ComboFix 11-11-14.02 - PC 2011-11-15 17:49:24.7.4 - x64 MINIMAL Microsoft Windows 7 Home Premium 6.1.7601.1.1250.48.1045.18.4095.3078 [GMT 1:00] Uruchomiony z: c:\users\PC\Desktop\ComboFix.exe SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Utworzono nowy punkt przywracania . . ((((((((((((((((((((((((( Pliki utworzone od 2011-10-15 do 2011-11-15 ))))))))))))))))))))))))))))))) . . 2011-11-15 16:56 . 2011-11-15 16:56 -------- d-----w- c:\users\Public\AppData\Local\temp 2011-11-15 16:56 . 2011-11-15 16:56 -------- d-----w- c:\users\HomeGroupUser$\AppData\Local\temp 2011-11-15 16:56 . 2011-11-15 16:56 -------- d-----w- c:\users\Gość\AppData\Local\temp 2011-11-15 16:56 . 2011-11-15 16:56 -------- d-----w- c:\users\Default\AppData\Local\temp 2011-11-15 16:56 . 2011-11-15 16:56 -------- d-----w- c:\users\Administrator\AppData\Local\temp 2011-11-15 16:51 . 2011-11-15 16:51 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4EA2869F-1350-47A1-ADF5-F7612374DE37}\offreg.dll 2011-11-15 16:48 . 2011-11-15 16:48 -------- d-----w- c:\programdata\McAfee 2011-11-15 16:47 . 2011-03-13 10:45 158832 ----a-w- c:\windows\system32\mfevtps.exe 2011-11-15 12:56 . 2011-11-15 12:56 -------- d-----w- C:\_OTL 2011-11-15 12:51 . 2011-11-15 12:52 -------- d-----w- c:\program files (x86)\Ad-Remover 2011-11-15 12:36 . 2011-11-15 12:36 -------- d-s---w- c:\windows\SysWow64\Microsoft 2011-11-15 07:19 . 2011-10-18 00:27 8570192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4EA2869F-1350-47A1-ADF5-F7612374DE37}\mpengine.dll 2011-11-14 22:14 . 2011-11-14 22:14 41272 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys 2011-11-14 21:56 . 2011-11-14 21:56 -------- d-----w- c:\users\PC\AppData\Roaming\Malwarebytes 2011-11-14 21:56 . 2011-11-14 21:56 388096 ----a-r- c:\users\PC\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2011-11-14 21:56 . 2011-11-14 21:56 -------- d-----w- c:\program files (x86)\Trend Micro 2011-11-14 21:55 . 2011-11-14 21:55 -------- d-----w- c:\programdata\Malwarebytes 2011-11-14 21:55 . 2011-11-14 21:55 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2011-11-14 21:55 . 2011-08-31 16:00 25416 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-11-14 21:11 . 2011-11-14 21:13 -------- d-----w- c:\program files (x86)\Skype 2011-11-13 21:42 . 2011-11-13 21:42 -------- d-----w- C:\joomla 2011-11-13 11:09 . 2011-11-13 11:09 -------- d-----w- c:\programdata\RegCure 2011-11-13 11:08 . 2011-11-13 11:14 -------- d-----w- c:\program files (x86)\RegCure 2011-11-12 23:16 . 2011-11-12 23:16 -------- d-----w- c:\program files (x86)\McAfeeMOBK 2011-11-12 23:16 . 2010-04-13 19:10 66040 ----a-w- c:\windows\system32\drivers\MOBK.sys 2011-11-12 23:16 . 2011-11-12 23:16 -------- d-----w- c:\program files (x86)\McAfee Online Backup 2011-11-12 23:14 . 2011-10-18 13:29 28760 ----a-w- c:\program files (x86)\Mozilla Firefox\ScriptFF.dll 2011-11-12 17:12 . 2011-11-12 17:12 -------- d-----w- c:\users\PC\AppData\Roaming\McAfee 2011-11-12 15:41 . 2011-11-12 15:41 -------- d-----w- c:\program files (x86)\ESET 2011-11-11 23:25 . 2011-11-12 23:20 719832 ----a-w- c:\program files (x86)\Mozilla Firefox\mozcrt19.dll 2011-11-11 23:25 . 