Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 12-07-2026 01 Uruchomiony przez bait1 (administrator) BAIT (Notebook NHx0ERQ_EPS) (14-07-2026 00:07:33) Uruchomiony z C:\Users\bait1\Downloads\FRST64.exe Załadowane profile: bait1 & OVRLibraryService Platforma: Microsoft Windows 11 Pro Wersja 25H2 26200.8655 (X64) Język: Polski (Polska) Domyślna przeglądarka: Chrome Tryb startu: Normal ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Adobe Systems Incorporated) [Brak podpisu cyfrowego] C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2> (BitTorrent Inc -> BitTorrent Limited) C:\Users\bait1\AppData\Roaming\uTorrent\uTorrent.exe (C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (Node.js) [Brak podpisu cyfrowego] C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe (C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe (C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe ->) (CHENGDU YIWO Tech Development Co., Ltd. -> ) C:\Program Files\EaseUS\Todo Backup\bin\TodoBackupService.exe (C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe (C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe ->) (Meta Platforms, Inc. -> Facebook Technologies, LLC) C:\Program Files\Oculus\Support\oculus-runtime\OVRRedir.exe (C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe ->) (Meta Platforms, Inc. -> Facebook Technologies, LLC) C:\Program Files\Oculus\Support\oculus-runtime\OVRServer_x64.exe (C:\Users\bait1\AppData\Roaming\uTorrent\updates\3.6.0_47228\utorrentie.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\150.0.4078.65\msedgewebview2.exe (C:\Users\bait1\AppData\Roaming\uTorrent\uTorrent.exe ->) (BitTorrent Inc -> BitTorrent Inc.) C:\Users\bait1\AppData\Roaming\uTorrent\updates\3.6.0_47228\utorrentie.exe <2> (C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe (DriverStore\FileRepository\u0405470.inf_amd64_2e71ce0e27c179e1\B404884\atiesrxx.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0405470.inf_amd64_2e71ce0e27c179e1\B404884\atieclxx.exe (explorer.exe ->) (54418920-1845-464B-A595-EDBEA032F08F -> ) C:\Program Files\WindowsApps\CLEVOCO.FnhotkeysandOSD_7.88.1.0_x64__6h6z29zh29qx0\FnKey\FnKey.exe (explorer.exe ->) (F.lux Software LLC -> f.lux Software LLC) C:\Users\bait1\AppData\Local\FluxSoftware\Flux\flux.exe (explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe (explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE (explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe (explorer.exe ->) (VENEA.NET) [Brak podpisu cyfrowego] C:\Program Files\NetTraffic\NetTraffic.exe (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <61> (IP Izmaylov Artem Andreevich -> Artem Izmaylov) C:\Program Files\AIMP\AIMP.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\150.0.4078.65\msedgewebview2.exe <11> (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvcvi.inf_amd64_75c4fbdef32fe73d\Display.NvContainer\NVDisplay.Container.exe (services.exe ->) () [Brak podpisu cyfrowego] C:\Windows\System32\OpenSSH\ssh-agent.exe (services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (services.exe ->) (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\ENS\ensserver.exe (services.exe ->) (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe (services.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe <2> (services.exe ->) (COMODO) [Brak podpisu cyfrowego] C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe (services.exe ->) (Hewlett-Packard Company -> HP) C:\Windows\System32\HPSIsvc.exe (services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe (services.exe ->) (HP Inc.) [Brak podpisu cyfrowego] C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe (services.exe ->) (Meta Platforms, Inc. -> Facebook Technologies, LLC) C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (services.exe ->) (Microsoft Corporation) [Brak podpisu cyfrowego] C:\Program Files (x86)\Microsoft\Edge\Application\150.0.4078.65\elevation_service.exe (services.exe ->) (Microsoft Corporation) [Brak podpisu cyfrowego] C:\Program Files\Windows Media Player\wmpnetwk.exe (services.exe ->) (Microsoft Corporation) [Brak podpisu cyfrowego] C:\Windows\System32\dllhost.exe <2> (services.exe ->) (Microsoft Corporation) [Brak podpisu cyfrowego] C:\Windows\System32\MidiSrv.exe (services.exe ->) (Microsoft Corporation) [Brak podpisu cyfrowego] C:\Windows\System32\PerceptionSimulation\PerceptionSimulationService.exe (services.exe ->) (Microsoft Corporation) [Brak podpisu cyfrowego] C:\Windows\SysWOW64\perfhost.exe (services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\DriverStore\FileRepository\acpibridge1.inf_amd64_46c2643f8c307edd\DCHUService.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0405470.inf_amd64_2e71ce0e27c179e1\B404884\atiesrxx.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Insyde Software Corp.) C:\Program Files (x86)\ControlCenter\Driver\x64\HKClipSvc.exe (services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvcvi.inf_amd64_75c4fbdef32fe73d\Display.NvContainer\NVDisplay.Container.exe (services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_73592056cffa61ae\RtkAudUService64.exe (sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2605.9.0_x64__8wekyb3d8bbwe\CalculatorApp.exe (Skillbrains) [Brak podpisu cyfrowego] C:\Program Files (x86)\Skillbrains\lightshot\5.5.0.7\Lightshot.exe (svchost.exe ->) (Adobe Inc.) [Brak podpisu cyfrowego] C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe (svchost.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe (svchost.