Proszę o sprawdzenie logów z otl oraz pomoc

Post04 sie 2012, 09:21

Plik otltxt
Dostępne tylko dla zarejestrowanych użytkowników

Otl Extras.txt
Dostępne tylko dla zarejestrowanych użytkowników

Pozdrawiam

Post04 sie 2012, 11:30

Bardzo rozległa infekcja w systemie.

1. Uruchom OTL i w oknie Własne opcje skanowania/Skrypt wklej następujący tekst:

:OTL
O4 - HKCU..\Run: [Wes] C:\Users\Kamil\AppData\Roaming\Wes\Wes.exe ()
O4 - HKCU..\Run: [Mitch Heinrik] C:\Users\Kamil\AppData\Roaming\Mitch Heinrik\Mitch Heinrik.exe ()
O4 - HKCU..\Run: [Explorer] C:\Users\Kamil\AppData\Roaming\2063.exe ()
O4 - HKLM..\Run: [] File not found
[2012-08-04 09:05:30 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\1d4dcb13db7f0375f49fd5c346498580
[2012-08-04 09:03:33 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\4efbdd064e907e8f12a17735ef13b818
[2012-08-04 09:02:32 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\494c75a9d3ea96113534a3757d926e50
[2012-08-04 09:02:20 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\dc8e6c5f1b536c9c251bb919ecf3bf4b
[2012-08-04 09:02:13 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\ddaa8e00176e3809e0c2b04ec5946580
[2012-08-04 09:01:57 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\8f3d985b455724721ea6afc550547896
[2012-08-04 09:01:52 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\ee22444e740fb7f517f573c299449c56
[2012-08-04 09:01:52 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\d2af17ab461fab379fd68e42e58f9767
[2012-08-04 09:01:52 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\cbbc75fcb3e2ef92dc65391ba8a6e075
[2012-08-04 09:01:52 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\b617a739e56d8167383b4f20171bfcf6
[2012-08-04 09:01:52 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\b5969934abb6693b6be8a369ecfa8e5e
[2012-08-04 09:01:52 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\7cc38d1be98cb9f79a78ad04b20de6e6
[2012-08-04 09:01:52 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2cb0b60f511705f24e40613ae84a17fa
[2012-08-04 09:01:48 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\9149cd77dd8e208ddef64152eda5d917
[2012-08-04 09:01:43 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\fc27511bc93c7af11f1af3d49c64e610
[2012-08-04 09:01:43 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\f6eb9dee7aa87a76d1b2c921fabda63f
[2012-08-04 09:01:43 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\f19323180509bf1ad11d8ba6582f4e1a
[2012-08-04 09:01:43 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\f12bcfe656c93f9cdf3fac5dd962e8d1
[2012-08-04 09:01:43 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c20cdf6be9aed11fcc99a0f6beefcfc8
[2012-08-04 09:01:43 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\58558d9632ee166f61fd869b6dbae43f
[2012-08-04 09:01:43 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\48522ff411412e0040fb0192f4123fa6
[2012-08-04 09:01:43 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\3882f564c8647a9d2680c6e0cae706c5
[2012-08-04 09:00:49 | 000,107,178 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2aba436640d6fd909b14ae8357037d740.dat
[2012-08-04 09:00:46 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\b74d65d2ea0af3cc15b9ad9d74a252ec
[2012-08-04 09:00:46 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2aba436640d6fd909b14ae8357037d74P7glDaCB
[2012-08-04 09:00:20 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\9be31f8b9ff177658cb9576a9bbc1dc0
[2012-08-04 09:00:20 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\51c8aa487960098f989d9116cccc8f3f
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\fafe68232e10ffcda20b1512c43bc7cb
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\e107d52b69c3356d85dd7b84e16bd43e
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\d80fb85b60ce0207e749c20ac9e05c8f
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c0f41a59672cbe79346ee0a82953b048
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\bde62c4523608abe1a507da53a4c8555
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\abd1f1557366135f833649f87fe203b2
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\a6f4c7785e46bc1a02f37851405603dc
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\a1a42804639643b4de82540d96668606
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\9f633995c5e8691f8a4a36f890e870d2
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\9ce403e33fbe813232f9d9fd7d4e6102
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\9a4d5f81318f759a2e774c8c0cea9a6b
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\6e1dd606958433d5a6d08aa7329c7696
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\4a31bfb07d92377cbe5b803c00961119
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\3778cd6231affd5db0feb3948de23cf6
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\30b013e674592f871377d5ad6b5764f3
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2f63999be27cceda5239def2277d0214
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2f2a38be85ad97dfa878157a4526ae66
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2b6d108b2640569e99b9782be907ef89
