ComboFix 12-11-16.02 - EMAR 16-11-2012  23:29:18.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7600.0.1250.48.1045.18.2933.1662 [GMT 1:00]
Uruchomiony z: c:\users\EMAR\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 5.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 5.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((((((   Usunięto   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Hyperionics DB Toolbar\tbHElper.dll
c:\programdata\FullRemove.exe
c:\users\EMAR\AppData\Local\Minibar
c:\users\EMAR\AppData\Local\Minibar\chrome\background.html
c:\users\EMAR\AppData\Local\Minibar\chrome\cached_http_request.js
c:\users\EMAR\AppData\Local\Minibar\chrome\extension_info.json
c:\users\EMAR\AppData\Local\Minibar\chrome\icons\icon128.png
c:\users\EMAR\AppData\Local\Minibar\chrome\icons\icon19.png
c:\users\EMAR\AppData\Local\Minibar\chrome\icons\icon32.png
c:\users\EMAR\AppData\Local\Minibar\chrome\icons\icon48.png
c:\users\EMAR\AppData\Local\Minibar\chrome\includes\content.js
c:\users\EMAR\AppData\Local\Minibar\chrome\includes\content_kango.js
c:\users\EMAR\AppData\Local\Minibar\chrome\includes\content_messaging.js
c:\users\EMAR\AppData\Local\Minibar\chrome\includes\content_userscript.js
c:\users\EMAR\AppData\Local\Minibar\chrome\kango-ui\button.js
c:\users\EMAR\AppData\Local\Minibar\chrome\kango-ui\ui.js
c:\users\EMAR\AppData\Local\Minibar\chrome\kango\browser.js
c:\users\EMAR\AppData\Local\Minibar\chrome\kango\console.js
c:\users\EMAR\AppData\Local\Minibar\chrome\kango\event_listener.js
c:\users\EMAR\AppData\Local\Minibar\chrome\kango\initialize.js
c:\users\EMAR\AppData\Local\Minibar\chrome\kango\io.js
c:\users\EMAR\AppData\Local\Minibar\chrome\kango\jsonstorage.js
c:\users\EMAR\AppData\Local\Minibar\chrome\kango\kango.js
c:\users\EMAR\AppData\Local\Minibar\chrome\kango\lang.js
c:\users\EMAR\AppData\Local\Minibar\chrome\kango\messaging.js
c:\users\EMAR\AppData\Local\Minibar\chrome\kango\userscript_engine.js
c:\users\EMAR\AppData\Local\Minibar\chrome\kango\xhr.js
c:\users\EMAR\AppData\Local\Minibar\chrome\main.js
c:\users\EMAR\AppData\Local\Minibar\chrome\manifest.json
c:\users\EMAR\AppData\Local\Minibar\chrome\minibar\actions.js
c:\users\EMAR\AppData\Local\Minibar\chrome\minibar\cachedxhr.js
c:\users\EMAR\AppData\Local\Minibar\chrome\minibar\config.js
c:\users\EMAR\AppData\Local\Minibar\chrome\minibar\macros.js
c:\users\EMAR\AppData\Local\Minibar\chrome\minibar\minibar.js
c:\users\EMAR\AppData\Local\Minibar\chrome\popup.html
c:\users\EMAR\AppData\Local\Minibar\chrome\popup.js
c:\users\EMAR\AppData\Local\Minibar\chrome\tab.html
c:\users\EMAR\AppData\Local\Minibar\chrome\tab.js
c:\users\EMAR\AppData\Local\Minibar\chrome_installer.js
c:\users\EMAR\AppData\Local\Minibar\common.js
c:\users\EMAR\AppData\Local\Minibar\install.json
c:\users\EMAR\AppData\Local\Minibar\minibar.crx
c:\users\EMAR\AppData\Local\Minibar\sqlite3.exe
c:\users\EMAR\AppData\Local\Minibar\Uninstall.exe
c:\users\EMAR\AppData\Roaming\msconfig.dat
c:\windows\SysWow64\drivers\npf.sys
c:\windows\UA000088.DLL
.
.
(((((((((((((((((((((((((((((((((((((((   Sterowniki/Usługi   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_NPF
.
.
(((((((((((((((((((((((((   Pliki utworzone od 2012-10-16 do 2012-11-16  )))))))))))))))))))))))))))))))
.
