Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 24.12.2018 Uruchomiony przez Emanuel (25-12-2018 20:31:41) Uruchomiony z C:\Users\Emanuel\Desktop Windows 7 Professional Service Pack 1 (X64) (2018-04-09 09:53:03) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-652811554-794021937-3607036813-500 - Administrator - Disabled) Emanuel (S-1-5-21-652811554-794021937-3607036813-1000 - Administrator - Enabled) => C:\Users\Emanuel Gość (S-1-5-21-652811554-794021937-3607036813-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-652811554-794021937-3607036813-1002 - Limited - Enabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) Acquisition version 0.8b (HKLM-x32\...\{53E25C0C-0305-47BB-9884-F0F202297AF4}_is1) (Version: 0.8b - ) Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 19.010.20064 - Adobe Systems Incorporated) Adobe After Effects CC 2017 (HKLM-x32\...\{147EC100-14BE-45EF-AB42-35BAEE7D02F2}) (Version: 14.1.0 - Adobe Systems Incorporated) Adobe Audition CC 2018 (HKLM-x32\...\AUDT_11_1) (Version: 11.1.0 - Adobe Systems Incorporated) Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.6.1.393 - Adobe Systems Incorporated) Adobe Flash Player 29 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 29.0.0.140 - Adobe Systems Incorporated) Adobe Illustrator CC 2017 (HKLM-x32\...\ILST_21_0_0) (Version: 21.0.0 - Adobe Systems Incorporated) Adobe Lightroom (HKLM-x32\...\{8048A5DF-8A70-5BE1-954B-E0FDE1BD0D0D}) (Version: 6.0 - Adobe Systems Incorporated) Adobe Media Encoder CC 2015 (HKLM-x32\...\{0FAC7130-BEC5-47A5-8813-1D339B8326ED}) (Version: 9.0.0 - Adobe Systems Incorporated) Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.0 - Adobe Systems Incorporated) Adobe Premiere Pro CC 2015 (HKLM-x32\...\{38C72D42-0672-43B1-9E05-E7631684F9A1}) (Version: 9.0.0 - Adobe Systems Incorporated) Aktualizacje NVIDIA 34.0.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 34.0.0.0 - NVIDIA Corporation) Hidden Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment) Ashampoo Burning Studio 2019 (HKLM-x32\...\{91B33C97-293D-A984-2057-76661C44CB0E}_is1) (Version: 1.20.0 - Ashampoo GmbH & Co. KG) AutoHotkey 1.1.30.01 (HKLM\...\AutoHotkey) (Version: 1.1.30.01 - Lexikos) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts) Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB) BELOW (HKLM-x32\...\BELOW_is1) (Version: - ) bl (HKLM-x32\...\{2A075BB4-E976-4278-BF3F-E5C6945D84C0}) (Version: 1.0.0 - Your Company Name) Hidden Black Desert Online (HKLM-x32\...\{C1F96C92-7B8C-485F-A9CD-37A0708A2A60}) (Version: 1.0.0.9 - Kakao Games Europe B.V.) Blade & Soul (HKLM-x32\...\{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.260 - NC Interactive, LLC) Hidden Blade & Soul (HKLM-x32\...\InstallShield_{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.260 - NC Interactive, LLC) Bloody6 (HKLM-x32\...\Bloody3) (Version: 18.03.0002 - Bloody) Canon MP Navigator EX 1.0 (HKLM-x32\...\MP Navigator EX 1.0) (Version: - ) CCleaner (HKLM\...\CCleaner) (Version: 5.51 - Piriform) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.8.7041 - CDBurnerXP) CPUID HWMonitor Pro 1.36 (HKLM\...\CPUID HWMonitorPro_is1) (Version: 1.36 - CPUID, Inc.) DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.8.0.0410 - Disc Soft Ltd) Destiny 2 (HKLM-x32\...\Destiny 2) (Version: - Blizzard Entertainment) Discord (HKU\S-1-5-21-652811554-794021937-3607036813-1000\...\Discord) (Version: 0.0.301 - Discord Inc.) DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 417.35 - NVIDIA Corporation) Hidden Dragon Quest XI (HKLM-x32\...\Dragon Quest XI_is1) (Version: - ) EdenEternal version 1 (HKLM-x32\...\EdenEternal_is1) (Version: 1 - Aeria Games) Ezviz Studio (HKLM-x32\...\{49DF99D3-BC81-439A-8F40-A0529159024C}_is1) (Version: - EZVIZ Inc.) FINAL FANTASY XIV ONLINE (HKLM-x32\...\{2B41E132-07DF-4925-A3D3-F2D1765CCDFE}) (Version: 1.0.0000 - SQUARE ENIX CO., LTD.) Freemake Audio Converter wersja 1.1.7 (HKLM-x32\...\Freemake Audio Converter_is1) (Version: 1.1.7 - Ellora Assets Corporation) Game Installer (HKLM-x32\...\Game Installer 1.0.0) (Version: 1.0.0 - Intrepid Studios, Inc.) GlassWire 2.1 (remove only) (HKLM-x32\...\GlassWire 2.1) (Version: 2.1.140 - SecureMix LLC) Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment) HP LaserJet Professional CP1020 Series (HKLM\...\HP LaserJet Professional CP1020 Series) (Version: - ) HPLJUT (HKLM-x32\...\{229D6185-BD7E-494B-A73B-C5215BE0690E}) (Version: 1.00.0012 - HP) Hidden hppcp1025LaserJetService (HKLM-x32\...\{F31BF057-0D5E-485E-ADFD-560314A27912}) (Version: 1.00.0000 - Hewlett-Packard) hppLaserJetService (HKLM-x32\...\{5093AE98-D510-4BEB-BAC1-7FC8ECE35B98}) (Version: 007.015.00635 - Hewlett-Packard) Hidden Informacje o systemie Creative (HKLM-x32\...\SysInfo) (Version: 1.10 - Creative Technology Limited) Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1043 - Intel Corporation) Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.47.715.0 - Intel Corporation) Hidden Intel(R) Trusted Connect Services Client (HKLM-x32\...\{2b32b7d0-4f9f-47c8-adb7-807e6cb2fb75}) (Version: 1.47.715.0 - Intel Corporation) Hidden Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 4.0.0.36 - Intel Corporation) Intrepid Studios Launcher (HKLM-x32\...\Launcher 1.0.114) (Version: 1.0.114 - Intrepid Studios, Inc.) Java 8 Update 171 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180171F0}) (Version: 8.0.1710.11 - Oracle Corporation) JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0 - AppWork GmbH) Launcher (HKLM-x32\...\{57EBDBA4-CEEE-46D4-9B83-D020605160D4}) (Version: 1.0.114 - Intrepid Studios, Inc.) Hidden LibreOffice 6.0.2.1 (HKLM\...