Wrzucaj teksty, notatki, kody i linki

• Zmień widok

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-09-2016
Ran by Rafal (15-05-2020 13:17:54)
Running from C:\Users\Rafal\Downloads
Windows 7 Ultimate Service Pack 1 (X64) (2014-07-12 12:17:49)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1193567628-3741132159-961158197-500 - Administrator - Disabled)
Guest (S-1-5-21-1193567628-3741132159-961158197-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1193567628-3741132159-961158197-1003 - Limited - Enabled)
Rafal (S-1-5-21-1193567628-3741132159-961158197-1000 - Administrator - Enabled) => C:\Users\Rafal
UpdatusUser (S-1-5-21-1193567628-3741132159-961158197-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {5078598A-1FA2-C888-AA5F-A9C66537DB12}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 20.009.20063 - Adobe Systems Incorporated)
Ansel (Version: 375.63 - NVIDIA Corporation) Hidden
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 20.1.2397 - AVAST Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 81.0.4053.113 - AVAST Software)
Blackmagic RAW Common Components (HKLM\...\{8F57BC8F-7DAC-4E4B-BD13-A55B1AC0DF43}) (Version: 1.6 - Blackmagic Design)
Call of Duty (HKLM-x32\...\Call of Duty) (Version:  - )
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
Club777 (HKU\S-1-5-21-1193567628-3741132159-961158197-1000\...\Club777) (Version:  - )
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Discord (HKU\S-1-5-21-1193567628-3741132159-961158197-1000\...\Discord) (Version: 0.0.306 - Discord Inc.)
Driver San Francisco (HKLM-x32\...\Driver San Francisco) (Version: 1.4.0.0 - Ubisoft)
EA SPORTS FIFA World (HKLM-x32\...\{8F9AC744-EEF6-43DB-A4B6-FA1A18F1C640}) (Version: 9.4.0.60779 - Electronic Arts, Inc.)
Epic Games Launcher (HKLM-x32\...\{0F3B0E4D-F8F7-45FC-A661-100AE5495A31}) (Version: 1.1.133.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
e-pity 11.2.1 za rok 2019 (HKLM-x32\...\{80D8170E-5590-218-B9ED-E24E4C99A11D}_is1) (Version: 11.2.1 - e-file sp. z o.o. sp.k.)
ETDWare PS/2-X64 11.13.2.4_WHQL (HKLM\...\Elantech) (Version: 11.13.2.4 - ELAN Microelectronic Corp.)
FIFA 19 (HKLM-x32\...\{3391E07D-8484-4124-817E-FCBDA859FD62}) (Version: 1.0.61.54442 - Electronic Arts)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 81.0.4044.138 - Google LLC)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.35.451 - Google LLC) Hidden
Grand Theft Auto IV (HKLM-x32\...\Grand Theft Auto IV_is1) (Version:  - )
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Huawei E3272 (HKLM-x32\...\Huawei E3272) (Version: 22.001.22.00.1202 - Huawei Technologies Co.,Ltd)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1310 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.18.10.3186 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.5.0.1066 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
Internet Manager (HKLM-x32\...\Internet Manager) (Version: 22.001.18.13.49 - Huawei Technologies Co.,Ltd)
ipla 2.9 (HKLM-x32\...\ipla) (Version: 2.9 - Cyfrowy Polsat S.A.)
Java 8 Update 73 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)
K-Lite Codec Pack 11.6.5 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 11.6.5 - )
Launcher Prerequisites (x64) (x32 Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Łatka polonizacyjna GTA IV v0.99 (HKLM-x32\...\Łatka polonizacyjna GTA IV v0.99) (Version: 0.99 - GTAPOLSKA.PL)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.92 - McAfee, LLC.)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{FD052FB9-FE90-4438-B355-15EDC89D8FB1}) (Version: 2.0.673.0 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office SharePoint Designer 2007 (HKLM-x32\...\SharePointDesigner) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
My Program version 1.5 (HKLM-x32\...\My Program_is1) (Version: 1.5 - )
novaPDF 8 Printer Driver (HKLM\...\{78348298-772C-42B6-A670-7906495C30BB}) (Version: 8.9.950 - Softland)
novaPDF 8 SDK COM (x64) (HKLM\...\{DC8F19A6-7BE4-4274-9B07-763AFAB18506}) (Version: 8.9.950 - Softland)
NVIDIA Oprogramowanie systemu PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NVIDIA Sterownik graficzny 375.63 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 375.63 - NVIDIA Corporation)
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
OpenOffice 4.1.2 (HKLM-x32\...\{E0ED9630-38E3-418F-A615-A9B2B5758BE5}) (Version: 4.12.9782 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.56.33908 - Electronic Arts, Inc.)
Panel sterowania NVIDIA 375.63 (Version: 375.63 - NVIDIA Corporation) Hidden
PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile PLK Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended PLK Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
PowerDVD (HKLM-x32\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: 7.0.3409.a - CyberLink Corporation)
PowerProducer (HKLM-x32\...\{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version:  - )
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Qualcomm Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.13 - Qualcomm Atheros Communications Inc.)
RadiAnt DICOM Viewer (64-bit) (HKLM-x32\...\RadiAnt64) (Version: 4.6.9.18463 - Medixant)
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.728.728.042813 - REALTEK Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6914 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30127 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0212 - REALTEK Semiconductor Corp.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)
Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft)
Vegas Pro 12.0 (64-bit) (HKLM\...\{87CEB7C0-1D35-11E2-8F19-F04DA23A5C58}) (Version: 12.0.394 - Sony)
WinRAR 5.70 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
Xfire (HKLM-x32\...\Xfire) (Version:  - )

