Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 25-11-2020 Uruchomiony przez Viksin (26-11-2020 14:39:58) Uruchomiony z C:\Users\Viksin\Desktop\naprawa skrótow Windows 10 Pro Wersja 1909 18363.1198 (X64) (2020-03-16 19:20:42) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-2603552317-3650783091-1642387111-500 - Administrator - Disabled) Gość (S-1-5-21-2603552317-3650783091-1642387111-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2603552317-3650783091-1642387111-1002 - Limited - Enabled) Konto domyślne (S-1-5-21-2603552317-3650783091-1642387111-503 - Limited - Disabled) Viksin (S-1-5-21-2603552317-3650783091-1642387111-1001 - Administrator - Enabled) => C:\Users\Viksin WDAGUtilityAccount (S-1-5-21-2603552317-3650783091-1642387111-504 - Limited - Disabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) 7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov) Advanced SystemCare (HKLM-x32\...\Advanced SystemCare_is1) (Version: 13.7.0 - IObit) Aktualizacje NVIDIA 38.0.5.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 38.0.5.0 - NVIDIA Corporation) Hidden AORUS ENGINE (HKLM-x32\...\AORUS ENGINE_is1) (Version: 1.6.0.0 - GIGABYTE Technology Co.,Inc.) ArcaniA: Gold Edition (HKLM-x32\...\ArcaniA: Gold Edition_is1) (Version: - ) art of rally (HKLM-x32\...\art of rally_is1) (Version: - ) Assassin's Creed - Freedom Cry (HKLM-x32\...\Assassin's Creed - Freedom Cry_R.G. Mechanics_is1) (Version: - R.G. Mechanics, spider91) Asystent aktualizacji do systemu Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22925 - Microsoft Corporation) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Battlefield 1 (HKLM-x32\...\Battlefield 1_is1) (Version: - ) Bloody7 (HKLM-x32\...\Bloody3) (Version: 20.05.0007 - Bloody) Call of Duty Modern Warfare (HKLM-x32\...\Call of Duty Modern Warfare) (Version: - Blizzard Entertainment) Cheat Engine 7.1 (HKLM\...\Cheat Engine_is1) (Version: - Cheat Engine) City Car Driving Home Edition (HKLM\...\Q2l0eUNhckRyaXZpbmc=_is1) (Version: 1 - ) CrystalDiskInfo 8.4.2 (HKLM\...\CrystalDiskInfo_is1) (Version: 8.4.2 - Crystal Dew World) Defraggler (HKLM\...\Defraggler) (Version: 2.22 - Piriform) Discord (HKU\S-1-5-21-2603552317-3650783091-1642387111-1001\...\Discord) (Version: 0.0.308 - Discord Inc.) DZLauncher version 0.1.6.4 (HKLM-x32\...\{1E299AE2-74C8-4CD8-6B17-A86E0ED3C4D2}_is1) (Version: 0.1.6.4 - Maca134) Epic Games Launcher (HKLM-x32\...\{39D848C4-F441-470F-8FAB-51D60946D35B}) (Version: 1.1.267.0 - Epic Games, Inc.) Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Far Cry: New Dawn (HKLM-x32\...\Far Cry: New Dawn_is1) (Version: - ) FiveM (HKU\S-1-5-21-2603552317-3650783091-1642387111-1001\...\CitizenFX_FiveM) (Version: - The CitizenFX Collective) FlashPeak Slimjet (HKLM-x32\...\Slimjet) (Version: 26.0.3.0 - FlashPeak Inc.) GameInput Redistributable (HKLM-x32\...\{5FAD63E8-8F1C-6687-0325-3BBF64B4FD89}) (Version: 10.1.19041.3918 - Microsoft Corporation) GIANTS Editor 8.2.0 64-bit (HKLM-x32\...\giants_editor_8.2.0_win64_is1) (Version: 8.2.0 - GIANTS Software GmbH) GIANTS Remote Debugger 8.0.0 (HKLM-x32\...\giants_remote_debugger_8.0.0_win64_is1) (Version: 8.0.0 - GIANTS Software GmbH) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 86.0.4240.198 - Google LLC) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.31 - Google LLC) Hidden Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.99.0 - Google Inc.) Hidden <==== UWAGA Gothic 2 Online (HKU\S-1-5-21-2603552317-3650783091-1642387111-1001\...\Gothic 2 Online 0.1.2.0) (Version: 0.1.2.0 - G2O Team) Gothic II - Noc Kruka (HKLM-x32\...\{6FB6D550-DDC4-4996-9CDF-91C34F0A4C4A}) (Version: 2.60.000 - ) GOTHIC2 - Noc Kruka - 'Pakiet systemowy' (HKLM-x32\...\GOTHIC2 - Noc Kruka - 'Pakiet systemowy') (Version: 1.6 - World of Gothic RU © 2016) Grand Theft Auto V (HKLM-x32\...\{5EFC6C07-6B87-43FC-9524-F9E967241741}) (Version: 1.0.1868.1 - Rockstar Games) HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software) Heavy Rain (HKLM-x32\...\Heavy Rain_is1) (Version: - ) HP Deskjet Ink Adv 2060 K110 — podstawowe oprogramowanie urządzenia (HKLM\...\{75A263B6-BDAC-4EB8-B2F5-D20009231CAB}) (Version: 28.0.1313.0 - Hewlett-Packard Co.) HWiNFO64 Version 6.24 (HKLM\...\HWiNFO64_is1) (Version: 6.24 - Martin Malik - REALiX) Java 8 Update 251 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180251F0}) (Version: 8.0.2510.8 - Oracle Corporation) Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Lightworks (HKLM-x32\...\{E94DD4E4-7746-472c-AA7B-1242FED0CFC8}) (Version: 14.6.0.1 - EditShare) LS-USBMX 1/2/3 Steering Wheel W/Vibration (HKLM-x32\...\{BA12FD6C-169A-11D7-A6A9-00C026281E5B}) (Version: 2005.08.10 - ) Mafia 2 (HKLM-x32\...