ComboFix 13-12-18.01 - Rybozord 2013-12-18 22:52:12.1.4 - x64 Microsoft Windows 7 Ultimate 6.1.7601.1.1250.48.1045.18.4095.2762 [GMT 1:00] Uruchomiony z: d:\download\torrnety\ComboFix.exe AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F} SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} SP: Spybot - Search and Destroy *Enabled/Updated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Utworzono nowy punkt przywracania . . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . . C:\data c:\users\Rybozord\AppData\Roaming\Mozilla\Firefox\Profiles\np4dh677.default\extensions\staged\uaeu1uo@yyeei-.org c:\users\Rybozord\AppData\Roaming\Mozilla\Firefox\Profiles\np4dh677.default\extensions\staged\uaeu1uo@yyeei-.org\bootstrap.js c:\users\Rybozord\AppData\Roaming\Mozilla\Firefox\Profiles\np4dh677.default\extensions\staged\uaeu1uo@yyeei-.org\chrome.manifest c:\users\Rybozord\AppData\Roaming\Mozilla\Firefox\Profiles\np4dh677.default\extensions\staged\uaeu1uo@yyeei-.org\content\bg.js c:\users\Rybozord\AppData\Roaming\Mozilla\Firefox\Profiles\np4dh677.default\extensions\staged\uaeu1uo@yyeei-.org\content\zy.xul c:\users\Rybozord\AppData\Roaming\Mozilla\Firefox\Profiles\np4dh677.default\extensions\staged\uaeu1uo@yyeei-.org\install.rdf c:\users\Rybozord\AppData\Roaming\Rybozordlog.dat c:\windows\Fonts\couf1257.fon c:\windows\Fonts\courer.fon c:\windows\SysWow64\frapsvid.dll . . ((((((((((((((((((((((((( Pliki utworzone od 2013-11-18 do 2013-12-18 ))))))))))))))))))))))))))))))) . . 2013-12-18 21:57 . 2013-12-18 21:57 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-12-18 21:46 . 2013-12-18 21:50 -------- d-----w- C:\32788R22FWJFW 2013-12-18 20:27 . 2010-11-20 13:33 273792 ----a-w- c:\windows\system32\drivers\msiscsi.sys 2013-12-18 20:27 . 2009-07-13 23:19 105472 ----a-w- c:\windows\system32\drivers\i8042prt.sys 2013-12-18 20:22 . 2013-09-20 09:49 21040 ----a-w- c:\windows\system32\sdnclean64.exe 2013-12-18 20:22 . 2013-12-18 21:16 -------- d-----w- c:\programdata\Spybot - Search & Destroy 2013-12-18 20:22 . 2013-12-18 20:25 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2 2013-12-18 20:03 . 2013-12-18 21:38 -------- d-----w- c:\users\Rybozord\AppData\Roaming\newnext.me 2013-12-18 20:03 . 2013-12-18 20:19 -------- d-----w- c:\users\Rybozord\AppData\Local\Mobogenie 2013-12-18 20:03 . 2013-12-18 20:03 -------- d-----w- c:\users\Rybozord\AppData\Local\genienext 2013-12-18 20:03 . 2013-12-18 20:03 -------- d-----w- c:\users\Rybozord\AppData\Local\cache 2013-12-18 20:02 . 2013-12-18 20:18 -------- d-----w- c:\program files (x86)\Mobogenie 2013-12-18 20:01 . 2013-12-18 20:01 -------- d-----w- c:\programdata\WPM 2013-12-18 20:01 . 2013-12-18 20:01 -------- d-----w- c:\users\Rybozord\AppData\Roaming\aartemis 2013-12-18 19:06 . 2013-04-08 14:30 22752 ----a-w- c:\windows\system32\PCloudBroom64.exe 2013-12-18 18:37 . 2013-04-29 07:17 47632 ----a-w- c:\windows\system32\drivers\PSKMAD.sys 2013-12-16 11:56 . 2013-11-08 03:12 10285968 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{C485E024-F904-4EC3-B41E-6CB03A2C7204}\mpengine.dll 2013-12-16 09:52 . 2013-12-16 09:52 -------- d-----w- c:\program files (x86)\Rockstar Games 2013-12-13 17:58 . 2013-12-13 17:58 -------- d-----w- c:\users\Rybozord\AppData\Roaming\Warner Bros. Interactive Entertainment 2013-12-13 04:22 . 2013-12-13 04:22 -------- d-----w- c:\users\Rybozord\AppData\Roaming\Anuman 2013-12-13 04:16 . 2013-12-13 04:16 -------- d-----w- c:\users\Rybozord\jakies gowno 2013-12-13 04:12 . 2013-12-13 04:12 -------- d-----w- c:\programdata\Big Fish 2013-12-13 04:12 . 