Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 21-03-2021
Uruchomiony przez ITI716 (25-03-2021 11:15:37)
Uruchomiony z C:\Users\ITI716\Downloads
Windows 7 Professional Service Pack 1 (X64) (2016-10-20 17:41:38)
Tryb startu: Normal
==========================================================


==================== Konta użytkowników: =============================

Administrator (S-1-5-21-3604365705-1591200432-3773341001-500 - Administrator - Disabled)
Gość (S-1-5-21-3604365705-1591200432-3773341001-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3604365705-1591200432-3773341001-1004 - Limited - Enabled)
ITI716 (S-1-5-21-3604365705-1591200432-3773341001-1001 - Administrator - Enabled) => C:\Users\ITI716
mm (S-1-5-21-3604365705-1591200432-3773341001-1005 - Limited - Enabled) => C:\Users\mm
mMedica (S-1-5-21-3604365705-1591200432-3773341001-1002 - Limited - Enabled) => C:\Users\mMedica

==================== Centrum zabezpieczeń ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie.)

AV: Dr.Web Anti-virus (Enabled - Up to date) {43B072E9-61D5-D2DF-0530-CE16F6F72D60}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Dr.Web Anti-virus (Enabled - Up to date) {F8D1930D-47EF-DD51-3F80-F5648D7067DD}
FW: Dr.Web Firewall (Enabled) {7B8BF3CC-2BBA-D387-2E6F-672308246A1B}

==================== Zainstalowane programy ======================

(W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)

