ComboFix 12-07-06.02 - Dom 2012-07-06  21:20:22.1.2 - x86 NETWORK
Microsoft Windows 7 Home Premium   6.1.7600.0.1250.48.1045.18.2046.1462 [GMT 2:00]
Uruchomiony z: c:\users\Dom\Desktop\ComboFix.exe
AV: avast! Antivirus *Enabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Enabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Utworzono nowy punkt przywracania
.
.
(((((((((((((((((((((((((((((((((((((((   Usunięto   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\isRS-000.tmp
c:\windows\system32\SET17FB.tmp
c:\windows\system32\SET181B.tmp
c:\windows\system32\SET1938.tmp
c:\windows\system32\SETBF8F.tmp
c:\windows\system32\SETBF9F.tmp
c:\windows\system32\SETC020.tmp
c:\windows\system32\SETCC7A.tmp
c:\windows\system32\SETCC8B.tmp
c:\windows\system32\SETCD3A.tmp
.
.
(((((((((((((((((((((((((   Pliki utworzone od 2012-06-06 do 2012-07-06  )))))))))))))))))))))))))))))))
.
.
2012-07-06 19:24 . 2012-07-06 19:25	--------	d-----w-	c:\users\Dom\AppData\Local\temp
2012-07-06 19:24 . 2012-07-06 19:24	--------	d-----w-	c:\users\Tatuś\AppData\Local\temp
2012-07-06 19:24 . 2012-07-06 19:24	--------	d-----w-	c:\users\Mamusia\AppData\Local\temp
2012-07-06 19:24 . 2012-07-06 19:24	--------	d-----w-	c:\users\Dorka\AppData\Local\temp
2012-07-06 19:24 . 2012-07-06 19:24	--------	d-----w-	c:\users\Default\AppData\Local\temp
2012-07-06 18:40 . 2012-07-06 18:40	--------	d-----w-	c:\users\Mamusia\AppData\Roaming\hellomoto
2012-07-06 18:37 . 2012-07-06 18:37	--------	d-----w-	c:\users\Dorka\AppData\Roaming\hellomoto
2012-07-06 18:26 . 2012-07-06 18:26	--------	d-----w-	c:\users\Dom\AppData\Roaming\hellomoto
2012-06-24 09:55 . 2012-06-24 09:55	--------	d-----w-	c:\users\Tatuś\AppData\Local\Macromedia
2012-06-19 18:12 . 2012-06-19 18:12	--------	d-----w-	c:\users\Mamusia\AppData\Local\Macromedia
2012-06-19 15:29 . 2012-06-19 15:29	--------	d-----w-	c:\users\Dom\AppData\Local\Macromedia
2012-06-19 13:44 . 2012-06-19 13:44	--------	d-----w-	c:\users\Dorka\AppData\Local\Macromedia
2012-06-19 13:43 . 2012-06-19 13:43	426184	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2012-06-15 18:16 . 2012-06-15 18:16	--------	d-----w-	c:\users\Dorka\AppData\Roaming\Media Player Classic
2012-06-15 18:16 . 2010-02-15 18:00	94208	----a-w-	c:\program files\Mozilla Firefox\plugins\nprpjplug.dll
2012-06-15 18:16 . 2010-02-15 18:00	140864	----a-w-	c:\program files\Mozilla Firefox\plugins\nppl3260.dll
2012-06-15 18:08 . 2012-06-15 18:08	--------	d-----w-	c:\users\Mamusia\AppData\Roaming\Winamp
2012-06-15 17:59 . 2012-06-15 17:59	250	----a-w-	C:\user.js
2012-06-15 17:59 . 2012-06-15 17:59	--------	d-----w-	c:\program files\VideoConverter
2012-06-15 17:59 . 2012-06-15 17:59	--------	d-----w-	c:\users\Mamusia\AppData\Roaming\Babylon
2012-06-15 17:59 . 2012-06-15 17:59	--------	d-----w-	c:\programdata\Babylon
2012-06-15 17:56 . 2012-06-15 17:56	--------	d-----w-	c:\users\Mamusia\AppData\Local\Google
2012-06-15 17:56 . 2012-06-15 17:56	--------	d-----w-	c:\programdata\SweetIM
2012-06-15 17:56 . 2012-06-15 17:56	--------	d-----w-	c:\program files\SweetIM
2012-06-11 18:18 . 2012-06-12 15:29	770384	----a-w-	c:\program files\Mozilla Firefox\msvcr100.dll
2012-06-11 18:18 . 2012-06-12 15:29	421200	----a-w-	c:\program files\Mozilla Firefox\msvcp100.dll
.
.
.
((((((((((((((((((((((((((((((((((((((((   Sekcja Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-19 13:43 . 2011-05-14 17:28	70344	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2012-05-05 19:27 . 2012-05-05 19:28	476960	----a-w-	c:\windows\system32\npdeployJava1.dll
2012-05-05 19:27 . 2010-10-25 17:15	472864	----a-w-	c:\windows\system32\deployJava1.dll
2012-04-26 13:39 . 2012-04-26 13:39	380928	----a-w-	c:\windows\system32\lame_enc.dll
2012-06-16 13:25 . 2012-05-08 09:53	85472	----a-w-	c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((((((   Wpisy startowe rejestru   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane  
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2012-06-06 1519304]
"{EEE6C35D-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll" [2012-06-04 130904]
.