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\24a75920fd38a17749aae3a6f1ceef9e
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\174b6402f412abf36940d720ec8de721
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\0c9263f1cecf2bad8b85f342538fd3f9
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\08697622be5dd91946dda230c0ff42a7
[2012-08-04 09:00:19 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\0548ee786d9c0fad2cfaba1029817bbf
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\f6df362aa994490271f50240d73bdb1b
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\efa80a51f369393197d4d63b2cb085cd
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\e685f82d768e486d3684e5672d025e1a
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\dc0f64ab33d7f59e9424b6bf35e2228c
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\cfb79cb54eabc29582b42e8e129f7f5a
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\ceb8b8d3282c951a17eea7eb711c01d2
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c8b6f49972ab264a1c6b5a38a9811976
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\af0fdd8144ed45d143711ffe0614525a
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\a77e8ad3b57d1e17fae0dec655bf425d
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\9a1c2c6a9436508790b301c936d641db
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\888cae100eeba8c721f829e8d4b27f0b
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\809e94918df7910291535028e7130f31
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\797c066faeada022208dcd07fae2e1b5
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\79619892850542c6b7a2f06126ec4563
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\792b1593004c614661d5d087225542bd
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\62ddc891ccff77711fcaadd5410104db
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\3acb46f80273c96fc8ef5e571f0dfea6
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2aba436640d6fd909b14ae8357037d74fMuSBiYb
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\29f7b0ecb5204670cbc2e79f6321027b
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2539ff6fea5055e26c4039596e339670
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\1d6e65b75ccf073eb4a1d813d639528b
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\1a8fb9a7b4b1510d649c1fd2fa8af9d5
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\0bf699c4117a750059839e2e1d6fccf8
[2012-08-04 09:00:15 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\076189219d7c94eb8e7f57561927baa3
[2012-08-04 09:00:09 | 000,205,313 | -H-- | M] () -- C:\Users\Kamil\AppData\Roaming\Arte.dll
[2012-08-04 09:00:08 | 000,205,825 | -H-- | M] () -- C:\Users\Kamil\AppData\Roaming\Shannon.dll
[2012-08-04 09:00:02 | 000,205,825 | -H-- | M] () -- C:\Users\Kamil\AppData\Roaming\Leicester.dll
[2012-08-04 08:48:12 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\862256d05d3f4864871a04e548fce496
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\fa3c4191d53634991ad026cf1f248763
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\e1d164723dd8e84d52434e2eb45c65d8
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\d6640604cba010f3198be1e1fac05659
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\d127a5a7f96690667286b54b87c6ea9b
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c3fd69d5965a545825096c92888ac4e5
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c3b383dbed3486fec3b06803e91166a3
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c19d8b2b7cea79fcb7217e276d29f0d6
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c15c5c13807cdaafb0730d7cb6c52100
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\b6b46ce56229f77dff4a8805fe897adc
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\b4202309849189cb8734eda2eb1e1d42
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\9a737f6374b1dba93ec51cfb907ec8ed
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\9277ba2952bfc867d6514a861d331c3f
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\90c198ecac038ba1c6356bdd7f5f7ae0
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\882acb0e94fbef8b776ab01381183714
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\8069e8dac3f7e14b9488c7e69b9c0c08
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\7eaaff5f00225fa1f64f16ecf1739146
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\66c4acc5539e0da00ef6f93c9278ae8d
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\5bb54f6adb479899ecfd343f1f34a081
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\538a8a36d725d19e2c8d87fad7f45c54
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2b9ce8bae155120c3fa905338305b80d
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\0b558e786524ec8c190d1c60e2995e50
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\080ca76367e927469d51bed0fe5146da
[2012-08-04 08:48:07 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\73971970a3025c2c6fa3f7bbc0a03fe9
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\f9f4378528457a18b4b826b9f0f1f38c
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\f2d778d28adcc9934f79f551ca26f09a
