Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 14-12-2020 Uruchomiony przez Andman (28-12-2020 14:40:59) Uruchomiony z C:\Users\Andman\Desktop Windows 10 Home Wersja 1909 18363.1256 (X64) (2019-09-15 15:27:47) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-2915685255-4076878800-3373238685-500 - Administrator - Disabled) Andman (S-1-5-21-2915685255-4076878800-3373238685-1001 - Administrator - Enabled) => C:\Users\Andman defaultuser0 (S-1-5-21-2915685255-4076878800-3373238685-1000 - Limited - Enabled) => C:\Users\defaultuser0 Gość (S-1-5-21-2915685255-4076878800-3373238685-501 - Limited - Enabled) Konto domyślne (S-1-5-21-2915685255-4076878800-3373238685-503 - Limited - Disabled) WDAGUtilityAccount (S-1-5-21-2915685255-4076878800-3373238685-504 - Limited - Disabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Kaspersky Free (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) 7thShare Android Data Recovery version 2.6.8.8 (HKLM-x32\...\{7thShareAndroidRecovery}_is1) (Version: 2.6.8.8 - www.7thShare.com) 7-Zip 15.14 (HKLM-x32\...\7-Zip) (Version: 15.14 - Igor Pavlov) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 32.0.0.125 - Adobe) Audio By Harman (HKLM\...\{4F81A6B8-223E-4C60-A04D-61C48505B7BC}) (Version: 1.2.0.0 - Harman) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.8.7128 - CDBurnerXP) e-Deklaracje Desktop (HKLM-x32\...\{00C66295-CA9F-7321-25D6-C85145A27446}) (Version: 12.0.2 - Ministerstwo Finansow) Hidden e-Deklaracje Desktop (HKLM-x32\...\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1) (Version: 12.0.2 - Ministerstwo Finansow) HP DeskJet 4530 series — podstawowe oprogramowanie urządzenia (HKLM\...\{ACA4C9B6-4792-486B-B6E1-F3F571A56433}) (Version: 40.11.1122.1796 - HP Inc.) Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1054 - Intel Corporation) Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.47.866.0 - Intel Corporation) Hidden Intel(R) Trusted Connect Services Client (HKLM-x32\...\{246c6cc0-9810-4728-9a29-28474de2eec5}) (Version: 1.47.866.0 - Intel Corporation) Hidden Kaspersky Free (HKLM-x32\...\{718613F4-492D-4272-ACC3-D04A8EF0F883}) (Version: 19.0.0.1088 - Kaspersky Lab) Hidden Kaspersky Free (HKLM-x32\...\InstallWIX_{718613F4-492D-4272-ACC3-D04A8EF0F883}) (Version: 19.0.0.1088 - Kaspersky Lab) KeePassXC (HKLM\...\{FEE3E3CD-2A6C-464E-8424-DE7512D4A5D0}) (Version: 2.6.2 - KeePassXC Team) Kingo ROOT version 1.5.8.3353 (HKLM-x32\...\{AE7675D6-0B31-494F-ABFA-822E1A0FDF17}_is1) (Version: 1.5.8.3353 - Kingosoft Technology Ltd.) Lenovo OneKey Recovery (HKLM\...\{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.1.0.5708 - CyberLink Corp.) Hidden Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.1.0.5708 - CyberLink Corp.) Lenovo Service Bridge (HKU\S-1-5-21-2915685255-4076878800-3373238685-1001\...\{2C74547D-EF88-47F4-85F5-BE46A31E26B7}_is1) (Version: 5.0.1.5 - Lenovo) Lenovo System Update (HKLM-x32\...\TVSU_is1) (Version: 5.07.0110 - Lenovo) LibreOffice 7.0.3.1 (HKLM\...\{3C4801FF-3D7B-4804-877E-3A322C00524C}) (Version: 7.0.3.1 - The Document Foundation) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 87.0.664.66 - Microsoft Corporation) Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.139.59 - ) Microsoft Update Health Tools (HKLM\...\{0BCA8FBE-0C1C-4C65-98A3-5D34AAF41737}) (Version: 2.70.0.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020 (HKLM-x32\...\{7474cd6e-76cc-4257-837e-5b9261e526af}) (Version: 14.13.26020.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 68.3.0 - Mozilla) Mozilla Thunderbird 78.6.0 (x86 pl) (HKLM-x32\...\Mozilla Thunderbird 78.6.0 (x86 pl)) (Version: 78.6.0 - Mozilla) NVIDIA Oprogramowanie systemu PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation) NVIDIA Sterownik graficzny 457.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 457.30 - NVIDIA Corporation) Oprogramowanie mikroukładu Intel® (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden Origin (HKLM-x32\...\Origin) (Version: 10.5.87.45080 - Electronic Arts, Inc.) Pakiet sterowników systemu Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/27/2012 7.0.0000.00004) (HKLM\...