Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 15-02-2017 01
Uruchomiony przez cAst0r (15-02-2017 18:10:30)
Uruchomiony z F:\Download
Windows 7 Ultimate Service Pack 1 (X64) (2014-07-14 18:05:53)
Tryb startu: Normal
==========================================================


==================== Konta użytkowników: =============================

Administrator (S-1-5-21-1063044307-3804589971-3643545715-500 - Administrator - Disabled)
cAst0r (S-1-5-21-1063044307-3804589971-3643545715-1000 - Administrator - Enabled) => C:\Users\cAst0r
Gość (S-1-5-21-1063044307-3804589971-3643545715-501 - Limited - Disabled)

==================== Centrum zabezpieczeń ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie.)

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Zainstalowane programy ======================

(W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)

µTorrent (HKU\S-1-5-21-1063044307-3804589971-3643545715-1000\...\uTorrent) (Version: 3.4.2.32354 - BitTorrent Inc.)
ACA & MEP 2017 Object Enabler (Version: 7.9.45.0 - Autodesk) Hidden
ACAD Private (Version: 21.0.52.0 - Autodesk) Hidden
Ace Stream Media 3.1.6 (HKU\S-1-5-21-1063044307-3804589971-3643545715-1000\...\AceStream) (Version: 3.1.6 - Ace Stream Media) <==== UWAGA
Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 15.023.20056 - Adobe Systems Incorporated)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.223 - Adobe Systems Incorporated)
Adobe Flash Player 22 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 22.0.0.192 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Ansel (Version: 375.95 - NVIDIA Corporation) Hidden
ArcSoft TotalMedia 3.5 (HKLM-x32\...\{29E44E9D-ACB2-4D2D-849F-5361C941B7E1}) (Version: 3.5.7.331 - ArcSoft)
ASUS Xonar D1 Audio Driver (HKLM\...\C-Media Oxygen HD Audio Driver) (Version:  - )
AutoCAD 2017 - English (Version: 21.0.52.0 - Autodesk) Hidden
AutoCAD 2017 (Version: 21.0.52.0 - Autodesk) Hidden
AutoCAD 2017 Language Pack - English (Version: 21.0.52.0 - Autodesk) Hidden
Autodesk Advanced Material Library Image Library 2017 (HKLM-x32\...\{8ED2ED41-4455-449D-993C-751C039089B9}) (Version: 15.11.3.0 - Autodesk)
Autodesk App Manager 2016-2017 (HKLM-x32\...\{C0954809-F5DC-426C-847E-8409DE14E4C0}) (Version: 2.2.0 - Autodesk)
Autodesk AutoCAD 2017 - English (HKLM\...\AutoCAD 2017 - English) (Version: 21.0.52.0 - Autodesk)
Autodesk AutoCAD Performance Feedback Tool 1.2.5 (HKLM-x32\...\{8600F844-9AA5-412E-B6F2-F9C6CBCFD268}) (Version: 1.2.5.0 - Autodesk)
Autodesk Desktop App (HKLM-x32\...\Autodesk Desktop App) (Version: 6.0.45.5 - Autodesk)
Autodesk Featured Apps 2016-2017 (HKLM-x32\...\{27C15055-713B-4D0E-881F-19598A2DFD59}) (Version: 2.2.0 - Autodesk)
Autodesk License Service (x64) - 3.1 (HKLM\...\{EB6FE58F-8576-4272-BB9C-6B47D9EDFA4D}) (Version: 3.1.26.0 - Autodesk)
Autodesk Material Library 2017 (HKLM-x32\...\{8FB9F735-D64C-4991-8D91-4CDDAB1ABDEE}) (Version: 15.11.3.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2017 (HKLM-x32\...\{3FBFBC43-9882-43FA-B979-2D53896747B3}) (Version: 15.11.3.0 - Autodesk)
