Skocz do zawartości
WAŻNE - Użytkownicy uprawnieni do pomocy
WAŻNE - Zakładanie tematu: obowiązkowe logi
Nadchodzące zmiany w logowaniu

Combofix

ustasiak15

Przez ustasiak15
w Dział pomocy doraźnej

Rekomendowane odpowiedzi

ustasiak15

ustasiak15

Opublikowano
Opublikowano

ComboFix 18-08-08.01 - marekS 2019-01-17   9:21.1.2 - x86
Uruchomiony z: c:\users\marekS\Downloads\ComboFix.exe
 * Utworzono nowy punkt przywracania
.
.
(((((((((((((((((((((((((   Pliki utworzone od 2018-12-17 do 2019-01-17  )))))))))))))))))))))))))))))))
.
.
2019-01-17 08:29 . 2019-01-17 08:29    --------    d-----w-    c:\users\Default\AppData\Local\temp
2019-01-17 07:26 . 2019-01-17 07:26    --------    d-----w-    c:\programdata\bdch
2019-01-17 05:30 . 2019-01-17 05:30    75172    ----a-w-    c:\programdata\agent.update.1547703003.bdinstall.v2.bin
2019-01-17 05:23 . 2019-01-17 05:23    --------    d-----w-    c:\programdata\Bitdefender
2019-01-17 05:23 . 2018-12-03 16:06    241840    ----a-w-    c:\windows\system32\drivers\edrsensor.sys
2019-01-17 05:23 . 2018-11-20 09:42    211248    ----a-w-    c:\windows\system32\drivers\gzflt.sys
2019-01-17 05:22 . 2018-10-29 10:24    1115400    ----a-w-    c:\windows\system32\drivers\atc.sys
2019-01-17 05:22 . 2018-12-04 16:28    255392    ----a-w-    c:\windows\system32\drivers\bddci.sys
2019-01-17 05:22 . 2018-11-19 12:09    317808    ----a-w-    c:\windows\system32\drivers\gemma.sys
2019-01-17 05:21 . 2018-12-07 04:10    522480    ----a-w-    c:\windows\system32\drivers\trufos.sys
2019-01-17 05:17 . 2019-01-17 08:33    --------    d-----w-    c:\program files\Bitdefender Antivirus Free
2019-01-17 05:05 . 2019-01-17 05:05    99420    ----a-w-    c:\programdata\agent.1547701507.bdinstall.v2.bin
2019-01-17 05:05 . 2019-01-17 05:30    --------    d-----w-    c:\program files\Bitdefender Agent
2019-01-17 05:05 . 2019-01-17 05:05    --------    d-----w-    c:\programdata\Bitdefender Agent
2019-01-14 07:41 . 2019-01-14 07:41    --------    d-----w-    c:\programdata\Licenses
2019-01-13 16:31 . 2019-01-13 16:31    --------    d-----w-    c:\program files\FastStone Image Viewer
2019-01-13 08:35 . 2019-01-13 08:35    --------    d-----w-    c:\programdata\Ashampoo
2019-01-13 08:35 . 2019-01-13 08:35    --------    d-----w-    c:\program files\Ashampoo
2019-01-12 18:41 . 2019-01-12 18:41    --------    d-----w-    c:\program files\Windows Live
2019-01-12 15:43 . 2019-01-12 15:47    842240    ----a-w-    c:\windows\system32\FlashPlayerApp.exe
2019-01-12 15:43 . 2019-01-12 15:47    175104    ----a-w-    c:\windows\system32\FlashPlayerCPLApp.cpl
2019-01-12 14:04 . 2019-01-12 14:04    --------    d-----w-    c:\windows\system32\appraiser
2019-01-12 14:04 . 2019-01-12 14:04    --------    d-s---w-    c:\windows\system32\CompatTel
2019-01-12 12:04 . 2011-03-11 05:39    143744    ----a-w-    c:\windows\system32\drivers\nvstor.sys
2019-01-12 12:04 . 2011-03-11 05:39    117120    ----a-w-    c:\windows\system32\drivers\nvraid.sys
2019-01-12 12:04 . 2011-03-11 05:38    332160    ----a-w-    c:\windows\system32\drivers\iaStorV.sys
2019-01-12 12:04 . 2011-03-11 05:38    80256    ----a-w-    c:\windows\system32\drivers\amdsata.sys
2019-01-12 12:04 . 2011-03-11 05:38    22400    ----a-w-    c:\windows\system32\drivers\amdxata.sys
