Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 10.04.2024 Uruchomiony przez padod (13-04-2024 07:54:30) Uruchomiony z C:\Users\padod\Downloads Microsoft Windows 11 Home Wersja 23H2 22631.3447 (X64) (2023-08-07 13:39:19) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= (Załączenie wejścia w fixlist spowoduje jego usunięcie.) Administrator (S-1-5-21-3672157126-2932005878-3572748644-500 - Administrator - Disabled) Gość (S-1-5-21-3672157126-2932005878-3572748644-501 - Limited - Disabled) Konto domyślne (S-1-5-21-3672157126-2932005878-3572748644-503 - Limited - Disabled) padod (S-1-5-21-3672157126-2932005878-3572748644-1001 - Administrator - Enabled) => C:\Users\padod WDAGUtilityAccount (S-1-5-21-3672157126-2932005878-3572748644-504 - Limited - Disabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) ABBYY PDF Transformer+ (HKLM\...\{FA400000-0001-6400-0000-074957833700}) (Version: 4.1.283 - ABBYY Production LLC) ACDSee Photo Studio Professional 2018 (64-bit) (HKLM\...\{1137BB4F-4D0B-4CBA-962A-79EFECD36B3F}) (Version: 11.2.0.888 - ACD Systems International Inc.) Adobe Lightroom Classic (HKLM-x32\...\LTRM_10_2) (Version: 10.2 - Adobe Inc.) Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated) Ashampoo Burning Studio FREE (HKLM-x32\...\{91B33C97-91F8-FFB3-581B-BC952C901685}_is1) (Version: 1.24.13 - Ashampoo GmbH & Co. KG) Asystent instalacji systemu Windows 11 (HKLM-x32\...\{115DF11E-4B4C-4EA9-9A79-00DB0C7EF02D}) (Version: 1.4.19041.3630 - Microsoft Corporation) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Dolby Atmos Windows API SDK (HKLM\...\{139C7F29-696B-4EEA-B4AF-2990C2ECF7AD}) (Version: 1.1.7.32 - Dolby Laboratories, Inc.) Dolby Atmos Windows APP (HKLM\...\{0AA0AF3F-80D1-4688-997D-3E88362C0F73}) (Version: 1.1.2.10003 - Dolby Laboratories, Inc.) e-file [ID] wersja 1.4.5.0 (HKU\S-1-5-21-3672157126-2932005878-3572748644-1001\...\{EF9A27D3-62E7-473E-9D32-23653A0F6CBB}_is1) (Version: 1.4.5.0 - e-file sp. z o.o. sp. k.) FreeFileSync (HKLM-x32\...\FreeFileSync_is1) (Version: 13.4 - FreeFileSync.org) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 123.0.6312.123 - Google LLC) Helium 16.5.18323.0 (HKLM\...\{d3bda9c0-23fc-45f1-b659-ca408fedbf95}_is1) (Version: 16.5.18323.0 - Imploded Software AB) HMS Core (HKLM\...\HMS Core) (Version: 6.8.0.300 - Huawei Technologies Co., Ltd.) Huawei Camera Driver (HKLM-x32\...\Sunplus SPUVCb) (Version: 3.16.3.0 - SunplusIT) Huawei PC Manager(Multi-screen Collaboration and Official Driver) (HKLM\...\PC Manager) (Version: 13.0.6.330 - Huawei Device Co., Ltd.) Intel Driver && Support Assistant (HKLM-x32\...\{CCDC49A6-B288-4623-AA1D-332D328A8FA8}) (Version: 24.1.13.10 - Intel) Hidden Intel(R) Chipset Device Software (HKLM\...\{7FB35D08-C75C-4A18-B593-1D7C3E8970AD}) (Version: 10.1.1.45 - Intel Corporation) Hidden Intel(R) Computing Improvement Program (HKLM\...\{76751700-CC7A-4C8E-A7EE-D66651594A6A}) (Version: 2.4.10802 - Intel Corporation) Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.3.10207.5567 - Intel Corporation) Intel(R) Graphics Driver Software (HKLM-x32\...\{f2a88096-3fb7-490f-b289-ad70b99a8f5e}) (Version: 3.11.1.0 - Intel) Hidden Intel(R) Management Engine Components (HKLM\...\{09DAB6B6-FBEF-4AC5-AE93-BFF01A0B796D}) (Version: 1.0.0.0 - Intel Corporation) Hidden Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 1846.12.0.1177 - Intel Corporation) Intel(R) Management Engine Components (HKLM\...\{B557A9A1-D64B-43D7-B598-F7BAAE897CF3}) (Version: 1.0.0.0 - Intel Corporation) Hidden Intel(R) Management Engine Driver (HKLM\...\{3479FCE3-F7D2-4980-819A-767941440932}) (Version: 1.0.0.0 - Intel Corporation) Hidden Intel(R) Serial IO (HKLM\...\{0C21BBE5-F4B4-42E2-AE4B-BE210BB1B8AB}) (Version: 30.100.1725.1 - Intel Corporation) Hidden Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1725.1 - Intel Corporation) Intel(R) Trusted Connect Service Client x64 (HKLM\...\{C9552825-7BF2-4344-BA91-D3CD46F4C442}) (Version: 1.50.638.1 - Intel Corporation) Hidden Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.50.638.1 - Intel Corporation) Hidden Intel(R) Trusted Connect Services Client (HKLM-x32\...\{99ee3c29-c7cd-450f-8db9-d43cc49de1c7}) (Version: 1.50.638.1 - Intel Corporation) Hidden Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000060-0200-1045-84C8-B8D95FA3C8C3}) (Version: 20.60.0 - Intel Corporation) Intel® Driver & Support Assistant (HKLM-x32\...\{64f50684-bac6-488b-9bab-93616f34d6ec}) (Version: 24.1.13.10 - Intel) Intel® PROSet/Wireless WiFi Software (HKLM\...