Zamieść logi z FRST. Pobierz Farbar Recovery Scan Tool http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ zgodny z wersją systemu 32-bit lub 64-bit. Uruchom FRST i kliknij Scan. Pokaż raport FRST i Addition.
Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 29-03-2020
Uruchomiony przez chiyu (30-03-2020 19:54:28)
Uruchomiony z C:\Users\chiyu\Downloads
Windows 10 Pro Wersja 1909 18363.752 (X64) (2019-11-04 18:14:05)
Tryb startu: Normal
==========================================================
==================== Konta użytkowników: =============================
Administrator (S-1-5-21-4127655614-2183925408-349122224-500 - Administrator - Disabled)
CDFAccount (S-1-5-21-4127655614-2183925408-349122224-1003 - Limited - Disabled)
chiyu (S-1-5-21-4127655614-2183925408-349122224-1001 - Administrator - Enabled) = & gt; C:\Users\chiyu
Gość (S-1-5-21-4127655614-2183925408-349122224-501 - Limited - Disabled)
Konto domyślne (S-1-5-21-4127655614-2183925408-349122224-503 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-4127655614-2183925408-349122224-504 - Limited - Disabled)
==================== Centrum zabezpieczeń ========================
(Załączenie wejścia w fixlist spowoduje jego usunięcie.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Zainstalowane programy ======================
(W fixlist dozwolone tylko załączanie programów adware z flagą " Hidden " w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)
3D Youtube Downloader (x64) (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\3D Youtube Downloader (x64)) (Version: 1.19.1 - 3DYD Soft)
Adobe Photoshop CC 2019 (HKLM-x32\...\PHSP_20_0_6) (Version: 20.0.6 - Adobe Systems Incorporated)
AIMP (HKLM-x32\...\AIMP) (Version: v4.60.2156, 21.10.2019 - AIMP DevTeam)
Aktualizacje NVIDIA 38.0.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 38.0.4.0 - NVIDIA Corporation) Hidden
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.14 - Michael Tippach)
Audacity 2.3.3 (HKLM-x32\...\Audacity_is1) (Version: 2.3.3 - Audacity Team)
Backup and Sync from Google (HKLM\...\{0CF77D5B-BD7A-489C-A5D5-881E6C15073D}) (Version: 3.49.9760.2421 - Google, Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Blitz (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\Blitz) (Version: 1.6.38 - Blitz Inc.)
BlueStacks App Player (HKLM\...\BlueStacks) (Version: 4.180.0.1051 - BlueStack Systems, Inc.)
Call of Duty Modern Warfare (HKLM-x32\...\Call of Duty Modern Warfare) (Version: - Blizzard Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 5.65 - Piriform)
Cheat Engine 7.0 (HKLM\...\Cheat Engine 7.0_is1) (Version: - Cheat Engine)
Corsair Utility Engine (HKLM-x32\...\{BB25387A-061E-42E9-AB2F-64073B3E3180}) (Version: 2.24.50 - Corsair)
CPUID CPU-Z 1.90 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.90 - CPUID, Inc.)
DeepL (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\DeepL) (Version: 1.9.5 - DeepL GmbH)
Discord (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\Discord) (Version: 0.0.306 - Discord Inc.)
eM Client (HKLM-x32\...\{5D8FE139-3B35-4F39-A0BE-47B68A30BC4E}) (Version: 7.2.37929.0 - eM Client Inc.)
Epic Games Launcher (HKLM-x32\...\{FFE08CF5-9092-48EA-85FD-590725B78B21}) (Version: 1.1.236.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
ESEA Client (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\ESEA) (Version: 6.0.0.0 - ESL Gaming Online, Inc.)
Excel (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\1fc5b090eab9aa41f8a2f5987367e6da) (Version: 1.0 - Excel)
FileZilla Client 3.45.1 (HKLM-x32\...\FileZilla Client) (Version: 3.45.1 - Tim Kosse)
FL Studio 20 (HKLM-x32\...\FL Studio 20) (Version: - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line)
Git version 2.25.0 (HKLM\...\Git_is1) (Version: 2.25.0 - The Git Development Community)
GitHub Desktop (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\GitHubDesktop) (Version: 2.3.1 - GitHub, Inc.)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 80.0.3987.149 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Java 8 Update 231 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180231F0}) (Version: 8.0.2310.11 - Oracle Corporation)
KC Softwares SUMo (HKLM-x32\...\KC Softwares SUMo_is1) (Version: 5.10.13.449 - KC Softwares)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
League of Legends (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\Riot Game league_of_legends.live) (Version: - Riot Games, Inc)
Legends of Runeterra (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\Riot Game bacon.live) (Version: - Riot Games, Inc)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 80.0.361.69 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.121.21 - )
Microsoft OneDrive (HKLM-x32\...\OneDriveSetup.exe) (Version: 19.232.1124.0010 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{6a3b46d3-fbf1-4b22-8b42-48b675de6b81}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.16.27033 (HKLM-x32\...\{cc3a7c63-31fb-4129-9024-63ebefd86a95}) (Version: 14.16.27033.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.16.27033 (HKLM-x32\...\{624ba875-fdfc-4efa-9c66-b170dfebc3ec}) (Version: 14.16.27033.0 - Microsoft Corporation)
Microsoft Visual Studio Code (User) (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.43.2 - Microsoft Corporation)
Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 1.18.1104.625 - Microsoft Corporation)
Minecraft Launcher (HKLM-x32\...\{810F1419-7760-402E-8772-B4054FAA2B72}) (Version: 1.0.0.0 - Mojang)
MiniTool uTube Downloader (HKLM-x32\...\MT-85D7C412-925B-4AD0-789C-5E4FEE22EAE1_is1) (Version: 1.1 - MiniTool)
Mozilla Firefox 74.0 (x64 pl) (HKLM\...\Mozilla Firefox 74.0 (x64 pl)) (Version: 74.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 71.0 - Mozilla)
NETworkManager (HKLM-x32\...\{8028080F-B785-4A74-A243-3D63467880A6}_is1) (Version: 2020.1.0 - BornToBeRoot)
Node.js (HKLM\...\{1EAD54E1-0AFA-4BE7-A60D-AEE52E94617D}) (Version: 13.7.0 - Node.js Foundation)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.8.5 - Notepad++ Team)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.19 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.20.2.34 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.2.34 - NVIDIA Corporation)
NVIDIA Graphics Driver 442.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 442.74 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.38.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.21 - NVIDIA Corporation)
NVIDIA Oprogramowanie systemu PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 25.0.1 - OBS Project)
Opera Stable 67.0.3575.115 (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\Opera 67.0.3575.115) (Version: 67.0.3575.115 - Opera Software)
Oracle VM VirtualBox 6.1.4 (HKLM\...\{E07820B4-EDC1-44FC-B1AE-D1D0F347F16B}) (Version: 6.1.4 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.66.38849 - Electronic Arts, Inc.)
Outlook (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\6b0f23e57a39ebfbf2814acb1a24293d) (Version: 1.0 - Outlook)
Parsec (HKLM-x32\...\Parsec) (Version: - Parsec Cloud Inc.)