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\deaa3ec22375b61075c721d62bd806e9
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\d519ee2ad3eb0ea6887f183ba308eeeb
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\d3d3540910906a09198446fcd73a053b
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c8e58bb0f554c4fb6813df9a461ebb4b
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c71d57deb9340d98878bc92badde9745
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c37c3aeb8f877749955a0677101e9d9c
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c0fd5f9b1564b7108c8abe7e9d7611e7
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\ab929e6eb16ba4a5797092021b4f1402
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\9ed9d027b532a57260c7df38c23817ab
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\837068ba125f8cfe66f2af825a09dcba
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\7ae6b17a2531b326c1e0235a0e222261
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\65c35d3a4f7a6d615fa2db2e4b2617e6
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\5039f0af88f0ae75ad336c4b4d5fbcfb
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\465d0cf6a7e57bb7012a31115ed1fc55
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2fc62f215a2ef1f62ed02f2dc36cd5c4
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2ed7d1165130a9eb64f3b182786110e9
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2dc9324f8d7ccf2c18d06aa39ccf3857
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\10ddd183f7659cbc0216e836a4a8ce85
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\0e9f768f0c68fadbbdf5936a14362f71
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\032a0c34062a9987a6f928a09c9c5689
[2012-08-03 21:36:17 | 000,000,050 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2aba436640d6fd909b14ae8357037d746.dat
[2012-08-03 21:31:17 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\51b65e99b9ad73852545a0423902b961
[2012-08-03 21:30:26 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\5b054fd77fa25dbefe0ea03400b2ccef
[2012-08-03 21:25:16 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\a4a9ae41cdb980dc34857a27902c2f3c
[2012-08-03 21:24:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\746af4a4b9ab6ad11dd4b3856b586c76
[2012-08-03 21:24:41 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\ac2c5a8bc1fab12632ab3bab4e9bafb8
[2012-08-03 21:24:41 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\6b6342aadce896933ecaa2cd534b7abf
[2012-08-03 21:24:37 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\b86beea322bb9aa576dfb25799fa8945
[2012-08-03 21:24:37 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\77f8e1bfe5ece3782ce3b623925e0e4a
[2012-08-03 21:24:37 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\079fb9366f7e6bdafd994fe47c20ae8f
[2012-08-03 21:24:37 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\03b964ec61be41aeb77b2b07b828fe98
[2012-08-03 21:24:28 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\d51f7232ca4318443e22e5b849b56be1
[2012-08-03 21:24:28 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\cc4465c7a4d6ab7c3c71a21c20ffb8cc
[2012-08-03 21:24:28 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c2ab46251244d9a762871b80701d179d
[2012-08-03 21:24:28 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\a7493cdad01dfbe14a4931304b07c664
[2012-08-03 21:24:28 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\77b757a6915a602a1a033535ee1035c9
[2012-08-03 21:24:28 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\52324511a2b24647aad8cea8a34414ad
[2012-08-03 21:24:28 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\3527edb233b62a814134d0df5712ad01
[2012-08-03 21:24:26 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\5a597759262b0471cd6855a4f29f11a1
[2012-08-03 21:24:18 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\4b73d792a8662ca99aafab2eed62e1e3
[2012-08-04 08:48:12 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\862256d05d3f4864871a04e548fce496
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\fa3c4191d53634991ad026cf1f248763
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\e1d164723dd8e84d52434e2eb45c65d8
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\d6640604cba010f3198be1e1fac05659
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\d127a5a7f96690667286b54b87c6ea9b
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c3fd69d5965a545825096c92888ac4e5
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c3b383dbed3486fec3b06803e91166a3
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c19d8b2b7cea79fcb7217e276d29f0d6
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c15c5c13807cdaafb0730d7cb6c52100
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\b6b46ce56229f77dff4a8805fe897adc
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\b4202309849189cb8734eda2eb1e1d42
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\9a737f6374b1dba93ec51cfb907ec8ed
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\9277ba2952bfc867d6514a861d331c3f
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\90c198ecac038ba1c6356bdd7f5f7ae0