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0510C028-F05B-4820-950E-8300434037B1} - System32\Tasks\{FF071DC6-D034-4177-ACA1-113CC46BA027} => pcalua.exe -a D:\OFFICE\SETUP.EXE -d D:\OFFICE
Task: {110B4CD9-2B54-4566-8BE6-6EA04426F994} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2020-02-25] (AVAST Software)
Task: {20BAC60D-2E14-491C-B104-EC1F9E7E6E85} - System32\Tasks\e-pity2019a_kwiecien => C:\Program Files (x86)\e-file\e-pity\Assets\signxml.exe [2020-02-29] (e-file sp. z o.o. sp. k.)
Task: {21D09DBC-27D7-4B5D-BE3B-7EB8E6806504} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2020-04-19] (AVAST Software)
Task: {28C0B7A0-8742-4A0E-B819-5A59710F2DC2} - System32\Tasks\{E8A2A072-A991-47FA-9E86-46647E0ADAAB} => pcalua.exe -a C:\Users\Rafal\Downloads\setup.exe -d C:\Users\Rafal\Downloads
Task: {42447A7A-9D5E-4795-B800-BB95E80E302C} - System32\Tasks\{FE5DC747-7FC3-4FB8-B95F-A60BF79D35BF} => C:\Program Files (x86)\Origin\Origin.exe [2019-11-19] (Electronic Arts)
Task: {5221994D-064A-45A2-9773-7DED4E477F1E} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\avast software\overseer\overseer.exe [2020-02-27] (Avast Software)
Task: {52A098EB-D6B8-473C-B976-5EE967E8CA57} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {612D5783-26ED-4E73-996D-281A772BEED8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {7735312B-A0C6-4A39-89C9-70CCC48F6DAD} - System32\Tasks\e-pity2019_styczen => C:\Program Files (x86)\e-file\e-pity\Assets\signxml.exe [2020-02-29] (e-file sp. z o.o. sp. k.)
Task: {81BC9161-5AA9-4421-A12F-67656BE64929} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2020-04-19] (AVAST Software)
Task: {8B50D191-4354-4AE6-BF9D-398A36AED083} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-03-26] (AVAST Software) <==== ATTENTION
Task: {B89AD92A-5E2C-463C-BD61-D48C540D81BF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2020-02-25] (Adobe Systems)
Task: {CC13CCCC-7F11-4FEB-B70B-7D0756F47D5D} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-03-26] (AVAST Software) <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2020-05-14 22:40 - 2020-05-14 22:40 - 00185952 _____ () C:\Program Files\AVAST Software\Avast\defs\20051406\aswCmnOS.dll
2020-02-25 17:15 - 2020-02-25 17:15 - 00230160 _____ () C:\Program Files\AVAST Software\Avast\features_manager.dll
2020-02-25 17:16 - 2020-02-25 17:16 - 00195496 _____ () C:\Program Files\AVAST Software\Avast\hns_tools.dll
2016-10-25 13:29 - 2016-10-22 09:20 - 00020536 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2020-02-25 17:16 - 2020-02-25 17:16 - 108869848 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-07-12 14:35 - 2013-04-25 16:32 - 00047104 _____ () C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
2015-01-09 00:09 - 2013-12-03 08:09 - 00240720 _____ () C:\ProgramData\MobileBrServ\mbbservice.exe
2013-10-28 04:02 - 2013-10-28 04:02 - 00351824 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe
2015-01-16 14:34 - 2013-12-19 09:30 - 00678480 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe
2017-06-06 20:06 - 2017-06-06 20:06 - 00146736 _____ () C:\Program Files\Softland\novaPDF 8\Server\AgileDotNetRT64.dll
2014-07-12 14:33 - 2016-10-22 08:04 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-07-28 21:32 - 2015-01-09 17:05 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-12-29 23:15 - 2007-05-14 04:54 - 00272024 ____N () C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe
2014-07-12 14:35 - 2013-04-09 14:42 - 00265728 _____ () C:\Program Files (x86)\REALTEK\Realtek Bluetooth\SkypePlugin.exe
2018-09-14 12:35 - 2020-04-23 02:54 - 01141536 _____ () E:\Steam\bin\cef\cef.win7x64\SDL2.dll
2018-09-14 12:35 - 2020-04-21 04:23 - 119512864 _____ () E:\Steam\bin\cef\cef.win7x64\libcef.dll
2018-09-14 12:35 - 2020-04-21 04:23 - 08022816 _____ () E:\Steam\bin\cef\cef.win7x64\libglesv2.dll
2018-09-14 12:35 - 2020-04-21 04:23 - 00381216 _____ () E:\Steam\bin\cef\cef.win7x64\libegl.dll
2020-05-06 13:55 - 2020-05-02 00:32 - 07813616 _____ () C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.138\libglesv2.dll
2020-05-06 13:55 - 2020-05-02 00:32 - 00387568 _____ () C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.138\libegl.dll
2020-02-25 17:16 - 2020-02-25 17:16 - 02694872 _____ () C:\Program Files\AVAST Software\Avast\swiftshader\libglesv2.dll
2020-02-25 17:16 - 2020-02-25 17:16 - 00167128 _____ () C:\Program Files\AVAST Software\Avast\swiftshader\libegl.dll
2016-10-25 13:29 - 2016-10-22 09:20 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2015-04-24 16:22 - 2020-04-23 02:54 - 00970528 _____ () E:\Steam\SDL2.dll
2015-04-24 16:22 - 2016-09-01 03:02 - 04969248 _____ () E:\Steam\v8.dll
2015-04-24 16:22 - 2016-09-01 03:02 - 01563936 _____ () E:\Steam\icui18n.dll
2015-04-24 16:22 - 2016-09-01 03:02 - 01195296 _____ () E:\Steam\icuuc.dll
2015-04-24 16:22 - 2020-04-28 01:06 - 02924320 _____ () E:\Steam\video.dll
2017-12-16 00:04 - 2019-10-30 19:33 - 05138896 _____ () E:\Steam\libavcodec-57.dll
2017-12-16 00:04 - 2019-10-30 19:33 - 00848336 _____ () E:\Steam\libavutil-55.dll
2017-12-16 00:04 - 2019-10-30 19:33 - 00811984 _____ () E:\Steam\libavformat-57.dll
2017-12-16 00:04 - 2019-10-30 19:33 - 00352720 _____ () E:\Steam\libavresample-3.dll
2017-12-16 00:04 - 2019-10-30 19:33 - 00784848 _____ () E:\Steam\libswscale-4.dll
2015-04-24 16:22 - 2020-04-28 01:06 - 01055520 _____ () E:\Steam\bin\chromehtml.DLL
2016-03-10 16:10 - 2016-07-05 00:17 - 00266560 _____ () E:\Steam\openvr_api.dll
2020-03-18 18:33 - 2020-02-24 13:22 - 01998136 _____ () C:\Users\Rafal\AppData\Local\Discord\app-0.0.306\ffmpeg.dll
2015-01-16 14:34 - 2013-12-19 04:20 - 00011362 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\mingwm10.dll
2015-01-16 14:34 - 2013-12-19 04:20 - 00043008 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\libgcc_s_dw2-1.dll
2015-01-16 14:34 - 2013-12-19 04:20 - 02417152 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\QtCore4.dll
2015-01-16 14:34 - 2013-12-19 04:20 - 01148416 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\QtNetwork4.dll
2020-03-18 18:34 - 2020-05-06 13:41 - 18344760 _____ () \\?\C:\Users\Rafal\AppData\Roaming\discord\0.0.306\modules\discord_voice\discord_voice.node
2020-03-18 18:34 - 2020-03-18 18:34 - 01765688 _____ () \\?\C:\Users\Rafal\AppData\Roaming\discord\0.0.306\modules\discord_utils\discord_utils.node
2020-03-18 18:34 - 2020-03-18 18:34 - 01399096 _____ () \\?\C:\Users\Rafal\AppData\Roaming\discord\0.0.306\modules\discord_erlpack\discord_erlpack.node
2020-03-18 18:34 - 2020-03-18 18:34 - 02594616 _____ () \\?\C:\Users\Rafal\AppData\Roaming\discord\0.0.306\modules\discord_game_utils\discord_game_utils.node
2020-03-18 18:34 - 2020-03-18 18:34 - 02417976 _____ () \\?\C:\Users\Rafal\AppData\Roaming\discord\0.0.306\modules\discord_cloudsync\discord_cloudsync.node
2020-03-18 18:35 - 2020-03-18 18:35 - 00541496 _____ () \\?\C:\Users\Rafal\AppData\Roaming\discord\0.0.306\modules\discord_media\discord_media.node
2020-04-10 18:32 - 2020-04-10 18:32 - 54704440 _____ () \\?\C:\Users\Rafal\AppData\Roaming\discord\0.0.306\modules\discord_krisp\discord_krisp.node
2020-03-18 18:35 - 2020-03-18 18:35 - 01305912 _____ () \\?\C:\Users\Rafal\AppData\Roaming\discord\0.0.306\modules\discord_modules\discord_modules.node
2020-03-18 18:35 - 2020-03-18 18:35 - 07792952 _____ () \\?\C:\Users\Rafal\AppData\Roaming\discord\0.0.306\modules\discord_dispatch\discord_dispatch.node
2020-03-18 18:33 - 2020-02-24 13:22 - 06676792 _____ () C:\Users\Rafal\AppData\Local\Discord\app-0.0.306\libglesv2.dll
2020-03-18 18:33 - 2020-02-24 13:22 - 00123704 _____ () C:\Users\Rafal\AppData\Local\Discord\app-0.0.306\libegl.dll
2014-07-12 14:40 - 2013-02-15 16:15 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-1193567628-3741132159-961158197-1000\...\hola.org -> hxxp://hola.org

