Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 18-04-2022 01 Uruchomiony przez Intel (18-04-2022 17:55:55) Uruchomiony z C:\Users\Intel\Desktop\dfs Microsoft Windows 10 Pro Wersja 21H2 19044.1645 (X64) (2022-04-17 20:30:15) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= (Załączenie wejścia w fixlist spowoduje jego usunięcie.) Administrator (S-1-5-21-3421411951-854567962-3898249824-500 - Administrator - Disabled) Gość (S-1-5-21-3421411951-854567962-3898249824-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3421411951-854567962-3898249824-1003 - Limited - Enabled) Intel (S-1-5-21-3421411951-854567962-3898249824-1001 - Administrator - Enabled) => C:\Users\Intel Konto domyślne (S-1-5-21-3421411951-854567962-3898249824-503 - Limited - Disabled) polic (S-1-5-21-3421411951-854567962-3898249824-1005 - Administrator - Enabled) => C:\Users\polic Ryszard (S-1-5-21-3421411951-854567962-3898249824-1006 - Limited - Enabled) => C:\Users\Ryszard WDAGUtilityAccount (S-1-5-21-3421411951-854567962-3898249824-504 - Limited - Disabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) Adobe Reader XI - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.00 - Adobe Systems Incorporated) Asystent aktualizacji do systemu Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.23214 - Microsoft Corporation) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.7.6499 - CDBurnerXP) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden DriverPackage (HKLM-x32\...\{214A6B58-6EB3-4251-82DC-86B28ADC9927}) (Version: 1.00.0000 - 10moons) EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation) Epson Software Updater (HKLM-x32\...\{60A3CB9F-4429-4C7A-AA97-77CC4FE10671}) (Version: 4.4.9 - Seiko Epson Corporation) EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION) GOM Player (HKLM-x32\...\GOM Player) (Version: 2.3.36.5297 - GOM & Company) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 100.0.4896.127 - Google LLC) LSI HDA Modem (HKLM\...\LSI Soft Modem) (Version: 2.2.100 - LSI Corporation) Malwarebytes version 4.5.7.186 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.5.7.186 - Malwarebytes) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 100.0.1185.44 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-3421411951-854567962-3898249824-1001\...\OneDriveSetup.exe) (Version: 22.055.0313.0001 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-3421411951-854567962-3898249824-1005\...\OneDriveSetup.exe) (Version: 18.131.0701.0004 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-3421411951-854567962-3898249824-1006\...\OneDriveSetup.exe) (Version: 22.045.0227.0004 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Teams (HKU\S-1-5-21-3421411951-854567962-3898249824-1001\...\Teams) (Version: 1.3.00.28779 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mobile Broadband HL Service (HKLM-x32\...\Mobile Broadband HL Service) (Version: 22.001.26.01.03 - Huawei Technologies Co.,Ltd) Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 68.4.2 - Mozilla) Mozilla Thunderbird (x86 pl) (HKLM-x32\...\Mozilla Thunderbird 91.3.2 (x86 pl)) (Version: 91.3.2 - Mozilla) Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.5.9 - Notepad++ Team) Odinstaluj drukarkę EPSON XP-700 Series (HKLM\...\EPSON XP-700 Series) (Version: - SEIKO EPSON Corporation) Opera Stable 85.0.4341.60 (HKLM-x32\...\Opera 85.0.4341.60) (Version: 85.0.4341.60 - Opera Software) PCMSCAN (HKLM-x32\...\{979B748C-6095-4A5A-BC7B-C15E720529D6}) (Version: 2.4.12 - Palmer Performance Engineering) PINs 4 (HKLM-x32\...\PINs 4) (Version: 4.50.0.86 - Mirek Wojtowicz) ProScan (HKLM-x32\...\{3AB16E9C-C582-4BF0-A76C-37B18ED78B72}) (Version: 5.9 - Gore Research) Roblox Player for Intel (HKU\S-1-5-21-3421411951-854567962-3898249824-1001\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version: - Roblox Corporation) Roblox Player for polic (HKU\S-1-5-21-3421411951-854567962-3898249824-1005\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version: - Roblox Corporation) Roblox Studio for polic (HKU\S-1-5-21-3421411951-854567962-3898249824-1005\...\{2922D6F1-2865-4EFA-97A9-94EEAB3AFA14}) (Version: - Roblox Corporation) RogueKiller version 15.4.0.