PhotoScape (HKLM-x32\...\PhotoScape) (Version: - )
PhotoWorks 8.0 (HKLM-x32\...\{56427331-F94A-4C86-9C96-C8928EB5478B}_is1) (Version: 8.0 - AMS Software)
Pinegrow Web Editor version 5.93 (HKLM-x32\...\Pinegrow Web Editor_is1) (Version: 5.93 - )
PowerPoint (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\319814cb56b667dff88f54e08be8f51f) (Version: 1.0 - PowerPoint)
Python 2.7.15 (64-bit) (HKLM\...\{16CD92A4-0152-4CB7-8FD6-9788D3363617}) (Version: 2.7.15150 - Python Software Foundation)
REAPER (x64) (HKLM\...\REAPER) (Version: - )
Spotify (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\Spotify) (Version: 1.1.22.633.g1bab253a - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stream Effects for OBS Studio version 0.7.1.0 (HKLM-x32\...\{DE56A03A-C8A4-474B-83B0-CFD270262D38}}_is1) (Version: 0.7.1.0 - Xaymars Technology Workshop)
StreamLabels 0.3.4 (only current user) (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\8000d50a-fcb7-5b38-8a3b-a02a0ec79daa) (Version: 0.3.4 - Streamlabs)
StreamLabels 0.3.8 (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\{8000d50a-fcb7-5b38-8a3b-a02a0ec79daa}) (Version: 0.3.8 - Streamlabs)
TeamSpeak (HKLM\...\{ABBB9B76-9258-4FD5-B000-12041AAD8782}) (Version: 5.0.0 - TeamSpeak)
The Sims 4 Mod Manager version 2.2.0 (HKLM-x32\...\The Sims 4 Mod Manager_is1) (Version: 2.2.0 - )
The Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.61.15.1020 - Electronic Arts Inc.)
Twitch Sings (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF372C0}) (Version: 8.0.0 - Twitch Interactive, Inc.)
Twitch Studio (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF372B0}) (Version: 8.0.0 - Twitch Interactive, Inc.)
UNO (HKLM-x32\...\Uplay Install 3352) (Version: - Ubisoft)
Uplay (HKLM-x32\...\Uplay) (Version: 100.0 - Ubisoft)
VEGAS Pro 16.0 (HKLM\...\{0A119E00-A098-11E8-A73C-00155D6302F2}) (Version: 16.0.248 - VEGAS)
WeMod (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\WeMod) (Version: 6.2.16 - WeMod)
WinHTTrack Website Copier 3.49-2 (x64) (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.49.2 - HTTrack)
WinRAR 5.71 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.71.0 - win.rar GmbH)
Wondershare Filmora9(Build 9.3.0) (HKLM\...\Wondershare Filmora9_is1) (Version: - Wondershare Software)
Wondershare Helper Compact 2.6.0 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.6.0 - Wondershare)
Word (HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\1b837d0bf93d01407352736c91b7bf50) (Version: 1.0 - Word)
XAMPP (HKLM\...\xampp) (Version: 7.3.11-0 - Bitnami)
Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.5) (Version: 1.3.5 - Xvid Team)
XYplorer 20.60 (HKLM-x32\...\XYplorer) (Version: 20.60 - Donald Lessau, Cologne Code Company)
Zettlr (HKLM\...\{d0629383-01b2-5ce9-b07a-220f17f8215a}) (Version: 1.4.3 - Hendrik Erz)
Packages:
=========
DTS Sound Unbound - & gt; C:\Program Files\WindowsApps\DTSInc.DTSSoundUnbound_2020.1.34.0_x64__t5j2fzbtdg37r [2020-03-22] (DTS, Inc.)
HP Smart - & gt; C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_110.1.671.0_x64__v10z8vjag6ke6 [2020-03-22] (HP Inc.)
Microsoft Advertising SDK for XAML - & gt; C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-11-05] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML - & gt; C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-11-05] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection - & gt; C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.6.1224.0_x64__8wekyb3d8bbwe [2020-03-22] (Microsoft Studios) [MS Ad]
MSN Weather - & gt; C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-24] (Microsoft Corporation) [MS Ad]
Samsung Flow - & gt; C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.5.17.0_x64__wyx1vj98g3asy [2020-03-22] (Samsung Electronics Co, Ltd.)
==================== Niestandardowe rejestracje CLSID (filtrowane): ==============
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
CustomCLSID: HKU\S-1-5-21-4127655614-2183925408-349122224-1001_Classes\CLSID\{5C4D8D77-5B87-40CA-884E-F56858227E5C}\localserver32 - & gt; C:\Program Files\TeamSpeak\notification_helper.exe (TeamSpeak Systems GmbH - & gt; The Chromium Authors)
CustomCLSID: HKU\S-1-5-21-4127655614-2183925408-349122224-1001_Classes\CLSID\{60349223-D450-4318-A9C7-63C42F5DA6A4}\InprocServer32 - & gt; C:\Program Files (x86)\PhotoWorks\ShellMenu64.dll (AMS Software - & gt; )
ShellIconOverlayIdentifiers: [ OneDrive1] - & gt; {BBACC218-34EA-4666-9D7A-C78F2274A524} = & gt; C:\Program Files (x86)\Microsoft OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll [2020-03-21] (Microsoft Corporation - & gt; Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] - & gt; {5AB7172C-9C11-405C-8DD5-AF20F3606282} = & gt; C:\Program Files (x86)\Microsoft OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll [2020-03-21] (Microsoft Corporation - & gt; Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] - & gt; {A78ED123-AB77-406B-9962-2A5D9D2F7F30} = & gt; C:\Program Files (x86)\Microsoft OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll [2020-03-21] (Microsoft Corporation - & gt; Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] - & gt; {F241C880-6982-4CE5-8CF7-7085BA96DA5A} = & gt; C:\Program Files (x86)\Microsoft OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll [2020-03-21] (Microsoft Corporation - & gt; Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] - & gt; {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} = & gt; C:\Program Files (x86)\Microsoft OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll [2020-03-21] (Microsoft Corporation - & gt; Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] - & gt; {9AA2F32D-362A-42D9-9328-24A483E2CCC3} = & gt; C:\Program Files (x86)\Microsoft OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll [2020-03-21] (Microsoft Corporation - & gt; Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] - & gt; {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} = & gt; C:\Program Files (x86)\Microsoft OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll [2020-03-21] (Microsoft Corporation - & gt; Microsoft Corporation)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] - & gt; {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} = & gt; C:\Program