REKLAMA

Addition.txt

Usuwanie wirusa Yandex.ru - analiza logów FRST

Hej, znajoma trafiła na tego złośliwca i nie potrafi sobie z tym poradzić. Zaleciłem jej zrobić skany FRST, podrzucam w załącznikach logi.


Pobierz plik - link do postu

Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 14-02-2022 01
Uruchomiony przez karol (18-02-2022 17:34:30)
Uruchomiony z C:\Users\karol\OneDrive\Pulpit
Microsoft Windows 11 Home Wersja 21H2 22000.493 (X64) (2022-02-18 15:04:42)
Tryb startu: Normal
==========================================================


==================== Konta użytkowników: =============================


(Załączenie wejścia w fixlist spowoduje jego usunięcie.)

Administrator (S-1-5-21-905460414-2384498546-1330889053-500 - Administrator - Disabled)
Gość (S-1-5-21-905460414-2384498546-1330889053-501 - Limited - Disabled)
karol (S-1-5-21-905460414-2384498546-1330889053-1001 - Administrator - Enabled) = & gt; C:\Users\karol
Konto domyślne (S-1-5-21-905460414-2384498546-1330889053-503 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-905460414-2384498546-1330889053-504 - Limited - Disabled)

==================== Centrum zabezpieczeń ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee VirusScan (Enabled - Up to date) {8BCDACFA-D264-3528-5EF8-E94FD0BC1FBC}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Zainstalowane programy ======================

(W fixlist dozwolone tylko załączanie programów adware z flagą " Hidden " w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)

Dell Digital Delivery Services (HKLM-x32\...\{A646748A-7A2A-495F-9EE5-90B3646FEB7E}) (Version: 4.0.15.0 - Dell Inc.)
Dell Mobile Connect Drivers (HKLM\...\{04DF02C6-E3D7-4D26-A44C-6F8A2E218D2C}) (Version: 1.3.6844 - Screenovate Technologies Ltd.)
Dell Power Manager Service (HKLM\...\{18469ED8-8C36-4CF7-BD43-0FC9B1931AF8}) (Version: 3.1.0 - Dell Inc.)
Dell SupportAssist Remediation (HKLM-x32\...\{f4ee83d8-d901-4c1a-b5a2-288427598fe2}) (Version: 4.1.0.6830 - Dell Inc.)
Dell Update - SupportAssist Update Plugin (HKLM-x32\...\{286db51f-336c-4d5e-b1e2-3fbc3becd693}) (Version: 4.1.0.6830 - Dell Inc.)
Goodix Fingerprint Driver (HKLM\...\{60FAB781-18F2-4D2B-A8E7-B3AADD327955}_is1) (Version: 1.0.33.800 - Goodix, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 98.0.4758.102 - Google LLC)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.4.10501.6067 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 1805.12.0.1097 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 23.20.16.5017 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 16.7.9.1027 - Intel Corporation)
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.48.197.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{66129f84-d3f0-4884-ac54-369ae6fc2cf6}) (Version: 1.48.197.0 - Intel Corporation) Hidden
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00001060-0200-1045-84C8-B8D95FA3C8C3}) (Version: 20.60.1 - Intel Corporation)
Intel® Optane™ Pinning Explorer Extensions (HKLM\...\{2D79E334-B178-45B9-A2A6-7A60A084C268}) (Version: 16.8.0.1000 - Intel Corporation)
McAfee AntiVirus (HKLM-x32\...\MSC) (Version: 16.0 R14 - McAfee, Inc.)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 98.0.1108.55 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-905460414-2384498546-1330889053-1001\...\OneDriveSetup.exe) (Version: 21.220.1024.0005 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020 (HKLM-x32\...\{7474cd6e-76cc-4257-837e-5b9261e526af}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
NVIDIA GeForce Experience 3.14.0.139 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.14.0.139 - NVIDIA Corporation)
NVIDIA Oprogramowanie systemu PhysX 9.18.0628 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.18.0628 - NVIDIA Corporation)
NVIDIA Sterownik graficzny 462.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 462.31 - NVIDIA Corporation)
Oprogramowanie Intel® PROSet/Wireless (HKLM-x32\...\{06b2cd73-b5f5-47a1-9f49-23d0ef75d568}) (Version: 20.50.0 - Intel Corporation)
Oprogramowanie mikroukładu Intel® (HKLM-x32\...\{55d73ea7-6354-42db-8831-02d048ae57f8}) (Version: 10.1.17541.8066 - Intel(R) Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8443 - Realtek Semiconductor Corp.)
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
WebAdvisor firmy McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.682 - McAfee, LLC)

