Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 23-04-2017 01 Uruchomiony przez TOMEK (05-05-2017 10:30:01) Uruchomiony z C:\Users\TOMEK\Desktop Windows 7 Ultimate Service Pack 1 (X64) (2017-05-04 13:07:25) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-3535244391-3519364958-2513344911-500 - Administrator - Disabled) Gość (S-1-5-21-3535244391-3519364958-2513344911-501 - Limited - Enabled) HomeGroupUser$ (S-1-5-21-3535244391-3519364958-2513344911-1016 - Limited - Enabled) TOMEK (S-1-5-21-3535244391-3519364958-2513344911-1000 - Administrator - Enabled) => C:\Users\TOMEK ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: COMODO Antivirus (Enabled - Up to date) {D0CC7563-ABD2-DEBE-138E-FDD553335AF2} AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AS: Comodo Defense+ (Enabled - Up to date) {6BAD9487-8DE8-D130-293E-C6A728B4104F} AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: COMODO Firewall (Enabled) {E8F7F446-E1BD-DFE6-38D1-54E0ADE01D89} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) . . (Version: 7.1 - Intel) Hidden . . . (x32 Version: 2.7.2.4 - Intel) Hidden 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Acronis True Image 2015 (HKLM-x32\...\{F20E23FC-EC76-4F46-94E7-9321A939F5F8}Visible) (Version: 18.0.5539 - Acronis) Acronis True Image 2015 (x32 Version: 18.0.5539 - Acronis) Hidden Adobe Flash Player 25 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 25.0.0.148 - Adobe Systems Incorporated) Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.148 - Adobe Systems Incorporated) Adobe Reader XI (11.0.20) - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.20 - Adobe Systems Incorporated) AODR (x32 Version: 3.0.0.0 - Accurate Solutions) Hidden Auta 2 (HKLM-x32\...\{FF10D622-7BFE-48C6-8DF6-40D8CB1D3C1B}) (Version: 1.00.0000 - Disney Interactive Studios) BitTorrent (HKU\S-1-5-21-3535244391-3519364958-2513344911-1000\...\BitTorrent) (Version: 7.9.2.32128 - BitTorrent Inc.) Bouquet Editor Suite v1.22 Uninstall (HKLM-x32\...\Bouquet Editor Suite_is1) (Version: 1.2.2.0 - ) CCleaner (HKLM\...\CCleaner) (Version: 5.29 - Piriform) CDDRV_Installer (Version: 4.60 - Logitech) Hidden Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden COMODO Internet Security Premium (HKLM\...\{C7C71F0C-4CC1-4B17-943C-96E5196DDA74}) (Version: 8.4.0.5165 - COMODO Security Solutions Inc.) Conexant HDA D330 MDC V.92 Modem (HKLM\...\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2C06&SUBSYS_14F1000F) (Version: 7.80.4.0 - Conexant) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.1107.115.102 - ALPS ELECTRIC CO., LTD.) Digital Line Detect (HKLM-x32\...\{7696BEED-8C66-4DBE-A8D8-EAD1B1116C0F}) (Version: 1.2.1 - Conexant) doPDF 7.3 printer (HKLM\...\doPDF 7 printer_is1) (Version: - Softland) DW WLAN Card Utility (HKLM\...\DW WLAN Card Utility) (Version: 6.30.223.259 - Dell Inc.) EVEREST Ultimate Edition v5.30 (HKLM-x32\...\EVEREST Ultimate Edition_is1) (Version: 5.30 - Lavalys, Inc.) FormatFactory 3.3.5.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.5.0 - Format Factory) Gadu-Gadu 7.7 (HKLM-x32\...\Gadu-Gadu) (Version: - ) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.9.212 - SurfRight B.V.) Instrukcja obslugi modemu Conexant (HKLM\...\UsrGuide) (Version: - Conexant Systems) Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation) Intel(R) TV Wizard (HKLM\...\TVWiz) (Version: - ) Intel® Driver Update Utility (HKLM-x32\...\{954190cd-c66c-4650-bd15-f3dd85f2ae15}) (Version: 2.7.2.4 - Intel) Karta Dell Wireless WLAN (HKLM\...\Broadcom 802.11b Network Adapter) (Version: 4.170.25.12 - Dell Inc.) KhalInstallWrapper (Version: 2.00.0000 - Logitech) Hidden Laptop Integrated Webcam Driver (1.04.01.1011) (HKLM\...\Creative OEM002) (Version: - ) Live! Cam Avatar Creator (HKLM-x32\...\{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}) (Version: 4.6.0817.1 - Creative Technology Ltd.) Live! Cam Avatar v1.0 (HKLM-x32\...\{1D5E29AD-39A9-4D0A-A8B6-46A6FCD8C995}) (Version: 1.0 - Creative Technology Ltd.) Logitech Options (HKLM\...\LogiOptions) (Version: - Logitech) Logitech SetPoint 6.67 (HKLM\...\sp6) (Version: 6.67.83 - Logitech) Malwarebytes (wersja 3.0.6.1469) (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes) Managed DirectX (0900) (x32 Version: 4.09.00.0900 - Microsoft) Hidden Marvell Miniport Driver (HKLM-x32\...