\{673086D4-1E80-4ED2-A68E-2F6AF26F9760}) (Version: 6.0.2.1 - The Document Foundation) Lightshot-5.4.0.35 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.35 - Skillbrains) Malwarebytes (wersja 3.6.1.2711) (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.6.1.2711 - Malwarebytes) Mass Effect: Andromeda (HKLM-x32\...\Mass Effect: Andromeda_is1) (Version: - ) Microsoft .NET Core Runtime - 2.0.7 (x64) (HKLM-x32\...\{b7cb6538-e06d-4f16-ae77-f9d8b79960f5}) (Version: 2.0.7.26407 - Microsoft Corporation) Microsoft .NET Framework 4.7.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.03062 - Microsoft Corporation) Microsoft .NET Framework 4.7.2 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.7.03062 - Microsoft Corporation) Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.50401.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x64) - 14.16.27012 (HKLM-x32\...\{427ada59-85e7-4bc8-b8d5-ebf59db60423}) (Version: 14.16.27012.6 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x86) - 14.12.25810 (HKLM-x32\...\{56e11d69-7cc9-40a5-a4f9-8f6190c4d84d}) (Version: 14.12.25810.0 - Microsoft Corporation) Monster Hunter World (HKLM-x32\...\Monster Hunter World_is1) (Version: - ) Mozilla Firefox 64.0 (x64 pl) (HKLM\...\Mozilla Firefox 64.0 (x64 pl)) (Version: 64.0 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 63.0.3 - Mozilla) MSI Afterburner 4.5.0 (HKLM-x32\...\Afterburner) (Version: 4.5.0 - MSI Co., LTD) NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version: - NCSOFT) Nexon Launcher (HKLM-x32\...\Nexon Nexon Launcher) (Version: 2.0.0 - Nexon) Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.1 - Notepad++ Team) Nox APP Player (HKLM-x32\...\Nox) (Version: 6.1.1.0 - Duodian Technology Co. Ltd.) NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.12 - NVIDIA Corporation) Hidden NVIDIA GeForce Experience 3.16.0.140 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.16.0.140 - NVIDIA Corporation) NVIDIA Oprogramowanie systemu PhysX 9.18.0907 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.18.0907 - NVIDIA Corporation) NVIDIA Sterownik 3D Vision 417.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 417.35 - NVIDIA Corporation) NVIDIA Sterownik dźwięku HD 1.3.38.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.4 - NVIDIA Corporation) NVIDIA Sterownik graficzny 417.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 417.35 - NVIDIA Corporation) NVIDIA Sterownik kontrolera 3D Vision 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation) OBS Studio (HKLM-x32\...\OBS Studio) (Version: 21.1.0 - OBS Project) Oprogramowanie mikroukładu Intel® (HKLM-x32\...\{c7f54569-0018-439c-809a-48046a4d4ebc}) (Version: 10.1.1.9 - Intel(R) Corporation) Hidden Origin (HKLM-x32\...\Origin) (Version: 10.5.32.18460 - Electronic Arts, Inc.) Panel sterowania NVIDIA 417.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 417.35 - NVIDIA Corporation) Hidden ph (HKLM-x32\...\{185F9795-9663-4F13-9EF9-307A282ADB5A}) (Version: 1.0.0 - Your Company Name) Hidden PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.112.811.2017 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8382 - Realtek Semiconductor Corp.) RivaTuner Statistics Server 7.1.0 (HKLM-x32\...\RTSS) (Version: 7.1.0 - Unwinder) Skype (wersja 8.34) (HKLM-x32\...\Skype_is1) (Version: 8.34 - Skype Technologies S.A.) Sound Blaster Tactic(3D) Alpha (HKLM-x32\...\{2226247D-9846-4370-A1EF-FAA6958F7632}) (Version: 1.0 - Creative Technology Limited) Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Streamlabs OBS 0.9.8 (HKLM\...\029c4619-0385-5543-9426-46f9987161d9) (Version: 0.9.8 - General Workings, Inc.) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH) TERA (HKLM-x32\...\{A2F166A0-F031-4E27-A057-C69733219434}_is1) (Version: - Gameforge 4D GmbH) Tibia (HKU\S-1-5-21-652811554-794021937-3607036813-1000\...\Tibia) (Version: - CipSoft GmbH) Topaz Clean 3 (HKLM-x32\...\Topaz Clean 3) (Version: 3.1.0 - Topaz Labs, LLC) Uplay (HKLM-x32\...\Uplay) (Version: 38.2 - Ubisoft) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN) Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0) (Version: 1.1.70.0 - LunarG, Inc.) Hidden Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0-2) (Version: 1.1.70.0 - LunarG, Inc.) Hidden WinRAR 5.50 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH) World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment) WPS Office (10.2.0.7549) (HKU\S-1-5-21-652811554-794021937-3607036813-1000\...\Kingsoft Office) (Version: 10.2.0.7549 - Kingsoft Corp.) XTREME GAMING ENGINE (HKLM-x32\...\GIGABYTE XTREME GAMING ENGINE_is1) (Version: 1.2.5.1 - GIGABYTE Technology Co.,Inc.) YouTube By Click (HKLM-x32\...\{4CFC33AD-851E-4618-B764-651D14E1B6D3}) (Version: 2.2.83 - ByClick) Hidden YouTube By Click (HKLM-x32\...