Zrobiłem jak powiedziałeś. Dodaje fixlog i pliki z ponownego skanowania po naprawie.
Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 24.12.2018
Uruchomiony przez Mariusz (26-12-2018 12:21:11)
Uruchomiony z C:\Users\Mariusz\Desktop
Windows 8.1 (Update) (X64) (2015-11-14 05:52:57)
Tryb startu: Normal
==========================================================
==================== Konta użytkowników: =============================
Administrator (S-1-5-21-2102368143-2728945569-3422748965-500 - Administrator - Disabled)
Gość (S-1-5-21-2102368143-2728945569-3422748965-501 - Limited - Enabled) = & gt; C:\Users\Gość
GUEST (S-1-5-21-2102368143-2728945569-3422748965-1008 - Limited - Enabled) = & gt; C:\Users\GUEST
HomeGroupUser$ (S-1-5-21-2102368143-2728945569-3422748965-1006 - Limited - Enabled)
Mariusz (S-1-5-21-2102368143-2728945569-3422748965-1001 - Administrator - Enabled) = & gt; C:\Users\Mariusz
==================== Centrum zabezpieczeń ========================
(Załączenie wejścia w fixlist spowoduje jego usunięcie.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Kaspersky Free (Disabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}
AS: Kaspersky Free (Disabled - Up to date) {B1D2E896-6D96-7460-F17A-838B9D00DD65}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Zainstalowane programy ======================
(W fixlist dozwolone tylko załączanie programów adware z flagą " Hidden " w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)
64 Bit HP CIO Components Installer (HKLM\...\{C788B026-20BD-4E96-B698-533F1D6C5013}) (Version: 7.2.4 - Hewlett-Packard) Hidden
ABBYY FineReader 11 Corporate Edition (HKLM-x32\...\{F11000CE-0010-0000-0000-074957833700}) (Version: 11.11.141 - ABBYY)
Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 19.010.20064 - Adobe Systems Incorporated)
Aktualizacje NVIDIA 34.0.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 34.0.0.0 - NVIDIA Corporation) Hidden
Apple Application Support (64-bit) (HKLM\...\{1FA68E27-2951-42E8-9F57-1A7F6581B4FD}) (Version: 7.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5FA8C4BE-8C74-4B9C-9B49-EBF759230189}) (Version: 12.1.0.25 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{19589375-5C58-4AFA-842F-8B34744CCEAD}) (Version: 2.5.0.1 - Apple Inc.)
Arcanum (HKLM-x32\...\{08E9C35A-A0AE-43FA-AEA1-E4F58A87FBD1}) (Version: 1.0.6.4 - Troika Games LLC)
Arcanum Of Steamworks and Magick Obscura (HKLM-x32\...\GOGPACKARCANUM_is1) (Version: 2.0.0.15 - GOG.com)
Arcanum PL (HKLM-x32\...\Arcanum PL) (Version: - )
Ashampoo Burning Studio 2016 v.16.0.0 (HKLM-x32\...\{91B33C97-B4A4-B41A-6B97-C62C82CEB6A9}_is1) (Version: 16.0.0 - Ashampoo GmbH & Co. KG)
Bandicam (HKLM-x32\...\Bandicam) (Version: 3.2.3.1114 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.51 - Piriform)
Centrum obsługi urządzeń z systemem Windows Mobile (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)
Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 70.0.3538.110 - Comodo)
Defraggler (HKLM\...\Defraggler) (Version: 2.21 - Piriform)
Diablo II (HKLM-x32\...\Diablo II) (Version: 0.0.0.0 - Blizzard Entertainment)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 417.01 - NVIDIA Corporation) Hidden
Divinity - Original Sin Enhanced Edition (HKLM-x32\...\1445516929_is1) (Version: 2.5.0.12 - GOG.com)
Energy Management (HKLM-x32\...\{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.14 - Lenovo) Hidden
Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.14 - Lenovo)
Fallout Tactics (HKLM-x32\...\{75ECB77B-A2FD-444B-977A-D5B7ACD80D85}) (Version: 1.27 - )
Foxit PDF Editor (HKLM-x32\...\Foxit PDF Editor) (Version: - )
GemsNet Generato (HKLM-x32\...\{F93FFAFD-79CA-43AF-B1C3-959150E6D7A7}_is1) (Version: v5.0 - GemsNet)
GhostMaster (HKLM-x32\...\{2A42871B-A6C5-44EA-BBE0-4E701F610BB4}) (Version: 1.00.000 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 71.0.3578.98 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
Grim Dawn (HKLM-x32\...\Grim Dawn_is1) (Version: 1.0.6.1.HF1 - )
Heroes of Might & Magic III - HD Edition (HKLM-x32\...\Heroes of Might & Magic III - HD Edition_is1) (Version: - )
HP Support Solutions Framework (HKLM-x32\...\{2AD02988-163A-45E2-AC71-530B080D1A73}) (Version: 12.5.32.203 - HP)
Icewind Dale Enhanced Edition (HKLM-x32\...\Icewind Dale Enhanced Edition_is1) (Version: - )
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.6.1194 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4358 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.10.1005 - Intel Corporation)
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.41 - Irfan Skiljan)
Java 8 Update 161 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180161F0}) (Version: 8.0.1610.12 - Oracle Corporation)
Java 8 Update 161 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180161F0}) (Version: 8.0.1610.12 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.71.1 - JMicron Technology Corp.)
Kaspersky Free (HKLM-x32\...\{718613F4-492D-4272-ACC3-D04A8EF0F883}) (Version: 19.0.0.1088 - Kaspersky Lab) Hidden
Kaspersky Free (HKLM-x32\...\InstallWIX_{718613F4-492D-4272-ACC3-D04A8EF0F883}) (Version: 19.0.0.1088 - Kaspersky Lab)
Kaspersky Secure Connection (HKLM-x32\...\{F10AA188-7166-430E-8810-FEAB2AD73DE3}) (Version: 19.0.0.1088 - Kaspersky Lab) Hidden
Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{F10AA188-7166-430E-8810-FEAB2AD73DE3}) (Version: 19.0.0.1088 - Kaspersky Lab)
K-Lite Mega Codec Pack 11.7.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 11.7.5 - )
Ledger Live 1.1.7 (HKLM\...\c62032b2-0bca-5abc-b458-fd67cfc9e49b) (Version: 1.1.7 - Ledger)
Lenovo Bluetooth with Enhanced Data Rate Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.1.750 - Broadcom Corporation)
LibreOffice 5.3.4.2 (HKLM-x32\...\{E8FF8837-CDA1-462A-925B-2DA1FE7E263E}) (Version: 5.3.4.2 - The Document Foundation)
Malwarebytes (wersja 3.6.1.2711) (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.6.1.2711 - Malwarebytes)
Median XL Launcher 0.3.1.0 (HKLM-x32\...\{649749D9-C274-4CF3-9617-2ED6BB20333E}}_is1) (Version: 0.3.1.0 - Quirinus, Marco)
Microsoft Office Professional Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\OneDriveSetup.exe) (Version: 18.222.1104.0007 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020 (HKLM-x32\...\{7474cd6e-76cc-4257-837e-5b9261e526af}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 60.3.0.6912 - Mozilla)
Mozilla Thunderbird 60.3.3 (x86 pl) (HKLM-x32\...\Mozilla Thunderbird 60.3.3 (x86 pl)) (Version: 60.3.3 - Mozilla)
NapiProjekt (2.2.0.2399) (HKLM-x32\...\NapiProjekt_is1) (Version: - )
Narzędzia sprawdzające pakietu Microsoft Office 2016 — polski (HKLM\...\{90160000-001F-0415-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Neon 0.2.8 (only current user) (HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\211a501f-25dd-501b-8c98-509ac17aedfa) (Version: 0.2.8 - Ethan Fast)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.12 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.16.0.122 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.16.0.122 - NVIDIA Corporation)
NVIDIA Oprogramowanie systemu PhysX 9.18.0907 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.18.0907 - NVIDIA Corporation)
NVIDIA Sterownik graficzny 417.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 417.01 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Oprogramowanie Intel® PROSet/Wireless (HKLM-x32\...\{4c8b7360-62a2-4339-b745-41323055d0bb}) (Version: 18.20.0 - Intel Corporation)
Oprogramowanie mikroukładu Intel® (HKLM-x32\...\{fb610cea-ba50-4d4b-a717-cf025419035c}) (Version: 10.1.1.13 - Intel(R) Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.5.6.6235 - Electronic Arts, Inc.)