.
2012-11-16 22:12 . 2012-07-26 05:05	2560	----a-w-	c:\windows\system32\drivers\pl-PL\wdf01000.sys.mui
2012-11-16 22:12 . 2012-07-26 04:55	785512	----a-w-	c:\windows\system32\drivers\Wdf01000.sys
2012-11-16 22:12 . 2012-07-26 04:55	54376	----a-w-	c:\windows\system32\drivers\WdfLdr.sys
2012-11-16 22:12 . 2012-07-26 02:36	9728	----a-w-	c:\windows\system32\Wdfres.dll
2012-11-16 22:04 . 2012-07-26 02:26	87040	----a-w-	c:\windows\system32\drivers\WUDFPf.sys
2012-11-16 22:04 . 2012-07-26 02:26	198656	----a-w-	c:\windows\system32\drivers\WUDFRd.sys
2012-11-16 22:04 . 2012-07-26 03:08	84992	----a-w-	c:\windows\system32\WUDFSvc.dll
2012-11-16 22:04 . 2012-07-26 03:08	194048	----a-w-	c:\windows\system32\WUDFPlatform.dll
2012-11-16 22:04 . 2012-07-26 03:08	45056	----a-w-	c:\windows\system32\WUDFCoinstaller.dll
2012-11-16 22:04 . 2012-07-26 03:08	229888	----a-w-	c:\windows\system32\WUDFHost.exe
2012-11-16 22:04 . 2012-07-26 03:08	744448	----a-w-	c:\windows\system32\WUDFx.dll
2012-11-16 21:27 . 2012-10-18 18:18	3147264	----a-w-	c:\windows\system32\win32k.sys
2012-11-16 21:27 . 2012-10-12 07:19	9291768	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{396EF968-4A19-4A3E-A610-DB7734426CE7}\mpengine.dll
2012-11-16 21:27 . 2012-09-25 22:39	95744	----a-w-	c:\windows\system32\synceng.dll
2012-11-16 21:27 . 2012-09-25 21:55	78336	----a-w-	c:\windows\SysWow64\synceng.dll
2012-11-01 17:13 . 2008-03-05 14:56	4910088	----a-w-	c:\windows\system32\D3DX9_37.dll
2012-11-01 17:00 . 2012-11-01 17:00	283200	----a-w-	c:\windows\system32\drivers\dtsoftbus01.sys
2012-11-01 17:00 . 2012-11-01 17:02	--------	d-----w-	c:\users\EMAR\AppData\Roaming\DAEMON Tools Lite
2012-11-01 17:00 . 2012-11-01 17:00	--------	d-----w-	c:\program files (x86)\DAEMON Tools Lite
2012-11-01 16:59 . 2012-11-01 17:02	--------	d-----w-	c:\programdata\DAEMON Tools Lite
2012-10-31 23:22 . 2012-10-31 23:22	--------	d-----w-	c:\program files (x86)\CzasoWyłącznik
2012-10-28 13:28 . 2012-10-28 13:28	--------	d-----w-	c:\program files (x86)\uTorrent
.
.
.
