Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 02-10-2021 Uruchomiony przez Sojuz (02-10-2021 23:20:13) Uruchomiony z C:\Users\Sojuz\Downloads Windows 10 Education Wersja 21H2 22000.194 (X64) (2021-06-28 19:55:52) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= (Załączenie wejścia w fixlist spowoduje jego usunięcie.) Administrator (S-1-5-21-79845458-3209384264-4084941811-500 - Administrator - Disabled) Gość (S-1-5-21-79845458-3209384264-4084941811-501 - Limited - Disabled) Konto domyślne (S-1-5-21-79845458-3209384264-4084941811-503 - Limited - Disabled) Sojuz (S-1-5-21-79845458-3209384264-4084941811-1001 - Administrator - Enabled) => C:\Users\Sojuz WDAGUtilityAccount (S-1-5-21-79845458-3209384264-4084941811-504 - Limited - Disabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Kaspersky Anti-Virus (Disabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23} AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) 3DMark06 (HKLM-x32\...\{7F3AD00A-1819-4B15-BB7D-08B3586336D7}) (Version: 1.2.1 - Futuremark Corporation) AIMP (HKLM-x32\...\AIMP) (Version: v5.00.2320 Beta 3, 12.08.2021 - AIMP DevTeam) Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.5.1 - Sereby Corporation) APP Shop v1.0.50 (HKLM-x32\...\{90242E9B-BC60-46E3-8EE7-8E953F702280}_is1) (Version: 1.0.50 - ASRock Inc.) ASRock App Charger v1.0.6 (HKLM\...\ASRock App Charger_is1) (Version: 1.0.6 - ASRock Inc.) ASRock Nahimic v1.005 (HKLM-x32\...\ASRock Nahimic_is1) (Version: 1.005 - ASRock Inc.) ASRock Restart to UEFI v1.0.6 (HKLM-x32\...\ASRock Restart to UEFI_is1) (Version: 1.0.6 - ASRock Inc.) ASRRGBLED v2.0.99 (HKLM-x32\...\ASRock RGB LED_is1) (Version: 2.0.99 - ASRock Inc.) ASUS GLCKIO2 Driver (HKLM-x32\...\{548dd834-70c5-4426-8065-fbeabdd2bb5d}) (Version: 1.0.10 - ASUSTeK Computer Inc.) Hidden ASUS GLCKIO2 Driver (HKLM-x32\...\{5960FD0F-BB3B-49AF-B175-F77DC91E995A}) (Version: 1.0.10 - ASUSTeK Computer Inc.) Hidden ASUS GPU TweakII (HKLM-x32\...\InstallShield_{2914BAB6-CA16-4B5A-BF41-2466656C7040}) (Version: 2.3.5.0 - ASUSTek COMPUTER INC.) AURA RGB Lighting Control for Graphic card & XG-STATION (HKLM-x32\...\InstallShield_{3B47B9A9-82B9-4B7E-BB4A-C20948C2AA7D}) (Version: 0.0.6.7 - ASUSTek COMPUTER INC.) Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts) Battlefield™ V (HKLM-x32\...\{e26b382f-e945-4f70-9318-121b683f1d61}) (Version: 1.0.64.43202 - Electronic Arts) Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB) BlueStacks App Player (HKLM\...\BlueStacks) (Version: 4.260.0.1032 - BlueStack Systems, Inc.) Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 94.1.30.87 - Autorzy Brave) CCleaner (HKLM\...\CCleaner) (Version: 5.84 - Piriform) CharisSIL 5.000 (HKLM-x32\...\CharisSIL) (Version: - ) Cheat Engine 7.2 (HKLM\...\Cheat Engine_is1) (Version: - Cheat Engine) Classicmt2.pl (HKLM-x32\...\Classicmt2.pl) (Version: - ) CodeBlocks (HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\CodeBlocks) (Version: 20.03 - The Code::Blocks Team) Core Epic (HKLM\...\{B51E6DE5-9A25-47E6-9806-24B4C62D42A6}) (Version: 1.3.1.0 - Manticore Games) Core Epic Installer (HKLM-x32\...\{531451dd-91d4-4b27-a171-1b9c7f325969}) (Version: 1.3.0.0 - Manticore Games) Hidden Counter-Strike 1.6 v43 (HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\{1BD2212B-8287-4F33-A6DC-903D423AB814}_is1) (Version: v43 - CSSetti.pl) CPUID PHANTOM CPU-Z 1.94 (HKLM\...\CPUID PHANTOM CPU-Z_is1) (Version: 1.94 - CPUID, Inc.) CrystalDiskInfo 8.12.4 (HKLM\...\CrystalDiskInfo_is1) (Version: 8.12.4 - Crystal Dew World) Discord (HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\Discord) (Version: 0.0.309 - Discord Inc.) DroidCam Client (HKLM-x32\...\DroidCam) (Version: 6.4.3 - DEV47APPS) Dynamic Application Loader Host Interface Service (HKLM\...\{044CFD6C-2031-4589-B764-308FB8DDE6EF}) (Version: 1.0.0.0 - Intel Corporation) Hidden EA Desktop (HKLM\...\{C2622085-ABD2-49E5-8AB9-D3D6A642C091}) (Version: 12.0.113.4970 - Electronic Arts) Hidden ENE_DRAM_RGB_AIO (HKLM\...\{1745D314-9077-46C9-8562-1C62BAE189B7}) (Version: 1.0.2.1 - Ene Tech.) Hidden ENE_DRAM_RGB_AIO (HKLM-x32\...\{5ca4886b-7bc8-477c-8576-901b1e8f0586}) (Version: 1.0.2.1 - Ene Tech.) Hidden ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.7.11 - ENE TECHNOLOGY INC.) Hidden ENE_EHD_M2_HAL (HKLM-x32\...\{fd812556-e0bb-4961-ac2b-cf5643484519}) (Version: 1.0.7.11 - ENE TECHNOLOGY INC.) Hidden ENE_EHD_SSS_HAL (HKLM\...\{CF703694-01C6-4062-B797-84DB215662BC}) (Version: 1.00.00 - ENE TECHNOLOGY INC.) Hidden ENE_EHD_SSS_HAL (HKLM-x32\...\{b00e47a4-d642-402c-a060-8d959a0537db}) (Version: 1.00.00 - ENE TECHNOLOGY INC.) Hidden ENE_MousePad_HAL (HKLM\...\{9E97178A-ADB8-4778-BE60-7E28E2A72721}) (Version: 1.0.2.0 - ENE TECHNOLOGY INC.) Hidden ENE_MousePad_HAL (HKLM-x32\...\{c2c794a4-7986-4c45-884d-d4ca43b88df9}) (Version: 1.0.2.0 - ENE TECHNOLOGY INC.) Hidden ENE_X-JMI_HAL (HKLM\...\{2B8E611F-0B51-4FAC-87BB-AF50D82E7DDA}) (Version: 1.0.5.1 - ENE Tech) Hidden ENE_X-JMI_HAL (HKLM-x32\...\{50ec3a07-291b-463e-be86-487eb8cbb71c}) (Version: 1.0.5.1 - ENE Tech) Hidden Epic Games Launcher (HKLM-x32\...\{BE411926-37D4-45D5-9ED5-4132BEB8E9C5}) (Version: 1.1.298.0 - Epic Games, Inc.) ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB) FACEIT (HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\FACEITApp) (Version: 1.29.1 - FACEIT Ltd.) FACEIT Anti-Cheat (HKLM\...\{1419E44C-0EF4-4822-9194-9F1A4D43973D}_is1) (Version: 2.0 - FACEIT LTD) FiveM (HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\CitizenFX_FiveM) (Version: - Cfx.re) FreeMouseAutoClicker 3.8.6 (HKLM-x32\...\{292F00C5-25EF-4FBE-9873-13EF1F69DEED}_is1) (Version: - Advanced Mouse Auto Clicker ltd.) Futuremark SystemInfo (HKLM-x32\...\{03196584-8E63-455A-94AD-A417BB89B74E}) (Version: 5.37.888.0 - Futuremark) Game Capture HD60 S v1.1.0.191 (HKLM-x32\...\Software_Elgato_Game Capture HD60 S) (Version: 1.1.0.191 - Elgato Systems) Geeks3D FurMark 1.25.1.0 (HKLM-x32\...\{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1) (Version: 1.25.1.0 - Geeks3D) GOG GALAXY (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com) Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.101.0 - Google LLC) Hidden Gothic and Gothic II fullscreen fixes (HKLM\...\{9084b1e7-83b4-406a-8705-374300ee2d84}.sdb) (Version: - ) Hearts of Iron IV (HKLM-x32\...\Hearts of Iron IV_is1) (Version: - ) HiSuite (HKLM-x32\...\Hi Suite) (Version: 11.0.0.560 - Huawei Technologies Co., Ltd.) HV-KB395L version 1.0 (HKLM-x32\...\{ED8C0A83-CE9D-5001-9F11-EE80E19BB380}_is1) (Version: 1.0 - GUANGZHOU HAVIT) HWiNFO64 Version 7.02 (HKLM\...\HWiNFO64_is1) (Version: 7.02 - Martin Malik - REALiX) Icy Tower v1.5.1 (HKLM-x32\...