Pakiet sterowników systemu Windows - Lenovo (ACPIVPC) System (02/17/2013 9.52.0.776) (HKLM\...\35DD26BE48DAF4A9F35F969F3CB1E3E1435E661E) (Version: 02/17/2013 9.52.0.776 - Lenovo)
Pakiet sterowników systemu Windows - Lenovo (WUDFRd) LenovoVhid (07/25/2013 10.30.0.288) (HKLM\...\6BCA401E9CBEED970D75F55FA5320F60D11984E9) (Version: 07/25/2013 10.30.0.288 - Lenovo)
Panel sterowania NVIDIA 417.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 417.01 - NVIDIA Corporation) Hidden
PDFill FREE PDF Tools (HKLM\...\{D1399216-81B2-457C-A0F7-73B9A2EF6902}) (Version: 14.0 - PlotSoft LLC)
Pillars of Eternity (HKLM-x32\...\1207666813_is1) (Version: 3.07.0.1318 - GOG.com)
Pillars of Eternity Preorder Item and Pet (HKLM-x32\...\1207666843_is1) (Version: 3.07.0.1318 - GOG.com)
Pillars of Eternity: Deadfire Pack (HKLM-x32\...\1577585691_is1) (Version: 3.07.0.1318 - GOG.com)
Pillars of Eternity: The White March - Part 1 (HKLM-x32\...\1439895308_is1) (Version: 3.07.0.1318 - GOG.com)
Pillars of Eternity: The White March - Part 2 (HKLM-x32\...\1439897569_is1) (Version: 3.07.0.1318 - GOG.com)
Planescape: Torment - Enhanced Edition (HKLM-x32\...\Planescape: Torment - Enhanced Edition_is1) (Version: - )
PLAY ONLINE (HKLM-x32\...\PLAY ONLINE) (Version: 23.015.02.02.264 - Huawei Technologies Co.,Ltd)
PuTTY release 0.66 (HKLM-x32\...\PuTTY_is1) (Version: 0.66 - Simon Tatham)
Qualcomm Atheros Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.21 - Qualcomm Atheros Inc.)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 2.21.20.606 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7746 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games)
Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.51.0 - SAMSUNG Electronics Co., Ltd.)
Skype (wersja 8.28) (HKLM-x32\...\Skype_is1) (Version: 8.28 - Skype Technologies S.A.)
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
StarCraft (HKLM-x32\...\StarCraft) (Version: - Blizzard Entertainment)
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.6.8 - Synaptics Incorporated)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.83369 - TeamViewer)
Telegram Desktop version 1.3.10 (HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.3.10 - Telegram Messenger LLP)
TeraCopy 2.3 (HKLM\...\TeraCopy_is1) (Version: - Code Sector)
Torment: Tides of Numenera (HKLM-x32\...\Torment: Tides of Numenera_is1) (Version: - )
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.52a - Ghisler Software GmbH)
Tyranny (HKLM-x32\...\Tyranny_is1) (Version: - )
VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.22 - IDRIX)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.4 - VideoLAN)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
Windows Driver Package - FTDI CDM Driver Package - Bus/D2XX Driver (01/27/2014 2.10.00) (HKLM\...\A360E2EA788FFC586113AFE1F2AABF01EBE7A248) (Version: 01/27/2014 2.10.00 - FTDI)
Windows Driver Package - FTDI CDM Driver Package - VCP Driver (01/27/2014 2.10.00) (HKLM\...\42F5D8399C4B7EB9005D88E9045ABB1A715CD59A) (Version: 01/27/2014 2.10.00 - FTDI)
WinRAR 5.30 beta 6 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.6 - win.rar GmbH)
WinSCP 5.11.1 (HKLM-x32\...\winscp3_is1) (Version: 5.11.1 - Martin Prikryl)
World of Tanks (HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812eu}_is1) (Version: - Wargaming.net)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
==================== Niestandardowe rejestracje CLSID (filtrowane): ==========================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
CustomCLSID: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 - & gt; C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001_Classes\CLSID\{8382be2b-f5be-4261-ac72-0f5144c30e81}\InprocServer32 - & gt; C:\WINDOWS\System32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001_Classes\CLSID\{893B423C-00D3-4817-A213-8148D47ABE04}\InprocServer32 - & gt; C:\WINDOWS\System32\ole32.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ IDM Shell Extension] - & gt; {CDC95B92-E27C-4745-A8C5-64A52A78855D} = & gt; C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2018-09-28] (Tonec Inc.)
ContextMenuHandlers1: [DefragglerShellExtension] - & gt; {4380C993-0C43-4E02-9A7A-0D40B6EA7590} = & gt; C:\Program Files\Defraggler\DefragglerShell64.dll [2016-03-08] (Piriform Ltd)
ContextMenuHandlers1: [FineReader11ContextMenu] - & gt; {79E48320-C6B5-49F1-992B-571D53586885} = & gt; C:\Program Files (x86)\ABBYY FineReader 11\FRIntegration.x64.dll [2012-09-20] (ABBYY)
ContextMenuHandlers1: [Kaspersky Anti-Virus 19.0.0] - & gt; {755D388B-420B-4692-A974-84AAF0E577D3} = & gt; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\ShellEx.dll [2018-12-26] (AO Kaspersky Lab)
ContextMenuHandlers1: [TeraCopy] - & gt; {A8005AF0-D6E8-48AF-8DFA-023B1CF660A7} = & gt; C:\Program Files\TeraCopy\TeraCopyExt64.dll [2012-01-20] ()
ContextMenuHandlers1: [WinRAR] - & gt; {B41DB860-64E4-11D2-9906-E49FADC173CA} = & gt; C:\Program Files\WinRAR\rarext.dll [2015-11-12] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] - & gt; {B41DB860-8EE4-11D2-9906-E49FADC173CA} = & gt; C:\Program Files\WinRAR\rarext32.dll [2015-11-12] (Alexander Roshal)
ContextMenuHandlers2: [Kaspersky Anti-Virus 19.0.0] - & gt; {755D388B-420B-4692-A974-84AAF0E577D3} = & gt; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\ShellEx.dll [2018-12-26] (AO Kaspersky Lab)
ContextMenuHandlers2: [TeraCopy] - & gt; {A8005AF0-D6E8-48AF-8DFA-023B1CF660A7} = & gt; C:\Program Files\TeraCopy\TeraCopyExt64.dll [2012-01-20] ()
ContextMenuHandlers3: [MBAMShlExt] - & gt; {57CE581A-0CB6-4266-9CA0-19364C90A0B3} = & gt; C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes)
ContextMenuHandlers4: [Kaspersky Anti-Virus 19.0.0] - & gt; {755D388B-420B-4692-A974-84AAF0E577D3} = & gt; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\ShellEx.dll [2018-12-26] (AO Kaspersky Lab)
ContextMenuHandlers4: [TeraCopy] - & gt; {A8005AF0-D6E8-48AF-8DFA-023B1CF660A7} = & gt; C:\Program Files\TeraCopy\TeraCopyExt64.dll [2012-01-20] ()
ContextMenuHandlers5: [igfxcui] - & gt; {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} = & gt; - & gt; Brak pliku
ContextMenuHandlers5: [igfxDTCM] - & gt; {9B5F5829-A529-4B12-814A-E81BCB8D93FC} = & gt; C:\WINDOWS\system32\igfxDTCM.dll [2015-12-21] (Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] - & gt; {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} = & gt; C:\WINDOWS\system32\nvshext.dll [2018-11-16] (NVIDIA Corporation)
ContextMenuHandlers6: [DefragglerShellExtension] - & gt; {4380C993-0C43-4E02-9A7A-0D40B6EA7590} = & gt; C:\Program Files\Defraggler\DefragglerShell64.dll [2016-03-08] (Piriform Ltd)
ContextMenuHandlers6: [FineReader11ContextMenu] - & gt; {79E48320-C6B5-49F1-992B-571D53586885} = & gt; C:\Program Files (x86)\ABBYY FineReader 11\FRIntegration.x64.dll [2012-09-20] (ABBYY)
ContextMenuHandlers6: [Kaspersky Anti-Virus 19.0.0] - & gt; {755D388B-420B-4692-A974-84AAF0E577D3} = & gt; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\ShellEx.dll [2018-12-26] (AO Kaspersky Lab)
ContextMenuHandlers6: [MBAMShlExt] - & gt; {57CE581A-0CB6-4266-9CA0-19364C90A0B3} = & gt; C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes)
ContextMenuHandlers6: [TeraCopy] - & gt; {A8005AF0-D6E8-48AF-8DFA-023B1CF660A7} = & gt; C:\Program Files\TeraCopy\TeraCopyExt64.dll [2012-01-20] ()
ContextMenuHandlers6: [WinRAR] - & gt; {B41DB860-64E4-11D2-9906-E49FADC173CA} = & gt; C:\Program Files\WinRAR\rarext.dll [2015-11-12] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] - & gt; {B41DB860-8EE4-11D2-9906-E49FADC173CA} = & gt; C:\Program Files\WinRAR\rarext32.dll [2015-11-12] (Alexander Roshal)
==================== Zaplanowane zadania (filtrowane) =============
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
Task: {18EDD889-D942-493B-A084-F79E4D49669A} - System32\Tasks\Apple\AppleSoftwareUpdate = & gt; C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
Task: {289F3A8A-0A92-45ED-999B-A0C1E7A11C06} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} = & gt; C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2018-11-16] (NVIDIA Corporation)
Task: {28D72AF9-A925-4412-9DD7-63533BC2175D} - System32\Tasks\AdobeGCInvoker-1.0-lenovo-Mariusz = & gt; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-12-13] (Adobe Systems, Incorporated)
Task: {2DD2C986-9111-4AD8-9339-D1F15C08050B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 = & gt; C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {2E6D889F-0B44-4004-918E-699EBD7560C8} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} = & gt; C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-11-16] (NVIDIA Corporation)
Task: {2F3019AD-3A19-47B6-B3DC-9B5DF0BED606} - System32\Tasks\CCleanerSkipUAC = & gt; C:\Program Files\CCleaner\CCleaner.exe [2018-12-10] (Piriform Software Ltd)