Battlefield™ 1 (HKLM-x32\...\{335B50BC-6130-4BAF-9A6A-F1561270587B}) (Version: 1.0.49.14731 - Electronic Arts)
CCleaner (HKLM\...\CCleaner) (Version: 4.07 - Piriform)
CPUID CPU-Z 1.74 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
CPUID HWMonitor 1.28 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
foobar2000 v1.3.1 (HKLM-x32\...\foobar2000) (Version: 1.3.1 - Peter Pawlowski)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.99 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version:  - Rockstar North)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
MEmu (HKLM-x32\...\MEmu) (Version: 2.8.6 - Microvirt)
Microsoft .NET Framework 4.5.2 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.6 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)
Mozilla Firefox 51.0.1 (x86 pl) (HKLM-x32\...\Mozilla Firefox 51.0.1 (x86 pl)) (Version: 51.0.1 - Mozilla)
MSI Afterburner 4.3.0 (HKLM-x32\...\Afterburner) (Version: 4.3.0 - MSI Co., LTD)
NapiProjekt (2.2.0.2399) (HKLM-x32\...\NapiProjekt_is1) (Version:  - )
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.1 - Notepad++ Team)
NVIDIA Oprogramowanie systemu PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NVIDIA Sterownik graficzny 375.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 375.95 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Opera Stable 42.0.2393.517 (HKLM-x32\...\Opera 42.0.2393.517) (Version: 42.0.2393.517 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.4.3.15631 - Electronic Arts, Inc.)
Panel sterowania NVIDIA 375.95 (Version: 375.95 - NVIDIA Corporation) Hidden
Potplayer-64 Bits (HKLM\...\PotPlayer64) (Version:  - Kakao Corp.)
PowerISO (HKLM-x32\...\PowerISO) (Version: 4.8 - PowerISO Computing, Inc.)
QNapi (HKLM-x32\...\QNapi) (Version:  - )
REALTEK DTV USB DEVICE (HKLM-x32\...\{DDBB7C89-1A09-441E-AA0F-6AA465755C17}) (Version: 1.00.0000 - Realtek)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.23.623.2010 - Realtek)
RivaTuner Statistics Server 6.5.0 (HKLM-x32\...\RTSS) (Version: 6.5.0 - Unwinder)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.0.5 - Rockstar Games)
SketchUp Import 2016-2017 (HKLM-x32\...\{063925DB-9D8C-48E2-8F04-1B7038B6C783}) (Version: 2.2.0 - Autodesk)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
Telegram Desktop version 1.0 (HKU\S-1-5-21-1063044307-3804589971-3643545715-1000\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.0 - Telegram Messenger LLP)
TotalMedia (HKLM-x32\...\{35465017-8B80-44EB-9FC5-26DAF12846C7}) (Version: 3.57.259 - China)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Wielki słownik angielsko-polski i polsko-angielski PWN-OXFORD (HKLM-x32\...\{1035B082-201E-466E-9084-D096589C05CD}) (Version: 3.0.0 - WN PWN SA)
WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version:  - )
XFastUsb (HKLM-x32\...\XFastUsb) (Version:  - )