\D43FD4059F47ACA9539247D6CF690AAEA503AF2D) (Version: 08/27/2012 7.0.0000.00004 - Google, Inc.) Pakiet sterowników systemu Windows - SAMSUNG Electronics Co., Ltd. (dg_ssudbus) USB (12/02/2015 2.12.1.0) (HKLM\...\85A33267F12961AF9ED9AE799DEDA5E62BEA236F) (Version: 12/02/2015 2.12.1.0 - SAMSUNG Electronics Co., Ltd. ) SumatraPDF (HKLM\...\SumatraPDF) (Version: 3.2 - Krzysztof Kowalczyk) SumatraPDF (HKLM-x32\...\SumatraPDF) (Version: 3.1.1 - Krzysztof Kowalczyk) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.10.31 - Synaptics Incorporated) Usługa Lenovo Vantage (HKLM-x32\...\VantageSRV_is1) (Version: 3.3.115.0 - Lenovo Group Ltd.) VLC media player (HKLM\...\VLC media player) (Version: 3.0.11 - VideoLAN) Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden WERSJA DEMO FIFA 20 (HKLM-x32\...\{5022F4F2-6DA1-4470-B21A-9ADA81B5A0E8}) (Version: 1.0.62.7209 - Electronic Arts) Packages: ========= Dodatek Aparat multimediów dla aplikacji Zdjęcia -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-05-11] (Microsoft Corporation) Dodatek Zdjęcia -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2017.39121.36610.0_x64__8wekyb3d8bbwe [2020-05-27] (Microsoft Corporation) HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_122.1.778.0_x64__v10z8vjag6ke6 [2020-12-19] (HP Inc.) Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-09-16] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-09-16] (Microsoft Corporation) [MS Ad] Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.10142.0_x64__8wekyb3d8bbwe [2020-11-01] (Microsoft Studios) [MS Ad] Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.97.752.0_x64__mcm4njqhnhss8 [2020-07-14] (Netflix, Inc.) NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.959.0_x64__56jybvy8sckqj [2020-11-29] (NVIDIA Corp.) OneDrive -> C:\Program Files\WindowsApps\microsoft.microsoftskydrive_19.23.11.0_x64__8wekyb3d8bbwe [2020-12-15] (Microsoft Corporation) Xbox One SmartGlass -> C:\Program Files\WindowsApps\Microsoft.XboxOneSmartGlass_2.2.1702.2004_x64__8wekyb3d8bbwe [2019-09-17] (Microsoft Corporation) ==================== Niestandardowe rejestracje CLSID (filtrowane): ============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ContextMenuHandlers1-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2015-12-31] (Igor Pavlov) [Brak podpisu cyfrowego] ContextMenuHandlers1: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\ShellEx.dll [2019-09-16] (Kaspersky Lab -> AO Kaspersky Lab) ContextMenuHandlers2: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\ShellEx.dll [2019-09-16] (Kaspersky Lab -> AO Kaspersky Lab) ContextMenuHandlers4-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2015-12-31] (Igor Pavlov) [Brak podpisu cyfrowego] ContextMenuHandlers4: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\ShellEx.dll [2019-09-16] (Kaspersky Lab -> AO Kaspersky Lab) ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_1a33d2f73651d989\igfxDTCM.dll [2018-05-07] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_9ce5917b77e01a75\nvshext.dll [2020-11-07] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers6-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2015-12-31] (Igor Pavlov) [Brak podpisu cyfrowego] ContextMenuHandlers6: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\ShellEx.dll [2019-09-16] (Kaspersky Lab -> AO Kaspersky Lab) ==================== Codecs (filtrowane) ==================== ==================== Skróty & WMI ======================== ==================== Załadowane moduły (filtrowane) ============= 2020-11-21 14:52 - 2020-11-21 14:52 - 000365056 _____ () [Brak podpisu cyfrowego] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.CxHef9fb4ae#\7da576d61c249b24153107cf69ad9462\Interop.CxHDAudioAPILib.ni.dll 2020-11-21 14:52 - 2020-11-21 14:52 - 000018944 _____ () [Brak podpisu cyfrowego] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.CxUtilSvcLib\80eef8b6d329da653ea5bc5396eb8cae\Interop.CxUtilSvcLib.ni.dll 2020-11-21 14:51 - 2016-07-14 09:58 - 001155072 _____ (Conexant Systems, Inc.) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files\Conexant\SAII\CxHDAudioAPI.dll 2020-11-21 14:49 - 2020-05-30 20:04 - 001638912 _____ (Robert Simpson, et al.