Witam. Nie mogę pozbyć się skrótu u Torrent Web ze startu? Pisze, że usuń z historii urządzenia i powraca z powrotem, a nie ma go w panelu. Przeszukałem partycje C i nic. On otwierał się poprzez przeglądarkę chrome, ale to było 2 lata temu?
Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 03-05-2020
Uruchomiony przez MIREK (07-05-2020 20:45:09)
Uruchomiony z C:\Users\MIREK\Desktop
Windows 10 Pro Wersja 1909 18363.778 (X64) (2020-02-24 20:33:30)
Tryb startu: Normal
==========================================================
==================== Konta użytkowników: =============================
Administrator (S-1-5-21-1336633738-752808029-2423238736-500 - Administrator - Disabled)
Gość (S-1-5-21-1336633738-752808029-2423238736-501 - Limited - Disabled)
Konto domyślne (S-1-5-21-1336633738-752808029-2423238736-503 - Limited - Disabled)
MIREK (S-1-5-21-1336633738-752808029-2423238736-1001 - Administrator - Enabled) => C:\Users\MIREK
WDAGUtilityAccount (S-1-5-21-1336633738-752808029-2423238736-504 - Limited - Disabled)
==================== Centrum zabezpieczeń ========================
(Załączenie wejścia w fixlist spowoduje jego usunięcie.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Zainstalowane programy ======================
(W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)
µTorrent (HKU\S-1-5-21-1336633738-752808029-2423238736-1001\...\uTorrent) (Version: 3.5.5.45628 - BitTorrent Inc.)
4K YouTube to MP3 3.10 (HKLM\...\{C6C89131-2764-42F3-9821-A40B39831DB5}) (Version: 3.10.1.3255 - Open Media LLC)
64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 20.006.20042 - Adobe Systems Incorporated)
Aktualizacje NVIDIA 38.0.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 38.0.4.0 - NVIDIA Corporation)
ASRock Restart to UEFI v1.0.5 (HKLM-x32\...\ASRock Restart to UEFI_is1) (Version: 1.0.5 - )
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 24.0.1.162 - Bitdefender)
Bitdefender VPN (HKLM\...\Bitdefender VPN) (Version: 24.0.4.702 - Bitdefender)
BufferChm (HKLM-x32\...\{FA0FF682-CC70-4C57-93CD-E276F3E7537E}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.53 - Piriform)
Copy (HKLM-x32\...\{9BE466FF-70B7-4DA8-807C-DB4C3610FDAA}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
CPUID CPU-Z 1.88 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.88 - CPUID, Inc.)
CPUID HWMonitor 1.41 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.41 - CPUID, Inc.)
CrystalDiskInfo 8.1.0 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 8.1.0 - Crystal Dew World)
Destinations (HKLM-x32\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (HKLM-x32\...\{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 419.17 - NVIDIA Corporation) Hidden
DJ_AIO_03_F2200_Software_Min (HKLM-x32\...\{2711B584-259B-4723-A6F2-F3CFA291AFA2}) (Version: 140.0.425.000 - Hewlett-Packard) Hidden
DocProc (HKLM-x32\...\{9B362566-EC1B-4700-BB9C-EC661BDE2175}) (Version: 140.0.185.000 - Hewlett-Packard) Hidden
F2200 (HKLM-x32\...\{C81DA04A-1D44-4D4A-8108-5129331BBA00}) (Version: 140.0.425.000 - Hewlett-Packard) Hidden
Free YouTube To MP3 Converter (HKLM-x32\...\Free YouTube To MP3 Converter_is1) (Version: 4.3.10.124 - Digital Wave Ltd)
FxSound Enhancer (HKLM-x32\...\FxSound Enhancer) (Version: 13.027 - FxSound)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 81.0.4044.138 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
GPBaseService2 (HKLM-x32\...\{BB3447F6-9553-4AA9-960E-0DB5310C5779}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Deskjet F2200 All-In-One Driver Software 14.0 Rel. 6 (HKLM\...\{60D6AAC5-FDC1-49BA-867B-3135F4726156}) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPPhotoGadget (HKLM-x32\...\{CAE4213F-F797-439D-BD9E-79B71D115BE3}) (Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (HKLM-x32\...\{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (HKLM-x32\...\{AC35A885-0F8F-4857-B7DA-6E8DFB43E6B3}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.0.1081 - Intel Corporation)
Java 8 Update 221 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180221F0}) (Version: 8.0.2210.11 - Oracle Corporation)
K-Lite Codec Pack 10.9.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.9.0 - )
MarketResearch (HKLM-x32\...\{D360FA88-17C8-4F14-B67F-13AAF9607B12}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.92 - McAfee, LLC.)