7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 21.001.20145 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.5.195 - Adobe Systems, Inc.)
Assessment and Deployment Kit (HKLM-x32\...\{fc46d1b2-9557-4c1f-baac-04af4d2db7e4}) (Version: 8.59.25584 - Microsoft Corporation)
BrLauncher (HKLM-x32\...\{42D26B47-887C-45FC-BCAE-0BE485C5C0BB}) (Version: 2.0.11.0 - Brother Industries Ltd.) Hidden
Brother HL-5240 (HKLM-x32\...\{981BC441-A75D-4286-9297-2710C30E3F10}) (Version: 1.00 - Brother)
Brother Printer Driver (HKLM-x32\...\{6D33FF09-043C-45A6-A3E5-5DDBF686AC4E}) (Version: 1.4.0.0 - Brother Industries Ltd.) Hidden
BrSupportTools (HKLM-x32\...\{32F47565-84B1-42CC-B09A-4CDDD9A32F94}) (Version: 1.0.20.0 - Brother Industries Ltd.) Hidden
calibre 64bit (HKLM\...\{0118350C-0938-4CB2-B2B2-F455426D2C89}) (Version: 3.9.0 - Kovid Goyal)
CCSuitePWPWBranding (HKLM-x32\...\{C279C81A-C52B-4DCD-8258-3FFFA605EEFB}) (Version: 2.01.00170 - CryptoTech) Hidden
Comarch SmartCard (HKLM\...\Comarch SmartCard) (Version: 2.0.1.13 - Comarch S.A.)
ComarchCryptoProvider (HKLM-x32\...\{9545C027-10F3-48C6-BEB6-44387D7886B6}) (Version: 2.7.2808.5453 - Comarch) Hidden
ComarchCryptoProvider (HKLM-x32\...\{eb70c8f8-6ecb-4b3b-8360-1e54d6f9b78b}) (Version: 2.7.2808.5453 - Comarch)
CryptoCard Suite (32/64 bit) (HKLM-x32\...\{d306c301-7dc7-4139-9fbe-502c44cefada}) (Version: 2.1.170 - CryptoTech)
CryptoCard Suite (64bit) (HKLM\...\{BEB9EE64-0733-4A81-BE59-78A8F2DDB09A}) (Version: 2.01.00170 - CryptoTech) Hidden
CryptoCard Suite (HKLM-x32\...\{8D3ACF38-127E-4E9F-AEA4-102499413E9E}) (Version: 2.01.00170 - CryptoTech) Hidden
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Dr.Web Anti-virus for Windows (HKLM\...\{937CFD3F-8BFB-4208-81CB-F5004CD7B000}) (Version: 9.0.1.05190 - Doctor Web, Ltd.)
DRUKI Gofin 3.3.9.0 (HKLM-x32\...\{2EC9D42F-DC78-44B8-845C-0CF911495774}) (Version: 3.3.9.0 - Wydawnictwo Podatkowe GOFIN sp. z o.o.) Hidden
DRUKI Gofin 3.3.9.0 (HKLM-x32\...\{38563318-4260-462f-84af-a65f491b8db2}) (Version: 3.3.9.0 - Wydawnictwo Podatkowe GOFIN sp. z o.o.)
e-sprawozdania (HKLM-x32\...\{C71BF3AE-8772-4E7C-8FCE-06FA73AE2947}) (Version: 1.0.4.0 - Aplikacje Krytyczne sp. z o. o.)
Ferro Backup System (HKLM-x32\...\Ferro Backup System_is1) (Version: 5.3.0.1588 - Ferro Software)
foobar2000 v1.3.13 (HKLM-x32\...\foobar2000) (Version: 1.3.13 - Peter Pawlowski)
Galeria fotografii (HKLM-x32\...\{77655DF6-A143-4A25-A5F8-127C8CE63EDA}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GeneratorCSIOZ (wersja 1.5) (HKLM-x32\...\{DBFB79FA-10BE-4974-B760-F4F691B28F50}_is1) (Version: 1.5 - Centrum Systemów Informacyjnych Ochrony Zdrowia)
Gżegżółka XP 7.1.2.2 (HKLM-x32\...\GzegzolkaXP_is1) (Version: 7.1.2.2 - Piotr Sawicki)
HP LaserJet Professional P1100-P1560-P1600 Series (HKLM\...\HP LaserJet Professional P1100-P1560-P1600 Series) (Version:  - )
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1173 - Intel Corporation)
Intel(R) Network Connections 20.2.3001.0 (HKLM\...\PROSetDX) (Version: 20.2.3001.0 - Intel)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4534 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 4.0.0.36 - Intel Corporation)
Java 8 Update 271 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180271F0}) (Version: 8.0.2710.9 - Oracle Corporation)
Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Kits Configuration Installer (HKLM-x32\...\{E14DDED2-919B-FCCB-84AC-5ABB6D182D46}) (Version: 8.59.25584 - Microsoft) Hidden
KONICA MINOLTA 958_558_368_367Series (HKLM\...\KONICA MINOLTA 958_558_368_367Series Installer) (Version:  - KONICA MINOLTA)
KONICA MINOLTA HDD TWAIN V4 (HKLM-x32\...\{6F48253A-8800-4E37-890F-7593E106D24A}) (Version: 4.0.34000 - KONICA MINOLTA)
KONICA MINOLTA TWAIN V4 (HKLM-x32\...\{C3A1EEDD-2BC2-407B-A172-865E513ABE15}) (Version: 4.0.34000 - KONICA MINOLTA)
Konkurs Ofert 2017 (Podkarpacki OW NFZ) (HKLM-x32\...\OFERT10_09) (Version: 10.47.0116.1 - KAMSOFT S.A.)
LibreOffice 5.2.2.2 (HKLM\...\{73744FE7-5B4D-4948-8FF6-77CAB9326B14}) (Version: 5.2.2.2 - The Document Foundation)