\{EF71AFFB-85B5-407C-A301-39EA25F98313}) (Version: 20.90.0.2270 - Intel Corporation) Hidden Microsoft .NET Core Host - 3.1.22 (x64) (HKLM\...\{B343AEBD-9A5A-40B7-A032-81163019A913}) (Version: 24.88.30721 - Microsoft Corporation) Hidden Microsoft .NET Core Host FX Resolver - 3.1.22 (x64) (HKLM\...\{87DE9382-0F95-4768-98B8-BB5C1AB2B94F}) (Version: 24.88.30721 - Microsoft Corporation) Hidden Microsoft .NET Core Runtime - 3.1.22 (x64) (HKLM\...\{44D628C6-14F5-48F2-89F9-6C0A5FF2B9F0}) (Version: 24.88.30721 - Microsoft Corporation) Hidden Microsoft .NET Core Runtime - 3.1.22 (x64) (HKLM-x32\...\{e412ee31-a1e0-45fa-b2f8-5dc75411d9c5}) (Version: 3.1.22.30721 - Microsoft Corporation) Microsoft ASP.NET Core 3.1.22 - Shared Framework (x64) (HKLM-x32\...\{f7337876-9fbd-4881-acfe-570e8a90ce46}) (Version: 3.1.22.21579 - Microsoft Corporation) Microsoft ASP.NET Core 3.1.22 Shared Framework (x64) (HKLM\...\{6AFBB1FC-92B4-38D1-8125-A5F297FDA27D}) (Version: 3.1.22.21579 - Microsoft Corporation) Hidden Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 123.0.2420.81 - Microsoft Corporation) Microsoft Office Professional Plus 2019 - pl-pl (HKLM\...\ProPlus2019Retail - pl-pl) (Version: 16.0.17425.20176 - Microsoft Corporation) Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.020.0128.0003 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation) Microsoft VC++ redistributables repacked. (HKLM\...\{B81577B2-3AD0-4AFD-A19C-87F673C09D0C}) (Version: 12.0.0.0 - Intel Corporation) Hidden Microsoft VC++ redistributables repacked. (HKLM-x32\...\{62678770-F459-4903-83E3-A2968F6CC242}) (Version: 12.0.0.0 - Intel Corporation) Hidden Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.32.31332 (HKLM-x32\...\{3746f21b-c990-4045-bb33-1cf98cff7a68}) (Version: 14.32.31332.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.32.31332 (HKLM-x32\...\{a98dc6ff-d360-4878-9f0a-915eba86eaf3}) (Version: 14.32.31332.0 - Microsoft Corporation) Microsoft Visual C++ 2022 X64 Additional Runtime - 14.32.31332 (HKLM\...\{F4499EE3-A166-496C-81BB-51D1BCDC70A9}) (Version: 14.32.31332 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.32.31332 (HKLM\...\{3407B900-37F5-4CC2-B612-5CD5D580A163}) (Version: 14.32.31332 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Additional Runtime - 14.32.31332 (HKLM-x32\...\{8972AC25-452E-4FFE-945A-EB9E28C20322}) (Version: 14.32.31332 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.32.31332 (HKLM-x32\...\{AEAA18F7-9C96-4A43-BC07-8B88A4913EEB}) (Version: 14.32.31332 - Microsoft Corporation) Hidden Microsoft_VC80_CRT_x86 (HKLM-x32\...\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}) (Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC90_CRT_x86 (HKLM-x32\...\{08D2E121-7F6A-43EB-97FD-629B44903403}) (Version: 1.00.0000 - Adobe) Hidden Nero Start (HKLM-x32\...\Nero Common) (Version: 24.5.84.0 - Nero AG) Nero WaveEditor (HKLM-x32\...\Nero WaveEditor) (Version: 24.5.2.1 - Nero AG) Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.17425.20146 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.17425.20176 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0415-1000-0000000FF1CE}) (Version: 16.0.17425.20146 - Microsoft Corporation) Hidden OneKey Driver version 1.0.0.22 (HKLM-x32\...\{779E5C1D-16B5-4A12-BE20-9C38C484C2C7}_is1) (Version: 1.0.0.22 - Huawei Technologies Co., Ltd.) Opera Stable 108.0.5067.29 (HKU\S-1-5-21-3672157126-2932005878-3572748644-1001\...\Opera 108.0.5067.29) (Version: 108.0.5067.29 - Opera Software) Oprogramowanie Intel® PROSet/Wireless (HKLM-x32\...\{f8c930bd-0a68-425f-8c11-87723d1e2c97}) (Version: 20.90.0 - Intel Corporation) Oprogramowanie mikroukładu Intel® (HKLM-x32\...\{44ded3eb-1686-46a6-9770-fd79096c29f7}) (Version: 10.1.1.45 - Intel(R) Corporation) Hidden PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8618 - Realtek Semiconductor Corp.) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Środowisko uruchomieniowe Microsoft Edge WebView2 (HKLM-x32\...\Microsoft EdgeWebView) (Version: 123.0.2420.81 - Microsoft Corporation) WDT Device Driver version 1.0.2.5 (HKLM-x32\...\{5B06CB06-0929-48BC-BE1F-7E41461440C7}_is1) (Version: 1.0.2.5 - Huawei Technologies Co., Ltd.) Winaero Tweaker (HKLM\...\Winaero Tweaker_is1) (Version: 0.17.1.0 - Winaero) WinRAR 5.80 beta 2 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.80.2 - win.rar GmbH) Chrome apps: ============ Arkusze (HKU\S-1-5-21-3672157126-2932005878-3572748644-1001\...