Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 13-09-2020 Uruchomiony przez Rostov (13-09-2020 22:05:40) Uruchomiony z C:\Users\Rostov\Desktop Windows 7 Home Premium Service Pack 1 (X64) (2020-03-17 09:54:12) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-764258043-3443933537-1065429426-500 - Administrator - Disabled) Gość (S-1-5-21-764258043-3443933537-1065429426-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-764258043-3443933537-1065429426-1002 - Limited - Enabled) Rostov (S-1-5-21-764258043-3443933537-1065429426-1000 - Administrator - Enabled) => C:\Users\Rostov ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189} AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) 7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov) ActivePerl 5.28.1 Build 0000 (64-bit) (HKLM\...\{D247155D-8AC0-5432-9BC3-7D2D6A784B1A}) (Version: 5.28.0000 - ActiveState) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19120 - Adobe Systems Incorporated) Adobe Flash Player 32 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 32.0.0.433 - Adobe) Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.433 - Adobe) Adobe Reader X MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.0.0 - Adobe Systems Incorporated) Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd) AIMP (HKLM-x32\...\AIMP) (Version: v4.70.2227, 01.09.2020 - AIMP DevTeam) Audacity 2.3.3 (HKLM-x32\...\Audacity_is1) (Version: 2.3.3 - Audacity Team) AutoHotkey 1.1.33.00 (HKLM\...\AutoHotkey) (Version: 1.1.33.00 - Lexikos) Avidemux VC++ 64bits (HKU\S-1-5-21-764258043-3443933537-1065429426-1000\...\{ec92f24e-913e-4ed8-8aa8-a25676b2539a}) (Version: 2.7.5 - Mean) Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.83 - Atheros Communications) calibre 64bit (HKLM\...\{0FD8DB9D-5D78-4919-9413-0940F43334DD}) (Version: 4.23.0 - Kovid Goyal) CCleaner (HKLM\...\CCleaner) (Version: 5.70 - Piriform) CPUID CPU-Z 1.92 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.92 - CPUID, Inc.) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden Dell DataSafe Online (HKLM-x32\...\{7EC66A95-AC2D-4127-940B-0445A526AB2F}) (Version: 2.1.19634 - Dell) Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc) Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.) Dell MusicStage (HKLM-x32\...\{91AF2672-F5BC-42CF-8037-A9D2F92BBCC0}) (Version: 1.5.201.0 - Fingertapps) Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.65 - ArcSoft) Dell Support Center (HKLM\...\{0090A87C-3E0E-43D4-AA71-A71B06563A4A}) (Version: 3.1.5803.11 - PC-Doctor, Inc.) Hidden Dell Support Center (HKLM\...\Dell Support Center) (Version: 3.1.5803.11 - Dell Inc.) Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.1207.101.225 - ALPS ELECTRIC CO., LTD.) Dell VideoStage (HKLM-x32\...\{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.2.0.1712 - CyberLink Corp.) Hidden Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.2.0.1712 - CyberLink Corp.) Dell WLAN and Bluetooth Client Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Dell Inc.) DirectX 9 Runtime (HKLM-x32\...\{AF9E97C1-7431-426D-A8D5-ABE40995C0B1}) (Version: 1.00.0000 - Sonic Solutions) Hidden EaseUS Todo Backup Free 12.0 (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 12.0 - CHENGDU YIWO Tech Development Co., Ltd) Evernote v. 6.25.1 (HKLM-x32\...\{CA92FF58-B652-11EA-A23A-42010A401FD0}) (Version: 6.25.1.9091 - Evernote Corp.) FastStone Image Viewer 7.5 (HKLM-x32\...\FastStone Image Viewer) (Version: 7.5 - FastStone Soft) Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation) FreeFileSync 11.0 (HKLM-x32\...\FreeFileSync_is1) (Version: 11.0 - FreeFileSync.org) Galeria fotografii usługi Windows Live (HKLM-x32\...\{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 85.0.4183.102 - Google LLC) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden HexChat (HKLM\...\HexChat_is1) (Version: 2.14.3 - HexChat) HP Deskjet 1050 J410 series — badanie mające na celu poprawę produktów (HKLM\...