Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 30-01-2022 Uruchomiony przez szymo (30-01-2022 20:26:12) Uruchomiony z E:\POBRANE Microsoft Windows 10 Home Wersja 21H2 19044.1503 (X64) (2022-01-15 18:12:43) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= (Załączenie wejścia w fixlist spowoduje jego usunięcie.) Administrator (S-1-5-21-3647009587-3880035555-2794837538-500 - Administrator - Disabled) Gość (S-1-5-21-3647009587-3880035555-2794837538-501 - Limited - Disabled) Konto domyślne (S-1-5-21-3647009587-3880035555-2794837538-503 - Limited - Disabled) szymo (S-1-5-21-3647009587-3880035555-2794837538-1001 - Administrator - Enabled) => C:\Users\szymo WDAGUtilityAccount (S-1-5-21-3647009587-3880035555-2794837538-504 - Limited - Disabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: IObit Malware Fighter (Disabled - Out of date) {72254378-B0F2-858E-E23B-921FCAC3D529} AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) 5KPlayer (HKLM-x32\...\5KPlayer) (Version: 6.9 - DearMob, Inc.) 7-Zip 21.07 (x64) (HKLM\...\7-Zip) (Version: 21.07 - Igor Pavlov) Adobe Premiere Pro 2022 (HKLM-x32\...\PPRO_22_0) (Version: 22.0 - Adobe Inc.) ALLPlayer (wersja 8.9) (HKLM\...\{68972948-F221-4267-9EB6-2EB5D913C4CF}_is1) (Version: 8.9 - ALLPlayer Ltd.) ChomikBox (HKLM-x32\...\{8E4185CC-4FF3-46B9-A4DB-5B850B71ABC4}) (Version: 2.0.8.2 - Chomikuj.pl) Combo Cleaner (HKLM\...\{8C9F8853-52F7-46F3-BC78-98001D3FF40C}) (Version: 1.0.58.0 - RCS LT) Hidden Combo Cleaner (HKLM-x32\...\InstallShield_{8C9F8853-52F7-46F3-BC78-98001D3FF40C}) (Version: 1.0.58.0 - RCS LT) Core Temp 1.17.1 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.17.1 - ALCPU) CPUID CPU-Z MSI 1.99 (HKLM\...\CPUID CPU-Z MSI_is1) (Version: 1.99 - CPUID, Inc.) Detroit Become Human (HKLM-x32\...\Detroit Become Human_is1) (Version: 0.0.0 - DODI-Repacks) Discord (HKU\S-1-5-21-3647009587-3880035555-2794837538-1001\...\Discord) (Version: 1.0.9003 - Discord Inc.) Driver Booster 9 (HKLM-x32\...\Driver Booster_is1) (Version: 9.1.0 - IObit) Epic Games Launcher (HKLM-x32\...\{30C7A3B1-644C-423F-AB2C-743E007A84EC}) (Version: 1.3.0.0 - Epic Games, Inc.) Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Epic Online Services (HKLM-x32\...\{32C68D93-D32F-4B01-8250-61642BFC22F8}) (Version: 2.0.28.0 - Epic Games, Inc.) Futuremark SystemInfo (HKLM-x32\...\{41C10E5B-2C7D-4278-97F8-7785D46348BC}) (Version: 5.44.969.0 - Futuremark) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 97.0.4692.99 - Google LLC) IObit Malware Fighter 9 (HKLM-x32\...\IObit Malware Fighter_is1) (Version: 9.1.0.553 - IObit) IObit Software Updater (HKLM-x32\...\IObit Software Updater_is1) (Version: 4.4.0.221 - IObit) IObit Uninstaller 11 (HKLM-x32\...\IObitUninstall) (Version: 11.2.0.10 - IObit) Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: 2022.2.659 - Logitech) Malwarebytes version 4.5.2.157 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.5.2.157 - Malwarebytes) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 97.0.1072.76 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-3647009587-3880035555-2794837538-1001\...\OneDriveSetup.exe) (Version: 21.220.1024.0005 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{E876418F-BE59-4D8C-B9A5-74B056B676FA}) (Version: 2.93.0.0 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.30.30704 (HKLM-x32\...\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}) (Version: 14.30.30704.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.30.30704 (HKLM-x32\...\{4d8dcf8c-a72a-43e1-9833-c12724db736e}) (Version: 14.30.30704.0 - Microsoft Corporation) MSI Afterburner 4.6.4 (HKLM-x32\...\Afterburner) (Version: 4.6.4 - MSI Co., LTD) MSI Command Center (HKLM-x32\...\{85A2564E-9ED9-448A-91E4-B9211EE58A08}_is1) (Version: 2.0.0.56 - MSI) Napisy24 (HKLM\...\{D1985DBC-F09E-4317-91B8-932AD0FD4A27}_is1) (Version: 1.9.6 - Napisy24.pl) NVIDIA FrameView SDK 1.2.4999.30397803 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.2.4999.30397803 - NVIDIA Corporation) NVIDIA GeForce Experience 3.24.0.126 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.24.0.126 - NVIDIA Corporation) NVIDIA Oprogramowanie systemu PhysX 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation) NVIDIA Sterownik dźwięku HD 1.3.39.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.39.1 - NVIDIA Corporation) NVIDIA Sterownik graficzny 511.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 511.23 - NVIDIA Corporation) OBS Studio (HKLM-x32\...\OBS Studio) (Version: 27.1.3 - OBS Project) Origin (HKLM-x32\...\Origin) (Version: 10.5.110.50000 - Electronic Arts, Inc.) qBittorrent 4.4.0 (HKLM-x32\...\qBittorrent) (Version: 4.4.0 - The qBittorrent project) RivaTuner Statistics Server 7.3.3 (HKLM-x32\...\RTSS) (Version: 7.3.3 - Unwinder) Rockstar Games Launcher (HKLM\...\Rockstar Games Launcher) (Version: 1.0.53.576 - Rockstar Games) Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.53.576 - Rockstar Games) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.0.9.3 - Rockstar Games) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) StreamElements SE.Live (HKLM-x32\...\StreamElements OBS.Live) (Version: 21.12.9.790 - StreamElements) Środowisko uruchomieniowe Microsoft Edge WebView2 (HKLM-x32\...