\YouTube By Click 2.2.83) (Version: 2.2.83 - ByClick) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-652811554-794021937-3607036813-1000_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-652811554-794021937-3607036813-1000_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-652811554-794021937-3607036813-1000_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-652811554-794021937-3607036813-1000_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-652811554-794021937-3607036813-1000_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-652811554-794021937-3607036813-1000_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-652811554-794021937-3607036813-1000_Classes\CLSID\{70239788-4DAE-49B8-9270-5D8614384B49}\InprocServer32 -> C:\Users\Emanuel\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\addons\kpdf2wordshellext\kpdf2wordshellext64.dll (Zhuhai Kingsoft Office Software Co.,Ltd) CustomCLSID: HKU\S-1-5-21-652811554-794021937-3607036813-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems) ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> Brak pliku ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> Brak pliku ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> Brak pliku ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] () ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> Brak pliku ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] () ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2016-10-16] () ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> Brak pliku ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-09-13] (Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-09-13] (Alexander Roshal) ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\DTShl64.dll [2018-04-03] (Disc Soft Ltd) ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> Brak pliku ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\DTShl64.dll [2018-04-03] (Disc Soft Ltd) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes) ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> Brak pliku ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> Brak pliku ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2018-12-11] (NVIDIA Corporation) ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] () ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-09-13] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-09-13] (Alexander Roshal) ContextMenuHandlers1_S-1-5-21-652811554-794021937-3607036813-1000: [kpdf2wordshellext] -> {70239788-4DAE-49B8-9270-5D8614384B49} => C:\Users\Emanuel\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\addons\kpdf2wordshellext\kpdf2wordshellext64.dll [2018-11-30] (Zhuhai Kingsoft Office Software Co.,Ltd) ContextMenuHandlers1_S-1-5-21-652811554-794021937-3607036813-1000: [TextPad8] -> {5A9E21A2-851A-4BEB-B16F-DBBE7D648AF9} => -> Brak pliku ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {0BCF19B4-8037-4E62-9EC6-8285489B9F9F} - System32\Tasks\WpsUpdateTask_Emanuel => C:\Users\Emanuel\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\wtoolex\wpsupdate.exe [2018-12-07] (Zhuhai Kingsoft Office Software Co.,Ltd) Task: {0BF1BA2B-5A86-4E20-86F9-432B66074668} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-12-06] (NVIDIA Corporation) Task: {1B839DCE-31FD-4F05-B133-FDB6E0035FF9} - System32\Tasks\WpsExternal_Emanuel_20181130140723 => C:\Users\Emanuel\AppData\Local\Kingsoft\WPS Office\ksolaunch.exe [2018-11-30] (Zhuhai Kingsoft Office Software Co.,Ltd) Task: {1D5ABCBC-5F9E-488F-80C7-164995B0178C} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-12-06] (NVIDIA Corporation) Task: {3412C061-C9F7-4287-BA0F-4AB07A37B4A4} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2018-12-06] (NVIDIA Corporation) Task: {3A23CE01-7B59-4056-9111-C098640819AC} - System32\Tasks\update-S-1-5-21-652811554-794021937-3607036813-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: ) Task: {408181EC-E417-4E06-95C6-54B9A7BAF600} - System32\Tasks\AdobeGCInvoker-1.0-Emanuel-PC-Emanuel => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-09-10] (Adobe Systems, Incorporated) Task: {491F3922-63B0-4A85-A691-3D43A6083402} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-12-06] (NVIDIA Corporation) Task: {58A0EB3B-F7EE-4B6B-B384-2C685F422F28} - System32\Tasks\HPLJCustParticipation => C:\Program Files (x86)\HP\HPLJUT\HPLJUTSCH.exe [2010-09-22] (Hewlett Packard) Task: {66592BF5-D151-47B4-AE5F-B9FFAAE05330} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2018-12-06] (NVIDIA Corporation) Task: {6E7FDE48-EFEF-4621-92CC-75CE08E04757} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2017-09-20] (Intel(R) Corporation) Task: {728AA929-E444-4EF9-85B3-0F759251CDEA} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-12-06] (NVIDIA Corporation) Task: {78AEF8F1-0A0D-4750-B666-07F5A073502B} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2018-12-06] (NVIDIA Corporation) Task: {86A8C328-D14D-4B22-B76B-46E24648D428} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-12-10] (Piriform Ltd) Task: {8B467A06-90D3-4A8C-AACC-4727BC4BA52E} - System32\Tasks\AdobeAAMUpdater-1.0-Emanuel-PC-Emanuel => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2018-04-10] (Adobe Systems Incorporated) Task: {9CA0E388-E27F-48B6-B4E9-4D5089B91D28} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-12-10] (Piriform Software Ltd) Task: {A2E646D2-F011-4924-9567-12EAF985CCA4} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-12-06] (NVIDIA Corporation) Task: {A99F4C69-B7F7-41B5-AC1C-5A07A4B3F065} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-12-06] (NVIDIA Corporation) Task: {B51D9E26-0EBD-47CC-8A4A-652B6C98C03E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-13] (Adobe Systems Incorporated) Task: {CD08E48B-39A9-4303-93F4-DA259302E480} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-12-06] (NVIDIA Corporation) Task: {E9D17A3D-4BFD-487D-83C6-3DFE310A68C0} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-12-06] (NVIDIA Corporation) Task: {F97E4D54-4BC0-4EC0-AABD-EC932B26BC21} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: ) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\update-S-1-5-21-652811554-794021937-3607036813-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe ==================== Skróty & WMI ======================== (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ==================== Załadowane moduły (filtrowane) ============== 2018-04-09 11:35 - 2012-11-28 11:18 - 000129024 ____N () C:\Windows\System32\HPCP1020LM.DLL 2018-02-10 00:12 - 2018-03-05 19:47 - 000614848 _____ () C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll 2018-12-15 21:12 - 2018-12-06 11:13 - 001314672 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll 2018-12-25 03:54 - 2018-09-12 17:57 - 002785784 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll 2018-12-25 03:54 - 2018-09-12 11:35 - 002701064 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll 2018-12-15 21:12 - 2018-12-06 11:12 - 101251952 _____ () C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll 2018-12-15 21:12 - 2018-12-06 11:12 - 004619632 _____ () C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\libglesv2.dll 2018-12-15 21:12 - 2018-12-06 11:12 - 000108400 _____ () C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\libegl.dll 2018-11-28 16:46 - 2018-11-28 16:46 - 000061408 _____ () C:\Program Files\CCleaner\branding.dll 2018-04-27 12:50 - 2018-12-21 16:41 - 000021824 _____ () C:\Program Files (x86)\Origin\QtWebEngineProcess.exe 2018-08-30 10:48 - 2018-10-30 19:06 - 001057056 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\SDL2.dll 2018-08-30 10:48 - 2018-09-23 01:00 - 102804768 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libcef.dll 2018-08-30 10:48 - 2018-09-23 01:00 - 004866336 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libglesv2.dll 2018-08-30 10:48 - 2018-09-23 01:00 - 000116000 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libegl.dll 2018-12-12 13:03 - 2018-12-12 13:03 - 000180688 _____ () C:\Program Files (x86)\GlassWire\EasyHook32.dll 2018-12-15 21:12 - 2018-12-06 11:13 - 001032560 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll 2018-05-01 21:00 - 2018-04-30 22:01 - 001891672 _____ () C:\Users\Emanuel\AppData\Local\Discord\app-0.0.301\ffmpeg.dll 2018-04-17 19:56 - 2018-10-30 19:06 - 000879904 _____ () C:\Program Files (x86)\Steam\SDL2.dll 2018-04-17 19:56 - 2016-09-01 02:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll 2018-04-17 19:56 - 2016-09-01 02:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll 2018-04-17 19:56 - 2016-09-01 02:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll 2018-04-17 19:56 - 2018-11-26 21:29 - 002649376 _____ () C:\Program Files (x86)\Steam\video.dll 2018-04-17 19:56 - 2017-12-20 02:43 - 005137696 _____ () C:\Program Files (x86)\Steam\libavcodec-57.dll 2018-04-17 19:56 - 2017-12-20 02:43 - 000847136 _____ () C:\Program Files (x86)\Steam\libavutil-55.dll 2018-04-17 19:56 - 2017-12-20 02:43 - 000695584 _____ () C:\Program Files (x86)\Steam\libavformat-57.dll 2018-04-17 19:56 - 2017-12-20 02:43 - 000351520 _____ () C:\Program Files (x86)\Steam\libavresample-3.dll 2018-04-17 19:56 - 2017-12-20 02:43 - 000783648 _____ () C:\Program Files (x86)\Steam\libswscale-4.dll 2018-04-17 19:56 - 2018-11-26 21:29 - 001028384 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL 2018-04-17 19:56 - 2016-07-04 23:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll 2018-05-01 21:00 - 2018-04-30 22:01 - 001937752 _____ () C:\Users\Emanuel\AppData\Local\Discord\app-0.0.301\libglesv2.dll 2018-05-01 21:00 - 2018-04-30 22:01 - 000095576 _____ () C:\Users\Emanuel\AppData\Local\Discord\app-0.0.301\libegl.dll 2018-05-02 06:42 - 2018-12-19 15:49 - 011328856 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_voice\discord_voice.node 2018-05-02 06:42 - 2018-11-16 16:12 - 001639256 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_utils\discord_utils.node 2018-05-02 06:42 - 2018-05-02 06:42 - 000512856 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_erlpack\discord_erlpack.node 2018-05-02 06:42 - 2018-12-19 15:49 - 001658712 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_game_utils\discord_game_utils.node 2018-10-01 15:24 - 2018-10-10 16:13 - 009621848 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_cloudsync\discord_cloudsync.node 2018-05-02 06:42 - 2018-05-02 06:42 - 002722648 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_rpc\discord_rpc.node 2018-05-02 06:42 - 2018-11-27 15:48 - 001718104 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_overlay2\discord_overlay2.node 2018-08-11 08:29 - 2018-12-13 13:08 - 001261400 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_modules\discord_modules.node 2018-08-11 08:29 - 2018-12-11 15:29 - 021991256 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_dispatch\discord_dispatch.node 2018-05-02 06:43 - 2018-05-02 06:43 - 002760536 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_contact_import\discord_contact_import.node 2018-05-02 06:43 - 2018-05-02 06:43 - 001249112 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_vigilante\discord_vigilante.node 2017-09-25 12:28 - 2017-09-25 12:28 - 001244304 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) AlternateDataStreams: C:\Users\Emanuel\AppData\Local\Temp:$DATA​ [16] ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Powiązania plików (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Hosts - zawartość: =============================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2009-07-14 03:34 - 2018-12-25 03:29 - 000000027 _____ C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-652811554-794021937-3607036813-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Emanuel\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.8.