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe (svchost.exe ->) (Filipe Lourenço) [Brak podpisu cyfrowego] C:\Program Files\BatteryCare\BatteryCare.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.375.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11321.0_x64__8wekyb3d8bbwe\OpenConsole.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11321.0_x64__8wekyb3d8bbwe\WindowsTerminal.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Telegram FZ-LLC) [Brak podpisu cyfrowego] C:\Users\bait1\AppData\Roaming\Telegram Desktop\Telegram.exe ==================== Rejestr (filtrowane) =================== HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_73592056cffa61ae\RtkAudUService64.exe [1231912 2021-02-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [1503744 2019-07-21] () [Brak podpisu cyfrowego] HKLM-x32\...\Run: [TrayProcess] => C:\Program Files\EaseUS\Todo Backup\bin\TrayProcess.exe [1585664 2023-11-29] (CHENGDU YIWO Tech Development Co., Ltd) [Brak podpisu cyfrowego] HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Ograniczenia <==== UWAGA HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Ograniczenia <==== UWAGA HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Ograniczenia <==== UWAGA HKLM\Software\Policies\...\system: [AllowBlockingAppsAtShutdown] 0 HKLM\Software\Policies\...\system: [EnableSmartScreen] 0 <==== UWAGA HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\Run: [f.lux] => C:\Users\bait1\AppData\Local\FluxSoftware\Flux\flux.exe [1536232 2026-04-08] (F.lux Software LLC -> f.lux Software LLC) HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\Run: [NetTraffic] => C:\Program Files\NetTraffic\NetTraffic.exe [721920 2023-09-25] (VENEA.NET) [Brak podpisu cyfrowego] HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\Run: [ut] => C:\Users\bait1\AppData\Roaming\uTorrent\uTorrent.exe [3681200 2025-10-28] (BitTorrent Inc -> BitTorrent Limited) HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\Run: [ChomikBox] => C:\Program Files (x86)\chomikbox.exe (Brak pliku) HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [45622784 2026-06-24] (Adobe Systems Incorporated) [Brak podpisu cyfrowego] HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\Run: [MicrosoftEdgeAutoLaunch_A46EBA3BAB6D8CF3410B91796761EB2B] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [4970824 2026-07-09] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\Run: [Proton VPN] => C:\Program Files\Proton\VPN\ProtonVPN.Launcher.exe [18727808 2026-06-03] (Proton AG -> ProtonVPN) HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\Policies\Explorer: [HideSCAPower] 0 HKLM\...\Windows x64\Print Processors\HP1100PrintProc: C:\Windows\System32\spool\prtprocs\x64\HP1100PP.DLL [74240 2012-08-31] (Microsoft Windows Hardware Compatibility Publisher -> ) HKLM\...\Print\Monitors\Advanced TCP/IP Port Monitor: C:\Windows\system32\mvtcpmon.dll [541184 2009-06-25] (Marvell Semiconductor, Inc.) [Brak podpisu cyfrowego] HKLM\...\Print\Monitors\HP Standard TCP/IP Port: C:\Windows\system32\HpTcpMon.dll [331264 2009-09-16] (Hewlett Packard) [Brak podpisu cyfrowego] HKLM\...\Print\Monitors\HP1100LM: C:\Windows\system32\HP1100LM.DLL [288768 2012-08-31] (Microsoft Windows Hardware Compatibility Publisher -> ) HKLM\Software\...\AppCompatFlags\Custom\H3Blade.exe: [{62a24b39-0106-4990-90ea-3a09e9dda7a6}.sdb] -> HoMM III Compatibility Database HKLM\Software\...\AppCompatFlags\InstalledSDB\{62a24b39-0106-4990-90ea-3a09e9dda7a6}: [DatabasePath] -> C:\Windows\AppPatch\CustomSDB\{62a24b39-0106-4990-90ea-3a09e9dda7a6}.sdb [2024-09-28] HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [5036544 2026-07-03] (Google LLC) [Brak podpisu cyfrowego] HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\150.0.7871.101\Installer\chrmstp.exe [8260096 2026-07-12] (Google LLC) [Brak podpisu cyfrowego] AlternateShell: <==== UWAGA GroupPolicy: Ograniczenia ? <==== UWAGA Policies: C:\ProgramData\NTUSER.pol: Ograniczenia <==== UWAGA ==================== Zaplanowane zadania (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {50D4A010-81EE-4E80-AC91-04DDA6B832B7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2182656 2026-01-23] (Adobe Inc.) [Brak podpisu cyfrowego] Task: {4978A54E-4CFD-4FE8-8F78-2568792E559B} - System32\Tasks\BatteryCareAuto => C:\Program Files\BatteryCare\BatteryCare.exe [785408 2025-10-14] (Filipe Lourenço) [Brak podpisu cyfrowego] Task: {9D35FCEE-4080-4688-8722-B37F7B990FA7} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [302960 2025-01-30] (Now.gg, INC -> BlueStack Systems, Inc.) Task: {6CEC3623-4D2C-4CEE-AC86-D3C8F9FDECC4} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) Task: {4BE1EA3C-71D8-4DC5-8C98-34EBC6898A0D} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [6275584 2021-01-22] (COMODO) [Brak podpisu cyfrowego] Task: {BBE88855-1678-4BA0-BB67-AF3447117532} - System32\Tasks\COMODO\COMODO Maintenance {947247B5-026A-4437-9371-770782BE839D} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [6275584 2021-01-22] (COMODO) [Brak podpisu cyfrowego] Task: {33F3FE9B-93E2-42B1-965F-933F04B779C1} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [6275584 2021-01-22] (COMODO) [Brak podpisu cyfrowego] Task: {5528E575-30C2-43C4-ABD8-2C70F8627C45} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [6275584 2021-01-22] (COMODO) [Brak podpisu cyfrowego] Task: {819AE283-6BDC-4D08-A6F8-97218621D170} - System32\Tasks\COMODO\COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) Task: {5EDD64A1-A891-4DD0-B045-A351CF3094EB} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [6275584 