ComboFix 12-07-08.01 - Kamil 2012-07-09 0:49.1.4 - x86 NETWORK Microsoft Windows 7 Professional 6.1.7601.1.1250.48.1045.18.3063.2135 [GMT 2:00] Uruchomiony z: d:\instalki\ComboFix.exe SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Utworzono nowy punkt przywracania . [i] ADS - Windows: deleted 256 bytes in 1 streams. [/i] . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Kamil\AppData\Local\assembly\tmp E:\install.exe . . ((((((((((((((((((((((((( Pliki utworzone od 2012-06-08 do 2012-07-08 ))))))))))))))))))))))))))))))) . . 2012-07-08 22:25 . 2012-07-08 22:25 -------- d-----w- c:\users\Kamil\AppData\Roaming\hellomoto 2012-07-08 22:25 . 2012-07-08 22:25 -------- d-----w- c:\windows\Sun 2012-07-08 22:09 . 2012-07-08 22:09 -------- d-----w- c:\users\UpdatusUser\AppData\Roaming\onOne Software 2012-07-08 22:09 . 2012-07-08 22:09 -------- d-----w- c:\users\Default\AppData\Roaming\onOne Software 2012-07-08 22:09 . 2011-05-17 08:44 66560 ----a-w- c:\windows\system32\nlssrv32.exe 2012-07-08 22:08 . 2012-07-08 22:08 -------- d-----w- c:\programdata\onOne Software 2012-07-08 22:08 . 2012-07-08 22:12 -------- d-----w- c:\users\Kamil\AppData\Roaming\onOne Software 2012-07-04 21:25 . 2012-07-04 21:25 -------- d-----w- c:\users\Kamil\AppData\Local\Nik Software 2012-07-04 21:25 . 2012-07-04 21:25 -------- d-----w- c:\programdata\Nik Software 2012-06-23 08:26 . 2012-06-02 22:19 53784 ----a-w- c:\windows\system32\wuauclt.exe 2012-06-23 08:26 . 2012-06-02 22:19 45080 ----a-w- c:\windows\system32\wups2.dll 2012-06-23 08:26 . 2012-06-02 22:19 1933848 ----a-w- c:\windows\system32\wuaueng.dll 2012-06-23 08:26 . 2012-06-02 22:12 2422272 ----a-w- c:\windows\system32\wucltux.dll 2012-06-23 08:25 . 2012-06-02 22:19 35864 ----a-w- c:\windows\system32\wups.dll 2012-06-23 08:25 . 2012-06-02 22:19 577048 ----a-w- c:\windows\system32\wuapi.dll 2012-06-23 08:25 . 2012-06-02 22:12 88576 ----a-w- c:\windows\system32\wudriver.dll 2012-06-23 08:25 . 2012-06-02 13:19 171904 ----a-w- c:\windows\system32\wuwebv.dll 2012-06-23 08:25 . 2012-06-02 13:12 33792 ----a-w- c:\windows\system32\wuapp.exe 2012-06-21 17:33 . 2012-06-21 17:33 -------- d-----w- c:\users\Kamil\AppData\Local\Macromedia 2012-06-10 12:12 . 2012-06-10 12:12 -------- d-----w- c:\program files\Common Files\PX Storage Engine 2012-06-09 12:44 . 2012-05-15 10:26 5982528 ----a-w- c:\windows\system32\nvcuda.dll 2012-06-09 12:44 . 2012-05-15 10:26 2524992 ----a-w- c:\windows\system32\nvcuvid.dll 2012-06-09 12:44 . 2012-05-15 10:26 2445120 ----a-w- c:\windows\system32\nvcuvenc.dll 2012-06-09 12:44 . 2012-05-15 10:26 19607872 ----a-w- c:\windows\system32\nvoglv32.dll 2012-06-09 12:44 . 2012-05-15 10:26 17551680 ----a-w- c:\windows\system32\nvcompiler.dll 2012-06-09 12:44 . 2012-05-15 10:26 11354944 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys . . . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-06-21 17:30 . 2012-05-09 14:44 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-06-21 17:30 . 2012-03-22 21:58 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-06-17 17:27 . 2012-03-22 23:23 140800 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys 2012-06-17 17:27 . 2012-03-22 23:23 283304 ----a-w- c:\windows\system32\PnkBstrB.exe 2012-06-17 17:27 . 2012-03-22 23:22 283304 ----a-w- c:\windows\system32\PnkBstrB.xtr 2012-06-17 17:25 . 2012-03-22 23:23 283304 ----a-w- c:\windows\system32\PnkBstrB.ex0 2012-05-15 10:26 . 2012-03-22 22:27 883008 ----a-w- c:\windows\system32\nvgenco32.dll 2012-05-15 10:26 . 2012-03-22 22:27 61248 ----a-w- c:\windows\system32\OpenCL.dll 2012-05-15 10:26 . 2012-03-22 22:27 2368832 ----a-w- c:\windows\system32\nvapi.dll 2012-05-15 10:26 . 2012-03-22 22:27 1000768 ----a-w- c:\windows\system32\nvdispco32.dll 2012-05-15 10:26 . 2009-07-13 22:09 8105280 ----a-w- c:\windows\system32\nvwgf2um.dll 2012-05-15 10:26 . 2009-06-10 21:19 15322432 ----a-w- c:\windows\system32\nvd3dum.dll 2012-05-15 09:28 . 2012-03-22 22:27 2561344 ----a-w- c:\windows\system32\nvsvcr.dll 2012-05-15 09:28 . 2012-03-22 22:27 645440 ----a-w- c:\windows\system32\nvvsvc.exe 2012-05-15 09:28 . 2012-03-22 22:27 62272 ----a-w- c:\windows\system32\nvshext.dll 2012-05-15 09:28 . 