Logi w załączniku. Tylko uprzedzam, że nie będę na ślepo wykonywać żadnych skryptów, bo mam mocno spersonalizowany system i nie chciałabym, żeby mi pousuwał zmiany, które sama wprowadziłam np. w rejestrze. Muszę wiedzieć co i dlaczego usuwam Odnośnie masy dodatków do Firefoxa, to są dodatki zainstalowane głównie w Cyberfoxie, którego prawie nie używam, ale czasami potrzebuję i nie zamierzam ich usuwać :P Na najnowszym lisku mam ich bardzo mało. Problem natomiast występuje na świeżo zainstalowanych przeglądarkach, na nowym koncie użytkownika. Z tym, że Google Chrome już usunęłam, został tylko Vivaldi i Kinza. Nie wiem też, co robi tam ten Trend Micro Internet Security, bo miałam go dawno temu, a teraz przeszukałam dysk, rejestr oraz zaplanowane zadania i nigdzie nie znalazłam po nim żadnych plików. Nie mam pojęcia skąd FRST to wygrzebał :/ Zapora Comodo jest obecnie wyłączona, bo chwilowo używam wersji próbnej Malwarebytes Pro. Jest też druga zapora, którą kiedyś zainstalowałam i jakoś tak została, ale też jest wyłączona. Inne tego typu programy są używane wyłącznie do skanowania raz na jakiś czas i normalnie nie są uruchomione. Windows Update jest wyłączony celowo i tak ma pozostać :P
Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 10.10.2018
Uruchomiony przez x (10-10-2018 21:53:01)
Uruchomiony z D:\Inne\FRST
Windows 7 Home Premium Service Pack 1 (X64) (2011-01-27 11:44:59)
Tryb startu: Normal
==========================================================
==================== Konta użytkowników: =============================
Administrator (S-1-5-21-868905537-1386466793-4044497068-500 - Administrator - Disabled) = & gt; C:\Users\Administrator.toshiba
Gość (S-1-5-21-868905537-1386466793-4044497068-501 - Limited - Disabled) = & gt; C:\Users\Gość
Test (S-1-5-21-868905537-1386466793-4044497068-1006 - Limited - Enabled) = & gt; C:\Users\Test
x (S-1-5-21-868905537-1386466793-4044497068-1000 - Administrator - Enabled) = & gt; C:\Users\x
==================== Centrum zabezpieczeń ========================
(Załączenie wejścia w fixlist spowoduje jego usunięcie.)
AV: Trend Micro Internet Security (Enabled - Up to date) {1E5CB925-ABFC-68A9-91DC-4258BDE6C44A}
AS: Trend Micro Internet Security (Enabled - Up to date) {A53D58C1-8DC6-6727-AB6C-792AC6618EF7}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Zainstalowane programy ======================
(W fixlist dozwolone tylko załączanie programów adware z flagą " Hidden " w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)
µTorrent (HKLM-x32\...\uTorrent) (Version: 1.8.4 - )
7-Zip 18.01 (x64) (HKLM\...\7-Zip) (Version: 18.01 - Igor Pavlov)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
ABBYY Screenshot Reader (HKLM-x32\...\{F9000000-0015-0000-0000-074957833700}) (Version: 9.010.483.59811 - ABBYY)
abrMate version 1.1 (HKLM-x32\...\abrMate_is1) (Version: 1.1 - )
AbstractCurves x64 (HKLM\...\AbstractCurves AbstractCurves x64 1) (Version: 1.190 - AbstractCurves Software)
abylon EXIF-CLEANER 2017.1 (HKLM\...\abylonprotectionmanager-exif-cleaner_is1) (Version: 2017.1 - abylonsoft)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 22.0.0.153 - Adobe Systems Incorporated)
Adobe Flash Player 23 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.183 - Adobe Systems Incorporated)
Adobe Flash Player 29 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 29.0.0.171 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Illustrator CS6 (HKLM-x32\...\{4869414E-7AEA-4C8E-BE1C-8D40977FD517}) (Version: 16.0 - Adobe Systems Incorporated)
Affinity Designer (HKLM\...\{9CD72A9C-EE14-4A4F-AE4D-1824474C6672}) (Version: 1.6.4.104 - Serif (Europe) Ltd)
AMP Font Viewer (HKLM-x32\...\AMP Font Viewer) (Version: - )
ANALOG projects premium (64-Bit) (HKLM\...\ANALOG_PROJECTS_1_2_38D54FE3_is1) (Version: 1.11 - Franzis Verlag GmbH)
Any Video Converter 5.8.3 (HKLM-x32\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com)
ArtRage 2 (HKLM-x32\...\{12766F00-807F-4978-8D24-FDD0A3D60EE4}) (Version: 2.6.0 - Ambient Design)
Ashampoo Burning Studio 2013 v.11.0.6 (HKLM-x32\...\{91B33C97-0FBA-74AE-E802-D782F5C8AA89}_is1) (Version: 11.0.6 - Ashampoo GmbH & Co. KG)
ATI Catalyst Install Manager (HKLM\...\{B5896016-3143-B94F-585D-DF75DAF1D879}) (Version: 3.0.765.0 - ATI Technologies, Inc.)
Audacity 2.0 (HKLM-x32\...\Audacity_is1) (Version: - Audacity Team)
Auslogics Disk Defrag Professional (HKLM-x32\...\{ADE1535C-C836-4F2E-BDA1-1C7C304743E3}_is1) (Version: 4.8.1.0 - Auslogics Labs Pty Ltd)
Auslogics Registry Cleaner (HKLM-x32\...\{8D8024F1-2945-49A5-9B78-5AB7B11D7942}_is1) (Version: 6.2.0.1 - Auslogics Labs Pty Ltd)
AutoHotkey 1.1.24.00 (HKLM\...\AutoHotkey) (Version: 1.1.24.00 - Lexikos)
Avidemux 2.6 - 64 bits (HKLM-x32\...\Avidemux 2.6 - 64 bits (64-bit)) (Version: 2.6.12.160304 - )
Bamboo (HKLM\...\Pen Tablet Driver) (Version: 5.2.5-3 - Wacom Technology Corp.)