\448bf8b21598fe84e344f04b135afcc3) (Version: 1.0 - Google\Chrome) Dokumenty (HKU\S-1-5-21-3672157126-2932005878-3572748644-1001\...\855d6d9ee672e29f5afb1fca04cbf7f2) (Version: 1.0 - Google\Chrome) Dysk Google (HKU\S-1-5-21-3672157126-2932005878-3572748644-1001\...\c29ed51e526c4f5f35d9b27c257db95d) (Version: 1.0 - Google\Chrome) Gmail (HKU\S-1-5-21-3672157126-2932005878-3572748644-1001\...\af6a439e5c101e2a17222b5624a620bb) (Version: 1.0 - Google\Chrome) Prezentacje (HKU\S-1-5-21-3672157126-2932005878-3572748644-1001\...\4612a61e1487fbb7f0e510659bec9883) (Version: 1.0 - Google\Chrome) YouTube (HKU\S-1-5-21-3672157126-2932005878-3572748644-1001\...\e4af5f472f4261b9b60ed6086f05bccf) (Version: 1.0 - Google\Chrome) Packages: ========= AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5435.0_x64__8j3eq9eme6ctt [2024-04-12] (INTEL CORP) [Startup Task] Dev Home (Preview) -> C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.1201.442.0_x64__8wekyb3d8bbwe [2024-03-21] (Microsoft Corporation) Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.21.269.0_x64__rz1tebttyb220 [2024-03-21] (Dolby Laboratories) Microsoft.BingSearch -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.91.0_x64__8wekyb3d8bbwe [2024-03-18] (Microsoft Corporation) Microsoft.Windows.Ai.Copilot.Provider -> C:\Program Files\WindowsApps\Microsoft.Windows.Ai.Copilot.Provider_1.0.3.0_neutral__8wekyb3d8bbwe [2024-03-23] (Microsoft Corporation) Microsoft.WindowsAppRuntime.CBS -> C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe [2024-03-01] (Microsoft Corporation) MicrosoftWindows.CrossDevice -> C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24032.57.0_x64__cw5n1h2txyewy [2024-04-12] (Microsoft Windows) [Startup Task] Windows Feature Experience Pack -> C:\Windows\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy [2024-03-01] (Microsoft Corporation) ==================== Niestandardowe rejestracje CLSID (filtrowane): ============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-3672157126-2932005878-3572748644-1001_Classes\CLSID\{1CF5AD01-CA50-F981-9BBF-6816F86DBE77}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Windows -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.020.0128.0003\FileSyncShell64.dll [2024-02-18] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.020.0128.0003\FileSyncShell64.dll [2024-02-18] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.020.0128.0003\FileSyncShell64.dll [2024-02-18] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.020.0128.0003\FileSyncShell64.dll [2024-02-18] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.020.0128.0003\FileSyncShell64.dll [2024-02-18] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.020.0128.0003\FileSyncShell64.dll [2024-02-18] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.020.0128.0003\FileSyncShell64.dll [2024-02-18] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.020.0128.0003\FileSyncShell64.dll [2024-02-18] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.020.0128.0003\FileSyncShell64.dll [2024-02-18] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.020.0128.0003\FileSyncShell64.dll [2024-02-18] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.020.0128.0003\FileSyncShell64.dll [2024-02-18] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.020.0128.0003\FileSyncShell64.dll [2024-02-18] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.020.0128.0003\FileSyncShell64.dll [2024-02-18] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.020.0128.0003\FileSyncShell64.dll [2024-02-18] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.020.0128.0003\FileSyncShell64.dll [2024-02-18] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers1-x32: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities\ContextHandler.dll -> Brak pliku ContextMenuHandlers1: [HwShareMenu] -> {9557F42F-BD61-4E26-9752-33A8A20FC9F9} => C:\Program Files\Huawei\PCManager\ShareMenu.dll [2023-06-06] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) ContextMenuHandlers1: [PicaViewCtxMenuShlExt] -> {F3CBBA61-EE3F-4D6D-B1C6-B3474E579936} => C:\Program Files\Common Files\ACD Systems\PicaView\ACDSeePV.dll [2015-08-28] (ACD Systems International -> ACD Systems International Inc.) ContextMenuHandlers1: [Transformer4ContextMenu] -> {558BA64F-C7A8-4B96-BCDD-B46E9D00756A} => C:\Program Files (x86)\ABBYY PDF Transformer+\x64\TRIntegration.x64.dll [2014-10-17] (ABBYY Production LLC -> ABBYY Production LLC.) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-09-27] (win.rar GmbH -> Alexander Roshal) [Brak podpisu cyfrowego] ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-09-27] (win.rar GmbH -> Alexander Roshal) [Brak podpisu cyfrowego] ContextMenuHandlers2: [DFSDriveMenu] -> {9557F42F-BD61-4E26-9752-33A8A20FC9F9} => C:\Program Files\Huawei\PCManager\ShareMenu.dll [2023-06-06] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) ContextMenuHandlers2-x32: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities\ContextHandler.dll -> Brak pliku ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.020.0128.0003\FileSyncShell64.dll [2024-02-18] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.020.0128.0003\FileSyncShell64.dll [2024-02-18] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers6-x32: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities\ContextHandler.dll -> Brak pliku ContextMenuHandlers6: [Transformer4ContextMenu] -> {558BA64F-C7A8-4B96-BCDD-B46E9D00756A} => C:\Program Files (x86)\ABBYY PDF Transformer+\x64\TRIntegration.x64.dll [2014-10-17] (ABBYY Production LLC -> ABBYY Production LLC.) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-09-27] (win.rar GmbH -> Alexander Roshal) [Brak podpisu cyfrowego] ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-09-27] (win.rar GmbH -> Alexander Roshal) [Brak podpisu cyfrowego] ==================== Codecs (filtrowane) ==================== ==================== Skróty & WMI ======================== (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ShortcutWithArgument: C:\Users\padod\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\Arkusze.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=fhihpiojkbmbpdjeoajapmgkhlnakfjf ShortcutWithArgument: C:\Users\padod\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\Dokumenty.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=mpnpojknpmmopombnjdcgaaiekajbnjb ShortcutWithArgument: C:\Users\padod\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\Dysk Google.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=aghbiahbpaijignceidepookljebhfak ShortcutWithArgument: C:\Users\padod\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\Gmail.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=fmgjjmmmlfnkbppncabfkddbjimcfncm ShortcutWithArgument: C:\Users\padod\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\Prezentacje.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=kefjledonklijopmnomlcbpllchaibag ShortcutWithArgument: C:\Users\padod\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\YouTube.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=agimnkijcaahngcdmfeangaknmldooml ==================== Załadowane moduły (filtrowane) ============= 2022-10-28 12:49 - 2022-10-28 12:49 - 001504768 _____ () [Brak podpisu cyfrowego] C:\Program Files\Huawei\HMS Core\ha_api.dll 2024-02-22 09:58 - 2024-02-22 09:58 - 001626624 _____ (Robert Simpson, et al.) [Brak podpisu cyfrowego] C:\Program Files\Intel\SUR\QUEENCREEK\x64\SQLite.Interop.dll 2024-02-22 09:58 - 2024-02-22 09:58 - 003160576 _____ (SQLite Development Team) [Brak podpisu cyfrowego] C:\Program Files\Intel\SUR\QUEENCREEK\x64\sqlite3.dll 2024-01-23 13:04 - 2019-09-27 12:10 - 000538328 _____ (win.rar GmbH -> Alexander Roshal) [Brak podpisu cyfrowego] C:\Program Files\WinRAR\rarext.dll ==================== Alternate Data Streams (filtrowane) ======== ==================== Tryb awaryjny (filtrowane) ================== ==================== Powiązania plików (filtrowane) ================= ==================== Internet Explorer (filtrowane) ========== BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2024-04-03] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-04-03] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-04-03] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-04-03] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-04-03] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-04-03] (Microsoft Corporation -> Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-04-03] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-04-03] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-04-03] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-04-03] (Microsoft Corporation -> Microsoft Corporation) ==================== Hosts - zawartość: ========================= (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2022-05-07 07:24 - 2023-08-09 12:32 - 000000904 _____ C:\Windows\system32\drivers\etc\hosts 127.0.0.1 acdid.acdsystems.com 127.0.0.1 acdid.acdsystems.com 2023-08-13 19:18 - 2023-08-13 19:18 - 000000441 _____ C:\Windows\system32\drivers\etc\hosts.ics ==================== Inne obszary =========================== (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-3672157126-2932005878-3572748644-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\padod\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper DNS Servers: 192.168.88.