Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 13-12-2017
Uruchomiony przez Mati (14-12-2017 20:17:19)
Uruchomiony z C:\Users\Mati\Downloads
Windows 10 Home Wersja 1703 15063.786 (X64) (2017-07-19 06:53:27)
Tryb startu: Normal
==========================================================


==================== Konta użytkowników: =============================

Administrator (S-1-5-21-4274788851-1844473529-1912967261-500 - Administrator - Disabled)
Gość (S-1-5-21-4274788851-1844473529-1912967261-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-4274788851-1844473529-1912967261-1005 - Limited - Enabled)
Konto domyślne (S-1-5-21-4274788851-1844473529-1912967261-503 - Limited - Disabled)
Mati (S-1-5-21-4274788851-1844473529-1912967261-1001 - Administrator - Enabled) => C:\Users\Mati

==================== Centrum zabezpieczeń ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Zainstalowane programy ======================

(W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)

«FIFA 14 ModdingWay» version 8.0.1 (HKLM-x32\...\«FIFA 14 ModdingWay»_is1) (Version: 8.0.1 - Virtus)
µTorrent (HKU\S-1-5-21-4274788851-1844473529-1912967261-1001\...\uTorrent) (Version: 3.5.0.44294 - BitTorrent Inc.)
Aktualizacje NVIDIA 23.2.20.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 23.2.20.0 - NVIDIA Corporation) Hidden
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 376.33 - NVIDIA Corporation) Hidden
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 4.0.18 - ASUS)
Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.3.0.0156 - Disc Soft Ltd)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 63.0.3239.84 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation)
Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Malwarebytes (wersja 3.3.1.2183) (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{59E4543A-D49D-4489-B445-473D763C79AF}) (Version: 2.0.672.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4274788851-1844473529-1912967261-1001\...\OneDriveSetup.exe) (Version: 17.3.7131.1115 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - x64 8.0.61000 (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.61001 (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{a2199617-3609-410f-a8e8-e8806c73545b}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{51adbf11-493f-431c-a862-967a0fae2944}) (Version: 12.0.21005.1 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{2af972c7-13b0-4978-92a8-fee26a4fb4e9}) (Version: 12.0.21005.1 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Narzędzia sprawdzające pakietu Microsoft Office 2013 — polski (HKLM-x32\...\{90150000-001F-0415-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
NVIDIA GeForce Experience 3.2.2.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.2.2.49 - NVIDIA Corporation)
NVIDIA Oprogramowanie systemu PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NVIDIA Sterownik graficzny 376.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.33 - NVIDIA Corporation)
NvNodejs (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs) (Version: 3.2.2.49 - NVIDIA Corporation) Hidden
NvTelemetry (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry) (Version: 2.0.2.1 - NVIDIA Corporation) Hidden
NvvHci (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvvHci) (Version: 2.02.0.2 - NVIDIA Corporation) Hidden
Odkurzacz (HKLM-x32\...\Odkurzacz 14.3_is1) (Version: 14.3.0.4600 - FranmoSoftware - Maciej Opaliński)
Panel sterowania NVIDIA 376.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 376.33 - NVIDIA Corporation) Hidden
Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7571 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.3.1 - Rockstar Games)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version:  - Microsoft)
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0351 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 3.2.2.49 - NVIDIA Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKU\S-1-5-21-4274788851-1844473529-1912967261-1001\...\TeamSpeak 3 Client) (Version: 3.1.1 - TeamSpeak Systems GmbH)
Update for Skype for Business 2015 (KB4011284) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{75DCD7DD-BEFB-4624-A161-05DEDB6774C2}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB4011284) 32-Bit Edition (HKLM-x32\...\{90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUS_{75DCD7DD-BEFB-4624-A161-05DEDB6774C2}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB4011284) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0415-0000-0000000FF1CE}_Office15.PROPLUS_{75DCD7DD-BEFB-4624-A161-05DEDB6774C2}) (Version:  - Microsoft)
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation)
WinRAR archiver (HKLM\...\WinRAR archiver) (Version:  - )

==================== Niestandardowe rejestracje CLSID (filtrowane): ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

CustomCLSID: HKU\S-1-5-21-4274788851-1844473529-1912967261-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.17123-0\ShellExt.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2010-03-15] ()
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2010-03-15] ()
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.17123-0\ShellExt.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.17123-0\ShellExt.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2010-03-15] ()
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2010-03-15] ()
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-05-03] (Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-12-11] (NVIDIA Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2010-03-15] ()
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2010-03-15] ()

