Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 24.12.2018
Uruchomiony przez Emanuel (25-12-2018 20:31:41)
Uruchomiony z C:\Users\Emanuel\Desktop
Windows 7 Professional Service Pack 1 (X64) (2018-04-09 09:53:03)
Tryb startu: Normal
==========================================================


==================== Konta użytkowników: =============================

Administrator (S-1-5-21-652811554-794021937-3607036813-500 - Administrator - Disabled)
Emanuel (S-1-5-21-652811554-794021937-3607036813-1000 - Administrator - Enabled) => C:\Users\Emanuel
Gość (S-1-5-21-652811554-794021937-3607036813-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-652811554-794021937-3607036813-1002 - Limited - Enabled)

==================== Centrum zabezpieczeń ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie.)

AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Zainstalowane programy ======================

(W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)

Acquisition version 0.8b (HKLM-x32\...\{53E25C0C-0305-47BB-9884-F0F202297AF4}_is1) (Version: 0.8b - )
Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 19.010.20064 - Adobe Systems Incorporated)
Adobe After Effects CC 2017 (HKLM-x32\...\{147EC100-14BE-45EF-AB42-35BAEE7D02F2}) (Version: 14.1.0 - Adobe Systems Incorporated)
Adobe Audition CC 2018 (HKLM-x32\...\AUDT_11_1) (Version: 11.1.0 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.6.1.393 - Adobe Systems Incorporated)
Adobe Flash Player 29 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 29.0.0.140 - Adobe Systems Incorporated)
Adobe Illustrator CC 2017 (HKLM-x32\...\ILST_21_0_0) (Version: 21.0.0 - Adobe Systems Incorporated)
Adobe Lightroom (HKLM-x32\...\{8048A5DF-8A70-5BE1-954B-E0FDE1BD0D0D}) (Version: 6.0 - Adobe Systems Incorporated)
Adobe Media Encoder CC 2015 (HKLM-x32\...\{0FAC7130-BEC5-47A5-8813-1D339B8326ED}) (Version: 9.0.0 - Adobe Systems Incorporated)
Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.0 - Adobe Systems Incorporated)
Adobe Premiere Pro CC 2015 (HKLM-x32\...\{38C72D42-0672-43B1-9E05-E7631684F9A1}) (Version: 9.0.0 - Adobe Systems Incorporated)
Aktualizacje NVIDIA 34.0.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 34.0.0.0 - NVIDIA Corporation) Hidden
Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)
Ashampoo Burning Studio 2019 (HKLM-x32\...\{91B33C97-293D-A984-2057-76661C44CB0E}_is1) (Version: 1.20.0 - Ashampoo GmbH & Co. KG)
AutoHotkey 1.1.30.01 (HKLM\...\AutoHotkey) (Version: 1.1.30.01 - Lexikos)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
BELOW (HKLM-x32\...\BELOW_is1) (Version:  - )
bl (HKLM-x32\...\{2A075BB4-E976-4278-BF3F-E5C6945D84C0}) (Version: 1.0.0 - Your Company Name) Hidden
Black Desert Online (HKLM-x32\...\{C1F96C92-7B8C-485F-A9CD-37A0708A2A60}) (Version: 1.0.0.9 - Kakao Games Europe B.V.)
Blade & Soul (HKLM-x32\...\{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.260 - NC Interactive, LLC) Hidden
Blade & Soul (HKLM-x32\...\InstallShield_{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.260 - NC Interactive, LLC)
Bloody6 (HKLM-x32\...\Bloody3) (Version: 18.03.0002 - Bloody)
Canon MP Navigator EX 1.0 (HKLM-x32\...\MP Navigator EX 1.0) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.51 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.8.7041 - CDBurnerXP)
CPUID HWMonitor Pro 1.36 (HKLM\...\CPUID HWMonitorPro_is1) (Version: 1.36 - CPUID, Inc.)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.8.0.0410 - Disc Soft Ltd)
Destiny 2 (HKLM-x32\...\Destiny 2) (Version:  - Blizzard Entertainment)
Discord (HKU\S-1-5-21-652811554-794021937-3607036813-1000\...\Discord) (Version: 0.0.301 - Discord Inc.)
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 417.35 - NVIDIA Corporation) Hidden
Dragon Quest XI (HKLM-x32\...\Dragon Quest XI_is1) (Version:  - )
EdenEternal version 1 (HKLM-x32\...\EdenEternal_is1) (Version: 1 - Aeria Games)
Ezviz Studio (HKLM-x32\...\{49DF99D3-BC81-439A-8F40-A0529159024C}_is1) (Version:  - EZVIZ Inc.)
FINAL FANTASY XIV ONLINE (HKLM-x32\...\{2B41E132-07DF-4925-A3D3-F2D1765CCDFE}) (Version: 1.0.0000 - SQUARE ENIX CO., LTD.)
Freemake Audio Converter wersja 1.1.7 (HKLM-x32\...\Freemake Audio Converter_is1) (Version: 1.1.7 - Ellora Assets Corporation)
Game Installer (HKLM-x32\...\Game Installer 1.0.0) (Version: 1.0.0 - Intrepid Studios, Inc.)
GlassWire 2.1 (remove only) (HKLM-x32\...\GlassWire 2.1) (Version: 2.1.140 - SecureMix LLC)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
HP LaserJet Professional CP1020 Series (HKLM\...\HP LaserJet Professional CP1020 Series) (Version:  - )
HPLJUT (HKLM-x32\...\{229D6185-BD7E-494B-A73B-C5215BE0690E}) (Version: 1.00.0012 - HP) Hidden
hppcp1025LaserJetService (HKLM-x32\...\{F31BF057-0D5E-485E-ADFD-560314A27912}) (Version: 1.00.0000 - Hewlett-Packard)
hppLaserJetService (HKLM-x32\...\{5093AE98-D510-4BEB-BAC1-7FC8ECE35B98}) (Version: 007.015.00635 - Hewlett-Packard) Hidden
Informacje o systemie Creative (HKLM-x32\...\SysInfo) (Version: 1.10 - Creative Technology Limited)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1043 - Intel Corporation)