2019-01-12 12:04 . 2011-03-11 05:33    1699328    ----a-w-    c:\windows\system32\esent.dll
2019-01-12 12:04 . 2011-03-11 05:31    74240    ----a-w-    c:\windows\system32\fsutil.exe
2019-01-12 11:58 . 2014-12-11 17:47    74240    ----a-w-    c:\windows\system32\TSWbPrxy.exe
2019-01-12 11:58 . 2015-07-16 19:12    856064    ----a-w-    c:\windows\system32\rdvidcrl.dll
2019-01-12 11:58 . 2015-07-16 19:12    53248    ----a-w-    c:\windows\system32\tsgqec.dll
2019-01-12 11:58 . 2015-07-16 19:12    6131200    ----a-w-    c:\windows\system32\mstscax.dll
2019-01-12 11:58 . 2015-07-16 15:14    355840    ----a-w-    c:\windows\system32\wksprt.exe
2019-01-12 11:55 . 2014-07-09 01:29    6144    ----a-w-    c:\windows\system32\KBDYAK.DLL
2019-01-12 11:55 . 2014-07-09 01:29    6144    ----a-w-    c:\windows\system32\KBDBASH.DLL
2019-01-12 11:54 . 2013-11-26 08:16    3419136    ----a-w-    c:\windows\system32\d2d1.dll
2019-01-12 11:02 . 2012-08-23 14:44    14848    ----a-w-    c:\windows\system32\drivers\rdpvideominiport.sys
2019-01-12 11:02 . 2012-08-23 11:12    192000    ----a-w-    c:\windows\system32\rdpendp_winip.dll
2019-01-12 10:56 . 2019-01-12 10:56    --------    d-----w-    c:\program files\Mozilla Thunderbird
2019-01-12 10:55 . 2013-10-01 23:45    32256    ----a-w-    c:\windows\system32\TsUsbGDCoInstaller.dll
2019-01-12 10:55 . 2013-10-02 00:32    12800    ----a-w-    c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2019-01-12 10:55 . 2013-10-02 00:42    49152    ----a-w-    c:\windows\system32\drivers\TsUsbFlt.sys
2019-01-12 10:55 . 2013-10-02 00:30    14336    ----a-w-    c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2019-01-12 10:55 . 2013-10-02 00:14    50176    ----a-w-    c:\windows\system32\MsRdpWebAccess.dll
2019-01-12 10:55 . 2013-10-02 00:14    17920    ----a-w-    c:\windows\system32\wksprtPS.dll
2019-01-12 10:55 . 2013-10-01 22:34    1068544    ----a-w-    c:\windows\system32\mstsc.exe
2019-01-12 10:31 . 2015-09-14 12:03    38520    ----a-w-    c:\windows\system32\drivers\rtlivnry.sys
2019-01-12 09:14 . 2015-09-14 12:03    38520    ----a-w-    c:\windows\system32\drivers\DasPtct.SYS
2019-01-12 07:57 . 2018-12-06 02:35    2405376    ----a-w-    c:\windows\system32\win32k.sys
2019-01-12 07:47 . 2016-04-14 13:49    603648    ----a-w-    c:\windows\system32\d3d10level9.dll
2019-01-11 18:56 . 2019-01-11 18:56    9728    ---ha-w-    c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2019-01-11 17:17 . 2017-04-27 22:50    3550208    ----a-w-    c:\windows\system32\D3DCompiler_47.dll
2019-01-11 16:59 . 2012-07-26 02:33    66560    ----a-w-    c:\windows\system32\drivers\WUDFPf.sys
2019-01-11 16:59 . 2012-07-26 02:32    155136    ----a-w-    c:\windows\system32\drivers\WUDFRd.sys
2019-01-11 16:59 . 2012-07-26 03:21    196608    ----a-w-    c:\windows\system32\WUDFHost.exe
2019-01-11 16:59 . 2012-07-26 03:20    73216    ----a-w-    c:\windows\system32\WUDFSvc.dll
2019-01-11 16:59 . 2012-07-26 03:20    613888    ----a-w-    c:\windows\system32\WUDFx.dll
2019-01-11 16:59 . 2012-07-26 03:20    38912    ----a-w-    c:\windows\system32\WUDFCoinstaller.dll
2019-01-11 16:59 . 2012-07-26 03:20    172032    ----a-w-    c:\windows\system32\WUDFPlatform.dll
