Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 07-12-2016 Uruchomiony przez MAG (07-12-2016 18:59:01) Uruchomiony z C:\Users\MAG\Desktop\usunąć Windows 10 Home Wersja 1607 (X64) (2016-09-24 03:51:05) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-2999985383-601964839-3280780558-500 - Administrator - Disabled) Gość (S-1-5-21-2999985383-601964839-3280780558-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2999985383-601964839-3280780558-1004 - Limited - Enabled) Konto domyślne (S-1-5-21-2999985383-601964839-3280780558-503 - Limited - Disabled) MAG (S-1-5-21-2999985383-601964839-3280780558-1002 - Administrator - Enabled) => C:\Users\MAG ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Kaspersky Internet Security (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Kaspersky Internet Security (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Enabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated) Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.185 - Adobe Systems Incorporated) Aktualizacje NVIDIA 16.18.9 (Version: 16.18.9 - NVIDIA Corporation) Hidden Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden Apple Application Support (32-bit) (HKLM-x32\...\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.) Apple Application Support (64-bit) (HKLM\...\{9BC93467-75D1-4AA4-BD58-D9C51D88DFAB}) (Version: 5.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.) Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 10.0 - Atheros) Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) CDex extraction audio (HKLM-x32\...\CDex) (Version: - ) Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.65.2.0 - Conexant) DTS Sound (HKLM-x32\...\{2DFA9084-CEB3-4A48-B9F7-9038FEF1B8F4}) (Version: 1.01.2700 - DTS, Inc.) Empress of the Deep - The Darkest Secret (x32 Version: 2.2.0.98 - WildTangent) Hidden Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.0.8 - Genesys Logic) iCloud (HKLM\...\{ADFDB647-35C0-4254-9EE6-2D9C3B7104BD}) (Version: 5.2.1.69 - Apple Inc.) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.2.1000 - Intel Corporation) Island Tribe (x32 Version: 2.2.0.98 - WildTangent) Hidden iTunes (HKLM\...\{554C62C7-E6BB-40F1-892B-F0AE02D3C135}) (Version: 12.5.3.17 - Apple Inc.) Jewel Quest Solitaire 2 (x32 Version: 2.2.0.98 - WildTangent) Hidden Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab) Kaspersky Internet Security (x32 Version: 17.0.0.611 - Kaspersky Lab) Hidden Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab) Kaspersky Secure Connection (x32 Version: 17.0.0.611 - Kaspersky Lab) Hidden Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden Malwarebytes Anti-Malware wersja 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) MFP and Storage Server (HKLM-x32\...\InstallShield_{5B13ECF5-5B59-45B7-83A4-BC27F33F39BA}) (Version: 0.09.1006.0049 - Nazwa firmy) MFP and Storage Server (Version: 0.09.1006.0049 - Nazwa firmy) Hidden Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Office Standard 2013 (HKLM\...\Office15.STANDARD) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Mozilla Firefox 45.0.1 (x86 pl) (HKLM-x32\...\Mozilla Firefox 45.0.1 (x86 pl)) (Version: 45.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.0.1.5918 - Mozilla) Narzędzia sprawdzające pakietu Microsoft Office 2013 — polski (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden Network Print Monitor for Windows (HKLM-x32\...\Network Print Monitor) (Version: - ) NVIDIA GeForce Experience 2.1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.5 - NVIDIA Corporation) NVIDIA Oprogramowanie systemu PhysX 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation) NVIDIA Sterownik graficzny 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.09 - NVIDIA Corporation) Panel sterowania NVIDIA 369.09 (Version: 369.09 - NVIDIA Corporation) Hidden Peggle Nights (x32 Version: 2.2.0.98 - WildTangent) Hidden Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.300 - Qualcomm Atheros) Qualcomm Atheros Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.21 - Qualcomm Atheros Inc.) Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.4.16061.19 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.4.16061.19 - Samsung Electronics Co., Ltd.) Hidden Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.59.0 - Samsung Electronics Co., Ltd.) SHIELD Streaming (Version: 3.1.3000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 16.18.9 - NVIDIA Corporation) Hidden Spotify (HKLM-x32\...