ComboFix 12-11-22.03 - jan 2012-11-23 13:31:05.1.1 - x86 Microsoft Windows XP Professional 5.1.2600.3.1250.48.1045.18.1023.762 [GMT 1:00] Uruchomiony z: c:\documents and settings\jan\Moje dokumenty\Downloads\ComboFix.exe . . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\documents and settings\All Users\Dane aplikacji\TEMP c:\windows\system32\d3d10core.dll c:\windows\system32\dxgi.dll . . ((((((((((((((((((((((((( Pliki utworzone od 2012-10-23 do 2012-11-23 ))))))))))))))))))))))))))))))) . . 2012-11-22 12:19 . 2012-11-22 12:19 -------- d-----w- c:\program files\VirtualDJ 2012-11-22 12:08 . 2012-11-22 12:09 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\MusicMP3Get 2012-11-22 11:12 . 2012-11-22 11:12 -------- d-----w- c:\windows\system32\ipp20 2012-11-22 11:11 . 2012-11-22 11:11 -------- d-----w- c:\program files\Pioneer 2012-11-22 10:53 . 2012-11-22 10:53 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\IObit 2012-11-22 10:51 . 2012-11-23 08:50 -------- d-----w- c:\program files\IObit 2012-11-22 10:40 . 2012-11-22 10:40 -------- d-----w- C:\CoolPlayer+Portable 2012-11-22 10:36 . 2012-11-22 10:36 -------- d-----w- c:\program files\zoneLINK 2012-11-22 10:34 . 2012-11-22 10:34 -------- d-----w- c:\program files\Ashampoo 2012-11-21 21:01 . 2012-11-21 21:01 -------- d-----w- c:\program files\Maxthon3 2012-11-21 15:36 . 2012-11-21 15:36 -------- d-----w- c:\program files\DownloadXCtrl.com 2012-11-21 14:07 . 2012-11-21 14:07 -------- d-----w- c:\program files\Safari 2012-11-21 14:07 . 2012-11-21 14:07 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Apple Computer 2012-11-21 14:06 . 2012-11-21 14:06 -------- d-----w- c:\program files\Apple Software Update 2012-11-21 14:06 . 2012-11-21 14:06 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Apple 2012-11-21 13:39 . 2012-11-22 11:01 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-11-21 13:39 . 2012-11-22 11:01 697272 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-11-20 12:57 . 2012-11-20 12:57 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\nView_Profiles 2012-11-20 12:50 . 2008-04-14 20:51 221184 ----a-w- c:\windows\system32\wmpns.dll 2012-11-20 12:35 . 2010-02-05 08:17 233136 ----a-w- c:\windows\system32\drivers\pctgntdi.sys 2012-11-20 12:35 . 2010-03-29 09:06 218592 ----a-w- c:\windows\system32\drivers\PCTCore.sys 2012-11-20 12:35 . 2009-11-23 12:54 88040 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys 2012-11-20 12:35 . 2010-04-08 13:29 63360 ----a-w- c:\windows\system32\drivers\pctplsg.sys 2012-11-20 12:34 . 2012-11-20 12:37 -------- d-----w- c:\program files\Spyware Doctor 2012-11-20 12:34 . 2012-11-20 12:34 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\PC Tools 2012-11-20 11:09 . 2012-11-20 11:10 -------- d-----w- c:\windows\nview 2012-11-20 11:09 . 2005-11-11 12:47 180224 ----a-w- c:\windows\system32\nvudisp.exe 2012-11-20 11:08 . 2012-11-20 11:08 -------- d-----w- C:\NVIDIA 2012-11-20 11:07 . 2005-11-11 13:49 180224 ----a-w- c:\windows\system32\NVUNINST.EXE 2012-11-20 10:26 . 2012-11-20 10:26 -------- d-----w- c:\program files\Armia Podkarpacki OTS 2012-11-20 08:01 . 2012-09-23 14:28 65536 ----a-w- c:\windows\system32\OpenCL.dll 2012-11-20 07:45 . 2012-11-20 10:59 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\NVIDIA 2012-11-20 07:45 . 2012-11-20 07:45 -------- d-----w- c:\windows\Sun 2012-11-20 07:44 . 