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2019-01-04 12:59 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1193567628-3741132159-961158197-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Rafal\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.55.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{75BE27B0-A487-4982-86A3-DEA8F51E699A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{BF957924-4CCE-4652-9560-AC9EBE15327B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [TCP Query User{AE883555-C749-49D0-B0A0-A567C50FCE92}C:\program files\call of duty-do fw\codmp.exe] => (Allow) C:\program files\call of duty-do fw\codmp.exe
FirewallRules: [UDP Query User{C0F75A19-2F6C-48DC-B9E4-EC3B5EC5D0C0}C:\program files\call of duty-do fw\codmp.exe] => (Allow) C:\program files\call of duty-do fw\codmp.exe
FirewallRules: [TCP Query User{7D431FC6-E66A-49A8-B373-CA83D226031E}C:\program files\call of duty-do fw\call of duty-do fw1\codmp.exe] => (Allow) C:\program files\call of duty-do fw\call of duty-do fw1\codmp.exe
FirewallRules: [UDP Query User{DC7429BE-236C-4F48-AEC5-CAAB96641C19}C:\program files\call of duty-do fw\call of duty-do fw1\codmp.exe] => (Allow) C:\program files\call of duty-do fw\call of duty-do fw1\codmp.exe
FirewallRules: [TCP Query User{755BDFD3-A019-4BE6-A0D6-F491FC71A075}E:\call of duty\cod do fw\codmp.exe] => (Allow) E:\call of duty\cod do fw\codmp.exe
FirewallRules: [UDP Query User{F2EDAF23-6EFF-4310-A7FD-A93E445F802D}E:\call of duty\cod do fw\codmp.exe] => (Allow) E:\call of duty\cod do fw\codmp.exe
FirewallRules: [TCP Query User{8F1F5930-6886-4FBD-8730-C0F81D6D01B5}C:\users\rafal\desktop\call of duty-do fw\codmp.exe] => (Block) C:\users\rafal\desktop\call of duty-do fw\codmp.exe
FirewallRules: [UDP Query User{D3FCBE68-D06E-479A-8290-DC8304F2D19E}C:\users\rafal\desktop\call of duty-do fw\codmp.exe] => (Block) C:\users\rafal\desktop\call of duty-do fw\codmp.exe
FirewallRules: [TCP Query User{1586D538-5309-45B3-B4BF-2D82AFFFD7FF}C:0\toshiba\cod 1 + nowe cfg sound\call of duty-do fw\codmp.exe] => (Allow) C:0\toshiba\cod 1 + nowe cfg sound\call of duty-do fw\codmp.exe
FirewallRules: [UDP Query User{C9A0404A-B401-4590-9391-D5DD8F892126}C:0\toshiba\cod 1 + nowe cfg sound\call of duty-do fw\codmp.exe] => (Allow) C:0\toshiba\cod 1 + nowe cfg sound\call of duty-do fw\codmp.exe
FirewallRules: [TCP Query User{64E6EEDF-2B2A-4B11-9EB0-46E9333EFA59}C:\users\rafal\desktop\call of duty 4 - modern warfare\iw3mp.exe] => (Allow) C:\users\rafal\desktop\call of duty 4 - modern warfare\iw3mp.exe
FirewallRules: [UDP Query User{ABF03BAE-571A-439F-B48F-D560D7344754}C:\users\rafal\desktop\call of duty 4 - modern warfare\iw3mp.exe] => (Allow) C:\users\rafal\desktop\call of duty 4 - modern warfare\iw3mp.exe
FirewallRules: [TCP Query User{A48ECF80-5C64-4812-9BA4-20F30605CEA5}C:\program files\najnowsze cfg - cod 1\call of duty-do fw\codmp.exe] => (Allow) C:\program files\najnowsze cfg - cod 1\call of duty-do fw\codmp.exe
FirewallRules: [UDP Query User{FB5461F2-76F3-4A45-B2F0-4F904438123B}C:\program files\najnowsze cfg - cod 1\call of duty-do fw\codmp.exe] => (Allow) C:\program files\najnowsze cfg - cod 1\call of duty-do fw\codmp.exe
FirewallRules: [TCP Query User{69D6AFA7-DCCF-4F90-9AF1-E0943DFE2AC3}C:\program files\najnowsze cfg - cod 1\fifa 14\fifa 14\game\fifa14.exe] => (Allow) C:\program files\najnowsze cfg - cod 1\fifa 14\fifa 14\game\fifa14.exe
FirewallRules: [UDP Query User{2EB4FBBC-FB64-46E3-8E1D-340B48E6C3BC}C:\program files\najnowsze cfg - cod 1\fifa 14\fifa 14\game\fifa14.exe] => (Allow) C:\program files\najnowsze cfg - cod 1\fifa 14\fifa 14\game\fifa14.exe
FirewallRules: [{90929F8C-1100-4EF6-9B79-C2B1A382B36B}] => (Allow) C:\Program Files (x86)\cdp.pl\Farming Simulator 2013\FarmingSimulator2013.exe
FirewallRules: [{99DE522A-DDE0-47F5-9CBA-4CEE917ABA71}] => (Allow) C:\Program Files (x86)\cdp.pl\Farming Simulator 2013\FarmingSimulator2013Game.exe
FirewallRules: [TCP Query User{272F0CA3-3D09-416A-B2CB-1C821A5D06DE}E:\call of duty 4 - modern warfare\iw3mp.exe] => (Allow) E:\call of duty 4 - modern warfare\iw3mp.exe
FirewallRules: [UDP Query User{A2B497FF-9B6A-44D7-88BE-E9127E143E95}E:\call of duty 4 - modern warfare\iw3mp.exe] => (Allow) E:\call of duty 4 - modern warfare\iw3mp.exe
FirewallRules: [TCP Query User{B88AB62F-CFA0-40C3-8F51-A87EBAD64BF1}E:\fifa 14\fifa 14\game\fifa14.exe] => (Allow) E:\fifa 14\fifa 14\game\fifa14.exe
FirewallRules: [UDP Query User{2EB7BA73-C373-4F07-B1DD-DA54122795DB}E:\fifa 14\fifa 14\game\fifa14.exe] => (Allow) E:\fifa 14\fifa 14\game\fifa14.exe
FirewallRules: [TCP Query User{39FBD3C3-3436-412D-9AC6-EB18DDECFE13}E:\xfire\xfire.exe] => (Allow) E:\xfire\xfire.exe
FirewallRules: [UDP Query User{C4694A22-D245-4DB9-925F-3AEF8E5E046D}E:\xfire\xfire.exe] => (Allow) E:\xfire\xfire.exe
FirewallRules: [TCP Query User{BB1600E6-1A5F-445F-9B95-820A85549930}F:\call of duty 1.5\codmp.exe] => (Allow) F:\call of duty 1.5\codmp.exe
FirewallRules: [UDP Query User{A82DBA71-17D8-461B-8C00-DCA2030463C5}F:\call of duty 1.5\codmp.exe] => (Allow) F:\call of duty 1.5\codmp.exe
FirewallRules: [TCP Query User{EA2D4B7D-7F26-480A-AF3A-7ABF3EA92C41}E:\call of duty 1.5\codmp.exe] => (Allow) E:\call of duty 1.5\codmp.exe
FirewallRules: [UDP Query User{BC4FC9D6-91C8-4E41-9C04-35F5F97D6C7A}E:\call of duty 1.5\codmp.exe] => (Allow) E:\call of duty 1.5\codmp.exe
FirewallRules: [TCP Query User{D253C951-1AF4-4CA6-8FED-CFA33AAD331B}E:\cod do fw\codmp.exe] => (Allow) E:\cod do fw\codmp.exe
FirewallRules: [UDP Query User{BD355BF0-12EA-4CCA-89CE-BA2855773975}E:\cod do fw\codmp.exe] => (Allow) E:\cod do fw\codmp.exe
FirewallRules: [TCP Query User{CC58FC44-08C2-4284-9143-EEFBE68C4409}E:\cod-jump\cod do jmp\codmp.exe] => (Allow) E:\cod-jump\cod do jmp\codmp.exe
FirewallRules: [UDP Query User{B44087BE-D961-4443-9F25-91107263D0BD}E:\cod-jump\cod do jmp\codmp.exe] => (Allow) E:\cod-jump\cod do jmp\codmp.exe
FirewallRules: [TCP Query User{E81F8C33-5892-46C5-8064-8ECDEAB9748B}F:\toshiba\call of duty 4 - modern warfare\iw3mp.exe] => (Allow) F:\toshiba\call of duty 4 - modern warfare\iw3mp.exe
FirewallRules: [UDP Query User{84303BB8-048C-45D0-8027-DFD9D7A8AF9D}F:\toshiba\call of duty 4 - modern warfare\iw3mp.exe] => (Allow) F:\toshiba\call of duty 4 - modern warfare\iw3mp.exe
FirewallRules: [TCP Query User{21404389-AC9D-439A-97C6-9813DFA5432A}E:\totalcmd\totalcmd64.exe] => (Allow) E:\totalcmd\totalcmd64.exe
FirewallRules: [UDP Query User{CF7E9BBC-ACA0-47B0-9441-5CCA47F6DFA4}E:\totalcmd\totalcmd64.exe] => (Allow) E:\totalcmd\totalcmd64.exe
FirewallRules: [{57F2777A-4302-4D72-8FCE-0D3CFD9D040D}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe
FirewallRules: [{D03ED8DF-81B2-4E3E-AF36-BEDB8EA4E6F1}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe
FirewallRules: [TCP Query User{B127C278-6A49-448E-B25B-D1BFC6CAAFE3}E:\ares\ares.exe] => (Allow) E:\ares\ares.exe
FirewallRules: [UDP Query User{4F818A0E-16FF-4663-9791-F03B59A17232}E:\ares\ares.exe] => (Allow) E:\ares\ares.exe
FirewallRules: [TCP Query User{DFD0DA2D-EBB0-4C21-82DD-30F1AA5A30A4}E:\call of duty - ang\codmp.exe] => (Allow) E:\call of duty - ang\codmp.exe
FirewallRules: [UDP Query User{A5B2D7CC-6CF7-4493-9FBC-4D7F65E7E40F}E:\call of duty - ang\codmp.exe] => (Allow) E:\call of duty - ang\codmp.exe
FirewallRules: [TCP Query User{CFA3D691-4F27-4B68-8934-B0F6B9FD8AE0}E:\cod 1.5\call of duty - 1.5\codmp.exe] => (Allow) E:\cod 1.5\call of duty - 1.5\codmp.exe
FirewallRules: [UDP Query User{D29B32C6-149C-4366-8F03-9F4160084B19}E:\cod 1.5\call of duty - 1.5\codmp.exe] => (Allow) E:\cod 1.5\call of duty - 1.5\codmp.exe
FirewallRules: [TCP Query User{ECE7D9C7-1318-4EE1-925D-A70623F00803}E:\cod do jumpowania\call of duty - jump\codmp.exe] => (Allow) E:\cod do jumpowania\call of duty - jump\codmp.exe
FirewallRules: [UDP Query User{5660E848-D4B4-4120-A414-32D534B02AAF}E:\cod do jumpowania\call of duty - jump\codmp.exe] => (Allow) E:\cod do jumpowania\call of duty - jump\codmp.exe
FirewallRules: [TCP Query User{19769B7E-9112-4BC5-BF51-E99227C7A6C1}E:\call of duty-do jumpowania\codmp.exe] => (Allow) E:\call of duty-do jumpowania\codmp.exe
FirewallRules: [UDP Query User{6AEE37AF-FE1F-4ED6-8ED0-274EAC1FA698}E:\call of duty-do jumpowania\codmp.exe] => (Allow) E:\call of duty-do jumpowania\codmp.exe
FirewallRules: [TCP Query User{87DE1BC3-6FA6-46CD-AF7E-8FAC5505E9B8}E:\assassin creed 2\assassin's creed ii\assassinscreediigame.exe] => (Allow) E:\assassin creed 2\assassin's creed ii\assassinscreediigame.exe
FirewallRules: [UDP Query User{1BAEA379-9FF0-4DA6-A319-165EDD19846E}E:\assassin creed 2\assassin's creed ii\assassinscreediigame.exe] => (Allow) E:\assassin creed 2\assassin's creed ii\assassinscreediigame.exe
FirewallRules: [{F878E596-E3F8-46AD-BA8C-3B21E8B8CD5A}] => (Allow) E:\Driver San Francisco\Driver.exe
FirewallRules: [{A5881B8F-7476-424E-8133-76BA687DA763}] => (Allow) E:\Driver San Francisco\Driver.exe
FirewallRules: [TCP Query User{22CDE80D-18C2-4E13-B384-3996DC644379}G:\toshiba\najnowsze cfg - cod 1\call of duty-do fw\codmp.exe] => (Allow) G:\toshiba\najnowsze cfg - cod 1\call of duty-do fw\codmp.exe
FirewallRules: [UDP Query User{C61F0A67-C5DF-45B3-AA78-6471A7D03B9D}G:\toshiba\najnowsze cfg - cod 1\call of duty-do fw\codmp.exe] => (Allow) G:\toshiba\najnowsze cfg - cod 1\call of duty-do fw\codmp.exe
FirewallRules: [TCP Query User{C6C16DE7-AB65-4AF7-BA58-A8ADFB93B134}G:\ares\ares.exe] => (Allow) G:\ares\ares.exe
FirewallRules: [UDP Query User{CEB4B743-3893-4AEF-9B11-ED8957D86DD3}G:\ares\ares.exe] => (Allow) G:\ares\ares.exe
FirewallRules: [TCP Query User{9B9BBFD6-15E0-4773-928D-4B71FD3DE2AD}C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe] => (Allow) C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe
FirewallRules: [UDP Query User{00A1964E-EC29-4F7F-ACE2-BC563415A79D}C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe] => (Allow) C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe
FirewallRules: [{1546BA8A-0AE7-41DF-AE1F-E5DB398B74B6}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD\PowerDVD.EXE
FirewallRules: [{B3631509-16EC-4030-A257-9F6514512F2C}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{01F10BA9-51CC-4E08-BFCE-BD54398DE1DB}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{83BFA270-9F39-4D06-A8B9-AC6FB7D85E28}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{97FB1E34-7265-4C04-99E8-F4330C58757C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{69D69A03-E536-4898-A161-3BF25C11C1A0}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{5C7557B7-161B-4036-A119-E20C57B5A1D0}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{45743B24-6151-4975-940B-B2B0A88C2ABA}] => (Allow) E:\Steam\Steam.exe
FirewallRules: [{86B28C0F-A14E-450F-81A9-ED03DCB52E2A}] => (Allow) E:\Steam\Steam.exe
FirewallRules: [{D8EF66B3-668E-43F7-9B4E-43B1272EFCA2}] => (Allow) E:\Steam\bin\steamwebhelper.exe
FirewallRules: [{99E78B62-F75C-4612-AC6F-220C449B0829}] => (Allow) E:\Steam\bin\steamwebhelper.exe
FirewallRules: [{8832EA85-19F6-414F-AC18-DA0E23E02C65}] => (Allow) E:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{04C3E362-57B8-4210-B7AD-489167FE48C7}] => (Allow) E:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{9E36975D-67F8-4EA4-A58C-7130B0019330}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{E398A6BC-49E3-4B22-8D0C-64A94432131B}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{7FBBC473-E6AE-4687-845F-F23D44EEDB7E}] => (Allow) E:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{476E0645-F7E9-4E8B-AA33-6E0EC6177974}] => (Allow) E:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{57BF7151-D319-4769-A74C-B4ED6315C7CB}] => (Allow) E:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
FirewallRules: [{DBEBCB5A-DD02-49F5-B20B-52D6EBACEEE1}] => (Allow) E:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
FirewallRules: [{F29429B8-59DC-4AB4-A500-05795F73E9F4}] => (Allow) LPort=8501
FirewallRules: [{7FADCEC8-892C-43E5-80DB-0433B864EDB1}] => (Allow) LPort=8501
FirewallRules: [{D5E6327C-1190-4656-8F39-D9FDB0A2A9E8}] => (Allow) E:\Fifa19\FIFA 19\FIFASetup\fifaconfig.exe
FirewallRules: [{66CC3944-57D3-4BCB-910E-F85FE7F14A2A}] => (Allow) E:\Fifa19\FIFA 19\FIFASetup\fifaconfig.exe
FirewallRules: [{DE39FA70-3155-43ED-8C76-FE02AF6482CB}] => (Allow) E:\davinci\Resolve.exe
FirewallRules: [{7C6FCB3F-B7B7-4F7D-879E-6704D511A699}] => (Allow) E:\davinci\bmdpaneld.exe
FirewallRules: [{0C7CCD2B-9ACE-4A43-99B2-8A9720F77484}] => (Allow) E:\davinci\DaVinciPanelDaemon.exe
FirewallRules: [{1185A709-BD8F-4AB7-90E7-BD6C192599C3}] => (Allow) E:\davinci\JLCooperPanelDaemon.exe
FirewallRules: [{17F06F17-AFDA-4E59-88C4-B409A6ABC521}] => (Allow) E:\davinci\EuphonixPanelDaemon.exe
FirewallRules: [{302ABC3F-3E1C-4FF5-A304-A29C58491269}] => (Allow) E:\davinci\TangentPanelDaemon.exe
FirewallRules: [{D3C6E330-6BEE-4596-8D7B-34BAC3A272BB}] => (Allow) E:\davinci\ElementsPanelDaemon.exe
FirewallRules: [{F21C2DBA-F723-4027-9D2E-18BA7C0049AB}] => (Allow) E:\davinci\OxygenPanelDaemon.exe
FirewallRules: [{811428F1-7B14-4208-9312-81E452D5763C}] => (Allow) E:\davinci\DPDecoder.exe
FirewallRules: [{8DDA36E0-D7C5-4063-9DE5-106A14C4D608}] => (Allow) C:\ProgramData\Blackmagic Design\DaVinci Resolve\Support\QtDecoder\QTDecoder.exe
FirewallRules: [{707E5CC7-E484-4590-915C-7D5C1D263907}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{C55D4DA3-1CCA-45A1-A5F9-FF758B069C62}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe

