Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 08-05-2017 Uruchomiony przez Admin (09-05-2017 15:45:08) Uruchomiony z C:\Users\Admin\Desktop\FRST Windows 10 Pro Wersja 1607 (X64) (2017-01-24 10:26:46) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Admin (S-1-5-21-1013101086-2419507280-623597535-1001 - Administrator - Enabled) => C:\Users\Admin Administrator (S-1-5-21-1013101086-2419507280-623597535-500 - Administrator - Disabled) Gość (S-1-5-21-1013101086-2419507280-623597535-501 - Limited - Disabled) Konto domyślne (S-1-5-21-1013101086-2419507280-623597535-503 - Limited - Disabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) µTorrent (HKU\S-1-5-21-1013101086-2419507280-623597535-1001\...\uTorrent) (Version: 3.5.0.43580 - BitTorrent Inc.) 7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov) Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.148 - Adobe Systems Incorporated) Adobe Flash Player 25 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 25.0.0.148 - Adobe Systems Incorporated) Adobe Reader XI - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.00 - Adobe Systems Incorporated) Aktualizacje NVIDIA 24.0.0.0 (Version: 24.0.0.0 - NVIDIA Corporation) Hidden ALLPlayer V7.X (HKLM-x32\...\ALLPlayer_is1) (Version: - ALLPlayer Group, Ltd.) Ansel (Version: 378.78 - NVIDIA Corporation) Hidden Arma 3 (HKLM\...\Steam App 107410) (Version: - Bohemia Interactive) ASIO Bridge and Hi-Fi Cable (HKLM-x32\...\VB:ASIOBridge {17359A74-1236-5467}) (Version: - VB-Audio Software) Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 17.4.2294 - AVAST Software) Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts) Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.8.2.48475 - Electronic Arts) Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB) Brawlhalla (HKLM\...\Steam App 291550) (Version: - Blue Mammoth Games) Camtasia 9 (HKLM-x32\...\{48cb006a-7b5b-4a48-98fd-fbd7af456b0d}) (Version: 9.0.1.1422 - TechSmith Corporation) Camtasia 9 (Version: 9.0.1.1422 - TechSmith Corporation) Hidden CCleaner (HKLM\...\CCleaner) (Version: 5.26 - Piriform) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.7.6521 - CDBurnerXP) Cheat Engine 6.6 (HKLM-x32\...\Cheat Engine 6.6_is1) (Version: - Cheat Engine) Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version: - Valve) Cry of Fear (HKLM\...\Steam App 223710) (Version: - Team Psykskallar) Curse (HKLM-x32\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse) Epic Games Launcher (HKLM-x32\...\{2C28892D-7F36-4EE8-8B68-B184ED43B0B2}) (Version: 1.1.103.0 - Epic Games, Inc.) Epic Games Launcher Prerequisites (x64) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Equalify Pro (HKU\S-1-5-21-1013101086-2419507280-623597535-1001\...\Equalify Pro 1.1.7) (Version: 1.1.7 - Leonardsen Software) Equalify v2.5.3 (Stable) (HKLM-x32\...\{33EC4F70-9F4B-406F-BB2A-F75A285E927D}) (Version: 2.5.3.0 - Equalify) ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB) FarCry 4 (HKLM-x32\...\Uplay Install 420) (Version: - Ubisoft) FileZilla Client 3.25.1 (HKLM-x32\...\FileZilla Client) (Version: 3.25.1 - Tim Kosse) foobar2000 v1.3.14 (HKLM-x32\...\foobar2000) (Version: 1.3.14 - Peter Pawlowski) Freemake Video Converter wersja 4.1.9 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.9 - Ellora Assets Corporation) GIMP 2.8.18 (HKLM\...\GIMP-2_is1) (Version: 2.8.18 - The GIMP Team) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.96 - Google Inc.) Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games) Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios) Intel(R) Smart Connect Technology (HKLM\...\{4188E70A-4D3B-447C-B366-963C9E8B4538}) (Version: 5.0.10.2907 - Intel Corporation) Java 8 Update 131 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180131F0}) (Version: 8.0.1310.11 - Oracle Corporation) K-Lite Codec Pack 12.5.5 Standard (HKLM-x32\...\KLiteCodecPack_is1) (Version: 12.5.5 - KLCP) Last Man Standing (HKLM\...\Steam App 506540) (Version: - Free Reign Entertainment) Launcher Prerequisites (x64) (x32 Version: 1.0.0.0 - Epic Games, Inc.) Hidden League of Legends (HKLM-x32\...\League of Legends 4.2.1) (Version: 4.2.1 - Riot Games) League of Legends (x32 Version: 4.2.1 - Riot Games) Hidden LEGO® STAR WARS™: The Force Awakens (HKLM\...\Steam App 438640) (Version: - Traveller's Tales) LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.558 - LogMeIn, Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.558 - LogMeIn, Inc.) Hidden Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1013101086-2419507280-623597535-1001\...\OneDriveSetup.exe) (Version: 17.3.6799.0327 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50906.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang) Mozilla Firefox 50.1.0 (x64 pl) (HKLM\...\Mozilla Firefox 50.1.0 (x64 pl)) (Version: 50.1.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.1.0.6186 - Mozilla) Nero 8 Lite (HKLM-x32\...\Nero8Lite_is1) (Version: 8.3.20.0 - UpdatePack.nl) NetLimiter 4 (HKLM-x32\...\NetLimiter 4 4.0.19.0) (Version: 4.0.19.0 - Locktime Software) NetLimiter 4 (Version: 4.0.19.0 - Locktime Software) Hidden Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.3 - Notepad++ Team) NVIDIA GeForce Experience 3.5.0.76 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.5.0.76 - NVIDIA Corporation) NVIDIA Oprogramowanie systemu PhysX 9.17.0329 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0329 - NVIDIA Corporation) NVIDIA Sterownik 3D Vision 378.78 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 378.78 - NVIDIA Corporation) NVIDIA Sterownik dźwięku HD 1.3.34.