Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 16-12-2023 Uruchomiony przez User (16-12-2023 17:23:41) Uruchomiony z C:\Users\User\Downloads Microsoft Windows 11 Pro Wersja 23H2 22631.2861 (X64) (2084-10-01 01:10:07) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= (Załączenie wejścia w fixlist spowoduje jego usunięcie.) Administrator (S-1-5-21-1317094474-1395548158-2812114734-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-1317094474-1395548158-2812114734-503 - Limited - Disabled) Gast (S-1-5-21-1317094474-1395548158-2812114734-501 - Limited - Disabled) User (S-1-5-21-1317094474-1395548158-2812114734-1001 - Administrator - Enabled) => C:\Users\User WDAGUtilityAccount (S-1-5-21-1317094474-1395548158-2812114734-504 - Limited - Disabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: G DATA INTERNET SECURITY (Enabled - Up to date) {9A031196-8C4F-6B12-1520-CC6F3EA1D298} FW: G DATA INTERNET SECURITY (Enabled) {A23890B3-C620-6A4A-3E7F-655AC07295E3} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) 7-Zip 23.01 (x64) (HKLM\...\7-Zip) (Version: 23.01 - Igor Pavlov) AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 5.08.02.027 - Advanced Micro Devices, Inc.) AMD PCI Driver (HKLM-x32\...\{80EC3CEE-2940-42A1-A776-B5D810D39F1E}) (Version: 1.0.0.90 - Advanced Micro Devices, Inc.) Hidden AMD Privacy View (HKLM\...\{D8E24EA6-807B-48D0-86D6-A9C5E74B8F2C}) (Version: 1.02.0001 - Eyeware Tech SA) AMD PSP Driver (HKLM-x32\...\{988F14B8-79A8-475D-BAC7-83F96AD3D821}) (Version: 5.24.0.0 - Advanced Micro Devices, Inc.) Hidden AMD SBxxx SMBus Driver (HKLM-x32\...\{AAE0E27D-C88A-49BA-8715-77ADCD4286A3}) (Version: 5.12.0.38 - Advanced Micro Devices, Inc.) Hidden AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 23.10.2 - Advanced Micro Devices, Inc.) AMD_Chipset_Drivers (HKLM-x32\...\{94dc9043-935f-4e10-ac8b-5ce0ac055188}) (Version: 5.08.02.027 - Advanced Micro Devices, Inc.) Hidden Anaconda3 2023.09-0 (Python 3.11.5 64-bit) (HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\Anaconda3 2023.09-0 (Python 3.11.5 64-bit)) (Version: 2023.09-0 - Anaconda, Inc.) Arkusze (HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\70b838d9854e9218f6fe030bf7faf9fa) (Version: 1.0 - Google\Chrome) Bandicam (HKLM-x32\...\Bandicam) (Version: 7.0.1.2132 - Bandicam.com) Bandicam MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandicam.com) BatchPurifier (HKLM-x32\...\{BD2C737A-E81C-4F1A-86D1-8A25E6208582}) (Version: 8.30.0000 - Digital Confidence) BlueStacks App Player (HKLM\...\BlueStacks_nxt) (Version: 5.13.220.1002 - now.gg, Inc.) BlueStacks Services (HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\BlueStacksServices) (Version: 3.0.2 - now.gg, Inc.) BlueStacks X (HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\BlueStacks X) (Version: 10.4.70.1002 - now.gg, Inc.) Branding64 (HKLM\...\{492AEFBE-1B81-4C20-A111-E6974BB98EC5}) (Version: 1.00.0009 - Advanced Micro Devices, Inc.) Hidden CCleaner (HKLM\...\CCleaner) (Version: 6.18 - Piriform) COMFAST Wireless Adapter (HKLM\...\{ecd4db36-f835-11e8-ab87-cf4abc0dde95}_is1) (Version: 1.0.0.1 - COMFAST) Discord (HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\Discord) (Version: 1.0.9025 - Discord Inc.) Dokumenty (HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\cb556ac90957229906dbdc8059cbf9bc) (Version: 1.0 - Google\Chrome) Dysk Google (HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\43b7ab841d95438db7131cf3fb7f5e7a) (Version: 1.0 - Google\Chrome) EA app (HKLM\...\{C2622085-ABD2-49E5-8AB9-D3D6A642C091}) (Version: 13.74.0.5587 - Electronic Arts) Hidden EA app (HKLM-x32\...\{864251cf-70ed-4cf2-8c21-64e8d527f486}) (Version: 13.74.0.5587 - Electronic Arts) EA SPORTS FC 24 (HKLM-x32\...\{D599A8A7-E083-496C-B891-5752CD4E04F3}) (Version: 1.0.84.10708 - Electronic Arts) FileZilla 3.65.0 (HKLM-x32\...\FileZilla Client) (Version: 3.65.0 - Tim Kosse) Futuremark SystemInfo (HKLM-x32\...\{D808F32F-09EA-4998-95F2-1C5C8A02C2D6}) (Version: 5.68.1202.0 - Futuremark) G DATA INTERNET SECURITY (HKLM-x32\...\G DATA INTERNET SECURITY) (Version: 25.5.16.125 - G DATA CyberDefense AG) Gmail (HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\e3ba3413bf7258e21468ac1980a66ea7) (Version: 1.0 - Google\Chrome) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 120.0.6099.72 - Google LLC) iMacros (HKLM\...\iMacros) (Version: 2021.0.0.0 - Progress Software Corporation) iMacros Version 12.6.505.4525 (x64) (HKLM\...\{9C5118F7-E26D-4fc0-B7F4-4A067A0808FA}_is1) (Version: 12.6.505.4525 - Ipswitch, Inc) Intel(R) Chipset Device Software (HKLM\...\{06D713D6-9845-436D-B857-5BF2596B4554}) (Version: 10.1.18634.8254 - Intel Corporation) Hidden Intel(R) Chipset Device Software (HKLM-x32\...\{99926fb7-5da9-4101-b79f-eec3674ca64b}) (Version: 10.1.18634.8254 - Intel(R) Corporation) Hidden Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2817 - Intel Corporation) Hidden Intel(R) Serial IO (HKLM\...\{00C3C021-EF54-49EE-BA10-8153E941194D}) (Version: 30.100.1750.1 - Intel Corporation) Hidden Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1750.1 - Intel Corporation) Hidden Intel(R) Trusted Connect Service Client x64 (HKLM\...\{C9552825-7BF2-4344-BA91-D3CD46F4C442}) (Version: 1.54.25.1 - Intel Corporation) Hidden Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.54.25.1 - Intel Corporation) Hidden Intel(R) Trusted Connect Services Client (HKLM-x32\...