wyniki skanowania OTL, co robić?

Wszystko co dotyczy bezpieczeństwa systemów oraz walki z malware, w szczególności analiza logów
tksiadz

Użytkownik
Posty: 1
Rejestracja: 19 gru 2013, 15:04

wyniki skanowania OTL, co robić?

Post19 gru 2013, 15:18

OTL logfile created on: 2013-12-19 15:05:16 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\test\Desktop\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,47 Gb Total Physical Memory | 1,12 Gb Available Physical Memory | 45,47% Memory free
5,16 Gb Paging File | 3,71 Gb Available in Paging File | 71,80% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 102,78 Gb Total Space | 20,20 Gb Free Space | 19,66% Space Free | Partition Type: NTFS
Drive D: | 195,31 Gb Total Space | 140,82 Gb Free Space | 72,10% Space Free | Partition Type: NTFS
Drive E: | 91,85 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: TEST1-PC | User Name: test | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013-12-19 14:55:18 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\test\Desktop\Downloads\OTL.exe
PRC - [2013-12-18 22:48:43 | 000,066,848 | ---- | M] () -- C:\Program Files\SecretSauce\bin\utilSecretSauce.exe
PRC - [2013-12-10 21:28:36 | 001,862,536 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
PRC - [2013-12-07 02:25:20 | 000,066,848 | ---- | M] () -- C:\Program Files\SecretSauce\updateSecretSauce.exe
PRC - [2013-11-15 21:57:08 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2013-09-06 18:30:16 | 000,273,296 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
PRC - [2013-08-29 01:23:38 | 001,861,968 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2013-05-10 08:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013-03-04 12:31:30 | 003,602,752 | ---- | M] (RealVNC Ltd) -- C:\Program Files\RealVNC\VNC Server\vncserver.exe
PRC - [2012-02-16 09:46:42 | 000,043,112 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Common Files\ArcSoft\esinter\Bin\eservutil.exe
PRC - [2010-04-12 09:40:16 | 000,180,224 | ---- | M] (PowerISO Computing, Inc.) -- D:\PowerISO\PWRISOVM.EXE
PRC - [2010-03-17 15:21:37 | 000,204,800 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Users\test\AppData\Local\Temp\RtkBtMnt.exe
PRC - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe
PRC - [2009-04-11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008-07-02 11:36:50 | 000,850,440 | ---- | M] (Dritek System Inc.) -- C:\Program Files\Launch Manager\LManager.exe
PRC - [2008-05-07 16:19:26 | 006,139,904 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2008-01-21 03:23:32 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe


========== Modules (No Company Name) ==========

MOD - [2013-12-10 21:28:34 | 016,242,056 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_9_900_170.dll
MOD - [2013-11-15 21:57:07 | 003,363,952 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2013-08-29 01:25:02 | 000,100,688 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2013-08-29 01:23:38 | 001,861,968 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
MOD - [2008-07-08 23:26:04 | 000,159,744 | ---- | M] () -- C:\Windows\System32\atitmmxx.dll
MOD - [2003-06-07 13:30:08 | 000,057,344 | ---- | M] () -- C:\Program Files\Launch Manager\PowerUtl.dll


========== Services (SafeList) ==========

SRV - [2013-12-18 22:48:43 | 000,066,848 | ---- | M] () [Auto | Running] -- C:\Program Files\SecretSauce\bin\utilSecretSauce.exe -- (Util SecretSauce)
SRV - [2013-12-10 21:28:38 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013-12-07 02:25:20 | 000,066,848 | ---- | M] () [Auto | Running] -- C:\Program Files\SecretSauce\updateSecretSauce.exe -- (Update SecretSauce)
SRV - [2013-11-15 21:57:08 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013-09-06 18:29:38 | 000,235,216 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe -- (McComponentHostService)
SRV - [2013-07-25 07:52:52 | 000,162,672 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013-05-10 08:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013-03-04 12:31:30 | 003,602,752 | ---- | M] (RealVNC Ltd) [Auto | Running] -- C:\Program Files\RealVNC\VNC Server\vncserver.exe -- (vncserver)
SRV - [2012-02-16 09:46:42 | 000,043,112 | ---- | M] (ArcSoft Inc.) [Auto | Running] -- C:\Program Files\Common Files\ArcSoft\esinter\Bin\eservutil.exe -- (ADExchange)
SRV - [2012-01-08 20:55:46 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010-12-28 09:00:34 | 001,296,728 | ---- | M] (Dostępne tylko dla zarejestrowanych użytkowników) [On_Demand | Stopped] -- C:\Program Files\BitComet\tools\BitCometService.exe -- (BITCOMET_HELPER_SERVICE)
SRV - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccess)
SRV - [2008-01-21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleNT.sys -- (EagleNT)
DRV - File not found [Kernel | System | Stopped] -- system32\drivers\ArcSec.sys -- (ArcSec)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (acl0t367)
DRV - [2013-03-04 11:55:00 | 000,004,608 | ---- | M] (RealVNC Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vncmirror.sys -- (vncmirror)
DRV - [2011-10-27 02:25:56 | 000,123,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscemdm.sys -- (sscemdm)
DRV - [2011-10-27 02:25:56 | 000,100,352 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssceserd.sys -- (ssceserd)
DRV - [2011-10-27 02:25:56 | 000,098,560 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscebus.sys -- (sscebus)
DRV - [2011-10-27 02:25:56 | 000,014,848 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscemdfl.sys -- (sscemdfl)
DRV - [2011-10-27 02:25:40 | 000,136,808 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2011-10-27 02:25:40 | 000,121,064 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadbus.sys -- (ssadbus)
DRV - [2011-10-27 02:25:40 | 000,114,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadserd.sys -- (ssadserd)
DRV - [2011-10-27 02:25:40 | 000,030,312 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadadb.sys -- (androidusb)
DRV - [2011-10-27 02:25:40 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdfl.sys -- (ssadmdfl)
DRV - [2011-08-17 09:56:22 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2010-04-12 09:44:34 | 000,059,388 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2010-03-24 19:52:21 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2009-11-12 13:48:56 | 000,007,168 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2009-11-02 08:39:30 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009-03-02 13:00:46 | 000,095,592 | ---- | M] (Rocket Division Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\StarPortLite.sys -- (StarPortLite)
DRV - [2008-07-09 00:46:38 | 003,848,192 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2008-05-30 19:17:54 | 000,093,968 | ---- | M] (JMicron Technology Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\jmcr.sys -- (JMCR)
DRV - [2008-05-28 17:54:20 | 000,022,072 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\usbfilter.sys -- (usbfilter)
DRV - [2008-05-28 14:47:08 | 000,171,016 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\ahcix86s.sys -- (ahcix86s)
DRV - [2008-05-19 19:42:56 | 000,912,384 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2008-04-29 01:54:58 | 000,054,784 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\enecir.sys -- (enecir)
DRV - [2008-04-28 09:26:42 | 000,014,352 | ---- | M] (ATI Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\AtiPcie.sys -- (AtiPcie)
DRV - [2006-11-02 21:27:36 | 000,020,112 | ---- | M] (Dritek System Inc.) [Kernel | System | Running] -- C:\Program Files\Launch Manager\DPortIO.sys -- (DritekPortIO)
DRV - [2005-02-23 13:58:56 | 000,011,776 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\afc.sys -- (Afc)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = Dostępne tylko dla zarejestrowanych użytkowników
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Dostępne tylko dla zarejestrowanych użytkowników
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{2B86F212-0776-40B8-8F8D-03FB8EAEF25C}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20110731150728444&tb_oid=31-07-2011&tb_mrud=31-07-2011
IE - HKLM\..\SearchScopes\{C41BC1BD-C086-4AA0-99C1-A98BCFD7AB91}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&SearchSource=4&ctid=CT1098640

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = Dostępne tylko dla zarejestrowanych użytkowników
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Dostępne tylko dla zarejestrowanych użytkowników
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {AB79D3B4-AEDB-428a-B504-BAC00521A1C7}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{139F6B2A-764D-4344-8B9E-5F4D5102C6F9}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&loc=search_box&u=92823084816302018
IE - HKCU\..\SearchScopes\{2030E1A9-059C-4DCA-B516-4696266B0779}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&id=7c0f5c1b00000000000000234d361d7e&r=537
IE - HKCU\..\SearchScopes\{2B86F212-0776-40B8-8F8D-03FB8EAEF25C}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20110731150728444&tb_oid=31-07-2011&tb_mrud=31-07-2011
IE - HKCU\..\SearchScopes\{995BCB81-7D4C-4ADD-A356-271CC4FB2455}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&SearchSource=4&cc=&r=587
IE - HKCU\..\SearchScopes\{AB79D3B4-AEDB-428a-B504-BAC00521A1C7}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&cx=002904446094441487865%3Ate-nlsbrcdy&cof=FORID%3A10&ie=UTF-8&said=&do=search&empty=0&from=1
IE - HKCU\..\SearchScopes\{C41BC1BD-C086-4AA0-99C1-A98BCFD7AB91}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&SearchSource=4&ctid=CT1098640
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.gazeta.pl/0,0.html?p=128"
FF - prefs.js..browser.search.useDBForOrder: true
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Web Player Plug-In,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@powerchallenge.com/PowerLoader: C:\Users\test\AppData\LocalLow\POWERC~1\nppowerloader.dll (Power Challenge Sweden AB)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013-11-15 21:56:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013-11-15 21:56:54 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\SearchToolbar@skywebsearch.com: C:\Program Files\Save Tube Video Company\SaveTubeVideo\FF [2013-10-03 20:14:45 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 25.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013-11-15 21:56:52 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 25.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013-11-15 21:56:54 | 000,000,000 | ---D | M]

[2010-03-24 15:45:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\test\AppData\Roaming\mozilla\Extensions
[2013-12-18 14:45:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\test\AppData\Roaming\mozilla\Firefox\Profiles\c2db20og.default-1361744307772\extensions
[2013-09-29 18:02:11 | 000,000,000 | ---D | M] ("a2zLyrics-1") -- C:\Users\test\AppData\Roaming\mozilla\Firefox\Profiles\c2db20og.default-1361744307772\extensions\536c2ac1-a17c-4de1-a3f2-1b869a3be96c@2f6608a0-8c65-4bfe-8e2f-c65b5cc757cb.com
[2013-11-07 23:23:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\test\AppData\Roaming\mozilla\Firefox\Profiles\c2db20og.default-1361744307772\extensions\staged
[2013-09-29 18:02:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\test\AppData\Roaming\mozilla\Firefox\Profiles\c2db20og.default-1361744307772\extensions\536c2ac1-a17c-4de1-a3f2-1b869a3be96c@2f6608a0-8c65-4bfe-8e2f-c65b5cc757cb.com\extensionData
[2013-09-29 18:02:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\test\AppData\Roaming\mozilla\Firefox\Profiles\c2db20og.default-1361744307772\extensions\536c2ac1-a17c-4de1-a3f2-1b869a3be96c@2f6608a0-8c65-4bfe-8e2f-c65b5cc757cb.com\extensionData\plugins
[2013-09-29 18:02:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\test\AppData\Roaming\mozilla\Firefox\Profiles\c2db20og.default-1361744307772\extensions\536c2ac1-a17c-4de1-a3f2-1b869a3be96c@2f6608a0-8c65-4bfe-8e2f-c65b5cc757cb.com\extensionData\userCode
[2013-12-18 14:45:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\test\AppData\Roaming\mozilla\Firefox\Profiles\edwrl5vs.default-1379796729789\extensions
[2013-11-07 23:23:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\test\AppData\Roaming\mozilla\Firefox\Profiles\edwrl5vs.default-1379796729789\extensions\staged
[2013-12-18 15:23:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\test\AppData\Roaming\mozilla\Firefox\Profiles\gq6u12iv.default-1383552668493\extensions
[2013-12-18 15:23:23 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\test\AppData\Roaming\mozilla\Firefox\Profiles\gq6u12iv.default-1383552668493\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2013-11-06 17:12:46 | 000,000,000 | ---D | M] ("a2zLyrics-1") -- C:\Users\test\AppData\Roaming\mozilla\Firefox\Profiles\gq6u12iv.default-1383552668493\extensions\536c2ac1-a17c-4de1-a3f2-1b869a3be96c@2f6608a0-8c65-4bfe-8e2f-c65b5cc757cb.com
[2013-12-17 19:36:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\test\AppData\Roaming\mozilla\Firefox\Profiles\gq6u12iv.default-1383552668493\extensions\536c2ac1-a17c-4de1-a3f2-1b869a3be96c@2f6608a0-8c65-4bfe-8e2f-c65b5cc757cb.com\extensionData
[2013-12-17 19:36:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\test\AppData\Roaming\mozilla\Firefox\Profiles\gq6u12iv.default-1383552668493\extensions\536c2ac1-a17c-4de1-a3f2-1b869a3be96c@2f6608a0-8c65-4bfe-8e2f-c65b5cc757cb.com\extensionData\plugins
[2013-12-17 19:36:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\test\AppData\Roaming\mozilla\Firefox\Profiles\gq6u12iv.default-1383552668493\extensions\536c2ac1-a17c-4de1-a3f2-1b869a3be96c@2f6608a0-8c65-4bfe-8e2f-c65b5cc757cb.com\extensionData\userCode
[2013-12-18 14:45:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\test\AppData\Roaming\mozilla\Firefox\Profiles\hb32kotd.default\extensions
[2013-11-07 23:23:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\test\AppData\Roaming\mozilla\Firefox\Profiles\hb32kotd.default\extensions\staged
[2013-12-07 02:25:20 | 000,007,143 | ---- | M] () (No name found) -- C:\Users\test\AppData\Roaming\mozilla\firefox\profiles\c2db20og.default-1361744307772\extensions\firefox@secretsauce.biz.xpi
[2013-12-07 02:25:20 | 000,007,143 | ---- | M] () (No name found) -- C:\Users\test\AppData\Roaming\mozilla\firefox\profiles\edwrl5vs.default-1379796729789\extensions\firefox@secretsauce.biz.xpi
[2013-12-07 02:25:20 | 000,007,143 | ---- | M] () (No name found) -- C:\Users\test\AppData\Roaming\mozilla\firefox\profiles\gq6u12iv.default-1383552668493\extensions\firefox@secretsauce.biz.xpi
[2013-12-07 02:25:20 | 000,007,143 | ---- | M] () (No name found) -- C:\Users\test\AppData\Roaming\mozilla\firefox\profiles\hb32kotd.default\extensions\firefox@secretsauce.biz.xpi
[2013-05-13 11:14:17 | 000,001,378 | ---- | M] () -- C:\Users\test\AppData\Roaming\mozilla\firefox\profiles\c2db20og.default-1361744307772\searchplugins\privitize.xml
[2013-11-15 21:56:53 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013-11-15 21:56:53 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013-11-15 21:56:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013-11-15 21:57:09 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
File not found (No name found) -- C:\USERS\TEST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\C2DB20OG.DEFAULT-1361744307772\EXTENSIONS\{F9D03C26-0575-497E-821D-F7956D23E0CA}
[2011-11-03 07:59:20 | 000,917,816 | ---- | M] (BitComet) -- C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll
[2012-10-26 12:42:36 | 000,172,032 | ---- | M] (vShare.tv) -- C:\Program Files\mozilla firefox\plugins\npffvsharetvplg.dll
[2013-02-24 17:07:48 | 000,006,520 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2010-03-28 17:56:18 | 000,002,035 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fcmdSrchFxt.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: Dostępne tylko dla zarejestrowanych użytkowników
CHR - Extension: a2zLyrics-1 = C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\afeodekfkejjgjigfnhhifffljmhnpfn\1.25.34_1\crossrider
CHR - Extension: a2zLyrics-1 = C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\afeodekfkejjgjigfnhhifffljmhnpfn\1.25.34_1\
CHR - Extension: SecretSauce = C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbpebffoameokfhnaaedmefjncfboino\1.0.0_0\
CHR - Extension: Skype Click to Call = C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\
CHR - Extension: Google Wallet = C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_1\
CHR - Extension: a2zLyrics-1 = C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\afeodekfkejjgjigfnhhifffljmhnpfn\1.25.34_1\crossrider
CHR - Extension: a2zLyrics-1 = C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\afeodekfkejjgjigfnhhifffljmhnpfn\1.25.34_1\
CHR - Extension: SecretSauce = C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbpebffoameokfhnaaedmefjncfboino\1.0.0_0\
CHR - Extension: Skype Click to Call = C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\
CHR - Extension: Google Wallet = C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_1\

