Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 30.01.2019 Uruchomiony przez w (03-02-2019 12:58:13) Uruchomiony z C:\Users\w\Downloads Windows 10 Home Wersja 1803 17134.472 (X64) (2018-07-09 01:32:09) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-2780740895-2156724078-2569186773-500 - Administrator - Disabled) Gość (S-1-5-21-2780740895-2156724078-2569186773-501 - Limited - Disabled) Konto domyślne (S-1-5-21-2780740895-2156724078-2569186773-503 - Limited - Disabled) w (S-1-5-21-2780740895-2156724078-2569186773-1001 - Administrator - Enabled) => C:\Users\w WDAGUtilityAccount (S-1-5-21-2780740895-2156724078-2569186773-504 - Limited - Disabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Avast Antivirus (Disabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Disabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) Adobe Flash Player 30 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 30.0.0.154 - Adobe Systems Incorporated) Aktualizacje NVIDIA 2.11.4.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 2.11.4.1 - NVIDIA Corporation) Hidden Aplikacja Blizzard (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Apple Application Support (32-bit) (HKLM-x32\...\{D2FE6376-E549-4F63-A2C5-CA24DA035DE4}) (Version: 5.6 - Apple Inc.) Apple Application Support (64-bit) (HKLM\...\{BB109E24-EE90-485B-A28B-ADDEFB40540B}) (Version: 5.6 - Apple Inc.) Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 19.1.2360 - AVAST Software) CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.5521 - CyberLink Corp.) Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment) Discord (HKU\S-1-5-21-2780740895-2156724078-2569186773-1001\...\Discord) (Version: 0.0.304 - Discord Inc.) Dolby Audio X2 Windows API SDK (HKLM\...\{6A478BF2-F67F-4ABC-A7F1-B6B5BA862371}) (Version: 0.6.3.44 - Dolby Laboratories, Inc.) Dolby Audio X2 Windows APP (HKLM\...\{7DA57EF8-9D20-4126-AF15-D0CC97D0C017}) (Version: 0.4.0.22 - Dolby Laboratories, Inc.) Epic Games Launcher (HKLM-x32\...\{CA4F7840-CC89-451D-8453-392F2EDAA605}) (Version: 1.1.70.0 - Epic Games, Inc.) GeekBuddy (HKLM\...\{6A078CE4-6E64-4145-B6D7-51C56836CD6D}) (Version: 4.27.177 - Comodo Security Solutions Inc) GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com) GOG.com Heroes of Might and Magic 3 (HKLM\...\{1d3c859c-1028-4822-b0a7-da4f7bbc18bc}.sdb) (Version: - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 71.0.3578.98 - Google Inc.) Google Drive (HKLM-x32\...\{A8DC81F2-D365-4248-892A-FA3B5951F731}) (Version: 2.34.9392.7803 - Google, Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment) Heroes of Might and Magic 3 Complete (HKLM-x32\...\GOGPACKHOMM3COMPLETE_is1) (Version: 2.0.0.16 - GOG.com) Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment) HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 6.0.3.2 - Hi-Rez Studios) Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios) HiSuite (HKLM-x32\...\Hi Suite) (Version: 8.0.1.302 - ) Instrukcje użytkownika (HKLM-x32\...\{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 4.0.0.1 - Lenovo) Hidden Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1162 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4271 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.6.0.1029 - Intel Corporation) Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{609B7E15-BE3A-4B81-BAEA-5E4B24BBB24F}) (Version: 18.1.1538.2273 - Intel Corporation) Intel® RealSense™ Depth Camera Manager Beta (x86): dptf_com (HKLM-x32\...\{C982EA5E-7331-11E5-ABE7-2C44FD873B55}) (Version: 2.2.0.52404 - Intel Corporation) Hidden Intel® RealSense™ Depth Camera Manager F200 Gold (x86): Intel® RealSense™ 3D camera IO module (HKLM-x32\...\{6C1D3280-7332-11E5-AD4E-2C44FD873B55}) (Version: 1.4.27.52404 - Intel Corporation) Hidden Intel® RealSense™ Depth Camera Manager F200 Gold (x86): Intel® RealSense™ Depth Camera Manager Service (HKLM-x32\...\{6C1D3280-7332-11E5-B485-2C44FD873B55}) (Version: 1.4.27.52404 - Intel Corporation) Hidden Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation) K-Lite Mega Codec Pack 13.2.4 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 13.2.4 - KLCP) Layers of Fear (HKLM\...\bGF5ZXJzb2ZmZWFy_is1) (Version: 1 - ) League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc) Lenovo Experience Improvement (HKLM\...\LenovoExperienceImprovement) (Version: 2.0.9.0 - Lenovo) Lenovo FusionEngine (HKLM-x32\...\Lenovo FusionEngine) (Version: 1.0.13.0 - Lenovo, Inc.) Lenovo OneKey Recovery (HKLM\...\{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.1.0.4706 - CyberLink Corp.) Hidden Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.1.0.4706 - CyberLink Corp.) Lenovo Photo Master (HKLM-x32\...\{BC94C56A-3649-420C-8756-2ADEBE399D33}) (Version: 2.5.5720.01 - CyberLink Corp.) Lenovo PowerDVD12 (HKLM-x32\...\{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.5328.55 - CyberLink Corp.) Hidden Lenovo PowerDVD12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.5328.55 - CyberLink Corp.) Lenovo Product Demo (HKLM-x32\...\{DEF9172A-9D54-450B-9202-E121CE85BD08}) (Version: 1.0.3 - Lenovo) Lenovo QuickOptimizer (HKLM\...\{8D2C871B-1B9F-45AC-9C43-2BB18089CDFA}) (Version: 1.0.019.00 - Lenovo) Lenovo Solution Center (HKLM\...\{A5591EC4-8AD6-48EE-9F8D-FACFA8BA4E35}) (Version: 3.0.003.00 - Lenovo) Malwarebytes (wersja 3.4.4.2398) (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.4.4.2398 - Malwarebytes) McAfee True Key (HKLM\...\TrueKey) (Version: 5.1.230.7 - McAfee, LLC) MegaTibia-ClientNEW version 8.60 (HKLM-x32\...\{3D4597E5-AF17-4689-AD56-40866210A343}_is1) (Version: 8.60 - MegaTibia) Menedżer kamery z technologią wykrywania głębi Intel® RealSense™ F200 (HKLM-x32\...\ARP_for_prd_dcm_runtime_1.4.27.52404) (Version: 1.4.27.52404 - Intel Corporation) Metric Collection SDK (HKLM-x32\...\{DDAA788F-52E6-44EA-ADB8-92837B11BF26}) (Version: 1.1.0012.00 - Lenovo Group Limited) Hidden Metric Collection SDK 35 (HKLM-x32\...\{C2B5B5B0-2545-4E94-B4BA-548D4BF0B196}) (Version: 1.2.0010.00 - Lenovo Group Limited) Hidden Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{929CE49F-1CA7-4CF3-A9A1-6D757443C63F}) (Version: 1.2.0241 - Microsoft Corporation) Microsoft Office 365 - pl-pl (HKLM\...\O365HomePremRetail - pl-pl) (Version: 16.0.11231.20130 - Microsoft Corporation) Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-2780740895-2156724078-2569186773-1001\...\OneDriveSetup.exe) (Version: 18.240.1202.0004 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x86) - 14.14.26429 (HKLM-x32\...\{2019b6a0-8533-4a04-ac0e-b2c10bdb9841}) (Version: 14.14.26429.4 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation) Movavi Slideshow Maker 2 (HKLM-x32\...\Movavi Slideshow Maker 2) (Version: 2.1.0 - Movavi) Naria2 (wersja 1.2) (HKLM-x32\...\{88FCA120-376E-4B30-AC2D-506A4D605A99}_is1) (Version: 1.2 - ARTAL Entertainment) NVIDIA GeForce Experience 2.11.4.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.1 - NVIDIA Corporation) NVIDIA Oprogramowanie systemu PhysX 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) O2Micro Flash Memory Card Windows Driver (HKLM\...\{A6668863-B0A3-4812-AAF2-E47749ECFE0E}) (Version: 3.3.00.145 - O2Micro International LTD.) Hidden O2Micro Flash Memory Card Windows Driver (HKLM-x32\...\InstallShield_{A6668863-B0A3-4812-AAF2-E47749ECFE0E}) (Version: 3.3.00.145 - O2Micro International LTD.) Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.11231.20130 - Microsoft Corporation) Hidden Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.11231.20130 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.11231.20130 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0415-0000-0000000FF1CE}) (Version: 16.0.11231.20130 - Microsoft Corporation) Hidden OpenAL (HKLM-x32\...\OpenAL) (Version: - ) OpenOffice 4.1.5 (HKLM-x32\...\{7076105B-6FE8-464A-AC28-FFBB2686B68F}) (Version: 4.15.9789 - Apache Software Foundation) Oprogramowanie Intel® PROSet/Wireless (HKLM-x32\...\{4c8b7360-62a2-4339-b745-41323055d0bb}) (Version: 18.20.0 - Intel Corporation) Oprogramowanie mikroukładu Intel® (HKLM-x32\...\{c7f54569-0018-439c-809a-48046a4d4ebc}) (Version: 10.1.1.9 - Intel(R) Corporation) Hidden Origin (HKLM-x32\...\Origin) (Version: 10.5.34.21025 - Electronic Arts, Inc.) Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment) Panel sterowania NVIDIA 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 376.54 - NVIDIA Corporation) Hidden PhotoScape (HKLM-x32\...\PhotoScape) (Version: - ) Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.259 - Google, Inc.) PLAY ONLINE (HKLM-x32\...\PLAY ONLINE) (Version: 21.005.11.17.264 - Huawei Technologies Co.,Ltd) REACHit (HKLM-x32\...\{4532E4C5-C84D-4040-A044-ECFCC5C6995B}) (Version: 2.5.005.12 - Lenovo) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.1.505.2015 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7780 - Realtek Semiconductor Corp.) SHAREit (HKLM-x32\...\SHAREit_is1) (Version: 2.5.5.0 - Lenovo) SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0280 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.11.4.1 - NVIDIA Corporation) Hidden Spotify (HKU\S-1-5-21-2780740895-2156724078-2569186773-1001\...\Spotify) (Version: 1.0.99.250.g936eab8d - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) StepMania 5 (HKLM-x32\...\StepMania 5) (Version: 5.0.12 - StepMania) TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.1.6 - TeamSpeak Systems GmbH) The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts) The Sims™ 3 Miejskie Życie Akcesoria (HKLM-x32\...\{7B11296A-F894-449C-8DF6-6AAAA7D4D118}) (Version: 9.0.73 - Electronic Arts) The Sims™ 3 Po zmroku (HKLM-x32\...\{45057FCE-5784-48BE-8176-D9D00AF56C3C}) (Version: 6.0.81 - Electronic Arts) The Sims™ 3 Studenckie życie (HKLM-x32\...\{F26DE8EF-F2CF-40DC-8CDA-CC0D82D11B36}) (Version: 18.0.126 - Electronic Arts) The Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.48.94.1020 - Electronic Arts Inc.) The Witcher 3 - Wild Hunt - Game of the Year Edition (HKLM-x32\...\1495134320_is1) (Version: 1.30.0.0 - GOG.com) Tibia (HKU\S-1-5-21-2780740895-2156724078-2569186773-1001\...