Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:25-05-2014 02
Ran by sebek (administrator) on SEBEK-KOMPUTER on 28-05-2014 15:23:37
Running from D:\INSTALKI
Platform: Microsoft Windows 7 Ultimate  (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Hi-Rez Studios) D:\GRY\SMITE\HiPatchService.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\System32\PnkBstrA.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10783336 2011-07-19] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Winlogon: [Userinit] c:\windows\system32\userinit.exe,c:\users\sebek\microsoft\desktoplayer.exe,c:\program files\microsoft\desktoplayer.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 62.179.1.62 62.179.1.63

FireFox:
========
FF ProfilePath: C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\7swdtaol.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\3.0.40818.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @qq.com/TXSSO - C:\Program Files\Common Files\Tencent\TXSSO\1.2.1.94\Bin\npSSOAxCtrlForPTLogin.dll (Tencent)
FF Plugin: @real.com/nppl3260;version=6.0.12.450 - C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Acunetix Web Scanner - C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\7swdtaol.default\Extensions\acunetixwebscanner@attila.gerendi.xpi [2014-05-14]
FF Extension: eBesucher Surfbar - C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\7swdtaol.default\Extensions\ebesucher-surfbar@kashiif.com.xpi [2014-05-25]
FF Extension: MEGA - C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\7swdtaol.default\Extensions\firefox@mega.co.nz.xpi [2014-02-28]
FF Extension: SQL Inject Me - C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\7swdtaol.default\Extensions\sqlime@security.compass.xpi [2014-05-13]
FF Extension: Download YouTube Videos as MP4 - C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\7swdtaol.default\Extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi [2014-05-20]
FF Extension: Adblock Plus - C:\Users\sebek\AppData\Roaming\Mozilla\Firefox\Profiles\7swdtaol.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-25]

========================== Services (Whitelisted) =================

R2 ftpsvc; C:\Windows\system32\inetsrv\ftpsvc.dll [308224 2009-07-14] (Microsoft Corporation)
U2 HiPatchService; D:\GRY\SMITE\HiPatchService.exe [9216 2014-02-28] (Hi-Rez Studios)
R2 NIHardwareService; C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [3576320 2009-07-17] (Native Instruments GmbH)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15904544 2014-02-05] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2014-03-20] ()

==================== Drivers (Whitelisted) ====================

S3 apf004; C:\Windows\system32\apf004.sys [15112 2013-12-24] ()
R3 athur; C:\Windows\System32\DRIVERS\athur.sys [1500160 2010-02-23] (Atheros Communications, Inc.)
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [30976 2014-05-25] ()
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [107736 2014-05-24] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2013-12-27] (NVIDIA Corporation)
R1 SCDEmu; C:\Windows\system32\Drivers\SCDEmu.sys [114376 2013-10-23] (Power Software Ltd)
S3 SIVDriver; C:\Windows\system32\Drivers\SIVX32.sys [121336 2014-02-14] (Ray Hinchliffe)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-28 15:18 - 2014-05-28 15:19 - 00000000 ____D () C:\Users\sebek\AppData\Local\VirtualStore
2014-05-28 15:08 - 2014-05-28 15:08 - 00001256 _____ () C:\Users\sebek\Desktop\fixlist.txt
2014-05-27 14:47 - 2014-05-27 14:47 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Tropico 5
2014-05-27 14:25 - 2014-05-27 14:25 - 00000631 _____ () C:\Users\sebek\Desktop\Tropico 5.lnk
2014-05-27 14:25 - 2014-05-27 14:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tropico 5
2014-05-27 08:08 - 2014-05-27 08:08 - 00000564 _____ () C:\Windows\PFRO.log
2014-05-26 23:59 - 2014-05-26 23:59 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-05-26 23:59 - 2014-05-20 01:11 - 00603592 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe
2014-05-26 23:58 - 2014-05-14 04:20 - 03774821 _____ () C:\Windows\system32\nvcoproc.bin
2014-05-26 23:54 - 2014-05-20 04:39 - 24024408 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll
2014-05-26 23:54 - 2014-05-20 04:39 - 17559384 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-05-26 23:54 - 2014-05-20 04:39 - 10533152 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-05-26 23:54 - 2014-05-20 04:39 - 09735256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-05-26 23:54 - 2014-05-20 04:39 - 09697640 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-05-26 23:54 - 2014-05-20 04:39 - 02953672 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-05-26 23:54 - 2014-05-20 04:39 - 02413344 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-05-26 23:54 - 2014-05-20 04:39 - 01056200 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco3233788.dll