\{63ac388a-c770-4fa6-a1f0-1702f5239627}) (Version: 1.54.25.1 - Intel Corporation) Hidden Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 3.1.50.2315 - Intel Corporation) Hidden Intel(R) Trusted Execution Engine (HKLM\...\{1853CB85-B8B2-49B7-AAD4-78BFCC212D2D}) (Version: 1.0.0.0 - Intel Corporation) Hidden Intel(R) Trusted Execution Engine (HKLM\...\{1EE0B3AE-A69B-4541-B934-A757B247D5A2}) (Version: 1.1.1.1 - Intel Corporation) Hidden Intel(R) Trusted Execution Engine Driver (HKLM\...\{2D49B8A8-2654-45B3-BD88-C03B0A914278}) (Version: 1.0.0.0 - Intel Corporation) Hidden Intel(R) TXE Storage Proxy Driver (HKLM\...\{AA897BD1-47A7-4125-BA14-872F1F1DAB7D}) (Version: 1.0.0.0 - Intel Corporation) Hidden LBAI (HKLM-x32\...\{C5C91B7B-38A6-40B7-84D6-E44885E44B13}_is1) (Version: 1.0.0.8 - Lenovo Group Limited) Hidden Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 120.0.2210.77 - Microsoft Corporation) Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 120.0.2210.77 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (HKLM\...\{90140000-006D-0407-1000-0000000FF1CE}) (Version: 14.0.6122.5000 - Microsoft Corporation) Hidden Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.6122.5000 - Microsoft Corporation) Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.7261.5000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\OneDriveSetup.exe) (Version: 23.226.1031.0003 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation) Microsoft VC++ redistributables repacked. (HKLM\...\{B1009902-9B9C-46A4-B529-8CA2D9C6C885}) (Version: 12.0.0.0 - Intel Corporation) Hidden Microsoft VC++ redistributables repacked. (HKLM-x32\...\{557C35EF-C40E-49F3-9000-A73FAA95F749}) (Version: 12.0.0.0 - Intel Corporation) Hidden Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.36.32532 (HKLM-x32\...\{8bdfe669-9705-4184-9368-db9ce581e0e7}) (Version: 14.36.32532.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.34.31938 (HKLM-x32\...\{4f84f2dc-3f70-433a-8f50-8293e0089b0f}) (Version: 14.34.31938.0 - Microsoft Corporation) Microsoft Visual C++ 2022 X64 Additional Runtime - 14.36.32532 (HKLM\...\{0025DD72-A959-45B5-A0A3-7EFEB15A8050}) (Version: 14.36.32532 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.36.32532 (HKLM\...\{D5D19E2F-7189-42FE-8103-92CD1FA457C2}) (Version: 14.36.32532 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Additional Runtime - 14.34.31938 (HKLM-x32\...\{080D8397-60F4-44B3-BB95-FBB950CB0B4E}) (Version: 14.34.31938 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.34.31938 (HKLM-x32\...\{8DE5B0D4-A6D8-4F72-B8EF-28776A2EE5D5}) (Version: 14.34.31938 - Microsoft Corporation) Hidden Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 3.7.2181.36443 - Microsoft Corporation) Microsoft Visual Studio Setup Configuration (HKLM-x32\...\{6AC5612A-D067-44B9-9C8E-2C1B3473B429}) (Version: 3.7.2182.35401 - Microsoft Corporation) Hidden Microsoft Visual Studio Setup WMI Provider (HKLM-x32\...\{E281F6E2-136B-4AF0-895B-253279711697}) (Version: 3.7.2182.35401 - Microsoft Corporation) Hidden Mobirise 5.9.8 (HKLM-x32\...\a651c295-23f6-5815-8016-69ff822d3275) (Version: 5.9.8 - Mobirise.com) Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 120.0.1 (x64 de)) (Version: 120.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 93.0 - Mozilla) NoxPlayer (HKLM-x32\...\Nox) (Version: 7.0.5.9 - Duodian Technology Co. Ltd.) NVIDIA GeForce Experience 2.11.4.125 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.125 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation) Hidden OBS Studio (HKLM-x32\...\OBS Studio) (Version: 27.2.4 - OBS Project) obs-virtualcam (HKLM-x32\...\obs-virtualcam) (Version: - ) obs-virtualcam version 3.0.0 (HKLM-x32\...\{1DFBFA8F-CDD8-49B6-9E0F-475F693479A8}_is1) (Version: 3.0.0 - Miau Lightouch) Opera GX Stable 104.0.4944.85 (HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\Opera GX 104.0.4944.85) (Version: 104.0.4944.85 - Opera Software) Prezentacje (HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\e7320ba5fddd261b4ae181edaa54a71e) (Version: 1.0 - Google\Chrome) Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9553.1 - Realtek Semiconductor Corp.) SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - ) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) TunnelBear (HKLM-x32\...\{c99146dd-e09d-4881-b76b-2d7bc1b30806}) (Version: 4.8.0.0 - TunnelBear) TunnelBear (HKLM-x32\...\{E7AEA528-0D3E-4A22-B516-9EC97C636E42}) (Version: 4.8.0.0 - TunnelBear) Hidden uTorrent Web (HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\utweb) (Version: 1.4.0 - Rainberry, Inc.) VBCABLE, The Virtual Audio Cable (HKLM\...\VB:VBCABLE {87459874-1236-4469}) (Version: - VB-Audio Software) Visual Studio Community 2022 (HKLM-x32\...\253dbf53) (Version: 17.7.5 - Microsoft Corporation) Voice.ai - Voice Changer (HKLM\...\Voice.ai) (Version: - Voice.ai) vs_CoreEditorFonts (HKLM-x32\...\{1851460E-0E63-4117-B5BA-25A2F045801B}) (Version: 17.7.40001 - Microsoft Corporation) vs_filehandler_amd64 (HKLM-x32\...\{437AA1D3-B32C-48B8-B990-DFC40B4377A5}) (Version: 17.7.33905 - Microsoft Corporation) Hidden vs_filehandler_x86 (HKLM-x32\...\{7ACDEE02-0D96-45EE-BD1F-04B02E8BA9DF}) (Version: 17.7.33905 - Microsoft Corporation) Hidden vs_FileTracker_Singleton (HKLM-x32\...