O1 HOSTS File: ([2006-09-18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
O2 - BHO: (SecretSauce) - {0ffd0ef2-dbe9-483a-80c4-d2c331da1ce4} - C:\Program Files\SecretSauce\SecretSauceBHO.dll (SecretSauce)
O2 - BHO: (ShowBarObj Class) - {2863E737-DD3F-4280-9AF8-E9E79C16F312} - C:\Program Files\Save Tube Video Company\SaveTubeVideo\MinBHO.dll ()
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Save Tube Video) - {F334C7B0-8774-4d5b-BD7A-4F448D03A1AE} - C:\Program Files\Save Tube Video Company\SaveTubeVideo\SaveTubeVideo.dll (Save Tube Video Company)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {B2E293EE-FD7E-4C71-A714-5F4750D8D7B7} - No CLSID value found.
O4 - HKLM..\Run: [DivXMediaServer] C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe (DivX, LLC)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [mobilegeni daemon] C:\Program Files\Mobogenie\DaemonProcess.exe File not found
O4 - HKLM..\Run: [NeroCheck] C:\Windows\System32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NPSStartup] File not found
O4 - HKLM..\Run: [PrivitizeVPN] C:\Program Files\PrivitizeVPN\PrivitizeVPN.exe (OOO Industry)
O4 - HKLM..\Run: [PWRISOVM.EXE] D:\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [NextLive] C:\Users\test\AppData\Roaming\newnext.me\nengine.dll (NewNextDotMe)
O4 - HKCU..\Run: [SpeedUpMyComputer] C:\Program Files\SmartTweak\SpeedUpMyComputer\SpeedUpMyComputer.exe /ot /as File not found
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &P&obierz &za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (Dostępne tylko dla zarejestrowanych użytkowników)
O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (Dostępne tylko dla zarejestrowanych użytkowników)
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{456F8E0C-28DA-47FB-A5E6-D322E886EFDE}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{54A3A621-00DE-42D9-B7A9-14C34352C36C}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5EF6F519-9FC8-4E07-9697-AD8D0DED1F55}: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (c:\progra~2\bitguard\271769~1.27\{c16c1~1\bitguard.dll) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\test\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\test\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2013-12-11 14:47:21 | 009,864,383 | ---- | M] () - D:\AUTO.sav -- [ NTFS ]
O32 - AutoRun File - [2011-05-23 13:30:44 | 009,306,668 | ---- | M] () - D:\auto.sav.sav -- [ NTFS ]
O32 - AutoRun File - [2009-02-09 10:16:44 | 002,290,328 | ---- | M] (Autodesk, Inc.) - D:\AutoCamRes.dll -- [ NTFS ]
O32 - AutoRun File - [2009-02-09 10:42:18 | 000,290,088 | ---- | M] (Autodesk, Inc.) - D:\Autodesk.Act.Content.DLL -- [ NTFS ]
O32 - AutoRun File - [2009-02-09 10:42:18 | 000,023,848 | ---- | M] (Autodesk, Inc.) - D:\Autodesk.Act.Core.DLL -- [ NTFS ]
O32 - AutoRun File - [2010-04-12 19:12:35 | 000,000,000 | ---D | M] - D:\autopatch -- [ NTFS ]
O32 - AutoRun File - [2011-01-27 13:35:20 | 000,000,048 | R--- | M] () - E:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{0aa9b5ea-31e2-11df-af30-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{0aa9b5ea-31e2-11df-af30-806e6f6e6963}\Shell\AutoRun\command - "" = E:\startuj.exe -- [2010-02-24 11:20:02 | 000,099,328 | R--- | M] ()
O33 - MountPoints2\{528bd0f5-d481-11df-b162-001eec5b4a9f}\Shell - "" = Autorun
O33 - MountPoints2\{528bd0f5-d481-11df-b162-001eec5b4a9f}\Shell\AutoRun\command - "" = setup.exe
O33 - MountPoints2\{528bd110-d481-11df-b162-001eec5b4a9f}\Shell - "" = AutoRun
O33 - MountPoints2\{528bd110-d481-11df-b162-001eec5b4a9f}\Shell\AutoRun\command - "" = I:\autorun.exe
O33 - MountPoints2\{8f311f92-43ad-11df-bc87-001eec5b4a9f}\Shell\AutoRun\command - "" = G:\Launcher.exe
O33 - MountPoints2\H\Shell - "" = AutoRun
O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\Autorun.exe
O33 - MountPoints2\J\Shell - "" = AutoRun
O33 - MountPoints2\J\Shell\AutoRun\command - "" = J:\Autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013-12-19 12:03:33 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2013-12-18 15:05:09 | 000,000,000 | R--D | C] -- C:\Users\test\Desktop\Coerver Coaching
[2013-12-18 15:00:49 | 000,000,000 | ---D | C] -- C:\Users\test\AppData\Roaming\DivX
[2013-12-18 14:47:13 | 000,000,000 | ---D | C] -- C:\Users\test\.android
[2013-12-18 14:47:08 | 000,000,000 | ---D | C] -- C:\Users\test\AppData\Roaming\newnext.me
[2013-12-18 14:47:07 | 000,000,000 | ---D | C] -- C:\Users\test\AppData\Local\genienext
[2013-12-18 14:47:05 | 000,000,000 | ---D | C] -- C:\Users\test\Documents\Mobogenie
[2013-12-18 14:47:05 | 000,000,000 | ---D | C] -- C:\Users\test\AppData\Local\Mobogenie
[2013-12-18 14:46:39 | 000,000,000 | ---D | C] -- C:\Program Files\Mobogenie
[2013-12-18 14:45:32 | 000,000,000 | ---D | C] -- C:\Program Files\SecretSauce
[2013-12-18 14:44:54 | 000,000,000 | ---D | C] -- C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com
[2013-12-12 08:56:15 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013-12-12 08:56:13 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013-12-12 08:56:12 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013-12-12 08:56:12 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2013-12-12 08:56:12 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013-12-12 08:56:10 | 001,806,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013-12-12 08:56:10 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013-12-12 08:56:09 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2013-12-11 08:57:30 | 002,050,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2013-12-11 08:57:28 | 000,335,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SysFxUI.dll
[2013-12-11 08:57:28 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\portcls.sys
[2013-12-11 08:57:28 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\drmk.sys
[2013-12-11 08:57:26 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscript.exe
[2013-12-11 08:57:26 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshcon.dll
[2013-12-09 13:26:48 | 000,000,000 | ---D | C] -- C:\Program Files\Origin Games
[2013-11-24 22:33:58 | 000,000,000 | ---D | C] -- C:\Users\test\Desktop\muzyka
[2013-11-24 18:43:49 | 000,000,000 | ---D | C] -- C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Razem w szkole klasa 3
[2013-11-24 18:43:37 | 000,000,000 | ---D | C] -- C:\Program Files\Razem w szkole klasa 3
[2013-09-22 12:18:40 | 000,461,880 | ---- | C] (WilSys Co., Ltd.) -- C:\Users\test\AppData\Roaming\dosearches.exe
[2012-02-20 09:38:49 | 002,371,152 | ---- | C] (DownVision ) -- C:\Users\test\AppData\Local\setup.exe
[2010-03-24 15:44:14 | 009,057,912 | ---- | C] (Mozilla) -- C:\Users\test\Firefox Setup 3.6.2.exe
[2 C:\Users\test\AppData\Local\*.tmp files -> C:\Users\test\AppData\Local\*.tmp -> ]
[1 C:\Users\test\Documents\*.tmp files -> C:\Users\test\Documents\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013-12-19 14:56:13 | 000,759,562 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2013-12-19 14:56:13 | 000,679,490 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013-12-19 14:56:13 | 000,168,270 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2013-12-19 14:56:12 | 000,136,870 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013-12-19 14:50:44 | 000,003,760 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013-12-19 14:50:44 | 000,003,760 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013-12-19 14:49:41 | 000,001,028 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013-12-19 14:49:17 | 000,459,240 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013-12-19 14:48:56 | 000,001,876 | ---- | M] () -- C:\Windows\tasks\a2zLyrics-1-chromeinstaller.job
[2013-12-19 14:48:56 | 000,001,800 | ---- | M] () -- C:\Windows\tasks\a2zLyrics-1-firefoxinstaller.job
[2013-12-19 14:48:56 | 000,001,276 | ---- | M] () -- C:\Windows\tasks\a2zLyrics-1-updater.job
[2013-12-19 14:48:56 | 000,001,180 | ---- | M] () -- C:\Windows\tasks\a2zLyrics-1-codedownloader.job
[2013-12-19 14:48:56 | 000,001,080 | ---- | M] () -- C:\Windows\tasks\a2zLyrics-1-enabler.job
[2013-12-19 14:48:42 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013-12-19 14:46:00 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013-12-19 14:28:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013-12-18 15:14:47 | 000,028,672 | ---- | M] () -- C:\Users\test\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013-12-10 21:28:36 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013-12-10 21:28:36 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013-11-24 18:43:49 | 000,000,932 | ---- | M] () -- C:\Users\test\Desktop\Razem w szkole klasa 3.lnk
[2013-11-21 00:15:20 | 000,002,023 | ---- | M] () -- C:\Users\test\Documents\Rysunek1.pdf
[2 C:\Users\test\AppData\Local\*.tmp files -> C:\Users\test\AppData\Local\*.tmp -> ]
[1 C:\Users\test\Documents\*.tmp files -> C:\Users\test\Documents\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013-11-24 18:43:49 | 000,000,932 | ---- | C] () -- C:\Users\test\Desktop\Razem w szkole klasa 3.lnk
[2013-11-21 00:15:20 | 000,002,023 | ---- | C] () -- C:\Users\test\Documents\Rysunek1.pdf
[2013-11-14 12:22:35 | 000,039,095 | ---- | C] () -- C:\Windows\iccsigs.dat
[2013-11-14 12:22:34 | 000,112,688 | ---- | C] () -- C:\Windows\System32\shw32.dll
[2013-10-22 11:14:26 | 000,005,504 | ---- | C] () -- C:\Users\test\faw32.lc
[2013-10-02 22:03:00 | 000,000,000 | ---- | C] () -- C:\Users\test\AppData\Local\{6F350BEC-3AB3-4F60-80C3-A1677F2BFCBE}
[2013-09-11 20:49:27 | 000,645,632 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2013-09-11 20:49:27 | 000,240,640 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2013-09-11 20:48:49 | 000,715,038 | ---- | C] () -- C:\Windows\unins000.exe
[2013-09-11 20:48:49 | 000,216,064 | ---- | C] ( ) -- C:\Windows\System32\lagarith.dll
[2013-09-11 20:48:49 | 000,001,783 | ---- | C] () -- C:\Windows\unins000.dat
[2013-04-09 11:12:20 | 000,707,504 | ---- | C] () -- C:\Users\test\AppData\Local\unins000.exe
[2013-03-01 01:11:43 | 000,000,025 | ---- | C] () -- C:\Windows\D2P.INI
[2013-03-01 01:09:45 | 003,194,880 | ---- | C] () -- C:\Windows\System32\gsdll321.dll
[2013-03-01 00:59:38 | 003,907,640 | ---- | C] () -- C:\Windows\System32\gsdll32.dll
[2012-04-26 22:41:45 | 000,011,761 | ---- | C] () -- C:\Users\test\AppData\Local\unins000.msg
[2012-04-26 22:41:44 | 000,005,886 | ---- | C] () -- C:\Users\test\AppData\Local\unins000.dat
[2011-11-14 11:44:12 | 000,000,552 | ---- | C] () -- C:\Users\test\AppData\Local\d3d8caps.dat
[2011-07-20 15:34:46 | 000,000,000 | ---- | C] () -- C:\Users\test\AppData\Local\{139525B6-C803-403A-90E9-DE96875A4A2B}
[2011-04-24 08:58:59 | 000,000,000 | ---- | C] () -- C:\Users\test\AppData\Local\{904A4EEB-C853-4A01-9839-B953F8D73063}
[2011-02-12 19:50:08 | 000,005,293 | ---- | C] () -- C:\Users\test\AppData\Roaming\UserTile.png
[2010-08-14 16:19:53 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010-04-28 21:10:50 | 000,002,528 | ---- | C] () -- C:\Users\test\AppData\Roaming\$_hpcst$.hpc
[2010-03-25 23:03:38 | 000,028,672 | ---- | C] () -- C:\Users\test\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-03-24 15:34:55 | 000,000,600 | ---- | C] () -- C:\Users\test\AppData\Local\PUTTY.RND
[2010-03-11 17:35:40 | 000,007,512 | ---- | C] () -- C:\Users\test\AppData\Local\d3d9caps.dat