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == Załączenie wejścia w fixlist spowoduje jego usunięcie. MSCONFIG\Services: AdobeARMservice => 2 MSCONFIG\Services: AdobeUpdateService => 2 MSCONFIG\Services: AGMService => 2 MSCONFIG\Services: AGSService => 2 MSCONFIG\Services: Disc Soft Lite Bus Service => 3 MSCONFIG\Services: EasyAntiCheat => 3 MSCONFIG\Services: NGS => 3 MSCONFIG\Services: Origin Client Service => 3 MSCONFIG\Services: Origin Web Helper Service => 2 MSCONFIG\Services: PnkBstrA => 2 MSCONFIG\Services: TeamViewer => 2 MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: AdobeGCInvoker-1.0 => "C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe" MSCONFIG\startupreg: Aimersoft Helper Compact.exe => C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe MSCONFIG\startupreg: DAEMON Tools Lite Automount => "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun MSCONFIG\startupreg: EADM => "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe (Microsoft Corporation) FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe (Microsoft Corporation) FirewallRules: [{6D225F32-790A-4A7E-BE14-F939C5F32DF9}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (Disc Soft Ltd) FirewallRules: [TCP Query User{E65B68AD-1C3E-4063-8F40-B059D360B76D}D:\nekopara vol.3\nekoparavol3.exe] => (Allow) D:\nekopara vol.3\nekoparavol3.exe (Ares inc.) FirewallRules: [UDP Query User{A374CECC-49F3-4437-8FDC-5D2F7F16ABDC}D:\nekopara vol.3\nekoparavol3.exe] => (Allow) D:\nekopara vol.3\nekoparavol3.exe (Ares inc.) FirewallRules: [TCP Query User{2F7AE020-85E8-4F2B-A6B3-BC34C2D391AA}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe () FirewallRules: [UDP Query User{C742BB9C-2447-4154-92F2-D3FEA27ECD90}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe () FirewallRules: [{DA3C33E8-51AF-4757-BED1-7BF547E8ADDF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) FirewallRules: [{D6588AE5-B05E-493C-9C73-F118208A5856}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) FirewallRules: [{466C8708-C031-4638-B758-EA73833335FC}] => (Allow) LPort=443 FirewallRules: [{7F9FCB56-0CA8-4FEA-8765-0FB957388585}] => (Allow) LPort=8080 FirewallRules: [{5F03E482-C2DC-418E-84AF-B9B39268533B}] => (Allow) LPort=3659 FirewallRules: [{3F5772EA-6DF0-420E-A94A-8972B010704D}] => (Allow) LPort=42127 FirewallRules: [{FF2FF07E-EAC4-43D9-83D3-909FEF786F1C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe () FirewallRules: [{D8B8A23E-E284-4E38-BE81-8B9C858631BF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe () FirewallRules: [{4B9AE092-DD2F-4D0E-B09E-90444660CCE0}] => (Allow) C:\Program Files (x86)\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe (SQUARE ENIX CO., LTD.) FirewallRules: [{2D61D85D-939B-49DE-A60B-EBD2776666DF}] => (Allow) C:\Program Files (x86)\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe (SQUARE ENIX CO., LTD.) FirewallRules: [{D666516E-69C1-4DE3-A000-7B3ED6BEB4B0}] => (Allow) C:\Program Files (x86)\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe (SQUARE ENIX CO., LTD.) FirewallRules: [{D3C9BBEB-BB84-473F-A0C4-F37C6BBD7C73}] => (Allow) C:\Program Files (x86)\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe (SQUARE ENIX CO., LTD.) FirewallRules: [{CEB9D1DA-AD60-4AC7-B159-EF6E4B91CD43}] => (Allow) D:\Program Files\Nox\bin\Nox.exe (Duodian Technology Co. Ltd.) FirewallRules: [{AA24C518-55C6-4439-8A44-4B346CDFCF7C}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe (BigNox Corporation) FirewallRules: [TCP Query User{C552CE07-F9F7-4649-8C9F-13C1F9324183}D:\never\steamapps\common\cryptic studios\neverwinter\live\x64\gameclient.exe] => (Allow) D:\never\steamapps\common\cryptic studios\neverwinter\live\x64\gameclient.exe () FirewallRules: [UDP Query User{D22CE93B-FD14-4D4C-95CD-0812D2FF2DCD}D:\never\steamapps\common\cryptic studios\neverwinter\live\x64\gameclient.exe] => (Allow) D:\never\steamapps\common\cryptic studios\neverwinter\live\x64\gameclient.exe () FirewallRules: [{AB6D55F1-5697-41B6-8D29-6DF92102FD66}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corporation) FirewallRules: [{54D4CC02-2A8C-42E8-8E4A-E124C01FE4D7}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corporation) FirewallRules: [{59BC4392-21DE-4148-A3B7-43B0E858F98C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe (NVIDIA Corporation) FirewallRules: [{29F18EDE-5C47-46BC-BEE9-DC68FE45E320}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe (NVIDIA Corporation) FirewallRules: [{3694AB53-08A8-423E-991C-A5D0DBA640D6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation) FirewallRules: [{4C594DC4-B90D-4A65-AF34-F69ABCE14BD1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation) FirewallRules: [{66E5F0A1-28FD-4533-BA51-C71705AAB184}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe () FirewallRules: [{B35C124B-BCAB-4ED3-B567-4818A13A8FB1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe () FirewallRules: [TCP Query User{EC17FEC2-B8FD-4C6B-9B6F-68E0E6DB20A8}C:\users\emanuel\desktop\anydesk.exe] => (Allow) C:\users\emanuel\desktop\anydesk.exe () FirewallRules: [UDP Query User{FE2F705C-2723-434A-8AB1-E4B4AE145014}C:\users\emanuel\desktop\anydesk.exe] => (Allow) C:\users\emanuel\desktop\anydesk.exe () FirewallRules: [TCP Query User{19C5B75F-989A-4551-AC9A-1B3781F2CEBE}C:\program files (x86)\neverwinter_pl\neverwinter\live\x64\gameclient.exe] => (Allow) C:\program files (x86)\neverwinter_pl\neverwinter\live\x64\gameclient.exe () FirewallRules: [UDP Query User{2BB8DEEF-A6EB-4C4A-A725-D581AADAC0AE}C:\program files (x86)\neverwinter_pl\neverwinter\live\x64\gameclient.exe] => (Allow) C:\program files (x86)\neverwinter_pl\neverwinter\live\x64\gameclient.exe () FirewallRules: [TCP Query User{C5327547-BD42-48DD-93F8-7C0E0CF3FD5A}D:\league of legends\rads\projects\league_client\releases\0.0.0.170\deploy\leagueclient.exe] => (Allow) D:\league