Packages:
=========
Dell Customer Connect - & gt; C:\Program Files\WindowsApps\DellInc.DellCustomerConnect_5.3.5.0_x64__htrsf667h5kn2 [2022-02-18] (Dell Inc)
Dell Mobile Connect 3.3 - & gt; C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobileConnect_3.3.9809.0_x64__0vhbc3ng4wbp0 [2022-02-18] (Screenovate Technologies) [Startup Task]
Dell Power Manager - & gt; C:\Program Files\WindowsApps\DellInc.DellPowerManager_3.10.10.0_x64__htrsf667h5kn2 [2022-02-18] (Dell Inc)
Dell SupportAssist for PCs - & gt; C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_3.1.15.0_x64__htrsf667h5kn2 [2022-02-18] (Dell Inc)
Dell Update - & gt; C:\Program Files\WindowsApps\DellInc.DellUpdate_3.0.160.0_x64__htrsf667h5kn2 [2022-02-18] (Dell Inc)
Dropbox – promocja - & gt; C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_20.4.3.0_x64__xbfy0k16fey96 [2022-02-18] (Dropbox Inc.)
LinkedIn - & gt; C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_2.1.7098.0_neutral__w1wdnht996qgy [2022-02-18] (LinkedIn)
McAfee® Personal Security - & gt; C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.68.0_x64__wafk5atnkzcwy [2022-02-18] (McAfee LLC.)
Microsoft Access - & gt; C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.14827.20158.0_x86__8wekyb3d8bbwe [2022-02-18] (Microsoft Corporation)
Microsoft Excel - & gt; C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.14827.20158.0_x86__8wekyb3d8bbwe [2022-02-18] (Microsoft Corporation)
Microsoft Office Desktop Apps - & gt; C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.14827.20158.0_x86__8wekyb3d8bbwe [2022-02-18] (Microsoft Corporation)
Microsoft Outlook - & gt; C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.14827.20158.0_x86__8wekyb3d8bbwe [2022-02-18] (Microsoft Corporation)
Microsoft PowerPoint - & gt; C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.14827.20158.0_x86__8wekyb3d8bbwe [2022-02-18] (Microsoft Corporation)
Microsoft Publisher - & gt; C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.14827.20158.0_x86__8wekyb3d8bbwe [2022-02-18] (Microsoft Corporation)
Microsoft Solitaire Collection - & gt; C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.1050.0_x64__8wekyb3d8bbwe [2022-02-18] (Microsoft Studios) [MS Ad]
Microsoft Word - & gt; C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.14827.20158.0_x86__8wekyb3d8bbwe [2022-02-18] (Microsoft Corporation)
My Dell - & gt; C:\Program Files\WindowsApps\DellInc.MyDell_1.92.17.0_x64__htrsf667h5kn2 [2022-02-18] (Dell Inc)
Netflix - & gt; C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.98.1805.0_x64__mcm4njqhnhss8 [2022-02-18] (Netflix, Inc.)
Rozszerzenie wideo MPEG-2 - & gt; C:\Program Files\WindowsApps\microsoft.mpeg2videoextension_1.0.42152.0_x64__8wekyb3d8bbwe [2022-02-18] (Microsoft Corporation)
SmartByte - & gt; C:\Program Files\WindowsApps\rivetnetworks.smartbyte_3.1.1001.0_x64__rh07ty8m5nkag [2022-02-18] (Rivet Networks LLC)
Spotify Music - & gt; C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.179.763.0_x86__zpdnekdrzrea0 [2022-02-18] (Spotify AB) [Startup Task]
Translator - & gt; C:\Program Files\WindowsApps\Microsoft.BingTranslator_5.6.0.0_x64__8wekyb3d8bbwe [2022-02-18] (Microsoft Corporation)
Waves MaxxAudio Pro for Dell - & gt; C:\Program Files\WindowsApps\WavesAudio.WavesMaxxAudioProforDell_1.1.131.0_x64__fh4rh281wavaa [2022-02-18] (Waves Audio)

