ComboFix 12-01-05.01 - beata 2012-01-05 12:09:09.1.2 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1250.48.1045.18.1788.480 [GMT 1:00] Uruchomiony z: C:\Users\beata\Desktop\ComboFix.exe AV: ESET NOD32 Antivirus 5.0 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1} SP: ESET NOD32 Antivirus 5.0 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) C:\Users\beata\Documents\~WRL1229.tmp C:\Windows\assembly\tmp\U C:\Windows\assembly\tmp\U\00000001.@ C:\Windows\assembly\tmp\U\000000c0.@ C:\Windows\assembly\tmp\U\000000cb.@ C:\Windows\assembly\tmp\U\000000cf.@ C:\Windows\assembly\tmp\U\80000000.@ C:\Windows\assembly\tmp\U\800000c0.@ C:\Windows\assembly\tmp\U\800000cb.@ C:\Windows\assembly\tmp\U\800000cf.@ C:\Windows\av_ico C:\Windows\av_ico\ico_avira_start.ico C:\Windows\IsUn0415.exe C:\Windows\loader2.exe_ok C:\Windows\phoenix C:\Windows\phoenix\kernels\phatk\__init__.py C:\Windows\phoenix\kernels\phatk\__init__.pyc C:\Windows\phoenix\kernels\phatk\BFIPatcher.py C:\Windows\phoenix\kernels\phatk\kernel.cl C:\Windows\phoenix\kernels\poclbm\__init__.py C:\Windows\phoenix\kernels\poclbm\__init__.pyc C:\Windows\phoenix\kernels\poclbm\BFIPatcher.py C:\Windows\phoenix\kernels\poclbm\kernel.cl C:\Windows\phoenix\phoenix.exe C:\Windows\update.1 C:\Windows\update.2 C:\Windows\update.5.0 C:\Windows\update.7.1 C:\Windows\update.tray-8-0-lnk C:\Windows\update.tray-8-0 ((((((((((((((((((((((((( Pliki utworzone od 2011-12-05 do 2012-01-05 ))))))))))))))))))))))))))))))) 2012-01-05 11:23:40 . 2012-01-05 11:23:40 69000 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{F711545F-A401-4689-928E-A8D61C03123E}\offreg.dll 2012-01-05 11:20:42 . 2012-01-05 11:20:42 -------- d-----w- C:\Users\Default\AppData\Local\temp 2012-01-05 11:20:42 . 2012-01-05 11:20:42 -------- d-----w- C:\Users\beata\AppData\Local\temp 2012-01-04 23:46:33 . 2012-01-04 23:46:33 -------- d-----w- C:\Program Files\ESET 2012-01-04 23:11:36 . 2012-01-04 23:11:36 -------- d-----w- C:\ProgramData\RegInOut 2012-01-04 23:10:51 . 2012-01-04 23:10:51 -------- d-----w- C:\Windows\RegInOut System Utilities 2012-01-04 23:10:39 . 2012-01-04 23:11:36 -------- d-----w- C:\Program Files (x86)\RegInOut 2012-01-04 22:11:37 . 2011-02-19 12:05:15 1139200 ----a-w- C:\Windows\system32\FntCache.dll 2012-01-04 22:11:36 . 2011-02-19 06:30:51 1076736 ----a-w- C:\Windows\SysWow64\DWrite.dll 2012-01-04 22:11:35 . 2011-02-19 12:04:17 902656 ----a-w- C:\Windows\system32\d2d1.dll 2012-01-04 22:11:34 . 2011-02-19 12:04:37 1544192 ----a-w- C:\Windows\system32\DWrite.dll 2012-01-04 22:11:34 . 2011-02-19 06:30:50 739840 ----a-w- C:\Windows\SysWow64\d2d1.dll 2012-01-04 20:51:15 . 2012-01-04 20:51:17 -------- d-----w- C:\Windows\system32\SPReview 2012-01-04 20:50:13 . 2012-01-04 20:50:14 -------- d-----w- C:\Windows\system32\EventProviders 2012-01-04 20:36:23 . 2010-11-05 01:57:12 48976 ----a-w- C:\Windows\system32\netfxperf.dll 2012-01-04 20:36:22 . 2010-11-05 01:57:10 1942856 ----a-w- C:\Windows\system32\dfshim.dll 2012-01-04 20:36:02 . 2010-11-05 01:58:18 1130824 ----a-w- C:\Windows\SysWow64\dfshim.dll 2012-01-04 20:34:59 . 2010-11-20 13:25:48 1975296 ----a-w- C:\Windows\system32\CertEnroll.dll 2012-01-04 20:33:59 . 2010-11-20 13:27:23 1808384 ----a-w- C:\Windows\system32\pnidui.dll 2012-01-04 20:32:59 . 2010-11-20 13:33:44 31104 ----a-w- C:\Windows\system32\drivers\msahci.sys 2012-01-04 20:31:59 . 2010-11-20 13:27:25 24064 ----a-w- C:\Windows\system32\sisbkup.dll 2012-01-04 20:30:59 . 