Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 13.01.2018 01 Uruchomiony przez Zod (14-01-2018 14:51:29) Uruchomiony z D:\Pobrane Windows 10 Home Wersja 1709 16299.64 (X64) (2017-11-28 17:15:01) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-262468516-1371124315-1426830773-500 - Administrator - Disabled) Gość (S-1-5-21-262468516-1371124315-1426830773-501 - Limited - Disabled) Konto domyślne (S-1-5-21-262468516-1371124315-1426830773-503 - Limited - Disabled) WDAGUtilityAccount (S-1-5-21-262468516-1371124315-1426830773-504 - Limited - Disabled) Zod (S-1-5-21-262468516-1371124315-1426830773-1001 - Administrator - Enabled) => C:\Users\Zod ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Arcabit (Enabled - Up to date) {E16E3983-8716-5577-4008-0FE5C12DDDBA} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Arcabit (Enabled - Up to date) {5A0FD867-A12C-5AF9-7AB8-3497BAAA9707} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) Arcabit (HKLM\...\Arcabit) (Version: - Arcabit) CPUID CPU-Z 1.81.1 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.81.1 - ) CrystalDiskInfo 7.5.0 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.5.0 - Crystal Dew World) CrystalDiskMark 6.0.0 (HKLM\...\CrystalDiskMark6_is1) (Version: 6.0.0 - Crystal Dew World) Dell Power Manager Service (HKLM\...\{18469ED8-8C36-4CF7-BD43-0FC9B1931AF8}) (Version: 3.0.0 - Dell Inc.) Dell Update - SupportAssist Update Plugin (HKLM\...\{C7EE237C-1350-409E-8681-993C74E48757}) (Version: 3.1.1.3834 - Dell Inc.) Dell Update (HKLM-x32\...\{78F305EA-0CD2-45A0-8F01-B914CD499EB8}) (Version: 1.9.40.0 - Dell Inc.) DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 390.65 - NVIDIA Corporation) Hidden Goodix Fingerprint Driver (HKLM\...\{60FAB781-18F2-4D2B-A8E7-B3AADD327955}_is1) (Version: 1.0.33.300 - Goodix, Inc.) HWiNFO64 Version 5.60 (HKLM\...\HWiNFO64_is1) (Version: 5.60 - Martin Malík - REALiX) Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.3.10203.4295 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 22.20.16.4836 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.7.0.1014 - Intel Corporation) Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.47.866.0 - Intel Corporation) Hidden Intel(R) Trusted Connect Services Client (HKLM-x32\...\{246c6cc0-9810-4728-9a29-28474de2eec5}) (Version: 1.47.866.0 - Intel Corporation) Hidden Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{A30136AB-3DD4-4207-9ED1-7455DEFB7FC4}) (Version: 19.60.0 - Intel Corporation) Malwarebytes (wersja 3.3.1.2183) (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes) Maxx Audio Installer (x64) (HKLM\...\{307032B2-6AF2-46D7-B933-62438DEB2B9A}) (Version: 2.7.9233.1 - Waves Audio Ltd.) Hidden Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Mozilla Firefox 57.0.4 (x64 pl) (HKLM\...\Mozilla Firefox 57.0.4 (x64 pl)) (Version: 57.0.4 - Mozilla) Mozilla Thunderbird 52.5.2 (x86 pl) (HKLM-x32\...\Mozilla Thunderbird 52.5.2 (x86 pl)) (Version: 52.5.2 - Mozilla) NVIDIA Oprogramowanie systemu PhysX 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation) NVIDIA Sterownik dźwięku HD 1.3.36.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.36.6 - NVIDIA Corporation) NVIDIA Sterownik graficzny 390.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 390.65 - NVIDIA Corporation) Oprogramowanie Intel® PROSet/Wireless (HKLM-x32\...\{0e6a18a2-ea36-4041-9f69-0b2cc3f04f88}) (Version: 20.10.1 - Intel Corporation) Oprogramowanie mikroukładu Intel® (HKLM-x32\...\{17408817-d415-4768-a160-ae6d46d6bdb0}) (Version: 10.1.1.44 - Intel(R) Corporation) Hidden Panel sterowania NVIDIA 390.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 390.65 - NVIDIA Corporation) Hidden Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.15063.31236 - Realtek Semiconductor Corp.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8166 - Realtek Semiconductor Corp.) SmartByte Drivers and Services (HKLM\...\{6B8F24C5-68BD-4169-94A4-133AF60A5606}) (Version: 1.1.511 - Rivet Networks) SpyShelter Firewall 10.9.7 (HKLM\...