Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 20.06.2018 Uruchomiony przez hp (07-07-2018 18:22:20) Uruchomiony z C:\Users\hp\Desktop\frst Windows 7 Professional Service Pack 1 (X64) (2017-10-24 06:35:17) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= Administrator (S-1-5-21-4188862939-3250273339-3520787465-500 - Administrator - Disabled) Gość (S-1-5-21-4188862939-3250273339-3520787465-501 - Limited - Disabled) hp (S-1-5-21-4188862939-3250273339-3520787465-1000 - Administrator - Enabled) => C:\Users\hp ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: AVG Antivirus (Disabled - Up to date) {C50510DE-367A-330C-FD5C-556ACFB11243} AS: AVG Antivirus (Disabled - Up to date) {7E64F13A-1040-3C82-C7EC-6E18B43658FE} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.05 - Adobe Systems) Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated) Adobe Flash Player 28 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 28.0.0.161 - Adobe Systems Incorporated) Advertising Center (HKLM-x32\...\{B2EC4A38-B545-4A00-8214-13FE0E915E6D}) (Version: 0.0.0.2 - Nero AG) Hidden Alcor Micro Smart Card Reader Driver (HKLM-x32\...\{F24F876B-7D71-4BD6-88E9-614D3B220043}) (Version: 1.7.43.2200 - Alcor Micro Corp.) Hidden Alcor Micro Smart Card Reader Driver (HKLM-x32\...\SZCCID) (Version: 1.7.43.2200 - Alcor Micro Corp.) AVG AntiVirus FREE (HKLM-x32\...\AVG Antivirus) (Version: 18.5.3059 - AVG Technologies) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 6.30.223.232 - Broadcom Corporation) Broadcom Bluetooth Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.5300 - Broadcom Corporation) Broadcom Wireless Utility (HKLM\...\{4CDA59B9-7AD3-4283-9F5C-BC469FF975B6}) (Version: 6.30.223.232 - Broadcom Corporation) Brother MFL-Pro Suite DCP-J100 (HKLM-x32\...\{B742757A-7658-4E09-A51A-085CF0F7F4D3}) (Version: 1.0.0.0 - Brother Industries, Ltd.) Call of Duty(R) 2 (HKLM-x32\...\{D0A05794-48C2-4424-A15A-9F20FCFDD374}) (Version: 1.00.0000 - Activision) Hidden Call of Duty(R) 2 (HKLM-x32\...\InstallShield_{D0A05794-48C2-4424-A15A-9F20FCFDD374}) (Version: 1.00.0000 - Activision) CPUID CPU-Z 1.81.1 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.81.1 - ) <==== UWAGA Diablo II (HKLM-x32\...\Diablo II) (Version: 0.0.0.0 - Blizzard Entertainment) Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment) DolbyFiles (HKLM-x32\...\{B1ADF008-E898-4FE2-8A1F-690D9A06ACAF}) (Version: 2.0 - Nero AG) Hidden Football Manager 2017 (HKLM\...\Football Manager 2017_is1) (Version: 1.0 - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 67.0.3396.99 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden HP 3D DriveGuard (HKLM\...\{E458A17C-6420-4D99-9117-0B1F43A6A600}) (Version: 5.1.12.1 - Hewlett-Packard Company) HP 3D DriveGuard (HKLM-x32\...\{7838086D-29FC-4C69-9AC4-DF450BFB0BFD}) (Version: 5.2.2.1 - Hewlett-Packard Company) HP Hotkey Support (HKLM-x32\...\{6E7401DB-B722-4428-BE94-DD4740CF6464}) (Version: 5.0.28.1 - Hewlett-Packard Company) ImagXpress (HKLM-x32\...\{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}) (Version: 7.0.74.0 - Nero AG) Hidden Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.30.1349 - Intel Corporation) Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 17.3 - Intel) Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.5.1006 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.10.255 - Intel Corporation) JMicron 1394 Filter Driver (HKLM-x32\...\{13C96625-28E4-4c58-ADE0-CDAFC64752EB}) (Version: 1.00.25.03 - JMicron Technology Corp.) JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.72.4 - JMicron Technology Corp.) Lightshot-5.4.0.10 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.10 - Skillbrains) Medal of Honor Pacific Assault wersja 1.2 (HKLM-x32\...