\Tibia) (Version: - CipSoft GmbH) Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{F814D094-197F-43C8-87FA-3210BB780486}) (Version: 2.53.0.0 - Microsoft Corporation) User Manuals (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 4.0.0.1 - Lenovo) Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden Web Companion (HKLM-x32\...\{0dc96382-04f9-4bcb-97e1-ba49f679dd11}) (Version: 4.2.1846.3481 - Lavasoft) WinRAR 5.50 (32-bitowy) (HKLM-x32\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-2780740895-2156724078-2569186773-1001_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-2780740895-2156724078-2569186773-1001_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-2780740895-2156724078-2569186773-1001_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-2780740895-2156724078-2569186773-1001_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-2780740895-2156724078-2569186773-1001_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-2780740895-2156724078-2569186773-1001_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation) CustomCLSID: HKU\S-1-5-21-2780740895-2156724078-2569186773-1001_Classes\CLSID\{cece6816-6107-4dc7-bdbc-20cd5ae1ffed}\localserver32 -> C:\ProgramData\Lenovo\ImController\Plugins\LenovoAppPromotionPlugin\x64\DesktopToastsHelper.exe => Brak pliku ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2018-04-23] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2018-04-23] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2018-04-23] (Google) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2018-12-18] (AVAST Software) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2018-12-18] (AVAST Software) ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2018-12-18] (AVAST Software) ContextMenuHandlers1: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2015-07-21] (Cyberlink) ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2018-04-23] (Google) ContextMenuHandlers1: [SHAREit.FileContextMenuExt] -> {430BD134-576D-4E75-87CD-0F5C6221A82B} => C:\Program Files (x86)\Lenovo\SHAREit\ShellEx\ShellExt64.dll [2015-07-12] (Lenovo) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-09-13] (Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-09-13] (Alexander Roshal) ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2015-07-21] (Cyberlink) ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2018-12-18] (AVAST Software) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-03-03] (Malwarebytes) ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2018-04-23] (Google) ContextMenuHandlers4: [SHAREit.FileContextMenuExt] -> {430BD134-576D-4E75-87CD-0F5C6221A82B} => C:\Program Files (x86)\Lenovo\SHAREit\ShellEx\ShellExt64.dll [2015-07-12] (Lenovo) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Brak pliku ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_1a33d2f73651d989\igfxDTCM.dll [2018-05-07] (Intel Corporation) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-12-29] (NVIDIA Corporation) ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2018-12-18] (AVAST Software) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-03-03] (Malwarebytes) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-09-13] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-09-13] (Alexander Roshal) ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {078EA210-A4A8-4C35-8D4E-A98E723BBEFD} - System32\Tasks\S-1-5-21-2780740895-2156724078-2569186773-1001\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2018-12-08] (Microsoft Corporation) Task: {100E4423-6BDE-4D50-8887-7B70F1863903} - System32\Tasks\Lenovo\BatteryGauge => C:\Program Files\lenovo\BatteryGauge\BatteryGaugeIcon.exe Task: {19FDD663-0147-47D0-892A-379A3D7D8CDF} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2019-02-03] (Microsoft Corporation) Task: {1C4FDC64-EF29-4483-81D8-7CD7D774F018} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2019-02-03] (Microsoft Corporation) Task: {227102D3-714D-461C-B09C-B69170DC0F57} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe Task: {235BF333-16B3-4D4C-85A4-6FF51A7FF805} - System32\Tasks\Lenovo\Experience Improvement => C:\Program Files\Lenovo\ExperienceImprovement\LenovoExperienceImprovement.exe [2016-07-06] (Lenovo) Task: {2469BF30-A4AA-42D8-9EB1-05C8C35CC0AF} - System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe Task: {2C836D67-3951-4633-9106-66065FC020C7} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [2019-02-03] (Microsoft Corporation) Task: {2D0836BF-41AB-4BA4-9707-A81E393CD0B3} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe Task: {31CD42C7-4047-4712-8EC2-927D1A6642C1} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2015-07-08] (Lenovo) Task: {40A096F8-886E-4ECB-8750-60B71F13AE02} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe Task: {44095607-4A7F-47A4-8CB2-5FC98D3441F2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-01] (Google Inc.) Task: {489F8A41-FBEF-44A9-ACCF-2A423FE5DAB1} - System32\Tasks\CyberLink\Photo Master Gadget startup => C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe [2016-09-22] (CyberLink Corp.) Task: {498D910A-9275-4A96-A7BA-308AC7E3CA37} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2019-01-28] (Microsoft Corporation) Task: {5220B238-E126-4D3B-BAA5-4AF67A6193BA} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\Windows\system32\rundll32.exe C:\Windows\system32\pla.dll,PlaHost "LSC Memory" "$(Arg0)" Task: {52298CBA-0390-480E-96BC-8A13E2D990CD} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2015-07-17] () Task: {552F62A9-A592-4AEE-9437-B690B98FCAC3} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2018-11-02] (AVAST Software) Task: {5D185C3A-76B7-4CE7-9F81-06AA8CBD92B7} - System32\Tasks\PDVDServ12 Task => C:\Program Files (x86)\Lenovo\PowerDVD12\PDVD12Serv.exe [2015-05-28] (CyberLink Corp.) Task: {6233C8A8-BCC3-47B2-93B1-662236D02E8F} - System32\Tasks\COMODO\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe Task: {63CFBB34-D82F-49D6-B713-90F0BA087674} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\b18c47c3-bf85-417e-87c7-1b79c680b253 => C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2018-11-16] (Lenovo Group Ltd.) Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] () Task: {6AB6E64F-4F2B-41C2-9742-D763E94FA4B9} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\7441189c-7baf-4dcb-bd9f-1eb00732dead => C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2018-11-16] (Lenovo Group Ltd.) Task: {6C212DA2-CEE8-4188-AC25-CB0FDCFF57BD} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe Task: {6C310D38-375C-447D-8FFF-BD15F0CBB351} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2015-07-17] (Lenovo) Task: {795E86B8-BDF0-4905-A2F1-698FC82ED798} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => %windir%\System32\reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32 Task: {7D226D4F-5540-485D-AAF5-980F75737A5A} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2015-07-17] (Lenovo) Task: {955265FF-07C3-4A07-A469-BF3D4472D0E3} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2019-01-09] (AVAST Software) Task: {B3CE3B18-0ADF-4397-8F81-188492F31C22} - System32\Tasks\Lenovo\REACHit Agent Startup => C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe [2016-05-18] (Lenovo) Task: {B5B3BCC6-EE0B-4DA7-91CE-FA2E6AAA770B} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2019-01-28] (Microsoft Corporation) Task: {B652FE6B-9942-4D39-BAD2-7690E1547614} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-01] (Google Inc.) Task: {B6D55A40-46FC-4BD4-9576-7819D0337304} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => %windir%\system32\sc.exe START ImControllerService Task: {BD106F88-9DED-4804-B52D-0A483669142F} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\3ed323d9-4d9a-4f83-b7b1-9c075cf5b25c => C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2018-11-16] (Lenovo Group Ltd.) Task: {BF55267D-07C6-4C93-9755-0280D17D2744} - System32\Tasks\Lenovo\REACHit Agent Update => C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe [2016-05-18] (Lenovo) Task: {C6EF6EEC-05B0-46BD-95F7-891946E98191} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2019-02-03] (Microsoft Corporation) Task: {D5934C22-B9CF-419B-B3CC-59BC5B651691} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-09-04] (Adobe Systems Incorporated) Task: {D81FA970-58EA-43C2-BF36-EE5CF07DED63} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [2018-11-16] (Lenovo Group Ltd.) Task: {DE633568-418B-4EBE-9614-400768B2637D} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_30_0_0_154_pepper.exe [2018-09-04] (Adobe Systems Incorporated) Task: {E01C1E0A-3781-4594-8F5F-32138801DE84} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [2019-02-03] (Microsoft Corporation) Task: {E1EB7D6E-0A02-4790-ACF4-66A5A9B18612} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\597d1499-ce52-4010-a971-6abcc6eb56fc => C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2018-11-16] (Lenovo Group Ltd.) Task: {E6FD9E0C-F146-4D1F-A934-F99B597D7BFA} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe Task: {FBF6E1B1-DAFC-47CC-AECD-A1F4437C291B} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2015-07-17] () Task: {FE7A49E7-EE32-4459-93EC-E6BCB5BFE24D} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2017-06-06] () (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) ==================== Skróty & WMI ======================== (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ==================== Załadowane moduły (filtrowane) ============== 2018-08-23 13:42 - 2018-08-23 13:42 - 000190784 _____ () C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe 2011-03-14 16:27 - 2011-03-14 16:27 - 000346976 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe 2016-08-22 21:14 - 2016-08-22 21:13 - 000246112 _____ () C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe 2016-01-27 04:04 - 2016-01-27 04:04 - 000163328 _____ () C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe 2016-10-03 17:48 - 2016-12-29 14:16 - 000134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2018-04-12 00:34 - 2018-04-12 00:34 - 000491744 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll 2015-06-16 02:53 - 2015-06-16 02:53 - 000628736 _____ () C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe 2015-09-28 14:09 - 2015-09-28 14:09 - 000016328 _____ () C:\Program Files\Lenovo\QuickOptimizer\ShowTaskbarIcon.dll 2015-09-28 14:09 - 2015-09-28 14:09 - 005067208 _____ () C:\Program Files\Lenovo\QuickOptimizer\DTPrismAssistInf.dll 2015-09-28 14:09 - 2015-09-28 14:09 - 000043976 _____ () C:\Program Files\Lenovo\QuickOptimizer\LNBPrismAssistInf.dll 2018-04-12 00:34 - 2018-04-12 00:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll 2018-12-13 08:24 - 2018-11-09 03:17 - 002759680 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll 2018-12-20 04:19 - 2018-12-14 07:50 - 002185728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2019-01-24 21:34 - 2019-01-24 21:35 - 028012544 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18112.14311.0_x64__8wekyb3d8bbwe\Video.UI.exe 2019-01-24 21:34 - 2019-01-24 21:35 - 000305152 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18112.14311.0_x64__8wekyb3d8bbwe\SharedUI.dll 2017-12-06 02:26 - 2017-12-06 02:26 - 000902656 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18112.14311.0_x64__8wekyb3d8bbwe\Microsoft.Membership.MeControl.UI.Xaml.dll 2018-11-29 22:29 - 2018-11-29 22:29 - 004202208 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18112.14311.