==================== Zaplanowane zadania (filtrowane) =============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {01A9EADB-F5BB-476F-BA97-802FAE68255D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.17123-0\MpCmdRun.exe [2017-12-13] (Microsoft Corporation)
Task: {1281D335-7786-4825-B9CC-D767D841EE09} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-01-06] (NVIDIA Corporation)
Task: {292BD316-A4D3-491A-A00A-7A7AA2F2FAA1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.17123-0\MpCmdRun.exe [2017-12-13] (Microsoft Corporation)
Task: {2B9E8030-F52A-4077-A00E-D2E5A63EB520} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-01-06] (NVIDIA Corporation)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {5F686A91-C8F6-475B-8670-50DCC1E1872A} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2017-03-09] (AsusTek)
Task: {6CD6E949-651F-467C-9063-0D2E4FF1B6EA} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-11-10] (Realtek Semiconductor)
Task: {76736DD9-4473-4C3F-AB0B-EB4E46CE5EB7} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-11-10] (Realtek Semiconductor)
Task: {77D579C5-3561-4D94-B559-2FF905EF3666} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-01-06] (NVIDIA Corporation)
Task: {7B5CA8E3-E363-4931-A0E7-87F1822A636D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)
Task: {7F445299-EEF0-4ED8-9D56-3E8A4DB3599B} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-01-06] (NVIDIA Corporation)
Task: {8945D974-D875-4F3A-B0F6-8786ABBC2FF7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.17123-0\MpCmdRun.exe [2017-12-13] (Microsoft Corporation)
Task: {8CA003E4-CEE5-4CC2-B28C-B4BC7AB3CAB2} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)
Task: {8E7F8BCD-7AF4-4A8D-BAF7-C3B82319F283} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-01-06] (NVIDIA Corporation)
Task: {9B9172D9-D630-406F-8602-00865D917008} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
Task: {9BEA6E6C-CE71-48D5-ADE2-82D58E7B85DA} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-11-10] (Realtek Semiconductor)
Task: {C747A6BD-E5B5-4633-B774-6AAB12813F43} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.17123-0\MpCmdRun.exe [2017-12-13] (Microsoft Corporation)
Task: {EEA88316-8B60-4C24-9C70-1926617F4F20} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-01-06] (NVIDIA Corporation)
Task: {F55CFFE0-9D49-4077-951F-5435491215BE} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-01-06] (NVIDIA Corporation)
Task: {F8B85A37-7964-4895-9F19-D71D0ADD3C25} - System32\Tasks\Odkurzacz => D:\Odkurzacz\odkurzacz.exe [2017-01-18] (FranmoSoftware)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Skróty & WMI ========================

(Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.)