[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2012-06-06 19:33	1519304	----a-w-	c:\program files\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2012-06-04 14:12	1310040	----a-w-	c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2012-06-06 1519304]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2012-06-04 1310040]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2012-06-06 1519304]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2012-06-04 1310040]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12	94208	----a-w-	c:\users\Dom\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12	94208	----a-w-	c:\users\Dom\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12	94208	----a-w-	c:\users\Dom\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12	94208	----a-w-	c:\users\Dom\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Gadu-Gadu 10"="c:\program files\Gadu-Gadu 10\gg.exe" [2010-12-16 12984928]
"IPLA!"="c:\program files\ipla\ipla.exe" [2012-05-11 19858432]
"CTSyncU.exe"="c:\program files\Creative\Sync Manager Unicode\CTSyncU.exe" [2007-07-17 868352]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"="c:\program files\VIA\VIAudioi\VDeck\VDeck.exe" [2010-03-15 1780224]
"NUSB3MON"="c:\program files\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-01-22 106496]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-08-25 98304]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"ApnUpdater"="c:\program files\Ask.com\Updater\Updater.exe" [2012-06-06 1564872]
"lxeamon.exe"="c:\program files\Lexmark S300-S400 Series\lxeamon.exe" [2010-05-05 770728]
"EzPrint"="c:\program files\Lexmark S300-S400 Series\ezprint.exe" [2010-05-05 148280]
"CTCheck"="d:\dorka\ZEN Media Explorer\CTCheck.exe" [2007-11-06 397312]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
"SweetIM"="c:\program files\SweetIM\Messenger\SweetIM.exe" [2012-05-29 115032]
"Sweetpacks Communicator"="c:\program files\SweetIM\Communicator\SweetPacksUpdateManager.exe" [2012-02-26 295728]
"termmgr"="c:\users\Dom\AppData\Local\Microsoft\Windows\4958\termmgr.exe" [2012-07-06 49664]
.
c:\users\Tatuś\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2008-10-25 98696]
.
c:\users\Dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Dom\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-5-24 27112840]
Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2008-10-25 98696]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Rejestracja poprzez WWW.lnk - c:\windows\winhlp32.exe [2009-7-14 9728]
Web Registration.lnk - c:\windows\winhlp32.exe [2009-7-14 9728]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages	REG_MULTI_SZ   	kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R1 aswSP;aswSP; [x]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
R2 AsSysCtrlService;ASUS System Control Service;c:\program files\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [x]
R2 aswFsBlk;aswFsBlk; [x]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
R2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x32.sys [x]
R2 E4LOADER;General Purpose USB Driver (e4ldr.sys);c:\windows\system32\Drivers\e4ldr.sys [x]
R2 gupdate;Usługa Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [x]
R2 HPW5ECP;HPW5ECP;c:\windows\System32\drivers\HPW5ECP.SYS [x]
R2 lxea_device;lxea_device;c:\windows\system32\lxeacoms.exe [x]
R2 lxeaCATSCustConnectService;lxeaCATSCustConnectService;c:\windows\system32\spool\DRIVERS\W32X86\3\\lxeaserv.exe [x]
R3 ALSysIO;ALSysIO;c:\users\Dom\AppData\Local\Temp\ALSysIO.sys [x]
R3 e4usbaw;USB ADSL2 WAN Adapter;c:\windows\system32\DRIVERS\e4usbaw.sys [x]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [x]
R3 gupdatem;Usługa Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [x]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [x]
R3 NmPar;PCI Parallel Port;c:\windows\system32\DRIVERS\NmPar.sys [x]
R3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion;c:\program files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [x]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [x]
R3 WatAdminSvc;Usługa Technologie aktywacji systemu Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 hotcore3;hotcore3;c:\windows\system32\drivers\hotcore3.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [x]
.
.
Zawartość folderu 'Zaplanowane zadania'
.
2012-07-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-11-16 15:34]
.
2012-07-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-11-16 15:34]
.
.
------- Skan uzupełniający -------
.
uStart Page = pl.v9.com/idg/idg_1333963705_623129
mStart Page = hxxp://home.sweetim.com/?crg=3.1010000&st=12&barid={F2E7395E-E713-4241-A000-24B33B5B0EF1}
IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\in17m6za.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - pl.v9.com/idg/idg_1333963705_623129
FF - prefs.js: keyword.URL - hxxp://yandex.ru/yandsearch?clid=129697&yasoft=barff.en&text=
.
- - - - USUNIĘTO PUSTE WPISY - - - -
.
HKCU-Run-ALLUpdate - c:\program files\ALLPlayer\ALLUpdate.exe
HKLM-Run-TabbtnEx - c:\users\Dorka\AppData\Local\Microsoft\Windows\4965\TabbtnEx.exe
HKLM-Run-WMNetMgr - c:\users\Mamusia\AppData\Local\Microsoft\Windows\118\WMNetMgr.exe
AddRemove-Guitar Effects Processor v2.18 - c:\program files\Guitar Effects\Guitar Effects Processor v2.18\DeIsL1.isu
AddRemove-SpeedFan - c:\program files\SpeedFan\uninstall.exe
AddRemove-Inne Biosy do FPse - d:\iuooiu\Uninstall.exe
.
.
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Czas ukończenia: 2012-07-06  21:26:44
ComboFix-quarantined-files.txt  2012-07-06 19:26
.
Przed: 3 354 357 760 bajtów wolnych
Po: 3 908 325 376 bajtów wolnych
.
- - End Of File - - C0C0511AD9A5C0B2B383CB0CD1AE572B