Magical Jelly Bean KeyFinder (HKLM-x32\...\KeyFinder_is1) (Version: 2.0.10.13 - Magical Jelly Bean)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 89.0.774.57 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{669f0f51-d4ab-4d4e-9e6d-cdde2b46613f}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft WSE 3.0 (HKLM-x32\...\{EDEA8AB7-7683-4ED2-AA19-E6C078064C0D}) (Version: 3.0.5305.0 - Microsoft Corporation)
mMedica (HKLM-x32\...\MMEDICA) (Version: 6.8.0.1 - ASSECO POLAND SA)
Movie Maker (HKLM-x32\...\{DAE8CC57-EBF5-4D46-8572-9A0C769D6F16}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 86.0.1 (x86 pl) (HKLM-x32\...\Mozilla Firefox 86.0.1 (x86 pl)) (Version: 86.0.1 - Mozilla)
Mozilla Firefox 87.0 (x86 pl) (HKLM-x32\...\Mozilla Firefox 87.0 (x86 pl)) (Version: 87.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 82.0.2 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Nero 7 Essentials (HKLM-x32\...\{F61DD673-0030-4BB2-A382-7E57E97F1045}) (Version: 7.02.8078 - Nero AG)
NSS Smart Player wersja 3.10.0 (HKLM-x32\...\{DACF6EE0-5AAE-48EA-B44A-A92A449D9D12}_is1) (Version: 3.10.0 - NSS)
Oprogramowanie mikroukładu Intel® (HKLM-x32\...\{fb610cea-ba50-4d4b-a717-cf025419035c}) (Version: 10.1.1.13 - Intel(R) Corporation) Hidden
Oracle VM VirtualBox 5.2.22 (HKLM\...\{85307853-1C18-4D00-AA0B-B561502BD7C0}) (Version: 5.2.22 - Oracle Corporation)
PDFill PDF Editor Professional (HKLM\...\{D1399216-81B2-457C-A0F7-73B9A2EF6902}) (Version: 14.0 - PlotSoft LLC)
Płatnik 10.01.001 (HKLM-x32\...\{05381030-963D-4779-BECA-0D7D49268EDB}) (Version: 10.01.001 - Asseco Poland S.A.)
Poczta usługi Windows Live (HKLM-x32\...\{45FF54A4-ECD4-455D-89A2-D209737AD726}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (HKLM-x32\...\{8FFD72FC-4FFA-472D-9F76-AEC85F602F9D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation)
Radmin Viewer 3.5.2 (HKLM-x32\...\{9F9073EA-5DCE-4B23-8A0C-C7D2C89AEADC}) (Version: 3.52.1.0000 - Famatech)
Radmin VPN 1.1.8 (HKLM-x32\...\{DFCCD503-49D7-4A61-9000-D802A14D4C8D}) (Version: 1.1.4166 - Famatech)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7701 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
River Raider II 1.64.2 (HKLM-x32\...\River Raider II_is1) (Version:  - )
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.51.0 - SAMSUNG Electronics Co., Ltd.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Sigillum SIGN (HKLM\...\{FF6C4C2B-AEE2-4C0C-8827-131F8447A9CB}) (Version: 1.4.105 - PWPW S.A.)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Szafir Host 1.0.7 (HKLM\...\{18D62851-38C5-4D90-8CC9-1D57559C1659}) (Version: 1.0.7 - Krajowa Izba Rozliczeniowa S.A.)
TightVNC (HKLM\...\{4E75CBD3-C0CE-44BB-BC77-1D30493A16BB}) (Version: 2.8.27.0 - GlavSoft LLC.)
Toolkit Documentation (HKLM-x32\...\{AB1F3428-D2C6-895F-1966-BA55647B40D8}) (Version: 8.59.25584 - Microsoft) Hidden
UltraViewer version 6.2.0.47 (HKLM-x32\...\{E0FABD74-083B-47F4-AC5B-CA4237BF8913}_is1) (Version: 6.2.0.47 - DucFabulous)
UltraVnc (HKLM\...\Ultravnc2_is1) (Version: 1.2.1.1 - uvnc bvba)
UltraVnc (HKLM-x32\...\Ultravnc2_is1) (Version: 1.1.8.7 - uvnc bvba)
Unity Web Player (HKU\S-1-5-21-3604365705-1591200432-3773341001-1001\...\UnityWebPlayer) (Version: 5.3.8f2 - Unity Technologies ApS)
WinDirStat 1.1.2 (HKU\S-1-5-21-3604365705-1591200432-3773341001-1001\...\WinDirStat) (Version:  - )
WinRAR 5.91 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.91.0 - win.rar GmbH)
WPT Redistributables (HKLM-x32\...\{A5D42D71-4036-5F88-5085-657C9DF9F1DD}) (Version: 8.59.25584 - Microsoft) Hidden
WPTx64 (HKLM-x32\...\{986EABFC-92F6-CECD-9E5A-B13CAC40BB1D}) (Version: 8.59.25584 - Microsoft) Hidden
WRF (Płatnik) 1.03.002 (HKLM-x32\...\{460BE803-88CF-4FD2-9082-2450A5959959}) (Version: 1.03.002 - Asseco Poland S.A.)
WRFKL 1.02.001 H (HKLM-x32\...\{A98C53C1-D7D5-43FE-82F4-EACD66292004}) (Version: 1.02.001 H - Asseco Poland S.A.)
WRFSL 1.02.001 J (HKLM-x32\...\{98A95680-71E0-4C6B-B3D0-384193FCA4F6}) (Version: 1.02.001 J - Asseco Poland S.A.)