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2019-01-24 21:34 - 2019-01-24 21:34 - 006187520 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18112.14311.0_x64__8wekyb3d8bbwe\EntCommon.dll 2019-01-24 21:34 - 2019-01-24 21:34 - 009388544 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18112.14311.0_x64__8wekyb3d8bbwe\EntPlat.dll 2018-11-14 07:58 - 2018-11-01 07:53 - 002068480 _____ () C:\Windows\ShellExperiences\PeopleCommonControls.dll 2018-04-12 00:34 - 2018-04-12 00:34 - 001465856 _____ () C:\Windows\ShellExperiences\PeopleBarFlyout.dll 2018-07-09 02:41 - 2018-07-09 02:41 - 003037184 _____ () C:\Windows\ShellExperiences\WindowsInternal.People.PeoplePicker.dll 2018-04-12 00:34 - 2018-04-12 00:34 - 000580608 _____ () C:\Windows\ShellExperiences\WindowsInternal.People.Relevance.QueryClient.dll 2018-10-04 10:03 - 2018-10-04 10:04 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.38.138.0_x64__kzf8qxf38zg5c\ImagePipelineNative.dll 2019-01-30 14:39 - 2019-01-30 14:39 - 000060416 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.38.138.0_x64__kzf8qxf38zg5c\ChakraBridge.dll 2019-01-30 14:39 - 2019-01-30 14:39 - 000019456 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.38.138.0_x64__kzf8qxf38zg5c\SkypeProxiesAndStubs.dll 2019-01-30 14:39 - 2019-01-30 14:39 - 011029504 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.38.138.0_x64__kzf8qxf38zg5c\LibWrapper.dll 2019-01-30 14:39 - 2019-01-30 14:39 - 002923520 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.38.138.0_x64__kzf8qxf38zg5c\skypert.dll 2019-01-30 14:39 - 2019-01-30 14:39 - 000688128 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.38.138.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll 2019-01-30 14:39 - 2019-01-30 14:39 - 000182272 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.38.138.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe 2018-12-07 00:29 - 2018-12-07 00:29 - 004217344 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1811.3241.0_x64__8wekyb3d8bbwe\Time.exe 2018-12-07 00:28 - 2018-12-07 00:28 - 004380232 _____ () C:\Program Files\WindowsApps\Microsoft.UI.Xaml.2.0_2.1810.18003.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-12-07 00:29 - 2018-12-07 00:29 - 000957440 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1811.3241.0_x64__8wekyb3d8bbwe\TimeControls.dll 2018-12-07 00:29 - 2018-12-07 00:29 - 000754688 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1811.3241.0_x64__8wekyb3d8bbwe\TimeBackground.dll 2019-02-01 18:18 - 2019-02-01 18:21 - 000481280 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18114.17710.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 2019-02-01 18:18 - 2019-02-01 18:21 - 080636416 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18114.17710.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll 2019-02-01 18:18 - 2019-02-01 18:20 - 003824640 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18114.17710.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll 2019-01-15 15:51 - 2019-01-15 15:51 - 000012288 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18114.17710.0_x64__8wekyb3d8bbwe\RenderingPlugin.dll 2017-12-10 01:04 - 2017-12-10 01:08 - 002523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18114.17710.0_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll 2019-02-01 18:18 - 2019-02-01 18:21 - 014225408 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18114.17710.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll 2019-02-01 18:18 - 2019-02-01 18:19 - 002871296 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18114.17710.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll 2018-08-31 00:16 - 2018-08-31 00:17 - 000973312 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18114.17710.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll 2018-07-27 09:37 - 2018-07-27 09:38 - 004584960 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18114.17710.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2016-08-22 21:14 - 2016-08-22 21:13 - 000011362 _____ () C:\ProgramData\PLAY ONLINE\OnlineUpdate\mingwm10.dll 2016-08-22 21:14 - 2016-08-22 21:13 - 000043008 _____ () C:\ProgramData\PLAY ONLINE\OnlineUpdate\libgcc_s_dw2-1.dll 2016-08-22 21:14 - 2016-08-22 21:13 - 002415104 _____ () C:\ProgramData\PLAY ONLINE\OnlineUpdate\QtCore4.dll 2016-08-22 21:14 - 2016-08-22 21:13 - 001148416 _____ () C:\ProgramData\PLAY ONLINE\OnlineUpdate\QtNetwork4.dll 2016-08-22 21:14 - 2016-08-22 21:13 - 000384512 _____ () C:\ProgramData\PLAY ONLINE\OnlineUpdate\QueryStrategy.dll 2016-08-22 21:14 - 2016-08-22 21:13 - 000398336 _____ () C:\ProgramData\PLAY ONLINE\OnlineUpdate\QtXml4.dll 2015-08-07 01:09 - 2015-08-07 01:09 - 001243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2015-12-18 05:09 - 2016-06-15 02:14 - 000020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2017-10-06 13:17 - 2016-09-22 07:24 - 000884504 _____ () C:\Program Files (x86)\Lenovo\Lenovo Photo Master\subsys\Kernel\Boomerang\UNO.dll 2017-10-06 13:16 - 2016-09-22 07:11 - 000081920 _____ () C:\Program Files (x86)\Lenovo\Lenovo Photo Master\koan\_ctypes.pyd 2018-03-19 20:17 - 2018-03-19 20:17 - 067126928 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2018-12-18 04:35 - 2018-12-18 04:35 - 000596696 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll 2015-12-18 04:13 - 2014-07-04 05:35 - 000627672 _____ () C:\Program Files (x86)\Lenovo\Power2Go\CLMediaLibrary.dll 2014-07-04 12:35 - 2014-07-04 12:35 - 000016856 _____ () C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvcPS.dll 2015-12-18 04:09 - 2015-02-12 16:02 - 000224696 _____ () C:\Program Files (x86)\Lenovo\CCSDK\SDKClient.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) AlternateDataStreams: C:\WINDOWS\avastSS.scr:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\NvContainerRecovery.bat:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\cdpreference.exe:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\CNC_ARC.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\CNC_ARI.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\CNC_ARL.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\CNC_ARO.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\CNHMCA6.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\CNMIUAR.DLL:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\D3DCompiler_33.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\D3DCompiler_34.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\D3DCompiler_35.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\D3DCompiler_36.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\D3DCompiler_37.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\D3DCompiler_38.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\D3DCompiler_39.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\D3DCompiler_42.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\D3DCompiler_43.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dcsx_42.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dcsx_43.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx10.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx10_33.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx10_34.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx10_35.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx10_36.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx10_37.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx10_38.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx10_39.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx10_42.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx11_42.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx9_24.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx9_25.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx9_26.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx9_27.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx9_28.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx9_29.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx9_30.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx9_31.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx9_32.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx9_35.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\d3dx9_36.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\D3DX9_37.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\D3DX9_38.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\D3DX9_39.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\D3DX9_40.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\D3DX9_41.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\D3DX9_42.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\nvapi64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\nvcompiler.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\nvcuda.