\Icy Tower v1.5.1_is1) (Version: - Free Lunch Design) Intel(R) Chipset Device Software (HKLM-x32\...\{b666e502-9089-483b-9816-0774ccc9cb61}) (Version: 10.1.18295.8201 - Intel(R) Corporation) Intel(R) Ethernet Connection Driver (HKLM-x32\...\Intel(R) Ethernet Connection Driver_is1) (Version: - ) Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2009.14.0.1496 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 17.8.0.1065 - Intel Corporation) Java 8 Update 301 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180301F0}) (Version: 8.0.3010.9 - Oracle Corporation) Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden LIX Plus Gaming Mouse (HKLM-x32\...\{52A566A9-FCEB-4F99-9E8C-7DC3739A39CF}_is1) (Version: 1.1 - SPC GEAR) Malwarebytes version 4.4.7.134 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.4.7.134 - Malwarebytes) Messenger 97.11.116 (HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\c1b3adcf-2068-5e8d-b25d-30ce588e3a4c) (Version: 97.11.116 - Facebook, Inc.) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 94.0.992.38 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{E5A95BC5-81DF-4F0C-B910-B59DD012F037}) (Version: 2.81.0.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61135 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61135 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61135 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61135 - Microsoft Corporation) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61135 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61135 - Microsoft Corporation) Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61135 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61135 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{4ffaf7b8-a84a-4813-840c-8b1f1343ae54}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{dd1e9bde-2ad6-4e92-8c07-7d4723eab8b8}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29334 (HKLM-x32\...\{a9cfe9c7-e54f-46cd-9c5c-542ff8e3e8c4}) (Version: 14.28.29334.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32\...\{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation) Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation) Microsoft Visual Studio Code (User) (HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.60.2 - Microsoft Corporation) Microsoft Windows Desktop Runtime - 3.1.10 (x64) (HKLM-x32\...\{db36836f-11c3-4087-8f9c-daa0086ac619}) (Version: 3.1.10.29419 - Microsoft Corporation) Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation) Mousotron 12.1 (HKLM-x32\...\Mousotron_is1) (Version: 12.1 - Blacksun Software) MSC Mod Loader Pro (HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\{ef4c06bc-ec46-4bbb-9250-6fc5a25323bf}) (Version: 1.0.7.0 - Mod Loader Pro Team) MSI Afterburner 4.6.4 Beta 3 (HKLM-x32\...\Afterburner) (Version: 4.6.4 Beta 3 - MSI Co., LTD) MSI SDK (HKLM-x32\...\{EE7D557C-3AE7-4348-8DCA-3A89790D0002}}_is1) (Version: 2.2020.1207.02 - MSI) Mumble 1.3.4 (HKLM-x32\...\{340F1DD9-F8C2-46D5-AD41-198CC1651506}) (Version: 1.3.4 - The Mumble Developers) Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 8.1.5 - Notepad++ Team) NVIDIA FrameView SDK 1.1.4923.29968894 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29968894 - NVIDIA Corporation) NVIDIA GeForce Experience 3.23.0.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.23.0.74 - NVIDIA Corporation) NVIDIA Oprogramowanie systemu PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation) NVIDIA PhysX (Legacy) (HKLM-x32\...\{FAAC26AD-73BA-40CE-86AA-C9213F9E064A}) (Version: 9.13.0604 - NVIDIA Corporation) NVIDIA Sterownik dźwięku HD 1.3.38.60 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.60 - NVIDIA Corporation) NVIDIA Sterownik graficzny 472.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 472.12 - NVIDIA Corporation) OBS Studio (HKLM-x32\...\OBS Studio) (Version: 26.1.1 - OBS Project) obs-virtualcam (HKLM-x32\...\obs-virtualcam) (Version: - ) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) OpenIV (HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\OpenIV) (Version: 4.0.1.1452 - .black/OpenIV Team) Opera GX Stable 78.0.4093.186 (HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\Opera GX 78.0.4093.186) (Version: 78.0.4093.186 - Opera Software) Oracle VM VirtualBox 6.1.26 (HKLM\...\{71822DCA-AF02-40D5-9BB8-2C1F75356115}) (Version: 6.1.26 - Oracle Corporation) Origin (HKLM-x32\...\Origin) (Version: 10.5.104.48966 - Electronic Arts, Inc.) paint.net (HKLM\...\{1A59F8A6-6AB4-4522-9340-F420B9155A31}) (Version: 4.2.16 - dotPDN LLC) Paradox Launcher v2 (HKLM\...\{66DA3501-823A-4F07-A20D-C64495A59DC8}) (Version: 2.1.0 - Paradox Interactive) Patriot Viper M2 SSD RGB (HKLM\...\{8B4C0A3D-C135-4E1F-98D8-3926494B4D61}) (Version: 1.0.6.2 - Patriot Memory) Hidden Patriot Viper M2 SSD RGB (HKLM-x32\...\{1122cfaf-aa52-4ba0-af2e-1e252b647b5b}) (Version: 1.0.6.2 - Patriot Memory) Phantom Gaming Tuning v3.0.333 (HKLM-x32\...\Phantom Gaming Tuning_is1) (Version: 3.0.333 - ASRock Inc.) Program ładujący instalator Debiana (HKLM-x32\...\Debian-Installer Loader) (Version: 0.9.4+deb10u2 +net +pxe - The Debian Project) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.) Python 3.9.6 (64-bit) (HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\{178e8fd0-1b1d-4cdf-8e5c-f5f53d25e0e4}) (Version: 3.9.6150.0 - Python Software Foundation) Python 3.9.6 Core Interpreter (64-bit) (HKLM\...\{C4B7FF79-1195-436F-AA85-28EE995151B7}) (Version: 3.9.6150.0 - Python Software Foundation) Hidden Python 3.9.6 Development Libraries (64-bit) (HKLM\...\{D6580352-5B95-49A9-B2F3-313D12D13968}) (Version: 3.9.6150.0 - Python Software Foundation) Hidden Python 3.9.6 Documentation (64-bit) (HKLM\...\{2994270E-FE74-49E5-98BB-E65F5F0EC304}) (Version: 3.9.6150.0 - Python Software Foundation) Hidden Python 3.9.6 Executables (64-bit) (HKLM\...\{9BE9E7F0-F9F1-487B-A2FC-790CD2898388}) (Version: 3.9.6150.0 - Python Software Foundation) Hidden Python 3.9.6 pip Bootstrap (64-bit) (HKLM\...\{69BCB7EC-54AF-47F2-A891-D335CE44A530}) (Version: 3.9.6150.0 - Python Software Foundation) Hidden Python 3.9.6 Standard Library (64-bit) (HKLM\...\{4DD10049-CC97-48AE-BE76-4CB6E3111F7B}) (Version: 3.9.6150.0 - Python Software Foundation) Hidden Python 3.9.6 Tcl/Tk Support (64-bit) (HKLM\...\{7C56D977-225C-4EBA-8308-E47DF9FA867F}) (Version: 3.9.6150.0 - Python Software Foundation) Hidden Python 3.9.6 Test Suite (64-bit) (HKLM\...\{5C5B7907-C4E8-4E09-8CD6-3E844C7D65E2}) (Version: 3.9.6150.0 - Python Software Foundation) Hidden Python 3.9.6 Utility Scripts (64-bit) (HKLM\...