\{52A87876-4D1A-4524-9F06-53A490E6E34D}) (Version: 28.0.1313.0 - Hewlett-Packard Co.) HP Deskjet 1050 J410 series — podstawowe oprogramowanie urządzenia (HKLM\...\{B6A3D97D-484B-48B5-85C6-361D9FA25CDF}) (Version: 28.0.1313.0 - Hewlett-Packard Co.) HP Deskjet 1050 J410 series Pomoc (HKLM-x32\...\{5C90D8CF-F12A-41C6-9007-3B651A1F0D78}) (Version: 140.0.66.66 - Hewlett Packard) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6341.0 - IDT) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2342 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation) Intel(R) Turbo Boost Technology Monitor 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel) IrfanView 4.54 (64-bit) (HKLM\...\IrfanView64) (Version: 4.54 - Irfan Skiljan) Ivacy (HKLM-x32\...\Ivacy_is1) (Version: 5.6.0.0 - Ivacy) Java(TM) 6 Update 27 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416027FF}) (Version: 6.0.270 - Oracle) Java(TM) 6 Update 27 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216027FF}) (Version: 6.0.270 - Oracle) Junk Mail filter update (HKLM-x32\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden KeyboardTest V3.2 (HKLM\...\KeyboardTest_is1) (Version: 3.2 - PassMark Software) KeyTweak - Keyboard Remapper (remove only) (HKLM-x32\...\KeyTweak) (Version: - ) K-Lite Codec Pack 15.4.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 15.4.0 - KLCP) Mesh Runtime (HKLM-x32\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.8 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.8.03761 - Microsoft Corporation) Microsoft .NET Framework 4.8 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.8.03761 - Microsoft Corporation) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 83.0.478.50 - Microsoft Corporation) Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.129.37 - ) Microsoft Keyboard Layout Creator 1.4 (HKLM-x32\...\{99E66BC9-E4B6-485F-ABFC-31EFCE36DFDF}) (Version: 1.4.6000 - Microsoft Corp.) Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 x64 ENU (HKLM\...\{8424B163-D1E0-48B7-88A2-C7A61767B3D7}) (Version: 4.0.8482.1 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual Studio Code (User) (HKU\S-1-5-21-764258043-3443933537-1065429426-1000\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.49.0 - Microsoft Corporation) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 78.0.1 - Mozilla) Mozilla Thunderbird 78.2.2 (x86 pl) (HKLM-x32\...\Mozilla Thunderbird 78.2.2 (x86 pl)) (Version: 78.2.2 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) NetWorx 5.5.5 (HKLM\...\NetWorx_is1) (Version: - Softperfect) OpenOffice 4.1.7 (HKLM-x32\...\{4440D601-AB49-4963-B728-BE0DCED42156}) (Version: 4.17.9800 - Apache Software Foundation) Opera Stable 70.0.3728.178 (HKLM-x32\...\Opera 70.0.3728.178) (Version: 70.0.3728.178 - Opera Software) PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.322.10 - Tracker Software Products Ltd) PhotoShowExpress (HKLM-x32\...\{3250260C-7A95-4632-893B-89657EB5545B}) (Version: 2.0.063 - ##COMPANY_NAME##) Hidden PL-UK (HKLM\...\{2C5D562E-40CD-4D64-8D18-907564B52C24}) (Version: 1.0.3.40 - Bronek Kozicki) Poczta usługi Windows Live (HKLM-x32\...\{64376910-1860-4CEF-8B34-AA5D205FC5F1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (HKLM-x32\...\{7A9D47BA-6D50-4087-866F-0800D8B89383}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation) PopTrayU 5.2.6 (HKLM-x32\...\PopTrayU) (Version: 5.2.6 - Jessica Brown) Python 3.8.4 (64-bit) (HKU\S-1-5-21-764258043-3443933537-1065429426-1000\...\{1755b405-bf69-4659-934d-f14d4e57ac48}) (Version: 3.8.4150.0 - Python Software Foundation) Python 3.8.4 Add to Path (64-bit) (HKLM\...\{04D3BB0A-F6EC-4AB6-8C09-02AC886F5A7F}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python 3.8.4 Core Interpreter (64-bit) (HKLM\...\{986184E0-B052-438C-B54E-089159C8D50E}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python 3.8.4 Development Libraries (64-bit) (HKLM\...\{6980FF73-88CD-43EE-9CE7-1896A62C46F4}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python 3.8.4 Documentation (64-bit) (HKLM\...