Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 15-03-2017
Uruchomiony przez Paweł (04-04-2017 13:58:20)
Uruchomiony z C:\Users\Paweł\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2015-11-02 20:54:03)
Tryb startu: Normal
==========================================================


==================== Konta użytkowników: =============================

Administrator (S-1-5-21-933518959-968290592-3554862803-500 - Administrator - Disabled)
Gość (S-1-5-21-933518959-968290592-3554862803-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-933518959-968290592-3554862803-1002 - Limited - Enabled)
Paweł (S-1-5-21-933518959-968290592-3554862803-1000 - Administrator - Enabled) => C:\Users\Paweł

==================== Centrum zabezpieczeń ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie.)

AV: Microsoft Security Essentials (Disabled - Up to date) {768124D7-F5F7-6D2F-DDC2-94DFA4017C95}
AS: Microsoft Security Essentials (Disabled - Up to date) {CDE0C533-D3CD-62A1-E772-AFADDF863628}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Zainstalowane programy ======================

(W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 15.023.20070 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.1.102.55 - Adobe Systems Incorporated)
Adobe Flash Player 24 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 24.0.0.186 - Adobe Systems Incorporated)
Aktualizacja produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0415-0000-0000000FF1CE}_HOMESTUDENTR_{04E205D6-88B1-4652-B162-42DF2C3B1228}) (Version:  - Microsoft)
Aktualizacja produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0415-0000-0000000FF1CE}_HOMESTUDENTR_{442ECBCF-94A7-48CC-8CD9-D31FFFD5FA86}) (Version:  - Microsoft)
Aktualizacja produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0415-0000-0000000FF1CE}_HOMESTUDENTR_{128A36ED-21BE-4547-9FFE-5B85AEC735DD}) (Version:  - Microsoft)
ASRock App Charger v1.0.6 (HKLM\...\ASRock App Charger_is1) (Version: 1.0.6 - ASRock Inc.)
ASRock XFast RAM v3.0.3 (HKLM\...\ASRock XFast RAM_is1) (Version:  - ASRock Inc.)
A-Tuning v2.0.147 (HKLM-x32\...\A-Tuning_is1) (Version: 2.0.147 - )
Baldur's Gate (HKLM-x32\...\BG1_is1) (Version:  - )
Blender (HKLM\...\{D593042C-8739-488D-93B8-E6B202013E57}) (Version: 2.76.1 - Blender Foundation)
Cisco Packet Tracer 6.1 Student (HKLM-x32\...\Cisco Packet Tracer 6.1 Student_is1) (Version:  - Cisco Systems, Inc.)
CodeBlocks (HKU\S-1-5-21-933518959-968290592-3554862803-1000\...\CodeBlocks) (Version: 16.01 - The Code::Blocks Team)
Dota 2 (HKLM\...\Steam App 570) (Version:  - Valve)
EAGLE 7.5.0 (HKLM\...\EAGLE 7.5.0) (Version: 7.5.0 - CadSoft Computer GmbH)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 57.0.2987.133 - Google Inc.)
Google Update Helper (x32 Version: 1.3.21.115 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Gothic II Złota Edycja (HKLM-x32\...\{6FB6D550-DDC4-4996-9CDF-91C34F0A4C4A}) (Version: 2.6 - JoWood)
GOTHIC2 - Noc Kruka - 'Pakiet systemowy' (HKLM-x32\...\GOTHIC2 - Noc Kruka - 'Pakiet systemowy') (Version: 1.1 - World of Gothic RU © 2014)
Heroes & Generals (HKLM\...\Steam App 227940) (Version:  - Reto-Moto)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.3.34 - Intel Corporation)
Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
LTspice IV (HKLM-x32\...\LTspice IV) (Version:  - )
Medieval II Total War (HKLM-x32\...\{C0698BDA-0D29-40EE-8570-A31106DF9AB1}) (Version: 1.03.000 - Sega)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version:  - )
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.9.218.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual Studio Community 2015 with Updates (HKLM-x32\...\{79b486b9-c5f0-4096-a00c-8351f59587c2}) (Version: 14.0.25420.1 - Microsoft Corporation)
Morrowind (HKLM-x32\...\{E52D32A0-0005-11D7-928D-000ACD006A23}) (Version:  - )
NVIDIA Oprogramowanie systemu PhysX 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
NVIDIA Sterownik 3D Vision 353.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.06 - NVIDIA Corporation)
NVIDIA Sterownik dźwięku HD 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA Sterownik graficzny 353.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.06 - NVIDIA Corporation)
NVIDIA Sterownik kontrolera 3D Vision 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
Panel sterowania NVIDIA 353.06 (Version: 353.06 - NVIDIA Corporation) Hidden
Profesor Henry - Intensywny kurs (HKLM-x32\...\Henry_Intensywny_kurs_cd1_is1) (Version:  - )
Profesor Henry 6.0 Gramatyka (HKLM-x32\...\phgram_60_is1) (Version:  - )
Profesor Henry 6.0 Słownictwo poziom 1 i 2 (HKLM-x32\...\slow_12_60_is1) (Version:  - )
Profesor Henry 6.0 Słownictwo poziom 3 i 4 (HKLM-x32\...\slow_34_60_is1) (Version:  - )
Q-Typing 1.3 (HKLM-x32\...\Q-Typing 1.3_is1) (Version:  - Q-Typing)
Rayman Origins (HKLM-x32\...\Uplay Install 80) (Version:  - Ubisoft)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.86.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7209 - Realtek Semiconductor Corp.)
Sherlock Holmes - Tajemnica Mumii (HKLM-x32\...\Sherlock Holmes - Tajemnica Mumii_is1) (Version:  - )
SHIELD Streaming (Version: 4.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.5.28 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.32 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.32.104 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Thief II: The Metal Age (HKLM-x32\...\InstallShield_{4A05CCFA-A447-485B-85E7-92D9C66620BE}) (Version: 1.18 - Cenega)
Thief II: The Metal Age (x32 Version: 1.18 - Cenega) Hidden
Thunder Master v2.12 (HKLM-x32\...\{EE04522C-0814-4B63-AE57-0B63E5A355BB}_is1) (Version: 2.12.0.0 - Palit Microsystems Ltd.)
Tom Clancy's Splinter Cell (HKLM-x32\...\Uplay Install 109) (Version:  - Ubisoft)
UltraISO Premium V9.65 (HKLM-x32\...\UltraISO_is1) (Version:  - )
Unity Web Player (HKU\S-1-5-21-933518959-968290592-3554862803-1000\...\UnityWebPlayer) (Version: 5.3.6f1 - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 21.0 - Ubisoft)
WinRAR 5.30 beta 6 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.6 - win.rar GmbH)
World of Tanks (HKU\S-1-5-21-933518959-968290592-3554862803-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812eu}_is1) (Version:  - Wargaming.net)
World of Warships (HKU\S-1-5-21-933518959-968290592-3554862803-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version:  - Wargaming.net)
Worms 3D (HKLM-x32\...\{8874FD36-7C9D-4573-8956-E368D6753D90}) (Version: 1.1 - Team17)
Złote Wrota (HKLM-x32\...\Złote Wrota) (Version: 1.05 - Złote Wrota Team)
Złote Wrota Dubbing (HKLM-x32\...\Złote Wrota Dubbing) (Version: 1.05 - Złote Wrota Team)