Files\Google\Drive\googledrivesync64.dll [2020-02-27] (Google LLC - & gt; Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] - & gt; {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} = & gt; C:\Program Files\Google\Drive\googledrivesync64.dll [2020-02-27] (Google LLC - & gt; Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] - & gt; {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} = & gt; C:\Program Files\Google\Drive\googledrivesync64.dll [2020-02-27] (Google LLC - & gt; Google)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] - & gt; {BBACC218-34EA-4666-9D7A-C78F2274A524} = & gt; C:\Program Files (x86)\Microsoft OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll [2020-03-21] (Microsoft Corporation - & gt; Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] - & gt; {5AB7172C-9C11-405C-8DD5-AF20F3606282} = & gt; C:\Program Files (x86)\Microsoft OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll [2020-03-21] (Microsoft Corporation - & gt; Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] - & gt; {A78ED123-AB77-406B-9962-2A5D9D2F7F30} = & gt; C:\Program Files (x86)\Microsoft OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll [2020-03-21] (Microsoft Corporation - & gt; Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] - & gt; {F241C880-6982-4CE5-8CF7-7085BA96DA5A} = & gt; C:\Program Files (x86)\Microsoft OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll [2020-03-21] (Microsoft Corporation - & gt; Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] - & gt; {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} = & gt; C:\Program Files (x86)\Microsoft OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll [2020-03-21] (Microsoft Corporation - & gt; Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] - & gt; {9AA2F32D-362A-42D9-9328-24A483E2CCC3} = & gt; C:\Program Files (x86)\Microsoft OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll [2020-03-21] (Microsoft Corporation - & gt; Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] - & gt; {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} = & gt; C:\Program Files (x86)\Microsoft OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll [2020-03-21] (Microsoft Corporation - & gt; Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] - & gt; {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} = & gt; C:\Program Files (x86)\Microsoft OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll [2020-03-21] (Microsoft Corporation - & gt; Microsoft Corporation)
ContextMenuHandlers1: [AIMP] - & gt; {1F77B17B-F531-44DB-ACA4-76ABB5010A28} = & gt; C:\Program Files (x86)\AIMP\System\aimp_menu64.dll [2019-11-13] (Artem Izmaylov - & gt; AIMP DevTeam)
ContextMenuHandlers1: [ANotepad++64] - & gt; {B298D29A-A6ED-11DE-BA8C-A68E55D89593} = & gt; C:\Program Files\Notepad++\NppShell_06.dll [2019-10-28] (Notepad++ - & gt; )
ContextMenuHandlers1: [GDContextMenu] - & gt; {BB02B294-8425-42E5-983F-41A1FA970CD6} = & gt; C:\Program Files\Google\Drive\contextmenu64.dll [2020-02-27] (Google LLC - & gt; Google)
ContextMenuHandlers1: [WinRAR] - & gt; {B41DB860-64E4-11D2-9906-E49FADC173CA} = & gt; C:\Program Files\WinRAR\rarext.dll [2019-05-07] (win.rar GmbH - & gt; Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] - & gt; {B41DB860-8EE4-11D2-9906-E49FADC173CA} = & gt; C:\Program Files\WinRAR\rarext32.dll [2019-05-07] (win.rar GmbH - & gt; Alexander Roshal)
ContextMenuHandlers4: [ FileSyncEx] - & gt; {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} = & gt; C:\Program Files (x86)\Microsoft OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll [2020-03-21] (Microsoft Corporation - & gt; Microsoft Corporation)
ContextMenuHandlers4: [AIMP] - & gt; {1F77B17B-F531-44DB-ACA4-76ABB5010A28} = & gt; C:\Program Files (x86)\AIMP\System\aimp_menu64.dll [2019-11-13] (Artem Izmaylov - & gt; AIMP DevTeam)
ContextMenuHandlers4: [FastFolders32] - & gt; {FB0F57E0-09D0-11D2-9ADC-7CEC09C10000} = & gt; - & gt; Brak pliku
ContextMenuHandlers4: [FastFolders64] - & gt; {FB0F57E0-64D0-11D2-9ADC-7CEC09C10000} = & gt; C:\Program Files (x86)\FastFolders\FastFolders64.dll [2019-12-21] () [Brak podpisu cyfrowego]
ContextMenuHandlers4: [GDContextMenu] - & gt; {BB02B294-8425-42E5-983F-41A1FA970CD6} = & gt; C:\Program Files\Google\Drive\contextmenu64.dll [2020-02-27] (Google LLC - & gt; Google)
ContextMenuHandlers5: [ FileSyncEx] - & gt; {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} = & gt; C:\Program Files (x86)\Microsoft OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll [2020-03-21] (Microsoft Corporation - & gt; Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] - & gt; {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} = & gt; C:\Windows\system32\nvshext.dll [2020-03-13] (NVIDIA Corporation - & gt; NVIDIA Corporation)
ContextMenuHandlers6: [WinRAR] - & gt; {B41DB860-64E4-11D2-9906-E49FADC173CA} = & gt; C:\Program Files\WinRAR\rarext.dll [2019-05-07] (win.rar GmbH - & gt; Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] - & gt; {B41DB860-8EE4-11D2-9906-E49FADC173CA} = & gt; C:\Program Files\WinRAR\rarext32.dll [2019-05-07] (win.rar GmbH - & gt; Alexander Roshal)
ContextMenuHandlers1_S-1-5-21-4127655614-2183925408-349122224-1001: [!PhotoWorks] - & gt; {60349223-D450-4318-A9C7-63C42F5DA6A4} = & gt; C:\Program Files (x86)\PhotoWorks\ShellMenu64.dll [2019-02-21] (AMS Software - & gt; )
==================== Codecs (filtrowane) ====================
(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
HKLM\...\Drivers32: [vidc.XVID] = & gt; C:\Windows\system32\xvidvfw.dll [251392 2017-12-08] () [Brak podpisu cyfrowego]
HKLM\...\Drivers32: [msacm.l3acm] = & gt; C:\Windows\SysWOW64\l3codecp.acm [189440 2019-03-19] (Microsoft Windows - & gt; Fraunhofer Institut Integrierte Schaltungen IIS)
HKLM\...\Drivers32: [vidc.XVID] = & gt; C:\Windows\SysWOW64\xvidvfw.dll [235520 2017-12-08] () [Brak podpisu cyfrowego]
HKLM\...\Drivers32: [vidc.VP60] = & gt; C:\Windows\SysWOW64\vp6vfw.dll [447752 2014-09-16] (Electronic Arts - & gt; On2.com)
HKLM\...\Drivers32: [vidc.VP61] = & gt; C:\Windows\SysWOW64\vp6vfw.dll [447752 2014-09-16] (Electronic Arts - & gt; On2.com)
==================== Skróty & WMI ========================
(Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.)