\{511119D2-41C4-48E1-A3DA-0A6A1E68AC76}) (Version: 3.9.6150.0 - Python Software Foundation) Hidden Python Launcher (HKLM-x32\...\{3CC89AD9-6FF2-40BE-ADF4-8ADDD3030FCE}) (Version: 3.9.7483.0 - Python Software Foundation) Rainmeter (HKLM-x32\...\Rainmeter) (Version: 4.3.1 r3321 - Rainmeter) Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9030.1 - Realtek Semiconductor Corp.) REDlauncher (HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\{7258BA11-600C-430E-A759-27E2C691A335}-REDlauncher_is1) (Version: - GOG.com) Resource Hacker Version 5.1.7 (HKLM-x32\...\ResourceHacker_is1) (Version: - ) Riot Vanguard (HKLM\...\Riot Vanguard) (Version: - Riot Games, Inc.) RIOT: Civil Unrest (HKLM\...\cmlvdGNpdmlsdW5yZXN0_is1) (Version: 1 - ) RivaTuner Statistics Server 7.3.2 Beta 2 (HKLM-x32\...\RTSS) (Version: 7.3.2 Beta 2 - Unwinder) Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.46.448 - Rockstar Games) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.0.9.0 - Rockstar Games) SIMDashboardServer (HKLM-x32\...\{935D3A0D-D9BA-4980-B6C6-F660DBA486D2}) (Version: 3.6.1.0 - stryder-it) Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform) SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - ) Spotify (HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\Spotify) (Version: 1.1.22.633.g1bab253a - Spotify AB) Sprawdzanie kondycji komputera z systemem Windows (HKLM\...\{C6C77787-ED62-49C8-A985-EEE07A3C53B5}) (Version: 2.3.2106.25001 - Microsoft Corporation) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Środowisko uruchomieniowe Microsoft Edge WebView2 (HKLM-x32\...\Microsoft EdgeWebView) (Version: 94.0.992.31 - Microsoft Corporation) The Witcher 3: Wild Hunt - Game of the Year Edition (HKLM-x32\...\1495134320_is1) (Version: 1.32 - GOG.com) TP-Link TL-WN722N (HKLM-x32\...\{F9C15685-38A9-46A1-9826-97204015C19C}) (Version: 1.0.0 - TP-Link) TP-Link Wireless Adapter WPS Tool (HKLM-x32\...\{685EFF87-B126-49E4-8213-70C56625C5B5}) (Version: 1.0.0.1 - TP-Link) TruckersMP Launcher 1.0.0.4 (HKLM\...\{A227B892-C548-4490-9C5D-DB341F8194A6}_is1) (Version: 1.0.0.4 - TruckersMP Team) Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 102.0 - Ubisoft) UE4 Prerequisites (x64) (HKLM\...\{1729B0A9-0490-418B-A565-89B4D5BC8F2D}) (Version: 1.2.0.0 - Epic Games, Inc.) Hidden Unigine Superposition Benchmark 1.1 (HKLM\...\Superposition_is1) (Version: 1.1 - UNIGINE) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) VALORANT (HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\Riot Game valorant.live) (Version: - Riot Games, Inc) Vivaldi (HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\Vivaldi) (Version: 4.1.2369.21 - Vivaldi Technologies AS.) Wargaming.net Game Center (HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\Wargaming.net Game Center) (Version: 21.1.2.4515 - Wargaming.net) WinDirStat 1.1.2 (HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\WinDirStat) (Version: - ) WinRAR 6.00 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.00.0 - win.rar GmbH) WinRAR 6.02 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 6.02.0 - win.rar GmbH) XFast LAN 11.04 (HKLM\...\XFast LAN) (Version: 11.04 - cFos Software GmbH, Bonn) XSplit Broadcaster (HKLM-x32\...\{C0CC35B2-5AC1-4F8D-9586-D48966A4709E}) (Version: 4.1.2104.2317 - SplitmediaLabs) Packages: ========= Dodatek Aparat multimediów dla aplikacji Zdjęcia -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-01-20] (Microsoft Corporation) Dodatek Zdjęcia -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-04-04] (Microsoft Corporation) EarTrumpet -> C:\Program Files\WindowsApps\40459File-New-Project.EarTrumpet_2.1.8.0_x86__1sdd7yawvg6ne [2021-05-20] (File-New-Project) [Startup Task] Lively Wallpaper -> C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.71.0_x86__97hta09mmv6hy [2021-09-29] (rocksdanister) [Startup Task] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-06-28] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-06-28] (Microsoft Corporation) [MS Ad] Microsoft Teams -> C:\Program Files\WindowsApps\MicrosoftTeams_21253.510.996.1465_x64__8wekyb3d8bbwe [2021-09-24] (Microsoft) [Startup Task] Microsoft To Do -> C:\Program Files\WindowsApps\Microsoft.Todos_2.53.42632.0_x64__8wekyb3d8bbwe [2021-09-23] (Microsoft Corporation) [Startup Task] Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_21.10913.5785.0_x64__8wekyb3d8bbwe [2021-09-22] (Microsoft Corporation) Microsoft.UI.Xaml.CBS -> C:\WINDOWS\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe [2021-08-06] (Microsoft Platform Extensions) Nahimic -> C:\Program Files\WindowsApps\A-Volute.Nahimic_1.8.9.0_x64__w2gh52qy24etm [2021-09-23] (A-Volute) NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.961.0_x64__56jybvy8sckqj [2021-09-21] (NVIDIA Corp.) Paint -> C:\Program Files\WindowsApps\Microsoft.Paint_10.2108.1.0_x64__8wekyb3d8bbwe [2021-08-22] (Microsoft Corporation) Photo Editor | Polarr -> C:\Program Files\WindowsApps\613EBCEA.PolarrPhotoEditorAcademicEdition_5.10.200.0_x64__jb41c8remg0x2 [2021-03-23] (Polarr) Power Automate -> C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.99.0_x64__8wekyb3d8bbwe [2021-09-28] (Microsoft Corporation) Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.27.253.0_x64__dt26b99r8h8gj [2021-08-18] (Realtek Semiconductor Corp) Windows Notepad -> C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_10.2103.6.0_x64__8wekyb3d8bbwe [2021-08-22] (Microsoft Corporation) Windows Terminal -> C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.10.2383.0_x64__8wekyb3d8bbwe [2021-09-01] (Microsoft Corporation) [Startup Task] Windows Web Experience Pack -> C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_421.20031.315.0_x64__cw5n1h2txyewy [2021-09-26] (Microsoft Windows) Yeelight Control -> C:\Program Files\WindowsApps\42701MathiasSchwarzhans.YeelightControl_0.4.1.0_x64__3pydnz14cmrrc [2021-09-17] (Mathias Schwarzhans) Zabezpieczenia Windows -> C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.22000.1.0_neutral__8wekyb3d8bbwe [2021-06-28] (Microsoft Corporation) ==================== Niestandardowe rejestracje CLSID (filtrowane): ============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-79845458-3209384264-4084941811-1001_Classes\CLSID\{80172dde-4e20-4df0-81a2-0a48553e80bb}\localserver32 -> C:\Users\Sojuz\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe (A-Volute SAS -> A-Volute) CustomCLSID: HKU\S-1-5-21-79845458-3209384264-4084941811-1001_Classes\CLSID\{FD848478-65F5-4F01-ACD9-69195EC3631F}\localserver32 -> C:\Program Files\ASRock\XFast LAN\cfosspeed.exe (cFos Software GmbH -> cFos Software GmbH) ContextMenuHandlers1: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files (x86)\AIMP\System\aimp_menu64.dll [2021-08-13] (IP Izmaylov Artem Andreevich -> AIMP DevTeam) ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2021-09-26] (Notepad++ -> ) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2021-06-11] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2021-06-11] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-10-02] (Malwarebytes Corporation -> Malwarebytes) ContextMenuHandlers4: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files (x86)\AIMP\System\aimp_menu64.dll [2021-08-13] (IP Izmaylov Artem Andreevich -> AIMP DevTeam) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_19c79fb6254e3b11\nvshext.dll [2021-09-16] (Nvidia Corporation -> NVIDIA Corporation) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-10-02] (Malwarebytes Corporation -> Malwarebytes) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2021-06-11] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2021-06-11] (win.rar GmbH -> Alexander Roshal) ==================== Codecs (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\system32\rtvcvfw64.dll [246272 2012-09-28] () [Brak podpisu cyfrowego] HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\system32\frapsv64.dll [105984 2019-08-30] (Beepa P/L) [Brak podpisu cyfrowego] HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\SysWOW64\rtvcvfw32.dll [247296 2012-09-28] () [Brak podpisu cyfrowego] HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\SysWOW64\frapsvid.dll [94208 2019-08-30] (Beepa P/L) [Brak podpisu cyfrowego] ==================== Skróty & WMI ======================== (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) Shortcut: C:\Users\Sojuz\Desktop\Wszystko 2\MEE2.lnk -> C:\Users\Sojuz\macmillan\run_macmillan.bat () Shortcut: C:\Users\Sojuz\AppData\Roaming\Microsoft\Windows\Start Menu\MEE2.lnk -> C:\Users\Sojuz\macmillan\run_macmillan.bat () Shortcut: C:\Users\Sojuz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\macmillan\MEE2.lnk -> C:\Users\Sojuz\macmillan\run_macmillan.bat () Shortcut: C:\Users\Sojuz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\macmillan\Uninstall MEE2.lnk -> C:\Users\Sojuz\macmillan\uninstall_macmillan.bat () ==================== Załadowane moduły (filtrowane) ============= 2019-11-20 15:38 - 2019-11-20 15:38 - 000412160 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\ASUS\GPU TweakII\CPUPackageTempDLL.dll 2021-09-22 15:39 - 2021-09-22 15:39 - 000179712 _____ (Dominic Jonas) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.71.0_x86__97hta09mmv6hy\livelywpf\NLogViewer.dll 2021-09-13 20:54 - 2021-09-13 20:56 - 000056832 _____ (Linearstar) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.71.0_x86__97hta09mmv6hy\livelywpf\RawInput.Sharp.dll 2021-09-28 16:59 - 2021-09-28 17:00 - 001085952 _____ (livelywpf) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.71.0_x86__97hta09mmv6hy\livelywpf\livelywpf.dll 2021-09-28 16:59 - 2021-09-28 17:01 - 000024576 _____ (livelywpf) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.71.0_x86__97hta09mmv6hy\livelywpf\pl\livelywpf.resources.dll 2021-09-13 20:54 - 2021-09-13 20:55 - 000005120 _____ (Matteo Pagani) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.71.0_x86__97hta09mmv6hy\livelywpf\DesktopBridge.Helpers.dll 2021-09-22 15:39 - 2021-09-22 15:39 - 000914944 _____ (ModernWpf) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.71.0_x86__97hta09mmv6hy\livelywpf\ModernWpf.dll 2021-09-13 20:54 - 2021-09-13 20:55 - 000007168 _____ (ModernWpf) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.71.0_x86__97hta09mmv6hy\livelywpf\pl-PL\ModernWpf.resources.dll 2021-09-22 15:39 - 2021-09-22 15:39 - 000702464 _____ (ModernWpf.Controls) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.71.0_x86__97hta09mmv6hy\livelywpf\ModernWpf.Controls.dll 2021-09-13 20:54 - 2021-09-13 20:55 - 000007168 _____ (ModernWpf.Controls) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.71.0_x86__97hta09mmv6hy\livelywpf\pl-PL\ModernWpf.Controls.resources.dll 2021-09-22 15:39 - 2021-09-22 15:39 - 000821248 _____ (NLog) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.71.0_x86__97hta09mmv6hy\livelywpf\NLog.dll 2021-01-14 13:21 - 2021-01-14 13:20 - 001282048 _____ (The OpenSSL Project, http://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\Origin\LIBEAY32.dll 2021-01-14 13:21 - 2021-01-14 13:20 - 000279040 _____ (The OpenSSL Project, http://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\Origin\ssleay32.dll 2021-01-14 13:21 - 2021-01-14 13:20 - 001611264 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Origin\platforms\qwindows.dll 2021-09-24 22:42 - 2021-01-14 13:20 - 005487104 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Origin\Qt5Core.dll 2021-09-24 22:42 - 2021-01-14 13:20 - 005841920 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Origin\Qt5Gui.dll 2021-09-24 22:42 - 2021-01-14 13:20 - 001179136 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Origin\Qt5Network.dll 2021-09-24 22:42 - 2021-01-14 13:20 - 000146432 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Origin\Qt5WebSockets.dll 2021-09-24 22:42 - 2021-01-14 13:20 - 005089792 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Origin\Qt5Widgets.dll 2021-09-24 22:42 - 2021-01-14 13:20 - 000184832 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Origin\Qt5Xml.dll ==================== Alternate Data Streams (filtrowane) ======== ==================== Tryb awaryjny (filtrowane) ================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\nvdimm.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{53966cb1-4d46-4166-bf23-c522403cd495} => ""="ScmDisk" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nvdimm.