Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 25-06-2017 Uruchomiony przez VincentVega (25-06-2017 19:36:45) Uruchomiony z C:\Users\VincentVega\Downloads Windows 10 Pro Wersja 1703 (X64) (2017-05-15 07:50:01) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-118853160-3530397755-141892092-500 - Administrator - Disabled) Gość (S-1-5-21-118853160-3530397755-141892092-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-118853160-3530397755-141892092-1002 - Limited - Enabled) Konto domyślne (S-1-5-21-118853160-3530397755-141892092-503 - Limited - Disabled) VincentVega (S-1-5-21-118853160-3530397755-141892092-1000 - Administrator - Enabled) => C:\Users\VincentVega ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) ABBYY PDF Transformer+ (HKLM\...\{FA400000-0001-6400-0000-074957833700}) (Version: 4.1.283 - ABBYY Production LLC) Access Help (HKLM-x32\...\{C6FA39A7-26B1-480A-BC74-6D17531AC222}) (Version: 3.01 - Lenovo) Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated) Adobe Flash Player 25 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 25.0.0.171 - Adobe Systems Incorporated) AIDA64 Extreme Edition wersja 4.00.2700 (HKLM-x32\...\AIDA64 Extreme Edition_is1) (Version: 4.00.2700 - ) ALLPlayer V6.X (HKLM-x32\...\ALLPlayer_is1) (Version: - ALLPlayer Group, Ltd.) Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 17.4.2294 - AVAST Software) Avery Wizard 5.0 (HKLM\...\{FC3B3A5D-7058-4627-9F1E-F95CC38B6054}) (Version: 5.0.5 - Avery) ChomikBox (HKLM-x32\...\{C7B52FAF-58D8-438C-B810-F78C3C927504}) (Version: 2.0.8.0 - Chomikuj.pl) Command & Conquer™ Red Alert 2 and Yuri’s Revenge (HKLM-x32\...\{F5275D1C-D133-486D-8F07-D6C571F0A8EC}) (Version: 1.0.0.0 - Electronic Arts, Inc.) Conexant 20585 SmartAudio HD (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.95.48.50 - Conexant) Connect2 (HKLM-x32\...\Connect2_is1) (Version: 4.1.1.3444 - Lenovo) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard) HP Officejet 6600 — podstawowe oprogramowanie urządzenia (HKLM\...\{9E0787A4-E6EC-4365-934E-2024DD492623}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) HP Officejet 6600 Pomoc (HKLM-x32\...\{2FA81482-5570-4CF0-9A10-D61D2F164916}) (Version: 140.0.2.2 - Hewlett Packard) HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP) HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.4.14.41 - Hewlett-Packard Company) HP Support Solutions Framework (HKLM-x32\...\{2AD02988-163A-45E2-AC71-530B080D1A73}) (Version: 12.7.22.13 - HP) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.2.50.1050 - Intel Corporation) Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 16.8 - Intel) Lenovo Patch Utility 64 bit (HKLM\...\{0369F866-2CE0-4EB9-B426-88FA122C6E82}) (Version: 1.3.0.9 - Lenovo Group Limited) Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.10.20 - Lenovo) Lenovo QuickOptimizer (HKLM\...\{8D2C871B-1B9F-45AC-9C43-2BB18089CDFA}) (Version: 1.0.022.00 - Lenovo) Lenovo Service Bridge (HKU\S-1-5-21-118853160-3530397755-141892092-1000\...\dda9ca0b023f4c56) (Version: 1.6.3.5 - Lenovo) Lenovo Settings — Power (x32 Version: 2.00.000 - Lenovo) Hidden Lenovo Solution Center (HKLM\...\{AFDE512F-7BCD-46B6-91C0-230812139EEF}) (Version: 3.4.002.006 - Lenovo) Lenovo System Interface Driver (HKLM\...\LENOVO.SMIIF) (Version: 1.05 - ) Lenovo System Interface Foundation Driver (HKLM\...\{C2E5CA37-C862-4A69-AC6D-24F450A20C16}) (Version: 1.0.078.00 - Lenovo) Malwarebytes (wersja 3.1.2.1733) (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes) Message Center Plus (HKLM\...\{C2C2DB64-1BCE-4FA7-962D-457795ECCEC0}) (Version: 3.3.0004.00 - Lenovo Group Limited) Metric Collection SDK (x32 Version: 1.1.0012.00 - Lenovo Group Limited) Hidden Metric Collection SDK 35 (x32 Version: 1.2.0011.00 - Lenovo Group Limited) Hidden Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-118853160-3530397755-141892092-1000\...\OneDriveSetup.exe) (Version: 17.3.6917.0607 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Mozilla Firefox 43.0.1 (x86 pl) (HKLM-x32\...\Mozilla Firefox 43.0.1 (x86 pl)) (Version: 43.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 40.0.3 - Mozilla) NapiProjekt (2.2.0.2399) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) NetSpot (HKU\S-1-5-21-118853160-3530397755-141892092-1000\...