Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 14.03.2018 Uruchomiony przez Kratos (31-03-2018 22:15:24) Uruchomiony z C:\Users\Kratos\Desktop\Nowy folder Windows 7 Home Premium Service Pack 1 (X64) (2015-05-25 09:43:38) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-4166491339-2414778801-2949013589-500 - Administrator - Disabled) Gość (S-1-5-21-4166491339-2414778801-2949013589-501 - Limited - Disabled) Kratos (S-1-5-21-4166491339-2414778801-2949013589-1000 - Administrator - Enabled) => C:\Users\Kratos ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Norton Security (Enabled - Up to date) {E3FDBD9F-8140-1400-F32B-8B58923F7C4D} AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96} AS: Norton Security (Enabled - Up to date) {589C5C7B-A77A-1B8E-C99B-B02AE9B836F0} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Norton Security (Enabled) {DBC63CBA-CB2F-1558-D874-226D6CEC3B36} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) µTorrent (HKU\S-1-5-21-4166491339-2414778801-2949013589-1000\...\uTorrent) (Version: 3.5.3.44366 - BitTorrent Inc.) 64 Bit HP CIO Components Installer (HKLM\...\{BE930E38-7BB3-45B6-85B2-5251F374F844}) (Version: 6.2.2 - Hewlett-Packard) Hidden 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 18.011.20038 - Adobe Systems Incorporated) Adobe Flash Player 29 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 29.0.0.113 - Adobe Systems Incorporated) Adobe Flash Player 29 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 29.0.0.113 - Adobe Systems Incorporated) AIDA64 Extreme v5.20 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 5.20 - FinalWire Ltd.) AIMP3 (HKLM-x32\...\AIMP3) (Version: v3.60.1492, 24.04.2015 - AIMP DevTeam) Ashampoo Burning Studio 15 v.15.0.4 (HKLM-x32\...\{91B33C97-5B38-0A92-D04A-A0F26F3F87D4}_is1) (Version: 15.0.4 - Ashampoo GmbH & Co. KG) Ashampoo WinOptimizer 15 (HKLM-x32\...\{4209F371-C86E-DC46-5245-9E069261137B}_is1) (Version: 15.00.04 - Ashampoo GmbH & Co. KG) Aslain's WoT Modpack (wersja 1.0.0.1.00) (HKLM-x32\...\Aslains_WoT_Modpack_Installer_is1) (Version: 1.0.0.1.00 - Aslain) Battlefield: Bad Company™ 2 (HKLM-x32\...\{3AC8457C-0385-4BEA-A959-E095F05D6D67}) (Version: 1.0.0.0 - Electronic Arts) BufferChm (HKLM-x32\...\{FA0FF682-CC70-4C57-93CD-E276F3E7537E}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden Call of Duty(R) 4 - Modern Warfare(TM) (HKLM-x32\...\{E48469CC-635E-4FD5-A122-1497C286D217}) (Version: 1.00.0000 - Licomp EMPiK Multimedia) Hidden Call of Duty(R) 4 - Modern Warfare(TM) (HKLM-x32\...\InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}) (Version: 1.7 - Licomp EMPiK Multimedia) Call of Duty(R) 4 - Modern Warfare(TM) 1.1 Patch (HKLM-x32\...\{5D7767FA-7FE8-4627-9F09-AEF7A25F1E07}) (Version: 1.1 - Activision) Hidden Call of Duty(R) 4 - Modern Warfare(TM) 1.1 Patch (HKLM-x32\...\InstallShield_{5D7767FA-7FE8-4627-9F09-AEF7A25F1E07}) (Version: - ) Hidden Call of Duty(R) 4 - Modern Warfare(TM) 1.2 Patch (HKLM-x32\...\{E5141379-B2D9-4BBC-BB2A-5805541571DD}) (Version: 1.2 - Activision) Hidden Call of Duty(R) 4 - Modern Warfare(TM) 1.2 Patch (HKLM-x32\...\InstallShield_{E5141379-B2D9-4BBC-BB2A-5805541571DD}) (Version: - ) Hidden Call of Duty(R) 4 - Modern Warfare(TM) 1.3 Patch (HKLM-x32\...\{050C1C8E-4A4D-4C2F-B9AE-67E60EE91B7F}) (Version: 1.3 - Activision) Hidden Call of Duty(R) 4 - Modern Warfare(TM) 1.3 Patch (HKLM-x32\...\InstallShield_{050C1C8E-4A4D-4C2F-B9AE-67E60EE91B7F}) (Version: - ) Hidden Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch (HKLM-x32\...\{3BD633E0-4BF8-4499-9149-88F0767D449C}) (Version: 1.4 - Activision) Hidden Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch (HKLM-x32\...\InstallShield_{3BD633E0-4BF8-4499-9149-88F0767D449C}) (Version: - ) Hidden Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Multiplayer Patch (HKLM-x32\...\InstallShield_{8503C901-85D7-4262-88D2-8D8B2A7B08B8}) (Version: - ) Hidden Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Patch (HKLM-x32\...\{8503C901-85D7-4262-88D2-8D8B2A7B08B8}) (Version: 1.5 - Activision) Hidden Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (HKLM-x32\...\{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}) (Version: 1.6 - Activision) Hidden Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (HKLM-x32\...\InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}) (Version: - ) Hidden Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (HKLM-x32\...\{931C37FC-594D-43A9-B10F-A2F2B1F03498}) (Version: 1.7 - Activision) Hidden Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (HKLM-x32\...\InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}) (Version: - ) Hidden Copy (HKLM-x32\...\{9BE466FF-70B7-4DA8-807C-DB4C3610FDAA}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden Destinations (HKLM-x32\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 140.0.77.000 - Hewlett-Packard) Hidden DeviceDiscovery (HKLM-x32\...\{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 391.24 - NVIDIA Corporation) Hidden DJ_AIO_06_K209a-z_SW_Min (HKLM-x32\...\{0A50CB27-D2D5-4B7D-A001-30B1782A450B}) (Version: 140.0.690.000 - Hewlett-Packard) Hidden Dying Light: The Following - Enhanced Edition (HKLM\...\ZHlpbmdsaWdodHRoZWZvbGxvd2luZ2VuaGFuY2VkZWRpdGlvbg_is1) (Version: 1 - ) Exact Audio Copy 1.3 (HKLM-x32\...\Exact Audio Copy) (Version: 1.3 - Andre Wiethoff) Far Cry 4 (HKLM-x32\...\RmFyQ3J5NA==_is1) (Version: 1 - ) foobar2000 v1.3.15 (HKLM-x32\...\foobar2000) (Version: 1.3.15 - Peter Pawlowski) GPBaseService2 (HKLM-x32\...\{BB3447F6-9553-4AA9-960E-0DB5310C5779}) (Version: 140.0.211.000 - Hewlett-Packard) Hidden HD Audio PCI-e Audio Device (HKLM-x32\...\{0B43B885-9188-404F-8D1B-56EAB075EB59}) (Version: 1.0.0.0 - ) HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP) HP Deskjet Ink Advant K209a-z All-in-One Driver Software 14.0 Rel. 6 (HKLM\...\{6051912A-F7B8-445C-A99D-81AA4C118836}) (Version: 14.0 - HP) HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP) HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP) HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPPhotoGadget (HKLM-x32\...\{CAE4213F-F797-439D-BD9E-79B71D115BE3}) (Version: 140.0.524.000 - Hewlett-Packard) Hidden HPProductAssistant (HKLM-x32\...\{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden HPSSupply (HKLM-x32\...\{AC35A885-0F8F-4857-B7DA-6E8DFB43E6B3}) (Version: 140.0.211.000 - Hewlett-Packard) Hidden Informacje o systemie Creative (HKLM-x32\...\SysInfo) (Version: 1.10 - Creative Technology Limited) JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH) K209a-z (HKLM-x32\...\{5A3ECDDA-562C-4281-BFE5-A4C8F32EACA3}) (Version: 140.0.690.000 - Hewlett-Packard) Hidden Komunikator WTW 1.24.0.4848 (HKLM\...\{1DF5019A-68B5-4ba1-8E59-E185C7B7FF11}) (Version: 1.24.0.4848 - K2T.eu) Light Alloy 4.8.8 (build 2038) (HKLM-x32\...\Light Alloy) (Version: 4.8.8 (build 2038) - ) Logitech Gaming Software 8.94 (HKLM\...\Logitech Gaming Software) (Version: 8.94.108 - Logitech Inc.) Malwarebytes (wersja 3.4.5.2467) (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.4.5.2467 - Malwarebytes) MarketResearch (HKLM-x32\...\{D360FA88-17C8-4F14-B67F-13AAF9607B12}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden Medieval CUE Splitter (HKLM-x32\...\{B96D2269-568B-4CBF-9332-12FAE8B158F7}) (Version: 1.2.0 - Medieval Software) Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{D1B01DC9-CBAF-45F9-A387-7D00C11B630E}) (Version: 1.2.0238 - Microsoft Corporation) Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Mozilla Firefox 59.0.2 (x64 en-US) (HKLM\...\Mozilla Firefox 59.0.2 (x64 en-US)) (Version: 59.0.2 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 56.0.2 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) NapiProjekt (2.2.0.2399) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) Norton Security (HKLM-x32\...\NGC) (Version: 22.12.1.15 - Symantec Corporation) Norton Security Scan (HKLM-x32\...\NSS) (Version: 4.6.1.103 - Symantec Corporation) NVIDIA Oprogramowanie systemu PhysX 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation) NVIDIA Sterownik 3D Vision 391.24 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 391.24 - NVIDIA Corporation) NVIDIA Sterownik dźwięku HD 1.3.36.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.36.6 - NVIDIA Corporation) NVIDIA Sterownik graficzny 391.24 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 391.24 - NVIDIA Corporation) NVIDIA Sterownik kontrolera 3D Vision 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Origin (HKLM-x32\...\Origin) (Version: 10.5.15.44004 - Electronic Arts, Inc.) Panel sterowania NVIDIA 391.24 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 391.24 - NVIDIA Corporation) Hidden PowerISO (HKLM-x32\...\PowerISO) (Version: 6.2 - Power Software Ltd) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.988 - Even Balance, Inc.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.103.1007.2016 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8036 - Realtek Semiconductor Corp.) Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.30.0 - Renesas Electronics Corporation) Hidden Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.30.0 - Renesas Electronics Corporation) Scan (HKLM-x32\...\{06A1D88C-E102-4527-AF70-29FFD7AF215A}) (Version: 140.0.80.000 - Hewlett-Packard) Hidden Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP) Smart Technology Programming Software 7.0.27.13 (HKLM\...\{BD90BC1C-115D-47E1-B85C-07AE182C3AB8}) (Version: 7.0.27.13 - Mad Catz) SmartWebPrinting (HKLM-x32\...\{8FF6F5CA-4E30-4E3B-B951-204CAAA2716A}) (Version: 140.0.186.000 - Hewlett-Packard) Hidden SolutionCenter (HKLM-x32\...\{5DCF0E4B-F8EA-4229-A0BD-5CA6D4AFB749}) (Version: 140.0.213.000 - Hewlett-Packard) Hidden Sound Blaster Tactic(3D) Sigma (HKLM-x32\...\{93CFCA51-4484-4211-89EB-39ED3CBDBEB1}) (Version: 1.0 - Creative Technology Limited) Status (HKLM-x32\...\{2FB9EA69-51D4-4913-9AD5-762C034DE811}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Subtitle Edit 3.4.6 (HKLM-x32\...\SubtitleEdit_is1) (Version: 3.4.6.544 - Nikse) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) Titanfall™ 2 (HKLM-x32\...\{4BD80373-FEE7-45B6-8249-6E8E98717405}) (Version: 1.0.1.3 - Electronic Arts, Inc.) Tom Clancy's The Division (HKLM-x32\...\Uplay Install 568) (Version: - Ubisoft) Tom Clancy's The Division PTS (HKLM-x32\...\Uplay Install 3502) (Version: - Ubisoft) Tomb Raider GOTY Edition (HKLM-x32\...\Tomb Raider GOTY Edition_is1) (Version: - ) Toolbox (HKLM-x32\...\{292F0F52-B62D-4E71-921B-89A682402201}) (Version: 140.0.428.000 - Hewlett-Packard) Hidden TrayApp (HKLM-x32\...\{CD31E63D-47FD-491C-8117-CF201D0AFAB5}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden UltraISO Premium V9.66 (HKLM-x32\...\UltraISO_is1) (Version: - ) Uplay (HKLM-x32\...\Uplay) (Version: 17.1 - Ubisoft) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden WebReg (HKLM-x32\...\{8EE94FD8-5F52-4463-A340-185D16328158}) (Version: 140.0.212.017 - Hewlett-Packard) Hidden WinRAR 5.20 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH) World of Tanks (HKU\S-1-5-21-4166491339-2414778801-2949013589-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812eu}_is1) (Version: - Wargaming.net) XnView 2.32 (HKLM-x32\...\XnView_is1) (Version: 2.32 - Gougelet Pierre-e) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton 360\Engine\22.12.1.15\buShell.dll [2018-03-02] (Symantec Corporation) ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton 360\Engine\22.12.1.15\buShell.dll [2018-03-02] (Symantec Corporation) ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton 360\Engine\22.12.1.15\buShell.dll [2018-03-02] (Symantec Corporation) ShellIconOverlayIdentifiers-x32: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton 360\Engine\22.12.1.15\buShell.dll [2018-03-02] (Symantec Corporation) ShellIconOverlayIdentifiers-x32: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton 360\Engine\22.12.1.15\buShell.dll [2018-03-02] (Symantec Corporation) ShellIconOverlayIdentifiers-x32: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton 360\Engine\22.12.1.15\buShell.dll [2018-03-02] (Symantec Corporation) ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) ContextMenuHandlers1: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files (x86)\AIMP3\System\aimp_menu64.dll [2015-05-26] (AIMP DevTeam) ContextMenuHandlers1: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton 360\Engine\22.12.1.15\buShell.dll [2018-03-02] (Symantec Corporation) ContextMenuHandlers1: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2015-02-28] (Power Software Ltd) ContextMenuHandlers1: [Symantec.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton 360\Engine\22.12.1.15\NavShExt.dll [2018-03-02] (Symantec Corporation) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2014-12-10] (Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2014-12-10] (Alexander Roshal) ContextMenuHandlers2: [Symantec.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton 360\Engine\22.12.1.15\NavShExt.dll [2018-03-02] (Symantec Corporation) ContextMenuHandlers2: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2015-10-08] (EZB Systems, Inc.) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-03-27] (Malwarebytes) ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) ContextMenuHandlers4: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files (x86)\AIMP3\System\aimp_menu64.dll [2015-05-26] (AIMP DevTeam) ContextMenuHandlers4: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2015-02-28] (Power Software Ltd) ContextMenuHandlers4: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2015-10-08] (EZB Systems, Inc.) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2018-03-16] (NVIDIA Corporation) ContextMenuHandlers6: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton 360\Engine\22.12.1.15\buShell.dll [2018-03-02] (Symantec Corporation) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-03-27] (Malwarebytes) ContextMenuHandlers6: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2015-02-28] (Power Software Ltd) ContextMenuHandlers6: [Symantec.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton 360\Engine\22.12.1.15\NavShExt.dll [2018-03-02] (Symantec Corporation) ContextMenuHandlers6: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2015-10-08] (EZB Systems, Inc.) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2014-12-10] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2014-12-10] (Alexander Roshal) ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {09CE0412-E8CA-43FC-810D-39B4174F6132} - System32\Tasks\Norton 360\Norton 360 Error Processor => C:\Program Files\Norton 360\Engine\22.12.0.104\SymErr.exe Task: {35FB3C7C-6B88-4BD1-AD6C-3949124342A1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-02-09] (Adobe Systems Incorporated) Task: {46006227-3E8B-4518-998D-5653F3C80359} - System32\Tasks\Norton Security Scan for Kratos => C:\Program Files (x86)\Norton Security Scan\Engine\4.6.1.103\Nss.exe [2017-06-10] (Symantec Corporation) Task: {75009AC3-1D27-48AF-895C-83F57201EA45} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton 360\Engine\22.12.1.15\WSCStub.exe [2018-03-02] (Symantec Corporation) Task: {8BA933CE-A880-4286-B5CE-C4A5D909C800} - System32\Tasks\Norton 360\Norton 360 Error Analyzer => C:\Program Files\Norton 360\Engine\22.12.0.104\SymErr.exe Task: {A6185499-8441-447C-8952-9BE79AFC178E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-03-13] (Adobe Systems Incorporated) Task: {A8ECC356-6E88-492F-BE71-5873B68A3C87} - System32\Tasks\One-Click Optimizer - Ashampoo WinOptimizer => C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 15\WO15.exe [2017-07-12] (Ashampoo Development GmbH & Co. KG) Task: {BEE2AC58-FC3D-4F1C-8E31-07046A0310F7} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Security\Upgrade.exe [2018-03-02] (Symantec Corporation) Task: {D0EE987E-BD0A-4C32-B1AB-D968C6162439} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_29_0_0_113_Plugin.exe [2018-03-13] (Adobe Systems Incorporated) Task: {D6D9AEE0-7B4F-4A8C-8F30-DF135C4EBCCC} - System32\Tasks\Norton Security with Backup\Norton Security Error Analyzer => C:\Program Files\Norton 360\Engine\22.12.1.15\SymErr.exe [2018-03-02] (Symantec Corporation) Task: {FA65F31F-49DF-41E1-B696-ADE96515E3A0} - System32\Tasks\Norton Security with Backup\Norton Security Error Processor => C:\Program Files\Norton 360\Engine\22.12.1.15\SymErr.exe [2018-03-02] (Symantec Corporation) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\One-Click Optimizer - Ashampoo WinOptimizer.job => C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 15\WO15.exe ==================== Skróty & WMI ======================== (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) Shortcut: C:\Users\Kratos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\K2T\WTW\Forum.lnk -> hxxp://forum.k2t.eu Shortcut: C:\Users\Kratos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\K2T\WTW\Zgłoś błąd.lnk -> hxxp://bugtraq.k2t.eu Shortcut: C:\Users\Kratos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\K2T\WTW\Zgłoś propozycję.lnk -> hxxp://bugtraq.k2t.eu ==================== Załadowane moduły (filtrowane) ============== 2018-03-22 17:13 - 2018-03-16 02:17 - 000544384 _____ () C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\DisplayDriverAnalyzer\_DisplayDriverCrashAnalyzer64.dll 2017-01-25 22:06 - 2018-03-16 00:40 - 000135136 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2017-04-20 10:58 - 2013-04-25 06:16 - 000286720 ____N () C:\Windows\system\GfsMgr64.exe 2017-04-20 10:58 - 2013-04-25 06:16 - 000204800 ____N () C:\Windows\SysWOW64\GfsMgr.exe 2017-04-20 10:58 - 2011-02-25 11:07 - 000204800 ____N () C:\Windows\SysWOW64\ExMgr.exe 2015-07-09 12:19 - 2018-02-23 14:05 - 000076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2018-01-31 16:33 - 2017-07-12 09:40 - 000250784 _____ () C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 15\LiveTunerService.exe 2018-03-31 14:28 - 2018-03-12 15:09 - 002300192 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll 2018-03-31 14:28 - 2018-03-27 