==================== Niestandardowe rejestracje CLSID (filtrowane): ==============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

CustomCLSID: HKU\S-1-5-21-3604365705-1591200432-3773341001-1001_Classes\CLSID\{E8D0A810-F283-E4D1-6C77-17002AD7CF73}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Windows -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [Brak podpisu cyfrowego]
ContextMenuHandlers1-x32: [DrwMenuHandlers] -> {E7593602-124B-47C9-9F73-A69308EDC973} => C:\Program Files\DrWeb\drwsxtn.dll [2016-10-21] (Doctor Web Ltd. -> Doctor Web, Ltd.)
ContextMenuHandlers1: [DrwMenuHandlers64] -> {035B18F9-A217-44d5-91C9-B682C33C1078} => C:\Program Files\DrWeb\drwsxtn64.dll [2016-10-21] (Doctor Web Ltd. -> Doctor Web, Ltd.)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [Brak podpisu cyfrowego]
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Brak pliku
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2016-12-06] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [Brak podpisu cyfrowego]
ContextMenuHandlers6-x32: [DrwMenuHandlers] -> {E7593602-124B-47C9-9F73-A69308EDC973} => C:\Program Files\DrWeb\drwsxtn.dll [2016-10-21] (Doctor Web Ltd. -> Doctor Web, Ltd.)
ContextMenuHandlers6: [DrwMenuHandlers64] -> {035B18F9-A217-44d5-91C9-B682C33C1078} => C:\Program Files\DrWeb\drwsxtn64.dll [2016-10-21] (Doctor Web Ltd. -> Doctor Web, Ltd.)

==================== Codecs (filtrowane) ====================

==================== Skróty & WMI ========================

(Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.)

WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]
Shortcut: C:\Users\ITI716\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ministerstwo Finansów\Aplikacje Krytyczne sp. z o. o..lnk -> hxxp://akmf.pl
Shortcut: C:\Users\ITI716\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ministerstwo Finansów\Ministerstwo Finansów.lnk -> hxxp://www.mf.gov.pl

==================== Załadowane moduły (filtrowane) =============

2016-10-27 06:28 - 2016-10-04 15:51 - 000076800 _____ (Igor Pavlov) [Brak podpisu cyfrowego] C:\Program Files\7-Zip\7-zip.dll
2016-10-20 18:55 - 2015-06-15 09:00 - 000074752 _____ (Intel Corporation) [Brak podpisu cyfrowego] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.dll
2018-09-20 07:32 - 2018-09-20 07:32 - 000217600 _____ (RSA - The Security Division of EMC) [Brak podpisu cyfrowego] C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ccme_asym.dll
2018-09-20 07:32 - 2018-09-20 07:32 - 000404480 _____ (RSA - The Security Division of EMC) [Brak podpisu cyfrowego] C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ccme_base.dll
2018-09-20 07:32 - 2018-09-20 07:32 - 000379904 _____ (RSA - The Security Division of EMC) [Brak podpisu cyfrowego] C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ccme_base_non_fips.dll
2018-09-20 07:32 - 2018-09-20 07:32 - 000504320 _____ (RSA - The Security Division of EMC) [Brak podpisu cyfrowego] C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ccme_ecc.dll
2018-09-20 07:32 - 2018-09-20 07:32 - 000218624 _____ (RSA - The Security Division of EMC) [Brak podpisu cyfrowego] C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\cryptocme.dll
2020-09-24 12:20 - 2020-09-24 12:20 - 000033280 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Radmin VPN\imageformats\qgif.dll
2020-09-24 12:20 - 2020-09-24 12:20 - 000031232 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Radmin VPN\imageformats\qico.dll
2020-09-24 12:20 - 2020-09-24 12:20 - 000022528 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Radmin VPN\imageformats\qsvg.dll
2020-09-24 12:20 - 2020-09-24 12:20 - 001368064 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Radmin VPN\platforms\qwindows.dll
2020-09-24 12:20 - 2020-09-24 12:20 - 005972480 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Radmin VPN\Qt5Core.dll
2020-09-24 12:20 - 2020-09-24 12:20 - 006686720 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Radmin VPN\Qt5Gui.dll
2020-09-24 12:20 - 2020-09-24 12:20 - 001137664 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Radmin VPN\Qt5Network.dll
2020-09-24 12:20 - 2020-09-24 12:20 - 000373248 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Radmin VPN\Qt5Svg.dll
2020-09-24 12:20 - 2020-09-24 12:20 - 005717504 _____ (The Qt Company Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Radmin VPN\Qt5Widgets.dll
2015-07-27 12:14 - 2015-07-27 12:14 - 001313280 _____ (Wei Dai) [Brak podpisu cyfrowego] C:\Program Files (x86)\CryptoTech\CryptoCard\cpp52v12.dll

==================== Alternate Data Streams (filtrowane) ========

==================== Tryb awaryjny (filtrowane) ==================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DrWebEngine => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\DrWebEngine => ""="Service"

==================== Powiązania plików (filtrowane) =================

==================== Internet Explorer (Wersja 11) (filtrowane) ==========

HKU\S-1-5-21-3604365705-1591200432-3773341001-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://192.168.1.10:82/
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_271\bin\ssv.dll [2020-10-28] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Pomocnik logowania za pomocą konta Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_271\bin\jp2ssv.dll [2020-10-28] (Oracle America, Inc. -> Oracle Corporation)
DPF: HKLM-x32 {92ECE6FA-AC2E-4042-BFAE-0C8608E52A3E} hxxps://login.ingbusiness.pl/ing2/static/components/SignActivXIng.cab

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.)