==================== Niestandardowe rejestracje CLSID (filtrowane): ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Zaplanowane zadania (filtrowane) =============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {298F9404-348C-4A12-9447-BCE273D7945D} - System32\Tasks\{B19B200B-9930-49AC-BA11-7673EFA25E89} => pcalua.exe -a C:\Windows\IsUn0415.exe -c -f"C:\Program Files (x86)\SuperMemo UX\Courses\Angielski No Problem 3\Uninst.isu"
Task: {73EB24ED-28A0-4C4A-A39A-853C948CE7E4} - System32\Tasks\AsrSP.exe => C:\Program Files (x86)\ASRock Utility\A-Tuning\Bin\AsrSP.exe [2014-05-09] ()
Task: {974B28AB-E72A-46EF-99D7-B1CB02722CF2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-04] (Google Inc.)
Task: {D311CCF6-1C86-4E8C-A946-B165F8DB7488} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-04] (Google Inc.)
Task: {E14E7A4F-667B-4285-813E-97C3EB9CA582} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {F6EA46E1-0606-46BB-B852-8E76AC194AC7} - System32\Tasks\ThunderMaster => C:\Program Files (x86)\Thunder Master\THPanel.exe [2015-05-29] (Palit Microsystems Ltd.)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)


==================== Skróty =============================

(Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.)

