ComboFix.txt

hp dv6-6b15ew - Po podłączeniu internetu występuje błąd krytyczny

Ok zrobię to. Jeszcze jedno info. Dzisiaj zauważyłem że w trybie awaryjnym z obsługą sieci laptop normalnie działa z internetem Aktualizacja: System działa normalnie na internecie po kablu. (Ethernet)

ComboFix 12-10-21.01 - Pheonix 2012-10-21 11:36:32.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.48.1045.18.3562.2238 [GMT 2:00]
Uruchomiony z: F:\ComboFix.exe
AV: Norton Internet Security *Disabled/Outdated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security *Enabled/Outdated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Utworzono nowy punkt przywracania
.
.
((((((((((((((((((((((((((((((((((((((( Usuniêto )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\hpeF266.dll
.
.
((((((((((((((((((((((((( Pliki utworzone od 2012-09-21 do 2012-10-21 )))))))))))))))))))))))))))))))
.
.
2012-10-21 09:50 . 2012-10-21 09:50 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-10-19 20:30 . 2012-10-19 20:30 -------- d-----w- c:\windows\SysWow64\(null)
2012-10-19 05:17 . 2012-10-19 05:17 -------- d-----w- C:\found.001
2012-10-17 21:00 . 2012-10-17 21:00 -------- d-----w- c:\users\Pheonix\AppData\Roaming\Scilab
2012-10-17 20:57 . 2012-10-17 21:00 -------- d-----w- c:\program files\scilab-5.3.3
2012-10-17 20:23 . 2012-10-17 20:23 -------- d-----w- c:\program files (x86)\Edgard Multimedia
2012-10-17 20:13 . 2012-10-17 20:13 -------- d-----w- c:\program files (x86)\Edgard
2012-10-16 12:51 . 2012-10-16 12:51 -------- d-----w- C:\found.000
2012-10-16 11:34 . 2012-10-16 11:34 -------- d-----w- c:\users\Pheonix\AppData\Roaming\HD Tune Pro
2012-10-16 11:33 . 2012-10-16 11:36 -------- d-----w- c:\program files (x86)\HD Tune Pro
2012-10-16 09:00 . 2012-10-16 09:00 -------- d-----w- c:\users\Pheonix\AppData\Local\Macromedia
2012-10-16 08:56 . 2012-10-16 08:56 -------- d-----w- c:\users\Pheonix\AppData\Local\Mozilla
2012-10-11 19:51 . 2012-10-11 19:51 -------- d-----w- c:\program files (x86)\7-Zip
2012-10-07 17:35 . 2009-07-14 01:41 101376 ----a-w- c:\windows\system32\Spool\prtprocs\x64\HPZPPWN7.DLL
2012-10-05 06:59 . 2012-10-05 06:59 -------- d-----w- c:\program files\Seggger
2012-10-04 18:41 . 2012-10-04 18:41 -------- d-----w- c:\program files (x86)\Microsoft Synchronization Services
2012-10-04 18:41 . 2012-10-04 18:41 -------- d-----w- c:\program files (x86)\Microsoft SQL Server Compact Edition
2012-10-04 18:39 . 2012-10-04 18:39 -------- d-----w- c:\program files\Microsoft Office
2012-10-04 18:39 . 2012-10-04 18:39 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2012-10-04 18:38 . 2012-10-04 18:38 -------- d-----r- C:\MSOCache
2012-10-03 21:01 . 2012-10-03 21:02 -------- d-----w- C:\WinAVR
2012-10-03 07:12 . 2012-10-03 07:12 -------- d-----w- c:\users\Pheonix\AppData\Roaming\Xilisoft
2012-10-03 07:10 . 2012-10-03 07:10 -------- d-----w- c:\programdata\Xilisoft
2012-10-03 07:10 . 2012-10-03 07:10 -------- d-----w- c:\program files (x86)\Xilisoft
2012-10-01 21:49 . 2012-10-01 21:49 -------- d-----w- c:\windows\system32\drivers\NISx64\1309000.009
2012-10-01 21:39 . 2012-10-05 10:51 -------- d-----w- c:\users\Pheonix\AppData\Local\Nero
2012-10-01 21:31 . 2012-10-01 21:31 -------- d-----w- c:\users\Pheonix\AppData\Roaming\Nero
2012-09-30 08:49 . 2011-12-16 07:38 422400 ----a-w- c:\windows\system32\drivers\ewusbwwan.sys
2012-09-30 08:49 . 2011-12-02 12:23 223744 ----a-w- c:\windows\system32\drivers\ew_juwwanecm.sys
2012-09-30 08:49 . 2011-09-09 09:51 87040 ----a-w- c:\windows\system32\drivers\ew_jubusenum.sys
