Wyskakujące reklamy i przekierowania oraz zamulony system; skan ADWcleanerem nie pomógł i dodaję w załączniku logi FRST i z góry dziękuję za pomoc, pozdrawiam.
Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 04-10-2016
Uruchomiony przez Adam (08-10-2016 11:22:20)
Uruchomiony z C:\Users\Adam\Downloads
Windows 10 Home Wersja 1607 (X64) (2016-08-06 03:31:08)
Tryb startu: Normal
==========================================================
==================== Konta użytkowników: =============================
Adam (S-1-5-21-4136521751-2328472954-1098059167-1001 - Administrator - Enabled) = & gt; C:\Users\Adam
Administrator (S-1-5-21-4136521751-2328472954-1098059167-500 - Administrator - Disabled)
Gość (S-1-5-21-4136521751-2328472954-1098059167-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-4136521751-2328472954-1098059167-1003 - Limited - Enabled)
Konto domyślne (S-1-5-21-4136521751-2328472954-1098059167-503 - Limited - Disabled)
==================== Centrum zabezpieczeń ========================
(Załączenie wejścia w fixlist spowoduje jego usunięcie.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Zainstalowane programy ======================
(W fixlist dozwolone tylko załączanie programów adware z flagą " Hidden " w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Apple Application Support (32-bit) (HKLM-x32\...\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{0DE0A178-AC7B-4650-806C-CF226DE03766}) (Version: 4.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.4 - ASUS)
ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 2.1.0 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.05.0001 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.0.2 - ASUS)
AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.0.57 - ICEpower a/s)
Auto Clicker by Shocker (HKLM-x32\...\Auto Clicker by Shocker_is1) (Version: V3.0.1 - shockingsoft.com)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
Baidu WiFi Hotspot (HKLM-x32\...\Baidu WiFi Hotspot) (Version: 5.1.4.124910 - Baidu, Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
BitTorrent (HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\...\BitTorrent) (Version: 7.9.8.42577 - BitTorrent Inc.)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 2.4.44.6257 - BlueStack Systems, Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.14 - Piriform)
Counter-Strike: Global Offensive - SDK (HKLM\...\Steam App 745) (Version: - )
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version: - Valve)
CPUID HWMonitor 1.29 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
CyberLink PhotoDirector 5 (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.6312.0 - CyberLink Corp.)
CyberLink PhotoDirector 5 (Version: 5.0.6312.0 - CyberLink Corp.) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.2.0.0115 - Disc Soft Ltd)
Device Setup (HKLM-x32\...\{1F07F2C7-596F-4F34-B805-2C61A3E50E5A}) (Version: 1.0.20 - ASUSTek Computer Inc.)
DLL-Files.com Client (HKLM-x32\...\DA71BA65-680A-4212-9150-6239217B53DC_DLL-Files.c~79141F26_is1) (Version: 2.1.1000.4243 - DLL-Files.com Client)
Dogecoin Core (64-bit) (HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\...\Dogecoin Core (64-bit)) (Version: 1.10.0 - Dogecoin Core project)
Dragon's Tale (HKLM-x32\...\Dragon's Tale) (Version: 1.00 - eGenesis)
Electronicstars Client (HKLM-x32\...\{2DB041EA-5233-40B6-8048-F1D640EE3F89}) (Version: 1.0 - Electronicstars)
ESR (HKLM-x32\...\ESR_is1) (Version: - )
Euro Truck Simulator 2 (HKLM-x32\...\Euro Truck Simulator 2_R.G. Mechanics_is1) (Version: - R.G. Mechanics, markfiter)
Evernote v. 5.8.3 (HKLM-x32\...\{404B3FB8-A820-11E4-83FC-00163E98E7D6}) (Version: 5.8.3.6507 - Evernote Corp.)
FileZilla Client 3.11.0.2 (HKLM-x32\...\FileZilla Client) (Version: 3.11.0.2 - Tim Kosse)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line)
Foxit PhantomPDF (HKLM-x32\...\{045A0488-55C1-45B1-9992-4B4134904D61}) (Version: 7.0.59.127 - Foxit Software Inc.)
Fractured Space (HKLM-x32\...\Steam App 310380) (Version: - Edge Case Games Ltd.)
Fraps (HKLM-x32\...\Fraps) (Version: - )
Free Mouse Auto Clicker 3.0 (HKLM-x32\...\{7D9D583E-EC8B-4390-B3A4-017B8182C8FF}_is1) (Version: - Advanced Mouse Auto Clicker ltd.)
Free VPN version 3.2 (HKLM-x32\...\Free VPN_is1) (Version: 3.2 - VPNMaster, Inc.)
FreeMouseAutoClicker 3.8.1 (HKLM-x32\...\{292F00C5-25EF-4FBE-9873-13EF1F69DEED}_is1) (Version: - Advanced Mouse Auto Clicker ltd.)
GameMaker: Studio (HKLM\...\Steam App 214850) (Version: - YoYo Games Ltd.)
GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)
GlassWire 1.2 (remove only) (HKLM-x32\...\GlassWire 1.2) (Version: 1.2.71 - SecureMix LLC)
GoldCoin (GLD) (HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\...\GoldCoin (GLD)) (Version: 00.07.02.10 - GoldCoin (GLD))
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
GPU Temp version 1.0 (HKLM-x32\...\{8C8711FD-0FC8-4801-B33E-ED19BB0350B1}_is1) (Version: 1.0 - gputemp.com)
Grand Theft Auto IV (HKLM-x32\...\{579BA58C-F33D-4970-9953-B94B43768AC3}) (Version: 1.00.0000 - Rockstar Games)
GTA San Andreas (HKLM-x32\...\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}) (Version: 1.00.00001 - Rockstar Games)
Gyazo 3.2.1 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.)
HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software)
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
HWiNFO64 Version 5.06 (HKLM\...\HWiNFO64_is1) (Version: 5.06 - Martin Malík - REALiX)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line)
Insurgency (HKLM-x32\...\Steam App 222880) (Version: - New World Interactive)
Intel Collaborative Processor Performance Control (HKLM-x32\...\0E7DAF70-FB54-4B91-B192-7E771C25AEEB) (Version: 1.0.0.1017 - Intel Corporation)
Intel(R) Chipset Device Software (x32 Version: 10.0.22 - Intel(R) Corporation) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.0.10100.71 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.39.1003 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4062 - Intel Corporation)
IQ Option (HKLM-x32\...\IQ Option) (Version: 1.0 - IQOption)
iTunes (HKLM\...\{E690A491-702F-4DEC-9977-C015D1DBB57C}) (Version: 12.3.1.23 - Apple Inc.)
Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Java 8 Update 91 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418091F0}) (Version: 8.0.910.14 - Oracle Corporation)
Kerbal Space Program (HKLM-x32\...\1429864849_is1) (Version: 2.2.0.4 - GOG.com)
Layers of Fear (HKLM\...\bGF5ZXJzb2ZmZWFy_is1) (Version: 1 - )
Logitech Gaming Software 8.83 (HKLM\...\Logitech Gaming Software) (Version: 8.83.85 - Logitech Inc.)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.519 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.519 - LogMeIn, Inc.) Hidden
Macro Expert (HKLM-x32\...\Macro) (Version: 2 - Grass Software)
Macro Recorder 5.6.6 (HKLM-x32\...\Macro Recorder_is1) (Version: 5.6.6 - Jitbit Software)
MAGIX Music Maker 2014 Premium (HKLM-x32\...\MX.{088A4B09-8FB2-48D0-932A-7F90BE050543}) (Version: 20.0.2.35 - MAGIX AG)
MAGIX Music Maker 2014 Premium (Version: 20.0.2.35 - MAGIX AG) Hidden
MAGIX Music Maker 2014 Trial Soundpools (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Speed burnR (MSI) (HKLM-x32\...\MAGIX_{5C375A31-ED71-4CA0-91E0-8FA47E72D56D}) (Version: 7.0.1.27 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.1.27 - MAGIX AG) Hidden
Medal of Honor (TM) (HKLM-x32\...\{415030B8-3E8B-462A-8C03-41D95AA3AB3B}) (Version: 1.0.0.0 - Electronic Arts)
Mediatek Bluetooth (HKLM\...\{1C41AEAE-7DD5-29D6-FA5F-D1E8A12ECE4E}) (Version: 11.0.760.0 - Mediatek)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{59E4543A-D49D-4489-B445-473D763C79AF}) (Version: 2.0.672.0 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4693.1005 - Microsoft Corporation)
Microsoft PowerPoint 2010 (HKLM\...\Office14.POWERPOINT) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox 45.0.1 (x86 pl) (HKLM-x32\...\Mozilla Firefox 45.0.1 (x86 pl)) (Version: 45.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.0.1 - Mozilla)
MSI Afterburner 4.2.0 (HKLM-x32\...\Afterburner) (Version: 4.2.0 - MSI Co., LTD)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MTA:SA v1.5.2 (HKLM-x32\...\MTA:SA 1.5) (Version: v1.5.2 - Multi Theft Auto)
MyPublicWiFi 5.1 (HKLM-x32\...\{C08D782B-9281-406B-ABCE-326DA70B8A1F}_is1) (Version: - TRUE Software)
Napisy24 (HKLM-x32\...\{D1985DBC-F09E-4317-91B8-932AD0FD4A27}_is1) (Version: 1.3 - Napisy24.pl)
Need For Speed Most Wanted Black Edition version 1.3.0.0 (HKLM-x32\...\Need For Speed Most Wanted Black Edition_is1) (Version: 1.3.0.0 - Mr DJ)
Need for Speed™ Most Wanted (HKLM-x32\...\{FB0127F3-985B-44CE-AE29-378CAF60B361}) (Version: 1.5.0.0 - Electronic Arts)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.8 - Notepad++ Team)
NVIDIA Graphics Driver 345.05 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 345.05 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{80407BA7-7763-4395-AB98-5233F1B34E65}) (Version: 9.13.1220 - NVIDIA Corporation)
OCCT 4.4.1 (HKLM-x32\...\OCCT) (Version: 4.4.1 - Ocbase.com)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Opera Stable 40.0.2308.81 (HKLM-x32\...\Opera 40.0.2308.81) (Version: 40.0.2308.81 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.1.1.35466 - Electronic Arts, Inc.)
Outlast (HKLM-x32\...\Outlast_R.G. Mechanics_is1) (Version: - R.G. Mechanics, spider91)
Overwolf.Setup.VC100CRTx86.Dist (x32 Version: 1.0.0 - Overwolf) Hidden
Pakiet sterowników systemu Windows - ASUS (ATP) Mouse (11/11/2015 1.0.0.262) (HKLM\...\A044C5901003C24E6891688653ABA1068D04A1A0) (Version: 11/11/2015 1.0.0.262 - ASUS)
Paladins (HKLM\...\Steam App 444090) (Version: - Hi-Rez Studios)
Panel sterowania NVIDIA 353.54 (Version: 353.54 - NVIDIA Corporation) Hidden
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PlanetSide 2 (HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\...\DG0-PlanetSide 2) (Version: - Sony Online Entertainment)
Primecoin (HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\...\Primecoin) (Version: 0.1.2 - Primecoin project)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.994 - Even Balance, Inc.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.39048 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.33.529.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7417 - Realtek Semiconductor Corp.)
Reddcoin (HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\...\Reddcoin) (Version: 1.4.1.0 - Reddcoin project)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.9.6 - Rockstar Games)
RuneScape Launcher 2.2.2 (HKLM\...\RuneScape Launcher_is1) (Version: 2.2.2 - Jagex Ltd)
S.T.A.L.K.E.R. - Clear Sky (HKLM-x32\...\S.T.A.L.K.E.R. - Clear Sky_is1) (Version: 1.0001 - Deep Silver)
SafeZone Stable 1.51.2220.62 (x32 Version: 1.51.2220.62 - Avast Software) Hidden
shopperz (HKLM-x32\...\{C0A0425A-7879-41EA-88C3-A461F07DD456}) (Version: 2.0.0.480 - shopperz) & lt; ==== UWAGA
Skype™ 7.28 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.28.101 - Skype Technologies S.A.)
