Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 26-04-2014 01
Ran by ADMIN (administrator) on ADMIN-PC on 26-04-2014 12:52:48
Running from C:\Users\ADMIN\Downloads
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Power Software Ltd) C:\Program Files\PowerISO\PWRISOVM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Arcabit) C:\Program Files\Arcabit\ArcaVir\AVMenu.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Arcabit) C:\Program Files\Arcabit\common\arcaconfsv.exe
(Arcabit) C:\Program Files\Arcabit\arcaupdate\update.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
() C:\Windows\system32\PnkBstrA.exe
(Realtek) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe
(Realtek Semiconductor Corp.) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWlan.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
(Arcabit) C:\Program Files\Arcabit\arcavir\arcamainsv.exe
(Arcabit) C:\Program Files\Arcabit\arcaagent\arcaremotesvc.exe
(Arcabit) C:\Program Files\Arcabit\arcatools\arcabackup\arcabackupservice.exe
(ArcaBit) C:\Program Files\Arcabit\common\arcatasksservice.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmplayer.exe
(Valve Corporation) C:\Program Files\steam\Steam.exe
(Valve Corporation) C:\Program Files\Common Files\Steam\SteamService.exe
(Almico Software (www.almico.com)) C:\Program Files\SpeedFan\speedfan.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-19] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] => "C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [337432 2014-02-03] (Power Software Ltd)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [AVMENU] => C:\Program Files\Arcabit\ArcaVir\AVMenu.exe [401944 2014-04-19] (Arcabit)
HKLM\...\Run: [ARCACLEAN] => C:\Program Files\Arcabit\ArcaVir\ArcaClean.exe [59984 2014-04-19] (ArcaBit)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-2378528702-529034937-1684982878-1000\...\Run: [AQQ] => C:\Program Files\WapSter\WapSter AQQ\AQQ.exe [8174592 2013-10-16] (AQQ Sp. z o.o.)
HKU\S-1-5-21-2378528702-529034937-1684982878-1000\...\Run: [Overwolf] => C:\Program Files\Overwolf\Overwolf.exe [37664 2014-03-05] (Overwolf LTD)
HKU\S-1-5-21-2378528702-529034937-1684982878-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-19] (Microsoft Corporation)
Startup: C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.adobe.com/pub/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 173.234.241.50 8.8.8.8

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []

Chrome: 
=======
CHR HomePage: 
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\ADMIN\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.2.464\_platform_specific\win_x86\widevinecdmadapter.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\34.0.1847.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\34.0.1847.116\pdf.dll ()
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java Deployment Toolkit 7.0.550.14) - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U55) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (PDF-XChange Viewer) - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (AdBlock) - C:\Users\ADMIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-29]
CHR Extension: (Google Wallet) - C:\Users\ADMIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-06]

========================== Services (Whitelisted) =================

R2 ABConfSV; C:\Program Files\Arcabit\common\arcaconfsv.exe [142384 2014-04-19] (Arcabit)
R2 ABMainSV; C:\Program Files\Arcabit\arcavir\arcamainsv.exe [162984 2014-04-19] (Arcabit)
R2 ArcaRemoteService; C:\Program Files\Arcabit\arcaagent\arcaremotesvc.exe [570864 2014-04-19] (Arcabit)
R2 AVBackup; C:\Program Files\Arcabit\arcatools\arcabackup\arcabackupservice.exe [187704 2014-04-19] (Arcabit)
R2 AVTasks2; C:\Program Files\Arcabit\common\arcatasksservice.exe [130024 2014-04-19] (ArcaBit)
R2 AVUpdate; C:\Program Files\Arcabit\arcaupdate\update.exe [200064 2014-04-19] (Arcabit)
U2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