2014-05-26 23:54 - 2014-05-20 04:39 - 00908744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco3233788.dll
2014-05-26 23:54 - 2014-05-20 04:39 - 00866592 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR.dll
2014-05-26 23:54 - 2014-05-20 04:39 - 00861128 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC.dll
2014-05-26 23:50 - 2014-05-26 23:50 - 00000000 ____D () C:\NVIDIA
2014-05-26 16:10 - 2014-05-26 16:10 - 00001527 _____ () C:\Users\Public\Desktop\Ojciec chrzestny® II.lnk
2014-05-26 16:09 - 2014-05-26 16:09 - 00000000 ____D () C:\Users\sebek\Documents\EA Games
2014-05-26 13:47 - 2014-05-26 13:47 - 00000000 ____D () C:\Users\sebek\Documents\GF
2014-05-26 13:20 - 2014-05-26 13:21 - 00031073 _____ () C:\Windows\DirectX.log
2014-05-26 13:18 - 2005-06-24 16:24 - 00438272 ____R (EA.com/On2.com) C:\Windows\system32\vp6vfw.dll
2014-05-26 13:18 - 2004-12-10 09:06 - 00327680 _____ (On2.com Inc.) C:\Windows\system32\vp6dec.ax
2014-05-26 09:28 - 2014-05-26 09:34 - 00000000 ____D () C:\Users\sebek\AppData\Local\TeknoGods
2014-05-25 15:25 - 2014-05-25 15:43 - 00000000 ____D () C:\Users\sebek\Desktop\MBOTT
2014-05-25 13:38 - 2014-05-25 13:38 - 00003648 _____ () C:\Users\sebek\Desktop\gmer.txt
2014-05-25 13:12 - 2014-05-25 13:12 - 00000560 _____ () C:\Users\sebek\Desktop\WinDirStat.lnk
2014-05-25 12:58 - 2014-05-25 12:58 - 00055071 _____ () C:\Users\sebek\Desktop\Shortcut.txt
2014-05-25 12:58 - 2014-05-25 12:58 - 00047604 _____ () C:\Users\sebek\Desktop\FRST.txt
2014-05-25 12:58 - 2014-05-25 12:58 - 00024857 _____ () C:\Users\sebek\Desktop\Addition.txt
2014-05-25 12:57 - 2014-05-28 15:23 - 00000000 ____D () C:\FRST
2014-05-25 12:56 - 2014-05-25 12:56 - 00084684 _____ () C:\Users\sebek\Desktop\OTL.Txt
2014-05-25 12:56 - 2014-05-25 12:56 - 00064596 _____ () C:\Users\sebek\Desktop\Extras.Txt
2014-05-25 12:52 - 2014-05-28 15:17 - 00030210 _____ () C:\Windows\WindowsUpdate.log
2014-05-25 12:50 - 2014-05-25 12:50 - 00030976 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys
2014-05-25 12:49 - 2014-05-28 15:19 - 00001512 _____ () C:\Windows\setupact.log
2014-05-25 12:49 - 2014-05-25 12:49 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-25 08:17 - 2014-05-25 12:46 - 00000000 ____D () C:\Users\sebek\Desktop\RISKBOT
2014-05-24 23:21 - 2014-05-25 12:46 - 00000000 ____D () C:\Users\sebek\Desktop\BOTEKDNT
2014-05-24 21:39 - 2014-05-24 21:39 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinDirStat
2014-05-24 21:00 - 2014-05-24 21:03 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-24 21:00 - 2014-05-24 21:00 - 00001050 _____ () C:\Users\sebek\Desktop\Anti-Malware Is Running.lnk
2014-05-24 21:00 - 2014-04-03 15:50 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-24 19:25 - 2014-05-25 13:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinDirStat
2014-05-24 15:50 - 2014-05-25 12:46 - 00006546 _____ () C:\Windows\system32\.crusader
2014-05-24 15:31 - 2014-05-24 15:31 - 00001931 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-05-24 15:31 - 2014-05-24 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2014-05-22 13:31 - 2014-05-22 13:31 - 00000730 _____ () C:\Users\Public\Desktop\Smite.lnk
2014-05-22 13:31 - 2014-05-22 13:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios
2014-05-22 13:04 - 2014-05-22 13:31 - 00000553 _____ () C:\Users\Public\Desktop\Hi-Rez Diagnostics and Support.lnk
2014-05-20 13:37 - 2014-05-20 13:37 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2014-05-18 17:03 - 2014-05-18 17:03 - 00000000 ____D () C:\Users\sebek\Documents\eagle
2014-05-18 17:02 - 2014-05-24 21:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EAGLE Layout Editor 6.5.0
2014-05-18 17:02 - 2014-05-18 17:02 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\CadSoft
2014-05-16 21:57 - 2014-05-16 22:06 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-16 21:57 - 2014-05-16 21:57 - 00001989 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-05-15 07:51 - 2014-05-15 13:34 - 00000000 ____D () C:\Users\sebek\AcunetixScanner
2014-05-14 18:22 - 2014-05-14 22:32 - 00000000 ____D () C:\Users\sebek\Documents\Acunetix WVS 8
2014-05-14 18:20 - 2014-05-14 18:22 - 00000000 ____D () C:\Users\Public\Documents\Acunetix WVS 8
2014-05-14 18:19 - 2014-05-14 18:20 - 00000716 _____ () C:\Windows\WVS_InstDBLogFile.csv
2014-05-14 15:04 - 2014-05-14 15:04 - 00000000 ____D () C:\Users\sebek\AppData\Local\Skype
2014-05-14 15:03 - 2014-05-14 15:03 - 00002505 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-05-14 15:03 - 2014-05-14 15:03 - 00000000 ___RD () C:\Program Files\Skype
