Proszę o pomoc. z tego co zauważyłem to chyba ram mi atakuje
Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 17-04-2017 01
Uruchomiony przez mateu (18-04-2022 13:44:49)
Uruchomiony z C:\Users\mateu\Downloads\frst
Windows 10 Home Wersja 2009 (X64) (2021-12-21 03:09:46)
Tryb startu: Normal
==========================================================
==================== Konta użytkowników: =============================
Administrator (S-1-5-21-3981546966-4209641125-1705693276-500 - Administrator - Disabled)
Gość (S-1-5-21-3981546966-4209641125-1705693276-501 - Limited - Disabled)
Konto domyślne (S-1-5-21-3981546966-4209641125-1705693276-503 - Limited - Disabled)
mateu (S-1-5-21-3981546966-4209641125-1705693276-1001 - Administrator - Enabled) = & gt; C:\Users\mateu
WDAGUtilityAccount (S-1-5-21-3981546966-4209641125-1705693276-504 - Limited - Disabled)
==================== Centrum zabezpieczeń ========================
(Załączenie wejścia w fixlist spowoduje jego usunięcie.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Zainstalowane programy ======================
(W fixlist dozwolone tylko załączanie programów adware z flagą " Hidden " w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)
µTorrent (HKU\S-1-5-21-3981546966-4209641125-1705693276-1001\...\uTorrent) (Version: 3.5.5.46206 - BitTorrent Inc.)
12 Channels ECG Holter System_L (HKLM-x32\...\12 Channels ECG Holter System_L_is1) (Version: - *)
Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 21.007.20099 - Adobe Systems Incorporated)
Aktualizacje NVIDIA 39.3.0.0 (Version: 39.3.0.0 - NVIDIA Corporation) Hidden
Any Video Converter Ultimate 7.1.3 (HKLM-x32\...\Any Video Converter Ultimate_is1) (Version: - Any-Video-Converter.com)
Arma 3 Western Sahara (HKLM-x32\...\Arma 3 Western Sahara_is1) (Version: - )
Assassins Creed Valhalla MULTi14 - ElAmigos wersja 1.1.2 (HKLM-x32\...\{56CA5418-430C-43BD-A02B-2993D8A641D9}_is1) (Version: 1.1.2 - Ubisoft)
Autodesk Revit Interoperability for 3ds Max 2017 (HKLM\...\Autodesk Revit Interoperability for 3ds Max 2017) (Version: 17.0.411.0 - Autodesk)
Autodesk Revit Interoperability for 3ds Max 2017 (Version: 17.0.411.0 - Autodesk) Hidden
Autodesk Revit Model Review 2020 (HKLM\...\Autodesk Revit Model Review 2020) (Version: 20.0.0.377 - Autodesk)
Autodesk Revit Model Review 2020 (Version: 20.0.0.377 - Autodesk) Hidden
AutoXlstable (HKLM\...\{4857ED05-6ACC-4278-9C29-AFD0FA7A3329}) (Version: 1.00.0000 - GstarSoft)
Batch Print for Autodesk Revit 2020 (HKLM\...\Batch Print for Autodesk Revit 2020) (Version: 20.0.0.377 - Autodesk)
Batch Print for Autodesk Revit 2020 (Version: 20.0.0.377 - Autodesk) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield 1 Ultimate Edition MULTi9 - ElAmigos wersja 1.0 u3 (HKLM-x32\...\{B5189BB5-245F-4F43-95CB-DD6E3BA81EDC}_is1) (Version: 1.0 u3 - EA DICE)
Battlefield™ Hardline (HKLM-x32\...\{CB4AC3DA-8CC1-4516-86DA-4078B57DB229}) (Version: 1.1.0.5 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
BlueStacks 5 (HKLM\...\BlueStacks_nxt) (Version: 5.5.10.1001 - BlueStack Systems, Inc.)
BlueStacks X (HKU\S-1-5-21-3981546966-4209641125-1705693276-1001\...\BlueStacks X) (Version: 0.13.1.7 - BlueStack Systems, Inc.)
Call of Duty Modern Warfare 2 Campaign Remastered (HKLM-x32\...\Call of Duty Modern Warfare 2 Campaign Remastered_is1) (Version: 0.0.0 - DODI-Repacks)
Call of Duty WWII (HKLM-x32\...\Call of Duty WWII_is1) (Version: 0.0.0 - DODI-Repacks)
ChomikBox (HKLM-x32\...\{8E4185CC-4FF3-46B9-A4DB-5B850B71ABC4}) (Version: 2.0.8.2 - Chomikuj.pl)
CPUID HWMonitor Pro 1.32 (HKLM\...\CPUID HWMonitorPro_is1) (Version: 1.32 - CPUID, Inc.)
Crash Bandicoot 4 Its About Time MULTi11 - ElAmigos wersja 1.0 (HKLM-x32\...\{BC25866B-F1B8-4F07-9B55-01E3533C9842}_is1) (Version: 1.0 - Activision Blizzard)
Crysis Remastered (HKLM-x32\...\Crysis Remastered_is1) (Version: 0.0.0 - DODI-Repacks)
Cyberpunk 2077 MULTi18 - ElAmigos wersja 1.30 (HKLM-x32\...\{8A985B76-8BB5-4325-92DB-E3B9F8A62D1F}_is1) (Version: 1.30 - CD PROJEKT RED)
Dead by Daylight (HKLM-x32\...\Dead by Daylight_is1) (Version: - )
Driver Booster 9 (HKLM-x32\...\Driver Booster_is1) (Version: 9.2.0 - IObit)
Dying Light (HKLM-x32\...\Dying Light_is1) (Version: 0.0.0 - DODI-Repacks)
EaseUS Partition Master (HKLM-x32\...\EaseUS Partition Master_is1) (Version: - EaseUS)
EaseUS Partition Master Suite 16.6 (HKLM-x32\...\EaseUS Partition Master Suite_is1) (Version: - EaseUS)
ELEX 2 (HKLM-x32\...\ELEX 2_is1) (Version: - )
Epic Games Launcher (HKLM-x32\...\{30C7A3B1-644C-423F-AB2C-743E007A84EC}) (Version: 1.3.0.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{32C68D93-D32F-4B01-8250-61642BFC22F8}) (Version: 2.0.28.0 - Epic Games, Inc.)
eTransmit for Autodesk Revit 2020 (HKLM\...\eTransmit for Autodesk Revit 2020) (Version: 20.0.0.377 - Autodesk)
eTransmit for Autodesk Revit 2020 (Version: 20.0.0.377 - Autodesk) Hidden
FormIt Converter For Revit 2020 (HKLM\...\{7A22DBAA-79A6-4C7B-98FA-9157A97EF6DA}) (Version: 1.9.6.0 - Autodesk)
Fotosizer 3.14.0 (HKLM\...\Fotosizer) (Version: 3.14.0.578 - Fotosizer.com)
Ghostrunner (HKLM-x32\...\Ghostrunner_is1) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 100.0.4896.127 - Google LLC)
GstarCAD 2021 - English (HKLM-x32\...\GstarCAD 2021_en_ww) (Version: - Gstarsoft Co.,Ltd.)
Halo Infinite (HKLM-x32\...\Halo Infinite_is1) (Version: 0.0.0 - DODI-Repacks)
Hard Disk Low Level Format Tool 4.40 (HKLM-x32\...\Hard Disk Low Level Format Tool_is1) (Version: - HDDGURU)
Hard Disk Sentinel PRO (HKLM-x32\...\Hard Disk Sentinel_is1) (Version: 5.70 - Janos Mathe)
HDD Regenerator (HKLM-x32\...\{CC5DA723-D428-40D1-B82B-21EB64B1273C}) (Version: 20.11.0011 - Abstradrome)
Jurassic World Evolution 2 (HKLM-x32\...\Jurassic World Evolution 2_is1) (Version: 0.0.0 - DODI-Repacks)
KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 4.2.2.61 - PandoraTV)
Launcher Prerequisites (x64) (x32 Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 3.11.20.0 - Lenovo Group Ltd.)
Metal Gear Solid V The Phantom Pain MULTi8 - ElAmigos version 1.15 (HKLM-x32\...\{6240B6DA-BB48-4A7D-8360-DAF32226D850}_is1) (Version: 1.15 - Konami Digital Entertainment)
Metro Exodus - Gold Edition (HKLM-x32\...\Metro Exodus - Gold Edition_R.G. Mechanics_is1) (Version: - R.G. Mechanics, Lazali)
Microsoft .NET Core Runtime - 3.1.23 (x64) (HKLM-x32\...\{df2bc21f-074b-4c8d-b9dc-8b144c8d34f1}) (Version: 3.1.23.31022 - Microsoft Corporation)
Microsoft 365 - pl-pl (HKLM\...\O365HomePremRetail - pl-pl) (Version: 16.0.15028.20160 - Microsoft Corporation)
Microsoft ASP.NET Core 3.1.23 - Shared Framework (x64) (HKLM-x32\...\{80e17a43-95fb-4244-a4c8-6b87129c2cb6}) (Version: 3.1.23.22123 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 100.0.1185.44 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.157.61 - )
Microsoft OneDrive (HKU\S-1-5-21-3981546966-4209641125-1705693276-1001\...\OneDriveSetup.exe) (Version: 22.055.0313.0001 - Microsoft Corporation)
Microsoft SQL Server 2014 Express LocalDB (HKLM\...\{52EBC484-44A1-4DC5-824A-0A503735ABD8}) (Version: 12.1.4100.1 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{7B1FCD52-8F6B-4F12-A143-361EA39F5E7C}) (Version: 3.67.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32\...\{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.30.30704 (HKLM-x32\...\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}) (Version: 14.30.30704.0 - Microsoft Corporation)
Mortal Kombat 11 Ultimate Edition MULTi12 - ElAmigos wersja 29.09.2020 (HKLM-x32\...\{CE0D6893-8B68-4938-A438-59907768980D}_is1) (Version: 29.09.2020 - Warner Bros)
MSI Afterburner 4.6.4 (HKLM-x32\...\Afterburner) (Version: 4.6.4 - MSI Co., LTD)
Napisy24 (HKLM\...\{D1985DBC-F09E-4317-91B8-932AD0FD4A27}_is1) (Version: 1.9.6 - Napisy24.pl)
Necromunda: Hired Gun - Escher Pack (HKLM-x32\...\1501536138_is1) (Version: 62662 - GOG.com)
Necromunda: Hired Gun - goliath Pack (HKLM-x32\...\1153060098_is1) (Version: 62662 - GOG.com)
Necromunda: Hired Gun - Hellhound (HKLM-x32\...\1770192438_is1) (Version: 62662 - GOG.com)
Necromunda: Hired Gun - Hunter's Bounty Pack (HKLM-x32\...\1377939547_is1) (Version: 62662 - GOG.com)
Necromunda: Hired Gun - Nautica Pack (HKLM-x32\...\2044463120_is1) (Version: 62662 - GOG.com)
Necromunda: Hired Gun (HKLM-x32\...\1618128477_is1) (Version: 62662 - GOG.com)
Need For Speed Payback Deluxe Edition MULTi10 - ElAmigos wersja 1.0.51.15364 (HKLM-x32\...\{7FBF018C-83D4-432A-8F9A-123337B9366B}_is1) (Version: 1.0.51.15364 - Electronic Arts)
NiceHash Miner 3.0.6.9 (only current user) (HKU\S-1-5-21-3981546966-4209641125-1705693276-1001\...\8abad8e2-b957-48ed-92ba-4339c2a40e78) (Version: 3.0.6.9 - H-BIT, d.o.o.)