==================== Niestandardowe rejestracje CLSID (filtrowane): ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

CustomCLSID: HKU\S-1-5-21-1063044307-3804589971-3643545715-1000_Classes\CLSID\{0D327DA6-B4DF-4842-B833-2CFF84F0948F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2017\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1063044307-3804589971-3643545715-1000_Classes\CLSID\{720DB9AF-D62C-4ED0-A377-429C22312852}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2017\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1063044307-3804589971-3643545715-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2017\en-US\acadficn.dll (Autodesk, Inc.)

==================== Zaplanowane zadania (filtrowane) =============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {57F850BF-0FA9-40A1-BDBC-C9F048F2DCD7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-20] (Google Inc.)
Task: {5B5299E6-1D01-4FFE-B4AA-2991A128FD10} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-20] (Google Inc.)
Task: {815E263B-CDEA-4293-AF91-EA6FE013061A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {85B08800-347B-480F-9894-AA4B0C8C876B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Skróty =============================

(Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.)

ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disk-cache-size=104857600

==================== Załadowane moduły (filtrowane) ==============

2014-07-15 17:19 - 2014-07-15 17:19 - 00008192 _____ () C:\Windows\SysWOW64\srvany.exe
2014-07-15 17:19 - 2014-07-15 17:19 - 00151552 _____ () C:\Windows\KMService.exe
2010-01-30 02:40 - 2010-01-30 02:40 - 04254560 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2014-07-14 21:43 - 2009-12-12 15:12 - 00052224 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2016-05-11 13:54 - 2016-11-17 02:03 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-01-15 14:16 - 2016-01-16 04:00 - 00895320 _____ () C:\Microvirt\MEmu\adb.exe
2016-01-15 14:16 - 2016-01-16 04:01 - 00128552 _____ () C:\Microvirt\MEmu\libgcc_s_dw2-1.dll
2016-01-15 14:16 - 2016-01-16 04:01 - 01040608 _____ () C:\Microvirt\MEmu\libstdc++-6.dll
2016-01-15 14:16 - 2016-01-16 04:01 - 02771568 _____ () C:\Microvirt\MEmu\icuin53.dll
2016-01-15 14:16 - 2016-01-16 04:01 - 01736912 _____ () C:\Microvirt\MEmu\icuuc53.dll
2016-01-15 14:16 - 2016-01-16 04:01 - 21675192 _____ () C:\Microvirt\MEmu\icudt53.dll
2016-01-16 13:08 - 2016-10-21 12:24 - 00191336 _____ () C:\Microvirt\MEmu\libmemu.dll

==================== Alternate Data Streams (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.)


==================== Tryb awaryjny (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"

==================== Powiązania plików (filtrowane) ===============

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.)

HKU\S-1-5-21-1063044307-3804589971-3643545715-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"

==================== Internet Explorer - Witryny zaufane i z ograniczeniami ===============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.)


==================== Hosts - zawartość: ===============================

(Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)

2009-07-14 03:34 - 2016-12-20 00:33 - 00000853 ____A C:\Windows\system32\Drivers\etc\hosts

0.0.0.0 keystone.mwbsys.com

==================== Inne obszary ============================

(Obecnie brak automatycznej naprawy dla tej sekcji.)

HKU\S-1-5-21-1063044307-3804589971-3643545715-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\cAst0r\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 62.179.1.62 - 62.179.1.63
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Zapora systemu Windows [funkcja włączona]

==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==

MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe" -tray
MSCONFIG\startupreg: Cmaudio8788 => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cmicnfgp.dll,CMICtrlWnd
MSCONFIG\startupreg: Cmaudio8788GX => C:\Windows\syswow64\HsMgr.exe Envoke
MSCONFIG\startupreg: Cmaudio8788GX64 => C:\Windows\system\HsMgr64.exe Envoke

==================== Reguły Zapory systemu Windows (filtrowane) ===============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