2012-09-30 08:49 . 2011-09-09 09:51 72192 ----a-w- c:\windows\system32\drivers\ew_jucdcecm.sys
2012-09-30 08:49 . 2011-09-09 09:51 28672 ----a-w- c:\windows\system32\drivers\ew_juextctrl.sys
2012-09-30 08:49 . 2011-09-09 09:51 98304 ----a-w- c:\windows\system32\drivers\ew_jucdcacm.sys
2012-09-30 08:49 . 2011-08-16 15:17 223232 ----a-w- c:\windows\system32\drivers\ewusbmdm.sys
2012-09-30 08:49 . 2010-10-08 14:59 32768 ----a-w- c:\windows\system32\drivers\ewdcsc.sys
2012-09-30 08:49 . 2010-09-26 16:09 22016 ----a-w- c:\windows\system32\drivers\ew_hwupgrade.sys
2012-09-30 08:49 . 2010-08-06 05:43 1001472 ----a-w- c:\windows\system32\drivers\mod7700.sys
2012-09-30 08:49 . 2010-07-27 07:52 117248 ----a-w- c:\windows\system32\drivers\ew_hwusbdev.sys
2012-09-30 08:49 . 2010-03-20 10:06 13952 ----a-w- c:\windows\system32\drivers\ew_usbenumfilter.sys
2012-09-26 10:50 . 2012-09-26 10:53 -------- d-----w- c:\program files (x86)\Common Files\Nero
2012-09-26 10:50 . 2012-09-26 10:57 -------- d-----w- c:\programdata\Nero
2012-09-26 10:16 . 2012-09-26 10:16 22 --sha-w- c:\users\Pheonix\AppData\Roaming\Sys2662.Config.Repository.bin
2012-09-26 10:16 . 2012-09-26 10:42 -------- d-----w- c:\program files (x86)\jv16 PowerTools 2011
2012-09-26 10:01 . 2012-09-26 10:01 -------- d-----w- c:\program files (x86)\uTorrent
2012-09-26 09:48 . 2012-10-17 19:49 -------- d-----w- c:\users\Pheonix\AppData\Roaming\uTorrent
2012-09-26 09:08 . 2011-12-01 09:42 15920 ----a-w- c:\windows\system32\drivers\NBVolUp.sys
2012-09-26 09:08 . 2011-12-01 09:42 72240 ----a-w- c:\windows\system32\drivers\NBVol.sys
2012-09-26 09:08 . 2012-09-26 10:56 -------- d-----w- c:\program files (x86)\Nero
2012-09-26 08:54 . 2012-09-26 08:54 -------- d-----w- c:\program files (x86)\Trafo
2012-09-24 07:57 . 2012-09-24 07:58 -------- d-----w- c:\users\Public\CyberLink
2012-09-24 07:57 . 2012-09-24 07:57 -------- d-----w- c:\users\Pheonix\AppData\Roaming\CyberLink
2012-09-24 07:56 . 2012-09-24 14:10 -------- d-----w- c:\programdata\CyberLink
2012-09-24 07:55 . 2012-09-24 14:08 -------- d-----w- c:\programdata\SmartSound Software Inc
2012-09-24 07:55 . 2012-09-24 07:55 -------- d-----w- c:\programdata\eSellerate
2012-09-24 07:55 . 2012-09-24 07:55 -------- d-----w- c:\program files (x86)\SmartSound Software
2012-09-24 07:53 . 2012-09-24 07:53 -------- d-----w- c:\program files (x86)\Common Files\Apple
2012-09-24 07:53 . 2012-09-24 07:53 -------- d-----w- c:\users\Pheonix\AppData\Local\Apple
2012-09-24 07:53 . 2012-09-24 07:53 -------- d-----w- c:\programdata\Apple
2012-09-24 07:48 . 2012-09-24 07:48 -------- d-----w- c:\programdata\CLSK
2012-09-22 16:30 . 2012-09-22 16:30 -------- d-----w- c:\users\Pheonix\AppData\Local\Labcenter Electronics
2012-09-22 16:26 . 2012-09-22 16:27 -------- d-----w- c:\program files (x86)\Common Files\Labcenter Electronics
2012-09-22 16:26 . 2012-09-22 16:26 -------- d-----w- c:\program files (x86)\Labcenter Electronics
2012-09-22 16:25 . 2012-09-22 16:25 -------- d-----w- c:\users\Pheonix\AppData\Roaming\InstallShield
2012-09-22 13:13 . 2012-09-22 13:13 -------- d-----w- c:\windows\Acronis
2012-09-22 13:04 . 2012-09-22 13:04 276576 ----a-w- c:\windows\system32\drivers\snapman.sys
2012-09-22 13:04 . 2012-09-22 13:04 -------- d-----w- c:\program files (x86)\Common Files\Acronis
2012-09-22 13:04 . 2012-09-22 13:04 -------- d-----w- c:\program files (x86)\Acronis
2012-09-21 13:52 . 2012-09-21 13:52 -------- d-----w- c:\program files (x86)\EAGLE-6.2.0
2012-09-21 13:51 . 2012-09-21 13:51 -------- d-----w- c:\users\Pheonix\AppData\Roaming\CadSoft
.