Microsoft .NET Core SDK 2.2.402 (x64) (HKLM-x32\...\{16c97bbc-c1e6-4fd6-92c5-c1f20dec9c1f}) (Version: 2.2.402 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127 (HKLM-x32\...\{282975d8-55fe-4991-bbbb-06a72581ce58}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
Need for Speed - Most Wanted (HKLM-x32\...\Need for Speed - Most Wanted_R.G. Mechanics_is1) (Version: - R.G. Mechanics, markfiter)
Nero 7 Essentials (HKLM-x32\...\{66EBD70F-A42C-475F-AEDF-277378151045}) (Version: 7.02.9491 - Nero AG)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.19 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.17.0.126 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.17.0.126 - NVIDIA Corporation)
NVIDIA Oprogramowanie systemu PhysX 9.18.0907 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.18.0907 - NVIDIA Corporation)
NVIDIA Sterownik graficzny 442.59 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 442.59 - NVIDIA Corporation)
NVIDIA Sterownik kontrolera 3D Vision 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Oprogramowanie mikroukładu Intel® (HKLM-x32\...\{c6cff78a-cccb-49d5-be68-ae0ec5f0d48a}) (Version: 10.1.1.8 - Intel(R) Corporation) Hidden
Panel sterowania NVIDIA 419.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 419.17 - NVIDIA Corporation) Hidden
Phone Nokia USB Driver (HKLM-x32\...\{7F1C627F-7F07-4B51-B50F-FF8C64881D6E}) (Version: 1.1.0 - Mobile)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.2.703.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7614 - Realtek Semiconductor Corp.)
Scan (HKLM-x32\...\{06A1D88C-E102-4527-AF70-29FFD7AF215A}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype (wersja 8.56) (HKLM-x32\...\Skype_is1) (Version: 8.56 - Skype Technologies S.A.)
SolutionCenter (HKLM-x32\...\{BC5DD87B-0143-4D14-AAE6-97109614DC6B}) (Version: 140.0.299.000 - Hewlett-Packard) Hidden
Spotify (HKU\S-1-5-21-1336633738-752808029-2423238736-1001\...\Spotify) (Version: 1.1.28.721.g5b5ee660 - Spotify AB)
Status (HKLM-x32\...\{5B025634-7D5B-4B8D-BE2A-7943C1CF2D5D}) (Version: 140.0.342.000 - Hewlett-Packard) Hidden
TeamViewer 14 (HKLM-x32\...\TeamViewer) (Version: 14.2.8352 - TeamViewer)
Toolbox (HKLM-x32\...\{292F0F52-B62D-4E71-921B-89A682402201}) (Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (HKLM-x32\...\{CD31E63D-47FD-491C-8117-CF201D0AFAB5}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
WebReg (HKLM-x32\...\{8EE94FD8-5F52-4463-A340-185D16328158}) (Version: 140.0.297.017 - Hewlett-Packard) Hidden
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
WinEject (HKLM-x32\...\WinEject) (Version: 2.00 - Ingo Heeskens)
WinRAR 5.61 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.61.0 - win.rar GmbH)
Packages:
=========
Dodatek Zdjęcia -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2017.39121.36610.0_x64__8wekyb3d8bbwe [2019-12-05] (Microsoft Corporation)
Messenger -> C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_480.5.121.0_x64__8xx8rvfyw5nnt [2020-04-30] (Facebook Inc)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-03-02] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-03-02] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.5012.0_x64__8wekyb3d8bbwe [2020-05-03] (Microsoft Studios) [MS Ad]
MSN Pogoda -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.956.0_x64__56jybvy8sckqj [2019-09-30] (NVIDIA Corp.)
