ComboFix 12-07-05.04 - Dawid 2012-07-05  22:28:13.1.3 - x64 NETWORK
Microsoft Windows 7 Ultimate   6.1.7600.0.1250.48.1033.18.4094.3004 [GMT 2:00]
Uruchomiony z: c:\users\Dawid\AppData\Local\Opera\Opera\temporary_downloads\ComboFix.exe
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Utworzono nowy punkt przywracania
.
.
(((((((((((((((((((((((((((((((((((((((   Usunięto   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Dawid\AppData\Local\Microsoft\Windows\Temporary Internet Files\{A8909557-BB83-4FC1-8305-E805D699D598}.xps
c:\users\Dawid\AppData\Local\Microsoft\Windows\Temporary Internet Files\{C91F5752-9CED-4708-87A6-AA67DEA1DD0E}.xps
c:\users\Dawid\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat
c:\users\Dawid\AppData\Local\TempDIR
c:\windows\null
c:\windows\SysWow64\msvcsv60.dll
c:\windows\SysWow64\tmpE705.tmp
c:\windows\SysWow64\tmpE716.tmp
.
.
(((((((((((((((((((((((((   Pliki utworzone od 2012-06-05 do 2012-07-05  )))))))))))))))))))))))))))))))
.
.
2012-07-05 20:32 . 2012-07-05 20:32	--------	d-----w-	c:\users\Tata\AppData\Local\temp
2012-07-05 20:32 . 2012-07-05 20:32	--------	d-----w-	c:\users\TATA.Dawid-PC\AppData\Local\temp
2012-07-05 19:54 . 2012-07-05 19:54	--------	d-----w-	c:\users\Dawid\AppData\Roaming\hellomoto
2012-07-03 21:27 . 2012-07-05 19:56	--------	d-----w-	c:\users\Dawid\AppData\Local\LogMeIn Hamachi
2012-07-02 15:56 . 2009-03-18 15:35	33856	---ha-w-	c:\windows\system32\hamachi.sys
2012-06-30 17:35 . 2012-06-30 17:35	25640	----a-w-	c:\windows\etdrv.sys
2012-06-30 17:33 . 2012-06-30 17:33	30528	----a-w-	c:\windows\GVTDrv64.sys
2012-06-30 17:33 . 2012-06-30 17:33	--------	d-----w-	c:\program files (x86)\Intel
2012-06-30 17:33 . 2012-06-30 17:33	--------	d-----w-	C:\Intel
2012-06-30 17:33 . 2012-06-30 17:33	--------	d-----w-	c:\program files (x86)\GIGABYTE
2012-06-30 17:33 . 2012-06-30 17:33	--------	d-----w-	c:\program files (x86)\AMD
2012-06-30 17:32 . 2012-06-30 17:33	25640	----a-w-	c:\windows\gdrv.sys
2012-06-30 17:25 . 2012-07-02 14:32	--------	d-----w-	C:\Super pi
2012-06-29 13:45 . 2012-06-29 13:54	--------	d-----w-	c:\users\Dawid\AppData\Local\LooksBuilder
2012-06-29 13:44 . 2012-06-29 13:45	--------	d-----w-	c:\users\Dawid\AppData\Roaming\Red Giant Link
2012-06-29 13:44 . 2012-06-29 13:44	--------	d-----w-	c:\program files\Magic Bullet Looks Vegas
2012-06-29 13:44 . 2012-06-29 13:44	--------	d-----w-	c:\program files (x86)\Red Giant Link
2012-06-29 13:43 . 2012-06-29 13:43	--------	d-----w-	c:\programdata\RedGiant
2012-06-29 12:39 . 2012-06-29 13:44	--------	d-----w-	c:\program files (x86)\LooksBuilder
2012-06-27 16:01 . 2012-06-27 16:01	--------	d-----w-	c:\users\Dawid\AppData\Local\BF3_Config_Utility