\Spotify) (Version: 0.8.5.1333.g822e0de8 - Spotify AB) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.16.3 - Synaptics Incorporated) TOSHIBA Addendum (HKLM-x32\...\{CE0374A6-B204-4336-8293-63FBB1DADBF4}) (Version: 1.00 - TOSHIBA) TOSHIBA Desktop Assist (HKLM\...\{95CCACF0-010D-45F0-82BF-858643D8BC02}) (Version: 1.02.01.6407 - Toshiba Corporation) TOSHIBA Display Utility (HKLM\...\{84FA4D2D-4273-4C66-BD3D-ADD3FE48DFA2}) (Version: 1.1.5.0 - Toshiba Corporation) TOSHIBA eco Utility (HKLM\...\{5944B9D4-3C2A-48DE-931E-26B31714A2F7}) (Version: 2.2.0.6404 - Toshiba Corporation) TOSHIBA Function Key (HKLM\...\{16562A90-71BC-41A0-B890-D91B0C267120}) (Version: 1.1.0001.6403 - Toshiba Corporation) TOSHIBA Gesture Controller (HKLM-x32\...\{D2484156-5F50-46CA-994A-3EC35F891950}) (Version: 4.0.110.0 - Toshiba Corporation) TOSHIBA Manuals (HKLM-x32\...\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}) (Version: 10.10 - TOSHIBA) TOSHIBA Password Utility (HKLM-x32\...\InstallShield_{26BB68BB-CF93-4A12-BC6D-A3B6F53AC8D9}) (Version: 5.0.1.0 - Toshiba Corporation) TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.9.09.6400 - Toshiba Corporation) TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 3.1.02.55065006 - Toshiba Corporation) TOSHIBA Service Station (HKLM\...\{FBFCEEA5-96EA-4C8E-9262-43CBBEBAE413}) (Version: 2.6.8 - Toshiba Corporation) TOSHIBA System Driver (HKLM-x32\...\{1E6A96A1-2BAB-43EF-8087-30437593C66C}) (Version: 1.00.0030 - Toshiba Corporation) TOSHIBA System Settings (HKLM-x32\...\{05A55927-DB9B-4E26-BA44-828EBFF829F0}) (Version: 1.1.2.32001 - Toshiba Corporation) Toshiba TEMPRO (HKLM-x32\...\{F76F5214-83A8-4030-80C9-1EF57391D72A}) (Version: 4.5.0 - Toshiba Europe GmbH) TOSHIBA VIDEO PLAYER (HKLM\...\{FF07604E-C860-40E9-A230-E37FA41F103A}) (Version: 5.3.27.102 - Toshiba Corporation) Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.52a - Ghisler Software GmbH) Update for Skype for Business 2015 (KB3127934) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.STANDARD_{670823C5-9E0F-444C-A115-E8C4F37C5707}) (Version: - Microsoft) Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98 - WildTangent) Hidden WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.3.0 - WildTangent) WildTangent Games App (Toshiba Games) (x32 Version: 4.0.9.7 - WildTangent) Hidden WinRAR 5.21 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-2999985383-601964839-3280780558-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation) ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {34BDDEB7-7A7B-4F6E-B04C-BEA88265EA93} - System32\Tasks\Resolution+ Setting Task => C:\Program Files\Toshiba\TOSHIBA Smart View Utility\Plugins\ResolutionPlus\TosRegPermissionChg.exe [2013-08-28] (TODO: ) Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe Task: {506B8048-36FD-4633-95F9-EAB52DFC4EB9} - System32\Tasks\UMonitor Task => C:\Windows\SysWOW64\UMonit64.exe [2013-08-28] () Task: {539A6FBF-39F3-48BC-89ED-EB306785E302} - System32\Tasks\{820C451B-8EE7-479F-90EB-9A2AEF0CAC72} => pcalua.exe -a "C:\Program Files (x86)\WildGames\Uninstall.exe" Task: {5C34C2AF-DBCE-4AC9-B792-936912657A43} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {600E5C76-1214-40CC-BD8E-43C7C77D02EE} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {669BD6B5-78D8-4D4A-A0FA-8F21003BCDAF} - System32\Tasks\Toshiba\CommonNotifier => C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe [2013-07-19] (Toshiba Europe GmbH) Task: {79E361A9-DFCD-4ADB-807B-E883C3874ECF} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation) Task: {8AFDA025-FC2A-40BD-A93C-D3801312D9F4} - System32\Tasks\TOSHIBA\Service Station => C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [2013-07-31] (TOSHIBA Corporation) Task: {8CF43A50-82C0-46AB-B8AF-209615C12EA3} - System32\Tasks\{BAE9FAA0-2F1E-45DE-8E02-7C68BFAAAF19} => pcalua.exe -a C:\Users\MAG\AppData\Local\Temp\Temp1_MFP_and_Storage_Server_110221.zip\MFP_and_Storage_Server_Setup_091006_049rev2_WHQL.exe <==== UWAGA Task: {9B7B2DA9-8A57-4FE7-A4D6-E8C14FF700EF} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.) Task: {B1DB9855-7406-4155-AABC-E18A48B919E1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated) Task: {F542B8C2-310C-40C9-B13B-0B3235C199C2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-10-16] (Adobe Systems