\{D228308E-49EF-4548-9FFF-1856C31DDD43}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python 3.8.4 Executables (64-bit) (HKLM\...\{21CB7ABF-B2E4-4789-BB93-8316725B07D4}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python 3.8.4 pip Bootstrap (64-bit) (HKLM\...\{2DAE01B4-6BB1-45A1-8491-645EF0FF098F}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python 3.8.4 Standard Library (64-bit) (HKLM\...\{7F843096-9516-408E-896F-99BF2078651A}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python 3.8.4 Tcl/Tk Support (64-bit) (HKLM\...\{9F4A6362-9E57-4DE9-825B-946940925895}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python 3.8.4 Test Suite (64-bit) (HKLM\...\{BD9575A2-9731-4C64-A8AF-31B8FA629675}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python 3.8.4 Utility Scripts (64-bit) (HKLM\...\{4D25AE4C-92F9-4EBE-8E2B-A9E47D2D6C5C}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python Launcher (HKLM-x32\...\{8310C47D-C846-4476-A079-1FDD7B5B0503}) (Version: 3.8.7133.0 - Python Software Foundation) Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 10.09.25 - Dell Inc.) RBVirtualFolder64Inst (HKLM\...\{9D6DFAD6-09E5-445E-A4B5-A388FEEBD90D}) (Version: 1.00.0000 - Roxio, Inc.) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30126 - Realtek Semiconductor Corp.) Revo Uninstaller 2.1.7 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.1.7 - VS Revo Group, Ltd.) Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.77.0 - Roxio) Roxio File Backup (HKLM\...\{60B2315F-680F-4EB3-B8DD-CCDC86A7CCAB}) (Version: 1.3.2 - Roxio) Hidden Skype™ 5.5 (HKLM-x32\...\{AA59DDE4-B672-4621-A016-4C248204957A}) (Version: 5.5.119 - Skype Technologies S.A.) Sonic CinePlayer Decoder Pack (HKLM-x32\...\{9A00EC4E-27E1-42C4-98DD-662F32AC8870}) (Version: 4.3.0 - Sonic Solutions) Hidden Spotify (HKU\S-1-5-21-764258043-3443933537-1065429426-1000\...\Spotify) (Version: 1.1.41.634.gc2c73ca7 - Spotify AB) UnistallAtomSDK (HKLM-x32\...\AtomSDKInstaller_is1) (Version: 3.6.0 - ) VBCABLE, The Virtual Audio Cable (HKLM\...\VB:VBCABLE {87459874-1236-4469}) (Version: - VB-Audio Software) VLC media player (HKLM\...\VLC media player) (Version: 3.0.11 - VideoLAN) Windows Movie Maker 2.6 (HKLM-x32\...\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}) (Version: 2.6.4037.0 - Microsoft Corporation) Zinio Reader 4 (HKLM-x32\...\{7FB00B6B-6843-97EC-EED6-78BD6D35370A}) (Version: 4.2.4164 - Zinio LLC) Hidden Zinio Reader 4 (HKLM-x32\...\ZinioReader4) (Version: 4.2.4164 - Zinio LLC) ==================== Niestandardowe rejestracje CLSID (filtrowane): ============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Brak podpisu cyfrowego] ContextMenuHandlers1: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files (x86)\AIMP\System\aimp_menu64.dll [2020-09-01] (IP Izmaylov Artem Andreevich -> AIMP DevTeam) ContextMenuHandlers1: [Atheros] -> {B8952421-0E55-400B-94A6-FA858FC0A39F} => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvAppExt.dll [2011-05-20] (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers1: [Roxio Burn] -> {E8CB9D53-A47A-42B5-9F5B-96B037C9DD4C} => c:\Program Files\Roxio\Roxio Burn\RB_ContextMenu64.dll [2010-11-11] (Sonic Solutions -> TODO: ) ContextMenuHandlers1: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2019-11-15] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers2: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2019-11-15] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) ContextMenuHandlers3: [FTShellContext] -> {AFF81F7B-6942-40c4-AADA-7214EF7B6DD1} => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\ShellContextExt.dll [2011-05-20] (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Brak podpisu cyfrowego] ContextMenuHandlers4: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files (x86)\AIMP\System\aimp_menu64.dll [2020-09-01] (IP Izmaylov Artem Andreevich -> AIMP DevTeam) ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers4: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2019-11-15] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2011-03-26] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Brak podpisu cyfrowego] ==================== Codecs (filtrowane) ==================== ==================== Skróty & WMI ======================== (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\":: WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99] WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate] ShortcutWithArgument: C:\Users\Rostov\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Charlie (Ja) - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1" ==================== Załadowane moduły (filtrowane) ============= 2011-12-16 15:14 - 2011-01-13 01:56 - 000058880 _____ () [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2020-03-22 21:43 - 2019-06-28 12:09 - 001291264 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\Todo Backup\bin\libxml2.dll 2020-03-22 21:43 - 2019-06-28 12:09 - 000055808 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\Todo Backup\bin\zlib1.dll 2020-03-28 14:45 - 2016-09-19 13:09 - 000813056 _____ () [Brak podpisu cyfrowego] C:\Program Files\NetWorx\sqlite.dll 2020-03-18 16:39 - 2020-03-18 16:39 - 000169984 _____ () [Brak podpisu cyfrowego] C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\63059d61593158ea2ebbd142e6face39\IsdiInterop.ni.dll 2011-12-16 15:14 - 2011-02-01 20:57 - 001892352 _____ (Apache Software Foundation) [Brak podpisu cyfrowego] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\xerces-c_2_7.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000061088 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthCopyHook.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000044704 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BPP.DLL 2011-05-20 19:15 - 2011-05-20 19:15 - 000043680 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BTBIP.DLL 2011-05-20 19:15 - 2011-05-20 19:15 - 000029856 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtFileStore.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000030368 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtFileStoreOpp.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000207520 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtObexFt.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000208544 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BTOBEXOP.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000305824 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\filetransfer.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000072864 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\goep.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000079520 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\GOEP_bpp.DLL 2011-05-20 19:15 - 2011-05-20 19:15 - 000073888 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\GOEP_SINGLE.DLL 2011-05-20 19:15 - 2011-05-20 19:15 - 000079008 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Handsfree.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000119456 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\L2capLib.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000118944 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\ObjPush.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 002234016 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\OutLookLib.dll 2011-05-20 19:16 - 2011-05-20 19:16 - 000081056 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\RfcommLib.dll 2011-05-20 19:16 - 2011-05-20 19:16 - 000140448 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\skypeagent.dll 2011-05-20 19:16 - 2011-05-20 19:16 - 000066720 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Sync.dll 2020-03-22 21:42 - 2019-06-28 12:09 - 000892928 _____ (Free Software Foundation) [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\Todo Backup\bin\iconv.dll 2020-03-18 16:39 - 2020-03-18 16:39 - 000014336 _____ (Intel Corp.) [Brak podpisu