==================== Restore Points =========================

08-04-2020 20:55:07 Scheduled Checkpoint
23-04-2020 15:04:02 Scheduled Checkpoint
06-05-2020 15:45:15 Scheduled Checkpoint
15-05-2020 12:42:34 Removed STATISTICA 13.3.721.1 64-bit (PL).
15-05-2020 13:08:37 Usunięto: Statistica PDF

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Karta tunelowania Teredo firmy Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/15/2020 01:14:45 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. The specified account already exists.

Error: (05/15/2020 12:14:44 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. The specified account already exists.

Error: (05/15/2020 12:07:41 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. The specified account already exists.

Error: (05/15/2020 12:07:17 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Google Update Helper -- Error 1316. The specified account already exists.

Error: (05/15/2020 12:07:07 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Google Update Helper -- Error 1316. The specified account already exists.

Error: (05/15/2020 12:00:58 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Google Update Helper -- Error 1316. The specified account already exists.

Error: (05/14/2020 11:14:44 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. The specified account already exists.

Error: (05/14/2020 10:54:51 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Google Update Helper -- Error 1316. The specified account already exists.

Error: (05/14/2020 10:39:34 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Google Update Helper -- Error 1316. The specified account already exists.

Error: (05/14/2020 10:14:45 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. The specified account already exists.


System errors:
=============
Error: (05/15/2020 12:07:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa bookingDesktopApp Update Service (bookingdesktopapp) niespodziewanie zakończyła pracę. Wystąpiło to razy: 3.

Error: (05/15/2020 12:07:14 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa bookingDesktopApp Update Service (bookingdesktopapp) niespodziewanie zakończyła pracę. Wystąpiło to razy: 2.

Error: (05/15/2020 12:01:26 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa bookingDesktopApp Update Service (bookingdesktopapp) niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.

Error: (05/15/2020 11:57:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi Origin Web Helper Service z powodu następującego błędu: 
Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie.

Error: (05/15/2020 11:57:30 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Origin Web Helper Service.

Error: (05/15/2020 11:56:37 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi Internet Manager. OUC z powodu następującego błędu: 
Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie.

Error: (05/15/2020 11:56:37 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Internet Manager. OUC.

Error: (05/15/2020 11:56:24 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Usługa Hkhlp zakończyła działanie; wystąpił następujący błąd: 
Nie można odnaleźć określonej procedury.

Error: (05/14/2020 10:55:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa bookingDesktopApp Update Service (bookingdesktopapp) niespodziewanie zakończyła pracę. Wystąpiło to razy: 8.

Error: (05/14/2020 10:40:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa bookingDesktopApp Update Service (bookingdesktopapp) niespodziewanie zakończyła pracę. Wystąpiło to razy: 7.


