Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:25-05-2014
Ran by sebek (administrator) on SEBEK-KOMPUTER on 25-05-2014 12:57:36
Running from D:\INSTALKI
Platform: Microsoft Windows 7 Ultimate  (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Hi-Rez Studios) D:\GRY\SMITE\HiPatchService.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\System32\PnkBstrA.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(OldTimer Tools) D:\INSTALKI\OTL(1).exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10783336 2011-07-19] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} -  No File
Tcpip\Parameters: [DhcpNameServer] 62.179.1.62 62.179.1.63

FireFox:
========
FF ProfilePath: C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\7swdtaol.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\3.0.40818.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @qq.com/TXSSO - C:\Program Files\Common Files\Tencent\TXSSO\1.2.1.94\Bin\npSSOAxCtrlForPTLogin.dll (Tencent)
FF Plugin: @real.com/nppl3260;version=6.0.12.450 - C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\7swdtaol.default\user.js
FF Extension: Acunetix Web Scanner - C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\7swdtaol.default\Extensions\acunetixwebscanner@attila.gerendi.xpi [2014-05-14]
FF Extension: eBesucher Surfbar - C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\7swdtaol.default\Extensions\ebesucher-surfbar@kashiif.com.xpi [2014-05-25]
FF Extension: MEGA - C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\7swdtaol.default\Extensions\firefox@mega.co.nz.xpi [2014-02-28]
FF Extension: SQL Inject Me - C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\7swdtaol.default\Extensions\sqlime@security.compass.xpi [2014-05-13]
FF Extension: Download YouTube Videos as MP4 - C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\7swdtaol.default\Extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi [2014-05-20]
FF Extension: Adblock Plus - C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\7swdtaol.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-25]

========================== Services (Whitelisted) =================

S2 AcuWVSSchedulerv8; C:\Program Files\Acunetix\Web Vulnerability Scanner 8\WVSScheduler.exe [1009840 2012-07-04] ()
R2 ftpsvc; C:\Windows\system32\inetsrv\ftpsvc.dll [308224 2009-07-14] (Microsoft Corporation)
U2 HiPatchService; D:\GRY\SMITE\HiPatchService.exe [9216 2014-02-28] (Hi-Rez Studios)
R2 NIHardwareService; C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [3576320 2009-07-17] (Native Instruments GmbH)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15904544 2014-02-05] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2014-03-20] ()

==================== Drivers (Whitelisted) ====================

S3 apf004; C:\Windows\system32\apf004.sys [15112 2013-12-24] ()
R3 athur; C:\Windows\System32\DRIVERS\athur.sys [1500160 2010-02-23] (Atheros Communications, Inc.)
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [30976 2014-05-25] ()
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [107736 2014-05-24] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2013-12-27] (NVIDIA Corporation)
R1 SCDEmu; C:\Windows\system32\Drivers\SCDEmu.sys [114376 2013-10-23] (Power Software Ltd)
S3 SIVDriver; C:\Windows\system32\Drivers\SIVX32.sys [121336 2014-02-14] (Ray Hinchliffe)
R1 {572f484b-455f-44b0-9d6a-da3ad2071365}Gw; C:\Windows\System32\drivers\{572f484b-455f-44b0-9d6a-da3ad2071365}Gw.sys [52928 2014-04-24] (StdLib)
R1 {9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw; C:\Windows\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw.sys [52920 2014-05-09] (StdLib)
S3 catchme; \??\C:\Users\sebek\AppData\Local\Temp\catchme.sys [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]
S3 XFDriver; \??\C:\Program Files\Xfire2\XFDriver.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-25 12:57 - 2014-05-25 12:57 - 00000000 ____D () C:\FRST
2014-05-25 12:56 - 2014-05-25 12:56 - 00084684 _____ () C:\Users\sebek\Desktop\OTL.Txt
2014-05-25 12:56 - 2014-05-25 12:56 - 00064596 _____ () C:\Users\sebek\Desktop\Extras.Txt
2014-05-25 12:52 - 2014-05-25 12:53 - 00002800 _____ () C:\Windows\WindowsUpdate.log
2014-05-25 12:50 - 2014-05-25 12:50 - 00030976 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys
2014-05-25 12:49 - 2014-05-25 12:51 - 00000168 _____ () C:\Windows\setupact.log
2014-05-25 12:49 - 2014-05-25 12:49 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-25 08:17 - 2014-05-25 12:46 - 00000000 ____D () C:\Users\sebek\Desktop\RISKBOT
2014-05-25 08:01 - 2014-05-25 08:06 - 00000000 ____D () C:\Users\sebek\AppData\Local\VirtualStore
2014-05-24 23:21 - 2014-05-25 12:46 - 00000000 ____D () C:\Users\sebek\Desktop\BOTEKDNT
2014-05-24 21:39 - 2014-05-24 21:39 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinDirStat
2014-05-24 21:00 - 2014-05-24 21:03 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-24 21:00 - 2014-05-24 21:00 - 00001050 _____ () C:\Users\sebek\Desktop\Anti-Malware Is Running.lnk
2014-05-24 21:00 - 2014-04-03 15:50 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-24 19:25 - 2014-05-25 12:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinDirStat
2014-05-24 15:50 - 2014-05-25 12:46 - 00006546 _____ () C:\Windows\system32\.crusader
2014-05-24 15:31 - 2014-05-24 15:31 - 00001931 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-05-24 15:31 - 2014-05-24 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2014-05-22 13:31 - 2014-05-22 13:31 - 00000730 _____ () C:\Users\Public\Desktop\Smite.lnk
2014-05-22 13:31 - 2014-05-22 13:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios
2014-05-22 13:04 - 2014-05-22 13:31 - 00000553 _____ () C:\Users\Public\Desktop\Hi-Rez Diagnostics and Support.lnk
2014-05-22 13:04 - 2014-05-22 13:04 - 00000559 _____ () C:\Users\Public\Desktop\Global Agenda Live.lnk
2014-05-20 14:33 - 2014-04-24 12:35 - 00052928 _____ (StdLib) C:\Windows\system32\Drivers\{572f484b-455f-44b0-9d6a-da3ad2071365}Gw.sys
2014-05-20 13:37 - 2014-05-20 13:37 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2014-05-20 13:02 - 2014-05-24 21:37 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2014-05-20 13:02 - 2014-05-24 21:21 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\VOPackage
2014-05-20 13:01 - 2014-05-20 13:01 - 00001225 _____ () C:\Users\Public\Desktop\Pazera Free MP4 to AVI Converter.lnk
2014-05-20 13:01 - 2014-05-20 13:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pazera Free MP4 to AVI Converter
2014-05-20 13:01 - 2014-05-20 13:01 - 00000000 ____D () C:\Program Files\pazera-software
2014-05-19 19:22 - 2014-05-19 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cool MKV To MP4 Converter
2014-05-19 19:22 - 2014-05-19 19:22 - 00000000 ____D () C:\Program Files\Cool MKV To MP4 Converter
2014-05-18 17:03 - 2014-05-18 17:03 - 00000000 ____D () C:\Users\sebek\Documents\eagle
2014-05-18 17:02 - 2014-05-24 21:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EAGLE Layout Editor 6.5.0
2014-05-18 17:02 - 2014-05-18 17:02 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\CadSoft
2014-05-16 21:57 - 2014-05-16 22:06 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-16 21:57 - 2014-05-16 21:57 - 00001989 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-05-15 07:51 - 2014-05-15 13:34 - 00000000 ____D () C:\Users\sebek\AcunetixScanner
2014-05-14 18:22 - 2014-05-14 22:32 - 00000000 ____D () C:\Users\sebek\Documents\Acunetix WVS 8
2014-05-14 18:20 - 2014-05-14 18:22 - 00000000 ____D () C:\Users\Public\Documents\Acunetix WVS 8
2014-05-14 18:20 - 2014-05-14 18:20 - 00001264 _____ () C:\Users\Public\Desktop\Acunetix Web Vulnerability Scanner 8.lnk
2014-05-14 18:20 - 2014-05-14 18:20 - 00001255 _____ () C:\Users\Public\Desktop\Acunetix WVS Reporter 8.lnk
2014-05-14 18:20 - 2014-05-14 18:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acunetix Web Vulnerability Scanner 8
2014-05-14 18:20 - 2014-05-14 18:20 - 00000000 ____D () C:\Program Files\Acunetix
2014-05-14 18:19 - 2014-05-14 18:20 - 00000716 _____ () C:\Windows\WVS_InstDBLogFile.csv
2014-05-14 18:18 - 2012-08-29 22:59 - 00000000 ____D () C:\Users\sebek\Desktop\Av8.0_full_100%_clean_and_cracked
2014-05-14 15:04 - 2014-05-14 15:04 - 00000000 ____D () C:\Users\sebek\AppData\Local\Skype
2014-05-14 15:03 - 2014-05-14 15:03 - 00002505 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-05-14 15:03 - 2014-05-14 15:03 - 00000000 ___RD () C:\Program Files\Skype
2014-05-14 15:03 - 2014-05-14 15:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-05-14 15:03 - 2014-05-14 15:03 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-05-13 18:02 - 2014-05-13 18:02 - 00000000 ____D () C:\Users\sebek\Desktop\Tor Browser
2014-05-13 12:50 - 2014-05-13 12:50 - 00000000 ____D () C:\Users\sebek\AppData\Local\Mega Limited
2014-05-13 11:45 - 2014-05-13 11:45 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Hex-Rays
2014-05-13 11:43 - 2014-05-13 11:43 - 00001791 _____ () C:\Users\sebek\Desktop\NASM.lnk
2014-05-13 11:43 - 2014-05-13 11:43 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Netwide Assembler 2.07
2014-05-13 11:43 - 2014-05-13 11:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Netwide Assembler 2.07
2014-05-13 11:43 - 2014-05-13 11:43 - 00000000 ____D () C:\Program Files\NASM
2014-05-13 11:34 - 2014-05-13 11:38 - 00000000 ____D () C:\totalcmd
2014-05-13 11:34 - 2014-05-13 11:34 - 00000632 _____ () C:\Users\sebek\Desktop\Total Commander.lnk
2014-05-13 11:34 - 2014-05-13 11:34 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2014-05-13 11:34 - 2014-05-13 11:34 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\GHISLER