========== ZeroAccess Check ==========

[2006-11-02 13:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012-06-08 18:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009-04-11 07:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009-04-11 07:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== Files - Unicode (All) ==========
[2013-11-13 08:41:46 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䍠ǝ䀐ǝ0
[2013-11-13 08:41:46 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䍠ǝ䀐ǝ0
[2013-11-12 22:52:32 | 000,000,000 | ---D | M](C:\ProgramData\?ć?ć0) -- C:\ProgramData\䍠ć䀐ć0
[2013-11-12 22:52:32 | 000,000,000 | ---D | M](C:\ProgramData\?ć?ć0) -- C:\ProgramData\䍠ć䀐ć0
[2013-11-12 20:09:14 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䍠nj䀐nj0
[2013-11-12 20:09:14 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䍠nj䀐nj0
[2013-11-12 19:56:57 | 000,000,000 | ---D | M](C:\ProgramData\?Ú?Ú0) -- C:\ProgramData\䍠Ú䀐Ú0
[2013-11-12 19:56:57 | 000,000,000 | ---D | M](C:\ProgramData\?Ú?Ú0) -- C:\ProgramData\䍠Ú䀐Ú0
[2013-11-12 07:57:07 | 000,000,000 | ---D | M](C:\ProgramData\?I?I0) -- C:\ProgramData\䍠Ĩ䀐Ĩ0
[2013-11-12 07:57:07 | 000,000,000 | ---D | M](C:\ProgramData\?I?I0) -- C:\ProgramData\䍠Ĩ䀐Ĩ0
[2013-11-12 07:46:10 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䍠ǵ䀐ǵ0
[2013-11-12 07:46:10 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䍠ǵ䀐ǵ0
[2013-11-11 11:53:09 | 000,000,000 | ---D | M](C:\ProgramData\?6?60) -- C:\ProgramData\䍠6䀐60
[2013-11-11 11:53:09 | 000,000,000 | ---D | M](C:\ProgramData\?6?60) -- C:\ProgramData\䍠6䀐60
[2013-11-11 08:38:05 | 000,000,000 | ---D | M](C:\ProgramData\?a?a0) -- C:\ProgramData\䍠ǟ䀐ǟ0
[2013-11-11 08:38:05 | 000,000,000 | ---D | M](C:\ProgramData\?a?a0) -- C:\ProgramData\䍠ǟ䀐ǟ0
[2013-11-10 08:57:27 | 000,000,000 | ---D | M](C:\ProgramData\?U?U0) -- C:\ProgramData\䍠Ǘ䀐Ǘ0
[2013-11-10 08:57:27 | 000,000,000 | ---D | M](C:\ProgramData\?U?U0) -- C:\ProgramData\䍠Ǘ䀐Ǘ0
[2013-11-09 22:26:07 | 000,000,000 | ---D | M](C:\ProgramData\?G?G0) -- C:\ProgramData\䍠Ǧ䀐Ǧ0
[2013-11-09 22:26:07 | 000,000,000 | ---D | M](C:\ProgramData\?G?G0) -- C:\ProgramData\䍠Ǧ䀐Ǧ0
[2013-11-09 15:01:15 | 000,000,000 | ---D | M](C:\ProgramData\?O?O0) -- C:\ProgramData\䍠Ǒ䀐Ǒ0
[2013-11-09 15:01:15 | 000,000,000 | ---D | M](C:\ProgramData\?O?O0) -- C:\ProgramData\䍠Ǒ䀐Ǒ0
[2013-11-08 14:37:56 | 000,000,000 | ---D | M](C:\ProgramData\?®?®0) -- C:\ProgramData\䍠®䀐®0
[2013-11-08 14:37:56 | 000,000,000 | ---D | M](C:\ProgramData\?®?®0) -- C:\ProgramData\䍠®䀐®0
[2013-11-07 23:43:09 | 000,000,000 | ---D | M](C:\ProgramData\?u?u0) -- C:\ProgramData\䍠û䀐û0
[2013-11-07 23:43:09 | 000,000,000 | ---D | M](C:\ProgramData\?u?u0) -- C:\ProgramData\䍠û䀐û0
[2013-11-07 21:59:12 | 000,000,000 | ---D | M](C:\ProgramData\?#?#0) -- C:\ProgramData\䋐#㾀#0
[2013-11-07 21:59:12 | 000,000,000 | ---D | M](C:\ProgramData\?#?#0) -- C:\ProgramData\䋐#㾀#0
[2013-11-07 20:51:16 | 000,000,000 | ---D | M](C:\ProgramData\?k?k0) -- C:\ProgramData\䋐ǩ㾀ǩ0
[2013-11-07 20:51:16 | 000,000,000 | ---D | M](C:\ProgramData\?k?k0) -- C:\ProgramData\䋐ǩ㾀ǩ0
[2013-11-06 23:54:10 | 000,000,000 | ---D | M](C:\ProgramData\?A?A0) -- C:\ProgramData\䋐A㾀A0
[2013-11-06 23:54:10 | 000,000,000 | ---D | M](C:\ProgramData\?A?A0) -- C:\ProgramData\䋐A㾀A0
[2013-11-06 17:04:33 | 000,000,000 | ---D | M](C:\ProgramData\?j?j0) -- C:\ProgramData\䋐ǰ㾀ǰ0
[2013-11-06 17:04:33 | 000,000,000 | ---D | M](C:\ProgramData\?j?j0) -- C:\ProgramData\䋐ǰ㾀ǰ0
[2013-11-06 09:22:47 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䋐ƴ㾀ƴ0
[2013-11-06 09:22:47 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䋐ƴ㾀ƴ0
[2013-11-06 05:21:50 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䋐þ㾀þ0
[2013-11-06 05:21:50 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䋐þ㾀þ0
[2013-11-05 07:13:38 | 000,000,000 | ---D | M](C:\ProgramData\?ă?ă0) -- C:\ProgramData\䋐ă㾀ă0
[2013-11-05 07:13:38 | 000,000,000 | ---D | M](C:\ProgramData\?ă?ă0) -- C:\ProgramData\䋐ă㾀ă0
[2013-11-04 08:51:42 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䋐DŽ㾀DŽ0
[2013-11-04 08:51:42 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䋐DŽ㾀DŽ0
[2013-11-03 08:55:01 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䋐ǁ㾀ǁ0
[2013-11-03 08:55:01 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䋐ǁ㾀ǁ0
[2013-11-02 08:20:59 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䋐Lj㾀Lj0
[2013-11-02 08:20:59 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䋐Lj㾀Lj0
[2013-11-01 21:41:03 | 000,000,000 | ---D | M](C:\ProgramData\?U?U0) -- C:\ProgramData\䋐Ù㾀Ù0
[2013-11-01 21:41:03 | 000,000,000 | ---D | M](C:\ProgramData\?U?U0) -- C:\ProgramData\䋐Ù㾀Ù0
[2013-11-01 08:36:54 | 000,000,000 | ---D | M](C:\ProgramData\?đ?đ0) -- C:\ProgramData\䋐đ㾀đ0
[2013-11-01 08:36:54 | 000,000,000 | ---D | M](C:\ProgramData\?đ?đ0) -- C:\ProgramData\䋐đ㾀đ0
[2013-10-31 20:53:20 | 000,000,000 | ---D | M](C:\ProgramData\?I?I0) -- C:\ProgramData\䋐Ĭ㾀Ĭ0
[2013-10-31 20:53:20 | 000,000,000 | ---D | M](C:\ProgramData\?I?I0) -- C:\ProgramData\䋐Ĭ㾀Ĭ0
[2013-10-31 12:12:53 | 000,000,000 | ---D | M](C:\ProgramData\?G?G0) -- C:\ProgramData\䋐Ǥ㾀Ǥ0
[2013-10-31 12:12:53 | 000,000,000 | ---D | M](C:\ProgramData\?G?G0) -- C:\ProgramData\䋐Ǥ㾀Ǥ0
[2013-10-31 07:46:48 | 000,000,000 | ---D | M](C:\ProgramData\?O?O0) -- C:\ProgramData\䋐Ò㾀Ò0
[2013-10-31 07:46:48 | 000,000,000 | ---D | M](C:\ProgramData\?O?O0) -- C:\ProgramData\䋐Ò㾀Ò0
[2013-10-30 19:42:02 | 000,000,000 | ---D | M](C:\ProgramData\?u?u0) -- C:\ProgramData\䋐ǖ㾀ǖ0
[2013-10-30 19:42:02 | 000,000,000 | ---D | M](C:\ProgramData\?u?u0) -- C:\ProgramData\䋐ǖ㾀ǖ0
[2013-10-30 08:36:38 | 000,000,000 | ---D | M](C:\ProgramData\?U?U0) -- C:\ProgramData\䋐Ǚ㾀Ǚ0
[2013-10-30 08:36:38 | 000,000,000 | ---D | M](C:\ProgramData\?U?U0) -- C:\ProgramData\䋐Ǚ㾀Ǚ0
[2013-10-29 21:19:40 | 000,000,000 | ---D | M](C:\ProgramData\?n?n0) -- C:\ProgramData\䋐ñ㾀ñ0
[2013-10-29 21:19:40 | 000,000,000 | ---D | M](C:\ProgramData\?n?n0) -- C:\ProgramData\䋐ñ㾀ñ0
[2013-10-29 10:25:15 | 000,000,000 | ---D | M](C:\ProgramData\?O?O0) -- C:\ProgramData\䋐Ǭ㾀Ǭ0
[2013-10-29 10:25:15 | 000,000,000 | ---D | M](C:\ProgramData\?O?O0) -- C:\ProgramData\䋐Ǭ㾀Ǭ0
[2013-10-29 08:50:06 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䋐Ƕ㾀Ƕ0
[2013-10-29 08:50:06 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䋐Ƕ㾀Ƕ0
[2013-10-28 21:53:22 | 000,000,000 | ---D | M](C:\ProgramData\?e?e0) -- C:\ProgramData\䋐ê㾀ê0
[2013-10-28 21:53:22 | 000,000,000 | ---D | M](C:\ProgramData\?e?e0) -- C:\ProgramData\䋐ê㾀ê0
[2013-10-28 08:49:31 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䋐‡㾀‡0
[2013-10-28 08:49:31 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䋐‡㾀‡0
[2013-10-28 08:04:28 | 000,000,000 | ---D | M](C:\ProgramData\?A?A0) -- C:\ProgramData\䋐Ǟ㾀Ǟ0
[2013-10-28 08:04:28 | 000,000,000 | ---D | M](C:\ProgramData\?A?A0) -- C:\ProgramData\䋐Ǟ㾀Ǟ0
[2013-10-27 11:47:33 | 000,000,000 | ---D | M](C:\ProgramData\?Ţ?Ţ0) -- C:\ProgramData\䋐Ţ㾀Ţ0
[2013-10-27 11:47:33 | 000,000,000 | ---D | M](C:\ProgramData\?Ţ?Ţ0) -- C:\ProgramData\䋐Ţ㾀Ţ0
[2013-10-26 16:07:42 | 000,000,000 | ---D | M](C:\ProgramData\?g?g0) -- C:\ProgramData\䋐ǧ㾀ǧ0
[2013-10-26 16:07:42 | 000,000,000 | ---D | M](C:\ProgramData\?g?g0) -- C:\ProgramData\䋐ǧ㾀ǧ0
[2013-10-26 13:12:13 | 000,000,000 | ---D | M](C:\ProgramData\?@?@0) -- C:\ProgramData\䋐@㾀@0
[2013-10-26 13:12:13 | 000,000,000 | ---D | M](C:\ProgramData\?@?@0) -- C:\ProgramData\䋐@㾀@0
[2013-10-26 07:11:31 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䋐ǡ㾀ǡ0
[2013-10-26 07:11:31 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䋐ǡ㾀ǡ0
[2013-10-24 22:14:04 | 000,000,000 | ---D | M](C:\ProgramData\?G?G0) -- C:\ProgramData\䋐Ĝ㾀Ĝ0
[2013-10-24 22:14:04 | 000,000,000 | ---D | M](C:\ProgramData\?G?G0) -- C:\ProgramData\䋐Ĝ㾀Ĝ0
[2013-10-24 11:44:37 | 000,000,000 | ---D | M](C:\ProgramData\?ç?ç0) -- C:\ProgramData\䋐ç㾀ç0
[2013-10-24 11:44:37 | 000,000,000 | ---D | M](C:\ProgramData\?ç?ç0) -- C:\ProgramData\䋐ç㾀ç0
[2013-10-24 07:58:21 | 000,000,000 | ---D | M](C:\ProgramData\?g?g0) -- C:\ProgramData\䋐ğ㾀ğ0
[2013-10-24 07:58:21 | 000,000,000 | ---D | M](C:\ProgramData\?g?g0) -- C:\ProgramData\䋐ğ㾀ğ0
[2013-10-23 08:57:55 | 000,000,000 | ---D | M](C:\ProgramData\?ˆ?ˆ0) -- C:\ProgramData\䋐ˆ㾀ˆ0
[2013-10-23 08:57:55 | 000,000,000 | ---D | M](C:\ProgramData\?ˆ?ˆ0) -- C:\ProgramData\䋐ˆ㾀ˆ0
[2013-10-16 11:39:26 | 000,000,000 | ---D | M](C:\ProgramData\?f?f0) -- C:\ProgramData\䉰f㼠f0
[2013-10-16 11:39:26 | 000,000,000 | ---D | M](C:\ProgramData\?f?f0) -- C:\ProgramData\䉰f㼠f0
[2013-10-14 22:19:46 | 000,000,000 | ---D | M](C:\ProgramData\?u?u0) -- C:\ProgramData\䉰ũ㼠ũ0
[2013-10-14 22:19:46 | 000,000,000 | ---D | M](C:\ProgramData\?u?u0) -- C:\ProgramData\䉰ũ㼠ũ0
[2013-10-13 07:58:14 | 000,000,000 | ---D | M](C:\ProgramData\?×?×0) -- C:\ProgramData\䉰×㼠×0
[2013-10-13 07:58:14 | 000,000,000 | ---D | M](C:\ProgramData\?×?×0) -- C:\ProgramData\䉰×㼠×0
[2013-10-11 07:49:01 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ʃ㼠Ʃ0
[2013-10-11 07:49:01 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ʃ㼠Ʃ0
[2013-10-07 08:26:57 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ƕ㼠Ƕ0
[2013-10-07 08:26:57 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ƕ㼠Ƕ0
[2013-10-05 16:30:48 | 000,000,000 | ---D | M](C:\ProgramData\?ó?ó0) -- C:\ProgramData\䉰ó㼠ó0
[2013-10-05 16:30:48 | 000,000,000 | ---D | M](C:\ProgramData\?ó?ó0) -- C:\ProgramData\䉰ó㼠ó0
[2013-10-01 06:47:32 | 000,000,000 | ---D | M](C:\ProgramData\?g?g0) -- C:\ProgramData\䉰ġ㼠ġ0
[2013-10-01 06:47:32 | 000,000,000 | ---D | M](C:\ProgramData\?g?g0) -- C:\ProgramData\䉰ġ㼠ġ0
[2013-09-30 09:23:14 | 000,000,000 | ---D | M](C:\ProgramData\?'?'0) -- C:\ProgramData\䉰'㼠'0
[2013-09-30 09:23:14 | 000,000,000 | ---D | M](C:\ProgramData\?'?'0) -- C:\ProgramData\䉰'㼠'0
[2013-09-30 07:44:01 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰„㼠„0
[2013-09-30 07:44:01 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰„㼠„0
[2013-09-29 18:52:40 | 000,000,000 | ---D | M](C:\ProgramData\?'?'????????????????????p???????) -- C:\ProgramData\睸ˈ㣀ˈ楬整灡獰洮慣敦⹥潣⽭灡獰洯獳㌯〮栯汥⹰獡p灳䌀䰻彃䥔䕍䌽
[2013-09-29 18:52:40 | 000,000,000 | ---D | M](C:\ProgramData\?'?'????????????????????p???????) -- C:\ProgramData\睸ˈ㣀ˈ楬整灡獰洮慣敦⹥潣⽭灡獰洯獳㌯〮栯汥⹰獡p灳䌀䰻彃䥔䕍䌽
[2013-09-27 22:17:32 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰NJ㼠NJ0
[2013-09-27 22:17:32 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰NJ㼠NJ0
[2013-09-21 08:17:40 | 000,000,000 | ---D | M](C:\ProgramData\?c?c0) -- C:\ProgramData\䉰¢㼠¢0
[2013-09-21 08:17:40 | 000,000,000 | ---D | M](C:\ProgramData\?c?c0) -- C:\ProgramData\䉰¢㼠¢0
[2013-09-15 20:19:07 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ÿ㼠Ÿ0
[2013-09-15 20:19:07 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ÿ㼠Ÿ0
[2013-09-14 04:17:23 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ð㼠Ð0
[2013-09-14 04:17:23 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ð㼠Ð0
[2013-09-12 07:57:36 | 000,000,000 | ---D | M](C:\ProgramData\?N?N0) -- C:\ProgramData\䉰Ñ㼠Ñ0
[2013-09-12 07:57:36 | 000,000,000 | ---D | M](C:\ProgramData\?N?N0) -- C:\ProgramData\䉰Ñ㼠Ñ0
[2013-09-11 21:06:15 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰•㼠•0
[2013-09-11 21:06:15 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰•㼠•0
[2013-08-10 06:23:16 | 000,000,000 | ---D | M](C:\ProgramData\?6?60) -- C:\ProgramData\䉰6㼠60
[2013-08-10 06:23:16 | 000,000,000 | ---D | M](C:\ProgramData\?6?60) -- C:\ProgramData\䉰6㼠60