2021-01-22] (COMODO) [Brak podpisu cyfrowego] Task: {ED7A51D5-AC47-4A63-91A6-7DEF879CE9C7} - System32\Tasks\FxSound\Update => C:\Program -> Files\FxSound LLC\FxSound\updater.exe /silent Task: {34B265AD-9011-4087-86EF-540546FDCCA8} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem151.0.7910.2{B4F54155-08C3-4315-8DD7-472BA190F756} => C:\Program Files (x86)\Google\GoogleUpdater\151.0.7910.2\updater.exe [10170368 2026-07-06] (Google LLC) [Brak podpisu cyfrowego] Task: {2464EAD7-B2A8-46EF-BCDB-C1FE4074BFEB} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [5036544 2026-07-03] (Google LLC) [Brak podpisu cyfrowego] Task: {7E7D4F04-B926-47EB-B4C0-5ABD89E6CB0A} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [5036544 2026-07-03] (Google LLC) [Brak podpisu cyfrowego] Task: {D4E734E1-1C60-473B-B1F7-A8F31589CD15} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelperOnUnlock => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [5036544 2026-07-03] (Google LLC) [Brak podpisu cyfrowego] Task: {1E00A80D-F0FD-4DFB-B56B-CF60CC5BFEEC} - System32\Tasks\HPLJCustParticipation => C:\Program Files (x86)\HP\HPLJUT\HPLJUTSCH.exe [89840 2014-10-19] (Hewlett-Packard Company -> Hewlett Packard) Task: {90D1A821-0250-4B38-BF24-E7ECA06EC127} - System32\Tasks\Launch Adobe CCXProcess => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [1467392 2026-05-05] (Adobe Inc.) [Brak podpisu cyfrowego] Task: {6A6B8545-543C-4C06-8133-D7116D487263} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29173248 2026-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego] Task: {E0BC94A3-F7C3-4D3B-A52F-0A35FE32ECDA} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29173248 2026-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego] Task: {95EABBF6-BB1F-46B7-B463-A95DAFBA24C1} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [313704 2026-06-14] (Microsoft Corporation -> Microsoft Corporation) Task: {C0FE9E2B-589E-4020-88E5-2570A52E35B6} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [313704 2026-06-14] (Microsoft Corporation -> Microsoft Corporation) Task: {3CC13E78-F76A-46CC-8F15-D9FA6688B15D} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [188264 2026-06-14] (Microsoft Corporation -> Microsoft Corporation) Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (Brak pliku) Task: {FD953D65-B217-4C79-946C-40F34EA51665} - System32\Tasks\Microsoft\Windows\ReFsDedupSvc\Initialization => {DCFF735B-64F7-45F3-B39C-6C66BBE2120F} C:\WINDOWS\System32\ReFsDedupSvc.exe [2756608 2026-06-10] (Microsoft Corporation) [Brak podpisu cyfrowego] Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Brak pliku) Task: {63044891-C520-4446-BE31-2F8D4FD77DE3} - System32\Tasks\MicrosoftEdgeUpdateTaskMachineCore => C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [1481728 2026-07-13] (Microsoft Corporation) [Brak podpisu cyfrowego] <==== UWAGA Task: {9340C8A6-7C41-4BCF-8B26-128299AE16A2} - System32\Tasks\MicrosoftEdgeUpdateTaskMachineUA => C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [1481728 2026-07-13] (Microsoft Corporation) [Brak podpisu cyfrowego] <==== UWAGA Task: {ABC6A3FC-071F-4EBF-8005-68C2CB10738D} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-420650328-1192798164-3798175123-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1273344 2026-07-09] (Mozilla Corporation) [Brak podpisu cyfrowego] -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (dane wartości zawierają 6 znaków więcej). Task: {DAF7CD30-8F2C-4285-9C02-3BAB10B45112} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [1307648 2026-07-09] (Mozilla Foundation) [Brak podpisu cyfrowego] Task: {A23E4963-3746-4EEE-9B83-1A3B073C7C0B} - System32\Tasks\StartAllBack Update => C:\Program Files\StartAllBack\UpdateCheck.exe [1640960 2026-06-04] (www.startisback.com) [Brak podpisu cyfrowego] Task: {3D78FE16-CED5-4CCF-BE90-AD8636543BDC} - System32\Tasks\update-S-1-5-21-420650328-1192798164-3798175123-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2009088 2017-04-12] (TODO: ) [Brak podpisu cyfrowego] <==== UWAGA Task: {8910AAD0-7D81-477D-9796-F08B3394CE93} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2009088 2017-04-12] (TODO: ) [Brak podpisu cyfrowego] <==== UWAGA Task: {BE5BE6AB-325D-4BBB-9902-FCDBA40C78D2} - System32\Tasks\ZoomUpdateTaskUser-S-1-5-21-420650328-1192798164-3798175123-1001 => C:\Users\bait1\AppData\Roaming\Zoom\bin\Zoom.exe [2086912 2026-06-26] (Zoom Communications, Inc.) [Brak podpisu cyfrowego] (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\WINDOWS\Tasks\update-S-1-5-21-420650328-1192798164-3798175123-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.1 Tcpip\..\Interfaces\{27f888e3-f1f8-4b92-84b4-6630ed71c01b}: [NameServer] 156.154.70.25,156.154.71.25 Tcpip\..\Interfaces\{27f888e3-f1f8-4b92-84b4-6630ed71c01b}: [DhcpNameServer] 192.168.1.1 0.0.0.0 Tcpip\..