BenVista PhotoZoom Pro 6.0.8 (HKU\S-1-5-21-868905537-1386466793-4044497068-1000\...\PhotoZoom Pro 6) (Version: 6.0.8 - BenVista Ltd.)
Bullzip PDF Printer 10.13.0.2368 (HKLM\...\Bullzip PDF Printer_is1) (Version: 10.13.0.2368 - Bullzip)
ccc-core-static (HKLM-x32\...\{F9FABC27-A955-4EDC-7732-F5BADB80F546}) (Version: 2010.0315.1050.17562 - Nazwa firmy) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.38 - Piriform)
COMODO Firewall (HKLM\...\{B8984934-ED63-43B4-B1CF-B3928B55F05D}) (Version: 10.2.0.6526 - COMODO Security Solutions Inc.) Hidden
COMODO Firewall (HKLM\...\COMODO Internet Security) (Version: 10.2.0.6526 - COMODO Security Solutions Inc.)
Comodo IceDragon (HKLM-x32\...\Comodo IceDragon) (Version: 61.0.0.20 - COMODO)
Core Temp 1.11 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.11 - ALCPU)
Cyberfox Web Browser (HKLM\...\{5EFB52C0-4EC9-46B4-80EB-8432C6599641}_is1) (Version: 52.5.2.0 - 8pecxstudios)
CyberLink PhotoDirector 7 (HKLM-x32\...\{7984FCA5-1BB6-46e6-91E2-ED5C301AF11A}) (Version: 7.0.7504.0 - CyberLink Corp.)
CyberLink PowerDirector 15 (HKLM-x32\...\{FA285575-B543-4E6E-A573-A4F534AC9965}) (Version: 15.0.3607.0 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
DeskPins (remove only) (HKLM-x32\...\DeskPins) (Version: - )
DownloadAir (HKLM-x32\...\{A916936C-0606-498D-DAE1-233A82D7CF1D}) (Version: 4.0.4 - UNKNOWN) Hidden
DownloadAir (HKLM-x32\...\com.ghusse.downloadair) (Version: 4.0.4 - UNKNOWN)
DS Clock (HKLM\...\DS Clock_is1) (Version: 2.6.2 - Duality Software)
EaseUS Todo Backup Home 9.2 (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 9.2 - CHENGDU YIWO Tech Development Co., Ltd)
Extensis Suitcase Fusion 6 (HKLM-x32\...\{4712B540-4413-48E1-9249-8574E0EAE944}) (Version: 17.2.1 - 2015 Celartem, Inc. d.b.a Extensis All rights reserved)
FastStone Capture 5.3 (HKLM-x32\...\FastStone Capture) (Version: 5.3 - FastStone Soft)
FileMenu Tools (HKLM\...\FileMenu Tools_is1) (Version: 7.4 - LopeSoft)
FileSearchy (HKLM-x32\...\FileSearchy) (Version: 1.43 - Midlinesoft)
Filter Forge 5.013 (HKLM-x32\...\Filter Forge 5_is1) (Version: - Filter Forge, Inc.)
Filter Forge Freepack 1 - Metals 2.013 (HKLM-x32\...\Filter Forge Freepack 1 - Metals_is1) (Version: - Filter Forge, Inc.)
FlashPeak Slimjet 64bit (HKLM\...\Slimjet) (Version: 17.0.4.0 - FlashPeak Inc.)
Flickr Uploadr 3.2.1 (HKLM-x32\...\Flickr Uploadr) (Version: - )
FlickrSync (HKU\S-1-5-21-868905537-1386466793-4044497068-1000\...\617c5813362ad0ae) (Version: 0.9.2.0 - FlickrSync)
Folder Size 3.4.0.0 (HKLM-x32\...\{2DFA85ED-588F-4CE3-A175-29E52C3804A8}_is1) (Version: 3.4.0.0 - MindGems, Inc.)
FontBase (HKU\S-1-5-21-868905537-1386466793-4044497068-1000\...\FontBase) (Version: 0.2.1 - Dominik Levitsky Studio)
FontBase 2.3.4 (only current user) (HKU\S-1-5-21-868905537-1386466793-4044497068-1000\...\ffc1e284-e25b-515d-b453-93eb9fe955eb) (Version: 2.3.4 - Dominik Levitsky Studio)
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation)
FotoSketcher 3.30 (HKLM-x32\...\{E7C6D565-2E48-4303-A114-AFE7B2E561AF}_is1) (Version: - David THOIRON)
Free Firewall 1.4.9.17123 (HKLM\...\Free Firewall) (Version: 1.4.9.17123 - Evorim)
Free Launch Bar 64-bit Edition (HKLM\...\{85C76689-536B-4CD4-AD94-2F5D259C084B}) (Version: 2.0.0.0 - Tordex)
GIMP 2.8.18 (HKLM\...\GIMP-2_is1) (Version: 2.8.18 - The GIMP Team)
G'MIC for GIMP (Qt version) wersja 2.2.3 (HKLM-x32\...\G'MIC for GIMP (Qt version)_is1) (Version: 2.2.3 - )
Google SketchUp 6 (HKLM-x32\...\{98736A65-3C79-49EC-B7E9-A3C77774B0E6}) (Version: 6.4.112 - Google) Hidden
Google SketchUp 6 (HKLM-x32\...\{B3D8B2F8-3C2C-45BC-933E-8B60E78F6684}) (Version: 6.0.01539 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.3 - Google Inc.) Hidden
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.20) (Version: 9.20 - Artifex Software Inc.)
GPL Ghostscript 8.60 (HKLM-x32\...\GPL Ghostscript 8.60) (Version: - )
GTK2-Runtime (HKLM-x32\...\GTK2-Runtime) (Version: 2.24.10-2012-10-10-ash - Alexander Shaduri)
ImageSkill Outliner 2 (Remove only) (HKLM-x32\...\ImageSkill Outliner 2) (Version: 2.0 - ImageSkill Software)
Inkscape 0.92.3 (HKLM\...\{81922150-317E-4BB0-A31D-FF1C14F707C5}) (Version: 0.92.3.0 - Inkscape project)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.5.7.1002 - Intel Corporation)
iResizer 3.0 (HKLM\...\{FD071DBA-2994-4350-93BB-EC245D0D3C74}_is1) (Version: - teorex)
Java 8 Update 161 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180161F0}) (Version: 8.0.1610.12 - Oracle Corporation)
Java 8 Update 161 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180161F0}) (Version: 8.0.1610.12 - Oracle Corporation)
Junk Mail filter update (HKLM-x32\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
KeyTweak - Keyboard Remapper (remove only) (HKLM-x32\...\KeyTweak) (Version: - )
Kinza (HKU\S-1-5-21-868905537-1386466793-4044497068-1006\...\Kinza) (Version: 4.9.1 - Dayz Inc.)