2014-05-14 15:03 - 2014-05-14 15:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-05-14 15:03 - 2014-05-14 15:03 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-05-13 18:02 - 2014-05-13 18:02 - 00000000 ____D () C:\Users\sebek\Desktop\Tor Browser
2014-05-13 12:50 - 2014-05-13 12:50 - 00000000 ____D () C:\Users\sebek\AppData\Local\Mega Limited
2014-05-13 11:45 - 2014-05-13 11:45 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Hex-Rays
2014-05-13 11:43 - 2014-05-13 11:43 - 00001791 _____ () C:\Users\sebek\Desktop\NASM.lnk
2014-05-13 11:43 - 2014-05-13 11:43 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Netwide Assembler 2.07
2014-05-13 11:43 - 2014-05-13 11:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Netwide Assembler 2.07
2014-05-13 11:43 - 2014-05-13 11:43 - 00000000 ____D () C:\Program Files\NASM
2014-05-13 11:34 - 2014-05-26 14:18 - 00000000 ____D () C:\totalcmd
2014-05-13 11:34 - 2014-05-13 11:34 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\GHISLER
2014-05-13 11:34 - 2014-04-30 08:51 - 00000545 _____ () C:\Windows\UC.PIF
2014-05-13 11:34 - 2014-04-30 08:51 - 00000545 _____ () C:\Windows\RAR.PIF
2014-05-13 11:34 - 2014-04-30 08:51 - 00000545 _____ () C:\Windows\PKZIP.PIF
2014-05-13 11:34 - 2014-04-30 08:51 - 00000545 _____ () C:\Windows\PKUNZIP.PIF
2014-05-13 11:34 - 2014-04-30 08:51 - 00000545 _____ () C:\Windows\LHA.PIF
2014-05-13 11:34 - 2014-04-30 08:51 - 00000545 _____ () C:\Windows\ARJ.PIF
2014-05-13 07:13 - 2014-05-24 21:37 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks
2014-05-13 07:13 - 2014-05-24 21:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks
2014-05-13 07:13 - 2014-05-13 07:21 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\CodeBlocks
2014-05-11 17:14 - 2014-05-11 17:14 - 00013126 _____ () C:\ComboFix.txt
2014-05-11 16:54 - 2014-05-11 17:03 - 00052927 _____ () C:\resolve.log
2014-05-11 16:37 - 2014-05-11 16:37 - 00000000 ____D () C:\Program Files\HitmanPro
2014-05-11 16:36 - 2014-05-24 15:50 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-05-11 14:09 - 2014-05-11 14:09 - 00001817 _____ () C:\Users\Public\Desktop\MPC-HC.lnk
2014-05-11 14:09 - 2014-05-11 14:09 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\MPC-HC
2014-05-11 14:09 - 2014-05-11 14:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC
2014-05-11 14:09 - 2014-05-11 14:09 - 00000000 ____D () C:\Program Files\MPC-HC
2014-05-11 13:06 - 2014-05-11 17:00 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-05-11 13:06 - 2014-05-11 13:06 - 00001670 _____ () C:\Windows\system32\jupdate-1.7.0_55-b14.log
2014-05-11 13:06 - 2014-05-11 13:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-11 13:06 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-05-11 13:06 - 2014-01-25 14:07 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-05-11 10:32 - 2014-05-11 10:32 - 00001116 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-05-11 09:34 - 2014-05-11 09:34 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-11 09:02 - 2014-05-24 21:00 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-11 02:09 - 2014-05-22 13:02 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Illusion
2014-05-11 02:09 - 2014-05-22 13:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Illusion
2014-05-11 02:06 - 2014-05-22 13:01 - 00000000 ____D () C:\Program Files\Illusion
2014-05-10 22:13 - 2014-05-11 09:10 - 00000028 _____ () C:\Windows\ODBC.INI
2014-05-10 21:22 - 2014-05-10 22:04 - 00000000 ____D () C:\Users\sebek\Documents\SQL Server Management Studio Express
2014-05-10 21:21 - 2014-05-10 21:22 - 00000000 ____D () C:\Users\sebek\Documents\Visual Studio 2005
2014-05-10 21:06 - 2014-05-11 10:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2005
2014-05-10 20:52 - 2014-05-10 20:52 - 00000000 ____D () C:\Users\sebek\AppData\Local\Microsoft_Corporation
2014-05-10 20:29 - 2014-05-11 10:06 - 00000000 ____D () C:\Users\Classic .NET AppPool
2014-05-10 20:29 - 2014-05-10 20:29 - 00000020 ___SH () C:\Users\Classic .NET AppPool\ntuser.ini
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Ustawienia lokalne
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Szablony
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Moje dokumenty
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Menu Start
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Documents\Moje wideo
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Documents\Moje obrazy
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Documents\Moja muzyka
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Dane aplikacji
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\AppData\Local\Historia
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\AppData\Local\Dane aplikacji
2014-05-10 20:29 - 2013-12-20 14:13 - 00000000 ____D () C:\Users\Classic .NET AppPool\AppData\Roaming\Macromedia