==================== Załadowane moduły (filtrowane) ==============

2017-07-19 07:25 - 2016-12-11 19:47 - 000134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-12-30 15:27 - 2017-01-06 02:10 - 004490808 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-12-30 15:27 - 2017-01-06 02:10 - 001148984 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-12-13 19:12 - 2017-11-29 09:11 - 002301384 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2017-12-13 19:12 - 2017-11-29 09:11 - 002358728 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-03-18 21:58 - 2017-03-18 21:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-03-18 21:59 - 2017-03-20 05:01 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-12-12 15:16 - 2017-12-12 15:17 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-12-12 15:16 - 2017-12-12 15:17 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-12-12 15:16 - 2017-12-12 15:17 - 024735744 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-12-12 15:16 - 2017-12-12 15:17 - 002551808 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\skypert.dll
2017-12-09 02:03 - 2017-12-06 05:24 - 004063064 _____ () C:\Program Files (x86)\Google\Chrome\Application\63.0.3239.84\libglesv2.dll
2017-12-09 02:03 - 2017-12-06 05:24 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\63.0.3239.84\libegl.dll
2017-12-14 17:10 - 2017-12-14 17:12 - 000477184 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2017-12-14 17:10 - 2017-12-14 17:12 - 058590720 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2017-10-05 16:23 - 2017-10-05 16:25 - 002523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll
2017-11-11 12:29 - 2017-11-11 12:32 - 000164864 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\VideoPlugin.dll
2017-10-05 16:23 - 2017-10-05 16:25 - 000675328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\IPPNativePlugin.dll
2017-12-14 17:10 - 2017-12-14 17:12 - 003727360 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll
2017-12-14 17:10 - 2017-12-14 17:12 - 002270720 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\TrackingDLLUWP.dll
2017-12-14 17:10 - 2017-12-14 17:12 - 016395264 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll
2017-12-14 17:10 - 2017-12-14 17:12 - 003579904 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2017-12-14 17:10 - 2017-12-14 17:11 - 003204096 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll
2017-08-29 23:01 - 2017-08-29 23:02 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-12-14 17:10 - 2017-12-14 17:12 - 000043520 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.Edit.Services.dll
2017-12-14 17:10 - 2017-12-14 17:11 - 004038144 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\Microsoft.People.PeoplePicker.dll
2017-12-14 17:10 - 2017-12-14 17:12 - 001367040 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2017-12-06 19:30 - 2017-12-06 19:30 - 000061952 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11711.1001.5.0_x64__8wekyb3d8bbwe\WinStoreTasksWrapper.dll
2016-12-30 15:27 - 2017-01-06 02:10 - 000020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-12-30 15:27 - 2017-01-06 02:10 - 003776056 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-12-30 15:27 - 2017-01-06 02:10 - 000901688 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-12-07 19:25 - 2017-12-07 19:25 - 000102088 _____ () C:\Users\Mati\AppData\Local\Microsoft\OneDrive\17.3.7131.1115\UpdateRingSettings.dll
2016-12-30 15:27 - 2017-01-06 01:09 - 000527416 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-12-30 15:27 - 2017-01-06 01:09 - 000252352 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-12-30 15:27 - 2017-01-06 01:09 - 002807232 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-12-30 15:27 - 2017-01-06 01:09 - 000384568 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-12-30 15:27 - 2017-01-06 01:09 - 000449080 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-12-30 15:27 - 2017-01-06 01:09 - 000336832 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-12-30 15:27 - 2017-01-06 01:09 - 001003456 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
2017-01-12 21:40 - 2017-01-06 01:09 - 000954816 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSDKAPINode.node

==================== Alternate Data Streams (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.)


==================== Tryb awaryjny (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Powiązania plików (filtrowane) ===============

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.)


==================== Internet Explorer - Witryny zaufane i z ograniczeniami ===============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.)


==================== Hosts - zawartość: ===============================

(Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)

2013-08-22 14:25 - 2017-12-13 18:48 - 000000027 _____ C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       localhost

==================== Inne obszary ============================

(Obecnie brak automatycznej naprawy dla tej sekcji.)

HKU\S-1-5-21-4274788851-1844473529-1912967261-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
Zapora systemu Windows [funkcja włączona]

==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==


==================== Reguły Zapory systemu Windows (filtrowane) ===============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