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\nvcuvid.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\nvdispco6435474.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\nvdispco6436839.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\nvdispco6437654.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\nvdispgenco6435474.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\nvdispgenco6436839.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\nvdispgenco6437654.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\nvEncMFTH264.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\nvEncodeAPI64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\nvfatbinaryLoader.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\NvFBC64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\NvIFR64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\NvIFROpenGL.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\nvoglv64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\nvopencl.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\nvptxJitCompiler.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SynCOM.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SynTPAPI.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SynTPCo34-10.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SynTPCo54-05.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\wdfcoinstaller01007.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\WdfCoInstaller01011.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\x3daudio1_0.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\x3daudio1_1.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\X3DAudio1_2.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\X3DAudio1_3.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\X3DAudio1_4.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\X3DAudio1_5.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\X3DAudio1_6.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\X3DAudio1_7.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xactengine2_0.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xactengine2_1.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xactengine2_10.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xactengine2_2.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xactengine2_3.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xactengine2_4.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xactengine2_5.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xactengine2_6.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xactengine2_7.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xactengine2_8.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xactengine2_9.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xactengine3_0.dll:$CmdTcID [32] AlternateDataStreams: C:\WINDOWS\system32\xactengine3_1.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xactengine3_2.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xactengine3_3.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xactengine3_4.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xactengine3_5.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xactengine3_6.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xactengine3_7.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\XAPOFX1_0.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\XAPOFX1_1.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\XAPOFX1_2.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\XAPOFX1_3.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\XAPOFX1_4.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\XAPOFX1_5.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\XAudio2_0.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\XAudio2_1.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\XAudio2_2.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\XAudio2_3.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\XAudio2_4.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\XAudio2_5.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\XAudio2_6.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\XAudio2_7.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xinput1_1.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xinput1_2.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\xinput1_3.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\CNC_ARL.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\CNC_ARU.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\CNHMCA.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_33.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_34.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_35.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_36.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_37.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_38.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_39.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_40.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_41.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_42.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DCompiler_43.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dcsx_42.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dcsx_43.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_33.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_34.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_35.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_36.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_37.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_38.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_39.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_40.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_41.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx10_42.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx11_42.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_24.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_25.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_26.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_27.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_28.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_29.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_30.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_31.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_32.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_33.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_34.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_35.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_36.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_37.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_38.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_39.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_40.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_41.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_42.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvapi.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvcompiler.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvcuda.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvcuvid.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvEncMFTH264.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvEncodeAPI.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\NvFBC.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\NvIFR.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\NvIFROpenGL.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvoglv32.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvopencl.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\SynCom.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\x3daudio1_0.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\x3daudio1_1.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\X3DAudio1_2.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\X3DAudio1_3.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\X3DAudio1_4.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\X3DAudio1_5.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\X3DAudio1_6.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\X3DAudio1_7.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_0.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_1.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_10.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_2.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_3.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_4.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_5.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_6.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_7.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_8.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine2_9.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_0.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_1.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_2.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_3.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_4.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_5.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_6.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xactengine3_7.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\XAPOFX1_0.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\XAPOFX1_1.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\XAPOFX1_2.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\XAPOFX1_3.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\XAPOFX1_4.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\XAPOFX1_5.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_0.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_1.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_2.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_3.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_4.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_5.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_6.