2013-12-13 04:15 -------- d-----w- c:\program files (x86)\bfgclient 2013-12-13 04:10 . 2013-12-13 04:16 -------- d-----w- c:\users\Rybozord\AppData\Local\Big Fish 2013-12-13 04:10 . 2013-12-13 04:50 -------- d-----w- C:\BigFishCache 2013-12-09 20:54 . 2013-10-18 14:57 965000 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{CDE4D4A4-205A-46A9-B1DB-FD2B7478E38B}\gapaengine.dll 2013-12-09 20:53 . 2013-11-08 03:12 10285968 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll 2013-12-04 01:42 . 2013-12-04 01:42 -------- d-----w- c:\programdata\WinterSoft 2013-12-04 00:52 . 2013-12-04 00:52 -------- d-----w- c:\users\Rybozord\AppData\Roaming\Crazy Viking Studios 2013-12-03 01:49 . 2013-12-03 01:49 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2013-12-03 01:37 . 2013-12-03 01:56 -------- d-----w- c:\programdata\Oracle 2013-12-03 01:37 . 2013-12-03 01:37 -------- d-----w- c:\program files (x86)\Common Files\Java 2013-12-02 02:00 . 2013-12-02 02:00 -------- d-----w- c:\windows\CheckSur 2013-12-01 19:17 . 2013-12-01 19:17 -------- d-----w- c:\users\Rybozord\AppData\Roaming\Ice-Pick Lodge . . . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-12-18 21:40 . 2012-04-29 06:48 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-12-18 21:40 . 2012-02-07 15:05 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-12-18 19:43 . 2011-06-22 04:25 66560 ----a-w- c:\windows\SysWow64\hbaapi.dll 2013-12-18 19:43 . 2009-07-13 23:43 7168 ----a-w- c:\windows\SysWow64\comcat.dll 2013-12-18 19:40 . 2011-06-22 04:25 137728 ----a-w- c:\windows\system32\wbem\WmiApRpl.dll 2013-12-18 19:37 . 2009-07-14 00:10 57344 ----a-w- c:\windows\system32\rasmbmgr.dll 2013-12-18 19:37 . 2011-06-22 04:24 33792 ----a-w- c:\windows\system32\profprov.dll 2013-12-18 19:36 . 2009-07-13 23:26 313856 ----a-w- c:\windows\system32\newdev.dll 2013-12-18 19:32 . 2009-07-13 23:19 92160 ----a-w- c:\windows\system32\drivers\cdfs.sys 2013-12-18 19:32 . 2009-07-13 23:52 17920 ----a-w- c:\windows\system32\appidcertstorecheck.exe 2013-12-18 19:32 . 2009-07-13 23:53 111616 ----a-w- c:\windows\system32\activeds.tlb 2013-11-19 10:21 . 2011-03-28 00:13 267936 ------w- c:\windows\system32\MpSigStub.exe 2013-11-14 02:00 . 2011-03-28 15:48 82896128 ----a-w- c:\windows\system32\MRT.exe 2013-10-18 14:57 . 2013-10-18 14:58 965000 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll 2013-10-12 08:45 . 2013-11-14 02:04 51712 ----a-w- c:\windows\system32\ie4uinit.exe 2013-10-12 08:45 . 2013-11-14 02:04 2241536 ----a-w- c:\windows\system32\wininet.dll 2013-10-12 08:45 . 2013-11-14 02:04 1364992 ----a-w- c:\windows\system32\urlmon.dll 2013-10-12 08:43 . 2013-11-14 02:04 19269632 ----a-w- c:\windows\system32\mshtml.dll 2013-10-12 08:43 . 2013-11-14 02:04 603136 ----a-w- c:\windows\system32\msfeeds.dll 2013-10-12 08:43 . 2013-11-14 02:04 855552 ----a-w- c:\windows\system32\jscript.dll 2013-10-12 08:43 . 2013-11-14 02:04 3959808 ----a-w- c:\windows\system32\jscript9.dll 2013-10-12 08:43 . 2013-11-14 02:04 53248 ----a-w- c:\windows\system32\jsproxy.dll 2013-10-12 08:43 . 2013-11-14 02:04 526336 ----a-w- c:\windows\system32\ieui.dll 2013-10-12 08:43 . 2013-11-14 02:04 67072 ----a-w- c:\windows\system32\iesetup.dll 2013-10-12 08:43 . 2013-11-14 02:04 39936 ----a-w- c:\windows\system32\iernonce.dll 2013-10-12 08:43 . 2013-11-14 02:04 136704 ----a-w- c:\windows\system32\iesysprep.dll 2013-10-12 08:43 . 2013-11-14 02:04 2648576 ----a-w- c:\windows\system32\iertutil.dll 2013-10-12 08:43 . 2013-11-14 02:04 15404544 ----a-w- c:\windows\system32\ieframe.dll 2013-10-12 07:03 . 2013-11-14 02:04 1767936 ----a-w- c:\windows\SysWow64\wininet.dll 2013-10-12 07:02 . 