2011-11-12 23:20 719832 ----a-w- c:\program files (x86)\Mozilla Firefox\mozcpp19.dll 2011-11-11 19:14 . 2011-11-11 19:14 -------- d-----w- c:\program files\Nightly 2011-11-11 17:07 . 2011-11-11 17:07 -------- d-----w- C:\ClubJeans 2011-11-11 17:01 . 2008-11-03 17:58 -------- d-----w- C:\Dots 2011-11-11 17:00 . 2009-02-24 14:15 -------- d-----w- C:\Wchoc 2011-11-11 16:58 . 2009-05-03 20:13 -------- d-----w- C:\TreeHouse 2011-11-11 16:57 . 2009-05-04 14:01 -------- d-----w- C:\Arto 2011-11-11 16:56 . 2010-01-10 12:42 -------- d-----w- C:\AllBlack 2011-11-11 16:55 . 2011-03-04 00:10 -------- d-----w- C:\BlueUzor 2011-11-11 16:48 . 2011-01-25 11:42 -------- d-----w- C:\BlackPower 2011-11-11 16:47 . 2009-11-09 17:45 -------- d-----w- C:\colorus 2011-11-11 16:46 . 2009-11-09 17:45 -------- d-----w- C:\papyrus-10 2011-11-11 16:36 . 2009-11-09 16:45 -------- d-----w- C:\decoder 2011-11-11 16:36 . 2009-11-09 16:35 -------- d-----w- C:\BlackGelly 2011-11-11 16:31 . 2009-11-09 17:45 -------- d-----w- C:\dark-world 2011-11-11 12:19 . 2009-01-21 19:40 -------- d-----w- C:\fantastic-flowery 2011-11-11 12:15 . 2009-01-11 01:04 -------- d-----w- C:\leaving 2011-11-11 11:49 . 2011-11-08 13:56 -------- d-----w- C:\104_otoszablony.com 2011-11-11 11:41 . 2011-11-03 07:00 -------- d-----w- C:\111_otoszablony.com 2011-11-11 11:29 . 2003-05-23 11:28 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll 2011-11-11 11:29 . 2003-05-23 11:28 499712 ----a-w- c:\windows\SysWow64\msvcp71.dll 2011-11-11 11:29 . 2003-05-23 11:28 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll 2011-11-11 11:29 . 2011-11-11 11:29 282756 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll 2011-11-11 11:29 . 2011-11-11 11:29 163972 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll 2011-11-11 11:29 . 2003-02-27 15:12 696320 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll 2011-11-11 11:29 . 2002-12-05 13:10 155648 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll 2011-11-11 11:29 . 2002-12-02 14:22 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe 2011-11-11 11:29 . 2002-12-02 12:33 57344 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll 2011-11-11 11:29 . 2002-12-02 12:33 237568 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll 2011-11-09 21:40 . 2011-11-09 21:41 -------- d-----w- c:\programdata\Mirolit 2011-11-09 21:40 . 2011-11-09 21:40 -------- d-----w- c:\program files (x86)\Mirolit 2011-11-09 06:24 . 2011-10-01 05:45 886784 ----a-w- c:\program files\Common Files\System\wab32.dll 2011-11-09 06:24 . 2011-10-01 04:37 708608 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll 2011-11-09 06:24 . 2011-09-29 16:29 1923952 ----a-w- c:\windows\system32\drivers\tcpip.sys 2011-11-09 06:24 . 2011-09-29 04:03 3144704 ----a-w- c:\windows\system32\win32k.sys 2011-11-08 13:54 . 2011-11-12 15:28 -------- d-sh--w- c:\users\PC\AppData\Local\c6bd7451 2011-11-06 20:48 . 2011-11-06 20:48 -------- d-----w- c:\program files (x86)\Common Files\SWF Studio 2011-11-04 13:05 . 2011-11-04 13:05 -------- d-----w- c:\program files (x86)\SystemRequirementsLab 2011-11-04 12:59 . 