2014-05-10 20:29 - 2009-07-14 06:42 - 00000000 ___RD () C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-10 20:29 - 2009-07-14 06:37 - 00000000 ___RD () C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-10 20:27 - 2014-05-11 09:34 - 00000000 ____D () C:\inetpub
2014-05-10 17:13 - 2014-05-10 17:43 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Notepad++
2014-05-10 17:13 - 2014-05-10 17:13 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-05-10 17:13 - 2014-05-10 17:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-05-10 17:11 - 2014-05-10 17:17 - 00000000 ____D () C:\Users\sebek\AppData\Local\LightTable
2014-05-10 16:49 - 2014-05-10 16:49 - 10539380 _____ () C:\Users\sebek\Desktop\Databases.rar
2014-05-10 10:32 - 2014-05-12 12:53 - 00000000 ____D () C:\Users\sebek\Documents\Bound by Flame
2014-05-10 10:31 - 2014-05-11 19:01 - 00000586 _____ () C:\Users\sebek\Desktop\Bound By Flame.lnk
2014-05-10 10:31 - 2014-05-11 19:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bound By Flame
2014-05-10 08:20 - 2014-05-10 08:20 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-04-30 14:48 - 2014-04-30 14:48 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Gadu-Gadu
2014-04-30 11:39 - 2014-04-30 11:43 - 00000000 ____D () C:\Users\sebek\Gadu-Gadu
2014-04-30 11:39 - 2014-04-30 11:39 - 00000956 _____ () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Gadu-Gadu.lnk
2014-04-30 11:39 - 2014-04-30 11:39 - 00000932 _____ () C:\Users\sebek\Desktop\Gadu-Gadu.lnk
2014-04-30 11:39 - 2014-04-30 11:39 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gadu-Gadu
2014-04-30 11:39 - 2014-04-30 11:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gadu-Gadu
2014-04-30 11:39 - 2014-04-30 11:39 - 00000000 ____D () C:\Program Files\Gadu-Gadu
2014-04-29 09:43 - 2014-04-29 09:44 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\DarkSoulsII
2014-04-29 09:40 - 2014-05-10 23:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dark Souls 2

==================== One Month Modified Files and Folders =======

2014-05-28 15:23 - 2014-05-25 12:57 - 00000000 ____D () C:\FRST
2014-05-28 15:23 - 2014-02-17 09:25 - 00000000 ____D () C:\Users\sebek\AppData\Local\CrashDumps
2014-05-28 15:22 - 2014-05-25 12:52 - 00030210 _____ () C:\Windows\WindowsUpdate.log
2014-05-28 15:19 - 2014-05-28 15:18 - 00000000 ____D () C:\Users\sebek\AppData\Local\VirtualStore
2014-05-28 15:19 - 2014-05-25 12:49 - 00001512 _____ () C:\Windows\setupact.log
2014-05-28 15:19 - 2013-11-09 13:12 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-28 15:18 - 2014-03-16 16:37 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-28 15:18 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-28 15:18 - 2009-07-14 06:34 - 00009584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-28 15:18 - 2009-07-14 06:34 - 00009584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-28 15:10 - 2013-11-12 13:38 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Skype
2014-05-28 15:08 - 2014-05-28 15:08 - 00001256 _____ () C:\Users\sebek\Desktop\fixlist.txt
2014-05-27 20:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-27 16:01 - 2013-11-10 20:39 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\uTorrent
2014-05-27 14:50 - 2013-12-23 19:49 - 00000000 ____D () C:\Windows\system32\directx
2014-05-27 14:47 - 2014-05-27 14:47 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Tropico 5
2014-05-27 14:25 - 2014-05-27 14:25 - 00000631 _____ () C:\Users\sebek\Desktop\Tropico 5.lnk
2014-05-27 14:25 - 2014-05-27 14:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tropico 5
2014-05-27 12:59 - 2013-11-22 11:34 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Guitar Pro 6
2014-05-27 12:54 - 2014-04-10 16:15 - 00000535 _____ () C:\Users\sebek\Desktop\Guitar Pro 6.lnk
2014-05-27 11:16 - 2013-11-11 12:49 - 00000080 _____ () C:\Users\sebek\AppData\Roaming\mBot.ini
2014-05-27 10:28 - 2014-02-02 23:40 - 00000132 _____ () C:\Users\sebek\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe
2014-05-27 08:08 - 2014-05-27 08:08 - 00000564 _____ () C:\Windows\PFRO.log
2014-05-26 23:59 - 2014-05-26 23:59 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-05-26 23:59 - 2014-03-16 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-05-26 23:59 - 2013-11-09 13:11 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-05-26 23:50 - 2014-05-26 23:50 - 00000000 ____D () C:\NVIDIA
2014-05-26 23:21 - 2014-03-16 16:49 - 00000000 ____D () C:\Users\sebek\AppData\Local\NVIDIA
2014-05-26 16:10 - 2014-05-26 16:10 - 00001527 _____ () C:\Users\Public\Desktop\Ojciec chrzestny® II.lnk
2014-05-26 16:09 - 2014-05-26 16:09 - 00000000 ____D () C:\Users\sebek\Documents\EA Games
2014-05-26 16:09 - 2009-07-14 06:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-26 14:18 - 2014-05-13 11:34 - 00000000 ____D () C:\totalcmd