\Marvell Miniport Driver) (Version: 12.10.14.3 - Marvell) Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.6.01055 - Microsoft Corporation) Microsoft Office 32-bit Components 2013 (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Office Korrekturhilfen 2013 - Deutsch (HKLM\...\{90150000-001F-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Office Proofing Tools 2013 - English (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Office Sounds (HKLM-x32\...\{10CE1EA2-12E9-11D3-825E-00C04F6843FE}) (Version: 1.0.0.0 - Microsoft Corp) Microsoft OneDrive (HKU\S-1-5-21-3535244391-3519364958-2513344911-1000\...\OneDriveSetup.exe) (Version: 17.3.1165.0612 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50906.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP1 English (HKLM-x32\...\{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}) (Version: 3.5.5692.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP1 x64 English (HKLM\...\{F83779DF-E1F5-43A2-A7BE-732F856FADB7}) (Version: 3.5.5692.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Modem Diagnostic Tool (HKLM-x32\...\{294EAADF-E50F-4DD8-AD8D-19587EA10512}) (Version: 1.0.28.0 - Dell) Mozilla Firefox 53.0 (x86 pl) (HKLM-x32\...\Mozilla Firefox 53.0 (x86 pl)) (Version: 53.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 53.0.0.6312 - Mozilla) NapiProjekt (2.2.0.2399) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) Narzędzia sprawdzające pakietu Microsoft Office 2013 — polski (HKLM\...\{90150000-001F-0415-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) NetWaiting (HKLM-x32\...\{3F92ABBB-6BBF-11D5-B229-002078017FBF}) (Version: 2.5.54 - BVRP Software, Inc) Nokia Connectivity Cable Driver (HKLM-x32\...\{C3F19A5F-35A8-4FDB-A6ED-0F4CE398DA48}) (Version: 7.0.2.0 - Nokia) OpenFM (HKU\S-1-5-21-3535244391-3519364958-2513344911-1000\...\OpenFM) (Version: 2 - GG Network S.A.) OutlookFreeware.com Utilities (HKLM\...\{64C5216E-6BD4-49CC-882A-EAA9A909CE98}) (Version: 4.2.4 - Relief Software) Pakiet sterowników systemu Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) (HKLM\...\FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D) (Version: 08/22/2008 7.0.0.0 - Nokia) PC Connectivity Solution (HKLM-x32\...\{83258E90-1F76-4E13-9F60-A0F8ED41E76F}) (Version: 8.22.7.0 - Nokia) Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) Podstawowe programy Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) QuickSet (HKLM\...\{5563A0F6-CF81-451E-87AD-A50075BCA9B7}) (Version: 8.2.20 - Dell Inc.) Recuva (HKLM\...\Recuva) (Version: 1.51 - Piriform) Revo Uninstaller Pro 3.1.9 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.9 - VS Revo Group, Ltd.) RICOH Media Driver ver.2.07.01.00 (HKLM-x32\...\{2B818257-E6C7-4841-8C29-C5C9A982BCE5}) (Version: 2.07.01.00 - RICOH) RICOH R5U8xx Media Driver ver.3.62.02 (HKLM-x32\...\{59F6A514-9813-47A3-948C-8A155460CC2A}) (Version: 3.62.02 - RICOH) SDFormatter (HKLM-x32\...\{179324FF-7B16-4BA8-9836-055CAAEE4F08}) (Version: 4.0.0 - SD Association) Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft) Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version: - Microsoft) Hidden SigmaTel Audio (HKLM-x32\...\{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}) (Version: 5.10.5210.0 - SigmaTel) Skype™ 7.32 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.32.104 - Skype Technologies S.A.) System Requirements Lab for Intel (HKLM-x32\...\{53C63F43-B827-42D9-8886-4698D91EA33B}) (Version: 4.5.15.0 - Husdawg, LLC) ToonCar (HKLM-x32\...\ToonCar) (Version: - ) TP-LINK TL-WN821N(C)_TL-WN822N_TL-WN823N Driver (HKLM-x32\...\{852E893E-E4FD-45BB-8B17-72ADDF686974}) (Version: 1.3.1 - TP-LINK) TP-LINK USB Printer Controller (HKLM-x32\...\{3EC900B5-28EE-4472-A9FF-B11A879EC838}) (Version: 1.12.0927 - TP-LINK) TuneUp Utilities Language Pack (pl-PL) (x32 Version: 13.0.3020.16 - TuneUp Software) Hidden UltraISO Premium V9.62 (HKLM-x32\...\UltraISO_is1) (Version: - ) Win32DiskImager version 0.9.5 (HKLM-x32\...