==================== Niestandardowe rejestracje CLSID (filtrowane): ==============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

ShellIconOverlayIdentifiers: [ OptaneIconOverlay] - & gt; {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} = & gt; C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2018-12-03] () [Brak podpisu cyfrowego] [Plik w użyciu]
ContextMenuHandlers1: [McCtxMenuFrmWrk] - & gt; {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} = & gt; c:\Program Files\mcafee\msc\McCtxMenuFrmWrk.dll [2018-10-04] (McAfee, Inc. - & gt; McAfee, Inc.)
ContextMenuHandlers3: [OptaneContextMenu] - & gt; {AD7EBB13-617D-3270-8FA8-46583499C4FB} = & gt; C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2018-12-03] () [Brak podpisu cyfrowego] [Plik w użyciu]
ContextMenuHandlers5: [NvCplDesktopContext] - & gt; {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} = & gt; C:\WINDOWS\System32\DriverStore\FileRepository\nvdm.inf_amd64_54c680c07b6d4e2e\nvshext.dll [2021-07-13] (NVIDIA Corporation - & gt; NVIDIA Corporation)
ContextMenuHandlers6: [McCtxMenuFrmWrk] - & gt; {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} = & gt; c:\Program Files\mcafee\msc\McCtxMenuFrmWrk.dll [2018-10-04] (McAfee, Inc. - & gt; McAfee, Inc.)

==================== Codecs (filtrowane) ====================

==================== Skróty & WMI ========================

==================== Załadowane moduły (filtrowane) =============

2018-12-05 14:38 - 2018-12-05 14:38 - 000018432 _____ () [Brak podpisu cyfrowego] c:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.HSA.Server.dll
2018-12-03 22:19 - 2018-12-03 22:19 - 000126976 _____ (Intel Corporation) [Brak podpisu cyfrowego] C:\Program Files\Intel\OptaneShellExtensions\iaStorAfsServiceApi.dll
2022-02-15 20:51 - 2022-02-15 20:51 - 000137168 _____ (Microsoft Windows - & gt; Microsoft Corporation) [Brak podpisu cyfrowego] C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_421.20070.95.0_x64__cw5n1h2txyewy\Dashboard\WebView2Loader.dll

==================== Alternate Data Streams (filtrowane) ========

==================== Tryb awaryjny (filtrowane) ==================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość " AlternateShell " zostanie przywrócona.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc = & gt; " " = " Service "

==================== Powiązania plików (filtrowane) =================

==================== Internet Explorer (filtrowane) ==========

HKU\S-1-5-21-905460414-2384498546-1330889053-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dell17win10.msn.com/?pc=DCTE
HKU\S-1-5-21-905460414-2384498546-1330889053-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell17win10.msn.com/?pc=DCTE
BHO: McAfee WebAdvisor - & gt; {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - & gt; C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2022-02-18] (McAfee, LLC - & gt; McAfee, LLC)
BHO-x32: McAfee WebAdvisor - & gt; {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - & gt; C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2022-02-18] (McAfee, LLC - & gt; McAfee, LLC)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2018-10-04] (McAfee, Inc. - & gt; McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2018-10-04] (McAfee, Inc. - & gt; McAfee, Inc.)

