Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 12-07-2026 01
Uruchomiony przez bait1 (15-07-2026 02:00:40)
Uruchomiony z C:\Users\bait1\Downloads
Microsoft Windows 11 Pro Wersja 24H2 26100.4652 (X64) (2024-12-13 15:01:46)
Tryb startu: Normal
==========================================================


==================== Konta użytkowników: =============================

(Załączenie wejścia w fixlist spowoduje jego usunięcie.)

Administrator (S-1-5-21-420650328-1192798164-3798175123-500 - Administrators - Disabled)
bait1 (S-1-5-21-420650328-1192798164-3798175123-1001 - Administrators - Enabled) => C:\Users\bait1
Gość (S-1-5-21-420650328-1192798164-3798175123-501 - Limited - Disabled)
Konto domyślne (S-1-5-21-420650328-1192798164-3798175123-503 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-420650328-1192798164-3798175123-504 - Limited - Disabled)

==================== Centrum zabezpieczeń ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: COMODO Antivirus (Enabled - Up to date) {05BC7AB5-FF0E-71EC-1054-15DA19B62DC7}
FW: COMODO Firewall (Enabled) {3D87FB90-B561-70B4-3B0B-BCEFE7656ABC}

==================== Zainstalowane programy ======================

(W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)

µTorrent (HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\uTorrent) (Version: 3.6.0.47196 - BitTorrent Limited)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1033-1033-7760-BC15014EA700}) (Version: 25.001.20577 - Adobe)
Adobe Photoshop 2025 (HKLM-x32\...\PHSP_26_2) (Version: 26.2.0.140 - Adobe Inc.)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601149}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Age of Wonders 4 (HKLM-x32\...\1915432764_is1) (Version: 99524 - GOG.com)
Age of Wonders 4: Archmage Attire (HKLM-x32\...\1677754007_is1) (Version: 99524 - GOG.com)
Age of Wonders 4: Dragon Dawn (HKLM-x32\...\1467390423_is1) (Version: 99524 - GOG.com)
Age of Wonders 4: Eldritch Realms (HKLM-x32\...\1642017911_is1) (Version: 99524 - GOG.com)
Age of Wonders 4: Empires & Ashes (HKLM-x32\...\1935859883_is1) (Version: 99524 - GOG.com)
Age of Wonders 4: Pre-Order Content Pack (HKLM-x32\...\2127759575_is1) (Version: 99524 - GOG.com)
Age of Wonders 4: Primal Fury (HKLM-x32\...\1578247919_is1) (Version: 99524 - GOG.com)
Age of Wonders 4: Project HoG (HKLM-x32\...\1857270805_is1) (Version: 99524 - GOG.com)
Age of Wonders 4: Project WoW (HKLM-x32\...\1611759997_is1) (Version: 99524 - GOG.com)
Age of Wonders 4: Sign-Up Content (HKLM-x32\...\2127737278_is1) (Version: 99524 - GOG.com)
AIMP (HKLM-x32\...\AIMP) (Version: 5.40.2675 - Artem Izmaylov)
Audacity 3.7.4 (HKLM\...\Audacity_is1) (Version: 3.7.4 - Audacity Team)
BatteryCare 0.9.36.1 (HKLM-x32\...\{C6A6036D-FBD0-4324-BEAA-C0845257160C}_is1) (Version: 0.9.36.1 - Filipe Lourenço)
BlueStacks (HKLM\...\BlueStacks_nxt) (Version: 5.21.660.1042 - now.gg, Inc.)
BlueStacks Services (HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\BlueStacksServices) (Version: 3.0.9 - now.gg, Inc.)
CapCut (HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\CapCut) (Version: 6.6.1.2640 - Bytedance Pte. Ltd.)
COMODO Internet Security Premium (HKLM\...\{529CC629-B436-4886-B322-4BE75B97783D}) (Version: 12.2.2.8012 - COMODO Security Solutions Inc.) Hidden
COMODO Internet Security Premium (HKLM\...\COMODO Internet Security) (Version: 12.2.2.8012 - COMODO Security Solutions Inc.)
CrystalDiskInfo 9.3.2 (HKLM\...\CrystalDiskInfo_is1) (Version: 9.3.2 - Crystal Dew World)
DownloadHelper CoApp (HKLM-x32\...\DownloadHelper CoApp) (Version: 2.0.19.0 - ACLAP)
EaseUS Todo Backup Home 2024 (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 2024.1 - EaseUS)
f.lux (HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\Flux) (Version: 4.141 - f.lux Software LLC)
FxSound (HKLM\...\{44F94A7A-3F02-44F3-8B53-69E22FB43E36}) (Version: 1.1.16.0 - FxSound LLC) Hidden
FxSound (HKLM\...\FxSound 1.1.16.0) (Version: 1.1.16.0 - FxSound LLC)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 150.0.7871.115 - Google LLC)
Heroes of Might and Magic 3 Complete (HKLM-x32\...\1207658787_is1) (Version: 4.0 - GOG.com)
Heroes of Might and Magic® III: Horn of the Abyss (HKLM-x32\...\HotA + HD_is1) (Version: 1.7.1 - HotA Crew)
HoMM III Compatibility Database (HKLM\...\{62a24b39-0106-4990-90ea-3a09e9dda7a6}.sdb) (Version:  - )
Horn of the Abyss - Spolszczenie (wersja 1.7.1-240501pl) (HKLM-x32\...\{855509F4-F16E-424E-821B-F03B7C98757B}_is1) (Version: 1.7.1-240501pl - Jaskinia Behemota)
HP LaserJet Pro MFP M125-M126 (HKLM-x32\...\{c65448bc-e467-4ec7-b4a5-246697f52957}) (Version: 15.0.15310.1316 - Hewlett-Packard)
HP LaserJet Pro MFP M125-M126 HP Device Toolbox (HKLM-x32\...\{82E7776B-E837-4584-BD0D-E2F54A0F6960}) (Version: 32.0.28.0 - Hewlett-Packard Co.) Hidden