S3 OverwolfUpdaterService; C:\Program Files\Overwolf\OverwolfUpdater.exe [99616 2014-03-05] (Overwolf LTD)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2014-04-25] ()
R2 Realtek11nSU; C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek)

==================== Drivers (Whitelisted) ====================

R3 ABFLT; C:\Program Files\Arcabit\ArcaVir\ABFLT.sys [66800 2014-04-19] (ArcaBit)
S3 ABndis; C:\Windows\System32\DRIVERS\abndis.sys [41712 2014-04-19] (ArcaBit)
R3 ABndisMP; C:\Windows\System32\DRIVERS\abndis.sys [41712 2014-04-19] (ArcaBit)
R1 arcawfp; C:\Windows\System32\drivers\arcawfp.sys [54200 2014-04-26] (NetFilterSDK.com)
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] ()
R1 SCDEmu; C:\Windows\system32\Drivers\SCDEmu.sys [114408 2014-02-03] (Power Software Ltd)
R0 speedfan; C:\Windows\System32\speedfan.sys [24184 2012-12-29] (Almico Software)
S1 ABTDI; \??\C:\Program Files\Arcabit\ArcaVir\ABTDI.sys [X]
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-26 12:52 - 2014-04-26 12:52 - 01049088 _____ (Farbar) C:\Users\ADMIN\Downloads\FRST.exe
2014-04-26 12:52 - 2014-04-26 12:52 - 00602112 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\OTL (1).exe
2014-04-26 12:16 - 2014-04-26 12:16 - 00000000 ____D () C:\Users\ADMIN\Desktop\pulpt
2014-04-25 17:32 - 2014-04-25 17:32 - 00000000 ____D () C:\Windows\Sun
2014-04-25 17:10 - 2014-04-25 17:10 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\TFC (1).exe
2014-04-25 16:51 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-04-25 16:50 - 2014-04-25 16:50 - 01365865 _____ () C:\Users\ADMIN\Downloads\adwcleaner (1).exe
2014-04-25 16:30 - 2014-04-25 16:30 - 00291128 _____ () C:\Windows\system32\PnkBstrB.xtr
2014-04-25 16:30 - 2014-04-25 16:30 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\PunkBuster
2014-04-25 16:30 - 2014-04-25 16:30 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\Arktos Entertainment
2014-04-25 16:29 - 2014-04-25 16:30 - 00291128 _____ () C:\Windows\system32\PnkBstrB.exe
2014-04-25 16:29 - 2014-04-25 16:30 - 00139528 _____ () C:\Windows\system32\Drivers\PnkBstrK.sys
2014-04-25 16:29 - 2014-04-25 16:29 - 00281872 _____ () C:\Windows\system32\PnkBstrB.ex0
2014-04-25 16:29 - 2014-04-25 16:29 - 00138904 _____ () C:\Users\ADMIN\AppData\Roaming\PnkBstrK.sys
2014-04-25 16:29 - 2014-04-25 16:29 - 00076888 _____ () C:\Windows\system32\PnkBstrA.exe
2014-04-25 16:29 - 2014-04-25 16:29 - 00000000 ____D () C:\Users\ADMIN\Documents\Arktos
2014-04-25 16:29 - 2014-04-25 16:29 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\CrashRpt
2014-04-25 16:29 - 2014-04-25 16:29 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\Arktos
2014-04-25 16:28 - 2014-04-25 16:28 - 00000000 ____D () C:\Windows\system32\directx
2014-04-25 14:56 - 2014-04-25 14:56 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-04-22 00:00 - 2014-04-22 00:00 - 18673054 _____ () C:\Users\ADMIN\Downloads\Hey-Girl-Shake-It.wmv
2014-04-21 23:24 - 2014-04-21 23:24 - 00044882 _____ () C:\Users\ADMIN\Downloads\pobrane.htm
2014-04-21 22:55 - 2014-04-21 22:55 - 00004217 _____ () C:\Users\ADMIN\Downloads\config.cfg
2014-04-21 20:20 - 2014-04-21 20:20 - 00002356 _____ () C:\Users\ADMIN\Downloads\wiecej repa i kasy za zlecenie.rar
2014-04-21 19:58 - 2014-04-21 19:58 - 00007831 _____ () C:\Users\ADMIN\Downloads\monia.rar
2014-04-21 19:10 - 2014-04-21 19:10 - 04887531 _____ () C:\Users\ADMIN\Downloads\Desktop (1).rar
2014-04-21 16:27 - 2014-04-21 16:27 - 00023967 _____ () C:\Users\ADMIN\Downloads\wojewodztwa.zip
2014-04-21 14:48 - 2014-04-21 14:48 - 00057167 _____ () C:\Users\ADMIN\Downloads\spolszczenie.rar
2014-04-21 14:36 - 2014-04-21 14:36 - 00886409 _____ () C:\Users\ADMIN\Downloads\ikonki Ts3.rar
2014-04-21 08:51 - 2014-04-21 08:51 - 00004272 _____ () C:\Windows\system32\jupdate-1.7.0_55-b14.log
2014-04-21 08:51 - 2014-04-21 08:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-21 08:51 - 2014-04-14 20:13 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-04-21 08:51 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-04-21 08:51 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-04-21 08:51 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-04-20 22:15 - 2014-04-20 22:15 - 00947767 _____ (DriverIdentifier ) C:\Users\ADMIN\Downloads\driveridentifier_setup.exe