IE trusted site: HKU\S-1-5-21-3604365705-1591200432-3773341001-1001\...\ingbusiness.pl -> hxxps://login.ingbusiness.pl

==================== Hosts - zawartość: =========================

(Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts

==================== Inne obszary ===========================

(Obecnie brak automatycznej naprawy dla tej sekcji.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> D:\ORACLE\product\11.2.0\client_1\bin;D:\RUNTIME7.0;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files\Calibre2\;C:\Program Files (x86)\Windows Kits\8.0\Windows Performance Toolkit\;C:\Program Files (x86)\CryptoTech\CryptoCard\;C:\Program Files\CryptoTech\CryptoCard\
HKU\S-1-5-21-3604365705-1591200432-3773341001-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\ITI716\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3604365705-1591200432-3773341001-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\mMedica\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3604365705-1591200432-3773341001-1005\Control Panel\Desktop\\Wallpaper -> C:\Users\mm\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.4.4 - 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Zapora systemu Windows [funkcja włączona]

==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==

(Załączenie wejścia w fixlist spowoduje jego usunięcie.)

MSCONFIG\Services: NMIndexingService => 3
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\startupreg: BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} => "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"

==================== Reguły Zapory systemu Windows (filtrowane) ================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) C:\Windows\system32\sppsvc.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) C:\Windows\system32\sppsvc.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{58024E8C-C208-4232-9A28-115EF9D2EAA0}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D7F8465C-DD7F-4517-B2D7-15F37A3B4936}] => (Allow) LPort=2869
FirewallRules: [{3FE00AEA-D1D2-4519-B127-41D9937C1209}] => (Allow) LPort=1900
FirewallRules: [{7462B9FF-B554-4DB2-AE68-F9BD1BF0ACCF}] => (Allow) LPort=5900
FirewallRules: [{D6D349CB-98AB-407D-B83C-9E613476DB77}] => (Allow) LPort=5800
FirewallRules: [{25A84D1F-CDFD-4178-B903-FB66BDF55924}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\winvnc.exe (uvnc bvba -> UltraVNC)
FirewallRules: [{4A713BBF-C8B8-4068-927B-399AE4EC1AFB}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\winvnc.exe (uvnc bvba -> UltraVNC)
FirewallRules: [{F07F9BD9-17F5-473B-AF66-FA8B82CEA24A}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\vncviewer.exe (uvnc bvba -> UltraVNC)
FirewallRules: [{D3DAB0F4-3F11-442E-97F2-1FA89BDBFCB6}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\vncviewer.exe (uvnc bvba -> UltraVNC)
FirewallRules: [{10472447-225C-42E5-ABDA-A5420765B43F}] => (Allow) D:\Program Files (x86)\FERRO Software\Ferro Backup System\FBSWorker.exe (Ferro Software -> FERRO Software)
FirewallRules: [{BD9F43B1-8B9E-4FF9-95C2-85DFAD98C887}] => (Allow) D:\Program Files (x86)\FERRO Software\Ferro Backup System\FBSWorker.exe (Ferro Software -> FERRO Software)
FirewallRules: [{2B4EDDF6-F982-455D-92E7-5D0823906266}] => (Allow) D:\Program Files (x86)\FERRO Software\Ferro Backup System\FBSWorker.exe (Ferro Software -> FERRO Software)
FirewallRules: [{E90A8C75-FCAB-4DBD-A5B2-923F279E938C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{4C1988B6-84B6-480B-9970-B47B6848BB22}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{EDA8E9E4-84F6-440B-81B9-794AA16694D6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{64304113-98BD-48CD-B743-70521B85A327}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{30DE486E-A49C-4AF1-99AB-DEFA9496B1AB}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{5B0E63DE-6372-4079-9FAB-3AD2421C0284}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{D8130C82-B06B-4B27-BC84-07B04FF5B7E7}] => (Allow) LPort=5432
FirewallRules: [{892FB1BA-60DE-482F-BBA2-2C3F1D1CAF80}] => (Allow) C:\Program Files (x86)\uvnc bvba\UltraVNC\vncviewer.exe (uvnc bvba -> UltraVNC)
FirewallRules: [{6CCF33C8-78E9-44FA-BBF0-86E2A22D7E62}] => (Allow) C:\Program Files (x86)\uvnc bvba\UltraVNC\vncviewer.exe (uvnc bvba -> UltraVNC)
FirewallRules: [TCP Query User{9EA35FB2-D3EE-4DFD-A934-EE67D879E737}C:\users\iti716\downloads\anydesk.exe] => (Allow) C:\users\iti716\downloads\anydesk.exe => Brak pliku
FirewallRules: [UDP Query User{FBCFB2FB-804C-48FF-BEB7-0DF487D43DA7}C:\users\iti716\downloads\anydesk.exe] => (Allow) C:\users\iti716\downloads\anydesk.exe => Brak pliku