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.47.715.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{2b32b7d0-4f9f-47c8-adb7-807e6cb2fb75}) (Version: 1.47.715.0 - Intel Corporation) Hidden
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 4.0.0.36 - Intel Corporation)
Intrepid Studios Launcher (HKLM-x32\...\Launcher 1.0.114) (Version: 1.0.114 - Intrepid Studios, Inc.)
Java 8 Update 171 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180171F0}) (Version: 8.0.1710.11 - Oracle Corporation)
JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Launcher (HKLM-x32\...\{57EBDBA4-CEEE-46D4-9B83-D020605160D4}) (Version: 1.0.114 - Intrepid Studios, Inc.) Hidden
LibreOffice 6.0.2.1 (HKLM\...\{673086D4-1E80-4ED2-A68E-2F6AF26F9760}) (Version: 6.0.2.1 - The Document Foundation)
Lightshot-5.4.0.35 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.35 - Skillbrains)
Malwarebytes (wersja 3.6.1.2711) (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.6.1.2711 - Malwarebytes)
Mass Effect: Andromeda (HKLM-x32\...\Mass Effect: Andromeda_is1) (Version:  - )
Microsoft .NET Core Runtime - 2.0.7 (x64) (HKLM-x32\...\{b7cb6538-e06d-4f16-ae77-f9d8b79960f5}) (Version: 2.0.7.26407 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.50401.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.16.27012 (HKLM-x32\...\{427ada59-85e7-4bc8-b8d5-ebf59db60423}) (Version: 14.16.27012.6 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.12.25810 (HKLM-x32\...\{56e11d69-7cc9-40a5-a4f9-8f6190c4d84d}) (Version: 14.12.25810.0 - Microsoft Corporation)
Monster Hunter World (HKLM-x32\...\Monster Hunter World_is1) (Version:  - )
Mozilla Firefox 64.0 (x64 pl) (HKLM\...\Mozilla Firefox 64.0 (x64 pl)) (Version: 64.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 63.0.3 - Mozilla)
MSI Afterburner 4.5.0 (HKLM-x32\...\Afterburner) (Version: 4.5.0 - MSI Co., LTD)
NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version:  - NCSOFT)
Nexon Launcher (HKLM-x32\...\Nexon Nexon Launcher) (Version: 2.0.0 - Nexon)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.1 - Notepad++ Team)
Nox APP Player (HKLM-x32\...\Nox) (Version: 6.1.1.0 - Duodian Technology Co. Ltd.)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.12 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.16.0.140 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.16.0.140 - NVIDIA Corporation)
NVIDIA Oprogramowanie systemu PhysX 9.18.0907 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.18.0907 - NVIDIA Corporation)
NVIDIA Sterownik 3D Vision 417.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 417.35 - NVIDIA Corporation)
NVIDIA Sterownik dźwięku HD 1.3.38.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.4 - NVIDIA Corporation)
NVIDIA Sterownik graficzny 417.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 417.35 - NVIDIA Corporation)
NVIDIA Sterownik kontrolera 3D Vision 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 21.1.0 - OBS Project)
Oprogramowanie mikroukładu Intel® (HKLM-x32\...\{c7f54569-0018-439c-809a-48046a4d4ebc}) (Version: 10.1.1.9 - Intel(R) Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.5.32.18460 - Electronic Arts, Inc.)
Panel sterowania NVIDIA 417.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 417.35 - NVIDIA Corporation) Hidden
ph (HKLM-x32\...\{185F9795-9663-4F13-9EF9-307A282ADB5A}) (Version: 1.0.0 - Your Company Name) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.112.811.2017 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8382 - Realtek Semiconductor Corp.)
RivaTuner Statistics Server 7.1.0 (HKLM-x32\...\RTSS) (Version: 7.1.0 - Unwinder)
Skype (wersja 8.34) (HKLM-x32\...\Skype_is1) (Version: 8.34 - Skype Technologies S.A.)
Sound Blaster Tactic(3D) Alpha (HKLM-x32\...\{2226247D-9846-4370-A1EF-FAA6958F7632}) (Version: 1.0 - Creative Technology Limited)
Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Streamlabs OBS 0.9.8 (HKLM\...\029c4619-0385-5543-9426-46f9987161d9) (Version: 0.9.8 - General Workings, Inc.)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
TERA (HKLM-x32\...\{A2F166A0-F031-4E27-A057-C69733219434}_is1) (Version:  - Gameforge 4D GmbH)
Tibia (HKU\S-1-5-21-652811554-794021937-3607036813-1000\...\Tibia) (Version:  - CipSoft GmbH)
Topaz Clean 3 (HKLM-x32\...\Topaz Clean 3) (Version: 3.1.0 - Topaz Labs, LLC)
Uplay (HKLM-x32\...\Uplay) (Version: 38.2 - Ubisoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0-2) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
WinRAR 5.50 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
WPS Office (10.2.0.7549) (HKU\S-1-5-21-652811554-794021937-3607036813-1000\...\Kingsoft Office) (Version: 10.2.0.7549 - Kingsoft Corp.)
XTREME GAMING ENGINE (HKLM-x32\...\GIGABYTE XTREME GAMING ENGINE_is1) (Version: 1.2.5.1 - GIGABYTE Technology Co.,Inc.)
YouTube By Click (HKLM-x32\...\{4CFC33AD-851E-4618-B764-651D14E1B6D3}) (Version: 2.2.83 - ByClick) Hidden
YouTube By Click (HKLM-x32\...\YouTube By Click 2.2.83) (Version: 2.2.83 - ByClick)