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\882acb0e94fbef8b776ab01381183714
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\8069e8dac3f7e14b9488c7e69b9c0c08
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\7eaaff5f00225fa1f64f16ecf1739146
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\66c4acc5539e0da00ef6f93c9278ae8d
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\5bb54f6adb479899ecfd343f1f34a081
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\538a8a36d725d19e2c8d87fad7f45c54
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2b9ce8bae155120c3fa905338305b80d
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\0b558e786524ec8c190d1c60e2995e50
[2012-08-04 08:48:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\080ca76367e927469d51bed0fe5146da
[2012-08-04 08:48:07 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\73971970a3025c2c6fa3f7bbc0a03fe9
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\f9f4378528457a18b4b826b9f0f1f38c
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\f2d778d28adcc9934f79f551ca26f09a
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\deaa3ec22375b61075c721d62bd806e9
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\d519ee2ad3eb0ea6887f183ba308eeeb
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\d3d3540910906a09198446fcd73a053b
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c8e58bb0f554c4fb6813df9a461ebb4b
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c71d57deb9340d98878bc92badde9745
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c37c3aeb8f877749955a0677101e9d9c
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c0fd5f9b1564b7108c8abe7e9d7611e7
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\ab929e6eb16ba4a5797092021b4f1402
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\9ed9d027b532a57260c7df38c23817ab
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\837068ba125f8cfe66f2af825a09dcba
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\7ae6b17a2531b326c1e0235a0e222261
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\65c35d3a4f7a6d615fa2db2e4b2617e6
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\5039f0af88f0ae75ad336c4b4d5fbcfb
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\465d0cf6a7e57bb7012a31115ed1fc55
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2fc62f215a2ef1f62ed02f2dc36cd5c4
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2ed7d1165130a9eb64f3b182786110e9
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2dc9324f8d7ccf2c18d06aa39ccf3857
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\10ddd183f7659cbc0216e836a4a8ce85
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\0e9f768f0c68fadbbdf5936a14362f71
[2012-08-04 08:48:03 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\032a0c34062a9987a6f928a09c9c5689
[2012-08-03 21:36:17 | 000,000,050 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2aba436640d6fd909b14ae8357037d746.dat
[2012-08-03 21:31:17 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\51b65e99b9ad73852545a0423902b961
[2012-08-03 21:30:26 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\5b054fd77fa25dbefe0ea03400b2ccef
[2012-08-03 21:25:16 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\a4a9ae41cdb980dc34857a27902c2f3c
[2012-08-03 21:24:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\746af4a4b9ab6ad11dd4b3856b586c76
[2012-08-03 21:24:41 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\ac2c5a8bc1fab12632ab3bab4e9bafb8
[2012-08-03 21:24:41 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\6b6342aadce896933ecaa2cd534b7abf
[2012-08-03 21:24:37 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\b86beea322bb9aa576dfb25799fa8945
[2012-08-03 21:24:37 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\77f8e1bfe5ece3782ce3b623925e0e4a
[2012-08-03 21:24:37 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\079fb9366f7e6bdafd994fe47c20ae8f
[2012-08-03 21:24:37 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\03b964ec61be41aeb77b2b07b828fe98
[2012-08-03 21:24:28 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\d51f7232ca4318443e22e5b849b56be1
[2012-08-03 21:24:28 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\cc4465c7a4d6ab7c3c71a21c20ffb8cc
[2012-08-03 21:24:28 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c2ab46251244d9a762871b80701d179d
[2012-08-03 21:24:28 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\a7493cdad01dfbe14a4931304b07c664
[2012-08-03 21:24:28 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\77b757a6915a602a1a033535ee1035c9
[2012-08-03 21:24:28 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\52324511a2b24647aad8cea8a34414ad
[2012-08-03 21:24:28 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\3527edb233b62a814134d0df5712ad01
[2012-08-03 21:24:26 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\5a597759262b0471cd6855a4f29f11a1
[2012-08-03 21:24:18 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\4b73d792a8662ca99aafab2eed62e1e3
[2012-08-03 21:24:04 | 000,433,664 | ---- | M] () -- C:\Users\Kamil\AppData\Roaming\784.exe
[2012-08-03 21:23:59 | 000,917,014 | ---- | M] () -- C:\Users\Kamil\AppData\Roaming\6772.exe