HP LaserJet Professional P1100-P1560-P1600 Series (HKLM\...\HP LaserJet Professional P1100-P1560-P1600 Series) (Version:  - )
HP LJ M125126 Scan HP Scan (HKLM-x32\...\{F84EA1B1-5184-4145-B6E6-5E5D33D85FE4}) (Version: 1.0.302.0 - Hewlett-Packard Co.) Hidden
HP Product FWUpdater (HKLM-x32\...\{5A11EF83-9E0A-4B5C-8D2F-1FF9551A5E8C}) (Version: 4.0.0.8895 - Hewlett-Packard Company) Hidden
HP Unified IO (HKLM\...\{5C76ED0D-0F6F-4985-8B34-F9AE7834848F}) (Version: 2.0.0.434 - HP) Hidden
HP Unified IO (HKLM-x32\...\{F1390872-2500-4408-A46C-CD16C960C661}) (Version: 2.0.0.434 - HP) Hidden
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPLJProMFPM125M126 (HKLM-x32\...\{B2894225-82C7-4006-B243-6272589993B2}) (Version: 1.00.0000 - Hewlett-Packard)
HPLJUTCore (HKLM-x32\...\{B445502B-2F83-4873-90F1-06059F71A46A}) (Version: 014.000.0001 - HP) Hidden
HPLJUTM125_126 (HKLM-x32\...\{9E7CB788-5C1F-4A18-95AA-8F4B1618A80C}) (Version: 008.000.0001 - HP) Hidden
hppM125LaserJetService (HKLM-x32\...\{18D5B189-DBDD-4E57-A84B-58C7700E9BB0}) (Version: 001.032.00682 - Hewlett-Packard) Hidden
hpStatusAlerts (HKLM-x32\...\{6bb3c4d6-a57b-4ab7-a96a-be45a4959fe1}) (Version: 170.040.00260 - HP Development Company, L.P.) Hidden
hpStatusAlertsM125-M126 (HKLM-x32\...\{581A9CCB-1AD7-4BB4-A698-590305F773FB}) (Version: 080.046.00113 - Hewlett-Packard) Hidden
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version:  - )
Lightshot-5.5.0.7 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.5.0.7 - Skillbrains)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 150.0.4078.65 - Microsoft Corporation)
Microsoft Office LTSC Professional Plus 2024 - pl-pl (HKLM\...\ProPlus2024Volume - pl-pl) (Version: 16.0.17932.20428 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{B9274744-8BAE-4874-8E59-2610919CD419}) (Version: 11.4.7001.0 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.32.31326 (HKLM-x32\...\{2d507699-404c-4c8b-a54a-38e352f32cdd}) (Version: 14.32.31326.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.32.31326 (HKLM-x32\...\{817e21c1-6b3a-4bc1-8c49-67e4e1887b3a}) (Version: 14.32.31326.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.32.31326 (HKLM\...\{38624EB5-356D-4B08-8357-C33D89A5C0C5}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.32.31326 (HKLM\...\{C96241EA-9900-4FE8-85B3-1E238D509DF6}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.32.31326 (HKLM-x32\...\{A250E750-DB3F-40C1-8460-8EF77C7582DA}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.32.31326 (HKLM-x32\...\{46E11E7F-01E1-44D0-BB86-C67342D253DD}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 pl) (HKLM\...\Mozilla Firefox 141.0 (x64 pl)) (Version: 141.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 127.0 - Mozilla)
NetSpot (wersja 4.0.1.615) (HKLM\...\NetSpot_is1) (Version: 4.0.1.615 - )
NetTraffic (HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\NetTraffic) (Version: 1.71.0.0 - VENEA.NET)
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 8.6.9 - Notepad++ Team)
NVIDIA Sterownik graficzny 511.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 511.81 - NVIDIA Corporation)
Oculus (HKLM\...\Oculus) (Version: 1.97.0 - Facebook Technologies, LLC)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.17932.20130 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.17932.20428 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0415-1000-0000000FF1CE}) (Version: 16.0.17932.20130 - Microsoft Corporation) Hidden
PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )
PL23XX USB-to-Serial (HKLM-x32\...\{BC40B9A3-568C-4E39-8EF5-B3883D7152AC}) (Version: 2.0.3 - Prolific Technology INC)
Proton VPN (HKLM\...\Proton VPN_is1) (Version: 3.3.2 - Proton AG)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8004 - Realtek Semiconductor Corp.)
StartAllBack (HKLM\...\StartAllBack) (Version: 3.9.9 - startisback.com)
SuperSeedTorrent 4.3.8 (HKLM-x32\...\SuperSeedTorrent) (Version: 4.3.8 - The SuperSeedTorrent project)
Środowisko uruchomieniowe Microsoft Edge WebView2 (HKLM-x32\...\Microsoft EdgeWebView) (Version: 150.0.4078.65 - Microsoft Corporation) Hidden
TaxMachine 3.40.1.5004 (HKLM-x32\...\TaxMachine_is1) (Version: 3.40.1.5004 - NEONET CONSULTING S.C.)
TechPowerUp GPU-Z (HKLM-x32\...\{8B0F211E-5846-4FB2-B0B9-4EB31546FDF9}}_is1) (Version: 2.59.0 - TechPowerUp)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.03 - Ghisler Software GmbH)
UXP WebView Support (HKLM-x32\...\UXPW_1_2_0) (Version: 1.2.0 - Adobe Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN)
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
WinMerge 2.16.44.0 x64 (HKLM\...\WinMerge_is1) (Version: 2.16.44.0 - Thingamahoochie Software)
WinRAR 6.02 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 6.02.0 - win.rar GmbH)

Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-11] ()
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2025-07-17] ()
Control Center 3.0 -> C:\Program Files\WindowsApps\CLEVOCO.ControlCenter3.0_6.33.3.0_x64__6h6z29zh29qx0 [2024-10-31] (CLEVO CO.)
Fan Speed Setting -> C:\Program Files\WindowsApps\CLEVOCO.504814C03D814_3.47.0.0_x64__6h6z29zh29qx0 [2024-08-13] (CLEVO CO.)
Flexikey -> C:\Program Files\WindowsApps\CLEVOCO.Flexikey_6.17.4.0_x64__6h6z29zh29qx0 [2024-12-03] (CLEVO CO.)
Fn hot keys and OSD -> C:\Program Files\WindowsApps\CLEVOCO.FnhotkeysandOSD_7.35.1.0_x64__6h6z29zh29qx0 [2025-06-19] (CLEVO CO.)
Led Keyboard Setting -> C:\Program Files\WindowsApps\CLEVOCO.LedKeyboardSetting_3.32.0.0_x64__6h6z29zh29qx0 [2024-08-13] (CLEVO CO.)
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2024-08-13] (Microsoft Corp.)
Notepad++ -> C:\Program Files\Notepad++\contextMenu [2024-08-01] (Notepad++)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.968.0_x64__56jybvy8sckqj [2025-06-11] (NVIDIA Corp.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.1.137.0_x64__dt26b99r8h8gj [2024-12-13] (Realtek Semiconductor Corp)
WiFi Analyzer -> C:\Program Files\WindowsApps\19965MATTHAFNER.WIFIANALYZER_2.8.0.0_x64__gs5k5vmxr2ste [2024-10-31] (Matt Hafner)
WinMerge -> C:\Program Files\WinMerge [2025-01-17] (winmerge.org)

==================== Niestandardowe rejestracje CLSID (filtrowane): ==============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

CustomCLSID: HKU\S-1-5-21-420650328-1192798164-3798175123-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-420650328-1192798164-3798175123-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-420650328-1192798164-3798175123-1001_Classes\CLSID\{4386fc53-f772-b2d3-15b0-80753dfa315e}\localserver32 -> C:\Users\bait1\Desktop\StabilityMatrix.exe (StabilityMatrix.Avalonia) [Brak podpisu cyfrowego]
CustomCLSID: HKU\S-1-5-21-420650328-1192798164-3798175123-1001_Classes\CLSID\{50726f74-6f6e-2e56-504e-000000000000}\localserver32 -> C:\Program Files\Proton\VPN\v3.3.2\ProtonVPN.exe (Proton AG -> )
ShellIconOverlayIdentifiers: [   AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-02-04] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-02-04] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-02-04] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Brak pliku
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-02-04] (Adobe Inc. -> )
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2025-07-15] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files\AIMP\System\aimp_menu64.dll [2025-05-13] (IP Izmaylov Artem Andreevich -> AIMP DevTeam)
ContextMenuHandlers1: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
ContextMenuHandlers1: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2023-11-29] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2021-06-15] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2021-06-15] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
ContextMenuHandlers2: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2023-11-29] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers4: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files\AIMP\System\aimp_menu64.dll [2025-05-13] (IP Izmaylov Artem Andreevich -> AIMP DevTeam)
ContextMenuHandlers4: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2023-11-29] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvcvi.inf_amd64_75c4fbdef32fe73d\nvshext.dll [2024-08-13] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-02-04] (Adobe Inc. -> )
ContextMenuHandlers6: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2021-06-15] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2021-06-15] (win.rar GmbH -> Alexander Roshal)
FolderExtensions: [] -> {117E3954-5034-453A-A18B-7B79493646E6} => C:\Program Files\StartAllBack\StartAllBackLoaderX64.dll [2025-06-11] (IP Zinukhov Stanislav Igorevich -> )

