Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 07-12-2016
Uruchomiony przez admin (13-12-2016 19:21:34)
Uruchomiony z C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X1MPJ4M0
Windows 7 Professional Service Pack 1 (X64) (2015-06-11 12:36:08)
Tryb startu: Normal
==========================================================


==================== Konta użytkowników: =============================

admin (S-1-5-21-1246516170-3302107629-780083620-1000 - Administrator - Enabled) => C:\Users\admin
Administrator (S-1-5-21-1246516170-3302107629-780083620-500 - Administrator - Disabled)
Gość (S-1-5-21-1246516170-3302107629-780083620-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1246516170-3302107629-780083620-1002 - Limited - Enabled)

==================== Centrum zabezpieczeń ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie.)

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Zainstalowane programy ======================

(W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)

Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated)
Adobe Flash Player 23 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 23.0.0.162 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.162 - Adobe Systems Incorporated)
AIMP3 (HKLM-x32\...\AIMP3) (Version: v3.60.1495, 03.06.2015 - AIMP DevTeam)
Arcabit (HKLM\...\Arcabit) (Version: 2014 - Arcabit)
Bing Bar (HKLM-x32\...\{16793295-2366-40F7-A045-A3E42A81365E}) (Version: 7.1.362.0 - Microsoft Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.09 - Piriform)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.32.35.0 - Conexant)
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Discord (HKU\S-1-5-21-1246516170-3302107629-780083620-1000\...\Discord) (Version: 0.0.296 - Hammer & Chisel, Inc.)
Empire Earth (HKLM-x32\...\{2447500B-22D7-47BD-9B13-1A927F43A267}) (Version: 1.0 - Sierra)
Grand Theft Auto: Episodes from Liberty City (x32 Version: 1.0.0003.135 - Rockstar Games Inc.) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.3.1427 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2884 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.7.0.1013 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
Java 8 Update 77 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418077F0}) (Version: 8.0.770.3 - Oracle Corporation)
Java SE Development Kit 8 Update 77 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180770}) (Version: 8.0.770.3 - Oracle Corporation)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
LibreOffice 4.4.2.2 (HKLM-x32\...\{99A395EF-A310-40BB-B7A3-E3FF07CC38FC}) (Version: 4.4.2.2 - The Document Foundation)
LOOT (wersja 0.10.1) (HKLM-x32\...\{BF634210-A0D4-443F-A657-0DCE38040374}_is1) (Version: 0.10.1 - LOOT Team)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}) (Version: 3.1.186.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}) (Version: 3.1.99.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60129.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mount & Blade: Warband (HKLM\...\Steam App 48700) (Version:  - TaleWorlds Entertainment)
Mozilla Firefox 42.0 (x86 pl) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 pl)) (Version: 42.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9.2 - Notepad++ Team)
NVIDIA PhysX (HKLM-x32\...\{DEA314C4-0929-4250-BC92-98E4C105F28D}) (Version: 9.10.0129 - NVIDIA Corporation)
Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile PLK Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended PLK Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Rust (HKLM\...\Steam App 252490) (Version:  - Facepunch Studios)
Sid Meier's Civilization VI (HKLM\...\Steam App 289070) (Version:  - Firaxis)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.112 - Skype Technologies S.A.)
SkySaga Infinite Isles (HKLM-x32\...\SkySaga Infinite Isles 1.0.3713.0) (Version: 1.0.3713.0 - Radiant Worlds)
SkySaga Infinite Isles (x32 Version: 1.0.3713.0 - Radiant Worlds) Hidden
Space Engineers (HKLM\...\Steam App 244850) (Version:  - Keen Software House)
StarMade Demo (HKLM\...\Steam App 335180) (Version:  - Schine, GmbH)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Elder Scrolls V: Skyrim (HKLM\...\Steam App 72850) (Version:  - Bethesda Game Studios)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
War Thunder (HKLM\...\Steam App 236390) (Version:  - Gaijin Entertainment)
Windows Driver Package - Silicon Laboratories (silabenm) Ports  (12/10/2012 6.6.1.0) (HKLM\...\D680DEE0F68D64EC53D0C5769879D15D387054CC) (Version: 12/10/2012 6.6.1.0 - Silicon Laboratories)
WinRAR 5.21 (32-bitowy) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Niestandardowe rejestracje CLSID (filtrowane): ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Zaplanowane zadania (filtrowane) =============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {079E2DE0-C81A-4658-8BE3-490EC1EB94F2} - System32\Tasks\{DC73669F-D798-4276-93C3-292D570BCB88} => C:\Program Files (x86)\Gry\EFLC\LaunchEFLC.exe
Task: {2B21DD6B-8EEB-4065-A72C-FA3AF5289BEA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-10-08] (Adobe Systems Incorporated)
Task: {40EE2D5D-84F7-4133-8499-8551FD973891} - \{1932E307-539C-411C-9409-716957509A06} -> Brak pliku <==== UWAGA
Task: {54046C98-F51F-4E79-A5C2-61A04D85DA60} - \GoogleUpdateTaskMachineCore1d21a6b39b547 -> Brak pliku <==== UWAGA
Task: {7F86746E-041C-45D0-95E2-91EC1852E4B9} - System32\Tasks\{7E837FC3-778B-4B87-89F7-4987183AE7AE} => C:\Program Files (x86)\Gry\EFLC\LaunchEFLC.exe
Task: {80B48018-5D9C-4960-8F42-B7CF6599DF1F} - System32\Tasks\{29A445E3-FC26-47C1-A583-D35643938129} => C:\Program Files (x86)\Gry\EFLC\LaunchEFLC.exe
Task: {8609C108-FD6C-425C-A52A-233BD937BC99} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {93661704-91F7-49AB-B93C-19A32DD476ED} - \BossseedUpdateTaskMachineUA -> Brak pliku <==== UWAGA
Task: {96321D44-8CA1-4E8F-BF53-0E4721DE9089} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {97419EA9-ED09-4EBD-9116-EF8661A77694} - \Microsoft\Windows Defender\MP Scheduled Scan -> Brak pliku <==== UWAGA
Task: {AD7A78EE-F38F-4EAD-BEBE-930776A1AE70} - System32\Tasks\{E1BF86F5-B737-4BB3-831A-920D12FC9981} => C:\Program Files (x86)\Gry\EFLC\LaunchEFLC.exe
Task: {F2BE8182-FB3D-4E52-B395-C2B57F5CD345} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-08-20] (Piriform Ltd)
Task: {F6D18A9A-F012-40A8-A505-34446C5C2568} - System32\Tasks\{2F7149FB-EAB8-443B-8CBD-2FF93FC9BDDA} => C:\Program Files (x86)\Gry\EFLC\LaunchEFLC.exe