2019-01-11 16:56 . 2014-03-09 21:47    99480    ----a-w-    c:\windows\system32\infocardapi.dll
2019-01-11 16:56 . 2014-06-30 22:14    8856    ----a-w-    c:\windows\system32\icardres.dll
2019-01-11 16:56 . 2014-03-09 21:47    619672    ----a-w-    c:\windows\system32\icardagt.exe
2019-01-11 16:56 . 2014-06-06 06:16    35480    ----a-w-    c:\windows\system32\TsWpfWrp.exe
2019-01-11 16:55 . 2012-03-01 05:46    19824    ----a-w-    c:\windows\system32\drivers\fs_rec.sys
2019-01-11 16:55 . 2012-03-01 05:29    5120    ----a-w-    c:\windows\system32\wmi.dll
2019-01-11 16:11 . 2015-07-30 13:13    103120    ----a-w-    c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2019-01-11 15:58 . 2016-01-22 06:04    642048    ----a-w-    c:\windows\system32\CPFilters.dll
2019-01-11 15:58 . 2016-01-22 06:04    535040    ----a-w-    c:\windows\system32\EncDec.dll
2019-01-11 15:57 . 2015-05-25 18:01    92160    ----a-w-    c:\windows\system32\sechost.dll
2019-01-11 15:57 . 2015-05-25 18:00    364544    ----a-w-    c:\windows\system32\tracerpt.exe
2019-01-11 15:57 . 2015-05-25 18:00    82944    ----a-w-    c:\windows\system32\logman.exe
2019-01-11 15:57 . 2015-05-25 18:00    40448    ----a-w-    c:\windows\system32\typeperf.exe
2019-01-11 15:57 . 2015-05-25 18:00    37888    ----a-w-    c:\windows\system32\relog.exe
2019-01-11 15:57 . 2015-05-25 18:00    17408    ----a-w-    c:\windows\system32\diskperf.exe
2019-01-11 15:56 . 2015-07-22 17:53    635392    ----a-w-    c:\windows\system32\tdh.dll
2019-01-11 15:54 . 2015-04-18 02:56    342016    ----a-w-    c:\windows\system32\certcli.dll
2019-01-11 15:54 . 2014-06-18 01:52    399360    ----a-w-    c:\program files\Common Files\Microsoft Shared\ink\tabskb.dll
2019-01-11 15:54 . 2014-06-18 01:51    646144    ----a-w-    c:\windows\system32\osk.exe
2019-01-11 15:54 . 2015-06-03 20:22    355456    ----a-w-    c:\windows\system32\fveapi.dll
2019-01-11 15:54 . 2015-06-03 20:22    257864    ----a-w-    c:\windows\system32\wbem\Win32_Tpm.dll
2019-01-11 15:54 . 2016-02-05 18:44    97792    ----a-w-    c:\windows\system32\fveapibase.dll
2019-01-11 15:54 . 2016-02-05 17:33    15360    ----a-w-    c:\windows\system32\tbs.dll
2019-01-11 15:54 . 2014-08-01 11:35    793600    ----a-w-    c:\windows\system32\TSWorkspace.dll
2019-01-11 15:52 . 2013-05-10 03:20    24576    ----a-w-    c:\windows\system32\cryptdlg.dll
2019-01-11 15:51 . 2015-04-11 03:07    54656    ----a-w-    c:\windows\system32\drivers\stream.sys
2019-01-11 15:22 . 2015-12-08 21:54    1620992    ----a-w-    c:\windows\system32\WMVDECOD.DLL
2019-01-11 15:21 . 2013-06-25 22:56    527064    ----a-w-    c:\windows\system32\drivers\Wdf01000.sys
2019-01-11 15:21 . 2012-11-28 22:57    9728    ----a-w-    c:\windows\system32\Wdfres.dll
2019-01-11 15:21 . 2012-11-28 22:57    47720    ----a-w-    c:\windows\system32\drivers\WdfLdr.sys
2019-01-11 15:21 . 2015-02-04 02:54    417792    ----a-w-    c:\windows\system32\WMPhoto.dll
2019-01-11 15:20 . 2013-12-04 02:03    87040    ----a-w-    c:\windows\system32\secproc_ssp_isv.dll
2019-01-11 15:20 . 2013-12-04 02:03    87040    ----a-w-    c:\windows\system32\secproc_ssp.dll
2019-01-11 15:20 . 2013-12-04 02:03    423936    ----a-w-    c:\windows\system32\secproc_isv.dll
2019-01-11 15:20 . 2013-12-04 02:03    428032    ----a-w-    c:\windows\system32\secproc.dll
