ComboFix 14-02-05.02 - WiesławF 2014-02-09 12:19:59.1.4 - x64 Microsoft Windows 7 Ultimate 6.1.7601.1.1250.48.1045.18.4095.3029 [GMT 1:00] Uruchomiony z: c:\users\Wies-awF\Downloads\ComboFix.exe AV: Kaspersky Internet Security *Disabled/Updated* {179979E8-273D-D14E-0543-2861940E4886} FW: Kaspersky Internet Security *Disabled* {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD} SP: Kaspersky Internet Security *Disabled/Updated* {ACF8980C-0107-DEC0-3FF3-1313EF89023B} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Utworzono nowy punkt przywracania . . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\windows\SysWow64\frapsvid.dll E:\install.exe . . ((((((((((((((((((((((((( Pliki utworzone od 2014-01-09 do 2014-02-09 ))))))))))))))))))))))))))))))) . . 2014-02-08 18:17 . 2014-02-08 18:19 -------- d-----w- C:\FRST 2014-02-07 16:48 . 2013-12-04 03:28 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{51E960E7-DB98-4AD1-AFB5-B456228362B4}\mpengine.dll 2014-02-03 17:49 . 2014-02-08 18:36 -------- d-----w- c:\users\WiesławF\AppData\Local\PokerStars.EU 2014-01-28 01:30 . 2014-01-28 01:31 524288000 ----a-w- C:\TESTFILE.TMP 2014-01-27 23:04 . 2014-01-27 23:04 -------- d-----w- c:\users\WiesławF\AppData\Roaming\Ashampoo 2014-01-27 23:03 . 2014-01-27 23:03 -------- d-----w- c:\users\WiesławF\AppData\Local\ashampoo 2014-01-27 23:03 . 2014-01-27 23:03 -------- d-----w- c:\programdata\Ashampoo 2014-01-27 22:52 . 2014-01-27 22:52 -------- d-----w- c:\program files (x86)\Smart File Advisor 2014-01-27 22:43 . 2014-01-27 22:43 386680 ----a-w- c:\windows\system32\drivers\sptd.sys 2014-01-27 22:40 . 2014-01-27 22:40 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys 2014-01-27 22:40 . 2014-01-27 22:40 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite 2014-01-26 21:49 . 2014-01-26 22:01 -------- d-----w- c:\programdata\WPM 2014-01-26 16:47 . 2014-01-26 18:07 -------- d-----w- c:\users\WiesławF\AppData\Roaming\HD Tune Pro 2014-01-16 14:35 . 2013-04-09 23:34 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll 2014-01-16 14:35 . 2013-04-02 22:51 1643520 ----a-w- c:\windows\system32\DWrite.dll 2014-01-15 16:14 . 2013-11-27 01:41 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys 2014-01-15 16:14 . 2013-11-27 01:41 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys 2014-01-15 16:14 . 2013-11-27 01:41 53248 ----a-w- c:\windows\system32\drivers\usbehci.sys 2014-01-15 16:14 . 2013-11-27 01:41 325120 ----a-w- c:\windows\system32\drivers\usbport.sys 2014-01-15 16:14 . 2013-11-27 01:41 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys 2014-01-15 16:14 . 2013-11-27 01:41 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys 2014-01-15 16:14 . 2013-11-27 01:41 7808 ----a-w- c:\windows\system32\drivers\usbd.sys 2014-01-15 16:14 . 2013-11-26 11:40 376768 ----a-w- c:\windows\system32\drivers\netio.sys 2014-01-15 16:14 . 2013-11-26 10:32 3156480 ----a-w- c:\windows\system32\win32k.sys 2014-01-14 22:48 . 2014-01-14 23:07 -------- d-----w- c:\users\WiesławF\AppData\Roaming\Natural Selection 2 2014-01-14 22:38 . 2014-01-14 22:38 -------- d-----w- c:\windows\system32\wbem\Framework 2014-01-14 22:38 . 2014-01-15 06:08 -------- d-----w- c:\program files (x86)\GPU Temp 2014-01-11 19:27 . 2014-01-11 19:28 -------- d-----w- c:\users\WiesławF\AppData\Local\Google 2014-01-11 19:27 . 2014-01-11 19:28 -------- d-----w- c:\program files (x86)\Google 2014-01-11 19:14 . 2014-01-26 17:12 -------- d-----w- c:\users\WiesławF\AppData\Local\ElevatedDiagnostics 2014-01-11 18:57 . 2014-01-11 18:57 -------- d-----w- c:\users\WiesławF\AppData\Local\ACD Systems . . . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-12-28 09:45 . 2013-12-28 09:45 466456 ----a-w- c:\windows\system32\wrap_oal.dll 2013-12-28 09:45 . 2013-12-28 09:45 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll 2013-12-28 09:45 . 2013-12-28 09:45 122904 ----a-w- c:\windows\system32\OpenAL32.dll 2013-12-28 09:45 . 2013-12-28 09:45 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll 2013-12-24 20:14 . 2013-11-26 16:51 183152 ----a-w- c:\windows\SysWow64\PnkBstrB.exe 2013-12-24 20:14 . 2013-11-26 16:51 183152 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0 2013-12-24 13:26 . 2013-11-26 16:52 281312 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr 2013-12-24 13:12 . 2013-11-26 16:51 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe 2013-12-19 16:58 . 2013-11-26 16:24 620640 ----a-w- c:\windows\system32\drivers\klif.sys 2013-12-19 16:58 . 2013-06-06 16:38 178272 ----a-w- c:\windows\system32\drivers\kneps.sys 2013-12-18 05:13 . 