FirewallRules: [TCP Query User{47FD5A22-EA74-495F-951B-9C735392BC45}C:\users\iti716\desktop\pwpwsign5\pwpwsign5.exe] => (Allow) C:\users\iti716\desktop\pwpwsign5\pwpwsign5.exe () [Brak podpisu cyfrowego]
FirewallRules: [UDP Query User{582EBD93-E8B8-4B6A-B7FB-BECCFE741B44}C:\users\iti716\desktop\pwpwsign5\pwpwsign5.exe] => (Allow) C:\users\iti716\desktop\pwpwsign5\pwpwsign5.exe () [Brak podpisu cyfrowego]
FirewallRules: [TCP Query User{39C8B83D-1BEB-4D73-A2DF-4C9D36646CC2}C:\program files (x86)\pwpwsign5\pwpwsign5.exe] => (Allow) C:\program files (x86)\pwpwsign5\pwpwsign5.exe => Brak pliku
FirewallRules: [UDP Query User{8D6A4214-B4AE-41BC-9214-37C028EBF4A1}C:\program files (x86)\pwpwsign5\pwpwsign5.exe] => (Allow) C:\program files (x86)\pwpwsign5\pwpwsign5.exe => Brak pliku
FirewallRules: [TCP Query User{6B7640F6-A864-4C25-9909-D8912E0546C5}C:\program files (x86)\pwpwsign5\runtime\bin\javaw.exe] => (Allow) C:\program files (x86)\pwpwsign5\runtime\bin\javaw.exe => Brak pliku
FirewallRules: [UDP Query User{9FD0B7FA-D56D-4C94-BB74-4DE67605BA2B}C:\program files (x86)\pwpwsign5\runtime\bin\javaw.exe] => (Allow) C:\program files (x86)\pwpwsign5\runtime\bin\javaw.exe => Brak pliku
FirewallRules: [{B42BBA49-F69C-4DA5-8435-DE0DE8CCE3B8}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => Brak pliku
FirewallRules: [{E5554B4C-A16F-46D2-B791-A4B98FC8C888}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => Brak pliku
FirewallRules: [{D815D836-2223-4B0F-B9B7-12CCAA801DC7}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => Brak pliku
FirewallRules: [{116DAA0C-C438-44F2-938A-6299E37575F1}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => Brak pliku
FirewallRules: [{000A44CC-D644-4CDF-9207-98328A9E9D6F}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => Brak pliku
FirewallRules: [{C3C2E1EE-7A53-48EA-9AED-CA5A9D1F30E8}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => Brak pliku
FirewallRules: [TCP Query User{BAB48016-276D-4881-950E-6C97651026B7}C:\program files (x86)\sigillum sign\runtime\bin\javaw.exe] => (Allow) C:\program files (x86)\sigillum sign\runtime\bin\javaw.exe
FirewallRules: [UDP Query User{0508C36F-D880-4070-B170-5FF5905908C9}C:\program files (x86)\sigillum sign\runtime\bin\javaw.exe] => (Allow) C:\program files (x86)\sigillum sign\runtime\bin\javaw.exe
FirewallRules: [{B63DA98F-5CF0-48C5-A7BF-6B82D1D98B27}] => (Allow) C:\Users\ITI716\Downloads\AeroAdmin.exe (AeroAdmin LLC -> AeroAdmin LLC) [Brak podpisu cyfrowego]
FirewallRules: [{CF8331E7-0061-4033-86DE-58E4B618E81D}] => (Allow) C:\Users\ITI716\Downloads\AeroAdmin.exe (AeroAdmin LLC -> AeroAdmin LLC) [Brak podpisu cyfrowego]
FirewallRules: [TCP Query User{2D4C677D-6436-4D1D-A963-19DB8E5E4810}C:\users\iti716\appdata\local\temp\orainstall2020-02-13_01-09-17pm\jdk\jre\bin\javaw.exe] => (Allow) C:\users\iti716\appdata\local\temp\orainstall2020-02-13_01-09-17pm\jdk\jre\bin\javaw.exe => Brak pliku
FirewallRules: [UDP Query User{05BD54BB-4341-43C9-8E01-6E9ECD1991AC}C:\users\iti716\appdata\local\temp\orainstall2020-02-13_01-09-17pm\jdk\jre\bin\javaw.exe] => (Allow) C:\users\iti716\appdata\local\temp\orainstall2020-02-13_01-09-17pm\jdk\jre\bin\javaw.exe => Brak pliku
FirewallRules: [{4F365622-EA0C-4202-BD01-CAB10CC0B209}] => (Allow) D:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe => Brak pliku
FirewallRules: [{F93E110A-4245-4A62-82E5-E6CEA8330CC0}] => (Allow) D:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe => Brak pliku
FirewallRules: [{FAA77554-FD23-46F0-B120-20A5896ACE9C}] => (Allow) C:\Program Files\TightVNC\tvnserver.exe (GlavSoft LLC -> GlavSoft LLC.)
FirewallRules: [{451D8487-E295-4FD4-80D4-A6A267007769}] => (Allow) C:\Program Files (x86)\Radmin VPN\RvControlSvc.exe (Famatech Corp. -> Famatech Corp.)
FirewallRules: [{3CDFDD3E-6F22-4246-ADAC-F9BF92AFCEDF}] => (Allow) C:\Program Files (x86)\Sigillum Sign\sigillum.exe (PWPW S.A.) [Brak podpisu cyfrowego]
FirewallRules: [{AB480920-D26F-4C36-8A1C-D8394A876E9F}] => (Allow) C:\Program Files (x86)\Sigillum Sign\sigillum.exe (PWPW S.A.) [Brak podpisu cyfrowego]
FirewallRules: [{D1CF565D-01F5-4F9A-9F63-379707591AC3}] => (Allow) C:\Program Files (x86)\Sigillum Sign\sigillumCmd.exe (PWPW S.A.) [Brak podpisu cyfrowego]
FirewallRules: [{7944C8CD-0FC9-4C49-B743-A2E00400D285}] => (Allow) C:\Program Files (x86)\Sigillum Sign\sigillumCmd.exe (PWPW S.A.) [Brak podpisu cyfrowego]
FirewallRules: [{CF7EB730-F3AE-49C1-8EF0-22AB11CCA0CC}] => (Allow) C:\Program Files (x86)\Sigillum Sign\sigillumCli.exe (PWPW S.A.) [Brak podpisu cyfrowego]
FirewallRules: [{4CA99E2D-2CCD-4207-9102-D9EA8F116D26}] => (Allow) C:\Program Files (x86)\Sigillum Sign\sigillumCli.exe (PWPW S.A.) [Brak podpisu cyfrowego]