\{7D10063F-E04A-445A-A26C-3A9DD0F1A9D4}) (Version: 17.7.33905 - Microsoft Corporation) Hidden vs_githubprotocolhandlermsi (HKLM-x32\...\{91BC038F-2A3C-4104-B97B-FC591FFAF908}) (Version: 17.7.33905 - Microsoft Corporation) Hidden vs_minshellmsires (HKLM-x32\...\{85DEB35C-4F75-4A29-A2F3-200744F73C69}) (Version: 17.7.33905 - Microsoft Corporation) Hidden vs_minshellsharedmsi (HKLM-x32\...\{C86459CD-1FF9-445C-AFEE-C06CFD8E5E9E}) (Version: 17.7.33905 - Microsoft Corporation) Hidden vs_minshellx64msi (HKLM\...\{CC6B3835-25A7-401A-88B2-F6766E04DE67}) (Version: 17.7.33905 - Microsoft Corporation) Hidden vs_vswebprotocolselectormsi (HKLM-x32\...\{11E5CECF-CE4F-4C38-95A0-27D601417219}) (Version: 17.7.33905 - Microsoft Corporation) Hidden vs_vswebprotocolselectormsires (HKLM-x32\...\{5748CA3B-7338-4EF0-9A89-9BF53123D9CC}) (Version: 17.7.33905 - Microsoft Corporation) Hidden Windscribe (HKLM\...\{fa690e90-ddb0-4f0c-b3f1-136c084e5fc7}_is1) (Version: 2.7.14 - Windscribe Limited) WinHTTrack Website Copier 3.49-2 (x64) (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.49.2 - HTTrack) YouTube (HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\7281aa95a1372a6705c996759cd85ce3) (Version: 1.0 - Google\Chrome) Packages: ========= AMD Radeon Software -> C:\Program Files\AMD\CNext\CNext [2023-10-25] (Advanced Micro Devices Inc.) AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5287.0_x64__8j3eq9eme6ctt [2023-12-16] (INTEL CORP) [Startup Task] Dev Home -> C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.800.344.0_x64__8wekyb3d8bbwe [2023-12-16] (Microsoft Corporation) HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_150.1.1140.0_x64__v10z8vjag6ke6 [2023-11-14] (HP Inc.) Microsoft.WindowsAppRuntime.CBS -> C:\WINDOWS\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe [2023-12-07] (Microsoft Corporation) NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.964.0_x64__56jybvy8sckqj [2023-10-05] (NVIDIA Corp.) Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.44.302.0_x64__dt26b99r8h8gj [2023-10-19] (Realtek Semiconductor Corp) Screen Recorder for Windows 11 -> C:\Program Files\WindowsApps\45907smallapp.ScreenRecorderforWindows11_1.0.5.0_x64__z9hw59krvrfng [2023-12-05] (screen recorder app) Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.18.11020.0_x64__8wekyb3d8bbwe [2023-11-07] (Microsoft Studios) [MS Ad] Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy [2023-12-07] (Microsoft Corporation) ==================== Niestandardowe rejestracje CLSID (filtrowane): ============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-1317094474-1395548158-2812114734-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1317094474-1395548158-2812114734-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1317094474-1395548158-2812114734-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1317094474-1395548158-2812114734-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1317094474-1395548158-2812114734-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1317094474-1395548158-2812114734-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2023-06-20] (Igor Pavlov) [Brak podpisu cyfrowego] ContextMenuHandlers1: [AVK9CM] -> {CAF4C320-32F5-11D3-A222-004095200FF2} => C:\Program Files (x86)\G DATA\InternetSecurity\AVK\ShellExt64.dll [2023-07-11] (G DATA CyberDefense AG -> G DATA Software AG) ContextMenuHandlers3: [Reisswolf] -> {1F0F1EE7-36B9-11D2-8985-0080ADA96E9B} => C:\Program Files (x86)\G DATA\InternetSecurity\Shredder\Reisswlf64.dll [2023-07-11] (G DATA CyberDefense AG -> G DATA Software AG) ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2023-06-20] (Igor Pavlov) [Brak podpisu cyfrowego] ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => -> Brak pliku ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Brak pliku ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2015-06-29] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2023-06-20] (Igor Pavlov) [Brak podpisu cyfrowego] ContextMenuHandlers6: [AVK9CM] -> {CAF4C320-32F5-11D3-A222-004095200FF2} => C:\Program Files (x86)\G DATA\InternetSecurity\AVK\ShellExt64.dll [2023-07-11] (G DATA CyberDefense AG -> G DATA Software AG) ContextMenuHandlers6: [Reisswolf] -> {1F0F1EE7-36B9-11D2-8985-0080ADA96E9B} => C:\Program Files (x86)\G DATA\InternetSecurity\Shredder\Reisswlf64.dll [2023-07-11] (G DATA CyberDefense AG -> G DATA Software AG) ==================== Codecs (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Drivers32: [vidc.mjpg] => C:\Windows\system32\bdmjpeg64.dll [75248 2017-01-26] (Bandicam Company -> ) HKLM\...\Drivers32: [vidc.mpeg] => C:\Windows\system32\bdmpegv64.dll [75272 2017-01-26] (Bandicam Company -> ) HKLM\...\Drivers32: [msacm.bdmpeg] => C:\Windows\system32\bdmpega64.acm [75784 2017-01-26] (Bandicam Company -> ) HKLM\...\Drivers32: [vidc.mjpg] => C:\Windows\SysWOW64\bdmjpeg.dll [71152 2017-01-26] (Bandicam Company -> ) HKLM\...\Drivers32: [vidc.mpeg] => C:\Windows\SysWOW64\bdmpegv.dll [71176 2017-01-26] (Bandicam Company -> ) HKLM\...\Drivers32: [msacm.bdmpeg] => C:\Windows\SysWOW64\bdmpega.acm [71176 2017-01-26] (Bandicam Company -> ) ==================== Skróty & WMI ======================== (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Arkusze.