2010-11-20 13:27:27 61952 ----a-w- C:\Windows\system32\vss_ps.dll 2012-01-04 20:29:53 . 2010-11-20 13:43:38 3584 ----a-w- C:\Windows\system32\drivers\pl-PL\tsusbflt.sys.mui 2012-01-04 20:29:51 . 2010-11-20 13:45:56 2560 ----a-w- C:\Windows\system32\drivers\pl-PL\rdpwd.sys.mui 2012-01-04 20:29:29 . 2010-11-20 13:38:22 7680 ----a-w- C:\Windows\system32\drivers\pl-PL\luafv.sys.mui 2012-01-04 20:29:28 . 2010-11-20 13:41:57 3072 ----a-w- C:\Windows\system32\drivers\pl-PL\NV_AGP.SYS.mui 2012-01-04 20:29:09 . 2010-11-20 12:21:25 189952 ----a-w- C:\Windows\SysWow64\sqmapi.dll 2012-01-04 20:29:05 . 2010-11-20 12:21:35 189952 ----a-w- C:\Windows\SysWow64\wdscore.dll 2012-01-04 20:29:05 . 2010-11-20 12:17:28 209920 ----a-w- C:\Windows\SysWow64\PkgMgr.exe 2012-01-04 20:28:41 . 2010-11-20 12:18:34 323072 ----a-w- C:\Windows\SysWow64\drvstore.dll 2012-01-04 20:28:41 . 2010-11-20 12:18:34 257024 ----a-w- C:\Windows\SysWow64\dpx.dll 2012-01-04 20:28:34 . 2010-11-20 12:21:25 189952 ----a-w- C:\Program Files (x86)\Windows Portable Devices\sqmapi.dll 2012-01-04 20:28:33 . 2010-11-20 12:21:34 363008 ----a-w- C:\Windows\SysWow64\wbemcomn.dll 2012-01-04 20:28:33 . 2010-11-20 12:19:02 606208 ----a-w- C:\Windows\SysWow64\wbem\fastprox.dll 2012-01-04 20:23:56 . 2010-11-20 13:27:28 524288 ----a-w- C:\Windows\system32\wmicmiplugin.dll 2012-01-04 20:23:56 . 2010-11-20 13:27:27 529408 ----a-w- C:\Windows\system32\wbemcomn.dll 2012-01-04 20:23:56 . 2010-11-20 13:27:27 1225216 ----a-w- C:\Windows\system32\wbem\wbemcore.dll 2012-01-04 20:23:56 . 2010-11-20 13:27:26 244736 ----a-w- C:\Program Files\Windows Portable Devices\sqmapi.dll 2012-01-04 20:23:36 . 2010-11-20 13:27:26 244736 ----a-w- C:\Windows\system32\sqmapi.dll 2012-01-04 20:23:35 . 2010-11-20 13:27:25 933376 ----a-w- C:\Windows\system32\SmiEngine.dll 2012-01-04 20:23:26 . 2010-11-20 13:25:02 199168 ----a-w- C:\Windows\system32\PkgMgr.exe 2012-01-04 20:22:46 . 2010-11-20 13:26:07 422912 ----a-w- C:\Windows\system32\drvstore.dll 2012-01-04 20:22:45 . 2010-11-20 13:26:07 399872 ----a-w- C:\Windows\system32\dpx.dll 2012-01-04 19:58:42 . 2011-03-11 06:41:34 1659776 ----a-w- C:\Windows\system32\drivers\ntfs.sys 2012-01-04 19:58:42 . 2011-03-11 06:33:29 2565632 ----a-w- C:\Windows\system32\esent.dll 2012-01-04 19:58:40 . 2011-03-11 05:33:09 1699328 ----a-w- C:\Windows\SysWow64\esent.dll 2012-01-04 19:58:39 . 2011-03-11 06:41:34 166272 ----a-w- C:\Windows\system32\drivers\nvstor.sys 2012-01-04 19:58:39 . 2011-03-11 06:41:34 148352 ----a-w- C:\Windows\system32\drivers\nvraid.sys 2012-01-04 19:58:39 . 2011-03-11 06:41:12 107904 ----a-w- C:\Windows\system32\drivers\amdsata.sys 2012-01-04 19:58:38 . 2011-03-11 06:41:37 189824 ----a-w- C:\Windows\system32\drivers\storport.sys 2012-01-04 19:58:38 . 2011-03-11 06:41:12 27008 ----a-w- C:\Windows\system32\drivers\amdxata.sys 2012-01-04 19:58:37 . 2011-03-11 06:41:26 410496 ----a-w- C:\Windows\system32\drivers\iaStorV.sys 2012-01-04 19:58:36 . 2011-03-11 06:30:28 96768 ----a-w- C:\Windows\system32\fsutil.exe 2012-01-04 19:58:36 . 2011-03-11 05:31:07 74240 ----a-w- C:\Windows\SysWow64\fsutil.exe 2012-01-04 19:56:30 . 2011-02-25 06:19:30 2871808 ----a-w- C:\Windows\explorer.exe 2012-01-04 19:56:29 . 2011-02-25 05:30:54 2616320 ----a-w- C:\Windows\SysWow64\explorer.exe 2012-01-04 19:56:01 . 2012-01-04 19:56:20 181064 ----a-w- C:\Windows\PSEXESVC.EXE 2012-01-04 19:54:43 . 2011-11-05 05:32:50 2048 ----a-w- C:\Windows\system32\tzres.dll 2012-01-04 19:54:43 . 