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)

Task: C:\Windows\Tasks\060184C3-9766-46a0-B258-F4518A0B2633.job => C:\Windows\system32\cscript.exe C:\ProgramData\Baidu Security\Duplicaterecord.js
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Skróty =============================

(Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.)

==================== Załadowane moduły (filtrowane) ==============

2016-11-10 13:24 - 2016-11-09 03:43 - 00352768 _____ () c:\programdata\microsoft\blend\14.0\1033\resourcecacher.dll

==================== Alternate Data Streams (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.)

AlternateDataStreams: C:\ProgramData:NT [40]
AlternateDataStreams: C:\ProgramData:NT2 [346]
AlternateDataStreams: C:\Users\All Users:NT [40]
AlternateDataStreams: C:\Users\All Users:NT2 [346]
AlternateDataStreams: C:\Users\admin\Dane aplikacji:NT [40]
AlternateDataStreams: C:\Users\admin\Dane aplikacji:NT2 [346]
AlternateDataStreams: C:\Users\admin\AppData\Roaming:NT [40]
AlternateDataStreams: C:\Users\admin\AppData\Roaming:NT2 [346]
AlternateDataStreams: C:\ProgramData\Application Data:NT [40]
AlternateDataStreams: C:\ProgramData\Application Data:NT2 [346]
AlternateDataStreams: C:\ProgramData\Dane aplikacji:NT [40]
AlternateDataStreams: C:\ProgramData\Dane aplikacji:NT2 [346]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [346]
AlternateDataStreams: C:\ProgramData\TEMP:05EE1EEF [976]

==================== Tryb awaryjny (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.)