==================== Codecs (filtrowane) ====================

==================== Skróty & WMI ========================

==================== Załadowane moduły (filtrowane) =============

2024-08-05 15:59 - 2023-01-05 00:00 - 000194048 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\ENS\libssh2.dll
2024-08-05 15:59 - 2023-01-05 00:00 - 000116736 _____ () [Brak podpisu cyfrowego] C:\Program Files\EaseUS\Todo Backup\bin\aws-c-common.dll
2024-08-05 15:59 - 2023-01-05 00:00 - 000022016 _____ () [Brak podpisu cyfrowego] C:\Program Files\EaseUS\Todo Backup\bin\aws-c-event-stream.dll
2024-08-05 15:59 - 2023-01-05 00:00 - 000043008 _____ () [Brak podpisu cyfrowego] C:\Program Files\EaseUS\Todo Backup\bin\aws-checksums.dll
2024-08-05 15:59 - 2023-01-05 00:00 - 000974848 _____ () [Brak podpisu cyfrowego] C:\Program Files\EaseUS\Todo Backup\bin\aws-cpp-sdk-core.dll
2024-08-05 15:59 - 2023-01-05 00:00 - 003429376 _____ () [Brak podpisu cyfrowego] C:\Program Files\EaseUS\Todo Backup\bin\aws-cpp-sdk-s3.dll
2024-08-05 15:59 - 2023-01-05 00:00 - 000180224 _____ () [Brak podpisu cyfrowego] C:\Program Files\EaseUS\Todo Backup\bin\aws-cpp-sdk-transfer.dll
2024-08-05 15:59 - 2023-01-05 00:00 - 001291264 _____ () [Brak podpisu cyfrowego] C:\Program Files\EaseUS\Todo Backup\bin\libxml2.dll
2024-08-05 15:59 - 2023-01-05 00:00 - 000055808 _____ () [Brak podpisu cyfrowego] C:\Program Files\EaseUS\Todo Backup\bin\zlib1.dll
2024-08-05 15:59 - 2023-01-05 00:00 - 000509064 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\ENS\AliyunWrap.DLL
2024-08-05 15:59 - 2023-01-05 00:00 - 000141448 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\ENS\EnsHelper.dll
2024-08-05 15:59 - 2023-01-05 00:00 - 000098440 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\ENS\register.dll
2024-08-05 15:59 - 2023-01-05 00:00 - 000461448 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\ENS\wpnr.dll
2024-08-05 15:59 - 2023-01-05 00:00 - 000892928 _____ (Free Software Foundation) [Brak podpisu cyfrowego] C:\Program Files\EaseUS\Todo Backup\bin\iconv.dll
2009-09-16 18:44 - 2009-09-16 18:44 - 000153088 _____ (Hewlett Packard) [Brak podpisu cyfrowego] C:\Windows\System32\hptcpmib.dll
2009-09-16 18:45 - 2009-09-16 18:45 - 000331264 _____ (Hewlett Packard) [Brak podpisu cyfrowego] C:\Windows\System32\HpTcpMon.dll
2009-09-16 11:44 - 2009-09-16 11:44 - 000132096 _____ (Hewlett Packard) [Brak podpisu cyfrowego] C:\Windows\System32\hpzjrd01.dll
2020-02-11 17:19 - 2020-02-11 17:19 - 000041472 _____ (HP Inc.) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files (x86)\HP\HPLaserJetService\HPHTTPProxy.dll
2020-02-11 17:19 - 2020-02-11 17:19 - 000034816 _____ (HP Inc.) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files (x86)\HP\HPLaserJetService\HPServiceCommunicator.dll
2020-02-11 17:19 - 2020-02-11 17:19 - 000077824 _____ (HP Inc.) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files (x86)\HP\HPLaserJetService\HPTools.dll
2020-02-11 17:19 - 2020-02-11 17:19 - 001223168 _____ (HP Inc.) [Brak podpisu cyfrowego] [Plik w użyciu] C:\Program Files (x86)\HP\HPLaserJetService\LEDMXMLObjects.dll
2024-08-05 11:10 - 2025-06-11 14:52 - 001053888 _____ (IP Zinukhov Stanislav Igorevich -> www.startallback.com) [Brak podpisu cyfrowego] C:\Program Files\StartAllBack\StartAllBackX64.dll
2009-06-25 09:27 - 2009-06-25 09:27 - 000541184 _____ (Marvell Semiconductor, Inc.) [Brak podpisu cyfrowego] C:\Windows\System32\mvtcpmon.dll
2009-09-16 18:45 - 2009-09-16 18:45 - 000317440 _____ (Microsoft Corporation) [Brak podpisu cyfrowego] C:\Windows\System32\HPTcpMUI.dll
2009-06-25 09:25 - 2009-06-25 09:25 - 000144896 _____ (OpenSLP) [Brak podpisu cyfrowego] C:\Windows\System32\slp64.dll
2024-08-05 15:59 - 2023-01-05 00:00 - 000428544 _____ (The curl library, hxxps://curl.se/) [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\ENS\libcurl.dll
2024-08-05 15:59 - 2023-01-05 00:00 - 001359872 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files\EaseUS\Todo Backup\bin\LIBEAY32.dll
2024-08-05 15:59 - 2023-01-05 00:00 - 000365056 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files\EaseUS\Todo Backup\bin\SSLEAY32.dll
2024-08-05 15:59 - 2023-01-05 00:00 - 002523136 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\ENS\libcrypto-1_1.dll
2024-08-05 15:59 - 2023-01-05 00:00 - 000531456 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\ENS\libssl-1_1.dll