UnRar Metro -> C:\Program Files\WindowsApps\1253QUANTUMVM.UNRARMETRO_14.3.0.0_x64__ckbnxvahp5f44 [2020-03-25] (QuantumVM)
==================== Niestandardowe rejestracje CLSID (filtrowane): ==============
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Brak pliku
ContextMenuHandlers1-x32: [Cover Designer] -> {73FCA462-9BD5-4065-A73F-A8E5F6904EF7} => C:\Program Files (x86)\Nero\Nero 7\Nero CoverDesigner\CoverEdExtension.dll [2007-06-22] (Nero AG -> Nero AG)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-10-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-10-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvrf.inf_amd64_4afd869c5c40abd6\nvshext.dll [2020-03-29] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-10-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-10-27] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (filtrowane) ====================
(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\system32\frapsv64.dll [71680 2012-08-30] (Beepa P/L) [Brak podpisu cyfrowego]
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\SysWOW64\frapsvid.dll [65536 2012-08-30] (Beepa P/L) [Brak podpisu cyfrowego]
==================== Skróty & WMI ========================
(Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.)
ShortcutWithArgument: C:\Users\MIREK\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\d249d9ddd424b688\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default
==================== Załadowane moduły (filtrowane) =============
2015-06-23 17:00 - 2015-06-23 17:00 - 000285696 _____ ( (Intel Corporation) [Brak podpisu cyfrowego]) [Plik w użyciu ] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\PsiData.dll
2020-02-23 22:18 - 2014-12-12 20:00 - 003502080 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\ffdshow\ffdshow.ax
2020-02-23 22:18 - 2014-12-12 20:00 - 004015616 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\ffdshow\ffmpeg.dll
2020-02-23 22:18 - 2014-12-12 20:00 - 000236544 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\libbluray.dll
2020-02-23 22:18 - 2014-12-12 20:00 - 000494080 _____ (1f0.de - Hendrik Leppkes) [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\LAVSplitter.ax
2020-02-23 22:18 - 2014-12-12 20:00 - 000942080 _____ (1f0.de - Hendrik Leppkes) [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\LAVVideo.ax
2020-02-23 22:18 - 2014-12-12 20:00 - 008408064 _____ (FFmpeg Project) [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\avcodec-lav-56.dll
2020-02-23 22:18 - 2014-12-12 20:00 - 000179712 _____ (FFmpeg Project) [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\avfilter-lav-5.dll
2020-02-23 22:18 - 2014-12-12 20:00 - 001480704 _____ (FFmpeg Project) [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\avformat-lav-56.dll
2020-02-23 22:18 - 2014-12-12 20:00 - 000152064 _____ (FFmpeg Project) [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\avresample-lav-2.dll
2020-02-23 22:18 - 2014-12-12 20:00 - 000390656 _____ (FFmpeg Project) [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\avutil-lav-54.dll
2020-02-23 22:18 - 2014-12-12 20:00 - 000468480 _____ (FFmpeg Project) [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\swscale-lav-3.dll
2015-06-23 17:00 - 2015-06-23 17:00 - 000562688 _____ (Intel Corporation) [Brak podpisu cyfrowego] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\ISDI2.dll
2020-02-23 22:18 - 2014-12-12 20:00 - 000163840 _____ (MPC-HC Team) [Brak podpisu cyfrowego] C:\Program Files (x86)\K-Lite Codec Pack\MPC-HC\Lang\mpcresources.pl.dll
==================== Alternate Data Streams (filtrowane) ========
==================== Tryb awaryjny (filtrowane) ==================
==================== Powiązania plików (filtrowane) =================
==================== Internet Explorer - Witryny zaufane i z ograniczeniami ==========
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.)