((((((((((((((((((((((((((((((((((((((((   Sekcja Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-11-16 22:05 . 2011-07-03 14:08	66395536	----a-w-	c:\windows\system32\MRT.exe
2012-11-06 20:15 . 2012-01-05 22:05	224	----a-w-	c:\users\EMAR\advanced_ip_scanner_MAC.bin
2012-10-24 18:08 . 2012-04-03 18:34	696760	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2012-10-24 18:08 . 2011-08-22 22:06	73656	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-09-30 20:36 . 2012-09-30 20:36	108008	----a-w-	c:\windows\system32\WindowsAccessBridge-64.dll
2012-09-30 20:36 . 2012-09-30 20:36	289768	----a-w-	c:\windows\system32\javaws.exe
2012-09-30 20:36 . 2012-09-30 20:36	189416	----a-w-	c:\windows\system32\javaw.exe
2012-09-30 20:36 . 2012-09-30 20:36	188904	----a-w-	c:\windows\system32\java.exe
2012-09-30 20:36 . 2012-05-06 20:01	1034216	----a-w-	c:\windows\system32\npdeployJava1.dll
2012-09-14 19:23 . 2012-10-10 21:03	2048	----a-w-	c:\windows\system32\tzres.dll
2012-09-14 18:30 . 2012-10-10 21:03	2048	----a-w-	c:\windows\SysWow64\tzres.dll
2012-08-31 18:02 . 2012-10-10 21:02	1656688	----a-w-	c:\windows\system32\drivers\ntfs.sys
2012-08-30 18:11 . 2012-10-10 21:04	5505904	----a-w-	c:\windows\system32\ntoskrnl.exe
2012-08-30 17:18 . 2012-10-10 21:04	3958128	----a-w-	c:\windows\SysWow64\ntkrnlpa.exe
2012-08-30 17:18 . 2012-10-10 21:04	3902832	----a-w-	c:\windows\SysWow64\ntoskrnl.exe
2012-08-24 18:05 . 2012-10-10 21:03	220160	----a-w-	c:\windows\system32\wintrust.dll
2012-08-24 18:05 . 2012-09-22 13:37	1197568	----a-w-	c:\windows\system32\wininet.dll
2012-08-24 18:05 . 2012-09-22 13:37	1501696	----a-w-	c:\windows\system32\urlmon.dll
2012-08-24 18:05 . 2012-09-22 13:37	134144	----a-w-	c:\windows\system32\url.dll
2012-08-24 18:03 . 2012-09-22 13:37	1026560	----a-w-	c:\windows\system32\mstime.dll
2012-08-24 18:02 . 2012-09-22 13:37	9375744	----a-w-	c:\windows\system32\mshtml.dll
2012-08-24 18:02 . 2012-09-22 13:37	97792	----a-w-	c:\windows\system32\mshtmled.dll
2012-08-24 18:02 . 2012-09-22 13:37	736256	----a-w-	c:\windows\system32\msfeeds.dll
2012-08-24 18:02 . 2012-09-22 13:37	82944	----a-w-	c:\windows\system32\msfeedsbs.dll
2012-08-24 18:02 . 2012-09-22 13:37	57856	----a-w-	c:\windows\system32\licmgr10.dll
2012-08-24 18:02 . 2012-09-22 13:37	64512	----a-w-	c:\windows\system32\jsproxy.dll
2012-08-24 18:01 . 2012-09-22 13:37	247808	----a-w-	c:\windows\system32\ieui.dll
2012-08-24 18:01 . 2012-09-22 13:37	2458624	----a-w-	c:\windows\system32\iertutil.dll
2012-08-24 18:01 . 2012-09-22 13:37	12404736	----a-w-	c:\windows\system32\ieframe.dll
2012-08-24 18:01 . 2012-09-22 13:37	256000	----a-w-	c:\windows\system32\iepeers.dll
2012-08-24 18:01 . 2012-09-22 13:37	445952	----a-w-	c:\windows\system32\iedkcs32.dll
2012-08-24 17:59 . 2012-09-22 13:37	12288	----a-w-	c:\windows\system32\msfeedssync.exe
2012-08-24 17:10 . 2012-10-10 21:03	172544	----a-w-	c:\windows\SysWow64\wintrust.dll
2012-08-24 17:10 . 2012-09-22 13:37	981504	----a-w-	c:\windows\SysWow64\wininet.dll
2012-08-24 17:08 . 2012-09-22 13:37	44544	----a-w-	c:\windows\SysWow64\licmgr10.dll
2012-08-24 16:45 . 2012-09-22 13:37	482816	----a-w-	c:\windows\system32\html.iec
2012-08-24 16:02 . 2012-09-22 13:37	1638912	----a-w-	c:\windows\system32\mshtml.tlb
2012-08-24 16:01 . 2012-09-22 13:37	386048	----a-w-	c:\windows\SysWow64\html.iec
2012-08-24 15:27 . 2012-09-22 13:37	1638912	----a-w-	c:\windows\SysWow64\mshtml.tlb
.
.
(((((((((((((((((((((((((((((((((((((   Wpisy startowe rejestru   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane  
REGEDIT4
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{0A0DDBD3-6641-40B9-873F-BBDD26D6C14E}]
2011-06-17 10:19	180696	----a-w-	c:\program files (x86)\easyMule\modules\IE2EM.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6}]
2012-02-10 09:28	1307928	----a-w-	c:\program files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{338B4DFE-2E2C-4338-9E41-E176D497299E}"= "c:\program files (x86)\Hyperionics DB Toolbar\tbcore3.dll" [2011-06-22 2398720]
.