==================== Alternate Data Streams (filtrowane) ========

==================== Tryb awaryjny (filtrowane) ==================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot => "AlternateShell"=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\AutorunsDisabled => "AlternateShell"="cmd.exe"

==================== Powiązania plików (filtrowane) =================

==================== Internet Explorer (filtrowane) =============

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2024-08-08] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-08-15] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-15] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-15] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-15] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-15] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts - zawartość: =========================

(Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)

2025-02-04 12:22 - 2025-02-04 12:22 - 000043399 _____ C:\Windows\system32\drivers\etc\hosts
127.0.0.1  activation.easeus.com
0.0.0.0 ic.adobe.io
0.0.0.0 cc-api-data.adobe.io
0.0.0.0 0mo5a70cqa.adobe.io
0.0.0.0 1b9khekel6.adobe.io
0.0.0.0 1hzopx6nz7.adobe.io
0.0.0.0 22gda3bxkb.adobe.io
0.0.0.0 23ynjitwt5.adobe.io
0.0.0.0 2ftem87osk.adobe.io
0.0.0.0 3ca52znvmj.adobe.io
0.0.0.0 3d3wqt96ht.adobe.io
0.0.0.0 4vzokhpsbs.adobe.io
0.0.0.0 5zgzzv92gn.adobe.io
0.0.0.0 69tu0xswvq.adobe.io
0.0.0.0 7g2gzgk9g1.adobe.io
0.0.0.0 7m31guub0q.adobe.io
0.0.0.0 7sj9n87sls.adobe.io
0.0.0.0 8ncdzpmmrg.adobe.io
0.0.0.0 9ngulmtgqi.adobe.io
0.0.0.0 aoorovjtha.adobe.io
0.0.0.0 b5kbg2ggog.adobe.io
0.0.0.0 cd536oo20y.adobe.io
0.0.0.0 dxyeyf6ecy.adobe.io
0.0.0.0 dyzt55url8.adobe.io
0.0.0.0 fgh5v09kcn.adobe.io
0.0.0.0 fqaq3pq1o9.adobe.io
0.0.0.0 guzg78logz.adobe.io
0.0.0.0 gw8gfjbs05.adobe.io
0.0.0.0 i7pq6fgbsl.adobe.io
0.0.0.0 ij0gdyrfka.adobe.io

Wykryto więcej niż wyliczono: 1229 linii.


==================== Network ===========================

(Obecnie brak automatycznej naprawy dla tej sekcji.)

DNS Servers: 156.154.70.25 - 156.154.71.25
Zapora systemu Windows [funkcja włączona]

Network Binding:
=============
Wi-Fi: Intel(R) Wi-Fi 6 AX200 160MHz -> Netwtw10.sys
Ethernet: Realtek Gaming 2.5GbE Family Controller -> rt25cx21x64.sys

inspect: COMODO Internet Security Firewall Driver

==================== Inne obszary ===========================

(Obecnie brak automatycznej naprawy dla tej sekcji.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> %SystemRoot%\system32\WBEM;C:\Program Files\Oculus\Support\oculus-runtime;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Users\bait1\AppData\Local\Microsoft\WindowsApps;;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;
HKU\S-1-5-21-420650328-1192798164-3798175123-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\bait1\Documents\backiee-109717-landscape.jpg
HKU\S-1-5-80-3238277391-1891473654-1195688043-4149050645-2494734967\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==

(Załączenie wejścia w fixlist spowoduje jego usunięcie.)