[2012-08-03 21:23:49 | 000,433,664 | ---- | M] () -- C:\Users\Kamil\AppData\Roaming\5244.exe
[2012-08-03 21:23:46 | 000,917,014 | ---- | M] () -- C:\Users\Kamil\AppData\Roaming\4918.exe
[2012-08-03 21:23:44 | 004,440,088 | ---- | M] () -- C:\Users\Kamil\AppData\Roaming\4369.exe
[2012-08-03 21:23:30 | 004,440,088 | ---- | M] () -- C:\Users\Kamil\AppData\Roaming\5968.exe
[2012-08-03 21:23:29 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\cbbdea3975de96576e7642a04da758ba
[2012-08-03 21:23:26 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\41e4d89bcbd4cc05da977b351083edfe
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\e0051e200fbc7e629384b3846ffdfb8c
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\cf1adc65f0acf10de65398032cd7bb2d
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\cc3749f0096e8a666a8322b8226abb07
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c2493114559f717def85b6582dab1de9
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\bb3d5dbc15732619f28b84054e55b634
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\af37cae8dbc26ce357474125e6b90e65
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\7f7859852dbe5727be44ee3e69274f02
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\78776b79edeb131a190eda0bf316642c
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\701ded72efccbac9d5fcc7a720eaa1a8
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\6e33b8081c50c58a4a74cf89b64a7a54
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\63f5fc2973f30d1e839bf8775527fe26
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\57d76a6fdc352f1d8ae9313f41d65751
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\5502e13ec2e7241e1aaba9cfc049043f
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\3f9246dc15fb34af9b25d7bcc0ab8afc
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\3f4fd048da156d2bf71d5f0dee6278f8
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\3c5b1299cf9ffb7bd6c165dbc2f18c21
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\35d908b42e66aa18559158c288b9e739
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\22d8736bf707a3aa35c32e807bb98779
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\17d869ef9d0497abe9df7b09d6c81897
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\1258eb676ec242a60c4ee1962b31a14c
[2012-08-03 21:23:11 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\0069eea99179b4b5caf7b51d0f03c23a
[2012-08-03 21:23:05 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\f9bf9418d1aa89a4d6f653159246e609
[2012-08-03 21:23:05 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\e807d87c0ed517379db5b191857a9d4c
[2012-08-03 21:23:05 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\d21ce721d64e458ac74952a4d1332740
[2012-08-03 21:23:05 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\cc72f3e65532a09814dd127122905a33
[2012-08-03 21:23:05 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\b48bb342ae44c23a2c0334db6d9684d2
[2012-08-03 21:23:05 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\b18438f729f3ac17b65f0fd77b2ddc6a
[2012-08-03 21:23:05 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\97a2de169632a0b2d32ef48e550187fd
[2012-08-03 21:23:05 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\886af038bbc880ac616521ec0365941f
[2012-08-03 21:23:05 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\7e8403fb0c57118046064197f313ac04
[2012-08-03 21:23:05 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\7df41de68ff05889d8331b9d050a24b2
[2012-08-03 21:23:05 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\736ad2eef6675bf73b2aa9cff0e1ee32
[2012-08-03 21:23:05 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\6719687f996b548a8bb0ca784b8b63a9
[2012-08-03 21:23:05 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\5c89b783afc65948d895d0b2b485fa2f
[2012-08-03 21:23:05 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\408ad7241d3eb092ba82ea17dfefd221
[2012-08-03 21:23:05 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\36aa62d329cda560c01b7ab111d4b60d
[2012-08-03 21:23:05 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2ee41bccd89314cbb2344d091c21c91d
[2012-08-03 21:23:04 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\e62fc113af3bedae523dfd118bfe2387
[2012-08-03 21:23:01 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\3f656ad6b90d31952799b5a783ae8b29
[2012-08-03 21:19:29 | 000,433,664 | ---- | M] () -- C:\Users\Kamil\AppData\Roaming\6792.exe
[2012-08-03 21:19:27 | 000,917,014 | ---- | M] () -- C:\Users\Kamil\AppData\Roaming\7297.exe
[2012-08-03 21:19:21 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\482e895d35bb8905d5c97eb50b917018
[2012-08-03 21:19:16 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\cc4fc0d57ae2e0ad0260359f42ac9cf0
[2012-08-03 21:19:16 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\1ad902ed0e078aa5f78f175a6558bdeb
[2012-08-03 21:19:14 | 004,440,088 | ---- | M] () -- C:\Users\Kamil\AppData\Roaming\8892.exe
[2012-08-03 21:19:13 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\b73e837bc801335f7e79ee5612be046c
