ComboFix 11-11-01.04 - usero 2011-11-01  17:41:21.17.2 - x86
Microsoft Windows 7 Professional   6.1.7601.1.1250.48.1045.18.1022.444 [GMT 0:00]
Uruchomiony z: c:\users\usero\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((   Pliki utworzone od 2011-10-01 do 2011-11-01  )))))))))))))))))))))))))))))))
.
.
2011-11-01 17:47 . 2011-11-01 17:47	--------	d-----w-	c:\users\Default\AppData\Local\temp
2011-11-01 17:39 . 2011-11-01 17:39	56200	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{FB927892-415F-40CF-9A75-0695EBAADF7C}\offreg.dll
2011-11-01 11:47 . 2011-08-23 17:00	357712	----a-w-	c:\windows\system32\KAAPORT.dll
2011-11-01 11:45 . 2011-11-01 11:45	--------	d-----w-	c:\program files\Realtek
2011-11-01 11:44 . 2011-11-01 11:49	--------	d--h--w-	c:\program files\Temp
2011-11-01 11:25 . 2011-11-01 11:25	--------	d-----w-	c:\program files\Intel
2011-11-01 11:25 . 2011-11-01 11:25	--------	d-----w-	C:\Intel
2011-11-01 11:22 . 2010-06-26 07:11	294952	----a-w-	c:\windows\system32\drivers\btwampfl.sys
2011-11-01 11:22 . 2010-06-26 07:11	33320	----a-w-	c:\windows\system32\drivers\btwl2cap.sys
2011-11-01 11:22 . 2010-06-26 07:11	18728	----a-w-	c:\windows\system32\drivers\btwrchid.sys
2011-11-01 11:22 . 2010-06-26 07:11	88616	----a-w-	c:\windows\system32\drivers\btwaudio.sys
2011-11-01 11:22 . 2010-06-26 07:11	111144	----a-w-	c:\windows\system32\drivers\btwavdt.sys
2011-11-01 11:21 . 2011-11-01 11:21	--------	d-----w-	c:\program files\WIDCOMM
2011-11-01 11:14 . 2005-01-12 11:19	456536	----a-w-	c:\windows\system32\XCEEDZIP.DLL
2011-11-01 11:14 . 2004-09-28 11:13	526184	----a-w-	c:\windows\system32\XceedCry.dll
2011-11-01 11:14 . 2004-08-11 15:55	110602	----a-w-	c:\windows\system32\xcdsfx32.bin
2011-11-01 11:14 . 2004-03-09 00:00	224016	----a-w-	c:\windows\system32\Tabctl32.ocx
2011-11-01 11:14 . 2004-03-09 00:00	152848	----a-w-	c:\windows\system32\Comdlg32.ocx
2011-11-01 11:14 . 2004-03-09 00:00	132880	----a-w-	c:\windows\system32\Msinet.ocx
2011-11-01 10:57 . 2011-11-01 10:57	--------	d-----w-	c:\windows\system32\(null)
2011-11-01 10:57 . 2011-11-01 11:13	--------	d-----w-	c:\program files\Lenovo
2011-11-01 10:56 . 2007-02-19 05:56	21376	----a-w-	c:\windows\system32\drivers\psadd.sys
2011-11-01 10:54 . 2011-11-01 10:54	--------	d-----w-	c:\program files\Synaptics
2011-11-01 10:52 . 2006-10-26 13:08	50752	------w-	c:\windows\system32\agrsmdel.exe
2011-11-01 10:52 . 2011-11-01 10:52	--------	d-----w-	c:\windows\Options
2011-11-01 10:47 . 2009-03-05 11:12	453152	----a-w-	c:\windows\system32\NVUNINST.EXE
2011-11-01 10:45 . 2003-11-10 18:14	729088	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iKernel.dll
2011-11-01 10:45 . 2003-11-10 18:13	69715	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\ctor.dll
2011-11-01 10:45 . 2003-11-10 18:12	266240	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iscript.dll
2011-11-01 10:45 . 2003-11-10 18:12	192512	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iuser.dll
2011-11-01 10:45 . 2003-11-10 18:11	5632	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\DotNetInstaller.exe
2011-11-01 10:45 . 2011-11-01 10:45	311428	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\setup.dll
2011-11-01 10:45 . 2011-11-01 10:45	188548	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iGdi.dll
2011-11-01 10:34 . 2011-11-01 10:34	319456	----a-w-	c:\windows\DIFxAPI.dll
2011-11-01 10:34 . 2007-02-15 13:36	176	----a-w-	c:\windows\system32\drivers\RTHDAEQ0.dat
2011-11-01 10:33 . 2011-08-31 19:12	1698408	----a-w-	c:\windows\RtlExUpd.dll