of legends\rads\projects\league_client\releases\0.0.0.170\deploy\leagueclient.exe () FirewallRules: [UDP Query User{6750FFFC-776C-4E0B-8222-F8E83B590450}D:\league of legends\rads\projects\league_client\releases\0.0.0.170\deploy\leagueclient.exe] => (Allow) D:\league of legends\rads\projects\league_client\releases\0.0.0.170\deploy\leagueclient.exe () FirewallRules: [{E43CBA2B-FFD9-4712-9A02-3F3A0378D87E}] => (Allow) D:\AeriaGames\Aura Kingdom\game.bin (X-LEGEND Entertaimment) FirewallRules: [{F6D8C7DE-D018-4601-AEF2-CF4354CFEE69}] => (Allow) D:\AeriaGames\Aura Kingdom\game.bin (X-LEGEND Entertaimment) FirewallRules: [{E9F8EE87-F870-4ED7-89F9-1CAD4EF2B5ED}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe () FirewallRules: [{E039A1C8-E524-4C59-B382-EF9CA2EA59A8}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe () FirewallRules: [{31EB318F-E94C-4D9A-BA86-654A0E76EF1E}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe () FirewallRules: [{E65998C0-0020-474F-A2B5-3F6426897766}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe () FirewallRules: [{5420F268-E4D6-4BA4-976F-941B67B9BCC1}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe (EA Digital Illusions CE AB) FirewallRules: [{D1CF5680-7DF0-495F-BE85-5D162180F254}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe (EA Digital Illusions CE AB) FirewallRules: [TCP Query User{1A9C882C-738C-4BD8-BC9B-040E25A4F1BB}D:\destiny 2\destiny2.exe] => (Allow) D:\destiny 2\destiny2.exe (Bungie) FirewallRules: [UDP Query User{449E31AE-43B3-48C3-95A2-F64A16F153F1}D:\destiny 2\destiny2.exe] => (Allow) D:\destiny 2\destiny2.exe (Bungie) FirewallRules: [TCP Query User{90C07075-8B3C-4B22-8FAD-5639B34B40B2}D:\destiny 2\destiny2.exe] => (Allow) D:\destiny 2\destiny2.exe (Bungie) FirewallRules: [UDP Query User{52A9EA07-85D1-48E1-9D3C-1373CC05D2DA}D:\destiny 2\destiny2.exe] => (Allow) D:\destiny 2\destiny2.exe (Bungie) FirewallRules: [{4BC91B91-9B0F-4F45-81F5-0BCA8177AFFC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TreeOfSavior\release\patch\tos.exe () FirewallRules: [{4254C1D0-37EF-4A19-B659-CB6F15E1BE55}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TreeOfSavior\release\patch\tos.exe () FirewallRules: [TCP Query User{5761B0A5-52CD-41A7-8F14-09ACB9BB7137}D:\league of legends\rads\projects\league_client\releases\0.0.0.172\deploy\leagueclient.exe] => (Allow) D:\league of legends\rads\projects\league_client\releases\0.0.0.172\deploy\leagueclient.exe () FirewallRules: [UDP Query User{AB35B224-6B5A-4A53-8187-64649EC09B23}D:\league of legends\rads\projects\league_client\releases\0.0.0.172\deploy\leagueclient.exe] => (Allow) D:\league of legends\rads\projects\league_client\releases\0.0.0.172\deploy\leagueclient.exe () FirewallRules: [{A640A2BC-9D47-402D-80E6-730A40A60087}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) FirewallRules: [{FC62113C-301A-452A-A0EF-3C0C745832FE}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) FirewallRules: [TCP Query User{C29A9613-ADE9-4A81-8232-9CCC5FD3C125}D:\overwatch\overwatch.exe] => (Allow) D:\overwatch\overwatch.exe (Blizzard Entertainment) FirewallRules: [UDP Query User{B421BFE3-556B-463C-871A-CD91B6F47DB5}D:\overwatch\overwatch.exe] => (Allow) D:\overwatch\overwatch.exe (Blizzard Entertainment) FirewallRules: [{C928DF99-819D-4705-A5C5-C9CB3EDE718E}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Technologies S.A.) FirewallRules: [{7A5CF14A-F8E7-4B77-86CE-3B21C0C30DAE}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Technologies S.A.) FirewallRules: [{7EAE7371-55AD-4ADC-AEF2-2F2D679AC255}] => (Allow) D:\Never\steamapps\common\Ring of Elysium\SLauncher.exe () FirewallRules: [{05980C4B-3ED5-4F74-8C7D-22009546502B}] => (Allow) D:\Never\steamapps\common\Ring of Elysium\SLauncher.exe () FirewallRules: [{913A5037-E2D8-4A28-9420-FA6C75F00EA2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TreeOfSavior\release\patch\tos.exe () FirewallRules: [{727D3DC0-C3EA-4636-9F93-B997B30C05D7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TreeOfSavior\release\patch\tos.exe () FirewallRules: [{62AAE69F-CA68-4E9B-8709-CE071A4E5B47}] => (Allow) C:\Users\Emanuel\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\wpscloudsvr.exe (Zhuhai Kingsoft Office Software Co.,Ltd) FirewallRules: [{5F585BBD-3F00-4F79-8897-C64D5F68FC01}] => (Allow) D:\Never\steamapps\common\Spellbreak\Launch_Spellbreak.exe (EasyAntiCheat Ltd) FirewallRules: [{D160892C-1282-45C7-811D-91AD6B05D387}] => (Allow) D:\Never\steamapps\common\Spellbreak\Launch_Spellbreak.exe (EasyAntiCheat Ltd) FirewallRules: [{1C137E6C-BCF6-410C-BAF4-991BD2F59D2C}] => (Allow) C:\AeriaGames\EdenEternal\_Launcher.exe (X-LEGEND ENTERTAINMENT) FirewallRules: [{2DCA7819-B7F7-44D7-A685-50358F1F486A}] => (Allow) C:\AeriaGames\EdenEternal\_Launcher.exe (X-LEGEND ENTERTAINMENT) FirewallRules: [{E2D9247B-8AB7-4062-89D7-765B8DDE9BF8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) FirewallRules: [{B4926EFA-9EF2-4647-A212-CF7426B384FD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) FirewallRules: [{358CAC2A-419D-47D2-A5D0-E5BEB061C943}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) FirewallRules: [{009B4F38-557B-45F0-9D28-991AD5AA82DB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) FirewallRules: [{7208EA19-5171-4BAF-B23E-7E5AA4D8E509}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation) FirewallRules: [{40CDF294-4DB3-431B-95E7-DB169F5EE3B5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation) FirewallRules: [{B5AF7FF7-025D-40A4-9282-AD8C4B80BA85}] => (Allow) D:\AOC\Intrepid Studios Launcher.exe (Intrepid Studios) FirewallRules: [{D030314B-5F7F-4A2D-81DF-3C8DBBE87E5C}] => (Allow) D:\AOC\resources\app.asar.unpacked\externals\patcher\Patcher.exe () FirewallRules: [{19E95F3A-D9AD-428D-8134-5D8EFCBE0BDD}] => (Allow) D:\AOC\updater.exe (Intrepid Studios, Inc.) FirewallRules: [{9A2AF7E1-3842-450C-A50B-D99024E5EA06}] => (Allow) C:\Program Files (x86)\Intrepid Studios, Inc\Ashes of Creation Apocalypse\EasyAntiCheat\EasyAntiCheat_Setup.exe (EasyAntiCheat Ltd) FirewallRules: [TCP Query User{68783AD8-415A-474C-9CC2-05CF2FC60DB9}C:\program files (x86)\intrepid studios, inc\ashes of creation apocalypse\apoc\binaries\win64\apoc-win64-shipping.exe] => (Allow) C:\program files (x86)\intrepid studios, inc\ashes of creation apocalypse\apoc\binaries\win64\apoc-win64-shipping.exe (Intrepid Studios, Inc.) FirewallRules: [UDP Query User{9BEF28C5-26FE-4ABE-8DD7-53A02A73C1A0}C:\program files (x86)\intrepid studios, inc\ashes of creation apocalypse\apoc\binaries\win64\apoc-win64-shipping.exe] => (Allow) C:\program files (x86)\intrepid studios, inc\ashes of creation apocalypse\apoc\binaries\win64\apoc-win64-shipping.exe (Intrepid Studios, Inc.) FirewallRules: [{3A4F765B-5A7D-46B0-94EA-30C9F8BBC83C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\HeroSiege\bin\Hero_Siege.exe (Panic Art Studios ) FirewallRules: [{DE3E6E19-D665-4EC2-8A17-DE71A5E431C6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\HeroSiege\bin\Hero_Siege.exe (Panic Art Studios ) FirewallRules: [{14CFFCA3-69E5-4654-9C7A-743043DA3441}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Ltd) FirewallRules: [{7837B83D-6294-43C7-9060-D307EB6B1B6E}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Ltd) FirewallRules: [{4CFAE90C-1D11-440F-B43C-9245E27031D0}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe (SecureMix LLC) FirewallRules: [{7C677EB8-DFEE-4106-A60C-BF88833F3997}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe (SecureMix LLC) ==================== Punkty Przywracania systemu ========================= 21-12-2018 15:00:17 Windows Update 22-12-2018 09:31:45 Installed Launcher 22-12-2018 09:35:49 Zainstalowany program DirectX 25-12-2018 03:18:50 ComboFix created restore point 25-12-2018 04:08:17 Removed Warframe 25-12-2018 18:31:02 Malwarebytes Anti-Rootkit Restore Point ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= Name: Mysz Microsoft PS/2 Description: Mysz Microsoft PS/2 Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (12/25/2018 08:28:01 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (12/25/2018 08:27:47 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: HPLaserJetService.exe, wersja: 7.15.635.0, sygnatura czasowa: 0x4d39aa4e Nazwa modułu powodującego błąd: hppccompio.DLL, wersja: 1.3.0.24, sygnatura czasowa: 0x4c9685d0 Kod wyjątku: 0xc0000417 Przesunięcie błędu: 0x000073bf Identyfikator procesu powodującego błąd: 0x8bc Godzina uruchomienia aplikacji powodującej błąd: 0x01d49c87cb1db9e1 Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe Ścieżka modułu powodującego błąd: C:\Windows\system32\hppccompio.DLL Identyfikator raportu: 2849ce64-087b-11e9-bde0-4ccc6a5f92ff Error: (12/25/2018 08:23:00 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (12/25/2018 08:22:26 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: HPLaserJetService.exe, wersja: 7.15.635.0, sygnatura czasowa: 0x4d39aa4e Nazwa modułu powodującego błąd: hppccompio.DLL, wersja: 1.3.0.24, sygnatura czasowa: 0x4c9685d0 Kod wyjątku: 0xc0000417 Przesunięcie błędu: 0x000073bf Identyfikator procesu powodującego błąd: 0x850 Godzina uruchomienia aplikacji powodującej błąd: 0x01d49c8708a33a21 Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe Ścieżka modułu powodującego błąd: C:\Windows\system32\hppccompio.DLL Identyfikator raportu: 68e938d4-087a-11e9-b47d-4ccc6a5f92ff Error: (12/25/2018 08:20:27 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: mbamservice.exe, wersja: 3.2.0.704, sygnatura czasowa: 0x5b9acf90 Nazwa modułu powodującego błąd: SelfProtectionSdk.dll, wersja: 3.0.0.360, sygnatura czasowa: 0x5b995ba2 Kod wyjątku: 0x40000015 Przesunięcie błędu: 0x000000000014e2bf Identyfikator procesu powodującego błąd: 0x5d8 Godzina uruchomienia aplikacji powodującej błąd: 0x01d49c824c7e63a4 Ścieżka aplikacji powodującej błąd: C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe Ścieżka modułu powodującego błąd: C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll Identyfikator raportu: 2247d4ea-087a-11e9-9dcc-4ccc6a5f92ff Error: (12/25/2018 07:48:26 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (12/25/2018 07:48:05 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: HPLaserJetService.exe, wersja: 7.15.635.0, sygnatura czasowa: 0x4d39aa4e Nazwa modułu powodującego błąd: hppccompio.DLL, wersja: 1.3.0.24, sygnatura czasowa: 0x4c9685d0 Kod wyjątku: 0xc0000417 Przesunięcie błędu: 0x000073bf Identyfikator procesu powodującego błąd: 0x5f8 Godzina uruchomienia aplikacji powodującej błąd: 0x01d49c8246cffb83 Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe Ścieżka modułu powodującego błąd: C:\Windows\system32\hppccompio.DLL Identyfikator raportu: 9c751f26-0875-11e9-9dcc-4ccc6a5f92ff Error: (12/25/2018 07:45:57 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: mbamservice.exe, wersja: 3.2.0.704, sygnatura czasowa: 0x5b9acf90 Nazwa modułu powodującego błąd: SelfProtectionSdk.dll, wersja: 3.0.0.360, sygnatura czasowa: 0x5b995ba2 Kod wyjątku: 0x40000015 Przesunięcie błędu: 0x000000000014e2bf Identyfikator procesu powodującego błąd: 0xae8 Godzina uruchomienia aplikacji powodującej błąd: 0x01d49c3f67d4b162 Ścieżka aplikacji powodującej