13:47 - 002492704 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll 2014-02-28 11:14 - 2018-02-16 16:52 - 000174744 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll 2017-01-19 18:15 - 2018-02-16 16:52 - 000020632 _____ () C:\Program Files\TeamSpeak 3 Client\libEGL.DLL 2017-01-19 18:15 - 2018-02-16 16:52 - 001981592 _____ () C:\Program Files\TeamSpeak 3 Client\libGLESv2.dll 2014-08-04 15:43 - 2018-02-16 16:52 - 000125592 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll 2014-08-04 15:43 - 2018-02-16 16:52 - 000150680 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll 2017-03-26 19:56 - 2017-07-21 19:37 - 000345880 _____ () C:\Users\Kratos\AppData\Roaming\TS3Client\plugins\clientquery_plugin_win64.dll 2017-02-15 21:13 - 2017-07-20 20:18 - 000157696 _____ () C:\Users\Kratos\AppData\Roaming\TS3Client\plugins\gamepad_joystick_win64.dll 2017-06-06 11:12 - 2017-07-20 20:18 - 000012288 _____ () C:\Users\Kratos\AppData\Roaming\TS3Client\plugins\gamepad_joystick\api_stub.dll 2017-04-20 10:58 - 2013-05-16 03:18 - 000090112 ____N () C:\Windows\SysWOW64\ExSrv.dll 2016-03-01 16:42 - 2017-07-16 18:17 - 068505088 _____ () E:\Uplay\Ubisoft Game Launcher\libcef.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Powiązania plików (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Hosts - zawartość: =============================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 000000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-4166491339-2414778801-2949013589-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Kratos\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [{9C74708B-79B8-4786-9D6F-6D554A01893D}] => (Allow) D:\Program Files\Steam\Steam.exe FirewallRules: [{5C11502D-525E-4C15-A405-8038482C2A97}] => (Allow) D:\Program Files\Steam\Steam.exe FirewallRules: [{DA1B5FCA-D845-4FE3-A1D6-3199B3757227}] => (Allow) D:\Program Files\Steam\bin\steamwebhelper.exe FirewallRules: [{36157478-2344-437B-8BDB-6B5AAD4BC6AF}] => (Allow) D:\Program Files\Steam\bin\steamwebhelper.exe FirewallRules: [{B18C21D2-9E24-40C3-BD22-CD15175B9447}] => (Allow) C:\Program Files (x86)\NapiProjekt\napisy.exe FirewallRules: [{EAFC2B29-E380-4DE5-8F81-661DE106E5E9}] => (Allow) C:\Program Files (x86)\NapiProjekt\napisy.exe FirewallRules: [{805E7360-436C-4CD1-B178-9C9D3F2A7366}] => (Allow) C:\Users\Kratos\AppData\Local\K2T.eu\WTW\wtw.exe FirewallRules: [{C313C694-F763-4F5F-A3E0-54A1972396CB}] => (Allow) C:\Users\Kratos\AppData\Local\K2T.eu\WTW\wtw.exe FirewallRules: [TCP Query User{F002CC61-E5FA-448A-A43C-A94B2EBA4E0C}D:\program files\dying light\dying light\dyinglightgame.exe] => (Block) D:\program files\dying light\dying light\dyinglightgame.exe FirewallRules: [UDP Query User{46E92765-23D2-4525-AC0E-B253E647D740}D:\program files\dying light\dying light\dyinglightgame.exe] => (Block) D:\program files\dying light\dying light\dyinglightgame.exe FirewallRules: [{83CA0F63-CBED-44D6-8C5F-DC596D8652B3}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe FirewallRules: [{71970A01-FA9B-4C05-8A98-AA834E29E055}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe FirewallRules: [{B8326799-DAFF-456B-8A88-10874844B0F1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe FirewallRules: [{A6AE2E37-4592-476A-BDF1-E72CF96F59EC}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe FirewallRules: [{DE32D8B7-BF8D-438C-9CEB-B5A7058B79D8}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe FirewallRules: [{BB9DEE69-3AEC-4592-B1D5-C644C7B7972A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe FirewallRules: [{B4F8D899-C666-4E94-8C4F-5743B2D3A0F1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe FirewallRules: [{D6442326-C350-4EDB-AF93-8AD89E429DAF}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe FirewallRules: [{FEB0E5A5-DA38-4E17-BE2C-0C9B99FB23F6}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe FirewallRules: [{E860AD5F-E4E5-4197-8664-EBCCCF2B740F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe FirewallRules: [{58D932D7-E74D-407D-AF2E-1B2B85EB7B87}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe FirewallRules: [{2E2EF729-38FE-451C-85A8-CD9FD3AA2372}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe FirewallRules: [{085812E0-1CF5-47FC-83D2-8CD9BDE0C988}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe FirewallRules: [{695D11DA-4E9B-4113-B595-B5E90957843D}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe FirewallRules: [TCP Query User{400149E8-F077-497C-A55F-E7BCBB524E26}C:\gry\world of