Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-10-2013
Ran by endorro (administrator) on PLATKOVS-31410D on 18-10-2013 18:01:59
Running from C:\Documents and Settings\endorro\Moje dokumenty\Pobieranie
Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Intel Corporation) C:\WINDOWS\system32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\system32\igfxpers.exe
(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(BitTorrent Inc.) C:\Program Files\uTorrent\uTorrent.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apntex.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(Bandoo Media Inc.) C:\Program Files\Movies Toolbar\Datamngr\DatamngrCoordinator.exe
() C:\WINDOWS\system32\dmwu.exe
(Bandoo Media Inc.) C:\Program Files\Movies Toolbar\Datamngr\DatamngrCoordinator.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Bandoo Media Inc.) C:\Program Files\Movies Toolbar\Datamngr\DatamngrUI.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
() C:\WINDOWS\system32\jmdp\stij.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AzMixerSel] - C:\Program Files\Realtek\Audio\Drivers\AzMixerSel.exe [53248 2006-07-17] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint2K\Apoint.exe [159744 2007-07-21] (Alps Electric Co., Ltd.)
HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [RTHDCPL] - C:\Windows\RTHDCPL.EXE [18084864 2009-01-13] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Alcmtr] - C:\Windows\ALCMTR.EXE [57344 2008-06-19] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [ApnTBMon] - C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1673680 2013-10-16] (APN)
HKCU\...\Run: [uTorrent] - C:\Program Files\uTorrent\uTorrent.exe [802136 2013-05-05] (BitTorrent Inc.)
HKCU\...\Run: [UpdateMyDrivers] - C:\Program Files\SmartTweak Software\UpdateMyDrivers\UpdateMyDrivers.exe /ot /as /ss
HKCU\...\Run: [ALLUpdate] - "C:\Program Files\ALLPlayer\ALLUpdate.exe" "sleep"
HKCU\...\Run: [Facebook Update] - C:\Documents and Settings\endorro\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe [138096 2013-02-10] (Facebook Inc.)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20684656 2013-07-25] (Skype Technologies S.A.)
HKCU\...\Run: [CancelAutoPlay] - C:\Program Files\Telenor\Miniruter_MF91D\CancelAutoPlay.exe
HKCU\...\Run: [iLivid] - C:\Documents and Settings\endorro\Ustawienia lokalne\Dane aplikacji\iLivid\iLivid.exe [6827008 2013-09-09] (Bandoo Media Inc.)
MountPoints2: E - E:\TelenorMiniruter_MF91D.exe /s
MountPoints2: {0a88dda6-8275-11e2-9456-00235aeba2e0} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Common_Handset_USB_Driver.exe
MountPoints2: {102e14b1-5012-11e2-93df-00235aeba2e0} - F:\Startme.exe
MountPoints2: {19ee14bf-0e60-11e2-9334-00235aeba2e0} - RunClubSanDisk.exe
MountPoints2: {22fbb1e8-e16e-11e2-9502-00235aeba2e0} - E:\TelenorMiniruter_MF91D.exe /s
MountPoints2: {22fbb1eb-e16e-11e2-9502-00235aeba2e0} - E:\TelenorMiniruter_MF91D.exe /s
AppInit_DLLs: C:\DOCUME~1\ALLUSE~1\DANEAP~1\Wincert\WIN32C~1.DLL C:\PROGRA~1\MOVIES~1\Datamngr\mgrldr.dll  [ 2013-09-24] ()
IMEO\bitguard.exe: [Debugger] tasklist.exe
IMEO\bprotect.exe: [Debugger] tasklist.exe
IMEO\browserdefender.exe: [Debugger] tasklist.exe
IMEO\browserprotect.exe: [Debugger] tasklist.exe
Lsa: [Authentication Packages] msv1_0 nwprovau