2013-11-26 16:34 270496 ------w- c:\windows\system32\MpSigStub.exe 2013-12-11 17:37 . 2013-11-25 13:32 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-12-11 17:37 . 2013-11-25 13:32 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-12-11 17:37 . 2013-12-11 17:37 9272200 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe 2013-11-30 00:11 . 2013-11-30 00:11 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2013-11-30 00:11 . 2013-11-30 00:11 194048 ----a-w- c:\windows\SysWow64\elshyph.dll 2013-11-30 00:11 . 2013-11-30 00:11 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll 2013-11-30 00:11 . 2013-11-30 00:11 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe 2013-11-30 00:11 . 2013-11-30 00:11 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe 2013-11-30 00:11 . 2013-11-30 00:11 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll 2013-11-30 00:11 . 2013-11-30 00:11 62464 ----a-w- c:\windows\SysWow64\tdc.ocx 2013-11-30 00:11 . 2013-11-30 00:11 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll 2013-11-30 00:11 . 2013-11-30 00:11 61952 ----a-w- c:\windows\SysWow64\iesetup.dll 2013-11-30 00:11 . 2013-11-30 00:11 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll 2013-11-30 00:11 . 2013-11-30 00:11 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll 2013-11-30 00:11 . 2013-11-30 00:11 454656 ----a-w- c:\windows\SysWow64\vbscript.dll 2013-11-30 00:11 . 2013-11-30 00:11 36352 ----a-w- c:\windows\SysWow64\imgutil.dll 2013-11-30 00:11 . 2013-11-30 00:11 34816 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll 2013-11-30 00:11 . 2013-11-30 00:11 337408 ----a-w- c:\windows\SysWow64\html.iec 2013-11-30 00:11 . 2013-11-30 00:11 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll 2013-11-30 00:11 . 2013-11-30 00:11 235008 ----a-w- c:\windows\system32\elshyph.dll 2013-11-30 00:11 . 2013-11-30 00:11 182272 ----a-w- c:\windows\SysWow64\msls31.dll 2013-11-30 00:11 . 2013-11-30 00:11 151552 ----a-w- c:\windows\SysWow64\iexpress.exe 2013-11-30 00:11 . 2013-11-30 00:11 139264 ----a-w- c:\windows\SysWow64\wextract.exe 2013-11-30 00:11 . 2013-11-30 00:11 13312 ----a-w- c:\windows\SysWow64\mshta.exe 2013-11-30 00:11 . 2013-11-30 00:11 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe 2013-11-30 00:11 . 2013-11-30 00:11 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll 2013-11-30 00:11 . 2013-11-30 00:11 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll 2013-11-30 00:11 . 2013-11-30 00:11 942592 ----a-w- c:\windows\system32\jsIntl.dll 2013-11-30 00:11 . 2013-11-30 00:11 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe 2013-11-30 00:11 . 2013-11-30 00:11 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe 2013-11-30 00:11 . 2013-11-30 00:11 84992 ----a-w- c:\windows\system32\mshtmled.dll 2013-11-30 00:11 . 2013-11-30 00:11 83968 ----a-w- c:\windows\system32\MshtmlDac.dll 2013-11-30 00:11 . 2013-11-30 00:11 81408 ----a-w- c:\windows\system32\icardie.dll 2013-11-30 00:11 . 2013-11-30 00:11 774144 ----a-w- c:\windows\system32\jscript.dll 2013-11-30 00:11 . 2013-11-30 00:11 77312 ----a-w- c:\windows\system32\tdc.ocx 2013-11-30 00:11 . 2013-11-30 00:11 626176 ----a-w- c:\windows\system32\msfeeds.dll 2013-11-30 00:11 . 2013-11-30 00:11 62464 ----a-w- c:\windows\system32\pngfilt.dll 2013-11-30 00:11 . 2013-11-30 00:11 616104 ----a-w- c:\windows\system32\ieapfltr.dat 2013-11-30 00:11 . 2013-11-30 00:11 548352 ----a-w- c:\windows\system32\vbscript.dll 2013-11-30 00:11 . 2013-11-30 00:11 52224 ----a-w- c:\windows\system32\msfeedsbs.dll 2013-11-30 00:11 . 2013-11-30 00:11 48640 ----a-w- c:\windows\system32\mshtmler.dll 2013-11-30 00:11 . 2013-11-30 00:11 48128 ----a-w- c:\windows\system32\imgutil.dll 2013-11-30 00:11 . 2013-11-30 00:11 453120 ----a-w- c:\windows\system32\dxtmsft.dll 2013-11-30 00:11 . 2013-11-30 00:11 413696 ----a-w- c:\windows\system32\html.iec 2013-11-30 00:11 . 2013-11-30 00:11 40448 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll 2013-11-30 00:11 . 2013-11-30 00:11 30208 ----a-w- c:\windows\system32\licmgr10.dll 2013-11-30 00:11 . 2013-11-30 00:11 296960 ----a-w- c:\windows\system32\dxtrans.dll 2013-11-30 00:11 . 2013-11-30 00:11 263376 ----a-w- c:\windows\system32\iedkcs32.dll 2013-11-30 00:11 . 2013-11-30 00:11 247808 ----a-w- c:\windows\system32\msls31.dll 2013-11-30 00:11 . 2013-11-30 00:11 243200 ----a-w- c:\windows\system32\webcheck.dll 2013-11-30 00:11 . 2013-11-30 00:11 235520 ----a-w- c:\windows\system32\url.dll 2013-11-30 00:11 . 2013-11-30 00:11 195584 ----a-w- c:\windows\system32\msrating.dll 2013-11-30 00:11 . 