Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 12-07-2026 01 Uruchomiony przez bait1 (administrator) BAIT (Notebook NHx0ERQ_EPS) (15-07-2026 01:57:35) Uruchomiony z C:\Users\bait1\Downloads\FRST64.exe Załadowane profile: bait1 & OVRLibraryService Platforma: Microsoft Windows 11 Pro Wersja 24H2 26100.4652 (X64) Język: Polski (Polska) Domyślna przeglądarka: Chrome Tryb startu: Normal ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (C:\Program Files (x86)\EaseUS\ENS\ensserver.exe ->) (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\ENS\AliyunWrapExe.exe (C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\Updates\16.0.17932.20842\OfficeClickToRun.exe (C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe ->) (CHENGDU YIWO Tech Development Co., Ltd. -> ) C:\Program Files\EaseUS\Todo Backup\bin\TodoBackupService.exe (C:\Program Files\Oculus\Support\oculus-remote-desktop\RemoteDesktopCompanion.exe ->) () [Brak podpisu cyfrowego] C:\Program Files\Oculus\Support\oculus-remote-desktop\MQRDCrashpadHandler.exe (C:\Program Files\Oculus\Support\oculus-runtime\OVRServer_x64.exe ->) (Meta Platforms, Inc. -> Facebook Technologies, LLC) C:\Program Files\Oculus\Support\oculus-librarian\OVRLibrarian.exe (C:\Program Files\Oculus\Support\oculus-runtime\OVRServer_x64.exe ->) (Meta Platforms, Inc. -> Meta Platforms Technologies LLC) C:\Program Files\Oculus\Support\oculus-remote-desktop\RemoteDesktopCompanion.exe (C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe ->) (Meta Platforms, Inc. -> Facebook Technologies, LLC) C:\Program Files\Oculus\Support\oculus-runtime\OVRRedir.exe (C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe ->) (Meta Platforms, Inc. -> Facebook Technologies, LLC) C:\Program Files\Oculus\Support\oculus-runtime\OVRServer_x64.exe (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe <3> (DriverStore\FileRepository\u0405470.inf_amd64_2e71ce0e27c179e1\B404884\atiesrxx.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0405470.inf_amd64_2e71ce0e27c179e1\B404884\atieclxx.exe (explorer.exe ->) (54418920-1845-464B-A595-EDBEA032F08F -> ) C:\Program Files\WindowsApps\CLEVOCO.FnhotkeysandOSD_7.35.1.0_x64__6h6z29zh29qx0\FnKey\FnKey.exe (explorer.exe ->) (F.lux Software LLC -> f.lux Software LLC) C:\Users\bait1\AppData\Local\FluxSoftware\Flux\flux.exe (explorer.exe ->) (VENEA.NET) [Brak podpisu cyfrowego] C:\Program Files\NetTraffic\NetTraffic.exe (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <32> (Kilonova LLC -> Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.5.0.7\Lightshot.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvcvi.inf_amd64_75c4fbdef32fe73d\Display.NvContainer\NVDisplay.Container.exe (services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (services.exe ->) (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\ENS\ensserver.exe (services.exe ->) (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe (services.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe <2> (services.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe (services.exe ->) (Hewlett-Packard Company -> HP) C:\Windows\System32\HPSIsvc.exe (services.exe ->) (HP Inc.) [Brak podpisu cyfrowego] C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe (services.exe ->) (Meta Platforms, Inc. -> Facebook Technologies, LLC) C:\Program Files\Oculus\Support\oculus-librarian\OVRLibraryService.exe (services.exe ->) (Meta Platforms, Inc. -> Facebook Technologies, LLC) C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2> (services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\DriverStore\FileRepository\acpibridge1.inf_amd64_6172acb3e289f51f\DCHUService.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0405470.inf_amd64_2e71ce0e27c179e1\B404884\atiesrxx.