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=fhihpiojkbmbpdjeoajapmgkhlnakfjf ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Dokumenty.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=mpnpojknpmmopombnjdcgaaiekajbnjb ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Dysk Google.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=aghbiahbpaijignceidepookljebhfak ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Gmail.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=fmgjjmmmlfnkbppncabfkddbjimcfncm ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Prezentacje.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=kefjledonklijopmnomlcbpllchaibag ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\YouTube.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=agimnkijcaahngcdmfeangaknmldooml ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Anaconda3 (64-bit)\Anaconda Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> "/K" C:\Users\User\anaconda3\Scripts\activate.bat C:\Users\User\anaconda3 ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\26c1d8ded080561d\iMacros for Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=cplklnmnlbnpmjogncfgfijoopmnlemp ==================== Załadowane moduły (filtrowane) ============= 2023-08-30 16:19 - 2023-08-30 16:19 - 000030720 _____ () [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.Wrapper.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000433152 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Bignox\BigNoxVM\RT\libEGL_translator.DLL 2023-11-20 17:46 - 2023-11-20 17:46 - 001640960 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Bignox\BigNoxVM\RT\libGLES_CM_translator.DLL 2023-11-20 17:46 - 2023-11-20 17:46 - 002424832 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Bignox\BigNoxVM\RT\libGLES_V2_translator.DLL 2023-11-20 17:46 - 2023-11-20 17:46 - 000568832 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Bignox\BigNoxVM\RT\libopenglrenderplus.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000037888 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Bignox\BigNoxVM\RT\NOXa.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000007168 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\firewall_mgr.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000498688 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\hlog4qt1.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 025709359 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\icudt57.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 004264645 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\icuin57.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 002371226 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\icuuc57.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 071711744 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\libcef.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 002079232 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\libcef_dll_wrapper.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000106496 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\libegl.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000120334 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\libgcc_s_dw2-1.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 001984000 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\libglesv2.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000091599 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\libqrencode.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 053218152 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\libQt5WebKit.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000572862 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\libQt5WebKitWidgets.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 001540622 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\libstdc++-6.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 002639092 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\libxml2-2.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000927742 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\libxslt-1.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000251904 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\MultiPlayerCef.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000221696 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\NoxCommon.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000663040 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\QZXing2.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 001047552 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\SDL2.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000239616 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\UICommon.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000617984 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\VBoxApi.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000059904 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\VMProtectSDK32.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000059392 _____ (Digia Plc and/or its subsidiary(-ies)) [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\plugins\imageformats\qdds.