ComboFix 14-12-14.01 - Asus 2014-12-15 15:34:53.1.2 - x64 Microsoft Windows 7 Ultimate 6.1.7601.1.1250.48.1045.18.4095.930 [GMT 1:00] Uruchomiony z: c:\users\Asus\Downloads\ComboFix.exe SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\programdata\ntuser.pol . . ((((((((((((((((((((((((( Pliki utworzone od 2014-11-15 do 2014-12-15 ))))))))))))))))))))))))))))))) . . 2014-12-15 14:40 . 2014-12-15 14:40 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-12-15 04:22 . 2014-12-15 04:22 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{EBE97498-E699-42F7-8F48-97A32288E7FF}\offreg.dll 2014-12-15 04:22 . 2014-11-02 04:20 11632448 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{EBE97498-E699-42F7-8F48-97A32288E7FF}\mpengine.dll 2014-12-01 11:08 . 2010-03-05 13:37 109248 ----a-w- c:\windows\SysWow64\mswinsck.ocx 2014-11-17 12:45 . 2014-11-17 12:45 -------- d-----w- c:\program files (x86)\Common Files\Skype 2014-11-17 12:45 . 2014-11-17 12:45 -------- d-----r- c:\program files (x86)\Skype . . . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-12-09 18:59 . 2014-06-06 16:27 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2014-12-09 18:59 . 2014-06-06 16:27 701104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2014-11-04 13:30 . 2014-05-22 15:02 275080 ------w- c:\windows\system32\MpSigStub.exe 2014-10-30 08:56 . 2014-11-06 12:00 31520 ----a-w- c:\windows\system32\nvhdap64.dll 2014-10-30 08:56 . 2014-11-06 12:00 197408 ----a-w- c:\windows\system32\drivers\nvhda64v.sys 2014-10-30 08:56 . 2014-05-22 08:13 1538880 ----a-w- c:\windows\system32\nvhdagenco6420103.dll 2014-10-30 04:53 . 2014-11-06 12:00 961224 ----a-w- c:\windows\system32\NvIFR64.dll 2014-10-30 04:53 . 2014-11-06 12:00 932168 ----a-w- c:\windows\system32\NvFBC64.dll 2014-10-30 04:53 . 2014-11-06 12:00 922944 ----a-w- c:\windows\SysWow64\NvIFR.dll 2014-10-30 04:53 . 2014-11-06 12:00 896144 ----a-w- c:\windows\SysWow64\NvFBC.dll 2014-10-30 04:53 . 2014-11-06 12:00 870112 ----a-w- c:\windows\SysWow64\nvumdshim.dll 2014-10-30 04:53 . 2014-11-06 12:00 4289856 ----a-w- c:\windows\system32\nvcuvid.dll 2014-10-30 04:53 . 2014-11-06 12:00 4011840 ----a-w- c:\windows\SysWow64\nvcuvid.dll 2014-10-30 04:53 . 2014-11-06 12:00 352016 ----a-w- c:\windows\system32\nvoglshim64.dll 2014-10-30 04:53 . 2014-11-06 12:00 31890064 ----a-w- c:\windows\system32\nvoglv64.dll 2014-10-30 04:53 . 2014-11-06 12:00 303600 ----a-w- c:\windows\SysWow64\nvoglshim32.dll 2014-10-30 04:53 . 2014-11-06 12:00 19966856 ----a-w- c:\windows\system32\nvd3dumx.dll 2014-10-30 04:53 . 2014-11-06 12:00 1876296 ----a-w- c:\windows\system32\nvdispco6434460.dll 2014-10-30 04:53 . 2014-11-06 12:00 174856 ----a-w- c:\windows\system32\nvinitx.dll 2014-10-30 04:53 . 2014-11-06 12:00 156840 ----a-w- c:\windows\SysWow64\nvinit.dll 2014-10-30 04:53 . 2014-11-06 12:00 1539272 ----a-w- c:\windows\system32\nvdispgenco6434460.dll 2014-10-30 04:53 . 2014-11-06 12:00 14029400 ----a-w- c:\windows\system32\nvopencl.dll 2014-10-30 04:53 . 2014-11-06 12:00 13942368 ----a-w- c:\windows\system32\nvcuda.dll 2014-10-30 04:53 . 2014-11-06 12:00 13189832 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys 2014-10-30 04:53 . 