Task: {376FCE33-5259-44F2-925E-01FDCB918A40} - System32\Tasks\DropboxUpdateTaskMachineUA = & gt; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: {3AAE3CA6-E80A-45E0-822E-0193A568A64B} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} = & gt; C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-11-16] (NVIDIA Corporation)
Task: {3E603CE9-73B3-4A1B-A718-3CD92EC3D516} - System32\Tasks\CCleaner Update = & gt; C:\Program Files\CCleaner\CCUpdate.exe [2018-12-10] (Piriform Ltd)
Task: {49695CBA-E0B5-43F0-9325-B85F687E6F99} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} = & gt; C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2018-11-16] (NVIDIA Corporation)
Task: {514E4DDD-B031-4E27-8266-20B6AD3A3E7F} - System32\Tasks\DropboxUpdateTaskMachineCore = & gt; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: {56D29636-8F5B-4F5E-821F-03C2F06AC0F8} - System32\Tasks\GoogleUpdateTaskMachineCore = & gt; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-12-16] (Google Inc.)
Task: {7E8E0185-D8A6-4055-970E-3226D04D0185} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} = & gt; C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-11-16] (NVIDIA Corporation)
Task: {7FC93E9E-5774-4D84-8899-BACA7004B760} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} = & gt; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-11-16] (NVIDIA Corporation)
Task: {9562D5FD-B2E5-48F3-9F5F-145BD40E583A} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} = & gt; C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-11-16] (NVIDIA Corporation)
Task: {A12B68E0-E2F2-4E7B-8993-C3BF78EA0D2A} - System32\Tasks\KMSAutoNet = & gt; C:\ProgramData\KMSAutoS\KMSAuto Net.exe
Task: {A69FB1E7-1930-4299-94EB-82957B5CE00A} - System32\Tasks\Intel PTT EK Recertification = & gt; C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-02-19] (Intel(R) Corporation)
Task: {A7567E11-7826-4D43-8ED6-46FB5BACFCD7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 = & gt; C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {A7742C47-059A-4968-A60A-8C02EBD081F5} - System32\Tasks\GoogleUpdateTaskMachineUA = & gt; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-12-16] (Google Inc.)
Task: {B914F991-9FCB-4686-888D-EE32FE5662E3} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} = & gt; C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2018-11-16] (NVIDIA Corporation)
Task: {BBD60B4A-F81C-4DBE-BCDC-5C404D1E3C58} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} = & gt; C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-11-16] (NVIDIA Corporation)
Task: {C593BAF0-CDBA-4800-9E76-5E48DCEBED84} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} = & gt; C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-11-16] (NVIDIA Corporation)
Task: {DE912756-F1F9-41BE-9389-EBA25E22C1D4} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat = & gt; C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-07-31] (Microsoft Corporation)
Task: {EDF2F532-D776-4F64-8D59-A54FF103218A} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} = & gt; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-11-16] (NVIDIA Corporation)
Task: {F1893F53-B874-426B-8D6E-FCEBCA108162} - System32\Tasks\Adobe Acrobat Update Task = & gt; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-13] (Adobe Systems Incorporated)
Task: {F2B6F391-74BA-40E3-B778-176719A695D7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater = & gt; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.)
Task: {F8E81CC2-CDCF-4E69-9578-FFF998D202EA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report = & gt; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-12-21] (HP Inc.)
(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)
==================== Skróty & WMI ========================
(Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.)
ShortcutWithArgument: C:\Users\Mariusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\Ledger Manager.lnk - & gt; C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) - & gt; --profile-directory=Default --app-id=beimhnaefocolcplfimocfiaiefpkgbf
ShortcutWithArgument: C:\Users\Mariusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\Ledger Wallet Bitcoin.lnk - & gt; C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) - & gt; --profile-directory=Default --app-id=kkdpmhnladdopljabkgpacgpliggeeaf
ShortcutWithArgument: C:\Users\Mariusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\Ledger Wallet Ethereum.lnk - & gt; C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) - & gt; --profile-directory=Default --app-id=hmlhkialjkaldndjnlcdfdphcgeadkkm
ShortcutWithArgument: C:\Users\Mariusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\NACL Web Plug-in.lnk - & gt; C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) - & gt; --profile-directory=Default --app-id=pbdcmagkbhnjpjlnpibbmggikpedpilc
==================== Załadowane moduły (filtrowane) ==============
2016-03-13 14:42 - 2012-09-18 15:27 - 000192512 _____ () C:\WINDOWS\System32\zlhp1020.dll
2016-09-22 12:19 - 2016-09-22 12:19 - 000031256 _____ () C:\WINDOWS\System32\ssa6mlm.dll
2016-03-13 14:42 - 2012-09-18 15:27 - 000065024 _____ () C:\WINDOWS\system32\spool\PRTPROCS\x64\pphp1020.dll
2018-10-21 02:17 - 2018-10-21 02:17 - 000088888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2018-10-21 02:17 - 2018-10-21 02:17 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-09-24 17:46 - 2015-09-24 17:46 - 000049408 _____ () C:\Program Files\Lenovo\Bluetooth Software\btwleapi.dll
2013-10-28 03:02 - 2016-04-30 14:52 - 000351824 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe
2016-04-30 14:52 - 2016-04-30 14:52 - 000651856 _____ () C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe
2015-11-21 07:17 - 2016-02-21 17:10 - 000075136 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2018-03-14 20:13 - 2018-03-14 20:13 - 000189776 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2018-10-06 10:20 - 2018-12-14 21:45 - 002712432 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2015-11-14 09:06 - 2012-01-20 14:55 - 000678400 _____ () C:\Program Files\TeraCopy\TeraCopyExt64.dll
2017-07-29 03:45 - 2017-07-29 03:45 - 000298448 _____ () C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
2016-04-30 14:52 - 2013-08-31 06:44 - 002417152 _____ () C:\ProgramData\PLAY ONLINE\OnlineUpdate\QtCore4.dll
2016-04-30 14:52 - 2013-08-31 06:46 - 001148416 _____ () C:\ProgramData\PLAY ONLINE\OnlineUpdate\QtNetwork4.dll
2016-04-30 14:52 - 2009-01-10 19:32 - 000011362 _____ () C:\ProgramData\PLAY ONLINE\OnlineUpdate\mingwm10.dll
2016-04-30 14:52 - 2009-06-23 03:42 - 000043008 _____ () C:\ProgramData\PLAY ONLINE\OnlineUpdate\libgcc_s_dw2-1.dll
2015-11-14 08:40 - 2018-10-30 19:06 - 000879904 _____ () D:\Gry\Steam\SDL2.dll
2015-11-14 08:40 - 2016-09-01 02:02 - 004969248 _____ () D:\Gry\Steam\v8.dll
2015-11-14 08:40 - 2018-11-26 21:29 - 002649376 _____ () D:\Gry\Steam\video.dll
2015-11-14 08:40 - 2016-09-01 02:02 - 001563936 _____ () D:\Gry\Steam\icui18n.dll
2015-11-14 08:40 - 2016-09-01 02:02 - 001195296 _____ () D:\Gry\Steam\icuuc.dll
2017-12-21 19:26 - 2017-12-20 02:43 - 005137696 _____ () D:\Gry\Steam\libavcodec-57.dll
2017-12-21 19:26 - 2017-12-20 02:43 - 000695584 _____ () D:\Gry\Steam\libavformat-57.dll
2017-12-21 19:26 - 2017-12-20 02:43 - 000351520 _____ () D:\Gry\Steam\libavresample-3.dll
2017-12-21 19:26 - 2017-12-20 02:43 - 000847136 _____ () D:\Gry\Steam\libavutil-55.dll
2017-12-21 19:26 - 2017-12-20 02:43 - 000783648 _____ () D:\Gry\Steam\libswscale-4.dll
2015-11-14 08:40 - 2018-11-26 21:29 - 001028384 _____ () D:\Gry\Steam\bin\chromehtml.DLL
2016-03-13 16:26 - 2016-07-04 23:17 - 000266560 _____ () D:\Gry\Steam\openvr_api.dll
2018-05-08 11:57 - 2018-05-08 11:57 - 000143824 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll
2018-08-13 11:30 - 2017-09-08 22:22 - 050656768 _____ () C:\Users\Mariusz\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libcef.dll
2017-06-10 19:16 - 2018-10-30 19:06 - 000879904 _____ () D:\Gry\Steam\bin\cef\cef.win7\SDL2.dll
2016-12-15 23:18 - 2018-09-23 01:00 - 088009504 _____ () D:\Gry\Steam\bin\cef\cef.win7\libcef.dll
2018-08-13 11:30 - 2017-09-08 22:22 - 001874944 _____ () C:\Users\Mariusz\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libglesv2.dll
2018-08-13 11:30 - 2017-09-08 22:22 - 000075264 _____ () C:\Users\Mariusz\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libegl.dll
2017-08-19 06:44 - 2018-09-23 01:00 - 002264352 _____ () D:\Gry\Steam\bin\cef\cef.win7\swiftshader\libglesv2.dll
2017-08-19 06:43 - 2018-09-23 01:00 - 000124704 _____ () D:\Gry\Steam\bin\cef\cef.win7\swiftshader\libegl.dll
==================== Alternate Data Streams (filtrowane) =========
(Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.)