\a6e43da6e76c5494) (Version: 1.0.0.334 - Etwok LLC) NVIDIA Sterownik dźwięku HD 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation) NVIDIA Sterownik graficzny 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 342.01 - NVIDIA Corporation) On Screen Display (Version: 6.73.01 - ) Hidden Oprogramowanie Intel® PROSet/Wireless (HKLM-x32\...\{a9888f41-68ae-43df-bd7d-d93405a44106}) (Version: 17.13.11 - Intel Corporation) Origin (HKLM-x32\...\Origin) (Version: 9.7.2.53208 - Electronic Arts, Inc.) Pakiet sterowników systemu Windows - Ross-Tech USB Driver Package (08/16/2011 2.08.14) (HKLM\...\1D8362A73835BAF17864B726377A794C69668D00) (Version: 08/16/2011 2.08.14 - Ross-Tech) Panel sterowania NVIDIA 342.01 (Version: 342.01 - NVIDIA Corporation) Hidden PingPlotter 5 (x32 Version: 5.02.7.2179 - Pingman Tools, LLC) Hidden PingPlotter 5 5.02.7 (HKLM-x32\...\PingPlotter 5 5.02.7.2179) (Version: 5.02.7.2179 - Pingman Tools, LLC) Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) PowerLine Utility (HKLM-x32\...\{A0384ECE-2017-4EA8-86C7-513ACB936BDF}) (Version: 1.1.830 - TP-LINK) RICOH R5U230 Media Driver ver.2.06.02.02 (HKLM-x32\...\{022CBB38-CEF0-42BA-906A-A49BEFAE0BEE}) (Version: 2.06.02.02 - RICOH) SafeZone Stable 3.55.2393.607 (x32 Version: 3.55.2393.607 - Avast Software) Hidden Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden Sony PC Companion 2.10.303 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.303 - Sony) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.17.115 - Synaptics Incorporated) ThinkPad Bluetooth with Enhanced Data Rate Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.4500 - Broadcom Corporation) ThinkPad FullScreen Magnifier (HKLM\...\ThinkPad FullScreen Magnifier) (Version: 2.42 - ) ThinkPad Modem Adapter (HKLM\...\CNXT_MODEM_HDA_HSF) (Version: 7.80.5.0 - Conexant Systems) ThinkPad Settings Dependency (Version: 3.0.1.32 - Lenovo) Hidden ThinkPad UltraNav Utility (HKLM-x32\...\{17CBC505-D1AE-459D-B445-3D2000A85842}) (Version: 2.13.0 - Lenovo) ThinkVantage Communications Utility (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 2.11.0.0 - Lenovo) ThinkVantage Password Manager (HKLM-x32\...\{70EE2BAA-F82A-4B8A-950E-649EFD64D5B9}) (Version: 4.70.2.0 - Lenovo Group Limited) Viber (HKU\S-1-5-21-118853160-3530397755-141892092-1000\...\{73dfaae5-5ffe-4926-995e-1fd78079c01e}) (Version: 6.5.5.1481 - Viber Media Inc.) Viber (x32 Version: 6.5.5.1481 - Viber Media Inc.) Hidden VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN) WestwoodOnline (HKLM-x32\...\{BBCD6D56-8A26-4DDE-9482-DBC9C7B7341D}) (Version: 1.0.0.0 - WestwoodOnline) Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation) Windows XP Mode (HKLM\...\{1374CC63-B520-4f3f-98E8-E9020BF01CFF}) (Version: 1.3.7600.16422 - Microsoft Corporation) WinRAR 5.31 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-118853160-3530397755-141892092-1000_Classes\CLSID\{0207CA76-8233-4478-9A40-607AC304C435}\InprocServer32 -> C:\Users\VincentVega\AppData\Roaming\Avery\Avery Wizard 5.0\EnvBCode.ocx (Envel Informationssysteme GmbH) CustomCLSID: HKU\S-1-5-21-118853160-3530397755-141892092-1000_Classes\CLSID\{05ea7a02-16de-4535-9896-5123039f8472}\InprocServer32 -> C:\WINDOWS\system32\dfshim.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-118853160-3530397755-141892092-1000_Classes\CLSID\{2BB2DE4F-FCDF-46F2-9723-5B1959E1BDE0}\InprocServer32 -> C:\Users\VincentVega\AppData\Roaming\Avery\Avery Wizard 5.0\EnvBCode.ocx (Envel Informationssysteme GmbH) CustomCLSID: HKU\S-1-5-21-118853160-3530397755-141892092-1000_Classes\CLSID\{95775FC2-FFFA-4432-A4BC-352AB1A84581}\InprocServer32 -> C:\Users\VincentVega\AppData\Roaming\Avery\Avery Wizard 5.0\EnvBCode.ocx (Envel Informationssysteme GmbH) CustomCLSID: HKU\S-1-5-21-118853160-3530397755-141892092-1000_Classes\CLSID\{BE892433-7479-4231-AB95-A313BDA3D409}\InprocServer32 -> C:\Users\VincentVega\AppData\Roaming\Avery\Avery Wizard 5.0\EnvBCode.ocx (Envel Informationssysteme GmbH) CustomCLSID: HKU\S-1-5-21-118853160-3530397755-141892092-1000_Classes\CLSID\{D0E9EEAE-9AC7-4204-BA07-B72DD6077E82}\InprocServer32 -> C:\Users\VincentVega\AppData\Roaming\Avery\Avery Wizard 5.0\AvWizRes.dll (Avery Products Corporation. Envel Informationssysteme GmbH.) CustomCLSID: HKU\S-1-5-21-118853160-3530397755-141892092-1000_Classes\CLSID\{D2776BCC-5F09-4068-B4E2-7EE1202F95CF}\InprocServer32 -> C:\Users\VincentVega\AppData\Roaming\Avery\Avery Wizard 5.0\EnvBCode.ocx (Envel Informationssysteme GmbH) ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {01880733-B61E-4ED1-8F81-99F968A46B77} - System32\Tasks\TVGWw73UpNjdHLjNh => C:\Users\VincentVega\AppData\Roaming\TVGWw73UpNjdHLjNh.exe <==== UWAGA Task: {0C683619-7571-46A5-AD07-B07FA5F8E002} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe Task: {0E80B95A-573D-4F4B-8DA1-52F950D12DE6} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Brak pliku <==== UWAGA Task: {0F1C851F-39AE-4B61-82FE-2FFF17DF6150} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {12EE4794-3831-4442-9323-40F38FB48F19} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.) Task: {1BBC05D5-2903-47FA-BAAB-44FA79A1CF16} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Brak pliku <==== UWAGA Task: {1DCE7C94-506F-4C5A-9DE2-65495BE0F455} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe Task: {2254537A-C49E-48C1-8873-C0E21696B414} - System32\Tasks\HPCeeScheduleForVincentVega => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard) Task: {227AA9A8-F1F8-406F-B4D6-B52574FE0EB4} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe Task: {2B6E6F25-6687-4C34-862B-03765FD9E36D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-04-07] (HP Inc.) Task: {2BF76EF3-C5F3-47F6-96FE-6F30EA5E3CA0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated) Task: {30B50382-C87F-4C54-958A-2BC103EF0E47} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Brak pliku <==== UWAGA Task: {320AF317-D27A-4C40-A2F5-5F7E84B83774} - System32\Tasks\HP AR Program Upload - dabcd2fcff774814aa1ab81c75c2ffa8bc8ba88975264284b7b5079a8ac7362f => C:\Program Files\HP\HP Officejet 6600\bin\HPRewards.exe [2012-10-17] (TODO: ) Task: {3789F8A2-275C-41EA-8DA9-86ABBD948E9A} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {3882565D-1016-4617-BD53-93E3B7E26E00} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.) Task: {3974609A-E197-4299-93C2-496CE797B9D8} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Brak pliku <==== UWAGA Task: {4BAC17FA-A5F7-4C75-A939-5AD9DFA2D9CD} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.UpdateStatusService.exe [2016-12-07] () Task: {4D3DCB6E-0C2D-4C79-95E5-BD53CEE3ACDB} - System32\Tasks\HP AR Program Upload - 089c1f4715094cceb38d295a903ffea2c27118ee8418438a827f5d1e0e084c9d => C:\Program Files\HP\HP Officejet 6600\bin\HPRewards.exe [2012-10-17] (TODO: ) Task: {4D60CE04-C6DE-4CFF-9F91-368BB074B1D9} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe Task: {4F8DA04C-DEF7-411E-968D-95F7F3A1E3F1} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {5606E916-1A53-4377-B6A0-5980B1A565E2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {59A1AFBC-3BF6-4879-AF34-F7BC0A8A5D6B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Brak pliku <==== UWAGA Task: {5F748EAC-40EC-4044-A3FE-22C060646F06} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Brak pliku <==== UWAGA Task: {5F7962C4-3435-4A76-B51D-EA165863DD57} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {68FB9E6D-5F8D-40D9-95C8-A8536089FBB8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-12-21] (HP Inc.) Task: {6BD6AF93-D02A-4A4F-8279-FB9D6CE5F37E} - System32\Tasks\{1FC8DBB5-11A4-4124-88E8-9EB880EED642} => pcalua.exe -a C:\PROGRA~1\DIFX\4A7292~1\DPInst.exe -c /u C:\Windows\System32\DriverStore\FileRepository\rt-usb64.inf_amd64_neutral_65fc022496ec21d3\rt-usb64.inf Task: {7427A4BC-3762-4A04-8729-310665DC3697} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\902bc77f-2638-4936-adb1-4d93c854df0a => C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2017-06-05] (Lenovo Group Limited) Task: {80017412-68A3-4F28-A9E9-6FE9CDE6DB1C} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe Task: {82CBDD13-7E65-4C8D-942F-D6E50000DDEB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-04-07] (HP Inc.) Task: {8368AC18-AFB4-44C8-B21A-B82186265556} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe Task: {87A7E8A7-4367-4A2B-81E6-F683A9300A47} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {8844E244-44C3-4139-A77F-104736E6FCD5} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_25_0_0_171_pepper.exe [2017-06-12] (Adobe Systems Incorporated) Task: {8BC74086-87BA-47FA-956B-AF5C4AD00E7F} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-04-13] (AVAST Software) Task: {8C882FFE-C3E8-4D37-A01F-80C576D4729E} - \CCleanerSkipUAC -> Brak pliku <==== UWAGA Task: {8D14784C-DE20-4B76-88CB-0687D26DA9D0} - \Lenovo\Lenovo Service Bridge\S-1-5-21-118853160-3530397755-141892092-1000 -> Brak pliku <==== UWAGA Task: {8ED47538-CAA4-4678-B65C-9C8ADB65B09F} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\ce5e39ab-411f-4d86-a231-92b1277a8459 => C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2017-06-05] (Lenovo Group Limited) Task: {924FB4FC-8F15-4B1F-B3C4-09A2A16352F5} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Brak pliku <==== UWAGA Task: {940B0152-F55C-4E49-8884-7B46CFC53425} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Brak pliku <==== UWAGA Task: {97722EDE-7014-4E13-92C6-0CD4E3AB9F10} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => Sc.exe START ImControllerService Task: {9C64AC86-8C34-466F-A311-F1F7C54F4548} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32 Task: {A682CAB8-9004-4285-BF85-8C779DA39BB5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {A986995E-73A0-4E03-8A93-8FA150374C39} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2015-07-08] (Lenovo) Task: {B6046413-7032-4DAA-A93F-B2F9726427E3} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {B697DB7B-7E03-4286-85CB-08B74D3B1AE5} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe Task: {B7FD5B9C-7484-4780-A16A-9DAFFE01E401} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-04-06] (HP Inc.) Task: {BA910380-03FA-48FE-B4E7-60A90B8D5FB9} - System32\Tasks\d5cqW7eqkPZlTSVnJkx => C:\Users\VincentVega\AppData\Roaming\d5cqW7eqkPZlTSVnJkx.exe <==== UWAGA Task: {BCE694C5-FE14-43E0-BDFA-25B38E4F28B6} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe Task: {BD996B07-B191-4AD6-80B9-85D5C4A5FB12} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {BF619A6B-7FB7-4041-9F2F-7D87025AD7D3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Brak pliku <==== UWAGA Task: {C1D87ACF-6798-49C6-9653-ADE54C48A335} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe Task: {C1F6BA1F-14BA-496E-A1A5-A1DED06E7D14} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2016-12-07] (Lenovo) Task: {C5BE2AE2-50C3-4904-9478-6F9FC709E44D} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {C81B2AEC-FDDF-4EFA-876D-2F8AC0303C20} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe Task: {C8FC4A45-8D5E-41BF-87D5-0D05C9E7E842} - System32\Tasks\Lenovo\Message Center Plus Launcher => C:\Program Files (x86)\Lenovo\message center plus\mcplaunch.exe [2014-09-13] (Lenovo) Task: {CA4825AB-F7BC-4B47-9F12-2375C404A845} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe Task: {CC5640CE-10E9-4202-96CE-19F5A156C304} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Brak pliku <==== UWAGA Task: {D304F4A6-C207-4A96-9238-A21E18563723} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe Task: {D723238F-CD8D-4B9D-9500-474CB057D346} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Brak pliku <==== UWAGA Task: {DAD14618-1FA3-4FFE-AFAD-2025B1D36804} - \PMTask -> Brak pliku <==== UWAGA Task: {DB5D123D-8C68-40E8-B238-6457BEC0A8FB} - System32\Tasks\{FC370FC1-7568-41FF-863E-2DA84188746F} => Chrome.exe hxxp://ui.skype.com/ui/0/7.12.0.101/pl/abandoninstall?page=tsProgressBar Task: {DEE4BF67-04AE-497E-83B8-0DE7549A5F80} - System32\Tasks\SafeZone scheduled Autoupdate 1468418561 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-05-17] (Avast Software) Task: {E1AF0AAA-926D-4722-905E-4C5E801F3B7D} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2016-12-07] (Lenovo) Task: {E63AC8F5-0BA0-4DAF-9427-0E403A9FEA56} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Brak pliku <==== UWAGA Task: {E8DB3782-5484-4D66-9DC5-1F040DE21CEA} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-05-11] (AVAST