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Załączenie wejścia w fixlist spowoduje jego usunięcie.) HKLM\...\StartupApproved\Run32: => "SwitchBoard" HKU\S-1-5-21-3672157126-2932005878-3572748644-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_A3DA58C843B45FF75A7F7A9B258653DD" ==================== Reguły Zapory systemu Windows (filtrowane) ================ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [{B08F606A-DD6B-45BF-B75A-820E4B214314}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{03D1BEA0-623B-40FB-9B07-E567545E7C2C}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{B05ED37B-8D1D-47C4-88A6-BB3F61741770}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{8DBF9177-F343-41E1-B2CF-1A31EA987CD0}] => (Allow) C:\Program Files\Huawei\PCManager\HwDistributedMainService.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{19249567-0DB9-46A5-8BBE-237F8575F33B}] => (Allow) C:\Program Files\Huawei\PCManager\distributedfileservice.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{392CB9EF-CB6C-43C6-812F-6898204520B4}] => (Allow) C:\Program Files\Huawei\PCManager\distributedfileservice.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{335DB660-456D-4B93-AAA8-F50B519453ED}] => (Allow) C:\Program Files\Huawei\PCManager\distributedfileservice.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{3195798B-CB24-4901-A7A5-D86BF78A4446}] => (Allow) C:\Program Files\Huawei\PCManager\hmdfsservice.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{AFCB1FBC-33F1-44C4-8DF7-1529EC4B6C65}] => (Allow) C:\Program Files\Huawei\PCManager\hmdfsservice.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{13AA38F0-DA63-409F-816F-78B37E59B659}] => (Allow) C:\Program Files\Huawei\PCManager\hmdfsservice.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{2BEC0DCF-3D37-40A1-B398-28F373971E6B}] => (Allow) C:\Program Files\Huawei\PCManager\HwMirror.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{1D3FA604-D13F-4C09-A1B3-592008C45EFE}] => (Allow) C:\Program Files\Huawei\PCManager\HwMirror.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{672D6081-962E-4896-81CC-35BEFD18E676}] => (Allow) C:\Program Files\Huawei\PCManager\HwMirror.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{AEB0873E-5B32-4C6F-AC06-474128385EE5}] => (Allow) C:\Program Files\Huawei\PCManager\WeLook.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{A3BCC73B-8D6A-4E99-9F48-C16D002A2DF1}] => (Allow) C:\Program Files\Huawei\PCManager\HwExScreen.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{3945FCD0-4FF3-42F3-BEE2-C2ABCE9EE3DF}] => (Allow) C:\Program Files\Huawei\PCManager\HwExScreen.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{44BE9B8E-37F3-40B4-B9B0-9AA81120B77B}] => (Allow) C:\Program Files\Huawei\PCManager\HwExScreen.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{2C6C9E12-171B-44C5-8ADA-A9AF7F25ADD7}] => (Allow) C:\Program Files (x86)\Nero\Nero Common\Nero Launcher\NeroLauncher.exe (Nero AG -> Nero AG) FirewallRules: [{A92925BD-C20D-452D-BBA3-B65A9A05004E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{C5D61865-2A22-470F-8DA2-B74145327016}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{E7574BC3-2BAE-4880-8E26-AA53FAC6DB9B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{585AE9B7-1314-474E-B6CF-657D4F797140}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [TCP - Installer for ACDSee Commander Professional 2018] => (Allow) C:\Program Files\ACD Systems\ACDSee Pro\11.0\ACDSeeCommanderPro11.exe (ACD Systems International Inc. -> ) [Brak podpisu cyfrowego] FirewallRules: [UDP - Installer for ACDSee Commander Professional 2018] => (Allow) C:\Program Files\ACD Systems\ACDSee Pro\11.0\ACDSeeCommanderPro11.exe (ACD Systems International Inc. -> ) [Brak podpisu cyfrowego] FirewallRules: [TCP Query User{CBC65818-F7B7-426C-821C-8C16F752BBBC}C:\program files (x86)\imploded software\helium 16\elevatedcommands.exe] => (Allow) C:\program files (x86)\imploded software\helium 