==================== Hosts - zawartość: =========================

(Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)

2018-09-15 08:31 - 2018-09-15 08:31 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Inne obszary ===========================

(Obecnie brak automatycznej naprawy dla tej sekcji.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path - & gt; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-905460414-2384498546-1330889053-1001\Control Panel\Desktop\\Wallpaper - & gt; C:\Users\karol\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System = & gt; (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer = & gt; (SmartScreenEnabled: )
Zapora systemu Windows [funkcja włączona]

==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==

==================== Reguły Zapory systemu Windows (filtrowane) ================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

FirewallRules: [{FC8A3A12-F41A-44F3-AB52-1B2C413B501A}] = & gt; (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl - & gt; Skype Technologies S.A.)
FirewallRules: [{F19A4085-9518-417D-8AE1-CCA959464919}] = & gt; (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl - & gt; Skype Technologies S.A.)
FirewallRules: [{630B7ED0-5EEF-492B-8D75-79E06AE99CCE}] = & gt; (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl - & gt; Skype Technologies S.A.)
FirewallRules: [{983CC572-420E-4CEF-AE4E-F0CCE85AD37B}] = & gt; (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl - & gt; Skype Technologies S.A.)
FirewallRules: [{599B251D-495D-46C4-9092-AC0D1D73BC49}] = & gt; (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobileConnect_3.3.9809.0_x64__0vhbc3ng4wbp0\app\DellMobileConnectClient.exe (SCREENOVATE TECHNOLOGIES LTD. - & gt; Screenovate Technologies Ltd.) [Brak podpisu cyfrowego]
FirewallRules: [{508A95E7-2DD4-4EEC-9FC7-6E722A833381}] = & gt; (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobileConnect_3.3.9809.0_x64__0vhbc3ng4wbp0\app\DellMobileConnectClient.exe (SCREENOVATE TECHNOLOGIES LTD. - & gt; Screenovate Technologies Ltd.) [Brak podpisu cyfrowego]
FirewallRules: [{28BB675A-17A4-4B86-B5B2-FD711BD6BF3F}] = & gt; (Allow) C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16040.10730.20103.0_x86__8wekyb3d8bbwe\Office16\OUTLOOK.exe = & gt; Brak pliku
FirewallRules: [{E51F9D5B-277C-4C2B-8022-AAE64FD905F6}] = & gt; (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobileConnect_1.3.6718.0_x64__0vhbc3ng4wbp0\app\DellMobileConnectClient.exe = & gt; Brak pliku
FirewallRules: [{E5C1F24D-0947-4CC8-9CF0-2908BA1DB8A1}] = & gt; (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobileConnect_1.3.6718.0_x64__0vhbc3ng4wbp0\app\DellMobileConnectClient.exe = & gt; Brak pliku
FirewallRules: [{42FF263F-E501-4135-8B11-CB50599A1551}] = & gt; (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc. - & gt; McAfee, Inc.)
FirewallRules: [{7BAE9F54-A3E8-4AD7-9D55-72B71B3FAE88}] = & gt; (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe (McAfee, Inc. - & gt; McAfee, Inc.)
FirewallRules: [{833EB0A1-B129-457D-AA96-4437F0AAE678}] = & gt; (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe (McAfee, Inc. - & gt; McAfee, Inc.)
FirewallRules: [{FC04390C-2E9E-4565-A669-CFB1D4BBABAB}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation - & gt; NVIDIA Corporation)
FirewallRules: [{49DF4BBD-9CFC-42BF-A6E1-B0C253DE2C51}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation - & gt; NVIDIA Corporation)
FirewallRules: [{22040123-D8BD-41C0-B34B-1E6C95C7827C}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation - & gt; NVIDIA Corporation)
FirewallRules: [{D1C174B9-E09E-42E9-8754-01488BF8B903}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation - & gt; NVIDIA Corporation)
FirewallRules: [{4625CA69-2313-4860-B2FC-A2ABB73F64B0}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation - & gt; NVIDIA Corporation)
FirewallRules: [{0DCFF62A-1459-44DD-9B40-7C3A7BB5E8E3}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation - & gt; NVIDIA Corporation)
FirewallRules: [{C338EF3D-D4C7-496A-B304-A6DB19470B9D}] = & gt; (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation - & gt; )
FirewallRules: [{5EDE1A8A-5D86-43E8-AA1A-F81E008DFA7F}] = & gt; (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC - & gt; Google LLC)
FirewallRules: [{6BC1757E-DEF7-441C-8560-FD9915CA5549}] = & gt; (Allow) C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.14827.20158.0_x86__8wekyb3d8bbwe\Office16\OUTLOOK.exe (Microsoft Corporation - & gt; Microsoft Corporation)
FirewallRules: [{6D7D8314-C6F2-472C-8D98-5C471C8AA863}] = & gt; (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22027.1100.1170.132_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation - & gt; Microsoft Corporation)
FirewallRules: [{A2F54859-DCD4-488D-8D89-E82DC13F2C64}] = & gt; (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22027.1100.1170.132_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation - & gt; Microsoft Corporation)
FirewallRules: [{26A080F7-C5B1-42B0-8C75-AC33ECAEB5BD}] = & gt; (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.179.763.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB - & gt; Spotify Ltd)
FirewallRules: [{148AB46E-6F35-4889-93FE-9AC4F07C74FC}] = & gt; (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.179.763.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB - & gt; Spotify Ltd)
FirewallRules: [{C0FE3D0A-8CE6-4B1C-81CF-AEF06244E99F}] = & gt; (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.179.763.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB - & gt; Spotify Ltd)
FirewallRules: [{30D88594-6B5E-4DFD-8FF0-FA99D0BF1ED5}] = & gt; (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.179.763.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB - & gt; Spotify Ltd)
FirewallRules: [{C620575D-90CE-49E0-BCEC-B0C790ED3F7C}] = & gt; (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.179.763.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB - & gt; Spotify Ltd)
FirewallRules: [{6975F779-A1A5-4049-A5D1-8F67D2F9BDCD}] = & gt; (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.179.763.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB - & gt; Spotify Ltd)
FirewallRules: [{7A6055F5-A011-459B-A28B-691E3A1B8E86}] = & gt; (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.179.763.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB - & gt; Spotify Ltd)
FirewallRules: [{4E7C6F51-044C-43C5-A293-C973C73D99E3}] = & gt; (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.179.763.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB - & gt; Spotify Ltd)