Software) Task: {EDEEFF8A-0D5D-4081-9DCE-194CC467C3B0} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-06-14] (Microsoft Corporation) Task: {F039BDB7-9963-4B25-A598-2F4F14B82DAA} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {F2399095-B27E-4DB8-A014-55D62CFDD85F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2017-05-25] (HP Inc.) Task: {F81516C2-33F0-4D71-AF04-6E9EF6C7A0E9} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {FB082071-04F1-4AFC-9B42-7AE6D11C5F29} - System32\Tasks\HP AR Program Upload - 9268c0548c5f4e6580fdac2188e677d9efc1a7cbd5db40c79470ef6e2289e353 => C:\Program Files\HP\HP Officejet 6600\bin\HPRewards.exe [2012-10-17] (TODO: ) Task: {FC0C8507-A415-4901-8A82-B2BEB167BC72} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe Task: {FD9E3DD1-3365-4439-B461-9F6F4C285083} - System32\Tasks\Lenovo\Lenovo Settings Power => Rundll32.exe "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.dll",PwrMgrBkGndMonitor (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\WINDOWS\Tasks\d5cqW7eqkPZlTSVnJkx.job => C:\Users\VincentVega\AppData\Roaming\d5cqW7eqkPZlTSVnJkx.exe <==== UWAGA Task: C:\WINDOWS\Tasks\HPCeeScheduleForVincentVega.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe Task: C:\WINDOWS\Tasks\TVGWw73UpNjdHLjNh.job => C:\Users\VincentVega\AppData\Roaming\TVGWw73UpNjdHLjNh.exe <==== UWAGA ==================== Skróty & WMI ======================== (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ==================== Załadowane moduły (filtrowane) ============== 2017-05-15 09:17 - 2016-11-14 13:15 - 00135224 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2017-06-22 17:53 - 2017-05-25 14:11 - 02270664 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll 2017-03-18 22:58 - 2017-03-18 22:58 - 00138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll 2016-09-24 15:26 - 2017-04-28 08:03 - 00204152 _____ () C:\Program Files (x86)\ThinkPad\Utilities\PL\PWMRT64V.DLL 2017-03-18 22:59 - 2017-03-20 05:59 - 01731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2017-06-21 19:06 - 2017-06-21 19:07 - 00074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2017-06-21 19:06 - 2017-06-21 19:07 - 00203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2017-06-21 19:06 - 2017-06-21 19:07 - 43454464 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2017-06-21 19:06 - 2017-06-21 19:07 - 02437120 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\skypert.dll 2017-05-23 20:15 - 2017-05-23 20:15 - 03139496 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11705.1001.21.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2017-06-22 17:24 - 2017-06-22 17:24 - 10628608 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11705.1001.21.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll 2017-06-22 17:24 - 2017-06-22 17:24 - 02640384 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11705.1001.21.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll 2017-06-22 17:24 - 2017-06-22 17:24 - 00766464 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11705.1001.21.0_x64__8wekyb3d8bbwe\WinStore.Vui.dll 2017-04-07 13:47 - 2017-04-07 13:48 - 01695440 _____ () C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.8269.57741.0_x64__8wekyb3d8bbwe\Microsoft.Applications.Telemetry.Windows.dll 2017-06-23 18:38 - 2017-06-23 18:39 - 13186248 _____ () C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.8269.57741.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.Core.dll 2017-03-18 22:57 - 2017-03-18 22:57 - 00987552 _____ () C:\Windows\System32\speech\engines\tts\MSTTSEngine.dll 2017-03-18 22:57 - 2017-03-18 22:57 - 00513024 _____ () C:\Windows\System32\speech\engines\tts\MSTTSLoc.DLL 2017-05-12 08:03 - 2017-05-09 11:13 - 03767640 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\libglesv2.dll 2017-05-12 08:03 - 2017-05-09 11:13 - 00100696 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\libegl.dll 2017-01-12 20:10 - 2017-01-12 20:10 - 02493440 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll 2017-05-11 07:24 - 2017-05-11 07:24 - 00170216 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2017-05-11 07:25 - 2017-05-11 