M] -- C:\Users\Iwo\AppData\Roaming\Freecorder 7 Audio [2010-05-11 13:16:57 | 000,000,000 | ---D | M] -- C:\Users\Iwo\AppData\Roaming\Gadu-Gadu 10 [2012-11-29 22:53:33 | 000,000,000 | ---D | M] -- C:\Users\Iwo\AppData\Roaming\ipla [2011-04-14 09:45:20 | 000,000,000 | ---D | M] -- C:\Users\Iwo\AppData\Roaming\Leadertech [2010-11-09 11:41:24 | 000,000,000 | ---D | M] -- C:\Users\Iwo\AppData\Roaming\Markets.com MarketTrader [2012-05-05 16:35:23 | 000,000,000 | ---D | M] -- C:\Users\Iwo\AppData\Roaming\OpenCandy [2010-12-17 09:56:36 | 000,000,000 | ---D | M] -- C:\Users\Iwo\AppData\Roaming\OpenFM [2010-12-06 00:54:19 | 000,000,000 | ---D | M] -- C:\Users\Iwo\AppData\Roaming\Samsung [color=#E56717]========== Purity Check ==========[/color] < End of report >