CodeIntegrity:
===================================
  Date: 2017-08-17 12:12:19.351
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

  Date: 2017-08-17 12:12:19.055
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

  Date: 2017-08-12 21:16:41.102
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

  Date: 2017-08-12 21:16:40.852
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

  Date: 2017-08-11 22:22:08.429
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

  Date: 2017-08-11 22:22:08.164
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

  Date: 2017-08-11 12:49:37.414
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

  Date: 2017-08-11 12:49:37.180
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

  Date: 2017-08-10 22:46:20.445
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

  Date: 2017-08-10 22:46:20.226
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4200M CPU @ 2.50GHz
Percentage of memory in use: 45%
Total physical RAM: 8112.54 MB
Available physical RAM: 4431.81 MB
Total Virtual: 16223.26 MB
Available Virtual: 12502.1 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:97.66 GB) (Free:2.23 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive e: (Nowy) (Fixed) (Total:683.59 GB) (Free:354.83 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 8C6504DB)
Partition 1: (Active) - (Size=97.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=683.6 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-09-2016
Ran by Rafal (15-05-2020 13:17:54)
Running from C:\Users\Rafal\Downloads
Windows 7 Ultimate Service Pack 1 (X64) (2014-07-12 12:17:49)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1193567628-3741132159-961158197-500 - Administrator - Disabled)
Guest (S-1-5-21-1193567628-3741132159-961158197-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1193567628-3741132159-961158197-1003 - Limited - Enabled)
Rafal (S-1-5-21-1193567628-3741132159-961158197-1000 - Administrator - Enabled) => C:\Users\Rafal
UpdatusUser (S-1-5-21-1193567628-3741132159-961158197-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {5078598A-1FA2-C888-AA5F-A9C66537DB12}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 20.009.20063 - Adobe Systems Incorporated)
Ansel (Version: 375.63 - NVIDIA Corporation) Hidden
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 20.1.2397 - AVAST Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 81.0.4053.113 - AVAST Software)
Blackmagic RAW Common Components (HKLM\...\{8F57BC8F-7DAC-4E4B-BD13-A55B1AC0DF43}) (Version: 1.6 - Blackmagic Design)
Call of Duty (HKLM-x32\...\Call of Duty) (Version:  - )
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
Club777 (HKU\S-1-5-21-1193567628-3741132159-961158197-1000\...\Club777) (Version:  - )
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Discord (HKU\S-1-5-21-1193567628-3741132159-961158197-1000\...\Discord) (Version: 0.0.306 - Discord Inc.)
Driver San Francisco (HKLM-x32\...\Driver San Francisco) (Version: 1.4.0.0 - Ubisoft)
EA SPORTS FIFA World (HKLM-x32\...\{8F9AC744-EEF6-43DB-A4B6-FA1A18F1C640}) (Version: 9.4.0.60779 - Electronic Arts, Inc.)
Epic Games Launcher (HKLM-x32\...\{0F3B0E4D-F8F7-45FC-A661-100AE5495A31}) (Version: 1.1.133.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
e-pity 11.2.1 za rok 2019 (HKLM-x32\...\{80D8170E-5590-218-B9ED-E24E4C99A11D}_is1) (Version: 11.2.1 - e-file sp. z o.o. sp.k.)
ETDWare PS/2-X64 11.13.2.4_WHQL (HKLM\...\Elantech) (Version: 11.13.2.4 - ELAN Microelectronic Corp.)
FIFA 19 (HKLM-x32\...\{3391E07D-8484-4124-817E-FCBDA859FD62}) (Version: 1.0.61.54442 - Electronic Arts)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 81.0.4044.138 - Google LLC)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.35.451 - Google LLC) Hidden
Grand Theft Auto IV (HKLM-x32\...\Grand Theft Auto IV_is1) (Version:  - )
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Huawei E3272 (HKLM-x32\...\Huawei E3272) (Version: 22.001.22.00.1202 - Huawei Technologies Co.,Ltd)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1310 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.18.10.3186 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.5.0.1066 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
Internet Manager (HKLM-x32\...\Internet Manager) (Version: 22.001.18.13.49 - Huawei Technologies Co.,Ltd)
ipla 2.9 (HKLM-x32\...\ipla) (Version: 2.9 - Cyfrowy Polsat S.A.)
Java 8 Update 73 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)
K-Lite Codec Pack 11.6.5 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 11.6.5 - )
Launcher Prerequisites (x64) (x32 Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Łatka polonizacyjna GTA IV v0.99 (HKLM-x32\...\Łatka polonizacyjna GTA IV v0.99) (Version: 0.99 - GTAPOLSKA.PL)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.92 - McAfee, LLC.)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{FD052FB9-FE90-4438-B355-15EDC89D8FB1}) (Version: 2.0.673.0 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office SharePoint Designer 2007 (HKLM-x32\...\SharePointDesigner) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
My Program version 1.5 (HKLM-x32\...\My Program_is1) (Version: 1.5 - )
novaPDF 8 Printer Driver (HKLM\...\{78348298-772C-42B6-A670-7906495C30BB}) (Version: 8.9.950 - Softland)
novaPDF 8 SDK COM (x64) (HKLM\...\{DC8F19A6-7BE4-4274-9B07-763AFAB18506}) (Version: 8.9.950 - Softland)
NVIDIA Oprogramowanie systemu PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NVIDIA Sterownik graficzny 375.63 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 375.63 - NVIDIA Corporation)
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
OpenOffice 4.1.2 (HKLM-x32\...\{E0ED9630-38E3-418F-A615-A9B2B5758BE5}) (Version: 4.12.9782 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.56.33908 - Electronic Arts, Inc.)
Panel sterowania NVIDIA 375.63 (Version: 375.63 - NVIDIA Corporation) Hidden
PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile PLK Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended PLK Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
PowerDVD (HKLM-x32\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: 7.0.3409.a - CyberLink Corporation)
PowerProducer (HKLM-x32\...\{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version:  - )
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Qualcomm Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.13 - Qualcomm Atheros Communications Inc.)
RadiAnt DICOM Viewer (64-bit) (HKLM-x32\...\RadiAnt64) (Version: 4.6.9.18463 - Medixant)
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.728.728.042813 - REALTEK Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6914 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30127 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0212 - REALTEK Semiconductor Corp.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)
Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft)
Vegas Pro 12.0 (64-bit) (HKLM\...\{87CEB7C0-1D35-11E2-8F19-F04DA23A5C58}) (Version: 12.0.394 - Sony)
WinRAR 5.70 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
Xfire (HKLM-x32\...\Xfire) (Version:  - )