\Mafia 2_is1) (Version: - ) Malwarebytes version 4.2.3.96 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.2.3.96 - Malwarebytes) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 87.0.664.47 - Microsoft Corporation) Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.137.99 - ) Microsoft Teams (HKU\S-1-5-21-2603552317-3650783091-1642387111-1001\...\Teams) (Version: 1.3.00.30866 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{0BCA8FBE-0C1C-4C65-98A3-5D34AAF41737}) (Version: 2.70.0.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.22.27821 (HKLM-x32\...\{6361b579-2795-4886-b2a8-53d5239b6452}) (Version: 14.22.27821.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation) NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.27 - NVIDIA Corporation) Hidden NVIDIA FrameView SDK 1.1.4923.29214634 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29214634 - NVIDIA Corporation) NVIDIA GeForce Experience 3.20.5.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.5.70 - NVIDIA Corporation) NVIDIA Oprogramowanie systemu PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation) NVIDIA Sterownik dźwięku HD 1.3.38.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.35 - NVIDIA Corporation) NVIDIA Sterownik graficzny 457.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 457.30 - NVIDIA Corporation) NvModuleTracker (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver) (Version: 6.14.24033.38719 - NVIDIA Corporation) Hidden OBS Studio (HKLM-x32\...\OBS Studio) (Version: 25.0.8 - OBS Project) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Opera GX Stable 71.0.3770.323 (HKU\S-1-5-21-2603552317-3650783091-1642387111-1001\...\Opera GX 71.0.3770.323) (Version: 71.0.3770.323 - Opera Software) Overwolf (HKLM-x32\...\Overwolf) (Version: 0.157.2.17 - Overwolf Ltd.) paint.net (HKLM\...\{7ADB1B05-39DE-4888-A72D-D1F3A791D45F}) (Version: 4.2.12 - dotPDN LLC) Panel sterowania NVIDIA 457.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 457.30 - NVIDIA Corporation) Hidden PC Building Simulator (HKLM-x32\...\{283EAA1E-8003-44FB-94F1-C809197A789E}_is1) (Version: 1.6.5.2 - Repack by Team-LiL) Planet Zoo (HKLM-x32\...\Planet Zoo_is1) (Version: - ) Platform (HKLM-x32\...\{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.34 - VIA Technologies, Inc.) Hidden Porofessor.gg (HKU\S-1-5-21-2603552317-3650783091-1642387111-1001\...\Overwolf_pibhbkkgefgheeglaeemkkfjlhidhcedalapdggh) (Version: 2.5.57 - Overwolf app) PUBG LITE (HKLM-x32\...\PUBG LITE_is1) (Version: 1.0.1.0 - ) Remember Me (HKLM-x32\...\Remember Me_R.G. Mechanics_is1) (Version: - R.G. Mechanics, markfiter) RGB Fusion (HKLM-x32\...\{FFA8F1FA-3C2C-4A94-AC0B-0DF47272C25F}) (Version: 3.19.0401.1 - GIGABYTE) Riot Vanguard (HKLM\...\Riot Vanguard) (Version: - Riot Games, Inc.) Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.31.304 - Rockstar Games) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.0.7.4 - Rockstar Games) Shotcut (HKLM\...\Shotcut) (Version: 20.10.31 - Meltytech, LLC) SIMDashboardServer (HKLM-x32\...\{76F91869-656D-49E2-A9AF-0583700AFEF5}) (Version: 3.3.0.0 - stryder-it) Spotify (HKU\S-1-5-21-2603552317-3650783091-1642387111-1001\...\Spotify) (Version: 1.1.29.592.gf0779179 - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Streamlabs OBS (HKLM\...\029c4619-0385-5543-9426-46f9987161d9) (Version: 0.21.2 - General Workings, Inc.) Sublime Text 3 (HKLM\...\Sublime Text 3_is1) (Version: - Sublime HQ Pty Ltd) System Ninja (wersja 3.2.8) (HKLM-x32\...\{6E67710E-206D-43AB-BF21-E7CD63056C55}_is1) (Version: 3.2.8 - SingularLabs) TeamSpeak 3 Client (HKU\S-1-5-21-2603552317-3650783091-1642387111-1001\...\TeamSpeak 3 Client) (Version: 3.5.0 - TeamSpeak Systems GmbH) Torrent Streamer Plugin (HKU\S-1-5-21-2603552317-3650783091-1642387111-1001\...\Torrent Streamer Plugin) (Version: 1.0 - ) <==== UWAGA Trackmania (HKLM-x32\...\Uplay Install 5595) (Version: - Ubisoft) Uplay (HKLM-x32\...\Uplay) (Version: 87.0 - Ubisoft) UsbFix (HKLM-x32\...\Usbfix) (Version: 9.001 - www.SOSVirus.Net) VALORANT (HKU\S-1-5-21-2603552317-3650783091-1642387111-1001\...