2014-05-13 11:34 - 2014-04-30 08:51 - 00000545 _____ () C:\Windows\UC.PIF
2014-05-13 11:34 - 2014-04-30 08:51 - 00000545 _____ () C:\Windows\RAR.PIF
2014-05-13 11:34 - 2014-04-30 08:51 - 00000545 _____ () C:\Windows\PKZIP.PIF
2014-05-13 11:34 - 2014-04-30 08:51 - 00000545 _____ () C:\Windows\PKUNZIP.PIF
2014-05-13 11:34 - 2014-04-30 08:51 - 00000545 _____ () C:\Windows\LHA.PIF
2014-05-13 11:34 - 2014-04-30 08:51 - 00000545 _____ () C:\Windows\ARJ.PIF
2014-05-13 07:13 - 2014-05-24 21:37 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks
2014-05-13 07:13 - 2014-05-24 21:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks
2014-05-13 07:13 - 2014-05-13 07:21 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\CodeBlocks
2014-05-11 17:14 - 2014-05-11 17:14 - 00013126 _____ () C:\ComboFix.txt
2014-05-11 16:54 - 2014-05-11 17:03 - 00052927 _____ () C:\resolve.log
2014-05-11 16:46 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-05-11 16:45 - 2014-05-11 16:46 - 00000000 ____D () C:\AdwCleaner
2014-05-11 16:37 - 2014-05-11 16:37 - 00000000 ____D () C:\Program Files\HitmanPro
2014-05-11 16:36 - 2014-05-24 15:50 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-05-11 14:09 - 2014-05-11 14:09 - 00001817 _____ () C:\Users\Public\Desktop\MPC-HC.lnk
2014-05-11 14:09 - 2014-05-11 14:09 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\MPC-HC
2014-05-11 14:09 - 2014-05-11 14:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC
2014-05-11 14:09 - 2014-05-11 14:09 - 00000000 ____D () C:\Program Files\MPC-HC
2014-05-11 13:06 - 2014-05-11 17:00 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-05-11 13:06 - 2014-05-11 13:06 - 00001670 _____ () C:\Windows\system32\jupdate-1.7.0_55-b14.log
2014-05-11 13:06 - 2014-05-11 13:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-11 13:06 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-05-11 13:06 - 2014-01-25 14:07 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-05-11 10:32 - 2014-05-11 10:32 - 00001116 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-05-11 09:57 - 2014-05-11 09:58 - 00000000 ____D () C:\NPE
2014-05-11 09:50 - 2014-05-11 10:07 - 00000000 ____D () C:\Users\sebek\AppData\Local\NPE
2014-05-11 09:34 - 2014-05-11 09:34 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-11 09:02 - 2014-05-24 21:00 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-11 08:58 - 2014-05-11 10:15 - 00000000 ____D () C:\ProgramData\Norton
2014-05-11 02:09 - 2014-05-22 13:02 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Illusion
2014-05-11 02:09 - 2014-05-22 13:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Illusion
2014-05-11 02:06 - 2014-05-22 13:01 - 00000000 ____D () C:\Program Files\Illusion
2014-05-10 22:13 - 2014-05-11 09:10 - 00000028 _____ () C:\Windows\ODBC.INI
2014-05-10 21:22 - 2014-05-10 22:04 - 00000000 ____D () C:\Users\sebek\Documents\SQL Server Management Studio Express
2014-05-10 21:21 - 2014-05-10 21:22 - 00000000 ____D () C:\Users\sebek\Documents\Visual Studio 2005
2014-05-10 21:06 - 2014-05-11 10:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2005
2014-05-10 20:52 - 2014-05-10 20:52 - 00000000 ____D () C:\Users\sebek\AppData\Local\Microsoft_Corporation
2014-05-10 20:29 - 2014-05-11 10:06 - 00000000 ____D () C:\Users\Classic .NET AppPool
2014-05-10 20:29 - 2014-05-10 20:29 - 00000020 ___SH () C:\Users\Classic .NET AppPool\ntuser.ini
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Ustawienia lokalne
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Szablony
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Moje dokumenty
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Menu Start
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Documents\Moje wideo
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Documents\Moje obrazy
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Documents\Moja muzyka
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Dane aplikacji
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\AppData\Local\Historia
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\AppData\Local\Dane aplikacji
2014-05-10 20:29 - 2013-12-20 14:13 - 00000000 ____D () C:\Users\Classic .NET AppPool\AppData\Roaming\Macromedia
2014-05-10 20:29 - 2009-07-14 06:42 - 00000000 ___RD () C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-10 20:29 - 2009-07-14 06:37 - 00000000 ___RD () C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-10 20:27 - 2014-05-11 09:34 - 00000000 ____D () C:\inetpub
2014-05-10 18:39 - 2014-05-09 17:03 - 00052920 _____ (StdLib) C:\Windows\system32\Drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw.sys
2014-05-10 17:13 - 2014-05-24 21:34 - 00000000 ____D () C:\Program Files\Notepad++