16\elevatedcommands.exe (Imploded Software AB -> Imploded Software AB) FirewallRules: [UDP Query User{11C4D79B-F608-4F0D-A1C5-2FB2AC54FB26}C:\program files (x86)\imploded software\helium 16\elevatedcommands.exe] => (Allow) C:\program files (x86)\imploded software\helium 16\elevatedcommands.exe (Imploded Software AB -> Imploded Software AB) FirewallRules: [{7651B8B7-AFD0-427A-B19D-05839DC8821B}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation -> ) FirewallRules: [{9ADEE021-3F38-4FB5-84D0-03BA25F0084D}] => (Allow) D:\Padodas_Files\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{B6B15ED5-C270-467A-B528-BC572762F2D9}] => (Allow) D:\Padodas_Files\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{3399C97E-7C50-4B73-B4B7-2100DF771DC6}] => (Allow) D:\Padodas_Files\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{C856C1D2-48DD-4438-8909-0A26067A8C89}] => (Allow) D:\Padodas_Files\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{590B0B65-8052-43D0-9089-FA9831590A31}] => (Allow) D:\Padodas_Files\Steam\steamapps\common\Return to Castle Wolfenstein\WolfSP.exe () [Brak podpisu cyfrowego] FirewallRules: [{D0A391E6-6DAD-430C-9696-4630C1B7DEC3}] => (Allow) D:\Padodas_Files\Steam\steamapps\common\Return to Castle Wolfenstein\WolfSP.exe () [Brak podpisu cyfrowego] FirewallRules: [{B53A8C4F-D805-44DC-AD1C-C2A46E5FFDE8}] => (Allow) D:\Padodas_Files\Steam\steamapps\common\Return to Castle Wolfenstein\WolfMP.exe () [Brak podpisu cyfrowego] FirewallRules: [{547B50D8-138F-4F85-9525-7FB01CC24D2B}] => (Allow) D:\Padodas_Files\Steam\steamapps\common\Return to Castle Wolfenstein\WolfMP.exe () [Brak podpisu cyfrowego] FirewallRules: [{DA980186-FBC8-43B4-B72D-A35BF03B7190}] => (Allow) C:\Program Files\Huawei\PCManager\distributedfileservice.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{BF41D94B-363D-4E8E-A1F2-AD63E31D018D}] => (Allow) C:\Program Files\Huawei\PCManager\distributedfileservice.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{A691CF15-A414-4CD9-A9C0-75CD81495F3E}] => (Allow) C:\Program Files\Huawei\PCManager\hmdfsservice.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{6BD2CD47-AED7-4E77-8AE7-6F9D166DA1A2}] => (Allow) C:\Program Files\Huawei\PCManager\hmdfsservice.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{55746CD8-3334-4F4B-9DFF-5F25A8E6893B}] => (Allow) C:\Program Files\Huawei\PCManager\HwMirror.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{F4083E6C-AAA7-4DDD-A9ED-26A1DD378D92}] => (Allow) C:\Program Files\Huawei\PCManager\HwMirror.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{9596AED5-C84E-45F5-99C7-3118D69FB664}] => (Allow) C:\Program Files\Huawei\PCManager\HwExScreen.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{F3DF807E-38FC-4704-BE51-9847CB137807}] => (Allow) C:\Program Files\Huawei\PCManager\HwExScreen.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [TCP Query User{51498525-49C1-485D-83C8-FF76BAB5063A}C:\program files (x86)\imploded software\helium 16\elevatedcommands.exe] => (Block) C:\program files (x86)\imploded software\helium 16\elevatedcommands.exe (Imploded Software AB -> Imploded Software AB) FirewallRules: [UDP Query User{66F68D76-3EA5-4E4C-982D-0AB06778008B}C:\program files (x86)\imploded software\helium 16\elevatedcommands.exe] => (Block) C:\program files (x86)\imploded software\helium 16\elevatedcommands.exe (Imploded Software AB -> Imploded Software AB) FirewallRules: [{94EE6275-BC24-436A-BFEF-7DD95BA26E27}] => (Allow) LPort=3306 FirewallRules: [{F5EB0129-9249-4945-A724-3DD6B88906F9}] => (Allow) C:\Program Files\Huawei\HMS Core\HMSCoreContainer.exe (Huawei Technologies Co., Ltd. -> Huawei Technologies Co., Ltd.) FirewallRules: [{B800892A-6E41-476A-BA8A-5DD8B028E69A}] => (Allow) C:\Program Files\Huawei\HMS Core\HMSCoreUI.exe (Huawei Technologies Co., Ltd. -> Huawei Technologies Co., Ltd.) FirewallRules: [{8236F1A9-283C-4F1A-B9C2-6F5CD6523740}] => (Allow) E:\Opera\107.0.5045.36\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [TCP Query User{2A187243-43A4-4D51-9D0E-0E63F575661F}E:\opera\opera.exe] => (Allow) E:\opera\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [UDP Query User{7A103798-FA32-4F93-BC64-7BC714C26F2E}E:\opera\opera.exe] => (Allow) E:\opera\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [{62D80641-5EC9-46E4-84CC-ABE210F6E9FA}] => (Allow) E:\Opera\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [{73BB99B8-9318-4643-8C57-4C299D24EF40}] => (Allow) E:\Emulator\BlueStacks