IE trusted site: HKU\S-1-5-21-1336633738-752808029-2423238736-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-1336633738-752808029-2423238736-1001\...\webcompanion.com -> hxxp://webcompanion.com
==================== Hosts - zawartość: =========================
(Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)
2018-09-15 09:31 - 2020-05-07 18:59 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
2020-04-15 09:42 - 2020-04-15 09:52 - 000000375 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
==================== Inne obszary ===========================
(Obecnie brak automatycznej naprawy dla tej sekcji.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files\dotnet\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-1336633738-752808029-2423238736-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\MIREK\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\Bez tytułu.png
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Zapora systemu Windows [funkcja włączona]
==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==
(Załączenie wejścia w fixlist spowoduje jego usunięcie.)
HKLM\...\StartupApproved\StartupFolder: => "HP Digital Imaging Monitor.lnk"
HKU\S-1-5-21-1336633738-752808029-2423238736-1001\...\StartupApproved\Run: => "vidnotifier.exe"
==================== Reguły Zapory systemu Windows (filtrowane) ================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
FirewallRules: [{6989C87F-FC76-48A0-A9C1-41C1CE7F3218}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{61647CF9-7FED-4B91-9463-A86F8D892CA4}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [UDP Query User{AF92D79D-E12F-4E7B-9911-BC7C6A114632}C:\users\mirek\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\mirek\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{863FCC4B-10E4-42E6-AD16-4B1356BC431C}C:\users\mirek\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\mirek\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{55F2344B-143B-4FCA-8E91-575C6F3FE1E7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{83495812-9E8E-4967-82A1-80EE369C59C7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{92E13B1C-1D54-4FA5-8A6E-59C7E24702DA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{B8695D7B-61C3-4F99-BBC9-4E9896A38298}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [UDP Query User{0144F864-3063-44E6-AA0E-2C4E4DE17FFB}C:\users\mirek\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\mirek\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{48655BCE-41C3-4708-8EE6-F6632D7FE163}C:\users\mirek\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\mirek\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{66819AE8-B58C-4149-BAC4-E6427313FD83}] => (Allow) LPort=1688
FirewallRules: [{E64EB122-D89D-4E0A-9320-AE1A1466AC60}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{89CA5F9E-E5BE-4E24-910D-09EEFD82B935}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{A8050677-1D7C-4110-8827-6DDD17C5B164}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{6C54AD47-59A6-4724-B6D6-6B6998B7155E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{7593BC3D-A431-41FF-A960-55CB428C525D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{C3147125-A18F-4315-A389-00C7A3691749}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{0ACD34AC-025E-4B03-855D-D6EDA9AE469D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{B9E2C362-E9EA-4238-A3CD-B2F606C70D02}] => (Allow) C:\Users\MIREK\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{7635ECB5-E52B-4F40-AC7B-DED6DBB3126A}] => (Allow) C:\Users\MIREK\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
==================== Punkty Przywracania systemu =========================
16-04-2020 15:41:53 Windows Update
25-04-2020 06:02:26 Zaplanowany punkt kontrolny
27-04-2020 15:07:47 Installed Phone Nokia USB Driver
06-05-2020 18:36:20 Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020
==================== Wadliwe urządzenia w Menedżerze urządzeń ============
Name: AnchorFree TAP-Windows Adapter V9
Description: AnchorFree TAP-Windows Adapter V9
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: AnchorFree TAP-Windows Provider V9
Service: aftap0901
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Błędy w Dzienniku zdarzeń: ========================
Dziennik Aplikacja:
==================
Error: (05/07/2020 08:45:43 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (11064,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (05/07/2020 08:36:46 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (3992,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (05/07/2020 08:05:13 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (9496,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (05/07/2020 07:54:06 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (2076,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (05/07/2020 07:32:36 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (8652,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (05/07/2020 07:25:32 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (7480,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (05/07/2020 07:17:11 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (7872,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (05/07/2020 07:11:37 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (11836,R,98) TILEREPOSITORYS-1-5-18: Wystąpił błąd -1023 (0xfffffc01) podczas otwierania pliku dziennika C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Dziennik System:
=============
Error: (05/05/2020 05:14:29 PM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16392) (User: ZARZĄDZANIE NT)
Description: Uruchomienie usługi BITS nie powiodło się. Błąd 2147500053.