No Man's Sky (HKLM-x32\...\No Man's Sky_is1) (Version: 3.84 Sentinel 84011 - RePack)
Norma Pro (HKLM-x32\...\{6FCEBA1E-B484-4972-883F-E2B99A12758E}) (Version: - )
NVIDIA FrameView SDK 1.2.7321.30900954 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.2.7321.30900954 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.25.0.84 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.25.0.84 - NVIDIA Corporation)
NVIDIA mental ray and IRay feature plugins for 3ds Max 2017 (HKLM\...\{6ABEC32F-B90F-4499-B3A3-FF8A00948178}) (Version: 19.0.0.0 - Autodesk)
NVIDIA Oprogramowanie systemu PhysX 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
NVIDIA Sterownik dźwięku HD 1.3.39.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.39.3 - NVIDIA Corporation)
NVIDIA Sterownik graficzny 512.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 512.15 - NVIDIA Corporation)
NVIDIA USBC Driver 1.46.831.832 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.46.831.832 - NVIDIA Corporation)
NvModuleTracker (Version: 6.14.24370.22713 - NVIDIA Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (Version: 16.0.15028.20050 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.15028.20160 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (Version: 16.0.15028.20094 - Microsoft Corporation) Hidden
Personal Accelerator for Revit (HKLM\...\{533DE806-7EC5-4A73-841B-007110126A75}) (Version: 21.0.4.0 - Autodesk)
Pro Evolution Soccer 6 (HKLM-x32\...\InstallShield_{EBB794ED-D282-4334-92FB-254481EFF514}) (Version: 1.00.0000 - KONAMI)
Pro Evolution Soccer 6 (x32 Version: 1.00.0000 - KONAMI) Hidden
RadioMaximus 2.29.8 x64 (HKLM-x32\...\RadioMaximus_is1) (Version: - Raimersoft)
Red Dead Redemption 2 MULTi13 - ElAmigos wersja 1311.23 (HKLM-x32\...\{FB7FE500-D70E-46E4-948A-0976F4D20BD2}_is1) (Version: 1311.23 - Rockstar Games)
Resident Evil Village Deluxe Edition MULTi13 - ElAmigos wersja 1.0 (HKLM-x32\...\{FB1A50F3-AB86-45D6-9FED-29F9CF1F3878}_is1) (Version: 1.0 - Capcom)
RivaTuner Statistics Server 7.3.3 (HKLM-x32\...\RTSS) (Version: 7.3.3 - Unwinder)
Serious Sam: Siberian Mayhem (HKLM-x32\...\2056531790_is1) (Version: 1.0 - GOG.com)
Sprawdzanie kondycji komputera z systemem Windows (HKLM\...\{497ED226-5E88-4EC5-9340-373B1C56906F}) (Version: 3.2.2110.14001 - Microsoft Corporation)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Środowisko uruchomieniowe Microsoft Edge WebView2 (HKLM-x32\...\Microsoft EdgeWebView) (Version: 100.0.1185.44 - Microsoft Corporation)
Telegram Desktop version 3.5.1 (HKU\S-1-5-21-3981546966-4209641125-1705693276-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 3.5.1 - Telegram FZ-LLC)
The Witcher 3: GotY Edition (HKLM-x32\...\The Witcher 3: GotY Edition_is1) (Version: - )
Tom Clancys Rainbow Six Siege (HKLM-x32\...\Tom Clancys Rainbow Six Siege_is1) (Version: - )
TUNIC (HKLM-x32\...\1716751705_is1) (Version: 1.0-T1360-B30 - GOG.com)
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{82BD0A1C-815F-487F-9AE7-CE73DA413CFF}) (Version: 4.91.0.0 - Microsoft Corporation)
USB Network Driver (HKLM-x32\...\{66ED8E01-C915-41F5-B33E-C5C31F27B885}) (Version: V3.70a - )
USB Network Joystick (HKLM-x32\...\{2A558A06-A44E-400D-95AD-D9FAA89AFD36}) (Version: V3.70a - )
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.16 - VideoLAN)
Watch Dogs (HKLM-x32\...\Watch Dogs_is1) (Version: 0.0.0 - DODI-Repacks)
Watch Dogs 2 (HKLM-x32\...\Watch Dogs 2_is1) (Version: 0.0.0 - DODI-Repacks)
Watch Dogs Legion (HKLM-x32\...\Watch Dogs Legion_is1) (Version: 0.0.0 - DODI-Repacks)
WhatsApp (HKU\S-1-5-21-3981546966-4209641125-1705693276-1001\...\WhatsApp) (Version: 2.2210.9 - WhatsApp)
WinRAR 6.02 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 6.02.0 - win.rar GmbH)
Wolcen Lords of Mayhem Bloodtrail (HKLM-x32\...\Wolcen Lords of Mayhem Bloodtrail_is1) (Version: - )
Wolfenstein Youngblood (HKLM-x32\...\Wolfenstein Youngblood_is1) (Version: 0.0.0 - DODI-Repacks)
Worksharing Monitor for Autodesk Revit 2020 (HKLM\...\Worksharing Monitor for Autodesk Revit 2020) (Version: 20.0.0.377 - Autodesk)
Worksharing Monitor for Autodesk Revit 2020 (Version: 20.0.0.377 - Autodesk) Hidden
WRC 10 FIA World Rally Championship - Deluxe Edition (HKLM-x32\...\WRC 10 FIA World Rally Championship - Deluxe Edition_is1) (Version: Update 7 - RePack)
==================== Niestandardowe rejestracje CLSID (filtrowane): ==========================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
CustomCLSID: HKU\S-1-5-21-3981546966-4209641125-1705693276-1001_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 - & gt; D:\zainstalowane\3ds Max 2017\Inventor Server\Bin\TestServer.dll = & gt; Brak pliku
CustomCLSID: HKU\S-1-5-21-3981546966-4209641125-1705693276-1001_Classes\CLSID\{345D3165-3889-4694-AB75-A91A27B217E8}\localserver32 - & gt; C:\Program Files\Autodesk\AutoCAD 2022\acad.exe = & gt; Brak pliku
CustomCLSID: HKU\S-1-5-21-3981546966-4209641125-1705693276-1001_Classes\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InprocServer32 - & gt; C:\Users\mateu\AppData\Local\Microsoft\OneDrive\22.055.0313.0001\FileCoAuthLib64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3981546966-4209641125-1705693276-1001_Classes\CLSID\{80172dde-4e20-4df0-81a2-0a48553e80bb}\localserver32 - & gt; C:\Users\mateu\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe (A-Volute)
CustomCLSID: HKU\S-1-5-21-3981546966-4209641125-1705693276-1001_Classes\CLSID\{8B4929F8-076F-4AEC-AFEE-8928747B7AE3}\localserver32 - & gt; C:\Program Files\Autodesk\AutoCAD 2022\acad.exe /Automation = & gt; Brak pliku
CustomCLSID: HKU\S-1-5-21-3981546966-4209641125-1705693276-1001_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 - & gt; D:\zainstalowane\3ds Max 2017\Inventor Server\Bin\TestServer.dll = & gt; Brak pliku
CustomCLSID: HKU\S-1-5-21-3981546966-4209641125-1705693276-1001_Classes\CLSID\{AA46BA8A-9825-40FD-8493-0BA3C4D5CEB5}\localserver32 - & gt; C:\Program Files\Autodesk\AutoCAD 2022\acad.exe /Automation = & gt; Brak pliku
CustomCLSID: HKU\S-1-5-21-3981546966-4209641125-1705693276-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 - & gt; C:\Program Files\Autodesk\AutoCAD 2022\pl-PL\acadficn.dll = & gt; Brak pliku
CustomCLSID: HKU\S-1-5-21-3981546966-4209641125-1705693276-1001_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 - & gt; D:\zainstalowane\3ds Max 2017\Inventor Server\Bin\TestServer.dll = & gt; Brak pliku
==================== Zaplanowane zadania (filtrowane) =============
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
Task: {008539BF-83F9-4483-9E0A-EEEE6EAC0A08} - System32\Tasks\Microsoft\Windows\Shell\UpdateUserPictureTask
Task: {077333D6-06BA-4EA4-BDF4-1CD1439558F2} - System32\Tasks\Microsoft\Windows\BrokerInfrastructure\BgTaskRegistrationMaintenanceTask
Task: {0C332CE5-9C8D-4867-AC52-9CA1C7F98B71} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\d63b2315-7322-4058-9fa8-e47b028438e8 = & gt; C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2022-01-28] (Lenovo Group Ltd.)
Task: {0CBABB27-6DFC-4155-BAE7-AE919B92FEF2} - System32\Tasks\Microsoft\Windows\DirectX\DXGIAdapterCache = & gt; C:\Windows\system32\dxgiadaptercache.exe [2021-12-21] (Microsoft Corporation)
Task: {0CEC0B91-4AE9-4E8A-ACB2-3B4C811F442C} - System32\Tasks\Microsoft\Windows\WaaSMedic\PerformRemediation
Task: {0D5903AD-834C-4C55-AF53-1FC20A4C7A64} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup = & gt; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [2022-04-07] (Microsoft Corporation)
Task: {0E0E456B-9B9E-43A3-9856-16B40FCB9B43} - System32\Tasks\Microsoft\Windows\Flighting\FeatureConfig\UsageDataFlushing
Task: {0E2DCCB3-7B11-40CF-B973-90F22732E317} - System32\Tasks\Microsoft\Windows\EDP\EDP Inaccessible Credentials Task
Task: {12DF3F8A-9612-48CA-AE38-2818FA70CA73} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask = & gt; C:\Windows\System32\WinBioPlugIns\FaceFodUninstaller.exe [2021-12-21] ()
Task: {172182C2-4319-458D-BE50-E48855A66F0D} - System32\Tasks\Microsoft\Windows\Diagnosis\RecommendedTroubleshootingScanner
Task: {1884CF87-8DE6-4B72-9E8E-9E6F3A53BFF9} - System32\Tasks\NahimicTask64 = & gt; C:\Windows\system32\.\NahimicSvc64.exe [2020-12-10] (Nahimic)
Task: {19CB55D3-215E-470E-9FAC-0EF80C49438F} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask = & gt; C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\ScheduleEventAction.exe [2022-01-20] (Lenovo Group Ltd.)