2012-11-20 07:44 -------- d-----w- c:\program files\Common Files\Java 2012-11-20 07:43 . 2012-11-20 07:43 821736 ----a-w- c:\windows\system32\npDeployJava1.dll 2012-11-20 07:43 . 2012-11-20 07:43 143872 ----a-w- c:\windows\system32\javacpl.cpl 2012-11-20 07:43 . 2012-11-20 07:43 746984 ----a-w- c:\windows\system32\deployJava1.dll 2012-11-20 07:43 . 2012-11-20 07:43 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll 2012-11-20 07:43 . 2012-11-20 07:43 -------- d-----w- c:\program files\Java 2012-11-19 21:15 . 2012-11-20 10:57 -------- d-----w- c:\program files\Trojan Remover 2012-11-19 19:40 . 2012-11-19 19:40 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\GG 2012-11-19 18:43 . 2012-11-22 11:38 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Atheros 2012-11-19 17:51 . 2012-11-22 11:38 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\TP-LINK 2012-11-19 16:52 . 2007-02-15 12:26 811008 ----a-w- c:\windows\system32\cximage.dll 2012-11-19 16:52 . 2012-11-19 16:52 -------- d-----w- C:\Live! Cam 2012-11-19 16:46 . 2012-11-19 17:04 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Creative 2012-11-19 16:45 . 2003-06-12 22:25 7062 ----a-w- c:\windows\system32\audiopid.vxd 2012-11-19 16:44 . 2006-10-06 06:17 53248 ------w- c:\windows\Ctregrun.exe 2012-11-19 16:44 . 2000-05-22 08:58 647872 ------w- c:\windows\system32\Mscomct2.ocx 2012-11-19 16:42 . 2006-08-30 06:10 36528 ------w- c:\windows\system32\drivers\PxHelp20.sys 2012-11-19 16:42 . 2006-08-30 06:10 2560 ------w- c:\windows\system32\drivers\cdralw2k.sys 2012-11-19 16:42 . 2006-08-30 06:10 2432 ------w- c:\windows\system32\drivers\cdr4_xp.sys 2012-11-19 16:42 . 2006-08-30 06:10 158456 ------w- c:\windows\system32\pxwma.dll 2012-11-19 16:41 . 2012-11-19 16:41 -------- d-----w- c:\program files\Common Files\muvee Technologies 2012-11-19 16:41 . 2012-11-19 16:41 -------- d-----w- c:\program files\muvee Technologies 2012-11-19 16:41 . 2012-11-19 16:41 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\muvee Technologies 2012-11-19 16:40 . 2012-11-19 16:40 -------- d-----w- c:\program files\SightSpeed 2012-11-19 16:38 . 2012-11-19 16:44 -------- d-----w- c:\program files\Creative 2012-11-19 16:37 . 2012-11-22 11:12 -------- d--h--w- c:\program files\InstallShield Installation Information 2012-11-19 15:29 . 2012-11-19 15:29 -------- d-----w- C:\cabs 2012-11-19 15:03 . 2012-11-19 15:03 -------- dc----w- c:\windows\system32\DRVSTORE 2012-11-19 15:03 . 2011-04-01 14:37 48128 ----a-w- c:\windows\system32\drivers\fetnd5bv.sys 2012-11-19 15:03 . 2006-10-27 15:26 69632 ----a-w- c:\windows\system32\vuins32.dll 2012-11-19 15:03 . 2006-11-02 06:21 319456 ----a-w- c:\windows\system32\difxapi.dll 2012-11-19 14:28 . 2012-11-19 14:28 -------- d-----w- c:\program files\Easeware 2012-11-18 12:36 . 2004-03-02 16:37 125184 ------w- c:\windows\system32\drivers\imagesrv.sys 2012-11-18 12:36 . 2004-03-02 16:37 5504 ------w- c:\windows\system32\drivers\imagedrv.sys 2012-11-18 12:35 . 2012-11-18 12:35 -------- d-----w- c:\program files\Common Files\Ahead 2012-11-18 12:35 . 2004-07-26 16:16 476320 ------w- c:\windows\system32\ImagXpr7.dll 2012-11-18 12:35 . 2004-07-26 16:16 471040 ------w- c:\windows\system32\ImagXRA7.dll 2012-11-18 12:35 . 2004-07-26 16:16 262144 ------w- c:\windows\system32\ImagXR7.dll 2012-11-18 12:35 . 2004-07-26 16:16 1568768 ------w- c:\windows\system32\ImagX7.dll 2012-11-18 12:35 . 