Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 14-11-2021 Uruchomiony przez pszen (20-11-2021 13:15:07) Uruchomiony z C:\Users\pszen\Downloads Microsoft Windows 10 Home Wersja 21H1 19043.1348 (X64) (2020-07-29 19:10:39) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= (Załączenie wejścia w fixlist spowoduje jego usunięcie.) Administrator (S-1-5-21-4099042752-900424334-1160265230-500 - Administrator - Disabled) defaultuser0 (S-1-5-21-4099042752-900424334-1160265230-1000 - Limited - Disabled) => C:\Users\defaultuser0 Gość (S-1-5-21-4099042752-900424334-1160265230-501 - Limited - Disabled) Konto domyślne (S-1-5-21-4099042752-900424334-1160265230-503 - Limited - Disabled) Korporat (S-1-5-21-4099042752-900424334-1160265230-1005 - Administrator - Enabled) => C:\Users\Korporat pszen (S-1-5-21-4099042752-900424334-1160265230-1001 - Administrator - Enabled) => C:\Users\pszen WDAGUtilityAccount (S-1-5-21-4099042752-900424334-1160265230-504 - Limited - Disabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Pakiet Bezpieczeństwa UPC by F-Secure (Enabled - Up to date) {EFA7F7EC-9723-5757-549F-DDC923618754} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Pakiet Bezpieczeństwa UPC by F-Secure (Enabled - Up to date) {31A9D001-F96D-024E-EACB-7693DE78B727} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) µTorrent (HKU\S-1-5-21-4099042752-900424334-1160265230-1001\...\uTorrent) (Version: 3.5.5.45852 - BitTorrent Inc.) adobe (HKLM\...\{F9972BCA-8EDC-42D8-B157-2B093EB26838}) (Version: 1.0.0000 - Adobe Systems Incorporated) Hidden Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 21.007.20099 - Adobe Systems Incorporated) Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.9.0.504 - Adobe Systems Incorporated) Adobe Flash Player 28 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 28.0.0.137 - Adobe Systems Incorporated) Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.156 - Adobe Systems Incorporated) Adobe Genuine Service (HKLM-x32\...\AdobeGenuineService) (Version: - Adobe) Adobe Illustrator CC 2015 (HKLM-x32\...\{5680D629-B263-49CC-821E-3CEBD4507B51}) (Version: 19.0 - Adobe Systems Incorporated) Adobe Photoshop CC 2018 (HKLM-x32\...\PHSP_19_0) (Version: 19.0 - Adobe Systems Incorporated) Advanced Office Password Recovery (HKLM-x32\...\{1DE113BC-411B-42F8-999C-81CBA113E258}) (Version: 6.22.1085.3243 - Elcomsoft Co. Ltd.) AICC2015 64-bit (HKLM\...\{77480EAF-C05F-4314-A195-CDDF7745B01D}) (Version: 1.0.0000 - Adobe Systems Incorporated) Hidden ANT Drivers Installer x64 (HKLM\...\{CBEE7F70-D77E-46DB-BB02-B64147DD6453}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ASUS Device Activation (HKLM-x32\...\{9C4B0706-9F9A-47BF-B417-0A111FC52B04}) (Version: 1.0.4.0 - ASUSTeK COMPUTER INC.) ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.6.8 - ASUSTeK COMPUTER INC.) ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 4.7.17 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.19.0004 - ASUS) ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.1.7 - ASUS) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0043 - ASUS) AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.2.9 - ICEpower a/s) Avaya one-X Agent - 2.5.12 (HKLM-x32\...\{58D3DB71-90EA-43DE-A89F-5FF4A3D88713}) (Version: 2.5.60208.0 - Avaya) Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 96.1.32.106 - Autorzy Brave) Car MP3 Organizer 1.0 BETA (HKLM-x32\...\Car MP3 Organizer 1.0 BETA) (Version: 1.0 BETA - Tobias Croby) Cisco Systems VPN Client 5.0.07.0290 (HKLM\...\{467D5E81-8349-4892-9E81-C3674ED8E451}) (Version: 5.0.7 - Cisco Systems, Inc.) Cisco Webex Meetings (HKU\S-1-5-21-4099042752-900424334-1160265230-1005\...\ActiveTouchMeetingClient) (Version: 41.9.1 - Cisco Webex LLC) DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.6.0.0283 - Disc Soft Ltd) Device Setup (HKLM-x32\...\{8D6B05E0-F457-408C-9D13-549334D8FAE1}) (Version: 2.2.5 - ASUSTek COMPUTER INC.) Elevated Installer (HKLM-x32\...\{0F6C59A2-5F1D-4D7C-BC90-A0A1A75F4EE9}) (Version: 7.7.1.0 - Garmin Ltd or its subsidiaries) Hidden Free Editor (HKLM\...\{1BF14E04-85DE-480C-9A04-EB36744C66B4}_is1) (Version: 2.0.3 - Blue Labs, LLC) Free GIF Maker (HKLM-x32\...\Free GIF Maker_is1) (Version: 1.3.48.831 - Digital Wave Ltd) F-Secure Ultralight 1.0.5438.0 (release) (cc0c4f981bd2f23d1e5e325af11ed0a0ecf2a348) (HKLM-x32\...\{C75644E8-5FB5-4B8F-8FD2-08CC5D7ECD87}) (Version: 1.0.5438.0 - F-Secure Corporation) Hidden Garmin Express (HKLM-x32\...\{50DF005C-1D2C-467A-A39E-10ADEFA83A96}) (Version: 7.7.1.0 - Garmin Ltd or its subsidiaries) Hidden Garmin Express (HKLM-x32\...\{9e0ef45d-b10c-42da-9aab-16200df39d95}) (Version: 7.7.1.0 - Garmin Ltd or its subsidiaries) GG (HKU\S-1-5-21-4099042752-900424334-1160265230-1001\...