Incorporated) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) Shortcut: C:\Users\MAG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CDex\CDex Site.lnk -> hxxp://www.cdex.n3.net/ ==================== Załadowane moduły (filtrowane) ============== 2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2016-10-14 22:01 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2016-09-24 03:58 - 2016-08-01 13:54 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-09-21 20:12 - 2012-09-18 14:27 - 00192512 _____ () C:\WINDOWS\System32\zlhp1020.dll 2014-09-21 20:14 - 2012-09-18 14:27 - 00065024 _____ () C:\WINDOWS\system32\spool\PRTPROCS\x64\pphp1020.dll 2016-10-05 18:17 - 2016-10-05 18:17 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2016-10-05 18:17 - 2016-10-05 18:17 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2013-09-10 21:54 - 2013-09-10 21:54 - 00019792 _____ () C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe 2016-10-14 22:01 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll 2016-09-24 04:56 - 2016-09-24 04:56 - 01864384 _____ () C:\Users\MAG\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\amd64\ClientTelemetry.dll 2016-09-24 04:42 - 2016-09-24 04:42 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll 2016-11-09 10:53 - 2016-11-02 11:30 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll 2016-11-09 10:52 - 2016-11-02 11:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2016-11-09 10:52 - 2016-11-02 11:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2016-11-09 10:52 - 2016-11-02 11:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll 2016-11-09 10:52 - 2016-11-02 11:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2016-11-09 10:52 - 2016-11-02 11:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2013-11-19 11:28 - 2013-08-28 16:08 - 00053248 _____ () C:\Windows\SysWOW64\UMonit64.exe 2012-07-19 03:38 - 2012-07-19 03:38 - 00020904 _____ () C:\Program Files\TOSHIBA\Hotkey\SmoothView.dll 2016-12-07 17:54 - 2016-12-05 10:28 - 00104624 _____ () C:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe 2016-12-03 18:27 - 2016-12-03 18:27 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2016-12-03 18:27 - 2016-12-03 18:27 - 00178688 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2016-12-03 18:27 - 2016-12-03 18:28 - 41609728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2016-12-03 18:34 - 2016-12-03 18:34 - 00019456 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 2016-12-03 18:34 - 2016-12-03 18:34 - 20433408 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll 2016-09-13 07:57 - 2016-09-13 07:58 - 00680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll 2016-12-03 18:34 - 2016-12-03 18:34 - 01046528 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Sharing.dll 2016-12-03 18:34 - 2016-12-03 18:34 - 00353792 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Photos.Inking.dll 2016-11-29 13:35 - 2016-12-07 17:53 - 00568320 _____ () C:\Program Files (x86)\Common Files\Services\iThemes.dll 2016-06-28 00:19 - 2016-06-28 00:19 - 00865232 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\kpcengine.2.3.dll 2016-11-29 13:35 - 2016-11-28 06:42 - 00349184 _____ () c:\programdata\microsoft\identitycrl\ppcrluiex.dll 2016-11-08 09:54 - 2016-11-07 04:07 - 00346624 _____ () c:\programdata\microsoft\blend\14.0\1033\resourcecacher.dll 2011-01-10 16:15 - 2011-01-10 16:15 - 00434176 _____ () C:\Program Files (x86)\TP-LINK\MFP and Storage Server\PSMDLL.dll 2011-01-10 16:15 - 2011-01-10 16:15 - 00229376 _____ () C:\Program Files (x86)\TP-LINK\MFP and Storage Server\DCPDLL.dll 2011-01-10 16:15 - 2011-01-10 16:15 - 00086016 _____ () C:\Program Files (x86)\TP-LINK\MFP and Storage Server\ESTLogDLL.dll 2011-01-10 16:15 - 2011-01-10 16:15 - 00086016 _____ () C:\Program Files (x86)\TP-LINK\MFP and Storage Server\UNTPDLL.dll 2016-09-24 04:56 - 2016-09-24 04:56 - 01383616 _____ () C:\Users\MAG\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\ClientTelemetry.dll 2016-09-24 04:57 - 2016-09-24 04:57 - 00118976 _____ () C:\Users\MAG\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\FileSyncViews.dll 2013-11-19 11:08 - 2013-09-03 15:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) ==================== Powiązania plików (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Hosts - zawartość: =============================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2013-08-22 14:25 - 2016-12-05 21:38 - 00005831 ____A C:\WINDOWS\system32\Drivers\etc\hosts 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 ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-2999985383-601964839-3280780558-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\MAG\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper DNS Servers: 192.168.12.