Task: {1E411E59-6AEA-433D-9F0F-2CDAC643EF33} - System32\Tasks\Lenovo\UDC\Lenovo UDC Monitor = & gt; C:\Windows\system32\drivers\lenovo\udc\data\InfBackup\UdcInfInstaller.exe [2021-12-19] (Lenovo Group Ltd.)
Task: {1E5592F4-996D-40DF-8362-58A51D306272} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan = & gt; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [2022-04-07] (Microsoft Corporation)
Task: {1FC22B9C-6FF7-473D-8526-F1E64A58429C} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance = & gt; Sc.exe start LenovoVantageService
Task: {203EA588-CA91-4AD1-B673-5EDD5B8E4CD1} - System32\Tasks\Microsoft\Office\Office Feature Updates = & gt; C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [2022-04-05] (Microsoft Corporation)
Task: {268E0D7F-92EA-45CD-A1A7-B4DC99F3BEE0} - System32\Tasks\McAfeeTsk\OOBEUpgrader = & gt; C:\Program Files\McAfee\MSC\OOBE_Upgrader.exe
Task: {304D2127-E6ED-4C82-B9B3-63B3B54A4D66} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Check And Scan
Task: {309105CD-B31E-41D7-ABCA-B593F9FED96A} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\3f58bc74-ebf7-46a0-98bd-11fe7a997d9a = & gt; C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2022-01-28] (Lenovo Group Ltd.)
Task: {3194DB49-C274-4BBF-B389-74528CB142A7} - System32\Tasks\MicrosoftEdgeShadowStackRollbackTask = & gt; C:\Program Files (x86)\Microsoft\Edge\Application\100.0.1185.44\Installer\setup.exe [2022-04-18] (Microsoft Corporation)
Task: {32955A9D-A522-48A6-B74E-26CD7322ED85} - System32\Tasks\TinyTask = & gt; C:\Users\Default\Links\plugins.js
Task: {34ADEFE8-89DB-43BC-8C0B-14BB34D69F6D} - System32\Tasks\Microsoft\Windows\BitLocker\BitLocker Encrypt All Drives
Task: {35525E8D-FD60-47BF-8D11-FA4F778C57C3} - System32\Tasks\Microsoft\Windows\Printing\EduPrintProv = & gt; C:\Windows\system32\eduprintprov.exe [2019-12-07] (Microsoft Corporation)
Task: {38631FDE-8DC3-499C-BDF1-F862A637E642} - System32\Tasks\Microsoft\Windows\Flighting\FeatureConfig\ReconcileFeatures
Task: {38D2727F-0A39-4487-99A2-A1F4E583A1F9} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin = & gt; C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\ScheduleEventAction.exe [2022-01-20] (Lenovo Group Ltd.)
Task: {3A0583ED-20AB-458D-BD77-31F3416AAD7F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification = & gt; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [2022-04-07] (Microsoft Corporation)
Task: {3FC4BE91-4A96-48F5-8858-1628CB88EFB5} - System32\Tasks\Microsoft\Windows\Chkdsk\SyspartRepair = & gt; C:\Windows\system32\bcdboot.exe [2021-12-21] (Microsoft Corporation)
Task: {417D1B1F-CBAB-408A-98E0-E03E915CA7BB} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 = & gt; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2022-03-30] (Microsoft Corporation)
Task: {44AF7ADA-1C0D-43B1-A063-9E7581F7730B} - System32\Tasks\Microsoft\Windows\InstallService\SmartRetry
Task: {45B94AED-1BCD-4F92-8CCB-E3BF4FD43610} - System32\Tasks\Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceWnsFallback
Task: {4A0DEFDA-A2B8-4736-88E1-A578E00D9704} - System32\Tasks\Microsoft\Windows\Input\PenSyncDataAvailable
Task: {4BCE6391-0B05-40B4-B642-910B37FB1CE6} - System32\Tasks\Microsoft\Windows\PushToInstall\Registration = & gt; Sc.exe start pushtoinstall registration
Task: {4F2030CE-BA8E-4122-B9A8-29AA5858973E} - System32\Tasks\Microsoft\Windows\Flighting\OneSettings\RefreshCache
Task: {55B1C85E-5BEF-4EDB-ADD0-ECEAEF261E7C} - System32\Tasks\Microsoft\Windows\DirectX\DirectXDatabaseUpdater = & gt; C:\Windows\system32\directxdatabaseupdater.exe [2021-12-21] (Microsoft Corporation)
Task: {571A0A5E-B60E-4A25-BEFB-ABB3C6BB6B78} - System32\Tasks\Microsoft\Windows\Workplace Join\Device-Sync
Task: {58CCC4DA-C86D-4E3D-8FAF-A7B24D8F3950} - System32\Tasks\Microsoft\Windows\StateRepository\MaintenanceTasks = & gt; Rundll32.exe %windir%\system32\Windows.StateRepositoryClient.dll,StateRepositoryDoMaintenanceTasks
Task: {5E351EE7-F0D4-4F41-A05C-907EB1A33CE8} - System32\Tasks\Microsoft\Windows\WlanSvc\CDSSync
Task: {66A3F618-0C70-4F70-9BBA-735CCDB43A09} - System32\Tasks\Microsoft\Windows\EDP\StorageCardEncryption Task
Task: {6D23E997-46D8-4AA7-91CB-5FE89F3CC411} - System32\Tasks\MicrosoftEdgeUpdateTaskMachineCore = & gt; C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2020-11-19] (Microsoft Corporation) & lt; ==== UWAGA
Task: {70CEE840-5FF7-439F-A271-6449F4F807CE} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\a3105731-c18f-4442-90c0-78ccaf7ab2bf = & gt; C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2022-01-28] (Lenovo Group Ltd.)
Task: {70F0F9EC-4BC3-43D6-ACFE-C5E96D70F140} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance = & gt; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [2022-04-07] (Microsoft Corporation)
Task: {7C4733D2-81D6-4CA3-B30C-E00B496B9857} - System32\Tasks\Microsoft\Windows\Input\TouchpadSyncDataAvailable
Task: {87094343-6C1F-4855-A6B9-305BA74AB761} - System32\Tasks\Microsoft\Windows\BitLocker\BitLocker MDM policy Refresh
Task: {8C19FC44-983A-4164-B4CF-38EB8B969F5F} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\9b94386b-159e-478c-85de-5e9d4b3a4c2f = & gt; C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2022-01-28] (Lenovo Group Ltd.)
Task: {8CB06722-650E-4096-B22C-DC6DE4A41C0F} - System32\Tasks\HardDiskSentinel\Hard Disk Sentinel_mateu = & gt; C:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe [2021-10-20] (H.D.S. Hungary)
Task: {92D83E0D-C647-4A99-BB01-51001430BAE3} - System32\Tasks\Agent Activation Runtime\S-1-5-21-3981546966-4209641125-1705693276-1001 = & gt; C:\Windows\System32\AgentActivationRuntimeStarter.exe [2021-12-21] ()
Task: {950A60B8-C662-4C5F-9038-A5AA63D457A4} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon = & gt; C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [2022-04-05] (Microsoft Corporation)
Task: {9B29B882-A95C-438B-BF91-E7C31B1D82D1} - System32\Tasks\Microsoft\Windows\InstallService\WakeUpAndContinueUpdates
Task: {A08D6A77-C926-4E78-9ED0-09836E2769AE} - System32\Tasks\Microsoft\Windows\InstallService\ScanForUpdates
Task: {A2FADBDF-6855-42F7-BDFC-F0C510EDA9BC} - System32\Tasks\Microsoft\Windows\InstallService\ScanForUpdatesAsUser
Task: {A499FA48-7057-4AC1-9702-44C6FD924058} - System32\Tasks\Microsoft\Windows\LanguageComponentsInstaller\ReconcileLanguageResources
Task: {A60D9ECB-A6F4-4FE1-9BD7-B049487A67E7} - System32\Tasks\Microsoft\Windows\International\Synchronize Language Settings
Task: {A74EF9D1-6D6B-4566-8E25-782430F970E5} - System32\Tasks\Microsoft\Windows\PushToInstall\LoginCheck = & gt; Sc.exe start pushtoinstall login
Task: {AA4BAE25-E6AE-4E54-91AD-9B2DD941742D} - System32\Tasks\NahimicTask32 = & gt; C:\Windows\system32\..\SysWOW64\NahimicSvc32.exe [2020-12-10] (Nahimic)
Task: {AF73DAAA-53AE-4CC8-8671-BE29D886B057} - System32\Tasks\Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceProtectionStateChanged
Task: {B2AEB759-5ADB-4781-87C1-5E2FD64230CE} - System32\Tasks\Microsoft\Office\Office Performance Monitor = & gt; C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [2022-04-05] (Microsoft Corporation)
Task: {B3320840-DAB4-4856-996D-50FF10C0C752} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask = & gt; C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\ScheduleEventAction.exe [2022-01-20] (Lenovo Group Ltd.)
Task: {B89E3CFD-A17A-4A4D-9A90-1C2B8ABBBA91} - System32\Tasks\Lenovo\Vantage\Schedule\VantageTelemetryAddinTask = & gt; C:\Program Files (x86)\Lenovo\VantageService\3.5.27.0\ScheduleEventAction.exe
Task: {B95A6ED0-265E-4D91-8907-D12FB4802636} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor = & gt; C:\Windows\system32\ImController.InfInstaller.exe [2022-01-28] (Lenovo Group Ltd.)