2012-06-19 15:35 . 2012-06-19 15:35	--------	d-----w-	c:\program files (x86)\Grupa IMAGE
2012-06-15 13:27 . 2012-06-15 13:27	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2012-06-15 13:27 . 2012-04-04 13:56	24904	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-06-15 12:59 . 2012-06-16 21:02	--------	d-----w-	C:\LOOOL
2012-06-15 12:19 . 2012-06-16 21:17	--------	d-----w-	C:\Zasilacz
2012-06-14 21:07 . 2012-06-17 14:30	--------	d-----w-	c:\program files\Opera x64
2012-06-10 23:39 . 2009-09-15 09:14	1554944	----a-w-	c:\windows\SysWow64\vorbis.acm
2012-06-10 18:29 . 2012-06-10 18:33	--------	d-----w-	c:\users\Dawid\AppData\Roaming\Blockscape
2012-06-10 18:28 . 2012-06-10 18:28	--------	d-----w-	c:\program files (x86)\Microsoft XNA
2012-06-08 21:23 . 2012-06-08 21:23	--------	d-----w-	c:\program files (x86)\Unigine
2012-06-08 21:03 . 2012-06-02 22:19	2428952	----a-w-	c:\windows\system32\wuaueng.dll
2012-06-08 21:03 . 2012-06-02 22:19	57880	----a-w-	c:\windows\system32\wuauclt.exe
2012-06-08 21:03 . 2012-06-02 22:19	44056	----a-w-	c:\windows\system32\wups2.dll
2012-06-08 21:03 . 2012-06-02 22:15	2622464	----a-w-	c:\windows\system32\wucltux.dll
2012-06-08 21:03 . 2012-06-02 22:19	38424	----a-w-	c:\windows\system32\wups.dll
2012-06-08 21:03 . 2012-06-02 22:19	701976	----a-w-	c:\windows\system32\wuapi.dll
2012-06-08 21:03 . 2012-06-02 22:15	99840	----a-w-	c:\windows\system32\wudriver.dll
2012-06-08 21:03 . 2012-06-02 13:19	186752	----a-w-	c:\windows\system32\wuwebv.dll
2012-06-08 21:03 . 2012-06-02 13:15	36864	----a-w-	c:\windows\system32\wuapp.exe
2012-06-07 20:52 . 2012-06-07 20:52	--------	d-----w-	c:\windows\GTA IV - Ultimate Vehicle Pack
2012-06-07 20:03 . 2012-06-07 20:03	--------	d-----w-	C:\Dix
2012-06-07 10:53 . 2012-06-07 10:53	4901376	----a-w-	c:\windows\system32\LS3Renderer_x64.dll
.
.
.
((((((((((((((((((((((((((((((((((((((((   Sekcja Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-02 23:24 . 2012-03-03 08:49	283304	----a-w-	c:\windows\SysWow64\PnkBstrB.exe
2012-07-02 23:24 . 2012-03-03 08:48	283304	----a-w-	c:\windows\SysWow64\PnkBstrB.xtr
2012-07-02 23:23 . 2012-03-03 08:49	280904	----a-w-	c:\windows\SysWow64\PnkBstrB.ex0
2012-06-05 16:28 . 2012-06-05 16:28	178800	----a-w-	c:\windows\SysWow64\CmdLineExt_x64.dll
2012-05-26 22:49 . 2012-05-26 22:49	388096	----a-r-	c:\users\Dawid\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-05-22 00:35 . 2012-05-22 00:35	86528	----a-w-	c:\windows\SysWow64\iesysprep.dll
2012-05-22 00:35 . 2012-05-22 00:35	76800	----a-w-	c:\windows\SysWow64\SetIEInstalledDate.exe