==================== Powiązania plików (filtrowane) ===============

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.)


==================== Internet Explorer - Witryny zaufane i z ograniczeniami ===============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.)

IE trusted site: HKU\S-1-5-21-1246516170-3302107629-780083620-1000\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-1246516170-3302107629-780083620-1000\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-1246516170-3302107629-780083620-1000\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-1246516170-3302107629-780083620-1000\...\sony.com -> sony.com

==================== Hosts - zawartość: ===============================

(Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Inne obszary ============================

(Obecnie brak automatycznej naprawy dla tej sekcji.)

HKU\S-1-5-21-1246516170-3302107629-780083620-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\admin\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Zapora systemu Windows [funkcja włączona]

==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==


==================== Reguły Zapory systemu Windows (filtrowane) ===============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

FirewallRules: [VirtualPC-In-UDP-1] => %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-UDP-2] => %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-TCP-1] => %SystemRoot%\System32\vpc.exe
FirewallRules: [SPPSVC-In-TCP] => %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{F1403DDA-FF39-445D-A899-7C3E8DBA4AEE}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E0EC5425-318B-4A8E-9B99-4104D2E52056}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{EA547B30-17A2-404D-8651-30BF5D3C4E77}] => %SystemRoot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
FirewallRules: [{51A33808-4E07-4EDD-BA92-6F4F59D5CC37}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1399A417-8357-41CF-8EF5-A9E95E27F8A1}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{586CB562-D6D4-4B79-883E-48C7F586DE87}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{2C82D673-AB82-42D0-917D-30DF192E2EC8}] => LPort=80
FirewallRules: [{D9475A72-A79E-4D58-A938-23094DE262BD}] => LPort=443
FirewallRules: [{4FF0287C-2796-40A4-9C2A-729E6CAC2325}] => LPort=20010
FirewallRules: [{B390BBAB-6CEA-436E-A26D-443660D75D22}] => LPort=3478
FirewallRules: [{C1C0A602-DB0E-49DA-8CCA-53F65429EC95}] => LPort=7850
FirewallRules: [{B1D9DAF3-6D37-4274-8149-099633AF7CB7}] => LPort=7852
FirewallRules: [{F5FBD470-6630-4D45-9BB5-295BEB2EA5AD}] => LPort=7853
FirewallRules: [{D677F3B1-C705-4595-904C-1AD689AC6EC6}] => LPort=27022
FirewallRules: [{AD92133C-463F-4771-B0DB-B3CCAF3EEC03}] => LPort=6881
FirewallRules: [{458973E5-037B-4E9B-9078-8B1C836705E9}] => LPort=33333
FirewallRules: [{27BE9EFB-7B9E-44A4-A79C-08E088A91594}] => LPort=20443
FirewallRules: [{6B0D63D4-BFDE-4444-A90D-15C727B8D04E}] => LPort=8090
FirewallRules: [{096F20C1-0F43-490E-8045-ADD1545D99E3}] => C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{255355D9-D30D-475A-AE78-AF4B25113340}] => C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{8D98A394-3F4C-409F-916D-44FBFBB0CD69}C:\program files (x86)\dayzlauncher\dayzlauncher.exe] => C:\program files (x86)\dayzlauncher\dayzlauncher.exe
FirewallRules: [UDP Query User{0CC811E8-E7FE-44A3-B6AE-AEA91B3887F6}C:\program files (x86)\dayzlauncher\dayzlauncher.exe] => C:\program files (x86)\dayzlauncher\dayzlauncher.exe
FirewallRules: [TCP Query User{DF6C3574-881B-4E7A-9DF4-BCB54100AF0D}C:\users\admin\documents\curse\minecraft\install\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\admin\documents\curse\minecraft\install\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{484E811C-CC04-446F-AC0F-4A256E6C6E95}C:\users\admin\documents\curse\minecraft\install\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\admin\documents\curse\minecraft\install\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{454ACD8A-1A79-4671-BBE6-4AC931A9B178}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{88813BAB-3BBF-49A8-A5E2-9B9954019133}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{5C565833-9173-4424-9AC7-11AF541B1B71}C:\program files\java\jdk1.8.0_77\bin\jmc.exe] => C:\program files\java\jdk1.8.0_77\bin\jmc.exe
FirewallRules: [UDP Query User{E3F6480C-9F7B-470E-AE67-DCC11EA00125}C:\program files\java\jdk1.8.0_77\bin\jmc.exe] => C:\program files\java\jdk1.8.0_77\bin\jmc.exe