X\BlueStacksWeb.exe => Brak pliku FirewallRules: [{79BDD1CB-4F47-4F2F-911C-A047EAC1B9AB}] => (Allow) E:\Emulator\BlueStacks X\Cloud Game.exe => Brak pliku FirewallRules: [{5360EE1B-023F-461B-B852-CAA956DD242F}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe => Brak pliku FirewallRules: [{F94A3110-6E65-4F88-BAD6-E5893C74E343}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe => Brak pliku FirewallRules: [{1410827A-2885-4295-A9CC-82FEDE47C673}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{BCF9E6FB-D99A-457E-8957-50E41944B917}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{59272347-9996-447A-B3E6-A5AD32ADABAE}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.81\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{0B2099AC-A652-4127-967C-2F5DD424F4E1}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{A5BF3E42-E1CE-463B-8982-1E6BD6681BA7}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24088.3902.2792.6069_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{29F15E6A-1A53-4F65-A049-AB06F9711CAE}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24088.3902.2792.6069_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{989A56C9-E3D5-4620-A12E-F6DA6A0D717C}] => (Allow) C:\Program Files\Huawei\PCManager\HwMdcCenter.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) FirewallRules: [{E14C115B-1A75-4C89-88BF-67785F32A6FE}] => (Allow) C:\Program Files\Huawei\PCManager\MBAMessageCenter.exe (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) ==================== Punkty Przywracania systemu ========================= 09-04-2024 20:42:44 Windows Update ==================== Wadliwe urządzenia w Menedżerze urządzeń ============ Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Błędy w Dzienniku zdarzeń: ======================== Dziennik Aplikacja: ================== Error: (04/12/2024 08:32:31 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: KOLOS_DAROS) Description: Nie można zamknąć aplikacji lub usługi Microsoft Office SDX Helper. Error: (04/09/2024 08:59:56 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas wywoływania procedury CoCreateInstance. hr = 0x8007045b, Trwa proces zamykania systemu.. Error: (04/09/2024 08:59:56 PM) (Source: VSS) (EventID: 13) (User: ) Description: Informacje Usługi kopiowania woluminów w tle: nie można uruchomić serwera usługi COM z identyfikatorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} i nazwą CEventSystem. [0x8007045b, Trwa proces zamykania systemu.] Error: (04/09/2024 08:47:15 PM) (Source: VSS) (EventID: 13) (User: ) Description: Informacje Usługi kopiowania woluminów w tle: nie można uruchomić serwera usługi COM z identyfikatorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} i nazwą CEventSystem. [0x8007045b, Trwa proces zamykania systemu.] Error: (04/09/2024 08:47:15 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas wywoływania procedury CoCreateInstance. hr = 0x8007045b, Trwa proces zamykania systemu.. Error: (04/09/2024 08:47:15 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas wywoływania procedury CoCreateInstance. hr = 0x8007045b, Trwa proces zamykania systemu.. Error: (04/09/2024 08:47:15 PM) (Source: VSS) (EventID: 13) (User: ) Description: Informacje Usługi kopiowania woluminów w tle: nie można uruchomić serwera usługi COM z identyfikatorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} i nazwą CEventSystem. [0x8007045b, Trwa proces zamykania systemu.] Error: (04/09/2024 08:47:15 PM) (Source: VSS) (EventID: 13) (User: ) Description: Informacje Usługi kopiowania woluminów w tle: nie można uruchomić serwera usługi COM z identyfikatorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} i nazwą CEventSystem. [0x8007045b, Trwa proces zamykania systemu.] Dziennik System: ============= Error: (04/11/2024 07:22:52 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: ZARZĄDZANIE NT) Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x80073d02: 9PLFNLNT3G5G-AppUp.IntelGraphicsExperience. Error: (04/09/2024 09:01:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi LMS z powodu następującego błędu: Nie można odnaleźć określonego pliku. Error: (04/09/2024 09:01:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi luafv z powodu następującego błędu: Nastąpiło zablokowanie ładowania sterownika Error: (04/09/2024 09:00:48 PM) (Source: Service Control Manager) (EventID: 7038) (User: ) Description: Usługa WerSvc nie może zalogować się jako NT AUTHORITY\SYSTEM