Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja:13-09-2015 Uruchomiony przez Zero (2015-09-13 16:23:13) Uruchomiony z C:\Users\Zero\Downloads Windows 7 Ultimate Service Pack 1 (X64) (2014-10-08 07:31:27) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-2733219707-495623863-2652868773-500 - Administrator - Disabled) Gość (S-1-5-21-2733219707-495623863-2652868773-501 - Limited - Disabled) Zero (S-1-5-21-2733219707-495623863-2652868773-1000 - Administrator - Enabled) => C:\Users\Zero ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated) Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated) Adobe Reader XI (11.0.12) - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated) Aeria Ignite (HKLM-x32\...\Aeria Ignite 1.13.3296) (Version: 1.13.3296 - Aeria Games & Entertainment) Aeria Ignite (HKLM-x32\...\Aeria Ignite) (Version: 1.13.3296 - Aeria Games & Entertainment) Aeria Ignite (x32 Version: 1.13.3296 - Aeria Games & Entertainment) Hidden Akamai NetSession Interface (HKU\S-1-5-21-2733219707-495623863-2652868773-1000\...\Akamai) (Version: - Akamai Technologies, Inc) Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.15.16 - Atheros Communications Inc.) Aura Kingdom (HKLM-x32\...\Aura Kingdom) (Version: - ) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) CameraHelperMsi (x32 Version: 13.30.1395.0 - Logitech) Hidden Curse (HKLM-x32\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse) Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment) Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve) Echo of Soul (HKLM-x32\...\Echo of Soul) (Version: - ) erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden ESET Smart Security (HKLM\...\{50444D27-4D15-41F2-BD35-DC95D74021C8}) (Version: 8.0.319.1 - ESET, spol s r. o.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.85 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.28.13 - Google Inc.) Hidden Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment) Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios) Java 7 Update 67 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417067FF}) (Version: 7.0.670 - Oracle) League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games) League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.30 - Logitech Inc.) Logitech Webcam Software Driver Package (HKLM\...\lvdrivers_12.10) (Version: 12.10.1110 - Logitech Inc.) LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden Malwarebytes Anti-Malware wersja 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) NVIDIA Oprogramowanie systemu PhysX 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation) NVIDIA Sterownik 3D Vision 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation) NVIDIA Sterownik graficzny 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation) NVIDIA Sterownik kontrolera 3D Vision 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation) Opera 12.17 (HKLM\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA) Painkiller Czarna Edycja (HKLM-x32\...\{785DB544-E757-44F8-8930-B10A7465407A}) (Version: 1.0 - DreamCatcher) Panel sterowania NVIDIA 340.52 (Version: 340.52 - NVIDIA Corporation) Hidden Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile PLK Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended PLK Language Pack) (Version: 4.0.30319 - Microsoft Corporation) RaidCall (HKLM-x32\...\RaidCall) (Version: 7.3.6-1.0.12972.94 - raidcall.com) Revo Uninstaller Pro 3.1.2 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.2 - VS Revo Group, Ltd.) Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation) Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.) Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 2.13.2948.1 - Hi-Rez Studios) Special Uninstaller version 3.6 (HKLM-x32\...\{46744C87-EE41-4BA3-A444-C2DECC145FC0}_is1) (Version: 3.6 - http://www.specialuninstaller.com/) SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - ) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) WinRAR 5.