Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 22-09-2021 02 Uruchomiony przez Rostov (29-09-2021 21:25:09) Uruchomiony z C:\Users\Rostov\Desktop\FRST Windows 7 Home Premium Service Pack 1 (X64) (2020-03-17 09:54:12) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= (Załączenie wejścia w fixlist spowoduje jego usunięcie.) Administrator (S-1-5-21-764258043-3443933537-1065429426-500 - Administrator - Disabled) Gość (S-1-5-21-764258043-3443933537-1065429426-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-764258043-3443933537-1065429426-1002 - Limited - Enabled) Rostov (S-1-5-21-764258043-3443933537-1065429426-1000 - Administrator - Enabled) => C:\Users\Rostov ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189} AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) 7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov) ActivePerl 5.28.1 Build 0000 (64-bit) (HKLM\...\{D247155D-8AC0-5432-9BC3-7D2D6A784B1A}) (Version: 5.28.0000 - ActiveState) Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 21.007.20091 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19120 - Adobe Systems Incorporated) Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd) AIMP (HKLM-x32\...\AIMP) (Version: v4.70.2254, 12.08.2021 - AIMP DevTeam) ALLMediaServer (HKLM\...\{FE77909E-B782-4554-A92A-4D887CEF0ACC}_is1) (Version: 1.6 - ALLPlayer Ltd.) ALLPlayer (wersja 8.8.5) (HKLM\...\{68972948-F221-4267-9EB6-2EB5D913C4CF}_is1) (Version: 8.8.5 - ALLPlayer Ltd.) ALLPlayer Pilot (HKLM-x32\...\{146BDBDD-ACD9-4B04-A286-C27471841E8E}_is1) (Version: 2.5 - ALLPlayer Group, Ltd.) Audacity 2.3.3 (HKLM-x32\...\Audacity_is1) (Version: 2.3.3 - Audacity Team) AutoHotkey 1.1.33.09 (HKLM\...\AutoHotkey) (Version: 1.1.33.09 - Lexikos) Avidemux VC++ 64bits (HKU\S-1-5-21-764258043-3443933537-1065429426-1000\...\{071aff76-fd18-4807-a337-41b72f023bb5}) (Version: 2.7.6 - Mean) Brackets (HKLM-x32\...\{43086E55-5B37-4DA8-852F-EEC6C75ECFE9}) (Version: 1.14.17770 - brackets.io) calibre 64bit (HKLM\...\{0FD8DB9D-5D78-4919-9413-0940F43334DD}) (Version: 4.23.0 - Kovid Goyal) CCleaner (HKLM\...\CCleaner) (Version: 5.85 - Piriform) CPUID CPU-Z 1.97 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.97 - CPUID, Inc.) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden Dell DataSafe Online (HKLM-x32\...\{7EC66A95-AC2D-4127-940B-0445A526AB2F}) (Version: 2.1.19634 - Dell) Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc) Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.) Dell MusicStage (HKLM-x32\...\{91AF2672-F5BC-42CF-8037-A9D2F92BBCC0}) (Version: 1.5.201.0 - Fingertapps) Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.65 - ArcSoft) Dell Support Center (HKLM\...\{0090A87C-3E0E-43D4-AA71-A71B06563A4A}) (Version: 3.1.5803.11 - PC-Doctor, Inc.) Hidden Dell Support Center (HKLM\...\Dell Support Center) (Version: 3.1.5803.11 - Dell Inc.) Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.1207.101.225 - ALPS ELECTRIC CO., LTD.) Dell VideoStage (HKLM-x32\...\{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.2.0.1712 - CyberLink Corp.) Hidden Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.2.0.1712 - CyberLink Corp.) Dell WLAN and Bluetooth Client Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Dell Inc.) DirectX 9 Runtime (HKLM-x32\...\{AF9E97C1-7431-426D-A8D5-ABE40995C0B1}) (Version: 1.00.0000 - Sonic Solutions) Hidden Duke Nukem 3D Twentieth Anniversary World Tour (HKLM-x32\...\Duke Nukem 3D Twentieth Anniversary World Tour_is1) (Version: - ) EaseUS Todo Backup Free 12.0 (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 12.0 - CHENGDU YIWO Tech Development Co., Ltd) e-Kiosk Reader 1.0.61 (HKLM-x32\...\e-Kiosk Reader) (Version: 1.0.61 - e-Kiosk S.A.) Evernote Legacy v. 6.25.2 (HKLM-x32\...\{CA541A4E-F915-11EA-8017-42010A401FD0}) (Version: 6.25.2.9198 - Evernote Corp.) FastStone Image Viewer 7.5 (HKLM-x32\...\FastStone Image Viewer) (Version: 7.5 - FastStone Soft) FileZilla Client 3.55.1 (HKLM-x32\...\FileZilla Client) (Version: 3.55.1 - Tim Kosse) Firefox Developer Edition 85.0 (x64 pl) (HKLM\...\Firefox Developer Edition 85.0 (x64 pl)) (Version: 85.0 - Mozilla) Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation) FreeFileSync 11.13 (HKLM-x32\...