\GG) (Version: 12 - England Sp. z o.o.) Global VPN Client (HKLM\...\{E828FDAA-B4E0-46B6-B647-7C03CCF48C83}) (Version: 4.9.4 - Dell SonicWALL) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 96.0.4664.45 - Google LLC) Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.101.0 - Google LLC) Hidden GTA2 (HKLM-x32\...\{2987EE84-C4EE-4FF5-8160-32DE00D6ABC6}) (Version: 1.00.001 - ) HiSuite (HKLM-x32\...\Hi Suite) (Version: 11.0.0.320 - Huawei Technologies Co., Ltd.) iFree Skype Recorder 8.0.15 (HKLM-x32\...\iFree Skype Recorder) (Version: 8.0.15 - iFree Skype Recorder) Intel(R) Chipset Device Software (HKLM-x32\...\{61a0f1f5-c77e-4992-ba85-029f93cd8d18}) (Version: 10.1.1.27 - Intel(R) Corporation) Hidden Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.2.10900.330 - Intel Corporation) Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.5.0.1015 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 26.20.100.7325 - Intel Corporation) Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.63.1620.3 - Intel Corporation) Intel® Security Assist (HKLM-x32\...\{8B08DDA1-FDE7-4897-8EB6-E0B048A6D88B}) (Version: 1.0.1.618 - Intel Corporation) JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 95.0.1020.53 - Microsoft Corporation) Microsoft Office Professional Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-4099042752-900424334-1160265230-1005\...\OneDriveSetup.exe) (Version: 21.220.1024.0005 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{29B15818-E79F-4AB0-8938-9410C807AD76}) (Version: 2.84.0.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x64) - 14.15.26706 (HKLM-x32\...\{95ac1cfa-f4fb-4d1b-8912-7f9d5fbb140d}) (Version: 14.15.26706.0 - Microsoft Corporation) Mozilla Firefox (x64 pl) (HKLM\...\Mozilla Firefox 94.0.1 (x64 pl)) (Version: 94.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 56.0.2 - Mozilla) Nanotec Qt version 1.0 (HKLM-x32\...\{C412C219-2909-4A3C-8FE2-117FA9D59FD0}_is1) (Version: 1.0 - Nano) NapiProjekt (2.2.0.2399) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) Narzędzia sprawdzające pakietu Microsoft Office 2016 — polski (HKLM\...\{90160000-001F-0415-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden NVIDIA GeForce Experience 2.11.3.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.3.5 - NVIDIA Corporation) NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) NVIDIA Sterownik graficzny 451.67 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 451.67 - NVIDIA Corporation) Obsługa iPoda (HKLM\...\{EA741B66-4780-4B90-B796-897033B75694}) (Version: 120.7.3.55 - Apple Inc.) Obsługa programów Apple (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Pakiet Bezpieczeństwa UPC (HKLM-x32\...\{E42646D0-3BEE-4F3A-8A05-EC18975AA971}) (Version: 18.1 - F-Secure Corporation) Pakiet sterowników systemu Windows - ASUS (AsusSGDrv) Mouse (08/19/2016 8.0.0.26) (HKLM\...\912D9B7DE050AA48F945407778CC01897B5E23BB) (Version: 08/19/2016 8.0.0.26 - ASUS) Pakiet sterowników systemu Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.) Pakiet sterowników systemu Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software) PhoneRescue (HKLM-x32\...\PhoneRescue) (Version: 4.0.0.0 - iMobie Inc.) PRO Speed Test 2.0.5.5 (HKLM-x32\...\{5a5d921c-2517-4007-9804-050d4cceb3f7}}_is1) (Version: - V-SPEED Sp. z o.o.) Qualcomm Atheros 11ac Wireless LAN&Bluetooth Installer (HKLM-x32\...\{3241744A-BA36-41F0-B4AA-EF3946D00632}) (Version: 11.0.0.10373 - Qualcomm Atheros) QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.31233 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.9.422.2016 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7824 - Realtek Semiconductor Corp.) Sharepod 4.2.0.0 (HKLM-x32\...\{085BCFB8-F6FB-4600-AFAB-1F6DBC7F5F99}_is1) (Version: - Macroplant LLC) Shrew Soft VPN Client (HKLM\...\Shrew Soft VPN Client) (Version: - ) Sprawdzanie kondycji komputera z systemem Windows (HKLM\...\{497ED226-5E88-4EC5-9340-373B1C56906F}) (Version: 3.2.2110.14001 - Microsoft Corporation) Środowisko uruchomieniowe Microsoft Edge WebView2 (HKLM-x32\...\Microsoft EdgeWebView) (Version: 95.0.1020.53 - Microsoft Corporation) TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.59518 - TeamViewer) Update for Skype for Business 2016 (KB3128049) 64-Bit Edition (HKLM\...\{90160000-0011-0000-1000-0000000FF1CE}_Office16.PROPLUS_{801D5242-0189-4C99-977B-0C77DBD1F046}) (Version: - Microsoft) Update for Skype for Business 2016 (KB3128049) 64-Bit Edition (HKLM\...\{90160000-012B-0415-1000-0000000FF1CE}_Office16.PROPLUS_{801D5242-0189-4C99-977B-0C77DBD1F046}) (Version: - Microsoft) Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{16AD6161-2E47-4BF1-AA77-0946EFE93E08}) (Version: 2.61.0.0 - Microsoft Corporation) VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.11 - VideoLAN) VLC Setup Helper (HKLM-x32\...