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{53966cb1-4d46-4166-bf23-c522403cd495} => ""="ScmDisk" ==================== Powiązania plików (filtrowane) ================= ==================== Internet Explorer (filtrowane) ========== BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_301\bin\ssv.dll [2021-09-10] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_301\bin\jp2ssv.dll [2021-09-10] (Oracle America, Inc. -> Oracle Corporation) ==================== Hosts - zawartość: ========================= (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2019-12-07 11:14 - 2021-10-02 20:58 - 000000027 _____ C:\WINDOWS\system32\drivers\etc\hosts 127.0.0.1 localhost 2021-04-30 16:56 - 2021-04-30 16:57 - 000002027 __RSH C:\WINDOWS\system32\drivers\etc\hosts.ics 0.0.0.0 www.nyrexscript.com 0.0.0.0 nyrexscript.com 0.0.0.0 apathe.net 0.0.0.0 www.apathe.net 0.0.0.0 www.cheatglobal.com 0.0.0.0 cheatglobal.com 0.0.0.0 www.cheatglobal.net 0.0.0.0 cheatglobal.net 0.0.0.0 www.cheatglobal.org 0.0.0.0 cheatglobal.org 0.0.0.0 www.cheatglobal.com 0.0.0.0 cheatglobal.com 0.0.0.0 www.metin2bot.com 0.0.0.0 metin2bot.com 0.0.0.0 www.metin2bot.org 0.0.0.0 metin2bot.org 0.0.0.0 www.metin2bot.net 0.0.0.0 metin2bot.net 0.0.0.0 www.dreamfancy.com 0.0.0.0 dreamfancy.com 0.0.0.0 www.dreamfancy.org 0.0.0.0 dreamfancy.org 0.0.0.0 www.dreamfancy.net 0.0.0.0 dreamfancy.net 0.0.0.0 www.realitycheats.com 0.0.0.0 realitycheats.com 0.0.0.0 www.realitycheats.org 0.0.0.0 realitycheats.org 0.0.0.0 www.realitycheats.net 0.0.0.0 realitycheats.net 0.0.0.0 www.realui.com 0.0.0.0 realui.com 0.0.0.0 www.realui.org 0.0.0.0 realui.org 0.0.0.0 www.realui.net 0.0.0.0 realui.net 0.0.0.0 www.artecheats.com 0.0.0.0 artecheats.com 0.0.0.0 www.artecheats.org 0.0.0.0 artecheats.org 0.0.0.0 www.artecheats.net 0.0.0.0 artecheats.net 0.0.0.0 www.samcheats.com 0.0.0.0 samcheats.com 0.0.0.0 www.samcheats.org 0.0.0.0 samcheats.org 0.0.0.0 www.samcheats.net 0.0.0.0 samcheats.net 0.0.0.0 leaguehell.net 0.0.0.0 www.leaguehell.net 0.0.0.0 leaguehell.com 0.0.0.0 www.leaguehell.com 0.0.0.0 leaguehell.org 0.0.0.0 www.leaguehell.org ==================== Inne obszary =========================== (Obecnie brak automatycznej naprawy dla tej sekcji.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\dotnet\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\ HKU\S-1-5-21-79845458-3209384264-4084941811-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img19.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: ) Zapora systemu Windows [funkcja włączona] Network Binding: ============= Ethernet: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) Ethernet: cFosSpeed for faster Internet connections (NDIS 6) -> cfosspeed (enabled) Wi-Fi: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) Wi-Fi: cFosSpeed for faster Internet connections (NDIS 6) -> cfosspeed (enabled) VirtualBox Host-Only Network: cFosSpeed for faster Internet connections (NDIS 6) -> cfosspeed (enabled) VirtualBox Host-Only Network: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Załączenie wejścia w fixlist spowoduje jego usunięcie.) HKLM\...\StartupApproved\Run: => "SecurityHealth" HKLM\...\StartupApproved\Run: => "XFast LAN" HKLM\...\StartupApproved\Run: => "Riot Vanguard" HKLM\...\StartupApproved\Run: => "IAStorIcon" HKLM\...\StartupApproved\Run32: => "LIX Plus" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKLM\...\StartupApproved\Run32: => "LeagueDisplays" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\StartupFolder: => "launchs.lnk" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "Steam" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "SteamServerBrowser" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "Shell" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "EpicGamesLauncher" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "GogGalaxy" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "Windows Updates Service" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "Gaijin.Net Updater" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "MP3Studio YouTube Downloader" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "PlariumPlay" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "Gyazo" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "Discord" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "Mousotron" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "ProductAuthenticationService" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "Opera GX Browser Assistant" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "Wargaming.net Game Center" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "Facebook.MessengerDesktop" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "Spotify" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_97A7B2B22BF0162DF9186B72029AE3A5" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "Vivaldi Update Notifier" HKU\S-1-5-21-79845458-3209384264-4084941811-1001\...\StartupApproved\Run: => "Skype for Desktop" ==================== Reguły Zapory systemu Windows (filtrowane) ================ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [TCP Query User{BE09A84E-E7DF-43DF-B50F-AFB71ABAABAF}C:\gry\counter-strike 1.6 v43\hl.exe] => (Allow) C:\gry\counter-strike 1.6 v43\hl.exe (Valve) [Brak podpisu cyfrowego] FirewallRules: [UDP Query User{F91DACFE-B074-4D55-8BE0-D8796C988A0B}C:\gry\counter-strike 1.6 v43\hl.exe] => (Allow) C:\gry\counter-strike 1.6 v43\hl.exe (Valve) [Brak podpisu cyfrowego] FirewallRules: [{41EF2F10-DC0E-4C21-96C9-257E68C8CB67}] => (Allow) C:\Program Files (x86)\TP-Link\TP-Link Wireless Adapter WPS Tool\RTLDHCP.exe (Realtek) [Brak podpisu cyfrowego] FirewallRules: [{E1E1115D-564D-4205-88B3-C77A46630AF4}] => (Allow) C:\Program Files (x86)\TP-Link\TP-Link Wireless Adapter WPS Tool\RTLDHCP.exe (Realtek) [Brak podpisu cyfrowego] FirewallRules: [{203DE91F-1837-4597-AEC6-4A276D46C1FC}] => (Allow) C:\Program Files (x86)\TP-Link\TP-Link Wireless Adapter WPS Tool\RTLDHCP.exe (Realtek) [Brak podpisu cyfrowego] FirewallRules: [{1439A496-1866-46D2-BFBD-516060C2EF27}] => (Allow) C:\Program Files (x86)\TP-Link\TP-Link Wireless Adapter WPS Tool\RTLDHCP.exe (Realtek) [Brak podpisu cyfrowego] FirewallRules: [{76A08351-B04B-444D-998C-6A13917DE848}] => (Allow) C:\Program Files (x86)\TP-Link\TP-Link Wireless Adapter WPS Tool\RTLDHCP.exe (Realtek) [Brak podpisu cyfrowego] FirewallRules: [{F3BF823A-3434-4BCE-83EC-79070BCA90DB}] => (Allow) C:\Program Files (x86)\TP-Link\TP-Link Wireless Adapter WPS Tool\RTLDHCP.exe (Realtek) [Brak podpisu cyfrowego] FirewallRules: [{A10271B2-D12A-485D-82AC-F43BE003E40D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation) FirewallRules: [{37486C41-DBBF-4F64-B27C-8E7E80498609}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation) FirewallRules: [TCP Query User{B24F46FB-D617-4D89-B0AC-1BE00EDA9665}C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe (Gaijin Network LTD -> Gaijin Entertainment) FirewallRules: [UDP Query User{B19E4917-F4DD-491F-9D0B-1077BF3FC1CC}C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe (Gaijin Network LTD -> Gaijin Entertainment) FirewallRules: [{ED7FC859-0036-4CB3-9EB3-EDDBE3FE69DE}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [{D7124CAA-934F-46CB-9089-7DEB70B6D268}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [{31D74536-7F72-4F71-8EA3-053A4C91FFEE}] => (Allow) LPort=32682 FirewallRules: [{9ED00831-FF27-4ACE-8EFC-6E26C994996F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.67.99.