\FreeFileSync_is1) (Version: 11.13 - FreeFileSync.org) Gadwin PrintScreen (64-Bit) (HKLM\...\{1601AB55-C55E-4EE9-8D20-69D91A772CE6}) (Version: 6.2.0.0 - Gadwin, Ltd.) Galeria fotografii usługi Windows Live (HKLM-x32\...\{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 94.0.4606.61 - Google LLC) Google Chrome Canary (HKU\S-1-5-21-764258043-3443933537-1065429426-1000\...\Google Chrome SxS) (Version: 96.0.4656.3 - Google LLC) HexChat (HKLM\...\HexChat_is1) (Version: 2.14.3 - HexChat) HP Deskjet 1050 J410 series — badanie mające na celu poprawę produktów (HKLM\...\{52A87876-4D1A-4524-9F06-53A490E6E34D}) (Version: 28.0.1313.0 - Hewlett-Packard Co.) HP Deskjet 1050 J410 series — podstawowe oprogramowanie urządzenia (HKLM\...\{B6A3D97D-484B-48B5-85C6-361D9FA25CDF}) (Version: 28.0.1313.0 - Hewlett-Packard Co.) HP Deskjet 1050 J410 series Pomoc (HKLM-x32\...\{5C90D8CF-F12A-41C6-9007-3B651A1F0D78}) (Version: 140.0.66.66 - Hewlett Packard) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6341.0 - IDT) inSSIDer (HKU\S-1-5-21-764258043-3443933537-1065429426-1000\...\inSSIDer) (Version: 5.4.0 - MetaGeek, LLC) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation) Intel(R) Turbo Boost Technology Monitor 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel) IrfanView 4.54 (64-bit) (HKLM\...\IrfanView64) (Version: 4.54 - Irfan Skiljan) Ivacy (HKLM-x32\...\Ivacy_is1) (Version: 6.0.0.0 - Ivacy) Java(TM) 6 Update 27 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416027FF}) (Version: 6.0.270 - Oracle) Java(TM) 6 Update 27 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216027FF}) (Version: 6.0.270 - Oracle) Junk Mail filter update (HKLM-x32\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden KeyboardTest V3.2 (HKLM\...\KeyboardTest_is1) (Version: 3.2 - PassMark Software) KeyTweak - Keyboard Remapper (remove only) (HKLM-x32\...\KeyTweak) (Version: - ) K-Lite Codec Pack 15.4.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 15.4.0 - KLCP) Mesh Runtime (HKLM-x32\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.8 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.8.03761 - Microsoft Corporation) Microsoft .NET Framework 4.8 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.8.03761 - Microsoft Corporation) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 83.0.478.50 - Microsoft Corporation) Microsoft Keyboard Layout Creator 1.4 (HKLM-x32\...\{99E66BC9-E4B6-485F-ABFC-31EFCE36DFDF}) (Version: 1.4.6000 - Microsoft Corp.) Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 x64 ENU (HKLM\...\{8424B163-D1E0-48B7-88A2-C7A61767B3D7}) (Version: 4.0.8482.1 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual Studio Code (User) (HKU\S-1-5-21-764258043-3443933537-1065429426-1000\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.60.1 - Microsoft Corporation) Mozilla Firefox 81.0.1 (x64 pl) (HKLM\...\Mozilla Firefox 81.0.1 (x64 pl)) (Version: 81.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 82.0 - Mozilla) Mozilla Thunderbird 78.14.0 (x86 pl) (HKLM-x32\...\Mozilla Thunderbird 78.14.0 (x86 pl)) (Version: 78.14.0 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Napisy24 (HKLM\...\{D1985DBC-F09E-4317-91B8-932AD0FD4A27}_is1) (Version: 1.9.5 - Napisy24.pl) NetWorx 5.5.5 (HKLM\...\NetWorx_is1) (Version: - Softperfect) Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.1.2 - Notepad++ Team) One Photo Viewer (HKLM-x32\...\One Photo Viewer One Photo Viewer) (Version: 1.13.1.0 - Jonas Selling) OpenOffice 4.1.7 (HKLM-x32\...\{4440D601-AB49-4963-B728-BE0DCED42156}) (Version: 4.17.9800 - Apache Software Foundation) Opera Stable 78.0.4093.231 (HKLM-x32\...\Opera 78.0.4093.231) (Version: 78.0.4093.231 - Opera Software) Opera Stable 79.0.4143.50 (HKLM-x32\...\Opera 79.0.4143.50) (Version: 79.0.4143.50 - Opera Software) PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.322.10 - Tracker Software Products Ltd) PhotoShowExpress (HKLM-x32\...\{3250260C-7A95-4632-893B-89657EB5545B}) (Version: 2.0.063 - ##COMPANY_NAME##) Hidden PL-UK (HKLM\...\{2C5D562E-40CD-4D64-8D18-907564B52C24}) (Version: 1.0.3.40 - Bronek Kozicki) Poczta usługi Windows Live (HKLM-x32\...\{64376910-1860-4CEF-8B34-AA5D205FC5F1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (HKLM-x32\...