\Microsoft EdgeWebView) (Version: 97.0.1072.76 - Microsoft Corporation) Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 128.0.10632 - Ubisoft) VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.5.2.0 - Elaborate Bytes) Packages: ========= 1932 Ford Custom Double Down -> C:\Program Files\WindowsApps\Microsoft.Jan18CPCar3_1.0.3.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) 1932 Ford Roadster Hula Girl -> C:\Program Files\WindowsApps\Microsoft.Jan18CPCar4_1.0.3.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) 1959 Plymouth Atomic Punk Bubbletop -> C:\Program Files\WindowsApps\Microsoft.Jan18CPCar5_1.0.3.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) 1963 Shelby Monaco King Cobra -> C:\Program Files\WindowsApps\Microsoft.Jan18CPCar7_1.0.3.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) 1970 Chevrolet Chevelle Barrett-Jackson Edition -> C:\Program Files\WindowsApps\Microsoft.Jan18CPCar1_1.0.3.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) 1970 Plymouth Hemi Cuda Convertible -> C:\Program Files\WindowsApps\Microsoft.Jan18CPCar6_1.0.3.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) 1975 Ford Bronco Barrett-Jackson Edition -> C:\Program Files\WindowsApps\Microsoft.Jan18CPCar2_1.0.3.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Barrett-Jackson Forza Motorsport 7 Car Pack -> C:\Program Files\WindowsApps\Microsoft.Jan18CarPack_1.0.3.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Dell Forza Motorsport 7 Car Pack -> C:\Program Files\WindowsApps\Microsoft.FebCarPack_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Doritos Forza Motorsport 7 Car Pack -> C:\Program Files\WindowsApps\Microsoft.DecCarPack_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 -> C:\Program Files\WindowsApps\Microsoft.ApolloBaseGame_1.174.4791.2_x64__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1926 Bugatti Type 35 C -> C:\Program Files\WindowsApps\Microsoft.DecCP.FM7.BUGType35_1.0.0.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1932 Alfa Romeo 8C 2300 Le Mans -> C:\Program Files\WindowsApps\Microsoft.MarCP.ALF8C32_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1940 BMW 328 -> C:\Program Files\WindowsApps\Microsoft.DecCP.FM7.BMW328_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1948 Ferrari 166 Inter Sport -> C:\Program Files\WindowsApps\Microsoft.AprCP.FERIntersport48_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1955 Chevrolet 150 Utility Sedan -> C:\Program Files\WindowsApps\Microsoft.DecCP.FM7.CHE150Sedan_1.0.0.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1955 Hoonigan Chevrolet Bel Air -> C:\Program Files\WindowsApps\Microsoft.JuneCP.CHEHoonBelair_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1957 Maserati 250F -> C:\Program Files\WindowsApps\Microsoft.ForzaMotorsport71957Maserati250F_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1958 Alfa Romeo Giulietta -> C:\Program Files\WindowsApps\Microsoft.JulyCPCar1_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1962 Porsche 804 -> C:\Program Files\WindowsApps\Microsoft.DecCP.FM7.POR804_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1964 Porsche 904 Carrera GTS -> C:\Program Files\WindowsApps\Microsoft.JulyCPCar6_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1965 Hoonigan Ford Hoonicorn Mustang -> C:\Program Files\WindowsApps\Microsoft.JuneCP.FORHoonicorn_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1966 Porsche 906 Carrera 6 -> C:\Program Files\WindowsApps\Microsoft.AprCP.POR90666_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1967 Nissan R380 II -> C:\Program Files\WindowsApps\Microsoft.JanCP.NIS.R380II_1.0.0.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1967 Volkswagen Type 3 1600 L -> C:\Program Files\WindowsApps\Microsoft.JanCP.VW.1600L_1.0.0.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1968 Holden HK Monaro GTS 327 -> C:\Program Files\WindowsApps\Microsoft.FebCP.HOLMonaro68_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1968 Subaru 360 -> C:\Program Files\WindowsApps\Microsoft.JanCP.SUB.360_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1970 Citroen 2CV -> C:\Program Files\WindowsApps\Microsoft.JanCP.CIT.2CV_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1972 Hoonigan Chevrolet Napalm Nova -> C:\Program Files\WindowsApps\Microsoft.JuneCP.CHEHoonNova_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1976 Chevrolet #76 Greenwood Corvette -> C:\Program Files\WindowsApps\Microsoft.AprCP.CHECorvette76_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1977 Brabham #8 Motor Racing Developments BT45B -> C:\Program Files\WindowsApps\Microsoft.MarCP.BRABT45B77_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1978 Hoonigan Ford Escort RS1800 -> C:\Program Files\WindowsApps\Microsoft.JuneCP.FORHoonEscort_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1978 Porsche #78 MOMO 935/78 -> C:\Program Files\WindowsApps\Microsoft.ForzaMotorsport71978Porsche78MOMO93578_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1980 Porsche 924 Carrera GTS -> C:\Program Files\WindowsApps\Microsoft.AprCP.POR924Carrera80_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1983 Jaguar #44 Group 44 XJR-5 -> C:\Program Files\WindowsApps\Microsoft.MarCP.JAGXJR583_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1983 Nissan #20 Coca-Cola Bluebird Super Silhouette -> C:\Program