ComboFix 13-07-18.04 - Tata 2013-07-19  17:49:14.2.2 - x86
Microsoft Windows XP Home Edition  5.1.2600.3.1250.48.1045.18.1014.251 [GMT 2:00]
Uruchomiony z: c:\documents and settings\Tata\Moje dokumenty\Downloads\ComboFix.exe
AV: ESET Smart Security 6.0 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: Zapora osobista ESET *Disabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
 * Utworzono nowy punkt przywracania
.
.
(((((((((((((((((((((((((((((((((((((((   Usunięto   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Tata\Pulpit\Internet Explorer.lnk
c:\windows\system32\Cache
c:\windows\system32\Cache\0669926f30493f7c.fb
c:\windows\system32\Cache\26c630d098e22dd5.fb
c:\windows\system32\Cache\272512937d9e61a4.fb
c:\windows\system32\Cache\287204568329e189.fb
c:\windows\system32\Cache\28bc8f716fd76a47.fb
c:\windows\system32\Cache\31a0997e9a5b5eb3.fb
c:\windows\system32\Cache\32c84fe32bb74d60.fb
c:\windows\system32\Cache\3917078cb68ec657.fb
c:\windows\system32\Cache\590ba23ce359fd0c.fb
c:\windows\system32\Cache\610289e025a3ee9a.fb
c:\windows\system32\Cache\651c5d3cdbfb8bd1.fb
c:\windows\system32\Cache\6c59ac5e7e7a3ad0.fb
c:\windows\system32\Cache\6d03dad1035885d3.fb
c:\windows\system32\Cache\95f567698be8a182.fb
c:\windows\system32\Cache\ad10a52aff5e038d.fb
c:\windows\system32\Cache\c1fa887b03019701.fb
c:\windows\system32\Cache\c4d28dca2e7648be.fb
c:\windows\system32\Cache\cc398c82e4251efe.fb
c:\windows\system32\Cache\d201ef9910cd39de.fb
c:\windows\system32\Cache\d2e94710a5708128.fb
c:\windows\system32\Cache\d79b9dfe81484ec4.fb
c:\windows\system32\Cache\f998975c9cc711ee.fb
c:\windows\system32\SET2A8.tmp
.
.
(((((((((((((((((((((((((   Pliki utworzone od 2013-06-19 do 2013-07-19  )))))))))))))))))))))))))))))))
.
.
2013-07-05 15:40 . 2013-07-05 15:40	--------	d-----w-	c:\documents and settings\Tata\Ustawienia lokalne\Dane aplikacji\Apple
2013-06-27 18:58 . 2013-06-27 18:58	--------	d-----w-	c:\program files\Common Files\Skype
2013-06-22 15:26 . 2013-06-22 15:29	--------	d-----w-	C:\bd_logs
2013-06-22 13:09 . 2013-06-22 13:09	--------	d-----w-	c:\documents and settings\Tata\Ustawienia lokalne\Dane aplikacji\ESET
2013-06-22 13:09 . 2013-06-22 13:09	--------	d-----w-	c:\documents and settings\Tata\Dane aplikacji\ESET
2013-06-22 13:09 . 2013-06-22 13:09	--------	d-----w-	c:\documents and settings\LocalService\Ustawienia lokalne\Dane aplikacji\ESET
2013-06-22 13:07 . 2013-06-22 13:07	--------	d-----w-	c:\documents and settings\All Users\Dane aplikacji\ESET
2013-06-22 13:07 . 2013-06-22 13:07	--------	d-----w-	c:\program files\ESET
.
.
.