ShortcutWithArgument: C:\Users\Paweł\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxps://launchpage.org/?uid=qT1CBKjchx0cXu%2FWvI9%2Fa40Wb%2Fo66gxLjHgRJLFX2%2FRUnZcHW%2Fwp1hKNcX4vTPSAJig%3D
ShortcutWithArgument: C:\Users\Paweł\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxps://launchpage.org/?uid=qT1CBKjchx0cXu%2FWvI9%2Fa40Wb%2Fo66gxLjHgRJLFX2%2FRUnZcHW%2Fwp1hKNcX4vTPSAJig%3D

==================== Załadowane moduły (filtrowane) ==============

2015-11-02 23:37 - 2015-05-28 06:15 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-11-02 23:19 - 2013-07-25 16:04 - 00454656 _____ () C:\Program Files (x86)\ASRock Utility\A-Tuning\Bin\IOMonitorSrv.exe
2017-04-04 13:14 - 2017-04-04 13:14 - 00380928 _____ () C:\Users\Paweł\Desktop\2fx9lfdx.exe
2015-11-02 23:38 - 2015-06-01 06:00 - 00011920 ____R () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

==================== Alternate Data Streams (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.)


==================== Tryb awaryjny (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.)


==================== Powiązania plików (filtrowane) ===============

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.)


==================== Internet Explorer - Witryny zaufane i z ograniczeniami ===============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.)


==================== Hosts - zawartość: ==========================

(Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)

2009-07-14 04:34 - 2016-06-18 10:41 - 00000921 ____N C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 genuine.microsoft.com
127.0.0.1 mpa.one.microsoft.com
127.0.0.1 sls.microsoft.com

==================== Inne obszary ============================

(Obecnie brak automatycznej naprawy dla tej sekcji.)

HKU\S-1-5-21-933518959-968290592-3554862803-1000\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 194.204.152.34 - 194.204.159.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Zapora systemu Windows [funkcja włączona]

==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==


==================== Reguły Zapory systemu Windows (filtrowane) ===============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