[2012-08-03 21:19:08 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\cedd91a58c9f10b730768aed51c8d038
[2012-08-03 21:19:08 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\9620da639269377fa27ecf9bf0a91c53
[2012-08-03 21:19:08 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\3a498a37a06dd97594e26cb8f3bc639b
[2012-08-03 21:19:06 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\660f214a4e4231ac0df2ad52bb4757a5
[2012-08-03 21:18:57 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\13ec11ae41a785c9943eff4e115d5e41
[2012-08-03 21:18:36 | 000,433,664 | RHS- | M] () -- C:\Users\Kamil\AppData\Roaming\2aba436640d6fd909b14ae8357037d74.3TpGl3Ew
[2012-08-03 21:18:36 | 000,433,664 | ---- | M] () -- C:\Users\Kamil\AppData\Roaming\4414.exe
[2012-08-03 21:18:18 | 004,440,088 | ---- | M] () -- C:\Users\Kamil\AppData\Roaming\2840.exe
[2012-08-03 21:17:53 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\bc830cc7489bf71dd828c4c900362ca9
[2012-08-03 21:17:48 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\f3e38bc0217077822918c9c909fdc42f
[2012-08-03 21:17:48 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\e0ae8f31548ee005058d712a4369c65d
[2012-08-03 21:17:48 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c517aee5867171ae68cfa283475dec8c
[2012-08-03 21:17:48 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\b3033b811e967a8c203a2755dffed29c
[2012-08-03 21:17:48 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\af15a5d5a0b527ad7343133bc558f2f3
[2012-08-03 21:17:48 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\94930acc75d248193face5f43a46112c
[2012-08-03 21:17:48 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\8f0ba09f680967882b2ca11366ac88d4
[2012-08-03 21:17:48 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\8eee69695ca91bfbfc41cecfde1b23ab
[2012-08-03 21:17:48 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\703aa3ecd9464610c8d632a8df37443e
[2012-08-03 21:17:48 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\6b19a9c979090354b1636d0c79124cb4
[2012-08-03 21:17:48 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\64cbc1cd49366693181b61595ec06cfb
[2012-08-03 21:17:48 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\5f50fcf33d589328a57e2f9390276c9e
[2012-08-03 21:17:48 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\4ed9083d838660d7d09ff83e9f52fc76
[2012-08-03 21:17:48 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\3a8674d372442c30e8417860b787678e
[2012-08-03 21:17:48 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\20fc7a889ff193aa2303ad2e7190b0a2
[2012-08-03 21:17:48 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\0de2e991acbe787bd5032ad2d94bcbfa
[2012-08-03 21:17:47 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\4f5588a16c754baa1c03f5f9d93485e9
[2012-08-03 21:17:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\f76c611004681380244815665b906f3c
[2012-08-03 21:17:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c84498f5989ee12cc4712a51e377bad5
[2012-08-03 21:17:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\c06b820b188d09fcbe5973567874d3b1
[2012-08-03 21:17:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\beb472ac47d0275f8f5b89fcdcaa88c0
[2012-08-03 21:17:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\bcbf2b58d7f5f68f465af84facefa29c
[2012-08-03 21:17:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\b0b1afc9a62a359d4a605059226cbdd7
[2012-08-03 21:17:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\7f28f80bf25e9f5748756a354aa2394d
[2012-08-03 21:17:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\79b9c47386f4c4118d8260105498029c
[2012-08-03 21:17:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\4f582edcb211d8c490cbf410ca20c233
[2012-08-03 21:17:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\34a1cd6d7a64f8066a1f15aef1e82f7d
[2012-08-03 21:17:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\27158359ef7f07b6828196cdee98b727
[2012-08-03 21:17:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\26c64e9e020d432a9d8888d5d7a7391a
[2012-08-03 21:17:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\24f568afc930b43e656a6a728815f142
[2012-08-03 21:17:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2494ae0ea1953cf70b06b07c74c1fdff
[2012-08-03 21:17:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\246b8c24e762a17808ad02b3cce9757e
[2012-08-03 21:17:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2115f61b20fe9d132364cf167ad3d596
[2012-08-03 21:17:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\1adf86a21034482d50d51cc18ee5d1df
[2012-08-03 21:17:42 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\01edf2ef2d725c3b45c4b7869b5cf73c
[2012-08-03 21:17:38 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\533ce6a9ba6a7230398af03f74980ebd
[2012-08-03 21:17:31 | 000,000,000 | -HS- | M] () -- C:\Users\Kamil\AppData\Roaming\2abfd4aacce0073db8360b564f4a38aa
[2012-08-03 21:17:07 | 000,432,128 | RHS- | M] () -- C:\Users\Kamil\AppData\Roaming\2aba436640d6fd909b14ae8357037d74.dLDcu3LY
[2012-08-03 21:17:04 | 000,875,032 | RHS- | M] () -- C:\Users\Kamil\AppData\Roaming\2aba436640d6fd909b14ae8357037d74.yEzYllI4