2011-11-05 04:26:03 2048 ----a-w- C:\Windows\SysWow64\tzres.dll 2012-01-04 19:54:22 . 2011-10-15 06:31:56 723456 ----a-w- C:\Windows\system32\EncDec.dll 2012-01-04 19:54:21 . 2011-10-15 05:38:59 534528 ----a-w- C:\Windows\SysWow64\EncDec.dll 2012-01-04 19:47:07 . 2011-11-24 04:52:09 3145216 ----a-w- C:\Windows\system32\win32k.sys 2012-01-04 19:33:21 . 2012-01-04 19:33:39 -------- d-----w- C:\totalcmd 2012-01-04 19:13:50 . 2011-11-21 11:40:38 8822856 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{F711545F-A401-4689-928E-A8D61C03123E}\mpengine.dll 2012-01-04 18:45:34 . 2012-01-05 10:15:09 -------- d-----w- C:\Windows\system32\catroot2 2012-01-04 18:42:38 . 2012-01-04 18:42:38 -------- d-----w- C:\Windows\SysWow64\wbem\Performance 2012-01-02 17:54:56 . 2012-01-02 17:54:56 -------- d-----w- C:\Program Files\Yamicsoft 2012-01-02 15:45:16 . 2011-11-28 18:01:14 256960 ----a-w- C:\Windows\system32\aswBoot.exe 2012-01-02 15:43:38 . 2012-01-04 23:26:12 -------- d-----w- C:\ProgramData\AVAST Software 2012-01-02 15:43:38 . 2012-01-02 15:43:38 -------- d-----w- C:\Program Files\AVAST Software 2012-01-02 15:15:59 . 2012-01-02 15:15:59 -------- d-----w- C:\Users\beata\AppData\Roaming\Malwarebytes 2012-01-02 15:13:04 . 2012-01-02 15:13:04 -------- d-----w- C:\ProgramData\Malwarebytes 2012-01-02 15:13:01 . 2012-01-02 17:32:46 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware 2012-01-02 14:52:03 . 2012-01-02 15:48:05 -------- d-----w- C:\ProgramData\Spybot - Search & Destroy 2012-01-02 14:52:02 . 2012-01-02 15:40:24 -------- d-----w- C:\Program Files (x86)\Spybot - Search & Destroy 2012-01-02 14:43:31 . 2012-01-02 14:43:31 -------- d-----w- C:\Program Files (x86)\Loaris . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) 2012-01-04 21:42:53 . 2009-07-14 02:36:51 175616 ----a-w- C:\Windows\system32\msclmd.dll 2012-01-04 21:42:53 . 2009-07-14 02:36:51 152576 ----a-w- C:\Windows\SysWow64\msclmd.dll 2012-01-02 14:46:29 . 2011-10-11 05:12:01 414368 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl 2011-11-17 21:49:43 . 2011-10-31 20:24:11 246272 ----a-w- C:\Windows\unrar.exe 2011-11-15 13:29:56 . 2009-12-29 09:03:18 270720 ------w- C:\Windows\system32\MpSigStub.exe 2011-11-10 04:54:13 . 2010-08-24 02:24:03 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sony Ericsson PC Companion"="C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" [2009-12-08 06:51:50 774144] "Facebook Update"="C:\Users\beata\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2011-10-23 19:08:47 137536] "swg"="C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-08-12 01:46:29 39408] "KiesPDLR"="C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-09-29 14:19:26 20880] [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-07-30 05:20:52 98304] "Freecorder FLV Service"="C:\Program Files (x86)\Freecorder\FLVSrvc.exe" [2011-03-24 06:11:25 167936] "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 12:06:06 254696] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ Microsoft Office.lnk - C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE [1999-2-17 65588] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableSecureUIAPaths"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) "EnableLUA"= 2 (0x2) [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv [HKEY_LOCAL_MACHINE\software\microsoft\security center] "DisableThumbnailCache"=dword:00000001 R2 gupdate;Usługa Google Update (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-12 