2014-04-20 22:15 - 2014-04-20 22:15 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\driveridentifier
2014-04-20 22:15 - 2014-04-20 22:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Identifier
2014-04-20 22:15 - 2014-04-20 22:15 - 00000000 ____D () C:\Program Files\Driver Identifier
2014-04-19 10:30 - 2014-04-19 10:53 - 701254664 _____ () C:\Users\ADMIN\Downloads\EuroTruckSimulator2_1_9_22_patch.exe
2014-04-19 10:26 - 2014-04-19 10:26 - 09760161 _____ () C:\Users\ADMIN\Downloads\CRACK 1.9.22.rar
2014-04-19 09:51 - 2014-04-26 12:06 - 00054200 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\arcawfp.sys
2014-04-19 09:50 - 2014-04-22 10:43 - 00000000 ____D () C:\ProgramData\ArcaBit
2014-04-19 09:49 - 2014-04-19 09:48 - 00041712 _____ (ArcaBit) C:\Windows\system32\Drivers\abndis.sys
2014-04-19 09:48 - 2014-04-19 09:48 - 00000000 ____D () C:\ProgramData\Package Cache
2014-04-19 09:48 - 2014-04-19 09:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Arcabit
2014-04-19 09:48 - 2014-04-19 09:48 - 00000000 ____D () C:\Program Files\Arcabit
2014-04-19 09:47 - 2014-04-19 09:47 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard
2014-04-19 09:42 - 2014-04-19 09:46 - 313143216 _____ (Arcabit Ltd.) C:\Users\ADMIN\Downloads\ArcabitSetup2014_is_trial.exe
2014-04-19 09:32 - 2014-04-19 09:34 - 221055520 _____ (Symantec Corporation) C:\Users\ADMIN\Downloads\NAV-TW-21.1.0-PL.exe
2014-04-19 09:09 - 2014-04-19 09:09 - 04768536 _____ (AVAST Software) C:\Users\Public\Desktop\avast_premier_antivirus_setup_online.exe
2014-04-19 09:09 - 2014-04-19 09:09 - 04768536 _____ (AVAST Software) C:\Users\ADMIN\Downloads\avast_premier_antivirus_setup_online.exe
2014-04-18 21:24 - 2014-04-18 21:25 - 05410368 _____ (Code Laboratories, Inc.) C:\Users\ADMIN\Downloads\CL-Eye-Driver-5.3.0.0341 (1).exe
2014-04-18 21:10 - 2014-04-18 21:10 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf
2014-04-18 21:10 - 2014-04-18 21:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CL-Eye Driver
2014-04-18 21:10 - 2014-04-18 21:10 - 00000000 ____D () C:\Program Files\Code Laboratories
2014-04-18 21:09 - 2014-04-18 21:09 - 05410368 _____ (Code Laboratories, Inc.) C:\Users\ADMIN\Downloads\CL-Eye-Driver-5.3.0.0341.exe
2014-04-18 16:47 - 2014-04-18 16:47 - 00159616 _____ () C:\Windows\Minidump\Mini041814-01.dmp
2014-04-18 11:42 - 2014-04-18 11:42 - 00631857 _____ () C:\Users\ADMIN\Downloads\zzzzzzzzzzzzzTrue_AI_Lights_v4.5.7z
2014-04-18 11:41 - 2014-04-18 11:41 - 02713120 _____ () C:\Users\ADMIN\Downloads\Real_Dashboard_For_Renault_PremiumMagnum_ver_1.rar
2014-04-18 11:38 - 2014-04-18 11:46 - 266332605 _____ () C:\Users\ADMIN\Downloads\Graphic_Improve_Mod.scs
2014-04-18 08:56 - 2014-04-18 08:59 - 85493414 _____ () C:\Users\ADMIN\Downloads\MAN_F2000_BDF.zip
2014-04-18 08:37 - 2014-04-18 09:02 - 794753009 _____ () C:\Users\ADMIN\Downloads\Poland-Map_By_GP-Team.rar
2014-04-17 16:46 - 2014-04-17 16:48 - 141775801 _____ () C:\Users\ADMIN\Downloads\fix cs 1.6.rar
2014-04-17 16:36 - 2014-04-17 16:39 - 158605073 _____ () C:\Users\ADMIN\Downloads\cstrike.rar
2014-04-17 16:35 - 2014-04-17 16:35 - 13340457 _____ () C:\Users\ADMIN\Downloads\fix cs 1.6 by atom.rar
2014-04-12 19:46 - 2014-04-12 19:46 - 00001140 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-04-12 19:45 - 2014-04-12 19:45 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-04-12 19:39 - 2014-03-04 16:29 - 23716640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll
2014-04-12 19:39 - 2014-03-04 16:29 - 17559384 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-04-12 19:39 - 2014-03-04 16:29 - 15783992 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2um.dll
2014-04-12 19:39 - 2014-03-04 16:29 - 14709720 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dum.dll
