Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 09-02-2023 01 Uruchomiony przez jm-k2 (09-02-2023 20:37:38) Uruchomiony z C:\Users\jm-k2\Downloads Microsoft Windows 11 Home Wersja 22H2 22621.1194 (X64) (2022-11-13 15:51:25) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= (Załączenie wejścia w fixlist spowoduje jego usunięcie.) Administrator (S-1-5-21-1400203782-2325307173-725141657-500 - Administrator - Disabled) Gość (S-1-5-21-1400203782-2325307173-725141657-501 - Limited - Disabled) jm-k2 (S-1-5-21-1400203782-2325307173-725141657-1001 - Administrator - Enabled) => C:\Users\jm-k2 Konto domyślne (S-1-5-21-1400203782-2325307173-725141657-503 - Limited - Disabled) WDAGUtilityAccount (S-1-5-21-1400203782-2325307173-725141657-504 - Limited - Disabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) DaVinci Resolve (HKLM\...\{EAEF9EEF-AE21-49E8-9D43-402C43E5F9B4}) (Version: 16.2.2012 - Blackmagic Design) DaVinci Resolve Keyboards (HKLM\...\{04F776FB-37A2-4116-84F2-6CF3D731999D}) (Version: 1.0.0.0 - Blackmagic Design) DaVinci Resolve Panels (HKLM\...\{567706B7-1501-43BC-81AB-C7E306B40C73}) (Version: 1.3.2.0 - Blackmagic Design) HP Audio Switch (HKLM-x32\...\{3A5141D4-47DB-4302-9B1C-272BE585BC8A}) (Version: 1.0.179.0 - HP Inc.) HP Connection Optimizer (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 2.0.17.0 - HP Inc.) HP Deskjet 1510 series — podstawowe oprogramowanie urządzenia (HKLM\...\{021AA127-6B6D-46EF-9697-5089FA686FB6}) (Version: 32.2.188.47710 - Hewlett-Packard Co.) HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.) Laboratorium. Filmy i doświadczenia interaktywne 1.0.0 (only current user) (HKU\S-1-5-21-1400203782-2325307173-725141657-1001\...\084322be-d14f-5a87-95cb-e6dfe98d961e) (Version: 1.0.0 - WSiP) Microsoft Access MUI (Polish) 2013 (HKLM\...\{90150000-0015-0415-1000-0000000FF1CE}) (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft DCF MUI (Polish) 2013 (HKLM\...\{90150000-0090-0415-1000-0000000FF1CE}) (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 109.0.1518.78 - Microsoft Corporation) Microsoft Excel MUI (Polish) 2013 (HKLM\...\{90150000-0016-0415-1000-0000000FF1CE}) (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Groove MUI (Polish) 2013 (HKLM\...\{90150000-00BA-0415-1000-0000000FF1CE}) (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft InfoPath MUI (Polish) 2013 (HKLM\...\{90150000-0044-0415-1000-0000000FF1CE}) (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Lync MUI (Polish) 2013 (HKLM\...\{90150000-012B-0415-1000-0000000FF1CE}) (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Office 32-bit Components 2013 (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Korrekturhilfen 2013 - Deutsch (HKLM\...\{90150000-001F-0407-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office OSM MUI (Polish) 2013 (HKLM\...\{90150000-00E1-0415-1000-0000000FF1CE}) (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Office OSM UX MUI (Polish) 2013 (HKLM\...\{90150000-00E2-0415-1000-0000000FF1CE}) (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2013 (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation) Microsoft Office Proofing (Polish) 2013 (HKLM\...\{90150000-002C-0415-1000-0000000FF1CE}) (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2013 - English (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Shared 32-bit MUI (Polish) 2013 (HKLM\...\{90150000-00C1-0415-1000-0000000FF1CE}) (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (Polish) 2013 (HKLM\...\{90150000-006E-0415-1000-0000000FF1CE}) (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft OneDrive (HKU\S-1-5-21-1400203782-2325307173-725141657-1001\...\OneDriveSetup.exe) (Version: 23.007.0109.0004 - Microsoft Corporation) Microsoft OneNote MUI (Polish) 2013 (HKLM\...