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.search.ask.com/?o=APN10645A&gct=hp&d=406-420&v=a9396-116&t=4
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=prs&from=prs&uid=67194_16910336_67167133_3219913727_B0DB4E7A&ts=1356562866
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.delta-search.com/?babsrc=HP_ss&mntrId=B0DB0025568C05E6&affID=120606&tsp=4931
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=prs&from=prs&uid=67194_16910336_67167133_3219913727_B0DB4E7A&ts=1356562866
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/?utm_source=b&utm_medium=prs&from=prs&uid=67194_16910336_67167133_3219913727_B0DB4E7A&ts=1356562866
URLSearchHook: uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files\uTorrentControl_v2\prxtbuTo0.dll (Conduit Ltd.)
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=420&systemid=406&v=a9396-116&apn_uid=3155637608954780&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKCU - DefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://mystart.incredibar.com/?a=6OyZn96Aci&loc=skw&search={searchTerms}
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.v9.com/web/?q={searchTerms}
SearchScopes: HKCU - {0C2BC48E-A5D0-41B4-A0DF-3ACFF6004369} URL = http://websearch.ask.com/redirect?client=ie&tb=STT&o=102866&src=crm&q={searchTerms}&locale=&apn_ptnrs=^5N&apn_dtid=^YYYYYY^YY^NL&apn_uid=381FFDA9-75E8-4A7E-A08D-13291BBB39B4&apn_sauid=5AAF6651-57BC-419A-927E-ABECD0E240FB
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=B0DB0025568C05E6&affID=120606&tsp=4931
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.v9.com/web/?q={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=420&systemid=406&v=a9396-116&apn_uid=3155637608954780&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3220468
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://mystart.incredibar.com/?a=6OyZn96Aci&loc=skw&search={searchTerms}
BHO: ALLYouTubeDownloader - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\PROGRA~1\ALLYOU~1\ALLYOU~1.DLL (ALLCinema Ltd.)
BHO: Incredibar.com Helper Object - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Program Files\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll (Montera Technologeis LTD)
BHO: uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files\uTorrentControl_v2\prxtbuTo0.dll (Conduit Ltd.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.21.5\bh\delta.dll (Delta-search.com)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files\uTorrentControl_v2\prxtbuTo0.dll (Conduit Ltd.)
Toolbar: HKLM - Incredibar Toolbar - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll (Montera Technologeis LTD)
Toolbar: HKLM - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.21.5\deltaTlbr.dll (Delta-search.com)
Toolbar: HKCU -uTorrentControl_v2 Toolbar - {7473B6BD-4691-4744-A82B-7854EB3D70B6} - C:\Program Files\uTorrentControl_v2\prxtbuTo0.dll (Conduit Ltd.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 84.208.20.110 84.208.20.111 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Documents and Settings\endorro\Dane aplikacji\Mozilla\Firefox\Profiles\fx8adpci.default
FF user.js: detected! => C:\Documents and Settings\endorro\Dane aplikacji\Mozilla\Firefox\Profiles\fx8adpci.default\user.js
FF Homepage: user_pref("CT3220468.url_history0001.enc", "aHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTcyLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTc2LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTgwLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTg0LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTg5LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTkzLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTk3LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjAxLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjA1LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjA5LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjE1LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjIwLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjI0LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjI4LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjMyLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjM3");user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1379166159019,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");user_pref("Datamngr.Updater.Enabled", "true");user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3220468&SearchSource=13");user_pref("Smartbar.ConduitSearchEngineList", "");user_pref("Smartbar.ConduitSearchUrlList", "");user_pref("Smartbar.keywordURLSelectedCTID", "CT3220468");user_pref("accessibility.typeaheadfind.flashBar", 0);user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1382036550);user_pref("app.update.lastUpdateTime.background-update-timer", 1382109185);user_pref("app.update.lastUpdateTime.blocklist-background-update-timer", 1382089603);user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 1382108945);user_pref("app.update.lastUpdateTime.search-engine-update-timer", 1382109065);user_pref("browser.cache.disk.capacity", 358400);user_pref("browser.cache.disk.smart_size.first_run", false);user_pref("browser.cache.disk.smart_size.use_old_max", false);user_pref("browser.cache.disk.smart_size_cached_value", 358400);user_pref("browser.download.lastDir", "C:\\Documents and Settings\\endorro\\Pulpit");user_pref("browser.download.manager.alertOnEXEOpen", false);user_pref("browser.download.panel.firstSessionCompleted", true);user_pref("browser.download.panel.shown", true);user_pref("browser.formfill.enable", false);user_pref("browser.keywordURLPromptDeclined", 1);user_pref("browser.migration.version", 13);user_pref("browser.newtabpage.storageVersion", 1);user_pref("browser.pagethumbnails.storage_version", 3);user_pref("browser.places.smartBookmarksVersion", 4);user_pref("browser.rights.3.shown", true);user_pref("browser.search.defaultengine", "Ask Search");user_pref("browser.search.defaultenginename", "Ask Search");user_pref("browser.search.order.1", "Ask.com");user_pref("browser.search.selectedEngine", "");user_pref("browser.search.suggest.enabled", false);user_pref("browser.search.useDBForOrder", true);user_pref("browser.slowStartup.averageTime", 16457);user_pref("browser.slowStartup.samples", 1);hxxp://www.search.ask.com/?o=APN10645A&gct=hp&d=406-420&v=a9396-116&t=4");user_pref("browser.startup.homepage_override.buildID", "20130910160258");user_pref("browser.startup.homepage_override.mstone", "24.0");user_pref("browser.syncPromoViewsLeftMap", "{\"bookmarks\":0,\"passwords\":0}");user_pref("datareporting.healthreport.currentDaySubmissionFailureCount", 1);user_pref("datareporting.healthreport.lastDataSubmissionFailureTime", "1379256257747");user_pref("datareporting.healthreport.lastDataSubmissionRequestedTime", "1380138056084");user_pref("datareporting.healthreport.lastDataSubmissionSuccessfulTime", "1380041304627");user_pref("datareporting.healthreport.nextDataSubmissionTime", "1380138956084");user_pref("browser.startup.homepage", "hxxp://mystart.incredibar.com/?a=6OyZn96Aci&loc=skw");user_pref("keyword.URL", "hxxp://mystart.incredibar.com/?a=6OyZn96Aci&loc=skw&search=");user_pref("browser.newtab.url","hxxp://mystart.incredibar.com/?a=6OyZn96Aci&loc=skwuser_pref("datareporting.healthreport.service.firstRun", true);