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Insyde Software Corp.) C:\Program Files (x86)\ControlCenter\Driver\x64\HKClipSvc.exe (services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvcvi.inf_amd64_75c4fbdef32fe73d\Display.NvContainer\NVDisplay.Container.exe (services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_73592056cffa61ae\RtkAudUService64.exe (svchost.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe <2> (svchost.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe (svchost.exe ->) (Filipe Lourenço -> Filipe Lourenço) C:\Program Files\BatteryCare\BatteryCare.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.51.3.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4> (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe ==================== Rejestr (filtrowane) =================== HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_73592056cffa61ae\RtkAudUService64.exe [1231912 2021-02-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226728 2019-07-21] (Kilonova LLC -> ) HKLM-x32\...\Run: [TrayProcess] => C:\Program Files\EaseUS\Todo Backup\bin\TrayProcess.exe [1018376 2023-11-29] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Ograniczenia <==== UWAGA HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Ograniczenia <==== UWAGA HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Ograniczenia <==== UWAGA HKLM\Software\Policies\...\system: [AllowBlockingAppsAtShutdown] 0 HKLM\Software\Policies\...\system: [EnableSmartScreen] 0 <==== UWAGA HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\Run: [f.lux] => C:\Users\bait1\AppData\Local\FluxSoftware\Flux\flux.exe [1536232 2026-04-08] (F.lux Software LLC -> f.lux Software LLC) HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\Run: [NetTraffic] => C:\Program Files\NetTraffic\NetTraffic.exe [721920 2023-09-25] (VENEA.NET) [Brak podpisu cyfrowego] HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\Run: [ut] => C:\Users\bait1\AppData\Roaming\uTorrent\uTorrent.exe [3678728 2025-01-08] (BitTorrent Inc -> BitTorrent Limited) HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\Run: [MicrosoftEdgeAutoLaunch_A46EBA3BAB6D8CF3410B91796761EB2B] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [4113488 2025-07-24] (Microsoft Corporation -> Microsoft Corporation) HKLM\...\Windows x64\Print Processors\HP1100PrintProc: C:\Windows\System32\spool\prtprocs\x64\HP1100PP.DLL [74240 2012-08-31] (Microsoft Windows Hardware Compatibility Publisher -> ) HKLM\...\Print\Monitors\Advanced TCP/IP Port Monitor: C:\Windows\system32\mvtcpmon.dll [541184 2009-06-25] (Marvell Semiconductor, Inc.) [Brak podpisu cyfrowego] HKLM\...\Print\Monitors\HP Standard TCP/IP Port: C:\Windows\system32\HpTcpMon.dll [331264 2009-09-16] (Hewlett Packard) [Brak podpisu cyfrowego] HKLM\...\Print\Monitors\HP1100LM: C:\Windows\system32\HP1100LM.DLL [288768 2012-08-31] (Microsoft Windows Hardware Compatibility Publisher -> ) HKLM\Software\...\AppCompatFlags\Custom\H3Blade.exe: [{62a24b39-0106-4990-90ea-3a09e9dda7a6}.sdb] -> HoMM III Compatibility Database HKLM\Software\...\AppCompatFlags\InstalledSDB\{62a24b39-0106-4990-90ea-3a09e9dda7a6}: [DatabasePath] -> C:\Windows\AppPatch\CustomSDB\{62a24b39-0106-4990-90ea-3a09e9dda7a6}.sdb [2024-09-28] HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\150.0.7871.115\Installer\chrmstp.exe [7680152 2026-07-14] (Google LLC -> Google LLC) AlternateShell: <==== UWAGA GroupPolicy: Ograniczenia ? <==== UWAGA Policies: C:\ProgramData\NTUSER.pol: Ograniczenia <==== UWAGA ==================== Zaplanowane zadania (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {790242AD-569C-4759-9020-522B1A6B24E5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1580992 2025-03-21] (Adobe Inc. -> Adobe Inc.) Task: {B054A94C-E1CA-466B-9A8E-BA4C1F52F88C} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [985792 2015-07-22] (@ByELDI -> @ByELDI) [Brak podpisu cyfrowego] Task: {4978A54E-4CFD-4FE8-8F78-2568792E559B} - System32\Tasks\BatteryCareAuto => C:\Program Files\BatteryCare\BatteryCare.exe [815336 2021-07-12] (Filipe Lourenço -> Filipe Lourenço) Task: {9D35FCEE-4080-4688-8722-B37F7B990FA7} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [302960 2025-01-30] (Now.gg, INC -> BlueStack Systems, Inc.) Task: {6CEC3623-4D2C-4CEE-AC86-D3C8F9FDECC4} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) Task: {4BE1EA3C-71D8-4DC5-8C98-34EBC6898A0D} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) Task: {BBE88855-1678-4BA0-BB67-AF3447117532} - System32\Tasks\COMODO\COMODO Maintenance {947247B5-026A-4437-9371-770782BE839D} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) Task: {33F3FE9B-93E2-42B1-965F-933F04B779C1} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) Task: {5528E575-30C2-43C4-ABD8-2C70F8627C45} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) Task: {819AE283-6BDC-4D08-A6F8-97218621D170} - System32\Tasks\COMODO\COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) Task: {5EDD64A1-A891-4DD0-B045-A351CF3094EB} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) Task: {ED7A51D5-AC47-4A63-91A6-7DEF879CE9C7} - System32\Tasks\FxSound\Update => C:\Program -> Files\FxSound LLC\FxSound\updater.exe /silent Task: {7B058D8D-1D06-4FC7-A4D4-9117061829F1} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem140.0.7273.0{87D96129-6477-4989-B79C-6ECF4E7F2A3E} => C:\Program Files (x86)\Google\GoogleUpdater\140.0.7273.0\updater.exe [6836832 2025-07-02] (Google LLC -> Google LLC) Task: {B63F6E01-C577-499E-A00F-02BC6E0E5A7D} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{9C446911-390C-4C4B-84EF-47176CEF82F7} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [9512088 2026-07-05] (Google LLC -> Google LLC) Task: {1E00A80D-F0FD-4DFB-B56B-CF60CC5BFEEC} - System32\Tasks\HPLJCustParticipation => C:\Program Files (x86)\HP\HPLJUT\HPLJUTSCH.exe [89840 2014-10-19] (Hewlett-Packard Company -> Hewlett Packard) Task: {90D1A821-0250-4B38-BF24-E7ECA06EC127} - System32\Tasks\Launch Adobe CCXProcess => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [194048 2025-02-04] (Adobe Inc. -> Adobe Inc.) Task: {BF6A8AAC-B465-4761-B6ED-2DFF0F437EA1} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28610600 2025-07-02] (Microsoft Corporation -> Microsoft Corporation) Task: {F250B61A-9343-4687-A150-03066D7C2F8A} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28610600 2025-07-02] (Microsoft Corporation -> Microsoft Corporation) Task: {95FF2165-45FB-4A20-BADD-62FDE8D9C4A2} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [313288 2025-07-14] (Microsoft Corporation -> Microsoft Corporation) Task: {8838CA56-6185-4401-B251-7BAF015E75B1} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [313288 2025-07-14] (Microsoft Corporation -> Microsoft Corporation) Task: {0DD5F5B1-6170-4284-BE43-4852D136ED7D} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [187024 2024-08-15] (Microsoft Corporation -> Microsoft Corporation) Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (Brak pliku) Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Brak pliku) Task: {ABC6A3FC-071F-4EBF-8005-68C2CB10738D} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-420650328-1192798164-3798175123-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [694912 2025-07-27] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (dane wartości zawierają 6 znaków więcej). Task: {DAF7CD30-8F2C-4285-9C02-3BAB10B45112} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34944 2025-07-27] (Mozilla Corporation -> Mozilla Foundation) Task: {A23E4963-3746-4EEE-9B83-1A3B073C7C0B} - System32\Tasks\StartAllBack Update => C:\Program Files\StartAllBack\UpdateCheck.exe [49888 2025-06-11] (IP Zinukhov Stanislav Igorevich -> www.startisback.com) Task: {3D78FE16-CED5-4CCF-BE90-AD8636543BDC} - System32\Tasks\update-S-1-5-21-420650328-1192798164-3798175123-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: ) Task: {8910AAD0-7D81-477D-9796-F08B3394CE93} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: ) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\update-S-1-5-21-420650328-1192798164-3798175123-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.1 Tcpip\..