\Interfaces\{7c8bdef4-5d87-437b-b5b8-9b70de1f0522}: [DhcpNameServer] 192.168.0.1 192.168.0.1 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}: [NameServer] 156.154.70.25,156.154.71.25 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}: [DhcpNameServer] 192.168.0.1 192.168.0.1 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\052411647E6F6B51701F5A726C696C7156E696F67716: [NameServer] 156.154.70.25,156.154.71.25 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\052411647E6F6B51701F5A726C696C7156E696F67716: [DhcpNameServer] 192.168.0.1 192.168.0.1 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\26169647: [NameServer] 156.154.70.25,156.154.71.25 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\26169647: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\94E6475627E656470253: [NameServer] 156.154.70.25,156.154.71.25 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\94E6475627E656470253: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\D454253455359535F583645383: [NameServer] 156.154.70.25,156.154.71.25 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\D454253455359535F583645383: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\D454253455359535F583645383F55374: [NameServer] 156.154.70.25,156.154.71.25 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\D454253455359535F583645383F55374: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox FF DefaultProfile: i3vlxujl.default-release-1 -> 308046B0AF4A39CB FF ProfilePath: C:\Users\bait1\AppData\Roaming\Mozilla\Firefox\Profiles\3f7gkq7q.default-release [nie znaleziono] <==== UWAGA FF ProfilePath: C:\Users\bait1\AppData\Roaming\Mozilla\Firefox\Profiles\x4xnyrid.default [nie znaleziono] <==== UWAGA FF ProfilePath: C:\Users\bait1\AppData\Roaming\Mozilla\Firefox\Profiles\i3vlxujl.default-release-1 [2026-07-13] FF Extension: (Użyj Google Translate) - C:\Users\bait1\AppData\Roaming\Mozilla\Firefox\Profiles\i3vlxujl.default-release-1\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2026-05-28] FF Extension: (New Tab) - C:\Users\bait1\AppData\Roaming\Mozilla\Firefox\Profiles\i3vlxujl.default-release-1\Extensions\newtab@mozilla.org.xpi [2026-07-11] FF Extension: (Video DownloadHelper) - C:\Users\bait1\AppData\Roaming\Mozilla\Firefox\Profiles\i3vlxujl.default-release-1\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2025-06-05] FF Extension: (Adblock Plus - darmowy adblocker) - C:\Users\bait1\AppData\Roaming\Mozilla\Firefox\Profiles\i3vlxujl.default-release-1\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2026-07-09] FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-08-01] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN) FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-06-24] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-08-15] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-08-01] (Microsoft Corporation -> Microsoft Corporation) Edge: ======= Edge Profile: C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default [2026-07-04] Edge Extension: (Tłumacz Google) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2026-07-04] Edge Extension: (LastPass: Free Password Manager) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bbcinlkgjjkejfdpemiealijmmooekmp [2026-04-09] Edge Extension: (Pobieranie filmów z Telegramu) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bbjnnajeogkkmljfdoengamaiomfhbch [2025-04-28] Edge Extension: (Stylus) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\clngdbkpkpeebahjckkjfobafhncgmne [2026-07-04] Edge Extension: (AliExpress Wyszukaj Według Obrazu) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cpodebcggidjigndghagpkepglfbhali [2025-04-28] Edge Extension: (alerabat.com | kupony i cashback) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\dacdinoicboceafielngnmjjplncljhj [2026-07-04] Edge Extension: (MetaMask) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ejbalbakoplchlghecdalmeeeajnimhm [2026-04-09] Edge Extension: (Video Downloader Professional) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2026-04-09] Edge Extension: (uBlock) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\epcnnfbjfcgphgdmggkamkmgojdagdnn [2026-04-09] Edge Extension: (GoFullPage - Full Page Screen Capture) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2026-04-09] Edge Extension: (Dokumenty Google offline) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-07-04] Edge Extension: (Screen Capture) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghihpjhpgdepnohngpgfcmcijmkggpaf [2025-04-28] Edge Extension: (Adblock Plus - darmowy adblocker) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmgoamodcdcjnbaobigkjelfplakmdhh [2026-07-04] Edge Extension: (Edge relevant text changes) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-08-01] Edge Extension: (Video Download Helper) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmkaglaafmhbcpleggkmaliipiilhldn [2026-07-04] Edge Extension: (Usługa zwrotu gotówki LetyShops) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\lphicbbhfmllgmomkkhjfkpbdlncafbn [2026-04-09] Edge Extension: (Zaakceptuj wszystkie pliki cookie) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ofpnikijgfhlmmjlpkfaifhhdonchhoi [2025-04-28] Edge Extension: (Slush — A Sui wallet) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\opcgpfmipidbgpenhmajoajpbobppdil [2026-07-04] Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default [2026-07-13] CHR Notifications: Default -> hxxps://android.com.pl; hxxps://app.wire.com; hxxps://app.zoom.us; hxxps://badoo.com; hxxps://bitcoinwisdom.io; hxxps://cointelegraph.com; hxxps://ebok.pgnig.pl; hxxps://gcx.aliexpress.com; hxxps://laneperfumy-pl-02.salesmanagopush.com; hxxps://pl.tradingview.com; hxxps://platform.trans.eu; hxxps://rankomat.pl; hxxps://system.trans.eu; hxxps://tinder.com; hxxps://truthsocial.com; hxxps://twitter.com; hxxps://web.whatsapp.com; hxxps://www.cargo.pl; hxxps://www.just-whisky.co.uk; hxxps://www.oferteo.pl; hxxps://www.webhostingtalk.pl; hxxps://www.wosp.org.pl; hxxps://www.wyjatkowyprezent.pl CHR HomePage: Default -> hxxp://google.pl/ CHR Extension: (Tłumacz Google) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2026-07-13] CHR Extension: (Pobieranie filmów z Telegramu) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjnnajeogkkmljfdoengamaiomfhbch [2025-01-16] CHR Extension: (Get cookies.txt LOCALLY) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\cclelndahbckbenkjhflpdbgdldlbecc [2026-06-04] CHR Extension: (Adblock Plus - darmowy adblocker) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2026-07-13] CHR Extension: (Stylus) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\clngdbkpkpeebahjckkjfobafhncgmne [2026-07-13] CHR Extension: (AliExpress Wyszukaj Według Obrazu) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpodebcggidjigndghagpkepglfbhali [2024-08-01] CHR Extension: (alerabat.com | kupony i cashback) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\dacdinoicboceafielngnmjjplncljhj [2026-07-13] CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-07-13] CHR Extension: (Video Downloader Professional) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2026-03-17] CHR Extension: (uBlock) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\epcnnfbjfcgphgdmggkamkmgojdagdnn [2025-09-30] CHR Extension: (GoFullPage - Full Page Screen Capture) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2026-01-29] CHR Extension: (Screen Capture) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghihpjhpgdepnohngpgfcmcijmkggpaf [2024-11-08] CHR Extension: (LastPass: Free Password Manager) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2026-07-13] CHR Extension: (Simple Translate) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibplnjkanclpjokhdolnendpplpjiace [2026-06-12] CHR Extension: (Konwertuj głos na tekst) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\jdcdafhjjjfnkoeilnjmnadadaoehgdc [2024-08-01] CHR Extension: (Video Download Helper) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2026-07-13] CHR Extension: (Usługa zwrotu gotówki LetyShops) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lphicbbhfmllgmomkkhjfkpbdlncafbn [2026-03-26] CHR Extension: (MetaMask) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2026-07-13] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-08-01] CHR Extension: (Zaakceptuj wszystkie pliki cookie) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofpnikijgfhlmmjlpkfaifhhdonchhoi [2025-02-27] CHR Extension: (Reverso – Translation, dictionary) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\onhiacboedfinnofagfgoaanfedhmfab [2026-07-13] CHR Extension: (Slush — A Sui wallet) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\opcgpfmipidbgpenhmajoajpbobppdil [2026-07-13] CHR Extension: (Księgi wieczyste pobieracz PRO) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\plfinckbiooahpfebldfapcoapomfmpp [2026-04-23] CHR Profile: C:\Users\bait1\AppData\Local\Google\Chrome\User Data\System Profile [2024-08-01] CHR HKU\S-1-5-21-420650328-1192798164-3798175123-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] ==================== Usługi (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [180216 2026-01-23] (Adobe Inc. -> Adobe Inc.) S2 AppVClient; C:\WINDOWS\system32\AppVClient.exe [1384448 2026-06-10] (Microsoft Corporation) [Brak podpisu cyfrowego] R2 CCDCHUService; C:\WINDOWS\System32\DriverStore\FileRepository\acpibridge1.inf_amd64_46c2643f8c307edd\DCHUService.exe [88944 2026-03-02] (Microsoft Windows Hardware Compatibility Publisher -> ) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14056848 2026-06-04] (Microsoft Corporation -> Microsoft Corporation) R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [11334144 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R2 CmdAgentProt; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [11334144 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [3220480 2026-07-13] (COMODO) [Brak podpisu cyfrowego] R2 COMSysApp; C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} [1359872 2026-06-10] (Microsoft Corporation) [Brak podpisu cyfrowego] R2 EaseUS Agent; C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe [45064 2023-11-29] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) R2 EaseUS UPDATE SERVICE; C:\Program Files (x86)\EaseUS\ENS\ensserver.exe [27784 2023-01-04] (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Brak podpisu cyfrowego] S2 edgeupdate; C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [1481728 2026-07-13] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 edgeupdatem; C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [1481728 2026-07-13] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 GoogleChromeElevationService; C:\Program Files\Google\Chrome\Application\150.0.7871.101\elevation_service.exe [4564992 2026-07-13] (Google LLC) [Brak podpisu cyfrowego] S2 GoogleUpdaterInternalService151.0.7910.2; C:\Program Files (x86)\Google\GoogleUpdater\151.0.7910.2\updater.exe [10170368 2026-07-06] (Google LLC) [Brak podpisu cyfrowego] S2 GoogleUpdaterService151.0.7910.2; C:\Program Files (x86)\Google\GoogleUpdater\151.0.7910.2\updater.exe [10170368 2026-07-06] (Google LLC) [Brak podpisu cyfrowego] S2 gupdate; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [10170368 2026-07-06] (Google LLC) [Brak podpisu cyfrowego] S3 gupdatem; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [10170368 2026-07-06] (Google LLC) [Brak podpisu cyfrowego] R2 HKClipSvc; C:\Program Files (x86)\ControlCenter\Driver\x64\HKClipSvc.exe [431696 2019-03-06] (Microsoft Windows Hardware Compatibility Publisher -> Insyde Software Corp.) R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [176640 2020-02-11] (HP