Files\WindowsApps\Microsoft.ForzaMotorsport71983Nissan20Coca-ColaBlu_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1985 Nissan #83 Electramotive Engineering GTP ZX-Turbo -> C:\Program Files\WindowsApps\Microsoft.AprCP.NISGTPZXT85_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1985 Nissan Safari -> C:\Program Files\WindowsApps\Microsoft.DecCP.FM7.NISSafari_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1988 Nissan #33 Bob Sharp Racing 300ZX -> C:\Program Files\WindowsApps\Microsoft.MarCP.NIS300ZX88_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1991 Hoonigan Rauh-Welt Begriff Porsche 911 Turbo -> C:\Program Files\WindowsApps\Microsoft.JuneCP.PORHoonigan_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1992 Hoonigan Mazda RX-7 Twerkstallion -> C:\Program Files\WindowsApps\Microsoft.JuneCP.MAZTwerk_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1993 Porsche 911 Turbo S Leichtbau -> C:\Program Files\WindowsApps\Microsoft.JanCP.POR.911TurboS_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 1997 Lotus Elise GT1 -> C:\Program Files\WindowsApps\Microsoft.JanCP.LOT.EliseGT1_1.0.0.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2003 Hoonigan Holden Commodore Ute -> C:\Program Files\WindowsApps\Microsoft.JuneCP.HOLCommoUte_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2015 Honda Ridgeline Baja Trophy Truck -> C:\Program Files\WindowsApps\Microsoft.ForzaMotorsport72015HondaRidgelineBajaTr_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2016 Audi #17 Rotek Racing TT-RS -> C:\Program Files\WindowsApps\Microsoft.FebCP.AUDTTRS16_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2016 Toyota Land Cruiser Arctic Trucks AT37 -> C:\Program Files\WindowsApps\Microsoft.ForzaMotorsport72016ArticTrucksLandCruis_1.0.2.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2017 Alfa Romeo Giulia Quadrifoglio -> C:\Program Files\WindowsApps\Microsoft.ForzaMotorsport7AlfaRomeoGuilia_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2017 Aston Martin #7 Aston Martin Racing V12 Vantage GT3 -> C:\Program Files\WindowsApps\Microsoft.FebCP.ASTV8Vantage17_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2017 BMW #24 BMW Team RLL M6 GTLM -> C:\Program Files\WindowsApps\Microsoft.JanCP.BMW.M6_1.0.0.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2017 Chevrolet Colorado ZR2 -> C:\Program Files\WindowsApps\Microsoft.MarCP.CHEColorado17_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2017 Ferrari 812 Superfast -> C:\Program Files\WindowsApps\Microsoft.JulyCPCar3_1.0.2.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2017 Fiat 124 Spider Abarth -> C:\Program Files\WindowsApps\Microsoft.ForzaMotorsport72017Fiat124SpiderAbarth_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2017 Lincoln Continental -> C:\Program Files\WindowsApps\Microsoft.MarCP.LINContinental17_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2017 Maserati Levante S -> C:\Program Files\WindowsApps\Microsoft.AprCP.MASLevante17_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2017 Ram 2500 Power Wagon -> C:\Program Files\WindowsApps\Microsoft.FebCP.RAMPower17_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2017 Volvo XC90 R-Design -> C:\Program Files\WindowsApps\Microsoft.MarCP.VOLXC90R17_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2017 Vuhl 05RR -> C:\Program Files\WindowsApps\Microsoft.JulyCPCar7_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2018 Bugatti Chiron -> C:\Program Files\WindowsApps\Microsoft.FebCP.BUGChiron18_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2018 Dodge Durango SRT -> C:\Program Files\WindowsApps\Microsoft.FebCP.DODDurango18_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2018 Exomotive Exocet Sport V8 XP-5 -> C:\Program Files\WindowsApps\Microsoft.JulyCPCar2_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2018 Honda Odyssey Elite -> C:\Program Files\WindowsApps\Microsoft.AprCP.HONOdyssey18_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2018 Jeep Grand Cherokee SRT Trackhawk -> C:\Program Files\WindowsApps\Microsoft.DecCP.FM7.JEETrackhawk_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2018 Kia Stinger -> C:\Program Files\WindowsApps\Microsoft.FebCP.KIAStinger18_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2018 KTM X-Bow GT4 -> C:\Program Files\WindowsApps\Microsoft.JulyCPCar4_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2018 McLaren 720 S -> C:\Program Files\WindowsApps\Microsoft.JulyCPCar5_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 2018 Porsche Cayenne Turbo -> C:\Program Files\WindowsApps\Microsoft.DecCP.FM7.PORCayenne_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 Fate of the Furious Car Pack -> C:\Program Files\WindowsApps\Microsoft.ForzaMotorsport7PreorderBonusCarPack_1.3.2.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 Hoonigan Car Pack -> C:\Program Files\WindowsApps\Microsoft.ForzaMotorsport7PreorderBonus_1.3.3.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Forza Motorsport 7 VIP -> C:\Program Files\WindowsApps\Microsoft.ForzaMotorsport7VIP_1.3.