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [vm-monitoring-nb-session] => LPort=139 FirewallRules: [{28CE2551-AF7A-4A6B-8DF0-F97D17FA3F03}] => C:\ProgramData\Nosemay\Nosemay.exe FirewallRules: [{99DDCCDA-64A6-4FE4-9F2A-22D93B621ECD}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{14373A2D-B350-4D42-AE5E-84C454EE949F}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{55F5771A-B185-465B-96EE-06A508BAB38B}] => C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{52699B97-A048-45FA-8CEF-597EF8717E34}] => C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [UDP Query User{515A8369-2B5B-480D-9BA9-E19E5A7267F6}C:\totalcmd\totalcmd64.exe] => C:\totalcmd\totalcmd64.exe FirewallRules: [TCP Query User{87A348D3-8E77-4C29-AC43-C87A9DFD1ACA}C:\totalcmd\totalcmd64.exe] => C:\totalcmd\totalcmd64.exe FirewallRules: [UDP Query User{3A21571D-9C02-4D89-9C4B-D7559D2A3DA2}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [TCP Query User{09DEF83D-CDC8-4B4E-A172-B9FBDB35A38C}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{6F402D7E-66CA-4E4F-913D-B51BE37AEBB8}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{980FF8F0-E4EA-454D-8D8F-EBCCC6036BAF}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [UDP Query User{F4B5691C-ADB5-4A95-8FC1-7B169BD3DA6B}C:\program files (x86)\tp-link\mfp and storage server\mfp and storage server.exe] => C:\program files (x86)\tp-link\mfp and storage server\mfp and storage server.exe FirewallRules: [TCP Query User{FBD8886D-931E-4B7A-A3F8-ECB117D3B9B3}C:\program files (x86)\tp-link\mfp and storage server\mfp and storage server.exe] => C:\program files (x86)\tp-link\mfp and storage server\mfp and storage server.exe FirewallRules: [{2D3B2F91-4058-4C64-93C3-8334E9CA6D72}] => C:\Program Files (x86)\The Sims 4\Game\Bin\TS4.exe FirewallRules: [{5EACC6BB-AF26-4106-B67E-06EE9F521A03}] => C:\Program Files (x86)\The Sims 4\Game\Bin\TS4.exe FirewallRules: [UDP Query User{67787437-036E-42BF-98C7-34CB8880ADBA}C:\program files (x86)\tp-link\mfp and storage server\mfp and storage server.exe] => C:\program files (x86)\tp-link\mfp and storage server\mfp and storage server.exe FirewallRules: [TCP Query User{5DF39252-1451-4113-B1EC-B9DAA31C8544}C:\program files (x86)\tp-link\mfp and storage server\mfp and storage server.exe] => C:\program files (x86)\tp-link\mfp and storage server\mfp and storage server.exe FirewallRules: [{785DD33F-627F-46A2-8FAA-F52332B2D633}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{226FF22D-3731-4CBC-9595-C09F5FED33BA}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{EE255A17-3D31-4013-A0A2-3325EF70F3E5}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{CAC1976D-BB5A-4E24-BC93-EE346768E6EC}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{B761B7C6-A302-4B2E-98E1-10E7FBE86089}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{E0FCF889-8316-4D8B-924B-41AABCBF7558}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{1C1544F7-8682-4CE7-8258-34B171E2C76C}] => C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe FirewallRules: [{9F746F70-097D-4ADA-956A-8696DCA806B6}] => C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe FirewallRules: [{4128914B-9624-4E73-AB5C-C7B1C1794640}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{709EBA06-0297-48D3-9860-1F9AD7ECBE28}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{4021E1B0-5E08-4F52-B199-6E53D8BA4CF6}] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe FirewallRules: [{F14F2C26-EB35-4230-8FB7-6FA3FB1D13F3}] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe FirewallRules: [{66444B43-9F2A-4C14-AD33-281E810B69D5}] => C:\Program Files (x86)\Spotify\spotify.exe FirewallRules: [{95F39BCA-F2D0-432E-80A0-2FEFE52E57AB}] => C:\Program Files (x86)\Spotify\spotify.exe FirewallRules: [{69F3CE0E-5804-45B5-8777-084192011EEA}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{F3218870-472D-45CB-9640-D3E5B8DEC0E9}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{28DAE70F-F82C-42EB-BF2F-C608FC37AF9F}] => C:\Windows\explorer.exe FirewallRules: [{51C5DC05-4ADA-4553-98B9-4B938BBEDD2E}] => C:\Program