HKLM\...\StartupApproved\StartupFolder: => "FxSound.lnk"
HKLM\...\StartupApproved\Run: => "RtkAudUService"
HKLM\...\StartupApproved\Run32: => "TrayProcess"
HKLM\...\StartupApproved\Run32: => "Adobe CCXProcess"
HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_A46EBA3BAB6D8CF3410B91796761EB2B"
HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\StartupApproved\Run: => "ProtonVPN"
HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\StartupApproved\Run: => "ut"

==================== Reguły Zapory systemu Windows (filtrowane) ================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

FirewallRules: [{5126135F-DFC0-49A2-8046-17A721470795}] => (Allow) C:\Program Files\SuperSeedTorrent\SuperSeedTorrent.exe () [Brak podpisu cyfrowego]
FirewallRules: [{5B332486-989A-44E4-BA5D-887D7C25D91D}] => (Allow) C:\Program Files\SuperSeedTorrent\SuperSeedTorrent.exe () [Brak podpisu cyfrowego]
FirewallRules: [{F9FB6443-ACC4-40E5-9D3D-BD3A99987BE6}] => (Allow) C:\Users\bait1\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [{A314B956-0643-4DF6-968B-3B957B44B0F7}] => (Allow) C:\Users\bait1\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [{1BE25D24-59A8-41D3-AA3D-BAC5C4517CDE}] => (Allow) C:\Users\bait1\AppData\Local\Temp\7zS06AD\Installer\hpbcsiInstaller.exe => Brak pliku
FirewallRules: [{77511CD6-8AFC-4ABA-B027-123EAB804F7E}] => (Allow) C:\Users\bait1\AppData\Local\Temp\7zS06AD\Installer\hpbcsiInstaller.exe => Brak pliku
FirewallRules: [{7D18A4A5-3069-4880-A07A-5FEE3A6472B7}] => (Allow) C:\Program Files\Oculus\Support\oculus-client\OculusClient.exe () [symlink -> C:\Program Files\Oculus\Support\oculus-client\Client.exe]
FirewallRules: [{9900953E-FEDB-45B4-A5F5-41B7D0CC5364}] => (Allow) C:\Program Files\Oculus\Support\oculus-client\OculusClient.exe () [symlink -> C:\Program Files\Oculus\Support\oculus-client\Client.exe]
FirewallRules: [{53009994-ADF8-4561-BF8A-1FB375B50902}] => (Allow) C:\Program Files\Oculus\Support\oculus-dash\dash\bin\OculusDash.exe (Meta Platforms, Inc. -> )
FirewallRules: [{E6C04736-F5E8-4B21-9966-517D2E8411B3}] => (Allow) C:\Program Files\Oculus\Support\oculus-dash\dash\bin\OculusDash.exe (Meta Platforms, Inc. -> )
FirewallRules: [{E0A0D8B6-EECB-4190-B058-C6AB705BA29C}] => (Allow) C:\Program Files\Oculus\Support\oculus-runtime\OVRRedir.exe (Meta Platforms, Inc. -> Facebook Technologies, LLC)
FirewallRules: [{A37E4AED-1031-4EAB-9C2D-EB44E524C97D}] => (Allow) C:\Program Files\Oculus\Support\oculus-runtime\OVRRedir.exe (Meta Platforms, Inc. -> Facebook Technologies, LLC)
FirewallRules: [{57116B18-E6B5-4D72-9275-49DDB33A8C7C}] => (Allow) C:\Program Files\Oculus\Support\oculus-runtime\OVRServer_x64.exe (Meta Platforms, Inc. -> Facebook Technologies, LLC)
FirewallRules: [{3DFAA615-5E2F-4EEF-B9F0-4190CA20BD61}] => (Allow) C:\Program Files\Oculus\Support\oculus-runtime\OVRServer_x64.exe (Meta Platforms, Inc. -> Facebook Technologies, LLC)
FirewallRules: [{C9BF5A9B-C2EC-4E40-ABED-2992CC985223}] => (Allow) C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe (Meta Platforms, Inc. -> Facebook Technologies, LLC)
FirewallRules: [{26B19B35-0B62-47BA-AD9E-55A2C593E4F1}] => (Allow) C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe (Meta Platforms, Inc. -> Facebook Technologies, LLC)
FirewallRules: [{FCCFD6F1-779B-41A7-B624-DC17C94579B9}] => (Allow) LPort=161
FirewallRules: [{B7056F35-A029-4BE1-98B2-A9B124504D0D}] => (Allow) LPort=427
FirewallRules: [{E42AACB4-1256-4F69-A9D0-FB8354918C46}] => (Allow) LPort=9100