.
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-20 13:11 . 2012-08-18 08:31 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
2012-10-16 09:00 . 2012-08-18 07:16 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-10-16 09:00 . 2012-08-18 07:16 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-09-21 05:32 . 2012-09-21 05:32 84192 ----a-w- c:\programdata\Microsoft\VisualStudio\10.0\1033\ResourceCache.dll
2012-09-19 21:43 . 2012-09-19 21:43 10454 ------w- c:\windows\SysWow64\drivers\parldr2k.sys
2012-09-03 14:43 . 2012-09-03 14:43 821736 ------w- c:\windows\SysWow64\npDeployJava1.dll
2012-09-03 14:43 . 2012-09-03 14:43 746984 ------w- c:\windows\SysWow64\deployJava1.dll
2012-09-03 14:43 . 2012-09-03 14:43 95208 ------w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2012-08-18 10:18 . 2012-05-20 18:39 6656 ----a-w- c:\windows\system32\lpcio.dll
2012-08-18 08:30 . 2012-08-18 08:30 53248 ----a-r- c:\users\Pheonix\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
2012-08-18 07:09 . 2012-08-18 07:10 6656 ----a-w- c:\windows\system32\bcmwlrc.dll
2012-08-18 07:09 . 2012-08-18 07:10 95472 ----a-w- c:\windows\system32\bcmwlcoi.dll
2012-08-18 07:09 . 2012-08-18 07:10 3891200 ----a-w- c:\windows\system32\bcmihvsrv64.dll
2012-08-18 07:09 . 2012-08-18 07:10 3555840 ----a-w- c:\windows\system32\bcmihvui64.dll
2012-08-18 07:09 . 2012-08-18 07:10 3058168 ----a-w- c:\windows\system32\drivers\BCMWL664.SYS
2012-08-18 00:12 . 2012-08-18 00:12 175736 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2012-07-28 04:09 . 2012-07-28 04:09 5538984 ------w- c:\windows\SysWow64\atiumdag.dll
2012-07-28 04:07 . 2012-07-28 04:07 10278912 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2012-07-28 03:43 . 2012-07-28 03:43 70144 ----a-w- c:\windows\system32\coinst_8.982.dll
2012-07-28 03:19 . 2012-07-28 03:19 24935424 ----a-w- c:\windows\system32\atio6axx.dll
2012-07-28 02:50 . 2012-07-28 02:50 20546560 ------w- c:\windows\SysWow64\atioglxx.dll
2012-07-28 02:15 . 2012-07-28 02:15 163840 ----a-w- c:\windows\system32\atiapfxx.exe
2012-07-28 02:15 . 2012-07-28 02:15 931328 ------w- c:\windows\SysWow64\aticfx32.dll
2012-07-28 02:13 . 2012-07-28 02:13 1100288 ----a-w- c:\windows\system32\aticfx64.dll
2012-07-28 02:10 . 2012-07-28 02:10 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll
2012-07-28 02:10 . 2012-07-28 02:10 534528 ----a-w- c:\windows\system32\atieclxx.exe
2012-07-28 02:09 . 2012-07-28 02:09 239616 ----a-w- c:\windows\system32\atiesrxx.exe
2012-07-28 02:08 . 2012-07-28 02:08 120320 ----a-w- c:\windows\system32\atitmm64.dll
2012-07-28 02:08 . 2012-07-28 02:08 21504 ----a-w- c:\windows\system32\atimuixx.dll
2012-07-28 02:07 . 2012-07-28 02:07 59392 ----a-w- c:\windows\system32\atiedu64.dll
2012-07-28 02:07 . 2012-07-28 02:07 43520 ------w- c:\windows\SysWow64\ati2edxx.dll
2012-07-28 02:07 . 2012-07-28 02:07 6430208 ------w- c:\windows\SysWow64\atidxx32.dll
2012-07-28 01:51 . 2012-07-28 01:51 7052288 ----a-w- c:\windows\system32\atidxx64.dll