==================== Niestandardowe rejestracje CLSID (filtrowane): ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

CustomCLSID: HKU\S-1-5-21-652811554-794021937-3607036813-1000_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-652811554-794021937-3607036813-1000_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-652811554-794021937-3607036813-1000_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-652811554-794021937-3607036813-1000_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-652811554-794021937-3607036813-1000_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-652811554-794021937-3607036813-1000_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-652811554-794021937-3607036813-1000_Classes\CLSID\{70239788-4DAE-49B8-9270-5D8614384B49}\InprocServer32 -> C:\Users\Emanuel\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\addons\kpdf2wordshellext\kpdf2wordshellext64.dll (Zhuhai Kingsoft Office Software Co.,Ltd)
CustomCLSID: HKU\S-1-5-21-652811554-794021937-3607036813-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
ShellIconOverlayIdentifiers: [
 MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [
 MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [
 MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [   AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] ()
ShellIconOverlayIdentifiers: [   AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] ()
ShellIconOverlayIdentifiers: [   AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] ()
ShellIconOverlayIdentifiers-x32: [
 MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [
 MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [
 MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  -> Brak pliku
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] ()
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2016-10-16] ()
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Brak pliku
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-09-13] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-09-13] (Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\DTShl64.dll [2018-04-03] (Disc Soft Ltd)
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Brak pliku
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\DTShl64.dll [2018-04-03] (Disc Soft Ltd)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Brak pliku
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Brak pliku
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2018-12-11] (NVIDIA Corporation)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] ()
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-09-13] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-09-13] (Alexander Roshal)
ContextMenuHandlers1_S-1-5-21-652811554-794021937-3607036813-1000: [kpdf2wordshellext] -> {70239788-4DAE-49B8-9270-5D8614384B49} => C:\Users\Emanuel\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\addons\kpdf2wordshellext\kpdf2wordshellext64.dll [2018-11-30] (Zhuhai Kingsoft Office Software Co.,Ltd)
ContextMenuHandlers1_S-1-5-21-652811554-794021937-3607036813-1000: [TextPad8] -> {5A9E21A2-851A-4BEB-B16F-DBBE7D648AF9} =>  -> Brak pliku

==================== Zaplanowane zadania (filtrowane) =============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {0BCF19B4-8037-4E62-9EC6-8285489B9F9F} - System32\Tasks\WpsUpdateTask_Emanuel => C:\Users\Emanuel\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\wtoolex\wpsupdate.exe [2018-12-07] (Zhuhai Kingsoft Office Software Co.,Ltd)
Task: {0BF1BA2B-5A86-4E20-86F9-432B66074668} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-12-06] (NVIDIA Corporation)
Task: {1B839DCE-31FD-4F05-B133-FDB6E0035FF9} - System32\Tasks\WpsExternal_Emanuel_20181130140723 => C:\Users\Emanuel\AppData\Local\Kingsoft\WPS Office\ksolaunch.exe [2018-11-30] (Zhuhai Kingsoft Office Software Co.,Ltd)
Task: {1D5ABCBC-5F9E-488F-80C7-164995B0178C} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-12-06] (NVIDIA Corporation)
Task: {3412C061-C9F7-4287-BA0F-4AB07A37B4A4} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2018-12-06] (NVIDIA Corporation)
Task: {3A23CE01-7B59-4056-9111-C098640819AC} - System32\Tasks\update-S-1-5-21-652811554-794021937-3607036813-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: <Company name>)
Task: {408181EC-E417-4E06-95C6-54B9A7BAF600} - System32\Tasks\AdobeGCInvoker-1.0-Emanuel-PC-Emanuel => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-09-10] (Adobe Systems, Incorporated)
Task: {491F3922-63B0-4A85-A691-3D43A6083402} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-12-06] (NVIDIA Corporation)
Task: {58A0EB3B-F7EE-4B6B-B384-2C685F422F28} - System32\Tasks\HPLJCustParticipation => C:\Program Files (x86)\HP\HPLJUT\HPLJUTSCH.exe [2010-09-22] (Hewlett Packard)
Task: {66592BF5-D151-47B4-AE5F-B9FFAAE05330} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2018-12-06] (NVIDIA Corporation)
Task: {6E7FDE48-EFEF-4621-92CC-75CE08E04757} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2017-09-20] (Intel(R) Corporation)
Task: {728AA929-E444-4EF9-85B3-0F759251CDEA} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-12-06] (NVIDIA Corporation)
Task: {78AEF8F1-0A0D-4750-B666-07F5A073502B} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2018-12-06] (NVIDIA Corporation)
Task: {86A8C328-D14D-4B22-B76B-46E24648D428} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-12-10] (Piriform Ltd)
Task: {8B467A06-90D3-4A8C-AACC-4727BC4BA52E} - System32\Tasks\AdobeAAMUpdater-1.0-Emanuel-PC-Emanuel => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2018-04-10] (Adobe Systems Incorporated)
Task: {9CA0E388-E27F-48B6-B4E9-4D5089B91D28} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-12-10] (Piriform Software Ltd)
Task: {A2E646D2-F011-4924-9567-12EAF985CCA4} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-12-06] (NVIDIA Corporation)
Task: {A99F4C69-B7F7-41B5-AC1C-5A07A4B3F065} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-12-06] (NVIDIA Corporation)
Task: {B51D9E26-0EBD-47CC-8A4A-652B6C98C03E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-13] (Adobe Systems Incorporated)
Task: {CD08E48B-39A9-4303-93F4-DA259302E480} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-12-06] (NVIDIA Corporation)
Task: {E9D17A3D-4BFD-487D-83C6-3DFE310A68C0} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-12-06] (NVIDIA Corporation)
Task: {F97E4D54-4BC0-4EC0-AABD-EC932B26BC21} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: <Company name>)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)

Task: C:\Windows\Tasks\update-S-1-5-21-652811554-794021937-3607036813-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Skróty & WMI ========================

(Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.)