\Riot Game valorant.live) (Version: - Riot Games, Inc) VIA Platforma Menedżera urządzeń (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.34 - VIA Technologies, Inc.) VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN) War Thunder Launcher 1.0.3.249 (HKU\S-1-5-21-2603552317-3650783091-1642387111-1001\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version: - Gaijin Entertainment) Packages: ========= Desktop Live Wallpapers -> C:\Program Files\WindowsApps\48405AmbientSoftware.LiveDesktopWallpapers_1.2.17.0_neutral__agy8jafheqhng [2020-11-03] (0) Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-03-19] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-03-19] (Microsoft Corporation) [MS Ad] Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.5012.0_x64__8wekyb3d8bbwe [2020-05-03] (Microsoft Studios) [MS Ad] MSN Pogoda -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad] Rozszerzenie wideo MPEG-2 -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.22661.0_x64__8wekyb3d8bbwe [2020-11-09] (Microsoft Corporation) Twój telefon -> C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20051.90.0_x64__8wekyb3d8bbwe [2020-06-04] (Microsoft Corporation) ==================== Niestandardowe rejestracje CLSID (filtrowane): ============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-2603552317-3650783091-1642387111-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Viksin\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20275.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2603552317-3650783091-1642387111-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\Viksin\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll => Brak pliku ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Brak podpisu cyfrowego] ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2020-06-01] (IObit Information Technology -> IObit) ContextMenuHandlers2: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2020-06-01] (IObit Information Technology -> IObit) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-11-26] (Malwarebytes Corporation -> Malwarebytes) ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Brak podpisu cyfrowego] ContextMenuHandlers4: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2020-06-01] (IObit Information Technology -> IObit) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2020-11-07] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Brak podpisu cyfrowego] ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-11-26] (Malwarebytes Corporation -> Malwarebytes) ==================== Codecs (filtrowane) ==================== ==================== Skróty & WMI ======================== ==================== Załadowane moduły (filtrowane) ============= 2020-05-16 14:18 - 2019-02-19 12:45 - 000025088 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\BSL430.dll 2020-05-16 14:18 - 2019-02-19 12:45 - 000225792 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvFireware.dll 2020-05-16 14:18 - 2019-02-25 15:33 - 000154624 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\yccV2.DLL 2020-05-16 14:18 - 2019-02-19 12:45 - 000287744 _____ (GIGABYTE Technology Co.,Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GVBIOSLib.dll 2020-05-16 14:18 - 2019-02-19 12:45 - 000628736 _____ (GIGABYTE Technology Co.,Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvComW.dll 2020-05-16 14:18 - 2019-02-19 12:45 - 000013312 _____ (GIGABYTE Technology Co.,Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvCrypt.dll 2020-05-16 14:18 - 2019-02-19 12:45 - 000439808 _____ (GIGABYTE Technology Co.,Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GVDisplay.dll 2020-05-16 14:35 - 2019-02-19 12:45 - 000240640 _____ (GIGABYTE Technology Co.,Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvIllumLib.dll 2020-05-16 14:18 - 2019-02-19 12:45 - 000218112 _____ (GIGABYTE Technology Co.,Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvOrderLib.dll 2020-11-09 19:20 - 2020-11-09 19:20 - 001744024 ____T (Google Inc (TEST) -> VLCStreamer LTD.) [Brak podpisu cyfrowego] C:\Program Files (x86)\VLCStreamer\Update\1.3.99.0\vstreamerpdate.dll 2020-04-21 11:46 - 2019-02-21 17:00 - 000078336 _____ (Igor Pavlov) [Brak podpisu cyfrowego] C:\Program Files\7-Zip\7-zip.dll 2020-09-19 14:24 - 2020-09-19 14:24 - 001093120 _____ (Microsoft Corporation) [Brak podpisu cyfrowego] C:\WINDOWS\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\MFC80U.DLL 2020-05-16 14:35 - 2018-06-14 14:14 - 002134016 _____ (TODO: ) [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GLedApi.DLL 2020-05-16 14:18 - 2019-02-19 12:45 - 000183296 _____ (TODO: ) [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvAutoUpdate.dll ==================== Alternate Data Streams (filtrowane) ======== (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) AlternateDataStreams: C:\ProgramData\TEMP:FB6A21E3 [430] AlternateDataStreams: C:\Users\Viksin\Dane aplikacji:fbd50e2f7662a5c33287ddc6e65ab5a1 [394] AlternateDataStreams: C:\Users\Viksin\AppData\Roaming:fbd50e2f7662a5c33287ddc6e65ab5a1 [394] ==================== Tryb awaryjny (filtrowane) ================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Powiązania plików (filtrowane) ================= ==================== Internet Explorer (filtrowane) ========== BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\ssv.dll [2020-07-06] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: IObit Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2020-06-01] (IObit Information Technology -> IObit) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\jp2ssv.dll [2020-07-06] (Oracle America, Inc. -> Oracle Corporation) ==================== Hosts - zawartość: ========================= (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts ==================== Inne obszary =========================== (Obecnie brak automatycznej naprawy dla tej sekcji.