==================== Punkty Przywracania systemu =========================

21-01-2021 11:48:04 Zaplanowany punkt kontrolny
29-01-2021 10:11:17 Zaplanowany punkt kontrolny
05-02-2021 11:11:33 Zaplanowany punkt kontrolny
15-02-2021 12:16:21 Zaplanowany punkt kontrolny
18-02-2021 08:11:06 Zainstalowano: Sigillum SIGN
25-02-2021 12:01:42 Zaplanowany punkt kontrolny
05-03-2021 14:10:51 Zaplanowany punkt kontrolny
16-03-2021 11:38:48 Zaplanowany punkt kontrolny
24-03-2021 12:08:17 Zaplanowany punkt kontrolny

==================== Wadliwe urządzenia w Menedżerze urządzeń ============

Name: Port drukarki (LPT1)
Description: Port drukarki
Class Guid: {4d36e978-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardowe typy portów)
Service: Parport
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: VirtualBox Host-Only Ethernet Adapter
Description: VirtualBox Host-Only Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Oracle Corporation
Service: VBoxNetAdp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Błędy w Dzienniku zdarzeń: ========================

Dziennik Aplikacja:
==================
Error: (03/25/2021 07:11:45 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (03/25/2021 07:11:05 AM) (Source: Aktualizacja Programu Płatnik) (EventID: 0) (User: )
Description: Nie można uruchomić usługi. Nieprawidłowe dojście