K-Lite Codec Pack 12.0.1 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 12.0.1 - KLCP)
Knoll Light Factory Photo (HKLM-x32\...\Knoll Light Factory Photo) (Version: - )
Krita (x64) 3.3.2.1 (HKLM\...\Krita_x64) (Version: 3.3.2.1 - Krita Foundation)
Listary version 4.23 (HKLM\...\Listary_is1) (Version: 4.23 - )
Magical Jelly Bean KeyFinder (HKLM-x32\...\KeyFinder_is1) (Version: 2.0.10.13 - Magical Jelly Bean)
Malwarebytes (wersja 3.5.1.2522) (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.5.1.2522 - Malwarebytes)
MFC RunTime files (HKLM-x32\...\{70C592EC-AE9B-4734-928B-676E824FB41E}) (Version: 1.0.0 - Extensoft) Hidden
Microsoft .NET Framework 4.6.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01590 - Microsoft Corporation)
Microsoft Office Starter 2010 - Polski (HKLM-x32\...\{90140011-0066-0415-0000-0000000FF1CE}) (Version: 14.0.6134.5003 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-868905537-1386466793-4044497068-1000\...\OneDriveSetup.exe) (Version: 17.005.0107.0008 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
MKVToolNix 8.3.0 (64bit) (HKLM-x32\...\MKVToolNix) (Version: 8.3.0 - Moritz Bunkus)
Moduł Szybka instalacja pakietu Microsoft Office 2010 (HKLM\...\{90140000-006D-0415-1000-0000000FF1CE}) (Version: 14.0.6122.5000 - Microsoft Corporation) Hidden
Moduł Szybka instalacja pakietu Microsoft Office 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.6122.5000 - Microsoft Corporation)
Mozilla Firefox 62.0.3 (x64 pl) (HKLM\...\Mozilla Firefox 62.0.3 (x64 pl)) (Version: 62.0.3 - Mozilla)
MSVC80_x64_v2 (HKLM\...\{4D668D4F-FAA2-4726-834C-31F4614F312E}) (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (HKLM-x32\...\{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}) (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (HKLM\...\{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}) (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (HKLM-x32\...\{AF111648-99A1-453E-81DD-80DBBF6DAD0D}) (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
MyPaint w64 version 1.2.0 (HKLM-x32\...\MyPaint w64_is1) (Version: 1.2.0 - Martin Renold and the MyPaint Development Team)
NapiProjekt 1.0.6.9 (HKLM-x32\...\NapiProjekt_is1) (Version: - )
nexusfont 2.6 (ver 2.6.2.1870) (HKLM-x32\...\{EFEDD205-43FE-4208-B682-0937E803E19E}_is1) (Version: - xiles)
Nik Collection (HKLM-x32\...\Nik Collection) (Version: 1.2.11 - Google)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.4 - Notepad++ Team)
NoVirusThanks File Governor v2.3 (HKLM\...\NoVirusThanks File Governor_is1) (Version: 2.3.0.0 - NoVirusThanks Company Srl)
ON1 Effects Free 10 (HKLM\...\ON1 Effects Free 10) (Version: 10.5.1 - ON1)
OpenOffice 4.1.2 (HKLM-x32\...\{E0ED9630-38E3-418F-A615-A9B2B5758BE5}) (Version: 4.12.9782 - Apache Software Foundation)
PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden
pdfsam (HKLM-x32\...\pdfsam) (Version: 2.2.1 - )
PDF-XChange Viewer (HKLM\...\{9ED333F8-3E6C-4A38-BAFA-728454121CDA}) (Version: 2.5.317.0 - Tracker Software Products (Canada) Ltd.)
PhotoME Beta-Release (HKLM-x32\...\PhotoME Beta-Release_is1) (Version: 0.8ß2 - Jens Duttke)
Phototheca 2.8.0.1972 (HKLM-x32\...\{B685A488-2894-465F-95C0-AE287DF86447}_is1) (Version: 2.8.0.1972 - Lunarship Software)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Poczta usługi Windows Live (HKLM-x32\...\{64376910-1860-4CEF-8B34-AA5D205FC5F1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (HKLM-x32\...\{7A9D47BA-6D50-4087-866F-0800D8B89383}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
PotPlayer-64 bit (HKLM\...\PotPlayer64) (Version: 1.7.8557 - Kakao Corp.)