FirewallRules: [TCP Query User{7DEC6370-207F-49E9-B564-777146ACE031}C:\program files\java\jre1.8.0_77\bin\javaw.exe] => C:\program files\java\jre1.8.0_77\bin\javaw.exe
FirewallRules: [UDP Query User{E6827731-E058-4DD7-AED3-DFE054E1868D}C:\program files\java\jre1.8.0_77\bin\javaw.exe] => C:\program files\java\jre1.8.0_77\bin\javaw.exe
FirewallRules: [{72282D7C-D65B-4B07-B390-0B8D3D780E8E}] => C:\Program Files (x86)\Steam\steamapps\common\MountBlade Warband\mb_warband.exe
FirewallRules: [{64A977B2-5545-4DB8-85D3-921F12AC9E3E}] => C:\Program Files (x86)\Steam\steamapps\common\MountBlade Warband\mb_warband.exe
FirewallRules: [{DC73E10E-C709-4D74-8F36-333937445454}] => C:\Program Files (x86)\Steam\steamapps\common\Rust\Rust.exe
FirewallRules: [{CA0EB6A6-166C-446D-98EB-C94E2E5F126C}] => C:\Program Files (x86)\Steam\steamapps\common\Rust\Rust.exe
FirewallRules: [{03BF53F5-2CEE-4F41-AB47-C50AA5C13B34}] => C:\Program Files (x86)\Radiant Worlds\SkySaga Infinite Isles\SkySagaLauncher.exe
FirewallRules: [{1BC69F87-97A6-4D03-9EFB-67BF4F0DCA70}] => C:\Program Files (x86)\Radiant Worlds\SkySaga Infinite Isles\Client\SkySaga.exe
FirewallRules: [{E41A07A5-E754-4380-85CC-A71DF73967E1}] => C:\Program Files (x86)\Steam\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{965ECA11-8C47-4B6D-A3F4-71F34DF3B02C}] => C:\Program Files (x86)\Steam\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{8094988D-773D-4E37-9FD0-CE7AC54FEED2}] => C:\Program Files (x86)\Steam\steamapps\common\StarMade\starmade-launcher.exe
FirewallRules: [{A464CE91-F77C-4D76-A081-AB022953111D}] => C:\Program Files (x86)\Steam\steamapps\common\StarMade\starmade-launcher.exe
FirewallRules: [{315A8843-EBA6-451F-A3CE-057D84E20A25}] => C:\Program Files (x86)\Steam\steamapps\common\StarMade\StarMade-starter.exe
FirewallRules: [{A912760B-A385-48A6-B58B-7E59993247E1}] => C:\Program Files (x86)\Steam\steamapps\common\StarMade\StarMade-starter.exe
FirewallRules: [TCP Query User{1A3C3600-A8A7-42F1-9A81-47F9DBBF4C26}C:\program files (x86)\steam\steamapps\common\starmade\dep\java\jre1.7.0_80\bin\java.exe] => C:\program files (x86)\steam\steamapps\common\starmade\dep\java\jre1.7.0_80\bin\java.exe
FirewallRules: [UDP Query User{36CA98AC-AE2F-436C-81E6-CB1A588D622E}C:\program files (x86)\steam\steamapps\common\starmade\dep\java\jre1.7.0_80\bin\java.exe] => C:\program files (x86)\steam\steamapps\common\starmade\dep\java\jre1.7.0_80\bin\java.exe
FirewallRules: [{2C436A18-AB17-41C8-9C93-2CE1C41866EE}] => C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{B3A63BBF-018D-4D17-B897-F2264A6626E1}] => C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{A09495EA-2818-4F45-8180-00D66BB8DA45}] => C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI.exe
FirewallRules: [{0CFB0009-1E8B-4FC4-BCC5-4A998927BD41}] => C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI.exe
FirewallRules: [{A65DF654-BFA2-41E3-982A-A6AC4B3650EB}] => C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI_DX12.exe
FirewallRules: [{C3A84297-77B7-47F0-A450-E75B8DDFEFBF}] => C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI_DX12.exe
FirewallRules: [{62771E5D-929B-414B-8E69-932B8878421D}] => C:\Program Files (x86)\Steam\steamapps\common\War Thunder\launcher.exe
FirewallRules: [{F6D7719B-E1FA-4BEB-ACAC-2A133E1DEFC8}] => C:\Program Files (x86)\Steam\steamapps\common\War Thunder\launcher.exe
FirewallRules: [TCP Query User{CBBD742C-D79A-4793-B87C-19FAD935B653}C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe] => C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe
FirewallRules: [UDP Query User{26A8F7C8-FFE7-41B9-94E9-3CDB0F8CDD0F}C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe] => C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe
FirewallRules: [TCP Query User{4A0CF6C4-3865-43C7-B4DC-7570129E1766}C:\program files (x86)\steam\steamapps\common\war thunder\win32\aces.exe] => C:\program files (x86)\steam\steamapps\common\war thunder\win32\aces.exe
FirewallRules: [UDP Query User{13A7BE3D-089A-4A3C-8176-A7FFF80BD41C}C:\program files (x86)\steam\steamapps\common\war thunder\win32\aces.exe] => C:\program files (x86)\steam\steamapps\common\war thunder\win32\aces.exe
FirewallRules: [{97DF76CD-7C17-4AC4-8C08-A42520516CEC}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{C2CDFE88-2E6E-49E6-A739-BC4ED0BD335A}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