2012-03-22 22:27 108352 ----a-w- c:\windows\system32\nvmctray.dll 2012-05-15 09:28 . 2012-03-22 22:27 3931456 ----a-w- c:\windows\system32\nvcpl.dll 2012-05-15 09:27 . 2012-03-22 22:27 2759488 ----a-w- c:\windows\system32\nvsvc.dll 2012-05-15 00:21 . 2012-05-15 00:21 423744 ----a-w- c:\windows\system32\nvStreaming.exe . . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal] @="{C5994560-53D9-4125-87C9-F193FC689CB2}" [HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}] 2011-06-13 08:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified] @="{C5994561-53D9-4125-87C9-F193FC689CB2}" [HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}] 2011-06-13 08:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict] @="{C5994562-53D9-4125-87C9-F193FC689CB2}" [HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}] 2011-06-13 08:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked] @="{C5994563-53D9-4125-87C9-F193FC689CB2}" [HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}] 2011-06-13 08:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly] @="{C5994564-53D9-4125-87C9-F193FC689CB2}" [HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}] 2011-06-13 08:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted] @="{C5994565-53D9-4125-87C9-F193FC689CB2}" [HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}] 2011-06-13 08:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded] @="{C5994566-53D9-4125-87C9-F193FC689CB2}" [HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}] 2011-06-13 08:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored] @="{C5994567-53D9-4125-87C9-F193FC689CB2}" [HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}] 2011-06-13 08:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned] @="{C5994568-53D9-4125-87C9-F193FC689CB2}" [HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}] 2011-06-13 08:20 64792 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2012-02-15 00:32 94208 ----a-w- c:\users\Kamil\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2012-02-15 00:32 94208 ----a-w- c:\users\Kamil\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2012-02-15 00:32 94208 ----a-w- c:\users\Kamil\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2012-02-15 00:32 94208 ----a-w- c:\users\Kamil\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GGDriveOverlay1] @="{E68D0A50-3C40-4712-B90D-DCFA93FF2534}" [HKEY_CLASSES_ROOT\CLSID\{E68D0A50-3C40-4712-B90D-DCFA93FF2534}] 2012-06-05 09:41 1232896 ----a-w- c:\programdata\GG\ggdrive\ggdrive-overlay.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GGDriveOverlay2] @="{E68D0A51-3C40-4712-B90D-DCFA93FF2534}" [HKEY_CLASSES_ROOT\CLSID\{E68D0A51-3C40-4712-B90D-DCFA93FF2534}] 2012-06-05 09:41 1232896 ----a-w- c:\programdata\GG\ggdrive\ggdrive-overlay.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GGDriveOverlay3] @="{E68D0A52-3C40-4712-B90D-DCFA93FF2534}" [HKEY_CLASSES_ROOT\CLSID\{E68D0A52-3C40-4712-B90D-DCFA93FF2534}] 2012-06-05 09:41 1232896 ----a-w- c:\programdata\GG\ggdrive\ggdrive-overlay.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GGDriveOverlay4] @="{E68D0A53-3C40-4712-B90D-DCFA93FF2534}" [HKEY_CLASSES_ROOT\CLSID\{E68D0A53-3C40-4712-B90D-DCFA93FF2534}] 2012-06-05 09:41 1232896 ----a-w- c:\programdata\GG\ggdrive\ggdrive-overlay.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016] "EADM"="d:\programy\Origin\Origin.exe" [2012-05-23 3407496] "Steam"="d:\programy\steam\steam.exe" [2011-08-02 1242448] "uTorrent"="d:\programy\uTorrent\uTorrent.exe" [2012-05-20 880496] "OfficeSyncProcess"="c:\program files\Microsoft Office\Office14\MSOSYNC.EXE" [2011-07-21 718720] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI.exe" [2010-11-02 5401192] "NUSB3MON"="c:\program files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288] "IntelTBRunOnce"="wscript.exe" [2009-07-14 141824] "PWRISOVM.EXE"="d:\programy\PowerISO\PWRISOVM.EXE" [2007-08-07 200704] "BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712] "RIMBBLaunchAgent.exe"="c:\program files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe" [2011-09-01 90448] "AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208] "SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096] "AdobeCS5ServiceManager"="c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992] "NBAgent"="d:\programy\Nero\nero 