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.23 - NVIDIA Corporation) NVIDIA Sterownik graficzny 378.78 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 378.78 - NVIDIA Corporation) NVIDIA Sterownik kontrolera 3D Vision 349.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 349.95 - NVIDIA Corporation) NVIDIA Wirtualny dźwięk Miracast 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 350.12 - NVIDIA Corporation) NvNodejs (Version: 3.5.0.76 - NVIDIA Corporation) Hidden NvTelemetry (Version: 2.4.5.0 - NVIDIA Corporation) Hidden NvvHci (Version: 2.02.0.5 - NVIDIA Corporation) Hidden OBS Studio (HKLM-x32\...\OBS Studio) (Version: 17.0.0 - OBS Project) Opera Neon (HKU\S-1-5-21-1013101086-2419507280-623597535-1001\...\Opera Neon) (Version: 1.0.2531.0 - Opera Software AS) Opera Stable 44.0.0.251024618 (HKLM-x32\...\Opera 44.0.0.251024618) (Version: 44.0.0.251024618 - Opera Software) Opera Stable 44.0.2510.1449 (HKLM-x32\...\Opera 44.0.2510.1449) (Version: 44.0.2510.1449 - Opera Software) Origin (HKLM-x32\...\Origin) (Version: 10.4.9.38188 - Electronic Arts, Inc.) osu! (HKLM-x32\...\{0096c0ea-d201-4bff-b43e-1b986fd52e30}) (Version: latest - ppy Pty Ltd) Overwolf (HKLM-x32\...\Overwolf) (Version: 0.104.19.0 - Overwolf Ltd.) Overwolf.Setup.VC100CRTx64.Dist (HKLM\...\{EC9D5554-6852-4A55-81BB-AC02C7A8CFED}) (Version: 1.0.0 - Overwolf) Paladins (HKLM\...\Steam App 444090) (Version: - Hi-Rez Studios) Panel sterowania NVIDIA 378.78 (Version: 378.78 - NVIDIA Corporation) Hidden PAYDAY 2 (HKLM\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.) Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.) PUSH Video Wallpaper (HKLM\...\PUSH Video Wallpaper_is1) (Version: 3.43 - PUSH Entertainment) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7989 - Realtek Semiconductor Corp.) Rocket League (HKLM\...\Steam App 252950) (Version: - Psyonix, Inc.) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.1.4 - Rockstar Games) Saints Row 2 (HKLM\...\Steam App 9480) (Version: - Volition) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) SHIELD Streaming (Version: 7.1.0360 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 3.5.0.76 - NVIDIA Corporation) Hidden SHU (HKLM-x32\...\{DF11DD92-DBB8-4F3F-9564-A8BBDBE986F5}_is1) (Version: 1.0 - ScreenShu Software) Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.) SNOW (HKLM\...\Steam App 244930) (Version: - Poppermost Productions) Spotify (HKU\S-1-5-21-1013101086-2419507280-623597535-1001\...\Spotify) (Version: 1.0.53.758.gde3fc4b2 - Spotify AB) Stardock DeskScapes 8 (HKLM-x32\...\Stardock DeskScapes 8) (Version: 8.51 - Stardock Software, Inc.) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH) TIDAL (HKU\S-1-5-21-1013101086-2419507280-623597535-1001\...\TIDAL) (Version: 2.1.5 - TIDAL Music AS) Tom Clancy's Rainbow Six Siege (HKLM-x32\...\Uplay Install 635) (Version: - Ubisoft Montreal) Tom Clancy's The Division (HKLM\...\Steam App 365590) (Version: - Massive Entertainment) Tom Clancy's The Division (HKLM-x32\...\Uplay Install 568) (Version: - Ubisoft) Unturned (HKLM\...\Steam App 304930) (Version: - Smartly Dressed Games) Uplay (HKLM-x32\...\Uplay) (Version: 27.0 - Ubisoft) USB Gaming Headset Device (HKLM-x32\...\{71B53BA8-4BE3-49AF-BC3E-07F392006620}) (Version: 1.00.0019 - C-Media Electronics, Inc.) VBCABLE, The Virtual Audio Cable (HKLM\...\VB:VBCABLE {87459874-1236-4469}) (Version: - VB-Audio Software) Virtual Audio Cable 4.14 (HKLM\...\Virtual Audio Cable 4.14) (Version: - ) Virtual Audio Cable 4.15 (HKLM\...\Virtual Audio Cable 4.15) (Version: - ) VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.5.0.0 - Elaborate Bytes) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) Voicemeeter, The Virtual Mixing Console (HKLM-x32\...\VB:Voicemeeter {17359A74-1236-5467}) (Version: - VB-Audio Software) War Thunder (HKLM\...\Steam App 236390) (Version: - Gaijin Entertainment) Warface (HKLM\...\Steam App 291480) (Version: - Crytek) Warframe (HKLM\...\Steam App 230410) (Version: - Digital Extremes) Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc) WinRAR 5.40 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {34D1FD22-2A5C-49C9-8486-1AEBB631DEFE} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-04-26] (NVIDIA Corporation) Task: {3E786403-8F37-40E2-8FA3-A9DFDF0E45BC} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-05-08] (AVAST Software) Task: {42006FD4-C499-4DA3-964B-D518301F97D3} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-05-08] (AVAST Software) Task: {76D9C30F-8B06-4276-9EF4-C9BC81608A79} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-04-26] (NVIDIA Corporation) Task: {7FE82387-0877-4EC3-B438-BE3D2509DFE3} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Admin\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe Task: {8B86E820-AA4B-4E84-A58A-E2222516E0EA} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_25_0_0_148_pepper.exe [2017-05-07] (Adobe Systems Incorporated) Task: {8BBF90AC-AEB1-48E0-81BF-49CF3C921CAF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-12-21] (Piriform Ltd) Task: {9BB62BC4-97FB-4B2B-8DDA-82E741AE1659} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-05-08] (Adobe Systems Incorporated) Task: {AC0B32B4-BB69-4596-A17E-B8893DBAAB3F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-12-16] (Google Inc.) Task: {B7FCCD94-8267-422D-8661-6D5CFF4D9884} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-04-26] (NVIDIA Corporation) Task: {D858ADD5-835C-4DEB-8682-69C2238FA07A} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-04-26] (NVIDIA Corporation) Task: {D8BC87C4-5849-4DA0-B3A8-F50D28CE8B95} - System32\Tasks\Opera scheduled Autoupdate 1494102815 => C:\Program Files\Opera\launcher.exe [2017-04-25] (Opera Software) Task: {DD1EAB07-6ED9-4B50-A19E-771859A67F36} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-04-26] (NVIDIA Corporation) Task: {E9FB6617-6FB0-4605-AF39-A5C2132B535F} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-04-26] (NVIDIA Corporation) Task: {EA6C0EE7-EF2F-49DB-A35E-0E100753E152} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2016-11-10] () Task: {ED181AB9-8556-4599-B33F-C627B241FFDD} - System32\Tasks\Opera scheduled Autoupdate 1494153261 => C:\Program Files\Opera\launcher.exe [2017-04-25] (Opera Software) Task: {ED3843D7-8593-487B-B4AD-EE8830AD987D} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-04-26] (NVIDIA Corporation) Task: {EFFA2EFD-2756-4BDE-A603-C6D5B30A13C6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-12-16] (Google Inc.) Task: {F085BE4E-543A-4E08-8AA1-2479F3E9C350} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2017-04-27] (Overwolf LTD) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ShortcutWithArgument: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome\Pulpit zdalny Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1" --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp ==================== Załadowane moduły (filtrowane) ============== 2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2017-04-13 16:07 - 2017-03-28 08:22 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2017-05-05 23:36 - 2017-02-23 10:28 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2016-12-17 14:54 - 2017-01-24 17:44 - 00076152 _____ () C:\WINDOWS\system32\PnkBstrA.exe 2016-12-18 22:34 - 2017-04-26 07:40 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll 2017-04-13 16:07 - 2017-03-28 08:22 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll 2017-03-20 17:44 - 2017-03-20 17:44 - 00052392 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll 2016-11-21 10:41 - 2016-11-21 10:41 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll 2017-03-15 17:34 - 2017-03-04 08:31 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll 2017-03-15 17:34 - 2017-03-04 08:12 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2017-03-15 17:34 - 2017-03-04 08:05 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2017-03-15 17:34 - 2017-03-04 08:05 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll 2017-04-13 16:07 - 2017-03-28 07:08 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2017-04-13 16:08 - 2017-03-28 07:11 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2016-12-16 17:06 - 2014-11-10 11:52 - 02359296 ____N () C:\Program Files\Xear Audio Center\CPL\FaceLift_x64.exe 2017-05-04 19:54 - 2017-04-26 07:39 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\nvstreamsrv\boost_system-vc120-mt-1_58.dll 2017-05-04 19:54 - 2017-04-26 07:39 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\nvstreamsrv\boost_regex-vc120-mt-1_58.dll 2017-05-07 12:34 - 2017-04-25 08:13 - 86931544 _____ () C:\Program Files\Opera\44.0.2510.1449\opera_browser.dll 2017-05-07 12:34 - 2017-04-25 08:13 - 02827352 _____ () C:\Program Files\Opera\44.0.2510.1449\libglesv2.dll 2017-05-07 12:34 - 2017-04-25 08:13 - 00100440 _____ () C:\Program Files\Opera\44.0.2510.1449\libegl.dll 2017-05-07 21:54 - 2017-05-09 15:24 - 04102600 _____ () C:\Users\Admin\Downloads\adwcleaner_6.046.exe 2017-05-09 15:06 - 2017-05-09 15:06 - 00074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2017-05-09 15:06 - 2017-05-09 15:06 - 00201728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2017-05-09 15:06 - 2017-05-09 15:06 - 43195904 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2017-05-09 15:06 - 2017-05-09 15:06 - 02457088 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\skypert.dll 2016-07-14 12:25 - 2017-04-12 15:10 - 00176408 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll 2016-07-14 12:25 - 2017-04-12 15:10 - 00107288 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll 2016-07-14 12:25 - 2017-04-12 15:10 - 00125208 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll 2017-03-10 11:02 - 2017-05-04 15:10 - 00152064 _____ () C:\Users\Admin\AppData\Roaming\TS3Client\plugins\gamepad_joystick_win64.dll 2017-04-12 15:10 - 2017-04-12 15:10 - 00345880 _____ () C:\Users\Admin\AppData\Roaming\TS3Client\plugins\clientquery_plugin_win64.dll 2017-05-07 19:26 - 2017-05-07 19:26 - 31113816 _____ () C:\WINDOWS\system32\Macromed\Flash\pepflashplayer64_25_0_0_148.dll 2016-12-18 22:34 - 2017-04-26 07:40 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll 2017-05-08 16:43 - 2017-05-08 16:43 - 00170216 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2017-05-08 16:44 - 2017-05-08 16:44 - 00997896 _____ () C:\Program Files\AVAST Software\Avast\AvChrome.dll 2017-05-08 16:44 - 2017-05-08 16:44 - 67717632 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2017-05-08 16:44 - 2017-05-08 16:44 - 00176992 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll 2017-05-08 16:44 - 2017-05-08 16:44 - 00223224 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll 2017-05-08 16:44 - 2017-05-08 16:44 - 00684656 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll 2017-04-27 13:10 - 2017-04-27 13:10 - 68886856 _____ () C:\Program Files (x86)\Overwolf\0.104.19.0\libcef.DLL 2016-12-18 22:34 - 2017-04-26 07:39 - 65708992 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll 2017-03-16 18:02 - 2017-04-19 09:03 - 67725936 _____ () C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll 2017-03-16 18:02 - 2017-04-19 09:02 - 00110192 _____ () C:\Users\Admin\AppData\Roaming\Spotify\SpotifyWinRT.dll 2017-03-16 18:02 - 2017-04-19 09:03 - 01929840 _____ () C:\Users\Admin\AppData\Roaming\Spotify\libglesv2.dll 2017-03-16 18:02 - 2017-04-19 09:03 - 00087152 _____ () C:\Users\Admin\AppData\Roaming\Spotify\libegl.dll 2016-12-18 22:34 - 2017-04-26 07:03 - 02442360 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node 2016-12-18 22:34 - 2017-04-26 07:03 - 00361920 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node 2016-12-18 22:34 - 2017-04-26 07:03 - 00252352 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node 2016-12-18 22:34 - 2017-04-26 07:03 - 00384120 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node 2016-12-18 22:34 - 2017-04-26 07:03 - 00467392 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node 2016-12-18 22:34 - 2017-04-26 07:03 - 00572024 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node 2016-12-14 17:47 - 2016-12-14 17:47 - 55767040 _____ () C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\libcef.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== Powiązania plików (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Hosts - zawartość: =============================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2015-10-30 09:24 - 2017-05-09 15:07 - 00000027 _____ C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-1013101086-2419507280-623597535-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Admin\AppData\Local\stardock\deskwall.bmp DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == HKLM\...\StartupApproved\Run32: => "ProductUpdater" HKU\S-1-5-21-1013101086-2419507280-623597535-1001\...\StartupApproved\StartupFolder: => "Curse.lnk" HKU\S-1-5-21-1013101086-2419507280-623597535-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-1013101086-2419507280-623597535-1001\...\StartupApproved\Run: => "ALLUpdate" HKU\S-1-5-21-1013101086-2419507280-623597535-1001\...\StartupApproved\Run: => "Skype" HKU\S-1-5-21-1013101086-2419507280-623597535-1001\...\StartupApproved\Run: => "EADM" HKU\S-1-5-21-1013101086-2419507280-623597535-1001\...\StartupApproved\Run: => "Steam" HKU\S-1-5-21-1013101086-2419507280-623597535-1001\...\StartupApproved\Run: => "TIDAL" HKU\S-1-5-21-1013101086-2419507280-623597535-1001\...\StartupApproved\Run: => "Gaijin.Net Agent" ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [{97E085A5-3BC7-4461-AFB0-509C05A84D83}] => (Allow) D:\Battlefield 3\Battlefield 3\bf3.exe FirewallRules: [{59E779CB-866C-4696-BAFA-EF5792F96AA6}] => (Allow) D:\Battlefield 3\Battlefield 3\bf3.exe FirewallRules: [{8774260D-3A68-4C89-93CA-AD58DF5FC9CA}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{F511D517-5C93-40C7-871A-F7F3C7C28C5D}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{D0761C3F-F694-4FB0-87C9-40A4DB7D5958}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{91026841-5206-4F4F-9290-694912209709}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{8EBD5519-C513-48DD-92DC-FBE38EDAE838}] => (Allow) D:\Tom Clancy's The Division\TheDivision.exe FirewallRules: [UDP Query User{7768BD5F-44CE-4B01-8D0A-F578C79ACA10}D:\steamlibrary\steamapps\common\cry of fear\cof.exe] => (Allow) D:\steamlibrary\steamapps\common\cry of fear\cof.exe FirewallRules: [TCP Query User{37E55641-8F47-4FAD-9A92-187211745918}D:\steamlibrary\steamapps\common\cry of fear\cof.exe] => (Allow) D:\steamlibrary\steamapps\common\cry of fear\cof.exe FirewallRules: [{E342F127-C024-44EF-A8F8-7C1424877939}] => (Allow) D:\SteamLibrary\steamapps\common\Cry of Fear\CoFLaunchApp.exe FirewallRules: [{35A3E7CD-3A7B-4FA2-B89E-1D425DCBBB38}] => (Allow) D:\SteamLibrary\steamapps\common\Cry of Fear\CoFLaunchApp.exe FirewallRules: [{B944B074-808C-44C2-91D9-B3AF0CCC3585}] => (Allow) LPort=8318 FirewallRules: [UDP Query User{37200990-D4AF-46E3-B3AA-C076C5EB8B6E}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [TCP Query User{966C4D04-0E44-442B-87DA-1DAD841F8C9C}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [UDP Query User{A81CC5B7-1075-499D-B279-5F1BB81B5880}D:\steamlibrary\steamapps\common\arma 3\arma3.exe] => (Allow) D:\steamlibrary\steamapps\common\arma 3\arma3.exe FirewallRules: [TCP Query User{7645F5E8-EE00-40C8-B9A6-A0E67F0E5290}D:\steamlibrary\steamapps\common\arma 3\arma3.exe] => (Allow) D:\steamlibrary\steamapps\common\arma 3\arma3.exe FirewallRules: [{4F2534F0-60E2-4BF2-AF1B-E9D9A550B7F8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{96ACA10A-13D2-408B-9370-D0F7383F4B96}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{81756ED9-D913-4D3D-8209-2888AC8488A7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{3E62877B-8CD0-46D6-BB2C-B956B5EE6BD8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{F6BFFFBD-11C7-4B23-A77A-D60F44633760}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{05D66134-8971-44C3-95EF-204490D9021A}] => (Allow) D:\SteamLibrary\steamapps\common\Arma 3\arma3launcher.exe FirewallRules: [{CAF5C904-AD8F-4340-A89D-F8E5169DF111}] => (Allow) D:\SteamLibrary\steamapps\common\Arma 3\arma3launcher.exe FirewallRules: [{F7D80F1B-E0B1-43B1-ABAB-3F1A2F37E421}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\RainbowSix.exe FirewallRules: [{05D6618F-50F7-4090-A7F3-E0F7550FA088}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\RainbowSix.exe FirewallRules: [UDP Query User{C6E4EEC5-B138-417F-8EC6-E905842F2436}C:\program files (x86)\origin games\battlefield 4\bf4.exe] => (Allow) C:\program files (x86)\origin games\battlefield 4\bf4.exe FirewallRules: [TCP Query User{4A3F0103-21E9-4F74-B6ED-CB8FCA4BF403}C:\program files (x86)\origin games\battlefield 4\bf4.exe] => (Allow) C:\program