\{7A9D47BA-6D50-4087-866F-0800D8B89383}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation) PopTrayU 5.2.6 (HKLM-x32\...\PopTrayU) (Version: 5.2.6 - Jessica Brown) PRO Speed Test 3.0.9.5 (HKLM-x32\...\{5a5d921c-2517-4007-9804-050d4cceb3f7}}_is1) (Version: - V-SPEED Sp. z o.o.) PuTTY release 0.74 (64-bit) (HKLM\...\{127B996B-5308-4012-865B-9446451EA326}) (Version: 0.74.0.0 - Simon Tatham) Python 3.8.4 (64-bit) (HKU\S-1-5-21-764258043-3443933537-1065429426-1000\...\{1755b405-bf69-4659-934d-f14d4e57ac48}) (Version: 3.8.4150.0 - Python Software Foundation) Python 3.8.4 Add to Path (64-bit) (HKLM\...\{04D3BB0A-F6EC-4AB6-8C09-02AC886F5A7F}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python 3.8.4 Core Interpreter (64-bit) (HKLM\...\{986184E0-B052-438C-B54E-089159C8D50E}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python 3.8.4 Development Libraries (64-bit) (HKLM\...\{6980FF73-88CD-43EE-9CE7-1896A62C46F4}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python 3.8.4 Documentation (64-bit) (HKLM\...\{D228308E-49EF-4548-9FFF-1856C31DDD43}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python 3.8.4 Executables (64-bit) (HKLM\...\{21CB7ABF-B2E4-4789-BB93-8316725B07D4}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python 3.8.4 pip Bootstrap (64-bit) (HKLM\...\{2DAE01B4-6BB1-45A1-8491-645EF0FF098F}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python 3.8.4 Standard Library (64-bit) (HKLM\...\{7F843096-9516-408E-896F-99BF2078651A}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python 3.8.4 Tcl/Tk Support (64-bit) (HKLM\...\{9F4A6362-9E57-4DE9-825B-946940925895}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python 3.8.4 Test Suite (64-bit) (HKLM\...\{BD9575A2-9731-4C64-A8AF-31B8FA629675}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python 3.8.4 Utility Scripts (64-bit) (HKLM\...\{4D25AE4C-92F9-4EBE-8E2B-A9E47D2D6C5C}) (Version: 3.8.4150.0 - Python Software Foundation) Hidden Python Launcher (HKLM-x32\...\{8310C47D-C846-4476-A079-1FDD7B5B0503}) (Version: 3.8.7133.0 - Python Software Foundation) Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 10.09.25 - Dell Inc.) RBVirtualFolder64Inst (HKLM\...\{9D6DFAD6-09E5-445E-A4B5-A388FEEBD90D}) (Version: 1.00.0000 - Roxio, Inc.) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30126 - Realtek Semiconductor Corp.) Revo Uninstaller 2.2.5 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.2.5 - VS Revo Group, Ltd.) Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.77.0 - Roxio) Roxio File Backup (HKLM\...\{60B2315F-680F-4EB3-B8DD-CCDC86A7CCAB}) (Version: 1.3.2 - Roxio) Hidden Skype™ 5.5 (HKLM-x32\...\{AA59DDE4-B672-4621-A016-4C248204957A}) (Version: 5.5.119 - Skype Technologies S.A.) Sonic CinePlayer Decoder Pack (HKLM-x32\...\{9A00EC4E-27E1-42C4-98DD-662F32AC8870}) (Version: 4.3.0 - Sonic Solutions) Hidden Spotify (HKU\S-1-5-21-764258043-3443933537-1065429426-1000\...\Spotify) (Version: 1.1.68.628.geb44bd66 - Spotify AB) UnistallAtomSDK (HKLM-x32\...\AtomSDKInstaller_is1) (Version: 3.6.0 - ) VBCABLE, The Virtual Audio Cable (HKLM\...\VB:VBCABLE {87459874-1236-4469}) (Version: - VB-Audio Software) VdhCoApp 1.6.2 (HKLM\...\weh-iss-net.downloadhelper.coapp_is1) (Version: - DownloadHelper) VLC media player (HKLM\...\VLC media player) (Version: 3.0.16 - VideoLAN) Windows Movie Maker 2.6 (HKLM-x32\...\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}) (Version: 2.6.4037.0 - Microsoft Corporation) Zinio Reader 4 (HKLM-x32\...\{7FB00B6B-6843-97EC-EED6-78BD6D35370A}) (Version: 4.2.4164 - Zinio LLC) Hidden Zinio Reader 4 (HKLM-x32\...\ZinioReader4) (Version: 4.2.4164 - Zinio LLC) ==================== Niestandardowe rejestracje CLSID (filtrowane): ============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-764258043-3443933537-1065429426-1000_Classes\CLSID\{85D8EE2F-794F-41F0-BB03-49D56A23BEF4}\InprocServer32 -> C:\Users\Rostov\AppData\Local\Google\Update\1.3.36.102\psuser_64.dll (Google LLC -> Google LLC) CustomCLSID: HKU\S-1-5-21-764258043-3443933537-1065429426-1000_Classes\CLSID\{BE5C2E39-090F-46A2-AFAA-47540743B4FE}\InprocServer32 -> C:\Users\Rostov\AppData\Local\Google\Update\1.3.36.102\psuser_64.dll (Google LLC -> Google LLC) CustomCLSID: HKU\S-1-5-21-764258043-3443933537-1065429426-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Rostov\AppData\Local\Google\Update\1.3.36.102\psuser_64.dll (Google LLC -> Google LLC) CustomCLSID: HKU\S-1-5-21-764258043-3443933537-1065429426-1000_Classes\CLSID\{FA372A6E-149F-4E95-832D-8F698D40AD7F}\localserver32 -> C:\Users\Rostov\AppData\Local\Google\Chrome SxS\Application\96.0.4656.3\notification_helper.exe (Google LLC -> Google LLC) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Brak podpisu cyfrowego] ContextMenuHandlers1: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files (x86)\AIMP\System\aimp_menu64.dll [2021-08-19] (IP Izmaylov Artem Andreevich -> AIMP DevTeam) ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2021-07-16] (Notepad++ -> ) ContextMenuHandlers1: [Atheros] -> {B8952421-0E55-400B-94A6-FA858FC0A39F} => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvAppExt.dll [2011-05-20] (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers1: [Roxio Burn] -> {E8CB9D53-A47A-42B5-9F5B-96B037C9DD4C} => c:\Program Files\Roxio\Roxio Burn\RB_ContextMenu64.dll [2010-11-11] (Sonic Solutions -> TODO: ) ContextMenuHandlers1: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2019-11-15] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers2: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2019-11-15] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) ContextMenuHandlers3: [FTShellContext] -> {AFF81F7B-6942-40c4-AADA-7214EF7B6DD1} => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\ShellContextExt.dll [2011-05-20] (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Brak podpisu cyfrowego] ContextMenuHandlers4: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files (x86)\AIMP\System\aimp_menu64.dll [2021-08-19] (IP Izmaylov Artem Andreevich -> AIMP DevTeam) ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers4: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2019-11-15] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\windows\system32\igfxpph.dll [2011-03-26] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Brak podpisu cyfrowego] ==================== Codecs (filtrowane) ==================== ==================== Skróty & WMI ======================== (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox Developer Edition.lnk -> C:\Program Files\Firefox Developer Edition\firefox.exe (Mozilla Corporation) ShortcutWithArgument: C:\Users\Rostov\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Charlie (Ja) - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1" ==================== Załadowane moduły (filtrowane) ============= 2020-03-22 21:43 - 2019-06-28 12:09 - 001291264 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\Todo Backup\bin\libxml2.dll 2020-03-22 21:43 - 2019-06-28 12:09 - 000055808 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\Todo Backup\bin\zlib1.dll 2020-03-28 14:45 - 2016-09-19 13:09 - 000813056 _____ () [Brak podpisu cyfrowego] C:\Program Files\NetWorx\sqlite.dll 2011-12-16 15:14 - 2011-02-01 20:57 - 001892352 _____ (Apache Software Foundation) [Brak podpisu cyfrowego] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\xerces-c_2_7.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000061088 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthCopyHook.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000044704 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BPP.DLL 2011-05-20 19:15 - 2011-05-20 19:15 - 000043680 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BTBIP.DLL 2011-05-20 19:15 - 2011-05-20 19:15 - 000029856 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtFileStore.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000030368 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtFileStoreOpp.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000207520 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtObexFt.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000208544 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BTOBEXOP.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000181408 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvAppExt.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000305824 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\filetransfer.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000072864 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\goep.