Task: {BD76146D-5506-4D93-AFD4-C6EFBF677F4F} - System32\Tasks\Microsoft\Windows\Subscription\EnableLicenseAcquisition = & gt; C:\Windows\system32\ClipRenew.exe [2019-12-07] (Microsoft Corporation)
Task: {C02970B0-9ED6-430A-8693-CAEF4953AFA6} - System32\Tasks\NahimicSvc64Run = & gt; C:\Windows\system32\NahimicSvc64.exe [2020-12-10] (Nahimic)
Task: {C0D40F39-515D-4FA6-A2A4-5F17794320DF} - System32\Tasks\Microsoft\Windows\Subscription\LicenseAcquisition = & gt; C:\Windows\system32\ClipRenew.exe [2019-12-07] (Microsoft Corporation)
Task: {C22DB03B-0A25-4E17-A2DA-A26E882FD074} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcTrigger
Task: {C3BB147F-8E11-4738-9A3C-1663C0E7628D} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask = & gt; reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {C3D6B0A4-7C20-4D2D-820C-F805D0779644} - System32\Tasks\Microsoft\Windows\Flighting\FeatureConfig\UsageDataReporting
Task: {C49938C3-7060-4E3B-914F-3D91E80FE7B1} - System32\Tasks\Lenovo\UDC\Lenovo UDC Idle Monitor = & gt; UDCUserAgent.exe
Task: {C5D47392-881C-422A-9BF8-E4916B55CD22} - System32\Tasks\Microsoft\Windows\USB\Usb-Notifications
Task: {CA7CD02D-427E-4076-BD22-45D7C39B9536} - System32\Tasks\NahimicSvc32Run = & gt; C:\Windows\SysWOW64\NahimicSvc32.exe [2020-12-10] (Nahimic)
Task: {CAB76809-EDC0-40D2-A888-AD9BEDF4E88A} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr = & gt; C:\Windows\System32\UNP\UpdateNotificationMgr.exe [2021-12-21] (Microsoft Corporation)
Task: {CADF1293-5495-426F-8E37-A30F69274AF4} - System32\Tasks\Microsoft\Windows\Input\LocalUserSyncDataAvailable
Task: {CDD50357-A6FF-46CA-B30E-0742E0D7745A} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor = & gt; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2022-03-30] (Microsoft Corporation)
Task: {CE5D3559-4CF9-4C8C-9D1C-FEED845B0E01} - System32\Tasks\Microsoft\Windows\Application Experience\PcaPatchDbTask = & gt; Rundll32.exe %windir%\system32\PcaSvc.dll,PcaPatchSdbTask
Task: {D56070CA-34E6-47F7-B219-5F8E64001331} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\f3a17e6f-dc99-4283-8c1d-fd39c662152f = & gt; C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2022-01-28] (Lenovo Group Ltd.)
Task: {DA42085F-11E4-4EE1-A363-1898204812F5} - System32\Tasks\Microsoft\Windows\Input\MouseSyncDataAvailable
Task: {DD757E54-D1A0-4EF9-B6E9-8392EAAE1CA1} - System32\Tasks\Microsoft\Windows\WindowsUpdate\RUXIM\PLUGScheduler = & gt; C:\Program Files\RUXIM\PLUGscheduler.exe [2022-01-12] (Microsoft Corporation)
Task: {E73D4D84-C042-407E-A30F-ABACB1370DC2} - System32\Tasks\Microsoft\Windows\WwanSvc\OobeDiscovery
Task: {E95491AC-0E8A-4387-A75E-A40EA3B79640} - System32\Tasks\Microsoft\Windows\AppListBackup\Backup
Task: {EC3EFE4E-A2E4-4C66-975C-CA2EFD0D42CD} - System32\Tasks\Microsoft\Windows\InstallService\WakeUpAndScanForUpdates
Task: {F2FDDEC7-255E-41B5-804F-542BBB4519D0} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance = & gt; Sc.exe START ImControllerService
Task: {F31903E6-3C1E-4358-9F0B-0F518539840A} - System32\Tasks\MicrosoftEdgeUpdateTaskMachineUA = & gt; C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2020-11-19] (Microsoft Corporation) & lt; ==== UWAGA
Task: {F89F25E0-27B5-4654-B602-A6C024BF892E} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance = & gt; C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe [2021-09-09] (Lenovo Group Ltd.)
Task: {F8FEDA28-6261-4385-844A-684E6C988577} - System32\Tasks\Microsoft\Windows\ExploitGuard\ExploitGuard MDM policy Refresh
Task: {FCAB16E7-9F40-440F-BE2A-447AF06A4D85} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission = & gt; C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\ScheduleEventAction.exe [2022-01-20] (Lenovo Group Ltd.)
(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)
==================== Skróty =============================
(Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.)
==================== Załadowane moduły (filtrowane) ==============
2020-11-19 04:48 - 2020-11-19 04:48 - 00064552 _____ () C:\Windows\system32\UMPDC.dll
2020-11-19 04:48 - 2020-11-19 04:48 - 00064552 _____ () c:\windows\system32\UMPDC.dll
2020-11-19 04:48 - 2020-11-19 04:48 - 00064552 _____ () C:\Windows\SYSTEM32\UMPDC.dll
2021-12-21 12:38 - 2021-12-21 12:38 - 00657464 _____ () C:\Windows\System32\windowmanagementapi.dll
2021-12-21 12:38 - 2021-12-21 12:38 - 00706536 _____ () C:\Windows\system32\TextShaping.dll
2021-12-21 12:38 - 2021-12-21 12:38 - 00706536 _____ () c:\windows\system32\TextShaping.dll
2022-03-27 22:03 - 2022-03-18 07:42 - 00241624 _____ () C:\Windows\System32\DriverStore\FileRepository\nvlti.inf_amd64_0d04d46e99e0e8d9\nvsmartmax64.dll
2020-11-19 04:48 - 2020-11-19 04:48 - 00064552 _____ () C:\Windows\System32\UMPDC.dll
2022-01-19 23:21 - 2021-12-15 17:20 - 00027784 _____ () C:\Program Files (x86)\EaseUS\ENS\ensserver.exe
2013-05-08 15:17 - 2013-05-08 15:17 - 00082144 _____ () C:\Program Files (x86)\HDD Regenerator\hrsrv.exe
2021-12-21 12:38 - 2021-12-21 12:38 - 00657464 _____ () C:\Windows\System32\WindowManagementAPI.dll
2021-09-15 09:14 - 2021-12-19 20:23 - 00241488 _____ () C:\Windows\System32\drivers\Lenovo\udc\Service\LibJson.dll
2021-09-15 09:14 - 2021-12-19 20:23 - 00902104 _____ () C:\Windows\System32\drivers\Lenovo\udc\Service\Sqllite3.dll
2021-09-15 09:14 - 2021-12-19 20:23 - 27061080 _____ () C:\Windows\System32\drivers\Lenovo\udc\Service\libsbb.dll
2021-09-14 23:43 - 2022-01-03 11:59 - 01243136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2021-12-20 23:24 - 2022-01-26 23:25 - 00517896 _____ () C:\ProgramData\A-Volute\A-Volute.Nahimic\Modules\Regular\x64\AudioDeviceAPIDaemonModule.dll
2021-12-21 12:38 - 2021-12-21 12:38 - 00706536 _____ () C:\Windows\SYSTEM32\TextShaping.dll
2021-12-21 12:41 - 2021-12-21 12:41 - 00095744 _____ () C:\Windows\System32\VirtualMonitorManager.dll
2021-09-15 09:31 - 2021-09-15 09:31 - 00363520 _____ () C:\Windows\System32\Windows.Internal.UI.Shell.WindowTabManager.dll
2019-12-07 11:08 - 2019-12-07 11:08 - 00499200 _____ () C:\Windows\ShellExperiences\TileControl.dll
2021-12-21 12:38 - 2021-12-21 12:38 - 02158592 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2022-03-10 23:50 - 2022-03-10 23:50 - 02260992 _____ () C:\Windows\system32\TextInputMethodFormatter.dll
2021-09-14 23:43 - 2022-01-03 11:59 - 01243136 _____ () C:\Program Files\NVIDIA Corporation\nvcontainer\libprotobuf.dll
2021-09-14 23:43 - 2022-02-03 18:41 - 111338696 _____ () C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2021-09-14 23:43 - 2022-02-03 18:41 - 00709832 _____ () C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\dependencies\CrimsonUtil.dll
2021-09-14 23:43 - 2022-01-21 14:22 - 00082432 _____ () C:\Windows\SYSTEM32\FvSDK_x64.dll
2021-09-14 23:43 - 2022-02-03 18:41 - 05443280 _____ () C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\libglesv2.dll
2021-09-14 23:43 - 2022-02-03 18:41 - 00137936 _____ () C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\libegl.dll
2022-01-26 23:22 - 2022-01-26 23:23 - 00021504 _____ () C:\Program Files\WindowsApps\A-Volute.Nahimic_1.9.5.0_x64__w2gh52qy24etm\Nahimic3.exe
2022-01-26 23:22 - 2022-01-26 23:23 - 20637184 _____ () C:\Program Files\WindowsApps\A-Volute.Nahimic_1.9.5.0_x64__w2gh52qy24etm\Nahimic3.dll
2021-12-21 12:38 - 2021-12-21 12:38 - 00657464 _____ () C:\Windows\SYSTEM32\WindowManagementAPI.dll
2019-12-07 11:08 - 2019-12-07 11:08 - 00039424 _____ () C:\Windows\System32\usocoreps.dll
2022-02-11 06:36 - 2022-02-11 06:36 - 00793416 _____ () C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
2022-03-10 23:51 - 2022-03-10 23:51 - 00461312 _____ () C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\Search.Core.dll
2022-04-02 00:59 - 2022-04-02 00:59 - 06344616 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\YourPhone.AppCore.WinRT.dll
2021-12-21 02:09 - 2021-12-21 02:10 - 01000960 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll
2022-04-02 00:59 - 2022-04-02 01:00 - 04630952 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\YourPhone.ScreenMirroring.dll
2022-04-02 00:59 - 2022-04-02 00:59 - 00531888 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\YourPhone.Background.CX.dll
2022-04-02 00:59 - 2022-04-02 01:00 - 00692640 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\YourPhoneControls.dll
2022-04-02 00:59 - 2022-04-02 00:59 - 00789928 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\YourPhone.Connectivity.dll
2022-04-02 00:59 - 2022-04-02 00:59 - 01447336 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\YourPhone.Connectivity.YPP.dll
2022-04-02 00:59 - 2022-04-02 01:00 - 01780136 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\YourPhone.Messaging.dll
2022-04-02 00:59 - 2022-04-02 01:00 - 00132000 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\YourPhone.Flyouts.WinRT.dll
2022-04-02 00:59 - 2022-04-02 01:00 - 01178544 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\YourPhone.ScreenMirroring.WinRT.dll
2022-04-02 00:59 - 2022-04-02 00:59 - 02168744 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\YourPhone.Calling.CX.dll
2022-04-02 00:59 - 2022-04-02 00:59 - 01438632 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\YourPhone.Calling.WinRT.dll
2022-04-02 00:59 - 2022-04-02 00:59 - 00543152 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\YourPhone.Contacts.WinRT.dll
2022-04-02 00:59 - 2022-04-02 00:59 - 00743848 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\YourPhone.Devices.WinRT.dll
2022-04-02 00:59 - 2022-04-02 01:00 - 01030064 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\YourPhone.Photos.dll
2022-04-02 00:59 - 2022-04-02 01:00 - 03796904 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\YourPhone.Messaging.WinRT.dll
2022-04-02 00:59 - 2022-04-02 01:00 - 00185256 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\YourPhone.Notifications.WinRT.dll
2022-04-02 00:59 - 2022-04-02 01:00 - 00807336 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\YourPhone.SharedContent.WinRT.dll
2022-04-02 00:59 - 2022-04-02 00:59 - 01294248 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\YourPhone.Contacts.dll
2017-03-10 15:20 - 2017-03-10 15:20 - 00179200 _____ () C:\Program Files\Autodesk\Personal Accelerator for Revit\Autodesk.C4R.AdWebServicesInterop.dll