==================== Załadowane moduły (filtrowane) ==============

2018-04-09 11:35 - 2012-11-28 11:18 - 000129024 ____N () C:\Windows\System32\HPCP1020LM.DLL
2018-02-10 00:12 - 2018-03-05 19:47 - 000614848 _____ () C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
2018-12-15 21:12 - 2018-12-06 11:13 - 001314672 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2018-12-25 03:54 - 2018-09-12 17:57 - 002785784 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2018-12-25 03:54 - 2018-09-12 11:35 - 002701064 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2018-12-15 21:12 - 2018-12-06 11:12 - 101251952 _____ () C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2018-12-15 21:12 - 2018-12-06 11:12 - 004619632 _____ () C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\libglesv2.dll
2018-12-15 21:12 - 2018-12-06 11:12 - 000108400 _____ () C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\libegl.dll
2018-11-28 16:46 - 2018-11-28 16:46 - 000061408 _____ () C:\Program Files\CCleaner\branding.dll
2018-04-27 12:50 - 2018-12-21 16:41 - 000021824 _____ () C:\Program Files (x86)\Origin\QtWebEngineProcess.exe
2018-08-30 10:48 - 2018-10-30 19:06 - 001057056 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\SDL2.dll
2018-08-30 10:48 - 2018-09-23 01:00 - 102804768 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libcef.dll
2018-08-30 10:48 - 2018-09-23 01:00 - 004866336 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libglesv2.dll
2018-08-30 10:48 - 2018-09-23 01:00 - 000116000 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libegl.dll
2018-12-12 13:03 - 2018-12-12 13:03 - 000180688 _____ () C:\Program Files (x86)\GlassWire\EasyHook32.dll
2018-12-15 21:12 - 2018-12-06 11:13 - 001032560 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2018-05-01 21:00 - 2018-04-30 22:01 - 001891672 _____ () C:\Users\Emanuel\AppData\Local\Discord\app-0.0.301\ffmpeg.dll
2018-04-17 19:56 - 2018-10-30 19:06 - 000879904 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2018-04-17 19:56 - 2016-09-01 02:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2018-04-17 19:56 - 2016-09-01 02:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2018-04-17 19:56 - 2016-09-01 02:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2018-04-17 19:56 - 2018-11-26 21:29 - 002649376 _____ () C:\Program Files (x86)\Steam\video.dll
2018-04-17 19:56 - 2017-12-20 02:43 - 005137696 _____ () C:\Program Files (x86)\Steam\libavcodec-57.dll
2018-04-17 19:56 - 2017-12-20 02:43 - 000847136 _____ () C:\Program Files (x86)\Steam\libavutil-55.dll
2018-04-17 19:56 - 2017-12-20 02:43 - 000695584 _____ () C:\Program Files (x86)\Steam\libavformat-57.dll
2018-04-17 19:56 - 2017-12-20 02:43 - 000351520 _____ () C:\Program Files (x86)\Steam\libavresample-3.dll
2018-04-17 19:56 - 2017-12-20 02:43 - 000783648 _____ () C:\Program Files (x86)\Steam\libswscale-4.dll
2018-04-17 19:56 - 2018-11-26 21:29 - 001028384 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2018-04-17 19:56 - 2016-07-04 23:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2018-05-01 21:00 - 2018-04-30 22:01 - 001937752 _____ () C:\Users\Emanuel\AppData\Local\Discord\app-0.0.301\libglesv2.dll
2018-05-01 21:00 - 2018-04-30 22:01 - 000095576 _____ () C:\Users\Emanuel\AppData\Local\Discord\app-0.0.301\libegl.dll
2018-05-02 06:42 - 2018-12-19 15:49 - 011328856 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_voice\discord_voice.node
2018-05-02 06:42 - 2018-11-16 16:12 - 001639256 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_utils\discord_utils.node
2018-05-02 06:42 - 2018-05-02 06:42 - 000512856 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_erlpack\discord_erlpack.node
2018-05-02 06:42 - 2018-12-19 15:49 - 001658712 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_game_utils\discord_game_utils.node
2018-10-01 15:24 - 2018-10-10 16:13 - 009621848 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_cloudsync\discord_cloudsync.node
2018-05-02 06:42 - 2018-05-02 06:42 - 002722648 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_rpc\discord_rpc.node
2018-05-02 06:42 - 2018-11-27 15:48 - 001718104 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_overlay2\discord_overlay2.node
2018-08-11 08:29 - 2018-12-13 13:08 - 001261400 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_modules\discord_modules.node
2018-08-11 08:29 - 2018-12-11 15:29 - 021991256 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_dispatch\discord_dispatch.node
2018-05-02 06:43 - 2018-05-02 06:43 - 002760536 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_contact_import\discord_contact_import.node
2018-05-02 06:43 - 2018-05-02 06:43 - 001249112 _____ () \\?\C:\Users\Emanuel\AppData\Roaming\discord\0.0.301\modules\discord_vigilante\discord_vigilante.node
2017-09-25 12:28 - 2017-09-25 12:28 - 001244304 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.)

AlternateDataStreams: C:\Users\Emanuel\AppData\Local\Temp:$DATA​ [16]

==================== Tryb awaryjny (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Powiązania plików (filtrowane) ===============

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.)


==================== Internet Explorer - Witryny zaufane i z ograniczeniami ===============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.)


==================== Hosts - zawartość: ===============================

(Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)

2009-07-14 03:34 - 2018-12-25 03:29 - 000000027 _____ C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost

==================== Inne obszary ============================

(Obecnie brak automatycznej naprawy dla tej sekcji.)

HKU\S-1-5-21-652811554-794021937-3607036813-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Emanuel\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.8.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Zapora systemu Windows [funkcja włączona]

==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==

Załączenie wejścia w fixlist spowoduje jego usunięcie.

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeUpdateService => 2
MSCONFIG\Services: AGMService => 2
MSCONFIG\Services: AGSService => 2
MSCONFIG\Services: Disc Soft Lite Bus Service => 3
MSCONFIG\Services: EasyAntiCheat => 3
MSCONFIG\Services: NGS => 3
MSCONFIG\Services: Origin Client Service => 3
MSCONFIG\Services: Origin Web Helper Service => 2
MSCONFIG\Services: PnkBstrA => 2
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeGCInvoker-1.0 => "C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe"
MSCONFIG\startupreg: Aimersoft Helper Compact.exe => C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe
MSCONFIG\startupreg: DAEMON Tools Lite Automount => "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
MSCONFIG\startupreg: EADM => "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart

==================== Reguły Zapory systemu Windows (filtrowane) ===============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe (Microsoft Corporation)
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe (Microsoft Corporation)
FirewallRules: [{6D225F32-790A-4A7E-BE14-F939C5F32DF9}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (Disc Soft Ltd)
FirewallRules: [TCP Query User{E65B68AD-1C3E-4063-8F40-B059D360B76D}D:\nekopara vol.3\nekoparavol3.exe] => (Allow) D:\nekopara vol.3\nekoparavol3.exe (Ares inc.)
FirewallRules: [UDP Query User{A374CECC-49F3-4437-8FDC-5D2F7F16ABDC}D:\nekopara vol.3\nekoparavol3.exe] => (Allow) D:\nekopara vol.3\nekoparavol3.exe (Ares inc.)
FirewallRules: [TCP Query User{2F7AE020-85E8-4F2B-A6B3-BC34C2D391AA}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe ()
FirewallRules: [UDP Query User{C742BB9C-2447-4154-92F2-D3FEA27ECD90}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe ()
FirewallRules: [{DA3C33E8-51AF-4757-BED1-7BF547E8ADDF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
FirewallRules: [{D6588AE5-B05E-493C-9C73-F118208A5856}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
FirewallRules: [{466C8708-C031-4638-B758-EA73833335FC}] => (Allow) LPort=443
FirewallRules: [{7F9FCB56-0CA8-4FEA-8765-0FB957388585}] => (Allow) LPort=8080
FirewallRules: [{5F03E482-C2DC-418E-84AF-B9B39268533B}] => (Allow) LPort=3659
FirewallRules: [{3F5772EA-6DF0-420E-A94A-8972B010704D}] => (Allow) LPort=42127
FirewallRules: [{FF2FF07E-EAC4-43D9-83D3-909FEF786F1C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe ()
FirewallRules: [{D8B8A23E-E284-4E38-BE81-8B9C858631BF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe ()
FirewallRules: [{4B9AE092-DD2F-4D0E-B09E-90444660CCE0}] => (Allow) C:\Program Files (x86)\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe (SQUARE ENIX CO., LTD.)
FirewallRules: [{2D61D85D-939B-49DE-A60B-EBD2776666DF}] => (Allow) C:\Program Files (x86)\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe (SQUARE ENIX CO., LTD.)
FirewallRules: [{D666516E-69C1-4DE3-A000-7B3ED6BEB4B0}] => (Allow) C:\Program Files (x86)\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe (SQUARE ENIX CO., LTD.)
FirewallRules: [{D3C9BBEB-BB84-473F-A0C4-F37C6BBD7C73}] => (Allow) C:\Program Files (x86)\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe (SQUARE ENIX CO., LTD.)
FirewallRules: [{CEB9D1DA-AD60-4AC7-B159-EF6E4B91CD43}] => (Allow) D:\Program Files\Nox\bin\Nox.exe (Duodian Technology Co. Ltd.)
FirewallRules: [{AA24C518-55C6-4439-8A44-4B346CDFCF7C}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe (BigNox Corporation)
FirewallRules: [TCP Query User{C552CE07-F9F7-4649-8C9F-13C1F9324183}D:\never\steamapps\common\cryptic studios\neverwinter\live\x64\gameclient.exe] => (Allow) D:\never\steamapps\common\cryptic studios\neverwinter\live\x64\gameclient.exe ()
FirewallRules: [UDP Query User{D22CE93B-FD14-4D4C-95CD-0812D2FF2DCD}D:\never\steamapps\common\cryptic studios\neverwinter\live\x64\gameclient.exe] => (Allow) D:\never\steamapps\common\cryptic studios\neverwinter\live\x64\gameclient.exe ()
FirewallRules: [{AB6D55F1-5697-41B6-8D29-6DF92102FD66}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corporation)
FirewallRules: [{54D4CC02-2A8C-42E8-8E4A-E124C01FE4D7}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corporation)
FirewallRules: [{59BC4392-21DE-4148-A3B7-43B0E858F98C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe (NVIDIA Corporation)
FirewallRules: [{29F18EDE-5C47-46BC-BEE9-DC68FE45E320}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe (NVIDIA Corporation)
FirewallRules: [{3694AB53-08A8-423E-991C-A5D0DBA640D6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation)
FirewallRules: [{4C594DC4-B90D-4A65-AF34-F69ABCE14BD1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation)
FirewallRules: [{66E5F0A1-28FD-4533-BA51-C71705AAB184}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe ()
FirewallRules: [{B35C124B-BCAB-4ED3-B567-4818A13A8FB1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe ()
FirewallRules: [TCP Query User{EC17FEC2-B8FD-4C6B-9B6F-68E0E6DB20A8}C:\users\emanuel\desktop\anydesk.exe] => (Allow) C:\users\emanuel\desktop\anydesk.exe ()
FirewallRules: [UDP Query User{FE2F705C-2723-434A-8AB1-E4B4AE145014}C:\users\emanuel\desktop\anydesk.exe] => (Allow) C:\users\emanuel\desktop\anydesk.exe ()
FirewallRules: [TCP Query User{19C5B75F-989A-4551-AC9A-1B3781F2CEBE}C:\program files (x86)\neverwinter_pl\neverwinter\live\x64\gameclient.exe] => (Allow) C:\program files (x86)\neverwinter_pl\neverwinter\live\x64\gameclient.exe ()
FirewallRules: [UDP Query User{2BB8DEEF-A6EB-4C4A-A725-D581AADAC0AE}C:\program files (x86)\neverwinter_pl\neverwinter\live\x64\gameclient.exe] => (Allow) C:\program files (x86)\neverwinter_pl\neverwinter\live\x64\gameclient.exe ()
FirewallRules: [TCP Query User{C5327547-BD42-48DD-93F8-7C0E0CF3FD5A}D:\league of legends\rads\projects\league_client\releases\0.0.0.170\deploy\leagueclient.exe] => (Allow) D:\league of legends\rads\projects\league_client\releases\0.0.0.170\deploy\leagueclient.exe ()
FirewallRules: [UDP Query User{6750FFFC-776C-4E0B-8222-F8E83B590450}D:\league of legends\rads\projects\league_client\releases\0.0.0.170\deploy\leagueclient.exe] => (Allow) D:\league of legends\rads\projects\league_client\releases\0.0.0.170\deploy\leagueclient.exe ()
FirewallRules: [{E43CBA2B-FFD9-4712-9A02-3F3A0378D87E}] => (Allow) D:\AeriaGames\Aura Kingdom\game.bin (X-LEGEND Entertaimment)
FirewallRules: [{F6D8C7DE-D018-4601-AEF2-CF4354CFEE69}] => (Allow) D:\AeriaGames\Aura Kingdom\game.bin (X-LEGEND Entertaimment)
FirewallRules: [{E9F8EE87-F870-4ED7-89F9-1CAD4EF2B5ED}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe ()
FirewallRules: [{E039A1C8-E524-4C59-B382-EF9CA2EA59A8}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe ()
FirewallRules: [{31EB318F-E94C-4D9A-BA86-654A0E76EF1E}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe ()
FirewallRules: [{E65998C0-0020-474F-A2B5-3F6426897766}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe ()
FirewallRules: [{5420F268-E4D6-4BA4-976F-941B67B9BCC1}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe (EA Digital Illusions CE AB)