\Interfaces\{27f888e3-f1f8-4b92-84b4-6630ed71c01b}: [NameServer] 156.154.70.25,156.154.71.25 Tcpip\..\Interfaces\{27f888e3-f1f8-4b92-84b4-6630ed71c01b}: [DhcpNameServer] 192.168.1.1 0.0.0.0 Tcpip\..\Interfaces\{7c8bdef4-5d87-437b-b5b8-9b70de1f0522}: [DhcpNameServer] 192.168.0.1 192.168.0.1 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}: [NameServer] 156.154.70.25,156.154.71.25 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}: [DhcpNameServer] 192.168.0.1 192.168.0.1 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\24169647: [NameServer] 156.154.70.25,156.154.71.25 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\24169647: [DhcpNameServer] 192.168.3.71 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\75C414E413D2339353148403: [NameServer] 156.154.70.25,156.154.71.25 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\75C414E413D2339353148403: [DhcpNameServer] 192.168.8.1 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\8456166756E6023427563747F55374F5548545: [NameServer] 156.154.70.25,156.154.71.25 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\8456166756E6023427563747F55374F5548545: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox FF DefaultProfile: i3vlxujl.default-release-1 -> 308046B0AF4A39CB FF ProfilePath: C:\Users\bait1\AppData\Roaming\Mozilla\Firefox\Profiles\3f7gkq7q.default-release [nie znaleziono] <==== UWAGA FF ProfilePath: C:\Users\bait1\AppData\Roaming\Mozilla\Firefox\Profiles\x4xnyrid.default [nie znaleziono] <==== UWAGA FF ProfilePath: C:\Users\bait1\AppData\Roaming\Mozilla\Firefox\Profiles\i3vlxujl.default-release-1 [2025-07-31] FF Extension: (Video DownloadHelper) - C:\Users\bait1\AppData\Roaming\Mozilla\Firefox\Profiles\i3vlxujl.default-release-1\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2025-06-05] FF Extension: (Adblock Plus - darmowy adblocker) - C:\Users\bait1\AppData\Roaming\Mozilla\Firefox\Profiles\i3vlxujl.default-release-1\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2025-07-17] FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-08-01] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN) FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2025-07-15] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-08-15] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-08-01] (Microsoft Corporation -> Microsoft Corporation) Edge: ======= Edge Profile: C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default [2025-05-25] Edge Extension: (Tłumacz Google) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2025-04-28] Edge Extension: (LastPass: Free Password Manager) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bbcinlkgjjkejfdpemiealijmmooekmp [2025-04-28] Edge Extension: (Pobieranie filmów z Telegramu) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bbjnnajeogkkmljfdoengamaiomfhbch [2025-04-28] Edge Extension: (Stylus) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\clngdbkpkpeebahjckkjfobafhncgmne [2025-04-28] Edge Extension: (AliExpress Wyszukaj Według Obrazu) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cpodebcggidjigndghagpkepglfbhali [2025-04-28] Edge Extension: (alerabat.com | kupony i cashback) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\dacdinoicboceafielngnmjjplncljhj [2025-05-25] Edge Extension: (MetaMask) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ejbalbakoplchlghecdalmeeeajnimhm [2025-04-28] Edge Extension: (Video Downloader Professional) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2025-04-28] Edge Extension: (uBlock) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\epcnnfbjfcgphgdmggkamkmgojdagdnn [2025-04-28] Edge Extension: (GoFullPage - Full Page Screen Capture) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2025-04-28] Edge Extension: (Dokumenty Google offline) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-28] Edge Extension: (Screen Capture) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghihpjhpgdepnohngpgfcmcijmkggpaf [2025-04-28] Edge Extension: (Adblock Plus - darmowy adblocker) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmgoamodcdcjnbaobigkjelfplakmdhh [2025-04-28] Edge Extension: (Edge relevant text changes) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-08-01] Edge Extension: (Video DownloadHelper) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmkaglaafmhbcpleggkmaliipiilhldn [2025-04-28] Edge Extension: (Usługa zwrotu gotówki LetyShops) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\lphicbbhfmllgmomkkhjfkpbdlncafbn [2025-04-28] Edge Extension: (Zaakceptuj wszystkie pliki cookie) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ofpnikijgfhlmmjlpkfaifhhdonchhoi [2025-04-28] Edge Extension: (Slush — A Sui wallet) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\opcgpfmipidbgpenhmajoajpbobppdil [2025-04-28] Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default [2026-07-14] CHR Notifications: Default -> hxxps://android.com.pl; hxxps://app.zoom.us; hxxps://badoo.com; hxxps://bitcoinwisdom.io; hxxps://cointelegraph.com; hxxps://ebok.pgnig.pl; hxxps://gcx.aliexpress.com; hxxps://laneperfumy-pl-02.salesmanagopush.com; hxxps://pl.tradingview.com; hxxps://platform.trans.eu; hxxps://rankomat.pl; hxxps://system.trans.eu; hxxps://tinder.com; hxxps://twitter.com; hxxps://www.cargo.pl; hxxps://www.just-whisky.co.uk; hxxps://www.oferteo.pl; hxxps://www.webhostingtalk.pl; hxxps://www.wosp.org.pl; hxxps://www.wyjatkowyprezent.pl CHR HomePage: Default -> hxxp://google.pl/ CHR Extension: (Tłumacz Google) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2026-07-14] CHR Extension: (Pobieranie filmów z Telegramu) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjnnajeogkkmljfdoengamaiomfhbch [2025-01-16] CHR Extension: (Adblock Plus - darmowy adblocker) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2026-07-14] CHR Extension: (Stylus) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\clngdbkpkpeebahjckkjfobafhncgmne [2026-07-14] CHR Extension: (AliExpress Wyszukaj Według Obrazu) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpodebcggidjigndghagpkepglfbhali [2024-08-01] CHR Extension: (alerabat.com | kupony i cashback) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\dacdinoicboceafielngnmjjplncljhj [2026-07-14] CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-07-14] CHR Extension: (Video Downloader Professional) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2026-07-14] CHR Extension: (uBlock) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\epcnnfbjfcgphgdmggkamkmgojdagdnn [2026-07-14] CHR Extension: (GoFullPage - Full Page Screen Capture) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2026-07-14] CHR Extension: (Screen Capture) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghihpjhpgdepnohngpgfcmcijmkggpaf [2024-11-08] CHR Extension: (LastPass: Free Password Manager) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2026-07-14] CHR Extension: (Konwertuj głos na tekst) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\jdcdafhjjjfnkoeilnjmnadadaoehgdc [2024-08-01] CHR Extension: (Video Download Helper) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2026-07-14] CHR Extension: (Usługa zwrotu gotówki LetyShops) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lphicbbhfmllgmomkkhjfkpbdlncafbn [2026-07-14] CHR Extension: (MetaMask) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2026-07-14] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-08-01] CHR Extension: (Zaakceptuj