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Lenovo\VantageService\3.3.115.0\x64\SQLite.Interop.dll 2020-11-23 13:39 - 2020-05-30 19:58 - 001280000 _____ (Robert Simpson, et al.) [Brak podpisu cyfrowego] C:\ProgramData\Lenovo\iMController\Plugins\GenericMessagingPlugin\x86\SQLite.Interop.dll 2020-11-21 14:53 - 2020-07-09 02:36 - 000944840 _____ (SQLite Development Team) [Brak podpisu cyfrowego] C:\ProgramData\Lenovo\iMController\Plugins\LenovoWiFiSecurityPlugin\x86\x86\e_sqlite3.dll ==================== Alternate Data Streams (filtrowane) ======== ==================== Tryb awaryjny (filtrowane) ================== ==================== Powiązania plików (filtrowane) ================= ==================== Internet Explorer (filtrowane) ========== BHO: Kaspersky Protection -> {EC1E29BB-F56A-45D8-B023-D3EF710FA0E0} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\IEExt\ie_plugin.dll [2020-02-25] (Kaspersky Lab -> AO Kaspersky Lab) BHO-x32: Kaspersky Protection -> {EC1E29BB-F56A-45D8-B023-D3EF710FA0E0} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\IEExt\ie_plugin.dll [2020-02-25] (Kaspersky Lab -> AO Kaspersky Lab) Toolbar: HKLM - Kaspersky Protection Toolbar - {C500C267-63BF-451F-8797-4D720C9A2ED9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\IEExt\ie_plugin.dll [2020-02-25] (Kaspersky Lab -> AO Kaspersky Lab) Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {C500C267-63BF-451F-8797-4D720C9A2ED9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\IEExt\ie_plugin.dll [2020-02-25] (Kaspersky Lab -> AO Kaspersky Lab) Toolbar: HKU\S-1-5-21-2915685255-4076878800-3373238685-1001 -> Kaspersky Protection Toolbar - {C500C267-63BF-451F-8797-4D720C9A2ED9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\IEExt\ie_plugin.dll [2020-02-25] (Kaspersky Lab -> AO Kaspersky Lab) ==================== Hosts - zawartość: ========================= (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2016-07-16 12:47 - 2016-07-16 12:45 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts ==================== Inne obszary =========================== (Obecnie brak automatycznej naprawy dla tej sekcji.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;c:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;c:\Program Files\Intel\Intel(R) Management Engine Components\DAL;c:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;c:\Program Files\Intel\Intel(R) Management Engine Components\IPT HKU\S-1-5-21-2915685255-4076878800-3373238685-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Theme1\LenovoWallPaper.jpg DNS Servers: 192.168.1.254 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == ==================== Reguły Zapory systemu Windows (filtrowane) ================ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [TCP Query User{A9CA5D96-E8D5-4808-BC88-5D6EBFBFF702}H:\program files h\slimjet\slimjet.exe] => (Allow) H:\program files h\slimjet\slimjet.exe (FlashPeak Inc -> FlashPeak Inc.) FirewallRules: [UDP Query User{11EA76FE-AE78-4769-BCD2-D426C5CC8D31}H:\program files h\slimjet\slimjet.exe] => (Allow) H:\program files h\slimjet\slimjet.exe (FlashPeak Inc -> FlashPeak Inc.) FirewallRules: [{B30C2297-4E16-4661-8479-77E86552D4BC}] => (Allow) C:\Program Files\HP\HP DeskJet 4530 series\Bin\DeviceSetup.exe (Hewlett Packard -> HP Inc.) FirewallRules: [{13F696EF-56E3-4CDB-920A-3CBCCC1B061B}] => (Allow) LPort=5357 FirewallRules: [{AB86D2AD-B755-4CDB-AB03-445715FE60A4}] => (Allow) C:\Program Files\HP\HP DeskJet 4530 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> HP Inc.) FirewallRules: [{EDB76B7E-0704-4DD1-BEBC-8952ED3DC672}] => (Allow) H:\Program Files (x86)\Origin Games\FIFA 20 DEMO\FIFASetup\fifaconfig.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{3A34CE0C-0D3F-4D73-B460-3235810E3B45}] => (Allow) H:\Program Files (x86)\Origin Games\FIFA 20 DEMO\FIFASetup\fifaconfig.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [TCP Query User{FD93323A-5A0B-4724-AF3C-CD80031F5CA4}H:\program files (x86)\origin games\fifa 20 demo\fifa20_demo.exe] => (Block) H:\program files (x86)\origin games\fifa 20 demo\fifa20_demo.