2014-11-06 12:00 11395672 ----a-w- c:\windows\SysWow64\nvopencl.dll 2014-10-30 04:53 . 2014-11-06 12:00 11333848 ----a-w- c:\windows\SysWow64\nvcuda.dll 2014-10-30 04:53 . 2014-11-06 12:00 20922696 ----a-w- c:\windows\system32\nvcompiler.dll 2014-10-30 04:53 . 2014-11-06 12:00 17258696 ----a-w- c:\windows\SysWow64\nvcompiler.dll 2014-10-30 04:53 . 2014-05-22 08:24 73872 ----a-w- c:\windows\system32\OpenCL.dll 2014-10-30 04:53 . 2014-05-22 08:24 60744 ----a-w- c:\windows\SysWow64\OpenCL.dll 2014-10-30 04:53 . 2014-05-22 08:13 20966504 ----a-w- c:\windows\system32\nvwgf2umx.dll 2014-10-30 04:53 . 2014-05-22 08:13 987008 ----a-w- c:\windows\system32\nvumdshimx.dll 2014-10-30 04:53 . 2014-05-22 08:13 3237528 ----a-w- c:\windows\system32\nvapi64.dll 2014-10-30 04:53 . 2014-05-22 08:13 2849224 ----a-w- c:\windows\SysWow64\nvapi.dll 2014-10-30 04:53 . 2014-05-22 08:13 24554824 ----a-w- c:\windows\SysWow64\nvoglv32.dll 2014-10-30 04:53 . 2014-05-22 08:13 18497600 ----a-w- c:\windows\SysWow64\nvwgf2um.dll 2014-10-30 04:53 . 2014-05-22 08:13 16886168 ----a-w- c:\windows\SysWow64\nvd3dum.dll 2014-10-30 02:10 . 2014-05-22 08:25 6880968 ----a-w- c:\windows\system32\nvcpl.dll 2014-10-30 02:10 . 2014-05-22 08:25 3533632 ----a-w- c:\windows\system32\nvsvc64.dll 2014-10-30 02:10 . 2014-05-22 08:25 935232 ----a-w- c:\windows\system32\nvvsvc.exe 2014-10-30 02:10 . 2014-05-22 08:25 61640 ----a-w- c:\windows\system32\nvshext.dll 2014-10-30 02:10 . 2014-05-22 08:25 2558792 ----a-w- c:\windows\system32\nvsvcr.dll 2014-10-30 02:10 . 2014-05-22 08:25 385352 ----a-w- c:\windows\system32\nvmctray.dll 2014-10-30 00:56 . 2014-11-06 12:11 614728 ----a-w- c:\windows\SysWow64\nvStreaming.exe 2014-10-27 00:34 . 2014-05-22 08:25 4066553 ----a-w- c:\windows\system32\nvcoproc.bin 2014-10-22 13:31 . 2014-10-23 00:28 48776 ----a-w- c:\windows\system32\drivers\{bfb10c93-5530-4015-9a3f-61dfa880af58}w64.sys 2014-10-21 23:30 . 2014-10-22 12:22 48776 ----a-w- c:\windows\system32\drivers\{a3650fd0-e039-4b5a-b4cd-52f4d60871bd}w64.sys 2014-10-21 09:59 . 2014-10-21 20:10 48776 ----a-w- c:\windows\system32\drivers\{b75d34e3-cf9c-41d4-bb80-1d1cbdd91a2e}w64.sys 2014-10-20 20:08 . 2014-10-21 08:00 48776 ----a-w- c:\windows\system32\drivers\{79ff6e5c-8913-4b1b-8d72-66f9fa5a754e}w64.sys 2014-10-19 09:07 . 2014-10-19 20:08 48776 ----a-w- c:\windows\system32\drivers\{1ffea19d-7c99-423a-a198-c6b90ff23847}w64.sys 2014-10-18 19:15 . 2014-10-19 10:16 48776 ----a-w- c:\windows\system32\drivers\{3e621eab-ed2c-4c84-aec5-15b99c4c467e}w64.sys 2014-10-17 22:10 . 2014-10-18 14:02 48776 ----a-w- c:\windows\system32\drivers\{6c040542-e4d8-449f-9075-ee080e3c93a3}w64.sys 2014-10-17 08:05 . 2014-10-17 20:46 48776 ----a-w- c:\windows\system32\drivers\{372d03ae-4cb6-4087-9149-bc1c4bc6238d}w64.sys 2014-10-16 18:46 . 2014-10-17 04:34 48776 ----a-w- c:\windows\system32\drivers\{29939914-f8df-4dc3-800d-6e4253a04e3e}w64.sys 2014-10-16 14:08 . 2014-10-17 00:34 48776 ----a-w- c:\windows\system32\drivers\{d26c8a52-bad3-4ccc-827a-07a116647557}w64.sys 2014-10-16 07:52 . 2014-10-16 20:29 48776 ----a-w- c:\windows\system32\drivers\{e90ad290-24ce-44cf-8a63-caa4cb6f0cbb}w64.sys 2014-10-14 23:38 . 