Project Dogwaffle Artist version 9 (HKLM-x32\...\{F81E2343-94FC-4D41-B90F-45461FEC8503}_is1) (Version: 9 - Daniel Ritchie)
PT Photo Editor - Pro Edition 3.7 (HKLM\...\{5C65692A-A64B-4B54-8E1E-429A56979DB0}_is1) (Version: 3.7 - PHOTO-TOOLBOX.COM)
Python 2.7.5 (64-bit) (HKLM\...\{DBDD570E-0952-475f-9453-AB88F3DD565a}) (Version: 2.7.5150 - Python Software Foundation)
Q-Dir (HKLM\...\Q-Dir) (Version: - )
Rainlendar2 (remove only) (HKLM-x32\...\Rainlendar2) (Version: - )
RawTherapee wersja 5.0-r1-gtk3 (HKLM\...\RawTherapee5.0-r1-gtk3_is1) (Version: 5.0-r1-gtk3 - rawtherapee.com)
Real Alternative 2.0.1 Lite (HKLM-x32\...\RealAlt_is1) (Version: 2.0.1 - )
RealNetworks - Microsoft Visual C++ 2005 Runtime (HKLM-x32\...\{026C3D27-9BE1-46BE-BEAE-6DE38A0F4FBE}) (Version: 8.0 - RealNetworks) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (HKLM-x32\...\{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}) (Version: 9.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM-x32\...\RealPlayer 15.0) (Version: - RealNetworks)
Realtek 8136/8168/8169 Family Ethernet Controller Windows Driver (HKLM\...\RTNUninstVista69) (Version: - )
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.5992 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (HKLM-x32\...\{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}) (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Reg Organizer wersja 7.70 (HKLM-x32\...\Reg Organizer_is1) (Version: 7.70 - ChemTable Software)
Reshade 3.0 (HKLM-x32\...\Reshade 3.0) (Version: 3.0 - Reshade)
Resource Hacker Version 3.6.0 (HKLM-x32\...\ResourceHacker_is1) (Version: - )
Riot plugin (HKLM-x32\...\Riot-plugin) (Version: - )
Screen Capturer (HKLM-x32\...\Screen Capturer) (Version: 1.0.4.42 - ScreenCapturer.com)
Seer 0.8.1 (HKLM-x32\...\Seer) (Version: 0.8.1 - Corey)
Simpo PDF to Text 2.2.0.0 (HKLM-x32\...\Simpo PDF to Text_is1) (Version: - )
Sketch Drawer 5.1 (HKLM-x32\...\Sketch Drawer_is1) (Version: 5.1 - SoftOrbits)
SketchUp 2015 PL (HKLM-x32\...\SketchUp Pro 2015 PL (64-bit) 15.1.106) (Version: 15.1.106 - Trimble Navigation Limited)
SketchUp Pro 2015 PL (64-bit) (HKLM\...\{CD96697A-A71F-4855-9FD8-A035DA6A5892}) (Version: 15.1.106 - Trimble Navigation Limited) Hidden
Skype (wersja 8.18) (HKLM-x32\...\Skype_is1) (Version: 8.18 - Skype Technologies S.A.)
Subtitle Edit 3.4.2 (HKLM-x32\...\SubtitleEdit_is1) (Version: 3.4.2.0 - Nikse)
SVG Explorer Extension 0.1.1 (HKLM\...\{4CA20D9A-98AC-4DD6-9C16-7449F29AC08A}_is1) (Version: 0.1.1 - Dotz Softwares)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.8.1 - Synaptics Incorporated)
TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.1.3629 - TeamViewer)
Topaz Clean 3 (HKLM-x32\...\Topaz Clean 3) (Version: 3.0.2 - Topaz Labs, LLC)
TOSHIBA ConfigFree (HKLM-x32\...\{1777CCDA-F2F2-4A77-ACF4-0B7341229BBB}) (Version: 8.0.29 - TOSHIBA Corporation)
TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.2 for x64 - TOSHIBA Corporation)
TOSHIBA Media Controller Plug-in (HKLM-x32\...\{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}) (Version: 1.0.5.10 - TOSHIBA CORPORATION)
TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.6.0.64 - TOSHIBA Corporation)
TOSHIBA Recovery Media Creator (HKLM\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.0.4 x64 - TOSHIBA Corporation)
TOSHIBA TEMPRO (HKLM-x32\...\{F082CB11-4794-4259-99A1-D91BA762AD15}) (Version: 3.35 - Toshiba Europe GmbH)
TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.3.19.64 - TOSHIBA Corporation)
TRORMCLauncher (HKLM\...\{E65C7D8E-186D-484B-BEA8-DEF0331CE600}) (Version: 1.0.0.9 - TOSHIBA) Hidden
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.0a - TrueCrypt Foundation)
Ulead Particle.Plugin 1.0 (HKLM-x32\...\Ulead Particle.Plugin 1.0) (Version: - )
UniConvertor (HKLM-x32\...\{875F0109-0307-4AE2-9439-135AC8BBE881}) (Version: 1.1.5 - Igor E. Novikov)
Utility Common Driver (HKLM-x32\...\{12688FD7-CB92-4A5B-BEE4-5C8E0574434F}) (Version: 1.0.52.1C - TOSHIBA) Hidden
Utility Common Driver (HKLM-x32\...\InstallShield_{12688FD7-CB92-4A5B-BEE4-5C8E0574434F}) (Version: 1.0.52.1C - TOSHIBA) Hidden
virtualPhotographer 1.5.6 (HKLM-x32\...\virtualPhotographer_is1) (Version: - optikVerve Labs)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Vivaldi (HKU\S-1-5-21-868905537-1386466793-4044497068-1006\...\Vivaldi) (Version: 2.0.1309.37 - Vivaldi) & lt; ==== UWAGA
VLC media player (HKLM\...\VLC media player) (Version: 3.0.1 - VideoLAN)
WebTablet FB Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.0.0.1 - Wacom Technology Corp.)
WebTablet IE Plugin (HKLM-x32\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.12 - Wacom Technology Corp.)
WebTablet Netscape Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.10 - Wacom Technology Corp.)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinRAR 5.31 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
Wise Care 365 4.9.1 (HKLM-x32\...\Wise Care 365_is1) (Version: 4.9.1 - WiseCleaner.com, Inc.)
WITaj! (HKLM-x32\...\WITaj!) (Version: - )
Wondershare DVD Slideshow Builder Deluxe(Build 6.5.1.1) (HKLM-x32\...\Wondershare DVD Slideshow Builder Deluxe_is1) (Version: 6.5.1.1 - Wondershare Software Co.,Ltd.)