2013-11-30 00:11 167424 ----a-w- c:\windows\system32\iexpress.exe 2013-11-30 00:11 . 2013-11-30 00:11 147968 ----a-w- c:\windows\system32\occache.dll 2013-11-30 00:11 . 2013-11-30 00:11 143872 ----a-w- c:\windows\system32\wextract.exe 2013-11-30 00:11 . 2013-11-30 00:11 13824 ----a-w- c:\windows\system32\mshta.exe 2013-11-30 00:11 . 2013-11-30 00:11 135680 ----a-w- c:\windows\system32\iepeers.dll 2013-11-30 00:11 . 2013-11-30 00:11 13312 ----a-w- c:\windows\system32\msfeedssync.exe 2013-11-30 00:11 . 2013-11-30 00:11 131072 ----a-w- c:\windows\system32\IEAdvpack.dll 2013-11-30 00:11 . 2013-11-30 00:11 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll 2013-11-30 00:11 . 2013-11-30 00:11 105984 ----a-w- c:\windows\system32\iesysprep.dll 2013-11-30 00:11 . 2013-11-30 00:11 101376 ----a-w- c:\windows\system32\inseng.dll 2013-11-29 12:35 . 2013-11-29 12:35 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-11-29 12:35 . 2013-11-29 12:35 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-11-29 12:35 . 2013-11-29 12:35 648192 ----a-w- c:\windows\system32\d3d10level9.dll 2013-11-29 12:35 . 2013-11-29 12:35 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll 2013-11-29 12:35 . 2013-11-29 12:35 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-11-29 12:35 . 2013-11-29 12:35 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-11-29 12:35 . 2013-11-29 12:35 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-11-29 12:35 . 2013-11-29 12:35 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-11-29 12:35 . 2013-11-29 12:35 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll 2013-11-29 12:35 . 2013-11-29 12:35 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll 2013-11-29 12:35 . 2013-11-29 12:35 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-11-29 12:35 . 2013-11-29 12:35 3928064 ----a-w- c:\windows\system32\d2d1.dll 2013-11-29 12:35 . 2013-11-29 12:35 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll 2013-11-29 12:35 . 2013-11-29 12:35 363008 ----a-w- c:\windows\system32\dxgi.dll 2013-11-29 12:35 . 2013-11-29 12:35 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-11-29 12:35 . 2013-11-29 12:35 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-11-29 12:35 . 2013-11-29 12:35 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll 2013-11-29 12:35 . 2013-11-29 12:35 333312 ----a-w- c:\windows\system32\d3d10_1core.dll 2013-11-29 12:35 . 2013-11-29 12:35 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll 2013-11-29 12:35 . 2013-11-29 12:35 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-11-29 12:35 . 2013-11-29 12:35 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2013-11-29 12:35 . 2013-11-29 12:35 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-11-29 12:35 . 2013-11-29 12:35 296960 ----a-w- c:\windows\system32\d3d10core.dll 2013-11-29 12:35 . 2013-11-29 12:35 293376 ----a-w- c:\windows\SysWow64\dxgi.dll 2013-11-29 12:35 . 2013-11-29 12:35 2776576 ----a-w- c:\windows\system32\msmpeg2vdec.dll 2013-11-29 12:35 . 2013-11-29 12:35 2565120 ----a-w- c:\windows\system32\d3d10warp.dll 2013-11-29 12:35 . 2013-11-29 12:35 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll . . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Advanced SystemCare 6"="c:\program files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" [2013-04-18 491840] "Steam"="d:\program files (x86)\Steam\steam.exe" [2014-01-27 1815976] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys;c:\windows\SYSNATIVE\Drivers\ssadadb.sys [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x] R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x] R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x] R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssadserd.sys [x] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x] R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x] R3 WatAdminSvc;Usługa Technologie aktywacji systemu Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] R4 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service;d:\program files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe;d:\program files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [x] R4 klflt;klflt;c:\windows\system32\DRIVERS\klflt.sys;c:\windows\SYSNATIVE\DRIVERS\klflt.sys [x] R4 MBAMScheduler;MBAMScheduler;d:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;d:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x] R4 MBAMService;MBAMService;d:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;d:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x] R4 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x] R4 