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\XAudio2_7.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xinput1_1.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xinput1_2.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xinput1_3.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\Drivers\CFRMD.sys:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\Drivers\ew_jubusenum.sys:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\Drivers\Smb_driver_AMDASF_Aux.sys:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\Drivers\Smb_driver_Intel_Aux.sys:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\Drivers\SynHidI2C_Aux.sys:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\Drivers\SynRMIHID_Aux.sys:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\Drivers\SynTP.sys:$CmdTcID [130] AlternateDataStreams: C:\ProgramData\cis2D60.exe:$CmdTcID [130] AlternateDataStreams: C:\ProgramData\Temp:BAC2F271 [135] AlternateDataStreams: C:\Users\Public\AppData:CSM [464] AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [474] AlternateDataStreams: C:\Users\w\AppData\Local\Temp:$DATA​ [16] ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) ==================== Powiązania plików (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) IE trusted site: HKU\S-1-5-21-2780740895-2156724078-2569186773-1001\...\localhost -> localhost IE trusted site: HKU\S-1-5-21-2780740895-2156724078-2569186773-1001\...\webcompanion.com -> hxxp://webcompanion.com ==================== Hosts - zawartość: ========================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2015-07-10 12:04 - 2019-01-10 19:29 - 000004540 _____ C:\WINDOWS\system32\drivers\etc\hosts 0.0.0.1 mssplus.mcafee.com 0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly 0.0.0.0 tracking.opencandy.com.s3.amazonaws.com 0.0.0.0 media.opencandy.com 0.0.0.0 cdn.opencandy.com 0.0.0.0 tracking.opencandy.com 0.0.0.0 api.opencandy.com 0.0.0.0 api.recommendedsw.com 0.0.0.0 rp.yefeneri2.com 0.0.0.0 os.yefeneri2.com 0.0.0.0 os2.yefeneri2.com 0.0.0.0 installer.betterinstaller.com 0.0.0.0 installer.filebulldog.com 0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net 0.0.0.0 inno.bisrv.com 0.0.0.0 nsis.bisrv.com 0.0.0.0 cdn.file2desktop.com 0.0.0.0 cdn.goateastcach.us 0.0.0.0 cdn.guttastatdk.us 0.0.0.0 cdn.inskinmedia.com 0.0.0.0 cdn.insta.oibundles2.com 0.0.0.0 cdn.insta.playbryte.com 0.0.0.0 cdn.llogetfastcach.us 0.0.0.0 cdn.montiera.com 0.0.0.0 cdn.msdwnld.com 0.0.0.0 cdn.mypcbackup.com 0.0.0.0 cdn.ppdownload.com 0.0.0.0 cdn.riceateastcach.us 0.0.0.0 cdn.shyapotato.us 0.0.0.0 cdn.solimba.com 2018-08-31 18:05 - 2019-01-05 15:37 - 000000445 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files (x86)\Lenovo\FusionEngine;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\ HKU\S-1-5-21-2780740895-2156724078-2569186773-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\w\Desktop\IMG_0220.JPG DNS Servers: 62.179.1.62 - 62.179.1.63 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == Załączenie wejścia w fixlist spowoduje jego usunięcie. HKLM\...\StartupApproved\Run32: => "Arc" HKU\S-1-5-21-2780740895-2156724078-2569186773-1001\...\StartupApproved\StartupFolder: => "Facebook Gameroom.lnk" HKU\S-1-5-21-2780740895-2156724078-2569186773-1001\...\StartupApproved\Run: => "GalaxyClient" HKU\S-1-5-21-2780740895-2156724078-2569186773-1001\...\StartupApproved\Run: => "AppleIEDAV" HKU\S-1-5-21-2780740895-2156724078-2569186773-1001\...\StartupApproved\Run: => "iCloudDrive" HKU\S-1-5-21-2780740895-2156724078-2569186773-1001\...\StartupApproved\Run: => "iCloudPhotos" HKU\S-1-5-21-2780740895-2156724078-2569186773-1001\...\StartupApproved\Run: => "iCloudServices" HKU\S-1-5-21-2780740895-2156724078-2569186773-1001\...\StartupApproved\Run: => "EADM" HKU\S-1-5-21-2780740895-2156724078-2569186773-1001\...\StartupApproved\Run: => "Spotify" HKU\S-1-5-21-2780740895-2156724078-2569186773-1001\...\StartupApproved\Run: => "Spotify Web Helper" HKU\S-1-5-21-2780740895-2156724078-2569186773-1001\...\StartupApproved\Run: => "Overwolf" HKU\S-1-5-21-2780740895-2156724078-2569186773-1001\...\StartupApproved\Run: => "Innkeeper" HKU\S-1-5-21-2780740895-2156724078-2569186773-1001\...\StartupApproved\Run: => "Battle.net" ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [{7D05243F-095B-4786-A1CA-3144CD12429C}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software) FirewallRules: [{29098557-004E-4623-944D-80426B0D3FD1}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software) FirewallRules: [UDP Query User{CF2B3C84-2B22-45C4-940A-24892C1D0AA9}E:\heroes of the storm\versions\base65943\heroesofthestorm_x64.exe] => (Allow) E:\heroes of the storm\versions\base65943\heroesofthestorm_x64.exe Brak pliku FirewallRules: [TCP Query User{780E332E-A843-43C2-B6C7-3F5B0D84A8EA}E:\heroes of the storm\versions\base65943\heroesofthestorm_x64.exe] => (Allow) E:\heroes of the storm\versions\base65943\heroesofthestorm_x64.exe Brak pliku FirewallRules: [{60208BFB-F726-4DD1-BABB-43FBDB01D0B9}] => (Allow) C:\Users\w\AppData\Roaming\uTorrent\uTorrent.exe Brak pliku FirewallRules: [{A29812FA-EDF9-43BA-9A5D-3995BCEA7A5D}] => (Allow) C:\Users\w\AppData\Roaming\uTorrent\uTorrent.exe Brak pliku FirewallRules: [UDP Query User{014FFA7C-0657-4781-9046-4411E8817ECB}E:\counter-strike 1.6 v43\hl.exe] => (Allow) E:\counter-strike 1.6 v43\hl.exe Brak pliku FirewallRules: [TCP Query User{79E87334-5BEC-4BCF-B56B-30ADA5BE346F}E:\counter-strike 1.6 v43\hl.exe] => (Allow) E:\counter-strike 1.6 v43\hl.exe Brak pliku FirewallRules: [UDP Query User{AA762F43-13CB-4ED0-9FB4-B9876357E658}E:\overwatch\overwatch\overwatch.exe] => (Block) E:\overwatch\overwatch\overwatch.exe (Blizzard Entertainment) FirewallRules: [TCP Query User{FE1D39F6-BCF5-4276-8910-933A2763898B}E:\overwatch\overwatch\overwatch.exe] => (Block) E:\overwatch\overwatch\overwatch.exe (Blizzard Entertainment) FirewallRules: [{4FDF527F-526E-4410-BE9F-9A6065F277ED}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe Brak pliku FirewallRules: [{CC781214-1B98-4C08-8B32-813D5C875A9D}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe Brak pliku FirewallRules: [{D44419E2-C894-456E-A071-3DF4EE8DEF30}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe Brak pliku FirewallRules: [{9091667C-E83D-43A2-A1F8-AFF152F55D5A}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe Brak pliku FirewallRules: [UDP Query User{8DD8EEFF-782F-4B10-82AE-0D3275D63CB5}E:\unrealtournament\engine\binaries\win64\ue4-win64-shipping.exe] => (Allow) E:\unrealtournament\engine\binaries\win64\ue4-win64-shipping.exe (Epic Games, Inc.) FirewallRules: [TCP Query User{C537D9A7-5AF8-4065-9C58-D533B283E789}E:\unrealtournament\engine\binaries\win64\ue4-win64-shipping.exe] => (Allow) E:\unrealtournament\engine\binaries\win64\ue4-win64-shipping.exe (Epic Games, Inc.) FirewallRules: [UDP Query User{F6532601-E6A4-48BD-BC22-A6A8A2E0D704}E:\heroes of the storm\versions\base63070\heroesofthestorm_x64.exe] => (Block) E:\heroes of the storm\versions\base63070\heroesofthestorm_x64.exe Brak pliku FirewallRules: [TCP Query User{6E63FDA1-94A7-44A4-B376-14365F104539}E:\heroes of the storm\versions\base63070\heroesofthestorm_x64.exe] => (Block) E:\heroes of the storm\versions\base63070\heroesofthestorm_x64.exe Brak pliku FirewallRules: [UDP Query User{B654EF8A-8601-4E43-9268-05BB3F7F72E5}C:\program files (x86)\blizzard app\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.exe (Blizzard Entertainment) FirewallRules: [TCP Query User{71377845-61CA-4A1C-A01B-E2DB7F03BE8A}C:\program files (x86)\blizzard app\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.exe (Blizzard Entertainment) FirewallRules: [UDP Query User{7592A8E4-3D0B-4BE0-9995-93B3075C2A0E}E:\steamlibrary\steamapps\common\h1z1\h1z1.exe] => (Allow) E:\steamlibrary\steamapps\common\h1z1\h1z1.exe (Daybreak Game Company) FirewallRules: [TCP Query User{0650AF70-8D2C-488B-BF42-2F82D64A23FD}E:\steamlibrary\steamapps\common\h1z1\h1z1.exe] => (Allow) E:\steamlibrary\steamapps\common\h1z1\h1z1.exe (Daybreak Game Company) FirewallRules: [{09A952D2-ED36-44AC-BC9A-DC1D6D06AE84}] => (Allow) E:\SteamLibrary\steamapps\common\H1Z1\H1Z1_BE.exe (BattlEye Innovations) FirewallRules: [{4E96D029-9FC3-46BF-8B84-E528FC81CB1A}] => (Allow) E:\SteamLibrary\steamapps\common\H1Z1\H1Z1_BE.exe (BattlEye Innovations) FirewallRules: [{ACE5BFDD-1833-48D8-9F5E-AF2BA97B66B8}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe (Electronic Arts Inc.) FirewallRules: [{AA87A5A2-1FF9-4B9A-877F-695D4911A442}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe (Electronic Arts Inc.) FirewallRules: [{674D0683-8AE6-4FDC-AC5D-F57BEC5E3B06}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe (Electronic Arts Inc.) FirewallRules: [{AA40C275-54AE-42B8-922A-6A7224D77910}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe (Electronic Arts Inc.) FirewallRules: [UDP Query User{01014AC6-FAE3-46F7-A766-F299C6994083}E:\heroes of the storm\versions\base62833\heroesofthestorm_x64.exe] => (Allow) E:\heroes of the storm\versions\base62833\heroesofthestorm_x64.exe Brak pliku FirewallRules: [TCP Query User{ACE7417F-AA23-4D0A-B774-D751F389510E}E:\heroes of the storm\versions\base62833\heroesofthestorm_x64.exe] => (Allow) E:\heroes of the storm\versions\base62833\heroesofthestorm_x64.exe Brak pliku FirewallRules: [UDP Query User{0EAC8993-2A4A-4F79-AFAB-8201A59DD1C1}E:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) E:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games, Inc.) FirewallRules: [TCP Query User{8467C121-A4D8-4DC7-AC39-01534E56E507}E:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) E:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games, Inc.) FirewallRules: [UDP Query User{379279AB-0B20-4387-95DB-516938F2D505}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games, Inc.) FirewallRules: [TCP Query User{7A369AC4-7A67-4D1B-B1B6-0AFECC6AE9AE}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games, Inc.) FirewallRules: [UDP Query User{E803AD6A-7667-42D1-BC89-750D325D5AF4}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games, Inc.) FirewallRules: [TCP Query