Xara Photo & Graphic Designer 7 SE (HKLM\...\{8D7723BF-7CD9-49D5-BFC6-9D27B6D7C620}) (Version: 7.1.3.30976 - Xara Group Ltd) Hidden
Xara Photo & Graphic Designer 7 SE (HKLM-x32\...\MX.{8D7723BF-7CD9-49D5-BFC6-9D27B6D7C620}) (Version: 7.1.3.30976 - Xara Group Ltd)
X-Mouse Button Control 2.6.2 (HKLM-x32\...\X-Mouse Button Control) (Version: 2.6.2 - Highresolution Enterprises)
XnView 2.36 (HKLM-x32\...\XnView_is1) (Version: 2.36 - Gougelet Pierre-e)
Yandex.Disk (HKU\S-1-5-21-868905537-1386466793-4044497068-1000\...\YandexDisk) (Version: 1.4.17.5360 - Yandex)
Zoner Photo Studio 15 (HKLM\...\Zoner Photo Studio 15_is1) (Version: 15.0.1.7 - )
==================== Niestandardowe rejestracje CLSID (filtrowane): ==========================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
CustomCLSID: HKU\S-1-5-21-868905537-1386466793-4044497068-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 - & gt; C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-868905537-1386466793-4044497068-1000_Classes\CLSID\{19170A69-A883-40D5-AF97-F6DC41495F15}\InprocServer32 - & gt; C:\Users\x\AppData\Roaming\Yandex\YandexDisk\YandexDiskShellExt-4724.dll (Yandex)
CustomCLSID: HKU\S-1-5-21-868905537-1386466793-4044497068-1000_Classes\CLSID\{2D6BD2F0-5F84-4a06-924F-AEE0598B6272}\InprocServer32 - & gt; C:\Users\x\AppData\Roaming\Yandex\YandexDisk\YandexDiskShellExt-4724.dll (Yandex)
CustomCLSID: HKU\S-1-5-21-868905537-1386466793-4044497068-1000_Classes\CLSID\{33A431BB-FF15-4047-8FEC-F82FD3523A00}\localserver32 - & gt; C:\Users\x\AppData\Roaming\Yandex\YandexDisk\YandexDisk.exe (Yandex)
CustomCLSID: HKU\S-1-5-21-868905537-1386466793-4044497068-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 - & gt; C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-868905537-1386466793-4044497068-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 - & gt; C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-868905537-1386466793-4044497068-1000_Classes\CLSID\{63D48440-63AB-44D0-B323-4731DFCDE9E9}\InprocServer32 - & gt; C:\Users\x\AppData\Roaming\Yandex\YandexDisk\YandexDiskOverlays-2398.dll (Yandex)
CustomCLSID: HKU\S-1-5-21-868905537-1386466793-4044497068-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 - & gt; C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-868905537-1386466793-4044497068-1000_Classes\CLSID\{7E7DC279-E6BE-4D57-9DEC-14FA0339DBC0}\InprocServer32 - & gt; C:\Users\x\AppData\Roaming\Yandex\YandexDisk\YandexDiskOverlays-2398.dll (Yandex)
CustomCLSID: HKU\S-1-5-21-868905537-1386466793-4044497068-1000_Classes\CLSID\{97836AB9-12C5-4C30-A128-B75196DD1787}\InprocServer32 - & gt; C:\Users\x\AppData\Roaming\Yandex\YandexDisk\YandexDiskShellExt-4724.dll (Yandex)
CustomCLSID: HKU\S-1-5-21-868905537-1386466793-4044497068-1000_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 - & gt; C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-868905537-1386466793-4044497068-1000_Classes\CLSID\{AF8D197E-7022-4c3d-BD88-68AD35C9C169}\InprocServer32 - & gt; C:\Users\x\AppData\Roaming\Yandex\YandexDisk\YandexDiskOverlays-2398.dll (Yandex)
CustomCLSID: HKU\S-1-5-21-868905537-1386466793-4044497068-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 - & gt; C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-868905537-1386466793-4044497068-1000_Classes\CLSID\{E36606FE-036A-4dd0-ABA9-A58F409803F0}\InprocServer32 - & gt; C:\Users\x\AppData\Roaming\Yandex\YandexDisk\YandexDiskShellExt-4724.dll (Yandex)
CustomCLSID: HKU\S-1-5-21-868905537-1386466793-4044497068-1000_Classes\CLSID\{FB2FE984-05F5-4512-9D9B-69D3DE61F6D9}\InprocServer32 - & gt; C:\Users\x\AppData\Roaming\Yandex\YandexDisk\YandexDiskOverlays-2398.dll (Yandex)
CustomCLSID: HKU\S-1-5-21-868905537-1386466793-4044497068-1006_Classes\CLSID\{635EFA6F-08D6-4EC9-BD14-8A0FDE975159}\localserver32 - & gt; C:\Users\Test\AppData\Local\Kinza\Application\68.0.3440.106\notification_helper.exe (Dayz Inc.)
CustomCLSID: HKU\S-1-5-21-868905537-1386466793-4044497068-1006_Classes\CLSID\{BCA9D37C-CA60-4160-9115-97A00F24702D}\localserver32 - & gt; C:\Users\Test\AppData\Local\Vivaldi\Application\2.0.1309.37\notification_helper.exe (Vivaldi Technologies AS)
ContextMenuHandlers1: [7-Zip] - & gt; {23170F69-40C1-278A-1000-000100020000} = & gt; C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov)
ContextMenuHandlers1: [ANotepad++64] - & gt; {B298D29A-A6ED-11DE-BA8C-A68E55D89593} = & gt; C:\Program Files (x86)\Notepad++\NppShell_06.dll [2014-05-12] ()
ContextMenuHandlers1: [Comodo Antivirus] - & gt; {4255A182-CAD9-4214-A19B-7BA7FB633BBD} = & gt; C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2018-03-13] (COMODO)
ContextMenuHandlers1: [FG_CTX] - & gt; {B3026062-4D7E-3601-9A6B-622CEAC3FC5C} = & gt; C:\Program Files\NoVirusThanks\File Governor\FG_SHLEXT.dll [2016-03-26] (NoVirusThanks Company Srl)
ContextMenuHandlers1: [WinRAR] - & gt; {B41DB860-64E4-11D2-9906-E49FADC173CA} = & gt; C:\Program Files\WinRAR\rarext.dll [2016-02-08] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] - & gt; {B41DB860-8EE4-11D2-9906-E49FADC173CA} = & gt; C:\Program Files\WinRAR\rarext32.dll [2016-02-08] (Alexander Roshal)