2011-11-04 12:59 -------- d-----w- c:\programdata\NVIDIA 2011-11-02 19:56 . 2007-03-12 15:42 4494184 ----a-w- c:\windows\system32\d3dx9_33.dll 2011-11-01 16:53 . 2010-12-16 02:48 -------- d-----w- C:\station 2011-11-01 16:52 . 2010-12-28 18:19 -------- d-----w- C:\epione 2011-11-01 16:42 . 2011-11-01 16:42 -------- d-sh--w- c:\programdata\SecuROM 2011-11-01 16:41 . 2009-03-16 13:18 517448 ----a-w- c:\windows\SysWow64\XAudio2_4.dll 2011-11-01 16:41 . 2009-03-09 14:27 4178264 ----a-w- c:\windows\SysWow64\D3DX9_41.dll 2011-11-01 16:41 . 2009-03-16 13:18 235352 ----a-w- c:\windows\SysWow64\xactengine3_4.dll 2011-11-01 16:41 . 2009-03-16 13:18 22360 ----a-w- c:\windows\SysWow64\X3DAudio1_6.dll 2011-11-01 16:30 . 2011-10-20 16:37 -------- d-----w- C:\feedburner-plugin 2011-10-23 21:48 . 2010-01-27 12:53 -------- d-----w- C:\audio-player 2011-10-23 16:08 . 2011-07-07 01:07 -------- d-----w- C:\tinymce-advanced 2011-10-23 15:03 . 2011-08-05 07:12 -------- d-----w- C:\mystique 2011-10-22 21:04 . 2010-12-24 20:00 -------- d-----w- C:\js 2011-10-22 21:01 . 2011-10-01 17:37 -------- d-----w- C:\wp-cufon 2011-10-22 20:59 . 2009-09-29 18:11 18691 ----a-w- C:\cufon.js 2011-10-22 20:58 . 2009-09-29 18:11 308950 ----a-w- C:\extra_mp.font.js 2011-10-22 18:12 . 2011-10-22 18:12 -------- d-----w- C:\wp-stylish 2011-10-22 18:11 . 2011-10-22 18:11 -------- d-----w- C:\urbanartist 2011-10-22 18:01 . 2010-06-29 10:26 -------- d-----w- C:\selecta 2011-10-22 17:54 . 2010-10-28 09:26 -------- d-----w- C:\beback 2011-10-22 16:48 . 2011-08-04 10:30 -------- d-----w- C:\Galleria 2011-10-22 16:33 . 2011-07-09 22:37 -------- d-----w- C:\Quade 2011-10-22 16:25 . 2011-02-09 13:52 -------- d-----w- C:\Yalene 2011-10-22 16:19 . 2011-04-15 09:17 -------- d-----w- C:\Peacekeeper 2011-10-19 10:36 . 2011-10-19 10:36 -------- d-----w- c:\program files (x86)\3DO . . . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-11-11 22:53 . 2011-05-22 14:50 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2011-10-21 19:24 . 2011-10-21 19:24 725936 ----a-w- C:\free-furvious.zip 2011-10-21 19:23 . 2011-10-21 19:23 262307 ----a-w- C:\brightsky.zip 2011-10-20 16:48 . 2011-08-04 10:21 310984 ----a-w- c:\windows\system32\drivers\atksgt.sys 2011-09-28 20:45 . 2011-09-28 20:45 98304 ----a-r- c:\users\PC\AppData\Roaming\Microsoft\Installer\{3577E42B-3347-4EB8-BFDA-D36E8ED3C519}\icons.exe 2011-09-25 23:43 . 2011-09-25 23:40 18408119 ----a-w- C:\youtube_flv_downloader_pro_setup.exe 2011-09-25 23:41 . 2011-09-25 23:40 3369818 ----a-w- C:\youtube_flv_downloader_pro_setup.exe.part 2011-09-25 23:34 . 2011-09-25 23:34 1275144 ----a-w- C:\FMZ_2.0.0.5_setup.exe 2011-09-25 23:23 . 2011-09-25 23:23 1275144 ----a-w- C:\FMZsetup.exe 2011-09-24 21:39 . 2011-09-24 21:39 592170 ----a-w- C:\ultimate_points_1.0.7.zip 2011-09-24 17:00 . 2011-09-24 16:59 2709302 ----a-w- C:\phpBB3-3.0.9+pl-r194.zip 2011-09-24 02:58 . 2011-09-24 02:58 10207232 ----a-w- c:\windows\system32\drivers\atikmdag.sys 2011-09-24 02:12 . 2011-09-24 02:12 24604160 ----a-w- c:\windows\system32\atio6axx.dll 2011-09-24 02:03 . 