\VLC Setup Helper_is1) (Version: - Hobbyist Software) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.2.2 - ASUSTeK COMPUTER INC.) WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH) Packages: ========= !Dice -> C:\Program Files\WindowsApps\22375maxwinphone.Dice_1.1.0.0_x86__v5zy27qs5jznt [2018-08-10] (maxwinphone) Adobe Notification Client -> C:\Program Files\WindowsApps\AdobeNotificationClient_1.0.1.22_x86__enpm4xejd91yc [2019-08-25] (Adobe Systems Incorporated) ALLConverter PRO -> C:\Program Files\WindowsApps\ALLPlayerGroup.ALLConverterPRO_2.3.0.0_x86__dqcx9d8478v36 [2018-09-01] (ALLPlayer Group Ltd.) ASUS ZenLink -> C:\Program Files\WindowsApps\B9ECED6F.ZenSync_1.0.7.0_x86__qmba6cd70vzyy [2021-03-28] (ASUSTeK COMPUTER INC.) [MS Ad] Autodesk SketchBook -> C:\Program Files\WindowsApps\89006A2E.AutodeskSketchBook_5.1.0.0_x64__tf1gferkr813w [2019-11-08] (Autodesk Inc.) Converter for YouTube by Flvto.com -> C:\Program Files\WindowsApps\Hotger.com.YouTubeConverterbywww.flvto.com_2.0.58.0_x64__cg7p2qfgefa1a [2018-09-01] (Белов Кирилл Леонидович) [MS Ad] Dice Pro -> C:\Program Files\WindowsApps\13698DougHolland.DicePro_2.0.0.43_x64__s6dmsf1zrskpm [2018-08-10] (Doug Holland) Dodatek Aparat multimediów dla aplikacji Zdjęcia -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-10-15] (Microsoft Corporation) HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_132.3.262.0_x64__v10z8vjag6ke6 [2021-11-17] (HP Inc.) iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa [2021-11-01] (Apple Inc.) [Startup Task] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-19] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-19] (Microsoft Corporation) [MS Ad] Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.10.10270.0_x64__8wekyb3d8bbwe [2021-10-29] (Microsoft Studios) [MS Ad] Mp3 Cutter -> C:\Program Files\WindowsApps\KastorSoft.Mp3Cutter_1.0.0.16_x64__8hk6z7t2es12c [2018-09-01] (KastorSoft) MyASUS-Service Center -> C:\Program Files\WindowsApps\B9ECED6F.MyASUS_3.3.11.0_x86__qmba6cd70vzyy [2018-04-28] (ASUSTeK COMPUTER INC.) [Startup Task] Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.97.752.0_x64__mcm4njqhnhss8 [2020-07-14] (Netflix, Inc.) ==================== Niestandardowe rejestracje CLSID (filtrowane): ============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-4099042752-900424334-1160265230-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-DD58E49DEBA3} -> [Creative Cloud Files] => C:\Users\pszen\Creative Cloud Files [2019-08-25 08:25] CustomCLSID: HKU\S-1-5-21-4099042752-900424334-1160265230-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems) ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> ) ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> ) ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> ) ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Brak pliku ShellIconOverlayIdentifiers: [F-Secure DataGuard Icon Overlay] -> {CA789262-D278-40F7-AC12-19C0395F9DD9} => C:\Program Files (x86)\Pakiet Bezpieczeństwa UPC\FsShellExtension64.dll [2021-09-28] (F-Secure Corporation -> F-Secure Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Brak pliku ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> ) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Brak pliku ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_9f310939ec1eebf9\igfxDTCM.dll [2019-10-30] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2020-07-05] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> ) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal) ==================== Codecs (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Drivers32: [vidc.i420] => C:\Windows\system32\lvcod64.dll [175392 2012-10-26] (Logitech, Inc. -> Logitech Inc.) HKLM\...\Drivers32: [vidc.i420] => C:\Windows\SysWOW64\lvcodec2.dll [305000 2012-10-26] (Logitech, Inc. -> Logitech Inc.) ==================== Skróty & WMI ======================== ==================== Załadowane moduły (filtrowane) ============= 2020-11-27 03:38 - 2020-11-27 03:38 - 000961536 _____ () [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files (x86)\Garmin\Express\CefSharp.BrowserSubprocess.Core.dll 2020-11-27 03:38 - 2020-11-27 03:38 - 001446400 _____ () [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files (x86)\Garmin\Express\CefSharp.Core.dll 2021-07-02 08:01 - 2021-07-02 08:01 - 000073216 _____ () [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files (x86)\Garmin\Express\FixBootSector.dll 2017-05-08 09:35 - 2017-05-08 09:35 - 000325632 _____ () [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files (x86)\Garmin\Express\GpsImgWrapper.dll 2016-10-12 22:17 - 2016-10-12 22:17 - 000125440 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll 2016-10-12 22:17 - 2016-10-12 22:17 - 000033280 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll 2016-10-12 22:17 - 2016-10-12 22:17 - 000029184 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\ASUS\Splendid\VideoEnhance.dll 2020-11-18 09:14 - 2020-11-18 09:14 - 117340672 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Garmin\Express\libcef.dll 2020-11-18 07:40 - 2020-11-18 07:40 - 000323072 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Garmin\Express\libegl.dll 2020-11-18 07:40 - 2020-11-18 07:40 - 005441536 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Garmin\Express\libglesv2.dll 2013-07-01 00:17 - 2013-07-01 00:17 - 000017920 _____ () [Brak podpisu cyfrowego] C:\Program Files\ShrewSoft\VPN Client\libdtp.dll 2013-07-01 00:15 - 2013-07-01 00:15 - 000022016 _____ () [Brak podpisu cyfrowego] C:\Program Files\ShrewSoft\VPN Client\libidb.dll 2013-07-01 00:16 - 2013-07-01 00:16 - 000628224 _____ () [Brak podpisu cyfrowego] C:\Program Files\ShrewSoft\VPN Client\libike.dll 2013-07-01 00:16 - 2013-07-01 00:16 - 000116736 _____ () [Brak podpisu cyfrowego] C:\Program Files\ShrewSoft\VPN Client\libip.dll 2013-07-01 00:15 - 2013-07-01 00:15 - 000018432 _____ () [Brak podpisu cyfrowego] C:\Program Files\ShrewSoft\VPN Client\libith.dll 2013-07-01 00:16 - 2013-07-01 00:16 - 000013312 _____ () [Brak podpisu cyfrowego] C:\Program Files\ShrewSoft\VPN Client\liblog.dll 2013-07-01 00:17 - 2013-07-01 00:17 - 000029184 _____ () [Brak podpisu cyfrowego] C:\Program Files\ShrewSoft\VPN Client\libpfk.dll 2013-07-01 00:17 - 2013-07-01 00:17 - 000035840 _____ () [Brak podpisu cyfrowego] C:\Program Files\ShrewSoft\VPN Client\libvflt.dll 2013-07-01 00:16 - 2013-07-01 00:16 - 000039936 _____ () [Brak podpisu cyfrowego] C:\Program Files\ShrewSoft\VPN Client\libvnet.dll 2021-07-02 08:01 - 2021-07-02 08:01 - 001976832 _____ (Apache Software Foundation) [Brak podpisu cyfrowego] C:\Program Files (x86)\Garmin\Express\XercesLib.dll 2016-10-12 22:17 - 2016-10-12 22:17 - 001676288 _____ (ASUS TeK Computer Inc.) [Brak podpisu cyfrowego] C:\Program Files (x86)\ASUS\Splendid\ApplyLUT.dll 2016-10-12 22:17 - 2016-10-12 22:17 - 000178176 _____ (ASUS TeK Computer Inc.) [Brak podpisu cyfrowego] C:\Program Files (x86)\ASUS\Splendid\GenLUT.dll 2016-10-12 22:17 - 2016-10-12 22:17 - 000165888 _____ (ASUSTeK Computer Inc.) [Brak podpisu cyfrowego] C:\Program Files (x86)\ASUS\Splendid\ColorU.dll 2021-07-02 08:07 - 2021-07-02 08:07 - 000234496 _____ (Dynastream Innovations Inc.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Garmin\Express\ANT_WrappedLib.dll 2021-07-02 08:01 - 2021-07-02 08:01 - 002711552 _____ (Garmin International) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files (x86)\Garmin\Express\legacyio.dll 2017-05-08 09:35 - 2017-05-08 09:35 - 000343552 _____ (Garmin International, Inc.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Garmin\Express\IMG_GPSMAP.dll 2021-07-02 08:01 - 2021-07-02 08:01 - 000425472 _____ (Garmin) [Brak podpisu cyfrowego] C:\Program Files (x86)\Garmin\Express\XMLdll.dll 2017-03-30 15:26 - 2016-05-02 06:39 - 001298824 _____ (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [Brak podpisu cyfrowego] C:\Program Files\NVIDIA Corporation\NvStreamSrv\rxinput.dll 2021-07-02 08:04 - 2021-07-02 08:04 - 000090112 _____ (Silicon Laboratories, Inc.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Garmin\Express\DSI_SiUSBXp_3_1.DLL 2020-11-18 07:39 - 2020-11-18 07:39 - 000843264 _____ (The Chromium Authors) [Brak podpisu cyfrowego] C:\Program Files (x86)\Garmin\Express\chrome_elf.dll ==================== Alternate Data Streams (filtrowane) ======== ==================== Tryb awaryjny (filtrowane) ================== ==================== Powiązania plików (filtrowane) ================= ==================== Internet Explorer (filtrowane) ========== HKU\S-1-5-21-4099042752-900424334-1160265230-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus17win10.msn.com/?pc=ASTE SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=PRASU1&src=IE11TR&pc=ASTE SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=PRASU1&src=IE11TR&pc=ASTE SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=PRASU1&src=IE11TR&pc=ASTE SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=PRASU1&src=IE11TR&pc=ASTE SearchScopes: HKU\S-1-5-21-4099042752-900424334-1160265230-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-4099042752-900424334-1160265230-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Browsing Protection by F-Secure -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\Pakiet Bezpieczeństwa UPC\apps\Ultralight\http\1637061456\browser\fs_ie_https\fs_ie_https64.dll [2021-11-16] (F-Secure Corporation -> F-Secure Corporation) BHO-x32: Browsing