2017-03-10 15:20 - 2017-03-10 15:20 - 00062464 _____ () C:\Program Files\Autodesk\Personal Accelerator for Revit\qoauth_Ad_1.dll
2017-03-10 15:20 - 2017-03-10 15:20 - 00165376 _____ () C:\Program Files\Autodesk\Personal Accelerator for Revit\qjson_Ad_0.dll
2017-03-10 15:20 - 2017-03-10 15:20 - 00050176 _____ () C:\Program Files\Autodesk\Personal Accelerator for Revit\QtSolutions_MFCMigrationFramework_Ad_2.dll
2017-03-10 15:20 - 2017-03-10 15:20 - 00932352 _____ () C:\Program Files\Autodesk\Personal Accelerator for Revit\qca_Ad_2.dll
2022-04-05 22:07 - 2022-04-05 22:07 - 00057240 _____ () C:\Users\mateu\AppData\Local\Microsoft\OneDrive\22.055.0313.0001\FileSyncRNWin32Lib.dll
2021-12-29 19:20 - 2021-12-29 19:20 - 00436744 _____ () C:\Program Files\WindowsApps\AcrobatNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
2021-12-21 02:23 - 2021-12-21 02:24 - 05013504 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
2021-12-21 02:23 - 2021-12-21 02:24 - 00671232 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\GraphControl.dll
2021-12-21 02:23 - 2021-12-21 02:24 - 00028672 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\TraceLogging.dll
2021-12-21 12:38 - 2021-12-21 12:38 - 00657464 _____ () C:\Windows\system32\WindowManagementAPI.dll
2022-04-14 07:37 - 2022-04-08 22:38 - 07056784 _____ () C:\Program Files\Google\Chrome\Application\100.0.4896.88\libglesv2.dll
2022-04-14 07:37 - 2022-04-08 22:38 - 00450960 _____ () C:\Program Files\Google\Chrome\Application\100.0.4896.88\libegl.dll
2022-04-14 07:37 - 2022-04-08 22:38 - 04578704 _____ () C:\Program Files\Google\Chrome\Application\100.0.4896.88\vk_swiftshader.dll
2022-03-10 23:51 - 2022-03-10 23:51 - 00615640 _____ () C:\WINDOWS\SYSTEM32\WINBIOPLUGINS\FACEBOOTSTRAPADAPTER.DLL
2022-03-31 11:53 - 2022-03-31 11:53 - 21577216 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.22021.10291.0_x64__8wekyb3d8bbwe\Video.UI.exe
2022-03-31 11:53 - 2022-03-31 11:53 - 00246272 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.22021.10291.0_x64__8wekyb3d8bbwe\SharedUI.dll
2022-03-31 11:53 - 2022-03-31 11:53 - 04976128 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.22021.10291.0_x64__8wekyb3d8bbwe\EntCommon.dll
2022-03-31 11:53 - 2022-03-31 11:53 - 07854592 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.22021.10291.0_x64__8wekyb3d8bbwe\EntPlat.dll
2021-12-21 02:06 - 2021-12-21 02:08 - 00756224 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2021.21090.10008.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2021-12-21 02:06 - 2021-12-21 02:08 - 82327552 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2021.21090.10008.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2021-12-21 02:04 - 2021-12-21 02:05 - 00036864 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2021.21090.10008.0_x64__8wekyb3d8bbwe\OneSettingsClientForwarder.dll
2021-12-21 02:06 - 2021-12-21 02:09 - 02523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2021.21090.10008.0_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll
2021-12-21 02:06 - 2021-12-21 02:07 - 03707904 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2021.21090.10008.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll
2021-12-21 02:06 - 2021-12-21 02:09 - 00011264 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2021.21090.10008.0_x64__8wekyb3d8bbwe\RenderingPlugin.dll
2021-12-21 02:06 - 2021-12-21 02:07 - 00104960 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2021.21090.10008.0_x64__8wekyb3d8bbwe\AppSettingsCppCX.dll
2021-12-21 02:06 - 2021-12-21 02:07 - 01857536 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2021.21090.10008.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll
2021-12-21 02:06 - 2021-12-21 02:07 - 00686592 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2021.21090.10008.0_x64__8wekyb3d8bbwe\AppCoreFramework.Windows.dll
2021-12-21 02:06 - 2021-12-21 02:07 - 06408704 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2021.21090.10008.0_x64__8wekyb3d8bbwe\Lightbox.dll
2021-12-21 02:06 - 2021-12-21 02:07 - 00509440 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2021.21090.10008.0_x64__8wekyb3d8bbwe\ImageLib.dll
2021-12-21 02:06 - 2021-12-21 02:08 - 01400320 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2021.21090.10008.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2021-12-21 02:01 - 2021-12-21 02:01 - 00969728 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2021.21090.10008.0_x64__8wekyb3d8bbwe\OnlineMediaComponent.dll
2021-12-21 02:06 - 2021-12-21 02:09 - 10525184 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2021.21090.10008.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll
2021-12-21 02:06 - 2021-12-21 02:09 - 01014784 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2021.21090.10008.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll
2021-12-21 02:06 - 2021-12-21 02:09 - 00126976 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2021.21090.10008.0_x64__8wekyb3d8bbwe\SKU.dll
2022-01-19 23:21 - 2021-12-15 17:20 - 00509064 _____ () C:\Program Files (x86)\EaseUS\ENS\AliyunWrap.DLL
2022-01-19 23:21 - 2021-12-15 17:20 - 00461448 _____ () C:\Program Files (x86)\EaseUS\ENS\wpnr.dll
2022-01-19 23:21 - 2021-12-15 17:20 - 00203912 _____ () C:\Program Files (x86)\EaseUS\ENS\libssh2.dll
2022-01-19 23:21 - 2021-12-15 17:20 - 00137864 _____ () C:\Program Files (x86)\EaseUS\ENS\EnsHelper.dll
2022-01-19 23:21 - 2021-12-15 17:20 - 00098440 _____ () C:\Program Files (x86)\EaseUS\ENS\register.dll
2021-09-14 23:43 - 2022-01-03 11:59 - 01025024 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2021-10-05 10:44 - 2021-10-05 10:44 - 00494304 _____ () C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\sqlite.dll
2015-03-17 02:34 - 2015-03-17 02:34 - 00010240 _____ () C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\locale\pl_pl\acrotray.pol
==================== Alternate Data Streams (filtrowane) =========
(Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.)
AlternateDataStreams: C:\ProgramData\TEMP:D78D6FF7 [154]
AlternateDataStreams: C:\Users\mateu\Downloads\FRST (1).exe:SmartScreen [7]
==================== Tryb awaryjny (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość " AlternateShell " zostanie przywrócona.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CBDHSvc = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys = & gt; " " = " Driver "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys = & gt; " " = " Driver "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NgcCtnrSvc = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NgcSvc = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys = & gt; " " = " Driver "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys = & gt; " " = " Driver "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318} = & gt; " " = " Media "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318} = & gt; " SafeBootDrivers " = " 1 "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AudioEndpointBuilder = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AudioSrv = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CBDHSvc = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\HdAudAddService.Sys = & gt; " " = " Driver "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\HdAudBus.Sys = & gt; " " = " Driver "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MsQuic = & gt; " " = " Driver "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetSetupSvc = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NgcCtnrSvc = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NgcSvc = & gt; " " = " Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SerCx2.sys = & gt; " " = " Driver "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\usbaudio.sys = & gt; " " = " Driver "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96C-E325-11CE-BFC1-08002BE10318} = & gt; " " = " Media "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96C-E325-11CE-BFC1-08002BE10318} = & gt; " SafeBootDrivers " = " 1 "
==================== Powiązania plików (filtrowane) ===============
(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.)
HKU\S-1-5-21-3981546966-4209641125-1705693276-1001\Software\Classes\.scr: AutoCADScriptFile = & gt; C:\Windows\system32\notepad.exe " %1 "
==================== Internet Explorer - Witryny zaufane i z ograniczeniami ===============
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.)
==================== Hosts - zawartość: ==========================
(Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)
2019-12-07 11:14 - 2022-04-02 12:21 - 00002803 ___RA C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 get-seeders.com
127.0.0.1 tracker.cgpeers.to
127.0.0.1 cgpeers.to
127.0.0.1 proxy.siambit.me
127.0.0.1 tracker.iptorrent.com
127.0.0.1 tt-square.com
127.0.0.1 tt-torrent.com
127.0.0.1 thailandtorrent.com
109.94.209.70 fitgirlrepacks.in # Fake FitGirl site
109.94.209.70 www.fitgirlrepacks.in # Fake FitGirl site
109.94.209.70 fitgirlrepacks.co # Fake FitGirl site
109.94.209.70 fitgirl-repacks.cc # Fake FitGirl site
109.94.209.70 fitgirl-repacks.to # Fake FitGirl site
109.94.209.70 fitgirl-repack.com # Fake FitGirl site
109.94.209.70 fitgirl-repacks.website # Fake FitGirl site
109.94.209.70 fitgirlrepack.games # Fake FitGirl site
109.94.209.70 www.fitgirlrepacks.co # Fake FitGirl site
109.94.209.70 www.fitgirl-repacks.cc # Fake FitGirl site
109.94.209.70 www.fitgirl-repacks.to # Fake FitGirl site
109.94.209.70 www.fitgirl-repack.com # Fake FitGirl site
109.94.209.70 www.fitgirl-repacks.website # Fake FitGirl site
109.94.209.70 ww9.fitgirl-repacks.xyz # Fake FitGirl site
109.94.209.70 www.fitgirlrepack.games # Fake FitGirl site
109.94.209.70 *.fitgirl-repacks.xyz # Fake FitGirl site
109.94.209.70 fitgirl-repacks.xyz # Fake FitGirl site
109.94.209.70 fitgirl-repack.net # Fake FitGirl site
109.94.209.70 www.fitgirl-repack.net # Fake FitGirl site
109.94.209.70 fitgirlpack.site # Fake FitGirl site
109.94.209.70 www.fitgirlpack.site # Fake FitGirl site
109.94.209.70 fitgirl-repack.org # Fake FitGirl site
Wykryto więcej niż wyliczono: 2 linii.
==================== Inne obszary ============================
(Obecnie brak automatycznej naprawy dla tej sekcji.)