2019-01-11 15:20 . 2013-12-04 02:02    390144    ----a-w-    c:\windows\system32\msdrm.dll
2019-01-11 15:20 . 2013-12-04 01:54    510976    ----a-w-    c:\windows\system32\RMActivate_ssp.exe
2019-01-11 15:20 . 2013-12-04 01:54    594944    ----a-w-    c:\windows\system32\RMActivate_isv.exe
2019-01-11 15:20 . 2013-12-04 01:54    572416    ----a-w-    c:\windows\system32\RMActivate.exe
2019-01-11 15:20 . 2013-12-04 01:54    508928    ----a-w-    c:\windows\system32\RMActivate_ssp_isv.exe
2019-01-11 15:20 . 2015-04-24 17:56    530432    ----a-w-    c:\windows\system32\comctl32.dll
2019-01-11 14:19 . 2019-01-11 14:19    --------    d-----w-    c:\windows\system32\SPReview
2019-01-11 14:17 . 2019-01-11 14:17    --------    d-----w-    c:\windows\system32\EventProviders
2019-01-11 14:13 . 2010-11-20 12:21    380416    ----a-w-    c:\windows\system32\sxs.dll
2019-01-11 14:12 . 2010-11-20 12:05    35328    ----a-w-    c:\windows\system32\pifmgr.dll
2019-01-11 12:28 . 2019-01-12 14:18    --------    d-----w-    c:\program files\Mozilla Maintenance Service
2019-01-11 12:25 . 2019-01-11 12:25    --------    d-----w-    c:\windows\pl
2019-01-11 12:22 . 2009-09-04 16:44    69464    ----a-w-    c:\windows\system32\XAPOFX1_3.dll
2019-01-11 12:22 . 2009-09-04 16:44    515416    ----a-w-    c:\windows\system32\XAudio2_5.dll
2019-01-11 12:22 . 2009-09-04 16:29    453456    ----a-w-    c:\windows\system32\d3dx10_42.dll
2019-01-11 12:17 . 2019-01-11 12:17    15712    ----a-w-    c:\program files\Common Files\Windows Live\.cache\930395f11d4a9a71f\MeshBetaRemover.exe
2019-01-11 12:16 . 2019-01-11 12:16    94040    ----a-w-    c:\program files\Common Files\Windows Live\.cache\80790e651d4a9a718\DSETUP.dll
2019-01-11 12:16 . 2019-01-11 12:16    525656    ----a-w-    c:\program files\Common Files\Windows Live\.cache\80790e651d4a9a718\DXSETUP.exe
2019-01-11 12:16 . 2019-01-11 12:16    1691480    ----a-w-    c:\program files\Common Files\Windows Live\.cache\80790e651d4a9a718\dsetup32.dll
2019-01-11 12:16 . 2019-01-11 12:16    94040    ----a-w-    c:\program files\Common Files\Windows Live\.cache\7f26bcdd1d4a9a717\DSETUP.dll
2019-01-11 12:16 . 2019-01-11 12:16    525656    ----a-w-    c:\program files\Common Files\Windows Live\.cache\7f26bcdd1d4a9a717\DXSETUP.exe
2019-01-11 12:16 . 2019-01-11 12:16    1691480    ----a-w-    c:\program files\Common Files\Windows Live\.cache\7f26bcdd1d4a9a717\dsetup32.dll
2019-01-11 12:11 . 2019-01-11 13:25    --------    d-----w-    c:\windows\system32\MRT
2019-01-11 12:10 . 2019-01-11 12:10    127229528    -c--a-w-    c:\windows\system32\MRT-KB890830.exe
2019-01-11 11:13 . 2019-01-11 11:12    12051024    ----a-w-    c:\programdata\Microsoft\Windows Defender\Definition Updates\{674FD43E-FF81-4B20-B884-CCBC3AFBE557}\mpengine.dll
2019-01-11 11:12 . 2018-12-10 22:04    499424    ------w-    c:\windows\system32\MpSigStub.exe
2019-01-11 11:08 . 2016-06-25 15:43    301056    ----a-w-    c:\windows\system32\EOSNotify.exe
2019-01-11 10:55 . 2019-01-11 10:55    --------    d-----r-    C:\360SANDBOX
2019-01-11 10:21 . 2019-01-11 10:21    --------    d-----w-    C:\2a4b8497829f5ea2e55582
.
.