((((((((((((((((((((((((((((((((((((((((   Sekcja Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-02 00:11 . 2012-09-29 18:17	37664	----a-w-	c:\windows\system32\drivers\avgtpx86.sys
2013-06-11 19:41 . 2012-04-18 19:42	692104	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2013-06-11 19:41 . 2011-06-03 01:57	71048	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2013-06-08 01:23 . 2004-08-04 12:00	920064	----a-w-	c:\windows\system32\wininet.dll
2013-06-07 21:53 . 2004-08-04 12:00	43520	----a-w-	c:\windows\system32\licmgr10.dll
2013-06-07 21:53 . 2004-08-04 12:00	1469440	------w-	c:\windows\system32\inetcpl.cpl
2013-06-07 18:27 . 2004-08-04 12:00	385024	----a-w-	c:\windows\system32\html.iec
2013-06-05 09:08 . 2011-03-24 12:44	1876992	----a-w-	c:\windows\system32\win32k.sys
2013-06-04 07:22 . 2011-03-24 12:45	563712	----a-w-	c:\windows\system32\qedit.dll
2013-05-26 13:25 . 2013-05-26 13:25	14664	----a-w-	c:\windows\stinger.sys
2013-05-08 09:58 . 2006-10-18 20:47	1543680	------w-	c:\windows\system32\wmvdecod.dll
2013-05-03 05:39 . 2011-03-24 12:44	2151424	----a-w-	c:\windows\system32\ntoskrnl.exe
2013-05-03 05:39 . 2011-03-24 12:44	2030080	----a-w-	c:\windows\system32\ntkrnlpa.exe
2011-11-19 13:36 . 2011-04-04 01:01	134104	----a-w-	c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((((((   Wpisy startowe rejestru   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane  
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
2013-07-02 00:11	3055280	----a-w-	c:\program files\AVG Secure Search\15.3.0.11\AVG Secure Search_toolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files\AVG Secure Search\15.3.0.11\AVG Secure Search_toolbar.dll" [2013-07-02 3055280]
.
[HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"="c:\documents and settings\Tata\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe" [2012-09-24 138096]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TpShocks"="TpShocks.exe" [2010-07-01 337256]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-02-05 141336]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-02-05 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-02-05 142360]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2009-09-09 176128]
"LenovoAutoScrollUtility"="c:\program files\Lenovo\VIRTSCRL\virtscrl.exe" [2010-04-01 43960]
"PWRMGRTR"="c:\progra~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL" [2011-02-04 746856]
"TVT Scheduler Proxy"="c:\program files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe" [2010-09-11 1093632]
"TPFNF7"="c:\program files\Lenovo\NPDIRECT\TPFNF7SP.exe" [2010-03-26 62312]
"EZEJMNAP"="c:\progra~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe" [2009-12-01 256576]
"TPKMAPHELPER"="c:\program files\ThinkPad\Utilities\TpKmapAp.exe" [2007-01-09 868352]
"LPManager"="c:\progra~1\THINKV~2\PrdCtr\LPMGR.exe" [2009-07-23 185688]
"LPMailChecker"="c:\progra~1\THINKV~2\PrdCtr\LPMLCHK.exe" [2009-07-23 124248]
"AwaySch"="c:\program files\Lenovo\AwayTask\AwaySch.EXE" [2006-11-07 91688]
"Eraser"="c:\progra~1\Eraser\Eraser.exe" [2010-04-10 979344]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-10-25 210472]
"PaperPort PTD"="c:\program files\ScanSoft\PaperPort\pptd40nt.exe" [2007-01-29 30248]
"IndexSearch"="c:\program files\ScanSoft\PaperPort\IndexSearch.exe" [2007-01-29 46632]
"PPort11reminder"="c:\program files\ScanSoft\PaperPort\Ereg\Ereg.exe" [2007-02-01 255528]
"BrMfcWnd"="c:\program files\Brother\Brmfcmon\BrMfcWnd.exe" [2007-03-12 663552]
"ControlCenter3"="c:\program files\Brother\ControlCenter3\brctrcen.exe" [2007-01-26 65536]
"snpstd"="c:\windows\vsnpstd.exe" [2005-10-11 339968]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2010-11-15 35736]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2011-10-24 421888]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"vProt"="c:\program files\AVG Secure Search\vprot.exe" [2013-07-02 2236080]
"KiesTrayAgent"="c:\program files\Samsung\Kies\KiesTrayAgent.exe" [2012-12-03 309688]
"PrintDisp"="c:\windows\system32\PrintDisp.exe" [2010-07-23 975360]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-03-04 5078504]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2011-07-27 434080]
.