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Punkty Przywracania systemu ========================= UWAGA: Przywracanie systemu jest wyłączone ==================== Hosts - zawartość: ========================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2009-07-14 04:34 - 2014-11-06 14:19 - 00000921 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 genuine.microsoft.com 127.0.0.1 mpa.one.microsoft.com 127.0.0.1 sls.microsoft.com ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {0F5175D6-9060-4D6F-8CF6-CEE79B5837AA} - System32\Tasks\itbh => Rundll32.exe "C:\Windows\SysWOW64\eappgnui6.dll",GRYLHG Task: {19CE8207-927F-4CAC-8729-92C56B6C78FE} - \SmartWeb Upgrade Trigger Task -> Brak pliku <==== UWAGA Task: {19DEDB5B-B8DC-4252-A447-F4F0C5542591} - System32\Tasks\{ADAB01D8-5E70-49A4-B861-60063BE0B14C} => pcalua.exe -a I:\Atheros\setup.exe -d I:\Atheros Task: {1BDC5F84-98F4-4D17-91BE-BF8FDEA7C4F8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated) Task: {1D07C8FA-EB11-4306-8A7C-91904E692F19} - System32\Tasks\TouchReader => c:\programdata\{84fba26e-b993-c2bb-84fb-ba26eb9989ba}\animo1-movie.rar.exe-1437840488108.exe <==== UWAGA Task: {353DE0EC-579F-43AE-847B-A955ED9DBEC3} - \WordSurfer Auto Updater 1.10.0.19 Core -> Brak pliku <==== UWAGA Task: {35F314EA-49C9-4703-B2A9-AE1488F916A9} - System32\Tasks\{85011294-C40C-4489-ACB7-829B7ACFA856} => pcalua.exe -a C:\Users\Zero\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=obw Task: {3EA1CD18-5CBC-4DF2-892E-56BE02D9B2FE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-09] (Google Inc.) Task: {47E3916E-71EA-4332-A074-A7678392ECD2} - System32\Tasks\9UuNVKTD1p1SQA => C:\Users\Zero\AppData\Roaming\9UuNVKTD1p1SQA.exe <==== UWAGA Task: {61164DD7-6A36-4417-A56F-C1355BB8B773} - \WordSurfer Auto Updater 1.10.0.19 Pending Update -> Brak pliku <==== UWAGA Task: {7DB6A782-B27C-4FAD-AE75-73E6176EFABE} - System32\Tasks\SpyHunter4Startup => C:\Nasze\WWW\SpyHunter 4.20.9.4533 Portable\App\SpyHunter\SpyHunter4.exe [2015-09-09] (Enigma Software Group USA, LLC.) Task: {7F32B22A-1B59-42BB-A5C0-C8D2852B1081} - \SPBIW_UpdateTask_Time_3233363537313231322d2d55506c2a5a55576c412334 -> Brak pliku <==== UWAGA Task: {847AED48-194A-482A-81C1-4B9D27C4461D} - \ShopperProJSUpd -> Brak pliku <==== UWAGA Task: {A4C4A6B6-CC38-409B-A052-77AD26C411B8} - System32\Tasks\5JXwigXFj3tmdPOLow => C:\Users\Zero\AppData\Roaming\5JXwigXFj3tmdPOLow.exe <==== UWAGA Task: {ACEDCEDB-9A4A-44ED-B454-FAA0E6DD8C28} - \PhraseProfessor Auto Updater 1.10.0.24 Pending Update -> Brak pliku <==== UWAGA Task: {AE300614-ACFE-4E0C-986A-C0E433B3A8F2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-12] (Adobe Systems Incorporated) Task: {B1B46078-98DA-4441-8D88-EC36C72A3954} - \SPDriver -> Brak pliku <==== UWAGA Task: {B2CF2B79-5C6B-4EC3-B803-CD4F586ECD0C} - \PhraseProfessor Auto Updater 1.10.0.24 Core -> Brak pliku <==== UWAGA Task: {BC2F2E0C-4D43-4A97-B859-5B4BE98C9603} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-09] (Google Inc.) Task: {E61EDEF7-D161-4BE7-BC93-C6BB022914F9} - \ShopperPro -> Brak pliku <==== UWAGA Task: {EB84099B-C831-4C28-BBD1-E298ABB0B670} - System32\Tasks\kcUkSugonhjjhcSDt5kWE5ei => C:\Users\Zero\AppData\Roaming\kcUkSugonhjjhcSDt5kWE5ei.exe <==== UWAGA (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\5JXwigXFj3tmdPOLow.job => C:\Users\Zero\AppData\Roaming\5JXwigXFj3tmdPOLow.exe <==== UWAGA Task: C:\Windows\Tasks\9UuNVKTD1p1SQA.job => C:\Users\Zero\AppData\Roaming\9UuNVKTD1p1SQA.exe <==== UWAGA Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\itbh.job => C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\eappgnui6.dll Task: C:\Windows\Tasks\kcUkSugonhjjhcSDt5kWE5ei.job => C:\Users\Zero\AppData\Roaming\kcUkSugonhjjhcSDt5kWE5ei.exe <==== UWAGA Task: C:\Windows\Tasks\TouchReader.job => c:\programdata\{84fba26e-b993-c2bb-84fb-ba26eb9989ba}\animo1-movie.rar.exe-1437840488108.exe <==== UWAGA ==================== Załadowane moduły (filtrowane) ============== 2014-10-08 10:00 - 2014-07-02 20:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2011-08-12 12:18 - 2011-08-12 12:18 - 00265240 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe 2011-08-12 12:19 - 2011-08-12 12:19 - 00680984 _____ () C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe 2015-09-08 23:02 - 2015-09-08 23:02 - 00447024 _____ () C:\ProgramData\gowwdyygvnef.dll 2015-09-09 15:19 - 2015-08-28 03:56 - 01868104 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\libglesv2.dll 2015-09-09 15:19 - 2015-08-28 03:56 - 00093000 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\libegl.dll 2015-09-09 15:19 - 2015-08-28 03:56 - 28659016 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\PepperFlash\pepflashplayer.dll 2011-08-12 12:18 - 2011-08-12 12:18 - 02145304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll 2011-08-12 12:18 - 2011-08-12 12:18 - 07956504 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll 2011-08-12 12:18 - 2011-08-12 12:18 - 00342552 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll 2011-08-12 12:18 - 2011-08-12 12:18 - 00029208 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll 2011-08-12 12:18 - 2011-08-12 12:18 - 00128536 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll 2011-08-22 15:47 - 2011-08-22 15:47 - 00336408 _____ () C:\Program Files (x86)\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) ==================== EXE - Powiązania (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) IE trusted site: HKU\S-1-5-21-2733219707-495623863-2652868773-1000\...\aeriagames.com -> hxxps://aeriagames.com IE trusted site: HKU\S-1-5-21-2733219707-495623863-2652868773-1000\...\aeriagames.com -> hxxp://aeriagames.com ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-2733219707-495623863-2652868773-1000\Control Panel\Desktop\\Wallpaper -> DNS Servers: 192.168.1.254 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows - funkcja włączona. ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Obecnie brak automatycznej naprawy dla tej sekcji.) ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [{C41D0BA3-F16C-44A5-BAE7-3430AA7C3BE8}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe FirewallRules: [{43C6A299-E052-4F99-8C40-00199B09EC53}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe FirewallRules: [{EBA8E352-5162-42E8-950A-2EFC3453F8B8}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper_32.exe FirewallRules: [{C04FFA4B-CBB0-4446-9028-407868DB7E4C}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper_32.exe FirewallRules: [{59C7F473-D79A-4058-A3A0-6D3B4924FF0E}] => (Allow) C:\Program Files\Opera x64\opera.exe FirewallRules: [{21C86AB0-D181-4A67-BEA2-3FE29E92972C}] => (Allow) C:\Program Files\Opera x64\opera.exe FirewallRules: [{1914920B-A0AE-4B73-84F2-14C2FE5440E5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [TCP Query User{11D43C25-47C4-499A-A2B1-C925B2FB6E2C}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe FirewallRules: [UDP Query User{EBF7A577-8D6E-45AE-A233-9235F4E9FC54}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe FirewallRules: [{F4956BAE-E2DB-427D-B803-A126CF9A88D6}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe FirewallRules: [{5F8ED8A6-2983-44A4-9E59-DC2C39181354}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe FirewallRules: [TCP Query User{A014CBE9-65B0-465B-A041-06AD0D277AB6}C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe FirewallRules: [UDP Query User{22BF76BA-5551-4617-B78D-CDEA232C75D5}C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe FirewallRules: [TCP Query User{F5863F10-0632-4574-9D28-9226263333EA}C:\users\zero\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\zero\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{006931E8-1FB4-4B83-A8C5-AE7C76C0DAB2}C:\users\zero\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\zero\appdata\local\akamai\netsession_win.exe FirewallRules: [{E4A4C87B-8A0A-4B8D-B6CC-0139BD800971}] => (Allow) LPort=55008 FirewallRules: [{A494F4E1-9A10-49E1-8135-A95B24CD0C7E}] => (Allow) LPort=5000 FirewallRules: [{060CB35D-0653-4CE8-AC8E-1F3BF4AF2FF7}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin FirewallRules: [{CD9CFB9E-3745-40B2-83AE-1650DBE011D4}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin FirewallRules: [{46494203-583D-446E-8B26-84088820D4F4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe FirewallRules: [{E1E95A22-994A-4BDB-BD6B-E3DF626853FD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe FirewallRules: [{C2F0E822-050F-49C7-9321-9AC2A771722E}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe FirewallRules: [{D7B9A2D2-1636-4015-9917-50B853AA7BB3}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe FirewallRules: [TCP Query User{8DCA4429-F94B-46F2-A81D-C2B99EA13CD8}C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe FirewallRules: [UDP Query User{D679FAF0-6738-41DD-AF10-681489198551}C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe FirewallRules: [{AAD6E07A-B801-4351-84BA-B322FD41FD08}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe FirewallRules: [{6B4ED15D-DCD4-423A-8C59-CB25C687A45E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe FirewallRules: [TCP Query User{2BA11A1F-FB87-4491-B6E4-BCEFA1A89E9C}C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{74D7FB15-C4A4-47EA-8D6F-0AA3448E590E}C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe FirewallRules: [{0AE839E2-BE14-4469-8756-75ABE1ED93AA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{27DB35CF-D85C-4B20-B33F-BB998AA0CE49}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{D38E1628-5A97-49C3-AEAF-6A540706787A}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{5649FAE9-69A2-495F-8F33-22D7EE8374F6}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{E3B155A2-CFD0-4B9C-87C1-A08CE1F2ACA1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{E158CD23-08C5-4D12-9311-E46A0249AD3D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{78ECD11B-18CD-4618-9489-AF24F92D50DC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe FirewallRules: [{DD239B2F-2EB1-4D77-BA0A-A13C3FCE8C1F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe FirewallRules: [TCP Query User{9BA6B00E-B179-47EE-ABF8-7FED44C2CBB1}C:\program files (x86)\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{4344E963-B30A-4085-BE4F-6F35E5D9F4B0}C:\program files (x86)\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe FirewallRules: [{249C60E0-C08D-4FC4-8CE3-6B71839722B0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe FirewallRules: [{A297890B-A5F5-463D-8AB2-8DCCFA555A33}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe FirewallRules: [{32EEE538-8012-4E8E-B7DF-9EE7B3BC9216}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe FirewallRules: [{C55D9C40-E414-4D5C-BE42-95551A296F7E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe FirewallRules: [{AFEACDF1-5601-48AE-9E09-5173F726DFD8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe FirewallRules: [{19079996-8908-4190-91E6-D2DE0684EA6B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe FirewallRules: [TCP Query User{9DD25063-03C7-42E5-A417-E551DFE139F7}C:\program files (x86)\raidcall\raidcall.exe] => (Block) C:\program files (x86)\raidcall\raidcall.exe FirewallRules: [UDP Query User{EEE2B19B-9843-40BF-A6A6-3150CB7E6DC7}C:\program files (x86)\raidcall\raidcall.exe] => (Block) C:\program files (x86)\raidcall\raidcall.exe FirewallRules: [TCP Query User{373648F5-C3FD-458F-A4E9-078B270DE88B}C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{5FDE09EE-2942-4985-9F66-7C454AEAF70B}C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe FirewallRules: [TCP Query User{53596B8C-59F6-428A-8025-8A8330B56B49}C:\users\zero\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\zero\appdata\local\mycomgames\mycomgames.exe FirewallRules: [UDP Query User{BE7467CF-EC69-4F9B-BABD-97AE80C3D119}C:\users\zero\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\zero\appdata\local\mycomgames\mycomgames.exe FirewallRules: [TCP Query User{CD5073DA-679A-45A5-A510-DDDA9DEC3899}C:\users\zero\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\zero\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{705BB3CC-99B0-4062-B3CD-44475D06A2A5}C:\users\zero\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\zero\appdata\local\akamai\netsession_win.exe FirewallRules: [TCP Query User{9908CA5B-3E2E-4161-8CC6-2C82D380D74D}C:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{C1C9030B-4255-43FB-B875-9BD3A112286D}C:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe FirewallRules: [{4EE79465-71E3-4C07-9FD1-08E495CC9F2D}] => (Allow) C:\Users\Zero\AppData\Roaming\IQIYI