FirewallRules: [{D0B2C029-6B3C-424C-B4FF-EB4ACEA5621B}] => (Allow) C:\Program Files\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> )
FirewallRules: [{5411A41E-4D7C-45BF-B6BC-DA388E889F1E}] => (Allow) C:\Program Files\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> )
FirewallRules: [{F8D09A7E-7895-4D29-B28B-C375BF2314F3}] => (Allow) C:\Program Files\EaseUS\Todo Backup\bin\TBConsoleUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
FirewallRules: [{D1BF83EF-0FC2-4689-A213-EB466C1C6DA2}] => (Allow) C:\Program Files\EaseUS\Todo Backup\bin\TBConsoleUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
FirewallRules: [{10A26E90-1737-428F-849B-30D7244E1C1C}] => (Allow) C:\Program Files\EaseUS\Todo Backup\bin\TbService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
FirewallRules: [{90930565-ABEA-4B91-94DF-C284F90389D7}] => (Allow) C:\Program Files\EaseUS\Todo Backup\bin\TbService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
FirewallRules: [{73778328-7894-40CE-B077-AC3383300A24}] => (Allow) C:\Program Files (x86)\HP\HP LaserJet Pro MFP M125-M126\bin\EWSProxy.exe (VistaName -> Hewlett-Packard Co.) [Brak podpisu cyfrowego]
FirewallRules: [{0EE298B4-B4FC-4DC8-88A2-33A44CE179C0}] => (Allow) C:\Program Files (x86)\HP\HP LaserJet Pro MFP M125-M126\Bin\HPNetworkCommunicatorCom.exe (VistaName -> Hewlett-Packard Co.) [Brak podpisu cyfrowego]
FirewallRules: [{458FFDDF-E458-4702-87AC-E2695D23395F}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{04CDBE26-795E-40DD-9D74-8B33C5918C5B}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{19350AA9-D35F-415F-B1DD-D7B17E30482F}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2CDFF7FE-E182-42D6-8BE4-BA2E3959593B}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9B24DFD9-EF30-4209-8EB2-A44A938170DE}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{FD6F333F-93DD-4ABE-849B-04D38DC0CCA5}D:\programy\vms\vms.exe] => (Allow) D:\programy\vms\vms.exe () [Brak podpisu cyfrowego]
FirewallRules: [TCP Query User{119AD0D4-5B37-4DCB-9EAE-C325F1379777}D:\programy\vms\vms.exe] => (Allow) D:\programy\vms\vms.exe () [Brak podpisu cyfrowego]
FirewallRules: [{15001A1F-B8DD-4ED3-B9AC-9923C2A18133}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{CBBD2CAD-D899-4264-B2A1-00B92C56F974}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{5CCD4097-4C78-4117-8BA2-0D0C35E34324}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C369C296-87DB-4510-B72A-B0B94D7F0E15}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3B81303A-295D-4886-BEB6-E6A6915B2367}] => (Allow) C:\Users\bait1\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [{14A893EB-0F67-43F2-A60C-8B5B4055097D}] => (Allow) C:\Users\bait1\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [{CF0CDA1A-4862-4843-A4C8-08B446891044}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe (Now.gg, INC -> Bluestack Systems, Inc.)
FirewallRules: [{7B1999DE-184F-48F9-8AB0-B90856BC4905}] => (Allow) C:\Program Files (x86)\BlueStacks X\Cloud Game.exe => Brak pliku
FirewallRules: [{F7E0D055-B530-4D72-A0C8-FA0BDDCFFAE8}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe (Now.gg, INC -> BlueStack Systems)
FirewallRules: [{02A90AF7-2ACE-4E0F-B0B2-42F5E8B8DB17}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe (Now.gg, INC -> The Qt Company Ltd.)
FirewallRules: [{7322D1F1-69EF-4296-8623-B45EE96CC818}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Punkty Przywracania systemu =========================