:Files
C:\Users\Kamil\AppData\Roaming\*.exe
C:\Users\Kamil\AppData\Roaming\Wes
C:\Users\Kamil\AppData\Roaming\Osborne
C:\Users\Kamil\AppData\Roaming\Mitch Heinrik
C:\Users\Kamil\AppData\Roaming\Sutton
C:\Users\Kamil\AppData\Roaming\Jodi

:Reg
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Wes"=-
"Sutton"=-
"Stephen"=-
"Osborne"=-
"Mitch Heinrik"=-
"Jodi"=-
"Explorer"=-

:Commands
[Reboot]

Kliknij w Wykonaj skrypt. Zatwierdź restart komputera.

2. W panelu sterowania => dodaj lub usuń programy => wykonaj deinstalację tych śmieci: StartSearch Toolbar 1.3 / Bing Bar / Bing Bar Platform / Browsers Protector

3. Użyj Dostępne tylko dla zarejestrowanych użytkowników z opcji Delete. Pokaż raport który się wyświetli w notatniku po restarcie albo znajdziesz go: C:\Clean.txt

4. Pokaż log z Dostępne tylko dla zarejestrowanych użytkowników. Rozpakuj, uruchom go, wciśnij Start Scan i czekaj, aż zakończy się skanowanie. Raport znajdziesz na partycji C:\

5. Po wykonaniu tych czynnośći tworzysz ponownie logi z OTL. Ale przed wciśnięciem Skanuj zahaczykuj: Rejestr - skan dodatkowy - Użyj filtrowania. Potem wciskasz przycisk Skanuj.

Końcowo przedstawiasz logi z:

Raport z usuwania OTL'em
Raport z czyszczenia AdwCleanerem
Raport ze skanu TDSSKillera
Nowe logi z OTL (OTL.txt + Extras.txt)

Post04 sie 2012, 15:25

Raport z usuwania OTL'em
Dostępne tylko dla zarejestrowanych użytkowników

•Raport z czyszczenia AdwCleanerem
Dostępne tylko dla zarejestrowanych użytkowników

•Raport ze skanu TDSSKillera
Dostępne tylko dla zarejestrowanych użytkowników

•Nowe logi z OTL (OTL.txt + Extras.txt)
OTL.TXT
Dostępne tylko dla zarejestrowanych użytkowników

Extras.txt
Dostępne tylko dla zarejestrowanych użytkowników

Post04 sie 2012, 15:41

Nic tak nie zdziałamy.

1. Wykonaj skanowanie za pomocą Dostępne tylko dla zarejestrowanych użytkowników. W konfiguracji ustaw wszystkie obszary do skanu, to owszem potrwa długo. Zaprezentuj raport z wynikami typu "Detected" (inne typy mnie nie interesują).

2. Dorzuć też nowy komplet logów z OTL.

Post05 sie 2012, 12:37

Cały sęk twki w tym iż kaspersky nie konczy mi skanowania zatrzymuję się w pewnym miejscu i po prostu stoi.

W manadzeże zadan pojawia sie nielizcozna ilosc programów z rozszerzeniem exe np cmd.exe *32 wszystkie one mają rozszerzenie *32.

Post05 sie 2012, 12:53

Użyj ComboFixa : http://www.hotfix.pl/uzytkowanie-progra ... ix-a41.htm
i wklej z niego log