Inc.) [Brak podpisu cyfrowego] R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [244232 2026-06-30] (HP Inc. -> HP Inc.) R2 HPSIService; C:\Windows\system32\HPSIsvc.exe [126880 2012-09-27] (Hewlett-Packard Company -> HP) S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpDefenderCoreService.exe [2067464 2026-02-11] (Microsoft Windows Publisher -> Microsoft Corporation) R2 MicrosoftEdgeElevationService; C:\Program Files (x86)\Microsoft\Edge\Application\150.0.4078.65\elevation_service.exe [4484608 2026-07-09] (Microsoft Corporation) [Brak podpisu cyfrowego] R2 midisrv; C:\WINDOWS\system32\midisrv.exe [1208320 2026-06-10] (Microsoft Corporation) [Brak podpisu cyfrowego] S2 MozillaMaintenance; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [1547776 2026-07-09] (Mozilla Foundation) [Brak podpisu cyfrowego] R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvcvi.inf_amd64_75c4fbdef32fe73d\Display.NvContainer\NVDisplay.Container.exe [1275008 2024-08-13] (NVIDIA Corporation -> NVIDIA Corporation) S3 OVRLibraryService; C:\Program Files\Oculus\Support\oculus-librarian\OVRLibraryService.exe [58624 2026-05-23] (Meta Platforms, Inc. -> Facebook Technologies, LLC) R2 OVRService; C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe [435960 2026-05-23] (Meta Platforms, Inc. -> Facebook Technologies, LLC) R2 perceptionsimulation; C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe [1531904 2026-06-10] (Microsoft Corporation) [Brak podpisu cyfrowego] R2 PerfHost; C:\WINDOWS\SysWow64\perfhost.exe [1307136 2025-06-11] (Microsoft Corporation) [Brak podpisu cyfrowego] <==== UWAGA S2 ProtonVPN Service; C:\Program Files\Proton\VPN\v4.4.1\ProtonVPNService.exe [1751552 2026-06-03] (ProtonVPN) [Brak podpisu cyfrowego] S2 ProtonVPN WireGuard; C:\Program Files\Proton\VPN\v4.4.1\ProtonVPN.WireGuardService.exe [1747456 2026-06-03] (ProtonVPN) [Brak podpisu cyfrowego] S2 refsdedupsvc; C:\WINDOWS\System32\ReFsDedupSvc.exe [2756608 2026-06-10] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [1441792 2026-06-10] (Microsoft Corporation) [Brak podpisu cyfrowego] S2 SensorDataService; C:\WINDOWS\System32\SensorDataService.exe [1789952 2026-06-10] (Microsoft Corporation) [Brak podpisu cyfrowego] S2 sppsvc; C:\WINDOWS\system32\sppsvc.exe [5353472 2026-06-10] (Microsoft Corporation) [Brak podpisu cyfrowego] R2 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [1838080 2026-02-11] () [Brak podpisu cyfrowego] S2 UevAgentService; C:\WINDOWS\system32\AgentService.exe [1470464 2026-06-10] (Microsoft Corporation) [Brak podpisu cyfrowego] R3 VssEaseusProvider; C:\WINDOWS\system32\dllhost.exe /Processid:{D9BF8E41-4F8F-46AC-B917-1F70DAFA632D} [1359872 2026-06-10] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\NisSrv.exe [4435096 2026-02-11] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe [290744 2026-02-11] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WMPNetworkSvc; C:\Program Files\Windows Media Player\wmpnetwk.exe [1499136 2026-05-13] (Microsoft Corporation) [Brak podpisu cyfrowego] S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe (Brak pliku) ===================== Sterowniki (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 AcpiBridge; C:\WINDOWS\System32\drivers\AcpiBridge.sys [64176 2025-10-07] (Insyde Software Corp. -> Insyde Software Corporation) R3 AirplaneModeHid; C:\WINDOWS\System32\drivers\AirplaneModeHid.sys [66240 2025-10-07] (Insyde Software Corp. -> Insyde Software Corporation) R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0405470.inf_amd64_2e71ce0e27c179e1\B404884\amdkmdag.sys [106382520 2024-08-01] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) R3 ANXUcmCxCD; C:\WINDOWS\System32\drivers\ANXUcmCxCD.sys [101592 2024-08-01] (Analogix Semiconductor, Inc. -> ) R2 BlueStacksDrv_nxt; C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [394176 2025-01-30] (Microsoft Windows Hardware Compatibility Publisher -> Bluestack System Inc.) S0 cmdboot; C:\WINDOWS\System32\DRIVERS\cmdboot.sys [17576 2019-10-22] (Microsoft Windows Early Launch Anti-malware Publisher -> COMODO) R1 cmderd; C:\WINDOWS\System32\DRIVERS\cmderd.sys [38880 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R1 cmdGuard; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [844000 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R1 cmdhlp; C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [47104 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R0 EUBAKUP; C:\WINDOWS\System32\drivers\eubakup.sys [75848 2023-01-04] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd) R0 EUBKMON; C:\WINDOWS\System32\drivers\EUBKMON.sys [55352 2023-11-08] (Microsoft Windows Hardware Compatibility Publisher -> ) R1 EUDSKACS; C:\Windows\system32\drivers\eudskacs.sys [24152 2023-01-04] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd) R1 EUFDDISK; C:\Windows\system32\drivers\EuFdDisk.sys [565456 2023-08-07] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd) R3 euimgprt; C:\WINDOWS\System32\DRIVERS\euimgprt.sys [29248 2023-08-29] (CHENGDU YIWO Tech Development Co., Ltd. -> ) R0 EUSSRDVR; C:\WINDOWS\System32\drivers\EUSSRDVR.sys [66768 2023-11-21] (Microsoft Windows Hardware Compatibility Publisher -> ) R3 FXVAD; C:\WINDOWS\system32\drivers\fxvad.sys [326656 2022-05-30] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) R3 HKKbdFltr; C:\WINDOWS\system32\DRIVERS\HKKbdFltr.sys [40320 2019-03-06] (WDKTestCert stone.cheng,131963286194994418 -> Insyde Software Corp.) R3 HKMouFltr; C:\WINDOWS\system32\DRIVERS\HKMouFltr.sys [38552 2019-03-06] (WDKTestCert