==================== Punkty Przywracania systemu =========================

18-02-2022 16:31:36 AdwCleaner_BeforeCleaning_18/02/2022_16:31:36
18-02-2022 16:33:20 AdwCleaner_BeforeCleaning_18/02/2022_16:33:20

==================== Wadliwe urządzenia w Menedżerze urządzeń ============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click " Update Driver " , which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click " Update Driver " , which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click " Update Driver " , which starts the Hardware Update wizard.


==================== Błędy w Dzienniku zdarzeń: ========================

Dziennik Aplikacja:
==================
Error: (02/18/2022 04:12:45 PM) (Source: ESENT) (EventID: 522) (User: )
Description: StartMenuExperienceHost (3416,P,98) TILEREPOSITORYS-1-5-21-905460414-2384498546-1330889053-1001: Próba otwarcia urządzenia o nazwie „\\.\C:” zawierającego „C:\” nie powiodła się z powodu błędu systemu 5 (0x00000005): „Odmowa dostępu. ”. Operacja nie powiedzie się z powodu błędu -1032 (0xfffffbf8).

Error: (02/18/2022 04:08:43 PM) (Source: SmartByte Network Service) (EventID: 16) (User: )
Description: Event-ID 16

Error: (02/18/2022 04:08:43 PM) (Source: SmartByte Network Service) (EventID: 16) (User: )
Description: Event-ID 16

Error: (02/18/2022 04:08:43 PM) (Source: SmartByte Network Service) (EventID: 16) (User: )
Description: Event-ID 16

Error: (02/18/2022 04:08:43 PM) (Source: SmartByte Network Service) (EventID: 16) (User: )
Description: Event-ID 16

Error: (02/18/2022 04:08:43 PM) (Source: SmartByte Network Service) (EventID: 16) (User: )
Description: Event-ID 16