Spintires (HKLM-x32\...\Spintires_R.G. Mechanics_is1) (Version: - R.G. Mechanics, markfiter)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
Timberman (HKLM-x32\...\Steam App 398710) (Version: - Digital Melody)
Tropico 3 - Steam Special Edition (HKLM\...\Steam App 23490) (Version: - Haemimont Games)
Unity Web Player (HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.15.458 - ASUS Cloud Corporation)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.11.14 - WildTangent)
Windows Driver Package - ASUS (ATP) Mouse (01/13/2015 1.0.0.233) (HKLM\...\8335D73177E6D80E7ADC00FED2275758BD28AEFB) (Version: 01/13/2015 1.0.0.233 - ASUS)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.0.1 - ASUS)
WinRAR 5.21 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WinSCP 5.7.7 (HKLM-x32\...\winscp3_is1) (Version: 5.7.7 - Martin Prikryl)
WO Mic Client (HKLM-x32\...\WOMic) (Version: - )
World of Tanks (HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812eu}_is1) (Version: - Wargaming.net)
==================== Niestandardowe rejestracje CLSID (filtrowane): ==========================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
CustomCLSID: HKU\S-1-5-21-4136521751-2328472954-1098059167-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 - & gt; C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)
==================== Zaplanowane zadania (filtrowane) =============
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
Task: {0D86404D-D0D4-4520-AB89-A71A95577953} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB = & gt; C:\Windows\system32\MRT.exe [2016-09-15] (Microsoft Corporation)
Task: {14F13450-C8F3-4498-940D-0745B8BB2D50} - \OfficeSoftwareProtectionPlatform\SvcRestartTask - & gt; Brak pliku & lt; ==== UWAGA
Task: {1543F6AA-2DA5-44EC-82EF-29E15FA8CC6D} - System32\Tasks\Microsoft\Office\Microsoft Office Touchless Attach Notification = & gt; C:\Program Files (x86)\Microsoft Office\Office15\FirstRun.exe [2015-03-14] (Microsoft Corporation)
Task: {16C67C58-E13E-4D32-B42F-B7948E0EF739} - \Microsoft\Windows\Setup\gwx\launchtrayprocess - & gt; Brak pliku & lt; ==== UWAGA
Task: {16D5AE4C-32C7-4C1D-B471-F75376604453} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime - & gt; Brak pliku & lt; ==== UWAGA
Task: {1F418CFC-F4D5-47CB-91DB-D95A9CAD3666} - System32\Tasks\GoogleUpdateTaskMachineUA1d11b09e1222515 = & gt; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {20E471CC-3771-415B-93BC-FBE158BEF889} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d - & gt; Brak pliku & lt; ==== UWAGA
Task: {22FD909E-D9B1-47F7-B2C1-214861BF41AA} - System32\Tasks\CCleanerSkipUAC = & gt; C:\Program Files\CCleaner\CCleaner.exe [2016-01-15] (Piriform Ltd)
Task: {30E4B924-8C59-47A3-B3A0-0423DB949C92} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B - & gt; Brak pliku & lt; ==== UWAGA
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join = & gt; C:\Windows\System32\AutoWorkplace.exe
Task: {3ADC45CC-B0F0-4A52-A005-B404ECA394A1} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime - & gt; Brak pliku & lt; ==== UWAGA
Task: {3CAAE95F-3BF6-4758-801E-200CA0355E7D} - System32\Tasks\Opera scheduled Autoupdate 1463748398 = & gt; C:\Program Files (x86)\Opera\launcher.exe [2016-10-03] (Opera Software)
Task: {3E76F610-3E38-4CAA-AE54-628B450FD3E3} - \WPD\SqmUpload_S-1-5-21-4136521751-2328472954-1098059167-1001 - & gt; Brak pliku & lt; ==== UWAGA
Task: {40E6B2F9-A901-4B5A-BB29-83C58F2A88FD} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d - & gt; Brak pliku & lt; ==== UWAGA
Task: {5CDB70CD-510C-4852-A583-4DC42D234F60} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-adam.vveber@outlook.com = & gt; C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {604EB137-5010-439F-889C-AB34B83F12AF} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent - & gt; Brak pliku & lt; ==== UWAGA
Task: {81DD6FE8-D463-4F31-946B-BF6BF5141A1D} - System32\Tasks\SafeZone scheduled Autoupdate 1472306311 = & gt; C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software)
Task: {A3BA2B07-91D9-4AA1-BBD7-1388D463783C} - System32\Tasks\avast! Emergency Update = & gt; C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-08-27] (AVAST Software)
Task: {A5473206-0953-494C-BF17-618B6FCA0E98} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent - & gt; Brak pliku & lt; ==== UWAGA
Task: {B2C91611-C9BA-4970-A2E5-0E04EBB7E181} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d - & gt; Brak pliku & lt; ==== UWAGA
Task: {B59DF85C-26D4-468A-AAA5-55FEE4D1C7D1} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d - & gt; Brak pliku & lt; ==== UWAGA
Task: {B8C0B18D-B595-40D1-AF3A-1A967163F722} - System32\Tasks\Adobe Flash Player Updater = & gt; C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-08-27] (Adobe Systems Incorporated)
Task: {C1589FC8-311E-4568-8333-5B5DDE687CB6} - System32\Tasks\Apple\AppleSoftwareUpdate = & gt; C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {C1E4A3DE-14CA-4DB9-936B-C4A47F360A61} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d - & gt; Brak pliku & lt; ==== UWAGA
Task: {CACD299B-54A6-4DEC-8A19-A3105DCE5BDD} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig - & gt; Brak pliku & lt; ==== UWAGA
Task: {CAF55B9D-4BA0-4C03-B96B-5DE917708BD2} - System32\Tasks\Baidu LiveUpdate = & gt; C:\Program [Argument = Files (x86)\Baidu WiFiHotspot\liveupdate.exe]
Task: {DF4734BF-028F-4280-B923-A603ACBB058C} - System32\Tasks\ASUS\ASUS Product Register Service = & gt; C:\Program Files (x86)\ASUS\APRP\aprp.exe [2015-03-03] (ASUSTek Computer Inc.)
Task: {E4756C89-DB8D-4D3F-A05C-C624E732ADA4} - System32\Tasks\Reogich Launcher = & gt; C:\Program Files (x86)\Reogich\ReogichLaunchertask.exe & lt; ==== UWAGA
Task: {EFCD6993-8E02-4B1D-972F-23D602644519} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d - & gt; Brak pliku & lt; ==== UWAGA
(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job = & gt; C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d11b09e1222515.job = & gt; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Skróty =============================
(Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.)
Shortcut: C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnеt Ехрlorеr.lnk - & gt; C:\Users\Adam\AppData\Roaming\Browsers\exe.erolpxei.bat (Brak pliku) & lt; ===== Cyrillic
Shortcut: C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RunеScаре.lnk - & gt; C:\Users\Adam\AppData\Roaming\Browsers\exe.rehcnualxegaj.bat (Brak pliku) & lt; ===== Cyrillic
Shortcut: C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\World of Tanks\Wоrld оf Tanks.lnk - & gt; C:\Users\Adam\AppData\Roaming\Browsers\exe.rehcnualtow.bat (Brak pliku) & lt; ===== Cyrillic
Shortcut: C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RuneScape\RunеSсаре.lnk - & gt; C:\Users\Adam\AppData\Roaming\Browsers\exe.rehcnualxegaj.bat (Brak pliku) & lt; ===== Cyrillic
Shortcut: C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Рrоgrаm uruсhamiаjący арlikaсje Сhrоmе.lnk - & gt; C:\Users\Adam\AppData\Roaming\Browsers\exe.emorhc.bat (Brak pliku) & lt; ===== Cyrillic
Shortcut: C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\Infinitе НD Aрp.lnk - & gt; C:\Users\Adam\AppData\Roaming\Browsers\exe.emorhc.bat (Brak pliku) & lt; ===== Cyrillic
Shortcut: C:\Users\Adam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gоoglе Chrome.lnk - & gt; C:\Users\Adam\AppData\Roaming\Browsers\exe.emorhc.bat (Brak pliku) & lt; ===== Cyrillic
Shortcut: C:\Users\Adam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Lаunch Intеrnet Exрlоrer Вrowsеr.lnk - & gt; C:\Users\Adam\AppData\Roaming\Browsers\exe.erolpxei.bat (Brak pliku) & lt; ===== Cyrillic
Shortcut: C:\Users\Adam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Мozillа Firеfox.lnk - & gt; C:\Users\Adam\AppData\Roaming\Browsers\exe.xoferif.bat (Brak pliku) & lt; ===== Cyrillic