ContextMenuHandlers2: [Comodo Antivirus] - & gt; {4255A182-CAD9-4214-A19B-7BA7FB633BBD} = & gt; C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2018-03-13] (COMODO)
ContextMenuHandlers3: [FG_CTX] - & gt; {B3026062-4D7E-3601-9A6B-622CEAC3FC5C} = & gt; C:\Program Files\NoVirusThanks\File Governor\FG_SHLEXT.dll [2016-03-26] (NoVirusThanks Company Srl)
ContextMenuHandlers3: [FileMenuTools] - & gt; {C1B2C38F-3DCA-4E3D-BC34-D5B87B636543} = & gt; C:\Program Files\LopeSoft\FileMenu Tools\FileMenuTools64.dll [2017-11-17] (LopeSoft)
ContextMenuHandlers3: [MBAMShlExt] - & gt; {57CE581A-0CB6-4266-9CA0-19364C90A0B3} = & gt; C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)
ContextMenuHandlers4: [7-Zip] - & gt; {23170F69-40C1-278A-1000-000100020000} = & gt; C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov)
ContextMenuHandlers4: [FileMenuTools] - & gt; {C1B2C38F-3DCA-4E3D-BC34-D5B87B636543} = & gt; C:\Program Files\LopeSoft\FileMenu Tools\FileMenuTools64.dll [2017-11-17] (LopeSoft)
ContextMenuHandlers4: [SimpleShlExt] - & gt; {45203D3B-3D73-4497-8AFE-D29950AC6C55} = & gt; C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2016-06-03] (CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers5: [ACE] - & gt; {5E2121EE-0300-11D4-8D3B-444553540000} = & gt; C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2010-03-15] (Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [FileMenuTools] - & gt; {C1B2C38F-3DCA-4E3D-BC34-D5B87B636543} = & gt; C:\Program Files\LopeSoft\FileMenu Tools\FileMenuTools64.dll [2017-11-17] (LopeSoft)
ContextMenuHandlers6: [7-Zip] - & gt; {23170F69-40C1-278A-1000-000100020000} = & gt; C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov)
ContextMenuHandlers6: [Comodo Antivirus] - & gt; {4255A182-CAD9-4214-A19B-7BA7FB633BBD} = & gt; C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2018-03-13] (COMODO)
ContextMenuHandlers6: [FG_CTX] - & gt; {B3026062-4D7E-3601-9A6B-622CEAC3FC5C} = & gt; C:\Program Files\NoVirusThanks\File Governor\FG_SHLEXT.dll [2016-03-26] (NoVirusThanks Company Srl)
ContextMenuHandlers6: [FileMenuTools] - & gt; {C1B2C38F-3DCA-4E3D-BC34-D5B87B636543} = & gt; C:\Program Files\LopeSoft\FileMenu Tools\FileMenuTools64.dll [2017-11-17] (LopeSoft)
ContextMenuHandlers6: [MBAMShlExt] - & gt; {57CE581A-0CB6-4266-9CA0-19364C90A0B3} = & gt; C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] - & gt; {B41DB860-64E4-11D2-9906-E49FADC173CA} = & gt; C:\Program Files\WinRAR\rarext.dll [2016-02-08] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] - & gt; {B41DB860-8EE4-11D2-9906-E49FADC173CA} = & gt; C:\Program Files\WinRAR\rarext32.dll [2016-02-08] (Alexander Roshal)
ContextMenuHandlers1_S-1-5-21-868905537-1386466793-4044497068-1000: [Yandex.Disk] - & gt; {97836AB9-12C5-4C30-A128-B75196DD1787} = & gt; C:\Users\x\AppData\Roaming\Yandex\YandexDisk\YandexDiskShellExt-4724.dll [2017-07-24] (Yandex)
ContextMenuHandlers4_S-1-5-21-868905537-1386466793-4044497068-1000: [Yandex.Disk] - & gt; {97836AB9-12C5-4C30-A128-B75196DD1787} = & gt; C:\Users\x\AppData\Roaming\Yandex\YandexDisk\YandexDiskShellExt-4724.dll [2017-07-24] (Yandex)
==================== Zaplanowane zadania (filtrowane) =============
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
Task: {1E9C1970-F6E6-4735-AE25-BEAE8B1DB069} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} = & gt; C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2018-03-13] (COMODO)
Task: {4F7A3645-C9C0-489A-B3DB-3ED84BC18CBD} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} = & gt; C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2018-03-13] (COMODO)
Task: {82C24008-6E85-4139-9C8E-26427498D5E8} - System32\Tasks\CCleanerSkipUAC = & gt; C:\Program Files (x86)\CCleaner\CCleaner.exe [2017-12-13] (Piriform Ltd)
Task: {856F200C-E8BB-412C-AA61-9D6163B40611} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} = & gt; C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2018-03-13] (COMODO)
Task: {A307BE82-4106-4E81-826B-9F4230C5B2AB} - System32\Tasks\ConfigFree Startup Programs = & gt; C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [2010-02-22] (TOSHIBA CORPORATION)
Task: {AF9B0150-52FF-4624-AB49-2A16151C0D45} - System32\Tasks\COMODO\COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921} = & gt; C:\Program Files\COMODO\COMODO Internet Security\cis.exe [2018-03-13] (COMODO)
Task: {CD6BE44A-7DBB-4233-BA7D-7B689A225FD4} - System32\Tasks\{EAAFE675-993A-429D-B7C5-C1CCF5F697E1} = & gt; C:\Program Files (x86)\Marxio Timer\Marxio Timer.exe
Task: {CF54E6D6-B47E-4B1B-9EA8-ABE612E86DF7} - System32\Tasks\{D62D8F90-7DC3-42FA-8B5E-2EA0C8991572} = & gt; C:\Windows\system32\pcalua.exe -a C:\Users\x\Desktop\PDF\GtkMorph-installer-20060817.exe -d C:\Users\x\Desktop\PDF
Task: {CF5C5057-BB65-442A-AAA2-BBEDDC03D826} - System32\Tasks\{91690BEB-34F0-4A8A-8B8F-9FB8123E3CA0} = & gt; C:\Windows\system32\pcalua.exe -a C:\Users\x\Desktop\swftools-0.9.0.exe -d C:\Users\x\Desktop
Task: {DD20CC39-7E97-4FBD-A88C-182417474D49} - System32\Tasks\FileSearchy_SkipUAC = & gt; C:\Program Files (x86)\FileSearchy\FileSearchy.exe [2016-10-23] ()
(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)
==================== Skróty & WMI ========================
(Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.)
