GMER 2.1.19357 - http://www.gmer.net Rootkit scan 2015-08-21 13:33:35 Windows 5.1.2600 Dodatek Service Pack 3 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 SAMSUNG_HD080HJ rev.ZH100-41 74,53GB Running: 12s3smhc.exe; Driver: C:\DOCUME~1\ADMIN~1.WSI\USTAWI~1\Temp\kwddapob.sys ---- System - GMER 2.1 ---- SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwAssignProcessToJobObject [0xB45C14B0] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwCreateThread [0xB45C17F0] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwDebugActiveProcess [0xB45C1AB0] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwDuplicateObject [0xB45C15D0] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwLoadDriver [0xB45C18B0] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwOpenProcess [0xB45C1350] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwOpenThread [0xB45C1410] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwProtectVirtualMemory [0xB45C1570] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwQueueApcThread [0xB45C1630] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwReplaceKey [0xB45C1C70] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwRestoreKey [0xB45C1C30] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwSetContextThread [0xB45C1530] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwSetInformationThread [0xB45C14F0] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwSetSecurityObject [0xB45C1670] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwSetSystemInformation [0xB45C1870] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwSuspendProcess [0xB45C13B0] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwSuspendThread [0xB45C1430] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwSystemDebugControl [0xB45C1830] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwTerminateProcess [0xB45C1370] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwTerminateThread [0xB45C1470] SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys ZwWriteVirtualMemory [0xB45C15F0] SSDT \WINDOWS\system32\ntkrnlpa.exe ZwCreateKey [0x804D7FEC] SSDT \WINDOWS\system32\ntkrnlpa.exe[unknown section] [804D7FEC] ZwCreateKey [0x804D7FEC] SSDT \WINDOWS\system32\ntkrnlpa.exe ZwOpenKey [0x804D7FF1] SSDT \WINDOWS\system32\ntkrnlpa.exe[unknown section] [804D7FF1] ZwOpenKey [0x804D7FF1] INT 0x03 \WINDOWS\system32\ntkrnlpa.exe[unknown section] 804D7FF6 INT 0x06 \??\C:\WINDOWS\system32\drivers\Haspnt.sys B38F316D INT 0x0E \??\C:\WINDOWS\system32\drivers\Haspnt.sys B38F2FC2 ---- Kernel code sections - GMER 2.1 ---- .text ntkrnlpa.exe!ZwCallbackReturn + 2E70 80504758 2 Bytes [50, 13] .text ntkrnlpa.exe!ZwCallbackReturn + 2E88 80504770 2 Bytes [10, 14] .text ntkrnlpa.exe!ZwCallbackReturn + 301C 80504904 2 Bytes [F0, 14] .text ntkrnlpa.exe!ZwCallbackReturn + 303C 80504924 2 Bytes [70, 16] {JO 0x18} .text ntkrnlpa.exe!ZwCallbackReturn + 307C 80504964 12 Bytes [B0, 13, 5C, B4, 30, 14, 5C, ...] .text C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xB71963C0, 0x84E4FA, 0xE8000020] .text C:\WINDOWS\system32\drivers\aksfridge.sys section is writeable [0xB34CF000, 0x47E35, 0xE0000020] .init C:\WINDOWS\system32\drivers\aksfridge.sys entry point in ".init" section [0xB3523224] .init C:\WINDOWS\system32\drivers\aksfridge.sys unknown last code section [0xB3523000, 0x4000, 0xE20000E0] .text C:\WINDOWS\system32\drivers\hardlock.sys section is writeable [0xB3376400, 0x6E292, 0xE8000020] .protect˙˙˙˙hardlockentry point in ".protect˙˙˙˙hardlockentry point in ".protect˙˙˙˙hardlockentry point in ".p" section [0xB3400420] C:\WINDOWS\system32\drivers\hardlock.sys entry point in ".protect˙˙˙˙hardlockentry point in ".protect˙˙˙˙hardlockentry point in ".p" section [0xB3400420] .protect˙˙˙˙hardlockunknown last code section [0xB3400200, 0x511A, 0xE0000020] C:\WINDOWS\system32\drivers\hardlock.sys unknown last code section [0xB3400200, 0x511A, 0xE0000020] ---- User code sections - GMER 2.1 ---- .text C:\Program Files\ESET\ESET Endpoint Antivirus\ekrn.exe[1956] kernel32.dll!SetUnhandledExceptionFilter 7C844EE5 4 Bytes [C2, 04, 00, 00] .text C:\Program Files\Mozilla Firefox\firefox.exe[3864] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 01239BE7 C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[3864] ntdll.dll!NtFlushBuffersFile 7C90D32E 5 Bytes JMP 012399A6 C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[3864] ntdll.dll!NtQueryFullAttributesFile 7C90D7AE 5 Bytes JMP 01239ADA C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[3864] ntdll.dll!NtReadFile 7C90D9CE 5 Bytes JMP 012399E0 C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[3864] ntdll.dll!NtReadFileScatter 7C90D9DE 5 Bytes JMP 01549DF5 C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[3864] ntdll.dll!NtWriteFile 7C90DF7E 5 Bytes JMP 01239D33 C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[3864] ntdll.dll!NtWriteFileGather 7C90DF8E 5 Bytes JMP 01549E45 C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[3864] ntdll.dll!LdrLoadDll 7C91632D 5 Bytes JMP 1000901C C:\Program Files\Mozilla Firefox\mozglue.