tanks\worldoftanks.exe] => (Allow) C:\gry\world of tanks\worldoftanks.exe FirewallRules: [UDP Query User{3C6943E8-BA19-4903-9EFC-D933CA3651B5}C:\gry\world of tanks\worldoftanks.exe] => (Allow) C:\gry\world of tanks\worldoftanks.exe FirewallRules: [TCP Query User{41D25861-DB06-4ADE-B3EA-46323FA55267}C:\gry\world of tanks\wotlauncher.exe] => (Allow) C:\gry\world of tanks\wotlauncher.exe FirewallRules: [UDP Query User{601F87E0-A86A-450D-8AF6-E41D1E991F5F}C:\gry\world of tanks\wotlauncher.exe] => (Allow) C:\gry\world of tanks\wotlauncher.exe FirewallRules: [{5C7624C0-07E6-4E3A-88FA-85E9729F77B2}] => (Allow) D:\Steam\Steam.exe FirewallRules: [{384931EB-722E-47CC-A08C-6AAB2B934D4A}] => (Allow) D:\Steam\Steam.exe FirewallRules: [{4D1199CE-F81B-47C2-B321-7A308206E6F8}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe FirewallRules: [{6F52C765-AD7B-400C-88C7-0EB315B9401F}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe FirewallRules: [{DE5284BF-1E64-4F7C-8255-8EBAD22D4591}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe FirewallRules: [{E6EB1B42-2906-4FEE-A8B3-0FE027F16CD9}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe FirewallRules: [{10E04077-37DD-4E0C-9CB6-EB606029DCA8}] => (Allow) D:\Steam\steamapps\common\Rise of the Tomb Raider\ROTTR.exe FirewallRules: [{723BD70C-F7AC-4B6E-8564-C92BC3CB552B}] => (Allow) D:\Steam\steamapps\common\Rise of the Tomb Raider\ROTTR.exe FirewallRules: [{17BC263D-B2CB-4420-AEA1-0DA25122A412}] => (Allow) C:\Users\Kratos\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{37B492C5-48EF-4C97-81CA-47EA3A5298CA}] => (Allow) C:\Users\Kratos\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{1CC72DF7-181A-4E7B-A897-5448E82AE5E7}] => (Allow) D:\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe FirewallRules: [{FDDD3B42-9650-4B91-9E9A-80D3BC4D4CD3}] => (Allow) D:\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe FirewallRules: [{C9CBC642-4C0B-4D96-92A3-5ECE6DC16BAC}] => (Allow) D:\Steam\steamapps\common\Call of Duty - Infinite Warfare\iw7_ship.exe FirewallRules: [{9C727103-25EA-41BB-A73C-C13AC971DE95}] => (Allow) D:\Steam\steamapps\common\Call of Duty - Infinite Warfare\iw7_ship.exe FirewallRules: [{5D72CE90-B03E-48BE-8C75-7592F13978F1}] => (Allow) D:\Steam\steamapps\common\Call of Duty Modern Warfare Remastered\h1_mp64_ship.exe FirewallRules: [{CE23DBE5-4EF1-4C08-8167-133B97E5DA5A}] => (Allow) D:\Steam\steamapps\common\Call of Duty Modern Warfare Remastered\h1_mp64_ship.exe FirewallRules: [{5730F09F-6378-4BCD-9A08-284A17A44B9B}] => (Allow) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{48E43FF4-93DA-4B9E-8322-9B5504D3E61F}] => (Allow) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{A8390CB7-B0F2-4F07-A31B-9240D9F937F8}] => (Allow) E:\Steam\Steam.exe FirewallRules: [{9E86FC2D-350A-4B50-A04E-364CC25DBF4C}] => (Allow) E:\Steam\Steam.exe FirewallRules: [{97ADAC9F-EE3A-4E93-8BC4-E55B33FE0AB0}] => (Allow) E:\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe FirewallRules: [{032646B8-37B1-4AEF-B54A-811EE733855E}] => (Allow) E:\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe FirewallRules: [{B167842F-AE5D-4852-8B01-81CB5D852F8E}] => (Allow) E:\Steam\steamapps\common\Rise of the Tomb Raider\ROTTR.exe FirewallRules: [{2224B680-CFC4-4CEC-9089-A349FBCB332B}] => (Allow) E:\Steam\steamapps\common\Rise of the Tomb Raider\ROTTR.exe FirewallRules: [{6B3E35E5-CDE6-4100-A381-576A8B82F911}] => (Allow) E:\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{78CE8DCE-AD3D-4204-B533-C3E5CC7A45A4}] => (Allow) E:\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{632B8AC4-3FA4-4ECE-834B-3CDB6BDB2D76}] => (Allow) E:\Steam\steamapps\common\Call of Duty Modern Warfare Remastered\h1_mp64_ship.exe FirewallRules: [{1263186C-2F56-4BD9-BE6B-E217A055D18D}] => (Allow) E:\Steam\steamapps\common\Call of Duty Modern Warfare Remastered\h1_mp64_ship.exe FirewallRules: [{CC9DE712-6878-4498-AC57-496D94354F33}] => (Allow) E:\Uplay\Ubisoft Game Launcher\games\Tom Clancy's The Division\TheDivision.exe FirewallRules: [{C3C22F6D-04CC-4AEE-8EAC-2C21389B9B29}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{2911FDFE-942A-4569-96E3-24F3AFD2D2AC}] => (Allow) E:\Program Files\Bf bc2\BFBC2Updater.exe FirewallRules: [{802B229B-E6E2-4C0F-A382-CC0BAEBFE59C}] => (Allow) E:\Program Files\Bf bc2\BFBC2Updater.exe FirewallRules: [{992037D1-0AEE-4928-96E6-BD9D97C0FE92}] => (Allow) E:\Program Files (x86)\Origin Games\Titanfall2\Titanfall2.exe FirewallRules: [{BC07FDDB-803D-41FF-B211-C8EE29465664}] => (Allow) E:\Program Files (x86)\Origin