Shortcut: C:\Users\Adam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Рrogrаm uruсhamiаjąсy aplikасje Сhrоme.lnk - & gt; C:\Users\Adam\AppData\Roaming\Browsers\exe.emorhc.bat (Brak pliku) & lt; ===== Cyrillic
Shortcut: C:\Users\Adam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Gоoglе Сhrome.lnk - & gt; C:\Users\Adam\AppData\Roaming\Browsers\exe.emorhc.bat (Brak pliku) & lt; ===== Cyrillic
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Мozilla Firеfoх.lnk - & gt; C:\Users\Adam\AppData\Roaming\Browsers\exe.xoferif.bat (Brak pliku) & lt; ===== Cyrillic
ShortcutWithArgument: C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Program uruchamiający aplikacje Chrome.lnk - & gt; C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) - & gt; --show-app-list
ShortcutWithArgument: C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_mgndgikekgjfcpckkfioiadnlibdjbkf\Chrome.lnk - & gt; C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) - & gt; --profile-directory=Default --app-id=mgndgikekgjfcpckkfioiadnlibdjbkf
ShortcutWithArgument: C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_laealigljflmglcgncipdbmbjgjdpiim\Infinite HD App.lnk - & gt; C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) - & gt; --profile-directory=Default --app-id=laealigljflmglcgncipdbmbjgjdpiim
ShortcutWithArgument: C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo\YouTube.lnk - & gt; C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) - & gt; --profile-directory=Default --app-id=blpcfgokakmgnkcojhhkbfbldkacnbeo
==================== Załadowane moduły (filtrowane) ==============
2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-09-30 16:38 - 2016-09-15 19:25 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-08-06 05:11 - 2015-07-13 19:37 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-10-13 06:45 - 2015-10-13 06:45 - 00085800 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 06:45 - 2015-10-13 06:45 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-09-21 10:19 - 2015-09-21 10:19 - 00413696 _____ () c:\program files (x86)\grasssoft\macro expert\MacroService.exe
2015-12-08 23:20 - 2013-04-03 15:09 - 00756224 _____ () C:\Program Files (x86)\MyPublicWiFi\PublicWiFiService.exe
2015-11-10 19:11 - 2016-10-07 04:42 - 00076152 _____ () C:\WINDOWS\SysWoW64\PnkBstrA.exe
2015-09-04 10:50 - 2015-09-04 10:50 - 00053248 _____ () C:\Program Files (x86)\P2PEnhance\P2PEnhance.exe
2016-09-30 16:38 - 2016-09-15 19:25 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-08-06 08:50 - 2016-08-06 08:50 - 00959168 _____ () C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 00130048 _____ () C:\WINDOWS\SYSTEM32\CHARTV.dll
2016-09-15 12:10 - 2016-09-07 06:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-09-30 16:38 - 2016-09-15 18:39 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-09-30 16:38 - 2016-09-15 18:39 - 00693248 _____ () C:\Windows\ShellExperiences\MtcUvc.dll
2016-05-27 15:50 - 2016-05-27 15:50 - 00402520 _____ () C:\WINDOWS\system32\igfxTray.exe
2015-09-21 10:19 - 2015-09-21 10:19 - 00182784 _____ () c:\program files (x86)\grasssoft\macro expert\MacroServiceWnd.exe
2016-09-28 15:50 - 2016-09-28 16:20 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-09-28 15:50 - 2016-09-28 16:20 - 00178176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-09-28 15:50 - 2016-09-28 16:20 - 35250688 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2015-06-02 17:18 - 2015-06-02 17:18 - 00043480 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2016-04-29 00:49 - 2016-04-29 00:49 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2016-04-29 00:49 - 2016-04-29 00:49 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2016-08-13 14:20 - 2016-08-13 14:20 - 00219648 _____ () C:\Program Files (x86)\WOMic\WOMicClient.exe
2015-10-30 21:26 - 2015-10-30 21:26 - 00117920 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_3.6.25021.0_x64__8wekyb3d8bbwe\GNSDK_FP.DLL
2016-08-16 21:46 - 2016-08-16 22:02 - 00017408 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2016-08-16 21:46 - 2016-08-16 22:02 - 13475840 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2016-06-03 14:23 - 2016-06-03 14:23 - 00680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll
2016-04-16 10:24 - 2016-04-16 10:24 - 00291328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2016-09-30 16:39 - 2016-09-15 18:24 - 09760256 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-09-30 16:39 - 2016-09-15 18:18 - 01401344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-09-30 16:38 - 2016-09-15 18:17 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-09-30 16:39 - 2016-09-15 18:18 - 02424832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-09-30 16:39 - 2016-09-15 18:20 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-08-27 15:19 - 2016-08-27 15:19 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-10-07 14:27 - 2016-10-07 14:27 - 03118360 _____ () C:\Program Files\AVAST Software\Avast\defs\16100700\algo.dll
2016-08-27 15:19 - 2016-08-27 15:19 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-10-06 22:44 - 2016-10-06 22:43 - 02493440 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll
2015-09-04 10:51 - 2015-09-04 10:51 - 00009728 _____ () C:\Program Files (x86)\P2PEnhance\boost_system-vc71-mt-1_48.dll
2015-09-04 10:50 - 2015-09-04 10:50 - 00053248 _____ () C:\Program Files (x86)\P2PEnhance\boost_thread-vc71-mt-1_48.dll
2015-08-16 17:27 - 2015-08-16 17:27 - 00965120 _____ () C:\ProgramData\QuteClient\qplugins.dll
2016-08-06 08:50 - 2016-08-06 08:50 - 00679624 _____ () C:\Users\Adam\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\ClientTelemetry.dll
2015-08-11 11:51 - 2015-08-11 11:51 - 00011264 _____ () C:\Program Files (x86)\WOMic\btlib.dll
2016-08-27 15:19 - 2016-08-27 15:19 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-08-04 22:21 - 2016-08-03 02:24 - 01771336 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libglesv2.dll
2016-08-04 22:21 - 2016-08-03 02:23 - 00094024 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libegl.dll
2016-04-02 10:44 - 2016-09-08 05:14 - 00784672 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2016-04-02 10:43 - 2016-09-01 03:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2016-04-02 10:44 - 2016-09-20 21:28 - 02321696 _____ () C:\Program Files (x86)\Steam\video.dll
2016-04-02 10:43 - 2016-01-27 09:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2016-04-02 10:43 - 2016-01-27 09:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2016-04-02 10:43 - 2016-01-27 09:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2016-04-02 10:43 - 2016-01-27 09:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2016-04-02 10:43 - 2016-01-27 09:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2016-04-02 10:43 - 2016-09-01 03:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2016-04-02 10:43 - 2016-09-01 03:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2016-04-02 10:43 - 2016-09-20 21:28 - 00835360 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-04-02 10:43 - 2016-07-05 00:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2016-04-02 10:43 - 2016-08-04 22:56 - 49825056 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2016-04-02 10:43 - 2015-09-25 01:52 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
2015-06-02 17:18 - 2015-06-02 17:18 - 00039384 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
==================== Alternate Data Streams (filtrowane) =========
(Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.)
AlternateDataStreams: C:\WINDOWS\system32\Drivers\xdewjdrm.sys:changelist [9952]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [346]
==================== Tryb awaryjny (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość " AlternateShell " zostanie przywrócona.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc = & gt; " " = " Service "
==================== Powiązania plików (filtrowane) ===============
(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.)
HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\Software\Classes\regfile: regedit.exe " %1 " & lt; ===== UWAGA
==================== Internet Explorer - Witryny zaufane i z ograniczeniami ===============
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.)
==================== Hosts - zawartość: ==========================
(Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)
2013-08-22 15:25 - 2016-04-15 23:07 - 00001006 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
==================== Inne obszary ============================
(Obecnie brak automatycznej naprawy dla tej sekcji.)
HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\Control Panel\Desktop\\Wallpaper - & gt; C:\Users\Adam\Desktop\Gimp i inne\Tapety\3840x2160\ViperCS.png
DNS Servers: 188.120.239.115 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System = & gt; (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Zapora systemu Windows [funkcja włączona]
==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==
HKLM\...\StartupApproved\Run: = & gt; " Connectify Hotspot "
HKLM\...\StartupApproved\Run: = & gt; " iTunesHelper "
HKLM\...\StartupApproved\Run: = & gt; " BCSSync "
HKLM\...\StartupApproved\Run32: = & gt; " WebStorage "
HKLM\...\StartupApproved\Run32: = & gt; " LogMeIn Hamachi Ui "
HKLM\...\StartupApproved\Run32: = & gt; " SunJavaUpdateSched "
HKLM\...\StartupApproved\Run32: = & gt; " Connectify Hotspot "
HKLM\...\StartupApproved\Run32: = & gt; " Electronicstars Client "
HKLM\...\StartupApproved\Run32: = & gt; " AdobeAAMUpdater-1.0 "
HKLM\...\StartupApproved\Run32: = & gt; " AdobeCS6ServiceManager "
HKLM\...\StartupApproved\Run32: = & gt; " SwitchBoard "
HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\...\StartupApproved\Run: = & gt; " MurGee.com Auto Clicker "
HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\...\StartupApproved\Run: = & gt; " Gyazo "
HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\...\StartupApproved\Run: = & gt; " Steam "
HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\...\StartupApproved\Run: = & gt; " DAEMON Tools Lite Automount "
HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\...\StartupApproved\Run: = & gt; " CCleaner Monitoring "
HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\...\StartupApproved\Run: = & gt; " CyberGhost "
HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\...\StartupApproved\Run: = & gt; " BlueStacks Agent "
HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\...\StartupApproved\Run: = & gt; " EADM "
HKU\S-1-5-21-4136521751-2328472954-1098059167-1001\...\StartupApproved\Run: = & gt; " OneDrive "
==================== Reguły Zapory systemu Windows (filtrowane) ===============
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
FirewallRules: [vm-monitoring-nb-session] = & gt; (Allow) LPort=139
FirewallRules: [{C1E213F5-DD94-46AA-9492-75454A0BBD5C}] = & gt; (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{E725302E-563A-4028-A913-756DBF5F33DE}] = & gt; (Allow) C:\Program Files (x86)\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrEngine.exe
FirewallRules: [{AC887B15-2F43-4C94-B530-BFC7E0C63C64}] = & gt; (Allow) C:\Program Files (x86)\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrEngine.exe
FirewallRules: [{729A95BB-B4D0-4598-95DA-C7872DCDCA81}] = & gt; (Allow) C:\Program Files (x86)\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\bin\xrEngine.exe
FirewallRules: [{94ED7FFC-975E-4983-A5D7-5CDBF03ACB10}] = & gt; (Allow) C:\Program Files (x86)\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\bin\xrEngine.exe
FirewallRules: [{2F53F9D5-06F7-4705-B454-80748265D9D2}] = & gt; (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
FirewallRules: [{C4E10457-7DCC-4032-9B4D-93F5D24C780F}] = & gt; (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
FirewallRules: [UDP Query User{ADF5AA42-FA50-4D70-9229-EC8C60A798B4}C:\program files (x86)\r.g. mechanics\outlast\binaries\win64\olgame.exe] = & gt; (Allow) C:\program files (x86)\r.g. mechanics\outlast\binaries\win64\olgame.exe
FirewallRules: [TCP Query User{284377A4-FDAB-43A7-B9CF-7EC156E9116C}C:\program files (x86)\r.g. mechanics\outlast\binaries\win64\olgame.exe] = & gt; (Allow) C:\program files (x86)\r.g. mechanics\outlast\binaries\win64\olgame.exe
FirewallRules: [{DF5F6DC6-840A-4DDE-A654-8C5E7C997764}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe
FirewallRules: [{25B7D85C-E656-445F-BC53-32B6344A50B7}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe
FirewallRules: [{A079C5B1-FBAF-4DD0-869B-94CB3F59748E}] = & gt; (Allow) C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe
FirewallRules: [{0B805107-EF71-4B1A-AD93-BA605B545870}] = & gt; (Allow) C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe
FirewallRules: [UDP Query User{EF1C8188-2C37-4DC9-9217-00A41D67B158}C:\program files\java\jre1.8.0_91\bin\javaw.exe] = & gt; (Allow) C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [TCP Query User{485AAB58-E8CC-4348-AB1C-3692EEEEF9FA}C:\program files\java\jre1.8.0_91\bin\javaw.exe] = & gt; (Allow) C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [{169EF968-7FD5-4C55-B840-4DF9B4DD55FD}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\BlockNLoad\Win64\BlockNLoad.exe
FirewallRules: [{67DB5D32-4B4B-4334-9DEA-2D1FC12C65B2}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\BlockNLoad\Win64\BlockNLoad.exe
FirewallRules: [{A3EE92A5-1B31-4112-B483-2DE5EF81DFED}] = & gt; (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{662803B3-EE70-4E05-9C68-46A36255F1FB}] = & gt; (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{140618BB-F612-4940-AA18-61EF025FD85D}] = & gt; (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C196BD6D-A385-411B-B5A1-1DF45FBF9D97}] = & gt; (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{19D91FEB-A938-4F77-A4EF-7AFCF6C89D6F}] = & gt; (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{E5BF6991-95CF-45C9-BECA-313F70AF9E2A}] = & gt; (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{A7D5048B-08E4-4EE8-88C6-585D911F7BEC}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\Brawlhalla\Brawlhalla.exe