błąd: C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe Ścieżka modułu powodującego błąd: C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll Identyfikator raportu: 507cbe02-0875-11e9-b831-4ccc6a5f92ff Dziennik System: ============= Error: (12/25/2018 08:28:16 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa HP LaserJet Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (12/25/2018 08:28:15 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Usługa Grupowanie sieci równorzędnej zależy od usługi Protokół rozpoznawania nazw równorzędnych, której nie można uruchomić z powodu następującego błędu: %%-2140993535 Error: (12/25/2018 08:28:15 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Protokół rozpoznawania nazw równorzędnych zakończyła działanie; wystąpił następujący błąd: %%-2140993535 Error: (12/25/2018 08:28:15 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Usługa Grupowanie sieci równorzędnej zależy od usługi Protokół rozpoznawania nazw równorzędnych, której nie można uruchomić z powodu następującego błędu: %%-2140993535 Error: (12/25/2018 08:28:15 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Protokół rozpoznawania nazw równorzędnych zakończyła działanie; wystąpił następujący błąd: %%-2140993535 Error: (12/25/2018 08:28:15 PM) (Source: PNRPSvc) (EventID: 102) (User: ) Description: Chmura protokołu rozpoznawania nazw równorzędnych nie została uruchomiona, ponieważ tworzenie tożsamości domyślnej nie powiodło się; kod błędu: 0x80630801. Error: (12/25/2018 08:28:15 PM) (Source: PNRPSvc) (EventID: 102) (User: ) Description: Chmura protokołu rozpoznawania nazw równorzędnych nie została uruchomiona, ponieważ tworzenie tożsamości domyślnej nie powiodło się; kod błędu: 0x80630801. Error: (12/25/2018 08:28:01 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Usługa Grupowanie sieci równorzędnej zależy od usługi Protokół rozpoznawania nazw równorzędnych, której nie można uruchomić z powodu następującego błędu: %%-2140993535 Windows Defender: =================================== Date: 2018-05-23 10:49:05.413 Description: Podczas skanowania produktu Windows Defender wykryto program szpiegujący lub inne potencjalnie niechciane oprogramowanie. Aby uzyskać więcej informacji, zobacz: http://go.microsoft.com/fwlink/?linkid=37020&name=SoftwareBundler:Win32/Prepscram&threatid=226289 Nazwa:SoftwareBundler:Win32/Prepscram Id.:226289 Ważność:Wysoki Kategoria:Program instalujący niezamówione pakiety oprogramowania Znaleziona ścieżka:file:C:\Program Files (x86)\Removewat 2.2.7\Setup activation.exe;process:pid:4476 Typ wykrycia:Konkretne Źródło wykrycia:Ochrona w czasie rzeczywistym Stan:Nieznane Użytkownik:\ Nazwa procesu: Date: 2018-07-04 16:38:27.956 Description: Produkt Windows Defender napotkał błąd podczas próby aktualizacji podpisów. Nowa wersja podpisu:1.271.442.0 Poprzednia wersja podpisu:1.269.1075.0 Źródło aktualizacji:Użytkownik Typ podpisu:Oprogramowanie antyszpiegowskie Typ aktualizacji:Różnica Użytkownik:ZARZĄDZANIE NT\SYSTEM Bieżąca wersja aparatu:1.1.15000.2 Poprzednia wersja aparatu:1.1.14901.4 Kod błędu:0x80070666 Opis błędu:Inna wersja tego produktu jest już zainstalowana na tym komputerze. Nie można kontynuować instalowania tej wersji. Aby skonfigurować lub usunąć istniejącą wersję tego produktu, użyj aplikacji Dodaj/Usuń Programy z Panelu sterowania. Date: 2018-07-04 16:38:27.956 Description: Produkt Windows Defender napotkał błąd podczas próby aktualizacji aparatu. Nowa wersja aparatu:1.1.15000.2 Poprzednia wersja aparatu:1.1.14901.4 Źródło aktualizacji:Użytkownik Użytkownik:ZARZĄDZANIE NT\SYSTEM Kod błędu:0x80070666 Opis błędu:Inna wersja tego produktu jest już zainstalowana na tym komputerze. Nie można kontynuować instalowania tej wersji. Aby skonfigurować lub usunąć istniejącą wersję tego produktu, użyj aplikacji Dodaj/Usuń Programy z Panelu sterowania. Date: 2018-04-09 11:54:46.055 Description: Produkt Windows Defender napotkał błąd podczas próby załadowania podpisów i podejmie próbę powrotu do znanego zestawu dobrych podpisów. Podpisy objęte próbą:Bieżące Kod błędu:0x80070003 Opis błędu:System nie może odnaleźć określonej ścieżki. Wersja podpisu:0.0.0.0 Wersja aparatu:0.0.0.0 CodeIntegrity: =================================== Date: 2018-12-25 03:27:22.146 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-12-25 03:27:22.087 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-12-25 03:27:22.027 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-12-25 03:27:21.965 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-10-03 12:25:09.490 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-10-03 12:25:09.443 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-10-02 21:03:33.148 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-10-02 21:03:33.101 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM) i5-6500 CPU @ 3.20GHz Procent pamięci w użyciu: 27% Całkowita pamięć fizyczna: 16331.91 MB Dostępna pamięć fizyczna: 11861.09 MB Całkowita pamięć wirtualna: 32661.96 MB Dostępna pamięć wirtualna: 27278.78 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:495.73 GB) (Free:141.12 GB) NTFS Drive d: () (Fixed) (Total:1367.19 GB) (Free:589.76 GB) NTFS Drive f: (Moje pliki) (CDROM) (Total:6.82 GB) (Free:0 GB) UDF \\?\Volume{2ba033a4-3bdb-11e8-853e-806e6f6e6963}\ (Zastrzeżone przez system) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: 4654CCF2) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=495.7 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=1367.2 GB) - (Type=07 NTFS) ==================== Koniec Addition.txt ============================