2014-04-12 19:39 - 2014-03-04 16:29 - 10523480 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-04-12 19:39 - 2014-03-04 16:29 - 09728064 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-04-12 19:39 - 2014-03-04 16:29 - 09690424 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-04-12 19:39 - 2014-03-04 16:29 - 02956632 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-04-12 19:39 - 2014-03-04 16:29 - 02411976 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-04-12 19:39 - 2014-03-04 16:29 - 01049888 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco3233523.dll
2014-04-12 19:39 - 2014-03-04 16:29 - 00894296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco3233523.dll
2014-04-12 19:39 - 2013-11-28 15:38 - 00162592 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda32v.sys
2014-04-12 19:39 - 2013-11-28 15:38 - 00028448 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap32.dll
2014-04-12 19:39 - 2013-11-22 10:36 - 00895264 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco3220103.dll
2014-04-11 22:38 - 2014-04-11 22:38 - 00000967 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-04-11 22:38 - 2014-04-11 22:38 - 00000000 ____D () C:\Program Files\TeamViewer
2014-04-11 22:37 - 2014-04-11 22:37 - 06122528 _____ (TeamViewer GmbH) C:\Users\ADMIN\Downloads\TeamViewer_Setup_pl.exe
2014-04-11 18:00 - 2014-04-11 18:02 - 219910576 _____ (NVIDIA Corporation) C:\Users\ADMIN\Downloads\335.23-desktop-win8-win7-winvista-32bit-international-whql.exe
2014-04-11 17:59 - 2014-04-11 17:59 - 03441528 _____ (Solvusoft Corporation ) C:\Users\ADMIN\Downloads\Nvidia_GeForce_GT_120_Aktualizacja_sterownika_04-2014.exe
2014-04-10 14:26 - 2014-03-08 01:51 - 12347904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-10 14:26 - 2014-03-08 01:20 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-10 14:26 - 2014-03-08 01:12 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-10 14:26 - 2014-03-08 01:03 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-10 14:26 - 2014-03-08 01:02 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-10 14:26 - 2014-03-08 01:02 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-10 14:26 - 2014-03-08 01:00 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-04-10 14:26 - 2014-03-08 00:59 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-10 14:26 - 2014-03-08 00:57 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-04-10 14:26 - 2014-03-08 00:57 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-10 14:26 - 2014-03-08 00:56 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-10 14:26 - 2014-03-08 00:54 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-10 14:26 - 2014-03-08 00:53 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-10 14:26 - 2014-03-08 00:52 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-10 14:26 - 2014-03-08 00:52 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-04-10 14:26 - 2014-03-08 00:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-09 18:57 - 2014-02-06 03:56 - 00894464 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-06 15:24 - 2014-04-06 15:24 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\TFC.exe
2014-04-06 15:13 - 2014-04-25 16:53 - 00000000 ____D () C:\AdwCleaner
2014-04-06 15:13 - 2014-04-06 15:13 - 01426178 _____ () C:\Users\ADMIN\Downloads\adwcleaner.exe
2014-04-06 12:28 - 2014-04-06 12:28 - 00037013 _____ () C:\Users\ADMIN\Downloads\FRST (1).txt
2014-04-05 16:53 - 2014-04-05 16:53 - 00037862 _____ () C:\Users\ADMIN\Downloads\Extras.Txt
2014-04-05 16:52 - 2014-04-05 16:52 - 00083784 _____ () C:\Users\ADMIN\Downloads\OTL.Txt
2014-04-05 16:49 - 2014-04-05 16:49 - 00380416 _____ () C:\Users\ADMIN\Downloads\jh1o5ruz.exe
2014-04-05 16:39 - 2014-04-05 16:40 - 00052925 _____ () C:\Users\ADMIN\Downloads\Shortcut.txt
2014-04-05 16:36 - 2014-04-05 16:36 - 00602112 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\OTL.exe
2014-04-05 16:34 - 2014-04-05 16:40 - 00029403 _____ () C:\Users\ADMIN\Downloads\Addition.txt
2014-04-05 16:33 - 2014-04-26 12:53 - 00011527 _____ () C:\Users\ADMIN\Downloads\FRST.txt
2014-04-05 16:33 - 2014-04-26 12:52 - 00000000 ____D () C:\FRST
2014-04-05 16:21 - 2014-04-05 16:21 - 00047487 _____ () C:\Users\ADMIN\Downloads\mbam.txt