07:25 - 00997896 _____ () C:\Program Files\AVAST Software\Avast\AvChrome.dll 2017-05-11 07:25 - 2017-05-11 07:25 - 67717632 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2017-05-11 07:24 - 2017-05-11 07:24 - 00176992 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll 2017-05-11 07:25 - 2017-05-11 07:25 - 00223224 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll 2017-05-11 07:24 - 2017-05-11 07:24 - 00291824 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll 2017-05-11 07:24 - 2017-05-11 07:24 - 00684656 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Powiązania plików (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Hosts - zawartość: =============================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2009-07-14 04:34 - 2016-10-11 08:43 - 00002026 _____ C:\WINDOWS\system32\Drivers\etc\hosts ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-118853160-3530397755-141892092-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\VincentVega\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{c320457f-4cf5-4305-848f-77a12e997972}.jpg DNS Servers: 10.80.49.188 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == MSCONFIG\Services: ABBYY.Licensing.PDFTransformer.Classic.4.0 => 2 MSCONFIG\Services: Disc Soft Lite Bus Service => 3 MSCONFIG\Services: gupdate => 2 MSCONFIG\Services: gupdatem => 3 MSCONFIG\Services: HPSupportSolutionsFrameworkService => 2 MSCONFIG\Services: LcSvrAdm => 2 MSCONFIG\Services: LcSvrAuf => 3 MSCONFIG\Services: LcSvrDba => 2 MSCONFIG\Services: LcSvrHis => 2 MSCONFIG\Services: LcSvrPAS => 2 MSCONFIG\Services: LcSvrSaz => 2 MSCONFIG\Services: MozillaMaintenance => 3 MSCONFIG\Services: Origin Client Service => 3 MSCONFIG\Services: rpcapd => 3 MSCONFIG\Services: ShareItSvc => 3 MSCONFIG\Services: Sony PC Companion => 3 MSCONFIG\Services: SUService => 3 MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices MSCONFIG\startupreg: GoogleChromeAutoLaunch_8A4663CD3A7F445C9256F906889C2ACF => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window MSCONFIG\startupreg: IMSS => "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" MSCONFIG\startupreg: LENOVO.TPKNRRES => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe MSCONFIG\startupreg: update => wscript.exe //B "C:\Users\VINCEN~1\AppData\Local\Temp\update.vbs" HKLM\...\StartupApproved\Run: => "BCSSync" HKLM\...\StartupApproved\Run: => "PasswordManager" HKU\S-1-5-21-118853160-3530397755-141892092-1000\...\StartupApproved\StartupFolder: => "update.vbs" HKU\S-1-5-21-118853160-3530397755-141892092-1000\...\StartupApproved\StartupFolder: => "Facebook Games Arcade (BETA).lnk" HKU\S-1-5-21-118853160-3530397755-141892092-1000\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-118853160-3530397755-141892092-1000\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-118853160-3530397755-141892092-1000\...\StartupApproved\Run: => "DAEMON Tools Lite Automount" HKU\S-1-5-21-118853160-3530397755-141892092-1000\...\StartupApproved\Run: => "HP Officejet 6600 (NET)" HKU\S-1-5-21-118853160-3530397755-141892092-1000\...\StartupApproved\Run: => "BlueStacks Agent" HKU\S-1-5-21-118853160-3530397755-141892092-1000\...\StartupApproved\Run: => "Viber" ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [{6DD101D6-FF37-4521-B675-5D64982364EE}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{50D01131-A885-4998-B7C6-252F001A6FD9}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.596_0\SZBrowser.exe FirewallRules: [{5025BB73-D474-4849-B229-264BD05227EE}] => (Allow) C:\Program Files (x86)\Lenovo\Connect2\Connect2.exe FirewallRules: [{498D2A3B-DD11-4B83-91CB-49D331CA7E59}] => (Allow) C:\Program Files (x86)\Lenovo\Connect2\Connect2.exe FirewallRules: [{2884AA22-91D2-4A34-B2E2-2496DE35024B}] => (Allow) C:\Program Files (x86)\Lenovo\Connect2\Connect2.exe FirewallRules: [{10D7D955-082E-44D7-A133-6CCEF553E22F}] => (Block) C:\program files\hp\hp officejet 6600\bin\hpnetworkcommunicator.exe FirewallRules: [{54F6B5E3-B1D1-4839-AE7A-BCE5D692E75E}] => (Block) C:\program files\hp\hp officejet 6600\bin\hpnetworkcommunicator.exe FirewallRules: [UDP Query User{5D113EE5-65C4-407B-AA49-50792833D248}C:\program