2012-05-22 00:35 . 2012-05-22 00:35	74752	----a-w-	c:\windows\SysWow64\RegisterIEPKEYs.exe
2012-05-22 00:35 . 2012-05-22 00:35	74752	----a-w-	c:\windows\SysWow64\iesetup.dll
2012-05-22 00:35 . 2012-05-22 00:35	63488	----a-w-	c:\windows\SysWow64\tdc.ocx
2012-05-22 00:35 . 2012-05-22 00:35	48640	----a-w-	c:\windows\SysWow64\mshtmler.dll
2012-05-22 00:35 . 2012-05-22 00:35	420864	----a-w-	c:\windows\SysWow64\vbscript.dll
2012-05-22 00:35 . 2012-05-22 00:35	367104	----a-w-	c:\windows\SysWow64\html.iec
2012-05-22 00:35 . 2012-05-22 00:35	23552	----a-w-	c:\windows\SysWow64\licmgr10.dll
2012-05-22 00:35 . 2012-05-22 00:35	161792	----a-w-	c:\windows\SysWow64\msls31.dll
2012-05-22 00:35 . 2012-05-22 00:35	152064	----a-w-	c:\windows\SysWow64\wextract.exe
2012-05-22 00:35 . 2012-05-22 00:35	150528	----a-w-	c:\windows\SysWow64\iexpress.exe
2012-05-22 00:35 . 2012-05-22 00:35	11776	----a-w-	c:\windows\SysWow64\mshta.exe
2012-05-22 00:35 . 2012-05-22 00:35	110592	----a-w-	c:\windows\SysWow64\IEAdvpack.dll
2012-05-22 00:35 . 2012-05-22 00:35	91648	----a-w-	c:\windows\system32\SetIEInstalledDate.exe
2012-05-22 00:35 . 2012-05-22 00:35	89088	----a-w-	c:\windows\system32\RegisterIEPKEYs.exe
2012-05-22 00:35 . 2012-05-22 00:35	85504	----a-w-	c:\windows\system32\iesetup.dll
2012-05-22 00:35 . 2012-05-22 00:35	76800	----a-w-	c:\windows\system32\tdc.ocx
2012-05-22 00:35 . 2012-05-22 00:35	603648	----a-w-	c:\windows\system32\vbscript.dll
2012-05-22 00:35 . 2012-05-22 00:35	49664	----a-w-	c:\windows\system32\imgutil.dll
2012-05-22 00:35 . 2012-05-22 00:35	48640	----a-w-	c:\windows\system32\mshtmler.dll
2012-05-22 00:35 . 2012-05-22 00:35	448512	----a-w-	c:\windows\system32\html.iec
2012-05-22 00:35 . 2012-05-22 00:35	35840	----a-w-	c:\windows\SysWow64\imgutil.dll
2012-05-22 00:35 . 2012-05-22 00:35	30720	----a-w-	c:\windows\system32\licmgr10.dll
2012-05-22 00:35 . 2012-05-22 00:35	222208	----a-w-	c:\windows\system32\msls31.dll
2012-05-22 00:35 . 2012-05-22 00:35	165888	----a-w-	c:\windows\system32\iexpress.exe
2012-05-22 00:35 . 2012-05-22 00:35	160256	----a-w-	c:\windows\system32\wextract.exe
2012-05-22 00:35 . 2012-05-22 00:35	135168	----a-w-	c:\windows\system32\IEAdvpack.dll
2012-05-22 00:35 . 2012-05-22 00:35	12288	----a-w-	c:\windows\system32\mshta.exe
2012-05-22 00:35 . 2012-05-22 00:35	114176	----a-w-	c:\windows\system32\admparse.dll
2012-05-22 00:35 . 2012-05-22 00:35	111616	----a-w-	c:\windows\system32\iesysprep.dll
2012-05-22 00:35 . 2012-05-22 00:35	101888	----a-w-	c:\windows\SysWow64\admparse.dll
2012-05-20 11:11 . 2012-05-20 11:11	8192	----a-w-	c:\windows\SysWow64\srvany.exe
2012-04-25 18:32 . 2012-04-25 18:32	1700352	----a-w-	c:\windows\SysWow64\gdiplus.dll
.
.