==================== Tryb awaryjny (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość " AlternateShell " zostanie przywrócona.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec = & gt; " " = " Service "
==================== Powiązania plików (filtrowane) ===============
(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.)
==================== Internet Explorer - Witryny zaufane i z ograniczeniami ===============
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.)
IE restricted site: HKU\.DEFAULT\...\007guard.com - & gt; install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com - & gt; 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com - & gt; www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com - & gt; www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com - & gt; 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com - & gt; 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com - & gt; www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com - & gt; www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com - & gt; www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com - & gt; www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com - & gt; www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com - & gt; mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com - & gt; www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com - & gt; www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net - & gt; user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net - & gt; user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info - & gt; www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com - & gt; www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com - & gt; www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com - & gt; www.123simsen.com
Wykryto więcej niż wyliczono: 7936 witryn.
IE trusted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\filebit.pl - & gt; hxxps://filebit.pl
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\007guard.com - & gt; install.007guard.com
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\008i.com - & gt; 008i.com
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\008k.com - & gt; www.008k.com
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\00hq.com - & gt; www.00hq.com
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\010402.com - & gt; 010402.com
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\032439.com - & gt; 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\0scan.com - & gt; www.0scan.com
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\1-2005-search.com - & gt; www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\1-domains-registrations.com - & gt; www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\1000gratisproben.com - & gt; www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\1001namen.com - & gt; www.1001namen.com
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\100888290cs.com - & gt; mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\100sexlinks.com - & gt; www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\10sek.com - & gt; www.10sek.com
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\12-26.net - & gt; user1.12-26.net
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\12-27.net - & gt; user1.12-27.net
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\123fporn.info - & gt; www.123fporn.info
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\123haustiereundmehr.com - & gt; www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\123moviedownload.com - & gt; www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\123simsen.com - & gt; www.123simsen.com
Wykryto więcej niż wyliczono: 7936 witryn.
==================== Hosts - zawartość: ===============================
(Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)
2013-08-22 14:25 - 2018-12-26 12:17 - 000000035 _____ C:\WINDOWS\system32\Drivers\etc\hosts
==================== Inne obszary ============================
(Obecnie brak automatycznej naprawy dla tej sekcji.)
HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\Control Panel\Desktop\\Wallpaper - & gt; D:\Tapety\13239313_784173465016188_9178762443412891889_n.png
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System = & gt; (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer = & gt; (SmartScreenEnabled: RequireAdmin)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers = & gt; ProviderFileName2 - & gt; ndptsp.tsp (Brak pliku)
Zapora systemu Windows [funkcja włączona]
==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==
Załączenie wejścia w fixlist spowoduje jego usunięcie.
HKLM\...\StartupApproved\Run: = & gt; " ShadowPlay "
HKLM\...\StartupApproved\Run: = & gt; " Bluetooth "
HKLM\...\StartupApproved\Run: = & gt; " IAStorIcon "
HKLM\...\StartupApproved\Run32: = & gt; " IAStorIcon "
HKLM\...\StartupApproved\Run32: = & gt; " Bonus.SSR.FR11 "
HKLM\...\StartupApproved\Run32: = & gt; " SunJavaUpdateSched "
HKLM\...\StartupApproved\Run32: = & gt; " Dropbox "
HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\StartupApproved\StartupFolder: = & gt; " Wysyłanie do programu OneNote.lnk "
HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\StartupApproved\Run: = & gt; " GoogleChromeAutoLaunch_BEEE8AE62A2540156452F89C7FBBA2DA "
HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\StartupApproved\Run: = & gt; " DAEMON Tools Lite Automount "
HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\StartupApproved\Run: = & gt; " CCleaner Monitoring "
HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\StartupApproved\Run: = & gt; " BlueStacks Agent "
HKU\S-1-5-21-2102368143-2728945569-3422748965-1001\...\StartupApproved\Run: = & gt; " World of Tanks "
==================== Reguły Zapory systemu Windows (filtrowane) ===============
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
FirewallRules: [{CD50E8F9-17F9-4C5D-962E-6EBFCF601B65}] = & gt; (Allow) D:\Gry\Steam\Steam.exe (Valve Corporation)
FirewallRules: [{73E9C92D-ADA4-4990-BEEF-8C6B483BD3FB}] = & gt; (Allow) D:\Gry\Steam\Steam.exe (Valve Corporation)
FirewallRules: [{89D72BB6-5CC9-4D79-860B-0411F5A63D31}] = & gt; (Allow) C:\Users\Mariusz\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
FirewallRules: [{B117D0A3-69C6-420A-85F4-90A9FB7AD31F}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\Talisman\Talisman.exe ()
FirewallRules: [{DD30E6D2-EA11-435E-B97C-3BED2539B715}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\Talisman\Talisman.exe ()
FirewallRules: [TCP Query User{0C468D90-DA49-47F5-A75E-F356A6B8F4D2}C:\totalcmd\totalcmd64.exe] = & gt; (Allow) C:\totalcmd\totalcmd64.exe (Ghisler Software GmbH)
FirewallRules: [UDP Query User{ACA9DC09-FAF9-4E48-B439-7502D89DB3AB}C:\totalcmd\totalcmd64.exe] = & gt; (Allow) C:\totalcmd\totalcmd64.exe (Ghisler Software GmbH)
FirewallRules: [{AF43C12D-D94C-42DD-8BBC-27D6D728EA1A}] = & gt; (Allow) %systemroot%\WindowsMobile\wmdHost.exe (Microsoft Corporation)
FirewallRules: [{0DEA9BCF-1E98-4726-B607-4EE10DFC8D14}] = & gt; (Allow) %systemroot%\WindowsMobile\wmdHost.exe (Microsoft Corporation)
FirewallRules: [{548BA115-0101-4959-8805-CE5797AAABDB}] = & gt; (Allow) LPort=26675
FirewallRules: [TCP Query User{05DD181C-74AD-4900-A8D6-D779427CF8B9}D:\gry\diablo iii\diablo iii.exe] = & gt; (Allow) D:\gry\diablo iii\diablo iii.exe (Blizzard Entertainment)
FirewallRules: [UDP Query User{CA9457F2-42E8-4FED-8969-BA65D1A55F7F}D:\gry\diablo iii\diablo iii.exe] = & gt; (Allow) D:\gry\diablo iii\diablo iii.exe (Blizzard Entertainment)
FirewallRules: [TCP Query User{1DDEA60C-59A7-440D-88CA-FE6020518E2B}D:\praca\winbox.exe] = & gt; (Allow) D:\praca\winbox.exe ()
FirewallRules: [UDP Query User{37FA5538-2715-4774-B3EC-3089C248A6D2}D:\praca\winbox.exe] = & gt; (Allow) D:\praca\winbox.exe ()
FirewallRules: [{B15F1159-093E-4178-917C-9C20DD2737E5}] = & gt; (Allow) C:\Windows\SysWOW64\PnkBstrA.exe ()
FirewallRules: [{0AFE4C14-7EAE-484A-BA2A-95AE76A846EF}] = & gt; (Allow) C:\Windows\SysWOW64\PnkBstrA.exe ()
FirewallRules: [{EEB8E173-E9B6-4263-87F6-8380B804EF1E}] = & gt; (Allow) C:\Windows\SysWOW64\PnkBstrB.exe ()
FirewallRules: [{A8C318D3-E1C4-4AC5-B698-BA6908D4C882}] = & gt; (Allow) C:\Windows\SysWOW64\PnkBstrB.exe ()
FirewallRules: [{884A3C25-4EFB-4325-997C-A928137033F2}] = & gt; (Allow) %systemroot%\WindowsMobile\wmdHost.exe (Microsoft Corporation)
FirewallRules: [{F3FA7CE0-B956-4030-B366-E47BFEE17B61}] = & gt; (Allow) %systemroot%\WindowsMobile\wmdHost.exe (Microsoft Corporation)
FirewallRules: [{4F1072F2-5B38-4C10-9638-674CB3F4CBCD}] = & gt; (Allow) LPort=26675
FirewallRules: [TCP Query User{3F4F5FE3-4B36-42D9-8E0A-F2C69BC1CA0E}D:\praca\winbox.exe] = & gt; (Allow) D:\praca\winbox.exe ()
FirewallRules: [UDP Query User{88E27497-0721-4BE9-A947-42970E0B8368}D:\praca\winbox.exe] = & gt; (Allow) D:\praca\winbox.exe ()
FirewallRules: [{F4863A52-61C9-4C17-A127-59B666E5C4B0}] = & gt; (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe ()
FirewallRules: [{656A88E8-9199-4EF1-91CF-6B5A3FC1C1A8}] = & gt; (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft, Inc.)