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000517120 _____ (Digia Plc and/or its subsidiary(-ies)) [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\plugins\imageformats\qjp2.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000097792 _____ (Google, inc) [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\AdbWinApi.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000062976 _____ (Google, inc) [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\AdbWinUsbApi.dll 2023-10-07 12:39 - 2023-06-20 09:00 - 000101376 _____ (Igor Pavlov) [Brak podpisu cyfrowego] C:\Program Files\7-Zip\7-zip.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000049152 _____ (MingW-W64 Project. All rights reserved.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\libwinpthread-1.dll 2084-09-24 22:17 - 2016-11-14 13:30 - 001300688 _____ (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [Brak podpisu cyfrowego] C:\Program Files\NVIDIA Corporation\NvStreamSrv\rxinput.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000439808 _____ (The Chromium Authors) [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\chrome_elf.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000390656 _____ (The curl library, hxxps://curl.haxx.se/) [Brak podpisu cyfrowego] C:\Program Files (x86)\Bignox\BigNoxVM\RT\libcurl.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 001253376 _____ (The curl library, hxxps://curl.haxx.se/) [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\libcurl.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 002866688 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\Bignox\BigNoxVM\RT\libcrypto-x64.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000477696 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\Bignox\BigNoxVM\RT\libssl-x64.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 002114048 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\Bignox\BigNoxVM\RT\x86\libcrypto.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000371712 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\Bignox\BigNoxVM\RT\x86\libssl.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 001214976 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\LIBEAY32.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000275456 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\ssleay32.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 006147224 _____ (The Qt Company Oy -> The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\Qt5Core.dll 2023-11-20 17:46 - 2023-11-20 17:46 - 000407536 _____ (The Qt Company Oy -> The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Nox\bin\Qt5Positioning.dll ==================== Alternate Data Streams (filtrowane) ======== ==================== Tryb awaryjny (filtrowane) ================== ==================== Powiązania plików (filtrowane) ================= ==================== Internet Explorer (filtrowane) ========== BHO: iMacros Browser Helper Object -> {34D5A80A-992D-4F07-9509-66E9E133BAAF} -> C:\Program Files\Ipswitch\iMacros\iMacrosBHO.dll [2019-11-08] (Ipswitch, Inc -> ) BHO-x32: iMacros Browser Helper Object -> {34D5A80A-992D-4F07-9509-66E9E133BAAF} -> C:\Program Files (x86)\Ipswitch\iMacros\iMacrosBHO.dll [2019-11-08] (Ipswitch, Inc -> ) ==================== Hosts - zawartość: ========================= (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2023-11-16 20:59 - 2023-12-12 14:19 - 000000901 _____ C:\WINDOWS\system32\drivers\etc\hosts 149.36.50.157 de-028.whiskergalaxy.com #added by Windscribe, do not modify. ==================== Inne obszary =========================== (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\User\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper DNS Servers: 192.168.72.237 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Załączenie wejścia w fixlist spowoduje jego usunięcie.) HKLM\...\StartupApproved\Run: => "ShadowPlay" HKLM\...\StartupApproved\Run32: => "NvBackend" HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\StartupApproved\StartupFolder: => "Voice.ai - Voice Changer.lnk" HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\StartupApproved\Run: => "Windscribe" HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\StartupApproved\Run: => "Steam" HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\StartupApproved\Run: => "NoxMultiPlayer" HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\StartupApproved\Run: => "EADM" HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning" HKU\S-1-5-21-1317094474-1395548158-2812114734-1001\...