2014-05-10 17:13 - 2014-05-10 17:43 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Notepad++
2014-05-10 17:13 - 2014-05-10 17:13 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-05-10 17:13 - 2014-05-10 17:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-05-10 17:11 - 2014-05-10 17:17 - 00000000 ____D () C:\Users\sebek\AppData\Local\LightTable
2014-05-10 17:08 - 2014-05-25 12:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\kED
2014-05-10 17:08 - 2014-05-25 12:46 - 00000000 ____D () C:\Program Files\kED
2014-05-10 16:49 - 2014-05-10 16:49 - 10539380 _____ () C:\Users\sebek\Desktop\Databases.rar
2014-05-10 10:32 - 2014-05-12 12:53 - 00000000 ____D () C:\Users\sebek\Documents\Bound by Flame
2014-05-10 10:31 - 2014-05-11 19:01 - 00000586 _____ () C:\Users\sebek\Desktop\Bound By Flame.lnk
2014-05-10 10:31 - 2014-05-11 19:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bound By Flame
2014-05-10 08:20 - 2014-05-10 08:20 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-04-30 14:48 - 2014-04-30 14:48 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Gadu-Gadu
2014-04-30 11:39 - 2014-04-30 11:43 - 00000000 ____D () C:\Users\sebek\Gadu-Gadu
2014-04-30 11:39 - 2014-04-30 11:39 - 00000956 _____ () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Gadu-Gadu.lnk
2014-04-30 11:39 - 2014-04-30 11:39 - 00000932 _____ () C:\Users\sebek\Desktop\Gadu-Gadu.lnk
2014-04-30 11:39 - 2014-04-30 11:39 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gadu-Gadu
2014-04-30 11:39 - 2014-04-30 11:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gadu-Gadu
2014-04-30 11:39 - 2014-04-30 11:39 - 00000000 ____D () C:\Program Files\Gadu-Gadu
2014-04-29 09:43 - 2014-04-29 09:44 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\DarkSoulsII
2014-04-29 09:40 - 2014-05-10 23:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dark Souls 2
2014-04-27 21:37 - 2014-05-22 13:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst
2014-04-27 18:32 - 2014-04-27 18:33 - 00000000 ____D () C:\Users\sebek\Documents\Assassin's Creed IV Black Flag
2014-04-27 18:17 - 2014-04-27 18:17 - 00000746 _____ () C:\Users\Public\Desktop\Assassin's Creed IV - Black Flag.lnk
2014-04-27 18:16 - 2014-04-27 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Assassin's Creed IV - Black Flag
2014-04-27 12:05 - 2014-05-13 07:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hitman - Contracts
2014-04-27 11:24 - 2014-04-27 11:24 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-04-25 08:57 - 2014-04-25 08:57 - 00000000 ____D () C:\Users\sebek\AppData\Local\MyPortal
2014-04-25 08:55 - 2014-04-25 08:55 - 00000828 _____ () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\AQQ.lnk
2014-04-25 08:55 - 2014-04-25 08:55 - 00000804 _____ () C:\Users\sebek\Desktop\AQQ.lnk
2014-04-25 08:55 - 2014-04-25 08:55 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPortal

==================== One Month Modified Files and Folders =======

2014-05-25 12:57 - 2014-05-25 12:57 - 00000000 ____D () C:\FRST
2014-05-25 12:56 - 2014-05-25 12:56 - 00084684 _____ () C:\Users\sebek\Desktop\OTL.Txt
2014-05-25 12:56 - 2014-05-25 12:56 - 00064596 _____ () C:\Users\sebek\Desktop\Extras.Txt
2014-05-25 12:53 - 2014-05-25 12:52 - 00002800 _____ () C:\Windows\WindowsUpdate.log
2014-05-25 12:51 - 2014-05-25 12:49 - 00000168 _____ () C:\Windows\setupact.log
2014-05-25 12:50 - 2014-05-25 12:50 - 00030976 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys
2014-05-25 12:50 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-25 12:49 - 2014-05-25 12:49 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-25 12:49 - 2014-03-16 16:37 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-25 12:49 - 2009-07-14 06:34 - 00009584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-25 12:49 - 2009-07-14 06:34 - 00009584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-25 12:46 - 2014-05-25 08:17 - 00000000 ____D () C:\Users\sebek\Desktop\RISKBOT
2014-05-25 12:46 - 2014-05-24 23:21 - 00000000 ____D () C:\Users\sebek\Desktop\BOTEKDNT
2014-05-25 12:46 - 2014-05-24 19:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinDirStat
2014-05-25 12:46 - 2014-05-24 15:50 - 00006546 _____ () C:\Windows\system32\.crusader
2014-05-25 12:46 - 2014-05-10 17:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\kED
2014-05-25 12:46 - 2014-05-10 17:08 - 00000000 ____D () C:\Program Files\kED
2014-05-25 12:46 - 2014-04-10 16:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guitar Pro 6
2014-05-25 12:36 - 2013-12-20 14:13 - 00000000 ____D () C:\Program Files\Adobe
2014-05-25 12:24 - 2013-11-12 13:38 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Skype
2014-05-25 12:19 - 2013-11-09 13:12 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-25 10:45 - 2013-12-16 11:05 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\TS3Client