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[3864] kernel32.dll!lstrlenW + 43 7C809AEC 7 Bytes JMP 01536A29 C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[3864] kernel32.dll!MapViewOfFileEx + 6A 7C80B9A0 7 Bytes JMP 0153526B C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[3864] kernel32.dll!ValidateLocale + B648 7C844EE0 7 Bytes JMP 012E4308 C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[3864] GDI32.dll!SetDIBitsToDevice + 20A 77F19E14 7 Bytes JMP 01533A49 C:\Program Files\Mozilla Firefox\xul.dll .text C:\Program Files\Mozilla Firefox\firefox.exe[3864] USER32.dll!GetWindowInfo 7E37C49C 5 Bytes JMP 012B1E07 C:\Program Files\Mozilla Firefox\xul.dll ---- Devices - GMER 2.1 ---- AttachedDevice \FileSystem\Ntfs \Ntfs eamon.sys AttachedDevice \Driver\Tcpip \Device\Tcp epfwtdir.sys Device \Driver\Disk \Device\Harddisk0\DR0 aksfridge.sys AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys AttachedDevice \FileSystem\Fastfat \Fat eamon.sys ---- Files - GMER 2.1 ---- File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\Changes.lnk 774 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\Compatibility.lnk 806 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\Compiled Demo.lnk 1989 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\FAQ.lnk 750 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\Fast Reotrp Programmer Manual.lnk 926 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\Fast Report Editions Comparison.lnk 801 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\Fast Report User Manual.lnk 896 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\FastReport site.lnk 796 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\License.lnk 774 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\Readme.lnk 769 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\Recompile Wizard.lnk 1806 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\Uninstall.lnk 840 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\CollabNet Subversion Client\svn-book.lnk 815 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\CollabNet Subversion Client\Uninstall.lnk 803 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\DevJET Documentation Insight Express\Documentation Insight Express Help.lnk 989 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\DevJET Documentation Insight Express\Uninstall.lnk 792 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\Embarcadero InterBase XE [instance = gds_db]\IBConsole.lnk 820 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\Embarcadero InterBase XE [instance = gds_db]\License Agreement.lnk 748 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\Embarcadero RAD Studio XE2\Check for Updates.lnk 962 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\Embarcadero RAD Studio XE2\Delphi XE2.lnk 738 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\Embarcadero RAD Studio XE2\InstallAware 12.lnk 829 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{31BA2A7D-9599-4D90-9B3E-F94D0DC8B82A}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\Embarcadero RAD Studio XE2\RAD Studio Documentation.lnk 1210 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Dane aplikacji\Microsoft\CLR Security Config\v2.0.50727.42\security.config.cch 41151 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\Changes.lnk 774 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\Compatibility.lnk 806 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\Compiled Demo.lnk 1989 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\FAQ.lnk 750 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\Fast Reotrp Programmer Manual.lnk 926 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\Fast Report Editions Comparison.lnk 801 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\Fast Report User Manual.lnk 896 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\FastReport site.lnk 796 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\License.lnk 774 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\Readme.lnk 769 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\Recompile Wizard.lnk 1806 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\admin.WSIE\Menu Start\Programy\FastReports\FastReport 4 Embarcadero edition\Uninstall.lnk 840 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\CollabNet Subversion Client\svn-book.lnk 815 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\CollabNet Subversion Client\Uninstall.lnk 803 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\DevJET Documentation Insight Express\Documentation Insight Express Help.lnk 989 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\DevJET Documentation Insight Express\Uninstall.lnk 792 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\Embarcadero InterBase XE [instance = gds_db]\IBConsole.lnk 820 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\Embarcadero InterBase XE [instance = gds_db]\License Agreement.lnk 748 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\Embarcadero RAD Studio XE2\Check for Updates.lnk 962 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\Embarcadero RAD Studio XE2\Delphi XE2.lnk 738 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\Embarcadero RAD Studio XE2\InstallAware 2012.lnk 831 bytes File C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero\Product Repository\StreamingCore\Profiles\admin\Applications\{83B82034-E0BB-4CBE-8D8C-9ADFB2A25FD3}\FSD\Shared_\C\Documents and Settings\All Users\Menu Start\Programy\Embarcadero RAD Studio XE2\RAD Studio Documentation.lnk 1210 bytes ---- EOF - GMER 2.1 ----