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [UDP Query User{934C227B-1D73-47BE-9031-A42DD36D95B2}H:\program files (x86)\origin games\fifa 20 demo\fifa20_demo.exe] => (Block) H:\program files (x86)\origin games\fifa 20 demo\fifa20_demo.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [TCP Query User{18CA6FD5-BEBB-4577-B8D0-3914A7AAA989}H:\program files h\slimjet\slimjet.exe] => (Block) H:\program files h\slimjet\slimjet.exe (FlashPeak Inc -> FlashPeak Inc.) FirewallRules: [UDP Query User{5C9C7A43-7121-45DB-97BF-78E70F4BB386}H:\program files h\slimjet\slimjet.exe] => (Block) H:\program files h\slimjet\slimjet.exe (FlashPeak Inc -> FlashPeak Inc.) FirewallRules: [{D3BA9ABC-7D79-478F-8741-D48AC8E30B9A}] => (Allow) G:\Z Internetu\ultdata-android.exe (Tenorshare Co.,Ltd. -> Tenorshare Co.Ltd) FirewallRules: [{BDEF9683-AE6F-47DC-AD8E-2B98F0EE6573}] => (Allow) G:\Z Internetu\ultdata-android.exe (Tenorshare Co.,Ltd. -> Tenorshare Co.Ltd) FirewallRules: [{CE3B56DD-8E33-4CAE-A8CF-4C91529F1AE7}] => (Allow) H:\Program Files H\STEAM\Steam.exe (Valve -> Valve Corporation) FirewallRules: [{93BA02DD-7F5D-4985-993F-EF26C4EC316F}] => (Allow) H:\Program Files H\STEAM\Steam.exe (Valve -> Valve Corporation) FirewallRules: [{5BC6D1B9-280C-4BE2-81E3-B4B630AA3380}] => (Allow) H:\Program Files H\STEAM\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [{A246306B-06CA-45D1-928E-DB00CCE80A6E}] => (Allow) H:\Program Files H\STEAM\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [{7B199F9A-52E3-4988-8AFB-E742CDD516AE}] => (Allow) H:\Program Files H\STEAM\steamapps\common\Sniper Ghost Warrior 3\win_x64\SGW3.exe (CI Games S.A.) [Brak podpisu cyfrowego] FirewallRules: [{D6193886-5004-48A2-8C72-15DC93DB4C5E}] => (Allow) H:\Program Files H\STEAM\steamapps\common\Sniper Ghost Warrior 3\win_x64\SGW3.exe (CI Games S.A.) [Brak podpisu cyfrowego] FirewallRules: [{913257DC-49D2-4864-B86C-FEF2395A904D}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe (Lenovo -> ) FirewallRules: [{AAB9202D-FD73-4A17-95E6-285F24728D3A}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe (Lenovo -> ) ==================== Punkty Przywracania systemu ========================= 10-12-2020 11:28:36 Windows Update 16-12-2020 14:40:00 Windows Update 16-12-2020 14:41:06 Windows Update ==================== Wadliwe urządzenia w Menedżerze urządzeń ============ ==================== Błędy w Dzienniku zdarzeń: ======================== Dziennik Aplikacja: ================== Error: (12/28/2020 02:38:33 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (7060,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (12/28/2020 02:31:37 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (7096,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (12/20/2020 06:31:44 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (13836,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (12/20/2020 06:15:40 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Program wmplayer.exe w wersji 12.0.18362.449 przestał współpracować z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemów w oknie Zabezpieczenia i konserwacja w Panelu sterowania. Identyfikator procesu: 2d84 Godzina rozpoczęcia: 01d6d6f34187b5b1 Godzina zakończenia: 4294967295 Ścieżka aplikacji: C:\Program Files (x86)\Windows Media Player\wmplayer.exe Identyfikator raportu: 100f7243-8bac-4274-8a8d-176c017dc270 Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji powiązanej z pakietem powodującym błąd: Typ zawieszenia: Top level window is idle Error: (12/20/2020 05:59:16 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (532,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (12/20/2020 05:51:07 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (11184,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (12/20/2020 05:32:47 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (14808,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (12/20/2020 05:16:58 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (12452,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Dziennik System: ============= Error: (12/16/2020 09:28:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Origin