FirewallRules: [{77D1C7EB-678D-4807-A502-75B57BD5AA43}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\Brawlhalla\Brawlhalla.exe
FirewallRules: [UDP Query User{3B3588DF-5C7A-4492-934E-77EB0EA6DDD2}C:\program files\dogecoin\dogecoin-qt.exe] = & gt; (Block) C:\program files\dogecoin\dogecoin-qt.exe
FirewallRules: [TCP Query User{ED438119-4F34-4562-B49D-EFF1DC89B237}C:\program files\dogecoin\dogecoin-qt.exe] = & gt; (Block) C:\program files\dogecoin\dogecoin-qt.exe
FirewallRules: [UDP Query User{853A0BC5-1FDB-4E88-8009-50BF4FCA15B5}C:\program files (x86)\primecoin\primecoin-qt.exe] = & gt; (Allow) C:\program files (x86)\primecoin\primecoin-qt.exe
FirewallRules: [TCP Query User{33AD9165-440D-4C37-B7B2-FDF41D8D8679}C:\program files (x86)\primecoin\primecoin-qt.exe] = & gt; (Allow) C:\program files (x86)\primecoin\primecoin-qt.exe
FirewallRules: [{62457C1B-CE99-4C92-862F-1F036ABB4C88}] = & gt; (Block) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{4C214953-7188-4D71-980F-08ECC86680CF}] = & gt; (Block) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{6B387890-A481-409A-AB33-06E4AB241722}C:\program files\logitech gaming software\lcore.exe] = & gt; (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{A7DE0503-C07E-477A-9B81-32B606479880}C:\program files\logitech gaming software\lcore.exe] = & gt; (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{B92B24A5-68DF-49F3-9497-6C5B9DB8F663}] = & gt; (Allow) C:\Program Files (x86)\Baidu WiFiHotspot\WifiHotspot.exe
FirewallRules: [{EB6F37C5-F928-409D-A3D0-5924CBC0F111}] = & gt; (Allow) C:\Program Files (x86)\Baidu WiFiHotspot\WifiHotspot.exe
FirewallRules: [{0587B443-D785-4C76-8FE6-693A0E2FE191}] = & gt; (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D52835BC-3C09-4640-BE32-02F6390CE5C5}] = & gt; (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{7DAC8225-9918-49BB-BC88-A0399F533064}] = & gt; (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{783085ED-BDCC-4761-B8F1-B309F30E28E6}] = & gt; (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{7C2596A0-AB2B-4C86-A86C-05CBA5252A20}] = & gt; (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{66909309-F12F-4007-B305-B1E21B49E474}] = & gt; (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{0CA67009-1A96-4BC5-944F-9F9D4A1415C3}] = & gt; (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{78838165-FDE2-4F24-BDB9-EF8E987F1FE0}] = & gt; (Allow) C:\Users\Adam\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{8732741E-CF96-484B-BEFA-2602F1ABDB71}] = & gt; (Allow) C:\Users\Adam\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{8B3CC734-B414-49ED-828F-9784DA7BF78B}] = & gt; (Allow) C:\Users\Adam\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{7CB138C5-8B40-4EAD-9014-8E0B8EA1B319}] = & gt; (Allow) C:\Users\Adam\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{5C6142CD-0E3C-471E-A6AA-2B9763E0BF6A}] = & gt; (Allow) C:\Users\Adam\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{8BBEFCA0-7B72-449E-8824-8614408EF672}] = & gt; (Allow) C:\Users\Adam\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{86114FEF-FF94-4194-A79C-503CA23FDBE7}] = & gt; (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{BB4EB172-9B97-400D-9849-6AC33839FE89}] = & gt; (Allow) C:\Program Files (x86)\MyPublicWiFi\MyPublicWiFi.exe
FirewallRules: [{40DA8932-E56E-497A-AAAB-0ABFC04631FB}] = & gt; (Allow) C:\Program Files (x86)\MyPublicWiFi\MyPublicWiFi.exe
FirewallRules: [TCP Query User{B29B1035-9D92-468E-84B7-15A313400349}C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe] = & gt; (Allow) C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [UDP Query User{533E40CF-5A7A-4074-B042-15EF7BFBE03F}C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe] = & gt; (Allow) C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{1047B943-B00B-4E22-AC5B-9EB893420479}] = & gt; (Allow) C:\Program Files (x86)\P2PEnhance\p2penhance.exe
FirewallRules: [{A9966D83-9A9B-4CD1-8209-319589EDBEE5}] = & gt; (Allow) C:\Program Files (x86)\P2PEnhance\p2penhance.exe
FirewallRules: [{35E73941-C13A-431F-8154-4902DB15730D}] = & gt; (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B6B891A1-8CC8-47C4-B200-61072935DB42}] = & gt; (Allow) C:\Program Files (x86)\Mr DJ\Need For Speed Most Wanted Black Edition\speed.exe
FirewallRules: [{3D1AE04C-C97F-41A6-BC2C-6472DEA70306}] = & gt; (Allow) C:\Program Files (x86)\Mr DJ\Need For Speed Most Wanted Black Edition\speed.exe
FirewallRules: [{AE85D76F-FD00-41F4-94E0-4B9027D62E4E}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{CC940847-F32F-4CE5-AF5F-24F82501990A}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{6EFF066F-6FD4-4D82-939C-F8E3464216DC}] = & gt; (Block) c:\users\adam\appdata\local\temp\is-6jc0k.tmp\win.tmp
FirewallRules: [{BF893609-9E67-4583-AFE6-94229BE701D8}] = & gt; (Block) c:\users\adam\appdata\local\temp\is-6jc0k.tmp\win.tmp
FirewallRules: [{5869F4C6-8BE8-4BF6-A62E-6BAEF988C7F4}] = & gt; (Block) c:\users\adam\appdata\local\apps\2.0\abril.exe
FirewallRules: [{B7A234F5-EE9F-4078-8C09-28D9868FBE3F}] = & gt; (Block) c:\users\adam\appdata\local\apps\2.0\abril.exe
FirewallRules: [{419B0346-0EF2-489A-BFB4-48BFAB90AA3B}] = & gt; (Block) c:\windows\temp\94b6.tmp
FirewallRules: [{EC3CE247-1C01-4796-8AA4-4CF8DFCC76BC}] = & gt; (Block) c:\windows\temp\94b6.tmp
FirewallRules: [{F93209E1-546A-404C-8813-8F6538392897}] = & gt; (Block) c:\program files\caster\wizzcaster.exe
FirewallRules: [{5A827989-0718-419F-AF95-8E9846FB972A}] = & gt; (Block) c:\program files\caster\wizzcaster.exe
FirewallRules: [{4966B1E7-0AA2-4636-B082-512F1C0F3E5D}] = & gt; (Block) c:\users\adam\appdata\local\temp\setup_v21_ra.exe
FirewallRules: [{6BE54C0B-E465-40EF-9283-8891E0210B2C}] = & gt; (Block) c:\users\adam\appdata\local\temp\setup_v21_ra.exe
FirewallRules: [{8FCB5EF8-1AB5-495B-861A-FB4807FB5FA2}] = & gt; (Block) c:\windows\temp\949c.tmp
FirewallRules: [{06F6E317-6FA7-49A7-9531-BD51EDE0DE00}] = & gt; (Block) c:\windows\temp\949c.tmp
FirewallRules: [{27AFAFFF-83C9-4247-9560-EABE63031F37}] = & gt; (Block) c:\users\adam\appdata\local\temp\nsl7174.tmp
FirewallRules: [{E0916B3F-EEA6-4B5F-ACBF-D30453EE60D1}] = & gt; (Block) c:\users\adam\appdata\local\temp\nsl7174.tmp