files\hp\hp officejet 6600\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet 6600\bin\hpnetworkcommunicator.exe FirewallRules: [TCP Query User{30EE583A-3291-4879-B3E2-32BE86AFC507}C:\program files\hp\hp officejet 6600\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet 6600\bin\hpnetworkcommunicator.exe FirewallRules: [{00BDD3B8-BC17-4F37-BA20-2F5D70A29ACA}] => (Block) C:\program files\hp\hp officejet 6600\bin\hpnetworkcommunicatorcom.exe FirewallRules: [{5999067A-9EF4-43BA-A85F-8D97B27363A2}] => (Block) C:\program files\hp\hp officejet 6600\bin\hpnetworkcommunicatorcom.exe FirewallRules: [UDP Query User{C7C59B4D-5BA2-480C-8F95-6F3DC857DD23}C:\program files\hp\hp officejet 6600\bin\hpnetworkcommunicatorcom.exe] => (Allow) C:\program files\hp\hp officejet 6600\bin\hpnetworkcommunicatorcom.exe FirewallRules: [TCP Query User{5D05C04F-1D90-4D21-8602-185F90C3F246}C:\program files\hp\hp officejet 6600\bin\hpnetworkcommunicatorcom.exe] => (Allow) C:\program files\hp\hp officejet 6600\bin\hpnetworkcommunicatorcom.exe FirewallRules: [UDP Query User{EE4E91EF-16A1-47EB-AD35-A261CC9AFF15}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe FirewallRules: [TCP Query User{FB690837-94CA-4C0D-9B08-DC0A8E54C852}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe FirewallRules: [{672E332D-B625-48E7-B87A-685501ED2535}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.607\SZBrowser.exe ==================== Punkty Przywracania systemu ========================= 19-06-2017 21:44:52 Windows Update 22-06-2017 17:27:54 Removed HP Support Solutions Framework ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (06/25/2017 07:00:01 PM) (Source: Windows Backup) (EventID: 4103) (User: ) Description: Nie ukończono wykonywania kopii zapasowej z powodu błędu zapisu w lokalizacji kopii zapasowej E:\. Błąd: Nie można odnaleźć lokalizacji kopii zapasowej lub jest ona nieprawidłowa. Przejrzyj ustawienia kopii zapasowej i sprawdź lokalizację kopii zapasowej. (0x81000006). Error: (06/24/2017 08:23:36 AM) (Source: MsiInstaller) (EventID: 1002) (User: BLUEDEEP) Description: Nieoczekiwana lub brakująca wartość (nazwa: „PackageName”, wartość: „”) w kluczu „HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList” Error: (06/23/2017 06:37:20 PM) (Source: MsiInstaller) (EventID: 1002) (User: BLUEDEEP) Description: Nieoczekiwana lub brakująca wartość (nazwa: „PackageName”, wartość: „”) w kluczu „HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList” Error: (06/22/2017 06:38:49 PM) (Source: MsiInstaller) (EventID: 1002) (User: BLUEDEEP) Description: Nieoczekiwana lub brakująca wartość (nazwa: „PackageName”, wartość: „”) w kluczu „HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList” Error: (06/22/2017 06:34:09 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: BLUEDEEP) Description: Aktywacja aplikacji Microsoft.ZuneVideo_8wekyb3d8bbwe!Microsoft.ZuneVideo nie powiodła się. Błąd: -2144927142. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error: (06/22/2017 05:54:03 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: mbam.exe, wersja: 3.0.0.1068, sygnatura czasowa: 0x59125ef2 Nazwa modułu powodującego błąd: mbam.exe, wersja: 3.0.0.1068, sygnatura czasowa: 0x59125ef2 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x0024c0bb Identyfikator procesu powodującego błąd: 0x249c Godzina uruchomienia aplikacji powodującej błąd: 0x01d2eb6fbf90fefc Ścieżka aplikacji powodującej błąd: C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe Ścieżka modułu powodującego błąd: C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe Identyfikator raportu: a684b705-520a-4383-aa58-f7bb9bd511a0 Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error: (06/22/2017 05:26:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: regsvr32.exe, wersja: 10.0.15063.0, sygnatura czasowa: 0x92d00021 Nazwa modułu powodującego błąd: SVG3BIB.dll_unloaded, wersja: 1.1.8.1, sygnatura czasowa: 0x3bd52521 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000034be Identyfikator procesu powodującego błąd: 0x2358 Godzina uruchomienia aplikacji powodującej błąd: 0x01d2eb6bedaec97f Ścieżka aplikacji powodującej błąd: C:\WINDOWS\SysWOW64\regsvr32.exe