Video\LStyle\QyUpdate.exe FirewallRules: [{4F56D1EC-4FC8-4CC0-A241-4A02E15721AD}] => (Allow) C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe FirewallRules: [{DEC14B7E-6B7F-4705-AF68-D9D712871439}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= Name: G:\ Description: SD/MMC Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a} Manufacturer: Generic- Service: WUDFRd Problem: : Windows has stopped this device because it has reported problems. (Code 43) Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. Name: F:\ Description: SM/xD-Picture Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a} Manufacturer: Generic- Service: WUDFRd Problem: : Windows has stopped this device because it has reported problems. (Code 43) Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. Name: Teredo Tunneling Pseudo-Interface Description: Karta tunelowania Teredo firmy Microsoft Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: H:\ Description: MS/MS-Pro Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a} Manufacturer: Generic- Service: WUDFRd Problem: : Windows has stopped this device because it has reported problems. (Code 43) Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (09/13/2015 04:12:59 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: explorer.exe, wersja: 6.1.7601.17514, sygnatura czasowa: 0x4ce7a144 Nazwa modułu powodującego błąd: gowwdyygvnef.dll_unloaded, wersja: 0.0.0.0, sygnatura czasowa: 0x55ef09a6 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000007fefb756590 Identyfikator procesu powodującego błąd: 0x47c Godzina uruchomienia aplikacji powodującej błąd: 0xexplorer.exe0 Ścieżka aplikacji powodującej błąd: explorer.exe1 Ścieżka modułu powodującego błąd: explorer.exe2 Identyfikator raportu: explorer.exe3 Error: (09/13/2015 04:12:44 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: Explorer.EXE, wersja: 6.1.7601.17514, sygnatura czasowa: 0x4ce7a144 Nazwa modułu powodującego błąd: gowwdyygvnef.dll_unloaded, wersja: 0.0.0.0, sygnatura czasowa: 0x55ef09a6 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000007fefb756590 Identyfikator procesu powodującego błąd: 0xf34 Godzina uruchomienia aplikacji powodującej błąd: 0xExplorer.EXE0 Ścieżka aplikacji powodującej błąd: Explorer.EXE1 Ścieżka modułu powodującego błąd: Explorer.EXE2 Identyfikator raportu: Explorer.EXE3 Error: (09/13/2015 04:08:09 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="*",publicKeyToken="436865772d574741",type="win32",version="6.0.0.0"1". Nie można odnaleźć zestawu zależnego Microsoft.Windows.Common-Controls,language="*",processorArchitecture="*",publicKeyToken="436865772d574741",type="win32",version="6.0.0.0". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error: (09/13/2015 04:03:13 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/13/2015 02:11:39 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/13/2015 08:17:43 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: Explorer.EXE, wersja: 6.1.7601.17514, sygnatura czasowa: 0x4ce7a144 Nazwa modułu powodującego błąd: gowwdyygvnef.dll_unloaded, wersja: 0.0.0.0, sygnatura czasowa: 0x55ef09a6 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000007fefaf36590 Identyfikator procesu powodującego błąd: 0xe50 Godzina uruchomienia aplikacji powodującej błąd: 0xExplorer.EXE0 Ścieżka aplikacji powodującej błąd: Explorer.EXE1 Ścieżka modułu powodującego błąd: Explorer.EXE2 Identyfikator raportu: Explorer.EXE3 Error: (09/13/2015 08:05:22 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/12/2015 06:10:00 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/12/2015 01:58:14 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/12/2015 08:13:13 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Dziennik System: ============= Error: (09/13/2015 04:00:27 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Usługa udostępniania w sieci programu Windows Media Player niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (09/13/2015 04:00:27 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (09/13/2015 04:00:27 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Ochrona oprogramowania niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 120000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (09/13/2015 04:00:26 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa MBAMService niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (09/13/2015 04:00:26 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Hi-Rez Studios Authenticate and Update Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (09/13/2015 04:00:26 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa MBAMScheduler niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (09/13/2015 04:00:26 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Skype Click to Call PNR Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (09/13/2015 04:00:25 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Skype Click to Call Updater niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (09/13/2015 04:00:25 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Adobe Acrobat Update Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (09/13/2015 04:00:25 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Bufor wydruku niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 60000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Microsoft Office: ========================= Error: (09/13/2015 04:12:59 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: explorer.exe6.1.7601.175144ce7a144gowwdyygvnef.dll_unloaded0.0.0.055ef09a6c0000005000007fefb75659047c01d0ee2e47309280C:\Windows\explorer.exegowwdyygvnef.dll88ee9eda-5a21-11e5-ab3a-94de8033b461 Error: (09/13/2015 04:12:44 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Explorer.EXE6.1.7601.175144ce7a144gowwdyygvnef.dll_unloaded0.0.0.055ef09a6c0000005000007fefb756590f3401d0ee2cbf5b11e7C:\Windows\Explorer.EXEgowwdyygvnef.dll8055df3b-5a21-11e5-ab3a-94de8033b461 Error: (09/13/2015 04:08:09 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="*",publicKeyToken="436865772d574741",type="win32",version="6.0.0.0"C:\Windows\System32\systemcpl.dll Error: (09/13/2015 04:03:13 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/13/2015 02:11:39 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/13/2015 08:17:43 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Explorer.EXE6.1.7601.175144ce7a144gowwdyygvnef.dll_unloaded0.0.0.055ef09a6c0000005000007fefaf36590e5001d0ede9fb45e322C:\Windows\Explorer.EXEgowwdyygvnef.dll23f37a4f-59df-11e5-baa5-94de8033b461 Error: (09/13/2015 08:05:22 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/12/2015 06:10:00 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/12/2015 01:58:14 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/12/2015 08:13:13 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 CodeIntegrity: =================================== Date: 2015-09-13 16:01:30.724 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system. Date: 2015-09-13 15:57:18.636 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system. Date: 2015-09-13 15:50:14.679 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system. Date: 2015-09-13 14:10:00.858 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system. Date: 2015-09-13 12:35:37.861 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system. Date: 2015-09-13 08:03:40.661 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system. Date: 2015-09-12 18:08:17.646 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system. Date: 2015-09-12 15:28:21.225 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system. Date: 2015-09-12 14:14:39.337 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system. Date: 2015-09-12 13:56:32.379 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system. ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz Procent pamięci w użyciu: 82% Całkowita pamięć fizyczna: 4094.49 MB Dostępna pamięć fizyczna: 736.97 MB Całkowita pamięć wirtualna: 8187.16 MB Dostępna pamięć wirtualna: 4380.55 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:297.99 GB) (Free:166.9 GB) NTFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: C40EC40E) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS) ==================== Koniec Addition.txt ============================