2014-10-15 09:03 48776 ----a-w- c:\windows\system32\drivers\{1451f279-8b19-43e6-92be-fda8b8d810d7}w64.sys 2014-10-14 15:30 . 2014-10-15 01:03 48776 ----a-w- c:\windows\system32\drivers\{122dd706-8b40-4a1c-86fc-9ffea684e767}w64.sys 2014-10-14 10:53 . 2014-10-14 20:57 48776 ----a-w- c:\windows\system32\drivers\{0df690c1-d9b3-4141-afdc-d714e19d9a12}w64.sys 2014-10-04 06:35 . 2014-11-06 12:12 1291280 ----a-w- c:\windows\SysWow64\nvspbridge.dll 2014-10-04 06:35 . 2014-05-22 08:26 2197680 ----a-w- c:\windows\SysWow64\nvspcap.dll 2014-10-04 06:34 . 2014-11-06 12:12 1715224 ----a-w- c:\windows\system32\nvspbridge64.dll 2014-10-04 06:34 . 2014-05-22 08:26 2800296 ----a-w- c:\windows\system32\nvspcap64.dll 2014-09-17 15:39 . 2014-09-17 15:38 122584 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys . . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)] @="{8BA85C75-763B-4103-94EB-9470F12FE0F7}" [HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}] 2012-10-01 18:38 1720976 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)] @="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}" [HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}] 2012-10-01 18:38 1720976 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)] @="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}" [HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}] 2012-10-01 18:38 1720976 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CGFLoader"="c:\program files (x86)\Calibrize\CalibrizeLoader.exe" [2007-11-26 1961984] "CalibrizeResume"="c:\program files (x86)\Calibrize\CalibrizeResume.exe" [2007-11-26 413696] "f.lux"="c:\users\Asus\AppData\Local\FluxSoftware\Flux\flux.exe" [2013-10-23 1017224] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-09-23 926896] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2014-07-25 256896] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x] R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x] R3 WatAdminSvc;Usługa Technologie aktywacji systemu Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] R4 Update webget;Update webget;c:\program files (x86)\webget\updatewebget.exe;c:\program files (x86)\webget\updatewebget.exe [x] R4 Util webget;Util webget;c:\program files (x86)\webget\bin\utilwebget.exe;c:\program files (x86)\webget\bin\utilwebget.exe [x] S1 {0df690c1-d9b3-4141-afdc-d714e19d9a12}w64;{0df690c1-d9b3-4141-afdc-d714e19d9a12}w64;c:\windows\system32\drivers\{0df690c1-d9b3-4141-afdc-d714e19d9a12}w64.sys;c:\windows\SYSNATIVE\drivers\{0df690c1-d9b3-4141-afdc-d714e19d9a12}w64.sys [x] S1 {122dd706-8b40-4a1c-86fc-9ffea684e767}w64;{122dd706-8b40-4a1c-86fc-9ffea684e767}w64;c:\windows\system32\drivers\{122dd706-8b40-4a1c-86fc-9ffea684e767}w64.sys;c:\windows\SYSNATIVE\drivers\{122dd706-8b40-4a1c-86fc-9ffea684e767}w64.sys [x] S1 {1451f279-8b19-43e6-92be-fda8b8d810d7}w64;{1451f279-8b19-43e6-92be-fda8b8d810d7}w64;c:\windows\system32\drivers\{1451f279-8b19-43e6-92be-fda8b8d810d7}w64.sys;c:\windows\SYSNATIVE\drivers\{1451f279-8b19-43e6-92be-fda8b8d810d7}w64.sys [x] S1 {1ffea19d-7c99-423a-a198-c6b90ff23847}w64;{1ffea19d-7c99-423a-a198-c6b90ff23847}w64;c:\windows\system32\drivers\{1ffea19d-7c99-423a-a198-c6b90ff23847}w64.sys;c:\windows\SYSNATIVE\drivers\{1ffea19d-7c99-423a-a198-c6b90ff23847}w64.sys [x] S1 {29939914-f8df-4dc3-800d-6e4253a04e3e}w64;{29939914-f8df-4dc3-800d-6e4253a04e3e}w64;c:\windows\system32\drivers\{29939914-f8df-4dc3-800d-6e4253a04e3e}w64.sys;c:\windows\SYSNATIVE\drivers\{29939914-f8df-4dc3-800d-6e4253a04e3e}w64.sys [x] S1 {372d03ae-4cb6-4087-9149-bc1c4bc6238d}w64;{372d03ae-4cb6-4087-9149-bc1c4bc6238d}w64;c:\windows\system32\drivers\{372d03ae-4cb6-4087-9149-bc1c4bc6238d}w64.sys;c:\windows\SYSNATIVE\drivers\{372d03ae-4cb6-4087-9149-bc1c4bc6238d}w64.sys [x] S1 {3e621eab-ed2c-4c84-aec5-15b99c4c467e}w64;{3e621eab-ed2c-4c84-aec5-15b99c4c467e}w64;c:\windows\system32\drivers\{3e621eab-ed2c-4c84-aec5-15b99c4c467e}w64.sys;c:\windows\SYSNATIVE\drivers\{3e621eab-ed2c-4c84-aec5-15b99c4c467e}w64.sys [x] S1 {55685567-4840-4a91-962b-49a412e9485a}w64;{55685567-4840-4a91-962b-49a412e9485a}w64;c:\windows\system32\drivers\{55685567-4840-4a91-962b-49a412e9485a}w64.sys;c:\windows\SYSNATIVE\drivers\{55685567-4840-4a91-962b-49a412e9485a}w64.sys [x] S1 {6c040542-e4d8-449f-9075-ee080e3c93a3}w64;{6c040542-e4d8-449f-9075-ee080e3c93a3}w64;c:\windows\system32\drivers\{6c040542-e4d8-449f-9075-ee080e3c93a3}w64.sys;c:\windows\SYSNATIVE\drivers\{6c040542-e4d8-449f-9075-ee080e3c93a3}w64.sys [x] S1 {79ff6e5c-8913-4b1b-8d72-66f9fa5a754e}w64;{79ff6e5c-8913-4b1b-8d72-66f9fa5a754e}w64;c:\windows\system32\drivers\{79ff6e5c-8913-4b1b-8d72-66f9fa5a754e}w64.sys;c:\windows\SYSNATIVE\drivers\{79ff6e5c-8913-4b1b-8d72-66f9fa5a754e}w64.sys [x] S1 {a3650fd0-e039-4b5a-b4cd-52f4d60871bd}w64;{a3650fd0-e039-4b5a-b4cd-52f4d60871bd}w64;c:\windows\system32\drivers\{a3650fd0-e039-4b5a-b4cd-52f4d60871bd}w64.sys;c:\windows\SYSNATIVE\drivers\{a3650fd0-e039-4b5a-b4cd-52f4d60871bd}w64.sys [x] S1 {b75d34e3-cf9c-41d4-bb80-1d1cbdd91a2e}w64;{b75d34e3-cf9c-41d4-bb80-1d1cbdd91a2e}w64;c:\windows\system32\drivers\{b75d34e3-cf9c-41d4-bb80-1d1cbdd91a2e}w64.sys;c:\windows\SYSNATIVE\drivers\{b75d34e3-cf9c-41d4-bb80-1d1cbdd91a2e}w64.sys [x] S1 {bfb10c93-5530-4015-9a3f-61dfa880af58}w64;{bfb10c93-5530-4015-9a3f-61dfa880af58}w64;c:\windows\system32\drivers\{bfb10c93-5530-4015-9a3f-61dfa880af58}w64.sys;c:\windows\SYSNATIVE\drivers\{bfb10c93-5530-4015-9a3f-61dfa880af58}w64.sys [x] S1 {d26c8a52-bad3-4ccc-827a-07a116647557}w64;{d26c8a52-bad3-4ccc-827a-07a116647557}w64;c:\windows\system32\drivers\{d26c8a52-bad3-4ccc-827a-07a116647557}w64.sys;c:\windows\SYSNATIVE\drivers\{d26c8a52-bad3-4ccc-827a-07a116647557}w64.sys [x] S1 {e90ad290-24ce-44cf-8a63-caa4cb6f0cbb}w64;{e90ad290-24ce-44cf-8a63-caa4cb6f0cbb}w64;c:\windows\system32\drivers\{e90ad290-24ce-44cf-8a63-caa4cb6f0cbb}w64.sys;c:\windows\SYSNATIVE\drivers\{e90ad290-24ce-44cf-8a63-caa4cb6f0cbb}w64.sys [x] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x] S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x] S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x] S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x] S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x] S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x] S3 yukonw7;Sterownik miniportu NDIS6.2 dla kontrolera Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2014-12-09 18:31 1087816 ----a-w- c:\program files (x86)\Google\Chrome\Application\39.0.2171.95\Installer\chrmstp.exe . Zawartość folderu 'Zaplanowane zadania' . 