Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 28-04-2021 Uruchomiony przez Dawidek (05-05-2021 16:59:24) Uruchomiony z C:\Users\Dawid\Downloads Windows 10 Pro Wersja 20H2 19042.928 (X64) (2020-11-10 10:20:19) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-1135572362-2662475839-1791844949-500 - Administrator - Disabled) Dawidek (S-1-5-21-1135572362-2662475839-1791844949-1001 - Administrator - Enabled) => C:\Users\dawid Gość (S-1-5-21-1135572362-2662475839-1791844949-501 - Limited - Disabled) Konto domyślne (S-1-5-21-1135572362-2662475839-1791844949-503 - Limited - Disabled) Milenka (S-1-5-21-1135572362-2662475839-1791844949-1002 - Limited - Enabled) => C:\Users\Milenka Viola&Richi (S-1-5-21-1135572362-2662475839-1791844949-1003 - Administrator - Enabled) => C:\Users\Viola&Richi WDAGUtilityAccount (S-1-5-21-1135572362-2662475839-1791844949-504 - Limited - Disabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF} FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) 7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov) Angry Birds Rio (HKLM-x32\...\{88BE1C5B-2150-4BCA-A3DE-13E6D92EE045}) (Version: 2.2.0 - Rovio Entertainment Ltd.) AOMEI Backupper (HKLM-x32\...\{A83692F5-3E9B-4E95-9E7E-B5DF5536CE9D}_is1) (Version: - AOMEI International Network Limited.) Application Verifier x64 External Package (HKLM\...\{B27BC1FC-8474-9E32-73C2-6F7CD58AD1E3}) (Version: 10.1.17763.132 - Microsoft) Hidden Ashampoo Burning Studio 20 (HKLM-x32\...\{91B33C97-155F-C10C-D4D6-CABA03805EE4}_is1) (Version: 20.0.4 - Ashampoo GmbH & Co. KG) Avast Premium Security (HKLM-x32\...\Avast Antivirus) (Version: 21.3.2459 - Avast Software) CesarFTP 0.99g (HKLM-x32\...\CesarFTP 0.99g_is1) (Version: - Alexandre Cesari) CrystalDiskInfo 8.12.0 (HKLM\...\CrystalDiskInfo_is1) (Version: 8.12.0 - Crystal Dew World) CrystalDiskMark 8.0.1 (HKLM\...\CrystalDiskMark8_is1) (Version: 8.0.1 - Crystal Dew World) Discord (HKU\S-1-5-21-1135572362-2662475839-1791844949-1001\...\Discord) (Version: 0.0.309 - Discord Inc.) Discord (HKU\S-1-5-21-1135572362-2662475839-1791844949-1002\...\Discord) (Version: 0.0.309 - Discord Inc.) Discord Canary (HKU\S-1-5-21-1135572362-2662475839-1791844949-1001\...\DiscordCanary) (Version: 0.0.304 - Discord Inc.) FreeMouseAutoClicker 3.8.6 (HKLM-x32\...\{292F00C5-25EF-4FBE-9873-13EF1F69DEED}_is1) (Version: - Advanced Mouse Auto Clicker ltd.) Futuremark SystemInfo (HKLM-x32\...\{66E02F22-FA88-453D-9DE7-60F54E951FAF}) (Version: 5.10.676.0 - Futuremark) Git version 2.29.2.2 (HKLM\...\Git_is1) (Version: 2.29.2.2 - The Git Development Community) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 90.0.4430.93 - Google LLC) Guilded 1.0.992656-release (HKU\S-1-5-21-1135572362-2662475839-1791844949-1001\...\{37acac95-e961-5909-9d05-c98f2db949a9}) (Version: 1.0.992656-release - Guilded, Inc.) HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software) Hotspot Shield 10.11.4 (HKLM-x32\...\{AF599C42-A2E5-4251-B7EE-4925F1D7F175}) (Version: 10.11.4.11858 - Pango Inc.) Hidden Hotspot Shield 10.11.4 (HKLM-x32\...\{e0c6430f-e050-49c1-8f97-dfb30dd4e20f}) (Version: 10.11.4.11858 - Pango Inc.) Hotspot Shield 10.11.4 (HKLM-x32\...\HotspotShield) (Version: 10.11.4 - Pango Inc.) Hidden HotspotShield TAP-Windows 9.24.4 (HKLM\...\HotspotShield TAP-Windows) (Version: 9.24.4 - Pango Inc.) Inkscape (HKLM-x32\...\Inkscape) (Version: 1.0.1- - Inkscape) Internet Manager (HKLM-x32\...\Internet Manager) (Version: 22.001.18.05.49 - Huawei Technologies Co.,Ltd) Java 8 Update 201 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180201F0}) (Version: 8.0.2010.9 - Oracle Corporation) Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation) Kits Configuration Installer (HKLM-x32\...\{29B915AE-013F-151F-3E61-67F7363C3A09}) (Version: 10.1.17763.132 - Microsoft) Hidden LibreOffice 7.1.2.2 (HKLM\...\{07426A34-E0CD-4EC4-843B-F7A47C7BC835}) (Version: 7.1.2.2 - The Document Foundation) Lightshot-5.5.0.7 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.5.0.7 - Skillbrains) Malwarebytes version 4.3.0.98 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.3.0.98 - Malwarebytes) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 90.0.818.51 - Microsoft Corporation) Microsoft OneDrive (HKLM-x32\...\OneDriveSetup.exe) (Version: 21.062.0328.0001 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{A0E1B43D-5F4A-46AF-9925-ABA3423325DC}) (Version: 2.77.0.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29334 (HKLM-x32\...\{a9cfe9c7-e54f-46cd-9c5c-542ff8e3e8c4}) (Version: 14.28.29334.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32\...\{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation) Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 1.18.1116.1211 - Microsoft Corporation) Minecraft Launcher (HKLM-x32\...\{27B34E47-68AE-4802-822A-9F0C187AF84A}) (Version: 1.0.0.0 - Mojang) MSI Development Tools (HKLM-x32\...\{6C961B30-A670-8A05-3BFE-3947E84DD4E4}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden Node.js (HKLM\...\{2DFAC857-A66A-4D1A-900C-B36DC56C2E76}) (Version: 14.15.1 - Node.js Foundation) NordVPN (HKLM\...