[2013-08-08 07:56:32 | 000,000,000 | ---D | M](C:\ProgramData\?a?a0) -- C:\ProgramData\䉰æ㼠æ0
[2013-08-08 07:56:32 | 000,000,000 | ---D | M](C:\ProgramData\?a?a0) -- C:\ProgramData\䉰æ㼠æ0
[2013-08-05 12:44:16 | 000,000,000 | ---D | M](C:\ProgramData\?r?r????????????????????p???????) -- C:\ProgramData\睸ŗ㣀ŗ楬整灡獰洮慣敦⹥潣⽭灡獰洯獳㌯〮栯汥⹰獡p灳䌀䰻彃䥔䕍䌽
[2013-08-05 12:44:16 | 000,000,000 | ---D | M](C:\ProgramData\?r?r????????????????????p???????) -- C:\ProgramData\睸ŗ㣀ŗ楬整灡獰洮慣敦⹥潣⽭灡獰洯獳㌯〮栯汥⹰獡p灳䌀䰻彃䥔䕍䌽
[2013-08-05 06:36:17 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ɯ㼠Ɯ0
[2013-08-05 06:36:17 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ɯ㼠Ɯ0
[2013-07-29 17:32:43 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰›㼠›0
[2013-07-29 17:32:43 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰›㼠›0
[2013-07-27 16:05:33 | 000,000,000 | ---D | M](C:\ProgramData\?3?30) -- C:\ProgramData\䉰¾㼠¾0
[2013-07-27 16:05:33 | 000,000,000 | ---D | M](C:\ProgramData\?3?30) -- C:\ProgramData\䉰¾㼠¾0
[2013-07-27 11:18:41 | 000,000,000 | ---D | M](C:\ProgramData\?{?{0) -- C:\ProgramData\䉰{㼠{0
[2013-07-27 11:18:41 | 000,000,000 | ---D | M](C:\ProgramData\?{?{0) -- C:\ProgramData\䉰{㼠{0
[2013-07-27 09:56:23 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰‰㼠‰0
[2013-07-27 09:56:23 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰‰㼠‰0
[2013-07-26 09:37:13 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰†㼠†0
[2013-07-26 09:37:13 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰†㼠†0
[2013-07-21 20:54:06 | 000,000,000 | ---D | M](C:\ProgramData\?·?·0) -- C:\ProgramData\䉰·㼠·0
[2013-07-21 20:54:06 | 000,000,000 | ---D | M](C:\ProgramData\?·?·0) -- C:\ProgramData\䉰·㼠·0
[2013-07-21 08:07:51 | 000,000,000 | ---D | M](C:\ProgramData\?ä?ä0) -- C:\ProgramData\䉰ä㼠ä0
[2013-07-21 08:07:51 | 000,000,000 | ---D | M](C:\ProgramData\?ä?ä0) -- C:\ProgramData\䉰ä㼠ä0
[2013-07-20 06:36:40 | 000,000,000 | ---D | M](C:\ProgramData\?î?î0) -- C:\ProgramData\䉰î㼠î0
[2013-07-20 06:36:40 | 000,000,000 | ---D | M](C:\ProgramData\?î?î0) -- C:\ProgramData\䉰î㼠î0
[2013-07-17 07:10:25 | 000,000,000 | ---D | M](C:\ProgramData\?2?20) -- C:\ProgramData\䉰²㼠²0
[2013-07-17 07:10:25 | 000,000,000 | ---D | M](C:\ProgramData\?2?20) -- C:\ProgramData\䉰²㼠²0
[2013-07-16 20:45:50 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ƽ㼠Ƽ0
[2013-07-16 20:45:50 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ƽ㼠Ƽ0
[2013-07-16 09:16:20 | 000,000,000 | ---D | M](C:\ProgramData\?µ?µ0) -- C:\ProgramData\䉰µ㼠µ0
[2013-07-16 09:16:20 | 000,000,000 | ---D | M](C:\ProgramData\?µ?µ0) -- C:\ProgramData\䉰µ㼠µ0
[2013-07-14 09:00:47 | 000,000,000 | ---D | M](C:\ProgramData\?¬?¬0) -- C:\ProgramData\䉰¬㼠¬0
[2013-07-14 09:00:47 | 000,000,000 | ---D | M](C:\ProgramData\?¬?¬0) -- C:\ProgramData\䉰¬㼠¬0
[2013-07-10 20:48:49 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ǹ㼠Ǹ0
[2013-07-10 20:48:49 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ǹ㼠Ǹ0
[2013-07-10 10:44:29 | 000,000,000 | ---D | M](C:\ProgramData\?ý?ý0) -- C:\ProgramData\䉰ý㼠ý0
[2013-07-10 10:44:29 | 000,000,000 | ---D | M](C:\ProgramData\?ý?ý0) -- C:\ProgramData\䉰ý㼠ý0
[2013-07-10 07:01:43 | 000,000,000 | ---D | M](C:\ProgramData\?a?a0) -- C:\ProgramData\䉰ª㼠ª0
[2013-07-10 07:01:43 | 000,000,000 | ---D | M](C:\ProgramData\?a?a0) -- C:\ProgramData\䉰ª㼠ª0
[2013-07-07 23:17:27 | 000,000,000 | ---D | M](C:\ProgramData\?=?=0) -- C:\ProgramData\䉰=㼠=0
[2013-07-07 23:17:27 | 000,000,000 | ---D | M](C:\ProgramData\?=?=0) -- C:\ProgramData\䉰=㼠=0
[2013-07-04 07:21:10 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰’㼠’0
[2013-07-04 07:21:10 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰’㼠’0
[2013-07-03 21:05:44 | 000,000,000 | ---D | M](C:\ProgramData\?y?y0) -- C:\ProgramData\䉰ÿ㼠ÿ0
[2013-07-03 21:05:44 | 000,000,000 | ---D | M](C:\ProgramData\?y?y0) -- C:\ProgramData\䉰ÿ㼠ÿ0
[2013-07-02 06:46:06 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ƨ㼠Ƨ0
[2013-07-02 06:46:06 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ƨ㼠Ƨ0
[2013-07-01 07:20:32 | 000,000,000 | ---D | M](C:\ProgramData\?I?I0) -- C:\ProgramData\䉰I㼠I0
[2013-07-01 07:20:32 | 000,000,000 | ---D | M](C:\ProgramData\?I?I0) -- C:\ProgramData\䉰I㼠I0
[2013-06-29 06:13:07 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ǵ㼠Ǵ0
[2013-06-29 06:13:07 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ǵ㼠Ǵ0
[2013-06-28 12:11:39 | 000,000,000 | ---D | M](C:\ProgramData\?&?&0) -- C:\ProgramData\䉰&㼠&0
[2013-06-28 12:11:39 | 000,000,000 | ---D | M](C:\ProgramData\?&?&0) -- C:\ProgramData\䉰&㼠&0
[2013-06-26 23:08:33 | 000,000,000 | ---D | M](C:\ProgramData\?u?u0) -- C:\ProgramData\䉰u㼠u0
[2013-06-26 23:08:33 | 000,000,000 | ---D | M](C:\ProgramData\?u?u0) -- C:\ProgramData\䉰u㼠u0
[2013-06-24 06:11:28 | 000,000,000 | ---D | M](C:\ProgramData\? ? 0) -- C:\ProgramData\䉰 㼠 0
[2013-06-24 06:11:28 | 000,000,000 | ---D | M](C:\ProgramData\? ? 0) -- C:\ProgramData\䉰 㼠 0
[2013-06-21 06:16:20 | 000,000,000 | ---D | M](C:\ProgramData\?f?f0) -- C:\ProgramData\䉰ƒ㼠ƒ0
[2013-06-21 06:16:20 | 000,000,000 | ---D | M](C:\ProgramData\?f?f0) -- C:\ProgramData\䉰ƒ㼠ƒ0
[2013-06-20 08:14:43 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰™㼠™0
[2013-06-20 08:14:43 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰™㼠™0
[2013-06-20 07:39:10 | 000,000,000 | ---D | M](C:\ProgramData\?+?+0) -- C:\ProgramData\䉰+㼠+0
[2013-06-20 07:39:10 | 000,000,000 | ---D | M](C:\ProgramData\?+?+0) -- C:\ProgramData\䉰+㼠+0
[2013-06-18 18:26:11 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ƹ㼠ƹ0
[2013-06-18 18:26:11 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ƹ㼠ƹ0
[2013-06-16 07:10:39 | 000,000,000 | ---D | M](C:\ProgramData\?©?©0) -- C:\ProgramData\䉰©㼠©0
[2013-06-16 07:10:39 | 000,000,000 | ---D | M](C:\ProgramData\?©?©0) -- C:\ProgramData\䉰©㼠©0
[2013-06-14 20:27:51 | 000,000,000 | ---D | M](C:\ProgramData\?7?70) -- C:\ProgramData\䉰7㼠70
[2013-06-14 20:27:51 | 000,000,000 | ---D | M](C:\ProgramData\?7?70) -- C:\ProgramData\䉰7㼠70
[2013-06-13 06:08:50 | 000,000,000 | ---D | M](C:\ProgramData\?h?h0) -- C:\ProgramData\䉰ĥ㼠ĥ0
[2013-06-13 06:08:50 | 000,000,000 | ---D | M](C:\ProgramData\?h?h0) -- C:\ProgramData\䉰ĥ㼠ĥ0
[2013-06-11 07:03:36 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ʋ㼠Ʋ0
[2013-06-11 07:03:36 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ʋ㼠Ʋ0
[2013-06-10 06:30:36 | 000,000,000 | ---D | M](C:\ProgramData\?O?O0) -- C:\ProgramData\䉰Ǭ㼠Ǭ0
[2013-06-10 06:30:36 | 000,000,000 | ---D | M](C:\ProgramData\?O?O0) -- C:\ProgramData\䉰Ǭ㼠Ǭ0
[2013-06-09 08:22:32 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ʊ㼠Ʊ0
[2013-06-09 08:22:32 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ʊ㼠Ʊ0
[2013-06-09 08:16:56 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Š㼠Š0
[2013-06-09 08:16:56 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Š㼠Š0
[2013-06-08 06:53:46 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰DŽ㼠DŽ0
[2013-06-08 06:53:46 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰DŽ㼠DŽ0
[2013-06-06 15:54:11 | 000,000,000 | ---D | M](C:\ProgramData\?Ö?Ö0) -- C:\ProgramData\䉰Ö㼠Ö0
[2013-06-06 15:54:11 | 000,000,000 | ---D | M](C:\ProgramData\?Ö?Ö0) -- C:\ProgramData\䉰Ö㼠Ö0
[2013-06-06 10:27:05 | 000,000,000 | ---D | M](C:\ProgramData\?i?i0) -- C:\ProgramData\䉰ĩ㼠ĩ0
[2013-06-06 10:27:05 | 000,000,000 | ---D | M](C:\ProgramData\?i?i0) -- C:\ProgramData\䉰ĩ㼠ĩ0
[2013-06-05 06:17:25 | 000,000,000 | ---D | M](C:\ProgramData\?u?u0) -- C:\ProgramData\䉰ù㼠ù0
[2013-06-05 06:17:25 | 000,000,000 | ---D | M](C:\ProgramData\?u?u0) -- C:\ProgramData\䉰ù㼠ù0
[2013-06-03 22:44:36 | 000,000,000 | ---D | M](C:\ProgramData\????????????????????????p???????) -- C:\ProgramData\睸ʱ㣀ʱ楬整灡獰洮慣敦⹥潣⽭灡獰洯獳㌯〮栯汥⹰獡p灳䌀䰻彃䥔䕍䌽
[2013-06-03 22:44:36 | 000,000,000 | ---D | M](C:\ProgramData\????????????????????????p???????) -- C:\ProgramData\睸ʱ㣀ʱ楬整灡獰洮慣敦⹥潣⽭灡獰洯獳㌯〮栯汥⹰獡p灳䌀䰻彃䥔䕍䌽
[2013-06-02 12:51:27 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ʀ㼠Ʀ0
[2013-06-02 12:51:27 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ʀ㼠Ʀ0
[2013-05-31 10:23:12 | 000,000,000 | ---D | M](C:\ProgramData\?ź?ź0) -- C:\ProgramData\䉰ź㼠ź0
[2013-05-31 10:23:12 | 000,000,000 | ---D | M](C:\ProgramData\?ź?ź0) -- C:\ProgramData\䉰ź㼠ź0
[2013-05-31 06:49:36 | 000,000,000 | ---D | M](C:\ProgramData\?t?t0) -- C:\ProgramData\䉰ƫ㼠ƫ0
[2013-05-31 06:49:36 | 000,000,000 | ---D | M](C:\ProgramData\?t?t0) -- C:\ProgramData\䉰ƫ㼠ƫ0
[2013-05-26 20:00:03 | 000,000,000 | ---D | M](C:\ProgramData\?A?A0) -- C:\ProgramData\䉰A㼠A0
[2013-05-26 20:00:03 | 000,000,000 | ---D | M](C:\ProgramData\?A?A0) -- C:\ProgramData\䉰A㼠A0
[2013-05-19 22:32:05 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ƥ㼠ƥ0
[2013-05-19 22:32:05 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ƥ㼠ƥ0
[2013-05-17 13:52:30 | 000,000,000 | ---D | M](C:\ProgramData\?T?T0) -- C:\ProgramData\䉰Ʈ㼠Ʈ0
[2013-05-17 13:52:30 | 000,000,000 | ---D | M](C:\ProgramData\?T?T0) -- C:\ProgramData\䉰Ʈ㼠Ʈ0
[2013-05-17 06:14:43 | 000,000,000 | ---D | M](C:\ProgramData\?(?(0) -- C:\ProgramData\䉰(㼠(0
[2013-05-17 06:14:43 | 000,000,000 | ---D | M](C:\ProgramData\?(?(0) -- C:\ProgramData\䉰(㼠(0
[2013-05-14 10:30:23 | 000,000,000 | ---D | M](C:\ProgramData\????????????????????????p???????) -- C:\ProgramData\睸ƻ㣀ƻ楬整灡獰洮慣敦⹥潣⽭灡獰洯獳㌯〮栯汥⹰獡p灳䌀䰻彃䥔䕍䌽
[2013-05-14 10:30:23 | 000,000,000 | ---D | M](C:\ProgramData\????????????????????????p???????) -- C:\ProgramData\睸ƻ㣀ƻ楬整灡獰洮慣敦⹥潣⽭灡獰洯獳㌯〮栯汥⹰獡p灳䌀䰻彃䥔䕍䌽
[2013-05-14 07:46:33 | 000,000,000 | ---D | M](C:\ProgramData\?H?H0) -- C:\ProgramData\䉰Ħ㼠Ħ0
[2013-05-14 07:46:33 | 000,000,000 | ---D | M](C:\ProgramData\?H?H0) -- C:\ProgramData\䉰Ħ㼠Ħ0
[2013-05-12 07:15:55 | 000,000,000 | ---D | M](C:\ProgramData\?—?—0) -- C:\ProgramData\䉰¯㼠¯0
[2013-05-12 07:15:55 | 000,000,000 | ---D | M](C:\ProgramData\?—?—0) -- C:\ProgramData\䉰¯㼠¯0
[2013-05-09 07:40:50 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Œ㼠Œ0
[2013-05-09 07:40:50 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Œ㼠Œ0
[2013-05-08 07:33:01 | 000,000,000 | ---D | M](C:\ProgramData\?3?30) -- C:\ProgramData\䉰3㼠30
[2013-05-08 07:33:01 | 000,000,000 | ---D | M](C:\ProgramData\?3?30) -- C:\ProgramData\䉰3㼠30
[2013-05-06 08:15:54 | 000,000,000 | ---D | M](C:\ProgramData\?B?B0) -- C:\ProgramData\䉰B㼠B0
[2013-05-06 08:15:54 | 000,000,000 | ---D | M](C:\ProgramData\?B?B0) -- C:\ProgramData\䉰B㼠B0
[2013-05-05 08:37:43 | 000,000,000 | ---D | M](C:\ProgramData\?G?G0) -- C:\ProgramData\䉰Ĝ㼠Ĝ0
[2013-05-05 08:37:43 | 000,000,000 | ---D | M](C:\ProgramData\?G?G0) -- C:\ProgramData\䉰Ĝ㼠Ĝ0
[2013-05-04 08:28:00 | 000,000,000 | ---D | M](C:\ProgramData\??0) -- C:\ProgramData\䉰㼠0
[2013-05-04 08:28:00 | 000,000,000 | ---D | M](C:\ProgramData\??0) -- C:\ProgramData\䉰㼠0
[2013-05-02 06:40:28 | 000,000,000 | ---D | M](C:\ProgramData\?1?10) -- C:\ProgramData\䉰¼㼠¼0
[2013-05-02 06:40:28 | 000,000,000 | ---D | M](C:\ProgramData\?1?10) -- C:\ProgramData\䉰¼㼠¼0
[2013-05-01 07:53:36 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ƛ㼠ƛ0
[2013-05-01 07:53:36 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ƛ㼠ƛ0
[2013-04-30 11:36:51 | 000,000,000 | ---D | M](C:\ProgramData\?3?30) -- C:\ProgramData\䉰³㼠³0
[2013-04-30 11:36:51 | 000,000,000 | ---D | M](C:\ProgramData\?3?30) -- C:\ProgramData\䉰³㼠³0
[2013-04-30 07:36:58 | 000,000,000 | ---D | M](C:\ProgramData\?¨?¨0) -- C:\ProgramData\䉰¨㼠¨0
[2013-04-30 07:36:58 | 000,000,000 | ---D | M](C:\ProgramData\?¨?¨0) -- C:\ProgramData\䉰¨㼠¨0
[2013-04-26 21:48:04 | 000,000,000 | ---D | M](C:\ProgramData\?Đ?Đ0) -- C:\ProgramData\䉰Đ㼠Đ0