2014-12-15 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-06 18:59] . 2014-12-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-09-18 13:13] . 2014-12-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-09-18 13:13] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)] @="{8BA85C75-763B-4103-94EB-9470F12FE0F7}" [HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}] 2012-10-01 18:37 2322576 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)] @="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}" [HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}] 2012-10-01 18:37 2322576 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)] @="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}" [HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}] 2012-10-01 18:37 2322576 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GGDriveOverlay1] @="{E68D0A50-3C40-4712-B90D-DCFA93FF2534}" [HKEY_CLASSES_ROOT\CLSID\{E68D0A50-3C40-4712-B90D-DCFA93FF2534}] 2013-01-17 14:43 2023936 ----a-w- c:\programdata\GG\ggdrive\ggdrive-overlay.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GGDriveOverlay2] @="{E68D0A51-3C40-4712-B90D-DCFA93FF2534}" [HKEY_CLASSES_ROOT\CLSID\{E68D0A51-3C40-4712-B90D-DCFA93FF2534}] 2013-01-17 14:43 2023936 ----a-w- c:\programdata\GG\ggdrive\ggdrive-overlay.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GGDriveOverlay3] @="{E68D0A52-3C40-4712-B90D-DCFA93FF2534}" [HKEY_CLASSES_ROOT\CLSID\{E68D0A52-3C40-4712-B90D-DCFA93FF2534}] 2013-01-17 14:43 2023936 ----a-w- c:\programdata\GG\ggdrive\ggdrive-overlay.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GGDriveOverlay4] @="{E68D0A53-3C40-4712-B90D-DCFA93FF2534}" [HKEY_CLASSES_ROOT\CLSID\{E68D0A53-3C40-4712-B90D-DCFA93FF2534}] 2013-01-17 14:43 2023936 ----a-w- c:\programdata\GG\ggdrive\ggdrive-overlay.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-10-04 2462536] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2014-05-09 13672152] "ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-10-04 2800296] . ------- Skan uzupełniający ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://rts.dsrlte.com?affID=na mLocal Page = c:\windows\SysWOW64\blank.htm IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\MICROS~2\Office15\EXCEL.EXE/3000 IE: Wyślij &do programu OneNote - c:\progra~1\MICROS~2\Office15\ONBttnIE.dll/105 TCP: DhcpNameServer = 192.168.1.254 Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL FF - ProfilePath - c:\users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\b8jhaqdo.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.google.pl/ FF - prefs.js: keyword.URL - user_pref(extensions.autoDisableScopes,14); . - - - - USUNIĘTO PUSTE WPISY - - - - . Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file) . . . --------------------- ZABLOKOWANE KLUCZE REJESTRU --------------------- . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Czas ukończenia: 2014-12-15 15:42:05 ComboFix-quarantined-files.txt 2014-12-15 14:42 . Przed: 1 640 775 680 bajtów wolnych Po: 3 709 546 496 bajtów wolnych . - - End Of File - - 5A6D8580A7C7F896C39CB5DB3D18F54C A36C5E4F47E84449FF07ED3517B43A31