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Hoonigan Forza Motorsport 7 Car Pack -> C:\Program Files\WindowsApps\Microsoft.JuneCarPack_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) K1 Speed Forza Motorsport 7 Car Pack -> C:\Program Files\WindowsApps\Microsoft.AprilCarPack_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) March Forza Motorsport 7 Car Pack -> C:\Program Files\WindowsApps\Microsoft.MarCarPack_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.1050.0_x64__8wekyb3d8bbwe [2022-01-15] (Microsoft Studios) [MS Ad] NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.962.0_x64__56jybvy8sckqj [2022-01-17] (NVIDIA Corp.) Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.20.238.0_x64__dt26b99r8h8gj [2022-01-15] (Realtek Semiconductor Corp) Samsung QLED TV Forza Motorsport 7 Car Pack -> C:\Program Files\WindowsApps\Microsoft.SamsungQLEDTVForzaMotorsport7CarPack_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.177.645.0_x86__zpdnekdrzrea0 [2022-01-23] (Spotify AB) [Startup Task] Top Gear Forza Motorsport 7 Car Pack -> C:\Program Files\WindowsApps\Microsoft.JulyCarPack_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) Totino's Forza Motorsport 7 Car Pack -> C:\Program Files\WindowsApps\Microsoft.JanCarPack_1.0.1.2_neutral__8wekyb3d8bbwe [2022-01-17] (Microsoft Studios) WhatsApp Desktop -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2149.4.0_x64__cv1g1gvanyjgm [2022-01-28] (WhatsApp Inc.) ==================== Niestandardowe rejestracje CLSID (filtrowane): ============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ShellIconOverlayIdentifiers: [ IMFSafeBox] -> {0BB81440-5F42-4480-A5F7-770A6F439FC8} => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFShellExt.dll [2020-07-22] (IObit Information Technology -> IObit) ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-12-26] (Igor Pavlov) [Brak podpisu cyfrowego] ContextMenuHandlers1: [IObit Malware Fighter] -> {0BB81440-5F42-4480-A5F7-770A6F439FC8} => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFShellExt.dll [2020-07-22] (IObit Information Technology -> IObit) ContextMenuHandlers1: [IObitUninstaller] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => C:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll [2021-12-14] (IObit CO., LTD -> IObit) ContextMenuHandlers1: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG) ContextMenuHandlers2: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG) ContextMenuHandlers3: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => -> Brak pliku ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-01-30] (Malwarebytes Corporation -> Malwarebytes) ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-12-26] (Igor Pavlov) [Brak podpisu cyfrowego] ContextMenuHandlers4: [IObit Malware Fighter] -> {0BB81440-5F42-4480-A5F7-770A6F439FC8} => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFShellExt.dll [2020-07-22] (IObit Information Technology -> IObit) ContextMenuHandlers4: [IObitUninstaller] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => C:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll [2021-12-14] (IObit CO., LTD -> IObit) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nvmdi.inf_amd64_de900db96e9c1480\nvshext.dll [2022-01-11] (Nvidia Corporation -> NVIDIA Corporation) ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-12-26] (Igor Pavlov) [Brak podpisu cyfrowego] ContextMenuHandlers6: [IObit Malware Fighter] -> {0BB81440-5F42-4480-A5F7-770A6F439FC8} => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFShellExt.dll [2020-07-22] (IObit Information Technology -> IObit) ContextMenuHandlers6: [IObitUninstaller] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => C:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll [2021-12-14] (IObit CO., LTD -> IObit) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-01-30] (Malwarebytes Corporation -> Malwarebytes) ==================== Codecs (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\system32\rtvcvfw64.dll [246272 2012-09-28] () [Brak podpisu cyfrowego] HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\SysWOW64\rtvcvfw32.dll [247296 2012-09-28] () [Brak podpisu cyfrowego] ==================== Skróty & WMI ======================== (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ShortcutWithArgument: C:\Users\szymo\Desktop\szymon - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Default" ShortcutWithArgument: C:\Users\szymo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\szymon - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Default" ==================== Załadowane moduły (filtrowane) ============= 2022-01-26 19:08 - 2022-01-26 19:06 - 000634880 _____ () [Brak podpisu cyfrowego] \\?\C:\Program Files\LGHUB\resources\app.asar.unpacked\node_modules\keytar\build\Release\keytar.node 2019-08-15 17:13 - 2019-08-15 17:13 - 001265664 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Combo Cleaner\runtimes\win-x64\native\e_sqlite3.dll 2021-12-03 14:36 - 2021-12-03 14:36 - 000232960 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\MSI Afterburner\RTCore.dll 2021-12-03 14:36 - 2021-12-03 14:36 - 000057344 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\MSI Afterburner\RTFC.dll 2021-12-03 14:36 - 2021-12-03 14:36 - 000668672 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\MSI Afterburner\RTHAL.dll 2021-12-03 14:36 - 2021-12-03 14:36 - 000074240 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\MSI Afterburner\RTMUI.dll 2021-12-03 14:36 - 2021-12-03 14:36 - 000371712 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\MSI