2014-05-26 14:15 - 2013-11-25 00:16 - 00000000 ____D () C:\Program Files\NapiProjekt
2014-05-26 14:13 - 2013-12-20 18:23 - 00000000 ____D () C:\Program Files\Audacity
2014-05-26 14:13 - 2013-11-09 13:28 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-05-26 14:11 - 2013-12-22 02:29 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-05-26 14:11 - 2013-12-20 14:13 - 00000000 ____D () C:\ProgramData\Adobe
2014-05-26 14:11 - 2013-12-20 14:13 - 00000000 ____D () C:\Program Files\Adobe
2014-05-26 14:11 - 2013-11-09 13:15 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Adobe
2014-05-26 13:47 - 2014-05-26 13:47 - 00000000 ____D () C:\Users\sebek\Documents\GF
2014-05-26 13:21 - 2014-05-26 13:20 - 00031073 _____ () C:\Windows\DirectX.log
2014-05-26 13:18 - 2014-03-16 18:38 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-05-26 11:36 - 2013-12-16 11:05 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\TS3Client
2014-05-26 09:34 - 2014-05-26 09:28 - 00000000 ____D () C:\Users\sebek\AppData\Local\TeknoGods
2014-05-25 15:43 - 2014-05-25 15:25 - 00000000 ____D () C:\Users\sebek\Desktop\MBOTT
2014-05-25 13:38 - 2014-05-25 13:38 - 00003648 _____ () C:\Users\sebek\Desktop\gmer.txt
2014-05-25 13:12 - 2014-05-25 13:12 - 00000560 _____ () C:\Users\sebek\Desktop\WinDirStat.lnk
2014-05-25 13:12 - 2014-05-24 19:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinDirStat
2014-05-25 12:58 - 2014-05-25 12:58 - 00055071 _____ () C:\Users\sebek\Desktop\Shortcut.txt
2014-05-25 12:58 - 2014-05-25 12:58 - 00047604 _____ () C:\Users\sebek\Desktop\FRST.txt
2014-05-25 12:58 - 2014-05-25 12:58 - 00024857 _____ () C:\Users\sebek\Desktop\Addition.txt
2014-05-25 12:56 - 2014-05-25 12:56 - 00084684 _____ () C:\Users\sebek\Desktop\OTL.Txt
2014-05-25 12:56 - 2014-05-25 12:56 - 00064596 _____ () C:\Users\sebek\Desktop\Extras.Txt
2014-05-25 12:50 - 2014-05-25 12:50 - 00030976 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys
2014-05-25 12:49 - 2014-05-25 12:49 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-25 12:46 - 2014-05-25 08:17 - 00000000 ____D () C:\Users\sebek\Desktop\RISKBOT
2014-05-25 12:46 - 2014-05-24 23:21 - 00000000 ____D () C:\Users\sebek\Desktop\BOTEKDNT
2014-05-25 12:46 - 2014-05-24 15:50 - 00006546 _____ () C:\Windows\system32\.crusader
2014-05-25 08:01 - 2009-07-14 06:33 - 03736672 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-24 23:22 - 2013-11-09 13:26 - 00089264 _____ () C:\Users\sebek\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-24 21:39 - 2014-05-24 21:39 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinDirStat
2014-05-24 21:37 - 2014-05-18 17:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EAGLE Layout Editor 6.5.0
2014-05-24 21:37 - 2014-05-13 07:13 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks
2014-05-24 21:37 - 2014-05-13 07:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks
2014-05-24 21:34 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Web
2014-05-24 21:03 - 2014-05-24 21:00 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-24 21:00 - 2014-05-24 21:00 - 00001050 _____ () C:\Users\sebek\Desktop\Anti-Malware Is Running.lnk
2014-05-24 21:00 - 2014-05-11 09:02 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-24 15:50 - 2014-05-11 16:36 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-05-24 15:50 - 2014-03-04 14:21 - 00000000 ____D () C:\Users\sebek\Desktop\Fuse-O-Mat - Release
2014-05-24 15:50 - 2014-03-04 13:56 - 00000000 ____D () C:\Users\sebek\Desktop\FUSE
2014-05-24 15:31 - 2014-05-24 15:31 - 00001931 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-05-24 15:31 - 2014-05-24 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2014-05-24 15:26 - 2013-11-17 19:31 - 00007626 _____ () C:\Users\sebek\AppData\Local\Resmon.ResmonCfg
2014-05-22 13:31 - 2014-05-22 13:31 - 00000730 _____ () C:\Users\Public\Desktop\Smite.lnk
2014-05-22 13:31 - 2014-05-22 13:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios
2014-05-22 13:31 - 2014-05-22 13:04 - 00000553 _____ () C:\Users\Public\Desktop\Hi-Rez Diagnostics and Support.lnk
2014-05-22 13:11 - 2014-04-27 21:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst
2014-05-22 13:02 - 2014-05-11 02:09 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Illusion
2014-05-22 13:02 - 2014-05-11 02:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Illusion
2014-05-22 13:01 - 2014-05-11 02:06 - 00000000 ____D () C:\Program Files\Illusion
2014-05-20 13:37 - 2014-05-20 13:37 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2014-05-20 04:39 - 2014-05-26 23:54 - 24024408 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll
2014-05-20 04:39 - 2014-05-26 23:54 - 17559384 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-05-20 04:39 - 2014-05-26 23:54 - 10533152 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-05-20 04:39 - 2014-05-26 23:54 - 09735256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-05-20 04:39 - 2014-05-26 23:54 - 09697640 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-05-20 04:39 - 2014-05-26 23:54 - 02953672 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-05-20 04:39 - 2014-05-26 23:54 - 02413344 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-05-20 04:39 - 2014-05-26 23:54 - 01056200 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco3233788.dll
2014-05-20 04:39 - 2014-05-26 23:54 - 00908744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco3233788.dll
2014-05-20 04:39 - 2014-05-26 23:54 - 00866592 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR.dll
2014-05-20 04:39 - 2014-05-26 23:54 - 00861128 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC.dll
2014-05-20 04:39 - 2014-03-16 16:36 - 00052056 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-05-20 04:39 - 2013-11-09 13:12 - 16003912 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2um.dll
2014-05-20 04:39 - 2013-11-09 13:12 - 14434704 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dum.dll
2014-05-20 04:39 - 2013-11-09 13:12 - 02730208 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi.dll
2014-05-20 04:39 - 2013-11-09 13:12 - 00020729 _____ () C:\Windows\system32\nvinfo.pb
2014-05-20 02:04 - 2014-03-16 16:36 - 04379592 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-05-20 02:04 - 2014-03-16 16:36 - 03055560 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll
2014-05-20 02:04 - 2014-03-16 16:36 - 02555168 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-05-20 02:04 - 2014-03-16 16:36 - 00668104 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-05-20 02:04 - 2014-03-16 16:36 - 00376096 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-05-20 02:04 - 2014-03-16 16:36 - 00061784 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-05-20 01:11 - 2014-05-26 23:59 - 00603592 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe
2014-05-19 19:37 - 2009-07-14 10:07 - 00776162 _____ () C:\Windows\system32\perfh015.dat
2014-05-19 19:37 - 2009-07-14 10:07 - 00271826 _____ () C:\Windows\system32\perfc015.dat
2014-05-19 19:37 - 2002-01-01 03:22 - 00006796 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-18 17:03 - 2014-05-18 17:03 - 00000000 ____D () C:\Users\sebek\Documents\eagle
2014-05-18 17:02 - 2014-05-18 17:02 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\CadSoft
2014-05-16 22:06 - 2014-05-16 21:57 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-16 21:58 - 2013-11-09 13:12 - 00000000 ____D () C:\Users\sebek\AppData\Local\Adobe
2014-05-16 21:57 - 2014-05-16 21:57 - 00001989 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-05-15 13:34 - 2014-05-15 07:51 - 00000000 ____D () C:\Users\sebek\AcunetixScanner
2014-05-15 07:51 - 2002-01-01 03:18 - 00000000 ____D () C:\Users\sebek
2014-05-14 22:32 - 2014-05-14 18:22 - 00000000 ____D () C:\Users\sebek\Documents\Acunetix WVS 8
2014-05-14 18:22 - 2014-05-14 18:20 - 00000000 ____D () C:\Users\Public\Documents\Acunetix WVS 8
2014-05-14 18:20 - 2014-05-14 18:19 - 00000716 _____ () C:\Windows\WVS_InstDBLogFile.csv
2014-05-14 17:20 - 2013-11-09 13:12 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-05-14 17:20 - 2013-11-09 13:12 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-05-14 16:25 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-05-14 15:04 - 2014-05-14 15:04 - 00000000 ____D () C:\Users\sebek\AppData\Local\Skype
2014-05-14 15:03 - 2014-05-14 15:03 - 00002505 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-05-14 15:03 - 2014-05-14 15:03 - 00000000 ___RD () C:\Program Files\Skype
2014-05-14 15:03 - 2014-05-14 15:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-05-14 15:03 - 2014-05-14 15:03 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-05-14 15:03 - 2013-11-12 13:38 - 00000000 ____D () C:\ProgramData\Skype
2014-05-14 04:20 - 2014-05-26 23:58 - 03774821 _____ () C:\Windows\system32\nvcoproc.bin
2014-05-13 18:02 - 2014-05-13 18:02 - 00000000 ____D () C:\Users\sebek\Desktop\Tor Browser
2014-05-13 14:20 - 2013-11-09 13:13 - 00000000 ____D () C:\Program Files\Google
2014-05-13 12:50 - 2014-05-13 12:50 - 00000000 ____D () C:\Users\sebek\AppData\Local\Mega Limited
2014-05-13 11:45 - 2014-05-13 11:45 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Hex-Rays
2014-05-13 11:43 - 2014-05-13 11:43 - 00001791 _____ () C:\Users\sebek\Desktop\NASM.lnk
2014-05-13 11:43 - 2014-05-13 11:43 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Netwide Assembler 2.07
2014-05-13 11:43 - 2014-05-13 11:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Netwide Assembler 2.07