((((((((((((((((((((((((((((((((((((((((   Sekcja Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2019-01-11 14:25 . 2009-07-14 02:05    152576    ----a-w-    c:\windows\system32\msclmd.dll
2019-01-11 12:23 . 2010-06-24 10:33    34496    ----a-w-    c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
.
.
(((((((((((((((((((((((((((((((((((((   Wpisy startowe rejestru   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane  
REGEDIT4
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2019-01-11 280576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\DeviceNP]
2009-12-07 18:36    75320    ----a-w-    c:\windows\System32\DeviceNP.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages    REG_MULTI_SZ       DPPassFilter scecli
.
R1 epp;epp;c:\eek\bin32\epp.sys [x]
R3 DAMDrv;DAMDrv;c:\windows\system32\DRIVERS\DAMDrv.sys [2009-10-21 32312]
R3 DfSdkS;Usługa defragmentacji;c:\program files\Ashampoo\Ashampoo Uninstaller 2017\DfSdkS.exe [2009-08-24 406016]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2018-12-27 104960]
R3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [2010-02-26 132480]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [x]
R3 OxPPort;OxPPort;c:\windows\system32\DRIVERS\OxPPort.sys [2008-07-31 82048]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R4 FLCDLOCK;HP ProtectTools Device Locking / Auditing;c:\windows\system32\flcdlock.exe [2009-12-07 362040]
R4 HP ProtectTools Service;HP ProtectTools Service;c:\program files\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe [2010-01-12 36864]
R4 HpFkCryptService;Drive Encryption Service;c:\program files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [2010-02-02 281192]
R4 HPFSService;File Sanitizer for HP ProtectTools;c:\program files\Hewlett-Packard\File Sanitizer\HPFSService.exe [2009-12-12 297984]
R4 pdfcDispatcher;PDF Document Manager;c:\program files\PDF Complete\pdfsvc.exe [2009-10-14 635416]
S0 gzflt;gzflt;c:\windows\system32\drivers\gzflt.sys [2018-11-20 211248]
S0 SafeBoot;SafeBoot; [x]
S0 SbAlg;SbAlg; [x]
S0 SbFsLock;SbFsLock; [x]
S1 atc;atc;c:\windows\system32\DRIVERS\atc.sys [2018-10-29 1115400]
S1 Gemma;Gemma;c:\windows\system32\DRIVERS\gemma.sys [2018-11-19 317808]
S1 RsvLock;RsvLock; [x]
S2 BdDci;BdDci Service;c:\windows\system32\DRIVERS\bddci.sys [2018-12-04 255392]
S2 bdredline;bdredline;c:\program files\Bitdefender Antivirus Free\bdredline.exe [2018-03-22 1929240]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 ProductAgentService;ProductAgentService;c:\program files\Bitdefender Agent\ProductAgentService.exe [2018-11-15 1293936]
S2 regi;regi;c:\windows\system32\drivers\regi.sys [2007-04-18 11032]
S2 UI5IFS;Ashampoo Uninstaller FileSystemChanges Driver;c:\program files\Ashampoo\Ashampoo Uninstaller 2017\IFS32.sys [2015-12-07 27736]
S2 updatesrv;Bitdefender Update Service;c:\program files\Bitdefender Antivirus Free\updatesrv.exe [2018-11-13 240936]
S2 vsservppl;Bitdefender Correlation Service;c:\program files\Bitdefender Antivirus Free\vsservppl.exe [2018-11-13 240936]
S3 edrsensor;edrsensor;c:\windows\system32\DRIVERS\edrsensor.sys [2018-12-03 241840]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2010-05-03 266344]
.
.
--- Inne Usługi/Sterowniki w Pamięci ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation    REG_MULTI_SZ       SSDPSRV upnphost SCardSvr fdrespub AppIDSvc QWAVE wcncsvc Mcx2Svc SensrSvc