User{0D513BA4-FE11-4A9D-96A1-A9F8222499F6}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games, Inc.) FirewallRules: [UDP Query User{3F5C53CF-4D6B-49C4-AE6B-0DE8182654C6}E:\heroes of the storm\versions\base62212\heroesofthestorm_x64.exe] => (Block) E:\heroes of the storm\versions\base62212\heroesofthestorm_x64.exe Brak pliku FirewallRules: [TCP Query User{028B0786-6FF4-4AB9-84C1-B3518081F643}E:\heroes of the storm\versions\base62212\heroesofthestorm_x64.exe] => (Block) E:\heroes of the storm\versions\base62212\heroesofthestorm_x64.exe Brak pliku FirewallRules: [{9BE4A329-CF2B-44BE-91F1-F3E2E4CC8685}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe () FirewallRules: [{AAEB1F1B-EFC3-448C-8443-42B423C43FD4}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe () FirewallRules: [UDP Query User{D5AA65BB-1262-41AE-BD48-FBB1822927DC}E:\heroes of the storm\versions\base62119\heroesofthestorm_x64.exe] => (Allow) E:\heroes of the storm\versions\base62119\heroesofthestorm_x64.exe Brak pliku FirewallRules: [TCP Query User{F86862C4-0B06-4FE4-9D04-6D6D0DA8D5C1}E:\heroes of the storm\versions\base62119\heroesofthestorm_x64.exe] => (Allow) E:\heroes of the storm\versions\base62119\heroesofthestorm_x64.exe Brak pliku FirewallRules: [UDP Query User{DE2E7783-77E0-4B47-BE56-9E77EC486E19}E:\overwatch\overwatch\overwatch.exe] => (Allow) E:\overwatch\overwatch\overwatch.exe (Blizzard Entertainment) FirewallRules: [TCP Query User{655EFBD8-76F6-4239-BD79-F5F4F400C410}E:\overwatch\overwatch\overwatch.exe] => (Allow) E:\overwatch\overwatch\overwatch.exe (Blizzard Entertainment) FirewallRules: [UDP Query User{E7E8EEDD-D2EE-4EAD-AE89-AF9059C35790}E:\cs\csgo.exe] => (Block) E:\cs\csgo.exe Brak pliku FirewallRules: [TCP Query User{F4640F75-D95C-4868-9EFC-C693FE3BA97A}E:\cs\csgo.exe] => (Block) E:\cs\csgo.exe Brak pliku FirewallRules: [UDP Query User{A3360507-718F-4779-AD97-A580D13D4C59}E:\warthunder\launcher.exe] => (Allow) E:\warthunder\launcher.exe Brak pliku FirewallRules: [TCP Query User{D6966B8A-B941-45EE-9E49-AD20E16C5963}E:\warthunder\launcher.exe] => (Allow) E:\warthunder\launcher.exe Brak pliku FirewallRules: [UDP Query User{A0EB1CF7-55E8-407E-A21F-7FA411D9D483}E:\heroes of the storm\versions\base61552\heroesofthestorm_x64.exe] => (Allow) E:\heroes of the storm\versions\base61552\heroesofthestorm_x64.exe Brak pliku FirewallRules: [TCP Query User{7A8BCBA1-EFD7-474A-A2C8-292E139F7A3D}E:\heroes of the storm\versions\base61552\heroesofthestorm_x64.exe] => (Allow) E:\heroes of the storm\versions\base61552\heroesofthestorm_x64.exe Brak pliku FirewallRules: [UDP Query User{F060601F-2B09-496B-AED7-79171B1E0643}E:\heroes of the storm\versions\base61361\heroesofthestorm_x64.exe] => (Block) E:\heroes of the storm\versions\base61361\heroesofthestorm_x64.exe Brak pliku FirewallRules: [TCP Query User{B5413890-9142-499D-9628-A4E6578C55E8}E:\heroes of the storm\versions\base61361\heroesofthestorm_x64.exe] => (Block) E:\heroes of the storm\versions\base61361\heroesofthestorm_x64.exe Brak pliku FirewallRules: [UDP Query User{464218F8-E3D1-4A01-8865-6A8818C05F22}E:\heroes of the storm\versions\base61129\heroesofthestorm_x64.exe] => (Allow) E:\heroes of the storm\versions\base61129\heroesofthestorm_x64.exe Brak pliku FirewallRules: [TCP Query User{177CF6A9-6FA7-45DC-A2E4-135EB7058860}E:\heroes of the storm\versions\base61129\heroesofthestorm_x64.exe] => (Allow) E:\heroes of the storm\versions\base61129\heroesofthestorm_x64.exe Brak pliku FirewallRules: [UDP Query User{EDB0C047-4524-4524-BFC3-B8B2CA44AE6C}E:\steamlibrary\steamapps\common\paladins\binaries\win32\paladins.exe] => (Allow) E:\steamlibrary\steamapps\common\paladins\binaries\win32\paladins.exe Brak pliku FirewallRules: [TCP Query User{D5503BF2-AF18-417B-8D27-E0047321430E}E:\steamlibrary\steamapps\common\paladins\binaries\win32\paladins.exe] => (Allow) E:\steamlibrary\steamapps\common\paladins\binaries\win32\paladins.exe Brak pliku FirewallRules: [UDP Query User{934B8B5A-8160-4C2C-9B77-699E5FCE9BB3}E:\heroes of the storm\versions\base60821\heroesofthestorm_x64.exe] => (Block) E:\heroes of the storm\versions\base60821\heroesofthestorm_x64.exe Brak pliku FirewallRules: [TCP Query User{BFD8CB77-AB20-4E6B-9A3B-AD70CB98333E}E:\heroes of the storm\versions\base60821\heroesofthestorm_x64.exe] => (Block) E:\heroes of the storm\versions\base60821\heroesofthestorm_x64.exe Brak pliku FirewallRules: [UDP Query User{F9AD7653-407D-43A2-A103-2DE949A5A0F9}E:\heroes of the storm\versions\base60821\heroesofthestorm_x64.exe] => (Block) E:\heroes of the storm\versions\base60821\heroesofthestorm_x64.exe Brak pliku FirewallRules: [TCP Query User{372D7910-2260-4D5A-902A-CF05FFDC3162}E:\heroes of the storm\versions\base60821\heroesofthestorm_x64.exe] => (Block) E:\heroes of the storm\versions\base60821\heroesofthestorm_x64.exe Brak pliku FirewallRules: [UDP Query User{4A338066-E43A-480B-B01D-2247D2E5CF0F}E:\heroes of the storm\versions\base60632\heroesofthestorm_x64.exe] => (Block) E:\heroes of the storm\versions\base60632\heroesofthestorm_x64.exe Brak pliku FirewallRules: [TCP Query User{E314E18D-93DC-4809-BE83-B6E316711505}E:\heroes of the storm\versions\base60632\heroesofthestorm_x64.exe] => (Block) E:\heroes of the storm\versions\base60632\heroesofthestorm_x64.exe Brak pliku FirewallRules: [UDP Query User{7ABE6277-4F3D-4E59-AA5B-4876C038E9F4}E:\heroes of the storm\versions\base60522\heroesofthestorm_x64.exe] => (Block) E:\heroes of the storm\versions\base60522\heroesofthestorm_x64.exe Brak pliku FirewallRules: [TCP Query User{A8014ACE-FD23-43A4-AE5E-5C37AE44BEED}E:\heroes of the storm\versions\base60522\heroesofthestorm_x64.exe] => (Block) E:\heroes of the storm\versions\base60522\heroesofthestorm_x64.exe Brak pliku FirewallRules: [{901EC19A-A901-49DA-95C3-38F0B593B69E}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe (Lenovo) FirewallRules: [{BEE351E7-943E-43BA-8FBE-FA9BD1D7D4D5}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe (Lenovo) FirewallRules: [{73958764-4488-44B0-A307-A527286AF7DF}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) FirewallRules: [{FF6A4474-AE3C-4C76-A7B8-F15F23C734EE}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) FirewallRules: [{3442FC29-EDBA-4B61-BAF8-639CCCFFD81F}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe () FirewallRules: [{944667C1-61DE-4A47-A934-9B9241E60DA2}] => (Allow) C:\Program Files (x86)\Lenovo\LenovoPortal\Lenovo.Portal.exe Brak pliku FirewallRules: [{8F20C946-F1CC-4904-A634-BF37473D885F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) FirewallRules: [{F467F525-DAE2-4466-A00A-6E48D07D2AC1}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) FirewallRules: [{8C27A770-D32D-403C-9AD4-193901F35D51}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe Brak pliku FirewallRules: [{16A00A71-A340-4BE7-B28C-EEF236D6E15B}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe Brak pliku FirewallRules: [{90F5A95F-42B4-4E9C-A803-7FA03E5DE7D5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe Brak pliku FirewallRules: [{B196C688-1D5F-47E4-AF66-04152F7021A6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe Brak pliku FirewallRules: [{BA897E52-1583-45D3-B326-151A26C474C6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (NVIDIA Corporation) FirewallRules: [{E25A051E-A2D5-48F5-BED4-90388D45747D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation) FirewallRules: [{A3F3FE27-9DD7-4CEA-B184-EEEB40FBF7A7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation) FirewallRules: [{4E25741B-91EB-45DD-ADE7-D29A705D7439}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe Brak pliku FirewallRules: [{DC286833-9CBA-4E2B-942B-2A2D7599D07E}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe Brak pliku FirewallRules: [TCP Query User{B5CEFF8B-703F-4C2C-AB5A-376D5F06BAAC}C:\users\w\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\w\appdata\roaming\spotify\spotify.exe (Spotify Ltd) FirewallRules: [UDP Query User{F8489A55-2E42-4D4C-B779-CB7029B71A08}C:\users\w\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\w\appdata\roaming\spotify\spotify.exe (Spotify Ltd) FirewallRules: [{03F918ED-3521-4675-B941-2D54B15A0350}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Converter Studio\Video Converter Studio.exe Brak pliku FirewallRules: [{E3C99AE3-2A41-4ACD-A337-3D420C7DE812}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Converter Studio\Video Converter Studio.exe Brak pliku FirewallRules: [TCP Query User{2420294C-63DD-4140-BF73-F729D43B6536}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe Brak pliku FirewallRules: [UDP Query User{2E95C1B0-E432-4B94-9F98-4225D2D16C0A}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe Brak pliku FirewallRules: [TCP Query User{809D6243-62A3-4E34-AED5-0B2BD846C9C1}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe () FirewallRules: [UDP Query User{EC09762E-6EB8-46B5-BFAC-62F8B7E025AD}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe () FirewallRules: [{DA9C1D8F-1D6F-4B5A-975A-974097001B65}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CSNZ\Bin\cstrike-online.exe (Nexon) FirewallRules: [{870B0C42-7E28-481A-AAB5-566670D71D3D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CSNZ\Bin\cstrike-online.exe (Nexon) FirewallRules: [TCP Query User{CC745E05-6E13-4181-A3B4-3581E03CAA47}D:\diablo iii\x64\diablo iii64.exe] => (Block) D:\diablo iii\x64\diablo iii64.exe (Blizzard Entertainment) FirewallRules: [UDP Query User{6869DDEF-F708-49C6-B9AF-6AE2493E8CE9}D:\diablo iii\x64\diablo iii64.exe] => (Block) D:\diablo iii\x64\diablo iii64.exe (Blizzard Entertainment) FirewallRules: [TCP Query User{BC1CEB97-080C-44E7-821B-C78DA67FE674}C:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe Brak pliku FirewallRules: [UDP Query User{59B86ABF-6420-41DB-9BF6-8E8856BCD446}C:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe Brak pliku FirewallRules: [TCP Query User{1A093648-02A7-4806-831F-AE6388E3A8FF}C:\games\stepmania 5\program\stepmania.exe] => (Allow) C:\games\stepmania 5\program\stepmania.exe (StepMania Team hxxp://www.stepmania.com/) FirewallRules: [UDP Query User{8A69B3FF-68C5-4306-96AC-321C8F76CA4C}C:\games\stepmania 