files (x86)\origin games\battlefield 4\bf4.exe FirewallRules: [{80F28316-9F6E-42ED-9CCD-08A910503016}] => (Allow) D:\FarCry 4\bin\IGE_WPF64.exe FirewallRules: [{796D0D9D-F12A-4C2B-BCC3-1362833DACDB}] => (Allow) D:\FarCry 4\bin\IGE_WPF64.exe FirewallRules: [{BA07D410-3F1F-42A5-9FDA-77FF37CCA94C}] => (Allow) D:\FarCry 4\bin\FarCry4.exe FirewallRules: [{551A7021-19AA-45D6-9E1F-0249F5553A23}] => (Allow) D:\FarCry 4\bin\FarCry4.exe FirewallRules: [{04217225-9438-4B9D-A7D2-3736C891AD86}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe FirewallRules: [{D75AD1EE-6C42-4CD0-9A88-CEFD85E60CC0}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe FirewallRules: [{C3202F2E-2E0C-4422-A10F-3930C45E05F1}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe FirewallRules: [{CEBB31CF-108D-442A-B8F9-5E8E7AE15466}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe FirewallRules: [{5F52B295-D65D-45B5-9AA9-57FEE5E29EB1}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe FirewallRules: [{C185304D-B5F2-4397-8F36-6933CA91254D}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe FirewallRules: [{2E9F1FE8-C05B-4310-B409-9BE89D545FE1}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{08AB62C9-D7A7-4BD7-8172-1CCFA92BD249}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{B2AA0DF0-9E17-41E3-AB1D-714318E72873}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{661B2447-83A2-4EED-A280-FDE3E863510B}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{CCA3FEB1-F76E-4C3D-853D-06307FD6E20C}] => (Allow) D:\GTA V\GTA5.exe FirewallRules: [{28F3CE71-68C3-448F-A213-FB5223C467F8}] => (Allow) D:\GTA V\GTA5.exe FirewallRules: [{FF3C8BC0-B42F-4E9E-B7DD-7C73B1D635D1}] => (Allow) D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{E6BEB659-AC39-4F7A-9BD8-7EC9A304EAB2}] => (Allow) D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{85B02C7E-E848-4BA1-AA70-6640687B73A6}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{3E6FF8FC-1666-4886-AFAE-AF8CCA87D743}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{E9AAD30C-5819-48CB-AAA3-EB0BDAAA3372}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{038FF063-8FDB-448D-8046-A93CC2D1B6FD}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{CBC096F0-08C6-4936-9969-3D69AAC9D22E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{39B52D9B-ECB1-4F04-86A1-717CEE027F39}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{CAFB794F-5ADD-4191-A5C4-497E8AAC063E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{618B3321-A22A-46BD-B292-C82F30DBC4DB}] => (Allow) D:\SteamLibrary\steamapps\common\Unturned\Unturned_BE.exe FirewallRules: [{500E23A2-1CF9-42E2-A95E-FB55CC82C0EB}] => (Allow) D:\SteamLibrary\steamapps\common\Unturned\Unturned_BE.exe FirewallRules: [{B2F489AB-261A-445B-85AA-BD89FA56AA70}] => (Allow) D:\SteamLibrary\steamapps\common\Unturned\Unturned.exe FirewallRules: [{2974EC24-4BEB-4B52-98D9-A57937243E91}] => (Allow) D:\SteamLibrary\steamapps\common\Unturned\Unturned.exe FirewallRules: [{459C0A7A-23A3-4D54-AA69-402B722E319C}] => (Allow) D:\SteamLibrary\steamapps\common\War Thunder\launcher.exe FirewallRules: [{0BE33E28-12C1-40B1-87F5-71DD33EAE773}] => (Allow) D:\SteamLibrary\steamapps\common\War Thunder\launcher.exe FirewallRules: [{B7CB4B44-4E56-423C-AC1B-7FC26E87666C}] => (Allow) D:\SteamLibrary\steamapps\common\PAYDAY 2\payday2_win32_release.exe FirewallRules: [{CBC69707-2FD4-45C2-A3AB-D0402905A137}] => (Allow) D:\SteamLibrary\steamapps\common\PAYDAY 2\payday2_win32_release.exe FirewallRules: [TCP Query User{AE2687F4-CD37-4290-B154-D72331C330E8}C:\users\admin\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\admin\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{DF6A8C75-CB82-4658-9466-14735DFD78A5}C:\users\admin\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\admin\appdata\roaming\spotify\spotify.exe FirewallRules: [{0526F98F-4CC2-4B4A-9A46-A432E229CFF9}] => (Block) C:\users\admin\appdata\roaming\spotify\spotify.exe FirewallRules: [{F0DB2A5C-E80E-4D85-9EDC-40763728DBE2}] => (Block) C:\users\admin\appdata\roaming\spotify\spotify.exe FirewallRules: [{09DC6D6F-974C-4843-9BCC-1D96DE5CEF7F}] => (Allow) C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{00E39783-1718-4352-93AA-64A0A3B62EF9}] => (Allow) C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{DACC2923-062D-421F-9B31-2039FBD8E0B0}] => (Allow) C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{CC556C3B-5BF9-46D4-8BD6-1AAA3EA80CA7}] => (Allow) C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{71AC874E-77D7-41E5-88A3-61AC8885EBDE}] => (Allow) C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{B01D9EF6-6A26-4D16-9CAA-83D378DC4855}] => (Allow) C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [TCP Query User{91493C68-6519-4E21-BE38-A69CDCF7C937}D:\steamlibrary\steamapps\common\war thunder\win64\aces.exe] => (Allow) D:\steamlibrary\steamapps\common\war thunder\win64\aces.exe FirewallRules: [UDP Query User{E64DE52C-57E0-41C4-B86C-047C155C67CD}D:\steamlibrary\steamapps\common\war thunder\win64\aces.exe] => (Allow) D:\steamlibrary\steamapps\common\war thunder\win64\aces.exe FirewallRules: [{8095B812-A837-4056-B135-0F7344D95C0D}] => (Block) D:\steamlibrary\steamapps\common\war thunder\win64\aces.exe FirewallRules: [{F3C2CF69-078D-4F77-A230-51C1DEB442F2}] => (Block) D:\steamlibrary\steamapps\common\war thunder\win64\aces.exe FirewallRules: [{66DB4C05-918E-403E-BF55-1E84E8994A4E}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [{3DB17AAD-9238-4049-89E9-A83240077365}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [{C14233FF-AF93-43AF-A555-D255921415E8}] => (Allow) D:\SteamLibrary\steamapps\common\Brawlhalla\Brawlhalla.exe