2011-09-24 02:03 159744 ----a-w- c:\windows\system32\atiapfxx.exe 2011-09-24 02:03 . 2011-04-20 02:09 736768 ----a-w- c:\windows\SysWow64\aticfx32.dll 2011-09-24 02:01 . 2011-04-20 02:07 867328 ----a-w- c:\windows\system32\aticfx64.dll 2011-09-24 01:59 . 2011-09-24 01:59 466944 ----a-w- c:\windows\system32\ATIDEMGX.dll 2011-09-24 01:59 . 2011-09-24 01:59 487936 ----a-w- c:\windows\system32\atieclxx.exe 2011-09-24 01:58 . 2011-09-24 01:58 204288 ----a-w- c:\windows\system32\atiesrxx.exe 2011-09-24 01:57 . 2011-09-24 01:57 120320 ----a-w- c:\windows\system32\atitmm64.dll 2011-09-24 01:57 . 2011-09-24 01:57 423424 ----a-w- c:\windows\system32\atipdl64.dll 2011-09-24 01:56 . 2011-09-24 01:56 356352 ----a-w- c:\windows\SysWow64\atipdlxx.dll 2011-09-24 01:56 . 2011-09-24 01:56 278528 ----a-w- c:\windows\SysWow64\Oemdspif.dll 2011-09-24 01:56 . 2011-09-24 01:56 21504 ----a-w- c:\windows\system32\atimuixx.dll 2011-09-24 01:56 . 2011-09-24 01:56 59392 ----a-w- c:\windows\system32\atiedu64.dll 2011-09-24 01:56 . 2011-09-24 01:56 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll 2011-09-24 01:56 . 2011-09-24 01:56 18587648 ----a-w- c:\windows\SysWow64\atioglxx.dll 2011-09-24 01:53 . 2011-06-27 19:39 4231680 ----a-w- c:\windows\SysWow64\atidxx32.dll 2011-09-24 01:43 . 2011-04-20 01:49 4960768 ----a-w- c:\windows\system32\atidxx64.dll 2011-09-24 01:43 . 2011-09-24 01:43 1113088 ----a-w- c:\windows\system32\atiumd6v.dll 2011-09-24 01:42 . 2011-09-24 01:42 1828864 ----a-w- c:\windows\SysWow64\atiumdmv.dll 2011-09-24 01:42 . 2011-09-24 01:42 4023296 ----a-w- c:\windows\system32\atiumd6a.dll 2011-09-24 01:35 . 2011-09-24 01:35 51200 ----a-w- c:\windows\system32\aticalrt64.dll 2011-09-24 01:34 . 2011-09-24 01:34 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll 2011-09-24 01:34 . 2011-09-24 01:34 44544 ----a-w- c:\windows\system32\aticalcl64.dll 2011-09-24 01:34 . 2011-09-24 01:34 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll 2011-09-24 01:34 . 2011-09-24 01:34 9809920 ----a-w- c:\windows\system32\aticaldd64.dll 2011-09-24 01:32 . 2011-04-20 01:38 4289024 ----a-w- c:\windows\SysWow64\atiumdag.dll 2011-09-24 01:32 . 2011-04-20 01:30 4174848 ----a-w- c:\windows\SysWow64\atiumdva.dll 2011-09-24 01:31 . 2011-09-24 01:31 8390656 ----a-w- c:\windows\SysWow64\aticaldd.dll 2011-09-24 01:27 . 2011-04-20 01:27 58880 ----a-w- c:\windows\system32\coinst.dll 2011-09-24 01:26 . 2011-09-24 01:26 5431808 ----a-w- c:\windows\system32\atiumd64.dll 2011-09-24 01:19 . 2011-09-24 01:19 479744 ----a-w- c:\windows\system32\atiadlxx.dll 2011-09-24 01:19 . 2011-09-24 01:19 335872 ----a-w- c:\windows\SysWow64\atiadlxy.dll 2011-09-24 01:19 . 2011-09-24 01:19 17408 ----a-w- c:\windows\system32\atig6pxx.dll 2011-09-24 01:19 . 2011-09-24 01:19 14336 ----a-w- c:\windows\SysWow64\atiglpxx.dll 2011-09-24 01:19 . 2011-09-24 01:19 14336 ----a-w- c:\windows\system32\atiglpxx.dll 2011-09-24 01:19 . 2011-09-24 01:19 39936 ----a-w- c:\windows\system32\atig6txx.dll 2011-09-24 01:19 . 2011-09-24 01:19 32768 ----a-w- c:\windows\SysWow64\atigktxx.dll 2011-09-24 01:19 . 