2014-05-25 09:14 - 2013-11-11 12:49 - 00000080 _____ () C:\Users\sebek\AppData\Roaming\mBot.ini
2014-05-25 08:06 - 2014-05-25 08:01 - 00000000 ____D () C:\Users\sebek\AppData\Local\VirtualStore
2014-05-25 08:01 - 2009-07-14 06:33 - 03736672 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-24 23:22 - 2013-11-09 13:26 - 00089264 _____ () C:\Users\sebek\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-24 21:39 - 2014-05-24 21:39 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinDirStat
2014-05-24 21:37 - 2014-05-20 13:02 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2014-05-24 21:37 - 2014-05-18 17:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EAGLE Layout Editor 6.5.0
2014-05-24 21:37 - 2014-05-13 07:13 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks
2014-05-24 21:37 - 2014-05-13 07:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks
2014-05-24 21:37 - 2013-11-10 20:39 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\uTorrent
2014-05-24 21:34 - 2014-05-10 17:13 - 00000000 ____D () C:\Program Files\Notepad++
2014-05-24 21:34 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Web
2014-05-24 21:21 - 2014-05-20 13:02 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\VOPackage
2014-05-24 21:08 - 2013-12-22 02:29 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-05-24 21:03 - 2014-05-24 21:00 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-24 21:00 - 2014-05-24 21:00 - 00001050 _____ () C:\Users\sebek\Desktop\Anti-Malware Is Running.lnk
2014-05-24 21:00 - 2014-05-11 09:02 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-24 15:50 - 2014-05-11 16:36 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-05-24 15:50 - 2014-04-01 13:24 - 00000000 ____D () C:\Users\sebek\Desktop\condor32bit
2014-05-24 15:50 - 2014-03-04 14:21 - 00000000 ____D () C:\Users\sebek\Desktop\Fuse-O-Mat - Release
2014-05-24 15:50 - 2014-03-04 13:56 - 00000000 ____D () C:\Users\sebek\Desktop\FUSE
2014-05-24 15:31 - 2014-05-24 15:31 - 00001931 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-05-24 15:31 - 2014-05-24 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2014-05-24 15:26 - 2013-11-17 19:31 - 00007626 _____ () C:\Users\sebek\AppData\Local\Resmon.ResmonCfg
2014-05-24 15:24 - 2014-02-17 09:25 - 00000000 ____D () C:\Users\sebek\AppData\Local\CrashDumps
2014-05-22 13:31 - 2014-05-22 13:31 - 00000730 _____ () C:\Users\Public\Desktop\Smite.lnk
2014-05-22 13:31 - 2014-05-22 13:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios
2014-05-22 13:31 - 2014-05-22 13:04 - 00000553 _____ () C:\Users\Public\Desktop\Hi-Rez Diagnostics and Support.lnk
2014-05-22 13:11 - 2014-04-27 21:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst
2014-05-22 13:04 - 2014-05-22 13:04 - 00000559 _____ () C:\Users\Public\Desktop\Global Agenda Live.lnk
2014-05-22 13:02 - 2014-05-11 02:09 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Illusion
2014-05-22 13:02 - 2014-05-11 02:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Illusion
2014-05-22 13:01 - 2014-05-11 02:06 - 00000000 ____D () C:\Program Files\Illusion
2014-05-20 13:37 - 2014-05-20 13:37 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2014-05-20 13:01 - 2014-05-20 13:01 - 00001225 _____ () C:\Users\Public\Desktop\Pazera Free MP4 to AVI Converter.lnk
2014-05-20 13:01 - 2014-05-20 13:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pazera Free MP4 to AVI Converter
2014-05-20 13:01 - 2014-05-20 13:01 - 00000000 ____D () C:\Program Files\pazera-software
2014-05-19 19:37 - 2009-07-14 10:07 - 00776162 _____ () C:\Windows\system32\perfh015.dat
2014-05-19 19:37 - 2009-07-14 10:07 - 00271826 _____ () C:\Windows\system32\perfc015.dat
2014-05-19 19:37 - 2002-01-01 03:22 - 00006796 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-19 19:22 - 2014-05-19 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cool MKV To MP4 Converter
2014-05-19 19:22 - 2014-05-19 19:22 - 00000000 ____D () C:\Program Files\Cool MKV To MP4 Converter
2014-05-18 17:03 - 2014-05-18 17:03 - 00000000 ____D () C:\Users\sebek\Documents\eagle
2014-05-18 17:02 - 2014-05-18 17:02 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\CadSoft
2014-05-16 22:06 - 2014-05-16 21:57 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-16 21:58 - 2013-12-20 14:13 - 00000000 ____D () C:\ProgramData\Adobe
2014-05-16 21:58 - 2013-11-09 13:15 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Adobe
2014-05-16 21:58 - 2013-11-09 13:12 - 00000000 ____D () C:\Users\sebek\AppData\Local\Adobe
2014-05-16 21:57 - 2014-05-16 21:57 - 00001989 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-05-15 15:18 - 2014-02-02 23:40 - 00000132 _____ () C:\Users\sebek\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe