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{CE0E85D2-2B27-4F4B-83D8-196655EB4116}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.67.99.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{857C459D-EC22-4886-A075-985204F9813D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.67.99.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{C1F30C21-68F1-4DD5-A923-9431445C8773}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.67.99.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [TCP Query User{5770709C-2C08-4135-AA86-5E5D157CD6C1}C:\program files (x86)\steam\steamapps\common\gothic ii\_work\tools\zspy\zspy.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\gothic ii\_work\tools\zspy\zspy.exe () [Brak podpisu cyfrowego] FirewallRules: [UDP Query User{8C472955-098D-4E00-BCD2-373AD60BEF2F}C:\program files (x86)\steam\steamapps\common\gothic ii\_work\tools\zspy\zspy.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\gothic ii\_work\tools\zspy\zspy.exe () [Brak podpisu cyfrowego] FirewallRules: [TCP Query User{1754B6F6-37D2-46AD-9A90-BBE7BA27345F}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Allow) C:\programdata\wargaming.net\gamecenter\wgc.exe (Wargaming.net Limited -> Wargaming.net) FirewallRules: [UDP Query User{16236DB3-A78D-417F-B0F2-8ADB2EE60175}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Allow) C:\programdata\wargaming.net\gamecenter\wgc.exe (Wargaming.net Limited -> Wargaming.net) FirewallRules: [{60B4A629-4FA5-44E9-BC4D-0924E14C1846}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life Deathmatch Source Dedicated server\srcds.exe () [Brak podpisu cyfrowego] FirewallRules: [{8DD3029F-5BF7-4089-9440-C1A352B07E99}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life Deathmatch Source Dedicated server\srcds.exe () [Brak podpisu cyfrowego] FirewallRules: [{6B8A95D8-4C45-4335-8986-649ABF93C95F}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe (Electronic Sports Network i Sverige AB -> ESN Social Software AB) FirewallRules: [{1B87651B-43CA-49F0-82C9-3790180F1E3D}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe (Electronic Sports Network i Sverige AB -> ESN Social Software AB) FirewallRules: [{09FD4A3E-582A-4319-AD0C-7D326ABF0084}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe (BlueStack Systems, Inc. -> BlueStack Systems, Inc.) FirewallRules: [TCP Query User{E249E038-E1E0-4FDF-83CD-5B83CDA992EA}C:\users\sojuz\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\sojuz\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [UDP Query User{5683AA68-4528-4EB2-A36D-C8C93619ACE9}C:\users\sojuz\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\sojuz\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{43772CB2-4D02-4160-822F-34441772507D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{29E9AF57-A719-4318-9B7A-9C933EAD51C2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{2142A24D-B144-414A-9364-80B0F5974D27}] => (Allow) C:\Program Files (x86)\SIMDashboardServer\SIMDashboardServer.exe (Christian Hausmann -> stryder-it) FirewallRules: [{2F4CD967-1775-43FA-A510-90C44A90F4D9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{23047C68-AB18-492E-8F50-C4A6A8F424A4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{AA8E16EC-1E3D-4442-9B7F-CDCDA7B45D57}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{A9EB4C05-9457-4DFA-B9CD-55CED3FE9183}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [TCP Query User{6A0E7C94-1A6D-44D0-AEE4-9C91C0195A2B}C:\users\sojuz\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_gtaprocess.exe] => (Allow) C:\users\sojuz\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_gtaprocess.exe (TASKS ME - IT DEVELOPMENT (AILENE BULALACAO TAGOLGOL) -> Cfx.re) FirewallRules: [UDP Query User{4F8708E3-F8E4-4EE8-83A0-EC0E85AFBC89}C:\users\sojuz\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_gtaprocess.exe] => (Allow) C:\users\sojuz\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_gtaprocess.exe (TASKS ME - IT DEVELOPMENT (AILENE BULALACAO TAGOLGOL) -> Cfx.re) FirewallRules: [TCP Query User{184B5EEB-C941-42A5-B90C-1A4BF342BF5F}C:\riot games\riot client\riotclientservices.exe] => (Allow) C:\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.) FirewallRules: [UDP Query User{6373ACC2-EDE3-47CD-9B95-B0B4D19914C2}C:\riot games\riot client\riotclientservices.exe] => (Allow) C:\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.) FirewallRules: [{E78452D2-CF0B-49E6-B987-D41AB300251F}] => (Block) C:\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.) FirewallRules: [{C7D712CE-3722-4328-8349-DAA96E0CE21D}] => (Block) C:\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.) FirewallRules: [TCP Query User{D0E994CC-EE45-4E9B-9037-488106DA9B0A}C:\users\sojuz\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2189_gtaprocess.exe] => (Allow) C:\users\sojuz\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2189_gtaprocess.exe (TASKS ME - IT DEVELOPMENT (AILENE BULALACAO TAGOLGOL) -> Cfx.re) FirewallRules: [UDP Query User{047A433B-7A98-48E3-BC30-783748551EFA}C:\users\sojuz\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2189_gtaprocess.exe] => (Allow) C:\users\sojuz\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2189_gtaprocess.exe (TASKS ME - IT DEVELOPMENT (AILENE BULALACAO TAGOLGOL) -> Cfx.re) FirewallRules: [{397D256A-A9F0-49C1-9A20-90F19BE8256B}] => (Block) C:\users\sojuz\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2189_gtaprocess.exe (TASKS ME - IT DEVELOPMENT (AILENE BULALACAO TAGOLGOL) -> Cfx.re) FirewallRules: [{1B3BFE5B-1C1A-4B22-AEA6-C7E4201DEBFE}] => (Block) C:\users\sojuz\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2189_gtaprocess.exe (TASKS ME - IT DEVELOPMENT (AILENE BULALACAO TAGOLGOL) -> Cfx.re) FirewallRules: [{109D44D3-FD31-43CE-84C3-02ED58CD206A}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> ) FirewallRules: [{B43DA5CA-9CC8-4718-A724-7C21FDBC62DC}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> ) FirewallRules: [{717F2179-7555-462F-AC6F-DA1AE27B763D}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> ) FirewallRules: [{509BEE73-1257-42F9-8615-6A4C01537296}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> ) FirewallRules: [{5FB705CA-2FE2-4EAA-AEDD-8A9C97BBF318}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\x64\XSplit.Core.exe (SplitmediaLabs Limited -> SplitMediaLabs) FirewallRules: [{3611DF63-E3BC-4F7F-8257-A0E539D0C1D7}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\x64\XSplit.cam.exe (SplitmediaLabs Limited -> SplitmediaLabs Limited) FirewallRules: [{D0FE05BD-041A-49F0-AC7B-AAF0827FA344}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\x64\XSplit.Core.exe (SplitmediaLabs Limited -> SplitMediaLabs) FirewallRules: [{4567B98B-EC79-4E31-B50B-B39E1E237A99}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\x64\XSplit.cam.exe (SplitmediaLabs Limited -> SplitmediaLabs Limited) FirewallRules: [{97D514C1-4206-471C-B724-F99607F480B8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\War Thunder\eac_wt_mlauncher.exe (Gaijin Network LTD -> Gaijin Entertainment) FirewallRules: [{CD4BAE99-A391-44AF-A376-EF0B883E8F74}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\War Thunder\eac_wt_mlauncher.exe (Gaijin Network LTD -> Gaijin Entertainment) FirewallRules: [{AD213800-9012-4A5E-A44B-FBB4F494792C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\War Thunder\launcher.exe (Gaijin Network LTD -> Gaijin) FirewallRules: [{D53E7775-6FD9-43CF-AAE1-34C699B4D05C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\War Thunder\launcher.exe (Gaijin Network LTD -> Gaijin) FirewallRules: [{860FF063-832C-4DBE-9207-B6166CBADFA3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Gothic II\System\Gothic2.exe (Piranha Bytes) [Brak podpisu cyfrowego] FirewallRules: [{5145CC5D-CFF2-4C97-89F9-AA99514A3B7E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Gothic II\System\Gothic2.exe (Piranha Bytes) [Brak podpisu cyfrowego] FirewallRules: [{7FFC4D14-73AF-4687-AFD4-20B3470B5E27}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Destiny 2\destiny2launcher.exe (BattlEye Innovations e.K. -> BattlEye Innovations) FirewallRules: [{8BB38908-3026-4A95-BCEA-28B482E6BF96}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Destiny 2\destiny2launcher.exe (BattlEye Innovations e.K. -> BattlEye Innovations) FirewallRules: [TCP Query User{AD1C36E0-7C6C-4A48-94B5-59052E429811}C:\program files (x86)\steam\steamapps\common\destiny 2\destiny2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\destiny 2\destiny2.exe (Bungie Inc. -> Bungie) FirewallRules: [UDP Query User{8D30B3D8-4C3F-44C8-AFF5-EC62639E5430}C:\program files (x86)\steam\steamapps\common\destiny 2\destiny2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\destiny 2\destiny2.exe (Bungie Inc. -> Bungie) FirewallRules: [{915EE19B-D2BB-464C-8542-6220E57BB575}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bloodhunt\Tiger.exe (Sharkmob) [Brak podpisu cyfrowego] FirewallRules: [{86D1A17C-49A4-40A3-AAB5-9CC7D0975DDC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bloodhunt\Tiger.exe (Sharkmob) [Brak podpisu cyfrowego] FirewallRules: [TCP Query User{0C81E0CC-B235-48E7-A8D7-6B9EC3F2A84C}C:\program files\epic games\core\core\platform\binaries\win64\platform-win64-shipping.exe] => (Allow) C:\program files\epic games\core\core\platform\binaries\win64\platform-win64-shipping.exe (Manticore Games, Inc.) [Brak podpisu cyfrowego] FirewallRules: [UDP Query User{4F69F704-42DD-4E86-8E19-C748E3FBBD66}C:\program files\epic games\core\core\platform\binaries\win64\platform-win64-shipping.exe] => (Allow) C:\program files\epic games\core\core\platform\binaries\win64\platform-win64-shipping.exe (Manticore Games, Inc.) [Brak podpisu cyfrowego] FirewallRules: [{7F53B9D6-555F-45EB-860E-69B4B9D79225}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_21253.510.996.1465_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{7F0EB2F8-F096-4838-ACD8-3936A741E652}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_21253.510.996.1465_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{D8F5CB97-7092-4831-B30B-03755315D8FD}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\94.0.992.31\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{17190BD8-4AEB-4D94-B21F-8BEEDC0970E9}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield V\bfvTrial.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB) FirewallRules: [{C205FD7D-20B1-4899-BF4C-D803124DE350}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield V\bfvTrial.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB) FirewallRules: [{AEED36CB-2FE4-4A81-8E8F-B18A3DF879C2}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield V\bfv.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB) FirewallRules: [{95ADE7E2-C13C-4C08-9419-B1F3F3608184}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield V\bfv.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB) FirewallRules: [TCP Query User{E461B520-42E9-4B4F-BFCC-4F70F9E255F1}C:\users\sojuz\macmillan\jre8\bin\javaw.exe] => (Allow) C:\users\sojuz\macmillan\jre8\bin\javaw.exe FirewallRules: [UDP Query User{82A36CD7-3B8C-462A-A8B3-4A53EE03E0A3}C:\users\sojuz\macmillan\jre8\bin\javaw.exe] => (Allow) C:\users\sojuz\macmillan\jre8\bin\javaw.exe FirewallRules: [{EC4F2967-62E0-4763-B4B7-6DF718EE204E}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.) ==================== Punkty Przywracania systemu ========================= 29-09-2021 17:04:24 Installed Oracle VM VirtualBox 6.1.26 01-10-2021 23:51:09 Zainstalowany program DirectX 02-10-2021 20:56:54 Removed Bonjour ==================== Wadliwe urządzenia w Menedżerze urządzeń ============ ==================== Błędy w Dzienniku zdarzeń: ======================== Dziennik Aplikacja: ================== Error: (10/02/2021 11:17:25 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: a2emergencykit.exe, wersja: 2021.9.0.11172, sygnatura czasowa: 0x611fa88e Nazwa modułu powodującego błąd: ntdll.dll, wersja: 10.0.22000.120, sygnatura czasowa: 0x50702a8c Kod wyjątku: 0xc0000374 Przesunięcie błędu: 0x000000000010be19 Identyfikator procesu powodującego błąd: 0x944 Godzina uruchomienia aplikacji powodującej błąd: 0x01d7b7d1b92d4a3c Ścieżka aplikacji powodującej błąd: C:\EEK\bin64\a2emergencykit.exe Ścieżka modułu powodującego błąd: C:\WINDOWS\SYSTEM32\ntdll.dll Identyfikator raportu: c1c58813-9a29-4242-b096-06481ad655e9 Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error: (10/02/2021 10:22:33 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: mbamtray.exe, wersja: 4.0.0.1128, sygnatura czasowa: 0x6143877d Nazwa modułu powodującego błąd: Qt5Core.dll, wersja: 5.14.1.0, sygnatura czasowa: 0x603971ce Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0000000000219dc5 Identyfikator procesu powodującego błąd: 0x2214 Godzina uruchomienia aplikacji powodującej błąd: 0x01d7b7ca77b4c97c Ścieżka aplikacji powodującej błąd: C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe Ścieżka modułu powodującego błąd: C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll Identyfikator raportu: 1f8b5584-096c-441c-92fc-0e2eedca11ea Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error: (10/02/2021 10:08:36 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: MBAMService.exe, wersja: 