c:\documents and settings\Tata\Menu Start\Programy\Autostart\
Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2009-2-26 97680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psfus]
2009-12-01 12:41	100104	----a-w-	c:\program files\ThinkVantage Fingerprint Software\psqlpwd.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages	REG_MULTI_SZ   	scecli c:\program files\ThinkVantage Fingerprint Software\psqlpwd.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Vidalia Bridge Bundle\\Tor\\tor.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Documents and Settings\\Tata\\Ustawienia lokalne\\Dane aplikacji\\Facebook\\Video\\Skype\\FacebookVideoCalling.exe"=
"c:\\Documents and Settings\\Alicja\\Ustawienia lokalne\\Dane aplikacji\\Facebook\\Video\\Skype\\FacebookVideoCalling.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
R0 DozeHDD;DozeHDD;c:\windows\system32\drivers\DOZEHDD.SYS [2011-03-24 25968]
R0 TPDIGIMN;TPDIGIMN;c:\windows\system32\drivers\ApsHM86.sys [2010-06-16 20592]
R1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx86.sys [2012-09-29 37664]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2013-01-10 122240]
R1 lenovo.smi;Lenovo System Interface Driver;c:\windows\system32\drivers\smiif32.sys [2011-03-24 13680]
R2 DozeSvc;Lenovo Doze Mode Service;c:\program files\ThinkPad\Utilities\DOZESVC.EXE [2011-03-24 128360]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [2013-03-04 1341664]
R2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2010-01-27 50704]
R2 Printer Control;Printer Control;c:\windows\system32\PrintCtrl.exe [2013-02-22 65536]
R2 smihlp;SMI Helper Driver (smihlp);c:\program files\ThinkVantage Fingerprint Software\smihlp.sys [2009-03-13 12560]
R2 TPHKLOAD;Lenovo Hotkey Client Loader;c:\program files\Lenovo\HOTKEY\tphkload.exe [2011-03-24 99328]
R2 TPHKSVC;On Screen Display;c:\program files\Lenovo\HOTKEY\TPHKSVC.exe [2011-03-24 64440]
R2 TVT Backup Protection Service;TVT Backup Protection Service;c:\program files\Lenovo\Rescue and Recovery\rrpservice.exe [2010-09-11 1118208]
R2 vToolbarUpdater15.3.0;vToolbarUpdater15.3.0;c:\program files\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe [2013-07-02 1598128]
R3 NETwLx32;    Sterownik karty Intel(R) Wireless WiFi Link 5000 Series dla systemu Windows XP 32 Bit;c:\windows\system32\drivers\NETwLx32.sys [2011-03-24 6609920]
R3 TVTI2C;Lenovo SM bus driver;c:\windows\system32\drivers\tvti2c.sys [2008-02-22 37312]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute;c:\program files\Lenovo\HOTKEY\micmute.exe [2011-03-24 45496]
S2 Power Manager DBC Service;Power Manager DBC Service;c:\program files\ThinkPad\Utilities\PWMDBSVC.exe [2011-03-24 61440]
S2 Skype C2C Service;Skype C2C Service;c:\documents and settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-10-02 3064000]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-06-03 162408]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\drivers\ssudbus.sys [2012-12-25 83168]
S3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [2012-12-23 20032]
S3 GemCCID;GemCCID;c:\windows\system32\drivers\GemCCID.sys [2013-02-06 87424]
S3 PCDSRVC{3037D694-FD904ACA-06020200}_0;PCDSRVC{3037D694-FD904ACA-06020200}_0 - PCDR Kernel Mode Service Helper Driver;c:\program files\PC-Doctor\pcdsrvc.pkms [2011-06-27 22640]
S3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\drivers\ssudmdm.sys [2012-12-25 181344]
S3 ZD1211BU(Atheros);Atheros ZD1211B IEEE 802.11 Wireless LAN Driver (USB)(Atheros);c:\windows\system32\DRIVERS\zd1211Bu.sys --> c:\windows\system32\DRIVERS\zd1211Bu.sys [?]
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-07-14 07:19	1173456	----a-w-	c:\program files\Google\Chrome\Application\28.0.1500.72\Installer\chrmstp.exe
.
Zawartość folderu 'Zaplanowane zadania'
.
2013-07-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-18 19:42]
.
2013-07-19 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 15:57]
.
2013-07-05 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1275210071-879983540-682003330-1004Core.job
- c:\documents and settings\Alicja\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe [2012-10-10 12:18]
.
2013-07-14 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1275210071-879983540-682003330-1004UA.job
- c:\documents and settings\Alicja\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe [2012-10-10 12:18]
.
2013-07-05 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1275210071-879983540-682003330-1005Core.job
- c:\documents and settings\Tata\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe [2012-09-24 17:01]
.
2013-07-15 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1275210071-879983540-682003330-1005UA.job
- c:\documents and settings\Tata\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe [2012-09-24 17:01]
.
2013-07-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-04-09 16:33]
.
2013-07-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-04-09 16:33]
.