FF NewTab: user_pref("CT3220468.url_history0001.enc", "aHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTcyLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTc2LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTgwLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTg0LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTg5LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTkzLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTk3LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjAxLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjA1LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjA5LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjE1LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjIwLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjI0LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjI4LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjMyLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjM3");user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1379166159019,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");user_pref("Datamngr.Updater.Enabled", "true");user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3220468&SearchSource=13");user_pref("Smartbar.ConduitSearchEngineList", "");user_pref("Smartbar.ConduitSearchUrlList", "");user_pref("Smartbar.keywordURLSelectedCTID", "CT3220468");user_pref("accessibility.typeaheadfind.flashBar", 0);user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1382036550);user_pref("app.update.lastUpdateTime.background-update-timer", 1382109185);user_pref("app.update.lastUpdateTime.blocklist-background-update-timer", 1382089603);user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 1382108945);user_pref("app.update.lastUpdateTime.search-engine-update-timer", 1382109065);user_pref("browser.cache.disk.capacity", 358400);user_pref("browser.cache.disk.smart_size.first_run", false);user_pref("browser.cache.disk.smart_size.use_old_max", false);user_pref("browser.cache.disk.smart_size_cached_value", 358400);user_pref("browser.download.lastDir", "C:\\Documents and Settings\\endorro\\Pulpit");user_pref("browser.download.manager.alertOnEXEOpen", false);user_pref("browser.download.panel.firstSessionCompleted", true);user_pref("browser.download.panel.shown", true);user_pref("browser.formfill.enable", false);user_pref("browser.keywordURLPromptDeclined", 1);user_pref("browser.migration.version", 13);user_pref("browser.newtabpage.storageVersion", 1);user_pref("browser.pagethumbnails.storage_version", 3);user_pref("browser.places.smartBookmarksVersion", 4);user_pref("browser.rights.3.shown", true);user_pref("browser.search.defaultengine", "Ask Search");user_pref("browser.search.defaultenginename", "Ask Search");user_pref("browser.search.order.1", "Ask.com");user_pref("browser.search.selectedEngine", "");user_pref("browser.search.suggest.enabled", false);user_pref("browser.search.useDBForOrder", true);user_pref("browser.slowStartup.averageTime", 16457);user_pref("browser.slowStartup.samples", 1);user_pref("browser.startup.homepage", "hxxp://www.search.ask.com/?o=APN10645A&gct=hp&d=406-420&v=a9396-116&t=4");user_pref("browser.startup.homepage_override.buildID", "20130910160258");user_pref("browser.startup.homepage_override.mstone", "24.0");user_pref("browser.syncPromoViewsLeftMap", "{\"bookmarks\":0,\"passwords\":0}");user_pref("datareporting.healthreport.currentDaySubmissionFailureCount", 1);user_pref("datareporting.healthreport.lastDataSubmissionFailureTime", "1379256257747");user_pref("datareporting.healthreport.lastDataSubmissionRequestedTime", "1380138056084");user_pref("datareporting.healthreport.lastDataSubmissionSuccessfulTime", "1380041304627");user_pref("datareporting.healthreport.nextDataSubmissionTime", "1380138956084");user_pref("browser.startup.homepage", "hxxp://mystart.incredibar.com/?a=6OyZn96Aci&loc=skw");user_pref("keyword.URL", "hxxp://mystart.incredibar.com/?a=6OyZn96Aci&loc=skw&search=");user_pref("browser.newtab.url","hxxp://mystart.incredibar.com/?a=6OyZn96Aci&loc=skw");user_pref("datareporting.healthreport.service.firstRun", true);
FF Keyword.URL: user_pref("CT3220468.url_history0001.enc", "aHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTcyLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTc2LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTgwLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTg0LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTg5LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTkzLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTk3LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjAxLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjA1LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjA5LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjE1LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjIwLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjI0LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjI4LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjMyLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjM3");user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1379166159019,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");user_pref("Datamngr.Updater.Enabled", "true");user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3220468&SearchSource=13");user_pref("Smartbar.ConduitSearchEngineList", "");user_pref("Smartbar.ConduitSearchUrlList", "");user_pref("Smartbar.keywordURLSelectedCTID", "CT3220468");user_pref("accessibility.typeaheadfind.flashBar", 0);user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1382036550);user_pref("app.update.lastUpdateTime.background-update-timer", 1382109185);user_pref("app.update.lastUpdateTime.blocklist-background-update-timer", 1382089603);user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 1382108945);user_pref("app.update.lastUpdateTime.search-engine-update-timer", 1382109065);user_pref("browser.cache.disk.capacity", 358400);user_pref("browser.cache.disk.smart_size.first_run", false);user_pref("browser.cache.disk.smart_size.use_old_max", false);user_pref("browser.cache.disk.smart_size_cached_value", 358400);user_pref("browser.download.lastDir", "C:\\Documents and Settings\\endorro\\Pulpit");user_pref("browser.download.manager.alertOnEXEOpen", false);user_pref("browser.download.panel.firstSessionCompleted", true);user_pref("browser.download.panel.shown", true);user_pref("browser.formfill.enable", false);user_pref("browser.keywordURLPromptDeclined", 1);user_pref("browser.migration.version", 13);user_pref("browser.newtabpage.storageVersion", 1);user_pref("browser.pagethumbnails.storage_version", 3);user_pref("browser.places.smartBookmarksVersion", 4);user_pref("browser.rights.3.shown", true);user_pref("browser.search.defaultengine", "Ask Search");user_pref("browser.search.defaultenginename", "Ask Search");user_pref("browser.search.order.1", "Ask.com");user_pref("browser.search.selectedEngine", "");user_pref("browser.search.suggest.enabled", false);user_pref("browser.search.useDBForOrder", true);user_pref("browser.slowStartup.averageTime", 16457);user_pref("browser.slowStartup.samples", 1);user_pref("browser.startup.homepage", "hxxp://www.search.ask.com/?o=APN10645A&gct=hp&d=406-420&v=a9396-116&t=4");user_pref("browser.startup.homepage_override.buildID", "20130910160258");user_pref("browser.startup.homepage_override.mstone", "24.0");user_pref("browser.syncPromoViewsLeftMap", "{\"bookmarks\":0,\"passwords\":0}");user_pref("datareporting.healthreport.currentDaySubmissionFailureCount", 1);user_pref("datareporting.healthreport.lastDataSubmissionFailureTime", "1379256257747");user_pref("datareporting.healthreport.lastDataSubmissionRequestedTime", "1380138056084");user_pref("datareporting.healthreport.lastDataSubmissionSuccessfulTime", "1380041304627");user_pref("datareporting.healthreport.nextDataSubmissionTime", "1380138956084");user_pref("browser.startup.homepage", "hxxp://mystart.incredibar.com/?a=6OyZn96Aci&loc=skw");hxxp://mystart.incredibar.com/?a=6OyZn96Aci&loc=skw&search=");user_pref("browser.newtab.url","hxxp://mystart.incredibar.com/?a=6OyZn96Aci&loc=skwuser_pref("datareporting.healthreport.service.firstRun", true);