FirewallRules: [{D1CF5680-7DF0-495F-BE85-5D162180F254}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe (EA Digital Illusions CE AB)
FirewallRules: [TCP Query User{1A9C882C-738C-4BD8-BC9B-040E25A4F1BB}D:\destiny 2\destiny2.exe] => (Allow) D:\destiny 2\destiny2.exe (Bungie)
FirewallRules: [UDP Query User{449E31AE-43B3-48C3-95A2-F64A16F153F1}D:\destiny 2\destiny2.exe] => (Allow) D:\destiny 2\destiny2.exe (Bungie)
FirewallRules: [TCP Query User{90C07075-8B3C-4B22-8FAD-5639B34B40B2}D:\destiny 2\destiny2.exe] => (Allow) D:\destiny 2\destiny2.exe (Bungie)
FirewallRules: [UDP Query User{52A9EA07-85D1-48E1-9D3C-1373CC05D2DA}D:\destiny 2\destiny2.exe] => (Allow) D:\destiny 2\destiny2.exe (Bungie)
FirewallRules: [{4BC91B91-9B0F-4F45-81F5-0BCA8177AFFC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TreeOfSavior\release\patch\tos.exe ()
FirewallRules: [{4254C1D0-37EF-4A19-B659-CB6F15E1BE55}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TreeOfSavior\release\patch\tos.exe ()
FirewallRules: [TCP Query User{5761B0A5-52CD-41A7-8F14-09ACB9BB7137}D:\league of legends\rads\projects\league_client\releases\0.0.0.172\deploy\leagueclient.exe] => (Allow) D:\league of legends\rads\projects\league_client\releases\0.0.0.172\deploy\leagueclient.exe ()
FirewallRules: [UDP Query User{AB35B224-6B5A-4A53-8187-64649EC09B23}D:\league of legends\rads\projects\league_client\releases\0.0.0.172\deploy\leagueclient.exe] => (Allow) D:\league of legends\rads\projects\league_client\releases\0.0.0.172\deploy\leagueclient.exe ()
FirewallRules: [{A640A2BC-9D47-402D-80E6-730A40A60087}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
FirewallRules: [{FC62113C-301A-452A-A0EF-3C0C745832FE}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
FirewallRules: [TCP Query User{C29A9613-ADE9-4A81-8232-9CCC5FD3C125}D:\overwatch\overwatch.exe] => (Allow) D:\overwatch\overwatch.exe (Blizzard Entertainment)
FirewallRules: [UDP Query User{B421BFE3-556B-463C-871A-CD91B6F47DB5}D:\overwatch\overwatch.exe] => (Allow) D:\overwatch\overwatch.exe (Blizzard Entertainment)
FirewallRules: [{C928DF99-819D-4705-A5C5-C9CB3EDE718E}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Technologies S.A.)
FirewallRules: [{7A5CF14A-F8E7-4B77-86CE-3B21C0C30DAE}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Technologies S.A.)
FirewallRules: [{7EAE7371-55AD-4ADC-AEF2-2F2D679AC255}] => (Allow) D:\Never\steamapps\common\Ring of Elysium\SLauncher.exe ()
FirewallRules: [{05980C4B-3ED5-4F74-8C7D-22009546502B}] => (Allow) D:\Never\steamapps\common\Ring of Elysium\SLauncher.exe ()
FirewallRules: [{913A5037-E2D8-4A28-9420-FA6C75F00EA2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TreeOfSavior\release\patch\tos.exe ()
FirewallRules: [{727D3DC0-C3EA-4636-9F93-B997B30C05D7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TreeOfSavior\release\patch\tos.exe ()
FirewallRules: [{62AAE69F-CA68-4E9B-8709-CE071A4E5B47}] => (Allow) C:\Users\Emanuel\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\wpscloudsvr.exe (Zhuhai Kingsoft Office Software Co.,Ltd)
FirewallRules: [{5F585BBD-3F00-4F79-8897-C64D5F68FC01}] => (Allow) D:\Never\steamapps\common\Spellbreak\Launch_Spellbreak.exe (EasyAntiCheat Ltd)
FirewallRules: [{D160892C-1282-45C7-811D-91AD6B05D387}] => (Allow) D:\Never\steamapps\common\Spellbreak\Launch_Spellbreak.exe (EasyAntiCheat Ltd)
FirewallRules: [{1C137E6C-BCF6-410C-BAF4-991BD2F59D2C}] => (Allow) C:\AeriaGames\EdenEternal\_Launcher.exe (X-LEGEND ENTERTAINMENT)
FirewallRules: [{2DCA7819-B7F7-44D7-A685-50358F1F486A}] => (Allow) C:\AeriaGames\EdenEternal\_Launcher.exe (X-LEGEND ENTERTAINMENT)
FirewallRules: [{E2D9247B-8AB7-4062-89D7-765B8DDE9BF8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation)
FirewallRules: [{B4926EFA-9EF2-4647-A212-CF7426B384FD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation)
FirewallRules: [{358CAC2A-419D-47D2-A5D0-E5BEB061C943}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation)
FirewallRules: [{009B4F38-557B-45F0-9D28-991AD5AA82DB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation)
FirewallRules: [{7208EA19-5171-4BAF-B23E-7E5AA4D8E509}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation)
FirewallRules: [{40CDF294-4DB3-431B-95E7-DB169F5EE3B5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation)
FirewallRules: [{B5AF7FF7-025D-40A4-9282-AD8C4B80BA85}] => (Allow) D:\AOC\Intrepid Studios Launcher.exe (Intrepid Studios)
FirewallRules: [{D030314B-5F7F-4A2D-81DF-3C8DBBE87E5C}] => (Allow) D:\AOC\resources\app.asar.unpacked\externals\patcher\Patcher.exe ()
FirewallRules: [{19E95F3A-D9AD-428D-8134-5D8EFCBE0BDD}] => (Allow) D:\AOC\updater.exe (Intrepid Studios, Inc.)
FirewallRules: [{9A2AF7E1-3842-450C-A50B-D99024E5EA06}] => (Allow) C:\Program Files (x86)\Intrepid Studios, Inc\Ashes of Creation Apocalypse\EasyAntiCheat\EasyAntiCheat_Setup.exe (EasyAntiCheat Ltd)
FirewallRules: [TCP Query User{68783AD8-415A-474C-9CC2-05CF2FC60DB9}C:\program files (x86)\intrepid studios, inc\ashes of creation apocalypse\apoc\binaries\win64\apoc-win64-shipping.exe] => (Allow) C:\program files (x86)\intrepid studios, inc\ashes of creation apocalypse\apoc\binaries\win64\apoc-win64-shipping.exe (Intrepid Studios, Inc.)
FirewallRules: [UDP Query User{9BEF28C5-26FE-4ABE-8DD7-53A02A73C1A0}C:\program files (x86)\intrepid studios, inc\ashes of creation apocalypse\apoc\binaries\win64\apoc-win64-shipping.exe] => (Allow) C:\program files (x86)\intrepid studios, inc\ashes of creation apocalypse\apoc\binaries\win64\apoc-win64-shipping.exe (Intrepid Studios, Inc.)
FirewallRules: [{3A4F765B-5A7D-46B0-94EA-30C9F8BBC83C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\HeroSiege\bin\Hero_Siege.exe (Panic Art Studios )
FirewallRules: [{DE3E6E19-D665-4EC2-8A17-DE71A5E431C6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\HeroSiege\bin\Hero_Siege.exe (Panic Art Studios )
FirewallRules: [{14CFFCA3-69E5-4654-9C7A-743043DA3441}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Ltd)
FirewallRules: [{7837B83D-6294-43C7-9060-D307EB6B1B6E}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Ltd)
FirewallRules: [{4CFAE90C-1D11-440F-B43C-9245E27031D0}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe (SecureMix LLC)
FirewallRules: [{7C677EB8-DFEE-4106-A60C-BF88833F3997}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe (SecureMix LLC)