ShortcutWithArgument: C:\Users\chiyu\Desktop\Google Drive.lnk - & gt; C:\Users\chiyu\Google Drive () - & gt; --profile-directory=Default --app-id=aghbiahbpaijignceidepookljebhfak
ShortcutWithArgument: C:\Users\chiyu\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnk - & gt; C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) - & gt; --profile-directory=Default
ShortcutWithArgument: C:\Users\chiyu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Excel.lnk - & gt; C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) - & gt; --profile-directory=Default --app-id=leffmjdabcgaflkikcefahmlgpodjkdm
ShortcutWithArgument: C:\Users\chiyu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook.lnk - & gt; C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) - & gt; --profile-directory=Default --app-id=bjhmmnoficofgoiacjaajpkfndojknpb
ShortcutWithArgument: C:\Users\chiyu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk - & gt; C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) - & gt; --profile-directory=Default --app-id=opfacbhaojodjaojgocnibmklknchehf
ShortcutWithArgument: C:\Users\chiyu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Word.lnk - & gt; C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) - & gt; --profile-directory=Default --app-id=hikhggiobiflkdfdgdajcfklmcibbopi
ShortcutWithArgument: C:\Users\chiyu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\Google Drive.lnk - & gt; C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) - & gt; --profile-directory=Default --app-id=aghbiahbpaijignceidepookljebhfak
ShortcutWithArgument: C:\Users\chiyu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\d249d9ddd424b688\Google Chrome.lnk - & gt; C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) - & gt; --profile-directory=Default
==================== Załadowane moduły (filtrowane) =============
2018-03-27 20:42 - 2018-03-27 20:42 - 000151040 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\CorsairAudioDevice.dll
2017-10-02 09:54 - 2017-10-02 09:54 - 000013312 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\libEGL.DLL
2017-10-02 09:54 - 2017-10-02 09:54 - 001950720 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\libGLESv2.dll
2018-03-27 20:11 - 2018-03-27 20:11 - 000044544 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\MacroRecording.dll
2018-03-27 20:18 - 2018-03-27 20:18 - 000197120 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\quazip.dll
2018-03-27 20:11 - 2018-03-27 20:11 - 000097280 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\zlib.dll
2019-11-04 23:06 - 2019-11-04 23:06 - 000153088 _____ () [Brak podpisu cyfrowego] C:\Riot Games\Riot Client\libuv.dll
2019-11-04 23:06 - 2019-11-04 23:06 - 000092160 _____ () [Brak podpisu cyfrowego] C:\Riot Games\Riot Client\yaml.dll
2019-11-04 23:06 - 2019-11-04 23:06 - 000106496 _____ () [Brak podpisu cyfrowego] C:\Riot Games\Riot Client\zlib.dll
2018-03-27 20:17 - 2018-03-27 20:17 - 001445376 _____ (Corsair Components, Inc.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\CorsairOsdHook.dll
2019-11-04 23:06 - 2019-11-04 23:06 - 000122880 _____ (hxxps://nghttp2.org/) [Brak podpisu cyfrowego] C:\Riot Games\Riot Client\libnghttp2.dll
2019-11-04 23:06 - 2019-11-04 23:06 - 000334336 _____ (The curl library, hxxps://curl.haxx.se/) [Brak podpisu cyfrowego] C:\Riot Games\Riot Client\libcurl.dll
2018-02-05 17:39 - 2018-02-05 17:39 - 001272320 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\LIBEAY32.dll
2018-02-05 17:39 - 2018-02-05 17:39 - 000278016 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\ssleay32.dll
2019-11-04 23:06 - 2019-11-04 23:06 - 002551296 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Brak podpisu cyfrowego] C:\Riot Games\Riot Client\libcrypto-1_1.dll
2019-11-04 23:06 - 2019-11-04 23:06 - 000530432 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Brak podpisu cyfrowego] C:\Riot Games\Riot Client\libssl-1_1.dll
2017-10-02 10:06 - 2017-10-02 10:06 - 000026112 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\imageformats\qgif.dll
2017-10-02 12:10 - 2017-10-02 12:10 - 000033280 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\imageformats\qicns.dll
2017-10-02 10:05 - 2017-10-02 10:05 - 000027648 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\imageformats\qico.dll
2017-10-02 10:06 - 2017-10-02 10:06 - 000243712 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\imageformats\qjpeg.dll
2017-10-02 12:11 - 2017-10-02 12:11 - 000021504 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\imageformats\qsvg.dll
2017-10-02 12:10 - 2017-10-02 12:10 - 000020992 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\imageformats\qtga.dll
2017-10-02 12:10 - 2017-10-02 12:10 - 000271872 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\imageformats\qtiff.dll
2017-10-02 12:10 - 2017-10-02 12:10 - 000019968 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\imageformats\qwbmp.dll
2017-10-02 12:10 - 2017-10-02 12:10 - 000401408 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\imageformats\qwebp.dll
2017-10-02 10:07 - 2017-10-02 10:07 - 001094656 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\platforms\qwindows.dll
2017-10-02 12:36 - 2017-10-02 12:36 - 000046080 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt\labs\folderlistmodel\qmlfolderlistmodelplugin.dll
2017-10-02 12:36 - 2017-10-02 12:36 - 000025088 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt\labs\settings\qmlsettingsplugin.dll
2018-03-27 20:42 - 2018-03-27 20:42 - 004770816 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5Core.dll
2017-10-02 09:59 - 2017-10-02 09:59 - 004963840 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5Gui.dll
2017-10-02 13:14 - 2017-10-02 13:14 - 000576512 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5Multimedia.dll
2017-10-02 09:59 - 2017-10-02 09:59 - 000952832 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5Network.dll
2017-10-02 12:28 - 2017-10-02 12:28 - 002629632 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5Qml.dll
2017-10-02 12:33 - 2017-10-02 12:33 - 002846720 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5Quick.dll
2017-10-02 12:11 - 2017-10-02 12:11 - 000265728 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5Svg.dll
2017-10-02 10:04 - 2017-10-02 10:04 - 004456448 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5Widgets.dll
2017-10-02 13:38 - 2017-10-02 13:38 - 000234496 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5WinExtras.dll
2017-10-02 09:55 - 2017-10-02 09:55 - 000150528 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5Xml.dll
2017-10-02 13:12 - 2017-10-02 13:12 - 000041472 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll
2017-10-02 13:12 - 2017-10-02 13:12 - 000015872 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\QtGraphicalEffects\qtgraphicaleffectsplugin.dll
2017-10-02 12:36 - 2017-10-02 12:36 - 000015872 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\QtQml\Models.2\modelsplugin.dll
2017-10-02 12:37 - 2017-10-02 12:37 - 000052224 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\QtQml\StateMachine\qtqmlstatemachine.dll
2017-10-02 12:36 - 2017-10-02 12:36 - 000015872 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\QtQuick.2\qtquick2plugin.dll
2017-10-02 13:34 - 2017-10-02 13:34 - 000257536 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\QtQuick\Controls\qtquickcontrolsplugin.dll
2017-10-02 13:33 - 2017-10-02 13:33 - 000114688 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\QtQuick\Dialogs\dialogplugin.dll
2017-10-02 13:34 - 2017-10-02 13:34 - 000037376 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\QtQuick\Dialogs\Private\dialogsprivateplugin.dll
2017-10-02 12:37 - 2017-10-02 12:37 - 000071680 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\QtQuick\Layouts\qquicklayoutsplugin.dll
2017-10-02 12:37 - 2017-10-02 12:37 - 000015872 _____ (The Qt Company Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Corsair\Corsair Utility Engine\QtQuick\Window.2\windowplugin.dll
2019-11-04 23:06 - 2019-11-04 23:06 - 000386560 _____ (Yann Collet, Facebook, Inc.) [Brak podpisu cyfrowego] C:\Riot Games\Riot Client\libzstd.dll
==================== Alternate Data Streams (filtrowane) ========
(Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.)