2014-05-15 13:34 - 2014-05-15 07:51 - 00000000 ____D () C:\Users\sebek\AcunetixScanner
2014-05-15 07:51 - 2002-01-01 03:18 - 00000000 ____D () C:\Users\sebek
2014-05-14 22:32 - 2014-05-14 18:22 - 00000000 ____D () C:\Users\sebek\Documents\Acunetix WVS 8
2014-05-14 18:22 - 2014-05-14 18:20 - 00000000 ____D () C:\Users\Public\Documents\Acunetix WVS 8
2014-05-14 18:20 - 2014-05-14 18:20 - 00001264 _____ () C:\Users\Public\Desktop\Acunetix Web Vulnerability Scanner 8.lnk
2014-05-14 18:20 - 2014-05-14 18:20 - 00001255 _____ () C:\Users\Public\Desktop\Acunetix WVS Reporter 8.lnk
2014-05-14 18:20 - 2014-05-14 18:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acunetix Web Vulnerability Scanner 8
2014-05-14 18:20 - 2014-05-14 18:20 - 00000000 ____D () C:\Program Files\Acunetix
2014-05-14 18:20 - 2014-05-14 18:19 - 00000716 _____ () C:\Windows\WVS_InstDBLogFile.csv
2014-05-14 17:20 - 2013-11-09 13:12 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-05-14 17:20 - 2013-11-09 13:12 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-05-14 16:25 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-05-14 15:04 - 2014-05-14 15:04 - 00000000 ____D () C:\Users\sebek\AppData\Local\Skype
2014-05-14 15:03 - 2014-05-14 15:03 - 00002505 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-05-14 15:03 - 2014-05-14 15:03 - 00000000 ___RD () C:\Program Files\Skype
2014-05-14 15:03 - 2014-05-14 15:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-05-14 15:03 - 2014-05-14 15:03 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-05-14 15:03 - 2013-11-12 13:38 - 00000000 ____D () C:\ProgramData\Skype
2014-05-13 18:02 - 2014-05-13 18:02 - 00000000 ____D () C:\Users\sebek\Desktop\Tor Browser
2014-05-13 14:20 - 2013-11-09 13:13 - 00000000 ____D () C:\Program Files\Google
2014-05-13 12:50 - 2014-05-13 12:50 - 00000000 ____D () C:\Users\sebek\AppData\Local\Mega Limited
2014-05-13 11:45 - 2014-05-13 11:45 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Hex-Rays
2014-05-13 11:43 - 2014-05-13 11:43 - 00001791 _____ () C:\Users\sebek\Desktop\NASM.lnk
2014-05-13 11:43 - 2014-05-13 11:43 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Netwide Assembler 2.07
2014-05-13 11:43 - 2014-05-13 11:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Netwide Assembler 2.07
2014-05-13 11:43 - 2014-05-13 11:43 - 00000000 ____D () C:\Program Files\NASM
2014-05-13 11:38 - 2014-05-13 11:34 - 00000000 ____D () C:\totalcmd
2014-05-13 11:34 - 2014-05-13 11:34 - 00000632 _____ () C:\Users\sebek\Desktop\Total Commander.lnk
2014-05-13 11:34 - 2014-05-13 11:34 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2014-05-13 11:34 - 2014-05-13 11:34 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\GHISLER
2014-05-13 08:39 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-05-13 07:41 - 2014-04-27 12:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hitman - Contracts
2014-05-13 07:39 - 2013-11-11 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2010 Express
2014-05-13 07:38 - 2013-11-11 12:33 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 10.0
2014-05-13 07:38 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-05-13 07:21 - 2014-05-13 07:13 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\CodeBlocks
2014-05-13 07:17 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\inetsrv
2014-05-12 12:53 - 2014-05-10 10:32 - 00000000 ____D () C:\Users\sebek\Documents\Bound by Flame
2014-05-11 19:01 - 2014-05-10 10:31 - 00000586 _____ () C:\Users\sebek\Desktop\Bound By Flame.lnk
2014-05-11 19:01 - 2014-05-10 10:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bound By Flame
2014-05-11 17:30 - 2013-11-10 20:39 - 00000857 _____ () C:\Users\sebek\Desktop\µTorrent.lnk
2014-05-11 17:15 - 2014-01-16 00:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JetBoost
2014-05-11 17:15 - 2013-11-09 14:17 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Media Player Classic
2014-05-11 17:14 - 2014-05-11 17:14 - 00013126 _____ () C:\ComboFix.txt
2014-05-11 17:14 - 2014-01-15 18:37 - 00000000 ____D () C:\Qoobox
2014-05-11 17:13 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini
2014-05-11 17:03 - 2014-05-11 16:54 - 00052927 _____ () C:\resolve.log
2014-05-11 17:00 - 2014-05-11 13:06 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-05-11 17:00 - 2014-03-19 19:47 - 00356352 _____ (NVIDIA Corporation) C:\Windows\system32\nvusmu.exe
2014-05-11 17:00 - 2014-03-19 19:47 - 00356352 _____ (NVIDIA Corporation) C:\Windows\system32\nvunrm.exe
2014-05-11 17:00 - 2014-03-19 19:46 - 00356352 _____ (NVIDIA Corporation) C:\Windows\system32\NVUNINST.EXE
2014-05-11 17:00 - 2014-03-16 16:47 - 00530432 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe
2014-05-11 17:00 - 2012-11-21 00:32 - 03116032 _____ () C:\Windows\system32\pbsvc.exe