\SpyshelterInternetSecurity_is1) (Version: 10.9.7 - Datpol) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) SumatraPDF (HKLM\...\SumatraPDF) (Version: 3.1.2 - Krzysztof Kowalczyk) TeamSpeak 3 Client (HKU\S-1-5-21-262468516-1371124315-1426830773-1001\...\TeamSpeak 3 Client) (Version: 3.1.6 - TeamSpeak Systems GmbH) This War of Mine (HKLM-x32\...\1207666873_is1) (Version: 4.0.0 - GOG.com) Thunderbolt™ Software (HKLM-x32\...\{87A31923-8F18-4943-8093-17DBEE0101B7}) (Version: 16.3.61.275 - Intel Corporation) Vulkan Run Time Libraries 1.0.65.0 (HKLM\...\VulkanRT1.0.65.0) (Version: 1.0.65.0 - LunarG, Inc.) Hidden Windows 10 Update Assistant (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22334 - Microsoft Corporation) WinRAR 5.50 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH) World of Tanks (HKU\S-1-5-21-262468516-1371124315-1426830773-1001\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812eu}_is1) (Version: - Wargaming.net) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-262468516-1371124315-1426830773-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Zod\AppData\Local\Microsoft\OneDrive\17.3.7076.1026\amd64\FileSyncShell64.dll => Brak pliku CustomCLSID: HKU\S-1-5-21-262468516-1371124315-1426830773-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Zod\AppData\Local\Microsoft\OneDrive\17.3.7076.1026\amd64\FileSyncShell64.dll => Brak pliku CustomCLSID: HKU\S-1-5-21-262468516-1371124315-1426830773-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Zod\AppData\Local\Microsoft\OneDrive\17.3.7076.1026\amd64\FileSyncShell64.dll => Brak pliku CustomCLSID: HKU\S-1-5-21-262468516-1371124315-1426830773-1001_Classes\CLSID\{a9872fee-5a55-4ecb-9b0f-b06fedcf14d1}\localserver32 -> C:\Program Files\Waves\MaxxAudio\MaxxAudioPro.exe (Waves Audio Ltd) ContextMenuHandlers1: [ArcabitShell] -> {D7824897-C8DC-49b4-B790-30F7ED16A5FD} => C:\Program Files\Arcabit\bin\arcashl.dll [2018-01-12] () ContextMenuHandlers1: [SpyshelterExt] -> {030D32F7-BF26-40a2-AB44-A34E78908701} => C:\Windows\system32\SpyShelterShellExt.dll [2017-08-29] (Datpol) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-09-13] (Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-09-13] (Alexander Roshal) ContextMenuHandlers2: [SpyshelterExt] -> {030D32F7-BF26-40a2-AB44-A34E78908701} => C:\Windows\system32\SpyShelterShellExt.dll [2017-08-29] (Datpol) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes) ContextMenuHandlers4: [SpyshelterExt] -> {030D32F7-BF26-40a2-AB44-A34E78908701} => C:\Windows\system32\SpyShelterShellExt.dll [2017-08-29] (Datpol) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Brak pliku ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\ki125173.inf_amd64_6f141e257f4fffee\igfxDTCM.dll [2017-11-07] (Intel Corporation) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-01-04] (NVIDIA Corporation) ContextMenuHandlers6: [ArcabitShell] -> {D7824897-C8DC-49b4-B790-30F7ED16A5FD} => C:\Program Files\Arcabit\bin\arcashl.dll [2018-01-12] () ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-09-13] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-09-13] (Alexander Roshal) ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {2CA65917-D90F-4E0C-9DAA-0025E3BD2296} - System32\Tasks\Microsoft\Windows\MemDiag => C:\WINDOWS\system32\mdres.exe [2017-09-29] (Microsoft Corporation) Task: {31A60DFB-86B5-49B7-8972-FA523060BFD3} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service when hardware is detected => sc.exe start ThunderboltService Task: {3E1A1418-D3E0-46AD-9228-B8EE9799844A} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-01-04] (NVIDIA Corporation) Task: {4A7AA4A9-55EC-4118-8D11-F9CDDF1B968B} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application when hardware is detected => ConditionalAppStarter.exe Task: {54D098B3-0A5E-4D5F-9B50-7FD689AB9074} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-01-04] (NVIDIA Corporation) Task: {72547BC6-4FEA-4176-A73E-6C716C717FBB} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2018-01-04] (NVIDIA