Shortcut: C:\Users\x\Desktop\GRAFIKA\GRAFIKA\TabletStart.lnk - & gt; C:\Users\x\Desktop\GRAFIKA\GRAFIKA\TabletStart.bat ()
ShortcutWithArgument: C:\Users\x\Desktop\Osoba 2 - Slimjet.lnk - & gt; C:\Program Files\Slimjet\slimjet.exe (FlashPeak Inc.) - & gt; --profile-directory= " Profile 1 "
ShortcutWithArgument: C:\Users\x\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\4242a155fcc27c2b\FlashPeak Slimjet (64 bit).lnk - & gt; C:\Program Files\Slimjet\slimjet.exe (FlashPeak Inc.) - & gt; --profile-directory=Default
==================== Załadowane moduły (filtrowane) ==============
2018-03-10 08:43 - 2018-04-25 13:16 - 002297040 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2018-03-10 08:43 - 2018-04-30 12:54 - 002493648 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2014-05-12 11:49 - 2014-05-12 11:49 - 000222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
==================== Alternate Data Streams (filtrowane) =========
(Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.)
==================== Tryb awaryjny (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość " AlternateShell " zostanie przywrócona.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp = & gt; " " = " Driver "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys = & gt; " " = " Driver "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BsScanner = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp = & gt; " " = " Driver "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys = & gt; " " = " Driver "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn = & gt; " " = " Driver "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC = & gt; " " = " Service "
==================== Powiązania plików (filtrowane) ===============
(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.)
==================== Internet Explorer - Witryny zaufane i z ograniczeniami ===============
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.)
==================== Hosts - zawartość: ==========================
(Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)
2016-06-14 08:40 - 2016-06-19 20:40 - 000001470 _____ C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 live.rads.msn.com
127.0.0.1 ads1.msn.com
127.0.0.1 static.2mdn.net
127.0.0.1 ad-emea.doubleclick.net
127.0.0.1 g.msn.com
127.0.0.1 a.ads2.msads.net
127.0.0.1 b.ads2.msads.net
127.0.0.1 ac3.msn.com
127.0.0.1 rad.msn.com
127.0.0.1 msntest.serving-sys.com
127.0.0.1 bs.serving-sys.com
127.0.0.1 flex.msn.com
127.0.0.1 ec.atdmt.com
127.0.0.1 cdn.atdmt.com
127.0.0.1 db3aqu.atdmt.com
127.0.0.1 cds26.ams9.msecn.net
127.0.0.1 sO.2mdn.net
127.0.0.1 aka-cdn-ns.adtech.de
127.0.0.1 secure.flashtalking.com
127.0.0.1 adnexus.net
127.0.0.1 adnxs.com
127.0.0.1 *.rad.msn.com
127.0.0.1 *.msads.net
127.0.0.1 *.msecn.net
127.0.0.1 apps.skype.com
==================== Inne obszary ============================
(Obecnie brak automatycznej naprawy dla tej sekcji.)
HKU\S-1-5-21-868905537-1386466793-4044497068-1000\Control Panel\Desktop\\Wallpaper - & gt; C:\Users\x\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-868905537-1386466793-4044497068-1006\Control Panel\Desktop\\Wallpaper - & gt; C:\Users\Test\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System = & gt; (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: ) (EnableLUA: 1)
mpsdrv = & gt; Usługa " Zapora systemu Windows " nie jest uruchomiona.
MpsSvc = & gt; Usługa " Zapora systemu Windows " nie jest uruchomiona.
==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==
Załączenie wejścia w fixlist spowoduje jego usunięcie.
MSCONFIG\Services: !SASCORE = & gt; 3
MSCONFIG\Services: AdobeARMservice = & gt; 3
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc = & gt; 3
MSCONFIG\Services: cmdvirth = & gt; 3
MSCONFIG\Services: cvhsvc = & gt; 3
MSCONFIG\Services: gupdate = & gt; 2
MSCONFIG\Services: gupdatem = & gt; 3
MSCONFIG\Services: IceDragonUpdater = & gt; 3
MSCONFIG\Services: ListaryService = & gt; 2
MSCONFIG\Services: Nero BackItUp Scheduler 4.0 = & gt; 3
MSCONFIG\Services: ServiceLayer = & gt; 3
MSCONFIG\Services: sftlist = & gt; 3
MSCONFIG\Services: sftvsa = & gt; 3
MSCONFIG\Services: TeamViewer = & gt; 3
MSCONFIG\Services: TemproMonitoringService = & gt; 3
MSCONFIG\Services: TosCoSrv = & gt; 3
MSCONFIG\Services: WinDefend = & gt; 2
MSCONFIG\Services: WiseBootAssistant = & gt; 3
MSCONFIG\Services: WRSVC = & gt; 2
MSCONFIG\Services: WTabletServiceCon = & gt; 3
MSCONFIG\startupfolder: C:^Users^x^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Rainlendar.vbs = & gt; C:\Windows\pss\Rainlendar.vbs.Startup
MSCONFIG\startupreg: ABBYY Screenshot Reader Retail = & gt;
MSCONFIG\startupreg: Adobe ARM = & gt;
MSCONFIG\startupreg: Adobe Reader Speed Launcher = & gt;
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 = & gt; " C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe "
MSCONFIG\startupreg: AdobeBridge = & gt;
MSCONFIG\startupreg: AdobeCS6ServiceManager = & gt; " C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe " -launchedbylogin
MSCONFIG\startupreg: APSDaemon = & gt; " C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe "
MSCONFIG\startupreg: Bamboo Dock = & gt;
MSCONFIG\startupreg: BambooCore = & gt;
MSCONFIG\startupreg: CCleaner Monitoring = & gt; " C:\Program Files (x86)\CCleaner\CCleaner64.exe " /MONITOR
MSCONFIG\startupreg: COMODO Internet Security = & gt; C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
MSCONFIG\startupreg: DAEMON Tools Lite = & gt; " C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe " -autorun
MSCONFIG\startupreg: FileSearchy = & gt; C:\Program Files (x86)\FileSearchy\FileSearchy.exe -minimize