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x] S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x] S1 klpd;klpd;c:\windows\system32\DRIVERS\klpd.sys;c:\windows\SYSNATIVE\DRIVERS\klpd.sys [x] S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x] S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x] S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [x] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x] S3 AtcL001;Sterownik miniportu NDIS dla kontrolera Gigabit Ethernet Atheros L1;c:\windows\system32\DRIVERS\l160x64.sys;c:\windows\SYSNATIVE\DRIVERS\l160x64.sys [x] S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x] S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x] S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x] . . --- Inne Usługi/Sterowniki w Pamięci --- . *NewlyCreated* - WS2IFSL . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2014-02-04 09:39 1211720 ----a-w- c:\program files (x86)\Google\Chrome\Application\32.0.1700.107\Installer\chrmstp.exe . Zawartość folderu 'Zaplanowane zadania' . 2014-02-09 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-25 17:37] . 2014-02-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-01-11 19:27] . 2014-02-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-01-11 19:27] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-10-24 13662936] . ------- Skan uzupełniający ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.com mDefault_Search_URL = hxxp://www.google.com mDefault_Page_URL = hxxp://www.google.com mStart Page = hxxp://www.google.com mLocal Page = c:\windows\SysWOW64\blank.htm mSearch Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1390772963&from=cor&uid=ST3250620NS_5QE4W5B6XXXX5QE4W5B6&q={searchTerms} IE: Add to Anti-Banner - c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ie_banner_deny.htm IE: Convert link target to Adobe PDF - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert link target to existing PDF - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert selected links to Adobe PDF - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert selected links to existing PDF - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Convert selection to Adobe PDF - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert selection to existing PDF - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert to Adobe PDF - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert to existing PDF - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: E&ksportuj do programu Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 62.179.1.63 62.179.1.62 FF - ProfilePath - c:\users\WiesławF\AppData\Roaming\Mozilla\Firefox\Profiles\smn2l9d9.default-1390773994457\ FF - prefs.js: browser.startup.homepage - hxxps://www.google.pl/ . - - - - USUNIĘTO PUSTE WPISY - - - - . Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe AddRemove-uTorrent - c:\users\WiesławF\AppData\Roaming\uTorrent\uTorrent.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MpsSvc] "ImagePath"="." . --------------------- ZABLOKOWANE KLUCZE REJESTRU --------------------- . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.032" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ani\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.ani" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.bay" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.bmp" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.bw" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.cr2" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.crw" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.cs1" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.cur" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.dcr" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.dcx" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.dib" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.djv" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.djvu" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.dng" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.emf" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.eps" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.erf" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.fff" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fpx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.fpx" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.gif" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icl\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.icl" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.icn" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ico\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.ico" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.iff" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.ilbm" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.int" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.inta" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.iw4" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.j2c" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.j2k" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.jfif" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.jif" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.jp2" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.jpc" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.jpe" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.jpeg" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.jpg" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.jpk" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.jpx" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.lbm" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.mos" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.mrw" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.nef" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.orf" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pbm" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pcd" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pct" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pcx" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pef" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pgm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pgm" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pic" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pict" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pix\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pix" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.png" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.ppm" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.psd" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.psp" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.raf" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.ras" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.raw" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.rgb" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.rgba" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.rle" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.rsb" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sgi\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.sgi" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.sr2" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.srf" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.tga" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.thm" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.tif" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.tiff" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.ttc" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.ttf" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v9o\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.v9o" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v9p\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.v9p" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v9pf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.v9pf" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.wbm" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.wbmp" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.wmf" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.xbm" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.xif" . [HKEY_USERS\S-1-5-21-4235513685-2738507784-103146575-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xpm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.xpm" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Pozostałe uruchomione procesy ------------------------ . c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe c:\windows\SysWOW64\PnkBstrA.exe c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe . ************************************************************************** . Czas ukończenia: 2014-02-09 12:31:09 - komputer został uruchomiony ponownie ComboFix-quarantined-files.txt 2014-02-09 11:31 . Przed: 18 409 287 680 bajtów wolnych Po: 18 092 113 920 bajtów wolnych . - - End Of File - - BAEF313E5804F67FAC527B9AF88D7835 A36C5E4F47E84449FF07ED3517B43A31