\{D074CE74-912A-4AD3-A0BF-3937D9D01F17}_is1) (Version: 0.9.5 - ImageWriter Developers) WinRAR 5.00 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH) Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-3535244391-3519364958-2513344911-1000_Classes\CLSID\{02EFC05F-B9F0-4AB1-9A90-C8B44DE98FCA}\InprocServer32 -> C:\Program Files\Common Files\MAPILab Ltd\MLTrial21.dll (MAPILab Ltd.) CustomCLSID: HKU\S-1-5-21-3535244391-3519364958-2513344911-1000_Classes\CLSID\{05EB042D-7A3E-4BC9-A88B-DF4198032ED8}\InprocServer32 -> C:\Program Files\Common Files\MAPILab Ltd\MLTrial21.dll (MAPILab Ltd.) CustomCLSID: HKU\S-1-5-21-3535244391-3519364958-2513344911-1000_Classes\CLSID\{072F301B-26A7-4A8C-B3CE-779D544BE724}\InprocServer32 -> C:\Program Files\Common Files\MAPILab Ltd\MLTrial21.dll (MAPILab Ltd.) CustomCLSID: HKU\S-1-5-21-3535244391-3519364958-2513344911-1000_Classes\CLSID\{3924AAAA-9718-4D23-9E1F-11B9A4855B7E}\InprocServer32 -> C:\Program Files\Common Files\MAPILab Ltd\MLTrial21.dll (MAPILab Ltd.) CustomCLSID: HKU\S-1-5-21-3535244391-3519364958-2513344911-1000_Classes\CLSID\{443415D7-CDB0-4EC9-B5BF-E776A2079540}\InprocServer32 -> C:\Users\TOMEK\AppData\Local\OutlookFreeware.com\ReliefJet.Component.Outlook.Addin.dll (Relief Software) CustomCLSID: HKU\S-1-5-21-3535244391-3519364958-2513344911-1000_Classes\CLSID\{466587A1-27C5-48B6-91DD-A20FE6C0ADA7}\InprocServer32 -> C:\Program Files\Common Files\MAPILab Ltd\MLTrial21.dll (MAPILab Ltd.) CustomCLSID: HKU\S-1-5-21-3535244391-3519364958-2513344911-1000_Classes\CLSID\{472609F2-F33F-4969-B0B4-EDD9DB710BC9}\InprocServer32 -> C:\Users\TOMEK\AppData\Local\OutlookFreeware.com\ReliefJet.Component.Outlook.Addin.dll (Relief Software) CustomCLSID: HKU\S-1-5-21-3535244391-3519364958-2513344911-1000_Classes\CLSID\{7077FBAF-36D5-41A1-AA6E-87ED7E8C2ACA}\InprocServer32 -> C:\Program Files\Common Files\MAPILab Ltd\MLTrial21.dll (MAPILab Ltd.) CustomCLSID: HKU\S-1-5-21-3535244391-3519364958-2513344911-1000_Classes\CLSID\{7A9D5610-95E2-4473-A35D-07691C8A412B}\InprocServer32 -> C:\Program Files\Common Files\MAPILab Ltd\MLTrial21.dll (MAPILab Ltd.) CustomCLSID: HKU\S-1-5-21-3535244391-3519364958-2513344911-1000_Classes\CLSID\{895A7E49-7E32-4528-AA63-4070E97BBBA2}\InprocServer32 -> C:\Program Files\Common Files\MAPILab Ltd\MLTrial21.dll (MAPILab Ltd.) CustomCLSID: HKU\S-1-5-21-3535244391-3519364958-2513344911-1000_Classes\CLSID\{8BD35B7E-252D-4255-A6B4-97BFD164EF9D}\InprocServer32 -> C:\Program Files\Common Files\MAPILab Ltd\MLTrial21.dll (MAPILab Ltd.) CustomCLSID: HKU\S-1-5-21-3535244391-3519364958-2513344911-1000_Classes\CLSID\{933C414E-EDE6-4024-A677-979B73B7D5BB}\InprocServer32 -> C:\Program Files\Common Files\MAPILab Ltd\MLTrial21.dll (MAPILab Ltd.) CustomCLSID: HKU\S-1-5-21-3535244391-3519364958-2513344911-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\TOMEK\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3535244391-3519364958-2513344911-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\TOMEK\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3535244391-3519364958-2513344911-1000_Classes\CLSID\{CB32F11A-81B4-4455-91EF-6219447739C0}\InprocServer32 -> C:\Program Files\Common Files\MAPILab Ltd\MLTrial21.dll (MAPILab Ltd.) CustomCLSID: HKU\S-1-5-21-3535244391-3519364958-2513344911-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\TOMEK\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3535244391-3519364958-2513344911-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\TOMEK\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3535244391-3519364958-2513344911-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\TOMEK\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612\amd64\FileSyncApi64.dll (Microsoft Corporation) ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {02105091-B693-4CE6-9A64-9E896F949112} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-02-02] (Adobe Systems Incorporated) Task: {029B9692-BB09-4F02-A226-3A6FD405BF77} - System32\Tasks\{18752673-5393-4B66-9871-AA66B7DCF65A} => pcalua.exe -a C:\Users\TOMEK\Downloads\DELL\R295126\Setup.exe -d C:\Users\TOMEK\Downloads\DELL\R295126 Task: {07BB980B-B155-4977-A102-30709BB49AC8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-08] (Google Inc.) Task: {087EFBC6-4C44-4A3B-BE93-2D67FDE48CC5} - System32\Tasks\{694C3D24-BC96-4008-B55F-2502602934FB} => pcalua.exe -a C:\Users\TOMEK\Downloads\DELL\DELL_MULTI-DEVICE_A37_R295615\Setup.exe -d C:\Users\TOMEK\Downloads\DELL\DELL_MULTI-DEVICE_A37_R295615 Task: {09A8420E-26FD-43C3-8E64-B9D52F512525} - System32\Tasks\Microsoft\Windows\PLA\System\{B79FA382-8E8C-4179-AEC8-5D24A9884A8D}_System Diagnostics => Rundll32.exe C:\Windows\system32\pla.dll,PlaHost "system\System Diagnostics" "$(Arg0)" Task: {1395E360-C9D0-475A-AF36-031FA7442C85} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2016-09-14] (COMODO) Task: {19F1EBBB-048D-4251-B3E2-3EA09D9AF8E5} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe Task: {2B046E63-0C03-4260-895E-16BF4CD2BB36} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-05-03] (Piriform Ltd) Task: {3163E057-15F8-4466-9582-843C26D7D071} - System32\Tasks\{DE295F48-DADB-40A6-8712-1682B10040D1} => pcalua.exe -a C:\Users\TOMEK\Downloads\R140135\3100_216\Setup.exe -d C:\Users\TOMEK\Downloads\R140135\3100_216 Task: {3191F4F8-80DE-4F1E-BA1C-2A8D3FA498FB} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation) Task: {33A6BA95-7297-4941-8559-11AB3C84FFEF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-04-17] (Adobe Systems Incorporated) Task: {3BE4E547-E257-4CC0-B241-17C8978B7973} - System32\Tasks\{70154048-668C-4933-A179-1F527FCEFBC1} => pcalua.exe -a "D:\TOMEK\Downloads\DELL\Sterowniki Dell Inspiron 1525-Manufacture Intel-Compatibility Windows 7, Windows 7 x86 x64\R226750 Bluetooth-Dell Wireless 355-370\R226750\Win64\Inst.exe" -d "D:\TOMEK\Downloads\DELL\Sterowniki Dell Inspiron 1525-Manufacture Intel-Compatibility Windows 7, Windows 7 x86 x6 (dane wartości zawierają 56 znaków więcej). Task: {44685424-CF50-443A-B331-CBC40662557C} - System32\Tasks\{9AB78093-62FB-4FAA-AFAB-BB54743CDF2F} => pcalua.exe -a G:\SETUP.EXE -d G:\ Task: {459F7002-627B-41C8-8D18-DF7FE7EE8431} - System32\Tasks\CIS_{15198508-521A-4D69-8E5B-B94A6CCFF805} => C:\ProgramData\cis9701.exe <==== UWAGA Task: {48BF1917-673C-4F84-B5C1-A7A1F6AC47AA} - System32\Tasks\{18403F43-3726-4DE2-B9C4-94D80DBC5256} => pcalua.exe -a C:\dell\drivers\R280657\setup.exe -d C:\dell\drivers\R280657 Task: {5828DBC6-A84F-4524-8D3D-CDD3FA06702E} - System32\Tasks\{7DB8E82F-8FE7-46D7-A04E-A3A78C38B874} => pcalua.exe -a C:\Users\TOMEK\Downloads\DELL\R242438\IS.exe -d C:\Users\TOMEK\Downloads\DELL\R242438 Task: {665A7EF5-42AE-40B2-B1E2-85511A1E3ECC} - System32\Tasks\Intel\Intel Telemetry 2 => C:\Program Files\Intel\Telemetry 2.0\lrio.exe [2016-03-17] (Intel Corporation) Task: {69D0DD67-D535-45FB-B44A-C66761B77E27} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {6ACC3A61-0F7E-4540-8CD3-1B616C0656DD} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2016-09-14] (COMODO) Task: {758181A2-8B3D-456A-8849-55A37B20235C} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2016-09-14] (COMODO) Task: {7B376DE5-24B4-4DB1-A149-62DE7D0484FA} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {8E294489-9DD0-46A5-BFEB-077EA125C7E1} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => Wscript.exe //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\task.vbs" Task: {A1D60D55-A6B8-401B-BC05-2938E02DF2F2} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => d:\program files\windows defender\MpCmdRun.exe Task: {BB225BDB-C26F-4BB1-8491-50797108E7DB} - System32\Tasks\COMODO\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2016-09-14] (COMODO) Task: {BC01114A-8BC0-4A72-BDFF-AF766CA91C76} - System32\Tasks\CCleanerClean => C:\Program Files\CCleaner\CCleaner.exe [2017-05-03] (Piriform Ltd) Task: {CB477DAC-1740-4538-8CA6-34A18AFE0AE8} - System32\Tasks\{18E533B6-EC2C-4E3E-862A-0E7902D04404} => pcalua.exe -a C:\Users\TOMEK\Downloads\DELL\R219871\Setup.exe -d C:\Users\TOMEK\Downloads\DELL\R219871 Task: {CD60DDAE-AED4-459D-95C4-89AA0171B304} - System32\Tasks\{888E7D98-C8FE-4B17-9FE7-548F9D987EE1} => pcalua.exe -a "C:\Users\TOMEK\Desktop\TPmini usb大眼睛_线刷升级包_r1112\Setup.exe" -d "C:\Users\TOMEK\Desktop\TPmini usb大眼睛_线刷升级包_r1112" Task: {CE1CFC00-9B8E-46CA-9330-FAABCEDD9C41} - System32\Tasks\{6324B363-8004-4E7B-93E3-775B49487FA0} => pcalua.exe -a "C:\Program Files (x86)\Electronic Arts\Need for Speed SHIFT\Support\Need for Speed Shift_code.exe" -d "C:\Program Files (x86)\Electronic Arts\Need