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common HKU\S-1-5-21-2603552317-3650783091-1642387111-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\windows\img0.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: ) HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Brak pliku) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Załączenie wejścia w fixlist spowoduje jego usunięcie.) HKLM\...\StartupApproved\Run: => "HDAudDeck" HKLM\...\StartupApproved\Run: => "SecurityHealth" HKLM\...\StartupApproved\Run32: => "HDAudDeck" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKU\S-1-5-21-2603552317-3650783091-1642387111-1001\...\StartupApproved\StartupFolder: => "GIGABYTE XTREME GAMING ENGINE.lnk" HKU\S-1-5-21-2603552317-3650783091-1642387111-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-2603552317-3650783091-1642387111-1001\...\StartupApproved\Run: => "Steam" HKU\S-1-5-21-2603552317-3650783091-1642387111-1001\...\StartupApproved\Run: => "Bloody2" HKU\S-1-5-21-2603552317-3650783091-1642387111-1001\...\StartupApproved\Run: => "Overwolf" HKU\S-1-5-21-2603552317-3650783091-1642387111-1001\...\StartupApproved\Run: => "Gaijin.Net Updater" HKU\S-1-5-21-2603552317-3650783091-1642387111-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams" ==================== Reguły Zapory systemu Windows (filtrowane) ================ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [{543EE9A5-7FFD-4FB0-B803-4B0F3A70427B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation) FirewallRules: [{0DBDD7A8-1CA8-4765-90AA-85B52DF91CCA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation) FirewallRules: [TCP Query User{CCE9DA98-BB7B-4F30-8ACB-398CA4151000}C:\users\viksin\appdata\local\fivem\fivem.exe] => (Allow) C:\users\viksin\appdata\local\fivem\fivem.exe (Intricus Software Limited -> Cfx.re) FirewallRules: [UDP Query User{68FC3079-90C9-4C76-8211-BB6F41F04E20}C:\users\viksin\appdata\local\fivem\fivem.exe] => (Allow) C:\users\viksin\appdata\local\fivem\fivem.exe (Intricus Software Limited -> Cfx.re) FirewallRules: [TCP Query User{E9744EA4-3DBB-436D-B6CA-D7F40437DF09}C:\users\viksin\appdata\local\teamspeak 3 client\ts3client_win64.exe] => (Allow) C:\users\viksin\appdata\local\teamspeak 3 client\ts3client_win64.exe (TeamSpeak Systems GmbH -> TeamSpeak Systems GmbH) FirewallRules: [UDP Query User{4498B9DA-12A9-483F-8327-D393F93A2D4F}C:\users\viksin\appdata\local\teamspeak 3 client\ts3client_win64.exe] => (Allow) C:\users\viksin\appdata\local\teamspeak 3 client\ts3client_win64.exe (TeamSpeak Systems GmbH -> TeamSpeak Systems GmbH) FirewallRules: [{92606EFF-0EB7-4F40-A9C0-B2AF8A5F435D}] => (Allow) C:\Program Files\HP\HP Deskjet Ink Adv 2060 K110\Bin\USBSetup.exe (Hewlett Packard -> Hewlett-Packard Co.) FirewallRules: [{23CC7D91-7A9B-47FC-853A-5BD9D32FE003}] => (Allow) E:\SteamLibrary\steamapps\common\GarrysMod\hl2.exe () [Brak podpisu cyfrowego] FirewallRules: [{447DFB77-A6F2-47CD-902A-B616728A8B0C}] => (Allow) E:\SteamLibrary\steamapps\common\GarrysMod\hl2.exe () [Brak podpisu cyfrowego] FirewallRules: [TCP Query User{EA831B18-12D6-46FF-96CE-7B27998B5F95}C:\users\viksin\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\viksin\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [UDP Query User{68A5F733-C058-40E2-ADBA-7908069F4FB8}C:\users\viksin\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\viksin\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{C9CBD161-95AB-4C97-8B49-446CB61622B3}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [{5029CC78-661D-4618-8B00-DF5F83D23763}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [TCP Query User{B04A0184-C049-4137-9438-E1889723DF8B}C:\program files (x86)\slimjet\slimjet.exe] => (Allow) C:\program files (x86)\slimjet\slimjet.exe (FlashPeak Inc. -> FlashPeak Inc.) FirewallRules: [UDP Query User{57966BE0-B116-4E53-8315-97A1B2013E21}C:\program files (x86)\slimjet\slimjet.exe] => (Allow) C:\program files (x86)\slimjet\slimjet.exe (FlashPeak Inc. -> FlashPeak Inc.) FirewallRules: [TCP