Corporation) Task: {93A1A9D2-BB9A-48AE-8C3A-465CA4845FAF} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service on boot if driver is up => tbtsvc.exe Task: {9B55F3BB-F5F3-4E64-82F9-C53B9EB1F00C} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on login if service is up => ConditionalAppStarter.exe Task: {A92B88D3-B7D9-4BAE-929C-398E1BFAF73E} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-01-04] (NVIDIA Corporation) Task: {C2A640AD-DEC2-46F8-8A8B-2F307FCC986D} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on switch user if service is up => ConditionalAppStarter.exe Task: {C5CA3E3E-0F86-47AB-ACD8-EA7F001AA2E4} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2017-10-11] (Intel(R) Corporation) Task: {D98F8FE6-745B-4966-985D-BC8EC1428E84} - System32\Tasks\S-1-5-21-262468516-1371124315-1426830773-1001\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2017-09-29] (Microsoft Corporation) Task: {E7D273DE-7555-4610-B0A9-604411BB7300} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-01-04] (NVIDIA Corporation) Task: {F000AA20-BEFC-4B53-8F9E-3998A13FF29D} - System32\Tasks\SmartByte Telemetry => C:\Program Files\Rivet Networks\SmartByte\SmartByteTelemetry.exe [2017-09-25] (DELL) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) ==================== Skróty & WMI ======================== (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) WMI_ActiveScriptEventConsumer_DellCommandPowerManagerAlertEventConsumer: ==================== Załadowane moduły (filtrowane) ============== 2017-10-20 23:56 - 2017-10-20 23:56 - 000237600 _____ () C:\Windows\System32\drivers\UMDF\milanFusb.dll 2017-09-29 14:41 - 2017-09-29 14:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll 2018-01-09 16:48 - 2018-01-04 02:44 - 000544056 _____ () C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\DisplayDriverAnalyzer\_DisplayDriverCrashAnalyzer64.dll 2018-01-12 00:25 - 2018-01-12 00:25 - 000033312 _____ () C:\Program Files\Arcabit\bin\DevCtl.dll 2018-01-12 00:25 - 2018-01-12 00:25 - 000197176 _____ () C:\Program Files\Arcabit\bin\nfapi.dll 2018-01-12 00:25 - 2018-01-12 00:25 - 000174448 _____ () C:\Program Files\Arcabit\bin\scanenginedll.dll 2018-01-12 00:25 - 2018-01-12 00:25 - 000674600 _____ () C:\Program Files\Arcabit\bin\ScanEngineCon.exe 2017-09-29 14:42 - 2017-09-30 15:30 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2017-09-29 14:42 - 2017-09-30 15:30 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2017-11-09 00:44 - 2017-11-09 00:44 - 001244304 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service" ==================== Powiązania plików (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Hosts - zawartość: ========================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2017-03-18 22:03 - 2017-11-28 23:58 - 000008578 ____R C:\WINDOWS\system32\Drivers\etc\hosts 0.0.0.0 storeedgefd.dsx.mp.microsoft.com 0.0.0.0 settings-ssl.xboxlive.com.nsatc.net 0.0.0.0 tiles.xbox.com.nsatc.net 0.0.0.0 musicmatch-ssl.xboxlive.com.nsatc.net 0.0.0.0 epix.xbox.com.nsatc.net 0.0.0.0 vdlimages.xboxlive.com.nsatc.net 0.0.0.0 download-ssl.xbox.com.nsatc.net 0.0.0.0 a-msedge.net 0.0.0.0 a-0001.a-msedge.net 0.0.0.0 a-0002.a-msedge.net 0.0.0.0 a-0003.a-msedge.net 0.0.0.0 a-0004.a-msedge.net 0.0.0.0 a-0005.a-msedge.net 0.0.0.0 a-0006.a-msedge.net 0.0.0.0 a-0007.a-msedge.net 0.0.0.0 a-0008.a-msedge.net 0.0.0.0 a-0009.a-msedge.net 0.0.0.0 ads.msn.com 0.0.0.0 ads1.msads.net 0.0.0.0 a.ads1.msn.com 0.0.0.0 a.ads2.msn.com 0.0.0.0 a.rad.msn.com 0.0.0.0 aidps.atdmt.com 0.0.0.0 apps.skype.com 0.0.0.0 az361816.vo.msecnd.net 0.0.0.0 az512334.vo.msecnd.net 0.0.0.0 b.ads1.msn.com 0.0.0.0 b.rad.msn.com 0.0.0.0 bs.serving-sys.com 0.0.0.0 c.atdmt.com Wykryto więcej niż wyliczono: 164 linii. ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-262468516-1371124315-1426830773-1001\Control Panel\Desktop\\Wallpaper -> D:\Pobrane\617542.jpg DNS Servers: 89.231.1.206 - 217.172.224.160 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: OFF) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == MSCONFIG\Services: DellUpdate => 2 MSCONFIG\Services: GalaxyClientService => 3 MSCONFIG\Services: GalaxyCommunication => 3 MSCONFIG\Services: iaStorAfsService => 3 MSCONFIG\Services: IAStorDataMgrSvc => 2 MSCONFIG\Services: NvContainerNetworkService => 3 MSCONFIG\Services: NvTelemetryContainer => 2 ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [{458DEC9A-CC08-48F4-A4F7-6844687FFFF1}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{9092D5A7-ADE5-4F8C-B253-4E290D8D74E0}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{F64ED6F2-0DAE-4B02-B7EB-A52D4A22A8FA}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe FirewallRules: [UDP Query User{780A50C4-B5C7-404C-9ED2-31A87B85D00D}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe FirewallRules: [TCP Query User{3E51EA72-9AC2-4234-9FB6-3B1E43AC4F0A}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe FirewallRules: [UDP Query User{F9A455AE-5D4B-4ED4-A15A-1E26ADBCD270}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe FirewallRules: [{821051E1-3266-49DF-BCF9-27FEC96BF4CE}] => (Allow) C:\Games\World_of_Tanks_enCore\WoTEnCoreLauncher.exe FirewallRules: [{873CECBC-BB50-4116-AC92-53CAC9F5805A}] => (Allow) C:\Games\World_of_Tanks_enCore\WoTEnCoreLauncher.exe FirewallRules: [{B9A7AEE5-CEB4-45D8-973F-117AF0002002}] => (Allow) C:\Games\World_of_Tanks_enCore\WorldOfTanksEnCoreLauncher.exe FirewallRules: [{F1939E16-494D-4ED9-B971-1FC5D2AB4BC1}] => (Allow) C:\Games\World_of_Tanks_enCore\WorldOfTanksEnCoreLauncher.exe FirewallRules: [{FD5725A1-3E6A-47C1-A2CF-9BB5BD1F7186}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{6560D8E9-9BB7-4C8B-B2AD-067554BBBC3C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{5719BF15-E038-40F7-8A38-5FA575701600}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{C42A89C5-FD90-4123-B7AA-8C273F6209E9}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{66D8C1DC-61B3-4EAC-B7EE-0B6D6B58546F}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe ==================== Punkty Przywracania systemu ========================= 09-01-2018 00:00:46 Instalator modułów systemu Windows 12-01-2018 15:18:40 Windows Update 13-01-2018 15:25:10 Oprogramowanie Intel® PROSet/Wireless ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= Name: Integrated Webcam Description: Urządzenie wideo USB Class Guid: {ca3e7ab9-b4c3-4ae6-8251-579ef933890f} Manufacturer: Microsoft Service: usbvideo Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Mikrofon (Realtek Audio) Description: Punkt końcowy audio Class Guid: {c166523c-fe0c-4a94-a586-f1a80cfbbf3e} Manufacturer: Microsoft Service: Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (01/14/2018 02:51:33 PM) (Source: SecurityCenter) (EventID: 16) (User: ) Description: Błąd podczas aktualizowania stanu na wartość SECURITY_PRODUCT_STATE_ON. Error: (01/14/2018 02:51:32 PM) (Source: SecurityCenter) (EventID: 16) (User: ) Description: Błąd podczas aktualizowania stanu na wartość SECURITY_PRODUCT_STATE_ON. Error: (01/14/2018 02:51:30 PM) (Source: SecurityCenter) (EventID: 16) (User: ) Description: Błąd podczas aktualizowania stanu na wartość SECURITY_PRODUCT_STATE_ON. Error: (01/14/2018 02:51:29 PM) (Source: SecurityCenter) (EventID: 16) (User: ) Description: Błąd podczas aktualizowania stanu na wartość SECURITY_PRODUCT_STATE_ON. Error: (01/14/2018 02:51:28 PM) (Source: SecurityCenter) (EventID: 16) (User: ) Description: Błąd podczas aktualizowania stanu na wartość SECURITY_PRODUCT_STATE_ON. Error: (01/14/2018 02:51:27 PM) (Source: SecurityCenter) (EventID: 16) (User: ) Description: Błąd podczas aktualizowania stanu na wartość SECURITY_PRODUCT_STATE_ON. Error: (01/14/2018 02:51:26 PM) (Source: SecurityCenter) (EventID: 16) (User: ) Description: Błąd podczas aktualizowania stanu na wartość SECURITY_PRODUCT_STATE_ON. Error: (01/14/2018 02:51:25 PM) (Source: SecurityCenter) (EventID: 16) (User: ) Description: Błąd podczas aktualizowania stanu na wartość SECURITY_PRODUCT_STATE_ON. Error: (01/14/2018 02:51:24 