FirewallRules: [{CD430372-0939-4306-978D-18A1C05B85C2}] = & gt; (Block) c:\windows\temp\94a1.tmp
FirewallRules: [{4B5F71E6-9D24-422C-B9CE-5D3C21960835}] = & gt; (Block) c:\windows\temp\94a1.tmp
FirewallRules: [{CC1F8ABB-7D2F-43E6-9B15-1AC1BF6F956C}] = & gt; (Block) c:\users\adam\appdata\local\temp\nsccf18.tmp.exe
FirewallRules: [{11E087CF-7691-40B8-A38D-1D59A99A12C7}] = & gt; (Block) c:\users\adam\appdata\local\temp\nsccf18.tmp.exe
FirewallRules: [{29CAE60B-D165-4ED1-A0D6-DFF8CF584C03}] = & gt; (Block) c:\program files (x86)\webshield\webshield.exe
FirewallRules: [{CF3F887F-A67A-47D5-81A9-693C6EB80ED3}] = & gt; (Block) c:\program files (x86)\webshield\webshield.exe
FirewallRules: [{E0092EEE-48F4-44AA-BB62-664FCE2ECB3D}] = & gt; (Block) c:\windows\temp\94a0.tmp
FirewallRules: [{D690A779-ED72-4322-AAB1-FA5F25DAABAD}] = & gt; (Block) c:\windows\temp\94a0.tmp
FirewallRules: [{751365FA-DD52-48F7-B07A-EFB186C243E1}] = & gt; (Block) c:\users\adam\appdata\local\temp\132419328\ic-0.fe941e0b4b4a6.exe
FirewallRules: [{5A4668ED-4244-4800-90BA-B137CCECA57D}] = & gt; (Block) c:\users\adam\appdata\local\temp\132419328\ic-0.fe941e0b4b4a6.exe
FirewallRules: [{8AF5DDE0-DD25-4A0E-9107-4E5D53F746C3}] = & gt; (Block) c:\users\adam\appdata\local\temp\132419328\ic-0.2eec556a570fa4.exe
FirewallRules: [{4A786254-1920-405C-91B0-D592148C8550}] = & gt; (Block) c:\users\adam\appdata\local\temp\132419328\ic-0.2eec556a570fa4.exe
FirewallRules: [{FC8358CE-4407-4B9F-BE49-C62FF69E51B6}] = & gt; (Block) c:\users\adam\appdata\local\temp\codecfixdivx.exe
FirewallRules: [{13634560-80EF-4CC7-B734-7E9335098BCE}] = & gt; (Block) c:\users\adam\appdata\local\temp\codecfixdivx.exe
FirewallRules: [{B9B827A1-F056-425E-B2B9-E12E4844C99B}] = & gt; (Block) c:\users\adam\appdata\local\temp\_ir_sf_temp_0\irsetup.exe
FirewallRules: [{E67DB8F2-EAE2-4D87-950C-B5BDF0C1DDF7}] = & gt; (Block) c:\users\adam\appdata\local\temp\_ir_sf_temp_0\irsetup.exe
FirewallRules: [{81B8E452-CF42-4F80-8CCC-3569C5C9896B}] = & gt; (Block) c:\program files\windowsapps\microsoft.bingfinance_4.13.47.0_x86__8wekyb3d8bbwe\microsoft.msn.money.exe
FirewallRules: [{707F4570-5223-4E74-9FA0-A27FBE9D4E4A}] = & gt; (Block) c:\program files\windowsapps\microsoft.bingfinance_4.13.47.0_x86__8wekyb3d8bbwe\microsoft.msn.money.exe
FirewallRules: [{6E1E16E1-ACED-4E6C-AD99-60923230A6C8}] = & gt; (Block) c:\program files\windowsapps\microsoft.windowsphone_10.1608.2211.0_x64__8wekyb3d8bbwe\companionapp.exe
FirewallRules: [{EB00863F-D689-456A-A665-9DACCAABEF8D}] = & gt; (Block) c:\program files\windowsapps\microsoft.windowsphone_10.1608.2211.0_x64__8wekyb3d8bbwe\companionapp.exe
FirewallRules: [{43EB8A26-C691-40AC-AA2D-D2981AC69EF0}] = & gt; (Block) c:\program files (x86)\notepad++\updater\gup.exe
FirewallRules: [{4B9A4037-A949-4DDB-A9B3-92B39504E1E2}] = & gt; (Block) c:\program files (x86)\notepad++\updater\gup.exe
FirewallRules: [{B460A0D8-79DD-44F0-B64E-0FBD1156B05D}] = & gt; (Block) c:\program files\jumuojhjidlak\khwordug.exe
FirewallRules: [{80D82FBD-89D3-4257-A480-363F390F1373}] = & gt; (Block) c:\program files\jumuojhjidlak\khwordug.exe
FirewallRules: [TCP Query User{972D3351-68BD-4214-B55E-40DF9FE32449}C:\program files\java\jre1.8.0_101\bin\javaw.exe] = & gt; (Block) C:\program files\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [UDP Query User{FAFC3791-C4E7-490D-8A82-FBF919349E7D}C:\program files\java\jre1.8.0_101\bin\javaw.exe] = & gt; (Block) C:\program files\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [{4358952D-B12F-4E9B-A166-F6838B87CBB3}] = & gt; (Allow) C:\Program Files (x86)\WOMic\womicclient.exe
FirewallRules: [TCP Query User{49EC4EF4-C534-4CF4-ACCA-FD66BB3F9DA3}C:\program files (x86)\rockstar games\gta san andreas\gta_sa.exe] = & gt; (Block) C:\program files (x86)\rockstar games\gta san andreas\gta_sa.exe
FirewallRules: [UDP Query User{60D477BC-BFD2-4136-A808-AE749AC379CA}C:\program files (x86)\rockstar games\gta san andreas\gta_sa.exe] = & gt; (Block) C:\program files (x86)\rockstar games\gta san andreas\gta_sa.exe
FirewallRules: [{5EC8FBFB-BB18-449B-A090-01E338DC4B4C}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{83231FB6-E928-49D9-A757-8222BE6BAC77}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{F0EB8C70-2B84-429B-8BF6-25DE509956F1}] = & gt; (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{1FC85C9C-C6D3-48C7-861B-BEA372E9124C}] = & gt; (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{E761C112-0E60-4A88-A4AF-B7FD0705EE72}] = & gt; (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{6224123C-B206-47BF-BF60-3AD7074410E8}] = & gt; (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{4FBD0613-E19C-4135-8084-8122CA9A8F71}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe
FirewallRules: [{D6B6FE8A-F5CB-4A8C-882B-A90793BDAA3D}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe
FirewallRules: [{03A3F76F-FC46-497F-8D05-21ED763C3392}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{C3008A16-C2BA-4E3C-BB8D-2D89EF56BD3F}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{0F5F14D7-BA18-4C88-A9EF-02BAEFD14A1B}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{BE638B2F-5ABD-45CF-81FE-57636874BD09}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{6DB52662-A1B6-40E3-B157-D137C2FF4C15}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\Tropico 3\tropico3.exe
FirewallRules: [{D7F15142-3123-4B62-A953-9443FE6C9565}] = & gt; (Allow) C:\Program Files (x86)\Steam\steamapps\common\Tropico 3\tropico3.exe
==================== Punkty Przywracania systemu =========================
UWAGA: Przywracanie systemu jest wyłączone
==================== Wadliwe urządzenia w Menedżerze urządzeń =============
Name: Asus Support Device
Description: Asus Support Device
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: ASUS
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Błędy w Dzienniku zdarzeń: =========================
Dziennik Aplikacja:
==================
Error: (10/08/2016 01:51:03 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ADAMPC)
Description: Aktywacja aplikacji Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp nie powiodła się. Błąd: -2144927142. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa.