for Speed SHIFT\Support" Task: {E4117C8D-7BBE-40A8-9035-4A2E44D6BCA4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-08] (Google Inc.) Task: {E78D63BA-7963-416A-AA3C-EDEF7C49AED0} - System32\Tasks\{4ACC81B1-E1D2-4D0C-9802-5B39096AE01F} => pcalua.exe -a C:\Users\TOMEK\Downloads\DELL\R180762\Setup.exe -d C:\Users\TOMEK\Downloads\DELL\R180762 Task: {E8D0E941-251A-4FE8-A67E-FC2F33C627A0} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2016-09-14] (COMODO) Task: {F1447556-3C17-4B58-9ABB-2A46F1C90C65} - System32\Tasks\{C940F7DB-BEB6-4497-A350-1ED3DBC31ED3} => pcalua.exe -a C:\Users\TOMEK\Downloads\deleteduplicatesforoutlookv3.4.0.1\DeleteDuplicatesForOutlookV3.4.0.1\flnddo34\ddo\InstallDDO.exe -d C:\Users\TOMEK\Downloads\deleteduplicatesforoutlookv3.4.0.1\DeleteDuplicatesForOutlookV3.4.0.1\flnddo34\ddo Task: {F701622B-3D97-4C74-933D-4038A4D2C355} - System32\Tasks\{08768873-26E1-442B-8A5C-44C25BE5525C} => pcalua.exe -a C:\Users\TOMEK\Downloads\DELL\R242438\IS.exe -d C:\Users\TOMEK\Downloads\DELL\R242438 Task: {FD029691-4EF0-4136-9870-DB73F818A052} - System32\Tasks\{8D80508B-3CA3-41D5-BD96-7731D0E4F120} => pcalua.exe -a D:\TOMEK\Downloads\Application_YGHP9_WN_11.1.007_A02\Setup.exe -d D:\TOMEK\Downloads\Application_YGHP9_WN_11.1.007_A02 (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\CCleanerClean.job => C:\Program Files\CCleaner\CCleaner.exe ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ==================== Załadowane moduły (filtrowane) ============== 2016-10-09 23:17 - 2007-12-08 14:34 - 00031744 _____ () C:\Windows\System32\WLTRYSVC.EXE 2016-10-09 23:17 - 2007-12-08 14:34 - 00056832 _____ () C:\Windows\System32\bcmwlrmt.dll 2007-01-15 10:52 - 2007-01-15 10:52 - 00022016 _____ () C:\Windows\System32\cx21sl6.dll 2011-04-11 08:26 - 2011-04-11 07:26 - 00034304 _____ () C:\Windows\System32\spe__l.dll 2010-01-30 03:40 - 2010-01-30 03:40 - 04254560 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2017-03-07 19:04 - 2017-03-07 19:04 - 00157456 _____ () C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe 2017-04-17 16:24 - 2017-04-18 13:58 - 02271520 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll 2017-04-17 16:24 - 2017-04-18 13:58 - 02267600 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll 2017-04-07 09:41 - 2017-04-07 09:41 - 00054488 _____ () C:\Program Files\CCleaner\branding.dll 2017-04-11 00:57 - 2017-04-11 00:57 - 00069632 _____ () C:\Program Files\CCleaner\lang\lang-1045.dll 2012-09-21 15:46 - 2012-09-21 15:46 - 04226048 _____ () C:\Program Files (x86)\TP-LINK\USB Printer Controller\USB Printer Controller.exe 2016-03-16 11:25 - 2016-03-16 11:25 - 00073912 _____ () C:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav 2006-12-21 14:31 - 2006-12-21 14:31 - 00786432 _____ () C:\Program Files (x86)\Gadu-Gadu\LIBEAY32.dll 2006-12-21 14:31 - 2006-12-21 14:31 - 00159744 _____ () C:\Program Files (x86)\Gadu-Gadu\SSLEAY32.dll 2007-03-07 17:40 - 2007-03-07 17:40 - 00135168 _____ () C:\Program Files (x86)\Gadu-Gadu\zlib1.dll 2007-04-17 13:04 - 2007-04-17 13:04 - 00106496 _____ () C:\Program Files (x86)\Gadu-Gadu\libiax2.dll 2007-04-17 13:04 - 2007-04-17 13:04 - 00061440 _____ () C:\Program Files (x86)\Gadu-Gadu\libjb.dll 2014-09-25 16:19 - 2014-09-25 16:19 - 00037696 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\qt_icontray_ex.dll 2014-09-25 16:20 - 2014-09-25 16:20 - 00034624 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\thread_pool.dll 2014-09-25 16:24 - 2014-09-25 16:24 - 00420160 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll 2014-09-25 16:20 - 2014-09-25 16:20 - 00129344 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\EXPAT.dll 2017-04-17 00:03 - 2017-04-17 00:03 - 19700312 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_148.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) AlternateDataStreams: C:\Windows\system32\bcmihvsrv64.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\bcmihvui64.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\bcmwlcoi.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\LkmdfCoInst.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\LMouFiltCoInst.dll:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\LogiLDA.DLL:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\inspect.