2013-11-14 02:04 2877952 ----a-w- c:\windows\SysWow64\jscript9.dll 2013-10-12 07:02 . 2013-11-14 02:04 61440 ----a-w- c:\windows\SysWow64\iesetup.dll 2013-10-12 07:02 . 2013-11-14 02:04 109056 ----a-w- c:\windows\SysWow64\iesysprep.dll 2013-10-12 06:35 . 2013-11-14 02:04 2706432 ----a-w- c:\windows\system32\mshtml.tlb 2013-10-12 06:08 . 2013-11-14 02:04 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb 2013-10-12 05:44 . 2013-11-14 02:04 89600 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe 2013-10-12 05:15 . 2013-11-14 02:04 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe 2013-10-12 02:30 . 2013-11-13 21:42 830464 ----a-w- c:\windows\system32\nshwfp.dll 2013-10-12 02:29 . 2013-11-13 21:42 859648 ----a-w- c:\windows\system32\IKEEXT.DLL 2013-10-12 02:29 . 2013-11-13 21:42 324096 ----a-w- c:\windows\system32\FWPUCLNT.DLL 2013-10-12 02:03 . 2013-11-13 21:42 656896 ----a-w- c:\windows\SysWow64\nshwfp.dll 2013-10-12 02:01 . 2013-11-13 21:42 216576 ----a-w- c:\windows\SysWow64\FWPUCLNT.DLL 2013-10-05 20:25 . 2013-11-13 21:42 1474048 ----a-w- c:\windows\system32\crypt32.dll 2013-10-05 19:57 . 2013-11-13 21:42 1168384 ----a-w- c:\windows\SysWow64\crypt32.dll 2013-10-03 02:23 . 2013-11-13 21:42 404480 ----a-w- c:\windows\system32\gdi32.dll 2013-10-03 02:00 . 2013-11-13 21:42 311808 ----a-w- c:\windows\SysWow64\gdi32.dll 2013-09-28 01:09 . 2013-11-13 21:42 497152 ----a-w- c:\windows\system32\drivers\afd.sys 2013-09-27 08:53 . 2013-09-27 08:53 248240 ----a-w- c:\windows\system32\drivers\MpFilter.sys 2013-09-27 08:53 . 2013-06-18 19:50 134944 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys 2013-09-25 02:26 . 2013-11-13 21:42 95680 ----a-w- c:\windows\system32\drivers\ksecdd.sys 2013-09-25 02:26 . 2013-11-13 21:42 154560 ----a-w- c:\windows\system32\drivers\ksecpkg.sys 2013-09-25 02:23 . 2013-11-13 21:42 135680 ----a-w- c:\windows\system32\sspicli.dll 2013-09-25 02:23 . 2013-11-13 21:42 28672 ----a-w- c:\windows\system32\sspisrv.dll 2013-09-25 02:23 . 2013-11-13 21:42 28160 ----a-w- c:\windows\system32\secur32.dll 2013-09-25 02:22 . 2013-11-13 21:42 340992 ----a-w- c:\windows\system32\schannel.dll 2013-09-25 02:21 . 2013-11-13 21:42 307200 ----a-w- c:\windows\system32\ncrypt.dll 2013-09-25 02:21 . 2013-11-13 21:42 1447936 ----a-w- c:\windows\system32\lsasrv.dll 2013-09-25 01:58 . 2013-11-13 21:42 96768 ----a-w- c:\windows\SysWow64\sspicli.dll 2013-09-25 01:57 . 2013-11-13 21:42 22016 ----a-w- c:\windows\SysWow64\secur32.dll 2013-09-25 01:57 . 2013-11-13 21:42 247808 ----a-w- c:\windows\SysWow64\schannel.dll 2013-09-25 01:56 . 2013-11-13 21:42 220160 ----a-w- c:\windows\SysWow64\ncrypt.dll 2013-09-25 01:03 . 2013-11-13 21:42 30720 ----a-w- c:\windows\system32\lsass.exe . . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-04-10 05:37 130736 ----a-w- c:\users\Rybozord\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-04-10 05:37 130736 ----a-w- c:\users\Rybozord\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-04-10 05:37 130736 ----a-w- c:\users\Rybozord\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NextLive"="c:\users\Rybozord\AppData\Roaming\newnext.me\nengine.dll" [2013-11-14 1283584] "Spybot-S&D Cleaning"="c:\program files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" [2013-09-20 3666224] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336] "mobilegeni daemon"="c:\program files (x86)\Mobogenie\DaemonProcess.exe" [2013-12-13 761024] "SDTray"="c:\program files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [2013-07-25 5624784] . c:\users\Rybozord\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\Rybozord\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-5-25 27776968] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Macroworx Filing Cabinets.lnk - d:\program files (x86)\Filing Cabinets v2.00\mwfc2.exe [2012-3-10 1867776] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux2"=wdmaud.drv . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0PCloudBroom64.exe \systemroot\system32\BroomData.bit\0\0sdnclean64.exe . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] @="Service" . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-] "NeroFilterCheck"=c:\windows\system32\NeroCheck.exe "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 Mobile Partner. RunOuc;Mobile Partner. OUC;c:\program files (x86)\Mobile Partner\UpdateDog\ouc.exe;c:\program files (x86)\Mobile Partner\UpdateDog\ouc.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R2 Wpm;Wpm Service;c:\programdata\WPM\wprotectmanager.exe;c:\programdata\WPM\wprotectmanager.exe [x] R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys;c:\windows\SYSNATIVE\Drivers\ssadadb.sys [x] R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [x] R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x] R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys;c:\windows\SYSNATIVE\epmntdrv.sys [x] R3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys;c:\windows\SYSNATIVE\EuGdiDrv.sys [x] R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ew_hwusbdev.sys [x] R3 ew_usbenumfilter;huawei_CompositeFilter;c:\windows\system32\DRIVERS\ew_usbenumfilter.sys;c:\windows\SYSNATIVE\DRIVERS\ew_usbenumfilter.sys [x] R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x] R3 huawei_cdcacm;huawei_cdcacm;c:\windows\system32\DRIVERS\ew_jucdcacm.sys;c:\windows\SYSNATIVE\DRIVERS\ew_jucdcacm.sys [x] R3 huawei_ext_ctrl;huawei_ext_ctrl;c:\windows\system32\DRIVERS\ew_juextctrl.sys;c:\windows\SYSNATIVE\DRIVERS\ew_juextctrl.sys [x] R3 huawei_wwanecm;huawei_wwanecm;c:\windows\system32\DRIVERS\ew_juwwanecm.sys;c:\windows\SYSNATIVE\DRIVERS\ew_juwwanecm.sys [x] R3 massfilter;Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys;c:\windows\SYSNATIVE\drivers\massfilter.sys [x] R3 massfilter_hs;USB Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter_hs.sys;c:\windows\SYSNATIVE\drivers\massfilter_hs.sys [x] R3 PSKMAD;PSKMAD;c:\windows\system32\DRIVERS\PSKMAD.sys;c:\windows\SYSNATIVE\DRIVERS\PSKMAD.sys [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [x] R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x] R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x] R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x] R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssadserd.sys [x] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x] R3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys;c:\windows\SYSNATIVE\DRIVERS\teamviewervpn.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x] R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x] R3 WatAdminSvc;Usługa Technologie aktywacji systemu Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys;c:\program files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [x] R3 XENfiltv;XENfiltv;c:\windows\system32\drivers\XENfiltv.sys;c:\windows\SYSNATIVE\drivers\XENfiltv.sys [x] S0 pavboot;pavboot;c:\windows\system32\drivers\pavboot64.sys;c:\windows\SYSNATIVE\drivers\pavboot64.sys [x] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x] S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x] S2 AMD Reservation Manager;AMD Reservation Manager;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [x] S2 