Web Helper Service z powodu następującego błędu: Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie. Error: (12/16/2020 09:28:55 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (45000 ms) podczas oczekiwania na połączenie się z usługą Origin Web Helper Service. Error: (12/16/2020 09:28:18 PM) (Source: Service Control Manager) (EventID: 7016) (User: ) Description: Usługa SAService zaraportowała nieprawidłowy stan bieżący 14. Error: (12/16/2020 09:28:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi SecDrv z powodu następującego błędu: Nastąpiło zablokowanie ładowania sterownika Error: (12/16/2020 09:28:07 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\WINDOWS\SysWow64\drivers\SECDRV.SYS Error: (12/15/2020 04:18:47 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-S6E15FKF) Description: Serwer {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} nie zarejestrował się w modelu DCOM w wymaganym czasie. Error: (12/10/2020 03:12:15 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-S6E15FKF) Description: Serwer {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} nie zarejestrował się w modelu DCOM w wymaganym czasie. Error: (12/10/2020 03:12:11 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-S6E15FKF) Description: Serwer {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} nie zarejestrował się w modelu DCOM w wymaganym czasie. CodeIntegrity: =================================== Date: 2020-12-28 14:18:23.283 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\antimalware_provider.dll that did not meet the Windows signing level requirements. Date: 2020-12-28 14:18:23.277 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\antimalware_provider.dll that did not meet the Windows signing level requirements. Date: 2020-12-28 14:18:23.268 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\antimalware_provider.dll that did not meet the Windows signing level requirements. Date: 2020-12-28 14:18:23.262 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\antimalware_provider.dll that did not meet the Windows signing level requirements. Date: 2020-12-28 14:18:23.168 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\antimalware_provider.dll that did not meet the Windows signing level requirements. Date: 2020-12-20 17:29:21.939 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\antimalware_provider.dll that did not meet the Windows signing level requirements. Date: 2020-12-20 17:29:21.933 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\antimalware_provider.dll that did not meet the Windows signing level requirements. Date: 2020-12-20 17:29:21.846 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\antimalware_provider.dll that did not meet the Windows signing level requirements. ==================== Statystyki pamięci =========================== BIOS: LENOVO 3JCN31WW 07/17/2018 Płyta główna: LENOVO Torronto 5C1 Procesor: Intel(R) Core(TM) i5-7200U CPU @ 2.50GHz Procent pamięci w użyciu: 45% Całkowita pamięć fizyczna: 8092.22 MB Dostępna pamięć fizyczna: 4441.92 MB Całkowita pamięć wirtualna: 9372.22 MB Dostępna pamięć wirtualna: 5092 MB ==================== Dyski ================================ Drive c: (Windows) (Fixed) (Total:160.67 GB) (Free:90.65 GB) NTFS Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:24.93 GB) NTFS Drive g: (DANE) (Fixed) (Total:403.44 GB) (Free:324.02 GB) NTFS Drive h: (Programy) (Fixed) (Total:326.4 GB) (Free:236.95 GB) NTFS \\?\Volume{aaf9caea-bce5-4d02-9ad4-bfcb2805bc7b}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.47 GB) NTFS \\?\Volume{d92fae42-db14-4866-8f31-64316108a807}\ (LENOVO_PART) (Fixed) (Total:13.78 GB) (Free:1.69 GB) NTFS \\?\Volume{d6a10faa-465e-4e70-a7e0-262b41556b7e}\ (LRS_ESP) (Fixed) (Total:0.97 GB) (Free:0.44 GB) FAT32 \\?\Volume{f075a91d-0af8-4e19-a70b-6c0596dcc73a}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32 ==================== MBR & Tablica partycji ==================== ========================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: 7345E0DD) Partition: GPT. ==================== Koniec Addition.txt =======================