FF SelectedSearchEngine: user_pref("CT3220468.url_history0001.enc", "aHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTcyLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTc2LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTgwLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTg0LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTg5LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTkzLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTk3LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjAxLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjA1LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjA5LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjE1LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjIwLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjI0LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjI4LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjMyLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjM3");user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1379166159019,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");user_pref("Datamngr.Updater.Enabled", "true");user_pref("Smartbar.ConduitHomepagesList", "http://search.conduit.com/?ctid=CT3220468&SearchSource=13");user_pref("Smartbar.ConduitSearchEngineList", "");user_pref("Smartbar.ConduitSearchUrlList", "");user_pref("Smartbar.keywordURLSelectedCTID", "CT3220468");user_pref("accessibility.typeaheadfind.flashBar", 0);user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1382036550);user_pref("app.update.lastUpdateTime.background-update-timer", 1382109185);user_pref("app.update.lastUpdateTime.blocklist-background-update-timer", 1382089603);user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 1382108945);user_pref("app.update.lastUpdateTime.search-engine-update-timer", 1382109065);user_pref("browser.cache.disk.capacity", 358400);user_pref("browser.cache.disk.smart_size.first_run", false);user_pref("browser.cache.disk.smart_size.use_old_max", false);user_pref("browser.cache.disk.smart_size_cached_value", 358400);user_pref("browser.download.lastDir", "C:\\Documents and Settings\\endorro\\Pulpit");user_pref("browser.download.manager.alertOnEXEOpen", false);user_pref("browser.download.panel.firstSessionCompleted", true);user_pref("browser.download.panel.shown", true);user_pref("browser.formfill.enable", false);user_pref("browser.keywordURLPromptDeclined", 1);user_pref("browser.migration.version", 13);user_pref("browser.newtabpage.storageVersion", 1);user_pref("browser.pagethumbnails.storage_version", 3);user_pref("browser.places.smartBookmarksVersion", 4);user_pref("browser.rights.3.shown", true);user_pref("browser.search.defaultengine", "Ask Search");user_pref("browser.search.defaultenginename", "Ask Search");user_pref("browser.search.order.1", "Ask.com");");user_pref("browser.search.suggest.enabled", false);user_pref("browser.search.useDBForOrder", true);user_pref("browser.slowStartup.averageTime", 16457);user_pref("browser.slowStartup.samples", 1);user_pref("browser.startup.homepage", "http://www.search.ask.com/?o=APN10645A&gct=hp&d=406-420&v=a9396-116&t=4");user_pref("browser.startup.homepage_override.buildID", "20130910160258");user_pref("browser.startup.homepage_override.mstone", "24.0");user_pref("browser.syncPromoViewsLeftMap", "{\"bookmarks\":0,\"passwords\":0}");user_pref("datareporting.healthreport.currentDaySubmissionFailureCount", 1);user_pref("datareporting.healthreport.lastDataSubmissionFailureTime", "1379256257747");user_pref("datareporting.healthreport.lastDataSubmissionRequestedTime", "1380138056084");user_pref("datareporting.healthreport.lastDataSubmissionSuccessfulTime", "1380041304627");user_pref("datareporting.healthreport.nextDataSubmissionTime", "1380138956084");user_pref("browser.startup.homepage", "http://mystart.incredibar.com/?a=6OyZn96Aci&loc=skw");user_pref("keyword.URL", "http://mystart.incredibar.com/?a=6OyZn96Aci&loc=skw&search=");user_pref("browser.newtab.url","http://mystart.incredibar.com/?a=6OyZn96Aci&loc=skwuser_pref("datareporting.healthreport.service.firstRun", true);
FF DefaultSearchEngine: user_pref("CT3220468.url_history0001.enc", "aHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTcyLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTc2LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTgwLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTg0LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTg5LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTkzLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTk3LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjAxLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjA1LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjA5LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjE1LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjIwLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjI0LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjI4LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjMyLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjM3");user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1379166159019,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");user_pref("Datamngr.Updater.Enabled", "true");user_pref("Smartbar.ConduitHomepagesList", "http://search.conduit.com/?ctid=CT3220468&SearchSource=13");user_pref("Smartbar.ConduitSearchEngineList", "");user_pref("Smartbar.ConduitSearchUrlList", "");user_pref("Smartbar.keywordURLSelectedCTID", "CT3220468");user_pref("accessibility.typeaheadfind.flashBar", 0);user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1382036550);user_pref("app.update.lastUpdateTime.background-update-timer", 1382109185);user_pref("app.update.lastUpdateTime.blocklist-background-update-timer", 1382089603);user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 1382108945);user_pref("app.update.lastUpdateTime.search-engine-update-timer", 1382109065);user_pref("browser.cache.disk.capacity", 358400);user_pref("browser.cache.disk.smart_size.first_run", false);user_pref("browser.cache.disk.smart_size.use_old_max", false);user_pref("browser.cache.disk.smart_size_cached_value", 358400);user_pref("browser.download.lastDir", "C:\\Documents and Settings\\endorro\\Pulpit");user_pref("browser.download.manager.alertOnEXEOpen", false);user_pref("browser.download.panel.firstSessionCompleted", true);user_pref("browser.download.panel.shown", true);user_pref("browser.formfill.enable", false);user_pref("browser.keywordURLPromptDeclined", 1);user_pref("browser.migration.version", 13);user_pref("browser.newtabpage.storageVersion", 1);user_pref("browser.pagethumbnails.storage_version", 3);user_pref("browser.places.smartBookmarksVersion", 4);user_pref("browser.rights.3.shown", true);user_pref("browser.search.defaultengine", "Ask Search");Ask Search");user_pref("browser.search.order.1", "Ask.com");user_pref("browser.search.selectedEngine", "");user_pref("browser.search.suggest.enabled", false);user_pref("browser.search.useDBForOrder", true);user_pref("browser.slowStartup.averageTime", 16457);user_pref("browser.slowStartup.samples", 1);user_pref("browser.startup.homepage", "http://www.search.ask.com/?o=APN10645A&gct=hp&d=406-420&v=a9396-116&t=4");user_pref("browser.startup.homepage_override.buildID", "20130910160258");user_pref("browser.startup.homepage_override.mstone", "24.0");user_pref("browser.syncPromoViewsLeftMap", "{\"bookmarks\":0,\"passwords\":0}");user_pref("datareporting.healthreport.currentDaySubmissionFailureCount", 1);user_pref("datareporting.healthreport.lastDataSubmissionFailureTime", "1379256257747");user_pref("datareporting.healthreport.lastDataSubmissionRequestedTime", "1380138056084");user_pref("datareporting.healthreport.lastDataSubmissionSuccessfulTime", "1380041304627");user_pref("datareporting.healthreport.nextDataSubmissionTime", "1380138956084");user_pref("browser.startup.homepage", "http://mystart.incredibar.com/?a=6OyZn96Aci&loc=skw");user_pref("keyword.URL", "http://mystart.incredibar.com/?a=6OyZn96Aci&loc=skw&search=");user_pref("browser.newtab.url","http://mystart.incredibar.com/?a=6OyZn96Aci&loc=skwuser_pref("datareporting.healthreport.service.firstRun", true);
FF SearchEngineOrder.user_pref("CT3220468.url_history0001.enc", "aHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTcyLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTc2LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTgwLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTg0LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTg5LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTkzLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTk3LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjAxLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjA1LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjA5LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjE1LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjIwLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjI0LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjI4LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjMyLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjM3");user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1379166159019,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");user_pref("Datamngr.Updater.Enabled", "true");user_pref("Smartbar.ConduitHomepagesList", "http://search.conduit.com/?ctid=CT3220468&SearchSource=13");user_pref("Smartbar.ConduitSearchEngineList", "");user_pref("Smartbar.ConduitSearchUrlList", "");user_pref("Smartbar.keywordURLSelectedCTID", "CT3220468");user_pref("accessibility.typeaheadfind.flashBar", 