==================== Punkty Przywracania systemu =========================

21-12-2018 15:00:17 Windows Update
22-12-2018 09:31:45 Installed Launcher
22-12-2018 09:35:49 Zainstalowany program DirectX
25-12-2018 03:18:50 ComboFix created restore point
25-12-2018 04:08:17 Removed Warframe
25-12-2018 18:31:02 Malwarebytes Anti-Rootkit Restore Point

==================== Wadliwe urządzenia w Menedżerze urządzeń =============

Name: Mysz Microsoft PS/2
Description: Mysz Microsoft PS/2
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Błędy w Dzienniku zdarzeń: =========================

Dziennik Aplikacja:
==================
Error: (12/25/2018 08:28:01 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (12/25/2018 08:27:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: HPLaserJetService.exe, wersja: 7.15.635.0, sygnatura czasowa: 0x4d39aa4e
Nazwa modułu powodującego błąd: hppccompio.DLL, wersja: 1.3.0.24, sygnatura czasowa: 0x4c9685d0
Kod wyjątku: 0xc0000417
Przesunięcie błędu: 0x000073bf
Identyfikator procesu powodującego błąd: 0x8bc
Godzina uruchomienia aplikacji powodującej błąd: 0x01d49c87cb1db9e1
Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
Ścieżka modułu powodującego błąd: C:\Windows\system32\hppccompio.DLL
Identyfikator raportu: 2849ce64-087b-11e9-bde0-4ccc6a5f92ff

Error: (12/25/2018 08:23:00 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (12/25/2018 08:22:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: HPLaserJetService.exe, wersja: 7.15.635.0, sygnatura czasowa: 0x4d39aa4e
Nazwa modułu powodującego błąd: hppccompio.DLL, wersja: 1.3.0.24, sygnatura czasowa: 0x4c9685d0
Kod wyjątku: 0xc0000417
Przesunięcie błędu: 0x000073bf
Identyfikator procesu powodującego błąd: 0x850
Godzina uruchomienia aplikacji powodującej błąd: 0x01d49c8708a33a21
Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
Ścieżka modułu powodującego błąd: C:\Windows\system32\hppccompio.DLL
Identyfikator raportu: 68e938d4-087a-11e9-b47d-4ccc6a5f92ff

Error: (12/25/2018 08:20:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: mbamservice.exe, wersja: 3.2.0.704, sygnatura czasowa: 0x5b9acf90
Nazwa modułu powodującego błąd: SelfProtectionSdk.dll, wersja: 3.0.0.360, sygnatura czasowa: 0x5b995ba2
Kod wyjątku: 0x40000015
Przesunięcie błędu: 0x000000000014e2bf
Identyfikator procesu powodującego błąd: 0x5d8
Godzina uruchomienia aplikacji powodującej błąd: 0x01d49c824c7e63a4
Ścieżka aplikacji powodującej błąd: C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
Ścieżka modułu powodującego błąd: C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
Identyfikator raportu: 2247d4ea-087a-11e9-9dcc-4ccc6a5f92ff

Error: (12/25/2018 07:48:26 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (12/25/2018 07:48:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: HPLaserJetService.exe, wersja: 7.15.635.0, sygnatura czasowa: 0x4d39aa4e
Nazwa modułu powodującego błąd: hppccompio.DLL, wersja: 1.3.0.24, sygnatura czasowa: 0x4c9685d0
Kod wyjątku: 0xc0000417
Przesunięcie błędu: 0x000073bf
Identyfikator procesu powodującego błąd: 0x5f8
Godzina uruchomienia aplikacji powodującej błąd: 0x01d49c8246cffb83
Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
Ścieżka modułu powodującego błąd: C:\Windows\system32\hppccompio.DLL
Identyfikator raportu: 9c751f26-0875-11e9-9dcc-4ccc6a5f92ff

Error: (12/25/2018 07:45:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: mbamservice.exe, wersja: 3.2.0.704, sygnatura czasowa: 0x5b9acf90
Nazwa modułu powodującego błąd: SelfProtectionSdk.dll, wersja: 3.0.0.360, sygnatura czasowa: 0x5b995ba2
Kod wyjątku: 0x40000015
Przesunięcie błędu: 0x000000000014e2bf
Identyfikator procesu powodującego błąd: 0xae8
Godzina uruchomienia aplikacji powodującej błąd: 0x01d49c3f67d4b162
Ścieżka aplikacji powodującej błąd: C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
Ścieżka modułu powodującego błąd: C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
Identyfikator raportu: 507cbe02-0875-11e9-b831-4ccc6a5f92ff


Dziennik System:
=============
Error: (12/25/2018 08:28:16 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa HP LaserJet Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.