2014-05-11 17:00 - 2011-09-08 16:00 - 00338944 _____ () C:\Windows\system32\gdsmux.exe
2014-05-11 17:00 - 2009-07-14 01:17 - 00398336 ____N (Microsoft Corporation) C:\Windows\regedit.exe
2014-05-11 16:46 - 2014-05-11 16:45 - 00000000 ____D () C:\AdwCleaner
2014-05-11 16:37 - 2014-05-11 16:37 - 00000000 ____D () C:\Program Files\HitmanPro
2014-05-11 15:40 - 2013-11-09 14:14 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-05-11 15:40 - 2013-11-09 14:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-05-11 15:40 - 2013-11-09 14:14 - 00000000 ____D () C:\Program Files\WinRAR
2014-05-11 15:37 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-11 15:36 - 2014-04-08 15:23 - 00000000 ____D () C:\Program Files\IrfanView
2014-05-11 14:09 - 2014-05-11 14:09 - 00001817 _____ () C:\Users\Public\Desktop\MPC-HC.lnk
2014-05-11 14:09 - 2014-05-11 14:09 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\MPC-HC
2014-05-11 14:09 - 2014-05-11 14:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC
2014-05-11 14:09 - 2014-05-11 14:09 - 00000000 ____D () C:\Program Files\MPC-HC
2014-05-11 13:06 - 2014-05-11 13:06 - 00001670 _____ () C:\Windows\system32\jupdate-1.7.0_55-b14.log
2014-05-11 13:06 - 2014-05-11 13:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-11 13:06 - 2014-01-25 14:07 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-11 13:06 - 2014-01-25 14:07 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-05-11 13:06 - 2014-01-10 21:37 - 00000000 ____D () C:\Program Files\Java
2014-05-11 10:32 - 2014-05-11 10:32 - 00001116 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-05-11 10:32 - 2013-12-16 11:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-05-11 10:32 - 2013-12-12 15:47 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-05-11 10:28 - 2014-05-10 21:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2005
2014-05-11 10:28 - 2014-03-21 20:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xfire
2014-05-11 10:28 - 2014-02-14 22:32 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-05-11 10:28 - 2014-02-11 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WirelessMon
2014-05-11 10:28 - 2013-12-26 16:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X5
2014-05-11 10:28 - 2013-11-24 19:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO
2014-05-11 10:28 - 2013-11-09 14:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Real Alternative
2014-05-11 10:15 - 2014-05-11 08:58 - 00000000 ____D () C:\ProgramData\Norton
2014-05-11 10:07 - 2014-05-11 09:50 - 00000000 ____D () C:\Users\sebek\AppData\Local\NPE
2014-05-11 10:06 - 2014-05-10 20:29 - 00000000 ____D () C:\Users\Classic .NET AppPool
2014-05-11 09:58 - 2014-05-11 09:57 - 00000000 ____D () C:\NPE
2014-05-11 09:52 - 2013-11-24 19:40 - 00000000 ____D () C:\Program Files\PowerISO
2014-05-11 09:34 - 2014-05-11 09:34 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-11 09:34 - 2014-05-10 20:27 - 00000000 ____D () C:\inetpub
2014-05-11 09:34 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-05-11 09:30 - 2013-12-24 11:31 - 00000000 ____D () C:\Users\sebek\AppData\Local\genienext
2014-05-11 09:22 - 2013-12-17 18:13 - 00000000 ____D () C:\Users\sebek\AppData\Local\NVIDIA Corporation
2014-05-11 09:10 - 2014-05-10 22:13 - 00000028 _____ () C:\Windows\ODBC.INI
2014-05-11 09:10 - 2013-11-09 13:14 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-05-11 09:08 - 2013-11-17 19:34 - 00000000 ____D () C:\Program Files\Defraggler
2014-05-11 09:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Registration
2014-05-11 09:03 - 2013-12-20 18:23 - 00000000 ____D () C:\Program Files\Audacity
2014-05-11 08:44 - 2013-11-09 13:28 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-05-11 08:42 - 2014-03-20 19:40 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-05-11 08:42 - 2014-01-21 17:04 - 00000000 ____D () C:\Users\sebek\AppData\Local\Deployment
2014-05-11 08:40 - 2009-07-14 04:04 - 00000505 _____ () C:\Windows\win.ini
2014-05-10 23:26 - 2014-04-29 09:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dark Souls 2
2014-05-10 22:39 - 2013-11-11 12:35 - 00000000 ____D () C:\Users\sebek\Documents\Visual Studio 2010
2014-05-10 22:04 - 2014-05-10 21:22 - 00000000 ____D () C:\Users\sebek\Documents\SQL Server Management Studio Express
2014-05-10 21:22 - 2014-05-10 21:21 - 00000000 ____D () C:\Users\sebek\Documents\Visual Studio 2005
2014-05-10 21:22 - 2013-12-26 16:36 - 00000000 ____D () C:\Users\sebek\AppData\Local\Microsoft Help
2014-05-10 21:21 - 2013-12-26 16:35 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-10 20:52 - 2014-05-10 20:52 - 00000000 ____D () C:\Users\sebek\AppData\Local\Microsoft_Corporation
2014-05-10 20:39 - 2014-02-15 14:29 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-05-10 20:29 - 2014-05-10 20:29 - 00000020 ___SH () C:\Users\Classic .NET AppPool\ntuser.ini