\{19465C24-3D5D-4327-B99F-3CC0A1D38151}_is1) (Version: 6.32.25.0 - TEFINCOM S.A.) NordVPN network TAP (HKLM-x32\...\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}) (Version: 1.0.1 - NordVPN) NordVPN network TUN (HKLM\...\{BD0E4F38-D3F6-452D-A32E-B14D721839AC}) (Version: 1.0.1 - NordVPN) Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.9.5 - Notepad++ Team) OBS Studio (HKLM-x32\...\OBS Studio) (Version: 26.0.2 - OBS Project) obs-websocket version 4.8.0 (HKLM-x32\...\{117EE44F-48E1-49E5-A381-CC8D9195CF35}_is1) (Version: 4.8.0 - Stephane Lepin) Opera GX Stable 73.0.3856.438 (HKU\S-1-5-21-1135572362-2662475839-1791844949-1001\...\Opera GX 73.0.3856.438) (Version: 73.0.3856.438 - Opera Software) Opera Stable 75.0.3969.218 (HKU\S-1-5-21-1135572362-2662475839-1791844949-1001\...\Opera 75.0.3969.218) (Version: 75.0.3969.218 - Opera Software) Opera Stable 75.0.3969.243 (HKU\S-1-5-21-1135572362-2662475839-1791844949-1002\...\Opera 75.0.3969.243) (Version: 75.0.3969.243 - Opera Software) Opera Stable 76.0.4017.94 (HKU\.DEFAULT\...\Opera 76.0.4017.94) (Version: 76.0.4017.94 - Opera Software) Opera Stable 76.0.4017.94 (HKU\S-1-5-21-1135572362-2662475839-1791844949-1001\...\Opera 76.0.4017.94) (Version: 76.0.4017.94 - Opera Software) Oracle VM VirtualBox 6.1.16 (HKLM\...\{8979282D-1F43-4810-B819-AA1B06F2C085}) (Version: 6.1.16 - Oracle Corporation) Python 2.7.15 (64-bit) (HKLM\...\{16CD92A4-0152-4CB7-8FD6-9788D3363617}) (Version: 2.7.15150 - Python Software Foundation) Python 3.9.1 (64-bit) (HKU\S-1-5-21-1135572362-2662475839-1791844949-1001\...\{b2be55ad-3177-42aa-a6c2-53004684e4ea}) (Version: 3.9.1150.0 - Python Software Foundation) Python 3.9.1 Core Interpreter (64-bit) (HKLM\...\{1C00F581-D5BF-491E-B1BB-72AA3A2250E5}) (Version: 3.9.1150.0 - Python Software Foundation) Hidden Python 3.9.1 Development Libraries (64-bit) (HKLM\...\{27AD952D-DD9D-4AAC-B486-8AA601BFA064}) (Version: 3.9.1150.0 - Python Software Foundation) Hidden Python 3.9.1 Documentation (64-bit) (HKLM\...\{5CB3AEED-BB03-47E2-BFF1-0CA58C236895}) (Version: 3.9.1150.0 - Python Software Foundation) Hidden Python 3.9.1 Executables (64-bit) (HKLM\...\{71A9F41D-A865-46D4-A650-B210150DEF2A}) (Version: 3.9.1150.0 - Python Software Foundation) Hidden Python 3.9.1 pip Bootstrap (64-bit) (HKLM\...\{EF2B9385-6453-4702-9584-21BA8288D157}) (Version: 3.9.1150.0 - Python Software Foundation) Hidden Python 3.9.1 Standard Library (64-bit) (HKLM\...\{5DD5C023-790B-4F1B-9B1B-8D1BC48F3057}) (Version: 3.9.1150.0 - Python Software Foundation) Hidden Python 3.9.1 Tcl/Tk Support (64-bit) (HKLM\...\{414B5372-24FD-4302-8090-B9CE5564A6DD}) (Version: 3.9.1150.0 - Python Software Foundation) Hidden Python 3.9.1 Test Suite (64-bit) (HKLM\...\{A7EC4DEB-8ABD-471D-BB5B-E579EBC9B043}) (Version: 3.9.1150.0 - Python Software Foundation) Hidden Python 3.9.1 Utility Scripts (64-bit) (HKLM\...\{47A9647A-A576-4751-9C37-D32EB70285A3}) (Version: 3.9.1150.0 - Python Software Foundation) Hidden Python Launcher (HKLM-x32\...\{FFC95928-6A14-4FB3-8D73-7A62382F66AC}) (Version: 3.9.7280.0 - Python Software Foundation) Samsung Data Migration (HKLM-x32\...\{3B304604-0BF5-488E-AB95-F2F2E31206F3}) (Version: 4.0.0.16 - Samsung) Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 6.3.0.330 - Samsung Electronics) SDK ARM Additions (HKLM-x32\...\{0B5D6FB7-05A5-271B-5B99-82384219A471}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden SDK ARM Redistributables (HKLM-x32\...\{4A5F6E94-7967-A333-8231-CA9AF35E03BD}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden Security Process Explorer 1.6 (HKLM-x32\...\Security Process Explorer_is1) (Version: - GlarySoft.com) Snap Camera 1.12.0 (HKLM-x32\...\{024A6CF5-627D-497F-980B-B9A6EC5C40AF}_is1) (Version: 1.12.0 - Snap Inc.) TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.11.6 - TeamViewer) Universal CRT Extension SDK (HKLM-x32\...\{7D225043-6CC5-7B56-11DD-AFF90E4C1C0C}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden Universal CRT Headers Libraries and Sources (HKLM-x32\...\{CB19DBA2-C210-5646-9522-695A1317CD34}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden Universal CRT Redistributable (HKLM-x32\...\{0460C87B-7F4C-3170-FAC9-B7A6AE5CE4E9}) (Version: 10.0.26624 - Microsoft Corporation) Hidden Universal CRT Redistributable (HKLM-x32\...\{5F577A45-3C65-352B-061D-D6A57F05402C}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden Universal CRT Tools x64 (HKLM\...\{3B588BBE-EB02-D1B2-5CD5-7DB85AD8A3E7}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden Universal CRT Tools x86 (HKLM-x32\...\{D2DC1EDF-EE04-9B5F-BDD7-06645D859EC3}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden Universal General MIDI DLS Extension SDK (HKLM-x32\...\{CE83D0BD-418A-F3D1-D6CE-687E96D1EBD0}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden vcpp_crt.redist.clickonce (HKLM-x32\...\{ABEBFE6E-0C94-4F89-AAEA-9027D1082522}) (Version: 14.16.27033 - Microsoft Corporation) Hidden Visual Studio Build Tools 2017 (HKLM-x32\...