[HKEY_CLASSES_ROOT\clsid\{338b4dfe-2e2c-4338-9e41-e176d497299e}]
[HKEY_CLASSES_ROOT\SMTTB2009.SMTTB2009.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\SMTTB2009.SMTTB2009]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HW_OPENEYE_OUC_blueconnect"="c:\program files (x86)\blueconnect\UpdateDog\ouc.exe" [2009-12-31 110592]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-08-28 3671904]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]
"Microsoft Default Manager"="c:\program files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2010-05-10 439568]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"UCam_Menu"="c:\program files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]
"DataCardMonitor"="c:\program files (x86)\blueconnect\DataCardMonitor.exe" [2011-07-03 253952]
"UVS11 Preload"="c:\program files (x86)\Ulead Systems\Ulead VideoStudio 11\uvPL.exe" [2007-09-12 340136]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux3"=wdmaud.drv
.
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.exe [2012-02-10 240408]
R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys [2010-03-20 114560]
R3 huawei_cdcacm;huawei_cdcacm;c:\windows\system32\DRIVERS\ew_jucdcacm.sys [2010-04-09 79360]
R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys [2011-11-01 171008]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
R3 WatAdminSvc;Usługa Technologie aktywacji systemu Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2011-07-03 1255736]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2012-03-14 209768]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2012-03-14 148528]
S1 SABI;SAMSUNG Kernel Driver For Windows 7;c:\windows\system32\Drivers\SABI.sys [2010-03-31 13824]
S2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.1.361.0\BBSvc.exe [2012-02-10 193816]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
S2 DCService.exe;DCService.exe;c:\programdata\DatacardService\DCService.exe [2010-08-19 229376]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2012-03-07 913144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2012-03-14 137144]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2011-12-14 2984832]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-11-01 283200]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2010-04-01 136192]
S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys [2010-04-09 76288]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [2010-02-27 158976]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-02-03 271872]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [2009-09-28 395264]
.
.
--- Inne Usługi/Sterowniki w Pamięci ---
.
*NewlyCreated* - WS2IFSL
.
Zawartość folderu 'Zaplanowane zadania'
.
2012-11-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-03 18:08]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-04-07 10144288]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-04-23 166424]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-04-23 391192]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-04-23 413720]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2012-03-07 4081008]
.
------- Skan uzupełniający -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.interia.pl/
mStart Page = hxxp://samsung.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Download by easyMule - c:\program files (x86)\easyMule\IE2EM.htm
IE: {{07BA1DA9-F501-4796-8728-74D1B91A6CD5} - c:\program files (x86)\PokerStars.EU\PokerStarsUpdate.exe
TCP: DhcpNameServer = 8.8.8.8 8.8.4.4
FF - ProfilePath - c:\users\EMAR\AppData\Roaming\Mozilla\Firefox\Profiles\68rvrrx3.default\
.
- - - - USUNIĘTO PUSTE WPISY - - - -
.
Toolbar-Locked - (no file)
SafeBoot-mcmscsvc
SafeBoot-MCODS
Toolbar-Locked - (no file)
HKLM-Run-ETDWare - c:\program files (x86)\Elantech\ETDCtrl.exe
AddRemove-SLABCOMM&10C4&EA60 - c:\windows\system32\Silabs\DriverUninstaller.exe VCP CP210x Cardinal\SLABCOMM&10C4&EA60
AddRemove-UnityWebPlayer - c:\users\EMAR\AppData\Local\Unity\WebPlayer\Uninstall.exe
.
.
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Pozostałe uruchomione procesy ------------------------
.
c:\program files (x86)\Samsung\Samsung Recovery Solution 4\WCScheduler.exe
c:\program files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
c:\program files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe
c:\program files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
c:\users\EMAR\AppData\Roaming\blueconnect\ouc.exe
c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
.
**************************************************************************
.
Czas ukończenia: 2012-11-16  23:42:32 - komputer został uruchomiony ponownie
ComboFix-quarantined-files.txt  2012-11-16 22:42
.
Przed: 38 878 482 432 bajtów wolnych
Po: 41 176 354 816 bajtów wolnych
.
- - End Of File - - BB453A26A6040B2AC9EB6EC93E79BCD8