FirewallRules: [{49EB4A26-4618-4261-9FAF-92C6E29E463A}] => (Allow) D:\SteamLibrary\steamapps\common\Brawlhalla\Brawlhalla.exe FirewallRules: [{35CCA997-03DD-44FD-8316-8BF1C5D8D378}] => (Allow) D:\SteamLibrary\steamapps\common\Warframe\Warframe.exe FirewallRules: [{537FBDB7-B1AD-4BE4-A5BD-78964A0C7F4C}] => (Allow) D:\SteamLibrary\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{C2D65D8C-D45D-48C3-B391-133C435F704C}] => (Allow) D:\SteamLibrary\steamapps\common\Warframe\Warframe.exe FirewallRules: [{5BFB9714-EC28-466A-8410-A7D6827BA381}] => (Allow) D:\SteamLibrary\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{732AD0DE-696D-46E1-BA1F-1E6B34CC8CD2}] => (Allow) D:\SteamLibrary\steamapps\common\Warframe\Tools\Launcher.exe FirewallRules: [{3F482AEA-7F6C-4A20-BB7E-937FA592064B}] => (Allow) D:\SteamLibrary\steamapps\common\Warframe\Tools\RemoteCrashSender.exe FirewallRules: [{8E30A29C-A2DF-4A08-92BB-42AA71DD1201}] => (Allow) D:\SteamLibrary\steamapps\common\Warframe\Warframe.exe FirewallRules: [{566487BE-E95A-4C44-AED9-DFE7454F2744}] => (Allow) D:\SteamLibrary\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{F2F8BF12-B7EE-4075-9438-A3B04CACD3B9}] => (Allow) D:\SteamLibrary\steamapps\common\Warframe\Warframe.exe FirewallRules: [{34F2F006-6F4A-422A-B302-383BE14023D3}] => (Allow) D:\SteamLibrary\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{A499E1A6-A73D-4F7A-83D5-31815CA0F8F5}] => (Allow) D:\SteamLibrary\steamapps\common\Warframe\Tools\Launcher.exe FirewallRules: [{2EE4E675-A9A0-44C1-BFEA-D60EA3202667}] => (Allow) D:\SteamLibrary\steamapps\common\Warframe\Tools\RemoteCrashSender.exe FirewallRules: [{FC9F1DFE-7527-46C8-BD6A-3DFC9336B994}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BFLauncher.exe FirewallRules: [{DCC71FAB-407B-4EF7-B2D8-B9CDFDBF24DC}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BFLauncher.exe FirewallRules: [{44FAB123-F385-4C5E-90C4-0C9712ACDB01}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BFLauncher_x86.exe FirewallRules: [{B7E2C722-3431-463B-BA10-3A5415966A2B}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BFLauncher_x86.exe FirewallRules: [{4BDF7C64-E657-4FDC-B933-2D0DAC69EA5B}] => (Allow) D:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe FirewallRules: [{3E8338F5-A838-41E2-8E4E-AA4C362F7BC5}] => (Allow) D:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe FirewallRules: [{6BE71D7C-5DCD-420C-A6D8-E33D63D963D2}] => (Allow) D:\SteamLibrary\steamapps\common\LEGO STAR WARS The Force Awakens\LEGOSWTFA.exe FirewallRules: [{4E570071-AB45-4220-A357-5DBFDFD7F811}] => (Allow) D:\SteamLibrary\steamapps\common\LEGO STAR WARS The Force Awakens\LEGOSWTFA.exe FirewallRules: [{C7D47BC3-AB18-48F1-8993-8CCC10ACB982}] => (Allow) D:\SteamLibrary\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe FirewallRules: [{8425237D-D165-4915-8D6F-7E087EB38F8F}] => (Allow) D:\SteamLibrary\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe FirewallRules: [TCP Query User{E5BBD804-2B28-4BAF-8E1A-87B28206A1B9}D:\steamlibrary\steamapps\common\paladins\binaries\win32\paladins.exe] => (Allow) D:\steamlibrary\steamapps\common\paladins\binaries\win32\paladins.exe FirewallRules: [UDP Query User{42C78EAE-53B3-4B04-AABD-9977246BBC71}D:\steamlibrary\steamapps\common\paladins\binaries\win32\paladins.exe] => (Allow) D:\steamlibrary\steamapps\common\paladins\binaries\win32\paladins.exe FirewallRules: [{DE9A2FAF-FCC3-4FFB-9C26-861E4E1674A5}] => (Allow) D:\SteamLibrary\steamapps\common\Saints Row 2\SR2_pc.exe FirewallRules: [{C931F5BF-0297-4AAE-9946-836654197D79}] => (Allow) D:\SteamLibrary\steamapps\common\Saints Row 2\SR2_pc.exe FirewallRules: [TCP Query User{0B92BD39-93C3-4B12-A5E0-4855368A4F1A}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe FirewallRules: [UDP Query User{52BAE31B-F689-4B80-99BC-3B14FE7607AB}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe FirewallRules: [{FEF0BB64-922E-4C12-ACB6-A6717FCC971C}] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe FirewallRules: [{12B6F8ED-7C1E-4673-B80C-CDA52A37D6EC}] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe FirewallRules: [{B4EA826D-5FAC-4817-862E-ECF57D3C2DCF}] => (Allow) D:\SteamLibrary\steamapps\common\LMS\Launcher.exe FirewallRules: [{A8E5EECD-F17E-436E-ABE1-6D0503F406C7}] => (Allow) D:\SteamLibrary\steamapps\common\LMS\Launcher.exe FirewallRules: [TCP Query User{8F2EFED3-B97D-4F80-9DFA-225CDEB54434}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe FirewallRules: [UDP Query User{9BB8D325-836E-42BE-B011-2B5C115F04D1}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe FirewallRules: [{642F6F8B-4D6B-420C-97E2-F3A8B0A6ADCE}] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe FirewallRules: [{D46D302C-E48A-4668-AE41-86333FB3080D}] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe FirewallRules: [{72876F8D-A1B2-4F84-98D7-67C1C02C9B5C}] => (Allow) D:\SteamLibrary\steamapps\common\SNOW\Bin64\playSNOW.exe FirewallRules: [{AFE265CB-9CE7-458F-942C-B67A7111D3DB}] => (Allow) D:\SteamLibrary\steamapps\common\SNOW\Bin64\playSNOW.exe FirewallRules: [{BABD42F1-5D65-4B9D-BC28-B5243B68B0BC}] => (Allow) D:\SteamLibrary\steamapps\common\Warface\WarfaceMycomSteamLoader.exe FirewallRules: [{2D6603B7-DAF7-442B-9B2A-7878FA7A9C39}] => (Allow) D:\SteamLibrary\steamapps\common\Warface\WarfaceMycomSteamLoader.exe FirewallRules: [{2D132CB0-378C-4C6B-AD3A-3B8284FB5A7E}] => (Allow) C:\Program Files (x86)\Minecraft\runtime\jre-x64\1.8.0_25\bin\javaw FirewallRules: [{B5ACA2CC-713A-4925-AA64-D2E99FC7B5A0}] => (Allow) C:\Program