2014-04-05 15:38 - 2014-04-05 15:38 - 00006770 _____ () C:\Users\ADMIN\Downloads\malware.rar
2014-04-05 15:26 - 2014-04-19 15:14 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-05 15:26 - 2014-04-05 15:26 - 00000899 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-04-05 15:26 - 2014-04-05 15:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-04-05 15:26 - 2014-04-05 15:26 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-05 15:26 - 2014-04-05 15:26 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-04-05 15:26 - 2014-04-03 09:51 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-05 15:26 - 2014-04-03 09:51 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-05 15:26 - 2014-04-03 09:50 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-03 19:16 - 2014-04-03 19:19 - 127246800 _____ (AVAST Software) C:\Users\ADMIN\Downloads\avast_premier_antivirus_setup (1).exe
2014-04-03 18:43 - 2014-04-03 18:44 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\Adobe
2014-03-30 00:09 - 2014-03-30 00:09 - 00002008 _____ () C:\Users\ADMIN\Downloads\cfgbyperse.rar
2014-03-29 11:44 - 2014-03-29 11:44 - 06508535 _____ () C:\Users\ADMIN\Downloads\hltv-1403281717-de_dust2-1396023420-1396024920.zip
2014-03-29 11:44 - 2014-03-29 11:44 - 06305374 _____ () C:\Users\ADMIN\Downloads\hltv-1403281651-de_dust2-1396021860-1396023360.zip
2014-03-28 12:16 - 2014-03-28 12:16 - 00000921 _____ () C:\Users\ADMIN\Downloads\SKRYPTnorecoilM4A1.rar
2014-03-28 12:03 - 2014-03-28 12:03 - 00002127 _____ () C:\Users\ADMIN\Downloads\f81b2c74d2383c60.zip

==================== One Month Modified Files and Folders =======

2014-04-26 12:53 - 2014-04-05 16:33 - 00011527 _____ () C:\Users\ADMIN\Downloads\FRST.txt
2014-04-26 12:52 - 2014-04-26 12:52 - 01049088 _____ (Farbar) C:\Users\ADMIN\Downloads\FRST.exe
2014-04-26 12:52 - 2014-04-26 12:52 - 00602112 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\OTL (1).exe
2014-04-26 12:52 - 2014-04-05 16:33 - 00000000 ____D () C:\FRST
2014-04-26 12:31 - 2013-11-06 19:37 - 00001034 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-26 12:16 - 2014-04-26 12:16 - 00000000 ____D () C:\Users\ADMIN\Desktop\pulpt
2014-04-26 12:06 - 2014-04-19 09:51 - 00054200 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\arcawfp.sys
2014-04-26 11:42 - 2013-12-15 20:02 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\TS3Client
2014-04-26 11:42 - 2013-12-10 19:14 - 00000000 ____D () C:\Program Files\steam
2014-04-26 11:17 - 2013-11-09 19:49 - 00000000 ____D () C:\Users\ADMIN\Documents\Euro Truck Simulator 2
2014-04-26 11:16 - 2014-01-01 16:09 - 00000000 ____D () C:\Program Files\SpeedFan
2014-04-26 11:02 - 2006-11-02 14:52 - 02064520 _____ () C:\Windows\WindowsUpdate.log
2014-04-26 10:56 - 2013-12-15 20:02 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\Overwolf
2014-04-26 10:56 - 2013-11-06 19:37 - 00001030 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-26 10:56 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-26 10:56 - 2006-11-02 14:47 - 00004496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-26 10:56 - 2006-11-02 14:47 - 00004496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-25 17:47 - 2006-11-02 15:01 - 00032560 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-25 17:32 - 2014-04-25 17:32 - 00000000 ____D () C:\Windows\Sun
2014-04-25 17:10 - 2014-04-25 17:10 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\TFC (1).exe
2014-04-25 16:53 - 2014-04-06 15:13 - 00000000 ____D () C:\AdwCleaner
2014-04-25 16:53 - 2013-11-06 14:27 - 00000000 ____D () C:\Users\ADMIN
2014-04-25 16:50 - 2014-04-25 16:50 - 01365865 _____ () C:\Users\ADMIN\Downloads\adwcleaner (1).exe
2014-04-25 16:48 - 2014-01-29 20:43 - 00000000 ____D () C:\Users\ADMIN\Desktop\MECHANIKA
2014-04-25 16:39 - 2013-11-06 19:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-04-25 16:39 - 2013-11-06 14:27 - 00001233 _____ () C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-25 16:30 - 2014-04-25 16:30 - 00291128 _____ () C:\Windows\system32\PnkBstrB.xtr