FirewallRules: [{4798E149-F95F-4744-BCFD-4FEBB6E48B0F}] = & gt; (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft, Inc.)
FirewallRules: [{0E53E90F-8294-4C52-9C58-72969575D5EE}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe ()
FirewallRules: [{C2A07454-2E97-41AD-B675-00F7A845B731}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe ()
FirewallRules: [TCP Query User{0C0535F8-295B-4E51-AF77-DF6F00F6AF5C}D:\gry\divinity - original sin enhanced edition\shipping\eocapp.exe] = & gt; (Block) D:\gry\divinity - original sin enhanced edition\shipping\eocapp.exe ()
FirewallRules: [UDP Query User{35F4E24E-02F7-47FA-A0FD-6A42F86B1F73}D:\gry\divinity - original sin enhanced edition\shipping\eocapp.exe] = & gt; (Block) D:\gry\divinity - original sin enhanced edition\shipping\eocapp.exe ()
FirewallRules: [TCP Query User{A87AA5E1-3D01-4F76-8823-E6DB2745E7D6}C:\program files\foxit software\pdf editor\pdfedit.exe] = & gt; (Block) C:\program files\foxit software\pdf editor\pdfedit.exe (Foxit Software Company)
FirewallRules: [UDP Query User{03D64254-5DA0-4950-BCCB-A5079749E12F}C:\program files\foxit software\pdf editor\pdfedit.exe] = & gt; (Block) C:\program files\foxit software\pdf editor\pdfedit.exe (Foxit Software Company)
FirewallRules: [{8139C189-8577-4657-9FF8-1C3B28A54CCF}] = & gt; (Allow) D:\Gry\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corporation)
FirewallRules: [{81F04E09-D565-4663-A411-B049DDE6CCF8}] = & gt; (Allow) D:\Gry\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corporation)
FirewallRules: [{8FF918FE-6557-4331-9846-DE466960F173}] = & gt; (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe (Microsoft Corporation)
FirewallRules: [{1A725632-2D83-4786-9473-1C0C93559F0B}] = & gt; (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe (Microsoft Corporation)
FirewallRules: [{63DF5451-89D4-42CD-AFAB-6561DE08D66D}] = & gt; (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe (Microsoft Corporation)
FirewallRules: [{23AC81F6-4E0C-4B8C-8BAE-15AD5DABE747}] = & gt; (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe (Microsoft Corporation)
FirewallRules: [TCP Query User{3727425D-0ADA-46A7-9EEB-095599596F1E}D:\gry\diablo iii\x64\diablo iii64.exe] = & gt; (Allow) D:\gry\diablo iii\x64\diablo iii64.exe (Blizzard Entertainment)
FirewallRules: [UDP Query User{D8A8EB4C-9C55-4C8B-8994-62DDF5F288BE}D:\gry\diablo iii\x64\diablo iii64.exe] = & gt; (Allow) D:\gry\diablo iii\x64\diablo iii64.exe (Blizzard Entertainment)
FirewallRules: [TCP Query User{85CA42BE-55F3-4A4D-B51D-C25DF7541360}D:\gry\quake ii\q2dedicated.exe] = & gt; (Allow) D:\gry\quake ii\q2dedicated.exe (r1ch.net)
FirewallRules: [UDP Query User{C5AF3D75-CBDB-42B2-BC05-30B319D994DB}D:\gry\quake ii\q2dedicated.exe] = & gt; (Allow) D:\gry\quake ii\q2dedicated.exe (r1ch.net)
FirewallRules: [TCP Query User{88C9C70C-279D-4946-97D6-7322F92A1BA4}D:\gry\torment - tides of numenera\win\tidesofnumenera.exe] = & gt; (Block) D:\gry\torment - tides of numenera\win\tidesofnumenera.exe ()
FirewallRules: [UDP Query User{38FFD22D-1E91-4124-8148-E372A760520D}D:\gry\torment - tides of numenera\win\tidesofnumenera.exe] = & gt; (Block) D:\gry\torment - tides of numenera\win\tidesofnumenera.exe ()
FirewallRules: [{20E47B17-A8BC-4718-AC9C-083B90B360DF}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\SteamVR\bin\win32\vrstartup.exe ()
FirewallRules: [{382C82AB-E56A-40F5-9702-17D78AFFAC5F}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\SteamVR\bin\win32\vrstartup.exe ()
FirewallRules: [{3BF89175-D7AC-4CC4-B2ED-4BD1EE95EEFF}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\Torchlight II\ModLauncher.exe (Runic Games, Inc.)
FirewallRules: [{41B6CD54-6C51-4DA6-BFA0-5B002454052E}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\Torchlight II\ModLauncher.exe (Runic Games, Inc.)