2014-05-13 11:43 - 2014-05-13 11:43 - 00000000 ____D () C:\Program Files\NASM
2014-05-13 11:34 - 2014-05-13 11:34 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\GHISLER
2014-05-13 08:39 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-05-13 07:41 - 2014-04-27 12:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hitman - Contracts
2014-05-13 07:39 - 2013-11-11 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2010 Express
2014-05-13 07:38 - 2013-11-11 12:33 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 10.0
2014-05-13 07:38 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-05-13 07:21 - 2014-05-13 07:13 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\CodeBlocks
2014-05-13 07:17 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\inetsrv
2014-05-12 12:53 - 2014-05-10 10:32 - 00000000 ____D () C:\Users\sebek\Documents\Bound by Flame
2014-05-11 19:01 - 2014-05-10 10:31 - 00000586 _____ () C:\Users\sebek\Desktop\Bound By Flame.lnk
2014-05-11 19:01 - 2014-05-10 10:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bound By Flame
2014-05-11 17:30 - 2013-11-10 20:39 - 00000857 _____ () C:\Users\sebek\Desktop\µTorrent.lnk
2014-05-11 17:15 - 2014-01-16 00:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JetBoost
2014-05-11 17:15 - 2013-11-09 14:17 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Media Player Classic
2014-05-11 17:14 - 2014-05-11 17:14 - 00013126 _____ () C:\ComboFix.txt
2014-05-11 17:14 - 2014-01-15 18:37 - 00000000 ____D () C:\Qoobox
2014-05-11 17:13 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini
2014-05-11 17:03 - 2014-05-11 16:54 - 00052927 _____ () C:\resolve.log
2014-05-11 17:00 - 2014-05-11 13:06 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-05-11 17:00 - 2014-03-19 19:47 - 00356352 _____ (NVIDIA Corporation) C:\Windows\system32\nvusmu.exe
2014-05-11 17:00 - 2014-03-19 19:47 - 00356352 _____ (NVIDIA Corporation) C:\Windows\system32\nvunrm.exe
2014-05-11 17:00 - 2014-03-19 19:46 - 00356352 _____ (NVIDIA Corporation) C:\Windows\system32\NVUNINST.EXE
2014-05-11 17:00 - 2012-11-21 00:32 - 03116032 _____ () C:\Windows\system32\pbsvc.exe
2014-05-11 17:00 - 2011-09-08 16:00 - 00338944 _____ () C:\Windows\system32\gdsmux.exe
2014-05-11 17:00 - 2009-07-14 01:17 - 00398336 ____N (Microsoft Corporation) C:\Windows\regedit.exe
2014-05-11 16:37 - 2014-05-11 16:37 - 00000000 ____D () C:\Program Files\HitmanPro
2014-05-11 15:40 - 2013-11-09 14:14 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-05-11 15:40 - 2013-11-09 14:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-05-11 15:40 - 2013-11-09 14:14 - 00000000 ____D () C:\Program Files\WinRAR
2014-05-11 15:36 - 2014-04-08 15:23 - 00000000 ____D () C:\Program Files\IrfanView
2014-05-11 14:09 - 2014-05-11 14:09 - 00001817 _____ () C:\Users\Public\Desktop\MPC-HC.lnk
2014-05-11 14:09 - 2014-05-11 14:09 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\MPC-HC
2014-05-11 14:09 - 2014-05-11 14:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC
2014-05-11 14:09 - 2014-05-11 14:09 - 00000000 ____D () C:\Program Files\MPC-HC
2014-05-11 13:06 - 2014-05-11 13:06 - 00001670 _____ () C:\Windows\system32\jupdate-1.7.0_55-b14.log
2014-05-11 13:06 - 2014-05-11 13:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-11 13:06 - 2014-01-25 14:07 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-11 13:06 - 2014-01-25 14:07 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-05-11 13:06 - 2014-01-10 21:37 - 00000000 ____D () C:\Program Files\Java
2014-05-11 10:32 - 2014-05-11 10:32 - 00001116 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-05-11 10:32 - 2013-12-16 11:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-05-11 10:32 - 2013-12-12 15:47 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-05-11 10:28 - 2014-05-10 21:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2005
2014-05-11 10:28 - 2014-03-21 20:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xfire
2014-05-11 10:28 - 2014-02-14 22:32 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-05-11 10:28 - 2014-02-11 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WirelessMon
2014-05-11 10:28 - 2013-12-26 16:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X5
2014-05-11 10:28 - 2013-11-24 19:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO
2014-05-11 10:28 - 2013-11-09 14:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Real Alternative
2014-05-11 10:06 - 2014-05-10 20:29 - 00000000 ____D () C:\Users\Classic .NET AppPool
2014-05-11 09:52 - 2013-11-24 19:40 - 00000000 ____D () C:\Program Files\PowerISO
2014-05-11 09:34 - 2014-05-11 09:34 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-11 09:34 - 2014-05-10 20:27 - 00000000 ____D () C:\inetpub