01:46:03 136176] R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;C:\Windows\system32\Drivers\ssadadb.sys [x] R3 FlashUSB;FlashUSB;C:\Windows\system32\DRIVERS\FlashUSB_x64.sys [x] R3 gupdatem;Usługa Google Update (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-12 01:46:03 136176] R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\system32\Drivers\RtsUStor.sys [x] R3 RtsUIR;Realtek IR Driver;C:\Windows\system32\DRIVERS\Rts516xIR.sys [x] R3 s1039bus;Sony Ericsson Device 1039 driver (WDM);C:\Windows\system32\DRIVERS\s1039bus.sys [x] R3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter;C:\Windows\system32\DRIVERS\s1039mdfl.sys [x] R3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver;C:\Windows\system32\DRIVERS\s1039mdm.sys [x] R3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM);C:\Windows\system32\DRIVERS\s1039mgmt.sys [x] R3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS);C:\Windows\system32\DRIVERS\s1039nd5.sys [x] R3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface;C:\Windows\system32\DRIVERS\s1039obex.sys [x] R3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM);C:\Windows\system32\DRIVERS\s1039unic.sys [x] R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);C:\Windows\system32\DRIVERS\ssadbus.sys [x] R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);C:\Windows\system32\DRIVERS\ssadmdfl.sys [x] R3 ssadmdm;SAMSUNG Android USB Modem Drivers;C:\Windows\system32\DRIVERS\ssadmdm.sys [x] R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);C:\Windows\system32\DRIVERS\ssadserd.sys [x] R3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys [x] R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys [x] R3 WatAdminSvc;Usługa Technologie aktywacji systemu Windows;C:\Windows\system32\Wat\WatAdminSvc.exe [x] R3 WSDPrintDevice;Obsługa drukowania WSD za pośrednictwem bloku pamięci górnej;C:\Windows\system32\DRIVERS\WSDPrint.sys [x] S1 ehdrv;ehdrv;C:\Windows\system32\DRIVERS\ehdrv.sys [x] S1 mwlPSDFilter;mwlPSDFilter;C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [x] S1 mwlPSDNServ;mwlPSDNServ;C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [x] S1 mwlPSDVDisk;mwlPSDVDisk;C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [x] S1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys [x] S2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe [x] S2 eamonm;eamonm;C:\Windows\system32\DRIVERS\eamonm.sys [x] S2 ekrn;ESET Service;C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-09-22 11:03:30 974944] S2 epfwwfpr;epfwwfpr;C:\Windows\system32\DRIVERS\epfwwfpr.sys [x] S2 ePowerSvc;Acer ePower Service;C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2009-08-06 04:30:58 844320] S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);C:\Windows\system32\DRIVERS\L1C62x64.sys [x] S3 usbfilter;AMD USB Filter Driver;C:\Windows\system32\DRIVERS\usbfilter.sys [x] --- Inne Usługi/Sterowniki w Pamięci --- *NewlyCreated* - WS2IFSL Zawartość folderu 'Zaplanowane zadania' 2012-01-04 C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2820200912-4261254073-1981089888-1000Core.job - C:\Users\beata\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-10-23 19:08:56 . 2011-10-23 19:08:47] 2012-01-05 C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2820200912-4261254073-1981089888-1000UA.job - C:\Users\beata\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-10-23 19:08:56 . 