Files\iTunes\iTunes.exe FirewallRules: [{2606A3D9-EF0C-4BD2-8D86-0500C706C8B1}] => C:\Program Files (x86)\Coldjob\Application\chrome.exe FirewallRules: [TCP Query User{4A0FFA52-48D4-4D72-90C3-BD52962368F3}C:\program files (x86)\bedhat\application\chrome.exe] => C:\program files (x86)\bedhat\application\chrome.exe FirewallRules: [UDP Query User{E534F20B-DB8C-497B-A754-E55646B75AAD}C:\program files (x86)\bedhat\application\chrome.exe] => C:\program files (x86)\bedhat\application\chrome.exe FirewallRules: [{F2A7A8C6-9F70-4AA2-AC97-F4F7F5C3784E}] => C:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe FirewallRules: [{45DC9544-ECC4-45DF-B79D-EB498CAF4001}] => C:\Program Files (x86)\Firefox\Firefox.exe ==================== Punkty Przywracania systemu ========================= 08-11-2016 10:31:14 Windows Update 28-11-2016 19:14:46 Zaplanowany punkt kontrolny 05-12-2016 21:34:49 Removed amuleC 06-12-2016 19:59:55 JRT Pre-Junkware Removal ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (12/07/2016 05:59:31 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: ctfmon.exe, wersja: 10.0.14393.0, sygnatura czasowa: 0x57899148 Nazwa modułu powodującego błąd: InputService.dll, wersja: 10.0.14393.206, sygnatura czasowa: 0x57dacf17 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x00057f66 Identyfikator procesu powodującego błąd: 0x2958 Godzina uruchomienia aplikacji powodującej błąd: 0x01d250aac8a9c41a Ścieżka aplikacji powodującej błąd: C:\WINDOWS\SysWoW64\ctfmon.exe Ścieżka modułu powodującego błąd: C:\WINDOWS\system32\InputService.dll Identyfikator raportu: baaa67ed-1a0e-4638-abf5-db5fa805aef4 Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error: (12/07/2016 05:54:51 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: firefox.exe, wersja: 45.0.1.5918, sygnatura czasowa: 0x56e8a989 Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0, sygnatura czasowa: 0x00000000 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x00000000 Identyfikator procesu powodującego błąd: 0x2554 Godzina uruchomienia aplikacji powodującej błąd: 0x01d250aa8f1ae8d7 Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\Mozilla Firefox\firefox.exe Ścieżka modułu powodującego błąd: unknown Identyfikator raportu: 5eaf22d7-44f6-430a-86a6-b0a602edb831 Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error: (12/07/2016 05:52:18 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: Event-ID 2001 Error: (12/07/2016 05:52:18 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: Event-ID 2001 Error: (12/07/2016 05:52:18 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: Event-ID 2001 Error: (12/06/2016 08:00:28 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się. Details: AddLegacyDriverFiles: Unable to back up image of binary Protokół LLDP (Link-Layer Discovery Protocol) firmy Microsoft. System Error: Odmowa dostępu. . Error: (12/06/2016 07:58:38 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: plugin-container.exe, wersja: 45.0.1.5918, sygnatura czasowa: 0x56e8b7df Nazwa modułu powodującego błąd: mozglue.dll, wersja: 45.0.1.5918, sygnatura czasowa: 0x56e8a981 Kod wyjątku: 0x80000003 Przesunięcie błędu: 0x0000f0ea Identyfikator procesu powodującego błąd: 0x27d8 Godzina uruchomienia aplikacji powodującej błąd: 0x01d24ff28fd1f80f Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe Ścieżka modułu powodującego błąd: C:\Program Files (x86)\Mozilla Firefox\mozglue.dll Identyfikator raportu: ddd8c650-a4be-448b-89f4-a6cc8e8eaf76 Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error: (12/06/2016 07:47:00 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: Event-ID 2001 Error: (12/06/2016 07:47:00 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: Event-ID 2001 Error: (12/06/2016 07:47:00 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: Event-ID 2001 Dziennik System: ============= Error: (12/07/2016 06:36:02 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: ZUZANNA) Description: 0x8000002a116\??\C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\S-1-5-21-2999985383-601964839-3280780558-1002-0-ntuser.dat Error: (12/07/2016 06:35:55 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: ZUZANNA) Description: 0x8000002a116\??