==================== Wadliwe urządzenia w Menedżerze urządzeń ============
Name: SSD 256GB
Description: Stacja dysków
Class Guid: {4d36e967-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardowe stacje dysków)
Service: disk
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Błędy w Dzienniku zdarzeń: ========================

Dziennik Aplikacja:
==================
Error: (07/15/2026 02:00:37 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Nie można utworzyć punktu przywracania (Proces = C:\Windows\system32\svchost.exe -k netsvcs -p -s wuauserv; Opis = Windows Update; Błąd = 0x80070422).

Error: (07/15/2026 02:00:10 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Nie można utworzyć punktu przywracania (Proces = C:\Windows\system32\svchost.exe -k netsvcs -p -s wuauserv; Opis = Windows Update; Błąd = 0x80070422).

Error: (07/15/2026 01:59:48 AM) (Source: OVRServiceLauncher) (EventID: 0) (User: )
Description: Event-ID 0

Error: (07/15/2026 01:55:52 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Nie można utworzyć punktu przywracania (Proces = C:\Windows\system32\svchost.exe -k netsvcs -p -s wuauserv; Opis = Windows Update; Błąd = 0x80070422).

Error: (07/15/2026 01:50:55 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktywacja licencji (slui.exe) nie powiodła się, kod błędu:
hr=0xC004F074
Argumenty wiersza polecenia:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=TimerEvent

Error: (07/15/2026 01:50:31 AM) (Source: CertEnroll) (EventID: 86) (User: ZARZĄDZANIE NT)
Description: Inicjowanie rejestracji certyfikatu SCEP dla elementu WORKGROUP\BAIT$ za pośrednictwem elementu https://IFX-KeyId-5d0815951f5f60638a69e7252f3ec4becd7554b2.microsoftaik.azure.net/templates/Aik/scep nie powiodło się:

GetCACaps

Metoda: GET(10406ms)
Etap: GetCACaps
Nie można ustanowić połączenia z serwerem. 0x80072efd (WinHttp: 12029 ERROR_WINHTTP_CANNOT_CONNECT)

Error: (07/15/2026 01:49:53 AM) (Source: .NET Runtime) (EventID: 0) (User: )
Description: .NET Runtime version : 2.0.50727.9179 - Nie znaleziono debugera.Nie określono żadnego zarejestrowanego debugera JIT. 

Kliknij przycisk Ponw, aby proces zaczekał na ręczne dołączenie debugera.
Kliknij przycisk Anuluj, aby zrezygnować z debugowania JIT.

Error: (07/15/2026 01:49:53 AM) (Source: OVRServiceLauncher) (EventID: 0) (User: )
Description: Event-ID 0


Dziennik System:
=============
Error: (07/15/2026 02:00:43 AM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Usługa Oculus VR Library Service zakończyła działanie; wystąpił następujący specyficzny dla niej błąd: 
Niepoprawna funkcja.

Error: (07/15/2026 01:54:52 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: ZARZĄDZANIE NT)
Description: The Secure Boot update failed to update a Secure Boot variable with error (-2147020471 = Funkcja bezpiecznego rozruchu nie jest włączona na tym komputerze.). For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931

Error: (07/15/2026 01:54:52 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: ZARZĄDZANIE NT)
Description: The Secure Boot update failed to update a Secure Boot variable with error (-2147020471 = Funkcja bezpiecznego rozruchu nie jest włączona na tym komputerze.). For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931

Error: (07/15/2026 01:51:55 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi Usługa Google Update (gupdate) z powodu następującego błędu: 
Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie.

Error: (07/15/2026 01:51:55 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Upłynął limit czasu (180000 ms) podczas oczekiwania na połączenie się z usługą Usługa Google Update (gupdate).

Error: (07/15/2026 01:49:55 AM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: ZARZĄDZANIE NT)
Description: 18-2147024662

Error: (07/15/2026 01:49:53 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi Service KMSELDI z powodu następującego błędu: 
Nie można odnaleźć określonego pliku.

Error: (07/15/2026 01:49:52 AM) (Source: Microsoft-Windows-Eventlog) (EventID: 22) (User: ZARZĄDZANIE NT)
Description: Usługa rejestrowania zdarzeń napotkała błąd podczas inicjowania zasobów publikowania dla kanału Microsoft-Windows-USBVideo/Analytic. Jeśli typ kanału to Analityczny lub Debugowanie, może to oznaczać, że błąd mógł również wystąpić podczas inicjowania zasobów rejestrowania.


Windows Defender:
================
CodeIntegrity:
===============
Date: 2026-07-15 02:01:04
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Statystyki pamięci =========================== 

BIOS: INSYDE Corp. 1.07.09 09/27/2021
Płyta główna: Notebook NHx0ERQ_EPS
Procesor: AMD Ryzen 9 5900HX with Radeon Graphics 
Procent pamięci w użyciu: 31%
Całkowita pamięć fizyczna: 32108.06 MB
Dostępna pamięć fizyczna: 21981.7 MB
Całkowita pamięć wirtualna: 34156.06 MB
Dostępna pamięć wirtualna: 24069.85 MB

==================== Dyski ================================

Drive c: () (Fixed) (Total:301.87 GB) (Free:123.48 GB) (Model: Lexar SSD NM710 1TB) NTFS
Drive d: (Pliki) (Fixed) (Total:628.66 GB) (Free:368.61 GB) (Model: Lexar SSD NM710 1TB) NTFS

\\?\Volume{b6ed726a-3247-4d41-9f71-10c9ff2e11af}\ () (Fixed) (Total:0.86 GB) (Free:0.1 GB) NTFS
\\?\Volume{2cfaf939-e1cb-454c-953f-eab96b44afeb}\ () (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32

==================== MBR & Tablica partycji ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Koniec  Addition.txt =======================