FirewallRules: [TCP Query User{8DA326CA-4F67-44AC-B10E-86DF86483C9F}C:\users\mariusz\appdata\roaming\esp\espers-qt.exe] = & gt; (Allow) C:\users\mariusz\appdata\roaming\esp\espers-qt.exe ()
FirewallRules: [UDP Query User{B591E658-38FA-47BD-8E24-4549B4DCE8B1}C:\users\mariusz\appdata\roaming\esp\espers-qt.exe] = & gt; (Allow) C:\users\mariusz\appdata\roaming\esp\espers-qt.exe ()
FirewallRules: [{6B203BB5-5624-4886-9125-B04B30A81E84}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe ()
FirewallRules: [{5156E998-9B48-43BB-8320-892340EB5FC2}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe ()
FirewallRules: [{FE1F9290-0A32-4D00-80F8-AB812678BE57}] = & gt; (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH)
FirewallRules: [{AC974168-468A-48E8-B3BD-5BACEE5DCDD7}] = & gt; (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH)
FirewallRules: [{C914DF50-EDE8-4E4A-8EEE-168430C0B8E0}] = & gt; (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH)
FirewallRules: [{8E40D34F-FC29-4A66-AF73-9A704B1D4C9B}] = & gt; (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH)
FirewallRules: [{89EDD2A6-4DE6-4B63-B828-EACE38E4214A}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\Terraria\Terraria.exe (Re-Logic)
FirewallRules: [{9F8174FC-5048-4F0B-96E1-F77EED6455CA}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\Terraria\Terraria.exe (Re-Logic)
FirewallRules: [{1F7E462A-A398-4671-8A9F-33BF1FF56C4C}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\divine_divinity\div.exe (Larian Studios)
FirewallRules: [{E8A940B1-F01C-40C8-B14C-5D43DADC58EA}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\divine_divinity\div.exe (Larian Studios)
FirewallRules: [{DF36A0BE-C981-4E30-94C4-9AE672140BA7}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\divine_divinity\configtool.exe ()
FirewallRules: [{E8188B1D-5019-44B3-AC9A-F57F47563D89}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\divine_divinity\configtool.exe ()
FirewallRules: [{C4188F0A-9C8F-4713-AA61-389E84453134}] = & gt; (Allow) %systemroot%\WindowsMobile\wmdHost.exe (Microsoft Corporation)
FirewallRules: [{CA3E2206-98FC-4553-8FB8-3E7FDB2078F2}] = & gt; (Allow) %systemroot%\WindowsMobile\wmdHost.exe (Microsoft Corporation)
FirewallRules: [{C4B00EA8-F6C0-4E14-8464-25B560A995DA}] = & gt; (Allow) LPort=26675
FirewallRules: [TCP Query User{DF72208A-9BBB-43AF-8695-28EC321D5FF5}C:\program files\foxit software\pdf editor\pdfedit.exe] = & gt; (Allow) C:\program files\foxit software\pdf editor\pdfedit.exe (Foxit Software Company)
FirewallRules: [UDP Query User{182B22F5-A311-4BD6-B8E3-F737514BFADE}C:\program files\foxit software\pdf editor\pdfedit.exe] = & gt; (Allow) C:\program files\foxit software\pdf editor\pdfedit.exe (Foxit Software Company)
FirewallRules: [{0E4BA34F-4F2D-4BF9-A4A9-A0891E35DAEC}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\Quake Live\quakelive_steam.exe (id Software Inc.)
FirewallRules: [{97FDF7D7-D46F-4764-892F-88ED85BF2188}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\Quake Live\quakelive_steam.exe (id Software Inc.)
FirewallRules: [{16017EAF-BDDB-4772-AD2E-63D059FBC4BF}] = & gt; (Allow) D:\Gry\Wot\WoTLauncher.exe (Wargaming.net)
FirewallRules: [{EFA9A9F5-245F-4725-851A-A28E01A9B8B5}] = & gt; (Allow) D:\Gry\Wot\WoTLauncher.exe (Wargaming.net)
FirewallRules: [{52423997-B57D-41A8-8F22-06943E9843B0}] = & gt; (Allow) D:\Gry\Wot\worldoftanks.exe (Wargaming.net)
FirewallRules: [{68B76D6F-A9BA-4A2C-B915-51C8666F7A18}] = & gt; (Allow) D:\Gry\Wot\worldoftanks.exe (Wargaming.net)
FirewallRules: [{4E515D6D-10FA-4EF0-92E2-72B12224BB74}] = & gt; (Allow) C:\Program Files (x86)\NapiProjekt\napisy.exe ()
FirewallRules: [{55A273E3-C86D-44C2-9339-E6E2B42BDB98}] = & gt; (Allow) C:\Program Files (x86)\NapiProjekt\napisy.exe ()
FirewallRules: [TCP Query User{BF5D94C4-6199-4B78-BF6E-22B72E740A38}C:\users\mariusz\desktop\sia-ui-v1.3.7-win32-x64\resources\app\sia\siad.exe] = & gt; (Allow) C:\users\mariusz\desktop\sia-ui-v1.3.7-win32-x64\resources\app\sia\siad.exe ()
FirewallRules: [UDP Query User{AE1D4217-798D-4736-BAEF-9A573DA19AB7}C:\users\mariusz\desktop\sia-ui-v1.3.7-win32-x64\resources\app\sia\siad.exe] = & gt; (Allow) C:\users\mariusz\desktop\sia-ui-v1.3.7-win32-x64\resources\app\sia\siad.exe ()
FirewallRules: [{0919C05C-8C70-49C0-8C7E-E5F0863B8CA8}] = & gt; (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Technologies S.A.)
FirewallRules: [{B1F2C51C-4A3A-4DE9-BAD2-32464414CD98}] = & gt; (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Technologies S.A.)
FirewallRules: [{C0329508-F871-4DF5-9764-03D3184FC447}] = & gt; (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
FirewallRules: [{6E671CF1-CF20-47FF-94FB-27D2BDD3D210}] = & gt; (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
FirewallRules: [{886054E0-A41B-42E0-A06C-B6F0064573B9}] = & gt; (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc.)
FirewallRules: [{0FBC15D3-19F3-410E-AE20-87BC697E00F9}] = & gt; (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc.)
FirewallRules: [TCP Query User{0B9D4ADB-AA46-4121-9BE4-EE022D944B7B}D:\gry\world of warcraft\utils\wowvoiceproxy.exe] = & gt; (Allow) D:\gry\world of warcraft\utils\wowvoiceproxy.exe (Blizzard Entertainment)
FirewallRules: [UDP Query User{E6E02C01-B58C-44D5-B6AE-9767B867DF3A}D:\gry\world of warcraft\utils\wowvoiceproxy.exe] = & gt; (Allow) D:\gry\world of warcraft\utils\wowvoiceproxy.exe (Blizzard Entertainment)
FirewallRules: [TCP Query User{6D401ABB-D0DA-4004-AFA9-2D63942F6ED1}D:\gry\quake\quake\darkplaces.exe] = & gt; (Allow) D:\gry\quake\quake\darkplaces.exe ()
FirewallRules: [UDP Query User{2E14BCFC-790B-4F30-8FBA-5229ADC092CD}D:\gry\quake\quake\darkplaces.exe] = & gt; (Allow) D:\gry\quake\quake\darkplaces.exe ()
FirewallRules: [{6D6540FA-6398-4E17-B49E-E9072DDCC720}] = & gt; (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
FirewallRules: [{A6A22510-B8A5-491E-A312-6B46419169A7}] = & gt; (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Ltd)
FirewallRules: [{DED868A9-62E7-401E-B26B-CE1EA8C62F94}] = & gt; (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Ltd)
FirewallRules: [{BCFF5324-C40A-4613-9D73-607B1A71D138}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation)
FirewallRules: [{A1F75A38-A67B-4403-A2A6-C05C44B6B474}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation)
FirewallRules: [{FCB9F427-C63F-4CAF-8131-CCC8BF1CEB49}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation)
FirewallRules: [{1DC38E02-95D1-463C-A256-5082597EB80A}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation)
FirewallRules: [{ED62F4A1-504A-4172-85D2-25D5F4853F5B}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation)
FirewallRules: [{5E50E1D1-1598-4C29-BFD9-166C5454C43D}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation)
FirewallRules: [{05BF2CC3-0738-43E0-BEBB-7A0A78F4E1DA}] = & gt; (Allow) C:\WINDOWS\AutoKMS\AutoKMS.exe Brak pliku
FirewallRules: [{7F17A3E5-F03F-4BAE-9F2F-BE876DC84924}] = & gt; (Allow) C:\WINDOWS\AutoKMS\AutoKMS.exe Brak pliku
FirewallRules: [{F598C44F-499B-4CA4-94C0-921416D47A77}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\SteamVR\tools\steamvr_environments\game\bin\win64\steamtours.exe ()
FirewallRules: [{F9A7B9D8-BADE-41C3-AB41-160D560E9D62}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\SteamVR\tools\steamvr_environments\game\bin\win64\steamtours.exe ()
FirewallRules: [{5508D2AF-FE64-4A8E-9274-50D6567C9E79}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\SteamVR\tools\steamvr_environments\game\bin\win64\steamtourscfg.exe ()
FirewallRules: [{A902D2F1-FA7F-4208-A5F9-9F39FAB18199}] = & gt; (Allow) D:\Gry\Steam\steamapps\common\SteamVR\tools\steamvr_environments\game\bin\win64\steamtourscfg.exe ()
==================== Punkty Przywracania systemu =========================
26-12-2018 08:33:15 Removing COMODO Client - Security
26-12-2018 11:12:51 Removed COMODO Secure Shopping
==================== Wadliwe urządzenia w Menedżerze urządzeń =============
==================== Błędy w Dzienniku zdarzeń: =========================
Dziennik Aplikacja:
==================
Error: (12/26/2018 10:59:50 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: FRST64.exe, wersja: 24.12.2018.0, sygnatura czasowa: 0x5c20f10d
Nazwa modułu powodującego błąd: Wintrust.dll, wersja: 6.3.9600.18508, sygnatura czasowa: 0x57f3fc8d
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x000000000000baa5
Identyfikator procesu powodującego błąd: 0x28c4
Godzina uruchomienia aplikacji powodującej błąd: 0x01d49d018c389e45
Ścieżka aplikacji powodującej błąd: C:\Users\Mariusz\Desktop\FRST64.exe
Ścieżka modułu powodującego błąd: C:\WINDOWS\system32\Wintrust.dll
Identyfikator raportu: fb74eb60-08f4-11e9-bf68-2016d827b5ff
Pełna nazwa pakietu powodującego błąd:
Identyfikator aplikacji względem pakietu powodującego błąd:
Error: (12/25/2018 09:36:09 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: ZARZĄDZANIE NT)
Description: Dostawca zdarzeń CisWmi próbował zarejestrować zapytanie „SELECT * FROM CisFileRatingChange”, w przypadku którego klasa docelowa „CisFileRatingChange” w przestrzeni nazw //./root/cis nie istnieje. Zapytanie zostanie zignorowane.