\{90150000-00A1-0415-1000-0000000FF1CE}) (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Outlook MUI (Polish) 2013 (HKLM\...\{90150000-001A-0415-1000-0000000FF1CE}) (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft PowerPoint MUI (Polish) 2013 (HKLM\...\{90150000-0018-0415-1000-0000000FF1CE}) (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Publisher MUI (Polish) 2013 (HKLM\...\{90150000-0019-0415-1000-0000000FF1CE}) (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Microsoft Teams (HKU\S-1-5-21-1400203782-2325307173-725141657-1001\...\Teams) (Version: 1.5.00.33362 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{EF9EBC42-6969-45CE-A8D2-B9249B00C838}) (Version: 5.69.0.0 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.24215 (HKLM-x32\...\{69BCE4AC-9572-3271-A2FB-9423BDA36A43}) (Version: 14.0.24215 - Microsoft Corporation) Hidden Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.24215 (HKLM-x32\...\{BBF2AC74-720C-3CB3-8291-5E34039232FA}) (Version: 14.0.24215 - Microsoft Corporation) Hidden Microsoft Visual C++ 2017 Redistributable (x64) - 14.16.27012 (HKLM-x32\...\{427ada59-85e7-4bc8-b8d5-ebf59db60423}) (Version: 14.16.27012.6 - Microsoft Corporation) Microsoft Visual C++ 2017 X64 Additional Runtime - 14.16.27012 (HKLM\...\{DF5B1280-A057-4536-9D03-3BCAA0D4C6F0}) (Version: 14.16.27012 - Microsoft Corporation) Hidden Microsoft Visual C++ 2017 X64 Minimum Runtime - 14.16.27012 (HKLM\...\{3ECD99CB-EDAF-45DA-AD9C-2C4875F375FB}) (Version: 14.16.27012 - Microsoft Corporation) Hidden Microsoft Word MUI (Polish) 2013 (HKLM\...\{90150000-001B-0415-1000-0000000FF1CE}) (Version: 15.0.4433.1507 - Microsoft Corporation) Hidden Mozilla Firefox (x64 pl) (HKLM\...\Mozilla Firefox 109.0.1 (x64 pl)) (Version: 109.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 81.0.1 - Mozilla) Narzędzia sprawdzające pakietu Microsoft Office 2013 — polski (HKLM\...\{90150000-001F-0415-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Opera Stable 94.0.4606.76 (HKU\S-1-5-21-1400203782-2325307173-725141657-1001\...\Opera 94.0.4606.76) (Version: 94.0.4606.76 - Opera Software) Sprawdzanie kondycji komputera z systemem Windows (HKLM\...\{41E85393-7ED3-4C54-AC25-51F8CDF39CDF}) (Version: 3.6.2204.08001 - Microsoft Corporation) Środowisko uruchomieniowe Microsoft Edge WebView2 (HKLM-x32\...\Microsoft EdgeWebView) (Version: 109.0.1518.78 - Microsoft Corporation) TomTom MyDrive Connect 4.2.13.4348 (HKLM-x32\...\MyDriveConnect) (Version: 4.2.13.4348 - TomTom) Vivaldi (HKU\S-1-5-21-1400203782-2325307173-725141657-1001\...\Vivaldi) (Version: 3.3.2022.47 - Vivaldi Technologies AS.) WinRAR 5.90 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.90.0 - win.rar GmbH) Zoom (HKU\S-1-5-21-1400203782-2325307173-725141657-1001\...\ZoomUMX) (Version: 5.8.7 (2058) - Zoom Video Communications, Inc.) Packages: ========= B&O Audio Control -> C:\Program Files\WindowsApps\AD2F1837.BOAudioControl_1.15.226.0_x64__v10z8vjag6ke6 [2023-02-09] (HP Inc.) Clipchamp -> C:\Program Files\WindowsApps\Clipchamp.Clipchamp_2.5.15.0_neutral__yxz26nhyzhsrt [2023-02-09] (Microsoft Corp.) Dodatek Aparat multimediów dla aplikacji Zdjęcia -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-11-08] (Microsoft Corporation) ELAN Touchpad Setting -> C:\Program Files\WindowsApps\ELANMicroelectronicsCorpo.ELANTouchpadSetting_11.2.63.0_x64__stws0m115j6hg [2023-01-19] (ELAN Microelectronics Corporation) Energy Star -> C:\Program Files\WindowsApps\AD2F1837.HPInc.EnergyStar_1.2.0.0_x64__v10z8vjag6ke6 [2023-01-19] (HP Inc.) HP CoolSense -> C:\Program Files\WindowsApps\AD2F1837.HPCoolSense_1.0.6.0_x64__v10z8vjag6ke6 [2019-12-20] (HP Inc.) HP JumpStarts -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStarts_1.10.1627.0_x64__v10z8vjag6ke6 [2022-08-08] (HP Inc.) HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_2.1.0.0_x64__v10z8vjag6ke6 [2023-01-16] (HP Inc.) HP Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.1.54.0_x64__v10z8vjag6ke6 [2022-12-11] (HP Inc.) HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_142.3.139.0_x64__v10z8vjag6ke6 [2023-01-30] (HP Inc.) HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.23.20.0_x64__v10z8vjag6ke6 [2023-01-19] (HP Inc.) HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.3.2.0_x64__v10z8vjag6ke6 [2022-08-16] (HP Inc.) Intel® Graphics Control Panel -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsControlPanel_3.3.0.0_x64__8j3eq9eme6ctt [2021-03-23] (INTEL CORP) Intel® Optane™ Memory and Storage Management -> C:\Program Files\WindowsApps\AppUp.IntelOptaneMemoryandStorageManagement_18.1.1037.0_x64__8j3eq9eme6ctt [2022-12-11] (INTEL CORP) Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-02-12] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-02-12] (Microsoft Corporation) [MS Ad] Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.39.0_x64__8wekyb3d8bbwe [2023-01-04] (Microsoft Corp.) Microsoft Mahjong -> C:\Program Files\WindowsApps\Microsoft.MicrosoftMahjong_4.2.9291.0_x64__8wekyb3d8bbwe [2022-10-14] (Microsoft Studios) [MS Ad] Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_53.10114.505.0_x64__8wekyb3d8bbwe [2023-01-22] (Microsoft Corporation) ms-resource://MicrosoftCorporationII.QuickAssist/resources/APP_WINDOW_NAME -> C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.16.0_x64__8wekyb3d8bbwe [2023-02-02] (Microsoft Corp.) ms-resource:AppStoreName -> C:\Program Files\WindowsApps\Microsoft.AV1VideoExtension_1.1.52851.0_x64__8wekyb3d8bbwe [2022-12-11] (Microsoft Corporation) ms-resource:AppStoreName -> C:\Program Files\WindowsApps\Microsoft.RawImageExtension_2.1.40041.0_x64__8wekyb3d8bbwe [2023-01-25] (Microsoft Corporation) ms-resource:AppxManifest_DisplayName -> C:\Windows\SystemApps\Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy [2022-11-13] (Microsoft Corporation) ms-resource:gameName -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleSolitaire_7.4.14.0_x64__kx24dqmazqk8j [2022-12-11] (Random Salad Games LLC) ms-resource:OEMAppName -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_23.4.5.0_x64__xbfy0k16fey96 [2023-02-09] (Dropbox Inc.) ms-resource:System_Item_Title_IntelGraphicsControlPanel -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.4478.0_x64__8j3eq9eme6ctt [2023-02-09] (INTEL CORP) [Startup Task] Photos Media Add-On (Internal) -> C:\Program Files\WindowsApps\Microsoft.PhotosDLCMediaEngineInternal_2017.39101.64310.0_x64__8wekyb3d8bbwe [2023-01-10] (Microsoft Corporation) Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.15.12020.0_x64__8wekyb3d8bbwe [2023-02-09] (Microsoft Studios) [MS Ad] WiFi Analyzer -> C:\Program Files\WindowsApps\19965MATTHAFNER.WIFIANALYZER_2.6.1.0_x64__gs5k5vmxr2ste [2023-01-19] (Matt Hafner) Windows Feature Experience Pack -> C:\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy [2023-01-12] (Microsoft Windows) ==================== Niestandardowe rejestracje CLSID (filtrowane): ============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-1400203782-2325307173-725141657-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\jm-k2\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.22304.2\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1400203782-2325307173-725141657-1001_Classes\CLSID\{BCA9D37C-CA60-4160-9115-97A00F24702D}\localserver32 -> C:\Users\jm-k2\AppData\Local\Vivaldi\Application\3.3.2022.47\notification_helper.exe (Vivaldi Technologies AS -> Vivaldi Technologies AS) CustomCLSID: HKU\S-1-5-21-1400203782-2325307173-725141657-1001_Classes\CLSID\{D3E34B21-9D75-101A-8C3D-00AA001A1652}\localserver32 -> C:\Program Files\WindowsApps\Microsoft.Paint_11.2210.4.0_x64__8wekyb3d8bbwe\PaintApp\mspaint.exe () [Brak