FirewallRules: [UDP Query User{7C1583C8-A411-4F67-9721-D3A40674C21F}D:\fifa14mw\game\fifa14.exe] => (Block) D:\fifa14mw\game\fifa14.exe
FirewallRules: [TCP Query User{DBD75A6B-614F-4A4F-A119-030F07871E20}D:\fifa14mw\game\fifa14.exe] => (Block) D:\fifa14mw\game\fifa14.exe
FirewallRules: [UDP Query User{C2648E2F-9655-47EC-8D3E-DAB314E52EB6}C:\users\mati\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\mati\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [TCP Query User{028CB809-AA9C-42E7-BA39-6447DE726B84}C:\users\mati\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\mati\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [UDP Query User{A6772D2E-5613-4276-8923-B0B3BCDBD981}D:\gog galaxy\games\saints row 2\sr2_pc.exe] => (Allow) D:\gog galaxy\games\saints row 2\sr2_pc.exe
FirewallRules: [TCP Query User{99C9D74F-AEB4-49E9-954F-A783C538E712}D:\gog galaxy\games\saints row 2\sr2_pc.exe] => (Allow) D:\gog galaxy\games\saints row 2\sr2_pc.exe
FirewallRules: [{E8035174-588B-42B8-9E1B-BE0190243BB5}] => (Allow) D:\Ubisoft Game Launcher\games\Splinter Cell Blacklist\src\SYSTEM\Blacklist_DX11_game.exe
FirewallRules: [{ADDA97C4-917F-421D-AB3D-A568B8F539A0}] => (Allow) D:\Ubisoft Game Launcher\games\Splinter Cell Blacklist\src\SYSTEM\Blacklist_DX11_game.exe
FirewallRules: [{5B35FAE4-AAC7-44FE-936C-571ADD828896}] => (Allow) D:\Ubisoft Game Launcher\games\Splinter Cell Blacklist\src\SYSTEM\Blacklist_game.exe
FirewallRules: [{747D158E-24C5-42D0-9262-EA92EA5B6F51}] => (Allow) D:\Ubisoft Game Launcher\games\Splinter Cell Blacklist\src\SYSTEM\Blacklist_game.exe
FirewallRules: [UDP Query User{99C4E28E-5B77-4A9D-BFE3-512F90C8487F}C:\program files (x86)\activision\call of duty 2\cod2mp_s.exe] => (Allow) C:\program files (x86)\activision\call of duty 2\cod2mp_s.exe
FirewallRules: [TCP Query User{5AA1AD4F-F64D-4906-82CE-FEA6C63C2E86}C:\program files (x86)\activision\call of duty 2\cod2mp_s.exe] => (Allow) C:\program files (x86)\activision\call of duty 2\cod2mp_s.exe
FirewallRules: [{B21F5608-35A0-4D30-8D32-792415236427}] => (Allow) D:\steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{C5A3A3AF-5234-483E-9B79-B8A3F5677D1E}] => (Allow) D:\steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{55EE04BB-0A20-4D67-993F-1D6FA62A3084}] => (Allow) D:\steam\Steam.exe
FirewallRules: [{F5BA57D8-B6CB-4368-8E45-3FDA09CBCFF6}] => (Allow) D:\steam\Steam.exe
FirewallRules: [{25E57B06-FA57-4FFD-8550-03EE7F39466E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{0339693C-82D1-40DD-BCA5-A900B41BFE1C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{68B3CE49-DD99-47FE-9E29-E570C90DD90D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{FE6C4685-93AE-4239-9712-B1DAAE2C2143}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{0A7E8069-B3CB-447D-A450-C750B40956BC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{0F16C5F5-718E-4501-A0C7-DB43D69CDA72}] => (Allow) D:\g5\GTA5.exe
FirewallRules: [{91B923B6-93FA-4ACF-8B07-A06599C6DB72}] => (Allow) D:\g5\GTA5.exe
FirewallRules: [UDP Query User{68B1CD68-A6F7-4022-829B-47FB033FE474}D:\counter-strike 1.6 v43\hl.exe] => (Allow) D:\counter-strike 1.6 v43\hl.exe
FirewallRules: [TCP Query User{58854844-87CF-465B-9F76-6704C12B82ED}D:\counter-strike 1.6 v43\hl.exe] => (Allow) D:\counter-strike 1.6 v43\hl.exe
FirewallRules: [UDP Query User{9EB031E5-A79C-43AC-BC5E-F943597D6DA0}D:\dying light\dyinglightgame.exe] => (Allow) D:\dying light\dyinglightgame.exe
FirewallRules: [TCP Query User{D6BADC2A-1296-4220-BA64-46D29F326277}D:\dying light\dyinglightgame.exe] => (Allow) D:\dying light\dyinglightgame.exe
FirewallRules: [{BFB4EE2E-A49C-420F-8D2A-79E6F22011A7}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{D5F4CE17-A8EF-4DDE-86D4-E33857891FE7}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{A869981F-1E38-488E-A254-B8948E85443D}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{B206C00B-732E-4B84-B117-86B3457ED7BC}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [TCP Query User{721CCAF7-8E0C-4C23-BDF6-34675F5A9316}C:\users\mati\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\mati\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{0837FA3B-F372-42A1-AD18-27FEE0E24C96}C:\users\mati\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\mati\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{518CFA71-C517-4C74-9964-AA4B98170D6C}D:\grand theft auto v\gta5.exe] => (Block) D:\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{91EF068D-E4A5-4F17-8BBB-BA61D5568174}D:\grand theft auto v\gta5.exe] => (Block) D:\grand theft auto v\gta5.exe