HKU\S-1-5-21-3981546966-4209641125-1705693276-1001\Control Panel\Desktop\\Wallpaper - & gt; C:\Users\mateu\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img2.jpg
DNS Servers: 192.168.8.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System = & gt; (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Zapora systemu Windows [funkcja włączona]
==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==
HKLM\...\StartupApproved\Run32: = & gt; " HDD Regenerator "
HKLM\...\StartupApproved\Run32: = & gt; " USB Gamepad "
HKU\S-1-5-21-3981546966-4209641125-1705693276-1001\...\StartupApproved\Run: = & gt; " EpicGamesLauncher "
HKU\S-1-5-21-3981546966-4209641125-1705693276-1001\...\StartupApproved\Run: = & gt; " Napisy24.pl "
HKU\S-1-5-21-3981546966-4209641125-1705693276-1001\...\StartupApproved\Run: = & gt; " Napisy24Update "
HKU\S-1-5-21-3981546966-4209641125-1705693276-1001\...\StartupApproved\Run: = & gt; " Steam "
==================== Reguły Zapory systemu Windows (filtrowane) ===============
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
FirewallRules: [Microsoft-Windows-DeviceManagement-OmaDmClient-TCP-Out] = & gt; (Allow) %SystemRoot%\system32\omadmclient.exe
FirewallRules: [Microsoft-Windows-DeviceManagement-deviceenroller-TCP-Out] = & gt; (Allow) %SystemRoot%\system32\deviceenroller.exe
FirewallRules: [Microsoft-Windows-DeviceManagement-CertificateInstall-TCP-Out] = & gt; (Allow) %SystemRoot%\system32\dmcertinst.exe
FirewallRules: [{7A83FC00-241F-4129-BB94-CA5543631BC0}] = & gt; (Allow) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
FirewallRules: [{90A9DAC6-BB96-4EBD-8601-4E6725B38C46}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{F070822B-4FF4-46D7-B73C-7C42AB4495C4}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{5D9BEFC4-48D1-4D7A-B7F4-4FCD48885C6E}] = & gt; (Allow) C:\Users\mateu\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{69243072-236E-4CED-886A-BCF96C33103D}] = & gt; (Allow) C:\Users\mateu\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{D15C4C64-56F3-4370-A6D3-4361B44C9266}C:\program files (x86)\assetto corsa competizione\ac2\binaries\win64\ac2-win64-shipping.exe] = & gt; (Allow) C:\program files (x86)\assetto corsa competizione\ac2\binaries\win64\ac2-win64-shipping.exe
FirewallRules: [UDP Query User{381AE9BE-E67B-4388-9C0F-6026B4742BA9}C:\program files (x86)\assetto corsa competizione\ac2\binaries\win64\ac2-win64-shipping.exe] = & gt; (Allow) C:\program files (x86)\assetto corsa competizione\ac2\binaries\win64\ac2-win64-shipping.exe
FirewallRules: [TCP Query User{71BFCA7C-F941-4D5A-BA88-AC264F0DE23F}C:\games\need for speed heat\needforspeedheat.exe] = & gt; (Allow) C:\games\need for speed heat\needforspeedheat.exe
FirewallRules: [UDP Query User{15367B8F-A5A5-48E6-95D5-7232C1644B6A}C:\games\need for speed heat\needforspeedheat.exe] = & gt; (Allow) C:\games\need for speed heat\needforspeedheat.exe
FirewallRules: [{70256FC3-CD5B-4B71-8E87-8A431AEDDD1B}] = & gt; (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F6B6D783-C814-475C-8435-B68B03E91382}] = & gt; (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{706FF779-823A-4F1E-BE1D-96D7D62D2917}] = & gt; (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
FirewallRules: [{7E4CE316-8EAD-462E-9D47-9E5F3FBDE980}] = & gt; (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
FirewallRules: [TCP Query User{4DCC9C74-C77C-4E16-8374-F51601CB6DF1}C:\program files (x86)\dodi-repacks\forza horizon 5\forzahorizon5.exe] = & gt; (Allow) C:\program files (x86)\dodi-repacks\forza horizon 5\forzahorizon5.exe
FirewallRules: [UDP Query User{069EF80B-D4E1-42E0-A4AF-96482C4243EC}C:\program files (x86)\dodi-repacks\forza horizon 5\forzahorizon5.exe] = & gt; (Allow) C:\program files (x86)\dodi-repacks\forza horizon 5\forzahorizon5.exe
FirewallRules: [TCP Query User{FA6B3AB2-4322-4A1C-8127-23001A76AFEB}C:\games\ red dead redemption 2\rdr2.exe] = & gt; (Allow) C:\games\ red dead redemption 2\rdr2.exe
FirewallRules: [UDP Query User{C20E7A51-C1AB-4150-BBEE-64BD456B2885}C:\games\ red dead redemption 2\rdr2.exe] = & gt; (Allow) C:\games\ red dead redemption 2\rdr2.exe
FirewallRules: [TCP Query User{A79B3B98-41A8-4836-9DAE-C0E8582F0850}C:\users\mateu\downloads\wartales.steam.rip-insaneramzes\wartales\wartales.exe] = & gt; (Allow) C:\users\mateu\downloads\wartales.steam.rip-insaneramzes\wartales\wartales.exe
FirewallRules: [UDP Query User{C2916897-8B47-4826-8D91-3D2DE74C1D82}C:\users\mateu\downloads\wartales.steam.rip-insaneramzes\wartales\wartales.exe] = & gt; (Allow) C:\users\mateu\downloads\wartales.steam.rip-insaneramzes\wartales\wartales.exe
FirewallRules: [TCP Query User{EAE0A332-8574-4F61-907E-37520A01F02B}C:\users\mateu\downloads\resident.evil.7.biohazard.v20211217-goldberg\resident evil 7 biohazard\re7.exe] = & gt; (Allow) C:\users\mateu\downloads\resident.evil.7.biohazard.v20211217-goldberg\resident evil 7 biohazard\re7.exe
FirewallRules: [UDP Query User{B93644B7-6FAC-4ED4-9F7D-248E09049642}C:\users\mateu\downloads\resident.evil.7.biohazard.v20211217-goldberg\resident evil 7 biohazard\re7.exe] = & gt; (Allow) C:\users\mateu\downloads\resident.evil.7.biohazard.v20211217-goldberg\resident evil 7 biohazard\re7.exe
FirewallRules: [TCP Query User{B6B9B87D-A522-4620-97F7-AC58A3AD6268}C:\games\jet fighters with friends multiplayer\multijets5\binaries\win64\multijets5-win64-shipping.exe] = & gt; (Allow) C:\games\jet fighters with friends multiplayer\multijets5\binaries\win64\multijets5-win64-shipping.exe
FirewallRules: [UDP Query User{4CDE181C-0958-4CBC-848C-169505D36BC6}C:\games\jet fighters with friends multiplayer\multijets5\binaries\win64\multijets5-win64-shipping.exe] = & gt; (Allow) C:\games\jet fighters with friends multiplayer\multijets5\binaries\win64\multijets5-win64-shipping.exe
FirewallRules: [TCP Query User{854FBC18-A774-4D1C-B8D2-17729C3B4ED4}C:\program files (x86)\dodi-repacks\forza horizon 5\forzahorizon5.exe] = & gt; (Allow) C:\program files (x86)\dodi-repacks\forza horizon 5\forzahorizon5.exe
FirewallRules: [UDP Query User{E419509A-A5FC-415F-8035-34621CA75EAF}C:\program files (x86)\dodi-repacks\forza horizon 5\forzahorizon5.exe] = & gt; (Allow) C:\program files (x86)\dodi-repacks\forza horizon 5\forzahorizon5.exe
FirewallRules: [TCP Query User{E08275B1-8E70-4E06-9B9F-13C7D5646778}C:\users\mateu\downloads\wartales.steam.rip-insaneramzes\wartales\wartales.exe] = & gt; (Allow) C:\users\mateu\downloads\wartales.steam.rip-insaneramzes\wartales\wartales.exe
FirewallRules: [UDP Query User{FDA3F44F-EFD3-4961-B4F4-F05842CE98A5}C:\users\mateu\downloads\wartales.steam.rip-insaneramzes\wartales\wartales.exe] = & gt; (Allow) C:\users\mateu\downloads\wartales.steam.rip-insaneramzes\wartales\wartales.exe
FirewallRules: [TCP Query User{428A8E49-8533-45A6-AC64-EC0A22286C17}C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\eb75e920-94eb-11ea-a64d-17be303ea466\bins\16.2\1.32a\lolminer.exe] = & gt; (Allow) C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\eb75e920-94eb-11ea-a64d-17be303ea466\bins\16.2\1.32a\lolminer.exe
FirewallRules: [UDP Query User{79FBB288-27A8-4097-976F-7FDD583B7E61}C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\eb75e920-94eb-11ea-a64d-17be303ea466\bins\16.2\1.32a\lolminer.exe] = & gt; (Allow) C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\eb75e920-94eb-11ea-a64d-17be303ea466\bins\16.2\1.32a\lolminer.exe
FirewallRules: [TCP Query User{BD58A522-F23C-4D67-BE98-2854F476AA63}C:\program files (x86)\dodi-repacks\call of duty modern warfare 2 campaign remastered\mw2cr.exe] = & gt; (Allow) C:\program files (x86)\dodi-repacks\call of duty modern warfare 2 campaign remastered\mw2cr.exe
FirewallRules: [UDP Query User{EEDF7C40-E017-40BE-971E-F0018AFCC971}C:\program files (x86)\dodi-repacks\call of duty modern warfare 2 campaign remastered\mw2cr.exe] = & gt; (Allow) C:\program files (x86)\dodi-repacks\call of duty modern warfare 2 campaign remastered\mw2cr.exe
FirewallRules: [TCP Query User{C6D31DFE-8C22-4590-9154-2561F99E7EE1}C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\e7a58030-94eb-11ea-a64d-17be303ea466\bins\16.1\miner.exe] = & gt; (Allow) C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\e7a58030-94eb-11ea-a64d-17be303ea466\bins\16.1\miner.exe
FirewallRules: [UDP Query User{4810D8E3-412B-40DB-A605-B944FDE19650}C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\e7a58030-94eb-11ea-a64d-17be303ea466\bins\16.1\miner.exe] = & gt; (Allow) C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\e7a58030-94eb-11ea-a64d-17be303ea466\bins\16.1\miner.exe
FirewallRules: [TCP Query User{38D935F9-83F5-47CB-875A-2E228ECC4E1E}C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\f25fee20-94eb-11ea-a64d-17be303ea466\bins\16.1\nanominer-windows-3.3.14-cuda11\nanominer.exe] = & gt; (Allow) C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\f25fee20-94eb-11ea-a64d-17be303ea466\bins\16.1\nanominer-windows-3.3.14-cuda11\nanominer.exe
FirewallRules: [UDP Query User{50ED9A31-7C6E-46DC-8168-6B2B373D9104}C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\f25fee20-94eb-11ea-a64d-17be303ea466\bins\16.1\nanominer-windows-3.3.14-cuda11\nanominer.exe] = & gt; (Allow) C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\f25fee20-94eb-11ea-a64d-17be303ea466\bins\16.1\nanominer-windows-3.3.14-cuda11\nanominer.exe
FirewallRules: [{FCFE4DE7-4FDB-4D12-B0E0-88F6AE279867}] = & gt; (Allow) C:\Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe
FirewallRules: [{AFBCCB6D-3C90-4BF6-8414-4EF2CE1C1F9C}] = & gt; (Allow) C:\Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe
FirewallRules: [{E5AEF1D8-7967-462D-9C22-136B6AEC6D74}] = & gt; (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe
FirewallRules: [{E77F7CA8-95C1-44D8-B2BB-8092A948DEE5}] = & gt; (Allow) C:\Program Files (x86)\BlueStacks X\Cloud Game.exe
FirewallRules: [{9EE72A5E-2061-4EE5-B59D-F0F86C761246}] = & gt; (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe
FirewallRules: [TCP Query User{700B01A7-D9ED-410B-85CD-B21B93B57BB1}C:\program files (x86)\dodi-repacks\crysis remastered\bin64\crysisremastered.exe] = & gt; (Allow) C:\program files (x86)\dodi-repacks\crysis remastered\bin64\crysisremastered.exe
FirewallRules: [UDP Query User{E4F41649-7383-492B-B4E1-168936F528DC}C:\program files (x86)\dodi-repacks\crysis remastered\bin64\crysisremastered.exe] = & gt; (Allow) C:\program files (x86)\dodi-repacks\crysis remastered\bin64\crysisremastered.exe
FirewallRules: [{CEDA348E-7AB6-4C46-9B75-A3269D94B451}] = & gt; (Allow) C:\Program Files (x86)\BFH\BFHWebHelper.exe
FirewallRules: [{C8800CD7-1C72-4609-B5AA-61B5E1D884E1}] = & gt; (Allow) C:\Program Files (x86)\BFH\BFHWebHelper.exe
FirewallRules: [TCP Query User{5B7FB129-CE4D-4434-BB64-4FD1BBFC57A5}C:\games\battlefield 1\bf1.exe] = & gt; (Allow) C:\games\battlefield 1\bf1.exe
FirewallRules: [UDP Query User{D4E4A42B-4635-4A4A-982B-26FBCD9FAD7F}C:\games\battlefield 1\bf1.exe] = & gt; (Allow) C:\games\battlefield 1\bf1.exe
FirewallRules: [TCP Query User{B1E7E7F4-93A8-4196-9110-64E3EE9CB955}C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\e7a58030-94eb-11ea-a64d-17be303ea466\bins\16.1\miner.exe] = & gt; (Allow) C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\e7a58030-94eb-11ea-a64d-17be303ea466\bins\16.1\miner.exe
FirewallRules: [UDP Query User{32CCC3C4-53D1-47E8-8510-1FBB732D3CDB}C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\e7a58030-94eb-11ea-a64d-17be303ea466\bins\16.1\miner.exe] = & gt; (Allow) C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\e7a58030-94eb-11ea-a64d-17be303ea466\bins\16.1\miner.exe
FirewallRules: [TCP Query User{C5C7079B-0DDD-46AF-AC7F-49C0EE68C118}C:\users\mateu\appdata\roaming\telegram desktop\telegram.exe] = & gt; (Allow) C:\users\mateu\appdata\roaming\telegram desktop\telegram.exe
FirewallRules: [UDP Query User{252B0889-8EE1-4817-8B02-88A354842D0B}C:\users\mateu\appdata\roaming\telegram desktop\telegram.exe] = & gt; (Allow) C:\users\mateu\appdata\roaming\telegram desktop\telegram.exe
FirewallRules: [{8C7F51A1-462C-4513-8A7C-D51590DB4344}] = & gt; (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [TCP Query User{9C2EFFCC-E449-4CF4-81A0-D5E8A06593B6}C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\eda6abd0-94eb-11ea-a64d-17be303ea466\bins\16.0\miniz.exe] = & gt; (Allow) C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\eda6abd0-94eb-11ea-a64d-17be303ea466\bins\16.0\miniz.exe
FirewallRules: [UDP Query User{7F3EB21E-4E64-493A-A5BF-76218FBA47D6}C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\eda6abd0-94eb-11ea-a64d-17be303ea466\bins\16.0\miniz.exe] = & gt; (Allow) C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\eda6abd0-94eb-11ea-a64d-17be303ea466\bins\16.0\miniz.exe
FirewallRules: [TCP Query User{53D2B8F0-BD16-4CF8-A537-3FB91FD13D79}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] = & gt; (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe
FirewallRules: [UDP Query User{5E0CAB83-944A-4698-95DC-5B2A38251324}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] = & gt; (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe
FirewallRules: [TCP Query User{1C5107D4-7C47-4B66-A91B-FCAFF166FFE7}D:\gry\sniper. ghost warrior. contracts 2 (update 6) (2021)\sniper ghost warrior contracts 2\win_x64\sgwcontracts2.exe] = & gt; (Allow) D:\gry\sniper. ghost warrior. contracts 2 (update 6) (2021)\sniper ghost warrior contracts 2\win_x64\sgwcontracts2.exe
FirewallRules: [UDP Query User{5CD17135-E717-45DD-91C2-D7E8DBF99EBC}D:\gry\sniper. ghost warrior. contracts 2 (update 6) (2021)\sniper ghost warrior contracts 2\win_x64\sgwcontracts2.exe] = & gt; (Allow) D:\gry\sniper. ghost warrior. contracts 2 (update 6) (2021)\sniper ghost warrior contracts 2\win_x64\sgwcontracts2.exe
FirewallRules: [TCP Query User{C903E197-7A23-47BD-9F03-6E21D5F08A4E}D:\dying light\dyinglightgame.exe] = & gt; (Allow) D:\dying light\dyinglightgame.exe
FirewallRules: [UDP Query User{CF4DC5C8-6690-48F1-9CF8-7A9F8C2825A0}D:\dying light\dyinglightgame.exe] = & gt; (Allow) D:\dying light\dyinglightgame.exe
FirewallRules: [TCP Query User{64ADC5E9-FEEB-4471-8027-745E69927C5D}D:\zainstalowane\mortal kombat 11\binaries\retail\mk11.exe] = & gt; (Allow) D:\zainstalowane\mortal kombat 11\binaries\retail\mk11.exe
FirewallRules: [UDP Query User{8FC8EBCA-4403-4460-A85E-F93B7E09C0AA}D:\zainstalowane\mortal kombat 11\binaries\retail\mk11.exe] = & gt; (Allow) D:\zainstalowane\mortal kombat 11\binaries\retail\mk11.exe
FirewallRules: [{CDB422B3-979F-4800-AF48-EB0D285868B0}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{4FA94B1B-5E75-43A1-82F0-584401B64C2E}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{960E5D5D-47DB-455D-A4FE-C06BF74F7D19}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{9E42CAAD-FEAA-4967-91A5-F549A2D974E4}] = & gt; (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{DBCE962F-8D81-4DBF-8BDC-0395007979E4}D:\zainstalowane\halo infinite\haloinfinite.exe] = & gt; (Allow) D:\zainstalowane\halo infinite\haloinfinite.exe
FirewallRules: [UDP Query User{1F9AFF6B-9A14-4C40-8B9C-B439D809B2B5}D:\zainstalowane\halo infinite\haloinfinite.exe] = & gt; (Allow) D:\zainstalowane\halo infinite\haloinfinite.exe
FirewallRules: [TCP Query User{559426DC-5366-4504-BC41-4949690FBCF6}D:\zainstalowane\cyberpunk 2077\bin\x64\cyberpunk2077.exe] = & gt; (Allow) D:\zainstalowane\cyberpunk 2077\bin\x64\cyberpunk2077.exe
FirewallRules: [UDP Query User{D39FC529-4326-49DB-9AAC-F36AC7CB1A63}D:\zainstalowane\cyberpunk 2077\bin\x64\cyberpunk2077.exe] = & gt; (Allow) D:\zainstalowane\cyberpunk 2077\bin\x64\cyberpunk2077.exe
FirewallRules: [TCP Query User{5770AF51-36AA-49E0-AC3C-E1B83DEB2FEE}D:\zainstalowane\crash bandicoot 4\lava\binaries\win64\lava-win64-shipping.exe] = & gt; (Allow) D:\zainstalowane\crash bandicoot 4\lava\binaries\win64\lava-win64-shipping.exe
FirewallRules: [UDP Query User{5783EEC5-D8DE-49CF-9B88-71E1A0C062D9}D:\zainstalowane\crash bandicoot 4\lava\binaries\win64\lava-win64-shipping.exe] = & gt; (Allow) D:\zainstalowane\crash bandicoot 4\lava\binaries\win64\lava-win64-shipping.exe
FirewallRules: [TCP Query User{33B8994B-C6BD-435A-A246-624BAE8D7A2C}C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\eb75e920-94eb-11ea-a64d-17be303ea466\bins\16.5\1.35\lolminer.exe] = & gt; (Allow) C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\eb75e920-94eb-11ea-a64d-17be303ea466\bins\16.5\1.35\lolminer.exe
FirewallRules: [UDP Query User{F3098E93-110B-4057-914F-599A1CE1977D}C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\eb75e920-94eb-11ea-a64d-17be303ea466\bins\16.5\1.35\lolminer.exe] = & gt; (Allow) C:\users\mateu\appdata\local\programs\nicehash miner\miner_plugins\eb75e920-94eb-11ea-a64d-17be303ea466\bins\16.5\1.35\lolminer.exe
FirewallRules: [TCP Query User{AA0715F3-F557-4C03-918B-637193D85C2F}D:\zainstalowane\jurassic world evolution 2\jwe2.release.exe] = & gt; (Allow) D:\zainstalowane\jurassic world evolution 2\jwe2.release.exe
FirewallRules: [UDP Query User{F3AA5D64-B9D5-4680-BEF9-37EFC2CD9AAE}D:\zainstalowane\jurassic world evolution 2\jwe2.release.exe] = & gt; (Allow) D:\zainstalowane\jurassic world evolution 2\jwe2.release.exe
FirewallRules: [TCP Query User{A2D4075A-1061-4A3F-879B-16D4F4FF65F0}D:\zainstalowane\call of duty wwii\s2_sp64_ship.exe] = & gt; (Allow) D:\zainstalowane\call of duty wwii\s2_sp64_ship.exe
FirewallRules: [UDP Query User{1A87C61C-A39D-4C89-8D4C-64FC4D5D91AE}D:\zainstalowane\call of duty wwii\s2_sp64_ship.exe] = & gt; (Allow) D:\zainstalowane\call of duty wwii\s2_sp64_ship.exe
FirewallRules: [{FF8E7B47-9C69-4602-8A2A-0ECB40415EF8}] = & gt; (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe
FirewallRules: [{71E503E4-30F1-4D6B-9470-FA91EF8B5B2D}] = & gt; (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe
FirewallRules: [{20E531C2-DE0C-4BD1-8A24-757BDFEBA3FE}] = & gt; (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe
FirewallRules: [{1EC857C9-87F6-4FF2-A301-B3B8B9DCF9D8}] = & gt; (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe
FirewallRules: [{E060433F-DABE-4005-8666-623CA0422E74}] = & gt; (Allow) D:\zainstalowane\Red Dead Redemption 2\RDR2.exe
FirewallRules: [{01D8EC97-0519-4453-A05A-0C1B63B603B3}] = & gt; (Allow) D:\zainstalowane\Red Dead Redemption 2\RDR2.exe
FirewallRules: [{EBF9119E-3CF8-41BB-A796-AE180476514D}] = & gt; (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{A84FEEFF-ECD0-472B-9739-483CB4432DB9}] = & gt; (Allow) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
FirewallRules: [{11D6EAAC-E0A5-4B1D-BBE7-E2C75B2D46D7}] = & gt; (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\100.0.1185.44\msedgewebview2.exe
==================== Punkty Przywracania systemu =========================
10-04-2022 17:49:01 Zaplanowany punkt kontrolny
14-04-2022 22:23:48 Microsoft ASP.NET Core 3.1.24 - Shared Framework (x64)
==================== Wadliwe urządzenia w Menedżerze urządzeń =============
==================== Błędy w Dzienniku zdarzeń: =========================
Dziennik Aplikacja:
==================
Error: (04/18/2022 01:34:27 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program FRST64.exe w wersji 17.4.2017.1 przestał współpracować z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemów w oknie Zabezpieczenia i konserwacja w Panelu sterowania.