Protection by F-Secure -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\Pakiet Bezpieczeństwa UPC\apps\Ultralight\http\1637061456\browser\fs_ie_https\fs_ie_https.dll [2021-11-16] (F-Secure Corporation -> F-Secure Corporation) BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2016-11-16] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Brak nazwy -> {E6DF0B46-7D6F-407A-A6A2-62D17A021A9A} -> Brak pliku Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2016-11-16] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-11-16] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2016-11-16] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-11-16] (Microsoft Corporation -> Microsoft Corporation) ==================== Hosts - zawartość: ========================= (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2016-07-16 12:47 - 2019-08-25 09:06 - 000001047 _____ C:\WINDOWS\system32\drivers\etc\hosts ==================== Inne obszary =========================== (Obecnie brak automatycznej naprawy dla tej sekcji.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\QuickTime\QTSystem\ HKU\S-1-5-21-4099042752-900424334-1160265230-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg HKU\S-1-5-21-4099042752-900424334-1160265230-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\pszen\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\{1750c9d0-526b-4fff-8a9a-728a85016506}.jpg HKU\S-1-5-21-4099042752-900424334-1160265230-1005\Control Panel\Desktop\\Wallpaper -> C:\Users\Korporat\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\{1750c9d0-526b-4fff-8a9a-728a85016506}.jpg DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Zapora systemu Windows [funkcja włączona] Network Binding: ============= Wi-Fi: DNE LightWeight Filter -> dni_dne (enabled) Wi-Fi: Shrew Soft Lightweight Filter -> vflt (enabled) Ethernet: DNE LightWeight Filter -> dni_dne (enabled) Ethernet: Shrew Soft Lightweight Filter -> vflt (enabled) Ethernet 2: DNE LightWeight Filter -> dni_dne (enabled) Ethernet 2: Shrew Soft Lightweight Filter -> vflt (enabled) ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Załączenie wejścia w fixlist spowoduje jego usunięcie.) MSCONFIG\Services: AdobeARMservice => 2 MSCONFIG\Services: AdobeUpdateService => 2 MSCONFIG\Services: AGSService => 2 MSCONFIG\Services: ATKGFNEXSrv => 2 MSCONFIG\Services: gupdate => 2 MSCONFIG\Services: gupdatem => 3 MSCONFIG\Services: SkypeUpdate => 2 HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0" HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud" HKU\S-1-5-21-4099042752-900424334-1160265230-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-4099042752-900424334-1160265230-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount" HKU\S-1-5-21-4099042752-900424334-1160265230-1001\...\StartupApproved\Run: => "GG" HKU\S-1-5-21-4099042752-900424334-1160265230-1001\...\StartupApproved\Run: => "Skype" HKU\S-1-5-21-4099042752-900424334-1160265230-1001\...\StartupApproved\Run: => "OneDriveSetup" ==================== Reguły Zapory systemu Windows (filtrowane) ================ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [UDP Query User{A9F65A3D-3433-431B-84AF-E7FE0486E6FB}C:\program files\dell sonicwall\global vpn client\swgvc.exe] => (Allow) C:\program files\dell sonicwall\global vpn client\swgvc.exe (SonicWALL Inc. -> Dell SonicWALL, Inc.) FirewallRules: [TCP Query User{76EE0F05-B602-4DBE-AC1C-8CE5FD38C786}C:\program files\dell sonicwall\global vpn client\swgvc.exe] => (Allow) C:\program files\dell sonicwall\global vpn client\swgvc.exe (SonicWALL Inc. -> Dell SonicWALL, Inc.) FirewallRules: [UDP Query User{3C8493DF-2E6B-4005-AA6D-94F4793C1A5D}C:\program files (x86)\avaya\avaya one-x agent\sparkemulator.exe] => (Allow) C:\program files (x86)\avaya\avaya one-x agent\sparkemulator.exe (Avaya, Inc.) [Brak podpisu cyfrowego] FirewallRules: [TCP Query User{4A1B5ECA-7FE0-488C-B049-F84E595178AB}C:\program files (x86)\avaya\avaya one-x agent\sparkemulator.exe] => (Allow) C:\program files (x86)\avaya\avaya one-x agent\sparkemulator.exe (Avaya, Inc.) [Brak podpisu cyfrowego] FirewallRules: [{8750B611-027A-4F45-BA70-722EF23D8C42}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe (Apple Inc. -> Apple Inc.) FirewallRules: [UDP Query User{92E3AC22-11FB-4AD9-8040-7807BD58486F}C:\program files (x86)\nanotec-qt\nanotec-qt.exe] => (Allow) C:\program files (x86)\nanotec-qt\nanotec-qt.exe () [Brak podpisu cyfrowego] FirewallRules: [TCP Query User{13285D06-E710-4449-8DBA-8FF2A34B17A1}C:\program files (x86)\nanotec-qt\nanotec-qt.exe] => (Allow) C:\program files (x86)\nanotec-qt\nanotec-qt.exe () [Brak podpisu cyfrowego] FirewallRules: [UDP Query