\StartupApproved\Run: => "electron.app.BlueStacks Services" ==================== Reguły Zapory systemu Windows (filtrowane) ================ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [{272B98B2-21D6-4357-96CB-EAE1F7CBE309}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{4480AEBF-5891-48B9-9051-844A213E9E04}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{CA6D2541-02C7-4D35-802B-8D008B9CCCC8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{F2FE8428-63CC-4C64-9DDC-1810ACB1E8F5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{04CC7BFC-0A8E-4E0A-BC7A-12E6E4FE1EF3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{4392CE88-5913-4119-A8D3-C3FA35DFD1B4}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{DE519CF5-A548-434A-8EFF-F745A5B75169}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{A106F9A4-E1EA-4694-A7A2-A1C408CB91A4}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{942CA4B9-83CD-43AB-94C7-6FFE5AA5FDD2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{9E8AA9B9-C51C-4BB8-804D-31575C74D6FC}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_21253.510.996.1465_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{81377FBF-57D1-466B-BC7F-0AFC0A212F3D}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_21253.510.996.1465_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{D59A9DE1-36E7-4663-AC66-DA02D1ED29C6}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{B8CC8139-9FFC-4D92-B640-1CC104FEC7B8}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{C1E51A38-1AA2-4941-9CE4-C793027D20CE}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{BB13ED4E-C806-4F9A-9FE6-FB19DFC09176}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{3BD8943E-45ED-4F11-A24E-8EEB28FA788A}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{6807CC74-53DB-4609-8DA6-6E386B69CA0F}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{33BAE7DB-0C75-42DD-9F91-ADB97ADB5A0E}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAConnect_microsoft.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{25D5DE62-2ADD-4685-A176-89CDD09F6B27}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAConnect_microsoft.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{A3B407CC-B907-4064-B888-2267317E3C6A}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{EE50B7E4-B150-401E-98D6-22AAD17324EB}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{43C96370-AC32-476E-992A-F1C18DC9BC09}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAGEP.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{CA19B73E-7404-4BD9-BBB7-B0B0E0B21357}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAGEP.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{2FD63AFD-89C0-4D07-9FC4-3A4D2D0CB2EF}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{961F4F5C-ABC0-454A-99BD-7BA6B22672CA}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{8EC97F72-42F4-4A26-9784-F5BFCC520979}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALaunchHelper.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{2866A329-3A32-4423-8A02-C6F5CF3666C9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x64\3DMark.exe (Underwriters Laboratories Inc. -> ) FirewallRules: [{DC72042C-21D7-4345-A00E-1F4D973241FB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x64\3DMark.exe (Underwriters Laboratories Inc. -> ) FirewallRules: [TCP Query User{A1ABBA13-4B60-4E52-993C-4F69DA2FA892}C:\program files\ea games\ea sports fc 24\fc24.exe] => (Allow) C:\program files\ea games\ea sports fc 24\fc24.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [UDP Query User{38EAEC23-0D46-42AD-9E46-82547CCE58F6}C:\program files\ea games\ea sports fc 24\fc24.exe] => (Allow) C:\program files\ea games\ea sports fc 24\fc24.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [TCP Query User{7D06E6F1-9D96-4325-8E54-BEE54271DF9E}C:\users\user\appdata\local\programs\opera gx\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [UDP Query User{64825BC7-99EE-447C-B7DB-9F3CEB8FF9AB}C:\users\user\appdata\local\programs\opera gx\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [{7B359BA2-990C-4772-9255-F222B325DAE7}] => (Allow) C:\Program Files\EA Games\EA SPORTS FC 24\EAAntiCheat.GameServiceLauncher.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{CD822373-7442-4B32-AECE-EC539F436B97}] => (Allow) C:\Program Files\EA Games\EA SPORTS FC 24\EAAntiCheat.GameServiceLauncher.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [TCP Query User{F2B647E7-17D2-4D8C-8647-AB234DE0AD8C}C:\users\user\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\user\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [UDP Query User{34ACC801-FC87-46D5-BACB-14587F5732EB}C:\users\user\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\user\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [{790763C4-0909-4528-BBBD-F4F875F3318A}] => (Allow) C:\Program Files\Cybelsoft\DriversCloud.com\DriversCloud.exe => Brak pliku FirewallRules: [{BEDA7975-72C2-435A-96FE-B3A0932B8CB0}] => (Allow) C:\Program Files\Cybelsoft\DriversCloud.com\DriversCloud.exe => Brak pliku FirewallRules: [{090981EF-7181-4D82-A02F-819E96B6E10D}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe (Now.gg, INC -> Bluestack Systems, Inc.) FirewallRules: [{A9B2E4C8-8A87-4C7E-909D-5E238DC56B6C}] => (Allow) C:\Program Files (x86)\BlueStacks X\Cloud Game.exe (Now.gg, INC -> COMPANY NAME) FirewallRules: [{AF2766B8-FF14-402B-B2BA-DB9C096B1367}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe (Now.gg, INC -> BlueStack Systems) FirewallRules: [{9DAEAA79-56C5-46D9-81FA-577CB146AFCA}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe (Now.gg, INC -> The Qt Company Ltd.) FirewallRules: [{4B279A90-ACAA-43D6-B25F-4E300B17550F}] => (Allow) C:\Program Files (x86)\Nox\bin\Nox.exe (Nox Limited -> Duodian Technology Co. Ltd.) FirewallRules: [{6AABEC38-EA34-42A9-A77D-6F3AEAF1370F}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe (Nox Limited -> Nox Limited Corporation) FirewallRules: [{E4EE5400-6FD7-4891-BDF3-3A8A53D834D9}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{D566E569-582C-47AE-ABC5-B65E8110B509}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\120.0.2210.77\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation) ==================== Punkty Przywracania systemu ========================= 29-11-2023 18:27:30 Installed BatchPurifier. 