2001-07-09 10:50 155648 ----a-w- c:\windows\system32\NeroCheck.exe 2012-11-18 12:35 . 2000-06-26 10:45 106496 ----a-w- c:\windows\system32\TwnLib20.dll 2012-11-18 12:35 . 2012-11-18 12:36 -------- d-----w- c:\program files\Ahead 2012-11-18 12:01 . 2012-11-18 12:01 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\ashampoo 2012-11-15 19:04 . 2012-11-15 19:04 -------- d-----w- c:\program files\Common Files\Adobe 2012-11-15 19:00 . 2008-04-13 23:17 25856 -c--a-w- c:\windows\system32\dllcache\usbprint.sys 2012-11-15 19:00 . 2008-04-13 23:17 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys 2012-11-15 16:29 . 2012-11-15 17:40 -------- d-----w- c:\program files\PcSpeedTest 2012-11-15 14:45 . 2012-11-23 12:24 -------- d-----w- c:\documents and settings\dfsdf 2012-11-15 14:38 . 2012-11-15 14:38 -------- d-----w- c:\windows\system32\LogFiles 2012-11-15 14:07 . 2012-11-23 08:49 -------- d-----w- c:\documents and settings\jan 2012-11-15 14:04 . 2012-11-15 14:04 -------- d-----w- c:\program files\Common Files\Download Manager 2012-11-15 13:54 . 2012-11-15 13:54 -------- d-----w- c:\program files\AnvSoft 2012-11-15 12:48 . 2012-11-15 12:49 -------- d-----w- C:\f3d075aa35f50b0b71c613d2 2012-11-15 11:28 . 2012-11-15 11:29 -------- d-----w- C:\8462be6d8f7e25c273d1a05dea 2012-11-14 19:12 . 2012-11-14 19:12 -------- d-----w- c:\program files\Tibia 2012-11-13 16:38 . 2012-11-22 10:43 -------- d-----w- c:\program files\SpeedFan 2012-11-13 16:25 . 2009-01-07 17:21 26144 ----a-w- c:\windows\system32\spupdsvc.exe 2012-11-13 16:25 . 2012-11-13 16:25 -------- dc-h--w- c:\windows\ie8 2012-11-13 14:46 . 2008-04-02 14:54 1101824 ----a-w- c:\windows\system32\UniBox210.ocx 2012-11-13 14:46 . 2008-04-02 14:53 212992 ----a-w- c:\windows\system32\UniBoxVB12.ocx 2012-11-13 14:46 . 2008-04-02 14:53 880640 ----a-w- c:\windows\system32\UniBox10.ocx 2012-11-13 14:46 . 2004-03-08 23:00 1081616 ----a-w- c:\windows\system32\MSCOMCTL.OCX 2012-11-13 14:46 . 2012-11-20 12:35 -------- d-----w- c:\program files\Common Files\PC Tools 2012-11-13 14:39 . 2012-11-13 14:39 -------- d-----w- c:\program files\CCleaner 2012-11-13 14:35 . 2012-11-20 10:57 -------- d-----w- c:\program files\Przyspiesz 2012-11-12 20:08 . 2012-11-12 20:08 -------- d---a-w- c:\windows\rundll16.exe 2012-11-12 20:08 . 2012-11-12 20:08 -------- d---a-w- c:\windows\logo1_.exe 2012-11-12 20:00 . 2012-11-12 20:00 -------- d---a-w- c:\windows\VDLL.DLL 2012-11-12 20:00 . 2012-11-12 20:00 -------- d---a-w- c:\windows\system32\runouce.exe 2012-11-12 20:00 . 2012-11-12 20:00 -------- d---a-w- c:\windows\RUNDL132.EXE 2012-11-12 20:00 . 2012-11-12 20:00 -------- d---a-w- c:\windows\logo_1.exe 2012-11-12 19:46 . 2012-11-12 19:46 632064 ----a-w- c:\windows\system32\msvcr80.dll 2012-11-12 19:46 . 2012-11-12 19:46 554240 ----a-w- c:\windows\system32\msvcp80.dll 2012-11-12 19:46 . 2012-11-12 19:46 572928 ----a-w- c:\windows\system32\msvcp90.dll 2012-11-12 19:46 . 2012-11-12 19:46 655872 ----a-w- c:\windows\system32\msvcr90.dll 2012-11-12 19:46 . 2012-11-12 19:46 34048 ----a-w- c:\windows\system32\eEmpty.exe 2012-11-12 19:46 . 2008-04-14 20:51 139776 ----a-w- c:\windows\system32\TASKMGR.COM 2012-11-12 19:46 . 2008-04-14 20:51 139776 ----a-w- c:\windows\system32\T.COM 2012-11-12 19:46 . 2008-04-14 20:51 149504 ----a-w- c:\windows\REGEDIT.COM 2012-11-12 19:46 . 2008-04-14 20:51 149504 ----a-w- c:\windows\R.COM 2012-11-12 19:45 . 