[2013-04-26 21:48:04 | 000,000,000 | ---D | M](C:\ProgramData\?Đ?Đ0) -- C:\ProgramData\䉰Đ㼠Đ0
[2013-04-21 10:42:19 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ȏ㼠ȏ0
[2013-04-21 10:42:19 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ȏ㼠ȏ0
[2013-04-21 10:19:49 | 000,000,000 | ---D | M](C:\ProgramData\?A?A0) -- C:\ProgramData\䉰Ā㼠Ā0
[2013-04-21 10:19:49 | 000,000,000 | ---D | M](C:\ProgramData\?A?A0) -- C:\ProgramData\䉰Ā㼠Ā0
[2013-04-20 11:47:58 | 000,000,000 | ---D | M](C:\ProgramData\?~?~0) -- C:\ProgramData\䉰~㼠~0
[2013-04-20 11:47:58 | 000,000,000 | ---D | M](C:\ProgramData\?~?~0) -- C:\ProgramData\䉰~㼠~0
[2013-04-20 08:34:17 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ȃ㼠ȃ0
[2013-04-20 08:34:17 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ȃ㼠ȃ0
[2013-04-16 20:58:52 | 000,000,000 | ---D | M](C:\ProgramData\?T?T0) -- C:\ProgramData\䉰T㼠T0
[2013-04-16 20:58:52 | 000,000,000 | ---D | M](C:\ProgramData\?T?T0) -- C:\ProgramData\䉰T㼠T0
[2013-04-16 15:26:36 | 000,000,000 | ---D | M](C:\ProgramData\?U?U0) -- C:\ProgramData\䉰Û㼠Û0
[2013-04-16 15:26:36 | 000,000,000 | ---D | M](C:\ProgramData\?U?U0) -- C:\ProgramData\䉰Û㼠Û0
[2013-04-13 21:35:41 | 000,000,000 | ---D | M](C:\ProgramData\?L?L0) -- C:\ProgramData\䉰£㼠£0
[2013-04-13 21:35:41 | 000,000,000 | ---D | M](C:\ProgramData\?L?L0) -- C:\ProgramData\䉰£㼠£0
[2013-04-12 13:33:01 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ȇ㼠ȇ0
[2013-04-12 13:33:01 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ȇ㼠ȇ0
[2013-04-11 07:10:19 | 000,000,000 | ---D | M](C:\ProgramData\?w?w0) -- C:\ProgramData\䉰ŵ㼠ŵ0
[2013-04-11 07:10:19 | 000,000,000 | ---D | M](C:\ProgramData\?w?w0) -- C:\ProgramData\䉰ŵ㼠ŵ0
[2013-04-09 06:47:43 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰㼠0
[2013-04-09 06:47:43 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰㼠0
[2013-04-08 17:06:34 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ž㼠ž0
[2013-04-08 17:06:34 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ž㼠ž0
[2013-04-07 20:45:58 | 000,000,000 | ---D | M](C:\ProgramData\?Y?Y0) -- C:\ProgramData\䉰¥㼠¥0
[2013-04-07 20:45:58 | 000,000,000 | ---D | M](C:\ProgramData\?Y?Y0) -- C:\ProgramData\䉰¥㼠¥0
[2013-04-07 08:41:01 | 000,000,000 | ---D | M](C:\ProgramData\?Ď?Ď0) -- C:\ProgramData\䉰Ď㼠Ď0
[2013-04-07 08:41:01 | 000,000,000 | ---D | M](C:\ProgramData\?Ď?Ď0) -- C:\ProgramData\䉰Ď㼠Ď0
[2013-04-02 08:42:34 | 000,000,000 | ---D | M](C:\ProgramData\?§?§0) -- C:\ProgramData\䉰§㼠§0
[2013-04-02 08:42:34 | 000,000,000 | ---D | M](C:\ProgramData\?§?§0) -- C:\ProgramData\䉰§㼠§0
[2013-04-02 02:26:47 | 000,000,000 | ---D | M](C:\ProgramData\?#?#0) -- C:\ProgramData\䉰#㼠#0
[2013-04-02 02:26:47 | 000,000,000 | ---D | M](C:\ProgramData\?#?#0) -- C:\ProgramData\䉰#㼠#0
[2013-04-01 12:43:32 | 000,000,000 | ---D | M](C:\ProgramData\?5?50) -- C:\ProgramData\䉰5㼠50
[2013-04-01 12:43:32 | 000,000,000 | ---D | M](C:\ProgramData\?5?50) -- C:\ProgramData\䉰5㼠50
[2013-04-01 08:15:30 | 000,000,000 | ---D | M](C:\ProgramData\?0?00) -- C:\ProgramData\䉰0㼠00
[2013-04-01 08:15:30 | 000,000,000 | ---D | M](C:\ProgramData\?0?00) -- C:\ProgramData\䉰0㼠00
[2013-03-30 08:29:42 | 000,000,000 | ---D | M](C:\ProgramData\?e?e0) -- C:\ProgramData\䉰ê㼠ê0
[2013-03-30 08:29:42 | 000,000,000 | ---D | M](C:\ProgramData\?e?e0) -- C:\ProgramData\䉰ê㼠ê0
[2013-03-29 15:28:39 | 000,000,000 | ---D | M](C:\ProgramData\?2?20) -- C:\ProgramData\䉰2㼠20
[2013-03-29 15:28:39 | 000,000,000 | ---D | M](C:\ProgramData\?2?20) -- C:\ProgramData\䉰2㼠20
[2013-03-29 08:25:58 | 000,000,000 | ---D | M](C:\ProgramData\?E?E0) -- C:\ProgramData\䉰Ē㼠Ē0
[2013-03-29 08:25:58 | 000,000,000 | ---D | M](C:\ProgramData\?E?E0) -- C:\ProgramData\䉰Ē㼠Ē0
[2013-03-28 11:40:47 | 000,000,000 | ---D | M](C:\ProgramData\?G?G0) -- C:\ProgramData\䉰Ģ㼠Ģ0
[2013-03-28 11:40:47 | 000,000,000 | ---D | M](C:\ProgramData\?G?G0) -- C:\ProgramData\䉰Ģ㼠Ģ0
[2013-03-27 19:22:06 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ƿ㼠ƿ0
[2013-03-27 19:22:06 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ƿ㼠ƿ0
[2013-03-27 07:37:18 | 000,000,000 | ---D | M](C:\ProgramData\?g?g0) -- C:\ProgramData\䉰ǥ㼠ǥ0
[2013-03-27 07:37:18 | 000,000,000 | ---D | M](C:\ProgramData\?g?g0) -- C:\ProgramData\䉰ǥ㼠ǥ0
[2013-03-25 08:26:33 | 000,000,000 | ---D | M](C:\ProgramData\?˜?˜0) -- C:\ProgramData\䉰˜㼠˜0
[2013-03-25 08:26:33 | 000,000,000 | ---D | M](C:\ProgramData\?˜?˜0) -- C:\ProgramData\䉰˜㼠˜0
[2013-03-24 09:27:21 | 000,000,000 | ---D | M](C:\ProgramData\?;?;0) -- C:\ProgramData\䉰;㼠;0
[2013-03-24 09:27:21 | 000,000,000 | ---D | M](C:\ProgramData\?;?;0) -- C:\ProgramData\䉰;㼠;0
[2013-03-23 23:21:13 | 000,000,000 | ---D | M](C:\ProgramData\?ü?ü0) -- C:\ProgramData\䉰ü㼠ü0
[2013-03-23 23:21:13 | 000,000,000 | ---D | M](C:\ProgramData\?ü?ü0) -- C:\ProgramData\䉰ü㼠ü0
[2013-03-23 21:39:36 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ǁ㼠ǁ0
[2013-03-23 21:39:36 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ǁ㼠ǁ0
[2013-03-23 15:20:43 | 000,000,000 | ---D | M](C:\ProgramData\?U?U0) -- C:\ProgramData\䉰Ū㼠Ū0
[2013-03-23 15:20:43 | 000,000,000 | ---D | M](C:\ProgramData\?U?U0) -- C:\ProgramData\䉰Ū㼠Ū0
[2013-03-23 15:07:00 | 000,000,000 | ---D | M](C:\ProgramData\?G?G0) -- C:\ProgramData\䉰Ğ㼠Ğ0
[2013-03-23 15:07:00 | 000,000,000 | ---D | M](C:\ProgramData\?G?G0) -- C:\ProgramData\䉰Ğ㼠Ğ0
[2013-03-23 08:50:54 | 000,000,000 | ---D | M](C:\ProgramData\?I?I0) -- C:\ProgramData\䉰Ĭ㼠Ĭ0
[2013-03-23 08:50:54 | 000,000,000 | ---D | M](C:\ProgramData\?I?I0) -- C:\ProgramData\䉰Ĭ㼠Ĭ0
[2013-03-22 08:16:56 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰–㼠–0
[2013-03-22 08:16:56 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰–㼠–0
[2013-03-20 16:08:57 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Dž㼠Dž0
[2013-03-20 16:08:57 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Dž㼠Dž0
[2013-03-20 08:01:31 | 000,000,000 | ---D | M](C:\ProgramData\?®?®0) -- C:\ProgramData\䉰®㼠®0
[2013-03-20 08:01:31 | 000,000,000 | ---D | M](C:\ProgramData\?®?®0) -- C:\ProgramData\䉰®㼠®0
[2013-03-18 12:39:04 | 000,000,000 | ---D | M](C:\ProgramData\?ć?ć0) -- C:\ProgramData\䉰ć㼠ć0
[2013-03-18 12:39:04 | 000,000,000 | ---D | M](C:\ProgramData\?ć?ć0) -- C:\ProgramData\䉰ć㼠ć0
[2013-03-18 08:12:52 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ƴ㼠ƴ0
[2013-03-18 08:12:52 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ƴ㼠ƴ0
[2013-03-17 14:35:11 | 000,000,000 | ---D | M](C:\ProgramData\?Ť?Ť0) -- C:\ProgramData\䉰Ť㼠Ť0
[2013-03-17 14:35:11 | 000,000,000 | ---D | M](C:\ProgramData\?Ť?Ť0) -- C:\ProgramData\䉰Ť㼠Ť0
[2013-03-17 09:35:42 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ƾ㼠ƾ0
[2013-03-17 09:35:42 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ƾ㼠ƾ0
[2013-03-16 19:33:08 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ǻ㼠Ǻ0
[2013-03-16 19:33:08 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ǻ㼠Ǻ0
[2013-03-16 14:53:30 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ǿ㼠Ǿ0
[2013-03-16 14:53:30 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ǿ㼠Ǿ0
[2013-03-16 11:38:48 | 000,000,000 | ---D | M](C:\ProgramData\?u?u0) -- C:\ProgramData\䉰ǘ㼠ǘ0
[2013-03-16 11:38:48 | 000,000,000 | ---D | M](C:\ProgramData\?u?u0) -- C:\ProgramData\䉰ǘ㼠ǘ0
[2013-03-16 08:48:43 | 000,000,000 | ---D | M](C:\ProgramData\?O?O0) -- C:\ProgramData\䉰Ø㼠Ø0
[2013-03-16 08:48:43 | 000,000,000 | ---D | M](C:\ProgramData\?O?O0) -- C:\ProgramData\䉰Ø㼠Ø0
[2013-03-15 08:39:53 | 000,000,000 | ---D | M](C:\ProgramData\?ç?ç0) -- C:\ProgramData\䉰ç㼠ç0
[2013-03-15 08:39:53 | 000,000,000 | ---D | M](C:\ProgramData\?ç?ç0) -- C:\ProgramData\䉰ç㼠ç0
[2013-03-14 10:43:58 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰—㼠—0
[2013-03-14 10:43:58 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰—㼠—0
[2013-03-12 08:53:20 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ǂ㼠ǂ0
[2013-03-12 08:53:20 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ǂ㼠ǂ0
[2013-03-12 08:49:06 | 000,000,000 | ---D | M](C:\ProgramData\?a?a0) -- C:\ProgramData\䉰ã㼠ã0
[2013-03-12 08:49:06 | 000,000,000 | ---D | M](C:\ProgramData\?a?a0) -- C:\ProgramData\䉰ã㼠ã0
[2013-03-12 07:36:51 | 000,000,000 | ---D | M](C:\ProgramData\?Č?Č0) -- C:\ProgramData\䉰Č㼠Č0
[2013-03-12 07:36:51 | 000,000,000 | ---D | M](C:\ProgramData\?Č?Č0) -- C:\ProgramData\䉰Č㼠Č0
[2013-03-11 11:26:31 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ž㼠Ž0
[2013-03-11 11:26:31 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ž㼠Ž0
[2013-03-11 11:17:41 | 000,000,000 | ---D | M](C:\ProgramData\?8?80) -- C:\ProgramData\䉰8㼠80
[2013-03-11 11:17:41 | 000,000,000 | ---D | M](C:\ProgramData\?8?80) -- C:\ProgramData\䉰8㼠80
[2013-03-11 08:13:54 | 000,000,000 | ---D | M](C:\ProgramData\?I?I0) -- C:\ProgramData\䉰Ǐ㼠Ǐ0
[2013-03-11 08:13:54 | 000,000,000 | ---D | M](C:\ProgramData\?I?I0) -- C:\ProgramData\䉰Ǐ㼠Ǐ0
[2013-03-11 00:01:16 | 000,000,000 | ---D | M](C:\ProgramData\??0) -- C:\ProgramData\䉰㼠0
[2013-03-11 00:01:16 | 000,000,000 | ---D | M](C:\ProgramData\??0) -- C:\ProgramData\䉰㼠0
[2013-03-10 18:05:27 | 000,000,000 | ---D | M](C:\ProgramData\?í?í0) -- C:\ProgramData\䉰í㼠í0
[2013-03-10 18:05:27 | 000,000,000 | ---D | M](C:\ProgramData\?í?í0) -- C:\ProgramData\䉰í㼠í0
[2013-03-10 03:14:20 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ǽ㼠Ǽ0
[2013-03-10 03:14:20 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ǽ㼠Ǽ0
[2013-03-08 16:52:22 | 000,000,000 | ---D | M](C:\ProgramData\?A?A0) -- C:\ProgramData\䉰Ǟ㼠Ǟ0
[2013-03-08 16:52:22 | 000,000,000 | ---D | M](C:\ProgramData\?A?A0) -- C:\ProgramData\䉰Ǟ㼠Ǟ0
[2013-03-08 08:14:44 | 000,000,000 | ---D | M](C:\ProgramData\?¶?¶0) -- C:\ProgramData\䉰¶㼠¶0
[2013-03-08 08:14:44 | 000,000,000 | ---D | M](C:\ProgramData\?¶?¶0) -- C:\ProgramData\䉰¶㼠¶0
[2013-03-07 23:28:52 | 000,000,000 | ---D | M](C:\ProgramData\????????????????????????p???????) -- C:\ProgramData\睸ʎ㣀ʎ楬整灡獰洮慣敦⹥潣⽭灡獰洯獳㌯〮栯汥⹰獡p灳䌀䰻彃䥔䕍䌽
[2013-03-07 23:28:52 | 000,000,000 | ---D | M](C:\ProgramData\????????????????????????p???????) -- C:\ProgramData\睸ʎ㣀ʎ楬整灡獰洮慣敦⹥潣⽭灡獰洯獳㌯〮栯汥⹰獡p灳䌀䰻彃䥔䕍䌽
[2013-03-06 18:31:20 | 000,000,000 | ---D | M](C:\ProgramData\?j?j0) -- C:\ProgramData\䉰ǰ㼠ǰ0
[2013-03-06 18:31:20 | 000,000,000 | ---D | M](C:\ProgramData\?j?j0) -- C:\ProgramData\䉰ǰ㼠ǰ0
[2013-03-06 12:52:06 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰DZ㼠DZ0
[2013-03-06 12:52:06 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰DZ㼠DZ0
[2013-03-05 19:39:44 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰‡㼠‡0
[2013-03-05 19:39:44 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰‡㼠‡0
[2013-03-05 08:34:51 | 000,000,000 | ---D | M](C:\ProgramData\?ˆ?ˆ0) -- C:\ProgramData\䉰ˆ㼠ˆ0
[2013-03-05 08:34:51 | 000,000,000 | ---D | M](C:\ProgramData\?ˆ?ˆ0) -- C:\ProgramData\䉰ˆ㼠ˆ0
[2013-03-04 08:58:37 | 000,000,000 | ---D | M](C:\ProgramData\?E?E0) -- C:\ProgramData\䉰Ė㼠Ė0
[2013-03-04 08:58:37 | 000,000,000 | ---D | M](C:\ProgramData\?E?E0) -- C:\ProgramData\䉰Ė㼠Ė0
[2013-03-03 22:29:00 | 000,000,000 | ---D | M](C:\ProgramData\?9?90) -- C:\ProgramData\䉰9㼠90
[2013-03-03 22:29:00 | 000,000,000 | ---D | M](C:\ProgramData\?9?90) -- C:\ProgramData\䉰9㼠90
[2013-03-03 08:30:16 | 000,000,000 | ---D | M](C:\ProgramData\?c?c0) -- C:\ProgramData\䉰ċ㼠ċ0
[2013-03-03 08:30:16 | 000,000,000 | ---D | M](C:\ProgramData\?c?c0) -- C:\ProgramData\䉰ċ㼠ċ0
[2013-03-01 06:59:06 | 000,000,000 | ---D | M](C:\ProgramData\?ú?ú0) -- C:\ProgramData\䉰ú㼠ú0
[2013-03-01 06:59:06 | 000,000,000 | ---D | M](C:\ProgramData\?ú?ú0) -- C:\ProgramData\䉰ú㼠ú0