Afterburner\RTUI.dll 2021-12-03 14:32 - 2021-12-03 14:32 - 000057344 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\RivaTuner Statistics Server\RTFC.dll 2021-12-03 14:32 - 2021-12-03 14:32 - 000074240 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\RivaTuner Statistics Server\RTMUI.dll 2021-12-03 14:32 - 2021-12-03 14:32 - 000368640 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\RivaTuner Statistics Server\RTUI.dll 2022-01-15 20:24 - 2021-12-26 15:00 - 000093696 _____ (Igor Pavlov) [Brak podpisu cyfrowego] C:\Program Files\7-Zip\7-zip.dll 2022-01-15 21:24 - 2014-05-28 11:35 - 002040832 _____ (MSI) [Brak podpisu cyfrowego] C:\Program Files (x86)\MSI\Command Center\WMIDLL.dll 2022-01-20 09:50 - 2022-01-20 09:49 - 001282048 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\Origin\LIBEAY32.dll 2022-01-20 09:50 - 2022-01-20 09:49 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\Origin\ssleay32.dll 2022-01-20 09:50 - 2022-01-20 09:49 - 001611264 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Origin\platforms\qwindows.dll 2022-01-20 09:50 - 2022-01-20 09:49 - 005487104 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Origin\Qt5Core.dll 2022-01-20 09:50 - 2022-01-20 09:49 - 005841920 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Origin\Qt5Gui.dll 2022-01-20 09:50 - 2022-01-20 09:49 - 001179136 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Origin\Qt5Network.dll 2022-01-20 09:50 - 2022-01-20 09:49 - 000146432 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Origin\Qt5WebSockets.dll 2022-01-20 09:50 - 2022-01-20 09:49 - 005089792 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Origin\Qt5Widgets.dll 2022-01-20 09:50 - 2022-01-20 09:49 - 000184832 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Origin\Qt5Xml.dll ==================== Alternate Data Streams (filtrowane) ======== ==================== Tryb awaryjny (filtrowane) ================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRBoot => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service" ==================== Powiązania plików (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) HKU\.DEFAULT\Software\Classes\exefile: "%1" %* <==== UWAGA HKU\.DEFAULT\Software\Classes\.exe: exefile => "%1" %* <==== UWAGA HKU\S-1-5-21-3647009587-3880035555-2794837538-1001\Software\Classes\exefile: "%1" %* <==== UWAGA HKU\S-1-5-21-3647009587-3880035555-2794837538-1001\Software\Classes\.exe: exefile => "%1" %* <==== UWAGA ==================== Internet Explorer (filtrowane) ========== HKU\S-1-5-21-3647009587-3880035555-2794837538-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gazeta.pl/0,0.html?p=190 BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2020-01-31] (IObit Information Technology -> IObit) ==================== Hosts - zawartość: ========================= (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts ==================== Inne obszary =========================== (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-3647009587-3880035555-2794837538-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\szymo\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: ) (ConsentPromptBehaviorUser: ) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: ) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Załączenie wejścia w fixlist spowoduje jego usunięcie.) HKLM\...\StartupApproved\Run: => "Combo Cleaner" HKLM\...\StartupApproved\Run32: => "IObit Malware Fighter" HKU\S-1-5-21-3647009587-3880035555-2794837538-1001\...\StartupApproved\Run: => "Advanced SystemCare" HKU\S-1-5-21-3647009587-3880035555-2794837538-1001\...\StartupApproved\Run: => "ALLUpdate" HKU\S-1-5-21-3647009587-3880035555-2794837538-1001\...\StartupApproved\Run: => "EpicGamesLauncher" HKU\S-1-5-21-3647009587-3880035555-2794837538-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-3647009587-3880035555-2794837538-1001\...\StartupApproved\Run: => "Napisy24Update" HKU\S-1-5-21-3647009587-3880035555-2794837538-1001\...\StartupApproved\Run: => "EADM" HKU\S-1-5-21-3647009587-3880035555-2794837538-1001\...\StartupApproved\Run: => "Steam" HKU\S-1-5-21-3647009587-3880035555-2794837538-1001\...\StartupApproved\Run: => "5KPlayer" HKU\S-1-5-21-3647009587-3880035555-2794837538-1001\...\StartupApproved\Run: => "ChomikBox" ==================== Reguły Zapory systemu Windows (filtrowane) ================ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [{5123C9DC-2E1F-4515-BEF9-2E6B01B0D9A8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{E21AF3FE-D4F6-474E-8E5D-E06E9FC45D1F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{D4B0E643-0036-4E4A-A118-04C7F5C008C1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{49C9257B-4F7B-4A81-8678-1F273E8CCC31}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{302E9A93-BB86-4180-A47B-EF84F6C3BE32}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{1B152E61-3E4B-4C3A-9C99-E7F8F0E47538}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{D2735E4A-4226-4BBD-B5E2-EF89235B01A5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{C0EA367B-A3BA-4130-B309-7D6F22B2C65C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{7A13FEC1-8B66-400B-A70A-1254978AF2AF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation) FirewallRules: [{8A4422B8-8E3E-43A2-98C2-1F89C611A23D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation) FirewallRules: [TCP Query User{E1CA1600-2EF7-4961-BA3E-4B9AEC0E2F8C}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.) FirewallRules: [UDP Query User{8824B76C-BA82-491A-8409-339688C1B25E}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.) FirewallRules: [{61C1027D-C3AF-4E3C-83CD-789294363962}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{63AF4315-A105-491D-9B7D-57B790E35409}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{F1856C06-8422-4D12-B809-E73FAF480772}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{671992D5-7EDE-4FCB-8A6A-D05E49499E3F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{A1268511-100D-420F-B8CB-C8C2579C1A80}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe (The qBittorrent Project) [Brak podpisu cyfrowego] FirewallRules: [{B41C87D0-1163-436D-8897-40DDC41D1E7D}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe (The qBittorrent Project) [Brak podpisu cyfrowego] FirewallRules: [{FBC89598-3AE6-4B2B-AB26-B9E71F6CBC61}] => (Allow) D:\SteamLibrary\steamapps\common\assettocorsa\AssettoCorsa.exe (Kunos Simulazioni) [Brak podpisu cyfrowego] FirewallRules: [{AB9B408C-7B95-49AC-8AFE-06D3F913D5E5}] => (Allow) D:\SteamLibrary\steamapps\common\assettocorsa\AssettoCorsa.exe (Kunos Simulazioni) [Brak podpisu cyfrowego] FirewallRules: [TCP Query User{C941FA05-2CBA-4C95-B5DE-95DBB0761077}D:\gtav\gta5.exe] => (Allow) D:\gtav\gta5.exe => Brak pliku FirewallRules: [UDP Query User{2306BE87-75F7-4B32-A491-92383EDA843D}D:\gtav\gta5.exe] => (Allow) D:\gtav\gta5.exe => Brak pliku FirewallRules: [TCP Query User{018DADC9-8774-46E7-B0A8-AA8B6E3C5C7D}D:\steamlibrary\steamapps\common\assettocorsa\acs.exe] => (Allow) D:\steamlibrary\steamapps\common\assettocorsa\acs.exe () [Brak podpisu cyfrowego] FirewallRules: [UDP Query User{CBD6CDE7-5AEB-4A09-8B3C-9CAE6365044B}D:\steamlibrary\steamapps\common\assettocorsa\acs.exe] => (Allow) D:\steamlibrary\steamapps\common\assettocorsa\acs.exe () [Brak podpisu cyfrowego] FirewallRules: [TCP Query User{DF759DAC-A7FA-440C-A240-97C93CE4196D}C:\users\szymo\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2545_gtaprocess.exe] => (Allow) C:\users\szymo\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2545_gtaprocess.exe => Brak pliku FirewallRules: [UDP Query User{FA56F9F5-88F4-4B50-88A1-4ED56B2791D6}C:\users\szymo\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2545_gtaprocess.exe] => (Allow) C:\users\szymo\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2545_gtaprocess.exe => Brak pliku FirewallRules: [TCP Query User{DECC7900-CF45-47B5-BEFA-622D8F00BC20}C:\users\szymo\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2189_gtaprocess.exe] => (Allow) C:\users\szymo\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2189_gtaprocess.exe => Brak pliku FirewallRules: [UDP Query User{0CFC793B-1D1F-4CE9-8A73-1C8E10B97F3B}C:\users\szymo\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2189_gtaprocess.exe] => (Allow) C:\users\szymo\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2189_gtaprocess.exe => Brak pliku FirewallRules: [TCP Query User{24EB714C-2048-45D0-BE9F-1F0D443FD4AE}C:\users\szymo\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_gtaprocess.exe] => (Allow) C:\users\szymo\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_gtaprocess.exe => Brak pliku FirewallRules: [UDP Query User{FD7B9008-6552-4349-BC5E-2C41F1AC4C4E}C:\users\szymo\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_gtaprocess.exe] => (Allow) C:\users\szymo\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_gtaprocess.exe => Brak pliku FirewallRules: [{80E0512E-C512-4FA6-ADC2-9854ACA62D45}] => (Allow) D:\SteamLibrary\steamapps\common\American Truck Simulator\bin\win_x64\amtrucks.exe => Brak pliku FirewallRules: [{1B97D950-0147-4ECA-9643-FF96D6CD573C}] => (Allow) D:\SteamLibrary\steamapps\common\American Truck Simulator\bin\win_x64\amtrucks.exe => Brak pliku FirewallRules: [TCP Query User{0C7A5E31-3F88-4E4A-BB8D-DBEACE5B4838}E:\torrenty\assetto corsa competizione v.1.8.10 (2019)\assetto corsa competizione\ac2\binaries\win64\ac2-win64-shipping.exe] => (Allow) E:\torrenty\assetto corsa competizione v.1.8.10 (2019)\assetto corsa competizione\ac2\binaries\win64\ac2-win64-shipping.exe => Brak pliku FirewallRules: [UDP Query User{00D37A5C-A97E-494B-AB3B-34487716F64D}E:\torrenty\assetto corsa competizione v.1.8.10 (2019)\assetto corsa competizione\ac2\binaries\win64\ac2-win64-shipping.exe] => (Allow) E:\torrenty\assetto corsa competizione v.1.8.10 (2019)\assetto corsa competizione\ac2\binaries\win64\ac2-win64-shipping.exe => Brak pliku FirewallRules: [{36FB0628-F5C3-46DC-B22A-BBA0A1049B23}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.177.645.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{C7B1295D-2918-4DC1-8259-6780D3731102}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.177.645.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{DE26EDFE-4CB1-454E-9861-96567B8F8D06}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.177.645.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{886C0AE8-9EBA-44AC-8072-BF85ABB3C6A9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.177.645.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{09AA117F-A6E9-4F20-BD28-636B35CE3585}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.177.645.