Games\Titanfall2\Titanfall2.exe FirewallRules: [{B6C95954-8ABB-469A-BFDB-8D5CF9C88E8D}] => (Allow) E:\Program Files (x86)\Origin Games\Titanfall2\Titanfall2_trial.exe FirewallRules: [{336CDE14-985C-4444-B237-C9A1D42C12B1}] => (Allow) E:\Program Files (x86)\Origin Games\Titanfall2\Titanfall2_trial.exe FirewallRules: [{C701493C-1CA2-49D2-B4A1-13A95364C44E}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{6B91C229-0625-47A7-AF3E-755B47272C1C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{851B38B1-9CCA-42B4-979F-7E50D15E7563}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{8999A250-F012-4500-90A4-AAF0B38F7EA9}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{9865CB51-8597-4135-9CC0-50BE827B9797}] => (Allow) E:\Program Files\cod4\iw3mp.exe FirewallRules: [{3DCD96FC-6EB6-4710-81AD-6E7E5BBE078D}] => (Allow) E:\Program Files\cod4\iw3mp.exe ==================== Punkty Przywracania systemu ========================= UWAGA: Przywracanie systemu jest wyłączone ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= Name: WAN Miniport (IPv6) Description: WAN Miniport (IPv6) Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: NdisWan Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver Name: Miniport WAN (PPPOE) Description: Miniport WAN (PPPOE) Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: RasPppoe Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver Name: Miniport WAN (PPTP) Description: Miniport WAN (PPTP) Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: PptpMiniport Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver Name: WAN Miniport (SSTP) Description: WAN Miniport (SSTP) Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: RasSstp Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver Name: Karta Microsoft ISATAP Description: Karta Microsoft ISATAP Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver Name: WAN Miniport (IKEv2) Description: WAN Miniport (IKEv2) Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: RasAgileVpn Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver Name: Miniport WAN (L2TP) Description: Miniport WAN (L2TP) Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: Rasl2tp Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver Name: Karta tunelowania Teredo firmy Microsoft Description: Karta tunelowania Teredo firmy Microsoft Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver Name: Realtek High Definition Audio Description: Realtek High Definition Audio Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318} Manufacturer: Realtek Service: IntcAzAudAddService Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: WAN Miniport (Network Monitor) Description: WAN Miniport (Network Monitor) Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: NdisWan Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver Name: WAN Miniport (IP) Description: WAN Miniport (IP) Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: NdisWan Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (03/31/2018 08:15:35 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: FaceLift_x64.exe, wersja: 1.0.0.6, sygnatura czasowa: 0x5268e71c Nazwa modułu powodującego błąd: osConfLib.dll, wersja: 1.5.0.21, sygnatura czasowa: 0x525b930b Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000000000001066b Identyfikator procesu powodującego błąd: 0xea0 Godzina uruchomienia aplikacji powodującej błąd: 0x01d3c8eb1f30245d Ścieżka aplikacji powodującej błąd: C:\Program Files\HD Audio PCI-e Audio Device\CPL\FaceLift_x64.exe Ścieżka modułu powodującego błąd: C:\Program Files\HD Audio PCI-e Audio Device\CPL\Driver\x64\vista\osConfLib.dll Identyfikator raportu: 815b9f80-350f-11e8-be06-1c6f65d0a118 Error: (03/31/2018 02:25:26 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: ZARZĄDZANIE NT) Description: Nie można usunąć z pamięci ciągów licznika wydajności dla usługi WmiApRpl (WmiApRpl). Pierwszy wpis DWORD w sekcji danych (Data) zawiera kod błędu. Error: (03/31/2018 02:25:26 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: ZARZĄDZANIE NT) Description: Ciągi wydajności w wartości rejestru wydajności są uszkodzone, kiedy proces wykonuje następującą operację na dostawcy licznika rozszerzeń: Performance. Wartość BaseIndex z rejestru wydajności to pierwszy wpis DWORD w sekcji danych Data, wartość LastCounter to drugi wpis DWORD, a wartość LastHelp to trzeci wpis DWORD w sekcji Data. Error: (03/31/2018 02:25:26 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: ZARZĄDZANIE NT) Description: Ciągi