==================== Punkty Przywracania systemu =========================

22-10-2016 18:53:17 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210
22-10-2016 18:54:16 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210
22-10-2016 18:55:33 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506
23-10-2016 05:30:20 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210
23-10-2016 05:32:17 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506
30-11-2016 13:40:24 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212
30-11-2016 13:41:07 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210
13-12-2016 10:12:54 Removed amuleC
13-12-2016 10:30:14 Removed LogMeIn Hamachi
13-12-2016 10:31:44 Removed Minecraft

==================== Wadliwe urządzenia w Menedżerze urządzeń =============


==================== Błędy w Dzienniku zdarzeń: =========================

Dziennik Aplikacja:
==================
Error: (12/13/2016 07:18:50 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (12/13/2016 07:18:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: arcavir.exe, wersja: 2014.0.0.304, sygnatura czasowa: 0x5849256a
Nazwa modułu powodującego błąd: MFC80U.DLL, wersja: 8.0.50727.6195, sygnatura czasowa: 0x4dcde196
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00000000000b3a35
Identyfikator procesu powodującego błąd: 0x5a4
Godzina uruchomienia aplikacji powodującej błąd: 0x01d2556d5499c6a2
Ścieżka aplikacji powodującej błąd: C:\Program Files\Arcabit\ArcaVir\arcavir.exe
Ścieżka modułu powodującego błąd: C:\Windows\WinSxS\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_8448b2bd328df189\MFC80U.DLL
Identyfikator raportu: 96c9e622-c160-11e6-b54e-901b0e166fe7

Error: (12/13/2016 06:10:25 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program aces.exe w wersji 1.63.3.144 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji.