3.2.0.996, sygnatura czasowa: 0x6140d6aa Nazwa modułu powodującego błąd: LicenseControllerImpl.dll, wersja: 3.2.0.443, sygnatura czasowa: 0x6140b1ec Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000000000004f9db Identyfikator procesu powodującego błąd: 0x1830 Godzina uruchomienia aplikacji powodującej błąd: 0x01d7b7c943f5374a Ścieżka aplikacji powodującej błąd: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe Ścieżka modułu powodującego błąd: C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\LicenseControllerImpl.dll Identyfikator raportu: 87788af0-069e-43d2-aab6-2e0daf75383e Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error: (10/02/2021 10:01:25 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Program MBSetup-076981.076981-Consumer.exe w wersji 4.1.1.179 przestał współpracować z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemów w oknie Zabezpieczenia i konserwacja w Panelu sterowania. Identyfikator procesu: 1534 Godzina rozpoczęcia: 01d7b7c7f8381ec8 Godzina zakończenia: 4294967295 Ścieżka aplikacji: C:\Users\Sojuz\Downloads\MBSetup-076981.076981-Consumer.exe Identyfikator raportu: c28e45c5-d381-4b2e-bf6c-564f939a7eff Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji powiązanej z pakietem powodującym błąd: Typ zawieszenia: Top level window is idle Error: (10/02/2021 09:52:01 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Program GalaxyClient.exe w wersji 2.0.43.71 przestał współpracować z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemów w oknie Zabezpieczenia i konserwacja w Panelu sterowania. Identyfikator procesu: f58 Godzina rozpoczęcia: 01d7b7c6c26a23d7 Godzina zakończenia: 4294967295 Ścieżka aplikacji: C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe Identyfikator raportu: 04be8465-2c80-4b21-8d3b-50af38f30796 Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji powiązanej z pakietem powodującym błąd: Typ zawieszenia: Top level window is idle Error: (10/02/2021 08:58:52 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas wywoływania procedury QueryFullProcessImageNameW. hr = 0x8007001f, Urządzenie dołączone do komputera nie działa. . Operacja: Wykonywanie operacji asynchronicznej Kontekst: Stan bieżący: DoSnapshotSet Error: (10/02/2021 08:23:21 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: spd.exe, wersja: 11.4.2440.0, sygnatura czasowa: 0x5ecf5930 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 10.0.22000.120, sygnatura czasowa: 0x50702a8c Kod wyjątku: 0xc0000374 Przesunięcie błędu: 0x000000000010be19 Identyfikator procesu powodującego błąd: 0x1804 Godzina uruchomienia aplikacji powodującej błąd: 0x01d7b79a1aa72315 Ścieżka aplikacji powodującej błąd: C:\Program Files\ASRock\XFast LAN\spd.exe Ścieżka modułu powodującego błąd: C:\WINDOWS\SYSTEM32\ntdll.dll Identyfikator raportu: d64b1956-6ad2-498c-a4e0-e3f8f474d353 Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error: (10/02/2021 04:31:26 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Unexpected conflict discarding 16 6.4.B.7.E.F.F.D.A.1.9.C.1.2.C.8.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR ASrock-2.local. Dziennik System: ============= Error: (10/02/2021 11:04:52 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (45000 ms) podczas oczekiwania na połączenie się z usługą Intel(R) TPM Provisioning Service. Error: (10/02/2021 11:04:52 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (45000 ms) podczas oczekiwania na połączenie się z usługą Intel(R) Capability Licensing Service TCP IP Interface. Error: (10/02/2021 11:04:47 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 22:58:04 na ‎02.‎10.‎2021 było nieoczekiwane. Error: (10/02/2021 10:58:10 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (45000 ms) podczas oczekiwania na połączenie się z usługą Intel(R) Capability Licensing Service TCP IP Interface. Error: (10/02/2021 10:58:10 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (45000 ms) podczas oczekiwania na połączenie się z usługą Intel(R) TPM Provisioning Service. Error: (10/02/2021 10:57:51 PM) (Source: volmgr) (EventID: 46) (User: ) Description: Inicjowanie zrzutu awaryjnego nie powiodło się! Error: (10/02/2021 10:58:04 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 22:48:26 na ‎02.‎10.‎2021 było nieoczekiwane. Error: (10/02/2021 10:15:17 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Malwarebytes Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 5000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Windows Defender: ================Event[0] Date: 2021-10-02 23:12:17 Description: Produkt Program antywirusowy Microsoft Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niechciane oprogramowanie. Aby uzyskać więcej informacji, zobacz: https://go.microsoft.com/fwlink/?linkid=37020&name=PUA:Win32/OfferCore&threatid=296844&enterprise=0 Nazwa: PUA:Win32/OfferCore Identyfikator: 296844 Ważność: Niski Kategoria: Potencjalnie niechciane oprogramowanie Ścieżka: file:_C:\Users\Sojuz\Downloads\mody ats\CheatEngine72.exe Pochodzenie wykrycia: Komputer lokalny Typ wykrycia: Konkretne Źródło wykrycia: Ochrona w czasie rzeczywistym Użytkownik: Nazwa procesu: C:\EEK\bin64\a2emergencykit.exe Wersja analizy zabezpieczeń: AV: 1.349.1829.0, AS: 1.349.1829.0, NIS: 1.349.1829.0 Wersja aparatu: AM: 1.1.18600.4, NIS: 1.1.18600.4਍ Event[1] Date: 2021-10-01 16:16:52 Description: N/A Event[2] Date: 2021-09-30 22:23:48 Description: N/A Event[3] Date: 2021-09-30 22:23:43 Description: N/A Event[4] Date: 2021-09-30 22:23:42 Description: N/A  CodeIntegrity: =============== Date: 2021-10-02 23:07:01 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.਍ ==================== Statystyki pamięci =========================== BIOS: American Megatrends Inc. P1.70 09/03/2020 Płyta główna: ASRock B460 Phantom Gaming 4 Procesor: Intel(R) Core(TM) i3-10100F CPU @ 3.60GHz Procent pamięci w użyciu: 57% Całkowita pamięć fizyczna: 8122.17 MB Dostępna pamięć fizyczna: 3432.45 MB Całkowita pamięć wirtualna: 16244.34 MB Dostępna pamięć wirtualna: 8257.04 MB ==================== Dyski ================================ Drive c: (Apacer) (Fixed) (Total:476.28 GB) (Free:10.21 GB) NTFS \\?\Volume{59cfd1f7-e682-488c-b627-65def0e9336f}\ () (Fixed) (Total:0.55 GB) (Free:0.08 GB) NTFS \\?\Volume{c87c011b-712a-44f4-bf05-e9564d1261b6}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32 ==================== MBR & Tablica partycji ==================== ========================================================== Disk: 0 (Protective MBR) (Size: 476.9 GB) (Disk ID: 00000000) Partition: GPT. ==================== Koniec Addition.txt =======================