2014-04-25 16:30 - 2014-04-25 16:30 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\PunkBuster
2014-04-25 16:30 - 2014-04-25 16:30 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\Arktos Entertainment
2014-04-25 16:30 - 2014-04-25 16:29 - 00291128 _____ () C:\Windows\system32\PnkBstrB.exe
2014-04-25 16:30 - 2014-04-25 16:29 - 00139528 _____ () C:\Windows\system32\Drivers\PnkBstrK.sys
2014-04-25 16:29 - 2014-04-25 16:29 - 00281872 _____ () C:\Windows\system32\PnkBstrB.ex0
2014-04-25 16:29 - 2014-04-25 16:29 - 00138904 _____ () C:\Users\ADMIN\AppData\Roaming\PnkBstrK.sys
2014-04-25 16:29 - 2014-04-25 16:29 - 00076888 _____ () C:\Windows\system32\PnkBstrA.exe
2014-04-25 16:29 - 2014-04-25 16:29 - 00000000 ____D () C:\Users\ADMIN\Documents\Arktos
2014-04-25 16:29 - 2014-04-25 16:29 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\CrashRpt
2014-04-25 16:29 - 2014-04-25 16:29 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\Arktos
2014-04-25 16:29 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-04-25 16:28 - 2014-04-25 16:28 - 00000000 ____D () C:\Windows\system32\directx
2014-04-25 14:56 - 2014-04-25 14:56 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-04-25 14:48 - 2014-02-17 13:20 - 00000000 ____D () C:\Program Files\Common Files\Steam
2014-04-22 10:43 - 2014-04-19 09:50 - 00000000 ____D () C:\ProgramData\ArcaBit
2014-04-22 00:00 - 2014-04-22 00:00 - 18673054 _____ () C:\Users\ADMIN\Downloads\Hey-Girl-Shake-It.wmv
2014-04-21 23:24 - 2014-04-21 23:24 - 00044882 _____ () C:\Users\ADMIN\Downloads\pobrane.htm
2014-04-21 22:55 - 2014-04-21 22:55 - 00004217 _____ () C:\Users\ADMIN\Downloads\config.cfg
2014-04-21 20:20 - 2014-04-21 20:20 - 00002356 _____ () C:\Users\ADMIN\Downloads\wiecej repa i kasy za zlecenie.rar
2014-04-21 19:58 - 2014-04-21 19:58 - 00007831 _____ () C:\Users\ADMIN\Downloads\monia.rar
2014-04-21 19:10 - 2014-04-21 19:10 - 04887531 _____ () C:\Users\ADMIN\Downloads\Desktop (1).rar
2014-04-21 16:27 - 2014-04-21 16:27 - 00023967 _____ () C:\Users\ADMIN\Downloads\wojewodztwa.zip
2014-04-21 14:48 - 2014-04-21 14:48 - 00057167 _____ () C:\Users\ADMIN\Downloads\spolszczenie.rar
2014-04-21 14:36 - 2014-04-21 14:36 - 00886409 _____ () C:\Users\ADMIN\Downloads\ikonki Ts3.rar
2014-04-21 08:52 - 2013-11-19 20:06 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-21 08:51 - 2014-04-21 08:51 - 00004272 _____ () C:\Windows\system32\jupdate-1.7.0_55-b14.log
2014-04-21 08:51 - 2014-04-21 08:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-21 08:51 - 2013-11-19 20:14 - 00000000 ____D () C:\Program Files\Java
2014-04-20 22:15 - 2014-04-20 22:15 - 00947767 _____ (DriverIdentifier ) C:\Users\ADMIN\Downloads\driveridentifier_setup.exe
2014-04-20 22:15 - 2014-04-20 22:15 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\driveridentifier
2014-04-20 22:15 - 2014-04-20 22:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Identifier
2014-04-20 22:15 - 2014-04-20 22:15 - 00000000 ____D () C:\Program Files\Driver Identifier
2014-04-20 14:41 - 2014-01-28 20:28 - 02510516 _____ () C:\Windows\PFRO.log
2014-04-20 14:41 - 2013-12-12 17:43 - 00000000 ____D () C:\ProgramData\Norton
2014-04-19 19:54 - 2013-12-21 15:36 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\CrashDumps
2014-04-19 15:14 - 2014-04-05 15:26 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-19 12:30 - 2013-12-15 20:01 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-04-19 11:06 - 2013-11-09 19:58 - 00000000 ____D () C:\Program Files\Euro Truck Simulator 2
2014-04-19 10:53 - 2014-04-19 10:30 - 701254664 _____ () C:\Users\ADMIN\Downloads\EuroTruckSimulator2_1_9_22_patch.exe
2014-04-19 10:26 - 2014-04-19 10:26 - 09760161 _____ () C:\Users\ADMIN\Downloads\CRACK 1.9.22.rar
2014-04-19 09:48 - 2014-04-19 09:49 - 00041712 _____ (ArcaBit) C:\Windows\system32\Drivers\abndis.sys
2014-04-19 09:48 - 2014-04-19 09:48 - 00000000 ____D () C:\ProgramData\Package Cache
2014-04-19 09:48 - 2014-04-19 09:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Arcabit
2014-04-19 09:48 - 2014-04-19 09:48 - 00000000 ____D () C:\Program Files\Arcabit