User{C0FEE5DE-2193-4073-8B1B-EE1DEC0DB1D4}C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe] => (Allow) C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) FirewallRules: [TCP Query User{5B73BE5B-9923-4DC3-8E7F-0063DAD9E306}C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe] => (Allow) C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) FirewallRules: [{0BEA1294-AFCF-4314-95B4-F419693A7C1D}] => (Allow) C:\Program Files (x86)\Hobbyist Software\VLC Setup Helper\mDNSResponder.exe (Apple Inc.) [Brak podpisu cyfrowego] FirewallRules: [{82E9A530-0563-48B3-AC97-E7CCCC60DB58}] => (Allow) C:\Program Files (x86)\Hobbyist Software\VLC Setup Helper\VLC Setup Helper.exe (Hobbyist Software Limited -> Hobbyist Software) [Brak podpisu cyfrowego] FirewallRules: [{B2A1CD4B-1670-4E8C-B92D-95F4C32585EF}] => (Block) C:\program files (x86)\pc remote receiver\pcremotereceiver.exe => Brak pliku FirewallRules: [{A5136086-03CB-4E0B-B16B-ED760C0AA9BC}] => (Block) C:\program files (x86)\pc remote receiver\pcremotereceiver.exe => Brak pliku FirewallRules: [{94817329-DD22-4EF3-B8C0-983B5136784C}] => (Allow) C:\Program Files (x86)\PC Remote Receiver\MonectMediaCenter.exe => Brak pliku FirewallRules: [{D970FC62-5AE9-474B-8E3A-2B3AB6519387}] => (Allow) C:\Program Files (x86)\PC Remote Receiver\PCRemoteReceiver.exe => Brak pliku FirewallRules: [UDP Query User{1C195B53-A113-468E-BD0C-74928F4174A4}C:\program files (x86)\pc remote receiver\pcremotereceiver.exe] => (Allow) C:\program files (x86)\pc remote receiver\pcremotereceiver.exe => Brak pliku FirewallRules: [TCP Query User{EECF7CEE-A0F0-4D2D-9F2C-725A58F2D1D5}C:\program files (x86)\pc remote receiver\pcremotereceiver.exe] => (Allow) C:\program files (x86)\pc remote receiver\pcremotereceiver.exe => Brak pliku FirewallRules: [{5C6D914B-4A90-40E1-9838-57452787AA4F}] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [{69785CF6-E403-4491-A18D-B73094CAE980}] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [UDP Query User{CAF134EA-CAED-43F3-BECE-C851E81E33AA}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [TCP Query User{DCF39287-8687-4881-A076-CAB5C7F68126}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [UDP Query User{48551652-95DA-4EE1-BE03-B235A86022D4}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [TCP Query User{6B1518A5-BF17-4560-8551-B7B4DF20F512}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{598E4BB9-E6E7-4464-89B2-609008904F38}] => (Allow) C:\Program Files (x86)\NapiProjekt\napisy.exe () [Brak podpisu cyfrowego] FirewallRules: [{C1E4D481-3EB2-4DE4-82C9-C77027926FBC}] => (Allow) C:\Program Files (x86)\NapiProjekt\napisy.exe () [Brak podpisu cyfrowego] FirewallRules: [{213B99DB-5F45-4DAB-AEFB-0C6066E5FCEC}] => (Allow) C:\Users\pszen\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [{309003CF-903E-45A3-BA30-A854B6E0B19E}] => (Allow) C:\Users\pszen\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [{0E2EE5A1-71F4-47AA-904B-CAE10D510B60}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer -> TeamViewer GmbH) FirewallRules: [{EA6D6C7C-A29A-4324-BF2E-1F98C6FD41EF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer -> TeamViewer GmbH) FirewallRules: [{29C8D9D1-A0FD-43E0-A83A-7C9D36E84DBB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH) FirewallRules: [{23D9C523-3687-4263-8562-1D7E55577FEB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH) FirewallRules: [{250ADDB2-9CFE-44A4-A462-93878B63A5FE}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{FC9674E5-E37C-4841-8D64-097320152E5E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{78F43FC5-B6B0-4608-B2FD-FE106238EBC3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe => Brak pliku FirewallRules: [{3B81CEE4-2B5F-4810-966C-9920713F3CF2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe => Brak pliku FirewallRules: [{6FFDB3FF-0001-4E4B-B253-CD252F8BA592}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{0C8B7AA4-0580-4652-867A-ED036CA182F8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{C1FDF6A0-BCF5-47AC-BF38-3BA3F8496AF7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{0969435B-EB7E-44D7-A45B-93950C9DB8E2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{F28FB29D-1C8A-4B83-A2F2-89CC4133F5D8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{E1F70AF6-BA83-4AC4-9D64-9F4A4F2677D3}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe => Brak pliku FirewallRules: [{A898EAB6-BF1E-48F0-AF30-5ACB8D77313C}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe => Brak pliku FirewallRules: [{64A90DBF-46FF-4605-A600-8375551ED66F}] => (Allow) C:\Program Files (x86)\BlueStacks\HD-Player.exe => Brak pliku FirewallRules: [{F61DAADA-AFC0-4941-9C7C-14ECF6A63764}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12113.17.53090.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{A4AB5B08-C477-4B68-BDA3-475B4F4D6FF7}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12113.17.53090.