Error: (10/08/2016 01:51:02 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: ADAMPC)
Description: Aplikacja Microsoft.XboxApp_19.22.6017.0_x64__8wekyb3d8bbwe+Microsoft.XboxApp nie została uruchomiona w wyznaczonym czasie.
Error: (10/08/2016 01:48:18 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program WinStore.Mobile.exe w wersji 11608.1001.49.0 przestał współpracować z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej informacji na temat tego problemu, sprawdź historię problemu w oknie Zabezpieczenia i konserwacja w Panelu sterowania.
Identyfikator procesu: 52c
Godzina rozpoczęcia: 01d220dd593fa37e
Godzina zakończenia: 4294967295
Ścieżka aplikacji: C:\Program Files\WindowsApps\Microsoft.WindowsStore_11608.1001.49.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe
Identyfikator raportu: 7b48dfde-8ce5-11e6-8339-40b89a2a0cc4
Pełna nazwa pakietu powodującego błąd: Microsoft.WindowsStore_11608.1001.49.0_x64__8wekyb3d8bbwe
Identyfikator aplikacji względem pakietu powodującego błąd: App
Error: (10/08/2016 01:26:30 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: ADAMPC)
Description: Aplikacja Microsoft.WindowsStore_11608.1001.49.0_x64__8wekyb3d8bbwe+App nie została uruchomiona w wyznaczonym czasie.
Error: (10/07/2016 10:52:33 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Nie można wygenerować kontekstu aktywacji dla " c:\program files\cyberlink\photodirector5\kernel\photo\CLImageCodec.exe " .
Nie można odnaleźć zestawu zależnego Microsoft.VC90.OpenMP,processorArchitecture= " amd64 " ,publicKeyToken= " 1fc8b3b9a1e18e3b " ,type= " win32 " ,version= " 9.0.21022.8 " .
Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.
Error: (10/07/2016 10:52:33 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Nie można wygenerować kontekstu aktywacji dla " c:\program files\cyberlink\photodirector5\kernel\ces\CES_CacheAgent.exe.Manifest " .
Nie można odnaleźć zestawu zależnego PDR.X,type= " win32 " ,version= " 1.0.0.0 " .
Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.
Error: (10/07/2016 10:52:33 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Nie można wygenerować kontekstu aktywacji dla " c:\program files\cyberlink\photodirector5\kernel\ces\CES_AudioCacheAgent.exe.Manifest " .
Nie można odnaleźć zestawu zależnego PDR.X,type= " win32 " ,version= " 1.0.0.0 " .
Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.
Error: (10/07/2016 04:17:23 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Nie można wygenerować kontekstu aktywacji dla " c:\program files\cyberlink\photodirector5\kernel\photo\CLImageCodec.exe " .
Nie można odnaleźć zestawu zależnego Microsoft.VC90.OpenMP,processorArchitecture= " amd64 " ,publicKeyToken= " 1fc8b3b9a1e18e3b " ,type= " win32 " ,version= " 9.0.21022.8 " .
Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.
Error: (10/07/2016 04:17:23 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Nie można wygenerować kontekstu aktywacji dla " c:\program files\cyberlink\photodirector5\kernel\ces\CES_CacheAgent.exe.Manifest " .
Nie można odnaleźć zestawu zależnego PDR.X,type= " win32 " ,version= " 1.0.0.0 " .
Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.
Error: (10/07/2016 04:17:23 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Nie można wygenerować kontekstu aktywacji dla " c:\program files\cyberlink\photodirector5\kernel\ces\CES_AudioCacheAgent.exe.Manifest " .
Nie można odnaleźć zestawu zależnego PDR.X,type= " win32 " ,version= " 1.0.0.0 " .
Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.
Dziennik System:
=============
Error: (10/07/2016 05:32:47 PM) (Source: DCOM) (EventID: 10010) (User: ZARZĄDZANIE NT)
Description: Serwer {784E29F4-5EBE-4279-9948-1E8FE941646D} nie zarejestrował się w modelu DCOM w wymaganym czasie.
Error: (10/07/2016 05:32:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi Intel(R) Management and Security Application Local Management Service z powodu następującego błędu:
Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie.
Error: (10/07/2016 05:32:03 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Intel(R) Management and Security Application Local Management Service.
Error: (10/07/2016 05:31:51 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Intel(R) Dynamic Application Loader Host Interface Service.
Error: (10/07/2016 05:31:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi Usługa Google Update (gupdate) z powodu następującego błędu:
Nie można odnaleźć określonego pliku.
Error: (10/07/2016 05:31:47 PM) (Source: DCOM) (EventID: 10010) (User: ADAMPC)
Description: Serwer {21F282D1-A881-49E1-9A3A-26E44E39B86C} nie zarejestrował się w modelu DCOM w wymaganym czasie.
Error: (10/07/2016 05:31:28 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT)
Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
i identyfikatorem aplikacji APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
użytkownikowi ZARZĄDZANIE NT\SYSTEM o identyfikatorze zabezpieczeń SID (S-1-5-18) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe.
Error: (10/07/2016 05:29:47 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT)
Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
i identyfikatorem aplikacji APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
użytkownikowi ZARZĄDZANIE NT\USŁUGA LOKALNA o identyfikatorze zabezpieczeń SID (S-1-5-19) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe.
Error: (10/07/2016 05:29:47 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT)
Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
i identyfikatorem aplikacji APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
użytkownikowi ZARZĄDZANIE NT\USŁUGA LOKALNA o identyfikatorze zabezpieczeń SID (S-1-5-19) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe.
Error: (10/07/2016 05:29:47 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT)
Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
i identyfikatorem aplikacji APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
użytkownikowi ZARZĄDZANIE NT\USŁUGA LOKALNA o identyfikatorze zabezpieczeń SID (S-1-5-19) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe.
CodeIntegrity:
===================================
Date: 2016-08-27 13:55:50.243
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-08-27 13:55:50.156
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-08-25 08:19:48.263
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-08-25 08:19:48.179
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-08-22 13:41:28.551
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-08-22 13:41:28.465
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-08-21 13:08:41.852
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-08-21 13:08:41.779
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-08-19 12:38:29.148
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-08-19 12:38:29.074
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Statystyki pamięci ===========================
Procesor: Intel(R) Core(TM) i3-5005U CPU @ 2.00GHz
Procent pamięci w użyciu: 71%
Całkowita pamięć fizyczna: 3998.8 MB
Dostępna pamięć fizyczna: 1120.53 MB
Całkowita pamięć wirtualna: 5563.04 MB
Dostępna pamięć wirtualna: 1533.65 MB
==================== Dyski ================================
Drive c: (OS) (Fixed) (Total:118.56 GB) (Free:23.28 GB) NTFS == & gt; [system z komponentami startowymi (pozyskano odczytując dysk)]
==================== MBR & Tablica partycji ==================
========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: BEDA2112)
Partition: GPT.
==================== Koniec Addition.txt ============================