2014-04-19 09:47 - 2014-04-19 09:47 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard
2014-04-19 09:46 - 2014-04-19 09:42 - 313143216 _____ (Arcabit Ltd.) C:\Users\ADMIN\Downloads\ArcabitSetup2014_is_trial.exe
2014-04-19 09:34 - 2014-04-19 09:32 - 221055520 _____ (Symantec Corporation) C:\Users\ADMIN\Downloads\NAV-TW-21.1.0-PL.exe
2014-04-19 09:20 - 2014-03-12 16:31 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-04-19 09:09 - 2014-04-19 09:09 - 04768536 _____ (AVAST Software) C:\Users\Public\Desktop\avast_premier_antivirus_setup_online.exe
2014-04-19 09:09 - 2014-04-19 09:09 - 04768536 _____ (AVAST Software) C:\Users\ADMIN\Downloads\avast_premier_antivirus_setup_online.exe
2014-04-18 21:36 - 2014-01-27 20:53 - 00006497 _____ () C:\Windows\setupact.log
2014-04-18 21:25 - 2014-04-18 21:24 - 05410368 _____ (Code Laboratories, Inc.) C:\Users\ADMIN\Downloads\CL-Eye-Driver-5.3.0.0341 (1).exe
2014-04-18 21:10 - 2014-04-18 21:10 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf
2014-04-18 21:10 - 2014-04-18 21:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CL-Eye Driver
2014-04-18 21:10 - 2014-04-18 21:10 - 00000000 ____D () C:\Program Files\Code Laboratories
2014-04-18 21:09 - 2014-04-18 21:09 - 05410368 _____ (Code Laboratories, Inc.) C:\Users\ADMIN\Downloads\CL-Eye-Driver-5.3.0.0341.exe
2014-04-18 16:47 - 2014-04-18 16:47 - 00159616 _____ () C:\Windows\Minidump\Mini041814-01.dmp
2014-04-18 16:47 - 2013-11-14 15:20 - 00000000 ____D () C:\Windows\Minidump
2014-04-18 16:46 - 2014-02-25 15:35 - 262393340 _____ () C:\Windows\MEMORY.DMP
2014-04-18 11:46 - 2014-04-18 11:38 - 266332605 _____ () C:\Users\ADMIN\Downloads\Graphic_Improve_Mod.scs
2014-04-18 11:42 - 2014-04-18 11:42 - 00631857 _____ () C:\Users\ADMIN\Downloads\zzzzzzzzzzzzzTrue_AI_Lights_v4.5.7z
2014-04-18 11:41 - 2014-04-18 11:41 - 02713120 _____ () C:\Users\ADMIN\Downloads\Real_Dashboard_For_Renault_PremiumMagnum_ver_1.rar
2014-04-18 09:02 - 2014-04-18 08:37 - 794753009 _____ () C:\Users\ADMIN\Downloads\Poland-Map_By_GP-Team.rar
2014-04-18 08:59 - 2014-04-18 08:56 - 85493414 _____ () C:\Users\ADMIN\Downloads\MAN_F2000_BDF.zip
2014-04-17 16:48 - 2014-04-17 16:46 - 141775801 _____ () C:\Users\ADMIN\Downloads\fix cs 1.6.rar
2014-04-17 16:39 - 2014-04-17 16:36 - 158605073 _____ () C:\Users\ADMIN\Downloads\cstrike.rar
2014-04-17 16:35 - 2014-04-17 16:35 - 13340457 _____ () C:\Users\ADMIN\Downloads\fix cs 1.6 by atom.rar
2014-04-17 13:42 - 2013-11-06 14:27 - 00002032 _____ () C:\Users\ADMIN\AppData\Local\d3d9caps.dat
2014-04-14 20:13 - 2014-04-21 08:51 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-04-14 20:05 - 2014-04-21 08:51 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-04-14 20:05 - 2014-04-21 08:51 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-04-14 20:04 - 2014-04-21 08:51 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-04-13 09:37 - 2014-01-24 15:10 - 00001100 _____ () C:\Users\ADMIN\AppData\Local\d3d8caps.dat
2014-04-12 19:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-04-12 19:47 - 2013-11-06 16:27 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-12 19:46 - 2014-04-12 19:46 - 00001140 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-04-12 19:45 - 2014-04-12 19:45 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-04-12 19:45 - 2013-11-06 19:11 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-04-12 19:45 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-04-11 22:54 - 2013-11-06 14:27 - 00055176 _____ () C:\Users\ADMIN\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-11 22:53 - 2006-11-02 14:47 - 00256136 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-11 22:38 - 2014-04-11 22:38 - 00000967 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-04-11 22:38 - 2014-04-11 22:38 - 00000000 ____D () C:\Program Files\TeamViewer
2014-04-11 22:37 - 2014-04-11 22:37 - 06122528 _____ (TeamViewer GmbH) C:\Users\ADMIN\Downloads\TeamViewer_Setup_pl.exe
2014-04-11 18:59 - 2006-12-05 07:22 - 00714666 _____ () C:\Windows\system32\perfh015.dat