(((((((((((((((((((((((((((((((((((((   Wpisy startowe rejestru   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane  
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"AMD AVT"=Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "c:\program files (x86)\AMD AVT\bin\kdbsync.exe" aml
"StartCCC"="e:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 AODDriver;AODDriver;c:\program files (x86)\GIGABYTE\ET6\amd64\AODDriver.sys [2010-03-12 52280]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2011-10-17 93712]
R3 atillk64;atillk64;c:\users\Dawid\Desktop\ati_winflash_2.0.1.18\atillk64.sys [x]
R3 etdrv;etdrv;c:\windows\etdrv.sys [2012-06-30 25640]
R3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys [2012-06-30 30528]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-04-04 24904]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 51740536]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [2011-11-08 11856]
R3 WatAdminSvc;Usługa Technologie aktywacji systemu Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-05-21 1255736]
R4 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
R4 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-04-06 236544]
R4 AMD FUEL Service;AMD FUEL Service;e:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-04-05 361984]
R4 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2011-08-30 160256]
R4 KMService;KMService;c:\windows\system32\srvany.exe [x]
R4 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-04-04 654408]
R4 Simraceway Update Service;Simraceway Update Service;c:\program files (x86)\SimracewayUpdater\SRWUpdate.exe [x]
R4 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-02-15 158856]
R4 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2011-11-14 2072896]
R4 TunngleService;TunngleService;e:\program files (x86)\Tunngle\TnglCtrl.exe [2012-04-19 736104]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S2 AODDriver4.01;AODDriver4.01;e:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-03-05 53888]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;e:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-06-27 2369960]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2012-04-06 11174400]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2012-04-06 343040]
S3 RTCore64;RTCore64;e:\program files (x86)\MSI Afterburner\RTCore64.sys [2012-06-20 10568]
S3 RTL8023x64;Realtek 10/100 NIC Family NDIS x64 Driver;c:\windows\system32\DRIVERS\Rtnic64.sys [2007-07-13 60416]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-08-23 565352]
.
.
--- Inne Usługi/Sterowniki w Pamięci ---
.
*NewlyCreated* - WS2IFSL
.
Zawartość folderu 'Zaplanowane zadania'
.
2012-07-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3192530511-1057062870-2557224114-1001Core.job
- c:\users\Dawid\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-04 18:41]
.
2012-07-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3192530511-1057062870-2557224114-1001UA.job
- c:\users\Dawid\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-04 18:41]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GGDriveOverlay1]
@="{E68D0A50-3C40-4712-B90D-DCFA93FF2534}"
[HKEY_CLASSES_ROOT\CLSID\{E68D0A50-3C40-4712-B90D-DCFA93FF2534}]
2012-04-19 11:44	507904	----a-w-	c:\programdata\GG\ggdrive\ggdrive-overlay.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GGDriveOverlay2]
@="{E68D0A51-3C40-4712-B90D-DCFA93FF2534}"
[HKEY_CLASSES_ROOT\CLSID\{E68D0A51-3C40-4712-B90D-DCFA93FF2534}]
2012-04-19 11:44	507904	----a-w-	c:\programdata\GG\ggdrive\ggdrive-overlay.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GGDriveOverlay3]
@="{E68D0A52-3C40-4712-B90D-DCFA93FF2534}"
[HKEY_CLASSES_ROOT\CLSID\{E68D0A52-3C40-4712-B90D-DCFA93FF2534}]
2012-04-19 11:44	507904	----a-w-	c:\programdata\GG\ggdrive\ggdrive-overlay.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GGDriveOverlay4]
@="{E68D0A53-3C40-4712-B90D-DCFA93FF2534}"
[HKEY_CLASSES_ROOT\CLSID\{E68D0A53-3C40-4712-B90D-DCFA93FF2534}]
2012-04-19 11:44	507904	----a-w-	c:\programdata\GG\ggdrive\ggdrive-overlay.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Skan uzupełniający -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
.
- - - - USUNIĘTO PUSTE WPISY - - - -
.
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
.
.
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11f_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11f_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11f.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11f.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11f.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11f.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Pozostałe uruchomione procesy ------------------------
.
c:\windows\SysWOW64\PnkBstrA.exe
e:\program files (x86)\MSI Afterburner\MSIAfterburner.exe
.
**************************************************************************
.
Czas ukończenia: 2012-07-05  22:37:05 - komputer został uruchomiony ponownie
ComboFix-quarantined-files.txt  2012-07-05 20:37
.
Przed: 33 631 916 032 bajtów wolnych
Po: 33 512 341 504 bajtów wolnych
.
- - End Of File - - 1A94C86733ADA839B0B025EE920E792B