0);user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1382036550);user_pref("app.update.lastUpdateTime.background-update-timer", 1382109185);user_pref("app.update.lastUpdateTime.blocklist-background-update-timer", 1382089603);user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 1382108945);user_pref("app.update.lastUpdateTime.search-engine-update-timer", 1382109065);user_pref("browser.cache.disk.capacity", 358400);user_pref("browser.cache.disk.smart_size.first_run", false);user_pref("browser.cache.disk.smart_size.use_old_max", false);user_pref("browser.cache.disk.smart_size_cached_value", 358400);user_pref("browser.download.lastDir", "C:\\Documents and Settings\\endorro\\Pulpit");user_pref("browser.download.manager.alertOnEXEOpen", false);user_pref("browser.download.panel.firstSessionCompleted", true);user_pref("browser.download.panel.shown", true);user_pref("browser.formfill.enable", false);user_pref("browser.keywordURLPromptDeclined", 1);user_pref("browser.migration.version", 13);user_pref("browser.newtabpage.storageVersion", 1);user_pref("browser.pagethumbnails.storage_version", 3);user_pref("browser.places.smartBookmarksVersion", 4);user_pref("browser.rights.3.shown", true);user_pref("browser.search.defaultengine", "Ask Search");user_pref("browser.search.defaultenginename", "Ask Search");1user_pref("datareporting.healthreport.service.firstRun", true);: user_pref("CT3220468.url_history0001.enc", "aHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTcyLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTc2LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTgwLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTg0LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTg5LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTkzLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMTk3LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjAxLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjA1LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjA5LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjE1LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjIwLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjI0LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjI4LCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjMyLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLyM6OjpjbGlja2hhbmRsZXI6OjoxMzc5MDk2MjAxMjM3");user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1379166159019,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");user_pref("Datamngr.Updater.Enabled", "true");user_pref("Smartbar.ConduitHomepagesList", "http://search.conduit.com/?ctid=CT3220468&SearchSource=13");user_pref("Smartbar.ConduitSearchEngineList", "");user_pref("Smartbar.ConduitSearchUrlList", "");user_pref("Smartbar.keywordURLSelectedCTID", "CT3220468");user_pref("accessibility.typeaheadfind.flashBar", 0);user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1382036550);user_pref("app.update.lastUpdateTime.background-update-timer", 1382109185);user_pref("app.update.lastUpdateTime.blocklist-background-update-timer", 1382089603);user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 1382108945);user_pref("app.update.lastUpdateTime.search-engine-update-timer", 1382109065);user_pref("browser.cache.disk.capacity", 358400);user_pref("browser.cache.disk.smart_size.first_run", false);user_pref("browser.cache.disk.smart_size.use_old_max", false);user_pref("browser.cache.disk.smart_size_cached_value", 358400);user_pref("browser.download.lastDir", "C:\\Documents and Settings\\endorro\\Pulpit");user_pref("browser.download.manager.alertOnEXEOpen", false);user_pref("browser.download.panel.firstSessionCompleted", true);user_pref("browser.download.panel.shown", true);user_pref("browser.formfill.enable", false);user_pref("browser.keywordURLPromptDeclined", 1);user_pref("browser.migration.version", 13);user_pref("browser.newtabpage.storageVersion", 1);user_pref("browser.pagethumbnails.storage_version", 3);user_pref("browser.places.smartBookmarksVersion", 4);user_pref("browser.rights.3.shown", true);user_pref("browser.search.defaultengine", "Ask Search");user_pref("browser.search.defaultenginename", "Ask Search");Ask.com");user_pref("browser.search.selectedEngine", "");user_pref("browser.search.suggest.enabled", false);user_pref("browser.search.useDBForOrder", true);user_pref("browser.slowStartup.averageTime", 16457);user_pref("browser.slowStartup.samples", 1);user_pref("browser.startup.homepage", "http://www.search.ask.com/?o=APN10645A&gct=hp&d=406-420&v=a9396-116&t=4");user_pref("browser.startup.homepage_override.buildID", "20130910160258");user_pref("browser.startup.homepage_override.mstone", "24.0");user_pref("browser.syncPromoViewsLeftMap", "{\"bookmarks\":0,\"passwords\":0}");user_pref("datareporting.healthreport.currentDaySubmissionFailureCount", 1);user_pref("datareporting.healthreport.lastDataSubmissionFailureTime", "1379256257747");user_pref("datareporting.healthreport.lastDataSubmissionRequestedTime", "1380138056084");user_pref("datareporting.healthreport.lastDataSubmissionSuccessfulTime", "1380041304627");user_pref("datareporting.healthreport.nextDataSubmissionTime", "1380138956084");user_pref("browser.startup.homepage", "http://mystart.incredibar.com/?a=6OyZn96Aci&loc=skw");user_pref("keyword.URL", "http://mystart.incredibar.com/?a=6OyZn96Aci&loc=skw&search=");user_pref("browser.newtab.url","http://mystart.incredibar.com/?a=6OyZn96Aci&loc=skwuser_pref("datareporting.healthreport.service.firstRun", true);
FF Keyword.URL: hxxp://mystart.incredibar.com/?a=6OyZn96Aci&loc=skw&search=
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Documents and Settings\endorro\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Documents and Settings\endorro\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Documents and Settings\endorro\Dane aplikacji\Mozilla\Firefox\Profiles\fx8adpci.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Documents and Settings\endorro\Dane aplikacji\Mozilla\Firefox\Profiles\fx8adpci.default\searchplugins\Ask.xml
FF SearchPlugin: C:\Documents and Settings\endorro\Dane aplikacji\Mozilla\Firefox\Profiles\fx8adpci.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Documents and Settings\endorro\Dane aplikacji\Mozilla\Firefox\Profiles\fx8adpci.default\searchplugins\BitGuard.xml
FF SearchPlugin: C:\Documents and Settings\endorro\Dane aplikacji\Mozilla\Firefox\Profiles\fx8adpci.default\searchplugins\BrowserDefender.xml
FF SearchPlugin: C:\Documents and Settings\endorro\Dane aplikacji\Mozilla\Firefox\Profiles\fx8adpci.default\searchplugins\delta.xml
FF SearchPlugin: C:\Documents and Settings\endorro\Dane aplikacji\Mozilla\Firefox\Profiles\fx8adpci.default\searchplugins\MyStart Search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Ask.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\v9.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\Ask.xml
FF Extension: Delta Toolbar - C:\Documents and Settings\endorro\Dane aplikacji\Mozilla\Firefox\Profiles\fx8adpci.default\Extensions\ffxtlbr@delta.com
FF Extension: incredibar.com - C:\Documents and Settings\endorro\Dane aplikacji\Mozilla\Firefox\Profiles\fx8adpci.default\Extensions\ffxtlbr@incredibar.com
FF Extension: Movies Toolbar (Dist. by Bandoo Media, Inc.) - C:\Documents and Settings\endorro\Dane aplikacji\Mozilla\Firefox\Profiles\fx8adpci.default\Extensions\{3d86a75b-cb6b-4764-885d-ca6336f04ba2}
FF Extension: New tab - C:\Documents and Settings\endorro\Dane aplikacji\Mozilla\Firefox\Profiles\fx8adpci.default\Extensions\{6F977649-B06D-7809-9725-1FCFD3AC8308}
FF Extension: uTorrentControl_v2  - C:\Documents and Settings\endorro\Dane aplikacji\Mozilla\Firefox\Profiles\fx8adpci.default\Extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}
FF Extension: IplextoALL - C:\Documents and Settings\endorro\Dane aplikacji\Mozilla\Firefox\Profiles\fx8adpci.default\Extensions\IplextoALL@ALLPlayer.org.xpi
FF Extension: toolbar_ORJ-V7 - C:\Documents and Settings\endorro\Dane aplikacji\Mozilla\Firefox\Profiles\fx8adpci.default\Extensions\toolbar_ORJ-V7@apn.ask.com.xpi
FF Extension: YouTubetoALL - C:\Documents and Settings\endorro\Dane aplikacji\Mozilla\Firefox\Profiles\fx8adpci.default\Extensions\YouTubetoALL@ALLPlayer.org.xpi