Error: (05/04/2020 09:52:17 PM) (Source: DCOM) (EventID: 10029) (User: DESKTOP-4I4TT55)
Description: Aktywacja identyfikatora CLSID Windows.Media.Capture.AppCaptureManager przekroczyła limit czasu podczas oczekiwania na zatrzymanie usługi BcastDVRUserService_1541ff0.
Error: (05/04/2020 08:37:58 PM) (Source: DCOM) (EventID: 10029) (User: DESKTOP-4I4TT55)
Description: Aktywacja identyfikatora CLSID Windows.Media.Capture.AppCaptureManager przekroczyła limit czasu podczas oczekiwania na zatrzymanie usługi BcastDVRUserService_1541ff0.
Error: (05/03/2020 08:39:03 PM) (Source: DCOM) (EventID: 10029) (User: DESKTOP-4I4TT55)
Description: Aktywacja identyfikatora CLSID Windows.Media.Capture.AppCaptureManager przekroczyła limit czasu podczas oczekiwania na zatrzymanie usługi BcastDVRUserService_6ca62.
Error: (05/03/2020 02:09:39 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Usługa Synchronizuj hosta_145de3f zakończyła działanie; wystąpił następujący błąd:
Usługa uwierzytelniania jest nieznana.
Error: (05/02/2020 09:12:35 PM) (Source: DCOM) (EventID: 10029) (User: DESKTOP-4I4TT55)
Description: Aktywacja identyfikatora CLSID Windows.Media.Capture.AppCaptureManager przekroczyła limit czasu podczas oczekiwania na zatrzymanie usługi BcastDVRUserService_473c5b5.
Error: (05/01/2020 12:57:46 PM) (Source: DCOM) (EventID: 10029) (User: DESKTOP-4I4TT55)
Description: Aktywacja identyfikatora CLSID Windows.Media.Capture.AppCaptureManager przekroczyła limit czasu podczas oczekiwania na zatrzymanie usługi BcastDVRUserService_a3dccc.
Error: (04/30/2020 07:54:01 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Poprzednie zamknięcie systemu przy 19:42:39 na 30.04.2020 było nieoczekiwane.
Windows Defender:
===================================
Date: 2020-04-05 13:07:24.422
Description:
Skanowanie produktu Program antywirusowy Windows Defender zostało zatrzymane przed ukończeniem.
Identyfikator skanowania: {F13BBB01-4430-4864-9313-F96A3DDEF8F9}
Typ skanowania: Narzędzia chroniące przed złośliwym oprogramowaniem
Parametry skanowania: Szybkie skanowanie
Użytkownik: ZARZĄDZANIE NT\SYSTEM
Date: 2020-04-04 09:57:42.161
Description:
Skanowanie produktu Program antywirusowy Windows Defender zostało zatrzymane przed ukończeniem.
Identyfikator skanowania: {1F9EC89B-67FD-41AE-8A81-58FD5538AD89}
Typ skanowania: Narzędzia chroniące przed złośliwym oprogramowaniem
Parametry skanowania: Szybkie skanowanie
Użytkownik: ZARZĄDZANIE NT\SYSTEM
Date: 2020-04-04 09:47:00.416
Description:
Skanowanie produktu Program antywirusowy Windows Defender zostało zatrzymane przed ukończeniem.