\C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\S-1-5-21-2999985383-601964839-3280780558-1002-0-ntuser.dat Error: (12/07/2016 06:33:10 PM) (Source: DCOM) (EventID: 10010) (User: ZARZĄDZANIE NT) Description: Serwer {784E29F4-5EBE-4279-9948-1E8FE941646D} nie zarejestrował się w modelu DCOM w wymaganym czasie. Error: (12/07/2016 06:30:09 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT) Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} i identyfikatorem aplikacji APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} użytkownikowi ZARZĄDZANIE NT\USŁUGA LOKALNA o identyfikatorze zabezpieczeń SID (S-1-5-19) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. Error: (12/07/2016 06:30:09 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT) Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} i identyfikatorem aplikacji APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} użytkownikowi ZARZĄDZANIE NT\USŁUGA LOKALNA o identyfikatorze zabezpieczeń SID (S-1-5-19) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. Error: (12/07/2016 06:30:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Convxxxx z powodu następującego błędu: Nie można odnaleźć określonego pliku. Error: (12/07/2016 06:09:12 PM) (Source: DCOM) (EventID: 10010) (User: ZARZĄDZANIE NT) Description: Serwer {784E29F4-5EBE-4279-9948-1E8FE941646D} nie zarejestrował się w modelu DCOM w wymaganym czasie. Error: (12/07/2016 06:07:55 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: ZUZANNA) Description: 0x8000002a116\??\C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\S-1-5-21-2999985383-601964839-3280780558-1002-0-ntuser.dat Error: (12/07/2016 06:07:47 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: ZUZANNA) Description: 0x8000002a116\??\C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\S-1-5-21-2999985383-601964839-3280780558-1002-0-ntuser.dat Error: (12/07/2016 06:06:13 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT) Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} i identyfikatorem aplikacji APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} użytkownikowi ZARZĄDZANIE NT\USŁUGA LOKALNA o identyfikatorze zabezpieczeń SID (S-1-5-19) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. CodeIntegrity: =================================== Date: 2016-12-05 21:31:14.453 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Elex-tech\YAC\iSafeSrvMon64.dll that did not meet the Windows signing level requirements. Date: 2016-12-05 17:33:55.013 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Elex-tech\YAC\iSafeSrvMon64.dll that did not meet the Windows signing level requirements. Date: 2016-12-05 17:12:58.002 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Elex-tech\YAC\iSafeSrvMon64.dll that did not meet the Windows signing level requirements. Date: 2016-12-05 17:06:37.680 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Elex-tech\YAC\iSafeSrvMon64.dll that did not meet the Windows signing level requirements. Date: 2016-12-05 16:59:42.773 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Elex-tech\YAC\iSafeSrvMon64.dll that did not meet the Windows signing level requirements. Date: 2016-12-05 16:54:29.895 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Elex-tech\YAC\iSafeSrvMon64.dll that did not meet the Windows signing level requirements. Date: 2016-12-05 16:49:19.842 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Elex-tech\YAC\iSafeSrvMon64.dll that did not meet the Windows signing level requirements. Date: 2016-12-05 14:09:43.222 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Elex-tech\YAC\iSafeSrvMon64.dll that did not meet the Windows signing level requirements. Date: 2016-12-05 13:58:02.687 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Elex-tech\YAC\iSafeSrvMon64.dll that did not meet the Windows signing level requirements. Date: 2016-12-05 13:19:21.129 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Elex-tech\YAC\iSafeSrvMon64.dll that did not meet the Windows signing level requirements. ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz Procent pamięci w użyciu: 15% Całkowita pamięć fizyczna: 16275.27 MB Dostępna pamięć fizyczna: 13793.46 MB Całkowita pamięć wirtualna: 18707.27 MB Dostępna pamięć wirtualna: 16009.03 MB ==================== Dyski ================================ Drive c: (TI31202900A) (Fixed) (Total:686.41 GB) (Free:360.07 GB) NTFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (Size: 698.6 GB) (Disk ID: 00000000) Partition: GPT. ==================== Koniec Addition.txt ============================