MSCONFIG\startupreg: FMCore.exe = & gt; " C:\Program Files (x86)\Extensis\Suitcase Fusion 6\FMCore.exe " -standalone
MSCONFIG\startupreg: FreeFirewall = & gt; C:\Program Files\Evorim\Free Firewall\freefirewall.exe /autostart
MSCONFIG\startupreg: Google Update = & gt;
MSCONFIG\startupreg: GoogleChromeAutoLaunch_0815950F15B335C3E93AA6551F5A1A67 = & gt; " C:\Program Files\Slimjet\slimjet.exe " --no-startup-window /prefetch:5
MSCONFIG\startupreg: GUDelayStartup = & gt;
MSCONFIG\startupreg: MSC = & gt; " C:\Program Files\Microsoft Security Client\msseces.exe " -hide -runkey
MSCONFIG\startupreg: NSU_agent = & gt;
MSCONFIG\startupreg: PC Suite Tray = & gt;
MSCONFIG\startupreg: QuickTime Task = & gt;
MSCONFIG\startupreg: RtHDVBg = & gt; C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3
MSCONFIG\startupreg: RtHDVCpl = & gt; C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: Seer = & gt; C:\Program Files (x86)\Seer\Seer.exe
MSCONFIG\startupreg: SharewareOnSale Notifier = & gt;
MSCONFIG\startupreg: SmoothView = & gt; %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
MSCONFIG\startupreg: StartCCC = & gt; " C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe " MSRun
MSCONFIG\startupreg: SunJavaUpdateSched = & gt; " C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe "
MSCONFIG\startupreg: SVPWUTIL = & gt; C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL
MSCONFIG\startupreg: SyncManPath = & gt; " C:\Users\x\AppData\Roaming\Yandex\YandexDisk\YandexDisk.exe " -autostart
MSCONFIG\startupreg: SynTPEnh = & gt; %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
MSCONFIG\startupreg: TkBellExe = & gt; " C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe " -osboot
MSCONFIG\startupreg: Toshiba Registration = & gt; C:\Program Files\Toshiba\Registration\ToshibaReminder.exe
MSCONFIG\startupreg: Toshiba TEMPRO = & gt; C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
MSCONFIG\startupreg: ToshibaServiceStation = & gt; " C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe " /hide:60
MSCONFIG\startupreg: TosNC = & gt; %ProgramFiles%\Toshiba\BulletinBoard\TosNcCore.exe
MSCONFIG\startupreg: TosSENotify = & gt; C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe
MSCONFIG\startupreg: TosVolRegulator = & gt; C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe
MSCONFIG\startupreg: TosWaitSrv = & gt; %ProgramFiles%\TOSHIBA\TPHM\TosWaitSrv.exe
MSCONFIG\startupreg: TPwrMain = & gt; %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
MSCONFIG\startupreg: TWebCamera = & gt; " C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe " autorun
MSCONFIG\startupreg: Uninstall 17.3.6966.0824 = & gt; C:\Windows\system32\cmd.exe /q /c rmdir /s /q " C:\Users\x\AppData\Local\Microsoft\OneDrive\17.3.6966.0824 "
MSCONFIG\startupreg: WITaj! = & gt; rem -- Anulowane uruchamianie programu WITaj! 2000
MSCONFIG\startupreg: Wondershare Helper Compact.exe = & gt; C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
MSCONFIG\startupreg: XMouseButtonControl = & gt; C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe /notportable
MSCONFIG\startupreg: ZoneAlarm = & gt;
==================== Reguły Zapory systemu Windows (filtrowane) ===============
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
FirewallRules: [TCP Query User{00D6A68C-55DD-4C94-B18D-E47D7E3A4B0E}C:\program files (x86)\utorrent\utorrent.exe] = & gt; (Allow) C:\program files (x86)\utorrent\utorrent.exe
FirewallRules: [UDP Query User{28879E06-13FE-4BAD-9234-77E3B9B38337}C:\program files (x86)\utorrent\utorrent.exe] = & gt; (Allow) C:\program files (x86)\utorrent\utorrent.exe
==================== Punkty Przywracania systemu =========================
09-09-2018 05:13:56 Zaplanowany punkt kontrolny
16-09-2018 11:47:35 Zaplanowany punkt kontrolny
23-09-2018 15:51:31 Zaplanowany punkt kontrolny
26-09-2018 20:59:21 Removed Obsługa programów Apple
03-10-2018 21:25:34 Zaplanowany punkt kontrolny
10-10-2018 12:44:44 Instalator modułów systemu Windows
10-10-2018 21:33:45 Instalator modułów systemu Windows
==================== Wadliwe urządzenia w Menedżerze urządzeń =============
Name: Chicony USB 2.0 Camera
Description: Urządzenie wideo USB
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Microsoft
Service: usbvideo
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click " Action " , and then click " Enable Device " . This starts the Enable Device wizard. Follow the instructions.
==================== Błędy w Dzienniku zdarzeń: =========================
Dziennik Aplikacja:
==================
Dziennik System:
=============
CodeIntegrity:
===================================
Date: 2018-03-11 16:25:30.874
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-03-11 16:25:30.780
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system.
==================== Statystyki pamięci ===========================
Procesor: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz
Procent pamięci w użyciu: 33%
Całkowita pamięć fizyczna: 3954.67 MB
Dostępna pamięć fizyczna: 2634.22 MB
Całkowita pamięć wirtualna: 10952.86 MB
Dostępna pamięć wirtualna: 9407.36 MB
==================== Dyski ================================
Drive c: (WINDOWS) (Fixed) (Total:84.52 GB) (Free:9.41 GB) NTFS
Drive d: (Nowy) (Fixed) (Total:213.18 GB) (Free:37.74 GB) NTFS
\\?\Volume{22af6ff2-2a06-11e0-a752-806e6f6e6963}\ (SYSTEM) (Fixed) (Total:0.39 GB) (Free:0.18 GB) NTFS
==================== MBR & Tablica partycji ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 298.1 GB) (Disk ID: 5195AC31)
Partition 1: (Active) - (Size=400 MB) - (Type=27)
Partition 2: (Not Active) - (Size=84.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=213.2 GB) - (Type=07 NTFS)
==================== Koniec Addition.txt ============================