5\program\stepmania.exe] => (Allow) C:\games\stepmania 5\program\stepmania.exe (StepMania Team hxxp://www.stepmania.com/) FirewallRules: [TCP Query User{879B5B2E-D400-4956-B71C-10B9982D15F5}C:\users\w\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\w\appdata\roaming\spotify\spotify.exe (Spotify Ltd) FirewallRules: [UDP Query User{B3174061-F915-482C-AE40-A1C4102E74C3}C:\users\w\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\w\appdata\roaming\spotify\spotify.exe (Spotify Ltd) FirewallRules: [TCP Query User{E5EC0D13-AFD4-43A8-AFDB-515AD303C0F0}C:\program files (x86)\hearthstone\hearthstone.exe] => (Block) C:\program files (x86)\hearthstone\hearthstone.exe () FirewallRules: [UDP Query User{18611936-77BB-4847-A8FB-9161D9093F79}C:\program files (x86)\hearthstone\hearthstone.exe] => (Block) C:\program files (x86)\hearthstone\hearthstone.exe () FirewallRules: [{37D4D5BA-8B8E-48FF-95EC-330733487A44}] => (Allow) C:\Program Files (x86)\CAPCOM\LOSTPLANETCOLONIES\LostPlanetColoniesDX9.exe Brak pliku FirewallRules: [{820004B5-6484-42FE-A848-863659DF5527}] => (Allow) C:\Program Files (x86)\CAPCOM\LOSTPLANETCOLONIES\LostPlanetColoniesDX9.exe Brak pliku FirewallRules: [{D1548211-8465-4ACA-8541-A302184B0375}] => (Allow) C:\Program Files (x86)\CAPCOM\LOSTPLANETCOLONIES\LostPlanetColoniesDX10.exe Brak pliku FirewallRules: [{20D8D0C8-3BEB-4095-80F3-E1D7CE35F527}] => (Allow) C:\Program Files (x86)\CAPCOM\LOSTPLANETCOLONIES\LostPlanetColoniesDX10.exe Brak pliku FirewallRules: [TCP Query User{3D343CF0-0847-4CF1-B8E0-D9DCF94EE81B}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Block) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe Brak pliku FirewallRules: [UDP Query User{41176C5E-750F-4DB4-8C72-C5FC0A513250}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Block) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe Brak pliku FirewallRules: [TCP Query User{4466BEC5-9BCA-40BE-87C9-213C7EBA12DE}C:\program files (x86)\starcraft ii\versions\base58400\sc2_x64.exe] => (Block) C:\program files (x86)\starcraft ii\versions\base58400\sc2_x64.exe Brak pliku FirewallRules: [UDP Query User{E20A78DD-6200-4686-B37F-F1ABCC9BF077}C:\program files (x86)\starcraft ii\versions\base58400\sc2_x64.exe] => (Block) C:\program files (x86)\starcraft ii\versions\base58400\sc2_x64.exe Brak pliku FirewallRules: [TCP Query User{DF243C40-87EB-4A3C-99AE-EF10D66B8F7C}E:\steamlibrary\steamapps\common\paladins\binaries\win64\paladins.exe] => (Allow) E:\steamlibrary\steamapps\common\paladins\binaries\win64\paladins.exe Brak pliku FirewallRules: [UDP Query User{2B464737-CF00-4D39-A07F-BC332CC6F92B}E:\steamlibrary\steamapps\common\paladins\binaries\win64\paladins.exe] => (Allow) E:\steamlibrary\steamapps\common\paladins\binaries\win64\paladins.exe Brak pliku FirewallRules: [{16F8BFAC-E044-4F2D-AA6B-1E6D7F5C92B9}] => (Allow) E:\SteamLibrary\steamapps\common\Cuisine Royale\bpreport.exe () FirewallRules: [{198F61A4-E856-4DB1-B743-5F51AD44FBBF}] => (Allow) E:\SteamLibrary\steamapps\common\Cuisine Royale\bpreport.exe () FirewallRules: [{3E4FFE52-99BF-489D-A0F3-3B0EFFB78886}] => (Allow) E:\SteamLibrary\steamapps\common\Cuisine Royale\win32\bpreport.exe () FirewallRules: [{13A74A3B-E64B-4E8F-9C88-D76A75A32897}] => (Allow) E:\SteamLibrary\steamapps\common\Cuisine Royale\win32\bpreport.exe () FirewallRules: [{C57F27E7-767E-41A8-99C6-3781ABDDFD93}] => (Allow) E:\SteamLibrary\steamapps\common\Cuisine Royale\gaijin_downloader.exe (Gaijin Entertainment) FirewallRules: [{776BC7F2-A3D5-491F-B5C9-F2202EF82E06}] => (Allow) E:\SteamLibrary\steamapps\common\Cuisine Royale\gaijin_downloader.exe (Gaijin Entertainment) FirewallRules: [{D457F953-5A1B-4D21-94B3-4A0CC3E441F3}] => (Allow) E:\SteamLibrary\steamapps\common\Cuisine Royale\win64\enlist.exe Brak pliku FirewallRules: [{A9ACA64E-0647-49C2-B8E8-2A896C593F02}] => (Allow) E:\SteamLibrary\steamapps\common\Cuisine Royale\win64\enlist.exe Brak pliku FirewallRules: [{D533C0B7-8911-4067-B7C3-E74F2DF8EE55}] => (Allow) E:\SteamLibrary\steamapps\common\Cuisine Royale\win64\enlisted.exe (Gaijin Entertainment) FirewallRules: [{E55E1572-FB1A-4C0C-961E-81287A67EB39}] => (Allow) E:\SteamLibrary\steamapps\common\Cuisine Royale\win64\enlisted.exe (Gaijin Entertainment) FirewallRules: [TCP Query User{45E36E77-DAE5-4079-BE12-8FCD050A0197}E:\lol\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe] => (Allow) E:\lol\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe () FirewallRules: [UDP Query User{67ABE024-FD96-4228-83B2-C12A1CE11217}E:\lol\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe] => (Allow) E:\lol\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe () FirewallRules: [TCP Query User{F90776DE-D1B0-4AD7-9757-E28BF13B887E}C:\program files (x86)\blizzard app\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.exe (Blizzard Entertainment) FirewallRules: [UDP Query User{6BF8974A-EBAF-491D-A7AB-144371AFD336}C:\program files (x86)\blizzard app\battle.net.exe] => (Allow) C:\program files (x86)\blizzard app\battle.net.exe (Blizzard Entertainment) FirewallRules: [{FDB26E2B-5668-4BCA-AC43-3325F52DEE4E}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corporation) FirewallRules: [{0F63EC9E-ED79-4342-8EC3-3414564625E2}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corporation) FirewallRules: [TCP Query User{86765CEA-CDF7-4D2A-A88F-ED8FDBA65EE8}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games, Inc.) FirewallRules: [UDP Query User{E82036BC-0EAE-4BC8-B584-1106C9A8C412}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games, Inc.) FirewallRules: [TCP Query User{0183290B-697D-4542-B5CF-5EEE0CE0EF92}E:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) E:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games, Inc.) FirewallRules: [UDP Query User{31FAAD3B-0383-4FB1-8755-34C7427BE275}E:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) E:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games, Inc.) FirewallRules: [TCP Query User{B70198AA-42BA-4525-84C4-35C02E60B243}E:\counter-strike 1.6 v43\hl.exe] => (Allow) E:\counter-strike 1.6 v43\hl.exe Brak pliku FirewallRules: [UDP Query User{8B1BDD83-750D-437B-B755-983D6C8A778B}E:\counter-strike 1.6 v43\hl.exe] => (Allow) E:\counter-strike 1.6 v43\hl.exe Brak pliku FirewallRules: [{3439C95D-A9CF-4A7A-8BFE-610AD9625804}] => (Allow) E:\SteamLibrary\steamapps\common\the witcher 2\Launcher.exe (CD Projekt RED) FirewallRules: [{BBBAE26D-1DBA-4B7C-B8F1-E5762B128F55}] => (Allow) E:\SteamLibrary\steamapps\common\the witcher 2\Launcher.exe (CD Projekt RED) FirewallRules: [TCP Query User{A27A686F-645D-48BD-8301-078D4887CDAF}E:\steamlibrary\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) E:\steamlibrary\steamapps\common\the witcher 2\bin\witcher2.exe () FirewallRules: [UDP Query User{1A2173EC-A00F-4CD9-A644-0BAAD04E3EB8}E:\steamlibrary\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) E:\steamlibrary\steamapps\common\the witcher 2\bin\witcher2.exe () FirewallRules: [{CE449C9B-2601-43DF-8CDB-032D42BC6215}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation) FirewallRules: [TCP Query User{7C71B1C8-5D9C-4C7F-BC4E-671D08EB1D8A}E:\steamlibrary\steamapps\common\cuisine royale\slauncher.exe] => (Block) E:\steamlibrary\steamapps\common\cuisine royale\slauncher.exe Brak pliku FirewallRules: [UDP Query User{82A399FF-DFCE-4849-A369-299A4BD37CE2}E:\steamlibrary\steamapps\common\cuisine royale\slauncher.exe] => (Block) E:\steamlibrary\steamapps\common\cuisine royale\slauncher.exe Brak pliku FirewallRules: [TCP Query User{E9744472-BCEB-424A-BBDB-CB1DEE50F7F0}E:\heroes of the storm\versions\base69350\heroesofthestorm_x64.exe] => (Allow) E:\heroes of the storm\versions\base69350\heroesofthestorm_x64.exe Brak pliku FirewallRules: [UDP Query User{76B7BB1A-01A5-4271-A1D8-DF4260FA9BEC}E:\heroes of the storm\versions\base69350\heroesofthestorm_x64.exe] => (Allow) E:\heroes of the storm\versions\base69350\heroesofthestorm_x64.exe Brak pliku FirewallRules: [TCP Query User{A56ACA29-2E17-48BA-89DA-D205537D3F57}E:\heroes of the storm\versions\base69823\heroesofthestorm_x64.exe] => (Allow) E:\heroes of the storm\versions\base69823\heroesofthestorm_x64.exe (Blizzard Entertainment, Inc.) FirewallRules: [UDP Query User{B58B7679-71EF-43EB-81A6-2655187E10CE}E:\heroes of the storm\versions\base69823\heroesofthestorm_x64.exe] => (Allow) E:\heroes of the storm\versions\base69823\heroesofthestorm_x64.exe (Blizzard Entertainment, Inc.) FirewallRules: [TCP Query User{C4964772-3DA7-4BB4-8BCB-B4F98561682C}C:\program files (x86)\destiny 2\destiny2.exe] => (Block) C:\program files (x86)\destiny 2\destiny2.exe (Bungie) FirewallRules: [UDP Query User{4DBB529A-7D47-4480-9083-B89A3A918A5B}C:\program files (x86)\destiny 2\destiny2.exe] => (Block) C:\program files (x86)\destiny 2\destiny2.exe (Bungie) FirewallRules: [TCP Query User{54B87CDE-8815-4417-B385-66890EC54E49}C:\program files (x86)\overwatch\overwatch.exe] => (Block) C:\program files (x86)\overwatch\overwatch.exe (Blizzard Entertainment) FirewallRules: [UDP Query User{3EE4F652-CA47-4051-A725-45E525726A11}C:\program files (x86)\overwatch\overwatch.exe] => (Block) C:\program files (x86)\overwatch\overwatch.exe (Blizzard Entertainment) FirewallRules: [TCP Query User{0953D3BD-CE66-4DF2-9435-53F7EFD645A5}E:\steamlibrary\steamapps\common\cuisine royale\launcher.exe] => (Block) E:\steamlibrary\steamapps\common\cuisine royale\launcher.exe (Gaijin Entertainment) FirewallRules: [UDP Query User{750225A7-82B0-4AC3-A267-A26D2C492530}E:\steamlibrary\steamapps\common\cuisine royale\launcher.exe] => (Block) E:\steamlibrary\steamapps\common\cuisine royale\launcher.exe (Gaijin Entertainment) FirewallRules: [{BCE7260B-8BED-458E-AE88-5F6B09078E99}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) FirewallRules: [{3B9B36CE-FCDA-4D8A-8E17-4AEA7E746831}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe (Electronic Arts Inc.) FirewallRules: [{D311C319-9BEA-4CF1-97C7-F6937B343177}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe (Electronic Arts Inc.) FirewallRules: [{E1C4B317-E976-49C5-87BB-852E68534C15}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe (Electronic Arts Inc.) FirewallRules: [{BB9BC79E-EA52-4C20-BD5C-93201D1051C4}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe (Electronic Arts Inc.) FirewallRules: [TCP Query User{89581463-35EE-470E-9E0A-946A95ACA72C}C:\program files (x86)\heroes of the storm\versions\base71138\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base71138\heroesofthestorm_x64.exe Brak pliku FirewallRules: [UDP Query User{E6630286-A0B2-41BC-AD83-022D50F8E424}C:\program files (x86)\heroes of the storm\versions\base71138\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base71138\heroesofthestorm_x64.exe Brak pliku FirewallRules: [{611090E0-E2EB-4FE8-A9CA-FCB8146E8A6F}] => (Allow) %systemroot%\system32\alg.exe (Microsoft Corporation) FirewallRules: [{E59821A0-E4B0-463C-BEC6-E0D1E7E9913E}] => (Allow) %systemroot%\system32\alg.exe (Microsoft Corporation) FirewallRules: [{0A0887E9-27DF-497E-973F-6036E65D2D51}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software) FirewallRules: [{DE20987F-675B-46BD-AF88-C02A9345B19F}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software) FirewallRules: [TCP Query User{D670A201-0E6A-4C45-881F-171316A31840}E:\steamlibrary\steamapps\common\h1z1\h1z1.exe] => (Allow) E:\steamlibrary\steamapps\common\h1z1\h1z1.exe (Daybreak Game Company) FirewallRules: [UDP Query User{32F44FC0-6C46-4B60-B032-B5DD5DFD413A}E:\steamlibrary\steamapps\common\h1z1\h1z1.exe] => (Allow) E:\steamlibrary\steamapps\common\h1z1\h1z1.exe (Daybreak Game Company) FirewallRules: [TCP Query User{1CEDCAFF-E750-459E-B7D6-652DA1A1AF24}C:\users\w\downloads\rubinumclient_21.12.2018\rubinumclient_21.12.2018\rubinumpatcher.exe] => (Allow) C:\users\w\downloads\rubinumclient_21.12.2018\rubinumclient_21.12.2018\rubinumpatcher.exe () FirewallRules: [UDP Query User{AE11C538-8099-4C70-8ECF-753E419D9E1B}C:\users\w\downloads\rubinumclient_21.12.2018\rubinumclient_21.12.2018\rubinumpatcher.exe] => (Allow) C:\users\w\downloads\rubinumclient_21.12.2018\rubinumclient_21.12.2018\rubinumpatcher.exe () FirewallRules: [{38AF8D22-CA79-493C-A7CA-05BA9FAF247C}] => (Allow) E:\SteamLibrary\steamapps\common\The Binding of Isaac Rebirth\isaac-ng.exe () FirewallRules: [{D2A222BC-4561-4091-85EB-F6BD3709D3D6}] => (Allow) E:\SteamLibrary\steamapps\common\The Binding of Isaac Rebirth\isaac-ng.exe () ==================== Punkty Przywracania systemu ========================= 17-01-2019 22:11:54 Windows Update 25-01-2019 12:30:28 Zaplanowany punkt kontrolny ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= Name: Bluetooth PAN HelpText Description: Urządzenie Bluetooth (sieć osobista) Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: BthPan Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (02/03/2019 11:08:28 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (02/02/2019 11:08:30 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (02/02/2019 01:58:19 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: Metin2Release.exe, wersja: 1.0.28249.0, sygnatura czasowa: 0x5c4bbbb5 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 10.0.17134.471, sygnatura czasowa: 0xfe852bc4 Kod wyjątku: 0xc000041d Przesunięcie błędu: 0x00063a88 Identyfikator procesu powodującego błąd: 0x64b4 Godzina uruchomienia aplikacji powodującej błąd: 0x01d4ba8b97138c6f Ścieżka aplikacji powodującej błąd: C:\Users\w\Downloads\Shivia.pl - Klient Gry\Shivia.pl - Klient Gry\Shivia.pl - Klient Gry\Metin2Release.exe Ścieżka modułu powodującego błąd: C:\WINDOWS\SYSTEM32\ntdll.dll Identyfikator raportu: 51f85920-f6ca-4f97-9fbc-af02ed6bc1b4 Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error: (02/01/2019 06:09:04 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Program _Autopatcher_Shivia.exe w wersji 0.0.0.0 przestał współpracować z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej informacji na temat tego problemu, sprawdź historię problemu w oknie Zabezpieczenia i konserwacja w Panelu sterowania. Identyfikator procesu: 45d0 Godzina rozpoczęcia: 01d4ba50c44a8e76 Godzina zakończenia: 12 Ścieżka aplikacji: C:\Users\w\Downloads\Shivia.pl - Klient Gry\Shivia.pl - Klient Gry\Shivia.pl - Klient Gry\_Autopatcher_Shivia.exe Identyfikator raportu: ace0507a-3bb9-480c-8947-f993fa594b86 Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error: (02/01/2019 11:08:27 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (01/31/2019 04:47:45 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Program _Autopatcher_Shivia.exe w wersji 0.0.0.0 przestał współpracować z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej informacji na temat tego problemu, sprawdź historię problemu w oknie Zabezpieczenia i konserwacja w Panelu sterowania. Identyfikator procesu: 21f0 Godzina rozpoczęcia: 01d4b97bf98114b7 Godzina zakończenia: 8 Ścieżka aplikacji: C:\Users\w\Downloads\Shivia.pl - Klient Gry\Shivia.pl - Klient Gry\Shivia.pl - Klient Gry\_Autopatcher_Shivia.exe Identyfikator raportu: 0db6e1d1-4163-42ff-9804-82d000530772 Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error: (01/31/2019 11:08:29 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (01/30/2019 11:08:32 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Dziennik System: ============= Error: (02/03/2019 12:41:47 PM) (Source: DCOM) (EventID: 10016) (User: LAPTOP-87AOFOGT) Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} i identyfikatorem aplikacji APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} użytkownikowi LAPTOP-87AOFOGT\w o identyfikatorze zabezpieczeń SID (S-1-5-21-2780740895-2156724078-2569186773-1001) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. Error: (02/03/2019 09:14:59 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Windows Search z powodu następującego błędu: Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie. Error: (02/03/2019 09:14:59 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Windows Search. Error: (02/03/2019 04:01:45 AM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT) Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} i identyfikatorem aplikacji APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} użytkownikowi ZARZĄDZANIE NT\USŁUGA LOKALNA o identyfikatorze zabezpieczeń SID (S-1-5-19) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. Error: (02/03/2019 12:03:37 AM) (Source: DCOM) (EventID: 10016) (User: LAPTOP-87AOFOGT) Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} i identyfikatorem aplikacji APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} użytkownikowi LAPTOP-87AOFOGT\w o identyfikatorze zabezpieczeń SID (S-1-5-21-2780740895-2156724078-2569186773-1001) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. Error: (02/02/2019 11:37:57 PM) (Source: DCOM) (EventID: 10016) (User: LAPTOP-87AOFOGT) Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} i identyfikatorem aplikacji APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} użytkownikowi LAPTOP-87AOFOGT\w o identyfikatorze zabezpieczeń SID (S-1-5-21-2780740895-2156724078-2569186773-1001) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. Error: (02/02/2019 11:36:47 PM) (Source: DCOM) (EventID: 10016) (User: LAPTOP-87AOFOGT) Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} i identyfikatorem aplikacji APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} użytkownikowi LAPTOP-87AOFOGT\w o identyfikatorze zabezpieczeń SID (S-1-5-21-2780740895-2156724078-2569186773-1001) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. Error: (02/02/2019 10:24:32 PM) (Source: DCOM) (EventID: 10016) (User: LAPTOP-87AOFOGT) Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} i identyfikatorem aplikacji APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} użytkownikowi LAPTOP-87AOFOGT\w o identyfikatorze zabezpieczeń SID (S-1-5-21-2780740895-2156724078-2569186773-1001) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. CodeIntegrity: =================================== Date: 2018-12-13 20:13:17.279 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll that did not meet the Microsoft signing level requirements. Date: 2018-12-07 14:25:47.535 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll that did not meet the Microsoft signing level requirements. Date: 2018-12-04 01:38:03.723 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll that did not meet the Microsoft signing level requirements. Date: 2018-11-15 03:45:49.981 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll that did not meet the Microsoft signing level requirements. Date: 2018-09-19 10:16:27.005 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll that did not meet the Microsoft signing level requirements. Date: 2018-09-15 13:31:32.555 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll that did not meet the Microsoft signing level requirements. Date: 2018-08-28 18:01:11.618 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll that did not meet the Microsoft signing level requirements. Date: 2018-08-24 22:08:46.876 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\FlightSettings.dll because the set of per-page image hashes could not be found on the system. ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM) i5-6300HQ CPU @ 2.30GHz Procent pamięci w użyciu: 43% Całkowita pamięć fizyczna: 8051.91 MB Dostępna pamięć fizyczna: 4570.16 MB Całkowita pamięć wirtualna: 14964.8 MB Dostępna pamięć wirtualna: 9276.41 MB ==================== Dyski ================================ Drive c: (Windows) (Fixed) (Total:444.3 GB) (Free:44.02 GB) NTFS ==>[system z komponentami startowymi (pozyskano odczytując dysk)] Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:4.67 GB) NTFS Drive e: () (Fixed) (Total:440.08 GB) (Free:245.11 GB) NTFS Drive g: (EXPANSION) (CDROM) (Total:0.47 GB) (Free:0 GB) CDFS \\?\Volume{8dca5b4b-69e3-4e98-b9fb-11a675285ab3}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.49 GB) NTFS \\?\Volume{632fef9c-7094-40d3-acdc-d723d6f7cbeb}\ (LENOVO_PART) (Fixed) (Total:19.9 GB) (Free:5.12 GB) NTFS \\?\Volume{48bd73b4-90f0-414f-8f5e-ddf19513b1b1}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32 ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: DC0B575E) Partition: GPT. ==================== Koniec Addition.txt ============================