FirewallRules: [{027A65C0-D4CF-4104-A8B9-76D21B1B8678}] => (Allow) C:\Steam\Steam.exe
FirewallRules: [{D63250E7-98A6-4E94-B746-F7E5F8120E43}] => (Allow) C:\Steam\Steam.exe
FirewallRules: [TCP Query User{34795F8F-E958-4A40-9F5F-22AF0752C06C}C:\steam\steamapps\common\counter-strike global offensive\csgo.exe] => (Allow) C:\steam\steamapps\common\counter-strike global offensive\csgo.exe
FirewallRules: [UDP Query User{07360EBE-9E56-4D55-8257-3915DFD27656}C:\steam\steamapps\common\counter-strike global offensive\csgo.exe] => (Allow) C:\steam\steamapps\common\counter-strike global offensive\csgo.exe
FirewallRules: [TCP Query User{86D96969-417B-4BF9-A307-167B9F386CF5}C:\program files (x86)\tlen.pl\tlen.exe] => (Allow) C:\program files (x86)\tlen.pl\tlen.exe
FirewallRules: [UDP Query User{5CA29C65-181F-49E4-BA09-F0AA9F6FAF9C}C:\program files (x86)\tlen.pl\tlen.exe] => (Allow) C:\program files (x86)\tlen.pl\tlen.exe
FirewallRules: [{A4476299-CACA-4854-8D68-8E1A215EA2F9}] => (Allow) C:\Users\cAst0r\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{F58F03AE-939D-45AE-B9C4-41D150E06F81}] => (Allow) C:\Users\cAst0r\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [Daum PotPlayer(PotPlayerMini64.exe)] => (Allow) C:\Program Files\DAUM\PotPlayer\PotPlayerMini64.exe
FirewallRules: [{82C99FE2-13E8-4FB9-BD43-C248EFC39473}] => (Allow) C:\Program Files\DAUM\PotPlayer\PotPlayerMini64.exe
FirewallRules: [{2094D2B8-57D6-4064-A36E-5AA7CD4ECE4F}] => (Allow) C:\Program Files (x86)\NapiProjekt\napisy.exe
FirewallRules: [{CAA5C574-71BF-416A-93D2-F3871254AF81}] => (Allow) C:\Program Files (x86)\NapiProjekt\napisy.exe
FirewallRules: [{7F261E7D-C4FD-4ECF-A4FE-0D7D0E945A04}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A3F2B2AF-2DE7-49C8-BD7F-DD7014B83A05}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{90C110B4-4ADF-4222-AB6C-3682340373B3}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{0E1EAA8B-3564-4154-9C40-F5D9025371F7}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{40D29D13-2A4C-42D9-9EB8-6AB71AA4AB17}] => (Allow) C:\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{F6DE836D-56D2-49E2-964F-BF11840F6AC2}] => (Allow) C:\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [TCP Query User{32CFCDF0-F385-4726-BAC8-9D686AC1C95E}C:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{D5BE74F2-5966-43EA-B0BE-6E03B2F1D4BA}C:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{E18ABB0F-B8AF-45DB-BB55-DE914FDF3AD6}] => (Allow) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TotalMedia.exe
FirewallRules: [{EBDAC343-78A2-40BF-B5E5-D157F21944A7}] => (Allow) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TotalMedia.exe
FirewallRules: [{C3CF098C-4F31-4A41-AB23-9B72066AC605}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{84A4C666-1B35-4831-8120-11DD302411E5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{99421ACA-1907-4FC5-A820-E345C4E500CE}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{6A7A3B20-FF8A-41F6-91BD-09E82192E4DE}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{2849C23A-E050-4005-BBDF-37910B16EFE3}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{0884D99F-ABCB-426F-B458-00604D00C0A6}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{E5218461-EA49-49B1-BE5D-7E1D6641C547}] => (Allow) C:\Microvirt\MEmu\MEmu.exe
FirewallRules: [{65932FEA-D9E3-4929-BF46-B03EB946B472}] => (Allow) C:\Microvirt\MEmu\MEmu.exe
FirewallRules: [{0B081485-EC81-422A-9110-00C7120D151D}] => (Allow) C:\Users\cAst0r\AppData\Roaming\ACEStream\engine\ace_engine.exe
FirewallRules: [{DC559C94-B41E-4FCC-987F-5545E0B67E63}] => (Allow) C:\Users\cAst0r\AppData\Roaming\ACEStream\engine\ace_engine.exe
FirewallRules: [{56E11D62-E41E-4590-9B80-A1E33A58AC43}] => (Allow) C:\Users\cAst0r\AppData\Local\LINE\bin\4.9.0.1147\LINE.exe
FirewallRules: [{0C82654D-BE60-4444-AB6F-6000BDACF512}] => (Allow) C:\Users\cAst0r\AppData\Local\LINE\bin\4.9.0.1147\LINE.exe
FirewallRules: [{7009CB82-FF77-4F35-AA70-A368E572AFDB}] => (Allow) C:\Users\cAst0r\AppData\Local\LINE\bin\4.9.0.1147\LineUpdater.exe
FirewallRules: [{5510770F-9B72-4238-A8B9-2FA213310769}] => (Allow) C:\Users\cAst0r\AppData\Local\LINE\bin\4.9.0.1147\LineUpdater.exe
FirewallRules: [{FEEB7EC1-9BE5-4EB5-A0CA-41ECF3A076A4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{24F01EE0-E3E4-4E57-B84B-A6641095387D}] => (Allow) C:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{ED8EA8FE-C162-4A33-9BC6-5C2EA48B8447}] => (Allow) C:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{1F551A47-38A2-412F-844D-1B9F6240A30E}] => (Block) C:\Windows\KMService.exe
FirewallRules: [{BCEB5647-31F9-4969-9808-677C2147E9A9}] => (Allow) C:\Program Files (x86)\Opera\42.0.2393.351\opera.exe
FirewallRules: [{AAB9F3A4-596A-4840-A74F-5FFA93C66B82}] => (Allow) C:\Program Files (x86)\Opera\42.0.2393.517\opera.exe
FirewallRules: [{68C43A85-0A40-4801-8F23-B4391539889C}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1\bf1Trial.exe
FirewallRules: [{6D517AD1-7C0D-495B-BAC4-F95698F8B69A}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1\bf1Trial.exe
FirewallRules: [{0A63A70E-B55C-4387-850C-FA35F8903A6E}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1\bf1.exe
FirewallRules: [{59A01BA5-7086-447A-B15A-5455A785DEFB}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1\bf1.exe