========================== Services (Whitelisted) =================

R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-10-16] (APN LLC.)
S2 BitGuard; C:\Documents and Settings\All Users\Dane aplikacji\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe [3029472 2013-09-13] ()
R2 DatamngrCoordinator; C:\Program Files\Movies Toolbar\Datamngr\DatamngrCoordinator.exe [3419136 2013-09-24] (Bandoo Media Inc.)
R2 IBUpdaterService; C:\Windows\system32\dmwu.exe [1434416 2013-09-15] ()
R2 NWCWorkstation; C:\Windows\System32\nwwks.dll [65536 2010-01-22] (Microsoft Corporation)
R2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf"

==================== Drivers (Whitelisted) ====================

R3 BCM43XX; C:\Windows\System32\DRIVERS\bcmwl5.sys [1123328 2007-09-20] (Broadcom Corp.)
S3 cmshusbser; C:\Windows\System32\DRIVERS\cmshusbser.sys [111104 2011-11-30] (QUALCOMM Incorporated)
R3 L1c; C:\Windows\System32\DRIVERS\l1c51x86.sys [38912 2009-01-15] (Atheros Communications, Inc.)
S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R2 NwlnkIpx; C:\Windows\System32\DRIVERS\nwlnkipx.sys [88320 2010-01-22] (Microsoft Corporation)
R2 NwlnkNb; C:\Windows\System32\DRIVERS\nwlnknb.sys [63232 2010-01-22] (Microsoft Corporation)
R2 NwlnkSpx; C:\Windows\System32\DRIVERS\nwlnkspx.sys [55936 2010-01-22] (Microsoft Corporation)
R3 NWRDR; C:\Windows\System32\DRIVERS\nwrdr.sys [163584 2010-01-22] (Microsoft Corporation)
R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfsxp.sys [584680 2011-10-01] (Microsoft Corporation)
R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplayxp.sys [209512 2011-10-01] (Microsoft Corporation)
R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirxp.sys [20584 2011-10-01] (Microsoft Corporation)
R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolxp.sys [18280 2011-10-01] (Microsoft Corporation)
R0 Si3112; C:\Windows\System32\Drivers\Si3112.sys [62336 2010-01-22] (Silicon Image, Inc.)
S0 Si3114r5; C:\Windows\System32\Drivers\Si3114r5.sys [195072 2010-01-22] (Silicon Image, Inc)
R0 Si3124; C:\Windows\System32\Drivers\Si3124.sys [69248 2010-01-22] (Silicon Image, Inc.)
R0 Si3132; C:\Windows\System32\Drivers\Si3132.sys [74672 2010-01-22] (Silicon Image, Inc.)
R0 Si3132r5; C:\Windows\System32\Drivers\Si3132r5.sys [215856 2010-01-22] (Silicon Image, Inc)
R0 Si3531; C:\Windows\System32\Drivers\Si3531.sys [212520 2010-01-22] (Silicon Image, Inc)
S4 IntelIde; No ImagePath
S3 massfilter_lte; \??\C:\WINDOWS\system32\drivers\massfilter_lte.sys [x]
U1 WS2IFSL; 
S3 zgdcat; system32\DRIVERS\zgdcat.sys [x]
S3 zgdcdiag; system32\DRIVERS\zgdcdiag.sys [x]
S3 zgdcnet; system32\DRIVERS\zgdcnet.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-18 18:01 - 2013-10-18 18:01 - 00000000 ____D C:\FRST
2013-10-16 22:37 - 2013-10-16 22:37 - 00000000 ____D C:\Documents and Settings\endorro\Pulpit\Solstafir - Svartir Sandar
2013-10-15 19:37 - 2013-10-15 19:37 - 00001810 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Cisco Connect.lnk
2013-10-15 19:36 - 2013-10-15 19:36 - 00000000 ____D C:\Program Files\Cisco Systems
2013-10-15 19:32 - 2013-10-15 19:32 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Cisco Systems
2013-10-13 10:28 - 2013-10-13 19:59 - 00000000 ____D C:\Documents and Settings\endorro\Pulpit\gaupne
2013-10-08 22:47 - 2013-10-08 22:47 - 17813896 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2013-10-02 12:57 - 2013-10-02 14:49 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-09-27 13:13 - 2013-09-27 13:13 - 00000000 ____D C:\WINDOWS\Sun
2013-09-25 12:18 - 2013-10-18 18:00 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Datamngr
2013-09-25 12:12 - 2013-09-26 16:20 - 00003221 _____ C:\Documents and Settings\endorro\Pulpit\ada hihi.txt
2013-09-25 11:25 - 2013-09-25 11:25 - 00000000 ____D C:\Documents and Settings\endorro\Ustawienia lokalne\Dane aplikacji\Sun
2013-09-24 20:05 - 2013-09-24 20:05 - 00000000 ____D C:\Program Files\AskPartnerNetwork
2013-09-24 20:05 - 2013-09-24 20:05 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\AskPartnerNetwork
2013-09-24 20:05 - 2013-09-24 20:05 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\APN
2013-09-24 20:03 - 2013-09-24 20:03 - 00868264 _____ (Oracle Corporation) C:\WINDOWS\system32\npDeployJava1.dll
2013-09-24 20:03 - 2013-09-24 20:03 - 00790440 _____ (Oracle Corporation) C:\WINDOWS\system32\deployJava1.dll
2013-09-24 20:03 - 2013-09-24 20:03 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2013-09-24 20:03 - 2013-09-24 20:03 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2013-09-24 20:03 - 2013-09-24 20:03 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2013-09-24 20:03 - 2013-09-24 20:03 - 00144896 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2013-09-24 20:03 - 2013-09-24 20:03 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-09-24 20:03 - 2013-09-24 20:03 - 00000000 ____D C:\Program Files\Java
2013-09-24 20:03 - 2013-09-24 20:03 - 00000000 ____D C:\Program Files\Common Files\Java
2013-09-24 20:03 - 2013-09-24 20:03 - 00000000 ____D C:\Documents and Settings\endorro\Dane aplikacji\Sun
2013-09-24 20:03 - 2013-09-24 20:03 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Java
2013-09-24 20:03 - 2013-09-24 20:03 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Sun
2013-09-23 22:01 - 2013-09-23 22:01 - 00000000 ____D C:\Documents and Settings\endorro\Pulpit\Norweski-AudioKurs
2013-09-22 13:54 - 2013-09-22 13:54 - 00000000 ____D C:\Documents and Settings\endorro\Dane aplikacji\File Scout