HWDeviceService64.exe;HWDeviceService64.exe;c:\programdata\DatacardService\HWDeviceService64.exe;c:\programdata\DatacardService\HWDeviceService64.exe [x] S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x] S2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [x] S2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [x] S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [x] S2 SplashtopRemoteService;Splashtop® Remote Service;c:\program files (x86)\Splashtop\Splashtop Remote\SERVER\SRService.exe;c:\program files (x86)\Splashtop\Splashtop Remote\SERVER\SRService.exe [x] S2 SSUService;Splashtop Software Updater Service;c:\program files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe;c:\program files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe [x] S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x] S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x] S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys;c:\windows\SYSNATIVE\DRIVERS\ew_jubusenum.sys [x] S3 NisSrv;Inspekcja sieci firmy Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2009-06-17 10:11 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe . Zawartość folderu 'Zaplanowane zadania' . 2013-12-18 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-29 21:40] . 2013-12-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-26 22:23] . 2013-12-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-26 22:23] . 2013-12-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3218042876-828680532-3334976141-1000Core.job - c:\users\Rybozord\AppData\Local\Google\Update\GoogleUpdate.exe [2011-03-28 00:15] . 2013-12-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3218042876-828680532-3334976141-1000UA.job - c:\users\Rybozord\AppData\Local\Google\Update\GoogleUpdate.exe [2011-03-28 00:15] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-04-10 05:37 164016 ----a-w- c:\users\Rybozord\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-04-10 05:37 164016 ----a-w- c:\users\Rybozord\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-04-10 05:37 164016 ----a-w- c:\users\Rybozord\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2013-04-10 05:37 164016 ----a-w- c:\users\Rybozord\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ProfilerU"="c:\program files\SmartTechnology\Software\ProfilerU.exe" [2013-04-16 454144] "SaiMfd"="c:\program files\SmartTechnology\Software\SaiMfd.exe" [2013-04-16 158208] "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-10-23 1266912] . ------- Skan uzupełniający ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://aartemis.com/?type=hp&ts=1387396875&from=cor&uid=SAMSUNGXHD502HJ_S20BJ90Z938155 uDefault_Search_URL = hxxp://www.aartemis.com/web/?type=ds&ts=1387396875&from=cor&uid=SAMSUNGXHD502HJ_S20BJ90Z938155&q={searchTerms} mDefault_Search_URL = hxxp://www.aartemis.com/web/?type=ds&ts=1387396875&from=cor&uid=SAMSUNGXHD502HJ_S20BJ90Z938155&q={searchTerms} mDefault_Page_URL = hxxp://aartemis.com/?type=hp&ts=1387396875&from=cor&uid=SAMSUNGXHD502HJ_S20BJ90Z938155 mStart Page = hxxp://aartemis.com/?type=hp&ts=1387396875&from=cor&uid=SAMSUNGXHD502HJ_S20BJ90Z938155 mLocal Page = c:\windows\SysWOW64\blank.htm mSearch Page = hxxp://www.aartemis.com/web/?type=ds&ts=1387396875&from=cor&uid=SAMSUNGXHD502HJ_S20BJ90Z938155&q={searchTerms} uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s mSearchAssistant = about:blank IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 Trusted Zone: clonewarsadventures.com Trusted Zone: freerealms.com Trusted Zone: mks.com.pl Trusted Zone: soe.com Trusted Zone: sony.com TCP: DhcpNameServer = 192.168.0.1 FF - ProfilePath - c:\users\Rybozord\AppData\Roaming\Mozilla\Firefox\Profiles\np4dh677.default\ FF - prefs.js: browser.search.defaulturl - hxxp://websearch.helpmefindyour.info/?pid=658&r=2013/04/10&hid=961401851&lg=EN&cc=PL&l=1&q= FF - prefs.js: browser.search.selectedEngine - aartemis FF - prefs.js: browser.startup.homepage - hxxp://aartemis.com/?type=hp&ts=1387396875&from=cor&uid=SAMSUNGXHD502HJ_S20BJ90Z938155 FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&dt=071413&q= . - - - - USUNIĘTO PUSTE WPISY - - - - . URLSearchHooks-{5e5ab302-7f65-44cd-8211-c1d4caaccea3} - (no file) URLSearchHooks-{e746508c-f9c9-49dc-8642-4b58f97c3486} - (no file) Wow6432Node-HKCU-Run-Opos - (no file) Notify-SDWinLogon - SDWinLogon.dll WebBrowser-{5E5AB302-7F65-44CD-8211-C1D4CAACCEA3} - (no file) AddRemove-GOGPACKPAPERSPLEASE_is1 - c:\gog games\Papers AddRemove-SkanerOnline - c:\windows\system32\SkanerOnlineUninstall.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2487367 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2656351 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2736428 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2742595 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2858302v2 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{A49402DD-2781-3782-B0CF-52BDA349E3F3}.KB2478663 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\ClientLP\setup.exe AddRemove-{A49402DD-2781-3782-B0CF-52BDA349E3F3}.KB2518870 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\ClientLP\setup.exe AddRemove-{B7B8D9A9-EFCB-4c2f-8117-7A2A32D0BC58} - c:\program files (x86)\Common Files\EAInstaller\Shank 2\Cleanup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2160841 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2446708 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2473228 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2478663 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2518870 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2539636 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2572078 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2604121 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2633870 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656351 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656368 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656368v2 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656405 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2686827 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2729449 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2736428 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2737019 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2742595 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2789642 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2804576 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2835393 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2840628 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2840628v2 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2858302v2 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-Hex Online - c:\windows\system32\javaws.exe . . . --------------------- ZABLOKOWANE KLUCZE REJESTRU --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Czas ukończenia: 2013-12-18 22:59:17 ComboFix-quarantined-files.txt 2013-12-18 21:59 . Przed: 5 258 625 024 bajtów wolnych Po: 5 096 767 488 bajtów wolnych . - - End Of File - - A53C33866124D93D757E971D36E1ABC0 A36C5E4F47E84449FF07ED3517B43A31