\e11529f9) (Version: 15.9.28307.1440 - Microsoft Corporation) vs_FileTracker_Singleton (HKLM-x32\...\{A41E138F-5A3F-443C-B72D-957AB994FB5A}) (Version: 15.9.28128 - Microsoft Corporation) Hidden WinAppDeploy (HKLM-x32\...\{716AE8F2-1BE3-7657-DF6B-F23DEEC75AF9}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden Windows SDK AddOn (HKLM-x32\...\{1E76DFA7-96F3-4281-8E41-8A226C3E42EE}) (Version: 10.1.0.0 - Microsoft Corporation) Windows Software Development Kit - Windows 10.0.17763.132 (HKLM-x32\...\{5fe95b9d-9219-4d8b-a031-71323ae48a81}) (Version: 10.1.17763.132 - Microsoft Corporation) Windscribe (HKLM-x32\...\{fa690e90-ddb0-4f0c-b3f1-136c084e5fc7}_is1) (Version: 2.1 Build 3 - Windscribe Limited) WinRT Intellisense Desktop - en-us (HKLM-x32\...\{00B12DF9-5428-9406-DE2C-8E8A1A062B05}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{E82A4A6C-C21C-35FE-B805-3E44318F6D63}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden WinRT Intellisense IoT - en-us (HKLM-x32\...\{7E898893-9C42-A572-7F57-FDE55CE812F7}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{E8B1CB29-5C24-D882-3CEF-F8A7263BC63D}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden WinRT Intellisense Mobile - en-us (HKLM-x32\...\{F6F11150-93DE-0507-FCA0-F746E0207017}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden WinRT Intellisense PPI - en-us (HKLM-x32\...\{8329C3A0-8582-D1C2-67FF-800654BFDF45}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{771C9DEF-7C0B-85DA-6426-7A20F06BEC94}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden WinRT Intellisense UAP - en-us (HKLM-x32\...\{B047C746-63E8-41C7-A5C0-7ABD390CF3E6}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{0063AF94-397B-9C64-1C71-D404B27C5D96}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden Wise Registry Cleaner 10.3.2 (HKLM-x32\...\Wise Registry Cleaner_is1) (Version: 10.3.2 - WiseCleaner.com, Inc.) Packages: ========= Dodatek Aparat multimediów dla aplikacji Zdjęcia -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-03-08] (Microsoft Corporation) HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_126.2.222.0_x64__v10z8vjag6ke6 [2021-05-05] (HP Inc.) Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.9.4213.0_x64__8wekyb3d8bbwe [2021-05-05] (Microsoft Studios) [MS Ad] Roblox -> C:\Program Files\WindowsApps\ROBLOXCORPORATION.ROBLOX_2.476.28149.0_x86__55nm5eh3cm0pr [2021-05-05] (ROBLOX Corporation) Speedtest by Ookla -> C:\Program Files\WindowsApps\Ookla.SpeedtestbyOokla_1.13.154.0_x64__43tkc6nmykmb6 [2021-03-08] (Ookla) Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.157.443.0_x86__zpdnekdrzrea0 [2021-04-23] (Spotify AB) [Startup Task] ==================== Niestandardowe rejestracje CLSID (filtrowane): ============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-1135572362-2662475839-1791844949-1001_Classes\CLSID\{28A80003-18FD-411D-B0A3-3C81F618E22B}\InprocServer32 -> C:\Users\dawid\AppData\Local\Kingsoft\WPS Office\11.2.0.9739\office6\kwpsmenushellext64.dll => Brak pliku CustomCLSID: HKU\S-1-5-21-1135572362-2662475839-1791844949-1001_Classes\CLSID\{47E6DCAF-41F8-441C-BD0E-A50D5FE6C4D1}\localserver32 -> "C:\Users\dawid\AppData\Local\Microsoft\OneDrive\21.030.0211.0002\Microsoft.Nucleus.exe" => Brak pliku CustomCLSID: HKU\S-1-5-21-1135572362-2662475839-1791844949-1001_Classes\CLSID\{917E8742-AA3B-7318-FA12-10485FB322A2}\localserver32 -> "C:\Users\dawid\AppData\Local\Microsoft\OneDrive\21.030.0211.0002\Microsoft.Nucleus.exe" => Brak pliku ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files (x86)\Microsoft OneDrive\21.062.0328.0001\amd64\FileSyncShell64.dll [2021-04-22] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files (x86)\Microsoft OneDrive\21.062.0328.0001\amd64\FileSyncShell64.dll [2021-04-22] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files (x86)\Microsoft OneDrive\21.062.0328.0001\amd64\FileSyncShell64.dll [2021-04-22] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files (x86)\Microsoft OneDrive\21.062.0328.0001\amd64\FileSyncShell64.dll [2021-04-22] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files (x86)\Microsoft OneDrive\21.062.0328.0001\amd64\FileSyncShell64.dll [2021-04-22] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files (x86)\Microsoft OneDrive\21.062.0328.0001\amd64\FileSyncShell64.dll [2021-04-22] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files (x86)\Microsoft OneDrive\21.062.0328.0001\amd64\FileSyncShell64.dll [2021-04-22] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-04-23] (Avast Software s.r.o. -> AVAST Software) ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files (x86)\Microsoft OneDrive\21.062.0328.0001\amd64\FileSyncShell64.dll [2021-04-22] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files (x86)\Microsoft OneDrive\21.062.0328.0001\amd64\FileSyncShell64.dll [2021-04-22] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files (x86)\Microsoft OneDrive\21.062.0328.0001\amd64\FileSyncShell64.dll [2021-04-22] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files (x86)\Microsoft OneDrive\21.062.0328.0001\amd64\FileSyncShell64.dll [2021-04-22] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files (x86)\Microsoft OneDrive\21.062.0328.0001\amd64\FileSyncShell64.dll [2021-04-22] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files (x86)\Microsoft OneDrive\21.062.0328.0001\amd64\FileSyncShell64.dll [2021-04-22] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files (x86)\Microsoft OneDrive\21.062.0328.0001\amd64\FileSyncShell64.dll [2021-04-22] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-04-23] (Avast Software s.r.o. -> AVAST Software) ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\21.062.0328.0001\amd64\FileSyncShell64.dll [2021-04-22] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Brak podpisu cyfrowego] ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2021-03-22] (Notepad++ -> ) ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-04-23] (Avast Software s.r.o. -> AVAST Software) ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-04-23] (Avast Software s.r.o. -> AVAST Software) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-04-23] (Malwarebytes Corporation -> Malwarebytes) ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\21.062.0328.0001\amd64\FileSyncShell64.dll [2021-04-22] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Brak podpisu cyfrowego] ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\21.062.0328.0001\amd64\FileSyncShell64.dll [2021-04-22] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Brak podpisu cyfrowego] ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-04-23] (Avast Software s.r.o. -> AVAST Software) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-04-23] (Malwarebytes Corporation -> Malwarebytes) ==================== Codecs (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Drivers32: [vidc.i420] => C:\Windows\system32\lvcod64.dll [175392 2012-10-26] (Logitech, Inc. -> Logitech Inc.) HKLM\...\Drivers32: [vidc.i420] => C:\Windows\SysWOW64\lvcodec2.dll [305000 2012-10-26] (Logitech, Inc. -> Logitech Inc.) ==================== Skróty & WMI ======================== (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ShortcutWithArgument: C:\Users\dawid\Desktop\Dawid (Szkoła) - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1" ShortcutWithArgument: C:\Users\dawid\Desktop\Dawid - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Default" ShortcutWithArgument: C:\Users\dawid\Desktop\Dawidek (Dawid) - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 3" ShortcutWithArgument: C:\Users\dawid\Desktop\Horizon TV.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=ngkeaccglbnkmociamogjmemagjgcikn ShortcutWithArgument: C:\Users\dawid\Desktop\UPC TV.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 1" --app-id=akemclgdmojpjldmbnmdeofhdgojheae ShortcutWithArgument: C:\Users\dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\Horizon TV.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=ngkeaccglbnkmociamogjmemagjgcikn ShortcutWithArgument: C:\Users\dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\UPC TV.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 1" --app-id=akemclgdmojpjldmbnmdeofhdgojheae ShortcutWithArgument: C:\Users\dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\YouTube.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=agimnkijcaahngcdmfeangaknmldooml ShortcutWithArgument: C:\Users\dawid\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Milena (MIMI) - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 2" ==================== Załadowane moduły (filtrowane) ============= 2020-11-13 17:02 - 2020-11-13 17:02 - 000082944 _____ () [Brak podpisu cyfrowego] \\?\C:\Users\dawid\AppData\Local\Lightcord\resources\app.asar.unpacked\node_modules\glasstron\native\dwm.node 2021-03-31 09:23 - 2021-03-03 17:25 - 000008704 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\AOMEI\AOMEI Backupper 6.5.0\ExFatStd.dll 2020-11-13 17:02 - 2020-11-13 17:02 - 002576384 _____ () [Brak podpisu cyfrowego] C:\Users\dawid\AppData\Local\Lightcord\ffmpeg.dll 2020-11-13 17:02 - 2020-11-13 17:02 - 000314880 _____ () [Brak podpisu cyfrowego] C:\Users\dawid\AppData\Local\Lightcord\libegl.dll 2020-11-13 17:02 - 2020-11-13 17:02 - 006816768 _____ () [Brak podpisu cyfrowego] C:\Users\dawid\AppData\Local\Lightcord\libglesv2.dll 2021-03-31 09:23 - 2015-05-21 14:32 - 000068784 _____ (Aomei Technology Co., Limited -> Microsoft Corporation) [Brak podpisu cyfrowego] C:\Program Files (x86)\AOMEI\AOMEI Backupper 6.5.0\vcomp.dll 2020-11-10 17:43 - 2019-02-21 18:00 - 000078336 _____ (Igor Pavlov) [Brak podpisu cyfrowego] C:\Program Files\7-Zip\7-zip.dll ==================== Alternate Data Streams (filtrowane) ======== ==================== Tryb awaryjny (filtrowane) ================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Powiązania plików (filtrowane) ================= ==================== Internet Explorer (filtrowane) ========== BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_201\bin\ssv.dll [2021-04-13] (Oracle America, Inc. -> Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_201\bin\jp2ssv.dll [2021-04-13] (Oracle America, Inc. -> Oracle Corporation) ==================== Hosts - zawartość: ========================= (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2021-05-03 09:55 - 2021-05-03 09:55 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts 2021-04-27 11:35 - 2021-04-27 11:36 - 000000444 _____ C:\Windows\system32\drivers\etc\hosts.ics ==================== Inne obszary =========================== (Obecnie brak automatycznej naprawy dla tej sekcji.