utcsvc    REG_MULTI_SZ       DiagTrack
.
Zawartość folderu 'Zaplanowane zadania'
.
2019-01-17 c:\windows\Tasks\AdwCleaner_onReboot.job
- c:\users\marekS\Downloads\adwcleaner_7.2.6.0.exe [2019-01-11 17:43]
.
.
------- Skan uzupełniający -------
.
uStart Page = about:blank
uDefault_Search_URL = hxxp://go.microsoft.com
mStart Page = about:blank
Trusted Zone: //about.htm/
Trusted Zone: //Exclude.htm/
Trusted Zone: //FWEvent.htm/
Trusted Zone: //LanguageSelection.htm/
Trusted Zone: //Message.htm/
Trusted Zone: //MyAgttryCmd.htm/
Trusted Zone: //MyAgttryNag.htm/
Trusted Zone: //MyNotification.htm/
Trusted Zone: //NOCLessUpdate.htm/
Trusted Zone: //quarantine.htm/
Trusted Zone: //ScanNow.htm/
Trusted Zone: //strings.vbs/
Trusted Zone: //Template.htm/
Trusted Zone: //Update.htm/
Trusted Zone: //VirFound.htm/
Trusted Zone: mcafee.com\*
Trusted Zone: mcafeeasap.com\betavscan
Trusted Zone: mcafeeasap.com\vs
Trusted Zone: mcafeeasap.com\www
TCP: DhcpNameServer = 192.168.0.1
TCP: Interfaces\{AE0A6353-03DA-42F1-8F23-5AF11DBF6216}: NameServer = 208.67.222.222,208.67.220.220
FF - ProfilePath - c:\users\marekS\AppData\Roaming\Mozilla\Firefox\Profiles\blf8b9uv.default-1547362238930\
.
- - - - USUNIĘTO PUSTE WPISY - - - -
.
AddRemove-HP Remote Solution - c:\programdata\{0D9D262D-4BA2-4BC3-9CD3-4D1A9AE63E18}\HP_Remote_Solution_Install.exe
AddRemove-{C611CF88-969D-43E6-A877-D6D6439DD081} - c:\programdata\{0D9D262D-4BA2-4BC3-9CD3-4D1A9AE63E18}\HP_Remote_Solution_Install.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3407625709-3377507047-3563137500-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_32_0_0_114_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_32_0_0_114_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------
.
- - - - - - - > 'lsass.exe'(652)
c:\windows\system32\DPFPApi.DLL
.
------------------------ Pozostałe uruchomione procesy ------------------------
.
c:\windows\system32\taskhost.exe
c:\program files\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe
c:\program files\Bitdefender Antivirus Free\vsserv.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\conhost.exe
c:\program files\Bitdefender Antivirus Free\bdagent.exe
c:\windows\system32\sppsvc.exe
c:\program files\Windows Media Player\wmpnscfg.exe
c:\program files\Windows Media Player\wmpnscfg.exe
.
**************************************************************************
.
Czas ukończenia: 2019-01-17  09:37:15 - komputer został uruchomiony ponownie
ComboFix-quarantined-files.txt  2019-01-17 08:37
.
Przed: 209 259 171 840 bajtów wolnych
Po: 209 216 393 216 bajtów wolnych
.
- - End Of File - - 503AFBD91001552889E66361CEDF32EE
EFFE75C97E8D63422C6379F40E5ECDC9

 

Odnośnik do komentarza
Pomoc jest darmowa, ale proszę rozważ przekazanie dotacji na utrzymanie serwisu: klik.

Jeśli chcesz dodać odpowiedź, zaloguj się lub zarejestruj nowe konto

Jedynie zarejestrowani użytkownicy mogą komentować zawartość tej strony.

Zarejestruj nowe konto

Załóż nowe konto. To bardzo proste!

Zarejestruj się

Zaloguj się

Posiadasz już konto? Zaloguj się poniżej.

Zaloguj się
Tematy

  • Ostatnio przeglądający   0 użytkowników

    • Brak zarejestrowanych użytkowników przeglądających tę stronę.
×
×
  • Dodaj nową pozycję...