FirewallRules: [{EA361703-2CF1-4E11-907D-5FFBE85D59F7}] => (Allow) D:\Winamp\winamp.exe
FirewallRules: [{39ECAE61-7015-4046-97A7-6B8DD90097B4}] => (Allow) D:\Winamp\winamp.exe
FirewallRules: [{AD69040C-3B50-4EDB-AA40-DE781C2BA411}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{A68C970D-30EA-4C57-BFA6-E40049AC3987}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{D2B23C9C-7E83-45D2-94AB-893F7AAEF154}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{22F0F7E7-0079-4A39-9231-5B41DA6C10E9}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [TCP Query User{2EBDD9AE-6B8B-47A6-8249-F938F80F25D3}C:\users\mati\appdata\local\apps\2.0\q1k4y228.15c\xenyo2ad.ngh\laun...app_2e973cc213891be7_0001.0024_dd24b003d48bfc42\launcher.exe] => (Allow) C:\users\mati\appdata\local\apps\2.0\q1k4y228.15c\xenyo2ad.ngh\laun...app_2e973cc213891be7_0001.0024_dd24b003d48bfc42\launcher.exe
FirewallRules: [UDP Query User{737F7EFD-E841-40E1-A86E-6C33A4FFDC15}C:\users\mati\appdata\local\apps\2.0\q1k4y228.15c\xenyo2ad.ngh\laun...app_2e973cc213891be7_0001.0024_dd24b003d48bfc42\launcher.exe] => (Allow) C:\users\mati\appdata\local\apps\2.0\q1k4y228.15c\xenyo2ad.ngh\laun...app_2e973cc213891be7_0001.0024_dd24b003d48bfc42\launcher.exe
FirewallRules: [TCP Query User{F8992475-93DB-4CEA-8EBC-B6340D6227AC}D:\ghost recon phantoms\pdc-live\ghostreconphantoms.exe] => (Allow) D:\ghost recon phantoms\pdc-live\ghostreconphantoms.exe
FirewallRules: [UDP Query User{8559A277-811E-42CD-85E5-16BE6B5B2B13}D:\ghost recon phantoms\pdc-live\ghostreconphantoms.exe] => (Allow) D:\ghost recon phantoms\pdc-live\ghostreconphantoms.exe
FirewallRules: [TCP Query User{1CB516EB-7F0A-4CC5-8007-A2404D20110D}D:\grand theft auto v\gta5.exe] => (Block) D:\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{8EC0C7B4-06A7-4C40-97AD-B0CE7FF783D1}D:\grand theft auto v\gta5.exe] => (Block) D:\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{43D58F50-C914-4EB1-B39F-C9D4A35BCAA1}D:\wot\wotlauncher.exe] => (Allow) D:\wot\wotlauncher.exe
FirewallRules: [UDP Query User{EC5957C0-1FA8-427A-97D4-B2F18D95D6FA}D:\wot\wotlauncher.exe] => (Allow) D:\wot\wotlauncher.exe
FirewallRules: [TCP Query User{0A28BCE3-8481-4940-A862-194ADB7B6B1A}D:\wot\worldoftanks.exe] => (Allow) D:\wot\worldoftanks.exe
FirewallRules: [UDP Query User{234ABCCB-B64E-42DE-9257-5240E313269F}D:\wot\worldoftanks.exe] => (Allow) D:\wot\worldoftanks.exe
FirewallRules: [TCP Query User{75F8A103-BB79-47B6-B604-F44F390CC33F}C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [UDP Query User{73CA80FE-DD83-4045-BF87-AFEADE088986}C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [TCP Query User{D39387E4-7F0C-42C8-9686-CF6C97FDBC5B}D:\wotcik\wotlauncher.exe] => (Allow) D:\wotcik\wotlauncher.exe
FirewallRules: [UDP Query User{90930B5B-A9CA-43AC-A1E5-548208A5069B}D:\wotcik\wotlauncher.exe] => (Allow) D:\wotcik\wotlauncher.exe
FirewallRules: [TCP Query User{17855705-41F9-4F49-9225-ADF0F53921A6}D:\wotcik\worldoftanks.exe] => (Allow) D:\wotcik\worldoftanks.exe
FirewallRules: [UDP Query User{8E738758-E17E-48C5-AB98-4C373F5A4A19}D:\wotcik\worldoftanks.exe] => (Allow) D:\wotcik\worldoftanks.exe
FirewallRules: [{613EB5DA-88CA-4B1A-B56F-569D21B5853D}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [TCP Query User{0113E1A5-962B-4DD6-85E4-93760D21A304}C:\users\mati\appdata\local\temp\a0b8.tmpxl\download\minithunderplatform.exe] => (Block) C:\users\mati\appdata\local\temp\a0b8.tmpxl\download\minithunderplatform.exe
FirewallRules: [UDP Query User{CD49A9BC-C9ED-4373-8614-BD9C23721639}C:\users\mati\appdata\local\temp\a0b8.tmpxl\download\minithunderplatform.exe] => (Block) C:\users\mati\appdata\local\temp\a0b8.tmpxl\download\minithunderplatform.exe
FirewallRules: [{714CFEB4-D0B0-4F9D-9BF3-9F97B8890FA3}] => (Allow) C:\WINDOWS\system32\rundll32.exe
FirewallRules: [TCP Query User{81FD4A61-A0F4-482C-99A9-8518360F72BE}D:\forest\the forest\theforest.exe] => (Allow) D:\forest\the forest\theforest.exe
FirewallRules: [UDP Query User{34E1E431-6CF6-4C84-A5E4-317294688D8C}D:\forest\the forest\theforest.exe] => (Allow) D:\forest\the forest\theforest.exe
FirewallRules: [{98E7938E-9280-4BE3-8D33-A10268A8732D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{A024911D-58D4-43BA-9812-C2645CC8BC15}] => (Allow) C:\Windows\System32\rundll32.exe
FirewallRules: [{8A4E67CE-B698-40F4-8D19-E885AE38CA39}] => (Allow) C:\Windows\System32\rundll32.exe