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\Git\cmd;C:\Program Files\nodejs\;C:\Program Files (x86)\AOMEI\AOMEI Backupper 6.5.0 HKU\S-1-5-21-1135572362-2662475839-1791844949-1001\Control Panel\Desktop\\Wallpaper -> D:\Tapety\HD Wallpapers (12).jpg HKU\S-1-5-21-1135572362-2662475839-1791844949-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Milenka\Downloads\tapeta-maly-szary-kotek-na-desce.jpg HKU\S-1-5-21-1135572362-2662475839-1791844949-1003\Control Panel\Desktop\\Wallpaper -> D:\Tapety\HD Wallpapers (83).jpg DNS Servers: 1.1.1.1 - 1.0.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: ) Zapora systemu Windows [funkcja włączona] Network Binding: ============= Ethernet 2: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) Ethernet 2: NordVPN LightWeight Firewall -> NordLwf (enabled) Ethernet: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) Ethernet: NordVPN LightWeight Firewall -> NordLwf (enabled) Połączenie lokalne 2: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) Połączenie lokalne 2: NordVPN LightWeight Firewall -> NordLwf (enabled) VirtualBox Host-Only Network: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) VirtualBox Host-Only Network: NordVPN LightWeight Firewall -> NordLwf (enabled) Połączenie lokalne: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) Połączenie lokalne: NordVPN LightWeight Firewall -> NordLwf (enabled) Wi-Fi: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) Wi-Fi: NordVPN LightWeight Firewall -> NordLwf (enabled) ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == ==================== Reguły Zapory systemu Windows (filtrowane) ================ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [TCP Query User{4B686422-764B-4272-BFDE-CE8B5AD3A799}C:\program files\java\jre1.8.0_51\bin\javaw.exe] => (Block) C:\program files\java\jre1.8.0_51\bin\javaw.exe FirewallRules: [UDP Query User{E08CC8FE-4D7D-4982-9A6D-7D67851DFE7D}C:\program files\java\jre1.8.0_51\bin\javaw.exe] => (Block) C:\program files\java\jre1.8.0_51\bin\javaw.exe FirewallRules: [{7B7E96E2-2FCB-4064-B065-905F449C4B3E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [{681D5753-1416-4137-9284-F4130FFAB97B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [{8EB83A05-2F27-46BD-8701-D174B1ACFBA7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [{C6C610F7-0B0A-4E2F-AEA2-1836CC8EE508}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [TCP Query User{16029AFB-B877-46AD-953A-24555640223D}C:\program files\obs-studio\bin\64bit\obs64.exe] => (Allow) C:\program files\obs-studio\bin\64bit\obs64.exe (Hugh Bailey -> OBS) FirewallRules: [UDP Query User{903E2945-A8AC-487D-8385-9D1F14C38F10}C:\program files\obs-studio\bin\64bit\obs64.exe] => (Allow) C:\program files\obs-studio\bin\64bit\obs64.exe (Hugh Bailey -> OBS) FirewallRules: [TCP Query User{FD9819FA-21AE-4F00-9253-304F84556D72}C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe FirewallRules: [UDP Query User{285B2615-ECB5-4CE8-8711-A00AC8933336}C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe FirewallRules: [{76C1CB83-B03D-4BC9-999D-917995BD151D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{B55E4748-AFAC-42E5-A579-DFD3F65064B9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{6051962B-1CC4-402D-B410-328C1BF5576B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{3310296D-8334-4987-9C21-6DA2379771F8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [TCP Query User{CFAE838B-575B-4422-810A-B7F8ED8D04E3}C:\program files (x86)\cesarftp\server.exe] => (Allow) C:\program files (x86)\cesarftp\server.exe () [Brak podpisu cyfrowego] FirewallRules: [UDP Query User{47231FD3-7097-4FA9-90CF-A5AB96354611}C:\program files (x86)\cesarftp\server.exe] => (Allow) C:\program files (x86)\cesarftp\server.exe () [Brak podpisu cyfrowego] FirewallRules: [TCP Query User{DA8FF484-5C7B-421E-8E77-3B185267F462}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Allow) C:\program files (x86)\windscribe\wsappcontrol.exe => Brak pliku FirewallRules: [UDP Query User{D9FE3F0A-F6A1-4F98-AF19-58710A2BE2B7}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Allow) C:\program files (x86)\windscribe\wsappcontrol.exe => Brak pliku FirewallRules: [TCP Query User{47FD4C54-596A-4799-A791-1A57F0AC8A97}C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe FirewallRules: [UDP Query User{C5E3E83C-6B68-4D8D-B31A-6610444688C9}C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe FirewallRules: [TCP Query User{2671DEE3-5C27-4BE6-B3DE-4CD9319B9E16}C:\users\dawid\appdata\local\programs\opera\74.0.3911.203\opera.exe] => (Allow) C:\users\dawid\appdata\local\programs\opera\74.0.3911.203\opera.exe => Brak pliku FirewallRules: [UDP Query User{AFD1AF81-39C9-473E-8515-0BDC070E7C82}C:\users\dawid\appdata\local\programs\opera\74.0.3911.203\opera.exe] => (Allow) C:\users\dawid\appdata\local\programs\opera\74.0.3911.203\opera.exe => Brak pliku FirewallRules: [TCP Query User{C2610171-8ABB-4519-8DE0-0011A4ADB88D}C:\users\milenka\appdata\local\programs\opera\74.0.3911.218\opera.exe] => (Block) C:\users\milenka\appdata\local\programs\opera\74.0.3911.218\opera.exe => Brak pliku FirewallRules: [UDP Query User{FC3C94D4-7025-45B8-B434-883E6F29CFBC}C:\users\milenka\appdata\local\programs\opera\74.0.3911.218\opera.exe] => (Block) C:\users\milenka\appdata\local\programs\opera\74.0.3911.218\opera.exe => Brak pliku FirewallRules: [TCP Query User{6E9D66B1-3976-468B-8F64-6E1656B4E6DA}C:\users\dawid\appdata\local\programs\opera\74.0.3911.218\opera.exe] => (Allow) C:\users\dawid\appdata\local\programs\opera\74.0.3911.218\opera.exe => Brak pliku FirewallRules: [UDP Query User{66AA5C34-EA93-4DC7-BAD6-ADC8B08F125D}C:\users\dawid\appdata\local\programs\opera\74.0.3911.218\opera.exe] => (Allow) C:\users\dawid\appdata\local\programs\opera\74.0.3911.218\opera.exe => Brak pliku FirewallRules: [{69D6FAE2-91FF-4C19-8E76-F0E9FCB24159}] => (Allow) C:\Program Files (x86)\AOMEI\AOMEI Backupper 6.4.0\ABService.exe => Brak pliku FirewallRules: [{03125136-FAD1-45E8-B53A-5001BBF7CA02}] => (Allow) C:\Program Files (x86)\AOMEI\AOMEI Backupper 6.4.0\ABService.exe => Brak pliku FirewallRules: [{F35A678E-F736-4818-AD62-D16A81921EBD}] => (Allow) C:\Program Files (x86)\AOMEI\AOMEI Backupper 6.5.0\ABService.exe (AOMEI International Network Limited -> AOMEI International Network Limited) FirewallRules: [{97F53C21-6B8D-4A79-8359-6993653A9845}] => (Allow) C:\Program Files (x86)\AOMEI\AOMEI Backupper 6.5.0\ABService.exe (AOMEI International Network Limited -> AOMEI International Network Limited) FirewallRules: [{0A2ABC5B-52A1-4354-AF6D-23EFD768B749}] => (Allow) C:\Windows\KMS-R@1n.exe => Brak pliku FirewallRules: [{E84784C6-9179-4DBB-A6DC-454A1620E463}] => (Allow) C:\Windows\KMS-R@1n.exe => Brak pliku FirewallRules: [TCP Query User{48CEE0F3-0AC8-4BDE-AE3C-D0C2BDD0FF0A}C:\program files\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_201\bin\javaw.exe FirewallRules: [UDP Query User{F0C826E0-86C6-4D3F-BD15-9242BADEBA33}C:\program files\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_201\bin\javaw.exe FirewallRules: [{BD75C60B-D5A3-4D24-BF55-D5BBA44C3AFD}] => (Allow) C:\Program Files (x86)\AOMEI\AOMEI Backupper 6.5.0\ABService.exe (AOMEI International Network Limited -> AOMEI International Network Limited) FirewallRules: [{5DFE4310-BEE2-4F16-A544-BD0B4419A1DE}] => (Allow) C:\Program Files (x86)\AOMEI\AOMEI Backupper 6.5.0\ABService.exe (AOMEI International Network Limited -> AOMEI International Network Limited) FirewallRules: [{4DCC9F1F-E086-453D-AB4A-70275C3921F2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.157.443.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{F309EB2C-31A0-4B11-AF57-993B43C09A57}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.157.443.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{1637AA13-5342-41EF-8387-148D1268EFCF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.157.443.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{EBBDC02E-D90D-4A21-817F-667B84AB210B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.157.443.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{BD9CC341-A832-4285-996C-6BFCF2A96B7A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.157.443.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{20E4FA21-AB97-425D-A305-886B3168B8E5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.157.443.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{34A49D33-2E41-495F-9812-EC4269DCBFEB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.157.443.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{452157E8-26F1-4B4A-819A-51EB4FBF2573}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.157.443.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{E25CBAC3-5EBC-414B-8728-19E3C56166D2}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{FF06028B-130A-4BEE-9F37-54144FAB9C02}] => (Allow) c:\users\dawid\appdata\local\programs\opera\76.0.4017.94\opera.exe (Opera Software AS -> Opera Software) FirewallRules: [{26FD2040-062C-4726-8D7F-92DE108C6DE4}] => (Allow) c:\users\milenka\appdata\local\programs\opera\76.0.4017.94\opera.exe (Opera Software AS -> Opera Software) FirewallRules: [{3CD46F52-037D-4CDC-AE8D-3C549A6A3408}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.158.820.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{676AB358-E9B8-49E7-9E63-1FFE68CD0639}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.158.820.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{E421A8F4-04C2-4CCE-B44E-F2A5A9B37C5D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.158.820.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{711C0158-2AA0-490C-80A9-0BFA7E6F0EDC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.158.820.