za pomocą obecnie skonfigurowanego hasła z powodu następującego błędu: Żądanie nie jest obsługiwane. Aby upewnić się, że usługa jest skonfigurowana prawidłowo, użyj przystawki Usługi w programie Microsoft Management Console (MMC). Error: (04/09/2024 09:00:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi LMS z powodu następującego błędu: Nie można odnaleźć określonego pliku. Error: (04/09/2024 09:00:21 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi luafv z powodu następującego błędu: Nastąpiło zablokowanie ładowania sterownika Error: (04/09/2024 08:47:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi LMS z powodu następującego błędu: Nie można odnaleźć określonego pliku. Error: (04/09/2024 08:47:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi luafv z powodu następującego błędu: Nastąpiło zablokowanie ładowania sterownika Windows Defender: ================ Date: 2024-04-11 19:22:17 Description: Skanowanie produktu Program antywirusowy Microsoft Defender zostało zatrzymane przed ukończeniem. Identyfikator skanowania: {984EE9BE-48E7-4910-ADB9-E4FBB546462B} Typ skanowania: Narzędzia chroniące przed złośliwym oprogramowaniem Parametry skanowania: Szybkie skanowanie Użytkownik: ZARZĄDZANIE NT\SYSTEM Date: 2024-04-10 08:35:42 Description: Skanowanie produktu Program antywirusowy Microsoft Defender zostało zatrzymane przed ukończeniem. Identyfikator skanowania: {AC44DB30-532C-4418-BFFB-9E1B9971E19F} Typ skanowania: Narzędzia chroniące przed złośliwym oprogramowaniem Parametry skanowania: Szybkie skanowanie Użytkownik: ZARZĄDZANIE NT\SYSTEM Date: 2024-04-09 21:14:23 Description: Skanowanie produktu Program antywirusowy Microsoft Defender zostało zatrzymane przed ukończeniem. Identyfikator skanowania: {483D7852-700A-492F-8DD0-187B01B22ADA} Typ skanowania: Narzędzia chroniące przed złośliwym oprogramowaniem Parametry skanowania: Szybkie skanowanie Użytkownik: ZARZĄDZANIE NT\SYSTEM Date: 2024-04-08 19:12:14 Description: Skanowanie produktu Program antywirusowy Microsoft Defender zostało zatrzymane przed ukończeniem. Identyfikator skanowania: {E91EABD7-D112-4FAE-A009-15F78DCE78FC} Typ skanowania: Narzędzia chroniące przed złośliwym oprogramowaniem Parametry skanowania: Szybkie skanowanie Użytkownik: ZARZĄDZANIE NT\SYSTEM Date: 2024-03-29 12:03:13 Description: Skanowanie produktu Program antywirusowy Microsoft Defender zostało zatrzymane przed ukończeniem. Identyfikator skanowania: {161383D4-DA4D-4727-8B9B-E5F310880C04} Typ skanowania: Narzędzia chroniące przed złośliwym oprogramowaniem Parametry skanowania: Szybkie skanowanie Użytkownik: ZARZĄDZANIE NT\SYSTEM Event[0] Date: 2024-02-08 09:59:14 Description: Produkt Program antywirusowy Microsoft Defender napotkał błąd podczas próby aktualizacji analizy zabezpieczeń i podejmie próbę powrotu do poprzedniej wersji. Analiza zabezpieczeń objęta próbą: Bieżące Kod błędu: 0x80070003 Opis błędu: System nie może odnaleźć określonej ścieżki. Wersja analizy zabezpieczeń: 0.0.0.0;0.0.0.0 Wersja aparatu: 0.0.0.0 CodeIntegrity: =============== Date: 2024-04-13 07:55:21 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements. Date: 2024-04-13 07:49:42 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. ==================== Statystyki pamięci =========================== BIOS: HUAWEI 1.37 03/28/2022 Płyta główna: HUAWEI MRC-WX0-PCB Procesor: Intel(R) Core(TM) i5-8250U CPU @ 1.60GHz Procent pamięci w użyciu: 42% Całkowita pamięć fizyczna: 16267.72 MB Dostępna pamięć fizyczna: 9333.25 MB Całkowita pamięć wirtualna: 17291.72 MB Dostępna pamięć wirtualna: 9937.33 MB ==================== Dyski ================================ Drive c: (System) (Fixed) (Total:149.99 GB) (Free:68.84 GB) (Model: LITEON CV8-8E256) NTFS Drive d: (Kolos) (Fixed) (Total:72.87 GB) (Free:62.7 GB) (Model: LITEON CV8-8E256) NTFS Drive e: (Kolonia) (Fixed) (Total:19.98 GB) (Free:18.7 GB) (Model: Dysk wirtualny Microsoft) NTFS \\?\Volume{ea40e31b-da68-4830-9848-562a2f830568}\ (WINPE) (Fixed) (Total:0.5 GB) (Free:0.14 GB) FAT32 \\?\Volume{84c070d7-0994-4628-9c73-60d2082c54e5}\ (Onekey) (Fixed) (Total:14 GB) (Free:5.24 GB) NTFS \\?\Volume{6810b68f-d75f-428d-a16a-df141a816a9c}\ (WinRE) (Fixed) (Total:1 GB) (Free:0.35 GB) NTFS \\?\Volume{bd34d59e-8b68-4aa1-a9da-345d4906d4bb}\ (SYSTEM) (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32 ==================== MBR & Tablica partycji ==================== ==================== Koniec Addition.txt =======================