Error: (12/25/2018 09:36:09 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: ZARZĄDZANIE NT)
Description: Dostawca zdarzeń CisWmi próbował zarejestrować zapytanie „SELECT * FROM CisStatusChange”, w przypadku którego klasa docelowa „CisStatusChange” w przestrzeni nazw //./root/cis nie istnieje. Zapytanie zostanie zignorowane.
Error: (12/25/2018 09:36:09 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: ZARZĄDZANIE NT)
Description: Dostawca zdarzeń CisWmi próbował zarejestrować zapytanie „SELECT * FROM CisNotification”, w przypadku którego klasa docelowa „CisNotification” w przestrzeni nazw //./root/cis nie istnieje. Zapytanie zostanie zignorowane.
Error: (12/25/2018 09:36:09 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: ZARZĄDZANIE NT)
Description: Dostawca zdarzeń CisWmi próbował zarejestrować zapytanie „SELECT * FROM FwAlert”, w przypadku którego klasa docelowa „FwAlert” w przestrzeni nazw //./root/cis nie istnieje. Zapytanie zostanie zignorowane.
Error: (12/25/2018 09:36:09 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: ZARZĄDZANIE NT)
Description: Dostawca zdarzeń CisWmi próbował zarejestrować zapytanie „SELECT * FROM DfAlert”, w przypadku którego klasa docelowa „DfAlert” w przestrzeni nazw //./root/cis nie istnieje. Zapytanie zostanie zignorowane.
Error: (12/25/2018 09:36:09 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: ZARZĄDZANIE NT)
Description: Dostawca zdarzeń CisWmi próbował zarejestrować zapytanie „SELECT * FROM AvAlert”, w przypadku którego klasa docelowa „AvAlert” w przestrzeni nazw //./root/cis nie istnieje. Zapytanie zostanie zignorowane.
Error: (12/25/2018 09:36:09 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: ZARZĄDZANIE NT)
Description: Dostawca zdarzeń CisWmi próbował zarejestrować zapytanie „SELECT * FROM CisAlert”, w przypadku którego klasa docelowa „CisAlert” w przestrzeni nazw //./root/cis nie istnieje. Zapytanie zostanie zignorowane.
Dziennik System:
=============
Error: (12/26/2018 12:19:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi PLAY ONLINE. OUC z powodu następującego błędu:
Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie.
Error: (12/26/2018 12:19:35 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą PLAY ONLINE. OUC.
Error: (12/26/2018 12:19:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi Origin Web Helper Service z powodu następującego błędu:
Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie.
Error: (12/26/2018 12:19:35 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Origin Web Helper Service.
Error: (12/26/2018 12:18:42 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: ZARZĄDZANIE NT)
Description: Nastąpiło nieoczekiwane zatrzymanie modułu rozszerzalności sieci WLAN.
Ścieżka modułu: C:\WINDOWS\System32\IWMSSvc.dll
Error: (12/26/2018 12:18:42 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: ZARZĄDZANIE NT)
Description: Nastąpiło nieoczekiwane zatrzymanie modułu rozszerzalności sieci WLAN.
Ścieżka modułu: C:\WINDOWS\System32\IWMSSvc.dll
Error: (12/26/2018 12:18:42 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: ZARZĄDZANIE NT)
Description: Nastąpiło nieoczekiwane zatrzymanie modułu rozszerzalności sieci WLAN.
Ścieżka modułu: C:\WINDOWS\System32\IWMSSvc.dll
Error: (12/26/2018 12:17:33 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Usługa Usługa udostępniania w sieci programu Windows Media Player niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie.
Windows Defender:
===================================
Date: 2016-12-27 16:09:52.040
Description:
Produkt Windows Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niechciane oprogramowanie.
Aby uzyskać więcej informacji, zobacz:
http://go.microsoft.com/fwlink/?linkid=37020 & name=HackTool:Win32/AutoKMS & threatid=2147685180 & enterprise=0
Nazwa: HackTool:Win32/AutoKMS
Identyfikator: 2147685180
Ważność: Średni
Kategoria: Narzędzie
Ścieżka: containerfile:_D:\pen\programy\Microsoft.Office.Professional.Plus.2016.PL.rar;file:_C:\ProgramData\KMSAutoS\bin\KMSSS.exe;file:_D:\pen\programy\Microsoft.Office.Professional.Plus.2016.PL.rar- & gt; Microsoft.Office.Professional.Plus.2016.PL\KMSAuto Net 2015 v1.3.8 Portable\KMSAuto Net.exe- & gt; [MSILRES:KMSAuto_Net.Resources.resources]#9
Pochodzenie wykrycia: Komputer lokalny
Typ wykrycia: Konkretne
Źródło wykrycia: System
Użytkownik: ZARZĄDZANIE NT\SYSTEM
Nazwa procesu: Unknown
Wersja podpisu: AV: 1.233.3353.0, AS: 1.233.3353.0, NIS: 116.72.0.0
Wersja aparatu: AM: 1.1.13303.0, NIS: 2.1.12706.0
Date: 2016-12-27 16:09:52.040
Description:
Produkt Windows Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niechciane oprogramowanie.
Aby uzyskać więcej informacji, zobacz:
http://go.microsoft.com/fwlink/?linkid=37020 & name=HackTool:Win32/Keygen & threatid=2147593794 & enterprise=0
Nazwa: HackTool:Win32/Keygen
Identyfikator: 2147593794
Ważność: Średni
Kategoria: Narzędzie
Ścieżka: containerfile:_C:\$Recycle.Bin\S-1-5-21-2102368143-2728945569-3422748965-1001\$R6AB0FT.rar;file:_C:\$Recycle.Bin\S-1-5-21-2102368143-2728945569-3422748965-1001\$R6AB0FT.rar- & gt; Windows 7 (x86) Czerwiec 2015 PL\pl_windows_7_with_sp1_x86_dvd_u_11062015.iso- & gt; \Windows Loader v2.2.2\Windows Loader.exe;file:_C:\$Recycle.Bin\S-1-5-21-2102368143-2728945569-3422748965-1001\$R6AB0FT.rar- & gt; Windows 7 (x86) Czerwiec 2015 PL\Windows Loader v2.2.2\Windows Loader.exe
Pochodzenie wykrycia: Komputer lokalny
Typ wykrycia: Konkretne
Źródło wykrycia: System
Użytkownik: ZARZĄDZANIE NT\SYSTEM
Nazwa procesu: Unknown
Wersja podpisu: AV: 1.233.3353.0, AS: 1.233.3353.0, NIS: 116.72.0.0
Wersja aparatu: AM: 1.1.13303.0, NIS: 2.1.12706.0
Date: 2016-12-27 16:04:05.760
Description:
Produkt Windows Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niechciane oprogramowanie.