05-12-2023 17:31:33 Windows Update 12-12-2023 02:10:42 Windows Update 16-12-2023 07:00:22 Windows Update 16-12-2023 07:00:37 Windows Update ==================== Wadliwe urządzenia w Menedżerze urządzeń ============ ==================== Błędy w Dzienniku zdarzeń: ======================== Dziennik Aplikacja: ================== Error: (12/14/2023 09:05:20 PM) (Source: CVHSVC) (EventID: 100) (User: ) Description: Nur zur Information. Die Aktion kann nicht abgeschlossen werden. Versuchen Sie es erneut. Wenden Sie sich bei Fortbestehen des Problems an den Microsoft-Produktsupport. Error: (12/14/2023 01:16:23 PM) (Source: CVHSVC) (EventID: 100) (User: ) Description: Nur zur Information. Die Aktion kann nicht abgeschlossen werden. Versuchen Sie es erneut. Wenden Sie sich bei Fortbestehen des Problems an den Microsoft-Produktsupport. Error: (12/14/2023 08:03:06 AM) (Source: Windows Search Service) (EventID: 7042) (User: ) Description: Usługa Windows Search jest zatrzymywana, ponieważ wystąpił problem z indeksatorem: Fehler in der Wiederherstellungsphase.. Kontext: Anwendung, SystemIndex Katalog Details: 0x%08x (0x80040d23 - Gatherer wird heruntergefahren. (HRESULT : 0x80040d23)) Error: (12/14/2023 08:03:06 AM) (Source: Windows Search Service) (EventID: 3602) (User: ) Description: Na etapie odzyskiwania programu Windows Search wystąpił błąd o identyfikatorze 1. Ponownie uruchom tę usługę. Jeśli ten błąd będzie się powtarzać, ponownie utwórz indeks. Kontext: Anwendung, SystemIndex Katalog Details: 0x%08x (0x80040d23 - Gatherer wird heruntergefahren. (HRESULT : 0x80040d23)) Error: (12/14/2023 08:01:32 AM) (Source: CVHSVC) (EventID: 100) (User: ) Description: Nur zur Information. Die Aktion kann nicht abgeschlossen werden. Versuchen Sie es erneut. Wenden Sie sich bei Fortbestehen des Problems an den Microsoft-Produktsupport. Error: (12/12/2023 04:09:12 PM) (Source: CVHSVC) (EventID: 100) (User: ) Description: Nur zur Information. Die Aktion kann nicht abgeschlossen werden. Versuchen Sie es erneut. Wenden Sie sich bei Fortbestehen des Problems an den Microsoft-Produktsupport. Error: (12/12/2023 02:20:36 PM) (Source: CVHSVC) (EventID: 100) (User: ) Description: Nur zur Information. Die Aktion kann nicht abgeschlossen werden. Versuchen Sie es erneut. Wenden Sie sich bei Fortbestehen des Problems an den Microsoft-Produktsupport. Error: (12/12/2023 03:28:09 AM) (Source: Application Error) (EventID: 1000) (User: DESKTOP-FP4OP26) Description: Nazwa aplikacji powodującej błąd: Widgets.exe, wersja: 421.20070.2010.0, sygnatura czasowa: 0x654405cc Nazwa modułu powodującego błąd: Widgets.exe, wersja: 421.20070.2010.0, sygnatura czasowa: 0x654405cc Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000000000009886c Identyfikator procesu powodującego błąd: 0x0x2890 Godzina uruchomienia aplikacji powodującej błąd: 0x0x1da2b98e9d8114a Ścieżka aplikacji powodującej błąd: C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.30700.0.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe Ścieżka modułu powodującego błąd: C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.30700.0.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe Identyfikator raportu: c591acf7-f305-480d-9b5e-1cef0ec7c68f Pełna nazwa pakietu powodującego błąd: MicrosoftWindows.Client.WebExperience_423.30700.0.0_x64__cw5n1h2txyewy Identyfikator aplikacji względem pakietu powodującego błąd: Widgets Dziennik System: ============= Error: (12/16/2023 07:03:29 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT) Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x80073d02: 9NMPJ99VJBWV-Microsoft.YourPhone. Error: (12/14/2023 09:06:08 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Lenovo LBA Event Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (12/14/2023 09:06:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi ASUS Com Service z powodu następującego błędu: Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie. Error: (12/14/2023 09:06:08 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (60000 ms) podczas oczekiwania na połączenie się z usługą ASUS Com Service. Error: (12/14/2023 09:05:13 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (60000 ms) podczas oczekiwania na połączenie się z usługą NvStreamNetworkSvc. Error: (12/14/2023 09:05:12 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT) Description: Uruchomienie modułu rozszerzalności sieci WLAN nie powiodło się. Ścieżka modułu: C:\WINDOWS\system32\Rtlihvs.dll Kod błędu: 126 Error: (12/14/2023 01:20:47 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-FP4OP26) Description: Serwer {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} nie zarejestrował się w modelu DCOM w wymaganym czasie. Error: (12/14/2023 01:17:05 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Lenovo LBA Event Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Windows Defender: ================ Date: 2023-10-20 01:51:21 Description: Skanowanie produktu Microsoft Defender Antivirus zostało zatrzymane