FirewallRules: [{CD994DD2-EAB6-4607-91FA-96A3077B61E9}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{DC7A070B-A960-4BDF-9EE4-93D1BD53B3EC}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{7B133156-10FE-4D35-BDB9-4C15544BA5E3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{30246AAC-7F3C-4A97-84EB-4F47C80E4E0E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{9A05A316-20A2-4A45-9417-AF1BA431BAA7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{4149F710-6E95-4EA5-816E-465134EA2C11}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{370328D3-05E7-4F1D-85B5-A6234D643EE0}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{3679E97F-3E11-4D66-A3C5-DF73A53A4549}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{CBF34E46-E22C-4B49-903B-6EDD8B4BC4D8}C:\users\paweł\appdata\local\mycomgames\mycomgames.exe] => (Block) C:\users\paweł\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [UDP Query User{D00BFDE8-D287-422C-92D0-04B1B74A2EDE}C:\users\paweł\appdata\local\mycomgames\mycomgames.exe] => (Block) C:\users\paweł\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [{67EAED67-1468-49B1-A317-3CB2C00F0CA7}] => (Allow) C:\Program Files\World_of_Tanks\WoTLauncher.exe
FirewallRules: [{C3A9E556-BF52-4BE4-8D6E-F17621667FEF}] => (Allow) C:\Program Files\World_of_Tanks\WoTLauncher.exe
FirewallRules: [{DB6822B2-A3CD-4D1D-9652-91B7EF4EF21E}] => (Allow) C:\Program Files\World_of_Tanks\worldoftanks.exe
FirewallRules: [{856D802F-FD30-4243-B484-539DC4AE0805}] => (Allow) C:\Program Files\World_of_Tanks\worldoftanks.exe
FirewallRules: [{2B6CC41F-E15B-4E89-A7E6-AF112FA9E83E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C684E1B6-501B-44F5-9F80-0EB0C2CF68EC}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{6D05E74D-FDB5-4882-9A27-361C0E9BF7BF}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{4AB7B53C-EDB2-4507-BE5B-057F59BC5574}C:\program files (x86)\steam\steamapps\common\total war arena\arena.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war arena\arena.exe
FirewallRules: [UDP Query User{17B97F14-33B5-42E3-80B6-C40D72BA74EB}C:\program files (x86)\steam\steamapps\common\total war arena\arena.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war arena\arena.exe
FirewallRules: [TCP Query User{478F1874-B4A2-4A7D-86BE-073352803AB3}C:\users\paweł\appdata\local\mycomgames\mycomgames.exe] => (Block) C:\users\paweł\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [UDP Query User{7A89ADD2-D859-4999-8130-E38AECBD579F}C:\users\paweł\appdata\local\mycomgames\mycomgames.exe] => (Block) C:\users\paweł\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [{F7FB435A-C238-4A22-B3F6-EC2D0FC5B9C6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Total War Arena\launcher\launcher.exe
FirewallRules: [{A0FD1477-190B-41BC-B872-22E1246848E8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Total War Arena\launcher\launcher.exe
FirewallRules: [TCP Query User{975AFD63-E0E7-4E2E-9259-77B6C8C1E66B}C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe] => (Allow) C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe
FirewallRules: [UDP Query User{EFA05445-F1F7-4ABF-9FB0-AAB874B247A4}C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe] => (Allow) C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe
FirewallRules: [TCP Query User{EC0445C5-5043-487B-8FDC-F72F80D7EEC8}C:\program files (x86)\cisco packet tracer 6.1.1sv\bin\packettracer6.exe] => (Block) C:\program files (x86)\cisco packet tracer 6.1.1sv\bin\packettracer6.exe
FirewallRules: [UDP Query User{617B71C8-D2B1-43CF-9AFB-1D313CC4C8A5}C:\program files (x86)\cisco packet tracer 6.1.1sv\bin\packettracer6.exe] => (Block) C:\program files (x86)\cisco packet tracer 6.1.1sv\bin\packettracer6.exe
FirewallRules: [TCP Query User{9B37005A-70CF-437B-BA75-F4674789A281}C:\program files (x86)\cisco packet tracer 6.1sv\bin\packettracer6.exe] => (Block) C:\program files (x86)\cisco packet tracer 6.1sv\bin\packettracer6.exe
FirewallRules: [UDP Query User{F8B9DB88-B197-4965-A4DC-3286032B6176}C:\program files (x86)\cisco packet tracer 6.1sv\bin\packettracer6.exe] => (Block) C:\program files (x86)\cisco packet tracer 6.1sv\bin\packettracer6.exe
FirewallRules: [TCP Query User{48EDF723-7C9C-4C5F-93CD-0C471698497A}C:\program files (x86)\age of empires ii\empires2.exe] => (Allow) C:\program files (x86)\age of empires ii\empires2.exe
FirewallRules: [UDP Query User{82C5135D-EE9C-494A-9F15-DE002C0C53EF}C:\program files (x86)\age of empires ii\empires2.exe] => (Allow) C:\program files (x86)\age of empires ii\empires2.exe
FirewallRules: [TCP Query User{8FBD0EE2-F9C6-48A0-9F67-79A34108D574}C:\program files (x86)\anno 1701\anno1701.exe] => (Allow) C:\program files (x86)\anno 1701\anno1701.exe
FirewallRules: [UDP Query User{7AB732D2-8907-4EF8-A582-C904ABB99770}C:\program files (x86)\anno 1701\anno1701.exe] => (Allow) C:\program files (x86)\anno 1701\anno1701.exe
FirewallRules: [TCP Query User{E7F20C65-F431-4223-8B5E-12989AF26DFE}C:\program files (x86)\westwood\c&c95\c&c95.exe] => (Allow) C:\program files (x86)\westwood\c&c95\c&c95.exe
FirewallRules: [UDP Query User{7E9FCAB1-8013-46F5-9959-A981F7597F0D}C:\program files (x86)\westwood\c&c95\c&c95.exe] => (Allow) C:\program files (x86)\westwood\c&c95\c&c95.exe
FirewallRules: [TCP Query User{449C1B69-B044-4085-8392-A56E62DBE95C}C:\program files (x86)\westwood\c&c95\cncnet.exe] => (Block) C:\program files (x86)\westwood\c&c95\cncnet.exe
FirewallRules: [UDP Query User{2E027BF9-6424-4DC1-A6B9-83D82B82BF3C}C:\program files (x86)\westwood\c&c95\cncnet.exe] => (Block) C:\program files (x86)\westwood\c&c95\cncnet.exe
FirewallRules: [{377CB425-F438-425B-BE0B-AF468BF10BD5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Heroes & Generals\hngsteamlauncher.exe
FirewallRules: [{DA288483-10A3-403A-B9AD-A39EB819FAE9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Heroes & Generals\hngsteamlauncher.exe
FirewallRules: [{DA0FD9DB-A5D8-4EC7-8E1A-F274417717F7}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{5EEC871E-422D-4E2A-A3FA-14C083B9EFA9}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{FFB404E6-BC29-4DD2-90D7-872656B542F3}] => (Allow) C:\Games\World_of_Warships\WoWSLauncher.exe
FirewallRules: [{3274B9AE-52E9-40CF-BFA8-DBD058E8A863}] => (Allow) C:\Games\World_of_Warships\WoWSLauncher.exe
FirewallRules: [{82570FE4-34EC-46E9-824D-6B703F215467}] => (Allow) C:\Games\World_of_Warships\worldofwarships.exe
FirewallRules: [{29B2EB71-1EE5-4F1E-AAAC-707B518029D2}] => (Allow) C:\Games\World_of_Warships\worldofwarships.exe
FirewallRules: [TCP Query User{F019404E-246A-4747-A2E3-E87299DBB5CD}C:\program files (x86)\jowood\gothic2zlotaedycja\_work\tools\zspy\zspy.exe] => (Block) C:\program files (x86)\jowood\gothic2zlotaedycja\_work\tools\zspy\zspy.exe
FirewallRules: [UDP Query User{AA03AC11-4F69-426A-B44D-7FBFC8C848DD}C:\program files (x86)\jowood\gothic2zlotaedycja\_work\tools\zspy\zspy.exe] => (Block) C:\program files (x86)\jowood\gothic2zlotaedycja\_work\tools\zspy\zspy.exe
FirewallRules: [{7DA7F7AF-B7BE-4AE6-9256-4F1D29CCDAE9}] => (Allow) C:\Program Files (x86)\CDP Games\The Witcher 2 Enhanced Edition\Launcher.exe
FirewallRules: [{ED3CDEBF-A7AC-4DCB-9332-9D6087D52AA6}] => (Allow) C:\Program Files (x86)\CDP Games\The Witcher 2 Enhanced Edition\bin\witcher2.exe
FirewallRules: [{272D4CC7-A0C4-48E5-BF99-4FF7E78F2B69}] => (Allow) C:\Games\World_of_Tanks\WoTLauncher.exe
FirewallRules: [{1B27E3A5-235C-4B2B-BCD0-00C21AFB4A3E}] => (Allow) C:\Games\World_of_Tanks\WoTLauncher.exe
FirewallRules: [{F9DB6792-7FD7-4523-AB70-16E46146B243}] => (Allow) C:\Games\World_of_Tanks\worldoftanks.exe
FirewallRules: [{5DC366E1-C892-4F65-A5C4-A35B8ACB4A49}] => (Allow) C:\Games\World_of_Tanks\worldoftanks.exe
FirewallRules: [{8D4838B4-7F97-4684-9A7B-521260813FBC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{86B1A6AB-9DA9-4CE4-9129-8D8FDCF3E81F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{26E3C234-008F-4C2E-A68D-319A4B802C96}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{052DA220-268C-4540-BA61-A2AB680D27CE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{2CDE78C8-BE58-46AB-9350-9169A49D2057}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Punkty Przywracania systemu =========================