Query User{2F080A8A-77B9-41AC-BC2A-3FD31F6DF067}E:\epic\farmingsimulator19\x64\farmingsimulator2019game.exe] => (Allow) E:\epic\farmingsimulator19\x64\farmingsimulator2019game.exe (GIANTS Software GmbH -> GIANTS Software GmbH) FirewallRules: [UDP Query User{8ABD9117-DE17-4548-B30D-D86F8CCD91BD}E:\epic\farmingsimulator19\x64\farmingsimulator2019game.exe] => (Allow) E:\epic\farmingsimulator19\x64\farmingsimulator2019game.exe (GIANTS Software GmbH -> GIANTS Software GmbH) FirewallRules: [TCP Query User{C486568F-9115-40E8-AFBF-74C308977972}E:\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe] => (Allow) E:\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe (PUBG CORPORATION -> PUBG Works) FirewallRules: [UDP Query User{1C7B03F6-2B95-45D0-950A-BB2ACE9F795B}E:\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe] => (Allow) E:\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe (PUBG CORPORATION -> PUBG Works) FirewallRules: [{E8FF7795-8C74-4241-9BC0-ACEFDA6D5124}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{A01EEDBE-B975-4688-9151-371C6ECD3822}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{0AEB53B7-5999-4B35-BCCC-E41218710331}] => (Allow) E:\SteamLibrary\steamapps\common\War Thunder\launcher.exe (Gaijin Network LTD -> Gaijin Entertainment) FirewallRules: [{7FEF869A-A208-45DB-9C34-AFCCA903EC43}] => (Allow) E:\SteamLibrary\steamapps\common\War Thunder\launcher.exe (Gaijin Network LTD -> Gaijin Entertainment) FirewallRules: [TCP Query User{B940E783-6D30-4F37-A7F7-C239DFF21EEB}E:\steamlibrary\steamapps\common\war thunder\win64\aces.exe] => (Allow) E:\steamlibrary\steamapps\common\war thunder\win64\aces.exe (Gaijin Network LTD -> Gaijin Entertainment) FirewallRules: [UDP Query User{C9CD19EE-8100-40FD-97D2-1533254CEA8E}E:\steamlibrary\steamapps\common\war thunder\win64\aces.exe] => (Allow) E:\steamlibrary\steamapps\common\war thunder\win64\aces.exe (Gaijin Network LTD -> Gaijin Entertainment) FirewallRules: [TCP Query User{ECDB124B-ABBE-41E6-AAD7-898C1C6342AC}E:\epic\sidmeierscivilizationvi\base\binaries\win64eos\civilizationvi_dx12.exe] => (Allow) E:\epic\sidmeierscivilizationvi\base\binaries\win64eos\civilizationvi_dx12.exe (Firaxis Games) [Brak podpisu cyfrowego] FirewallRules: [UDP Query User{6F897F65-AEB8-4CE4-B2F2-2466B9642B02}E:\epic\sidmeierscivilizationvi\base\binaries\win64eos\civilizationvi_dx12.exe] => (Allow) E:\epic\sidmeierscivilizationvi\base\binaries\win64eos\civilizationvi_dx12.exe (Firaxis Games) [Brak podpisu cyfrowego] FirewallRules: [{B92A3C9C-F737-4869-965E-417B84CA645D}] => (Allow) E:\Epic\TrackmaniaNext\trackmania.exe (NADEO SASU -> Nadeo) FirewallRules: [{3CE97BFD-549B-4508-BB7B-F0280C81D3A7}] => (Allow) E:\Epic\TrackmaniaNext\trackmania.exe (NADEO SASU -> Nadeo) FirewallRules: [TCP Query User{9E124AFC-50D6-46FF-9EAD-FEC571BD39EA}E:\planet zoo\planetzoo.exe] => (Allow) E:\planet zoo\planetzoo.exe (Frontier Developments) [Brak podpisu cyfrowego] FirewallRules: [UDP Query User{9B4C508D-2AA3-45E8-B394-4D5BEE570AEE}E:\planet zoo\planetzoo.exe] => (Allow) E:\planet zoo\planetzoo.exe (Frontier Developments) [Brak podpisu cyfrowego] FirewallRules: [TCP Query User{0BC75535-4741-419F-88E5-61EC6C28D61D}E:\city car driving\bin\win32\starter.exe] => (Allow) E:\city car driving\bin\win32\starter.exe (Forward Development) [Brak podpisu cyfrowego] FirewallRules: [UDP Query User{4BC39709-E708-46B1-BB33-98B21C98648C}E:\city car driving\bin\win32\starter.exe] => (Allow) E:\city car driving\bin\win32\starter.exe (Forward Development) [Brak podpisu cyfrowego] FirewallRules: [{E18D747B-B7FE-45AD-A6F6-B04162CCA0AC}] => (Allow) E:\SteamLibrary\steamapps\common\Arma 3\arma3launcher.exe (BOHEMIA INTERACTIVE a.s. -> Bohemia Interactive) FirewallRules: [{78E76167-8E45-4586-8AF8-A4986E75B842}] => (Allow) E:\SteamLibrary\steamapps\common\Arma 3\arma3launcher.exe (BOHEMIA INTERACTIVE a.s. -> Bohemia Interactive) FirewallRules: [TCP Query User{4A4B899D-2B1E-4B1E-B0D7-837AA0C964D7}E:\steamlibrary\steamapps\common\arma 3\arma3_x64.exe] => (Allow) E:\steamlibrary\steamapps\common\arma 3\arma3_x64.exe (BOHEMIA INTERACTIVE a.s. -> Bohemia Interactive) FirewallRules: [UDP Query User{4BB99076-D105-411D-8C35-53CBAD185301}E:\steamlibrary\steamapps\common\arma 3\arma3_x64.exe] => (Allow) E:\steamlibrary\steamapps\common\arma 3\arma3_x64.exe (BOHEMIA INTERACTIVE a.s. -> Bohemia Interactive) FirewallRules: [TCP Query User{79994E36-5EA7-4BB2-A93B-3CE0885546B3}E:\pummel\pummel.party.v1.8.1e\pummelparty.exe] => (Allow) E:\pummel\pummel.party.v1.8.1e\pummelparty.exe () [Brak podpisu cyfrowego] FirewallRules: [UDP Query User{953EEC94-FD6C-43A4-89AF-AEC7637B52F7}E:\pummel\pummel.party.v1.8.1e\pummelparty.exe] => (Allow) E:\pummel\pummel.party.v1.8.1e\pummelparty.exe () [Brak podpisu cyfrowego] FirewallRules: [TCP Query User{98B04F74-D4A6-427D-A61E-512D3ED5D66D}C:\program files (x86)\java\jre1.8.0_251\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_251\bin\javaw.exe FirewallRules: [UDP Query User{39C414F9-A8C9-4D34-BD84-0AD7531AC47D}C:\program files (x86)\java\jre1.8.0_251\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_251\bin\javaw.exe FirewallRules: [{00E90E1F-52E9-43A8-A2D8-E57051475CDA}] => (Allow) C:\Program Files (x86)\SIMDashboardServer\SIMDashboardServer.exe (Christian Hausmann -> stryder-it) FirewallRules: [{56E3763D-E860-46E1-A2DD-62C4B0838F42}] => (Allow) C:\Program Files (x86)\SIMDashboardServer\SIMDashboardServer.exe (Christian Hausmann -> stryder-it) FirewallRules: [{AFB4C281-0F4F-40CC-AEEF-1C7F652A5346}] => (Allow) C:\Program Files (x86)\SIMDashboardServer\SIMDashboardServer.exe (Christian Hausmann -> stryder-it) FirewallRules: [TCP Query User{5FC43251-78A5-469F-AB90-B59C3F0B96AA}C:\users\viksin\desktop\gierki\among us 9.9s\among us.exe] => (Allow) C:\users\viksin\desktop\gierki\among us 9.9s\among us.exe () [Brak podpisu cyfrowego] FirewallRules: [UDP Query User{C896E905-F954-4FDF-AA11-9EC44F21F4A8}C:\users\viksin\desktop\gierki\among us 9.9s\among us.exe] => (Allow) C:\users\viksin\desktop\gierki\among us 9.9s\among us.exe () [Brak podpisu cyfrowego] FirewallRules: [{D21E7645-6D54-44CD-9E25-95C4DBF5D310}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> ) FirewallRules: [{3698311A-E6CE-4B55-9700-40FA9C38C89C}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> ) FirewallRules: [TCP Query User{6A7EBA1D-6D56-4950-BE6A-9C231F32A515}C:\users\viksin\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\viksin\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [UDP Query User{4D1A63B9-7244-4132-BFEE-2223DBB87C2C}C:\users\viksin\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\viksin\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{0AC7C145-51B5-4625-9A86-72CD3D057847}] => (Allow) C:\Program Files (x86)\Overwolf\0.157.2.17\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [{100555FB-8097-4FC6-A1E4-3A186E8B0777}] => (Allow) C:\Program Files (x86)\Overwolf\0.157.2.17\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [{6BE4F531-F403-4612-B2E2-A8C007F85436}] => (Block) C:\Program Files (x86)\Overwolf\0.157.2.17\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [{568CB72E-C1F0-45D6-A353-8E2A23171A65}] => (Block) C:\Program Files (x86)\Overwolf\0.157.2.17\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [{9143E1DC-D17F-4DCE-AF15-BF51E1A09255}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{FFB464CD-A1BB-48AE-B2B3-AC2987B7E86C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{CF94A2C0-3815-4DA5-8B6D-041425591082}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{433F7A93-3A41-4508-BE73-3491ED2D0858}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{684FC01C-F8E5-4B66-B658-EC7A00C9CEE6}] => (Allow) E:\Lightworks\lightworks.exe => Brak pliku FirewallRules: [{B0A32148-9F29-4B2F-B089-82F22CAD7DF2}] => (Allow) E:\Lightworks\lightworks.exe => Brak pliku FirewallRules: [{E056B551-201F-4FE1-BF44-B1651B562CB8}] => (Allow) E:\Lightworks\ntcardvt.exe => Brak pliku FirewallRules: [{0904080C-2522-4BF0-AFA8-84613D5DA229}] => (Allow) E:\Lightworks\ntcardvt.exe => Brak pliku FirewallRules: [{BA24DF5D-E8A7-4404-B052-1940E75124CC}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) ==================== Punkty Przywracania systemu ========================= 19-11-2020 11:31:57 Zaplanowany punkt kontrolny 22-11-2020 15:50:54 Windows Update ==================== Wadliwe urządzenia w Menedżerze urządzeń ============ ==================== Błędy w Dzienniku zdarzeń: ======================== Dziennik Aplikacja: ================== Error: (11/26/2020 02:23:51 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (640,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (11/26/2020 01:27:43 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (11828,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (11/26/2020 10:32:52 AM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (2816,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (11/26/2020 10:17:25 AM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (10092,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (11/26/2020 10:09:31 AM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (6296,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (11/25/2020 10:30:18 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (8848,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (11/25/2020 10:22:47 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (1700,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (11/25/2020 09:03:00 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (7116,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Dziennik System: ============= Error: (11/26/2020 09:57:39 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi SecDrv z powodu następującego błędu: Nastąpiło zablokowanie ładowania sterownika Error: (11/26/2020 09:57:39 AM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\WINDOWS\SysWow64\drivers\SECDRV.SYS Error: (11/26/2020 09:57:28 AM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 09:56:02 na ‎26.