wydajności w wartości rejestru wydajności są uszkodzone, kiedy proces wykonuje następującą operację na dostawcy licznika rozszerzeń: Performance. Wartość BaseIndex z rejestru wydajności to pierwszy wpis DWORD w sekcji danych Data, wartość LastCounter to drugi wpis DWORD, a wartość LastHelp to trzeci wpis DWORD w sekcji Data. Error: (03/31/2018 02:19:55 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (03/31/2018 02:19:19 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: FaceLift_x64.exe, wersja: 1.0.0.6, sygnatura czasowa: 0x5268e71c Nazwa modułu powodującego błąd: osConfLib.dll, wersja: 1.5.0.21, sygnatura czasowa: 0x525b930b Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000000000001066b Identyfikator procesu powodującego błąd: 0x974 Godzina uruchomienia aplikacji powodującej błąd: 0x01d3c8ea7965db91 Ścieżka aplikacji powodującej błąd: C:\Program Files\HD Audio PCI-e Audio Device\CPL\FaceLift_x64.exe Ścieżka modułu powodującego błąd: C:\Program Files\HD Audio PCI-e Audio Device\CPL\Driver\x64\vista\osConfLib.dll Identyfikator raportu: bc3af57b-34dd-11e8-be06-1c6f65d0a118 Error: (03/31/2018 01:07:51 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: ZARZĄDZANIE NT) Description: Nie można usunąć z pamięci ciągów licznika wydajności dla usługi WmiApRpl (WmiApRpl). Pierwszy wpis DWORD w sekcji danych (Data) zawiera kod błędu. Error: (03/31/2018 01:07:51 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: ZARZĄDZANIE NT) Description: Ciągi wydajności w wartości rejestru wydajności są uszkodzone, kiedy proces wykonuje następującą operację na dostawcy licznika rozszerzeń: Performance. Wartość BaseIndex z rejestru wydajności to pierwszy wpis DWORD w sekcji danych Data, wartość LastCounter to drugi wpis DWORD, a wartość LastHelp to trzeci wpis DWORD w sekcji Data. Dziennik System: ============= Error: (03/31/2018 02:16:42 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Origin Web Helper Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (03/31/2018 02:16:42 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Ashampoo LiveTuner 2 Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (03/31/2018 02:16:42 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa PnkBstrA niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (03/31/2018 02:16:42 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa NVIDIA Telemetry Container niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 1000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (03/31/2018 02:16:42 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Logitech Gaming Registry Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (03/31/2018 02:16:42 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Adobe Acrobat Update Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (03/31/2018 02:16:42 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Creative Audio Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (03/31/2018 02:16:42 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa NVIDIA Display Container LS niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 1000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Windows Defender: =================================== Date: 2015-05-25 11:48:38.786 Description: Produkt Windows Defender napotkał błąd podczas próby załadowania podpisów i podejmie próbę powrotu do znanego zestawu dobrych podpisów. Podpisy objęte próbą:Bieżące Kod błędu:0x80070003 Opis błędu:System nie może odnaleźć określonej ścieżki. Wersja podpisu:0.0.0.0 Wersja aparatu:0.0.0.0 ==================== Statystyki pamięci =========================== Procesor: AMD Phenom(tm) II X4 970 Processor Procent pamięci w użyciu: 18% Całkowita pamięć fizyczna: 16381.55 MB Dostępna pamięć fizyczna: 13275.46 MB Całkowita pamięć wirtualna: 26619.74 MB Dostępna pamięć wirtualna: 23138.52 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:238.37 GB) (Free:168.88 GB) NTFS Drive e: (Nowy) (Fixed) (Total:495.07 GB) (Free:117.33 GB) NTFS Drive f: (Nowy) (Fixed) (Total:1367.95 GB) (Free:508.44 GB) NTFS \\?\Volume{178011bb-02c2-11e5-ae34-806e6f6e6963}\ (Zastrzeżone przez system) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: 35FE35FF) Partition 1: (Not Active) - (Size=1863 GB) - (Type=42) ======================================================== Disk: 1 (MBR Code: Windows 7/8/10) (Size: 238.5 GB) (Disk ID: AC92A088) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=238.4 GB) - (Type=07 NTFS) ==================== Koniec Addition.txt ============================