Error: (12/25/2018 08:28:15 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Usługa Grupowanie sieci równorzędnej zależy od usługi Protokół rozpoznawania nazw równorzędnych, której nie można uruchomić z powodu następującego błędu: 
%%-2140993535

Error: (12/25/2018 08:28:15 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Usługa Protokół rozpoznawania nazw równorzędnych zakończyła działanie; wystąpił następujący błąd: 
%%-2140993535

Error: (12/25/2018 08:28:15 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Usługa Grupowanie sieci równorzędnej zależy od usługi Protokół rozpoznawania nazw równorzędnych, której nie można uruchomić z powodu następującego błędu: 
%%-2140993535

Error: (12/25/2018 08:28:15 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Usługa Protokół rozpoznawania nazw równorzędnych zakończyła działanie; wystąpił następujący błąd: 
%%-2140993535

Error: (12/25/2018 08:28:15 PM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: Chmura protokołu rozpoznawania nazw równorzędnych nie została uruchomiona, ponieważ tworzenie tożsamości domyślnej nie powiodło się; kod błędu: 0x80630801.

Error: (12/25/2018 08:28:15 PM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: Chmura protokołu rozpoznawania nazw równorzędnych nie została uruchomiona, ponieważ tworzenie tożsamości domyślnej nie powiodło się; kod błędu: 0x80630801.

Error: (12/25/2018 08:28:01 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Usługa Grupowanie sieci równorzędnej zależy od usługi Protokół rozpoznawania nazw równorzędnych, której nie można uruchomić z powodu następującego błędu: 
%%-2140993535


Windows Defender:
===================================
Date: 2018-05-23 10:49:05.413
Description: 
Podczas skanowania produktu Windows Defender wykryto program szpiegujący lub inne potencjalnie niechciane oprogramowanie.
Aby uzyskać więcej informacji, zobacz:
http://go.microsoft.com/fwlink/?linkid=37020&name=SoftwareBundler:Win32/Prepscram&threatid=226289
Nazwa:SoftwareBundler:Win32/Prepscram
Id.:226289
Ważność:Wysoki
Kategoria:Program instalujący niezamówione pakiety oprogramowania
Znaleziona ścieżka:file:C:\Program Files (x86)\Removewat 2.2.7\Setup activation.exe;process:pid:4476
Typ wykrycia:Konkretne
Źródło wykrycia:Ochrona w czasie rzeczywistym
Stan:Nieznane
Użytkownik:\
Nazwa procesu:

Date: 2018-07-04 16:38:27.956
Description: 
Produkt Windows Defender napotkał błąd podczas próby aktualizacji podpisów.
Nowa wersja podpisu:1.271.442.0
Poprzednia wersja podpisu:1.269.1075.0
Źródło aktualizacji:Użytkownik
Typ podpisu:Oprogramowanie antyszpiegowskie
Typ aktualizacji:Różnica
Użytkownik:ZARZĄDZANIE NT\SYSTEM
Bieżąca wersja aparatu:1.1.15000.2
Poprzednia wersja aparatu:1.1.14901.4
Kod błędu:0x80070666
Opis błędu:Inna wersja tego produktu jest już zainstalowana na tym komputerze. Nie można kontynuować instalowania tej wersji. Aby skonfigurować lub usunąć istniejącą wersję tego produktu, użyj aplikacji Dodaj/Usuń Programy z Panelu sterowania. 

Date: 2018-07-04 16:38:27.956
Description: 
Produkt Windows Defender napotkał błąd podczas próby aktualizacji aparatu.
Nowa wersja aparatu:1.1.15000.2
Poprzednia wersja aparatu:1.1.14901.4
Źródło aktualizacji:Użytkownik
Użytkownik:ZARZĄDZANIE NT\SYSTEM
Kod błędu:0x80070666
Opis błędu:Inna wersja tego produktu jest już zainstalowana na tym komputerze. Nie można kontynuować instalowania tej wersji. Aby skonfigurować lub usunąć istniejącą wersję tego produktu, użyj aplikacji Dodaj/Usuń Programy z Panelu sterowania. 

Date: 2018-04-09 11:54:46.055
Description: 
Produkt Windows Defender napotkał błąd podczas próby załadowania podpisów i podejmie próbę powrotu do znanego zestawu dobrych podpisów.
Podpisy objęte próbą:Bieżące
Kod błędu:0x80070003
Opis błędu:System nie może odnaleźć określonej ścieżki. 
Wersja podpisu:0.0.0.0
Wersja aparatu:0.0.0.0

CodeIntegrity:
===================================

Date: 2018-12-25 03:27:22.146
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-12-25 03:27:22.087
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-12-25 03:27:22.027
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-12-25 03:27:21.965
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-10-03 12:25:09.490
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-10-03 12:25:09.443
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-10-02 21:03:33.148
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-10-02 21:03:33.101
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Statystyki pamięci =========================== 

Procesor: Intel(R) Core(TM) i5-6500 CPU @ 3.20GHz
Procent pamięci w użyciu: 27%
Całkowita pamięć fizyczna: 16331.91 MB
Dostępna pamięć fizyczna: 11861.09 MB
Całkowita pamięć wirtualna: 32661.96 MB
Dostępna pamięć wirtualna: 27278.78 MB

==================== Dyski ================================

Drive c: () (Fixed) (Total:495.73 GB) (Free:141.12 GB) NTFS
Drive d: () (Fixed) (Total:1367.19 GB) (Free:589.76 GB) NTFS
Drive f: (Moje pliki) (CDROM) (Total:6.82 GB) (Free:0 GB) UDF

\\?\Volume{2ba033a4-3bdb-11e8-853e-806e6f6e6963}\ (Zastrzeżone przez system) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS

==================== MBR & Tablica partycji ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: 4654CCF2)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=495.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=1367.2 GB) - (Type=07 NTFS)

==================== Koniec  Addition.txt ============================