przed ukończeniem. Identyfikator skanowania: {6AE0915A-FA3E-4405-A3E6-443AE3862E6A} Typ skanowania: Antimalware Parametry skanowania: Schnellüberprüfung Użytkownik: NT-AUTORITÄT\SYSTEM Date: 2023-10-19 04:25:23 Description: Skanowanie produktu Microsoft Defender Antivirus zostało zatrzymane przed ukończeniem. Identyfikator skanowania: {23E79870-2653-4895-B980-754195CA25D6} Typ skanowania: Antimalware Parametry skanowania: Schnellüberprüfung Użytkownik: NT-AUTORITÄT\SYSTEM Date: 2023-10-18 03:58:06 Description: Skanowanie produktu Microsoft Defender Antivirus zostało zatrzymane przed ukończeniem. Identyfikator skanowania: {9C4F4122-B06D-4CA2-9662-D6AD79260063} Typ skanowania: Antimalware Parametry skanowania: Schnellüberprüfung Użytkownik: NT-AUTORITÄT\SYSTEM Date: 2023-10-16 05:05:20 Description: Skanowanie produktu Microsoft Defender Antivirus zostało zatrzymane przed ukończeniem. Identyfikator skanowania: {FD4CCDF1-CC85-45BD-8658-5A139147BBA5} Typ skanowania: Antimalware Parametry skanowania: Schnellüberprüfung Użytkownik: NT-AUTORITÄT\SYSTEM Date: 2023-10-15 04:35:31 Description: Skanowanie produktu Microsoft Defender Antivirus zostało zatrzymane przed ukończeniem. Identyfikator skanowania: {55934D7F-903F-449F-B037-52AB3B80151B} Typ skanowania: Antimalware Parametry skanowania: Schnellüberprüfung Użytkownik: NT-AUTORITÄT\SYSTEM Event[0] Date: 2084-10-01 10:46:08 Description: Produkt Microsoft Defender Antivirus napotkał błąd podczas próby aktualizacji analizy zabezpieczeń. Nowa wersja analizy zabezpieczeń: Poprzednia wersja analizy zabezpieczeń: 1.351.622.0 Źródło aktualizacji: Microsoft Center zum Schutz vor Schadsoftware Typ analizy zabezpieczeń: AntiVirus Typ aktualizacji: Voll Użytkownik: NT-AUTORITÄT\Netzwerkdienst Bieżąca wersja aparatu: Poprzednia wersja aparatu: 1.1.18600.4 Kod błędu: 0x80072ee7 Opis błędu: Der Servername oder die Serveradresse konnte nicht verarbeitet werden. Date: 2084-10-01 10:46:08 Description: Produkt Microsoft Defender Antivirus napotkał błąd podczas próby aktualizacji analizy zabezpieczeń. Nowa wersja analizy zabezpieczeń: Poprzednia wersja analizy zabezpieczeń: 1.351.622.0 Źródło aktualizacji: Microsoft Center zum Schutz vor Schadsoftware Typ analizy zabezpieczeń: AntiSpyware Typ aktualizacji: Voll Użytkownik: NT-AUTORITÄT\Netzwerkdienst Bieżąca wersja aparatu: Poprzednia wersja aparatu: 1.1.18600.4 Kod błędu: 0x80072ee7 Opis błędu: Der Servername oder die Serveradresse konnte nicht verarbeitet werden. Date: 2084-10-01 10:46:08 Description: Produkt Microsoft Defender Antivirus napotkał błąd podczas próby aktualizacji analizy zabezpieczeń. Nowa wersja analizy zabezpieczeń: Poprzednia wersja analizy zabezpieczeń: 1.351.622.0 Źródło aktualizacji: Microsoft Center zum Schutz vor Schadsoftware Typ analizy zabezpieczeń: AntiVirus Typ aktualizacji: Voll Użytkownik: NT-AUTORITÄT\Netzwerkdienst Bieżąca wersja aparatu: Poprzednia wersja aparatu: 1.1.18600.4 Kod błędu: 0x80072ee7 Opis błędu: Der Servername oder die Serveradresse konnte nicht verarbeitet werden. Date: 2084-10-01 10:46:08 Description: Produkt Microsoft Defender Antivirus napotkał błąd podczas próby aktualizacji analizy zabezpieczeń. Nowa wersja analizy zabezpieczeń: Poprzednia wersja analizy zabezpieczeń: 1.351.622.0 Źródło aktualizacji: Microsoft Center zum Schutz vor Schadsoftware Typ analizy zabezpieczeń: AntiVirus Typ aktualizacji: Voll Użytkownik: NT-AUTORITÄT\Netzwerkdienst Bieżąca wersja aparatu: Poprzednia wersja aparatu: 1.1.18600.4 Kod błędu: 0x80072ee7 Opis błędu: Der Servername oder die Serveradresse konnte nicht verarbeitet werden. Date: 2084-10-01 10:46:08 Description: Produkt Microsoft Defender Antivirus napotkał błąd podczas próby aktualizacji analizy zabezpieczeń. Nowa wersja analizy zabezpieczeń: Poprzednia wersja analizy zabezpieczeń: 1.351.622.0 Źródło aktualizacji: Microsoft Center zum Schutz vor Schadsoftware Typ analizy zabezpieczeń: AntiSpyware Typ aktualizacji: Voll Użytkownik: NT-AUTORITÄT\Netzwerkdienst Bieżąca wersja aparatu: Poprzednia wersja aparatu: 1.1.18600.4 Kod błędu: 0x80072ee7 Opis błędu: Der Servername oder die Serveradresse konnte nicht verarbeitet werden. CodeIntegrity: =============== Date: 2023-12-16 17:22:28 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Common Files\G Data\AVKProxy\GDAMSIx64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Statystyki pamięci =========================== BIOS: American Megatrends Inc. 5.13 08/05/2021 Płyta główna: Default string Default string Procesor: AMD 4700S 8-Core Processor Desktop Kit Procent pamięci w użyciu: 74% Całkowita pamięć fizyczna: 16340.07 MB Dostępna pamięć fizyczna: 4091.16 MB Całkowita pamięć wirtualna: 24276.07 MB Dostępna pamięć wirtualna: 6068.95 MB ==================== Dyski ================================ Drive c: (Windows11) (Fixed) (Total:931.29 GB) (Free:606.4 GB) (Model: SPCC Solid State Disk) NTFS Drive q: () (Fixed) (Total:0 GB) (Free:0 GB) (Model: SPCC Solid State Disk) \\?\Volume{e1e4e5da-550d-4084-9c5d-bdd862d91c42}\ () (Fixed) (Total:0.1 GB) (Free:0.07 GB) FAT32 ==================== MBR & Tablica partycji ==================== ========================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: DBD18BAD) Partition: GPT. ==================== Koniec Addition.txt =======================