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [238]
==================== Tryb awaryjny (filtrowane) ==================
==================== Powiązania plików (filtrowane) =================
==================== Internet Explorer - Witryny zaufane i z ograniczeniami ==========
==================== Hosts - zawartość: =========================
(Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)
2019-03-19 06:49 - 2019-03-19 06:49 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
==================== Inne obszary ===========================
(Obecnie brak automatycznej naprawy dla tej sekcji.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path - & gt; C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\nodejs\;C:\Program Files\Git\cmd
HKU\S-1-5-21-4127655614-2183925408-349122224-1001\Control Panel\Desktop\\Wallpaper - & gt; C:\Users\chiyu\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System = & gt; (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer = & gt; (SmartScreenEnabled: Off)
Zapora systemu Windows [funkcja włączona]
Network Binding:
=============
VirtualBox Host-Only Network: VirtualBox NDIS6 Bridged Networking Driver - & gt; oracle_VBoxNetLwf (enabled)
Ethernet: VirtualBox NDIS6 Bridged Networking Driver - & gt; oracle_VBoxNetLwf (enabled)
==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==
(Załączenie wejścia w fixlist spowoduje jego usunięcie.)
HKLM\...\StartupApproved\Run32: = & gt; " SunJavaUpdateSched "
HKLM\...\StartupApproved\Run32: = & gt; " Wondershare Helper Compact.exe "
HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\StartupApproved\Run: = & gt; " Discord "
HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\StartupApproved\Run: = & gt; " CCleaner Smart Cleaning "
HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\StartupApproved\Run: = & gt; " CCXProcess "
HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\StartupApproved\Run: = & gt; " Steam "
HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\StartupApproved\Run: = & gt; " EpicGamesLauncher "
HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\StartupApproved\Run: = & gt; " launchOnStartup "
HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\StartupApproved\Run: = & gt; " com.blitz.app "
HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\StartupApproved\Run: = & gt; " Parsec.App.0 "
HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\StartupApproved\Run: = & gt; " Free Download Manager "
HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\StartupApproved\Run: = & gt; " Spotify "
HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\StartupApproved\Run: = & gt; " Voicemod "
HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\StartupApproved\Run: = & gt; " eM Client "
HKU\S-1-5-21-4127655614-2183925408-349122224-1001\...\StartupApproved\Run: = & gt; " GoogleDriveSync "
==================== Reguły Zapory systemu Windows (filtrowane) ================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
FirewallRules: [{D83527D9-9469-4B09-840E-429B79BA1B43}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation - & gt; NVIDIA Corporation)
FirewallRules: [{18D49A16-499D-4E6B-B70B-1C5962E7B5E8}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation - & gt; NVIDIA Corporation)
FirewallRules: [{AADC1683-0B81-4098-A481-958986A220B9}] = & gt; (Allow) C:\Riot Games\League of Legends\LeagueClient.exe (Riot Games, Inc. - & gt; Riot Games, Inc.)
FirewallRules: [{0BD4E536-FD9D-4673-99D4-B409BB87F774}] = & gt; (Allow) C:\Riot Games\League of Legends\LeagueClient.exe (Riot Games, Inc. - & gt; Riot Games, Inc.)
FirewallRules: [TCP Query User{8BF047A4-2488-4836-98AB-D47A74631911}C:\riot games\league of legends\game\league of legends.exe] = & gt; (Allow) C:\riot games\league of legends\game\league of legends.exe (Riot Games, Inc. - & gt; Riot Games, Inc.)
FirewallRules: [UDP Query User{641A5230-7DB5-48A2-A61C-D1238906DC74}C:\riot games\league of legends\game\league of legends.exe] = & gt; (Allow) C:\riot games\league of legends\game\league of legends.exe (Riot Games, Inc. - & gt; Riot Games, Inc.)
FirewallRules: [TCP Query User{E01891DF-D7F4-4879-8509-EEBFDA56AD3A}C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] = & gt; (Allow) C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe
FirewallRules: [UDP Query User{BD636F7F-2B57-4290-B7B7-2A2B0B479506}C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] = & gt; (Allow) C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe
FirewallRules: [TCP Query User{05867C72-A71A-4BFA-86E3-0E897DEE6000}D:\teamspeak3-server_win64\ts3server.exe] = & gt; (Allow) D:\teamspeak3-server_win64\ts3server.exe (TeamSpeak Systems GmbH - & gt; TeamSpeak Systems GmbH)
FirewallRules: [UDP Query User{FA61433F-ABE4-461E-A9D2-22D921C9121B}D:\teamspeak3-server_win64\ts3server.exe] = & gt; (Allow) D:\teamspeak3-server_win64\ts3server.exe (TeamSpeak Systems GmbH - & gt; TeamSpeak Systems GmbH)
FirewallRules: [TCP Query User{B27B4173-5B5C-493A-B78E-77BFEF49DDC8}C:\riot games\league of legends\game\league of legends.exe] = & gt; (Allow) C:\riot games\league of legends\game\league of legends.exe (Riot Games, Inc. - & gt; Riot Games, Inc.)
FirewallRules: [UDP Query User{C125DA0E-8519-418B-92FC-903CBC5AA1C0}C:\riot games\league of legends\game\league of legends.exe] = & gt; (Allow) C:\riot games\league of legends\game\league of legends.exe (Riot Games, Inc. - & gt; Riot Games, Inc.)
FirewallRules: [TCP Query User{6282AE5B-D50D-4B77-A0D4-34991E9E72F9}C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] = & gt; (Allow) C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe
FirewallRules: [UDP Query User{865AE1DB-9321-47CC-AD5A-0C7F0F734D96}C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] = & gt; (Allow) C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe
FirewallRules: [TCP Query User{83B85DDA-EA2E-4DD3-BA1F-FF91EA546B0F}C:\program files (x86)\common files\oracle\java\javapath_target_86962453\java.exe] = & gt; (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_86962453\java.exe
FirewallRules: [UDP Query User{48DBB141-56A3-444F-B816-CE8E22ACE615}C:\program files (x86)\common files\oracle\java\javapath_target_86962453\java.exe] = & gt; (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_86962453\java.exe
FirewallRules: [TCP Query User{3907864C-3E78-4CAE-BAA7-27B29AEEB743}D:\xampp\apache\bin\httpd.exe] = & gt; (Allow) D:\xampp\apache\bin\httpd.exe (Apache Software Foundation) [Brak podpisu cyfrowego]
FirewallRules: [UDP Query User{E1E2368F-EC63-44D0-9115-F80F6A2727CA}D:\xampp\apache\bin\httpd.exe] = & gt; (Allow) D:\xampp\apache\bin\httpd.exe (Apache Software Foundation) [Brak podpisu cyfrowego]
FirewallRules: [TCP Query User{073E286E-0F33-4F8C-87C4-1960DAAA6442}D:\xampp\mysql\bin\mysqld.exe] = & gt; (Allow) D:\xampp\mysql\bin\mysqld.exe (MariaDB Corporation Ab - & gt; )
FirewallRules: [UDP Query User{519DAEA9-5D57-44F2-9D05-3BC46D849DBF}D:\xampp\mysql\bin\mysqld.exe] = & gt; (Allow) D:\xampp\mysql\bin\mysqld.exe (MariaDB Corporation Ab - & gt; )
FirewallRules: [{7D285BDD-10B9-4CE1-9C33-CA719B0E649F}] = & gt; (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve - & gt; Valve Corporation)
FirewallRules: [{BF0A4B1F-060B-4057-94A1-8EE098ED9D24}] = & gt; (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve - & gt; Valve Corporation)
FirewallRules: [{3D5A35F7-A5CF-4DA1-BD63-DF813B07472B}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve - & gt; )
FirewallRules: [{40312EF9-10A7-4B37-A532-6208BF3F94EC}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve - & gt; )
FirewallRules: [{4D38BAEC-56AE-4F08-A2EC-E93874312B57}] = & gt; (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation - & gt; Mozilla Corporation)
FirewallRules: [{C8131CAC-5C2D-4735-9F49-9A42B5489E25}] = & gt; (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation - & gt; Mozilla Corporation)
FirewallRules: [{E04DAB0A-EA0F-4602-9981-EE1B776151C6}] = & gt; (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve - & gt; Valve Corporation)
FirewallRules: [{2BB16E5B-E249-4614-BA2D-9017AA99D27B}] = & gt; (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve - & gt; Valve Corporation)
FirewallRules: [TCP Query User{91D9AF93-B994-4A19-BBE2-FA43183C2C19}C:\users\chiyu\appdata\local\blitz\current\blitz.exe] = & gt; (Allow) C:\users\chiyu\appdata\local\blitz\current\blitz.exe (Swift Media Entertainment, Inc. - & gt; Blitz Inc.)