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0510C028-F05B-4820-950E-8300434037B1} - System32\Tasks\{FF071DC6-D034-4177-ACA1-113CC46BA027} => pcalua.exe -a D:\OFFICE\SETUP.EXE -d D:\OFFICE
Task: {110B4CD9-2B54-4566-8BE6-6EA04426F994} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2020-02-25] (AVAST Software)
Task: {20BAC60D-2E14-491C-B104-EC1F9E7E6E85} - System32\Tasks\e-pity2019a_kwiecien => C:\Program Files (x86)\e-file\e-pity\Assets\signxml.exe [2020-02-29] (e-file sp. z o.o. sp. k.)
Task: {21D09DBC-27D7-4B5D-BE3B-7EB8E6806504} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2020-04-19] (AVAST Software)
Task: {28C0B7A0-8742-4A0E-B819-5A59710F2DC2} - System32\Tasks\{E8A2A072-A991-47FA-9E86-46647E0ADAAB} => pcalua.exe -a C:\Users\Rafal\Downloads\setup.exe -d C:\Users\Rafal\Downloads
Task: {42447A7A-9D5E-4795-B800-BB95E80E302C} - System32\Tasks\{FE5DC747-7FC3-4FB8-B95F-A60BF79D35BF} => C:\Program Files (x86)\Origin\Origin.exe [2019-11-19] (Electronic Arts)
Task: {5221994D-064A-45A2-9773-7DED4E477F1E} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\avast software\overseer\overseer.exe [2020-02-27] (Avast Software)
Task: {52A098EB-D6B8-473C-B976-5EE967E8CA57} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {612D5783-26ED-4E73-996D-281A772BEED8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {7735312B-A0C6-4A39-89C9-70CCC48F6DAD} - System32\Tasks\e-pity2019_styczen => C:\Program Files (x86)\e-file\e-pity\Assets\signxml.exe [2020-02-29] (e-file sp. z o.o. sp. k.)
Task: {81BC9161-5AA9-4421-A12F-67656BE64929} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2020-04-19] (AVAST Software)
Task: {8B50D191-4354-4AE6-BF9D-398A36AED083} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-03-26] (AVAST Software) <==== ATTENTION
Task: {B89AD92A-5E2C-463C-BD61-D48C540D81BF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2020-02-25] (Adobe Systems)
Task: {CC13CCCC-7F11-4FEB-B70B-7D0756F47D5D} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-03-26] (AVAST Software) <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2020-05-14 22:40 - 2020-05-14 22:40 - 00185952 _____ () C:\Program Files\AVAST Software\Avast\defs\20051406\aswCmnOS.dll
2020-02-25 17:15 - 2020-02-25 17:15 - 00230160 _____ () C:\Program Files\AVAST Software\Avast\features_manager.dll
2020-02-25 17:16 - 2020-02-25 17:16 - 00195496 _____ () C:\Program Files\AVAST Software\Avast\hns_tools.dll
2016-10-25 13:29 - 2016-10-22 09:20 - 00020536 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2020-02-25 17:16 - 2020-02-25 17:16 - 108869848 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-07-12 14:35 - 2013-04-25 16:32 - 00047104 _____ () C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
2015-01-09 00:09 - 2013-12-03 08:09 - 00240720 _____ () C:\ProgramData\MobileBrServ\mbbservice.exe
2013-10-28 04:02 - 2013-10-28 04:02 - 00351824 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe
2015-01-16 14:34 - 2013-12-19 09:30 - 00678480 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe
2017-06-06 20:06 - 2017-06-06 20:06 - 00146736 _____ () C:\Program Files\Softland\novaPDF 8\Server\AgileDotNetRT64.dll
2014-07-12 14:33 - 2016-10-22 08:04 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-07-28 21:32 - 2015-01-09 17:05 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-12-29 23:15 - 2007-05-14 04:54 - 00272024 ____N () C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe
2014-07-12 14:35 - 2013-04-09 14:42 - 00265728 _____ () C:\Program Files (x86)\REALTEK\Realtek Bluetooth\SkypePlugin.exe
2018-09-14 12:35 - 2020-04-23 02:54 - 01141536 _____ () E:\Steam\bin\cef\cef.win7x64\SDL2.dll
2018-09-14 12:35 - 2020-04-21 04:23 - 119512864 _____ () E:\Steam\bin\cef\cef.win7x64\libcef.dll
2018-09-14 12:35 - 2020-04-21 04:23 - 08022816 _____ () E:\Steam\bin\cef\cef.win7x64\libglesv2.dll
2018-09-14 12:35 - 2020-04-21 04:23 - 00381216 _____ () E:\Steam\bin\cef\cef.win7x64\libegl.dll
2020-05-06 13:55 - 2020-05-02 00:32 - 07813616 _____ () C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.138\libglesv2.dll
2020-05-06 13:55 - 2020-05-02 00:32 - 00387568 _____ () C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.138\libegl.dll
2020-02-25 17:16 - 2020-02-25 17:16 - 02694872 _____ () C:\Program Files\AVAST Software\Avast\swiftshader\libglesv2.dll
2020-02-25 17:16 - 2020-02-25 17:16 - 00167128 _____ () C:\Program Files\AVAST Software\Avast\swiftshader\libegl.dll
2016-10-25 13:29 - 2016-10-22 09:20 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2015-04-24 16:22 - 2020-04-23 02:54 - 00970528 _____ () E:\Steam\SDL2.dll
2015-04-24 16:22 - 2016-09-01 03:02 - 04969248 _____ () E:\Steam\v8.dll
2015-04-24 16:22 - 2016-09-01 03:02 - 01563936 _____ () E:\Steam\icui18n.dll
2015-04-24 16:22 - 2016-09-01 03:02 - 01195296 _____ () E:\Steam\icuuc.dll
2015-04-24 16:22 - 2020-04-28 01:06 - 02924320 _____ () E:\Steam\video.dll
2017-12-16 00:04 - 2019-10-30 19:33 - 05138896 _____ () E:\Steam\libavcodec-57.dll
2017-12-16 00:04 - 2019-10-30 19:33 - 00848336 _____ () E:\Steam\libavutil-55.dll
2017-12-16 00:04 - 2019-10-30 19:33 - 00811984 _____ () E:\Steam\libavformat-57.dll
2017-12-16 00:04 - 2019-10-30 19:33 - 00352720 _____ () E:\Steam\libavresample-3.dll
2017-12-16 00:04 - 2019-10-30 19:33 - 00784848 _____ () E:\Steam\libswscale-4.dll
2015-04-24 16:22 - 2020-04-28 01:06 - 01055520 _____ () E:\Steam\bin\chromehtml.DLL
2016-03-10 16:10 - 2016-07-05 00:17 - 00266560 _____ () E:\Steam\openvr_api.dll
2020-03-18 18:33 - 2020-02-24 13:22 - 01998136 _____ () C:\Users\Rafal\AppData\Local\Discord\app-0.0.306\ffmpeg.dll
2015-01-16 14:34 - 2013-12-19 04:20 - 00011362 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\mingwm10.dll
2015-01-16 14:34 - 2013-12-19 04:20 - 00043008 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\libgcc_s_dw2-1.dll
2015-01-16 14:34 - 2013-12-19 04:20 - 02417152 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\QtCore4.dll
2015-01-16 14:34 - 2013-12-19 04:20 - 01148416 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\QtNetwork4.dll
2020-03-18 18:34 - 2020-05-06 13:41 - 18344760 _____ () \\?\C:\Users\Rafal\AppData\Roaming\discord\0.0.306\modules\discord_voice\discord_voice.node
2020-03-18 18:34 - 2020-03-18 18:34 - 01765688 _____ () \\?\C:\Users\Rafal\AppData\Roaming\discord\0.0.306\modules\discord_utils\discord_utils.node
2020-03-18 18:34 - 2020-03-18 18:34 - 01399096 _____ () \\?\C:\Users\Rafal\AppData\Roaming\discord\0.0.306\modules\discord_erlpack\discord_erlpack.node
2020-03-18 18:34 - 2020-03-18 18:34 - 02594616 _____ () \\?\C:\Users\Rafal\AppData\Roaming\discord\0.0.306\modules\discord_game_utils\discord_game_utils.node
2020-03-18 18:34 - 2020-03-18 18:34 - 02417976 _____ () \\?\C:\Users\Rafal\AppData\Roaming\discord\0.0.306\modules\discord_cloudsync\discord_cloudsync.node
2020-03-18 18:35 - 2020-03-18 18:35 - 00541496 _____ () \\?\C:\Users\Rafal\AppData\Roaming\discord\0.0.306\modules\discord_media\discord_media.node
2020-04-10 18:32 - 2020-04-10 18:32 - 54704440 _____ () \\?\C:\Users\Rafal\AppData\Roaming\discord\0.0.306\modules\discord_krisp\discord_krisp.node
2020-03-18 18:35 - 2020-03-18 18:35 - 01305912 _____ () \\?\C:\Users\Rafal\AppData\Roaming\discord\0.0.306\modules\discord_modules\discord_modules.node
2020-03-18 18:35 - 2020-03-18 18:35 - 07792952 _____ () \\?\C:\Users\Rafal\AppData\Roaming\discord\0.0.306\modules\discord_dispatch\discord_dispatch.node
2020-03-18 18:33 - 2020-02-24 13:22 - 06676792 _____ () C:\Users\Rafal\AppData\Local\Discord\app-0.0.306\libglesv2.dll
2020-03-18 18:33 - 2020-02-24 13:22 - 00123704 _____ () C:\Users\Rafal\AppData\Local\Discord\app-0.0.306\libegl.dll
2014-07-12 14:40 - 2013-02-15 16:15 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-1193567628-3741132159-961158197-1000\...\hola.org -> hxxp://hola.org