cyfrowego] C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\cac34f7340af9f12979fefbaa51d2446\IAStorCommon.ni.dll 2011-12-16 15:14 - 2011-01-13 01:56 - 000165376 _____ (Intel Corporation) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorUIHelper.dll 2011-12-16 15:14 - 2011-01-13 01:56 - 001109504 _____ (Intel Corporation) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IntelVisualDesign.dll 2011-12-16 15:14 - 2011-01-13 01:58 - 000006656 _____ (Intel Corporation) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\pl-PL\IAStorDataMgr.resources.dll 2011-12-16 15:14 - 2011-01-13 01:58 - 000032768 _____ (Intel Corporation) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\pl-PL\IAStorIcon.resources.dll 2011-12-16 15:14 - 2011-01-13 01:58 - 000004608 _____ (Intel Corporation) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\pl-PL\IntelVisualDesign.resources.dll 2011-12-16 15:14 - 2011-02-01 20:53 - 000069632 _____ (Intel Corporation) [Brak podpisu cyfrowego] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\StatusStrings.dll 2011-12-16 15:14 - 2011-01-13 01:52 - 000275456 _____ (Intel Corporation) [Brak podpisu cyfrowego] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\ISDI.dll 2020-03-18 16:39 - 2020-03-18 16:39 - 000218624 _____ (Intel Corporation) [Brak podpisu cyfrowego] C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgr\6d5a37a33e3473c2f81a898077ee6fea\IAStorDataMgr.ni.dll 2020-03-18 16:39 - 2020-03-18 16:39 - 000475648 _____ (Intel Corporation) [Brak podpisu cyfrowego] C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\d8f5e5480fdf1746af83ea34ea6c632a\IAStorUtil.ni.dll 2020-03-18 13:28 - 2020-03-18 13:28 - 000225280 _____ (Microsoft Corporation) [Brak podpisu cyfrowego] [Plik w użyciu] C:\windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcm90.dll 2011-12-16 15:40 - 2011-12-16 15:40 - 000113664 _____ (Microsoft Corporation) [Brak podpisu cyfrowego] C:\windows\WinSxS\amd64_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.5592_none_8a1e1b372ed7b012\ATL80.DLL 2011-12-16 15:41 - 2011-12-16 15:41 - 001658368 _____ (Microsoft Corporation) [Brak podpisu cyfrowego] C:\windows\WinSxS\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.5592_none_8448f49f328da8c3\MFC80.DLL 2011-12-16 15:41 - 2011-12-16 15:41 - 001654784 _____ (Microsoft Corporation) [Brak podpisu cyfrowego] C:\windows\WinSxS\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.5592_none_8448f49f328da8c3\MFC80U.DLL 2020-03-22 21:42 - 2019-10-09 10:05 - 001359872 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\Todo Backup\bin\LIBEAY32.dll 2020-03-22 21:42 - 2019-10-09 10:05 - 000365056 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\Todo Backup\bin\SSLEAY32.dll 2015-11-14 00:52 - 2015-11-14 00:52 - 001362944 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\PopTrayU\libeay32.dll 2015-11-14 00:52 - 2015-11-14 00:52 - 000357888 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\PopTrayU\ssleay32.dll ==================== Alternate Data Streams (filtrowane) ======== ==================== Tryb awaryjny (filtrowane) ================== ==================== Powiązania plików (filtrowane) ================= ==================== Internet Explorer (Wersja 11) (filtrowane) ========== HKU\S-1-5-21-764258043-3443933537-1065429426-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gazeta.pl/0,0.html?p=190 SearchScopes: HKLM -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox SearchScopes: HKLM-x32 -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-764258043-3443933537-1065429426-1000 -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-12-16] (Sun Microsystems, Inc. -> Sun Microsystems, Inc.) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-11-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll [2011-05-20] (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.) BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2020-06-24] (Evernote Corporation -> Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-12-16] (Sun Microsystems, Inc. -> Sun Microsystems, Inc.) ==================== Hosts - zawartość: ========================= (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 000000824 _____ C:\windows\system32\drivers\etc\hosts ==================== Inne obszary =========================== (Obecnie brak automatycznej naprawy dla tej sekcji.