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{7BEAA8C7-B5EA-4689-9D0D-848EDD782C3F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.177.645.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{BAB616FC-0C9B-4B60-8821-8AA1CE866EA3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.177.645.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{08EC78CC-4078-4BCC-A819-42B96C33E7E1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.177.645.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{E78BFE7A-6661-4384-8814-E39B963606CB}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [TCP Query User{5501EC06-6772-4FAC-93B9-44C3734739E0}D:\games\police.simulator.patrol.officers.the.keys.of.the.city.early.access\boston\binaries\win64\boston-win64-shipping.exe] => (Allow) D:\games\police.simulator.patrol.officers.the.keys.of.the.city.early.access\boston\binaries\win64\boston-win64-shipping.exe => Brak pliku FirewallRules: [UDP Query User{5C293C1F-2C5D-4EE4-A779-772C09AD7997}D:\games\police.simulator.patrol.officers.the.keys.of.the.city.early.access\boston\binaries\win64\boston-win64-shipping.exe] => (Allow) D:\games\police.simulator.patrol.officers.the.keys.of.the.city.early.access\boston\binaries\win64\boston-win64-shipping.exe => Brak pliku FirewallRules: [TCP Query User{C7E3BC6A-DBC4-407E-B2E8-5A79BE9AC891}D:\games\forhonor\forhonor.exe] => (Allow) D:\games\forhonor\forhonor.exe => Brak pliku FirewallRules: [UDP Query User{CCB532C9-9FBA-41BC-A2DD-E9765DA149A9}D:\games\forhonor\forhonor.exe] => (Allow) D:\games\forhonor\forhonor.exe => Brak pliku FirewallRules: [{AE5803AB-8F34-4CD3-BE68-543C9817414B}] => (Allow) D:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software) FirewallRules: [{C76812F3-70F8-4A49-A929-005AA2CA73E2}] => (Allow) D:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software) FirewallRules: [{33CD2390-CF31-409C-A962-87FC3B686738}] => (Allow) D:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software) FirewallRules: [{86AB4F3E-68AD-4CE5-8AA2-08BCD5C08356}] => (Allow) D:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software) FirewallRules: [{C884AAFF-AF04-409F-9873-613FF6F0C91C}] => (Allow) D:\SteamLibrary\steamapps\common\3DMark\bin\x86\3DMark.exe => Brak pliku FirewallRules: [{906D0316-F849-40FA-B3BC-F5C53FFAF68C}] => (Allow) D:\SteamLibrary\steamapps\common\3DMark\bin\x86\3DMark.exe => Brak pliku FirewallRules: [{B8B649AB-A9FC-4EA3-B1BF-AE354DCB1496}] => (Allow) D:\SteamLibrary\steamapps\common\3DMark\bin\x64\3DMark.exe => Brak pliku FirewallRules: [{36A5090A-92ED-422E-91EE-211E790488AC}] => (Allow) D:\SteamLibrary\steamapps\common\3DMark\bin\x64\3DMark.exe => Brak pliku FirewallRules: [TCP Query User{9AC3D9B3-7944-4571-8E5D-FC61B0A7D30A}C:\program files (x86)\dearmob\5kplayer\5kplayer.exe] => (Allow) C:\program files (x86)\dearmob\5kplayer\5kplayer.exe (Digiarty Software, Inc. -> DearMob) FirewallRules: [UDP Query User{2CAC9AFC-E4D2-4D5E-B16A-5DB5D918EDF4}C:\program files (x86)\dearmob\5kplayer\5kplayer.exe] => (Allow) C:\program files (x86)\dearmob\5kplayer\5kplayer.exe (Digiarty Software, Inc. -> DearMob) FirewallRules: [{1A6F7475-1164-450C-9A79-B4453F0A9988}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\97.0.1072.76\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation) ==================== Punkty Przywracania systemu ========================= 28-01-2022 00:08:36 Zainstalowano: ChomikBox 29-01-2022 20:11:35 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 ==================== Wadliwe urządzenia w Menedżerze urządzeń ============ ==================== Błędy w Dzienniku zdarzeń: ======================== Dziennik Aplikacja: ================== Dziennik System: ============= Error: (01/30/2022 07:48:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa ComboCleaner.WinService niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (01/30/2022 07:48:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa ComboCleaner.Guard niespodziewanie zakończyła pracę. Wystąpiło to razy: 2. Windows Defender: ================ Date: 2022-01-15 22:07:07 Description: Produkt Program antywirusowy Microsoft Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niechciane oprogramowanie. Aby uzyskać więcej informacji, zobacz: https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Sabsik.FL.A!ml&threatid=2147780195&enterprise=0 Nazwa: Trojan:Win32/Sabsik.FL.A!ml Identyfikator: 2147780195 Ważność: Poważny Kategoria: Koń trojański Ścieżka: file:_E:\TORRENTY\Adobe Premiere Pro_2022_22.0.0.169_Portable\Settings\styles\Background\Win\Settings\mclient Pochodzenie wykrycia: Komputer lokalny Typ wykrycia: FastPath Źródło wykrycia: Ochrona w czasie rzeczywistym Użytkownik: DESKTOP-9H3HQGL\szymo Nazwa procesu: E:\TORRENTY\Adobe Premiere Pro_2022_22.0.0.169_Portable\Adobe Premiere Pro_2022 Setup.exe Wersja analizy zabezpieczeń: AV: 1.355.1977.0, AS: 1.355.1977.0, NIS: 1.355.1977.0 Wersja aparatu: AM: 1.1.18800.4, NIS: 1.1.18800.4 Date: 2022-01-15 22:07:07 Description: Produkt Program antywirusowy Microsoft Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niechciane oprogramowanie. Aby uzyskać więcej informacji, zobacz: https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Sabsik!ml&threatid=2147808020&enterprise=0 Nazwa: Trojan:Win32/Sabsik!ml Identyfikator: 2147808020 Ważność: Poważny Kategoria: Koń trojański Ścieżka: file:_E:\TORRENTY\Adobe Premiere Pro_2022_22.0.0.169_Portable\Settings\styles\Background\Win\Settings\eclient Pochodzenie wykrycia: Komputer lokalny Typ wykrycia: FastPath Źródło wykrycia: Ochrona w czasie rzeczywistym Użytkownik: DESKTOP-9H3HQGL\szymo Nazwa procesu: E:\TORRENTY\Adobe Premiere Pro_2022_22.0.0.169_Portable\Adobe Premiere Pro_2022 Setup.exe Wersja analizy zabezpieczeń: AV: 1.355.1977.0, AS: 1.355.1977.0, NIS: 1.355.1977.0 Wersja aparatu: AM: 1.1.18800.4, NIS: 1.1.18800.4 Date: 2022-01-15 20:29:26 Description: Skanowanie produktu Program antywirusowy Microsoft Defender zostało zatrzymane przed ukończeniem. Identyfikator skanowania: {BF10DB3E-8632-4D06-90F9-9092731CE2E4} Typ skanowania: Narzędzia chroniące przed złośliwym oprogramowaniem Parametry skanowania: Szybkie skanowanie Użytkownik: DESKTOP-9H3HQGL\szymo Event[0]: Date: 2022-01-25 18:31:19 Description: Produkt Program antywirusowy Microsoft Defender napotkał błąd podczas próby aktualizacji analizy zabezpieczeń. Nowa wersja analizy zabezpieczeń: 1.355.2510.0 Poprzednia wersja analizy zabezpieczeń: 1.355.2047.0 Źródło aktualizacji: Użytkownik Typ analizy zabezpieczeń: Oprogramowanie antyszpiegowskie Typ aktualizacji: Różnica Użytkownik: ZARZĄDZANIE NT\USŁUGA SIECIOWA Bieżąca wersja aparatu: 1.1.18800.4 Poprzednia wersja aparatu: 1.1.18800.4 Kod błędu: 0x80004004 Opis błędu: Operacja przerwana. Date: 2022-01-25 18:31:19 Description: Produkt Program antywirusowy Microsoft Defender napotkał błąd podczas próby aktualizacji analizy zabezpieczeń. Nowa wersja analizy zabezpieczeń: 1.355.2510.0 Poprzednia wersja analizy zabezpieczeń: 1.355.2047.0 Źródło aktualizacji: Użytkownik Typ analizy zabezpieczeń: Oprogramowanie antywirusowe Typ aktualizacji: Różnica Użytkownik: ZARZĄDZANIE NT\USŁUGA SIECIOWA Bieżąca wersja aparatu: 1.1.18800.4 Poprzednia wersja aparatu: 1.1.18800.4 Kod błędu: 0x80004004 Opis błędu: Operacja przerwana. Date: 2022-01-25 18:31:18 Description: Produkt Program antywirusowy Microsoft Defender napotkał błąd podczas próby aktualizacji analizy zabezpieczeń. Nowa wersja analizy zabezpieczeń: 1.355.2510.0 Poprzednia wersja analizy zabezpieczeń: 1.355.2047.0 Źródło aktualizacji: Użytkownik Typ analizy zabezpieczeń: Oprogramowanie antyszpiegowskie Typ aktualizacji: Różnica Użytkownik: ZARZĄDZANIE NT\USŁUGA SIECIOWA Bieżąca wersja aparatu: 1.1.18800.4 Poprzednia wersja aparatu: 1.1.18800.4 Kod błędu: 0x80004004 Opis błędu: Operacja przerwana. Date: 2022-01-25 18:31:18 Description: Produkt Program antywirusowy Microsoft Defender napotkał błąd podczas próby aktualizacji analizy zabezpieczeń. Nowa wersja analizy zabezpieczeń: 1.355.2510.0 Poprzednia wersja analizy zabezpieczeń: 1.355.2047.0 Źródło aktualizacji: Użytkownik Typ analizy zabezpieczeń: Oprogramowanie antywirusowe Typ aktualizacji: Różnica Użytkownik: ZARZĄDZANIE NT\USŁUGA SIECIOWA Bieżąca wersja aparatu: 1.1.18800.4 Poprzednia wersja aparatu: 1.1.18800.4 Kod błędu: 0x80004004 Opis błędu: Operacja przerwana. Date: 2022-01-25 18:31:10 Description: Produkt Program antywirusowy Microsoft Defender napotkał błąd podczas próby aktualizacji analizy zabezpieczeń. Nowa wersja analizy zabezpieczeń: Poprzednia wersja analizy zabezpieczeń: 1.355.2047.0 Źródło aktualizacji: Serwer usługi Microsoft Update Typ analizy zabezpieczeń: Oprogramowanie antywirusowe Typ aktualizacji: Pełne Użytkownik: ZARZĄDZANIE NT\SYSTEM Bieżąca wersja aparatu: Poprzednia wersja aparatu: 1.1.18800.4 Kod błędu: 0x8007045b Opis błędu: Trwa proces zamykania systemu. CodeIntegrity: =============== Date: 2022-01-30 17:44:25 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume6\POBRANE\wsainstall.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2022-01-30 14:32:10 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\WRusr.dll that did not meet the Microsoft signing level requirements. ==================== Statystyki pamięci =========================== BIOS: American Megatrends Inc. 2.H0 06/16/2018 Płyta główna: MSI H110M PRO-VD (MS-7996) Procesor: Intel(R) Core(TM) i5-7400 CPU @ 3.00GHz Procent pamięci w użyciu: 47% Całkowita pamięć fizyczna: 16348.21 MB Dostępna pamięć fizyczna: 8661.62 MB Całkowita pamięć wirtualna: 18780.21 MB Dostępna pamięć wirtualna: 7640.94 MB ==================== Dyski ================================ Drive c: (SYSTEM) (Fixed) (Total:111.17 GB) (Free:18.67 GB) NTFS Drive d: (GRY-SSD) (Fixed) (Total:465.75 GB) (Free:93.13 GB) NTFS Drive e: (GRY-PROGRAMY-HDD) (Fixed) (Total:930.93 GB) (Free:839.2 GB) NTFS \\?\Volume{c8b2ac87-c38f-4d5a-887f-04f14b8761ed}\ () (Fixed) (Total:0.51 GB) (Free:0.08 GB) NTFS \\?\Volume{a71936f4-c783-49a8-a6e8-0b2f560f0484}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32 ==================== MBR & Tablica partycji ==================== ========================================================== Disk: 0 (Protective MBR) (Size: 465.8 GB) (Disk ID: 00000000) Partition: GPT. ========================================================== Disk: 1 (Size: 111.8 GB) (Disk ID: 5DCD6C45) Partition: GPT. ========================================================== Disk: 2 (Size: 931.5 GB) (Disk ID: 6B958CC2) Partition: GPT. ==================== Koniec Addition.txt =======================