stone.cheng,131963286194994418 -> Insyde Software Corp.) R1 inspect; C:\WINDOWS\system32\DRIVERS\inspect.sys [130256 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82352 2026-02-11] (Microsoft Windows -> Microsoft Corporation) S3 mvusbews; C:\WINDOWS\System32\Drivers\mvusbews.sys [20480 2012-09-26] (Microsoft Windows Hardware Compatibility Publisher -> Marvell Semiconductor, Inc.) R3 nvpcf; C:\WINDOWS\System32\drivers\nvpcf.sys [236696 2024-08-01] (NVIDIA Corporation -> NVIDIA Corporation) R3 oculusvad_oculusvad; C:\WINDOWS\System32\drivers\oculusvad.sys [73400 2025-12-09] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) R3 Oculus_ViGEmBus; C:\WINDOWS\System32\drivers\Oculus_ViGEmBus.sys [32856 2024-08-09] (Oculus VR, LLC -> Facebook Inc.) S3 ProtonVPNCallout; C:\Program Files\Proton\VPN\v4.4.1\Resources\ProtonVPN.CalloutDriver.sys [41416 2026-04-30] (Proton AG -> Proton AG) R3 rt25cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt25cx21x64.inf_amd64_f1c3cf27b6967f47\rt25cx21x64.sys [831320 2024-08-13] (Realtek Semiconductor Corp. -> Realtek) S3 ser2pl_1; C:\WINDOWS\system32\DRIVERS\ser2pl64_1.sys [378200 2024-06-26] (Microsoft Windows Hardware Compatibility Publisher -> Prolific Technology Inc.) R3 VBAudioVACMME; C:\WINDOWS\System32\DriverStore\FileRepository\vbmmecable64_win10.inf_amd64_dd707570a4bf06fd\vbaudio_cable64_win10.sys [140760 2024-10-08] (BUREL VINCENT Entrepreneur individuel -> Windows (R) Win 7 DDK provider) S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [21888 2026-02-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [635272 2026-02-11] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [102832 2026-02-11] (Microsoft Windows -> Microsoft Corporation) S3 WinRing0_1_2_0; C:\Program Files\BatteryCare\WinRing0x64.sys [14544 2014-03-22] (Noriyuki MIYAZAKI -> OpenLibSys.org) S3 wintun; C:\WINDOWS\System32\drivers\wintun.sys [29592 2024-08-01] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC) S3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2024-08-01] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC) S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2024-12-13] (Microsoft Windows -> Microsoft Corporation) S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_a6dc64e436f22951\WSDScan.sys [61440 2025-09-15] (Microsoft Windows -> Microsoft Corporation) ==================== SvcHost (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2026-07-14 00:07 - 2026-07-14 00:08 - 000046503 _____ C:\Users\bait1\Downloads\FRST.txt 2026-07-14 00:05 - 2026-07-14 00:08 - 000000000 ____D C:\FRST 2026-07-13 23:59 - 2026-07-13 23:59 - 003030016 _____ (Farbar) C:\Users\bait1\Downloads\FRST64.exe 2026-07-13 23:39 - 2026-07-13 23:39 - 000000000 ____D C:\suspect 2026-07-13 20:28 - 2026-07-13 20:28 - 000291639 _____ C:\Users\bait1\Downloads\WhatsApp Image 2026-07-13 at 20.28.20.jpeg 2026-07-13 16:40 - 2026-07-13 16:40 - 000783460 _____ C:\WINDOWS\system32\perfh015.dat 2026-07-13 16:40 - 2026-07-13 16:40 - 000160274 _____ C:\WINDOWS\system32\perfc015.dat 2026-07-13 16:29 - 2026-07-11 12:17 - 000039058 _____ C:\ProgramData\win.js 2026-07-13 16:28 - 2026-07-13 16:28 - 000012320 _____ C:\Users\bait1\AppData\Roaming\9ea64da6f2554cd7.bin 2026-07-13 16:28 - 2026-07-13 16:28 - 000000000 ____D C:\Users\Public\Settings 2026-07-13 16:28 - 2026-07-01 06:43 - 000438784 _____ C:\ProgramData\setup.exe 2026-07-13 16:28 - 2026-02-13 20:53 - 000000000 ___HD C:\ProgramData\diag fix 2026-07-09 17:49 - 2026-07-13 20:21 - 000000000 ____D C:\WINDOWS\CbsTemp 2026-07-09 09:29 - 2026-07-13 16:16 - 000000000 ____D C:\Program Files\Mozilla Firefox 2026-07-06 11:51 - 2026-07-07 15:39 - 000000333 _____ C:\Users\bait1\Desktop\Nowy Dokument tekstowy (2).txt 2026-06-30 18:26 - 2026-06-30 18:28 - 000001978 _____ C:\Users\bait1\Downloads\cookies.txt 2026-06-26 08:18 - 2026-06-26 08:18 - 000000000 ____D C:\Users\bait1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom 2026-06-19 20:00 - 2026-06-19 20:03 - 000000000 ____D C:\Users\bait1\Desktop\Anna Głowacz 2026-06-16 15:27 - 2026-06-16 15:27 - 010830341 _____ C:\Users\bait1\Downloads\POG_KAZMIERZ_25022026_op_uz.gml 2026-06-16 15:12 - 2026-06-16 15:13 - 005575054 _____ C:\Users\bait1\Downloads\Zalacznik1.gml 2026-06-15 21:36 - 2026-06-17 23:27 - 000001819 _____ C:\Users\bait1\Desktop\Działki radzyny.txt ==================== Jeden miesiąc (zmodyfikowane) ================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2026-07-14 00:10 - 2024-09-02 10:17 - 000431876 _____ C:\WINDOWS\system32\Drivers\fvstore.dat 2026-07-14 00:10 - 2024-08-01 17:27 - 000000000 ____D C:\Users\bait1\AppData\Roaming\uTorrent 2026-07-14 00:02 - 2024-08-22 16:59 - 001474832 _____ C:\WINDOWS\system32\Drivers\sfi.dat 2026-07-13 23:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness 2026-07-13 23:46 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2026-07-13 22:17 - 2024-08-01 17:08 - 000000000 ____D C:\Users\bait1\AppData\Roaming\vlc 2026-07-13 21:36 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp 2026-07-13 21:29 - 2024-08-01 17:26 - 000000000 ____D C:\Users\bait1\AppData\Roaming\Telegram Desktop 2026-07-13 20:52 - 2024-08-01 17:11 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 2026-07-13 16:44 - 2024-08-01 17:11 - 000000000 ____D C:\Users\bait1\AppData\Roaming\AIMP 2026-07-13 16:40 - 2024-12-13 17:06 - 001769838 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2026-07-13 16:40 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF 2026-07-13 16:36 - 2024-08-01 16:46 - 000000000 ____D C:\Users\bait1\AppData\Local\D3DSCache 2026-07-13 16:33 - 2024-12-13 17:01 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2026-07-13 16:33 - 2024-12-13 16:59 - 000009052 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2 2026-07-13 16:33 - 2024-11-19 09:59 - 000000000 ____D C:\Users\bait1\AppData\Roaming\Oculus Remote Desktop 2026-07-13 16:33 - 2024-08-09 10:25 - 000000000 ____D C:\Users\bait1\AppData\Local\Oculus 2026-07-13 16:33 - 2024-08-01 16:16 - 000000000 ____D C:\ProgramData\NVIDIA 2026-07-13 16:33 - 2024-08-01 16:03 - 000012288 ___SH C:\DumpStack.log.tmp 2026-07-13 16:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState 2026-07-13 16:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Registration 2026-07-13 16:32 - 2024-11-18 11:15 - 000000000 ____D C:\Users\bait1\AppData\Roaming\qBittorrent 2026-07-13 16:32 - 2024-04-01 09:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2026-07-13 16:28 - 2024-08-01 17:12 - 000000000 ____D C:\ProgramData\Adobe 2026-07-13 16:27 - 2024-08-02 10:29 - 000000000 ____D C:\Users\bait1\AppData\Local\CrashDumps 2026-07-13 16:16 - 2024-08-01 17:11 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2026-07-13 13:46 - 2024-08-01 17:29 - 000000000 ____D C:\Users\bait1\Desktop\Dabest 2026-07-12 21:23 - 2024-08-01 16:54 - 000002288 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2026-07-12 21:23 - 2024-08-01 16:54 - 000002253 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2026-07-12 17:19 - 2024-12-13 16:56 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2026-07-12 17:04 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps 2026-07-11 12:55 - 2024-08-26 09:13 - 000000000 ____D C:\Users\bait1\Desktop\Dom 2026-07-11 07:57 - 2024-08-01 16:03 - 000002408 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2026-07-10 15:15 - 2024-08-01 19:16 - 000000000 ____D C:\Users\bait1\AppData\Roaming\Microsoft\Excel 2026-07-10 15:15 - 2024-08-01 17:28 - 000028434 _____ C:\Users\bait1\Desktop\Czynsz.xlsx 2026-07-10 14:34 - 2024-08-01 19:17 - 000000000 ____D C:\Users\bait1\AppData\Roaming\Microsoft\Word 2026-07-09 16:39 - 2024-08-01 17:11 - 000001089 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2026-07-08 08:57 - 2024-08-01 16:46 - 000000000 ____D C:\Users\bait1\AppData\Local\Packages 2026-07-08 08:41 - 2024-08-01 17:29 - 000000000 ____D C:\Users\bait1\Desktop\OTHER 2026-07-07 15:39 - 2026-06-04 22:48 - 000001947 _____ C:\Users\bait1\Desktop\champions.txt 2026-07-05 13:09 - 2024-08-01 17:10 - 000002156 _____ C:\Users\bait1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\f.lux.lnk 2026-07-02 12:50 - 2026-06-01 12:50 - 000000000 ____D C:\Users\bait1\Desktop\Trading Champions 2026-07-02 11:52 - 2024-08-09 10:41 - 000000000 ____D C:\Program Files\Oculus 2026-06-30 11:58 - 2026-01-20 17:28 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP 2026-06-30 11:58 - 2025-12-17 13:32 - 000000000 ____D C:\Program Files\HPPrintScanDoctor 2026-06-28 22:17 - 2024-08-20 13:04 - 000000000 ____D C:\Users\bait1\AppData\Roaming\FxSound 2026-06-27 21:24 - 2025-10-23 08:20 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH 2026-06-27 21:21 - 2026-02-28 09:11 - 000000000 ____D C:\Program Files\Temp 2026-06-27 21:20 - 2024-12-13 16:57 - 000000000 ____D C:\Users\bait1 2026-06-27 13:04 - 2025-11-13 15:52 - 000000000 ____D C:\Users\bait1\AppData\Roaming\Zoom 2026-06-26 20:30 - 2024-08-01 17:10 - 000002146 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk 2026-06-26 08:18 - 2025-11-13 15:52 - 000004248 _____ C:\WINDOWS\system32\Tasks\ZoomUpdateTaskUser-S-1-5-21-420650328-1192798164-3798175123-1001 2026-06-21 07:51 - 2024-12-13 17:01 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2026-06-21 07:51 - 2024-12-13 17:01 - 000003440 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2026-06-20 09:44 - 2024-08-02 01:09 - 000000000 ____D C:\Users\bait1\AppData\Local\BitTorrentHelper 2026-06-18 15:36 - 2026-03-17 09:31 - 000000000 ____D C:\Users\bait1\Downloads\Telegram Desktop 2026-06-18 12:23 - 2026-06-04 21:36 - 000000000 ____D C:\yt-dlp 2026-06-15 01:03 - 2024-08-02 00:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Proton 2026-06-14 18:00 - 2024-08-01 19:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Narzędzia pakietu Microsoft Office 2026-06-14 18:00 - 2024-08-01 19:07 - 000000000 ____D C:\Program Files\Microsoft Office ==================== Pliki w katalogu głównym wybranych folderów ======== 2024-08-22 16:56 - 2021-11-10 10:18 - 000451976 _____ (COMODO) C:\ProgramData\cmdres.dll 2026-07-13 16:28 - 2026-07-01 06:43 - 000438784 _____ () C:\ProgramData\setup.exe 2026-07-13 16:29 - 2026-07-11 12:17 - 000039058 _____ () C:\ProgramData\win.js 2024-08-06 23:13 - 2025-04-26 16:39 - 000000018 _____ () C:\Users\bait1\AppData\Roaming\.cache17951620050788523514.dat 2026-07-13 16:28 - 2026-07-13 16:28 - 000012320 _____ () C:\Users\bait1\AppData\Roaming\9ea64da6f2554cd7.bin 2024-08-08 16:46 - 2024-08-08 16:46 - 000000017 _____ () C:\Users\bait1\AppData\Local\resmon.resmoncfg 2024-08-01 19:05 - 2024-08-01 19:05 - 000000003 _____ () C:\Users\bait1\AppData\Local\updater.log 2024-08-01 19:05 - 2024-08-01 19:05 - 000000424 _____ () C:\Users\bait1\AppData\Local\UserProducts.xml ==================== SigCheck ============================ (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\system32\dllhost.exe [2026-06-10 08:42] - [2026-06-10 08:42] - 001359872 _____ (Microsoft Corporation) F85C8B32B92BA4B40651EF88E8112567 ==================== Koniec FRST.txt ========================