2012-07-28 01:41 . 2012-07-28 01:41 4266496 ----a-w- c:\windows\system32\atiumd6a.dll
2012-07-28 01:35 . 2012-07-28 01:35 51200 ----a-w- c:\windows\system32\aticalrt64.dll
2012-07-28 01:35 . 2012-07-28 01:35 46080 ------w- c:\windows\SysWow64\aticalrt.dll
2012-07-28 01:35 . 2012-07-28 01:35 44544 ----a-w- c:\windows\system32\aticalcl64.dll
2012-07-28 01:35 . 2012-07-28 01:35 44032 ------w- c:\windows\SysWow64\aticalcl.dll
2012-07-28 01:34 . 2012-07-28 01:34 16034304 ----a-w- c:\windows\system32\aticaldd64.dll
2012-07-28 01:32 . 2012-07-28 01:32 4751872 ------w- c:\windows\SysWow64\atiumdva.dll
2012-07-28 01:30 . 2012-07-28 01:30 13605888 ------w- c:\windows\SysWow64\aticaldd.dll
2012-07-28 01:25 . 2012-07-28 01:25 6676480 ----a-w- c:\windows\system32\atiumd64.dll
2012-07-28 01:15 . 2012-07-28 01:15 540160 ----a-w- c:\windows\system32\atiadlxx.dll
2012-07-28 01:15 . 2012-07-28 01:15 368640 ------w- c:\windows\SysWow64\atiadlxy.dll
2012-07-28 01:15 . 2012-07-28 01:15 17920 ----a-w- c:\windows\system32\atig6pxx.dll
2012-07-28 01:15 . 2012-07-28 01:15 14848 ----a-w- c:\windows\system32\atiglpxx.dll
2012-07-28 01:15 . 2012-07-28 01:15 14848 ------w- c:\windows\SysWow64\atiglpxx.dll
2012-07-28 01:15 . 2012-07-28 01:15 41984 ----a-w- c:\windows\system32\atig6txx.dll
2012-07-28 01:14 . 2012-07-28 01:14 33280 ------w- c:\windows\SysWow64\atigktxx.dll
2012-07-28 01:14 . 2012-07-28 01:14 368640 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2012-07-28 01:13 . 2012-07-28 01:13 129536 ----a-w- c:\windows\system32\atiuxp64.dll
2012-07-28 01:13 . 2012-07-28 01:13 109568 ------w- c:\windows\SysWow64\atiuxpag.dll
2012-07-28 01:13 . 2012-07-28 01:13 103936 ----a-w- c:\windows\system32\atiu9p64.dll
2012-07-28 01:13 . 2012-07-28 01:13 83456 ------w- c:\windows\SysWow64\atiu9pag.dll
2012-07-28 01:12 . 2012-07-28 01:12 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2012-07-28 01:08 . 2012-07-28 01:08 56320 ----a-w- c:\windows\system32\atimpc64.dll
2012-07-28 01:08 . 2012-07-28 01:08 56320 ----a-w- c:\windows\system32\amdpcom64.dll
2012-07-28 01:08 . 2012-07-28 01:08 56832 ------w- c:\windows\SysWow64\atimpc32.dll
2012-07-28 01:08 . 2012-07-28 01:08 56832 ------w- c:\windows\SysWow64\amdpcom32.dll
2012-07-27 20:47 . 2012-07-27 20:47 187392 ----a-w- c:\windows\system32\clinfo.exe
2012-07-27 20:47 . 2012-07-27 20:47 75776 ----a-w- c:\windows\system32\OpenVideo64.dll
2012-07-27 20:47 . 2012-07-27 20:47 65024 ------w- c:\windows\SysWow64\OpenVideo.dll
2012-07-27 20:47 . 2012-07-27 20:47 63488 ----a-w- c:\windows\system32\OVDecode64.dll
2012-07-27 20:47 . 2012-07-27 20:47 56320 ------w- c:\windows\SysWow64\OVDecode.dll
2012-07-27 20:46 . 2012-07-27 20:46 16464896 ----a-w- c:\windows\system32\amdocl64.dll
2012-07-27 20:46 . 2012-07-27 20:46 13013504 ------w- c:\windows\SysWow64\amdocl.dll
2012-07-27 20:44 . 2012-07-27 20:44 54784 ----a-w- c:\windows\system32\OpenCL.dll
2012-07-27 20:44 . 2012-07-27 20:44 50176 ------w- c:\windows\SysWow64\OpenCL.dll
.