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{B7E1CFE1-D11D-4900-8454-83AD2C26786C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.158.820.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{26B56335-E09C-4527-81C9-D0CCCB458C73}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.158.820.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{79ED43D9-BD3D-47C5-ACA5-E04BF73C526F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.158.820.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{965AB845-7E7C-42F5-AC35-D278F7F4F473}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.158.820.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) ==================== Punkty Przywracania systemu ========================= ==================== Wadliwe urządzenia w Menedżerze urządzeń ============ ==================== Błędy w Dzienniku zdarzeń: ======================== Dziennik Aplikacja: ================== Error: (05/05/2021 04:03:41 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: Aktywacja licencji (slui.exe) nie powiodła się, kod błędu: hr=0xC004F074 Argumenty wiersza polecenia: RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable Error: (05/05/2021 03:57:10 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: Aktywacja licencji (slui.exe) nie powiodła się, kod błędu: hr=0xC004F074 Argumenty wiersza polecenia: RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable Error: (05/05/2021 03:50:46 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: Aktywacja licencji (slui.exe) nie powiodła się, kod błędu: hr=0xC004F074 Argumenty wiersza polecenia: RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable Error: (05/05/2021 09:26:27 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: Aktywacja licencji (slui.exe) nie powiodła się, kod błędu: hr=0xC004F074 Argumenty wiersza polecenia: RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable Error: (05/05/2021 09:26:06 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: Aktywacja licencji (slui.exe) nie powiodła się, kod błędu: hr=0xC004F074 Argumenty wiersza polecenia: RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=18 Error: (05/04/2021 07:56:52 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: Aktywacja licencji (slui.exe) nie powiodła się, kod błędu: hr=0xC004F074 Argumenty wiersza polecenia: RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=17 Error: (05/04/2021 07:05:35 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: Aktywacja licencji (slui.exe) nie powiodła się, kod błędu: hr=0xC004F074 Argumenty wiersza polecenia: RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable Error: (05/04/2021 07:05:13 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: Aktywacja licencji (slui.exe) nie powiodła się, kod błędu: hr=0xC004F074 Argumenty wiersza polecenia: RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=16 Dziennik System: ============= Error: (05/05/2021 04:56:13 PM) (Source: Schannel) (EventID: 4103) (User: ZARZĄDZANIE NT) Description: Wystąpił błąd krytyczny podczas tworzenia poświadczeń TLS klient. Stan błędu wewnętrznego: 10013. Error: (05/05/2021 04:28:46 PM) (Source: DCOM) (EventID: 10010) (User: ZARZĄDZANIE NT) Description: Serwer {E60687F7-01A1-40AA-86AC-DB1CBF673334} nie zarejestrował się w modelu DCOM w wymaganym czasie. Error: (05/05/2021 04:28:13 PM) (Source: Schannel) (EventID: 4103) (User: ZARZĄDZANIE NT) Description: Wystąpił błąd krytyczny podczas tworzenia poświadczeń TLS klient. Stan błędu wewnętrznego: 10013. Error: (05/05/2021 04:26:46 PM) (Source: DCOM) (EventID: 10010) (User: ZARZĄDZANIE NT) Description: Serwer {E60687F7-01A1-40AA-86AC-DB1CBF673334} nie zarejestrował się w modelu DCOM w wymaganym czasie. Error: (05/05/2021 04:00:13 PM) (Source: Schannel) (EventID: 4103) (User: ZARZĄDZANIE NT) Description: Wystąpił błąd krytyczny podczas tworzenia poświadczeń TLS klient. Stan błędu wewnętrznego: 10013. Error: (05/05/2021 03:57:32 PM) (Source: Schannel) (EventID: 4103) (User: ZARZĄDZANIE NT) Description: Wystąpił błąd krytyczny podczas tworzenia poświadczeń TLS klient. Stan błędu wewnętrznego: 10013. Error: (05/05/2021 03:57:32 PM) (Source: Schannel) (EventID: 4103) (User: ZARZĄDZANIE NT) Description: Wystąpił błąd krytyczny podczas tworzenia poświadczeń TLS klient. Stan błędu wewnętrznego: 10013. Error: (05/05/2021 03:56:54 PM) (Source: Schannel) (EventID: 4103) (User: ZARZĄDZANIE NT) Description: Wystąpił błąd krytyczny podczas tworzenia poświadczeń TLS klient. Stan błędu wewnętrznego: 10013. Windows Defender: ================ Date: 2021-05-05 15:30:21 Description: Skanowanie produktu Program antywirusowy Microsoft Defender zostało zatrzymane przed ukończeniem. Identyfikator skanowania: {01F4A8E7-D413-4EFF-B8F2-0509553466CD} Typ skanowania: Narzędzia chroniące przed złośliwym oprogramowaniem Parametry skanowania: Szybkie skanowanie Użytkownik: ZARZĄDZANIE NT\SYSTEM Date: 2021-05-04 14:28:48 Description: Skanowanie produktu Program antywirusowy Microsoft Defender zostało