26-03-2017 20:12:55 Zainstalowane Thief II: The Metal Age
28-03-2017 10:57:15 Windows Update
04-04-2017 12:43:49 Windows Update

==================== Wadliwe urządzenia w Menedżerze urządzeń =============


==================== Błędy w Dzienniku zdarzeń: =========================

Dziennik Aplikacja:
==================
Error: (03/27/2017 10:27:38 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program chrome.exe w wersji 56.0.2924.87 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji.

Identyfikator procesu: 13bc

Godzina rozpoczęcia: 01d2a70d7ebc7cd0

Godzina zakończenia: 3

Ścieżka aplikacji: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Identyfikator raportu: d04a7a5c-132b-11e7-908e-d050998204f9

Error: (03/26/2017 07:46:57 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program Launcher.exe w wersji 0.9.0.866 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji.

Identyfikator procesu: b24

Godzina rozpoczęcia: 01d2a658eb00bb03

Godzina zakończenia: 1

Ścieżka aplikacji: C:\Program Files (x86)\CDP Games\The Witcher 2 Enhanced Edition\Launcher.exe

Identyfikator raportu: 3329f76d-124c-11e7-8d12-d050998204f9

Error: (03/09/2017 07:09:34 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program witcher2.EXE w wersji 3.4.4.1 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji.

Identyfikator procesu: 208

Godzina rozpoczęcia: 01d298f49481501a

Godzina zakończenia: 55

Ścieżka aplikacji: C:\Program Files (x86)\CDP Games\The Witcher 2 Enhanced Edition\bin\witcher2.EXE

Identyfikator raportu:

Error: (03/04/2017 02:47:49 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program witcher2.EXE w wersji 3.4.4.1 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji.