2013-07-10 c:\windows\Tasks\PCDoctorBackgroundMonitorTask.job
- c:\program files\PC-Doctor\uaclauncher.exe [2011-06-27 15:54]
.
2013-07-19 c:\windows\Tasks\PMTask.job
- c:\progra~1\ThinkPad\UTILIT~1\PWMIDTSK.EXE [2011-03-24 00:35]
.
2013-07-19 c:\windows\Tasks\SystemToolsDailyTest.job
- c:\program files\PC-Doctor\uaclauncher.exe [2011-06-27 15:54]
.
.
------- Skan uzupełniający -------
.
uStart Page = https://isearch.avg.com/?cid={DD6875B5-0F2E-4739-B46B-C2E940866790}&mid=1ab012523c6047d0b4ccd155f976e396-1a13bbe4f5613cd3d3c673f2096976fce82be711&lang=pl&ds=xn011&pr=sa&d=2012-09-29 20:17&v=13.0.0.7&sap=hp
mStart Page = hxxp://www.v9.com/?utm_source=b&utm_medium=idg&from=idg&uid=HITACHI_HTS541616J9SA00_SB3441GRJZ6PGEJZ6PGEX&ts=1351506495
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\Common Files\AVG Secure Search\ViProtocolInstaller\15.3.0\ViProtocol.dll
FF - ProfilePath - c:\documents and settings\Tata\Dane aplikacji\Mozilla\Firefox\Profiles\oayckntn.default\
FF - prefs.js: browser.search.selectedEngine - v9
FF - prefs.js: browser.startup.homepage - hxxp://www.v9.com/?utm_source=b&utm_medium=idg&from=idg&uid=HITACHI_HTS541616J9SA00_SB3441GRJZ6PGEJZ6PGEX&ts=1351506495
FF - prefs.js: keyword.URL - hxxp://isearch.avg.com/search?cid={DD6875B5-0F2E-4739-B46B-C2E940866790}&mid=1ab012523c6047d0b4ccd155f976e396-1a13bbe4f5613cd3d3c673f2096976fce82be711&lang=pl&ds=xn011&pr=sa&d=2012-09-29 20:17&pid=avg&sg=0&v=15.2.0.5&sap=ku&q=
FF - prefs.js: network.proxy.socks - 127.0.0.1
FF - prefs.js: network.proxy.socks_port - 9050
FF - prefs.js: network.proxy.type - 1
.
- - - - USUNIĘTO PUSTE WPISY - - - -
.
HKCU-Run-Hoolapp Android - c:\docume~1\Tata\DANEAP~1\HOOLAP~1\Hoolapp.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-07-19 17:59
Windows 5.1.2600 Dodatek Service Pack 3 NTFS
.
skanowanie ukrytych procesów ...  
.
skanowanie ukrytych wpisów autostartu ... 
.
skanowanie ukrytych plików ...  
.
skanowanie pomyślnie ukończone
ukryte pliki: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\PCDSRVC{3037D694-FD904ACA-06020200}_0]
"ImagePath"="\??\c:\program files\pc-doctor\pcdsrvc.pkms"
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------
.
- - - - - - - > 'winlogon.exe'(992)
c:\program files\ThinkVantage Fingerprint Software\psqlpwd.dll
c:\program files\ThinkVantage Fingerprint Software\homefus2.dll
c:\program files\ThinkVantage Fingerprint Software\infql2.dll
c:\program files\ThinkVantage Fingerprint Software\homepass.dll
c:\program files\ThinkVantage Fingerprint Software\bio.dll
c:\program files\ThinkVantage Fingerprint Software\qlbase.dll
c:\program files\ThinkVantage Fingerprint Software\ps2css.dll
.
- - - - - - - > 'lsass.exe'(1048)
c:\program files\ThinkVantage Fingerprint Software\psqlpwd.dll
c:\program files\ThinkVantage Fingerprint Software\homefus2.dll
c:\program files\ThinkVantage Fingerprint Software\infql2.dll
.
Czas ukończenia: 2013-07-19  18:02:02
ComboFix-quarantined-files.txt  2013-07-19 16:02
ComboFix2.txt  2013-05-03 13:54
.
Przed: 30 595 538 944 bajtów wolnych
Po: 31 120 056 320 bajtów wolnych
.
- - End Of File - - 073A33444EE88B9E8BEF0AAC0C6ED805
9DC9743076686BF7DA675AA171D29493