wszystkie pliki cookie) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofpnikijgfhlmmjlpkfaifhhdonchhoi [2025-02-27] CHR Extension: (Slush — A Sui wallet) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\opcgpfmipidbgpenhmajoajpbobppdil [2026-07-14] CHR Profile: C:\Users\bait1\AppData\Local\Google\Chrome\User Data\System Profile [2024-08-01] CHR HKU\S-1-5-21-420650328-1192798164-3798175123-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] ==================== Usługi (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174520 2025-03-21] (Adobe Inc. -> Adobe Inc.) R2 CCDCHUService; C:\Windows\System32\DriverStore\FileRepository\acpibridge1.inf_amd64_6172acb3e289f51f\DCHUService.exe [84528 2024-08-09] (Microsoft Windows Hardware Compatibility Publisher -> ) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14045704 2025-07-02] (Microsoft Corporation -> Microsoft Corporation) R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [11334144 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R2 CmdAgentProt; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [11334144 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2675504 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R2 EaseUS Agent; C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe [45064 2023-11-29] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) R2 EaseUS UPDATE SERVICE; C:\Program Files (x86)\EaseUS\ENS\ensserver.exe [27784 2023-01-04] (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Brak podpisu cyfrowego] R2 HKClipSvc; C:\Program Files (x86)\ControlCenter\Driver\x64\HKClipSvc.exe [431696 2019-03-06] (Microsoft Windows Hardware Compatibility Publisher -> Insyde Software Corp.) R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [176640 2020-02-11] (HP Inc.) [Brak podpisu cyfrowego] R2 HPSIService; C:\Windows\system32\HPSIsvc.exe [126880 2012-09-27] (Hewlett-Packard Company -> HP) S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpDefenderCoreService.exe [1926976 2025-03-12] (Microsoft Windows Publisher -> Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvcvi.inf_amd64_75c4fbdef32fe73d\Display.NvContainer\NVDisplay.Container.exe [1275008 2024-08-13] (NVIDIA Corporation -> NVIDIA Corporation) R3 OVRLibraryService; C:\Program Files\Oculus\Support\oculus-librarian\OVRLibraryService.exe [58552 2025-06-25] (Meta Platforms, Inc. -> Facebook Technologies, LLC) R2 OVRService; C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe [435384 2025-06-25] (Meta Platforms, Inc. -> Facebook Technologies, LLC) S3 ProtonVPN Service; C:\Program Files\Proton\VPN\v3.3.2\ProtonVPNService.exe [474848 2024-08-12] (Proton AG -> ProtonVPN) S3 ProtonVPN WireGuard; C:\Program Files\Proton\VPN\v3.3.2\ProtonVPN.WireGuardService.exe [474336 2024-08-12] (Proton AG -> ProtonVPN) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [917472 2025-06-11] (Microsoft Windows Publisher -> Microsoft Corporation) R3 VssEaseusProvider; C:\WINDOWS\system32\dllhost.exe /Processid:{D9BF8E41-4F8F-46AC-B917-1F70DAFA632D} [50504 2024-12-13] (Microsoft Windows -> Microsoft Corporation) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\NisSrv.exe [4352456 2025-03-12] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MsMpEng.exe [270056 2025-03-12] (Microsoft Windows Publisher -> Microsoft Corporation) S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe (Brak pliku) ===================== Sterowniki (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 AcpiBridge; C:\Windows\System32\drivers\AcpiBridge.sys [64032 2024-05-30] (Insyde Software Corp. -> Insyde Software Corporation) R3 AirplaneModeHid; C:\Windows\System32\drivers\AirplaneModeHid.sys [66064 2024-05-24] (Insyde Software Corp. -> Insyde Software Corporation) R3 amdwddmg; C:\Windows\System32\DriverStore\FileRepository\u0405470.inf_amd64_2e71ce0e27c179e1\B404884\amdkmdag.sys [106382520 