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Ustawienia lokalne
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Szablony
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Moje dokumenty
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Menu Start
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Documents\Moje wideo
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Documents\Moje obrazy
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Documents\Moja muzyka
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Dane aplikacji
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\AppData\Local\Historia
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\AppData\Local\Dane aplikacji
2014-05-10 17:43 - 2014-05-10 17:13 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Notepad++
2014-05-10 17:17 - 2014-05-10 17:11 - 00000000 ____D () C:\Users\sebek\AppData\Local\LightTable
2014-05-10 17:13 - 2014-05-10 17:13 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-05-10 17:13 - 2014-05-10 17:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-05-10 16:49 - 2014-05-10 16:49 - 10539380 _____ () C:\Users\sebek\Desktop\Databases.rar
2014-05-10 08:20 - 2014-05-10 08:20 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-05-09 17:03 - 2014-05-10 18:39 - 00052920 _____ (StdLib) C:\Windows\system32\Drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw.sys
2014-05-08 20:18 - 2013-11-24 20:01 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Audacity
2014-05-04 08:29 - 2009-07-14 06:53 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-30 14:48 - 2014-04-30 14:48 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Gadu-Gadu
2014-04-30 11:43 - 2014-04-30 11:39 - 00000000 ____D () C:\Users\sebek\Gadu-Gadu
2014-04-30 11:39 - 2014-04-30 11:39 - 00000956 _____ () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Gadu-Gadu.lnk
2014-04-30 11:39 - 2014-04-30 11:39 - 00000932 _____ () C:\Users\sebek\Desktop\Gadu-Gadu.lnk
2014-04-30 11:39 - 2014-04-30 11:39 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gadu-Gadu
2014-04-30 11:39 - 2014-04-30 11:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gadu-Gadu
2014-04-30 11:39 - 2014-04-30 11:39 - 00000000 ____D () C:\Program Files\Gadu-Gadu
2014-04-30 11:37 - 2014-01-21 17:04 - 00000000 ____D () C:\Users\sebek\AppData\Local\Apps\2.0
2014-04-30 08:51 - 2014-05-13 11:34 - 00000545 _____ () C:\Windows\UC.PIF
2014-04-30 08:51 - 2014-05-13 11:34 - 00000545 _____ () C:\Windows\RAR.PIF
2014-04-30 08:51 - 2014-05-13 11:34 - 00000545 _____ () C:\Windows\PKZIP.PIF
2014-04-30 08:51 - 2014-05-13 11:34 - 00000545 _____ () C:\Windows\PKUNZIP.PIF
2014-04-30 08:51 - 2014-05-13 11:34 - 00000545 _____ () C:\Windows\LHA.PIF
2014-04-30 08:51 - 2014-05-13 11:34 - 00000545 _____ () C:\Windows\ARJ.PIF
2014-04-29 09:44 - 2014-04-29 09:43 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\DarkSoulsII
2014-04-29 09:40 - 2009-07-14 06:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-04-29 09:08 - 2013-11-24 17:01 - 00000000 ____D () C:\Users\sebek\AppData\Local\Setup Integrity Check
2014-04-27 21:41 - 2014-03-25 18:52 - 00000000 ____D () C:\Users\sebek\AppData\Local\SKIDROW
2014-04-27 18:33 - 2014-04-27 18:32 - 00000000 ____D () C:\Users\sebek\Documents\Assassin's Creed IV Black Flag
2014-04-27 18:17 - 2014-04-27 18:17 - 00000746 _____ () C:\Users\Public\Desktop\Assassin's Creed IV - Black Flag.lnk
2014-04-27 18:17 - 2014-04-27 18:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Assassin's Creed IV - Black Flag
2014-04-27 17:19 - 2014-03-26 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-04-27 12:13 - 2014-03-16 18:38 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-04-27 11:38 - 2013-11-09 15:50 - 00000000 ____D () C:\Users\sebek\Documents\My Games
2014-04-27 11:24 - 2014-04-27 11:24 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-04-27 11:24 - 2013-11-09 13:11 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-04-25 08:57 - 2014-04-25 08:57 - 00000000 ____D () C:\Users\sebek\AppData\Local\MyPortal
2014-04-25 08:55 - 2014-04-25 08:55 - 00000828 _____ () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\AQQ.lnk
2014-04-25 08:55 - 2014-04-25 08:55 - 00000804 _____ () C:\Users\sebek\Desktop\AQQ.lnk
2014-04-25 08:55 - 2014-04-25 08:55 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPortal

Files to move or delete:
====================
C:\Users\sebek\AppData\Roaming\mBot.ini


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll
[2009-07-14 01:24] - [2009-07-14 03:16] - 0811520 ____N (Microsoft Corporation) 8626F0C30D4E3564FFDD25C90F4426F1

C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-21 13:56

==================== End Of Log ============================