[2013-03-01 00:52:46 | 000,000,000 | ---D | M](C:\ProgramData\?u?u0) -- C:\ProgramData\䉰ǚ㼠ǚ0
[2013-03-01 00:52:46 | 000,000,000 | ---D | M](C:\ProgramData\?u?u0) -- C:\ProgramData\䉰ǚ㼠ǚ0
[2013-02-27 16:57:14 | 000,000,000 | ---D | M](C:\ProgramData\?ô?ô0) -- C:\ProgramData\䉰ô㼠ô0
[2013-02-27 16:57:14 | 000,000,000 | ---D | M](C:\ProgramData\?ô?ô0) -- C:\ProgramData\䉰ô㼠ô0
[2013-02-27 11:59:54 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰‘㼠‘0
[2013-02-27 11:59:54 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰‘㼠‘0
[2013-02-27 07:28:57 | 000,000,000 | ---D | M](C:\ProgramData\??0) -- C:\ProgramData\䉰㼠0
[2013-02-27 07:28:57 | 000,000,000 | ---D | M](C:\ProgramData\??0) -- C:\ProgramData\䉰㼠0
[2013-02-26 21:21:22 | 000,000,000 | ---D | M](C:\ProgramData\?D?D0) -- C:\ProgramData\䉰D㼠D0
[2013-02-26 21:21:22 | 000,000,000 | ---D | M](C:\ProgramData\?D?D0) -- C:\ProgramData\䉰D㼠D0
[2013-02-26 20:17:04 | 000,000,000 | ---D | M](C:\ProgramData\?O?O0) -- C:\ProgramData\䉰Ǫ㼠Ǫ0
[2013-02-26 20:17:04 | 000,000,000 | ---D | M](C:\ProgramData\?O?O0) -- C:\ProgramData\䉰Ǫ㼠Ǫ0
[2013-02-26 20:08:47 | 000,000,000 | ---D | M](C:\ProgramData\?o?o0) -- C:\ProgramData\䉰õ㼠õ0
[2013-02-26 20:08:47 | 000,000,000 | ---D | M](C:\ProgramData\?o?o0) -- C:\ProgramData\䉰õ㼠õ0
[2013-02-24 23:35:59 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ȉ㼠Ȉ0
[2013-02-24 23:35:59 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ȉ㼠Ȉ0
[2013-02-21 09:03:29 | 000,000,000 | ---D | M](C:\ProgramData\?C?C0) -- C:\ProgramData\䉰Ĉ㼠Ĉ0
[2013-02-21 09:03:29 | 000,000,000 | ---D | M](C:\ProgramData\?C?C0) -- C:\ProgramData\䉰Ĉ㼠Ĉ0
[2013-02-20 22:45:49 | 000,000,000 | ---D | M](C:\ProgramData\?ą?ą0) -- C:\ProgramData\䉰ą㼠ą0
[2013-02-20 22:45:49 | 000,000,000 | ---D | M](C:\ProgramData\?ą?ą0) -- C:\ProgramData\䉰ą㼠ą0
[2013-02-20 21:32:42 | 000,000,000 | ---D | M](C:\ProgramData\?Đ?Đ0) -- C:\ProgramData\䉰Ɖ㼠Ɖ0
[2013-02-20 21:32:42 | 000,000,000 | ---D | M](C:\ProgramData\?Đ?Đ0) -- C:\ProgramData\䉰Ɖ㼠Ɖ0
[2013-02-20 10:41:52 | 000,000,000 | ---D | M](C:\ProgramData\?4?40) -- C:\ProgramData\䉰4㼠40
[2013-02-20 10:41:52 | 000,000,000 | ---D | M](C:\ProgramData\?4?40) -- C:\ProgramData\䉰4㼠40
[2013-02-20 10:36:21 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Nj㼠Nj0
[2013-02-20 10:36:21 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Nj㼠Nj0
[2013-02-20 07:34:38 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰㼠0
[2013-02-20 07:34:38 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰㼠0
[2013-02-20 00:56:56 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Lj㼠Lj0
[2013-02-20 00:56:56 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Lj㼠Lj0
[2013-02-19 07:30:44 | 000,000,000 | ---D | M](C:\ProgramData\?U?U0) -- C:\ProgramData\䉰Ŭ㼠Ŭ0
[2013-02-19 07:30:44 | 000,000,000 | ---D | M](C:\ProgramData\?U?U0) -- C:\ProgramData\䉰Ŭ㼠Ŭ0
[2013-02-19 06:15:30 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Dz㼠Dz0
[2013-02-19 06:15:30 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Dz㼠Dz0
[2013-02-18 08:50:59 | 000,000,000 | ---D | M](C:\ProgramData\?!?!0) -- C:\ProgramData\䉰ǃ㼠ǃ0
[2013-02-18 08:50:59 | 000,000,000 | ---D | M](C:\ProgramData\?!?!0) -- C:\ProgramData\䉰ǃ㼠ǃ0
[2013-02-17 07:34:31 | 000,000,000 | ---D | M](C:\ProgramData\?1?10) -- C:\ProgramData\䉰1㼠10
[2013-02-17 07:34:31 | 000,000,000 | ---D | M](C:\ProgramData\?1?10) -- C:\ProgramData\䉰1㼠10
[2013-02-15 19:51:51 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ƻ㼠ƻ0
[2013-02-15 19:51:51 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ƻ㼠ƻ0
[2013-02-15 19:07:36 | 000,000,000 | ---D | M](C:\ProgramData\?ë?ë0) -- C:\ProgramData\䉰ë㼠ë0
[2013-02-15 19:07:36 | 000,000,000 | ---D | M](C:\ProgramData\?ë?ë0) -- C:\ProgramData\䉰ë㼠ë0
[2013-02-15 11:26:32 | 000,000,000 | ---D | M](C:\ProgramData\?!?!0) -- C:\ProgramData\䉰¡㼠¡0
[2013-02-15 11:26:32 | 000,000,000 | ---D | M](C:\ProgramData\?!?!0) -- C:\ProgramData\䉰¡㼠¡0
[2013-02-15 08:33:01 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ȍ㼠Ȍ0
[2013-02-15 08:33:01 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ȍ㼠Ȍ0
[2013-02-15 00:31:08 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ƺ㼠ƺ0
[2013-02-15 00:31:08 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ƺ㼠ƺ0
[2013-02-14 08:42:18 | 000,000,000 | ---D | M](C:\ProgramData\?Y?Y0) -- C:\ProgramData\䉰Ŷ㼠Ŷ0
[2013-02-14 08:42:18 | 000,000,000 | ---D | M](C:\ProgramData\?Y?Y0) -- C:\ProgramData\䉰Ŷ㼠Ŷ0
[2013-02-12 08:31:07 | 000,000,000 | ---D | M](C:\ProgramData\?Ű?Ű0) -- C:\ProgramData\䉰Ű㼠Ű0
[2013-02-12 08:31:07 | 000,000,000 | ---D | M](C:\ProgramData\?Ű?Ű0) -- C:\ProgramData\䉰Ű㼠Ű0
[2013-02-11 22:25:26 | 000,000,000 | ---D | M](C:\ProgramData\?k?k0) -- C:\ProgramData\䉰ǩ㼠ǩ0
[2013-02-11 22:25:26 | 000,000,000 | ---D | M](C:\ProgramData\?k?k0) -- C:\ProgramData\䉰ǩ㼠ǩ0
[2013-02-11 12:18:57 | 000,000,000 | ---D | M](C:\ProgramData\?ę?ę0) -- C:\ProgramData\䉰ę㼠ę0
[2013-02-11 12:18:57 | 000,000,000 | ---D | M](C:\ProgramData\?ę?ę0) -- C:\ProgramData\䉰ę㼠ę0
[2013-02-11 09:11:22 | 000,000,000 | ---D | M](C:\ProgramData\?)?)0) -- C:\ProgramData\䉰)㼠)0
[2013-02-11 09:11:22 | 000,000,000 | ---D | M](C:\ProgramData\?)?)0) -- C:\ProgramData\䉰)㼠)0
[2013-02-10 09:25:56 | 000,000,000 | ---D | M](C:\ProgramData\?u?u0) -- C:\ProgramData\䉰ǜ㼠ǜ0
[2013-02-10 09:25:56 | 000,000,000 | ---D | M](C:\ProgramData\?u?u0) -- C:\ProgramData\䉰ǜ㼠ǜ0
[2013-02-09 13:49:52 | 000,000,000 | ---D | M](C:\ProgramData\?-?-0) -- C:\ProgramData\䉰-㼠-0
[2013-02-09 13:49:52 | 000,000,000 | ---D | M](C:\ProgramData\?-?-0) -- C:\ProgramData\䉰-㼠-0
[2013-02-09 09:28:27 | 000,000,000 | ---D | M](C:\ProgramData\?i?i0) -- C:\ProgramData\䉰ì㼠ì0
[2013-02-09 09:28:27 | 000,000,000 | ---D | M](C:\ProgramData\?i?i0) -- C:\ProgramData\䉰ì㼠ì0
[2013-02-08 12:33:27 | 000,000,000 | ---D | M](C:\ProgramData\?ă?ă0) -- C:\ProgramData\䉰ă㼠ă0
[2013-02-08 12:33:27 | 000,000,000 | ---D | M](C:\ProgramData\?ă?ă0) -- C:\ProgramData\䉰ă㼠ă0
[2013-02-07 08:28:17 | 000,000,000 | ---D | M](C:\ProgramData\?o?o0) -- C:\ProgramData\䉰ǒ㼠ǒ0
[2013-02-07 08:28:17 | 000,000,000 | ---D | M](C:\ProgramData\?o?o0) -- C:\ProgramData\䉰ǒ㼠ǒ0
[2013-02-06 14:41:07 | 000,000,000 | ---D | M](C:\ProgramData\?1?10) -- C:\ProgramData\䉰¹㼠¹0
[2013-02-06 14:41:07 | 000,000,000 | ---D | M](C:\ProgramData\?1?10) -- C:\ProgramData\䉰¹㼠¹0
[2013-02-06 13:38:48 | 000,000,000 | ---D | M](C:\ProgramData\?e?e0) -- C:\ProgramData\䉰ĕ㼠ĕ0
[2013-02-06 13:38:48 | 000,000,000 | ---D | M](C:\ProgramData\?e?e0) -- C:\ProgramData\䉰ĕ㼠ĕ0
[2013-02-06 08:20:45 | 000,000,000 | ---D | M](C:\ProgramData\?U?U0) -- C:\ProgramData\䉰Ǖ㼠Ǖ0
[2013-02-06 08:20:45 | 000,000,000 | ---D | M](C:\ProgramData\?U?U0) -- C:\ProgramData\䉰Ǖ㼠Ǖ0
[2013-02-05 20:54:45 | 000,000,000 | ---D | M](C:\ProgramData\?g?g0) -- C:\ProgramData\䉰ǧ㼠ǧ0
[2013-02-05 20:54:45 | 000,000,000 | ---D | M](C:\ProgramData\?g?g0) -- C:\ProgramData\䉰ǧ㼠ǧ0
[2013-02-04 08:22:49 | 000,000,000 | ---D | M](C:\ProgramData\?a?a0) -- C:\ProgramData\䉰à㼠à0
[2013-02-04 08:22:49 | 000,000,000 | ---D | M](C:\ProgramData\?a?a0) -- C:\ProgramData\䉰à㼠à0
[2013-02-03 14:19:19 | 000,000,000 | ---D | M](C:\ProgramData\?A?A0) -- C:\ProgramData\䉰Ǎ㼠Ǎ0
[2013-02-03 14:19:19 | 000,000,000 | ---D | M](C:\ProgramData\?A?A0) -- C:\ProgramData\䉰Ǎ㼠Ǎ0
[2013-02-03 10:24:49 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰㼠0
[2013-02-03 10:24:49 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰㼠0
[2013-02-02 09:14:59 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰‹㼠‹0
[2013-02-02 09:14:59 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰‹㼠‹0
[2013-01-31 19:05:14 | 000,000,000 | ---D | M](C:\ProgramData\????????????????????????p???????) -- C:\ProgramData\睸lj㣀lj楬整灡獰洮慣敦⹥潣⽭灡獰洯獳㌯〮栯汥⹰獡p灳䌀䰻彃䥔䕍䌽
[2013-01-31 19:05:14 | 000,000,000 | ---D | M](C:\ProgramData\????????????????????????p???????) -- C:\ProgramData\睸lj㣀lj楬整灡獰洮慣敦⹥潣⽭灡獰洯獳㌯〮栯汥⹰獡p灳䌀䰻彃䥔䕍䌽
[2013-01-31 08:04:15 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ǣ㼠Ǣ0
[2013-01-31 08:04:15 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ǣ㼠Ǣ0
[2013-01-30 07:37:23 | 000,000,000 | ---D | M](C:\ProgramData\?z?z0) -- C:\ProgramData\䉰ƶ㼠ƶ0
[2013-01-30 07:37:23 | 000,000,000 | ---D | M](C:\ProgramData\?z?z0) -- C:\ProgramData\䉰ƶ㼠ƶ0
[2013-01-29 09:25:22 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰LJ㼠LJ0
[2013-01-29 09:25:22 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰LJ㼠LJ0
[2013-01-28 07:37:27 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰š㼠š0
[2013-01-28 07:37:27 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰š㼠š0
[2013-01-28 00:37:50 | 000,000,000 | ---D | M](C:\ProgramData\?|?|0) -- C:\ProgramData\䉰ǀ㼠ǀ0
[2013-01-28 00:37:50 | 000,000,000 | ---D | M](C:\ProgramData\?|?|0) -- C:\ProgramData\䉰ǀ㼠ǀ0
[2013-01-27 12:35:21 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ǝ㼠ǝ0
[2013-01-27 12:35:21 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰ǝ㼠ǝ0
[2013-01-27 07:11:06 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰‚㼠‚0
[2013-01-27 07:11:06 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰‚㼠‚0
[2013-01-26 09:28:15 | 000,000,000 | ---D | M](C:\ProgramData\?ŕ?ŕ0) -- C:\ProgramData\䉰ŕ㼠ŕ0
[2013-01-26 09:28:15 | 000,000,000 | ---D | M](C:\ProgramData\?ŕ?ŕ0) -- C:\ProgramData\䉰ŕ㼠ŕ0
[2013-01-25 14:33:26 | 000,000,000 | ---D | M](C:\ProgramData\?.?.0) -- C:\ProgramData\䉰.㼠.0
[2013-01-25 14:33:26 | 000,000,000 | ---D | M](C:\ProgramData\?.?.0) -- C:\ProgramData\䉰.㼠.0
[2013-01-25 08:23:36 | 000,000,000 | ---D | M](C:\ProgramData\?!?!0) -- C:\ProgramData\䉰!㼠!0
[2013-01-25 08:23:36 | 000,000,000 | ---D | M](C:\ProgramData\?!?!0) -- C:\ProgramData\䉰!㼠!0
[2013-01-24 09:24:20 | 000,000,000 | ---D | M](C:\ProgramData\?E?E0) -- C:\ProgramData\䉰È㼠È0
[2013-01-24 09:24:20 | 000,000,000 | ---D | M](C:\ProgramData\?E?E0) -- C:\ProgramData\䉰È㼠È0
[2013-01-23 09:07:09 | 000,000,000 | ---D | M](C:\ProgramData\?o?o0) -- C:\ProgramData\䉰ò㼠ò0
[2013-01-23 09:07:09 | 000,000,000 | ---D | M](C:\ProgramData\?o?o0) -- C:\ProgramData\䉰ò㼠ò0
[2013-01-22 08:16:28 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ǡ㼠Ǡ0
[2013-01-22 08:16:28 | 000,000,000 | ---D | M](C:\ProgramData\????0) -- C:\ProgramData\䉰Ǡ㼠Ǡ0
[2013-01-21 13:27:28 | 000,000,000 | ---D | M](C:\ProgramData\?u?u0) -- C:\ProgramData\䉰ǔ㼠ǔ0
[2013-01-21 13:27:28 | 000,000,000 | ---D | M](C:\ProgramData\?u?u0) -- C:\ProgramData\䉰ǔ㼠ǔ0
[2013-01-21 13:15:47 | 000,000,000 | ---D | M](C:\ProgramData\?a?a0) -- C:\ProgramData\䉰å㼠å0
[2013-01-21 13:15:47 | 000,000,000 | ---D | M](C:\ProgramData\?a?a0) -- C:\ProgramData\䉰å㼠å0
[2013-01-21 13:11:23 | 000,000,000 | ---D | M](C:\ProgramData\?!?!0) -- C:\ProgramData\䈈!㺸!0
[2013-01-21 13:11:23 | 000,000,000 | ---D | M](C:\ProgramData\?!?!0) -- C:\ProgramData\䈈!㺸!0
(C:\ProgramData\?ź?ź0) -- C:\ProgramData\䉰ź㼠ź0
(C:\ProgramData\?z?z0) -- C:\ProgramData\䉰ƶ㼠ƶ0
(C:\ProgramData\?ý?ý0) -- C:\ProgramData\䉰ý㼠ý0
(C:\ProgramData\?y?y0) -- C:\ProgramData\䉰ÿ㼠ÿ0
(C:\ProgramData\?Y?Y0) -- C:\ProgramData\䉰Ŷ㼠Ŷ0
(C:\ProgramData\?Y?Y0) -- C:\ProgramData\䉰¥㼠¥0
(C:\ProgramData\?w?w0) -- C:\ProgramData\䉰ŵ㼠ŵ0
(C:\ProgramData\?ü?ü0) -- C:\ProgramData\䉰ü㼠ü0
(C:\ProgramData\?Ú?Ú0) -- C:\ProgramData\䍠Ú䀐Ú0
(C:\ProgramData\?U?U0) -- C:\ProgramData\䍠Ǘ䀐Ǘ0
(C:\ProgramData\?u?u0) -- C:\ProgramData\䍠û䀐û0
(C:\ProgramData\?u?u0) -- C:\ProgramData\䋐ǖ㾀ǖ0
(C:\ProgramData\?U?U0) -- C:\ProgramData\䋐Ǚ㾀Ǚ0
(C:\ProgramData\?U?U0) -- C:\ProgramData\䋐Ù㾀Ù0
(C:\ProgramData\?Ű?Ű0) -- C:\ProgramData\䉰Ű㼠Ű0