2014-05-11 09:34 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-05-11 09:22 - 2013-12-17 18:13 - 00000000 ____D () C:\Users\sebek\AppData\Local\NVIDIA Corporation
2014-05-11 09:10 - 2014-05-10 22:13 - 00000028 _____ () C:\Windows\ODBC.INI
2014-05-11 09:10 - 2013-11-09 13:14 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-05-11 09:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Registration
2014-05-11 08:42 - 2014-03-20 19:40 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-05-11 08:42 - 2014-01-21 17:04 - 00000000 ____D () C:\Users\sebek\AppData\Local\Deployment
2014-05-11 08:40 - 2009-07-14 04:04 - 00000505 _____ () C:\Windows\win.ini
2014-05-10 23:26 - 2014-04-29 09:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dark Souls 2
2014-05-10 22:39 - 2013-11-11 12:35 - 00000000 ____D () C:\Users\sebek\Documents\Visual Studio 2010
2014-05-10 22:04 - 2014-05-10 21:22 - 00000000 ____D () C:\Users\sebek\Documents\SQL Server Management Studio Express
2014-05-10 21:22 - 2014-05-10 21:21 - 00000000 ____D () C:\Users\sebek\Documents\Visual Studio 2005
2014-05-10 21:22 - 2013-12-26 16:36 - 00000000 ____D () C:\Users\sebek\AppData\Local\Microsoft Help
2014-05-10 21:21 - 2013-12-26 16:35 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-10 20:52 - 2014-05-10 20:52 - 00000000 ____D () C:\Users\sebek\AppData\Local\Microsoft_Corporation
2014-05-10 20:39 - 2014-02-15 14:29 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-05-10 20:29 - 2014-05-10 20:29 - 00000020 ___SH () C:\Users\Classic .NET AppPool\ntuser.ini
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Ustawienia lokalne
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Szablony
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Moje dokumenty
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Menu Start
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Documents\Moje wideo
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Documents\Moje obrazy
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Documents\Moja muzyka
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\Dane aplikacji
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\AppData\Local\Historia
2014-05-10 20:29 - 2014-05-10 20:29 - 00000000 _SHDL () C:\Users\Classic .NET AppPool\AppData\Local\Dane aplikacji
2014-05-10 17:43 - 2014-05-10 17:13 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Notepad++
2014-05-10 17:17 - 2014-05-10 17:11 - 00000000 ____D () C:\Users\sebek\AppData\Local\LightTable
2014-05-10 17:13 - 2014-05-10 17:13 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-05-10 17:13 - 2014-05-10 17:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-05-10 16:49 - 2014-05-10 16:49 - 10539380 _____ () C:\Users\sebek\Desktop\Databases.rar
2014-05-10 08:20 - 2014-05-10 08:20 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-05-08 20:18 - 2013-11-24 20:01 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Audacity
2014-05-04 08:29 - 2009-07-14 06:53 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-30 14:48 - 2014-04-30 14:48 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Gadu-Gadu
2014-04-30 11:43 - 2014-04-30 11:39 - 00000000 ____D () C:\Users\sebek\Gadu-Gadu
2014-04-30 11:39 - 2014-04-30 11:39 - 00000956 _____ () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Gadu-Gadu.lnk
2014-04-30 11:39 - 2014-04-30 11:39 - 00000932 _____ () C:\Users\sebek\Desktop\Gadu-Gadu.lnk
2014-04-30 11:39 - 2014-04-30 11:39 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gadu-Gadu
2014-04-30 11:39 - 2014-04-30 11:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gadu-Gadu
2014-04-30 11:39 - 2014-04-30 11:39 - 00000000 ____D () C:\Program Files\Gadu-Gadu
2014-04-30 11:37 - 2014-01-21 17:04 - 00000000 ____D () C:\Users\sebek\AppData\Local\Apps\2.0
2014-04-30 08:51 - 2014-05-13 11:34 - 00000545 _____ () C:\Windows\UC.PIF
2014-04-30 08:51 - 2014-05-13 11:34 - 00000545 _____ () C:\Windows\RAR.PIF
2014-04-30 08:51 - 2014-05-13 11:34 - 00000545 _____ () C:\Windows\PKZIP.PIF
2014-04-30 08:51 - 2014-05-13 11:34 - 00000545 _____ () C:\Windows\PKUNZIP.PIF
2014-04-30 08:51 - 2014-05-13 11:34 - 00000545 _____ () C:\Windows\LHA.PIF
2014-04-30 08:51 - 2014-05-13 11:34 - 00000545 _____ () C:\Windows\ARJ.PIF
2014-04-29 09:44 - 2014-04-29 09:43 - 00000000 ____D () C:\Users\sebek\AppData\Roaming\DarkSoulsII
2014-04-29 09:08 - 2013-11-24 17:01 - 00000000 ____D () C:\Users\sebek\AppData\Local\Setup Integrity Check

Files to move or delete:
====================
C:\Users\sebek\AppData\Roaming\mBot.ini


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll
[2009-07-14 01:24] - [2009-07-14 03:16] - 0811520 ____N (Microsoft Corporation) 8626F0C30D4E3564FFDD25C90F4426F1

C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-21 13:56

==================== End Of Log ============================