‎11.‎2020 było nieoczekiwane. Error: (11/25/2020 03:28:37 PM) (Source: DCOM) (EventID: 10010) (User: Maszyna) Description: Serwer Microsoft.Windows.Cortana_1.13.0.18362_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca nie zarejestrował się w modelu DCOM w wymaganym czasie. Error: (11/25/2020 09:57:16 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa NcbService zakończyła działanie; wystąpił następujący błąd: Urządzenie dołączone do komputera nie działa. Error: (11/25/2020 09:57:13 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi SecDrv z powodu następującego błędu: Nastąpiło zablokowanie ładowania sterownika Error: (11/25/2020 09:57:13 AM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\WINDOWS\SysWow64\drivers\SECDRV.SYS Error: (11/25/2020 09:56:59 AM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 09:55:48 na ‎25.‎11.‎2020 było nieoczekiwane. Windows Defender: =================================== Date: 2020-03-30 11:16:22.336 Description: Produkt Program antywirusowy Windows Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niechciane oprogramowanie. Aby uzyskać więcej informacji, zobacz: https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Esulat.A!rfn&threatid=2147745898&enterprise=0 Nazwa: Trojan:Win32/Esulat.A!rfn Identyfikator: 2147745898 Ważność: Poważny Kategoria: Koń trojański Ścieżka: file:_E:\Call of Duty - Modern Warfare 2\steam_api.dll Pochodzenie wykrycia: Komputer lokalny Typ wykrycia: Konkretne Źródło wykrycia: Ochrona w czasie rzeczywistym Użytkownik: Maszyna\Viksin Nazwa procesu: E:\Call of Duty - Modern Warfare 2\_Redist\QuickSFV.EXE Wersja analizy zabezpieczeń: AV: 1.313.348.0, AS: 1.313.348.0, NIS: 1.313.348.0 Wersja aparatu: AM: 1.1.16900.4, NIS: 1.1.16900.4 Date: 2020-03-26 18:23:34.158 Description: Produkt Program antywirusowy Windows Defender napotkał błąd podczas próby aktualizacji analizy zabezpieczeń. Nowa wersja analizy zabezpieczeń: Poprzednia wersja analizy zabezpieczeń: 1.313.99.0 Źródło aktualizacji: Serwer usługi Microsoft Update Typ analizy zabezpieczeń: Oprogramowanie antywirusowe Typ aktualizacji: Pełne Użytkownik: ZARZĄDZANIE NT\SYSTEM Bieżąca wersja aparatu: Poprzednia wersja aparatu: 1.1.16900.4 Kod błędu: 0x80240438 Opis błędu: Podczas sprawdzania aktualizacji wystąpił nieoczekiwany problem. Aby uzyskać informacje na temat instalowania aktualizacji i rozwiązywania problemów z nimi, zobacz Pomoc i obsługę techniczną. Date: 2020-03-18 08:08:54.263 Description: Produkt Program antywirusowy Windows Defender napotkał błąd podczas próby aktualizacji analizy zabezpieczeń. Nowa wersja analizy zabezpieczeń: Poprzednia wersja analizy zabezpieczeń: 1.285.74.0 Źródło aktualizacji: Centrum firmy Microsoft ds. ochrony przed złośliwym oprogramowaniem Typ analizy zabezpieczeń: Oprogramowanie antywirusowe Typ aktualizacji: Pełne Użytkownik: ZARZĄDZANIE NT\USŁUGA SIECIOWA Bieżąca wersja aparatu: Poprzednia wersja aparatu: 1.1.15600.4 Kod błędu: 0x80072efe Opis błędu: Połączenie z serwerem zostało przerwane w nieprawidłowy sposób. Date: 2020-03-18 08:08:54.260 Description: Produkt Program antywirusowy Windows Defender napotkał błąd podczas próby aktualizacji analizy zabezpieczeń. Nowa wersja analizy zabezpieczeń: Poprzednia wersja analizy zabezpieczeń: 1.285.74.0 Źródło aktualizacji: Centrum firmy Microsoft ds. ochrony przed złośliwym oprogramowaniem Typ analizy zabezpieczeń: Oprogramowanie antyszpiegowskie Typ aktualizacji: Pełne Użytkownik: ZARZĄDZANIE NT\USŁUGA SIECIOWA Bieżąca wersja aparatu: Poprzednia wersja aparatu: 1.1.15600.4 Kod błędu: 0x80072efe Opis błędu: Połączenie z serwerem zostało przerwane w nieprawidłowy sposób. Date: 2020-03-18 08:08:54.260 Description: Produkt Program antywirusowy Windows Defender napotkał błąd podczas próby aktualizacji analizy zabezpieczeń. Nowa wersja analizy zabezpieczeń: Poprzednia wersja analizy zabezpieczeń: 1.285.74.0 Źródło aktualizacji: Centrum firmy Microsoft ds. ochrony przed złośliwym oprogramowaniem Typ analizy zabezpieczeń: Oprogramowanie