Error: (03/24/2021 01:11:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: UltraViewer_Desktop.exe, wersja: 6.2.0.47, sygnatura czasowa: 0x5dde83ec
Nazwa modułu powodującego błąd: MSVBVM60.DLL, wersja: 6.0.98.15, sygnatura czasowa: 0x4a5bda6c
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00048b9d
Identyfikator procesu powodującego błąd: 0x1e30
Godzina uruchomienia aplikacji powodującej błąd: 0x01d720a45c1367ee
Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\UltraViewer\UltraViewer_Desktop.exe
Ścieżka modułu powodującego błąd: C:\Program Files (x86)\UltraViewer\MSVBVM60.DLL
Identyfikator raportu: 1b729b4e-8c9a-11eb-8d06-708bcda1cb68

Error: (03/24/2021 07:06:23 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (03/24/2021 07:05:52 AM) (Source: Aktualizacja Programu Płatnik) (EventID: 0) (User: )
Description: Nie można uruchomić usługi. Nieprawidłowe dojście

Error: (03/23/2021 07:06:05 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (03/23/2021 07:05:31 AM) (Source: Aktualizacja Programu Płatnik) (EventID: 0) (User: )
Description: Nie można uruchomić usługi. Nieprawidłowe dojście

Error: (03/22/2021 07:03:17 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.


Dziennik System:
=============
Error: (03/25/2021 07:21:46 AM) (Source: BROWSER) (EventID: 8032) (User: )
Description: Usługa przeglądarki zbyt wiele razy nie zdołała pobrać listy kopii zapasowych w transporcie \Device\NetBT_Tcpip_{575F692A-46B7-4738-96CD-7F1DD66A0081}.
Przeglądarka zapasowa jest zatrzymywana.

Error: (03/25/2021 07:11:01 AM) (Source: VBoxNetLwf) (EventID: 12) (User: )
Description: Sterownik wykrył błąd wewnętrzny sterownika na \Device\VBoxNetLwf.

Error: (03/24/2021 02:33:40 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Upłynął limit czasu (180000 ms) podczas oczekiwania na odpowiedź transakcji z usługi DrWebAVService.

Error: (03/24/2021 10:11:53 AM) (Source: Disk) (EventID: 11) (User: )
Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk2\DR2.

Error: (03/24/2021 10:11:52 AM) (Source: Disk) (EventID: 11) (User: )
Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk2\DR2.

Error: (03/24/2021 10:11:52 AM) (Source: Disk) (EventID: 11) (User: )
Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk2\DR2.

Error: (03/24/2021 07:32:51 AM) (Source: BROWSER) (EventID: 8032) (User: )
Description: Usługa przeglądarki zbyt wiele razy nie zdołała pobrać listy kopii zapasowych w transporcie \Device\NetBT_Tcpip_{575F692A-46B7-4738-96CD-7F1DD66A0081}.
Przeglądarka zapasowa jest zatrzymywana.

Error: (03/24/2021 07:05:49 AM) (Source: VBoxNetLwf) (EventID: 12) (User: )
Description: Sterownik wykrył błąd wewnętrzny sterownika na \Device\VBoxNetLwf.


==================== Statystyki pamięci =========================== 

BIOS: American Megatrends Inc. 1805 06/21/2016
Płyta główna: ASUSTeK COMPUTER INC. H170M-PLUS
Procesor: Intel(R) Core(TM) i7-6700 CPU @ 3.40GHz
Procent pamięci w użyciu: 45%
Całkowita pamięć fizyczna: 16264.31 MB
Dostępna pamięć fizyczna: 8869.37 MB
Całkowita pamięć wirtualna: 19262.49 MB
Dostępna pamięć wirtualna: 11333.34 MB

==================== Dyski ================================

Drive c: (System) (Fixed) (Total:223.47 GB) (Free:122.05 GB) NTFS
Drive d: (Data ) (Fixed) (Total:292.97 GB) (Free:228.29 GB) NTFS
Drive e: (Nowy) (Fixed) (Total:195.31 GB) (Free:97.98 GB) NTFS
Drive f: (Kindle) (Removable) (Total:3.19 GB) (Free:2.58 GB) FAT32

\\?\Volume{6c47ca83-96eb-11e6-975a-806e6f6e6963}\ (Zastrzeżone przez system) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS

==================== MBR & Tablica partycji ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: AE9F0450)
Partition 1: (Not Active) - (Size=293 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=195.3 GB) - (Type=07 NTFS)

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 223.6 GB) (Disk ID: 5E9FE33D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=223.5 GB) - (Type=07 NTFS)

==========================================================
Disk: 2 (Size: 3.2 GB) (Disk ID: 386D588D)
Partition 1: (Not Active) - (Size=3.2 GB) - (Type=0B)

==================== Koniec  Addition.txt =======================