Identyfikator procesu: 5044
Godzina rozpoczęcia: 01d8531836cfa2ff
Godzina zakończenia: 2
Ścieżka aplikacji: C:\Users\mateu\Downloads\FRST64.exe
Identyfikator raportu: 1568ca1d-f49a-4273-8752-47fceb2f7546
Pełna nazwa pakietu powodującego błąd:
Identyfikator aplikacji powiązanej z pakietem powodującym błąd:
Typ zawieszenia: Unknown
Error: (04/18/2022 12:09:55 PM) (Source: CertEnroll) (EventID: 86) (User: ZARZĄDZANIE NT)
Description: Inicjowanie rejestracji certyfikatu SCEP dla elementu WORKGROUP\LAPTOP-CROBLH3H$ za pośrednictwem elementu https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep nie powiodło się:
GetCACaps
GetCACaps: Not Found
{ " Message " : " The authority \ " amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\ " does not exist. " }
HTTP/1.1 404 Not Found
Date: Mon, 18 Apr 2022 10:09:53 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 3ff970b6-843d-40de-a28a-78a9051bbad8
Metoda: GET(9485ms)
Etap: GetCACaps
Nieznaleziony (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
Error: (04/18/2022 12:09:38 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (4476,R,98) SRUJet: Wystąpił błąd -1811 (0xfffff8ed) podczas otwierania pliku dziennika C:\Windows\system32\SRU\SRU0876C.log.
Error: (04/18/2022 11:32:11 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: avast_premier_antivirus_setup_offlin.exe, wersja: 20.4.5312.0, sygnatura czasowa: 0xb9416241
Nazwa modułu powodującego błąd: KERNELBASE.dll, wersja: 10.0.19041.1645, sygnatura czasowa: 0xdfe831e6
Kod wyjątku: 0xe0434352
Przesunięcie błędu: 0x0012b982
Identyfikator procesu powodującego błąd: 0x1f58
Godzina uruchomienia aplikacji powodującej błąd: 0x01d8530710b09ab9
Ścieżka aplikacji powodującej błąd: D:\xXx\Avast Premium Security 20.4.2410 (Build 20.4.5312.561) + License Key\Avast Premium Security 20.4.2410 (Build 20.4.5312.561) + License Key\Setup\avast_premier_antivirus_setup_offlin.exe
Ścieżka modułu powodującego błąd: C:\Windows\System32\KERNELBASE.dll
Identyfikator raportu: c31a715d-fd86-4a8c-ac7f-1999d28cd8b5
Pełna nazwa pakietu powodującego błąd:
Identyfikator aplikacji względem pakietu powodującego błąd:
Error: (04/18/2022 11:32:10 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikacja: avast_premier_antivirus_setup_offlin.exe
Wersja architektury: v4.0.30319
Opis: proces został przerwany z powodu nieobsłużonego wyjątku.
Informacje o wyjątku: System.UnauthorizedAccessException
w System.IO.__Error.WinIOError(Int32, System.String)
w System.IO.File.InternalDelete(System.String, Boolean)
w System.IO.File.Delete(System.String)
w joinCsharpp.Program.Main()
Error: (04/18/2022 01:53:36 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program explorer.exe w wersji 10.0.19041.1645 przestał współpracować z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemów w oknie Zabezpieczenia i konserwacja w Panelu sterowania.
Identyfikator procesu: 33e4
Godzina rozpoczęcia: 01d852b65207b2df
Godzina zakończenia: 0
Ścieżka aplikacji: C:\Windows\explorer.exe
Identyfikator raportu: 5e6c207d-c37f-4c29-97d7-e1f5f0f2afca
Pełna nazwa pakietu powodującego błąd:
Identyfikator aplikacji powiązanej z pakietem powodującym błąd:
Typ zawieszenia: Unknown
Error: (04/18/2022 01:53:22 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program explorer.exe w wersji 10.0.19041.1645 przestał współpracować z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemów w oknie Zabezpieczenia i konserwacja w Panelu sterowania.
Identyfikator procesu: 2ea4
Godzina rozpoczęcia: 01d852b640a826a9
Godzina zakończenia: 0
Ścieżka aplikacji: C:\Windows\explorer.exe
Identyfikator raportu: 2695928e-d7f4-4fa5-a66b-9e654d0bb0b7
Pełna nazwa pakietu powodującego błąd:
Identyfikator aplikacji powiązanej z pakietem powodującym błąd:
Typ zawieszenia: Unknown
Error: (04/18/2022 01:52:52 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program explorer.exe w wersji 10.0.19041.1645 przestał współpracować z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemów w oknie Zabezpieczenia i konserwacja w Panelu sterowania.
Identyfikator procesu: 17c4
Godzina rozpoczęcia: 01d852b627844820
Godzina zakończenia: 0
Ścieżka aplikacji: C:\Windows\explorer.exe
Identyfikator raportu: c95a04f2-a7b4-4d06-9ad1-9339fc69cefd
Pełna nazwa pakietu powodującego błąd:
Identyfikator aplikacji powiązanej z pakietem powodującym błąd:
Typ zawieszenia: Cross-thread
Error: (04/18/2022 01:52:16 AM) (Source: CertEnroll) (EventID: 86) (User: ZARZĄDZANIE NT)
Description: Inicjowanie rejestracji certyfikatu SCEP dla elementu WORKGROUP\LAPTOP-CROBLH3H$ za pośrednictwem elementu https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep nie powiodło się:
GetCACaps
GetCACaps: Not Found
{ " Message " : " The authority \ " amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\ " does not exist. " }
HTTP/1.1 404 Not Found
Date: Sun, 17 Apr 2022 23:52:16 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: bffb7852-1c8d-4be4-850b-1ea9926c0bcb
Metoda: GET(437ms)
Etap: GetCACaps
Nieznaleziony (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
Error: (04/17/2022 11:29:51 AM) (Source: CertEnroll) (EventID: 86) (User: ZARZĄDZANIE NT)
Description: Inicjowanie rejestracji certyfikatu SCEP dla elementu WORKGROUP\LAPTOP-CROBLH3H$ za pośrednictwem elementu https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep nie powiodło się:
GetCACaps
GetCACaps: Not Found
{ " Message " : " The authority \ " amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\ " does not exist. " }
HTTP/1.1 404 Not Found
Date: Sun, 17 Apr 2022 09:29:51 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: d491c694-db99-4b16-902f-31e28a75a2a1
Metoda: GET(578ms)
Etap: GetCACaps
Nieznaleziony (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
Dziennik System:
=============
Error: (04/18/2022 12:09:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi Kmm4xNT z powodu następującego błędu:
Nastąpiło zablokowanie ładowania sterownika
Error: (04/18/2022 12:09:37 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\Drivers\Kmm4xNT.SYS
Error: (04/18/2022 12:09:12 PM) (Source: volmgr) (EventID: 161) (User: )
Description: Utworzenie pliku zrzutu nie powiodło się z powodu błędu podczas tworzenia zrzutu.
Error: (04/18/2022 12:09:36 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: Nastąpił ponowny rozruch komputera po operacji wykrywania błędów. Wyniki tej operacji były następujące: 0x0000001e (0xffffffffc0000096, 0xfffff80361ad1565, 0x0000000000000000, 0x0000000000000000). Zrzut zapisano w: C:\Windows\MEMORY.DMP. Identyfikator raportu: 9450c25b-bae2-4aa5-95df-75088c6aa0a6.
Error: (04/18/2022 01:53:28 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa Gaming Services niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.
Error: (04/18/2022 01:53:28 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa Gaming Services niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.
Error: (04/18/2022 01:52:10 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi Kmm4xNT z powodu następującego błędu:
Nastąpiło zablokowanie ładowania sterownika
Error: (04/18/2022 01:52:10 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\Drivers\Kmm4xNT.SYS
Error: (04/18/2022 01:51:29 AM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-CROBLH3H)
Description: Serwer {776DBC8D-7347-478C-8D71-791E12EF49D8} nie zarejestrował się w modelu DCOM w wymaganym czasie.
Error: (04/18/2022 01:51:29 AM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-CROBLH3H)
Description: Serwer {776DBC8D-7347-478C-8D71-791E12EF49D8} nie zarejestrował się w modelu DCOM w wymaganym czasie.
CodeIntegrity:
===================================
Date: 2022-04-17 22:46:08.4960000Z
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2022-04-16 10:38:32.3390000Z
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2022-04-13 09:43:38.7520000Z
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2022-04-10 14:50:51.7100000Z
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2022-04-08 08:27:53.8180000Z
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2022-04-05 22:56:41.7890000Z
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2022-04-03 03:19:35.4590000Z
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2022-04-02 22:35:40.3800000Z
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.
Date: 2022-04-02 22:35:35.3240000Z
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.
Date: 2022-04-02 22:35:34.7810000Z
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.
==================== Statystyki pamięci ===========================
Procesor: AMD Ryzen 7 5800H with Radeon Graphics
Procent pamięci w użyciu: 36%
Całkowita pamięć fizyczna: 16236.06 MB
Dostępna pamięć fizyczna: 10282.79 MB
Całkowita pamięć wirtualna: 21612.06 MB
Dostępna pamięć wirtualna: 12675.3 MB
==================== Dyski ================================
Drive c: (Windows-SSD) (Fixed) (Total:475.69 GB) (Free:35.35 GB) NTFS
Drive d: (SP PHD U3) (Fixed) (Total:3725.9 GB) (Free:425.57 GB) NTFS
==================== MBR & Tablica partycji ==================
========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: 6BF474BC)
Partition: GPT.
Attempted reading MBR returned 0 bytes.
Could not read MBR for disk 1.
==================== Koniec Addition.txt ============================