2011-09-24 01:19 317952 ----a-w- c:\windows\system32\drivers\atikmpag.sys 2011-09-24 01:18 . 2011-04-20 01:21 40960 ----a-w- c:\windows\system32\atiuxp64.dll 2011-09-24 01:18 . 2011-06-27 19:01 31744 ----a-w- c:\windows\SysWow64\atiuxpag.dll 2011-09-24 01:18 . 2011-09-24 01:18 38912 ----a-w- c:\windows\system32\atiu9p64.dll 2011-09-24 01:18 . 2011-04-20 01:21 29184 ----a-w- c:\windows\SysWow64\atiu9pag.dll 2011-09-24 01:17 . 2011-09-24 01:17 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll 2011-09-24 01:16 . 2011-09-24 01:16 54784 ----a-w- c:\windows\system32\atimpc64.dll 2011-09-24 01:16 . 2011-09-24 01:16 54784 ----a-w- c:\windows\system32\amdpcom64.dll 2011-09-24 01:16 . 2011-09-24 01:16 53760 ----a-w- c:\windows\SysWow64\atimpc32.dll 2011-09-24 01:16 . 2011-09-24 01:16 53760 ----a-w- c:\windows\SysWow64\amdpcom32.dll 2011-09-23 20:15 . 2011-09-23 20:15 66048 ----a-w- c:\windows\system32\OpenVideo64.dll 2011-09-23 20:15 . 2011-09-23 20:15 56832 ----a-w- c:\windows\SysWow64\OpenVideo.dll 2011-09-23 20:14 . 2011-09-23 20:14 16787456 ----a-w- c:\windows\system32\amdocl64.dll 2011-09-23 20:14 . 2011-09-23 20:14 13753856 ----a-w- c:\windows\SysWow64\amdocl.dll 2011-09-23 20:13 . 2011-09-23 20:13 51200 ----a-w- c:\windows\system32\OpenCL.dll 2011-09-23 20:13 . 2011-09-23 20:13 43520 ----a-w- c:\windows\SysWow64\OpenCL.dll 2011-09-19 13:03 . 2011-09-19 13:03 45056 ----a-w- c:\windows\SysWow64\rtvcvfw32.dll 2011-09-01 05:24 . 2011-10-12 19:16 2309120 ----a-w- c:\windows\system32\jscript9.dll 2011-09-01 05:17 . 2011-10-12 19:16 1389056 ----a-w- c:\windows\system32\wininet.dll 2011-09-01 05:12 . 2011-10-12 19:16 2382848 ----a-w- c:\windows\system32\mshtml.tlb 2011-09-01 02:35 . 2011-10-12 19:16 1798144 ----a-w- c:\windows\SysWow64\jscript9.dll 2011-09-01 02:28 . 2011-10-12 19:16 1126912 ----a-w- c:\windows\SysWow64\wininet.dll 2011-09-01 02:22 . 2011-10-12 19:16 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb 2011-08-27 05:37 . 2011-10-12 18:48 861696 ----a-w- c:\windows\system32\oleaut32.dll 2011-08-27 05:37 . 2011-10-12 18:48 331776 ----a-w- c:\windows\system32\oleacc.dll 2011-08-27 04:26 . 2011-10-12 18:48 233472 ----a-w- c:\windows\SysWow64\oleacc.dll 2011-08-27 04:26 . 2011-10-12 18:48 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll 2011-08-25 07:43 . 2011-06-23 06:57 45056 ----a-w- c:\windows\system32\rtvcvfw32.dll 2011-08-22 18:14 . 2011-08-31 18:00 86016 ----a-w- c:\windows\system32\ff_vfw.dll . . ((((((((((((((((((((((((((((( SnapShot_2011-11-13_11.58.16 ))))))))))))))))))))))))))))))))))))))))) . + 2011-05-22 15:20 . 2011-11-15 12:59 44794 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin + 2009-07-14 05:10 . 2011-11-15 12:59 30306 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2011-05-22 15:20 . 2011-11-15 12:59 10546 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-946895887-3485042716-126150702-1000_UserData.bin - 2009-07-14 05:30 . 2011-11-12 23:14 86016 c:\windows\system32\DriverStore\infpub.dat + 2009-07-14 05:30 . 2011-11-15 12:38 86016 c:\windows\system32\DriverStore\infpub.dat - 2011-05-22 13:23 . 2011-11-13 10:55 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2011-05-22 13:23 . 