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\LEqdUsb.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\LHidEqd.sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\LHidFilt.Sys:$CmdTcID [64] AlternateDataStreams: C:\Windows\system32\Drivers\LMouFilt.Sys:$CmdTcID [64] AlternateDataStreams: C:\ProgramData\TEMP:05E9FFE5 [149] AlternateDataStreams: C:\ProgramData\TEMP:4CF8D17E [124] AlternateDataStreams: C:\Users\TOMEK\Desktop\3f3dkhuz.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\TOMEK\Desktop\3f3dkhuz.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\TOMEK\Desktop\FRST64.exe:$CmdTcID [64] ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver" ==================== Powiązania plików (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Hosts - zawartość: =============================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2009-07-14 04:34 - 2017-04-28 02:44 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-3535244391-3519364958-2513344911-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\TOMEK\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Zapora systemu Windows [funkcja wyłączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [{2938E566-9266-47DA-956E-752AC111274C}] => (Allow) C:\Program Files\Microsoft Office 2010\Office14\GROOVE.EXE FirewallRules: [{6D790E2D-7D40-4451-A9F3-90F91310EE5D}] => (Allow) C:\Program Files\Microsoft Office 2010\Office14\GROOVE.EXE FirewallRules: [UDP Query User{731D8F4F-AE2E-45C2-8AAD-262FFCC77929}C:\program files (x86)\gadu-gadu\gg.exe] => (Allow) C:\program files (x86)\gadu-gadu\gg.exe FirewallRules: [TCP Query User{C48CFB65-4172-4863-9C55-AA5379337181}C:\program files (x86)\gadu-gadu\gg.exe] => (Allow) C:\program files (x86)\gadu-gadu\gg.exe FirewallRules: [{0A6938E4-754D-4AEF-BFEA-A129CE005D3E}] => (Allow) LPort=7437 FirewallRules: [{AA0BC7F9-E955-45AA-90BF-2396366C07B0}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{E836539D-DA87-4247-BA89-8819E7643562}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{E84C5126-77BA-4A29-B5A4-5F0ABEB0E10C}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{A42D5066-2DCE-4380-BA12-698CE6149355}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{B9F07A3D-A667-4371-81B5-5B6DC7B41D34}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{3F2BAD05-124E-4392-A1D3-3473232B09BD}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [UDP Query User{C764D5BF-E60E-4387-AE42-F7FA13BB3428}C:\program files (x86)\gadu-gadu\gg.exe] => (Allow) C:\program files (x86)\gadu-gadu\gg.exe FirewallRules: [TCP Query User{016AECF5-A1B1-4598-BD9A-F8627CB7A6F3}C:\program files (x86)\gadu-gadu\gg.exe] => (Allow) C:\program files (x86)\gadu-gadu\gg.exe FirewallRules: [{A6CD6E68-C1E1-4ADA-8C2D-66D14CB928E6}] => (Allow) LPort=7437 FirewallRules: [UDP Query User{269E3EB7-2FDB-46BC-BD9C-2BFCC0E9C498}C:\programdata\logishrd\logioptions\software\current\logioptionsmgr.exe] => (Allow) C:\programdata\logishrd\logioptions\software\current\logioptionsmgr.exe FirewallRules: [TCP Query User{74BB09C4-E184-4F84-A78E-47B8CBA3654D}C:\programdata\logishrd\logioptions\software\current\logioptionsmgr.exe] => (Allow) C:\programdata\logishrd\logioptions\software\current\logioptionsmgr.exe FirewallRules: [{5589F898-92DE-4461-AC47-91BDDA5A2996}] => (Allow) C:\Program Files (x86)\TP-LINK\USB Printer Controller\USB Printer Controller.exe FirewallRules: [{7FF63B23-71CC-4FFF-87B4-E7DED6094980}] => (Allow) C:\Program Files (x86)\TP-LINK\USB Printer Controller\USB Printer Controller.exe FirewallRules: [{C3556C62-3F9B-4C9D-A551-429E56A803D9}] => (Allow) C:\Program Files (x86)\TP-LINK\USB Printer Controller\USB Printer Controller.exe FirewallRules: [{238E33EA-B0ED-4F0B-B57C-8042D9F5506F}] => (Allow) C:\Program Files (x86)\TP-LINK\USB Printer Controller\USB Printer Controller.exe StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\BitTorrent\bittorrent.exe] => Enabled:BitTorrent ==================== Punkty Przywracania systemu ========================= 04-05-2017 15:10:41 Instalacja pakietu sterownika urządzenia: DT Soft Ltd Urządzenia systemowe 04-05-2017 22:53:45 Revo Uninstaller Pro's restore point - WIDCOMM Bluetooth Software 04-05-2017 22:54:21 Removed WIDCOMM Bluetooth Software 04-05-2017 23:14:13 Revo Uninstaller Pro's restore point - TP-LINK USB Printer Controller 04-05-2017 23:14:44 Removed TP-LINK USB Printer Controller. 