FirewallRules: [UDP Query User{59D5EB27-98E4-4321-9D60-4CBE687CA016}C:\users\chiyu\appdata\local\blitz\current\blitz.exe] = & gt; (Allow) C:\users\chiyu\appdata\local\blitz\current\blitz.exe (Swift Media Entertainment, Inc. - & gt; Blitz Inc.)
FirewallRules: [TCP Query User{783CE574-B84F-4BD6-BA80-BCB4FDD954B5}C:\program files\java\jre1.8.0_231\bin\javaw.exe] = & gt; (Allow) C:\program files\java\jre1.8.0_231\bin\javaw.exe
FirewallRules: [UDP Query User{1AB7A477-0EC1-4AB1-AD3E-EA6BE5D46280}C:\program files\java\jre1.8.0_231\bin\javaw.exe] = & gt; (Allow) C:\program files\java\jre1.8.0_231\bin\javaw.exe
FirewallRules: [{C56F527E-507D-4B1F-863C-6D401C44D276}] = & gt; (Allow) C:\Program Files\Parsec\parsecd.exe (Parsec Cloud, Inc. - & gt; Parsec)
FirewallRules: [TCP Query User{F78F62F8-BE99-4616-B193-549BFBD47536}C:\users\chiyu\appdata\roaming\.pvplounge\launcher.exe] = & gt; (Allow) C:\users\chiyu\appdata\roaming\.pvplounge\launcher.exe (Digital Ingot, Inc. - & gt; )
FirewallRules: [UDP Query User{282C6A51-BA89-4ED9-B9B5-1DD069BD54BE}C:\users\chiyu\appdata\roaming\.pvplounge\launcher.exe] = & gt; (Allow) C:\users\chiyu\appdata\roaming\.pvplounge\launcher.exe (Digital Ingot, Inc. - & gt; )
FirewallRules: [{3474F24E-E08F-436A-BEB8-BBD41AEF937D}] = & gt; (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\UNO\uno.exe () [Brak podpisu cyfrowego]
FirewallRules: [{F454712A-9F1E-4B75-B8C9-E32DF098635D}] = & gt; (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\UNO\uno.exe () [Brak podpisu cyfrowego]
FirewallRules: [TCP Query User{E15A620E-22D3-49A0-91FF-E45EE6482994}D:\steam cmd\steamcmd.exe] = & gt; (Allow) D:\steam cmd\steamcmd.exe
FirewallRules: [UDP Query User{3CED3C20-D9C6-4EC2-B7EF-20552C397B87}D:\steam cmd\steamcmd.exe] = & gt; (Allow) D:\steam cmd\steamcmd.exe
FirewallRules: [TCP Query User{17812BF2-1A57-4BBE-A8EA-66C48E00246D}D:\csgoserwer\srcds.exe] = & gt; (Allow) D:\csgoserwer\srcds.exe (Valve - & gt; )
FirewallRules: [UDP Query User{91013733-FDEE-4548-B85D-21F647FD71F7}D:\csgoserwer\srcds.exe] = & gt; (Allow) D:\csgoserwer\srcds.exe (Valve - & gt; )
FirewallRules: [{A9B0EC54-1D0D-48E1-A962-44A287E052C1}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation - & gt; NVIDIA Corporation)
FirewallRules: [{DCF171FA-9989-4F20-A06C-FB612C636728}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation - & gt; NVIDIA Corporation)
FirewallRules: [{5C9D27EE-2669-4177-989E-A1065371465E}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation - & gt; NVIDIA Corporation)
FirewallRules: [{96144EE9-52EC-4AC9-A184-038DE6167AC5}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation - & gt; NVIDIA Corporation)
FirewallRules: [TCP Query User{A10856B7-140B-4213-AB6F-19FE6F39AD5C}C:\users\chiyu\appdata\roaming\spotify\spotify.exe] = & gt; (Allow) C:\users\chiyu\appdata\roaming\spotify\spotify.exe (Spotify AB - & gt; Spotify Ltd)
FirewallRules: [UDP Query User{CB2B06A8-1BA0-4969-B1C1-2A96FE380651}C:\users\chiyu\appdata\roaming\spotify\spotify.exe] = & gt; (Allow) C:\users\chiyu\appdata\roaming\spotify\spotify.exe (Spotify AB - & gt; Spotify Ltd)
FirewallRules: [TCP Query User{A6D836F7-C459-44DE-AA43-2766FBF49EB1}C:\program files\epic games\farmingsimulator19\x64\farmingsimulator2019game.exe] = & gt; (Allow) C:\program files\epic games\farmingsimulator19\x64\farmingsimulator2019game.exe (GIANTS Software GmbH - & gt; GIANTS Software GmbH)
FirewallRules: [UDP Query User{6179E737-DD81-4458-A09E-1524F3DB4DE4}C:\program files\epic games\farmingsimulator19\x64\farmingsimulator2019game.exe] = & gt; (Allow) C:\program files\epic games\farmingsimulator19\x64\farmingsimulator2019game.exe (GIANTS Software GmbH - & gt; GIANTS Software GmbH)
FirewallRules: [TCP Query User{14D61785-9FAE-4AF9-8E0D-48A60704E3A5}C:\program files\epic games\farmingsimulator19\dedicatedserver.exe] = & gt; (Allow) C:\program files\epic games\farmingsimulator19\dedicatedserver.exe (GIANTS Software GmbH - & gt; GIANTS Software GmbH)
FirewallRules: [UDP Query User{FCDB3245-23E6-4C99-81E6-727C5DBCA0DF}C:\program files\epic games\farmingsimulator19\dedicatedserver.exe] = & gt; (Allow) C:\program files\epic games\farmingsimulator19\dedicatedserver.exe (GIANTS Software GmbH - & gt; GIANTS Software GmbH)
FirewallRules: [TCP Query User{EAD47689-C0B1-4827-AAE4-01F959A21C49}C:\users\chiyu\desktop\discord bot maker\discord bot maker.exe] = & gt; (Allow) C:\users\chiyu\desktop\discord bot maker\discord bot maker.exe (The NWJS Community) [Brak podpisu cyfrowego]
FirewallRules: [UDP Query User{5EB31E90-7806-4C7E-89CE-B0F0AA8F9B12}C:\users\chiyu\desktop\discord bot maker\discord bot maker.exe] = & gt; (Allow) C:\users\chiyu\desktop\discord bot maker\discord bot maker.exe (The NWJS Community) [Brak podpisu cyfrowego]
FirewallRules: [{A06D89FA-9EA7-4543-94E7-520545C3D08F}] = & gt; (Allow) C:\Program Files\BlueStacks\HD-Player.exe (BlueStack Systems, Inc. - & gt; BlueStack Systems, Inc.)