(C:\ProgramData\?ú?ú0) -- C:\ProgramData\䉰ú㼠ú0
(C:\ProgramData\?U?U0) -- C:\ProgramData\䉰Ǖ㼠Ǖ0
(C:\ProgramData\?u?u0) -- C:\ProgramData\䉰ǚ㼠ǚ0
(C:\ProgramData\?u?u0) -- C:\ProgramData\䉰ǜ㼠ǜ0
(C:\ProgramData\?u?u0) -- C:\ProgramData\䉰ǘ㼠ǘ0
(C:\ProgramData\?u?u0) -- C:\ProgramData\䉰ũ㼠ũ0
(C:\ProgramData\?U?U0) -- C:\ProgramData\䉰Ū㼠Ū0
(C:\ProgramData\?U?U0) -- C:\ProgramData\䉰Ŭ㼠Ŭ0
(C:\ProgramData\?u?u0) -- C:\ProgramData\䉰ǔ㼠ǔ0
(C:\ProgramData\?U?U0) -- C:\ProgramData\䉰Û㼠Û0
(C:\ProgramData\?u?u0) -- C:\ProgramData\䉰ù㼠ù0
(C:\ProgramData\?u?u0) -- C:\ProgramData\䉰u㼠u0
(C:\ProgramData\?Ţ?Ţ0) -- C:\ProgramData\䋐Ţ㾀Ţ0
(C:\ProgramData\?Ť?Ť0) -- C:\ProgramData\䉰Ť㼠Ť0
(C:\ProgramData\?T?T0) -- C:\ProgramData\䉰Ʈ㼠Ʈ0
(C:\ProgramData\?t?t0) -- C:\ProgramData\䉰ƫ㼠ƫ0
(C:\ProgramData\?T?T0) -- C:\ProgramData\䉰T㼠T0
(C:\ProgramData\?ŕ?ŕ0) -- C:\ProgramData\䉰ŕ㼠ŕ0
(C:\ProgramData\?r?r????????????????????p???????) -- C:\ProgramData\睸ŗ㣀ŗ楬整灡獰洮慣敦⹥潣⽭灡獰洯獳㌯〮栯汥⹰獡p灳䌀䰻彃䥔䕍䌽
(C:\ProgramData\?ó?ó0) -- C:\ProgramData\䉰ó㼠ó0
(C:\ProgramData\?O?O0) -- C:\ProgramData\䍠Ǒ䀐Ǒ0
(C:\ProgramData\?O?O0) -- C:\ProgramData\䋐Ǭ㾀Ǭ0
(C:\ProgramData\?O?O0) -- C:\ProgramData\䋐Ò㾀Ò0
(C:\ProgramData\?Ö?Ö0) -- C:\ProgramData\䉰Ö㼠Ö0
(C:\ProgramData\?ô?ô0) -- C:\ProgramData\䉰ô㼠ô0
(C:\ProgramData\?O?O0) -- C:\ProgramData\䉰Ǭ㼠Ǭ0
(C:\ProgramData\?O?O0) -- C:\ProgramData\䉰Ø㼠Ø0
(C:\ProgramData\?O?O0) -- C:\ProgramData\䉰Ǫ㼠Ǫ0
(C:\ProgramData\?o?o0) -- C:\ProgramData\䉰õ㼠õ0
(C:\ProgramData\?o?o0) -- C:\ProgramData\䉰ǒ㼠ǒ0
(C:\ProgramData\?o?o0) -- C:\ProgramData\䉰ò㼠ò0
(C:\ProgramData\?n?n0) -- C:\ProgramData\䋐ñ㾀ñ0
(C:\ProgramData\?N?N0) -- C:\ProgramData\䉰Ñ㼠Ñ0
(C:\ProgramData\?L?L0) -- C:\ProgramData\䉰£㼠£0
(C:\ProgramData\?k?k0) -- C:\ProgramData\䋐ǩ㾀ǩ0
(C:\ProgramData\?k?k0) -- C:\ProgramData\䉰ǩ㼠ǩ0
(C:\ProgramData\?j?j0) -- C:\ProgramData\䋐ǰ㾀ǰ0
(C:\ProgramData\?j?j0) -- C:\ProgramData\䉰ǰ㼠ǰ0
(C:\ProgramData\?I?I0) -- C:\ProgramData\䍠Ĩ䀐Ĩ0
(C:\ProgramData\?I?I0) -- C:\ProgramData\䋐Ĭ㾀Ĭ0
(C:\ProgramData\?î?î0) -- C:\ProgramData\䉰î㼠î0
(C:\ProgramData\?í?í0) -- C:\ProgramData\䉰í㼠í0
(C:\ProgramData\?i?i0) -- C:\ProgramData\䉰ĩ㼠ĩ0
(C:\ProgramData\?I?I0) -- C:\ProgramData\䉰Ĭ㼠Ĭ0
(C:\ProgramData\?I?I0) -- C:\ProgramData\䉰Ǐ㼠Ǐ0
(C:\ProgramData\?i?i0) -- C:\ProgramData\䉰ì㼠ì0
(C:\ProgramData\?I?I0) -- C:\ProgramData\䉰I㼠I0
(C:\ProgramData\?H?H0) -- C:\ProgramData\䉰Ħ㼠Ħ0
(C:\ProgramData\?h?h0) -- C:\ProgramData\䉰ĥ㼠ĥ0
(C:\ProgramData\?G?G0) -- C:\ProgramData\䍠Ǧ䀐Ǧ0
(C:\ProgramData\?G?G0) -- C:\ProgramData\䋐Ǥ㾀Ǥ0
(C:\ProgramData\?g?g0) -- C:\ProgramData\䋐ğ㾀ğ0
(C:\ProgramData\?g?g0) -- C:\ProgramData\䋐ǧ㾀ǧ0
(C:\ProgramData\?G?G0) -- C:\ProgramData\䋐Ĝ㾀Ĝ0
(C:\ProgramData\?g?g0) -- C:\ProgramData\䉰ǥ㼠ǥ0
(C:\ProgramData\?G?G0) -- C:\ProgramData\䉰Ģ㼠Ģ0
(C:\ProgramData\?G?G0) -- C:\ProgramData\䉰Ğ㼠Ğ0
(C:\ProgramData\?g?g0) -- C:\ProgramData\䉰ǧ㼠ǧ0
(C:\ProgramData\?G?G0) -- C:\ProgramData\䉰Ĝ㼠Ĝ0
(C:\ProgramData\?g?g0) -- C:\ProgramData\䉰ġ㼠ġ0
(C:\ProgramData\?f?f0) -- C:\ProgramData\䉰ƒ㼠ƒ0
(C:\ProgramData\?f?f0) -- C:\ProgramData\䉰f㼠f0
(C:\ProgramData\?ę?ę0) -- C:\ProgramData\䉰ę㼠ę0
(C:\ProgramData\?e?e0) -- C:\ProgramData\䋐ê㾀ê0
(C:\ProgramData\?ë?ë0) -- C:\ProgramData\䉰ë㼠ë0
(C:\ProgramData\?E?E0) -- C:\ProgramData\䉰Ē㼠Ē0
(C:\ProgramData\?e?e0) -- C:\ProgramData\䉰ĕ㼠ĕ0
(C:\ProgramData\?e?e0) -- C:\ProgramData\䉰ê㼠ê0
(C:\ProgramData\?E?E0) -- C:\ProgramData\䉰Ė㼠Ė0
(C:\ProgramData\?E?E0) -- C:\ProgramData\䉰È㼠È0
(C:\ProgramData\?đ?đ0) -- C:\ProgramData\䋐đ㾀đ0
(C:\ProgramData\?Đ?Đ0) -- C:\ProgramData\䉰Ɖ㼠Ɖ0
(C:\ProgramData\?Đ?Đ0) -- C:\ProgramData\䉰Đ㼠Đ0
(C:\ProgramData\?Ď?Ď0) -- C:\ProgramData\䉰Ď㼠Ď0
(C:\ProgramData\?D?D0) -- C:\ProgramData\䉰D㼠D0
(C:\ProgramData\?ć?ć0) -- C:\ProgramData\䍠ć䀐ć0
(C:\ProgramData\?ć?ć0) -- C:\ProgramData\䉰ć㼠ć0
(C:\ProgramData\?ç?ç0) -- C:\ProgramData\䋐ç㾀ç0
(C:\ProgramData\?ç?ç0) -- C:\ProgramData\䉰ç㼠ç0
(C:\ProgramData\?Č?Č0) -- C:\ProgramData\䉰Č㼠Č0
(C:\ProgramData\?C?C0) -- C:\ProgramData\䉰Ĉ㼠Ĉ0
(C:\ProgramData\?c?c0) -- C:\ProgramData\䉰ċ㼠ċ0
(C:\ProgramData\?c?c0) -- C:\ProgramData\䉰¢㼠¢0
(C:\ProgramData\?B?B0) -- C:\ProgramData\䉰B㼠B0
(C:\ProgramData\?ą?ą0) -- C:\ProgramData\䉰ą㼠ą0
(C:\ProgramData\?a?a0) -- C:\ProgramData\䍠ǟ䀐ǟ0
(C:\ProgramData\?ă?ă0) -- C:\ProgramData\䋐ă㾀ă0
(C:\ProgramData\?A?A0) -- C:\ProgramData\䋐Ǟ㾀Ǟ0
(C:\ProgramData\?A?A0) -- C:\ProgramData\䋐A㾀A0
(C:\ProgramData\?ă?ă0) -- C:\ProgramData\䉰ă㼠ă0
(C:\ProgramData\?ä?ä0) -- C:\ProgramData\䉰ä㼠ä0
(C:\ProgramData\?A?A0) -- C:\ProgramData\䉰Ǟ㼠Ǟ0
(C:\ProgramData\?a?a0) -- C:\ProgramData\䉰å㼠å0
(C:\ProgramData\?a?a0) -- C:\ProgramData\䉰ã㼠ã0
(C:\ProgramData\?A?A0) -- C:\ProgramData\䉰Ā㼠Ā0
(C:\ProgramData\?A?A0) -- C:\ProgramData\䉰Ǎ㼠Ǎ0
(C:\ProgramData\?a?a0) -- C:\ProgramData\䉰à㼠à0
(C:\ProgramData\?a?a0) -- C:\ProgramData\䉰ª㼠ª0
(C:\ProgramData\?A?A0) -- C:\ProgramData\䉰A㼠A0
(C:\ProgramData\?a?a0) -- C:\ProgramData\䉰æ㼠æ0
(C:\ProgramData\?9?90) -- C:\ProgramData\䉰9㼠90
(C:\ProgramData\?8?80) -- C:\ProgramData\䉰8㼠80
(C:\ProgramData\?7?70) -- C:\ProgramData\䉰7㼠70
(C:\ProgramData\?6?60) -- C:\ProgramData\䍠6䀐60
(C:\ProgramData\?6?60) -- C:\ProgramData\䉰6㼠60
(C:\ProgramData\?5?50) -- C:\ProgramData\䉰5㼠50
(C:\ProgramData\?4?40) -- C:\ProgramData\䉰4㼠40
(C:\ProgramData\?3?30) -- C:\ProgramData\䉰¾㼠¾0
(C:\ProgramData\?3?30) -- C:\ProgramData\䉰³㼠³0
(C:\ProgramData\?3?30) -- C:\ProgramData\䉰3㼠30
(C:\ProgramData\?2?20) -- C:\ProgramData\䉰²㼠²0
(C:\ProgramData\?2?20) -- C:\ProgramData\䉰2㼠20
(C:\ProgramData\?1?10) -- C:\ProgramData\䉰¹㼠¹0
(C:\ProgramData\?1?10) -- C:\ProgramData\䉰1㼠10
(C:\ProgramData\?1?10) -- C:\ProgramData\䉰¼㼠¼0
(C:\ProgramData\?0?00) -- C:\ProgramData\䉰0㼠00
(C:\ProgramData\?ˆ?ˆ0) -- C:\ProgramData\䋐ˆ㾀ˆ0
(C:\ProgramData\?˜?˜0) -- C:\ProgramData\䉰˜㼠˜0
(C:\ProgramData\??0) -- C:\ProgramData\䉰㼠0
(C:\ProgramData\?ˆ?ˆ0) -- C:\ProgramData\䉰ˆ㼠ˆ0
(C:\ProgramData\??0) -- C:\ProgramData\䉰㼠0
(C:\ProgramData\?·?·0) -- C:\ProgramData\䉰·㼠·0
(C:\ProgramData\?¶?¶0) -- C:\ProgramData\䉰¶㼠¶0
(C:\ProgramData\?µ?µ0) -- C:\ProgramData\䉰µ㼠µ0
(C:\ProgramData\?®?®0) -- C:\ProgramData\䍠®䀐®0
(C:\ProgramData\?®?®0) -- C:\ProgramData\䉰®㼠®0
(C:\ProgramData\?¬?¬0) -- C:\ProgramData\䉰¬㼠¬0
(C:\ProgramData\?©?©0) -- C:\ProgramData\䉰©㼠©0
(C:\ProgramData\?§?§0) -- C:\ProgramData\䉰§㼠§0
(C:\ProgramData\?×?×0) -- C:\ProgramData\䉰×㼠×0
(C:\ProgramData\?=?=0) -- C:\ProgramData\䉰=㼠=0
(C:\ProgramData\?+?+0) -- C:\ProgramData\䉰+㼠+0
(C:\ProgramData\?¨?¨0) -- C:\ProgramData\䉰¨㼠¨0
(C:\ProgramData\?~?~0) -- C:\ProgramData\䉰~㼠~0
(C:\ProgramData\?|?|0) -- C:\ProgramData\䉰ǀ㼠ǀ0
(C:\ProgramData\?{?{0) -- C:\ProgramData\䉰{㼠{0
(C:\ProgramData\?@?@0) -- C:\ProgramData\䋐@㾀@0
(C:\ProgramData\?-?-0) -- C:\ProgramData\䉰-㼠-0
(C:\ProgramData\?'?'0) -- C:\ProgramData\䉰'㼠'0
(C:\ProgramData\??0) -- C:\ProgramData\䉰㼠0
(C:\ProgramData\?—?—0) -- C:\ProgramData\䉰¯㼠¯0
(C:\ProgramData\????0) -- C:\ProgramData\䍠nj䀐nj0
(C:\ProgramData\????0) -- C:\ProgramData\䍠ǵ䀐ǵ0
(C:\ProgramData\????0) -- C:\ProgramData\䍠ǝ䀐ǝ0
(C:\ProgramData\????0) -- C:\ProgramData\䋐ƴ㾀ƴ0
(C:\ProgramData\????0) -- C:\ProgramData\䋐þ㾀þ0
(C:\ProgramData\????0) -- C:\ProgramData\䋐Lj㾀Lj0
(C:\ProgramData\????0) -- C:\ProgramData\䋐Ƕ㾀Ƕ0
(C:\ProgramData\????0) -- C:\ProgramData\䋐DŽ㾀DŽ0
(C:\ProgramData\????0) -- C:\ProgramData\䋐ǡ㾀ǡ0
(C:\ProgramData\????0) -- C:\ProgramData\䋐‡㾀‡0
(C:\ProgramData\????0) -- C:\ProgramData\䋐ǁ㾀ǁ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰ƾ㼠ƾ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰ƺ㼠ƺ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰ƹ㼠ƹ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰ƴ㼠ƴ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰ƿ㼠ƿ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ʋ㼠Ʋ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ʊ㼠Ʊ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ƨ㼠Ƨ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ʃ㼠Ʃ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ʀ㼠Ʀ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰ƥ㼠ƥ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰ȏ㼠ȏ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ȍ㼠Ȍ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ǿ㼠Ǿ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ǹ㼠Ǹ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰NJ㼠NJ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ɯ㼠Ɯ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰ƛ㼠ƛ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰LJ㼠LJ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ȉ㼠Ȉ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ƕ㼠Ƕ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ǵ㼠Ǵ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰ǝ㼠ǝ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰ȇ㼠ȇ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ð㼠Ð0
(C:\ProgramData\????0) -- C:\ProgramData\䉰DŽ㼠DŽ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰DZ㼠DZ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰ȃ㼠ȃ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ǻ㼠Ǻ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ǡ㼠Ǡ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ǣ㼠Ǣ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ǽ㼠Ǽ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ƽ㼠Ƽ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰ƻ㼠ƻ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ÿ㼠Ÿ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰ž㼠ž0
(C:\ProgramData\????0) -- C:\ProgramData\䉰㼠0
(C:\ProgramData\????0) -- C:\ProgramData\䉰›㼠›0
(C:\ProgramData\????0) -- C:\ProgramData\䉰š㼠š0
(C:\ProgramData\????0) -- C:\ProgramData\䉰™㼠™0
(C:\ProgramData\????0) -- C:\ProgramData\䉰—㼠—0
(C:\ProgramData\????0) -- C:\ProgramData\䉰–㼠–0
(C:\ProgramData\????0) -- C:\ProgramData\䉰•㼠•0
(C:\ProgramData\????0) -- C:\ProgramData\䉰’㼠’0
(C:\ProgramData\????0) -- C:\ProgramData\䉰‘㼠‘0
(C:\ProgramData\????0) -- C:\ProgramData\䉰㼠0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Ž㼠Ž0
(C:\ProgramData\????0) -- C:\ProgramData\䉰㼠0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Œ㼠Œ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰‹㼠‹0
(C:\ProgramData\????0) -- C:\ProgramData\䉰Š㼠Š0
(C:\ProgramData\????0) -- C:\ProgramData\䉰‰㼠‰0
(C:\ProgramData\????0) -- C:\ProgramData\䉰‡㼠‡0
(C:\ProgramData\????0) -- C:\ProgramData\䉰†㼠†0
(C:\ProgramData\????0) -- C:\ProgramData\䉰„㼠„0
(C:\ProgramData\????0) -- C:\ProgramData\䉰‚㼠‚0
(C:\ProgramData\????0) -- C:\ProgramData\䉰ǂ㼠ǂ0
(C:\ProgramData\????0) -- C:\ProgramData\䉰ǁ㼠ǁ0
(C:\ProgramData\?'?'????????????????????p???????) -- C:\ProgramData\睸ˈ㣀ˈ楬整灡獰洮慣敦⹥潣⽭灡獰洯獳㌯〮栯汥⹰獡p灳䌀䰻彃䥔䕍䌽
(C:\ProgramData\????????????????????????p???????) -- C:\ProgramData\睸ʎ㣀ʎ楬整灡獰洮慣敦⹥潣⽭灡獰洯獳㌯〮栯汥⹰獡p灳䌀䰻彃䥔䕍䌽
(C:\ProgramData\????????????????????????p???????) -- C:\ProgramData\睸lj㣀lj楬整灡獰洮慣敦⹥潣⽭灡獰洯獳㌯〮栯汥⹰獡p灳䌀䰻彃䥔䕍䌽
(C:\ProgramData\????????????????????????p???????) -- C:\ProgramData\睸ʱ㣀ʱ楬整灡獰洮慣敦⹥潣⽭灡獰洯獳㌯〮栯汥⹰獡p灳䌀䰻彃䥔䕍䌽
(C:\ProgramData\????????????????????????p???????) -- C:\ProgramData\睸ƻ㣀ƻ楬整灡獰洮慣敦⹥潣⽭灡獰洯獳㌯〮栯汥⹰獡p灳䌀䰻彃䥔䕍䌽
(C:\ProgramData\?;?;0) -- C:\ProgramData\䉰;㼠;0
(C:\ProgramData\?.?.0) -- C:\ProgramData\䉰.㼠.0
(C:\ProgramData\?)?)0) -- C:\ProgramData\䉰)㼠)0
(C:\ProgramData\?(?(0) -- C:\ProgramData\䉰(㼠(0
(C:\ProgramData\?&?&0) -- C:\ProgramData\䉰&㼠&0
(C:\ProgramData\?#?#0) -- C:\ProgramData\䋐#㾀#0
(C:\ProgramData\?#?#0) -- C:\ProgramData\䉰#㼠#0
(C:\ProgramData\?!?!0) -- C:\ProgramData\䉰ǃ㼠ǃ0
(C:\ProgramData\?!?!0) -- C:\ProgramData\䉰¡㼠¡0
(C:\ProgramData\?!?!0) -- C:\ProgramData\䉰!㼠!0
(C:\ProgramData\?!?!0) -- C:\ProgramData\䈈!㺸!0
(C:\ProgramData\? ? 0) -- C:\ProgramData\䉰 㼠 0