Aby uzyskać więcej informacji, zobacz:
http://go.microsoft.com/fwlink/?linkid=37020 & name=HackTool:Win32/AutoKMS & threatid=2147685180 & enterprise=0
Nazwa: HackTool:Win32/AutoKMS
Identyfikator: 2147685180
Ważność: Średni
Kategoria: Narzędzie
Ścieżka: containerfile:_D:\pen\programy\Microsoft.Office.Professional.Plus.2016.PL.rar;file:_C:\ProgramData\KMSAutoS\bin\KMSSS.exe;file:_D:\pen\programy\Microsoft.Office.Professional.Plus.2016.PL.rar- & gt; Microsoft.Office.Professional.Plus.2016.PL\KMSAuto Net 2015 v1.3.8 Portable\KMSAuto Net.exe- & gt; [MSILRES:KMSAuto_Net.Resources.resources]#9
Pochodzenie wykrycia: Komputer lokalny
Typ wykrycia: Konkretne
Źródło wykrycia: System
Użytkownik: ZARZĄDZANIE NT\SYSTEM
Nazwa procesu: Unknown
Wersja podpisu: AV: 1.233.3353.0, AS: 1.233.3353.0, NIS: 116.72.0.0
Wersja aparatu: AM: 1.1.13303.0, NIS: 2.1.12706.0
Date: 2016-12-27 16:04:05.759
Description:
Produkt Windows Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niechciane oprogramowanie.
Aby uzyskać więcej informacji, zobacz:
http://go.microsoft.com/fwlink/?linkid=37020 & name=HackTool:Win32/Keygen & threatid=2147593794 & enterprise=0
Nazwa: HackTool:Win32/Keygen
Identyfikator: 2147593794
Ważność: Średni
Kategoria: Narzędzie
Ścieżka: containerfile:_C:\$Recycle.Bin\S-1-5-21-2102368143-2728945569-3422748965-1001\$R6AB0FT.rar;file:_C:\$Recycle.Bin\S-1-5-21-2102368143-2728945569-3422748965-1001\$R6AB0FT.rar- & gt; Windows 7 (x86) Czerwiec 2015 PL\pl_windows_7_with_sp1_x86_dvd_u_11062015.iso- & gt; \Windows Loader v2.2.2\Windows Loader.exe;file:_C:\$Recycle.Bin\S-1-5-21-2102368143-2728945569-3422748965-1001\$R6AB0FT.rar- & gt; Windows 7 (x86) Czerwiec 2015 PL\Windows Loader v2.2.2\Windows Loader.exe
Pochodzenie wykrycia: Komputer lokalny
Typ wykrycia: Konkretne
Źródło wykrycia: System
Użytkownik: ZARZĄDZANIE NT\SYSTEM
Nazwa procesu: Unknown
Wersja podpisu: AV: 1.233.3353.0, AS: 1.233.3353.0, NIS: 116.72.0.0
Wersja aparatu: AM: 1.1.13303.0, NIS: 2.1.12706.0
Date: 2016-12-27 15:23:54.794
Description:
Produkt Windows Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niechciane oprogramowanie.
Aby uzyskać więcej informacji, zobacz:
http://go.microsoft.com/fwlink/?linkid=37020 & name=HackTool:Win32/AutoKMS & threatid=2147685180 & enterprise=0
Nazwa: HackTool:Win32/AutoKMS
Identyfikator: 2147685180
Ważność: Średni
Kategoria: Narzędzie
Ścieżka: containerfile:_D:\pen\programy\Microsoft.Office.Professional.Plus.2016.PL.rar;file:_C:\ProgramData\KMSAutoS\bin\KMSSS.exe;file:_D:\pen\programy\Microsoft.Office.Professional.Plus.2016.PL.rar- & gt; Microsoft.Office.Professional.Plus.2016.PL\KMSAuto Net 2015 v1.3.8 Portable\KMSAuto Net.exe- & gt; [MSILRES:KMSAuto_Net.Resources.resources]#9
Pochodzenie wykrycia: Komputer lokalny
Typ wykrycia: Konkretne
Źródło wykrycia: System
Użytkownik: ZARZĄDZANIE NT\SYSTEM
Nazwa procesu: Unknown
Wersja podpisu: AV: 1.233.3353.0, AS: 1.233.3353.0, NIS: 116.72.0.0
Wersja aparatu: AM: 1.1.13303.0, NIS: 2.1.12706.0
Date: 2018-12-25 09:33:11.177
Description:
Produkt Windows Defender napotkał błąd podczas próby aktualizacji podpisów.
Nowa wersja podpisu:
Poprzednia wersja podpisu: 1.233.3353.0
Źródło aktualizacji: Serwer usługi Microsoft Update
Typ podpisu: Oprogramowanie antywirusowe
Typ aktualizacji: Pełne
Użytkownik: ZARZĄDZANIE NT\SYSTEM
Bieżąca wersja aparatu:
Poprzednia wersja aparatu: 1.1.13303.0
Kod błędu: 0x80240022
Opis błędu: Program nie może sprawdzić, czy są dostępne aktualizacje definicji.
Date: 2018-12-25 09:33:11.177
Description:
Produkt Windows Defender napotkał błąd podczas próby aktualizacji podpisów.
Nowa wersja podpisu:
Poprzednia wersja podpisu: 1.233.3353.0
Źródło aktualizacji: Serwer usługi Microsoft Update
Typ podpisu: Oprogramowanie antywirusowe
Typ aktualizacji: Pełne
Użytkownik: ZARZĄDZANIE NT\SYSTEM
Bieżąca wersja aparatu:
Poprzednia wersja aparatu: 1.1.13303.0
Kod błędu: 0x80240022
Opis błędu: Program nie może sprawdzić, czy są dostępne aktualizacje definicji.
Date: 2016-12-15 23:22:35.384
Description:
Działanie aparatu Windows Defender zostało zakończone z powodu nieoczekiwanego błędu.
Typ błędu: Awaria
Kod wyjątku: 0xc0000005
Zasób:
Date: 2016-12-15 23:22:35.381
Description:
Działanie aparatu Windows Defender zostało zakończone z powodu nieoczekiwanego błędu.
Typ błędu: Awaria
Kod wyjątku: 0xc0000005
Zasób:
Date: 2016-11-09 22:48:50.740
Description:
Produkt Windows Defender napotkał błąd podczas próby aktualizacji podpisów.
Nowa wersja podpisu:
Poprzednia wersja podpisu: 1.231.1587.0
Źródło aktualizacji: Centrum firmy Microsoft ds. ochrony przed złośliwym oprogramowaniem
Typ podpisu: Oprogramowanie antyszpiegowskie
Typ aktualizacji: Pełne
Użytkownik: ZARZĄDZANIE NT\USŁUGA SIECIOWA
Bieżąca wersja aparatu:
Poprzednia wersja aparatu: 1.1.13202.0
Kod błędu: 0x80072ee2
Opis błędu: Limit czasu operacji został przekroczony.
CodeIntegrity:
===================================
Date: 2018-12-26 08:39:15.228
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\WINDOWS\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\WINDOWS\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2018-12-26 08:34:52.923
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\WINDOWS\System32\services.exe) attempted to load \Device\HarddiskVolume4\WINDOWS\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2018-12-26 08:33:54.999
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2018-12-26 08:33:14.968
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\WINDOWS\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\WINDOWS\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2018-12-26 03:47:03.278
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\WINDOWS\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\WINDOWS\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2018-12-25 21:40:19.830
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\WINDOWS\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\WINDOWS\System32\cssguard64.dll that did not meet the Windows signing level requirements.
Date: 2018-12-25 19:04:52.285
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\WINDOWS\SysWOW64\cssguard32.dll that did not meet the Microsoft signing level requirements.
Date: 2018-12-25 19:04:51.190
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\WINDOWS\System32\cssguard64.dll that did not meet the Microsoft signing level requirements.
==================== Statystyki pamięci ===========================
Procesor: Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz
Procent pamięci w użyciu: 25%
Całkowita pamięć fizyczna: 8057.77 MB
Dostępna pamięć fizyczna: 6021.41 MB
Całkowita pamięć wirtualna: 16249.77 MB
Dostępna pamięć wirtualna: 13803.14 MB
==================== Dyski ================================
Drive c: () (Fixed) (Total:118.29 GB) (Free:26.63 GB) NTFS
Drive d: (Dane) (Fixed) (Total:931.51 GB) (Free:113.71 GB) NTFS
\\?\Volume{469725de-d8ef-4d85-827a-d0f6edf2715c}\ (Odzyskiwanie) (Fixed) (Total:0.29 GB) (Free:0.26 GB) NTFS
\\?\Volume{d2f72f0e-fec3-4a04-987a-36783e61b6a6}\ () (Fixed) (Total:0.44 GB) (Free:0.15 GB) NTFS
==================== MBR & Tablica partycji ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 119.2 GB) (Disk ID: 0C0EA81C)
Partition: GPT.
========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: B647826F)
Partition: GPT.
==================== Koniec Addition.txt ============================