FirewallRules: [{BFFED231-D5D6-4280-9B5F-14ECAF0B70A4}] = & gt; (Allow) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation - & gt; Microsoft Corporation)
FirewallRules: [{C10C1CC0-8EA0-4609-8E8E-DDA76D7379E0}] = & gt; (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin_LE\TS4.exe (Electronic Arts, Inc. - & gt; Electronic Arts Inc.)
FirewallRules: [{C52A0077-BFCD-40AC-8673-7ECDD7F2C89F}] = & gt; (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin_LE\TS4.exe (Electronic Arts, Inc. - & gt; Electronic Arts Inc.)
FirewallRules: [{C82D5747-2135-407A-BCC7-7ED336F7763C}] = & gt; (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe (Electronic Arts, Inc. - & gt; Electronic Arts Inc.)
FirewallRules: [{AFAF0A37-3D4C-4746-8F60-0074007D5467}] = & gt; (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe (Electronic Arts, Inc. - & gt; Electronic Arts Inc.)
FirewallRules: [{B8A27AD1-9F2C-4908-8465-CDAB5D81444A}] = & gt; (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC - & gt; Google LLC)
FirewallRules: [{E79C8617-1ADA-49B3-8C6F-71A617A37894}] = & gt; (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.5.17.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (SAMSUNG ELECTRONICS CO,.LTD. - & gt; )
FirewallRules: [{ADB74D46-06A7-4754-8A23-B1ADDCA6895F}] = & gt; (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.5.17.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (SAMSUNG ELECTRONICS CO,.LTD. - & gt; )
FirewallRules: [{7BE456EC-9D1B-475C-828F-7F1676434013}] = & gt; (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.5.17.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (SAMSUNG ELECTRONICS CO,.LTD. - & gt; )
FirewallRules: [{9248CD93-7707-40A0-A479-A200EBF6E54F}] = & gt; (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.5.17.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (SAMSUNG ELECTRONICS CO,.LTD. - & gt; )
FirewallRules: [{62702C3C-4546-4FC6-AEA4-8A5537BE709C}] = & gt; (Allow) C:\Program Files (x86)\DroidCam\DroidCamApp.exe (DEV47 APPS - & gt; )
FirewallRules: [{2CBD61D2-ED5F-4BC3-A254-778B0F3254D5}] = & gt; (Allow) C:\Program Files (x86)\DroidCam\DroidCamApp.exe (DEV47 APPS - & gt; )
FirewallRules: [TCP Query User{3D26C6D9-FEFD-4CD3-89BE-711DCC8EEF69}C:\program files (x86)\call of duty modern warfare\modernwarfare.exe] = & gt; (Allow) C:\program files (x86)\call of duty modern warfare\modernwarfare.exe (Activision Publishing Inc - & gt; Activision)
FirewallRules: [UDP Query User{1DFC77DC-4C3D-41F1-9538-6CB5EFD16614}C:\program files (x86)\call of duty modern warfare\modernwarfare.exe] = & gt; (Allow) C:\program files (x86)\call of duty modern warfare\modernwarfare.exe (Activision Publishing Inc - & gt; Activision)
FirewallRules: [TCP Query User{15F15FB2-0BEE-479C-AACB-269279F74F23}C:\users\chiyu\appdata\local\programs\opera\67.0.3575.115\opera.exe] = & gt; (Allow) C:\users\chiyu\appdata\local\programs\opera\67.0.3575.115\opera.exe (Opera Software AS - & gt; Opera Software)
FirewallRules: [UDP Query User{1C8BAA2D-C38F-4973-AFB7-0C646A2DB377}C:\users\chiyu\appdata\local\programs\opera\67.0.3575.115\opera.exe] = & gt; (Allow) C:\users\chiyu\appdata\local\programs\opera\67.0.3575.115\opera.exe (Opera Software AS - & gt; Opera Software)
==================== Punkty Przywracania systemu =========================
21-03-2020 18:38:51 Scheduled Checkpoint
29-03-2020 16:40:41 Windows Update
==================== Wadliwe urządzenia w Menedżerze urządzeń ============
==================== Błędy w Dzienniku zdarzeń: ========================
Dziennik Aplikacja:
==================
Error: (03/30/2020 07:46:11 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program explorer.exe version 10.0.18362.693 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 3a40
Start Time: 01d606bae44a600c
Termination Time: 27
Application Path: C:\Windows\explorer.exe
Report Id: a88b17c6-65b4-4ffd-a7c5-1995e29fd100
Faulting package full name:
Faulting package-relative application ID:
Hang type: Unknown
Error: (03/30/2020 07:44:35 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program explorer.exe version 10.0.18362.693 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 3440
Start Time: 01d606b214061db3
Termination Time: 0
Application Path: C:\Windows\explorer.exe
Report Id: 59467c93-1fa3-4015-b76b-3815cda75d82
Faulting package full name:
Faulting package-relative application ID:
Hang type: Unknown
Error: (03/30/2020 06:41:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: explorer.exe, version: 10.0.18362.693, time stamp: 0x587c1978
Faulting module name: FastFolders64.dll, version: 0.0.0.0, time stamp: 0x5df2b6d8
Exception code: 0xc0000005
Fault offset: 0x000000000001170f
Faulting process id: 0x27b0
Faulting application start time: 0x01d605e70c0d9145
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Program Files (x86)\FastFolders\FastFolders64.dll
Report Id: e3f9d24f-d7ad-4f22-be21-d9f0dc1884cd
Faulting package full name:
Faulting package-relative application ID:
Error: (03/30/2020 06:21:40 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=TimerEvent
Error: (03/30/2020 04:31:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: TeamSpeak.exe, version: 5.0.0.0, time stamp: 0x5e5f8b27
Faulting module name: TeamSpeak.exe, version: 5.0.0.0, time stamp: 0x5e5f8b27
Exception code: 0xc0000409
Fault offset: 0x0000000000a5d589
Faulting process id: 0x3010
Faulting application start time: 0x01d6069f17cf4ee9
Faulting application path: C:\Program Files\TeamSpeak\TeamSpeak.exe
Faulting module path: C:\Program Files\TeamSpeak\TeamSpeak.exe
Report Id: fa80161e-616f-4f34-b4e6-e694491a6ab1
Faulting package full name:
Faulting package-relative application ID:
Error: (03/29/2020 06:29:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: CorsairOsdLauncher.exe, version: 2.24.50.0, time stamp: 0x5aba740e
Faulting module name: VCRUNTIME140.dll, version: 14.16.27033.0, time stamp: 0x5d30ea7c
Exception code: 0xc0000005
Fault offset: 0x00002a30
Faulting process id: 0x2290
Faulting application start time: 0x01d605e7322edcc3
Faulting application path: C:\Program Files (x86)\Corsair\Corsair Utility Engine\CorsairOsdLauncher.exe
Faulting module path: C:\Windows\SYSTEM32\VCRUNTIME140.dll
Report Id: d7af5a2f-ad1e-4c1c-ae31-d0468ad2365c
Faulting package full name:
Faulting package-relative application ID:
Error: (03/29/2020 06:28:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: explorer.exe, version: 10.0.18362.693, time stamp: 0x587c1978
Faulting module name: FastFolders64.dll, version: 0.0.0.0, time stamp: 0x5df2b6d8