2014-04-11 18:59 - 2006-12-05 07:22 - 00151538 _____ () C:\Windows\system32\perfc015.dat
2014-04-11 18:59 - 2006-11-02 12:33 - 01616086 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-11 18:02 - 2014-04-11 18:00 - 219910576 _____ (NVIDIA Corporation) C:\Users\ADMIN\Downloads\335.23-desktop-win8-win7-winvista-32bit-international-whql.exe
2014-04-11 17:59 - 2014-04-11 17:59 - 03441528 _____ (Solvusoft Corporation ) C:\Users\ADMIN\Downloads\Nvidia_GeForce_GT_120_Aktualizacja_sterownika_04-2014.exe
2014-04-11 17:33 - 2013-11-17 16:12 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\NVIDIA
2014-04-11 17:32 - 2013-11-06 19:14 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-04-10 14:26 - 2013-11-06 18:48 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-10 14:23 - 2006-11-02 12:24 - 88028728 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-04-06 16:39 - 2014-02-27 21:24 - 00000000 ____D () C:\Users\ADMIN\Documents\My Games
2014-04-06 15:24 - 2014-04-06 15:24 - 00448512 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\TFC.exe
2014-04-06 15:13 - 2014-04-06 15:13 - 01426178 _____ () C:\Users\ADMIN\Downloads\adwcleaner.exe
2014-04-06 14:57 - 2014-01-31 22:35 - 00000000 ____D () C:\Users\wangjihua
2014-04-06 14:57 - 2013-12-08 22:46 - 00000000 ____D () C:\Users\wangzhisong
2014-04-06 14:57 - 2006-11-02 13:18 - 00000000 ___RD () C:\Users\Public
2014-04-06 12:28 - 2014-04-06 12:28 - 00037013 _____ () C:\Users\ADMIN\Downloads\FRST (1).txt
2014-04-05 16:53 - 2014-04-05 16:53 - 00037862 _____ () C:\Users\ADMIN\Downloads\Extras.Txt
2014-04-05 16:52 - 2014-04-05 16:52 - 00083784 _____ () C:\Users\ADMIN\Downloads\OTL.Txt
2014-04-05 16:49 - 2014-04-05 16:49 - 00380416 _____ () C:\Users\ADMIN\Downloads\jh1o5ruz.exe
2014-04-05 16:40 - 2014-04-05 16:39 - 00052925 _____ () C:\Users\ADMIN\Downloads\Shortcut.txt
2014-04-05 16:40 - 2014-04-05 16:34 - 00029403 _____ () C:\Users\ADMIN\Downloads\Addition.txt
2014-04-05 16:36 - 2014-04-05 16:36 - 00602112 _____ (OldTimer Tools) C:\Users\ADMIN\Downloads\OTL.exe
2014-04-05 16:21 - 2014-04-05 16:21 - 00047487 _____ () C:\Users\ADMIN\Downloads\mbam.txt
2014-04-05 15:38 - 2014-04-05 15:38 - 00006770 _____ () C:\Users\ADMIN\Downloads\malware.rar
2014-04-05 15:26 - 2014-04-05 15:26 - 00000899 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-04-05 15:26 - 2014-04-05 15:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-04-05 15:26 - 2014-04-05 15:26 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-05 15:26 - 2014-04-05 15:26 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-04-03 19:19 - 2014-04-03 19:16 - 127246800 _____ (AVAST Software) C:\Users\ADMIN\Downloads\avast_premier_antivirus_setup (1).exe
2014-04-03 18:44 - 2014-04-03 18:43 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\Adobe
2014-04-03 18:44 - 2013-12-08 18:34 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-04-03 18:44 - 2013-12-08 18:34 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-04-03 09:51 - 2014-04-05 15:26 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-04-05 15:26 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-04-05 15:26 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-31 17:00 - 2013-12-19 16:00 - 00000210 _____ () C:\Users\ADMIN\AppData\Roaming\WB.CFG
2014-03-30 00:09 - 2014-03-30 00:09 - 00002008 _____ () C:\Users\ADMIN\Downloads\cfgbyperse.rar
2014-03-29 11:44 - 2014-03-29 11:44 - 06508535 _____ () C:\Users\ADMIN\Downloads\hltv-1403281717-de_dust2-1396023420-1396024920.zip
2014-03-29 11:44 - 2014-03-29 11:44 - 06305374 _____ () C:\Users\ADMIN\Downloads\hltv-1403281651-de_dust2-1396021860-1396023360.zip
2014-03-28 12:16 - 2014-03-28 12:16 - 00000921 _____ () C:\Users\ADMIN\Downloads\SKRYPTnorecoilM4A1.rar
2014-03-28 12:03 - 2014-03-28 12:03 - 00002127 _____ () C:\Users\ADMIN\Downloads\f81b2c74d2383c60.zip

Some content of TEMP:
====================
C:\Users\ADMIN\AppData\Local\Temp\sfamcc00001.dll
C:\Users\ADMIN\AppData\Local\Temp\sfareca00001.dll


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-26 11:03

==================== End Of Log ============================