==================== Punkty Przywracania systemu =========================

12-12-2017 19:34:07 Windows Update

==================== Wadliwe urządzenia w Menedżerze urządzeń =============


==================== Błędy w Dzienniku zdarzeń: =========================

Dziennik Aplikacja:
==================

Dziennik System:
=============
Error: (12/14/2017 05:28:47 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: ZARZĄDZANIE NT)
Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x80073d02: 9WZDNCRFJBH4-Microsoft.Windows.Photos.

Error: (12/14/2017 05:18:11 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Usługa Optymalizacja dostarczania zawiesiła się podczas uruchamiania.

Error: (12/14/2017 05:14:07 PM) (Source: BTHUSB) (EventID: 17) (User: )
Description: W lokalnym adapterze Bluetooth wystąpił nieokreślony błąd. Adapter nie będzie używany. Sterownik został usunięty z pamięci.

Error: (12/14/2017 05:13:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi CldFlt z powodu następującego błędu: 
Żądanie nie jest obsługiwane.

Error: (12/14/2017 04:57:35 PM) (Source: DCOM) (EventID: 10016) (User: ZARZĄDZANIE NT)
Description: Zgodnie z ustawieniami uprawnienia właściwe dla aplikacji nie jest udzielane uprawnienie Lokalny Aktywacja do aplikacji serwera COM z identyfikatorem klasy CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 i identyfikatorem aplikacji APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 użytkownikowi ZARZĄDZANIE NT\SYSTEM o identyfikatorze zabezpieczeń SID (S-1-5-18) z adresu LocalHost (użycie LRPC) działającemu w kontenerze aplikacji o identyfikatorze SID Niedostępny (Niedostępny). To uprawnienie zabezpieczeń można modyfikować przy użyciu narzędzia administracyjnego Usługi składowe.

Error: (12/13/2017 10:39:46 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (12/13/2017 06:56:09 PM) (Source: BTHUSB) (EventID: 17) (User: )
Description: W lokalnym adapterze Bluetooth wystąpił nieokreślony błąd. Adapter nie będzie używany. Sterownik został usunięty z pamięci.

Error: (12/13/2017 06:55:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi CldFlt z powodu następującego błędu: 
Żądanie nie jest obsługiwane.


CodeIntegrity:
===================================
  Date: 2017-12-13 19:50:37.730
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.17123-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_11a67240324f74de\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-12-13 19:50:36.959
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.17123-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-12-13 19:13:45.874
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-12-13 19:11:44.808
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.17123-0\Drivers\WdBoot.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-12-13 19:11:44.804
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.17123-0\Drivers\WdBoot.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Statystyki pamięci =========================== 

Procesor: Intel(R) Pentium(R) CPU 2117U @ 1.80GHz
Procent pamięci w użyciu: 82%
Całkowita pamięć fizyczna: 3981.68 MB
Dostępna pamięć fizyczna: 685.79 MB
Całkowita pamięć wirtualna: 7949.68 MB
Dostępna pamięć wirtualna: 3412.45 MB

==================== Dyski ================================

Drive c: () (Fixed) (Total:237.71 GB) (Free:150.3 GB) NTFS
Drive d: (Dysk) (Fixed) (Total:227.19 GB) (Free:128.85 GB) NTFS

==================== MBR & Tablica partycji ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 1B68CC60)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=237.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=785 MB) - (Type=27)
Partition 4: (Not Active) - (Size=227.2 GB) - (Type=07 NTFS)

==================== Koniec  Addition.txt ============================