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{EE421577-A9AD-4D3F-BECD-76C2B1480980}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12113.17.53090.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{880D4AFC-73E4-4C9C-BF75-05249A3B8D0C}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12113.17.53090.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{C76F9FCC-5C85-424A-BC8C-339E3DB65696}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12113.17.53090.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{DE415EF5-4D1A-48C9-B768-F138DC74B0BC}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12113.17.53090.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{5DE0C03B-9220-4F0D-8988-F5BD369D0130}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12113.17.53090.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{C20AC91A-E7BE-4FD8-A2C2-D344FD131E78}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12113.17.53090.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{00DD4120-78BC-440F-BB93-248E91D286DA}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{59886114-F015-4B09-AE3D-FC1D107C2F9F}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{6B46F15F-71EB-4291-88A2-C626C423D9EC}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{BF616C95-9EF9-43BB-8881-1033B7E41079}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{1D4A7E2F-4311-4FCB-834B-85FC18AB5D9D}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{3D6D80B7-FDA7-4910-B1AA-AD5BEBE452CA}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{B5E4712F-DDE8-4002-85A3-1486A5919752}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{EEA7BD2C-0E7C-49A1-A0BE-6A499C118F13}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{B0171358-3E84-4156-8142-7203A49CC5CF}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{91EAEBEA-9629-4032-BAF4-0230B3B4CC24}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{184A72D9-E2D6-4696-9061-355EA436598D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{1BF4C231-8B3D-4135-93AE-EBE7A8EB1846}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{6BB12C61-1428-496F-BCA3-ECFD19292E9C}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\95.0.1020.53\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{10944E4D-635D-443B-A827-D2910C895382}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.) FirewallRules: [{C078184C-A8B6-47F8-A817-B870EF9120EA}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) ==================== Punkty Przywracania systemu ========================= UWAGA: Przywracanie systemu jest wyłączone (Total:118.48 GB) (Free:44.29 GB) (37%) ==================== Wadliwe urządzenia w Menedżerze urządzeń ============ Name: Shrew Soft Virtual Adapter Description: Shrew Soft Virtual Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Shrew Soft Service: vnet Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: SonicWALL Virtual NIC Description: SonicWALL Virtual NIC Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: SonicWALL Service: SWVNIC Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Błędy w Dzienniku zdarzeń: ======================== Dziennik Aplikacja: ================== Error: (11/19/2021 08:45:10 AM) (Source: VSS) (EventID: 8193) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas wywoływania procedury CoCreateInstance. hr = 0x8007045b, Trwa proces zamykania systemu. . Error: (11/19/2021 08:45:10 AM) (Source: VSS) (EventID: 13) (User: ) Description: Informacje Usługi kopiowania woluminów w tle: nie można uruchomić serwera usługi COM z identyfikatorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} i nazwą CEventSystem. [0x8007045b, Trwa proces zamykania systemu. ] Error: (11/19/2021 08:45:10 AM) (Source: VSS) (EventID: 8193) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas wywoływania procedury CoCreateInstance. hr = 0x8007045b, Trwa proces zamykania systemu. . Error: (11/19/2021 08:45:09 AM) (Source: VSS) (EventID: 13) (User: ) Description: Informacje Usługi kopiowania woluminów w tle: nie można uruchomić serwera usługi COM z identyfikatorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} i nazwą CEventSystem. [0x8007045b, Trwa proces zamykania systemu. ] Error: (11/19/2021 08:13:45 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (11/18/2021 08:58:22 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: ) Description: Optymalizator magazynów nie może zakończyć operacji ograniczenie ponowne na DATA (D:) z następującego powodu: Żądana operacja nie jest obsługiwana przez sprzęt obsługujący wolumin. (0x8900002A) Error: (11/18/2021 07:36:03 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Program YourPhone.exe w wersji 1.21092.149.0 