Files (x86)\Minecraft FirewallRules: [{184DE605-7B18-4775-BB81-4340343D4CCB}] => (Allow) C:\Program Files (x86)\Minecraft\MinecraftLauncher.exe FirewallRules: [{176200D7-7B43-4BF7-9015-F81EF618149D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{4250C1BA-3408-4F81-9879-58BC82D491BA}] => (Allow) C:\Program Files\Opera\44.0.2510.1449\opera.exe ==================== Punkty Przywracania systemu ========================= 07-05-2017 12:58:17 Zaplanowany punkt kontrolny ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (05/09/2017 03:14:39 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3009) (User: ZARZĄDZANIE NT) Description: Installing the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code. Error: (05/09/2017 03:14:39 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: ZARZĄDZANIE NT) Description: Unable to read the performance counter strings defined for the 015 language ID. The first DWORD in the Data section contains the Win32 error code. Error: (05/09/2017 03:07:26 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas wywoływania procedury QueryFullProcessImageNameW. hr = 0x80070006, Nieprawidłowe dojście. . Operacja: Wykonywanie operacji asynchronicznej Kontekst: Stan bieżący: DoSnapshotSet Error: (05/09/2017 03:07:04 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się. Details: AddLegacyDriverFiles: Unable to back up image of binary Protokół LLDP (Link-Layer Discovery Protocol) firmy Microsoft. System Error: Odmowa dostępu. . Error: (05/09/2017 03:06:46 PM) (Source: VSS) (EventID: 8194) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas badania interfejsu IVssWriterCallback. hr = 0x80070005, Odmowa dostępu. . To jest często spowodowane przez niepoprawne ustawienia zabezpieczeń w procesie zapisującym lub żądającym. Operacja: Zbieranie danych modułu zapisującego Kontekst: Identyfikator klasy modułu zapisującego: {e8132975-6f93-4464-a53e-1050253ae220} Nazwa modułu zapisującego: System Writer Identyfikator wystąpienia modułu zapisującego: {6ea11bf3-5a14-4298-bae6-e9e64a6f73e7} Error: (05/08/2017 04:45:08 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "C:\Program Files\AVAST Software\Avast\setup\iplugins\IStats.dll". Nie można odnaleźć zestawu zależnego Avast.VC110.CRT,processorArchitecture="x86",publicKeyToken="2036b14a11e83e4a",type="win32",version="11.0.60610.1". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error: (05/08/2017 04:45:06 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "C:\Program Files\AVAST Software\Avast\setup\iplugins\IStats.dll". Nie można odnaleźć zestawu zależnego Avast.VC110.CRT,processorArchitecture="x86",publicKeyToken="2036b14a11e83e4a",type="win32",version="11.0.60610.1". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error: (05/08/2017 03:03:08 PM) (Source: ESENT) (EventID: 489) (User: ) Description: CCleaner64 (11420) Próba otwarcia pliku „C:\Users\Admin\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat” w trybie tylko do odczytu zakończyła się niepomyślnie z błędem systemowym 32 (0x00000020): „Proces nie może uzyskać dostępu do pliku, ponieważ jest on używany przez inny proces. ”. Operacja otwierania pliku zostanie zakończona z błędem -1032 (0xfffffbf8). Error: (05/07/2017 05:52:29 PM) (Source: COM) (EventID: 10031) (User: ) Description: Podczas anulowania kierowania obiektu skierowanego niestandardowo wykonano sprawdzanie zasad anulowania kierowania i klasa {2CD39202-3A2F-4935-9A86-65B919919A7F} została odrzucona. Error: (05/07/2017 05:52:26 PM) (Source: COM) (EventID: 10031) (User: ) Description: Podczas anulowania kierowania obiektu skierowanego niestandardowo wykonano sprawdzanie zasad anulowania kierowania i klasa {95CABCC9-BC57-4C12-B8DF-BA193232AA01} została odrzucona. Dziennik System: ============= Error: (05/09/2017 03:32:58 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-0QRUE0D) Description: Zgodnie z ustawieniami uprawnienia domyślne ustawienia komputera nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C} i identyfikatorem aplikacji APPID {CE79BC8B-2980-4CA9-9570-6E0BF5B93BF2} użytkownikowi DESKTOP-0QRUE0D\Admin o identyfikatorze zabezpieczeń SID (S-1-5-21-1013101086-2419507280-623597535-1001) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. Error: (05/09/2017 03:32:58 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-0QRUE0D) Description: Zgodnie z ustawieniami uprawnienia domyślne ustawienia komputera nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C} i identyfikatorem aplikacji APPID {CE79BC8B-2980-4CA9-9570-6E0BF5B93BF2} użytkownikowi DESKTOP-0QRUE0D\Admin o identyfikatorze zabezpieczeń SID (S-1-5-21-1013101086-2419507280-623597535-1001) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. Error: (05/09/2017 03:32:58 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-0QRUE0D) Description: Zgodnie z ustawieniami uprawnienia domyślne ustawienia komputera nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C} i identyfikatorem aplikacji APPID {CE79BC8B-2980-4CA9-9570-6E0BF5B93BF2} użytkownikowi DESKTOP-0QRUE0D\Admin o identyfikatorze zabezpieczeń SID (S-1-5-21-1013101086-2419507280-623597535-1001) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. Error: (05/09/2017 03:32:58 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-0QRUE0D) Description: Zgodnie z ustawieniami uprawnienia domyślne ustawienia komputera nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C} i identyfikatorem aplikacji APPID {CE79BC8B-2980-4CA9-9570-6E0BF5B93BF2} użytkownikowi DESKTOP-0QRUE0D\Admin o identyfikatorze zabezpieczeń SID (S-1-5-21-1013101086-2419507280-623597535-1001) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. Error: (05/09/2017 03:32:58 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-0QRUE0D) Description: Zgodnie z ustawieniami uprawnienia domyślne ustawienia komputera nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C} i identyfikatorem aplikacji APPID {CE79BC8B-2980-4CA9-9570-6E0BF5B93BF2} użytkownikowi DESKTOP-0QRUE0D\Admin o identyfikatorze zabezpieczeń SID (S-1-5-21-1013101086-2419507280-623597535-1001) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. Error: (05/09/2017 03:32:46 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-0QRUE0D) Description: Zgodnie z ustawieniami uprawnienia domyślne ustawienia komputera nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C} i identyfikatorem aplikacji APPID {CE79BC8B-2980-4CA9-9570-6E0BF5B93BF2} użytkownikowi DESKTOP-0QRUE0D\Admin o identyfikatorze zabezpieczeń SID (S-1-5-21-1013101086-2419507280-623597535-1001) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. Error: (05/09/2017 03:32:46 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-0QRUE0D) Description: Zgodnie z ustawieniami uprawnienia domyślne ustawienia komputera nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C} i identyfikatorem aplikacji APPID {CE79BC8B-2980-4CA9-9570-6E0BF5B93BF2} użytkownikowi DESKTOP-0QRUE0D\Admin o identyfikatorze zabezpieczeń SID (S-1-5-21-1013101086-2419507280-623597535-1001) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. Error: (05/09/2017 03:32:13 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-0QRUE0D) Description: Zgodnie z ustawieniami uprawnienia domyślne ustawienia komputera nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C} i identyfikatorem aplikacji APPID {CE79BC8B-2980-4CA9-9570-6E0BF5B93BF2} użytkownikowi DESKTOP-0QRUE0D\Admin o identyfikatorze zabezpieczeń SID (S-1-5-21-1013101086-2419507280-623597535-1001) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. Error: (05/09/2017 03:32:13 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-0QRUE0D) Description: Zgodnie z ustawieniami uprawnienia domyślne ustawienia komputera nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C} i identyfikatorem aplikacji APPID {CE79BC8B-2980-4CA9-9570-6E0BF5B93BF2} użytkownikowi DESKTOP-0QRUE0D\Admin o identyfikatorze zabezpieczeń SID (S-1-5-21-1013101086-2419507280-623597535-1001) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. Error: (05/09/2017 03:32:13 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-0QRUE0D) Description: Zgodnie z ustawieniami uprawnienia domyślne ustawienia komputera nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C} i identyfikatorem aplikacji APPID {CE79BC8B-2980-4CA9-9570-6E0BF5B93BF2} użytkownikowi DESKTOP-0QRUE0D\Admin o identyfikatorze zabezpieczeń SID (S-1-5-21-1013101086-2419507280-623597535-1001) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe. CodeIntegrity: =================================== Date: 2017-05-08 17:22:27.254 Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume7\Program Files (x86)\Overwolf\0.104.19.0\x64\OWExplorer.dll that did not meet the Store signing level requirements. Date: 2017-05-08 17:22:27.120 Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume7\Program Files (x86)\Overwolf\0.104.19.0\x64\OWExplorer.dll that did not meet the Store signing level requirements. Date: 2017-05-08 17:11:53.338 Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume7\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements. Date: 2017-05-08 17:11:52.812 Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume7\Program Files (x86)\Overwolf\0.104.19.0\x64\OWExplorer.dll that did not meet the Store signing level requirements. Date: 2017-05-08 17:11:51.643 Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume7\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements. Date: 2017-05-08 17:11:51.495 Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume7\Program Files (x86)\Overwolf\0.104.19.0\x64\OWExplorer.dll that did not meet the Store signing level requirements. Date: 2017-05-07 12:46:54.247 Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume7\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-05-07 12:34:24.586 Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume7\Program Files (x86)\Overwolf\0.104.19.0\x64\OWExplorer.dll that did not meet the Store signing level requirements. Date: 2017-05-07 12:34:24.584 Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume7\Program Files (x86)\Overwolf\0.104.19.0\x64\OWExplorer.dll that did not meet the Store signing level requirements. Date: 2017-05-07 12:29:17.833 Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume7\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements. ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM) i5-4570S CPU @ 2.90GHz Procent pamięci w użyciu: 48% Całkowita pamięć fizyczna: 8136.01 MB Dostępna pamięć fizyczna: 4191.91 MB Całkowita pamięć wirtualna: 11592.01 MB Dostępna pamięć wirtualna: 6816.85 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:200.05 GB) (Free:18.3 GB) NTFS Drive d: () (Fixed) (Total:730.91 GB) (Free:303.92 GB) NTFS Drive g: () (Fixed) (Total:73.97 GB) (Free:20.45 GB) NTFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 74.5 GB) (Disk ID: 6EEC27B4) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=74 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=450 MB) - (Type=27) ======================================================== Disk: 1 (Size: 931.5 GB) (Disk ID: D86CD3D6) Partition: GPT. ==================== Koniec Addition.txt ============================