Ścieżka modułu powodującego błąd: SVG3BIB.dll Identyfikator raportu: b3895ced-f5be-46d3-b723-ea7e19739092 Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error: (06/21/2017 11:53:47 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: Nie powiodło się wykonanie procedury otwierania dla usługi „BITS” w bibliotece DLL „C:\Windows\System32\bitsperf.dll”. Dane wydajności dla tej usługi nie będą dostępne. Pierwsze cztery bajty (DWORD) sekcji danych Data zawierają kod błędu. Error: (06/21/2017 07:05:53 PM) (Source: MsiInstaller) (EventID: 1002) (User: BLUEDEEP) Description: Nieoczekiwana lub brakująca wartość (nazwa: „PackageName”, wartość: „”) w kluczu „HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList” Error: (06/20/2017 10:13:50 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: BLUEDEEP) Description: Działanie pakietu Microsoft.WindowsStore_11703.1001.45.0_x64__8wekyb3d8bbwe+App zostało zakończone, ponieważ operacja wstrzymywania pakietu trwała zbyt długo. Dziennik System: ============= Error: (06/25/2017 03:56:12 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: ZARZĄDZANIE NT) Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x80070663: Aktualizacja zabezpieczeń dla programu Microsoft Word 2010 (KB2965313) wersja 64-bitowa. Error: (06/25/2017 10:58:00 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 Error: (06/24/2017 11:40:34 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 Error: (06/24/2017 08:46:28 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 Error: (06/24/2017 05:26:12 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: ZARZĄDZANIE NT) Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x80070663: Aktualizacja zabezpieczeń dla programu Microsoft Word 2010 (KB2965313) wersja 64-bitowa. Error: (06/24/2017 01:23:46 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 Error: (06/24/2017 12:32:32 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 Error: (06/23/2017 06:44:13 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: ZARZĄDZANIE NT) Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x80070663: Aktualizacja zabezpieczeń dla programu Microsoft Word 2010 (KB2965313) wersja 64-bitowa. Error: (06/23/2017 07:24:45 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 Error: (06/22/2017 11:56:46 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 CodeIntegrity: =================================== Date: 2017-06-16 07:19:58.031 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements. Date: 2017-06-16 07:19:57.936 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements. Date: 2017-06-16 07:19:57.796 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements. Date: 2017-06-16 07:19:57.586 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements. Date: 2017-06-16 07:19:57.504 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements. Date: 2017-06-16 07:19:57.427 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements. Date: 2017-06-16 07:19:52.620 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements. Date: 2017-06-16 07:19:51.044 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements. Date: 2017-06-16 07:00:30.339 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements. Date: 2017-06-16 07:00:30.269 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements. ==================== Statystyki pamici =========================== Procesor: Intel(R) Core(TM) i5 CPU M 520 @ 2.40GHz Procent pamici w uyciu: 47% Cakowita pami fizyczna: 8051.66 MB Dostpna pami fizyczna: 4201.23 MB Cakowita pami wirtualna: 16243.66 MB Dostpna pami wirtualna: 11655.18 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:297.16 GB) (Free:157.55 GB) NTFS Drive e: (Nowy) (Fixed) (Total:74.53 GB) (Free:38.03 GB) NTFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: A2F44FFF) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=297.2 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=848 MB) - (Type=27) ======================================================== Disk: 1 (Size: 74.5 GB) (Disk ID: 2DE8F282) Partition 1: (Not Active) - (Size=74.5 GB) - (Type=07 NTFS) ==================== Koniec Addition.txt ============================