przestał współpracować z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemów w oknie Zabezpieczenia i konserwacja w Panelu sterowania. Identyfikator procesu: 38e0 Godzina rozpoczęcia: 01d7db096463c662 Godzina zakończenia: 4294967295 Ścieżka aplikacji: C:\Program Files\WindowsApps\Microsoft.YourPhone_1.21092.149.0_x64__8wekyb3d8bbwe\YourPhone.exe Identyfikator raportu: a9150584-76fe-4392-9e48-520d3da0639c Pełna nazwa pakietu powodującego błąd: Microsoft.YourPhone_1.21092.149.0_x64__8wekyb3d8bbwe Identyfikator aplikacji powiązanej z pakietem powodującym błąd: App Typ zawieszenia: Quiesce Error: (11/18/2021 08:01:46 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Dziennik System: ============= Error: (11/20/2021 01:03:53 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 23:48:07 na ‎19.‎11.‎2021 było nieoczekiwane. Error: (11/20/2021 01:01:11 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-PKO5OE2) Description: Serwer microsoft.windowscommunicationsapps_16005.14326.20544.0_x64__8wekyb3d8bbwe!microsoft.windowslive.calendar.AppXwkn9j84yh1kvnt49k5r8h6y1ecsv09hs.mca nie zarejestrował się w modelu DCOM w wymaganym czasie. Error: (11/20/2021 01:01:11 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-PKO5OE2) Description: Serwer Microsoft.ZuneVideo_10.21092.10731.0_x64__8wekyb3d8bbwe!Microsoft.ZuneVideo.AppXjgy0dfr6tssa93yj5px65cbv2gsc8r39.mca nie zarejestrował się w modelu DCOM w wymaganym czasie. Error: (11/20/2021 01:00:40 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji z usługi FDResPub. Error: (11/19/2021 09:41:02 PM) (Source: Schannel) (EventID: 4103) (User: ZARZĄDZANIE NT) Description: Wystąpił błąd krytyczny podczas tworzenia poświadczeń TLS klient. Stan błędu wewnętrznego: 10013. Error: (11/19/2021 08:45:02 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-PKO5OE2) Description: Serwer {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} nie zarejestrował się w modelu DCOM w wymaganym czasie. Error: (11/19/2021 08:45:02 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-PKO5OE2) Description: Serwer {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} nie zarejestrował się w modelu DCOM w wymaganym czasie. Error: (11/19/2021 08:45:02 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-PKO5OE2) Description: Serwer {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} nie zarejestrował się w modelu DCOM w wymaganym czasie. Windows Defender: ================Event[0]: Date: 2020-11-04 07:46:59 Description: Produkt Program antywirusowy Microsoft Defender napotkał błąd podczas próby aktualizacji analizy zabezpieczeń. Nowa wersja analizy zabezpieczeń: Poprzednia wersja analizy zabezpieczeń: 1.293.664.0 Źródło aktualizacji: Serwer usługi Microsoft Update Typ analizy zabezpieczeń: Oprogramowanie antywirusowe Typ aktualizacji: Pełne Użytkownik: ZARZĄDZANIE NT\SYSTEM Bieżąca wersja aparatu: Poprzednia wersja aparatu: 1.1.15900.4 Kod błędu: 0x80240017 Opis błędu: Podczas sprawdzania aktualizacji wystąpił nieoczekiwany problem. Aby uzyskać informacje na temat instalowania aktualizacji i rozwiązywania problemów z nimi, zobacz Pomoc i obsługę techniczną. CodeIntegrity: =============== Date: 2021-11-20 13:16:05 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Pakiet Bezpieczeństwa UPC\apps\Ultralight\ulcore\1636551986\fsamsi32.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2021-11-20 13:07:02 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Pakiet Bezpieczeństwa UPC\apps\Ultralight\ulcore\1636551986\fsamsi64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Statystyki pamięci =========================== BIOS: American Megatrends Inc. X556UQK.317 04/16/2019 Płyta główna: ASUSTeK COMPUTER INC. X556UQK Procesor: Intel(R) Core(TM) i5-7200U CPU @ 2.50GHz Procent pamięci w użyciu: 63% Całkowita pamięć fizyczna: 8076.28 MB Dostępna pamięć fizyczna: 2962.77 MB Całkowita pamięć wirtualna: 19852.28 MB Dostępna pamięć wirtualna: 13679.24 MB ==================== Dyski ================================ Drive c: (OS) (Fixed) (Total:118.48 GB) (Free:44.29 GB) NTFS ==>[system z komponentami startowymi (pozyskano odczytując dysk)] Drive d: (DATA) (Fixed) (Total:931.51 GB) (Free:693.15 GB) NTFS \\?\Volume{40811be3-7586-4c69-ab56-d91b1bdfe80e}\ () (Fixed) (Total:0.49 GB) (Free:0.05 GB) NTFS \\?\Volume{9a25ea33-f097-44f0-b266-be68b2a0ab00}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32 ==================== MBR & Tablica partycji ==================== ========================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: F2D85C98) Partition: GPT. ========================================================== Disk: 1 (Size: 119.2 GB) (Disk ID: D1B1E1BB) Partition: GPT. ==================== Koniec Addition.txt =======================