zatrzymane przed ukończeniem. Identyfikator skanowania: {33BF71E9-B120-4A7F-8753-9599ACE0DF7D} Typ skanowania: Narzędzia chroniące przed złośliwym oprogramowaniem Parametry skanowania: Szybkie skanowanie Użytkownik: ZARZĄDZANIE NT\SYSTEM Date: 2021-05-03 19:50:36 Description: Skanowanie produktu Program antywirusowy Microsoft Defender zostało zatrzymane przed ukończeniem. Identyfikator skanowania: {7CF46BDE-4269-41BB-91CF-23608D3634E8} Typ skanowania: Narzędzia chroniące przed złośliwym oprogramowaniem Parametry skanowania: Szybkie skanowanie Użytkownik: ZARZĄDZANIE NT\SYSTEM Date: 2021-05-03 10:33:27 Description: Skanowanie produktu Program antywirusowy Microsoft Defender zostało zatrzymane przed ukończeniem. Identyfikator skanowania: {65F168D8-7426-4662-BB10-05078645AF9C} Typ skanowania: Narzędzia chroniące przed złośliwym oprogramowaniem Parametry skanowania: Szybkie skanowanie Użytkownik: ZARZĄDZANIE NT\SYSTEM Date: 2021-05-02 12:27:30 Description: Skanowanie produktu Program antywirusowy Microsoft Defender zostało zatrzymane przed ukończeniem. Identyfikator skanowania: {A771BDD7-59CF-429B-AAAA-7C5C19247782} Typ skanowania: Narzędzia chroniące przed złośliwym oprogramowaniem Parametry skanowania: Szybkie skanowanie Użytkownik: ZARZĄDZANIE NT\SYSTEM Date: 2021-12-04 06:34:35 Description: Produkt Program antywirusowy Microsoft Defender napotkał błąd podczas próby aktualizacji analizy zabezpieczeń. Nowa wersja analizy zabezpieczeń: Poprzednia wersja analizy zabezpieczeń: 1.335.1685.0 Źródło aktualizacji: Serwer usługi Microsoft Update Typ analizy zabezpieczeń: Oprogramowanie antywirusowe Typ aktualizacji: Pełne Użytkownik: ZARZĄDZANIE NT\SYSTEM Bieżąca wersja aparatu: Poprzednia wersja aparatu: 1.1.18000.5 Kod błędu: 0x800b0101 Opis błędu: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. Date: 2021-04-13 08:15:51 Description: Produkt Program antywirusowy Microsoft Defender napotkał błąd podczas próby przywrócenia elementu z kwarantanny. Aby uzyskać więcej informacji, zobacz: https://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/AutoKMS.SA!MSR&threatid=2147741757&enterprise=0 Nazwa: HackTool:Win32/AutoKMS.SA!MSR Identyfikator: 2147741757 Ważność: Wysoki Kategoria: Narzędzie Użytkownik: DESKTOP-CSAVP54\Dawidek Kod błędu: 0x80508014 Opis błędu: Nie można przywrócić elementu poddanego kwarantannie. Wersja analizy zabezpieczeń: AV: 1.335.740.0, AS: 1.335.740.0 Wersja aparatu: 1.1.18000.5 Date: 2021-12-04 17:06:59 Description: Produkt Program antywirusowy Microsoft Defender napotkał błąd podczas próby aktualizacji analizy zabezpieczeń. Nowa wersja analizy zabezpieczeń: Poprzednia wersja analizy zabezpieczeń: 1.335.698.0 Źródło aktualizacji: Serwer usługi Microsoft Update Typ analizy zabezpieczeń: Oprogramowanie antywirusowe Typ aktualizacji: Pełne Użytkownik: ZARZĄDZANIE NT\SYSTEM Bieżąca wersja aparatu: Poprzednia wersja aparatu: 1.1.18000.5 Kod błędu: 0x800b0101 Opis błędu: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. Date: 2021-12-04 16:57:02 Description: Produkt Program antywirusowy Microsoft Defender napotkał błąd podczas próby aktualizacji analizy zabezpieczeń. Nowa wersja analizy zabezpieczeń: Poprzednia wersja analizy zabezpieczeń: 1.335.676.0 Źródło aktualizacji: Serwer usługi Microsoft Update Typ analizy zabezpieczeń: Oprogramowanie antywirusowe Typ aktualizacji: Pełne Użytkownik: ZARZĄDZANIE NT\SYSTEM Bieżąca wersja aparatu: Poprzednia wersja aparatu: 1.1.18000.5 Kod błędu: 0x800b0101 Opis błędu: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji bieżącego zegara systemowego lub sygnatury czasowej. CodeIntegrity: =============== Date: 2021-05-05 16:57:11 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements. ==================== Statystyki pamięci =========================== BIOS: American Megatrends Inc. 1201 09/04/2012 Płyta główna: ASUSTeK Computer INC. M5A78L-M LX V2 Procesor: AMD Phenom(tm) II X4 955 Processor Procent pamięci w użyciu: 94% Całkowita pamięć fizyczna: 7934.11 MB Dostępna pamięć fizyczna: 410.61 MB Całkowita pamięć wirtualna: 20734.11 MB Dostępna pamięć wirtualna: 7781.28 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:465.27 GB) (Free:218.45 GB) NTFS Drive d: (Dysk Dawidek) (Fixed) (Total:1863.01 GB) (Free:1706.08 GB) NTFS Drive e: () (Removable) (Total:1.83 GB) (Free:1.83 GB) FAT \\?\Volume{4aa70009-0000-0000-0000-100000000000}\ () (Fixed) (Total:0.49 GB) (Free:0.46 GB) NTFS ==================== MBR & Tablica partycji ==================== ========================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: 4AA70009) Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=465.3 GB) - (Type=07 NTFS) ========================================================== Disk: 1 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: D93C1D18) Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS) ========================================================== Disk: 2 (Size: 1.8 GB) (Disk ID: A5A45F38) Partition 1: (Not Active) - (Size=1.8 GB) - (Type=0E) ==================== Koniec Addition.txt =======================