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000079520 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\GOEP_bpp.DLL 2011-05-20 19:15 - 2011-05-20 19:15 - 000073888 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\GOEP_SINGLE.DLL 2011-05-20 19:15 - 2011-05-20 19:15 - 000079008 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Handsfree.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000119456 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\L2capLib.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 000118944 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\ObjPush.dll 2011-05-20 19:15 - 2011-05-20 19:15 - 002234016 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\OutLookLib.dll 2011-05-20 19:16 - 2011-05-20 19:16 - 000081056 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\RfcommLib.dll 2011-05-20 19:16 - 2011-05-20 19:16 - 000425632 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\ShellContextExt.dll 2011-05-20 19:16 - 2011-05-20 19:16 - 000140448 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\skypeagent.dll 2011-05-20 19:16 - 2011-05-20 19:16 - 000066720 _____ (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Sync.dll 2020-03-22 21:42 - 2019-06-28 12:09 - 000892928 _____ (Free Software Foundation) [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\Todo Backup\bin\iconv.dll 2020-03-19 14:22 - 2019-02-21 18:00 - 000078336 _____ (Igor Pavlov) [Brak podpisu cyfrowego] C:\Program Files\7-Zip\7-zip.dll 2011-12-16 15:14 - 2011-02-01 20:53 - 000069632 _____ (Intel Corporation) [Brak podpisu cyfrowego] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\StatusStrings.dll 2011-12-16 15:40 - 2011-12-16 15:40 - 000113664 _____ (Microsoft Corporation) [Brak podpisu cyfrowego] C:\windows\WinSxS\amd64_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.5592_none_8a1e1b372ed7b012\ATL80.DLL 2011-12-16 15:41 - 2011-12-16 15:41 - 001658368 _____ (Microsoft Corporation) [Brak podpisu cyfrowego] C:\windows\WinSxS\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.5592_none_8448f49f328da8c3\MFC80.DLL 2011-12-16 15:41 - 2011-12-16 15:41 - 001654784 _____ (Microsoft Corporation) [Brak podpisu cyfrowego] C:\windows\WinSxS\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.5592_none_8448f49f328da8c3\MFC80U.DLL 2020-03-22 21:42 - 2019-10-09 10:05 - 001359872 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\Todo Backup\bin\LIBEAY32.dll 2020-03-22 21:42 - 2019-10-09 10:05 - 000365056 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\Todo Backup\bin\SSLEAY32.dll 2015-11-14 00:52 - 2015-11-14 00:52 - 001362944 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\PopTrayU\libeay32.dll 2015-11-14 00:52 - 2015-11-14 00:52 - 000357888 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\PopTrayU\ssleay32.dll ==================== Alternate Data Streams (filtrowane) ======== ==================== Tryb awaryjny (filtrowane) ================== ==================== Powiązania plików (filtrowane) ================= ==================== Internet Explorer (Wersja 11) (filtrowane) ========== HKU\S-1-5-21-764258043-3443933537-1065429426-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gazeta.pl/0,0.html?p=190 SearchScopes: HKLM -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox SearchScopes: HKLM-x32 -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-764258043-3443933537-1065429426-1000 -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-12-16] (Sun Microsystems, Inc. -> Sun Microsystems, Inc.) BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll [2011-05-20] (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.) BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote Legacy\EvernoteIE.dll [2020-09-17] (Evernote Corporation -> Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-12-16] (Sun Microsystems, Inc. -> Sun Microsystems, Inc.) ==================== Hosts - zawartość: ========================= (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 000000824 _____ C:\windows\system32\drivers\etc\hosts ==================== Inne obszary =========================== (Obecnie brak automatycznej naprawy dla tej sekcji.