Error: (02/18/2022 04:08:43 PM) (Source: SmartByte Network Service) (EventID: 16) (User: )
Description: Event-ID 16

Error: (02/18/2022 04:07:18 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktywacja licencji (slui.exe) nie powiodła się, kod błędu:
hr=0x80072EE7
Argumenty wiersza polecenia:
RuleId=3482d82e-ca2c-4e1f-8864-da0267b484b2;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=8db63db6-4f8f-46d6-a448-66444faaaa72;NotificationInterval=1440;Trigger=TimerEvent


Dziennik System:
=============
Error: (02/18/2022 04:39:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Usługa Dell Data Vault Service API zależy od usługi Dell Data Vault Collector, której nie można uruchomić z powodu następującego błędu:
Uruchomienie usługi zależności lub grupy nie powiodło się.

Error: (02/18/2022 04:39:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Usługa Dell Data Vault Collector zależy od usługi Dell Data Vault Processor, której nie można uruchomić z powodu następującego błędu:
Po uruchomieniu usługa uległa zawieszeniu w stanie startowym.

Error: (02/18/2022 04:39:25 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Usługa Dell Data Vault Processor zawiesiła się podczas uruchamiania.

Error: (02/18/2022 04:37:44 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Usługa Dell Data Vault Collector zależy od usługi Dell Data Vault Processor, której nie można uruchomić z powodu następującego błędu:
Po uruchomieniu usługa uległa zawieszeniu w stanie startowym.

Error: (02/18/2022 04:37:44 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Usługa Dell Data Vault Processor zawiesiła się podczas uruchamiania.

Error: (02/18/2022 04:36:51 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi Dell SupportAssist z powodu następującego błędu:
Nie można odnaleźć określonego pliku.

Error: (02/18/2022 04:36:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi Dell Client Management Service z powodu następującego błędu:
Nie można odnaleźć określonego pliku.

Error: (02/18/2022 04:36:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi Dell SupportAssist Remediation z powodu następującego błędu:
Nie można odnaleźć określonego pliku.


CodeIntegrity:
===============
Date: 2022-02-18 17:02:09
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\mcafee\mfeav\AMSIExt.dll that did not meet the Windows signing level requirements.

Date: 2022-02-18 16:37:51
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume3\Program Files\mcafee\mfeav\AMSIExt.dll that did not meet the Microsoft signing level requirements.


==================== Statystyki pamięci ===========================

BIOS: Dell Inc. 1.18.0 09/22/2021
Płyta główna: Dell Inc. 05K0D2
Procesor: Intel(R) Core(TM) i5-8300H CPU @ 2.30GHz
Procent pamięci w użyciu: 63%
Całkowita pamięć fizyczna: 8052.4 MB
Dostępna pamięć fizyczna: 2948.74 MB
Całkowita pamięć wirtualna: 9972.4 MB
Dostępna pamięć wirtualna: 3152.3 MB

==================== Dyski ================================

Drive c: (OS) (Fixed) (Total:222.69 GB) (Free:183.29 GB) NTFS

\\?\Volume{08e2f677-a8c7-4388-8497-3ae46f38e414}\ (WINRETOOLS) (Fixed) (Total:0.97 GB) (Free:0.31 GB) NTFS
\\?\Volume{c2ee8f30-0e1c-4fa5-887c-133b6280047b}\ (Image) (Fixed) (Total:12.89 GB) (Free:0.16 GB) NTFS
\\?\Volume{ee9c264a-d41e-4b92-a9cf-c895b8bb5390}\ (DELLSUPPORT) (Fixed) (Total:1.16 GB) (Free:0.48 GB) NTFS
\\?\Volume{972dec4a-389c-448a-8ca8-b15ffc104bda}\ (ESP) (Fixed) (Total:0.63 GB) (Free:0.53 GB) FAT32

==================== MBR & Tablica partycji ====================

==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: E8EC179E)

Partition: GPT.

==================== Koniec Addition.txt =======================