Exception code: 0xc0000005
Fault offset: 0x000000000001170f
Faulting process id: 0x498
Faulting application start time: 0x01d605e673a64907
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Program Files (x86)\FastFolders\FastFolders64.dll
Report Id: c377a209-1f06-4de1-8112-c637e6d19163
Faulting package full name:
Faulting package-relative application ID:
Error: (03/29/2020 06:23:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Explorer.EXE, version: 10.0.18362.693, time stamp: 0x587c1978
Faulting module name: FastFolders64.dll, version: 0.0.0.0, time stamp: 0x5df2b6d8
Exception code: 0xc0000005
Fault offset: 0x000000000001170f
Faulting process id: 0x17c8
Faulting application start time: 0x01d605e4cc52d7ab
Faulting application path: C:\Windows\Explorer.EXE
Faulting module path: C:\Program Files (x86)\FastFolders\FastFolders64.dll
Report Id: d373e3f2-93ef-4372-a020-df32c0aad2e0
Faulting package full name:
Faulting package-relative application ID:
Dziennik System:
=============
Error: (03/30/2020 05:25:53 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Steam Client Service service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Error: (03/30/2020 05:25:53 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (120000 milliseconds) while waiting for the Steam Client Service service to connect.
Error: (03/29/2020 06:52:14 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Mozilla Maintenance Service service terminated with the following error:
Incorrect function.
Error: (03/29/2020 06:27:56 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The NVIDIA LocalSystem Container service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 6000 milliseconds: Restart the service.
Error: (03/29/2020 06:27:56 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Modules Installer service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
Error: (03/29/2020 06:27:56 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The NVIDIA Display Container LS service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 6000 milliseconds: Restart the service.
Error: (03/29/2020 06:27:56 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Parsec service terminated unexpectedly. It has done this 1 time(s).
Error: (03/29/2020 06:09:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Origin Web Helper Service service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Windows Defender:
===================================
Date: 2020-03-15 23:24:52.295
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {1AD9187A-1035-49C5-82E2-8DCAE155DDBA}
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2020-03-03 18:36:31.302
Description:
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020 & name=Trojan:Win32/Occamy.C!ctv & threatid=2147748709 & enterprise=0
Name: Trojan:Win32/Occamy.C!ctv
ID: 2147748709
Severity: Severe
Category: Trojan
Path: file:_D:\Cs\cshSkins.dll
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: C:\Windows\explorer.exe
Security intelligence Version: AV: 1.311.481.0, AS: 1.311.481.0, NIS: 1.311.481.0
Engine Version: AM: 1.1.16800.2, NIS: 1.1.16800.2
Date: 2020-02-26 13:34:40.005
Description:
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020 & name=Trojan:Win32/Occamy.C!ctv & threatid=2147748709 & enterprise=0
Name: Trojan:Win32/Occamy.C!ctv
ID: 2147748709
Severity: Severe
Category: Trojan
Path: file:_C:\Windows\Temp\Tmp3E44.tmp
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: C:\Program Files (x86)\Common Files\Steam\SteamService.exe
Security intelligence Version: AV: 1.311.96.0, AS: 1.311.96.0, NIS: 1.311.96.0
Engine Version: AM: 1.1.16800.2, NIS: 1.1.16800.2
Date: 2020-02-25 13:22:09.596
Description:
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020 & name=Trojan:Win32/Occamy.C!ctv & threatid=2147748709 & enterprise=0
Name: Trojan:Win32/Occamy.C!ctv
ID: 2147748709
Severity: Severe
Category: Trojan
Path: file:_D:\Cs\cshSkins.dll
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: D:\Cs\hostdll.exe
Security intelligence Version: AV: 1.309.1622.0, AS: 1.309.1622.0, NIS: 1.309.1622.0
Engine Version: AM: 1.1.16800.2, NIS: 1.1.16800.2
Date: 2020-02-13 18:39:52.773
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {6F006883-2259-4BD4-8404-0AA58CB2729C}
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2020-03-22 01:02:58.892
Description:
Windows Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.311.1670.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.16800.2
Error code: 0x80240016
Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
Date: 2020-03-21 13:26:16.342
Description:
Windows Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.311.1281.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.16800.2
Error code: 0x80070102
Error description: The wait operation timed out.
Date: 2020-01-26 12:41:24.005
Description:
Windows Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.307.3048.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.16600.7
Error code: 0x80240016
Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
CodeIntegrity:
===================================
Date: 2020-02-03 19:46:29.637
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\WWAHost.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2020-02-03 19:46:29.596
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\WWAHost.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
==================== Statystyki pamięci ===========================
BIOS: Award Software International, Inc. F5 03/31/2011
Płyta główna: Gigabyte Technology Co., Ltd. P61-USB3-B3
Procesor: Intel(R) Core(TM) i5-2310 CPU @ 2.90GHz
Procent pamięci w użyciu: 75%
Całkowita pamięć fizyczna: 8175.36 MB
Dostępna pamięć fizyczna: 2008.01 MB
Całkowita pamięć wirtualna: 15375.05 MB
Dostępna pamięć wirtualna: 5026.31 MB
==================== Dyski ================================
Drive c: () (Fixed) (Total:465.19 GB) (Free:175.52 GB) NTFS
Drive d: () (Fixed) (Total:298.09 GB) (Free:272.12 GB) NTFS
\\?\Volume{a46e38b7-0000-0000-0000-100000000000}\ (Zastrzeżone przez system) (Fixed) (Total:0.57 GB) (Free:0.12 GB) NTFS
==================== MBR & Tablica partycji ====================
==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: A46E38B7)
Partition 1: (Active) - (Size=579 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.2 GB) - (Type=07 NTFS)
==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 298.1 GB) (Disk ID: 98D695E5)
Partition 1: (Not Active) - (Size=298.1 GB) - (Type=07 NTFS)
==================== Koniec Addition.txt =======================