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Perl64\site\bin;C:\Perl64\bin;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;c:\Program Files (x86)\Common Files\Roxio Shared\DLLShared\;c:\Program Files (x86)\Common Files\Roxio Shared\OEM\DLLShared\;c:\Program Files (x86)\Common Files\Roxio Shared\OEM\DLLShared\;c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\DLLShared\;c:\Program Files (x86)\Roxio\OEM\AudioCore\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files\Calibre2\;C:\Program Files (x86)\Brackets\command;C:\Program Files\PuTTY\ HKU\S-1-5-21-764258043-3443933537-1065429426-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Rostov\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == ==================== Reguły Zapory systemu Windows (filtrowane) ================ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [{DF893DCA-4D55-4C15-AD75-39B6DF5A132A}] => (Allow) C:\Program Files (x86)\Dell\VideoStage\VideoStage.exe (CyberLink -> CyberLink Corp.) FirewallRules: [{F38BAFCA-4BA8-4C78-8FB8-F0E680C48F6B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies SA -> Skype Technologies S.A.) FirewallRules: [{F2A7B660-43A2-4B7B-8BBA-980C8D161EEA}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{02CBE405-4E7D-40AB-953D-2818F0EEA517}] => (Allow) LPort=2869 FirewallRules: [{67AB18CC-5A5C-4944-8C64-2E085A37C8E8}] => (Allow) LPort=1900 FirewallRules: [{62C7AB2F-2ACA-48B0-8CDB-C66E76140EAC}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{49CE270E-1521-4378-AB87-1CFBDBAE3BDD}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{ACEEA4FE-3BAE-4899-A24B-10234E67EA83}] => (Allow) C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\USBSetup.exe (Hewlett Packard -> Hewlett-Packard Co.) FirewallRules: [TCP Query User{937AA351-7C39-4649-AFAE-3A9130BA4315}C:\users\rostov\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\rostov\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [UDP Query User{D08C19D6-6523-49E4-83BA-6296E5798C15}C:\users\rostov\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\rostov\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{60CE1E5E-1CD0-4A53-B1B0-B6B55967458D}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) FirewallRules: [{7017C539-CAD3-4E4E-90F2-0DC87BB7BD89}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) FirewallRules: [{2A114CF8-F97B-4A59-BD0A-FD179E3C7D9A}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) FirewallRules: [{749D76D2-7DFB-42C4-B434-679E44D16718}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) FirewallRules: [{1CE5F412-7EC7-4B25-9C33-70CC51212DF8}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) FirewallRules: [{5E21BECD-7A5F-41A0-B724-FD003E2D4B16}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) FirewallRules: [{4CB7E432-08EC-4A5B-9296-0167C8D5CAB1}] => (Allow) C:\Program Files\NetWorx\networx.exe (SOFTPERFECT PTY. LTD. -> SoftPerfect) FirewallRules: [TCP Query User{F91D93E3-4ED9-4D9B-AFBE-4AEAED801E58}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [UDP Query User{269856DA-A6A8-42A1-B91F-3D7071ACB1D8}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [TCP Query User{57ABD098-0A34-4284-A4EE-1E76C684A082}C:\users\rostov\d\adiirc\adiirc.exe] => (Allow) C:\users\rostov\d\adiirc\adiirc.exe (AdiIRC.com) [Brak podpisu cyfrowego] FirewallRules: [UDP Query User{370B3796-C08A-40A2-BF99-A3E146CFC427}C:\users\rostov\d\adiirc\adiirc.exe] => (Allow) C:\users\rostov\d\adiirc\adiirc.exe (AdiIRC.com) [Brak podpisu cyfrowego] FirewallRules: [TCP Query User{628D1C33-CF91-4211-BE2E-295389791561}C:\perl64\bin\perl.exe] => (Allow) C:\perl64\bin\perl.exe (ActiveState Software Inc. -> ActiveState) FirewallRules: [UDP Query User{769F7F74-BCB6-4FB3-AEE3-8D500B7902DC}C:\perl64\bin\perl.exe] => (Allow) C:\perl64\bin\perl.exe (ActiveState Software Inc. -> ActiveState) FirewallRules: [{9E419494-A9DB-4F94-A54A-2CB876DF9900}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) FirewallRules: [{4C44B2C4-191A-40EC-AA3B-1C3DA4016D39}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) FirewallRules: [TCP Query User{7236999A-7E89-4F0C-99C4-33DC5AE72557}C:\program files (x86)\aimp\aimp.exe] => (Allow) C:\program files (x86)\aimp\aimp.exe (IP Izmaylov Artem Andreevich -> AIMP DevTeam) FirewallRules: [UDP Query User{81C27123-B4C4-433E-9F12-2A57ACE1E615}C:\program