podpisu cyfrowego] ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-03-30] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-03-30] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-03-30] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-03-30] (win.rar GmbH -> Alexander Roshal) ==================== Codecs (filtrowane) ==================== ==================== Skróty & WMI ======================== ==================== Załadowane moduły (filtrowane) ============= 2022-12-05 15:56 - 2022-12-05 15:56 - 000138240 _____ () [Brak podpisu cyfrowego] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.IWs06dcaa36#\d88cff7ad7397bb4c9f8a086c4cf7f64\Interop.IWshRuntimeLibrary.ni.dll 2023-01-30 13:13 - 2023-01-30 13:13 - 000134656 _____ (hardcodet.net) [Brak podpisu cyfrowego] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Hardcodet.W6cab32f3#\64af724d5be876a6563c5e0919be5835\Hardcodet.Wpf.TaskbarNotification.ni.dll 2019-12-20 15:38 - 2019-12-20 15:38 - 011715072 _____ (HP Inc.) [Brak podpisu cyfrowego] C:\Program Files\WindowsApps\AD2F1837.HPCoolSense_1.0.6.0_x64__v10z8vjag6ke6\CoolSenseUwp.dll 2019-12-20 15:38 - 2019-12-20 15:38 - 000013312 _____ (HP Inc.) [Brak podpisu cyfrowego] C:\Program Files\WindowsApps\AD2F1837.HPCoolSense_1.0.6.0_x64__v10z8vjag6ke6\NativeRpcClient.dll 2020-07-03 19:12 - 2020-07-03 19:12 - 000014336 _____ (HP Inc.) [Brak podpisu cyfrowego] C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.3.2.0_x64__v10z8vjag6ke6\SystemEventUtility\NativeRpcClient.DLL 2023-01-30 13:13 - 2023-01-30 13:13 - 001701376 _____ (Mark Heath & Contributors) [Brak podpisu cyfrowego] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\NAudio\1d21bd50951a442460b2b5b1cfc33dbd\NAudio.ni.dll 2023-01-30 13:13 - 2023-01-30 13:13 - 003060736 _____ (Newtonsoft) [Brak podpisu cyfrowego] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Newtonsoft.Json\3e3fbbfee4455309cf0e9a066e2e49e6\Newtonsoft.Json.ni.dll 2023-01-30 13:13 - 2023-01-30 13:13 - 000793088 _____ (The Apache Software Foundation) [Brak podpisu cyfrowego] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\log4net\15d455dad421c0ae1050f81312f21657\log4net.ni.dll ==================== Alternate Data Streams (filtrowane) ======== ==================== Tryb awaryjny (filtrowane) ================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HidSpiCx.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TextInputManagementService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{5099944A-F6B9-4057-A056-8C550228544C} => ""="Memory" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{5099944A-F6B9-4057-A056-8C550228544C} => "SafeBootDrivers"="1" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\HidSpiCx.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TextInputManagementService => ""="Service" ==================== Powiązania plików (filtrowane) ================= ==================== Internet Explorer (filtrowane) ========== BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation -> Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation) BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2023-01-10] (HP Inc. -> HP Inc.) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2023-01-10] (HP Inc. -> HP Inc.) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation) ==================== Hosts - zawartość: ========================= (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2019-03-19 05:49 - 2019-03-19 05:49 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts ==================== Inne obszary =========================== (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-1400203782-2325307173-725141657-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\windows\img0.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Załączenie wejścia w fixlist spowoduje jego usunięcie.) HKU\S-1-5-21-1400203782-2325307173-725141657-1001\...