PM) (Source: SecurityCenter) (EventID: 16) (User: ) Description: Błąd podczas aktualizowania stanu na wartość SECURITY_PRODUCT_STATE_ON. Error: (01/14/2018 02:51:23 PM) (Source: SecurityCenter) (EventID: 16) (User: ) Description: Błąd podczas aktualizowania stanu na wartość SECURITY_PRODUCT_STATE_ON. Dziennik System: ============= Error: (01/14/2018 02:39:37 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: ZARZĄDZANIE NT) Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x80070643: Update for Windows 10 Version 1709 for x64-based Systems (KB4041994). Error: (01/14/2018 02:39:12 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: ZARZĄDZANIE NT) Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x80070643: Update for Windows 10 Version 1709 for x64-based Systems (KB4041994). Error: (01/14/2018 02:33:46 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: ZARZĄDZANIE NT) Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x80070643: Update for Windows 10 Version 1709 for x64-based Systems (KB4041994). Error: (01/14/2018 02:29:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Intel(R) PROSet/Wireless Zero Configuration Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (01/14/2018 02:29:33 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Update Orchestrator Service zakończyła działanie; wystąpił następujący błąd: Klasa jest skonfigurowana do pracy jako identyfikator bezpieczeństwa inny niż wywołujący. Error: (01/14/2018 02:29:33 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: ZARZĄDZANIE NT) Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x80070643: 2017-12 Aktualizacja zbiorcza dla systemu Windows 10 Version 1709 dla systemów opartych na architekturze x64 (KB4054517). Error: (01/14/2018 02:28:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Intel(R) PROSet/Wireless Zero Configuration Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (01/14/2018 02:26:32 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Update Orchestrator Service zakończyła działanie; wystąpił następujący błąd: Operacja została zwrócona, ponieważ przekroczono limit czasu. Error: (01/14/2018 02:26:13 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: ZARZĄDZANIE NT) Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x80070643: Update for Windows 10 Version 1709 for x64-based Systems (KB4041994). Error: (01/14/2018 02:25:17 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: ZARZĄDZANIE NT) Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x80070643: Update for Windows 10 Version 1709 for x64-based Systems (KB4041994). CodeIntegrity: =================================== Date: 2017-12-22 18:26:26.315 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-12-22 18:26:25.665 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-12-22 18:26:01.541 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-12-22 18:26:01.261 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-12-22 18:25:48.632 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-12-22 18:25:46.548 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-12-22 18:25:46.376 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-12-18 16:15:54.925 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-12-18 16:09:07.729 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-12-18 16:09:07.106 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM) i7-7700HQ CPU @ 2.80GHz Procent pamięci w użyciu: 22% Całkowita pamięć fizyczna: 16249.16 MB Dostępna pamięć fizyczna: 12588.77 MB Całkowita pamięć wirtualna: 18681.16 MB Dostępna pamięć wirtualna: 15002.73 MB ==================== Dyski ================================ Drive c: (OS) (Fixed) (Total:222.72 GB) (Free:150.15 GB) NTFS Drive d: (DATA) (Fixed) (Total:931.39 GB) (Free:925.64 GB) NTFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: E3886B5B) Partition: GPT. ======================================================== Disk: 1 (Size: 238.5 GB) (Disk ID: E3886392) Partition: GPT. ==================== Koniec Addition.txt ============================