files (x86)\aimp\aimp.exe] => (Allow) C:\program files (x86)\aimp\aimp.exe (IP Izmaylov Artem Andreevich -> AIMP DevTeam) FirewallRules: [TCP Query User{E38EA832-E325-4F0F-BDFD-C83156AD2103}C:\users\rostov\d\reinstal\total commander 9.50 portable\app\totalcmd\totalcmd64.exe] => (Allow) C:\users\rostov\d\reinstal\total commander 9.50 portable\app\totalcmd\totalcmd64.exe (Ghisler Software GmbH) [Brak podpisu cyfrowego] FirewallRules: [UDP Query User{3BBC7B2C-F51B-41F4-93F6-AE4209B1620C}C:\users\rostov\d\reinstal\total commander 9.50 portable\app\totalcmd\totalcmd64.exe] => (Allow) C:\users\rostov\d\reinstal\total commander 9.50 portable\app\totalcmd\totalcmd64.exe (Ghisler Software GmbH) [Brak podpisu cyfrowego] FirewallRules: [{ED11B5CA-BAD7-4037-8321-7A1749C8B18C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{7A8024FF-CE31-49F6-B314-88ED4053D189}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{8DA9DC5F-6A93-4FA5-970E-09CE44ECD42D}] => (Allow) C:\Program Files\Firefox Developer Edition\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{6F87410A-7FC7-469E-8060-7547A1E57BEC}] => (Allow) C:\Program Files\Firefox Developer Edition\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{222B6694-6909-43D8-80ED-5EB0EBC21151}] => (Allow) C:\Users\Rostov\AppData\Local\Programs\Opera\78.0.4093.184\opera.exe (Opera Software AS -> Opera Software) FirewallRules: [{CC5020EB-82E1-42FE-A676-8BB10F5ED04C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{B907BAF8-5538-48EC-A73F-FDAFB6593B49}] => (Allow) C:\Users\Rostov\AppData\Local\Programs\Opera\79.0.4143.50_0\opera.exe (Opera Software AS -> Opera Software) FirewallRules: [{673A9903-7D77-45A5-B940-8BAC9CF13322}] => (Allow) C:\Users\Rostov\AppData\Local\Google\Chrome SxS\Application\chrome.exe (Google LLC -> Google LLC) ==================== Punkty Przywracania systemu ========================= 24-09-2021 20:55:01 Intel® Driver & Support Assistant 24-09-2021 20:56:34 Intel® Driver & Support Assistant 24-09-2021 20:57:15 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 24-09-2021 21:04:32 Removed Intel(R) Computing Improvement Program 24-09-2021 21:14:12 rst 24-09-2021 21:29:52 IIF_MSI 24-09-2021 21:47:49 Intel® Driver & Support Assistant 26-09-2021 14:54:38 Windows Update 28-09-2021 20:56:58 Windows Update ==================== Wadliwe urządzenia w Menedżerze urządzeń ============ Name: Dell Touchpad Description: Dell Touchpad Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318} Manufacturer: Alps Electric Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: Integrated Webcam Description: Urządzenie wideo USB Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f} Manufacturer: Microsoft Service: usbvideo Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Błędy w Dzienniku zdarzeń: ======================== Dziennik Aplikacja: ================== Error: (09/25/2021 07:40:36 PM) (Source: Firefox Default Browser Agent) (EventID: 12007) (User: ) Description: Event-ID 12007 Error: (09/25/2021 07:40:36 PM) (Source: Firefox Default Browser Agent) (EventID: 0) (User: ) Description: Event-ID 0 Error: (09/24/2021 09:48:28 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: DSAService.exe, wersja: 21.5.33.3, sygnatura czasowa: 0x6112930c Nazwa modułu powodującego błąd: KERNELBASE.dll, wersja: 6.1.7601.24545, sygnatura czasowa: 0x5e0eb7f5 Kod wyjątku: 0xe0434352 Przesunięcie błędu: 0x0000c5af Identyfikator procesu powodującego błąd: 0xb88 Godzina uruchomienia aplikacji powodującej błąd: 0x01d7b17cb5255d5b Ścieżka aplikacji powodującej błąd: C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe Ścieżka modułu powodującego błąd: C:\windows\syswow64\KERNELBASE.dll Identyfikator raportu: 62e84b87-1d70-11ec-a57d-6427370fcc96 Error: (09/24/2021 09:48:26 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Aplikacja: DSAService.exe Wersja architektury: v4.0.30319 Opis: proces został przerwany z powodu nieobsłużonego wyjątku. Informacje o wyjątku: System.ObjectDisposedException w System.Net.Sockets.Socket.BeginAccept(System.Net.Sockets.Socket, Int32, System.AsyncCallback, System.Object) w DSAServiceCore.Controllers.DsaWebClient.Win7WebSocketHttpListener.OnAccept(System.IAsyncResult) w System.Net.LazyAsyncResult.Complete(IntPtr) w