2011-10-23 19:08:47] 2012-01-05 C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-12 01:46:12 . 2011-08-12 01:46:03] 2012-01-05 C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-12 01:46:12 . 2011-08-12 01:46:03] 2012-01-05 C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2820200912-4261254073-1981089888-1000Core.job - C:\Users\beata\AppData\Local\Google\Update\GoogleUpdate.exe [2010-09-13 16:35:59 . 2010-09-13 16:35:58] 2012-01-05 C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2820200912-4261254073-1981089888-1000UA.job - C:\Users\beata\AppData\Local\Google\Update\GoogleUpdate.exe [2010-09-13 16:35:59 . 2010-09-13 16:35:58] 2012-01-04 C:\Windows\Tasks\RegInOut Scheduled Scan - beata.job - C:\Program Files (x86)\RegInOut\RegInOut.exe [2011-12-30 19:39:45 . 2011-12-30 19:56:12] --------- x86-64 ----------- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-07-28 13:14:20 7982112] "Acer ePower Management"="C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe" [2009-08-06 04:30:58 828960] "SunJavaUpdateSched"="C:\Program Files\Java\jre6\bin\jusched.exe" [2009-12-30 12:49:55 172032] "egui"="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-09-22 11:03:04 4035152] "combofix"="C:\ComboFix\CF5715.3XE" [2010-11-20 13:24:33 345088] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "LoadAppInit_DLLs"=0x0 ------- Skan uzupełniający ------- uStart Page = hxxp://www.google.com/ uLocal Page = C:\Windows\system32\blank.htm mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&m=aspire_5532&r=27361109e135l0354z145t4702x81o mLocal Page = C:\Windows\SysWOW64\blank.htm IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 IE: Funkcja Google Sidewiki - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html TCP: DhcpNameServer = 208.67.222.222 208.67.220.220 TCP: Interfaces\{BED7BA7E-F3D6-4EA9-8EEE-F23B2B52778F}: NameServer = 194.204.159.1,194.204.152.34 TCP: Interfaces\{C413AFD8-C348-46BD-A08D-0F47181D62C1}: NameServer = 194.204.152.34 TCP: Interfaces\{C413AFD8-C348-46BD-A08D-0F47181D62C1}\26F63737: NameServer = 194.204.152.34 TCP: Interfaces\{C413AFD8-C348-46BD-A08D-0F47181D62C1}\6454354514D245543484: NameServer = 194.204.152.34 TCP: Interfaces\{C413AFD8-C348-46BD-A08D-0F47181D62C1}\B616475633: NameServer = 194.204.152.34 TCP: Interfaces\{C413AFD8-C348-46BD-A08D-0F47181D62C1}\D4142554B4: NameServer = 194.204.152.34 FF - ProfilePath - C:\Users\beata\AppData\Roaming\Mozilla\Firefox\Profiles\vvuv16fl.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.onet.pl/ FF - prefs.js: network.proxy.type - 0 FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - - - - USUNIĘTO PUSTE WPISY - - - - URLSearchHooks-{7b13ec3e-999a-4b70-b9cb-2617b8323822} - (no file) Toolbar-Locked - (no file) ShellIconOverlayIdentifiers-{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} - (no file) Wow6432Node-HKLM-Run-avgnt - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe Wow6432Node-HKLM-Run-tray_ico - (no file) Wow6432Node-HKLM-Run-tray_ico1 - (no file) Wow6432Node-HKLM-Run-tray_ico2 - (no file) Wow6432Node-HKLM-Run-tray_ico3 - (no file) Wow6432Node-HKLM-Run-tray_ico4 - (no file) SafeBoot-mcmscsvc SafeBoot-MCODS Toolbar-Locked - (no file) WebBrowser-{7B13EC3E-999A-4B70-B9CB-2617B8323822} - (no file) ShellIconOverlayIdentifiers-{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} - (no file) HKLM-Run-SynTPEnh - C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe AddRemove-Adobe Shockwave Player - C:\Windows\system32\Adobe\Shockwave 11\uninstaller.exe