antywirusowe Typ aktualizacji: Pełne Użytkownik: ZARZĄDZANIE NT\USŁUGA SIECIOWA Bieżąca wersja aparatu: Poprzednia wersja aparatu: 1.1.15600.4 Kod błędu: 0x80072efe Opis błędu: Połączenie z serwerem zostało przerwane w nieprawidłowy sposób. Date: 2020-03-18 07:51:20.146 Description: Produkt Program antywirusowy Windows Defender napotkał błąd podczas próby aktualizacji analizy zabezpieczeń. Nowa wersja analizy zabezpieczeń: Poprzednia wersja analizy zabezpieczeń: 1.285.74.0 Źródło aktualizacji: Serwer usługi Microsoft Update Typ analizy zabezpieczeń: Oprogramowanie antywirusowe Typ aktualizacji: Pełne Użytkownik: ZARZĄDZANIE NT\SYSTEM Bieżąca wersja aparatu: Poprzednia wersja aparatu: 1.1.15600.4 Kod błędu: 0x80240022 Opis błędu: Program nie może sprawdzić, czy są dostępne aktualizacje definicji. CodeIntegrity: =================================== Date: 2020-10-20 21:33:19.338 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Overwolf\0.157.0.16\OWExplorer.dll that did not meet the Microsoft signing level requirements. Date: 2020-10-20 21:33:19.331 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Overwolf\0.157.0.16\OWExplorer.dll that did not meet the Microsoft signing level requirements. Date: 2020-10-20 21:33:14.095 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Overwolf\0.157.0.16\OWExplorer.dll that did not meet the Microsoft signing level requirements. Date: 2020-10-20 21:33:14.090 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Overwolf\0.157.0.16\OWExplorer.dll that did not meet the Microsoft signing level requirements. Date: 2020-10-20 21:33:14.084 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Overwolf\0.157.0.16\OWExplorer.dll that did not meet the Microsoft signing level requirements. Date: 2020-10-20 21:33:14.079 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Overwolf\0.157.0.16\OWExplorer.dll that did not meet the Microsoft signing level requirements. Date: 2020-10-20 21:33:14.072 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Overwolf\0.157.0.16\OWExplorer.dll that did not meet the Microsoft signing level requirements. Date: 2020-10-20 21:33:14.067 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Overwolf\0.157.0.16\OWExplorer.dll that did not meet the Microsoft signing level requirements. ==================== Statystyki pamięci =========================== BIOS: American Megatrends Inc. 0802 07/07/2010 Płyta główna: ASUSTeK Computer INC. P7H55 Procesor: Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz Procent pamięci w użyciu: 63% Całkowita pamięć fizyczna: 8183.05 MB Dostępna pamięć fizyczna: 3005.18 MB Całkowita pamięć wirtualna: 16375.05 MB Dostępna pamięć wirtualna: 7860.64 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:110.61 GB) (Free:33.23 GB) NTFS Drive e: () (Fixed) (Total:465.76 GB) (Free:14.16 GB) NTFS Drive f: (GOODRAM) (Fixed) (Total:298.09 GB) (Free:13.14 GB) NTFS Drive g: (UDISK 2.0) (Removable) (Total:1.91 GB) (Free:0 GB) FAT Drive h: (TOSHIBA) (Removable) (Total:14.43 GB) (Free:0.8 GB) FAT32 Drive m: (TOSHIBA EXT) (Fixed) (Total:1863.01 GB) (Free:827.81 GB) NTFS \\?\Volume{c0aedb58-9d61-11f5-87ac-806e6f6e6963}\ (Zastrzeżone przez system) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS \\?\Volume{50f23024-0000-0000-0000-90ad1b000000}\ () (Fixed) (Total:0.54 GB) (Free:0.08 GB) NTFS \\?\Volume{c0aedb5a-9d61-11f5-87ac-806e6f6e6963}\ () (Fixed) (Total:0.53 GB) (Free:0.08 GB) NTFS ==================== MBR & Tablica partycji ==================== ========================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 111.8 GB) (Disk ID: 50F23024) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=110.6 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=554 MB) - (Type=27) Partition 4: (Not Active) - (Size=547 MB) - (Type=27) ========================================================== Disk: 1 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: F5B2E5EF) Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS) ========================================================== Disk: 2 (Size: 1.9 GB) (Disk ID: CD298C3F) Partition 1: (Not Active) - (Size=1.9 GB) - (Type=0E) ========================================================== Disk: 3 (Size: 14.4 GB) (Disk ID: 46F947ED) Partition 1: (Not Active) - (Size=14.4 GB) - (Type=0B) ========================================================== Disk: 4 (Size: 1863 GB) (Disk ID: AF370EDC) Partition 1: (Active) - (Size=1863 GB) - (Type=07 NTFS) ========================================================== Disk: 5 (Size: 298.1 GB) (Disk ID: 953ACC58) Partition 1: (Active) - (Size=298.1 GB) - (Type=07 NTFS) ==================== Koniec Addition.txt =======================