2011-11-15 08:00 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:54 . 2011-11-15 08:00 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-07-14 04:54 . 2011-11-13 10:55 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2011-05-22 21:40 . 2011-11-12 23:22 2031 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Bluetooth\bthservsdp.dat + 2011-05-22 21:40 . 2011-11-15 16:45 2031 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Bluetooth\bthservsdp.dat + 2011-11-15 16:46 . 2011-11-15 16:46 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2011-11-13 07:52 . 2011-11-13 10:55 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2011-11-15 16:46 . 2011-11-15 16:46 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2011-11-13 07:52 . 2011-11-13 10:55 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2009-07-14 17:55 . 2011-11-15 13:01 699350 c:\windows\system32\perfh015.dat - 2009-07-14 17:55 . 2011-11-13 11:02 699350 c:\windows\system32\perfh015.dat - 2009-07-14 02:36 . 2011-11-13 11:02 616484 c:\windows\system32\perfh009.dat + 2009-07-14 02:36 . 2011-11-15 13:01 616484 c:\windows\system32\perfh009.dat + 2009-07-14 17:55 . 2011-11-15 13:01 135500 c:\windows\system32\perfc015.dat - 2009-07-14 17:55 . 2011-11-13 11:02 135500 c:\windows\system32\perfc015.dat + 2009-07-14 02:36 . 2011-11-15 13:01 106864 c:\windows\system32\perfc009.dat - 2009-07-14 02:36 . 2011-11-13 11:02 106864 c:\windows\system32\perfc009.dat + 2009-07-14 04:45 . 2011-11-14 21:33 415896 c:\windows\system32\FNTCACHE.DAT - 2009-07-14 05:30 . 2011-11-12 23:14 239616 c:\windows\system32\DriverStore\infstrng.dat + 2009-07-14 05:30 . 2011-11-15 12:38 239616 c:\windows\system32\DriverStore\infstrng.dat - 2009-07-14 05:30 . 2011-11-12 23:14 143360 c:\windows\system32\DriverStore\infstor.dat + 2009-07-14 05:30 . 2011-11-15 12:38 143360 c:\windows\system32\DriverStore\infstor.dat + 2011-03-13 10:20 . 2011-03-13 10:20 639216 c:\windows\system32\drivers\mfehidk.sys + 2011-03-13 10:20 . 2011-03-13 10:20 156792 c:\windows\system32\drivers\mfeapfk.sys - 2009-07-14 05:12 . 2011-11-12 22:09 245760 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat + 2009-07-14 05:12 . 2011-11-14 12:18 245760 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat + 2009-07-14 05:01 . 2011-11-15 16:45 382372 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2011-11-14 22:21 . 2011-11-14 22:21 371272 c:\windows\Installer\{D6F879CC-59D6-4D4B-AE9B-D761E48D25ED}\SkypeIcon.exe + 2011-11-14 21:54 . 2011-11-14 21:54 1402880 c:\windows\Installer\15dad7.msi + 2011-05-22 15:17 . 2011-11-15 16:45 33772088 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-946895887-3485042716-126150702-1000-12288.dat + 2011-11-14 22:21 . 2011-11-14 22:21 17282048 c:\windows\Installer\9020a.msi . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-08-31 449608] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "DevconDefaultDB"="c:\windows\system32\READREG" [X] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . R1 MOBKFilter;MOBKFilter;c:\windows\system32\DRIVERS\MOBK.sys [x] R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] R2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-09-23 361984] R2 AODDriver4.01;AODDriver4.01;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2011-06-24 55424] R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 gupdate;Usługa Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-06-04 136176] R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-08-31 366152] R2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [x] R2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [x] R2 MOBKbackup;1%;c:\program files (x86)\McAfee Online Backup\MOBKbackup.exe [2010-04-13 231224] R2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe [x] R3 AbilisT;Abilis Systems Single DVB-T Tuner;c:\windows\system32\Drivers\AbilisBdaTuner.sys [x] R3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x] R3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x] R3 athur;Atheros AR9271 Wireless Network Adapter Service;c:\windows\system32\DRIVERS\athurx.sys [x] R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x] R3 gupdatem;Usługa Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-06-04 136176] R3 kxwdmdrv;kX WDM Driver Service;c:\windows\system32\drivers\kx.sys [x] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x] R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x] R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [x] R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [x] R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [x] R3 ST330;ST330;c:\windows\system32\DRIVERS\st330.sys [x] R3 STBUS;STBUS;c:\windows\system32\DRIVERS\stbus.sys [x] R3 STETH;SpeedTouch Ethernet Adapter NT Driver;c:\windows\system32\DRIVERS\steth.sys [x] R3 stppp;Speedtouch PPP Adapter Adapter;c:\windows\system32\DRIVERS\stppp.sys [x] R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys [2010-06-14 16448] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [x] R3 WatAdminSvc;Usługa Technologie aktywacji systemu Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x] S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x] S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x] S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x] S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [x] . . Zawartość folderu 'Zaplanowane zadania' . 2011-10-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cc91ac332c4714.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-06-04 12:16] . 2011-10-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-946895887-3485042716-126150702-1000Core1cc94f641dda746.job - c:\users\PC\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-04 12:16] . 2011-11-12 c:\windows\Tasks\MSIAfterburner.job - c:\program files (x86)\MSI Afterburner\MSIAfterburner.exe [2011-10-02 13:50] . 2011-06-18 c:\windows\Tasks\RDReminder.job - c:\program files (x86)\Dll-Files.com Fixer\DLLFixer.exe [2011-05-29 16:03] . 2011-11-13 c:\windows\Tasks\RegCure Program Check.job - c:\program files (x86)\RegCure\RegCure.exe [2010-05-19 23:20] . 