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Perl64\site\bin;C:\Perl64\bin;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;c:\Program Files (x86)\Common Files\Roxio Shared\DLLShared\;c:\Program Files (x86)\Common Files\Roxio Shared\OEM\DLLShared\;c:\Program Files (x86)\Common Files\Roxio Shared\OEM\DLLShared\;c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\DLLShared\;c:\Program Files (x86)\Roxio\OEM\AudioCore\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files\Calibre2\ HKU\S-1-5-21-764258043-3443933537-1065429426-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Rostov\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == ==================== Reguły Zapory systemu Windows (filtrowane) ================ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [{DF893DCA-4D55-4C15-AD75-39B6DF5A132A}] => (Allow) C:\Program Files (x86)\Dell\VideoStage\VideoStage.exe (CyberLink -> CyberLink Corp.) FirewallRules: [{F38BAFCA-4BA8-4C78-8FB8-F0E680C48F6B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies SA -> Skype Technologies S.A.) FirewallRules: [{F2A7B660-43A2-4B7B-8BBA-980C8D161EEA}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{02CBE405-4E7D-40AB-953D-2818F0EEA517}] => (Allow) LPort=2869 FirewallRules: [{67AB18CC-5A5C-4944-8C64-2E085A37C8E8}] => (Allow) LPort=1900 FirewallRules: [{62C7AB2F-2ACA-48B0-8CDB-C66E76140EAC}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{49CE270E-1521-4378-AB87-1CFBDBAE3BDD}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{ACEEA4FE-3BAE-4899-A24B-10234E67EA83}] => (Allow) C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\USBSetup.exe (Hewlett Packard -> Hewlett-Packard Co.) FirewallRules: [TCP Query User{937AA351-7C39-4649-AFAE-3A9130BA4315}C:\users\rostov\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\rostov\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [UDP Query User{D08C19D6-6523-49E4-83BA-6296E5798C15}C:\users\rostov\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\rostov\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{60CE1E5E-1CD0-4A53-B1B0-B6B55967458D}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) FirewallRules: [{7017C539-CAD3-4E4E-90F2-0DC87BB7BD89}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) FirewallRules: [{2A114CF8-F97B-4A59-BD0A-FD179E3C7D9A}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) FirewallRules: [{749D76D2-7DFB-42C4-B434-679E44D16718}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) FirewallRules: [{1CE5F412-7EC7-4B25-9C33-70CC51212DF8}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) FirewallRules: [{5E21BECD-7A5F-41A0-B724-FD003E2D4B16}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) FirewallRules: [{4CB7E432-08EC-4A5B-9296-0167C8D5CAB1}] => (Allow) C:\Program Files\NetWorx\networx.exe (SOFTPERFECT PTY. LTD. -> SoftPerfect) FirewallRules: [TCP Query User{F91D93E3-4ED9-4D9B-AFBE-4AEAED801E58}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [UDP Query User{269856DA-A6A8-42A1-B91F-3D7071ACB1D8}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [TCP Query User{57ABD098-0A34-4284-A4EE-1E76C684A082}C:\users\rostov\d\adiirc\adiirc.exe] => (Allow) C:\users\rostov\d\adiirc\adiirc.exe (AdiIRC.com) [Brak podpisu cyfrowego] FirewallRules: [UDP Query User{370B3796-C08A-40A2-BF99-A3E146CFC427}C:\users\rostov\d\adiirc\adiirc.exe] => (Allow) C:\users\rostov\d\adiirc\adiirc.exe (AdiIRC.com) [Brak podpisu cyfrowego] FirewallRules: [TCP Query User{628D1C33-CF91-4211-BE2E-295389791561}C:\perl64\bin\perl.exe] => (Allow) C:\perl64\bin\perl.exe (ActiveState Software Inc. -> ActiveState) FirewallRules: [UDP Query User{769F7F74-BCB6-4FB3-AEE3-8D500B7902DC}C:\perl64\bin\perl.exe] => (Allow) C:\perl64\bin\perl.exe (ActiveState Software Inc. -> ActiveState) FirewallRules: [{9E419494-A9DB-4F94-A54A-2CB876DF9900}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) FirewallRules: [{4C44B2C4-191A-40EC-AA3B-1C3DA4016D39}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) FirewallRules: [TCP Query User{7236999A-7E89-4F0C-99C4-33DC5AE72557}C:\program files (x86)\aimp\aimp.exe] => (Allow) C:\program files (x86)\aimp\aimp.exe (IP Izmaylov Artem Andreevich -> AIMP DevTeam) FirewallRules: [UDP Query User{81C27123-B4C4-433E-9F12-2A57ACE1E615}C:\program files (x86)\aimp\aimp.exe] => (Allow) C:\program files (x86)\aimp\aimp.exe (IP Izmaylov Artem Andreevich -> AIMP DevTeam) FirewallRules: [{9F9F950A-E8B0-413F-BA32-50AD0050B7C5}] => (Allow) C:\Users\Rostov\AppData\Local\Programs\Opera\70.0.3728.154\opera.exe (Opera Software AS -> Opera Software) FirewallRules: [{94794676-8C3E-46BB-A207-862DE6528B63}] => (Allow) C:\Users\Rostov\AppData\Local\Programs\Opera\70.0.3728.178\opera.exe (Opera Software AS -> Opera Software) FirewallRules: [{27A7DA81-54A3-422A-853D-D623AC1C8986}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [TCP Query User{E38EA832-E325-4F0F-BDFD-C83156AD2103}C:\users\rostov\d\reinstal\total commander 9.50 portable\app\totalcmd\totalcmd64.exe] => (Allow) C:\users\rostov\d\reinstal\total commander 9.50 portable\app\totalcmd\totalcmd64.exe (Ghisler Software GmbH) [Brak podpisu cyfrowego] FirewallRules: [UDP Query User{3BBC7B2C-F51B-41F4-93F6-AE4209B1620C}C:\users\rostov\d\reinstal\total commander 9.50 portable\app\totalcmd\totalcmd64.exe] => (Allow) C:\users\rostov\d\reinstal\total commander 9.50 portable\app\totalcmd\totalcmd64.exe (Ghisler Software GmbH) [Brak podpisu cyfrowego] ==================== Punkty Przywracania systemu ========================= 09-09-2020 18:53:28 Windows Update 10-09-2020 13:42:19 Removed Microsoft SQL Server Compact 4.0 x64 ENU 10-09-2020 13:42:51 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 10-09-2020 13:55:17 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 10-09-2020 14:00:01 Revo Uninstaller's restore point - Ivacy 10-09-2020 14:00:59 Revo Uninstaller's restore point - Microsoft SQL Server Compact 4.0 x64 ENU 10-09-2020 14:01:09 Removed Microsoft SQL Server Compact 4.0 x64 ENU 10-09-2020 14:02:01 Revo Uninstaller's restore point - Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 10-09-2020 14:02:11 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 10-09-2020 14:03:07 Revo Uninstaller's restore point - UnistallAtomSDK 10-09-2020 14:13:44 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 11-09-2020 15:06:20 Installed Windows Movie Maker 2.6 11-09-2020 22:39:56 Removed Microsoft SQL Server Compact 4.0 x64 ENU 11-09-2020 22:40:34 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 11-09-2020 22:50:09 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 12-09-2020 19:13:24 Windows Update ==================== Wadliwe urządzenia w Menedżerze urządzeń ============ Name: Integrated Webcam Description: Urządzenie wideo USB Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f} Manufacturer: Microsoft Service: usbvideo Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Dell PS511 USB SoundBar Description: Urządzenie audio USB Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318} Manufacturer: (Rodzajowe audio USB) Service: usbaudio Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Dell Touchpad Description: Dell Touchpad Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318} Manufacturer: Alps Electric Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Błędy w Dzienniku zdarzeń: ======================== Dziennik Aplikacja: ================== Error: (09/13/2020 09:45:23 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (09/13/2020 09:39:14 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (09/13/2020 09:32:13 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (09/13/2020 07:42:31 PM) (Source: RasClient) (EventID: 20227) (User: ) Description: Identyfikator CoId={B0F541A9-EB3B-4C14-880E-A8D5547E810F}: Użytkownik ROSTOV\Rostov wybrał numer w celu nawiązania połączenia o nazwie Ivacy, jednak jego nawiązanie nie powiodło się. Kod błędu zwrócony w wyniku niepowodzenia: 809. Error: (09/13/2020 07:42:16 PM) (Source: RasClient) (EventID: 20227) (User: ) Description: Identyfikator CoId={97C2498F-75CE-4A5C-B230-E08732D6F6B9}: Użytkownik ROSTOV\Rostov wybrał numer w celu nawiązania połączenia o nazwie Ivacy, jednak jego nawiązanie nie powiodło się. Kod błędu zwrócony w wyniku niepowodzenia: 809. Error: (09/13/2020 07:42:05 PM) (Source: RasClient) (EventID: 20227) (User: ) Description: Identyfikator CoId={A446CD4B-089C-437E-BD3C-D0FF6E929906}: Użytkownik ROSTOV\Rostov wybrał numer w celu nawiązania połączenia o nazwie Ivacy, jednak jego nawiązanie nie powiodło się. Kod błędu zwrócony w wyniku niepowodzenia: 809. Error: (09/13/2020 07:41:53 PM) (Source: RasClient) (EventID: 20227) (User: ) Description: Identyfikator CoId={49D1B0E6-1C09-476C-A5A8-C8A6E8D0A8F2}: Użytkownik ROSTOV\Rostov wybrał numer w celu nawiązania połączenia o nazwie Ivacy, jednak jego nawiązanie nie powiodło się. Kod błędu zwrócony w wyniku niepowodzenia: 809. Error: (09/13/2020 02:39:15 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Dziennik System: ============= Error: (09/13/2020 09:50:24 PM) (Source: Schannel) (EventID: 4119) (User: ZARZĄDZANIE NT) Description: Odebrano następujący alert krytyczny: 40. Error: (09/13/2020 09:50:24 PM) (Source: Schannel) (EventID: 4119) (User: ZARZĄDZANIE NT) Description: Odebrano następujący alert krytyczny: 70. Error: (09/13/2020 09:37:11 PM) (Source: Schannel) (EventID: 4119) (User: ZARZĄDZANIE NT) Description: Odebrano następujący alert krytyczny: 40. Error: (09/13/2020 09:37:11 PM) (Source: Schannel) (EventID: 4119) (User: ZARZĄDZANIE NT) Description: Odebrano następujący alert krytyczny: 70. Error: (09/13/2020 02:44:06 PM) (Source: Schannel) (EventID: 4119) (User: ZARZĄDZANIE NT) Description: Odebrano następujący alert krytyczny: 40. Error: (09/13/2020 02:44:06 PM) (Source: Schannel) (EventID: 4119) (User: ZARZĄDZANIE NT) Description: Odebrano następujący alert krytyczny: 70. Error: (09/13/2020 01:05:04 PM) (Source: Schannel) (EventID: 4119) (User: ZARZĄDZANIE NT) Description: Odebrano następujący alert krytyczny: 40. Error: (09/13/2020 01:05:03 PM) (Source: Schannel) (EventID: 4119) (User: ZARZĄDZANIE NT) Description: Odebrano następujący alert krytyczny: 70. Windows Defender: =================================== Date: 2020-03-18 13:43:36.571 Description: Produkt Windows Defender napotkał błąd podczas próby aktualizacji aparatu. Nowa wersja aparatu:1.1.16800.2 Poprzednia wersja aparatu:1.1.6402.0 Źródło aktualizacji:Użytkownik Użytkownik:ROSTOV\Rostov Kod błędu:0x8050800c Opis błędu:Wystąpił nieoczekiwany problem. Zainstaluj dostępne aktualizacje, a następnie spróbuj ponownie uruchomić program. Aby uzyskać informacje na temat instalowania aktualizacji, zobacz Pomoc i obsługę techniczną. ==================== Statystyki pamięci =========================== BIOS: Dell Inc. A05 08/03/2012 Płyta główna: Dell Inc. 01HXXJ Procesor: Intel(R) Core(TM) i5-2430M CPU @ 2.40GHz Procent pamięci w użyciu: 40% Całkowita pamięć fizyczna: 8100.27 MB Dostępna pamięć fizyczna: 4819.96 MB Całkowita pamięć wirtualna: 16198.69 MB Dostępna pamięć wirtualna: 12959.4 MB ==================== Dyski ================================ Drive c: (OS) (Fixed) (Total:451.01 GB) (Free:309.79 GB) NTFS \\?\Volume{757966f7-6834-11ea-a6a4-806e6f6e6963}\ (Recovery) (Fixed) (Total:14.65 GB) (Free:7 GB) NTFS ==================== MBR & Tablica partycji ==================== ========================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: 5E7BA325) Partition 1: (Not Active) - (Size=100 MB) - (Type=DE) Partition 2: (Active) - (Size=14.6 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=451 GB) - (Type=07 NTFS) ==================== Koniec Addition.txt =======================