2012-11-12 19:45 -------- d-----w- c:\program files\Common Files\MicroWorld 2012-11-12 19:45 . 2012-11-12 19:45 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\MicroWorld 2012-11-12 16:41 . 2012-11-12 16:41 -------- d-----w- c:\windows\system32\wbem\Repository 2012-11-12 16:17 . 2012-11-12 16:17 -------- d-----w- c:\program files\VIA 2012-11-10 10:16 . 2001-10-26 16:29 5632 ----a-w- c:\windows\system32\ptpusb.dll 2012-11-10 10:16 . 2008-04-14 21:50 159232 ----a-w- c:\windows\system32\ptpusd.dll 2012-11-10 10:16 . 2008-04-13 23:15 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys 2012-11-10 10:16 . 2008-04-13 23:15 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys 2012-11-08 08:17 . 2012-11-08 08:17 -------- d-----w- c:\program files\Real Alternative 2012-11-08 06:22 . 2012-11-08 06:22 -------- d-----w- c:\program files\Common Files\xing shared 2012-11-08 06:22 . 2012-11-08 06:22 499712 ----a-w- c:\windows\system32\msvcp71.dll 2012-11-08 06:22 . 2012-11-08 06:22 348160 ----a-w- c:\windows\system32\msvcr71.dll . . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-09-03 06:37 . 2012-11-16 07:10 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Creative Live! Cam Manager"="c:\program files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe" [2007-06-07 155648] "ccleaner"="c:\program files\CCleaner\CCleaner.exe" [2012-10-24 3157856] "Advanced SystemCare 3"="c:\program files\IObit\Advanced SystemCare 3\AWC.exe" [2009-11-20 2335880] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "V0420Mon.exe"="c:\windows\V0420Mon.exe" [2007-04-30 32768] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-07-31 38872] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-11 919008] "TkBellExe"="c:\program files\Real\RealPlayer\update\realsched.exe" [2012-11-08 296096] "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-11-11 7311360] "nwiz"="nwiz.exe" [2005-11-11 1519616] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-11-11 86016] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice] @="Service" HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GG . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] 2005-11-11 12:47 7311360 ----a-w- c:\windows\system32\nvcpl.dll . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] 2012-11-09 10:27 17877168 ----a-r- c:\program files\Skype\Phone\Skype.exe . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\SightSpeed\\SightSpeed.exe"= "c:\\Documents and Settings\\jan\\Moje dokumenty\\Downloads\\winbox.exe"= "c:\\Program Files\\Java\\jre7\\bin\\java.exe"= "c:\\Program Files\\Maxthon3\\Bin\\Maxthon.exe"= "c:\\Program Files\\Maxthon3\\Bin\\MxUp.exe"= "c:\\Documents and Settings\\jan\\Pulpit\\Skype.exe"= . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "4139:TCP"= 4139:TCP:rqocpyw . R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [2012-11-20 218592] R2 IMFservice;IMF Service;c:\program files\IObit\IObit Malware Fighter\IMFsrv.exe [2012-11-23 821592] R2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service;c:\program files\Common Files\PC Tools\sMonitor\StartManSvc.exe [2012-11-13 632792] R3 V0420VID;Live! Cam Vista IM (VF0420);c:\windows\system32\drivers\V0420Vid.sys [2012-11-07 99648] S2 qbvquou;Shell Network;c:\windows\system32\svchost.exe -k netsvcs [2008-04-14 14336] S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2012-10-19 160944] S3 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [2012-11-20 366840] . --- Inne Usługi/Sterowniki w Pamięci --- . *NewlyCreated* - IMFSERVICE . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs qbvquou . Zawartość folderu 'Zaplanowane zadania' . 2012-11-19 c:\windows\Tasks\DriverEasy Scheduled Scan.job - c:\program files\Easeware\DriverEasy\DriverEasy.exe [2012-11-19 17:17] . 2012-11-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2012-11-16 06:43] . 2012-11-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2012-11-16 06:43] . 2012-11-13 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-527237240-1614895754-842925246-1003.job - c:\program files\Real\RealUpgrade\realupgrade.exe [2012-07-27 13:27] . 2012-11-23 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-527237240-1614895754-842925246-1004.job - c:\program files\Real\RealUpgrade\realupgrade.exe [2012-07-27 13:27] . 2012-11-13 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-527237240-1614895754-842925246-1003.job - c:\program files\Real\RealUpgrade\realupgrade.exe [2012-07-27 13:27] . 2012-11-23 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-527237240-1614895754-842925246-1004.job - c:\program files\Real\RealUpgrade\realupgrade.exe [2012-07-27 13:27] . . ------- Skan uzupełniający ------- . uStart Page = hxxp://www.google.pl/ LSP: c:\program files\Common Files\PC Tools\Lsp\PCTLsp.dll TCP: DhcpNameServer = 194.183.54.30 213.172.186.5 DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab FF - ProfilePath - c:\documents and settings\jan\Dane aplikacji\Mozilla\Firefox\Profiles\npj4qost.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.gazeta.pl/0,0.html?p=128 FF - ExtSQL: 2012-11-08 07:22; {0153E448-190B-4987-BDE1-F256CADA672F}; c:\documents and settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext . - - - - USUNIĘTO PUSTE WPISY - - - - . ShellIconOverlayIdentifiers-{E68D0A50-3C40-4712-B90D-DCFA93FF2534} - (no file) ShellIconOverlayIdentifiers-{E68D0A51-3C40-4712-B90D-DCFA93FF2534} - (no file) ShellIconOverlayIdentifiers-{E68D0A52-3C40-4712-B90D-DCFA93FF2534} - (no file) ShellIconOverlayIdentifiers-{E68D0A53-3C40-4712-B90D-DCFA93FF2534} - (no file) HKLM-Run-Cmaudio - cmicnfg.cpl . . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2012-11-23 13:40 Windows 5.1.2600 Dodatek Service Pack 3 NTFS . skanowanie ukrytych procesów ... . skanowanie ukrytych wpisów autostartu ... . skanowanie ukrytych plików ... . skanowanie pomyślnie ukończone ukryte pliki: 0 . ************************************************************************** . [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\qbvquou] "ServiceDll"="c:\windows\system32\sexczk.dll" . --------------------- ZABLOKOWANE KLUCZE REJESTRU --------------------- . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_110_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_110_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- . - - - - - - - > 'lsass.exe'(728) c:\program files\Common Files\PC Tools\Lsp\PCTLsp.dll . Czas ukończenia: 2012-11-23 13:44:00 ComboFix-quarantined-files.txt 2012-11-23 12:43 . Przed: 45 702 283 264 bajtów wolnych Po: 45 665 284 096 bajtów wolnych . WindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons UnsupportedDebug="do not select this" /debug multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect . - - End Of File - - FDB0B745F3EC6B56D27809F24D8F937E