Identyfikator procesu: 11f8

Godzina rozpoczęcia: 01d25563af2cf072

Godzina zakończenia: 15

Ścieżka aplikacji: C:\Program Files (x86)\Steam\steamapps\common\War Thunder\win32\aces.exe

Identyfikator raportu: 079a1443-c157-11e6-b78d-901b0e166fe7

Error: (12/13/2016 10:29:11 AM) (Source: Steam Client Service) (EventID: 1) (User: )
Description: Error: Failed to add firewall exception for C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

Error: (12/13/2016 10:26:20 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (12/13/2016 10:26:00 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: arcavir.exe, wersja: 2014.0.0.304, sygnatura czasowa: 0x5849256a
Nazwa modułu powodującego błąd: MFC80U.DLL, wersja: 8.0.50727.6195, sygnatura czasowa: 0x4dcde196
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00000000000b3a35
Identyfikator procesu powodującego błąd: 0x864
Godzina uruchomienia aplikacji powodującej błąd: 0x01d25522e6ca47c8
Ścieżka aplikacji powodującej błąd: C:\Program Files\Arcabit\ArcaVir\arcavir.exe
Ścieżka modułu powodującego błąd: C:\Windows\WinSxS\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_8448b2bd328df189\MFC80U.DLL
Identyfikator raportu: 28992ca1-c116-11e6-b78d-901b0e166fe7

Error: (12/13/2016 10:21:06 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (12/13/2016 10:13:44 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (12/13/2016 10:07:54 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (12/13/2016 07:28:08 AM) (Source: Steam Client Service) (EventID: 1) (User: )
Description: Error: Failed to add firewall exception for C:\Program Files (x86)\Steam\bin\steamwebhelper.exe


Dziennik System:
=============
Error: (12/13/2016 07:22:15 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Serwer {752073A1-23F2-4396-85F0-8FDB879ED0ED} nie zarejestrował się w modelu DCOM w wymaganym czasie.

Error: (12/13/2016 07:17:18 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Usługa Windows Wininet Service zakończyła działanie; wystąpił następujący błąd: 
Nie można odnaleźć określonego modułu.

Error: (12/13/2016 07:17:15 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Usługa Hkhlp zakończyła działanie; wystąpił następujący błąd: 
Nie można odnaleźć określonego modułu.

Error: (12/13/2016 07:11:43 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji z usługi TrustedInstaller.

Error: (12/13/2016 07:09:34 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Menedżer sterowania usługami próbował podjąć akcję korekcyjną (Uruchom usługę ponownie) po nieoczekiwanym zakończeniu usługi Windows Search, ale ta akcja nie powiodła się przy następującym błędzie: 
Jedno wystąpienie usługi już działa.
.

Error: (12/13/2016 07:09:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa Steam Client Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.

Error: (12/13/2016 07:09:04 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie.

Error: (12/13/2016 07:09:04 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa Adobe Acrobat Update Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.

Error: (12/13/2016 07:09:04 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Usługa Bufor wydruku niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 60000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie.

Error: (12/13/2016 11:39:05 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi Steam Client Service z powodu następującego błędu: 
Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie.


==================== Statystyki pamięci =========================== 

Procesor: Intel(R) Core(TM) i3-3240 CPU @ 3.40GHz
Procent pamięci w użyciu: 34%
Całkowita pamięć fizyczna: 3955.24 MB
Dostępna pamięć fizyczna: 2607.21 MB
Całkowita pamięć wirtualna: 7908.69 MB
Dostępna pamięć wirtualna: 6594.46 MB

==================== Dyski ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:95.87 GB) NTFS

==================== MBR & Tablica partycji ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 4C8063D7)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== Koniec  Addition.txt ============================