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyœlne, prawid³owe wpisy nie s¹ pokazane
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
" Mobile Partner " = " c:\program files (x86)\PLAY Web partner\PLAY Web partner " [X]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
" StartCCC " = " c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe " [2012-08-06 642216]
" HPOSD " = " c:\program files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe " [2011-08-19 379960]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-7-29 1132320]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
" ConsentPromptBehaviorAdmin " = 0 (0x0)
" ConsentPromptBehaviorUser " = 3 (0x3)
" EnableLUA " = 0 (0x0)
" EnableUIADesktopToggle " = 0 (0x0)
" PromptOnSecureDesktop " = 0 (0x0)
" EnableLinkedConnections " = 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
" LoadAppInit_DLLs " =0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
" mixer2 " =wdmaud.drv
.
R0 vmci;VMware VMCI Bus Driver;c:\windows\system32\DRIVERS\vmci.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 OMSI download service;Sony Ericsson OMSI download service;c:\program files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R2 PARLDR2K;PARLDR2K;c:\windows\system32\drivers\parldr2k.sys [x]
R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2010-07-14 344616]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-03-02 39464]
R3 CoordinatorServiceHost;SW Distributed TS Coordinator Service;c:\program files\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe [2011-09-27 89160]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys [2010-07-27 117248]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2012-08-24 1431888]
R3 huawei_cdcacm;huawei_cdcacm;c:\windows\system32\DRIVERS\ew_jucdcacm.sys [2011-09-09 98304]
R3 huawei_cdcecm;huawei_cdcecm;c:\windows\system32\DRIVERS\ew_jucdcecm.sys [2011-09-09 72192]
R3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys [2011-09-09 87040]
R3 huawei_ext_ctrl;huawei_ext_ctrl;c:\windows\system32\DRIVERS\ew_juextctrl.sys [2011-09-09 28672]
R3 nmwcdnsucx64;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsucx64.sys [2011-08-17 12800]
R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys [2011-08-17 171008]
R3 PRODIGY;PRODIGY;c:\windows\system32\Drivers\PRODIGY.SYS [2006-08-29 32377]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-21 20992]
R3 Remote Solver for Flow Simulation 2012;Remote Solver for Flow Simulation 2012;c:\program files\SolidWorks Corp\SolidWorks Flow Simulation\binCFW\StandAloneSlv.exe [2011-08-17 109624]
R3 s0017bus;Sony Ericsson Device 0017 driver (WDM);c:\windows\system32\DRIVERS\s0017bus.sys [2008-10-21 113704]
R3 s0017mdfl;Sony Ericsson Device 0017 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s0017mdfl.sys [2008-10-21 19496]
R3 s0017mdm;Sony Ericsson Device 0017 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s0017mdm.sys [2008-10-21 152616]
R3 s0017mgmt;Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s0017mgmt.sys [2008-10-21 133160]
R3 s0017nd5;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS);c:\windows\system32\DRIVERS\s0017nd5.sys [2008-10-21 34856]
R3 s0017obex;Sony Ericsson Device 0017 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s0017obex.sys [2008-10-21 128552]
R3 s0017unic;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM);c:\windows\system32\DRIVERS\s0017unic.sys [2008-10-21 145960]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [2010-11-21 88960]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [2010-11-21 34816]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys [2012-04-11 82560]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys [2012-04-11 42624]
S0 NBVol;Nero Backup Volume Filter Driver;c:\windows\system32\DRIVERS\NBVol.sys [2011-12-01 72240]
S0 NBVolUp;Nero Backup Volume Upper Filter Driver;c:\windows\system32\DRIVERS\NBVolUp.sys [2011-12-01 15920]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1308000.00E\SYMDS64.SYS [2011-08-15 451192]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1308000.00E\SYMEFA64.SYS [2012-05-22 1129120]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\Definitions\BASHDefs\20120928.001\BHDrvx64.sys [2012-08-31 1385120]
S1 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\NISx64\1308000.00E\ccSetx64.sys [2012-06-07 167072]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\Definitions\IPSDefs\20121012.001\IDSvia64.sys [2012-09-01 513184]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1308000.00E\Ironx64.SYS [2012-04-18 190072]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1308000.00E\SYMNETS.SYS [2012-04-18 405624]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-07-28 239616]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-08-06 361984]
S2 AODDriver4.1;AODDriver4.1;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-03-05 53888]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2011-05-13 30520]
S2 HWDeviceService64.exe;HWDeviceService64.exe;c:\programdata\DatacardService\HWDeviceService64.exe [2011-03-14 346976]
S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-06-28 2413056]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2011-11-25 687400]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\19.8.0.14\ccSvcHst.exe [2012-06-16 138272]
S3 amdhub30;AMD USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\amdhub30.sys [2012-03-30 105088]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2012-07-28 10278912]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2012-07-28 368640]
S3 amdxhc;AMD USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\amdxhc.sys [2012-03-30 223872]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2012-05-14 96896]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-10-14 138912]
S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [2011-05-30 338536]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-02-17 428136]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2012-03-30 56448]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
.