2011-11-01 10:33 . 2006-02-07 15:40	204800	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iuser.dll
2011-11-01 10:33 . 2006-02-07 15:40	69715	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll
2011-11-01 10:33 . 2006-02-07 15:40	274432	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iscript.dll
2011-11-01 10:33 . 2006-02-07 15:45	757760	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iKernel.dll
2011-11-01 10:33 . 2011-11-01 10:33	331908	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\setup.dll
2011-11-01 10:33 . 2011-11-01 10:33	200836	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iGdi.dll
2011-11-01 05:47 . 2011-11-01 05:47	--------	d-----w-	c:\programdata\Malwarebytes
2011-10-31 23:06 . 2011-10-31 23:07	--------	d-----w-	c:\program files\The KMPlayer
2011-10-31 23:05 . 2011-10-31 23:06	--------	d-----w-	c:\program files\Ashampoo Burning Studio 2010
2011-10-31 23:04 . 2011-10-31 23:04	--------	d-----w-	c:\program files\Glary Utilities
2011-10-31 22:56 . 2009-09-04 17:29	1892184	----a-w-	c:\windows\system32\D3DX9_42.dll
2011-10-31 22:56 . 2006-09-28 16:05	2414360	----a-w-	c:\windows\system32\d3dx9_31.dll
2011-10-31 22:56 . 2011-10-31 22:56	--------	d-----w-	c:\program files\Winamp
2011-10-31 22:53 . 2011-10-31 22:53	--------	d-----w-	c:\programdata\Gadu-Gadu 10
2011-10-31 22:51 . 2011-10-31 22:51	--------	d-----w-	c:\program files\Gadu-Gadu 10
2011-10-31 22:27 . 2011-02-19 06:30	805376	----a-w-	c:\windows\system32\FntCache.dll
2011-10-31 22:27 . 2011-02-19 06:30	1076736	----a-w-	c:\windows\system32\DWrite.dll
2011-10-31 22:27 . 2011-02-19 06:30	739840	----a-w-	c:\windows\system32\d2d1.dll
2011-10-31 22:08 . 2011-02-18 05:39	31232	----a-w-	c:\windows\system32\prevhost.exe
2011-10-31 21:29 . 2011-04-09 05:56	123904	----a-w-	c:\windows\system32\poqexec.exe
2011-10-31 20:52 . 2011-10-31 20:52	--------	d-----w-	c:\program files\Common Files\Java
2011-10-31 20:51 . 2011-10-31 20:51	--------	d-----w-	c:\program files\Java
2011-10-31 20:50 . 2011-10-31 20:50	414368	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-31 20:48 . 2011-10-31 20:49	--------	d-----w-	c:\program files\Common Files\Adobe
2011-10-31 20:40 . 2011-09-29 07:30	134104	----a-w-	c:\program files\Mozilla Firefox\components\browsercomps.dll
2011-10-31 20:40 . 2011-09-29 07:30	89048	----a-w-	c:\program files\Mozilla Firefox\libEGL.dll
2011-10-31 20:40 . 2011-09-29 07:30	773080	----a-w-	c:\program files\Mozilla Firefox\mozsqlite3.dll
2011-10-31 20:40 . 2011-09-29 07:30	478168	----a-w-	c:\program files\Mozilla Firefox\libGLESv2.dll
2011-10-31 20:40 . 2011-09-29 07:30	1833944	----a-w-	c:\program files\Mozilla Firefox\mozjs.dll
2011-10-31 20:40 . 2011-09-29 07:30	15832	----a-w-	c:\program files\Mozilla Firefox\mozalloc.dll
2011-10-31 20:40 . 2011-09-29 00:26	2106216	----a-w-	c:\program files\Mozilla Firefox\D3DCompiler_43.dll
2011-10-31 20:40 . 2011-09-29 00:26	1998168	----a-w-	c:\program files\Mozilla Firefox\d3dx9_43.dll
2011-10-31 20:36 . 2011-10-31 20:36	--------	d-----w-	c:\programdata\TrueSuite
2011-10-31 20:36 . 2011-10-31 20:36	--------	d-----w-	c:\windows\system32\wocaffe
2011-10-31 20:16 . 2011-10-31 20:16	--------	d-----w-	c:\users\Default\AppData\Local\Microsoft Help
2011-10-31 19:53 . 2011-11-01 11:57	--------	d-----w-	c:\users\usero
2011-10-31 17:10 . 2011-07-06 19:52	41272	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
2011-10-31 17:10 . 2011-07-06 19:52	22712	----a-w-	c:\windows\system32\drivers\mbam.sys