==================== Punkty Przywracania systemu =========================

UWAGA: Przywracanie systemu jest wyłączone

==================== Wadliwe urządzenia w Menedżerze urządzeń =============

Name: Kontroler PCI Simple Communications
Description: Kontroler PCI Simple Communications
Class Guid: 
Manufacturer: 
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Błędy w Dzienniku zdarzeń: =========================

Dziennik Aplikacja:
==================
Error: (02/15/2017 12:01:51 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (02/14/2017 01:10:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (02/13/2017 12:50:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (02/12/2017 08:47:53 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (02/12/2017 03:22:42 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (02/12/2017 11:53:21 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (02/11/2017 06:07:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (02/11/2017 09:21:20 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (02/10/2017 11:54:51 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (02/09/2017 12:47:08 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.


Dziennik System:
=============
Error: (02/15/2017 03:29:04 PM) (Source: atapi) (EventID: 11) (User: )
Description: Sterownik wykrył błąd kontrolera na \Device\Ide\IdePort0.

Error: (02/15/2017 03:29:04 PM) (Source: atapi) (EventID: 11) (User: )
Description: Sterownik wykrył błąd kontrolera na \Device\Ide\IdePort0.

Error: (02/15/2017 03:29:04 PM) (Source: atapi) (EventID: 11) (User: )
Description: Sterownik wykrył błąd kontrolera na \Device\Ide\IdePort0.

Error: (02/15/2017 03:29:04 PM) (Source: atapi) (EventID: 11) (User: )
Description: Sterownik wykrył błąd kontrolera na \Device\Ide\IdePort0.

Error: (02/15/2017 03:29:04 PM) (Source: atapi) (EventID: 11) (User: )
Description: Sterownik wykrył błąd kontrolera na \Device\Ide\IdePort0.

Error: (02/15/2017 03:29:04 PM) (Source: atapi) (EventID: 11) (User: )
Description: Sterownik wykrył błąd kontrolera na \Device\Ide\IdePort0.

Error: (02/15/2017 03:29:04 PM) (Source: atapi) (EventID: 11) (User: )
Description: Sterownik wykrył błąd kontrolera na \Device\Ide\IdePort0.

Error: (02/15/2017 03:29:04 PM) (Source: atapi) (EventID: 11) (User: )
Description: Sterownik wykrył błąd kontrolera na \Device\Ide\IdePort0.

Error: (02/15/2017 03:29:04 PM) (Source: atapi) (EventID: 11) (User: )
Description: Sterownik wykrył błąd kontrolera na \Device\Ide\IdePort0.

Error: (02/15/2017 03:29:04 PM) (Source: atapi) (EventID: 11) (User: )
Description: Sterownik wykrył błąd kontrolera na \Device\Ide\IdePort0.


==================== Statystyki pamięci =========================== 

Procesor: Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz
Procent pamięci w użyciu: 21%
Całkowita pamięć fizyczna: 8174.67 MB
Dostępna pamięć fizyczna: 6408.31 MB
Całkowita pamięć wirtualna: 16347.52 MB
Dostępna pamięć wirtualna: 14567.81 MB

==================== Dyski ================================

Drive c: () (Fixed) (Total:238.37 GB) (Free:45.11 GB) NTFS
Drive d: () (Fixed) (Total:101.33 GB) (Free:54.61 GB) NTFS
Drive e: () (Fixed) (Total:415.04 GB) (Free:16 GB) NTFS
Drive f: () (Fixed) (Total:415.04 GB) (Free:26.58 GB) NTFS

==================== MBR & Tablica partycji ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: AC7C2E16)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=238.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 2F091936)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=415 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=415 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=101.3 GB) - (Type=07 NTFS)

==================== Koniec  Addition.txt ============================