System.Net.ContextAwareResult.CompleteCallback(System.Object) w System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) w System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) w System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) w System.Net.ContextAwareResult.Complete(IntPtr) w System.Net.LazyAsyncResult.ProtectedInvokeCallback(System.Object, IntPtr) w System.Net.Sockets.BaseOverlappedAsyncResult.CompletionPortCallback(UInt32, UInt32, System.Threading.NativeOverlapped*) w System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32, UInt32, System.Threading.NativeOverlapped*) Error: (09/24/2021 08:57:14 PM) (Source: DSAService) (EventID: 1003) (User: ) Description: Event-ID 1003 Error: (09/21/2021 10:57:44 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: avidemux.exe, wersja: 2.7.6.20187, sygnatura czasowa: 0x5f01e992 Nazwa modułu powodującego błąd: ntdll.dll, wersja: 6.1.7601.24545, sygnatura czasowa: 0x5e0eb67f Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000000000001fcbe Identyfikator procesu powodującego błąd: 0x1674 Godzina uruchomienia aplikacji powodującej błąd: 0x01d7af2b2b0fdbd3 Ścieżka aplikacji powodującej błąd: C:\Program Files\Avidemux 2.7 VC++ 64bits\avidemux.exe Ścieżka modułu powodującego błąd: C:\windows\SYSTEM32\ntdll.dll Identyfikator raportu: 90e7a4ae-1b1e-11ec-90f6-6427370fcc96 Error: (09/19/2021 11:09:57 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Program avidemux.exe w wersji 2.7.6.20187 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: 65c Godzina rozpoczęcia: 01d7ad9a7c8c0fff Godzina zakończenia: 28 Ścieżka aplikacji: C:\Program Files\Avidemux 2.7 VC++ 64bits\avidemux.exe Identyfikator raportu: e9cd14b3-198d-11ec-ba2e-6427370fcc96 Error: (09/18/2021 11:08:07 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Program avidemux.exe w wersji 2.7.6.20187 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: 183c Godzina rozpoczęcia: 01d7acce20cc563c Godzina zakończenia: 9 Ścieżka aplikacji: C:\Program Files\Avidemux 2.7 VC++ 64bits\avidemux.exe Identyfikator raportu: 8194a75e-18c4-11ec-b995-6427370fcc96 Dziennik System: ============= Error: (09/29/2021 01:05:20 PM) (Source: Schannel) (EventID: 4119) (User: ZARZĄDZANIE NT) Description: Odebrano następujący alert krytyczny: 40. Error: (09/29/2021 01:05:20 PM) (Source: Schannel) (EventID: 4119) (User: ZARZĄDZANIE NT) Description: Odebrano następujący alert krytyczny: 70. Error: (09/29/2021 01:00:04 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa IvacyService niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (09/28/2021 10:37:02 PM) (Source: Schannel) (EventID: 4119) (User: ZARZĄDZANIE NT) Description: Odebrano następujący alert krytyczny: 40. Error: (09/28/2021 10:37:01 PM) (Source: Schannel) (EventID: 4119) (User: ZARZĄDZANIE NT) Description: Odebrano następujący alert krytyczny: 70. Error: (09/28/2021 10:30:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa IvacyService niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (09/28/2021 09:11:59 PM) (Source: Schannel) (EventID: 4119) (User: ZARZĄDZANIE NT) Description: Odebrano następujący alert krytyczny: 40. Error: (09/28/2021 09:11:59 PM) (Source: Schannel) (EventID: 4119) (User: ZARZĄDZANIE NT) Description: Odebrano następujący alert krytyczny: 70. ==================== Statystyki pamięci =========================== BIOS: Dell Inc. A05 08/03/2012 Płyta główna: Dell Inc. 01HXXJ Procesor: Intel(R) Core(TM) i5-2430M CPU @ 2.40GHz Procent pamięci w użyciu: 44% Całkowita pamięć fizyczna: 8100.27 MB Dostępna pamięć fizyczna: 4469.54 MB Całkowita pamięć wirtualna: 16198.69 MB Dostępna pamięć wirtualna: 12660.16 MB ==================== Dyski ================================ Drive c: (OS) (Fixed) (Total:451.01 GB) (Free:284.69 GB) NTFS \\?\Volume{757966f7-6834-11ea-a6a4-806e6f6e6963}\ (Recovery) (Fixed) (Total:14.65 GB) (Free:7 GB) NTFS ==================== MBR & Tablica partycji ==================== ========================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: 5E7BA325) Partition 1: (Not Active) - (Size=100 MB) - (Type=DE) Partition 2: (Active) - (Size=14.6 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=451 GB) - (Type=07 NTFS) ==================== Koniec Addition.txt =======================