\{B1FF608A-A99C-4EB4-8493-3BD55BE15D4D}_is1) (Version: 1.2 - EA Games) Media Player Codec Pack 4.4.7 (HKLM-x32\...\Media Player - Codec Pack) (Version: 4.4.7 - Media Player Codec Pack) Menu Templates - Starter Kit (HKLM-x32\...\{B78120A0-CF84-4366-A393-4D0A59BC546C}) (Version: 9.6.0.0 - Nero AG) Hidden Microsoft .NET Framework 4.7.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02558 - Microsoft Corporation) Microsoft .NET Framework 4.7.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.7.02558 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Movie Templates - Starter Kit (HKLM-x32\...\{E498385E-1C51-459A-B45F-1721E37AA1A0}) (Version: 9.6.0.0 - Nero AG) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Nero 9 Trial (HKLM-x32\...\{867235d1-90f9-4d84-859d-f6816f48d56a}) (Version: - Nero AG) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft) SoundTrax (HKLM-x32\...\{C5A7CB6C-E76D-408F-BA0E-85605420FE9D}) (Version: 4.4.39.0 - Nero AG) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.18.25 - Synaptics Incorporated) Telegram Desktop version 1.2 (HKU\S-1-5-21-4188862939-3250273339-3520787465-1000\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.2 - Telegram Messenger LLP) Uplay (HKLM-x32\...\Uplay) (Version: 43.1 - Ubisoft) WinRAR 5.40 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.) ContextMenuHandlers1: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files (x86)\AVG\Antivirus\ashShA64.dll [2018-06-27] (AVG Technologies CZ, s.r.o.) ContextMenuHandlers1-x32: [Cover Designer] -> {73FCA462-9BD5-4065-A73F-A8E5F6904EF7} => C:\Program Files (x86)\Nero\Nero 9\Nero CoverDesigner\CoverEdExtension.dll [2010-04-27] (Nero AG) ContextMenuHandlers1-x32: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-09-19] (Alexander Roshal) ContextMenuHandlers1-x32-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-09-19] (Alexander Roshal) ContextMenuHandlers2-x32: [AlcoholShellEx] -> {32020A01-506E-484D-A2A8-BE3CF17601C3} => C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxShlex.dll [2014-09-06] (Alcohol Soft Development Team) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2012-03-27] (Intel Corporation) ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.) ContextMenuHandlers6: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files (x86)\AVG\Antivirus\ashShA64.dll [2018-06-27] (AVG Technologies CZ, s.r.o.) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-09-19] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-09-19] (Alexander Roshal) ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {0D08B616-48A0-4725-9238-DF3D7B2F4579} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2017-11-12] () Task: {14C91C48-6095-4B92-94B6-1DF9F8B36929} - System32\Tasks\Antivirus Emergency Update => C:\Program Files (x86)\AVG\Antivirus\AvEmUpdate.exe [2018-06-27] (AVG Technologies CZ, s.r.o.) Task: {2C37C8BF-78AD-4C11-8C7F-747DF7697698} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-10-31] (Google Inc.) Task: {2FE4E9FB-69AD-485D-9CA5-BBB31F4F10B2} - System32\Tasks\{81929261-C95F-435C-97F7-D46ABB5BA9E4} => C:\Windows\system32\pcalua.exe -a "C:\Users\hp\Desktop\Nowy folder\sp67464.exe" -d "C:\Users\hp\Desktop\Nowy folder" Task: {50D55CEF-BAFF-4970-A68D-23E4E008B6F9} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [2018-06-29] (AVG Technologies CZ, s.r.o.) Task: {61085DA4-8989-48B1-BA31-BB2D465024C3} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_28_0_0_161_pepper.exe [2018-02-06] (Adobe Systems Incorporated) Task: {784E271C-FB23-43CB-93CE-55688CA9A991} - System32\Tasks\{C6C2E6BE-A613-4C9B-8FD3-68D257A9C8E5} => C:\Windows\system32\pcalua.exe -a C:\Users\hp\Desktop\GameRangerSetup.exe -d C:\Users\hp\Desktop Task: {9B553FF3-E1E1-489E-9DEF-8163A023C234} - System32\Tasks\update-S-1-5-21-4188862939-3250273339-3520787465-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: ) Task: {CFCAD5DA-B867-4084-9114-335334D28C9D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-10-31] (Google Inc.) Task: {DDBD61B4-4338-4F4B-9D87-D25D1DFD0CD1} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: ) Task: {E062BB4F-80F8-41C8-9750-E30FB0B7AF95} - System32\Tasks\{8CB24578-8911-4F75-82B3-4727D5C66271} => C:\Windows\system32\pcalua.exe -a E:\setup.exe -d E:\ (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\update-S-1-5-21-4188862939-3250273339-3520787465-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe ==================== Skróty & WMI ======================== (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ==================== Załadowane moduły (filtrowane) ============== 2013-09-05 01:17 - 2013-09-05 01:17 - 004300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2017-11-08 18:49 - 2017-11-08 18:49 - 000894416 _____ () C:\Windows\SysWOW64\Codecs\TrayMenu.exe 2018-06-27 18:55 - 2018-06-22 21:15 - 004608856 _____ () C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.99\libglesv2.dll 2018-06-27 18:55 - 2018-06-22 21:15 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.99\libegl.dll 2018-06-27 19:05 - 2018-06-27 19:05 - 000481520 _____ () C:\Program Files (x86)\AVG\Antivirus\streamback.dll 2018-07-07 17:39 - 2018-07-07 17:39 - 005839088 _____ () C:\Program Files (x86)\AVG\Antivirus\defs\18070702\algo.dll 2018-06-27 19:05 - 2018-06-27 19:05 - 000930032 _____ () C:\Program Files (x86)\AVG\Antivirus\anen.dll 2018-06-27 19:05 - 2018-06-27 19:05 - 000533744 _____ () C:\Program Files (x86)\AVG\Antivirus\gui_cache.dll 2018-06-27 19:05 - 2018-06-27 19:05 - 000986352 _____ () C:\Program Files (x86)\AVG\Antivirus\shepherdsync.dll 2012-09-23 21:44 - 2012-09-23 21:44 - 000010240 _____ () C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\locale\pl_pl\acrotray.pol 2018-03-01 19:28 - 2018-03-01 19:28 - 067127976 _____ () C:\Program Files (x86)\AVG\Antivirus\libcef.dll 2018-06-11 16:46 - 2018-06-11 16:46 - 000016384 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\40fbd63963a08beae82d4c8faee16a3d\PSIClient.ni.dll 2017-11-03 21:33 - 2013-01-15 00:25 - 001200088 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) ==================== Powiązania plików (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Hosts - zawartość: =============================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2009-07-14 04:34 - 2018-06-27 19:04 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-4188862939-3250273339-3520787465-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\hp\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.2.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == MSCONFIG\Services: cphs => 3 MSCONFIG\Services: IAStorDataMgrSvc => 2 MSCONFIG\Services: wltrysvc => 2 MSCONFIG\startupreg: Broadcom Wireless Manager UI => C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.exe MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60 MSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exe ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [TCP Query User{5D53880B-3A2F-410F-B9E7-30E9E4348D81}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe FirewallRules: [UDP Query User{D811EFEE-D319-4DCF-82F3-CE7E1ED47AAA}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe FirewallRules: [TCP Query User{E8C626DB-24A6-4972-8236-4D9AB2FB3FE3}C:\program files (x86)\allplayer remote\allplayerremotecontrol.exe] => (Block) C:\program files (x86)\allplayer remote\allplayerremotecontrol.exe FirewallRules: [UDP Query User{CA8491BD-FE4F-4B78-932C-D2731AF0892A}C:\program files (x86)\allplayer remote\allplayerremotecontrol.exe] => (Block) C:\program files (x86)\allplayer remote\allplayerremotecontrol.exe FirewallRules: [TCP Query User{FF53015D-20D2-4EFA-94FF-5DFD63B757E4}C:\program files (x86)\allplayer remote\allplayerremotecontrol.exe] => (Block) C:\program files (x86)\allplayer remote\allplayerremotecontrol.exe FirewallRules: [UDP Query User{2F9B0127-0270-4D57-B6F0-21E56CAFD54A}C:\program files (x86)\allplayer remote\allplayerremotecontrol.exe] => (Block) C:\program files (x86)\allplayer remote\allplayerremotecontrol.exe FirewallRules: [TCP Query User{75C4E383-0716-470F-B765-AA0057C78474}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe FirewallRules: [UDP Query User{34F86993-011C-47EF-BE89-127B87DB25F6}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe FirewallRules: [{C91ECA23-77AB-4D9A-AA1E-3157AF9C7C2D}] => (Allow) C:\Program Files\KeyShot6\bin\keyshot_daemon.exe FirewallRules: [VirtualPC-In-UDP-1] => (Allow) %SystemRoot%\System32\vpc.exe FirewallRules: [VirtualPC-In-UDP-2] => (Allow) %SystemRoot%\System32\vpc.exe FirewallRules: [VirtualPC-In-TCP-1] => (Allow) %SystemRoot%\System32\vpc.exe FirewallRules: [{D009590B-DCC0-4AC6-B64F-B99FA1E9753B}] => (Allow) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe FirewallRules: [TCP Query User{4070A766-E531-400F-80CD-58467C306CB5}C:\program files (x86)\activision\call of duty 2\cod2mp_s.exe] => (Allow) C:\program files (x86)\activision\call of duty 2\cod2mp_s.exe FirewallRules: [UDP Query User{98E76B56-1A0C-4D26-8E0F-3BE8EABF36CD}C:\program files (x86)\activision\call of duty 2\cod2mp_s.exe] => (Allow) C:\program files (x86)\activision\call of duty 2\cod2mp_s.exe FirewallRules: [TCP Query User{E46985F2-A0BE-4369-BA6E-3C8F9E88E4FA}C:\games\medal of honor pacific assault\mohpa.exe] => (Allow) C:\games\medal of honor pacific assault\mohpa.exe FirewallRules: [UDP Query User{6EA802C6-EAA9-4240-9F5A-AD9A41022C7B}C:\games\medal of honor pacific assault\mohpa.exe] => (Allow) C:\games\medal of honor pacific assault\mohpa.exe FirewallRules: [{6463C2E4-B595-4BB5-AA5E-B5D9DD0ADA41}] => (Allow) C:\Program Files\Football Manager 2017\stp-fm2017.exe FirewallRules: [{30266825-61A0-42B7-92CD-917923A89AE7}] => (Allow) C:\Program Files\Football Manager 2017\stp-fm2017.exe FirewallRules: [{B84E40E0-2544-4762-99B6-716686CD770B}] => (Allow) C:\Program Files\Football Manager 2017\stp-fm2017.exe FirewallRules: [{1760A71E-14D2-4B1D-A10C-6190DF6751DF}] => (Allow) C:\Program Files\Football Manager 2017\stp-fm2017.exe FirewallRules: [TCP Query User{EF6E4EBB-FA64-407E-AD49-344FF6BFD359}C:\games\age of empires ii hd\aok hd.exe] => (Allow) C:\games\age of empires ii hd\aok hd.exe FirewallRules: [UDP Query User{836B1C79-EA2C-455D-B028-4A1879C95906}C:\games\age of empires ii hd\aok hd.exe] => (Allow) C:\games\age of empires ii hd\aok hd.exe FirewallRules: [TCP Query User{0C7A4D25-2402-4013-AF65-451FA1DD7829}C:\program files (x86)\cossacks - back to war\dmcr.exe] => (Allow) C:\program files (x86)\cossacks - back to war\dmcr.exe FirewallRules: [UDP Query User{1FC8FB9F-42C0-4B04-8F1C-C41B6C96999F}C:\program files (x86)\cossacks - back to war\dmcr.exe] => (Allow) C:\program files (x86)\cossacks - back to war\dmcr.exe FirewallRules: [TCP Query User{2D09A597-24A0-49A4-9312-E6E37EB3FB17}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe FirewallRules: [UDP Query User{4D2F3DED-2315-4CD5-BCC4-32A1B1EA2C55}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe FirewallRules: [TCP Query User{3C3C6C25-BEE9-4D89-B530-524661CD4F02}C:\program files (x86)\gsc game world\kozacy ii\data\engine.exe] => (Allow) C:\program files (x86)\gsc game world\kozacy ii\data\engine.exe FirewallRules: [UDP Query User{5A851F30-781C-4E32-8241-F8112FC3BC3F}C:\program files (x86)\gsc game world\kozacy ii\data\engine.exe] => (Allow) C:\program files (x86)\gsc game world\kozacy ii\data\engine.exe FirewallRules: [TCP Query User{36B15C2A-FA55-4B9D-A91D-4F6633DCEB9E}C:\users\hp\appdata\roaming\gameranger\gameranger\gameranger.exe] => (Allow) C:\users\hp\appdata\roaming\gameranger\gameranger\gameranger.exe FirewallRules: [UDP Query User{A6D9E282-3846-41BC-AFCA-E6FA3760FFC4}C:\users\hp\appdata\roaming\gameranger\gameranger\gameranger.exe] => (Allow) C:\users\hp\appdata\roaming\gameranger\gameranger\gameranger.exe FirewallRules: [TCP Query User{14CA8D17-090E-4634-9669-59A321C1C363}C:\program files (x86)\cossacks - back to war\dmcr.exe] => (Block) C:\program files (x86)\cossacks - back to war\dmcr.exe FirewallRules: [UDP Query User{F5A0AD1E-F492-4F8F-89EF-99BDC64BCA77}C:\program files (x86)\cossacks - back to war\dmcr.exe] => (Block) C:\program files (x86)\cossacks - back to war\dmcr.exe FirewallRules: [TCP Query User{58A8CE7E-C90B-4E22-BC46-A5C3FF415470}C:\windows\syswow64\dplaysvr.exe] => (Block) C:\windows\syswow64\dplaysvr.exe FirewallRules: [UDP Query User{B2ED5951-562F-4F5B-B5F2-70E278036A26}C:\windows\syswow64\dplaysvr.exe] => (Block) C:\windows\syswow64\dplaysvr.exe FirewallRules: [TCP Query User{7992FA5B-A28D-488C-8433-84D326BCC321}C:\program files (x86)\activision\call of duty 2\cod2mp_s.exe] => (Block) C:\program files (x86)\activision\call of duty 2\cod2mp_s.exe FirewallRules: [UDP Query User{B94662EF-BD0E-40EA-8CC7-3E71AB06CC75}C:\program files (x86)\activision\call of duty 2\cod2mp_s.exe] => (Block) C:\program files (x86)\activision\call of duty 2\cod2mp_s.exe FirewallRules: [{B1A24419-EF6A-46DC-8B5A-EF46936A587D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{2F1C3348-0622-4DF3-8512-FAB57B18BAC1}] => (Allow) C:\Program Files (x86)\AVG\Antivirus\AvEmUpdate.exe FirewallRules: [{62E3444D-78B8-4D6B-9331-23EB503A5849}] => (Allow) C:\Program Files (x86)\AVG\Antivirus\AvEmUpdate.exe FirewallRules: [TCP Query User{09B4EE0B-ADDE-428D-B982-67D9D76481AD}C:\program files\football manager 2017\fm.exe] => (Block) C:\program files\football manager 2017\fm.exe FirewallRules: [UDP Query User{A31A9508-9BD6-4AF4-94FB-71D905B00E18}C:\program files\football manager 2017\fm.exe] => (Block) C:\program files\football manager 2017\fm.exe FirewallRules: [TCP Query User{E95F3CF2-685C-46F1-9E15-53B91D7C00F8}C:\users\hp\desktop\d2 + lod\downloader_diablo2_lord_of_destruction_plpl.exe] => (Allow) C:\users\hp\desktop\d2 + lod\downloader_diablo2_lord_of_destruction_plpl.exe FirewallRules: [UDP Query User{C0167F38-A7F8-4AF2-839C-EBB1F0A0692E}C:\users\hp\desktop\d2 + lod\downloader_diablo2_lord_of_destruction_plpl.exe] => (Allow) C:\users\hp\desktop\d2 + lod\downloader_diablo2_lord_of_destruction_plpl.exe ==================== Punkty Przywracania systemu ========================= 04-06-2018 16:21:57 Skonfigoruwane Kozacy - Powrót na wojnę 29-06-2018 17:55:56 Windows Update 01-07-2018 16:02:07 Windows Update ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= Name: Broadcom 20702 Bluetooth 4.0 Adapter Description: Broadcom 20702 Bluetooth 4.0 Adapter Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974} Manufacturer: Broadcom Service: BTHUSB Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (07/07/2018 06:04:00 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (07/07/2018 05:38:16 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (07/06/2018 04:44:11 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (07/05/2018 09:16:05 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Program Game.exe w wersji 1.0.0.1 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: 588 Godzina rozpoczęcia: 01d414948822020c Godzina zakończenia: 9 Ścieżka aplikacji: C:\Program Files (x86)\Diablo II\Game.exe Identyfikator raportu: da9313ef-8087-11e8-8492-b4b52f2ee29a Error: (07/05/2018 09:15:03 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Program Game.exe w wersji 1.0.0.1 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: 1728 Godzina rozpoczęcia: 01d41494436f1858 Godzina zakończenia: 9 Ścieżka aplikacji: C:\Program Files (x86)\Diablo II\Game.exe Identyfikator raportu: 9a6f3952-8087-11e8-8492-b4b52f2ee29a Error: (07/05/2018 08:24:34 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (07/05/2018 08:12:09 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (07/04/2018 09:57:40 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Dziennik System: ============= Error: (07/06/2018 10:44:16 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: Serwer {995C996E-D918-4A8C-A302-45719A6F4EA7} nie zarejestrował się w modelu DCOM w wymaganym czasie. Error: (07/06/2018 10:43:57 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji z usługi hpsrv. Error: (07/05/2018 08:25:23 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: Serwer {995C996E-D918-4A8C-A302-45719A6F4EA7} nie zarejestrował się w modelu DCOM w wymaganym czasie. Error: (07/05/2018 08:23:08 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: ZARZĄDZANIE NT) Description: Nastąpiło nieoczekiwane zatrzymanie modułu rozszerzalności sieci WLAN. Ścieżka modułu: C:\Windows\System32\bcmihvsrv64.dll Error: (07/05/2018 08:23:08 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: ZARZĄDZANIE NT) Description: Nastąpiło nieoczekiwane zatrzymanie modułu rozszerzalności sieci WLAN. Ścieżka modułu: C:\Windows\System32\bcmihvsrv64.dll Error: (07/05/2018 08:22:59 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: ZARZĄDZANIE NT) Description: Nastąpiło nieoczekiwane zatrzymanie modułu rozszerzalności sieci WLAN. Ścieżka modułu: C:\Windows\System32\bcmihvsrv64.dll Error: (07/05/2018 08:22:45 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa HP Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (07/05/2018 08:22:45 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Usługa Nero BackItUp Scheduler 4.0 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 500 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM) i3-2370M CPU @ 2.40GHz Procent pamięci w użyciu: 62% Całkowita pamięć fizyczna: 3979.71 MB Dostępna pamięć fizyczna: 1487.79 MB Całkowita pamięć wirtualna: 7957.6 MB Dostępna pamięć wirtualna: 5265.93 MB ==================== Dyski ================================ Drive c: () (Fixed) (Total:232.79 GB) (Free:114.15 GB) NTFS \\?\Volume{6b2f18ef-b884-11e7-b56a-806e6f6e6963}\ (Zastrzeżone przez system) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 232.9 GB) (Disk ID: 472E31EF) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=232.8 GB) - (Type=07 NTFS) ==================== Koniec Addition.txt ============================