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 15.4.0.0 - Adlice Software) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.1.6.2 - Synaptics Incorporated) TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation) Universal Adb Driver (HKLM-x32\...\{C0E08D8D-6076-4117-B644-2AF34F35B757}) (Version: 1.0.4 - ClockworkMod) Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{8F2D6CEB-BC98-4B69-A5C1-78BED238FE77}) (Version: 2.71.0.0 - Microsoft Corporation) Hidden Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{0746492E-47B6-4251-940C-44462DFD74BB}) (Version: 2.55.0.0 - Microsoft Corporation) UpdateAssistant (HKLM\...\{76A22428-2400-4521-96AF-7AC4A6174CA5}) (Version: 1.25.0.0 - Microsoft Corporation) Hidden USB TV Box (HKLM-x32\...\{EEAD0BE6-2640-4F22-A27A-8370EF12B62D}) (Version: 5.0 - USB TV Box) VauxCheck from Gendan (HKLM-x32\...\{3E0E103E-F00C-4E31-A568-5A07BFC6B93D}_is1) (Version: - Gendan Limited) VLC media player (HKLM\...\VLC media player) (Version: 3.0.4 - VideoLAN) VueScan x64 (HKLM\...\VueScan x64) (Version: - Hamrick Software) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) WinRAR 5.40 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH) Packages: ========= Cortana -> C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_1.1911.21713.0_x64__8wekyb3d8bbwe [2022-04-18] (Microsoft Corporation) Dodatek Aparat multimediów dla aplikacji Zdjęcia -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-06-26] (Microsoft Corporation) Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_2.4.2070.0_x64__rz1tebttyb220 [2019-09-12] (Dolby Laboratories) Epson Print and Scan -> C:\Program Files\WindowsApps\SEIKOEPSONCORPORATION.EpsonPrintandScan_1.1.0.0_x64__ezaqdwkaef94e [2018-05-24] (SEIKO EPSON CORPORATION) Facebook -> C:\Program Files\WindowsApps\FACEBOOK.FACEBOOK_2021.927.0.0_x86__8xx8rvfyw5nnt [2022-04-17] (Facebook Inc) Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1807.9.0_x64__8wekyb3d8bbwe [2018-08-15] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2022-04-17] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2022-04-17] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2022-04-17] (Microsoft Corporation) [MS Ad] Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.98.1805.0_x64__mcm4njqhnhss8 [2022-02-20] (Netflix, Inc.) Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c [2020-02-06] (Skype) Speedtest by Ookla -> C:\Program Files\WindowsApps\Ookla.SpeedtestbyOokla_1.15.163.0_x64__43tkc6nmykmb6 [2022-04-17] (Ookla) ==================== Niestandardowe rejestracje CLSID (filtrowane): ============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-3421411951-854567962-3898249824-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Intel\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3421411951-854567962-3898249824-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\Intel\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2018-10-14] (Notepad++ -> ) ContextMenuHandlers1: [KillCopy] -> {A5C2457A-87BC-324E-8124-0025DC10AA04} => C:\Program Files (x86)\KillSoft\KillCopy\killcopy_amd64.dll [2006-06-11] (Killer{R}) [Brak podpisu cyfrowego] ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-09-19] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-09-19] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers2: [KillCopy] -> {A5C2457A-87BC-324E-8124-0025DC10AA04} => C:\Program Files (x86)\KillSoft\KillCopy\killcopy_amd64.dll [2006-06-11] (Killer{R}) [Brak podpisu cyfrowego] ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-04-17] (Malwarebytes Corporation -> Malwarebytes) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll [2012-11-26] (Karl Sabo -> Intel Corporation) ContextMenuHandlers6: [KillCopy] -> {A5C2457A-87BC-324E-8124-0025DC10AA04} => C:\Program Files (x86)\KillSoft\KillCopy\killcopy_amd64.dll [2006-06-11] (Killer{R}) [Brak podpisu cyfrowego] ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-04-17] (Malwarebytes Corporation -> Malwarebytes) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-09-19] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-09-19] (win.rar GmbH -> Alexander Roshal) ==================== Codecs (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Drivers32: [vidc.xvid] => C:\Windows\SysWOW64\xvid.dll [425984 2012-05-22] () [Brak podpisu cyfrowego] ==================== Skróty & WMI ======================== ==================== Załadowane moduły (filtrowane) ============= 2018-05-24 21:39 - 2012-11-12 15:15 - 000558592 _____ (SEIKO EPSON CORPORATION) [Brak podpisu cyfrowego] C:\WINDOWS\System32\enppmon.dll 2018-05-24 21:39 - 2012-10-22 17:19 - 000219648 _____ (SEIKO EPSON CORPORATION) [Brak podpisu cyfrowego] C:\WINDOWS\System32\enpres.dll ==================== Alternate Data Streams (filtrowane) ======== ==================== Tryb awaryjny (filtrowane) ================== ==================== Powiązania plików (filtrowane) ================= ==================== Internet Explorer (filtrowane) ========== BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) ==================== Hosts - zawartość: ========================= (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2017-04-14 16:59 - 2017-04-14 16:57 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts ==================== Inne obszary =========================== (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-3421411951-854567962-3898249824-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\windows\img0.jpg HKU\S-1-5-21-3421411951-854567962-3898249824-1005\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg HKU\S-1-5-21-3421411951-854567962-3898249824-1006\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == ==================== Reguły Zapory systemu Windows (filtrowane) ================ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Punkty Przywracania systemu ========================= ==================== Wadliwe urządzenia w Menedżerze urządzeń ============ Name: Podstawowe urządzenie systemowe Description: Podstawowe urządzenie systemowe Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Błędy w Dzienniku zdarzeń: ======================== Dziennik Aplikacja: ================== Dziennik System: ============= Error: (04/18/2022 05:44:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi McAfee WebAdvisor z powodu następującego błędu: Nie można odnaleźć określonego pliku. Error: (04/18/2022 05:44:47 PM) (Source: NETLOGON) (EventID: 3095) (User: ) Description: Ten komputer jest skonfigurowany jako członek grupy roboczej, a nie domeny. W tej konfiguracji usługa Netlogon nie musi być uruchamiana. Error: (04/18/2022 05:44:11 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Usługa Program antywirusowy Microsoft Defender zakończyła działanie; wystąpił następujący błąd: %%2147943515 = Trwa proces zamykania systemu. Error: (04/18/2022 05:01:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Mobile Broadband HL Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (04/18/2022 05:01:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa HP Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (04/18/2022 04:43:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi McAfee WebAdvisor z powodu następującego błędu: Nie można odnaleźć określonego pliku. Error: (04/18/2022 04:43:16 PM) (Source: NETLOGON) (EventID: 3095) (User: ) Description: Ten komputer jest skonfigurowany jako członek grupy roboczej, a nie domeny. W tej konfiguracji usługa Netlogon nie musi być uruchamiana. ==================== Statystyki pamięci =========================== BIOS: Hewlett-Packard 68CCU Ver. F.11 11/25/2010 Płyta główna: Hewlett-Packard 172A Procesor: Intel(R) Core(TM) i7 CPU M 620 @ 2.67GHz Procent pamięci w użyciu: 92% Całkowita pamięć fizyczna: 3887.38 MB Dostępna pamięć fizyczna: 306.67 MB Całkowita pamięć wirtualna: 5066.81 MB Dostępna pamięć wirtualna: 653.95 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:111.19 GB) (Free:64.13 GB) NTFS \\?\Volume{b2f2c775-0000-0000-0000-100000000000}\ (Zastrzeżone przez system) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==================== MBR & Tablica partycji ==================== ========================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 111.8 GB) (Disk ID: B2F2C775) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=111.2 GB) - (Type=07 NTFS) ==================== Koniec Addition.txt =======================