Identyfikator procesu: 6c4

Godzina rozpoczęcia: 01d294dd71a9adbc

Godzina zakończenia: 93

Ścieżka aplikacji: C:\Program Files (x86)\CDP Games\The Witcher 2 Enhanced Edition\bin\witcher2.EXE

Identyfikator raportu:

Error: (02/22/2017 12:51:41 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (NvVAD initialization failed [6]).

Error: (02/22/2017 12:51:41 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (Failed to set NvVAD endpoint as default Audio endpoint [0]).

Error: (02/22/2017 12:51:41 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (NvVAD endpoint registration failed [0]).

Error: (02/18/2017 07:20:03 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Nie można wygenerować kontekstu aktywacji dla "C:\Windows\System32\systemcpl.dll".
Nie można odnaleźć zestawu zależnego Microsoft.Windows.Common-Controls,language="*",processorArchitecture="*",publicKeyToken="436865772d574741",type="win32",version="6.0.0.0".
Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error: (02/15/2017 11:59:00 PM) (Source: Software Protection Platform Service) (EventID: 8208) (User: )
Description: Pozyskiwanie oryginalnego biletu (hr=0xC004C4A2) dla szablonu o identyfikatorze 66c92734-d682-4d71-983e-d6ec3f16059f nie powiodło się.

Error: (02/15/2017 11:59:00 PM) (Source: Software Protection Platform Service) (EventID: 8209) (User: )
Description: Dla aplikacji o identyfikatorze 55c92734-d682-4d71-983e-d6ec3f16059f zmieniono stan z Oryginalna na Nieoryginalna (0x00000000).


Dziennik System:
=============
Error: (04/04/2017 12:42:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi atksgt z powodu następującego błędu: 
Nastąpiło zablokowanie ładowania sterownika

Error: (04/04/2017 12:42:10 PM) (Source: Application Popup) (EventID: 875) (User: )
Description: Sterownik atksgt.sys został zablokowany dla ładowania.

Error: (04/03/2017 11:21:17 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Serwer {F9717507-6651-4EDB-BFF7-AE615179BCCF} nie zarejestrował się w modelu DCOM w wymaganym czasie.

Error: (04/03/2017 04:07:58 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji z usługi lmhosts.

Error: (04/03/2017 12:50:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi atksgt z powodu następującego błędu: 
Nastąpiło zablokowanie ładowania sterownika

Error: (04/03/2017 12:50:41 PM) (Source: Application Popup) (EventID: 875) (User: )
Description: Sterownik atksgt.sys został zablokowany dla ładowania.

Error: (04/02/2017 10:55:47 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Serwer {F9717507-6651-4EDB-BFF7-AE615179BCCF} nie zarejestrował się w modelu DCOM w wymaganym czasie.

Error: (04/02/2017 09:59:41 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi atksgt z powodu następującego błędu: 
Nastąpiło zablokowanie ładowania sterownika

Error: (04/02/2017 09:59:41 AM) (Source: Application Popup) (EventID: 875) (User: )
Description: Sterownik atksgt.sys został zablokowany dla ładowania.

Error: (04/02/2017 12:34:11 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: Serwer {F9717507-6651-4EDB-BFF7-AE615179BCCF} nie zarejestrował się w modelu DCOM w wymaganym czasie.


CodeIntegrity:
===================================
  Date: 2017-04-04 13:52:17.484
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-04-04 13:28:15.804
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-04-04 13:23:12.733
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-04-04 13:08:28.266
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-04-04 12:57:01.434
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-04-04 12:42:04.804
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-04-03 21:28:35.187
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-04-03 19:35:03.464
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-04-03 19:19:18.405
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-04-03 19:08:38.983
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.


==================== Statystyki pamięci =========================== 

Procesor: Intel(R) Core(TM) i5-4460 CPU @ 3.20GHz
Procent pamięci w użyciu: 34%
Całkowita pamięć fizyczna: 8131.39 MB
Dostępna pamięć fizyczna: 5318.03 MB
Całkowita pamięć wirtualna: 16260.96 MB
Dostępna pamięć wirtualna: 13501.39 MB

==================== Dyski ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:718.29 GB) NTFS ==>[dysk z komponentami startowymi (pozyskano odczytując BCD)]
Drive d: (Thief Antologia) (CDROM) (Total:3.91 GB) (Free:0 GB) CDFS

==================== MBR & Tablica partycji ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: C2C87E3E)
Partition 1: (Active) - (Size=931.4 GB) - (Type=07 NTFS)

==================== Koniec  Addition.txt ============================