04-05-2017 23:18:12 Installed TP-LINK USB Printer Controller. 04-05-2017 23:32:23 Revo Uninstaller Pro's restore point - Smart Bluetooth Marketing 05-05-2017 00:19:08 Revo Uninstaller Pro's restore point - IObit Uninstaller 05-05-2017 00:58:56 Installed Bluetooth Software 05-05-2017 02:10:45 Instalacja pakietu sterownika urządzenia: Microsoft Karty sieciowe 05-05-2017 03:55:15 Revo Uninstaller Pro's restore point - WIDCOMM Bluetooth Software 05-05-2017 03:56:03 Removed WIDCOMM Bluetooth Software 05-05-2017 07:53:12 Installing COMODO Internet Security Premium 05-05-2017 07:56:40 Installing COMODO Internet Security Premium 05-05-2017 08:22:18 Revo Uninstaller Pro's restore point - COMODO Internet Security Premium 05-05-2017 08:44:53 Instalacja pakietu sterownika urządzenia: COMODO Usługa sieciowa 05-05-2017 10:10:03 Revo Uninstaller Pro's restore point - DAEMON Tools Lite ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (05/05/2017 10:10:03 AM) (Source: VSS) (EventID: 8194) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas badania interfejsu IVssWriterCallback. hr = 0x80070005, Odmowa dostępu. . To jest często spowodowane przez niepoprawne ustawienia zabezpieczeń w procesie zapisującym lub żądającym. Operacja: Zbieranie danych modułu zapisującego Kontekst: Identyfikator klasy modułu zapisującego: {e8132975-6f93-4464-a53e-1050253ae220} Nazwa modułu zapisującego: System Writer Identyfikator wystąpienia modułu zapisującego: {11ff9b69-6eb1-400d-b80f-9d05458d5567} Error: (05/05/2017 09:52:58 AM) (Source: ESENT) (EventID: 454) (User: ) Description: taskhost (2252) WebCacheLocal: Odzyskiwanie/przywracanie bazy danych nie powiodło się z powodu nieoczekiwanego błędu: -551. Error: (05/05/2017 09:52:58 AM) (Source: ESENT) (EventID: 517) (User: ) Description: taskhost (2252) WebCacheLocal: Przywracanie bazy danych nie powiodło się z powodu błędu -551, ponieważ napotkano odwołania do bazy danych „C:\Users\TOMEK\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat”, która nie jest zgodna z bieżącym zestawem dzienników. Aparat bazy danych nie zezwoli na ukończenie odzyskiwania tego wystąpienia, dopóki nie zostanie ponownie utworzone wystąpienie niezgodnej bazy danych. Jeśli ta baza danych naprawdę nie jest już dostępna lub nie jest wymagana, procedury odzyskiwania po wystąpieniu tego błędu są dostępne w bazie wiedzy Microsoft Knowledge Base lub po użyciu łącza „więcej informacji” u dołu tego komunikatu. Error: (05/05/2017 09:52:57 AM) (Source: ESENT) (EventID: 465) (User: ) Description: taskhost (2252) WebCacheLocal: Podczas odzyskiwania programowego wykryto uszkodzenie w pliku dziennika C:\Users\TOMEK\AppData\Local\Microsoft\Windows\WebCache\V01.log. Rekord z nieprawidłową sumą kontrolną znajduje się na pozycji END. Dane niezgodne ze wzorem wypełnienia pliku dziennika pojawiły się najpierw w sektorze 124 (0x0000007C). Plik dziennika został uszkodzony i jest nieużyteczny. Error: (05/05/2017 09:52:56 AM) (Source: ESENT) (EventID: 465) (User: ) Description: taskhost (2252) WebCacheLocal: Podczas odzyskiwania programowego wykryto uszkodzenie w pliku dziennika C:\Users\TOMEK\AppData\Local\Microsoft\Windows\WebCache\V01.log. Rekord z nieprawidłową sumą kontrolną znajduje się na pozycji END. Dane niezgodne ze wzorem wypełnienia pliku dziennika pojawiły się najpierw w sektorze 124 (0x0000007C). Plik dziennika został uszkodzony i jest nieużyteczny. Error: (05/05/2017 09:52:55 AM) (Source: ESENT) (EventID: 465) (User: ) Description: taskhost (2252) WebCacheLocal: Podczas odzyskiwania programowego wykryto uszkodzenie w pliku dziennika C:\Users\TOMEK\AppData\Local\Microsoft\Windows\WebCache\V01.log. Rekord z nieprawidłową sumą kontrolną znajduje się na pozycji END. Dane niezgodne ze wzorem wypełnienia pliku dziennika pojawiły się najpierw w sektorze 124 (0x0000007C). Plik dziennika został uszkodzony i jest nieużyteczny. Error: (05/05/2017 09:52:35 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (05/05/2017 09:11:54 AM) (Source: Winlogon) (EventID: 4004) (User: ) Description: Proces usługi logowania systemu Windows nie może zakończyć procesów obecnie zalogowanego użytkownika. Error: (05/05/2017 08:59:51 AM) (Source: Winlogon) (EventID: 4004) (User: ) Description: Proces usługi logowania systemu Windows nie może zakończyć procesów obecnie zalogowanego użytkownika. Error: (05/05/2017 08:58:17 AM) (Source: Winlogon) (EventID: 4004) (User: ) Description: Proces usługi logowania systemu Windows nie może zakończyć procesów obecnie zalogowanego użytkownika. Dziennik System: ============= Error: (05/05/2017 10:29:37 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Energy Server Service queencreek zakończyła działanie; wystąpił następujący błąd: Ten strumień nie jest mały. Error: (05/05/2017 10:29:06 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Energy Server Service queencreek zakończyła działanie; wystąpił następujący błąd: Ten strumień nie jest mały. Error: (05/05/2017 10:25:52 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Energy Server Service queencreek zakończyła działanie; wystąpił następujący błąd: Ten strumień nie jest mały. Error: (05/05/2017 10:25:21 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Energy Server Service queencreek zakończyła działanie; wystąpił następujący błąd: Ten strumień nie jest mały. Error: (05/05/2017 10:22:39 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa COMODO Virtual Service Manager niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (05/05/2017 10:22:29 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa COMODO Internet Security Helper Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (05/05/2017 10:22:07 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Energy Server Service queencreek zakończyła działanie; wystąpił następujący błąd: Ten strumień nie jest mały. Error: (05/05/2017 10:21:37 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Energy Server Service queencreek zakończyła działanie; wystąpił następujący błąd: Ten strumień nie jest mały. Error: (05/05/2017 10:18:23 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Energy Server Service queencreek zakończyła działanie; wystąpił następujący błąd: Ten strumień nie jest mały. Error: (05/05/2017 10:17:53 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Energy Server Service queencreek zakończyła działanie; wystąpił następujący błąd: Ten strumień nie jest mały. CodeIntegrity: =================================== Date: 2017-05-04 11:11:02.715 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. Date: 2017-05-04 11:11:02.668 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. Date: 2017-05-04 10:54:29.635 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. Date: 2017-05-04 10:54:27.555 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. Date: 2017-05-04 10:32:38.420 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. Date: 2017-05-04 10:32:38.389 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. Date: 2017-05-03 23:36:25.966 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. Date: 2017-05-03 23:36:25.841 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. Date: 2017-05-03 22:03:15.878 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. Date: 2017-05-03 22:03:15.828 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system. ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM)2 Duo CPU T9300 @ 2.50GHz Procent pamięci w użyciu: 64% Całkowita pamięć fizyczna: 4086.04 MB Dostępna pamięć fizyczna: 1461.8 MB Całkowita pamięć wirtualna: 8170.27 MB Dostępna pamięć wirtualna: 5209.11 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:166 GB) (Free:64.99 GB) NTFS ==>[dysk z komponentami startowymi (pozyskano odczytując BCD)] Drive d: () (Fixed) (Total:299.76 GB) (Free:25.51 GB) NTFS Drive f: (DR_DISK) (Removable) (Total:0.12 GB) (Free:0.12 GB) FAT ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 0E820E82) Partition 1: (Active) - (Size=166 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=299.8 GB) - (Type=05) ======================================================== Disk: 1 (Size: 29.7 GB) (Disk ID: 00000000) Partition: GPT. ==================== Koniec Addition.txt ============================