==================== One Month Modified Files and Folders =======

2013-10-18 18:01 - 2013-10-18 18:01 - 00000000 ____D C:\FRST
2013-10-18 18:01 - 2012-09-23 18:34 - 00000000 ____D C:\Documents and Settings\endorro\Moje dokumenty\Pobieranie
2013-10-18 18:00 - 2013-09-25 12:18 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Datamngr
2013-10-18 18:00 - 2013-05-24 21:32 - 00000000 ____D C:\Documents and Settings\endorro\Dane aplikacji\Skype
2013-10-18 17:59 - 2012-09-23 19:00 - 00000000 ____D C:\Documents and Settings\endorro\Dane aplikacji\uTorrent
2013-10-18 17:59 - 2012-07-24 01:00 - 00000050 _____ C:\WINDOWS\wiaservc.log
2013-10-18 17:59 - 2012-07-24 00:59 - 00000159 _____ C:\WINDOWS\wiadebug.log
2013-10-18 17:59 - 2012-07-23 23:12 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-10-18 17:59 - 2012-07-23 23:08 - 00432807 _____ C:\WINDOWS\WindowsUpdate.log
2013-10-18 17:50 - 2013-07-29 14:09 - 00000000 ____D C:\Documents and Settings\All Users\Dokumenty\SoftGrid Client
2013-10-18 17:50 - 2012-07-23 23:12 - 00032500 _____ C:\WINDOWS\SchedLgU.Txt
2013-10-18 17:38 - 2012-07-23 23:13 - 00000188 ___SH C:\Documents and Settings\endorro\ntuser.ini
2013-10-18 11:45 - 2012-09-23 18:35 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-10-18 11:44 - 2012-07-24 00:57 - 00941293 _____ C:\WINDOWS\setupapi.log
2013-10-18 11:41 - 2012-07-23 23:06 - 00034700 _____ C:\WINDOWS\wmsetup.log
2013-10-18 11:06 - 2012-07-24 00:57 - 00215690 _____ C:\WINDOWS\setupact.log
2013-10-18 03:15 - 2013-07-02 20:49 - 00000274 _____ C:\WINDOWS\Tasks\EPUpdater.job
2013-10-18 01:09 - 2013-02-10 14:04 - 00001010 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1547161642-861567501-1417001333-1003UA.job
2013-10-17 13:09 - 2013-02-10 14:04 - 00000988 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1547161642-861567501-1417001333-1003Core.job
2013-10-17 07:58 - 2010-01-22 00:47 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2013-10-16 22:37 - 2013-10-16 22:37 - 00000000 ____D C:\Documents and Settings\endorro\Pulpit\Solstafir - Svartir Sandar
2013-10-16 22:37 - 2012-07-23 23:13 - 00000000 ____D C:\Documents and Settings\endorro\Pulpit
2013-10-16 12:17 - 2012-10-16 13:24 - 00000000 ____D C:\Documents and Settings\endorro\Pulpit\Język No
2013-10-15 19:37 - 2013-10-15 19:37 - 00001810 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Cisco Connect.lnk
2013-10-15 19:37 - 2012-07-24 00:58 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy
2013-10-15 19:36 - 2013-10-15 19:36 - 00000000 ____D C:\Program Files\Cisco Systems
2013-10-15 19:32 - 2013-10-15 19:32 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Cisco Systems
2013-10-15 19:32 - 2012-07-24 00:57 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji
2013-10-13 19:59 - 2013-10-13 10:28 - 00000000 ____D C:\Documents and Settings\endorro\Pulpit\gaupne
2013-10-13 09:57 - 2012-07-24 00:58 - 00765502 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-13 09:57 - 2010-01-22 00:47 - 00356512 _____ C:\WINDOWS\system32\perfh015.dat
2013-10-13 09:57 - 2010-01-22 00:47 - 00050096 _____ C:\WINDOWS\system32\perfc015.dat
2013-10-12 19:19 - 2012-10-16 13:18 - 00000000 ____D C:\Documents and Settings\endorro\Pulpit\Norweski
2013-10-08 22:47 - 2013-10-08 22:47 - 17813896 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2013-10-08 22:47 - 2012-09-23 18:35 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2013-10-08 22:47 - 2012-09-23 18:35 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2013-10-07 17:13 - 2012-07-24 22:08 - 00178176 _____ C:\Documents and Settings\endorro\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-10-06 16:14 - 2012-09-23 19:01 - 00000000 ____D C:\Program Files\uTorrentControl_v2
2013-10-06 16:14 - 2012-09-23 19:01 - 00000000 ____D C:\Documents and Settings\endorro\Ustawienia lokalne\Dane aplikacji\uTorrentControl_v2
2013-10-06 16:13 - 2013-05-05 12:08 - 00000000 ____D C:\Documents and Settings\endorro\Dane aplikacji\PriceGong
2013-10-02 22:47 - 2013-07-29 14:10 - 00000000 ____D C:\Documents and Settings\endorro\Dane aplikacji\SoftGrid Client
2013-10-02 14:49 - 2013-10-02 12:57 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-10-02 14:49 - 2013-01-05 18:37 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-09-30 13:47 - 2012-07-23 23:13 - 00000000 ____D C:\Documents and Settings\endorro
2013-09-30 09:23 - 2012-11-20 13:01 - 00000000 ____D C:\Documents and Settings\endorro\Dane aplikacji\AIMP3
2013-09-28 11:43 - 2013-05-24 21:32 - 00000000 ___RD C:\Program Files\Skype
2013-09-28 11:43 - 2013-05-24 21:32 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Skype
2013-09-27 13:13 - 2013-09-27 13:13 - 00000000 ____D C:\WINDOWS\Sun
2013-09-26 16:20 - 2013-09-25 12:12 - 00003221 _____ C:\Documents and Settings\endorro\Pulpit\ada hihi.txt
2013-09-25 21:53 - 2012-11-20 13:02 - 00015272 _____ C:\Documents and Settings\endorro\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
2013-09-25 12:19 - 2013-09-14 20:14 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Wincert
2013-09-25 11:25 - 2013-09-25 11:25 - 00000000 ____D C:\Documents and Settings\endorro\Ustawienia lokalne\Dane aplikacji\Sun
2013-09-25 11:25 - 2012-07-23 23:13 - 00000000 ___HD C:\Documents and Settings\endorro\Ustawienia lokalne\Dane aplikacji
2013-09-24 20:05 - 2013-09-24 20:05 - 00000000 ____D C:\Program Files\AskPartnerNetwork
2013-09-24 20:05 - 2013-09-24 20:05 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\AskPartnerNetwork
2013-09-24 20:05 - 2013-09-24 20:05 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\APN
2013-09-24 20:03 - 2013-09-24 20:03 - 00868264 _____ (Oracle Corporation) C:\WINDOWS\system32\npDeployJava1.dll
2013-09-24 20:03 - 2013-09-24 20:03 - 00790440 _____ (Oracle Corporation) C:\WINDOWS\system32\deployJava1.dll
2013-09-24 20:03 - 2013-09-24 20:03 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2013-09-24 20:03 - 2013-09-24 20:03 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2013-09-24 20:03 - 2013-09-24 20:03 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2013-09-24 20:03 - 2013-09-24 20:03 - 00144896 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2013-09-24 20:03 - 2013-09-24 20:03 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-09-24 20:03 - 2013-09-24 20:03 - 00000000 ____D C:\Program Files\Java
2013-09-24 20:03 - 2013-09-24 20:03 - 00000000 ____D C:\Program Files\Common Files\Java
2013-09-24 20:03 - 2013-09-24 20:03 - 00000000 ____D C:\Documents and Settings\endorro\Dane aplikacji\Sun
2013-09-24 20:03 - 2013-09-24 20:03 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Java
2013-09-24 20:03 - 2013-09-24 20:03 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Sun
2013-09-24 20:03 - 2012-07-23 23:13 - 00000000 __RHD C:\Documents and Settings\endorro\Dane aplikacji
2013-09-23 22:01 - 2013-09-23 22:01 - 00000000 ____D C:\Documents and Settings\endorro\Pulpit\Norweski-AudioKurs
2013-09-22 22:54 - 2013-09-17 22:40 - 00000000 ____D C:\Documents and Settings\endorro\Pulpit\galgeberg przygotowanie
2013-09-22 13:54 - 2013-09-22 13:54 - 00000000 ____D C:\Documents and Settings\endorro\Dane aplikacji\File Scout
2013-09-22 10:49 - 2012-10-08 22:32 - 00000000 ___RD C:\Documents and Settings\endorro\Pulpit\foty
2013-09-18 18:48 - 2012-07-23 23:13 - 00000000 ___RD C:\Documents and Settings\endorro\Moje dokumenty\Moja muzyka
2013-09-18 11:08 - 2012-11-18 16:45 - 00175616 ___SH C:\Documents and Settings\endorro\Pulpit\Thumbs.db
2013-09-18 00:27 - 2013-09-10 23:35 - 00000000 ____D C:\Documents and Settings\endorro\Pulpit\_Filmy