11\Nero 11\Nero BackItUp\NBAgent.exe" [2011-09-20 1493288] "SensApi"="c:\users\Kamil\AppData\Local\Microsoft\Windows\4386\SensApi.exe" [2012-07-08 48640] . c:\users\Kamil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\Kamil\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-5-24 27112840] Thunderbird.lnk - d:\programy\Mozilla Thunderbird\thunderbird.exe [2010-3-13 400352] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Apache Web Server Monitor.lnk - d:\serwer\Zend_New\Apache2\bin\ApacheMonitor.exe [2012-2-29 44088] OpenVPN Connect.lnk - c:\program files\OpenVPN Technologies\OpenVPN Client\core\ovpntray.exe [2011-8-25 55296] Zend Controller.lnk - d:\serwer\Zend_New\ZendServer\bin\zendcontroller.exe [2012-2-29 249776] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) "EnableLinkedConnections"= 1 (0x1) . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] 2012-04-05 09:41 17356424 ----a-r- c:\program files\Skype\Phone\Skype.exe . R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [x] R2 Apache2.2-Zend;Apache2.2-Zend;d:\serwer\Zend_New\Apache2\bin\httpd.exe [x] R2 KMService;KMService;c:\windows\system32\srvany.exe [x] R2 MySQL_ZendServer51;MySQL_ZendServer51;d:\serwer\Zend_New\MySQL51\bin\mysqld --defaults-file=d:\serwer\Zend_New\MySQL51\my.ini MySQL_ZendServer51 [x] R2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [x] R2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\system32\nlssrv32.exe [x] R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [x] R2 OpenVPNAccessClient;OpenVPN Access Client;c:\program files\OpenVPN Technologies\OpenVPN Client\core\capiws.exe [x] R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x] R2 TeamViewer7;TeamViewer 7;c:\program files\TeamViewer\Version7\TeamViewer_Service.exe [x] R2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [x] R2 TurboBoost;Intel(R) Turbo Boost Technology Monitor;c:\program files\Intel\TurboBoost\TurboBoost.exe [x] R2 ZendDeployment;Zend Deployment;d:\serwer\Zend_New\ZendServer\bin\zdd.exe [x] R2 ZendJobQueue;Zend Job Queue ;d:\serwer\Zend_New\ZendServer\bin\jqd.exe [x] R2 ZendMonitor;Zend Monitor;d:\serwer\Zend_New\ZendServer\bin\MonitorNode.exe [x] R2 ZendSessionClustering;Zend Session Clustering;d:\serwer\Zend_New\ZendServer\bin\ZendSessionManager.exe [x] R3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt32.sys [x] R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [x] R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [x] R3 MSICDSetup;MSICDSetup;G:\CDriver.sys [x] R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [x] R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [x] R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] S0 NBVol;Nero Backup Volume Filter Driver;c:\windows\system32\DRIVERS\NBVol.sys [x] S0 NBVolUp;Nero Backup Volume Upper Filter Driver;c:\windows\system32\DRIVERS\NBVolUp.sys [x] S3 MEI;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECI.sys [x] S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x] S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [x] S3 tapoas;TAP-Win32 Adapter OAS;c:\windows\system32\DRIVERS\tapoas.sys [x] . . . ------- Skan uzupełniający ------- . IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000 TCP: DhcpNameServer = 94.251.160.14 94.251.182.11 . - - - - USUNIĘTO PUSTE WPISY - - - - . AddRemove-Polska lokalizacja Adobe Lightroom 3.4 - 0:\programy\Adobe\Adobe Photoshop Lightroom 3.2\Deinstalator polskiego interfejsu.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MySQL_ZendServer51] "ImagePath"="\"d:\serwer\Zend_New\MySQL51\bin\mysqld\" --defaults-file=\"d:\serwer\Zend_New\MySQL51\my.ini\" MySQL_ZendServer51" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc] "ImagePath"="c:\windows\system32\GameMon.des -service" . --------------------- ZABLOKOWANE KLUCZE REJESTRU --------------------- . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Czas ukończenia: 2012-07-09 00:53:33 ComboFix-quarantined-files.txt 2012-07-08 22:53 . Przed: 16 195 080 192 bajtów wolnych Po: 20 388 655 104 bajtów wolnych . - - End Of File - - CF498248BC204F02D58E4152DEB9EFF6