========== Alternate Data Streams ==========

@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:373E1720
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:BC359956

< End of report >

filutka78

Użytkownik
Posty: 1485
Rejestracja: 28 sty 2009, 17:40

wyniki skanowania OTL, co robić?

Post19 gru 2013, 16:29

Na dole logu są obiekty o chińskich nazwach - znasz je? Masz jakiś azjatycki program?

Poza tym - żadnej infekcji.

Są sponsorskie śmieci:
1) Użyj >Dostępne tylko dla zarejestrowanych użytkowników (aby pobrać kliknij na dużą zieloną strzałkę po prawej).
najpierw kliknij na SZUKAJ, a dopiero po zakończeniu skanowania, gdy uaktywni się przycisk USUŃ, to kliknij na niego.
Pokaż raport z niego C:\AdwCleaner\AdwCleaner.txt

2) Uruchom OTL i w oknie Własne opcje skanowania/Skrypt wklej to:
:OTL
[2013-09-22 12:18:40 | 000,461,880 | ---- | C] (WilSys Co., Ltd.) -- C:\Users\test\AppData\Roaming\dosearches.exe
[2013-12-18 14:47:13 | 000,000,000 | ---D | C] -- C:\Users\test\.android
[2013-12-18 14:47:08 | 000,000,000 | ---D | C] -- C:\Users\test\AppData\Roaming\newnext.me
[2013-12-18 14:47:07 | 000,000,000 | ---D | C] -- C:\Users\test\AppData\Local\genienext
[2013-12-18 14:47:05 | 000,000,000 | ---D | C] -- C:\Users\test\Documents\Mobogenie
[2013-12-18 14:47:05 | 000,000,000 | ---D | C] -- C:\Users\test\AppData\Local\Mobogenie
[2013-12-18 14:46:39 | 000,000,000 | ---D | C] -- C:\Program Files\Mobogenie
[2013-12-18 14:45:32 | 000,000,000 | ---D | C] -- C:\Program Files\SecretSauce
O20 - AppInit_DLLs: (c:\progra~2\bitguard\271769~1.27\{c16c1~1\bitguard.dll) - File not found
O4 - HKCU..\Run: [NextLive] C:\Users\test\AppData\Roaming\newnext.me\nengine.dll (NewNextDotMe)
O4 - HKCU..\Run: [SpeedUpMyComputer] C:\Program Files\SmartTweak\SpeedUpMyComputer\SpeedUpMyComputer.exe /ot /as File not found
O4 - HKLM..\Run: [NPSStartup] File not found
O4 - HKLM..\Run: [mobilegeni daemon] C:\Program Files\Mobogenie\DaemonProcess.exe File not found
O3 - HKLM\..\Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Save Tube Video) - {F334C7B0-8774-4d5b-BD7A-4F448D03A1AE} - C:\Program Files\Save Tube Video Company\SaveTubeVideo\SaveTubeVideo.dll (Save Tube Video Company)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {B2E293EE-FD7E-4C71-A714-5F4750D8D7B7} - No CLSID value found.
O2 - BHO: (SecretSauce) - {0ffd0ef2-dbe9-483a-80c4-d2c331da1ce4} - C:\Program Files\SecretSauce\SecretSauceBHO.dll (SecretSauce)
O2 - BHO: (ShowBarObj Class) - {2863E737-DD3F-4280-9AF8-E9E79C16F312} - C:\Program Files\Save Tube Video Company\SaveTubeVideo\MinBHO.dll ()
[2012-10-26 12:42:36 | 000,172,032 | ---- | M] (vShare.tv) -- C:\Program Files\mozilla firefox\plugins\npffvsharetvplg.dll
[2013-02-24 17:07:48 | 000,006,520 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2010-03-28 17:56:18 | 000,002,035 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fcmdSrchFxt.xml
IE - HKCU\..\URLSearchHook: {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - No CLSID value found
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleNT.sys -- (EagleNT)
DRV - File not found [Kernel | System | Stopped] -- system32\drivers\ArcSec.sys -- (ArcSec)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (acl0t367)

:Files
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\afeodekfkejjgjigfnhhifffljmhnpfn

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

:Commands
[emptytemp]

Kliknij w Wykonaj Skrypt. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.
Następnie uruchom OTL ponownie, tym razem kliknij Skanuj.
Pokaż nowy log OTL.txt oraz raport z usuwania Skryptem.

F.



  • Reklama

Wróć do „Bezpieczeństwo”



Kto jest online

Użytkownicy przeglądający to forum: Obecnie na forum nie ma żadnego zarejestrowanego użytkownika i 4 gości