Some content of TEMP:
====================
C:\Documents and Settings\endorro\Ustawienia lokalne\Temp\APNSetup.exe
C:\Documents and Settings\endorro\Ustawienia lokalne\Temp\AskSLib.dll
C:\Documents and Settings\endorro\Ustawienia lokalne\Temp\BundleSweetIMSetup.exe
C:\Documents and Settings\endorro\Ustawienia lokalne\Temp\foobar2000_uninstall.exe
C:\Documents and Settings\endorro\Ustawienia lokalne\Temp\incredibar_install.exe
C:\Documents and Settings\endorro\Ustawienia lokalne\Temp\incredibar_install[1].exe
C:\Documents and Settings\endorro\Ustawienia lokalne\Temp\MybabylonTB.exe
C:\Documents and Settings\endorro\Ustawienia lokalne\Temp\propsys.dll
C:\Documents and Settings\endorro\Ustawienia lokalne\Temp\RtkBtMnt.exe
C:\Documents and Settings\endorro\Ustawienia lokalne\Temp\setup.exe
C:\Documents and Settings\endorro\Ustawienia lokalne\Temp\setup_fsu_cid.exe
C:\Documents and Settings\endorro\Ustawienia lokalne\Temp\SkypeSetup.exe
C:\Documents and Settings\endorro\Ustawienia lokalne\Temp\t.dll
C:\Documents and Settings\endorro\Ustawienia lokalne\Temp\tbedrs.dll
C:\Documents and Settings\endorro\Ustawienia lokalne\Temp\TB_9DE.exe
C:\Documents and Settings\endorro\Ustawienia lokalne\Temp\utt4.tmp.exe
C:\Documents and Settings\endorro\Ustawienia lokalne\Temp\v9dl.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2010-01-22 00:47] - [2010-01-22 00:47] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a 

C:\Windows\System32\winlogon.exe
[2010-01-22 00:47] - [2010-01-22 00:47] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 

C:\Windows\System32\svchost.exe
[2010-01-22 00:47] - [2010-01-22 00:47] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce 

C:\Windows\System32\services.exe
[2010-01-22 00:47] - [2010-01-22 00:47] - 0111104 ____A (Microsoft Corporation) 8816e60bf654353e8e0d35ed98875445 

C:\Windows\System32\User32.dll
[2010-01-22 00:47] - [2010-01-22 00:47] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 

C:\Windows\System32\userinit.exe
[2010-01-22 00:47] - [2010-01-22 00:47] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 

C:\Windows\System32\Drivers\volsnap.sys
[2010-01-22 00:47] - [2010-01-22 00:47] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 


==================== End Of Log ============================