Identyfikator skanowania: {D55EEA9E-1128-4CEC-8733-EF88151FBBE3}
Typ skanowania: Narzędzia chroniące przed złośliwym oprogramowaniem
Parametry skanowania: Szybkie skanowanie
Użytkownik: ZARZĄDZANIE NT\SYSTEM
Date: 2020-03-31 09:58:57.168
Description:
Skanowanie produktu Program antywirusowy Windows Defender zostało zatrzymane przed ukończeniem.
Identyfikator skanowania: {27F36316-1AC9-408D-99E4-D500467F0BAA}
Typ skanowania: Narzędzia chroniące przed złośliwym oprogramowaniem
Parametry skanowania: Szybkie skanowanie
Użytkownik: ZARZĄDZANIE NT\SYSTEM
Date: 2020-03-28 20:10:04.889
Description:
Produkt Program antywirusowy Windows Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niechciane oprogramowanie.
Aby uzyskać więcej informacji, zobacz:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Generic!rfn&threatid=2147744279&enterprise=0
Nazwa: Trojan:Win32/Generic!rfn
Identyfikator: 2147744279
Ważność: Poważny
Kategoria: Koń trojański
Ścieżka: file:_C:\Users\MIREK\AppData\Local\Temp\in503B81E5\5DC6D185_stp.exe
Pochodzenie wykrycia: Komputer lokalny
Typ wykrycia: Konkretne
Źródło wykrycia: Ochrona w czasie rzeczywistym
Użytkownik: DESKTOP-4I4TT55\MIREK
Nazwa procesu: C:\Users\MIREK\Desktop\mailpv_setup_2807931358.exe
Wersja analizy zabezpieczeń: AV: 1.313.260.0, AS: 1.313.260.0, NIS: 1.313.260.0
Wersja aparatu: AM: 1.1.16900.4, NIS: 1.1.16900.4
CodeIntegrity:
===================================
Date: 2020-03-23 19:50:28.753
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2020-03-07 20:45:05.661
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.
Date: 2020-03-07 20:45:05.487
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.
Date: 2020-03-06 11:28:04.297
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.
Date: 2020-03-06 11:28:04.078
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.
Date: 2020-03-06 11:28:03.301
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.
Date: 2020-03-06 11:28:02.992
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.
Date: 2020-03-06 11:28:02.538
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.
==================== Statystyki pamięci ===========================
BIOS: American Megatrends Inc. P1.10 02/25/2016
Płyta główna: ASRock H81M-VG4 R3.0
Procesor: Intel(R) Core(TM) i5-4460 CPU @ 3.20GHz
Procent pamięci w użyciu: 49%
Całkowita pamięć fizyczna: 8131.74 MB
Dostępna pamięć fizyczna: 4116.02 MB
Całkowita pamięć wirtualna: 15299.74 MB
Dostępna pamięć wirtualna: 8554.13 MB
==================== Dyski ================================
Drive c: () (Fixed) (Total:282.58 GB) (Free:220.59 GB) NTFS
Drive d: () (Fixed) (Total:648.31 GB) (Free:511.6 GB) NTFS
\\?\Volume{855dce5d-0000-0000-0000-100000000000}\ () (Fixed) (Total:0.09 GB) (Free:0.08 GB) FAT32
\\?\Volume{855dce5d-0000-0000-0000-c0ab46000000}\ () (Fixed) (Total:0.52 GB) (Free:0.08 GB) NTFS
==================== MBR & Tablica partycji ====================
==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 855DCE5D)
Partition 1: (Active) - (Size=100 MB) - (Type=0C)
Partition 2: (Not Active) - (Size=282.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=531 MB) - (Type=27)
Partition 4: (Not Active) - (Size=648.3 GB) - (Type=07 NTFS)
==================== Koniec Addition.txt =======================