\StartupApproved\StartupFolder: => "Wysyłanie do programu OneNote.lnk" HKU\S-1-5-21-1400203782-2325307173-725141657-1001\...\StartupApproved\StartupFolder: => "Powiadomienia monitorowania tuszu - HP Deskjet 1510 series.lnk" HKU\S-1-5-21-1400203782-2325307173-725141657-1001\...\StartupApproved\StartupFolder: => "desktop.ini.lnk" HKU\S-1-5-21-1400203782-2325307173-725141657-1001\...\StartupApproved\Run: => "OneDrive" ==================== Reguły Zapory systemu Windows (filtrowane) ================ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [UDP Query User{CC09CFD0-80D0-4DC8-97F7-3ACE7B677B53}C:\program files (x86)\age of empires 2 hd\launcher.exe] => (Allow) C:\program files (x86)\age of empires 2 hd\launcher.exe => Brak pliku FirewallRules: [TCP Query User{C5F27F22-FA39-41FC-9BBE-CA28BD796BA7}C:\program files (x86)\age of empires 2 hd\launcher.exe] => (Allow) C:\program files (x86)\age of empires 2 hd\launcher.exe => Brak pliku FirewallRules: [{7FC6ED13-B100-4D28-8574-E364260194AF}] => (Allow) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe (TomTom International B.V. -> TomTom) FirewallRules: [UDP Query User{84A97E02-DAEF-4CDB-922C-0ECCC3788F75}C:\users\jm-k2\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\jm-k2\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [TCP Query User{046FEFCF-20E5-4D04-AC4B-EC08BF22BE5F}C:\users\jm-k2\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\jm-k2\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [UDP Query User{D936EDC3-D764-4C26-A640-F6E56A78C0B1}C:\users\jm-k2\appdata\local\microsoft\teams\current\teams.exe] => (Block) C:\users\jm-k2\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [TCP Query User{52EFF7A9-0E88-43CE-ABF5-5B2B3011B9D6}C:\users\jm-k2\appdata\local\microsoft\teams\current\teams.exe] => (Block) C:\users\jm-k2\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [UDP Query User{757B70EF-DCC5-42EC-908C-0B3EE6A7DF7F}C:\users\jm-k2\appdata\local\programs\opera\opera.exe] => (Block) C:\users\jm-k2\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [TCP Query User{40F40CFF-AC55-44EE-9A4E-713356DE6F07}C:\users\jm-k2\appdata\local\programs\opera\opera.exe] => (Block) C:\users\jm-k2\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [{04D1B96D-DE27-4646-8C8D-F9B15977A392}] => (Allow) C:\Users\jm-k2\AppData\Roaming\uTorrent Web\utweb.exe => Brak pliku FirewallRules: [{97594FAF-2B55-42C7-9473-C6D97D324323}] => (Allow) C:\Users\jm-k2\AppData\Roaming\uTorrent Web\utweb.exe => Brak pliku FirewallRules: [UDP Query User{CD2A35FE-5B03-4000-9666-731ACC3346C4}C:\users\jm-k2\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\jm-k2\appdata\roaming\utorrent\utorrent.exe => Brak pliku FirewallRules: [TCP Query User{99C8576D-7F6F-4D2B-B29C-CE284A4EE14D}C:\users\jm-k2\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\jm-k2\appdata\roaming\utorrent\utorrent.exe => Brak pliku FirewallRules: [{9FB3412B-9D50-4345-9B39-6551A10808CC}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{DE84541B-A530-4FC9-B2DE-D86225D24E12}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [TCP Query User{A06BD9F1-2B9E-4008-8A45-B9F486B22D9C}C:\users\jm-k2\appdata\local\microsoft\teams\current\teams.exe] => (Block) C:\users\jm-k2\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [UDP Query