2011-11-13 c:\windows\Tasks\RegCure.job - c:\program files (x86)\RegCure\RegCure.exe [2010-05-19 23:20] . . --------- x86-64 ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MOBK] @="{3c3f3c1a-9153-7c05-f938-622e7003894d}" [HKEY_CLASSES_ROOT\CLSID\{3c3f3c1a-9153-7c05-f938-622e7003894d}] 2010-04-13 19:11 3816248 ----a-w- c:\program files (x86)\McAfee Online Backup\MOBKshell.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MOBK2] @="{e6ea1d7d-144e-b977-98c4-84c53c1a69d0}" [HKEY_CLASSES_ROOT\CLSID\{e6ea1d7d-144e-b977-98c4-84c53c1a69d0}] 2010-04-13 19:11 3816248 ----a-w- c:\program files (x86)\McAfee Online Backup\MOBKshell.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MOBK3] @="{b4caf489-1eec-c617-49ad-8d7088598c06}" [HKEY_CLASSES_ROOT\CLSID\{b4caf489-1eec-c617-49ad-8d7088598c06}] 2010-04-13 19:11 3816248 ----a-w- c:\program files (x86)\McAfee Online Backup\MOBKshell.dll . ------- Skan uzupełniający ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.pl/ mStart Page = hxxp://www.google.com mLocal Page = c:\windows\SysWOW64\blank.htm IE: E&ksport do programu Microsoft Excel - c:\progra~2\MICROS~1\Office10\EXCEL.EXE/3000 Trusted Zone: internet Trusted Zone: mcafee.com TCP: DhcpNameServer = 192.168.1.1 192.168.1.1 FF - ProfilePath - c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\893o585q.default\ FF - prefs.js: browser.startup.homepage - about:home . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\st330service] "ImagePath"="C:\Program Files (x86)/Thomson/ST330/service/st330service.exe -service" . --------------------- ZABLOKOWANE KLUCZE REJESTRU --------------------- . [HKEY_USERS\S-1-5-21-946895887-3485042716-126150702-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*] @Allowed: (Read) (RestrictedCode) "??"=hex:2a,c2,5d,f2,3e,98,7e,64,f8,95,20,b7,ba,58,95,7b,28,03,06,97,31,25,33, bc,16,33,07,6b,77,4e,dd,fb,0d,d8,b4,68,f9,bb,d3,5f,48,a1,a7,f8,6e,ae,76,24,\ "??"=hex:87,63,d3,27,2e,40,08,67,15,db,8a,24,55,f6,e8,42 . [HKEY_USERS\S-1-5-21-946895887-3485042716-126150702-1000\Software\SecuROM\License information*] "datasecu"=hex:c7,f7,20,f3,3f,11,4f,1d,46,a1,25,0d,07,a7,4e,6e,66,8b,7a,fa,c1, d3,e6,1a,2c,42,7a,00,3e,ed,98,e5,85,a2,12,a6,08,16,47,bf,08,43,5a,a5,b1,1e,\ "rkeysecu"=hex:e3,bf,c2,61,42,56,24,0c,08,e9,fc,11,98,9f,e9,5e . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10x_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10x_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10x.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10x.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10x.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10x.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\10.0\Word\Text Converters\Import\¬ z*] "Name"="€z" "Path"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\MSWRD632.CNV" "Extensions"="€z" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Czas ukończenia: 2011-11-15 17:57:29 ComboFix-quarantined-files.txt 2011-11-15 16:57 ComboFix2.txt 2011-11-14 22:33 ComboFix3.txt 2011-11-13 12:14 ComboFix4.txt 2011-09-17 21:07 ComboFix5.txt 2011-11-15 16:48 . Przed: 2 692 734 976 bajtów wolnych Po: 2 521 681 920 bajtów wolnych . - - End Of File - - 4180C41014D5C19DE53B6027AFB7C05D