2011-10-29 23:05 . 2010-10-28 10:23	2217088	----a-w-	c:\windows\system32\BootMan.exe
2011-10-29 23:05 . 2010-07-15 06:44	86408	----a-w-	c:\windows\system32\setupempdrv03.exe
2011-10-29 23:05 . 2010-07-15 06:44	14848	----a-w-	c:\windows\system32\EuEpmGdi.dll
2011-10-29 23:05 . 2011-05-06 12:30	747592	----a-w-	c:\windows\system32\pwNative.exe
2011-10-29 22:24 . 2011-10-31 20:02	--------	d-----w-	c:\users\TEMP
2011-10-29 17:47 . 2011-10-31 20:01	--------	d-----w-	c:\programdata\GroupPolicy
2011-10-29 10:05 . 2011-10-07 03:48	6668624	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{FB927892-415F-40CF-9A75-0695EBAADF7C}\mpengine.dll
2011-10-17 16:40 . 2011-10-31 09:12	58288	----a-w-	c:\windows\system32\rpcnet.dll
2011-10-17 16:40 . 2011-10-17 16:40	58288	----a-w-	c:\windows\system32\rpcnet.exe
2011-10-17 16:40 . 2011-10-17 16:40	13160	----a-w-	c:\windows\system32\Upgrd.exe
2011-10-17 16:36 . 2011-10-17 16:36	17408	----a-w-	c:\windows\system32\rpcnetp.dll
2011-10-17 16:35 . 2011-10-31 09:12	17408	----a-w-	c:\windows\system32\rpcnetp.exe
.
.
.
((((((((((((((((((((((((((((((((((((((((   Sekcja Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-31 20:51 . 2011-02-18 21:47	472808	----a-w-	c:\windows\system32\deployJava1.dll
2011-08-31 15:20 . 2010-07-14 20:01	53248	----a-w-	c:\windows\system32\CSVer.dll
2011-09-29 07:30 . 2011-10-31 20:40	134104	----a-w-	c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((((((   Wpisy startowe rejestru   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane  
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-10-23 815104]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-6-25 836896]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"ConsentPromptBehaviorAdmin"= 5 (0x5)
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
R3 netw5v32;Sterownik karty Intel(R) Wireless WiFi Link 5000 Series dla systemu Windows Vista w wersji 32-bitowej;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
R3 WatAdminSvc;Usługa Technologie aktywacji systemu Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2011-10-31 1343400]
S3 ATSwpWDF;AuthenTec TruePrint USB WBF WDF Driver;c:\windows\system32\Drivers\ATSwpWDF.sys [2009-12-03 625224]
S3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2010-06-26 294952]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-06-26 33320]
S3 NETwLv32;    Sterownik karty Intel(R) Wireless WiFi Link 5000 Series dla systemu Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETwLv32.sys [2010-10-07 6639616]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
HPZ12	REG_MULTI_SZ   	Pml Driver HPZ12 Net Driver HPZ12
.
Zawartość folderu 'Zaplanowane zadania'
.
2011-11-01 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2011-10-31 09:07]
.
.
------- Skan uzupełniający -------
.
uStart Page = hxxp://www.google.pl/
IE: Wyślij obraz do urządzenia &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Wyślij stronę do urządzenia &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\usero\AppData\Roaming\Mozilla\Firefox\Profiles\5dltnddl.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.wp.pl/
FF - prefs.js: keyword.URL - hxxp://search.imesh.com/web?src=ffb&systemid=1&q=
.
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000001
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Czas ukończenia: 2011-11-01  17:50:00
ComboFix-quarantined-files.txt  2011-11-01 17:49
ComboFix2.txt  2011-11-01 02:45
.
Przed: 36 322 291 712 bajtów wolnych
Po: 35 919 888 384 bajtów wolnych
.
- - End Of File - - B922D842E06F12504BEC0617569555B9