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2019-01-04 12:59 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1193567628-3741132159-961158197-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Rafal\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.55.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{75BE27B0-A487-4982-86A3-DEA8F51E699A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{BF957924-4CCE-4652-9560-AC9EBE15327B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [TCP Query User{AE883555-C749-49D0-B0A0-A567C50FCE92}C:\program files\call of duty-do fw\codmp.exe] => (Allow) C:\program files\call of duty-do fw\codmp.exe
FirewallRules: [UDP Query User{C0F75A19-2F6C-48DC-B9E4-EC3B5EC5D0C0}C:\program files\call of duty-do fw\codmp.exe] => (Allow) C:\program files\call of duty-do fw\codmp.exe
FirewallRules: [TCP Query User{7D431FC6-E66A-49A8-B373-CA83D226031E}C:\program files\call of duty-do fw\call of duty-do fw1\codmp.exe] => (Allow) C:\program files\call of duty-do fw\call of duty-do fw1\codmp.exe
FirewallRules: [UDP Query User{DC7429BE-236C-4F48-AEC5-CAAB96641C19}C:\program files\call of duty-do fw\call of duty-do fw1\codmp.exe] => (Allow) C:\program files\call of duty-do fw\call of duty-do fw1\codmp.exe
FirewallRules: [TCP Query User{755BDFD3-A019-4BE6-A0D6-F491FC71A075}E:\call of duty\cod do fw\codmp.exe] => (Allow) E:\call of duty\cod do fw\codmp.exe
FirewallRules: [UDP Query User{F2EDAF23-6EFF-4310-A7FD-A93E445F802D}E:\call of duty\cod do fw\codmp.exe] => (Allow) E:\call of duty\cod do fw\codmp.exe
FirewallRules: [TCP Query User{8F1F5930-6886-4FBD-8730-C0F81D6D01B5}C:\users\rafal\desktop\call of duty-do fw\codmp.exe] => (Block) C:\users\rafal\desktop\call of duty-do fw\codmp.exe
FirewallRules: [UDP Query User{D3FCBE68-D06E-479A-8290-DC8304F2D19E}C:\users\rafal\desktop\call of duty-do fw\codmp.exe] => (Block) C:\users\rafal\desktop\call of duty-do fw\codmp.exe
FirewallRules: [TCP Query User{1586D538-5309-45B3-B4BF-2D82AFFFD7FF}C:0\toshiba\cod 1 + nowe cfg sound\call of duty-do fw\codmp.exe] => (Allow) C:0\toshiba\cod 1 + nowe cfg sound\call of duty-do fw\codmp.exe
FirewallRules: [UDP Query User{C9A0404A-B401-4590-9391-D5DD8F892126}C:0\toshiba\cod 1 + nowe cfg sound\call of duty-do fw\codmp.exe] => (Allow) C:0\toshiba\cod 1 + nowe cfg sound\call of duty-do fw\codmp.exe
FirewallRules: [TCP Query User{64E6EEDF-2B2A-4B11-9EB0-46E9333EFA59}C:\users\rafal\desktop\call of duty 4 - modern warfare\iw3mp.exe] => (Allow) C:\users\rafal\desktop\call of duty 4 - modern warfare\iw3mp.exe
FirewallRules: [UDP Query User{ABF03BAE-571A-439F-B48F-D560D7344754}C:\users\rafal\desktop\call of duty 4 - modern warfare\iw3mp.exe] => (Allow) C:\users\rafal\desktop\call of duty 4 - modern warfare\iw3mp.exe
FirewallRules: [TCP Query User{A48ECF80-5C64-4812-9BA4-20F30605CEA5}C:\program files\najnowsze cfg - cod 1\call of duty-do fw\codmp.exe] => (Allow) C:\program files\najnowsze cfg - cod 1\call of duty-do fw\codmp.exe
FirewallRules: [UDP Query User{FB5461F2-76F3-4A45-B2F0-4F904438123B}C:\program files\najnowsze cfg - cod 1\call of duty-do fw\codmp.exe] => (Allow) C:\program files\najnowsze cfg - cod 1\call of duty-do fw\codmp.exe
FirewallRules: [TCP Query User{69D6AFA7-DCCF-4F90-9AF1-E0943DFE2AC3}C:\program files\najnowsze cfg - cod 1\fifa 14\fifa 14\game\fifa14.exe] => (Allow) C:\program files\najnowsze cfg - cod 1\fifa 14\fifa 14\game\fifa14.exe
FirewallRules: [UDP Query User{2EB4FBBC-FB64-46E3-8E1D-340B48E6C3BC}C:\program files\najnowsze cfg - cod 1\fifa 14\fifa 14\game\fifa14.exe] => (Allow) C:\program files\najnowsze cfg - cod 1\fifa 14\fifa 14\game\fifa14.exe
FirewallRules: [{90929F8C-1100-4EF6-9B79-C2B1A382B36B}] => (Allow) C:\Program Files (x86)\cdp.pl\Farming Simulator 2013\FarmingSimulator2013.exe
FirewallRules: [{99DE522A-DDE0-47F5-9CBA-4CEE917ABA71}] => (Allow) C:\Program Files (x86)\cdp.pl\Farming Simulator 2013\FarmingSimulator2013Game.exe
FirewallRules: [TCP Query User{272F0CA3-3D09-416A-B2CB-1C821A5D06DE}E:\call of duty 4 - modern warfare\iw3mp.exe] => (Allow) E:\call of duty 4 - modern warfare\iw3mp.exe
FirewallRules: [UDP Query User{A2B497FF-9B6A-44D7-88BE-E9127E143E95}E:\call of duty 4 - modern warfare\iw3mp.exe] => (Allow) E:\call of duty 4 - modern warfare\iw3mp.exe
FirewallRules: [TCP Query User{B88AB62F-CFA0-40C3-8F51-A87EBAD64BF1}E:\fifa 14\fifa 14\game\fifa14.exe] => (Allow) E:\fifa 14\fifa 14\game\fifa14.exe
FirewallRules: [UDP Query User{2EB7BA73-C373-4F07-B1DD-DA54122795DB}E:\fifa 14\fifa 14\game\fifa14.exe] => (Allow) E:\fifa 14\fifa 14\game\fifa14.exe
FirewallRules: [TCP Query User{39FBD3C3-3436-412D-9AC6-EB18DDECFE13}E:\xfire\xfire.exe] => (Allow) E:\xfire\xfire.exe
FirewallRules: [UDP Query User{C4694A22-D245-4DB9-925F-3AEF8E5E046D}E:\xfire\xfire.exe] => (Allow) E:\xfire\xfire.exe
FirewallRules: [TCP Query User{BB1600E6-1A5F-445F-9B95-820A85549930}F:\call of duty 1.5\codmp.exe] => (Allow) F:\call of duty 1.5\codmp.exe
FirewallRules: [UDP Query User{A82DBA71-17D8-461B-8C00-DCA2030463C5}F:\call of duty 1.5\codmp.exe] => (Allow) F:\call of duty 1.5\codmp.exe
FirewallRules: [TCP Query User{EA2D4B7D-7F26-480A-AF3A-7ABF3EA92C41}E:\call of duty 1.5\codmp.exe] => (Allow) E:\call of duty 1.5\codmp.exe
FirewallRules: [UDP Query User{BC4FC9D6-91C8-4E41-9C04-35F5F97D6C7A}E:\call of duty 1.5\codmp.exe] => (Allow) E:\call of duty 1.5\codmp.exe
FirewallRules: [TCP Query User{D253C951-1AF4-4CA6-8FED-CFA33AAD331B}E:\cod do fw\codmp.exe] => (Allow) E:\cod do fw\codmp.exe
FirewallRules: [UDP Query User{BD355BF0-12EA-4CCA-89CE-BA2855773975}E:\cod do fw\codmp.exe] => (Allow) E:\cod do fw\codmp.exe
FirewallRules: [TCP Query User{CC58FC44-08C2-4284-9143-EEFBE68C4409}E:\cod-jump\cod do jmp\codmp.exe] => (Allow) E:\cod-jump\cod do jmp\codmp.exe
FirewallRules: [UDP Query User{B44087BE-D961-4443-9F25-91107263D0BD}E:\cod-jump\cod do jmp\codmp.exe] => (Allow) E:\cod-jump\cod do jmp\codmp.exe
FirewallRules: [TCP Query User{E81F8C33-5892-46C5-8064-8ECDEAB9748B}F:\toshiba\call of duty 4 - modern warfare\iw3mp.exe] => (Allow) F:\toshiba\call of duty 4 - modern warfare\iw3mp.exe
FirewallRules: [UDP Query User{84303BB8-048C-45D0-8027-DFD9D7A8AF9D}F:\toshiba\call of duty 4 - modern warfare\iw3mp.exe] => (Allow) F:\toshiba\call of duty 4 - modern warfare\iw3mp.exe
FirewallRules: [TCP Query User{21404389-AC9D-439A-97C6-9813DFA5432A}E:\totalcmd\totalcmd64.exe] => (Allow) E:\totalcmd\totalcmd64.exe
FirewallRules: [UDP Query User{CF7E9BBC-ACA0-47B0-9441-5CCA47F6DFA4}E:\totalcmd\totalcmd64.exe] => (Allow) E:\totalcmd\totalcmd64.exe
FirewallRules: [{57F2777A-4302-4D72-8FCE-0D3CFD9D040D}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe
FirewallRules: [{D03ED8DF-81B2-4E3E-AF36-BEDB8EA4E6F1}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe
FirewallRules: [TCP Query User{B127C278-6A49-448E-B25B-D1BFC6CAAFE3}E:\ares\ares.exe] => (Allow) E:\ares\ares.exe
FirewallRules: [UDP Query User{4F818A0E-16FF-4663-9791-F03B59A17232}E:\ares\ares.exe] => (Allow) E:\ares\ares.exe
FirewallRules: [TCP Query User{DFD0DA2D-EBB0-4C21-82DD-30F1AA5A30A4}E:\call of duty - ang\codmp.exe] => (Allow) E:\call of duty - ang\codmp.exe
FirewallRules: [UDP Query User{A5B2D7CC-6CF7-4493-9FBC-4D7F65E7E40F}E:\call of duty - ang\codmp.exe] => (Allow) E:\call of duty - ang\codmp.exe
FirewallRules: [TCP Query User{CFA3D691-4F27-4B68-8934-B0F6B9FD8AE0}E:\cod 1.5\call of duty - 1.5\codmp.exe] => (Allow) E:\cod 1.5\call of duty - 1.5\codmp.exe
FirewallRules: [UDP Query User{D29B32C6-149C-4366-8F03-9F4160084B19}E:\cod 1.5\call of duty - 1.5\codmp.exe] => (Allow) E:\cod 1.5\call of duty - 1.5\codmp.exe
FirewallRules: [TCP Query User{ECE7D9C7-1318-4EE1-925D-A70623F00803}E:\cod do jumpowania\call of duty - jump\codmp.exe] => (Allow) E:\cod do jumpowania\call of duty - jump\codmp.exe
FirewallRules: [UDP Query User{5660E848-D4B4-4120-A414-32D534B02AAF}E:\cod do jumpowania\call of duty - jump\codmp.exe] => (Allow) E:\cod do jumpowania\call of duty - jump\codmp.exe
FirewallRules: [TCP Query User{19769B7E-9112-4BC5-BF51-E99227C7A6C1}E:\call of duty-do jumpowania\codmp.exe] => (Allow) E:\call of duty-do jumpowania\codmp.exe
FirewallRules: [UDP Query User{6AEE37AF-FE1F-4ED6-8ED0-274EAC1FA698}E:\call of duty-do jumpowania\codmp.exe] => (Allow) E:\call of duty-do jumpowania\codmp.exe
FirewallRules: [TCP Query User{87DE1BC3-6FA6-46CD-AF7E-8FAC5505E9B8}E:\assassin creed 2\assassin's creed ii\assassinscreediigame.exe] => (Allow) E:\assassin creed 2\assassin's creed ii\assassinscreediigame.exe
FirewallRules: [UDP Query User{1BAEA379-9FF0-4DA6-A319-165EDD19846E}E:\assassin creed 2\assassin's creed ii\assassinscreediigame.exe] => (Allow) E:\assassin creed 2\assassin's creed ii\assassinscreediigame.exe
FirewallRules: [{F878E596-E3F8-46AD-BA8C-3B21E8B8CD5A}] => (Allow) E:\Driver San Francisco\Driver.exe
FirewallRules: [{A5881B8F-7476-424E-8133-76BA687DA763}] => (Allow) E:\Driver San Francisco\Driver.exe
FirewallRules: [TCP Query User{22CDE80D-18C2-4E13-B384-3996DC644379}G:\toshiba\najnowsze cfg - cod 1\call of duty-do fw\codmp.exe] => (Allow) G:\toshiba\najnowsze cfg - cod 1\call of duty-do fw\codmp.exe
FirewallRules: [UDP Query User{C61F0A67-C5DF-45B3-AA78-6471A7D03B9D}G:\toshiba\najnowsze cfg - cod 1\call of duty-do fw\codmp.exe] => (Allow) G:\toshiba\najnowsze cfg - cod 1\call of duty-do fw\codmp.exe
FirewallRules: [TCP Query User{C6C16DE7-AB65-4AF7-BA58-A8ADFB93B134}G:\ares\ares.exe] => (Allow) G:\ares\ares.exe
FirewallRules: [UDP Query User{CEB4B743-3893-4AEF-9B11-ED8957D86DD3}G:\ares\ares.exe] => (Allow) G:\ares\ares.exe
FirewallRules: [TCP Query User{9B9BBFD6-15E0-4773-928D-4B71FD3DE2AD}C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe] => (Allow) C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe
FirewallRules: [UDP Query User{00A1964E-EC29-4F7F-ACE2-BC563415A79D}C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe] => (Allow) C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe
FirewallRules: [{1546BA8A-0AE7-41DF-AE1F-E5DB398B74B6}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD\PowerDVD.EXE
FirewallRules: [{B3631509-16EC-4030-A257-9F6514512F2C}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{01F10BA9-51CC-4E08-BFCE-BD54398DE1DB}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{83BFA270-9F39-4D06-A8B9-AC6FB7D85E28}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{97FB1E34-7265-4C04-99E8-F4330C58757C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{69D69A03-E536-4898-A161-3BF25C11C1A0}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{5C7557B7-161B-4036-A119-E20C57B5A1D0}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{45743B24-6151-4975-940B-B2B0A88C2ABA}] => (Allow) E:\Steam\Steam.exe
FirewallRules: [{86B28C0F-A14E-450F-81A9-ED03DCB52E2A}] => (Allow) E:\Steam\Steam.exe
FirewallRules: [{D8EF66B3-668E-43F7-9B4E-43B1272EFCA2}] => (Allow) E:\Steam\bin\steamwebhelper.exe
FirewallRules: [{99E78B62-F75C-4612-AC6F-220C449B0829}] => (Allow) E:\Steam\bin\steamwebhelper.exe
FirewallRules: [{8832EA85-19F6-414F-AC18-DA0E23E02C65}] => (Allow) E:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{04C3E362-57B8-4210-B7AD-489167FE48C7}] => (Allow) E:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{9E36975D-67F8-4EA4-A58C-7130B0019330}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{E398A6BC-49E3-4B22-8D0C-64A94432131B}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{7FBBC473-E6AE-4687-845F-F23D44EEDB7E}] => (Allow) E:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{476E0645-F7E9-4E8B-AA33-6E0EC6177974}] => (Allow) E:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{57BF7151-D319-4769-A74C-B4ED6315C7CB}] => (Allow) E:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
FirewallRules: [{DBEBCB5A-DD02-49F5-B20B-52D6EBACEEE1}] => (Allow) E:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
FirewallRules: [{F29429B8-59DC-4AB4-A500-05795F73E9F4}] => (Allow) LPort=8501
FirewallRules: [{7FADCEC8-892C-43E5-80DB-0433B864EDB1}] => (Allow) LPort=8501
FirewallRules: [{D5E6327C-1190-4656-8F39-D9FDB0A2A9E8}] => (Allow) E:\Fifa19\FIFA 19\FIFASetup\fifaconfig.exe
FirewallRules: [{66CC3944-57D3-4BCB-910E-F85FE7F14A2A}] => (Allow) E:\Fifa19\FIFA 19\FIFASetup\fifaconfig.exe
FirewallRules: [{DE39FA70-3155-43ED-8C76-FE02AF6482CB}] => (Allow) E:\davinci\Resolve.exe
FirewallRules: [{7C6FCB3F-B7B7-4F7D-879E-6704D511A699}] => (Allow) E:\davinci\bmdpaneld.exe
FirewallRules: [{0C7CCD2B-9ACE-4A43-99B2-8A9720F77484}] => (Allow) E:\davinci\DaVinciPanelDaemon.exe
FirewallRules: [{1185A709-BD8F-4AB7-90E7-BD6C192599C3}] => (Allow) E:\davinci\JLCooperPanelDaemon.exe
FirewallRules: [{17F06F17-AFDA-4E59-88C4-B409A6ABC521}] => (Allow) E:\davinci\EuphonixPanelDaemon.exe
FirewallRules: [{302ABC3F-3E1C-4FF5-A304-A29C58491269}] => (Allow) E:\davinci\TangentPanelDaemon.exe
FirewallRules: [{D3C6E330-6BEE-4596-8D7B-34BAC3A272BB}] => (Allow) E:\davinci\ElementsPanelDaemon.exe
FirewallRules: [{F21C2DBA-F723-4027-9D2E-18BA7C0049AB}] => (Allow) E:\davinci\OxygenPanelDaemon.exe
FirewallRules: [{811428F1-7B14-4208-9312-81E452D5763C}] => (Allow) E:\davinci\DPDecoder.exe
FirewallRules: [{8DDA36E0-D7C5-4063-9DE5-106A14C4D608}] => (Allow) C:\ProgramData\Blackmagic Design\DaVinci Resolve\Support\QtDecoder\QTDecoder.exe
FirewallRules: [{707E5CC7-E484-4590-915C-7D5C1D263907}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{C55D4DA3-1CCA-45A1-A5F9-FF758B069C62}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe

==================== Restore Points =========================

08-04-2020 20:55:07 Scheduled Checkpoint
23-04-2020 15:04:02 Scheduled Checkpoint
06-05-2020 15:45:15 Scheduled Checkpoint
15-05-2020 12:42:34 Removed STATISTICA 13.3.721.1 64-bit (PL).
15-05-2020 13:08:37 Usunięto: Statistica PDF

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Karta tunelowania Teredo firmy Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/15/2020 01:14:45 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. The specified account already exists.

Error: (05/15/2020 12:14:44 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. The specified account already exists.

Error: (05/15/2020 12:07:41 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. The specified account already exists.

Error: (05/15/2020 12:07:17 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Google Update Helper -- Error 1316. The specified account already exists.

Error: (05/15/2020 12:07:07 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Google Update Helper -- Error 1316. The specified account already exists.

Error: (05/15/2020 12:00:58 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Google Update Helper -- Error 1316. The specified account already exists.

Error: (05/14/2020 11:14:44 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. The specified account already exists.

Error: (05/14/2020 10:54:51 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Google Update Helper -- Error 1316. The specified account already exists.

Error: (05/14/2020 10:39:34 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Google Update Helper -- Error 1316. The specified account already exists.

Error: (05/14/2020 10:14:45 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. The specified account already exists.


System errors:
=============
Error: (05/15/2020 12:07:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa bookingDesktopApp Update Service (bookingdesktopapp) niespodziewanie zakończyła pracę. Wystąpiło to razy: 3.

Error: (05/15/2020 12:07:14 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa bookingDesktopApp Update Service (bookingdesktopapp) niespodziewanie zakończyła pracę. Wystąpiło to razy: 2.

Error: (05/15/2020 12:01:26 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa bookingDesktopApp Update Service (bookingdesktopapp) niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.

Error: (05/15/2020 11:57:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi Origin Web Helper Service z powodu następującego błędu: 
Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie.

Error: (05/15/2020 11:57:30 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Origin Web Helper Service.

Error: (05/15/2020 11:56:37 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi Internet Manager. OUC z powodu następującego błędu: 
Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie.

Error: (05/15/2020 11:56:37 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Internet Manager. OUC.

Error: (05/15/2020 11:56:24 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Usługa Hkhlp zakończyła działanie; wystąpił następujący błąd: 
Nie można odnaleźć określonej procedury.

Error: (05/14/2020 10:55:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa bookingDesktopApp Update Service (bookingdesktopapp) niespodziewanie zakończyła pracę. Wystąpiło to razy: 8.

Error: (05/14/2020 10:40:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa bookingDesktopApp Update Service (bookingdesktopapp) niespodziewanie zakończyła pracę. Wystąpiło to razy: 7.


CodeIntegrity:
===================================
  Date: 2017-08-17 12:12:19.351
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

  Date: 2017-08-17 12:12:19.055
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

  Date: 2017-08-12 21:16:41.102
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

  Date: 2017-08-12 21:16:40.852
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

  Date: 2017-08-11 22:22:08.429
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

  Date: 2017-08-11 22:22:08.164
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

  Date: 2017-08-11 12:49:37.414
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

  Date: 2017-08-11 12:49:37.180
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

  Date: 2017-08-10 22:46:20.445
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

  Date: 2017-08-10 22:46:20.226
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4200M CPU @ 2.50GHz
Percentage of memory in use: 45%
Total physical RAM: 8112.54 MB
Available physical RAM: 4431.81 MB
Total Virtual: 16223.26 MB
Available Virtual: 12502.1 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:97.66 GB) (Free:2.23 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive e: (Nowy) (Fixed) (Total:683.59 GB) (Free:354.83 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 8C6504DB)
Partition 1: (Active) - (Size=97.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=683.6 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================