User{8F9F233C-4FE8-4025-905C-BE0246495121}C:\users\jm-k2\appdata\local\microsoft\teams\current\teams.exe] => (Block) C:\users\jm-k2\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{72E5BED4-2F39-4C1C-9CF2-0BBDF0278C6D}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_23002.403.1788.1930_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{897AB535-2A80-4FEE-9483-3E12433BD0B3}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_23002.403.1788.1930_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{869038E2-E06D-4F60-98E9-4445F7331507}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{CC15AD1C-332F-4983-B68B-57F7D50D6CB7}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{A56B5CC8-F793-420D-8E2F-7BAC9D62441C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{9D4FABD0-1308-4660-856B-D297AFB734D9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{B694966F-FA9A-4CD1-98B8-5BE16B464FB5}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\109.0.1518.78\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation) ==================== Punkty Przywracania systemu ========================= ==================== Wadliwe urządzenia w Menedżerze urządzeń ============ ==================== Błędy w Dzienniku zdarzeń: ======================== Dziennik Aplikacja: ================== Dziennik System: ============= Error: (02/09/2023 08:30:33 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-27V5MCLA) Description: Serwer {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} nie zarejestrował się w modelu DCOM w wymaganym czasie. Error: (02/09/2023 08:28:41 PM) (Source: Microsoft-Windows-Eventlog) (EventID: 22) (User: ZARZĄDZANIE NT) Description: Usługa rejestrowania zdarzeń napotkała błąd podczas inicjowania zasobów publikowania dla kanału Microsoft-RMS-MSIPC/Debug. Jeśli typ kanału to Analityczny lub Debugowanie, może to oznaczać, że błąd mógł również wystąpić podczas inicjowania zasobów rejestrowania. Error: (02/09/2023 08:28:41 PM) (Source: Microsoft-Windows-Eventlog) (EventID: 22) (User: ZARZĄDZANIE NT) Description: Usługa rejestrowania zdarzeń napotkała błąd podczas inicjowania zasobów publikowania dla kanału DebugChannel. Jeśli typ kanału to Analityczny lub Debugowanie, może to oznaczać, że błąd mógł również wystąpić podczas inicjowania zasobów rejestrowania. Error: (02/09/2023 08:28:21 PM) (Source: Microsoft-Windows-HAL) (EventID: 15) (User: ) Description: Jednostka IOMMU wykryła błąd. Error: (02/09/2023 08:28:21 PM) (Source: Microsoft-Windows-HAL) (EventID: 15) (User: ) Description: Jednostka IOMMU wykryła błąd. Error: (02/09/2023 08:28:21 PM) (Source: Microsoft-Windows-HAL) (EventID: 15) (User: ) Description: Jednostka IOMMU wykryła błąd. Error: (02/09/2023 08:28:21 PM) (Source: Microsoft-Windows-HAL) (EventID: 15) (User: ) Description: Jednostka IOMMU wykryła błąd. Error: (02/09/2023 08:28:21 PM) (Source: Microsoft-Windows-HAL) (EventID: 15) (User: ) Description: Jednostka IOMMU wykryła błąd. CodeIntegrity: =============== Date: 2023-02-09 15:12:17 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Statystyki pamięci =========================== BIOS: Insyde F.06 04/08/2020 Płyta główna: HP 86AB Procesor: Intel(R) Core(TM) i5-1035G1 CPU @ 1.00GHz Procent pamięci w użyciu: 32% Całkowita pamięć fizyczna: 16165.8 MB Dostępna pamięć fizyczna: 10907.63 MB Całkowita pamięć wirtualna: 17189.8 MB Dostępna pamięć wirtualna: 11968.42 MB ==================== Dyski ================================ Drive c: (Windows) (Fixed) (Total:102.97 GB) (Free:35.93 GB) (Model: SK hynix BC501 HFM256GDJTNG-8310A) NTFS Drive d: (Dysk) (Fixed) (Total:133.79 GB) (Free:133.21 GB) (Model: SK hynix BC501 HFM256GDJTNG-8310A) NTFS \\?\Volume{386f9b8c-8480-4696-b129-050ffc41a4ec}\ () (Fixed) (Total:0.95 GB) (Free:0.08 GB) NTFS \\?\Volume{51bcebb3-7bc5-4d3a-8861-dbe37872ce30}\ (Windows RE tools) (Fixed) (Total:0.49 GB) (Free:0.48 GB) NTFS \\?\Volume{9e661c65-994d-4214-9d0c-e814db67af75}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.17 GB) FAT32 ==================== MBR & Tablica partycji ==================== ========================================================== Disk: 0 (Size: 238.5 GB) (Disk ID: 87A40E76) Partition: GPT. ==================== Koniec Addition.txt =======================