.
ZawartoϾ folderu 'Zaplanowane zadania'
.
2012-09-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3717485730-3922713597-595621700-1000Core.job
- c:\users\Pheonix\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-18 00:06]
.
2012-09-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3717485730-3922713597-595621700-1000UA.job
- c:\users\Pheonix\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-18 00:06]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
" SysTrayApp " = " c:\program files\IDT\WDM\sttray64.exe " [2011-06-02 1128448]
" EvtMgr6 " = " c:\program files\Logitech\SetPointP\SetPoint.exe " [2011-10-07 1744152]
" NUSB3MON " = " c:\program files (x86)\ATI Technologies\AMDUSB3DeviceDetector\nusb3mon.exe " [2012-04-11 97280]
.
------- Skan uzupe³niaj¹cy -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E & ksportuj do programu Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Wyœlij obraz do urz¹dzenia & Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Wyœlij stronê do urz¹dzenia & Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.1.1 192.168.1.1
.
- - - - USUNIÊTO PUSTE WPISY - - - -
.
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\NIS]
" ImagePath " = " \ " c:\program files (x86)\Norton Internet Security\Engine\19.8.0.14\ccSvcHst.exe\ " /s \ " NIS\ " /m \ " c:\program files (x86)\Norton Internet Security\Engine\19.8.0.14\diMaster.dll\ " /prefetch:1 "
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@= " FlashBroker "
" LocalizedString " = " @c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe,-101 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
" Enabled " =dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@= " c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@= " {FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@= " IFlashBroker5 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@= " {00020424-0000-0000-C000-000000000046} "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@= " {FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
" Version " = " 1.0 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@= " FlashBroker "
" LocalizedString " = " @c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe,-101 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
" Enabled " =dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@= " c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@= " {FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@= " Shockwave Flash Object "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@= " c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx "
" ThreadingModel " = " Apartment "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@= " 0 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@= " ShockwaveFlash.ShockwaveFlash.11 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@= " c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@= " {D27CDB6B-AE6D-11cf-96B8-444553540000} "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@= " 1.0 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@= " ShockwaveFlash.ShockwaveFlash "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@= " Macromedia Flash Factory Object "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@= " c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx "
" ThreadingModel " = " Apartment "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@= " FlashFactory.FlashFactory.1 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@= " c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@= " {D27CDB6B-AE6D-11cf-96B8-444553540000} "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@= " 1.0 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@= " FlashFactory.FlashFactory "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@= " IFlashBroker5 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@= " {00020424-0000-0000-C000-000000000046} "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@= " {FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
" Version " = " 1.0 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@= " ?????????????????? v1 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@= " {E23FE9C6-778E-49D4-B537-38FCDE4887D8} "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@= " ?????????????????? v2 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@= " {9BE31822-FDAD-461B-AD51-BE1D1C159921} "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
" Solution " = " {15727DE6-F92D-4E46-ACB4-0E2C58B31A18} "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
" Key " = " ActionsPane3 "
" Location " = " c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd "
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
" BlindDial " =dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
" BlindDial " =dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
" BlindDial " =dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
" BlindDial " =dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Czas ukoñczenia: 2012-10-21 12:14:30
ComboFix-quarantined-files.txt 2012-10-21 10:14
.
Przed: 76 598 341 632 bajtów wolnych
Po: 76 439 379 968 bajtów wolnych
.
- - End Of File - - 1A15B7263CB36F2B12822667221CFA99