2024-08-01] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) R3 ANXUcmCxCD; C:\Windows\System32\drivers\ANXUcmCxCD.sys [101592 2024-08-01] (Analogix Semiconductor, Inc. -> ) R2 BlueStacksDrv_nxt; C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [394176 2025-01-30] (Microsoft Windows Hardware Compatibility Publisher -> Bluestack System Inc.) S0 cmdboot; C:\Windows\System32\DRIVERS\cmdboot.sys [17576 2019-10-22] (Microsoft Windows Early Launch Anti-malware Publisher -> COMODO) R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [38880 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [844000 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R1 cmdhlp; C:\Windows\system32\DRIVERS\cmdhlp.sys [47104 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R0 EUBAKUP; C:\Windows\System32\drivers\eubakup.sys [75848 2023-01-04] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd) R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [55352 2023-11-08] (Microsoft Windows Hardware Compatibility Publisher -> ) R1 EUDSKACS; C:\Windows\system32\drivers\eudskacs.sys [24152 2023-01-04] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd) R1 EUFDDISK; C:\Windows\system32\drivers\EuFdDisk.sys [565456 2023-08-07] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd) R3 euimgprt; C:\Windows\System32\DRIVERS\euimgprt.sys [29248 2023-08-29] (CHENGDU YIWO Tech Development Co., Ltd. -> ) R0 EUSSRDVR; C:\Windows\System32\drivers\EUSSRDVR.sys [66768 2023-11-21] (Microsoft Windows Hardware Compatibility Publisher -> ) R3 FXVAD; C:\Windows\system32\drivers\fxvad.sys [326656 2022-05-30] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) R3 HKKbdFltr; C:\Windows\system32\DRIVERS\HKKbdFltr.sys [40320 2019-03-06] (WDKTestCert stone.cheng,131963286194994418 -> Insyde Software Corp.) R3 HKMouFltr; C:\Windows\system32\DRIVERS\HKMouFltr.sys [38552 2019-03-06] (WDKTestCert stone.cheng,131963286194994418 -> Insyde Software Corp.) R1 inspect; C:\Windows\system32\DRIVERS\inspect.sys [130256 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) S3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [278944 2025-03-12] (Microsoft Windows -> Microsoft Corporation) S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-09-26] (Microsoft Windows Hardware Compatibility Publisher -> Marvell Semiconductor, Inc.) R3 nvpcf; C:\Windows\System32\drivers\nvpcf.sys [236696 2024-08-01] (NVIDIA Corporation -> NVIDIA Corporation) R3 oculusvad_oculusvad; C:\Windows\System32\drivers\oculusvad.sys [73400 2024-08-09] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) R3 Oculus_ViGEmBus; C:\Windows\System32\drivers\Oculus_ViGEmBus.sys [32856 2024-08-09] (Oculus VR, LLC -> Facebook Inc.) S3 ProtonVPNCallout; C:\Program Files\Proton\VPN\v3.3.2\Resources\ProtonVPN.CalloutDriver.sys [37768 2024-07-30] (Proton AG -> Proton Technologies AG) R3 rt25cx21; C:\Windows\System32\DriverStore\FileRepository\rt25cx21x64.inf_amd64_f1c3cf27b6967f47\rt25cx21x64.sys [831320 2024-08-13] (Realtek Semiconductor Corp. -> Realtek) S3 Ser2pl; C:\Windows\system32\DRIVERS\ser2pl64.sys [262160 2019-08-11] (WDKTestCert charles-yeh,132058328970830801 -> Prolific Technology Inc.) S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [20016 2025-03-12] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [601520 2025-03-12] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [100768 2025-03-12] (Microsoft Windows -> Microsoft Corporation) R3 WinRing0_1_2_0; C:\Program Files\BatteryCare\WinRing0x64.sys [14544 2014-03-22] (Noriyuki MIYAZAKI -> OpenLibSys.org) S3 WSDPrintDevice; C:\Windows\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2024-12-13] (Microsoft Windows -> Microsoft Corporation) S3 WSDScan; C:\Windows\System32\DriverStore\FileRepository\sti.inf_amd64_971c769b103df369\WSDScan.sys [61440 2024-12-13] (Microsoft Windows -> Microsoft Corporation) ==================== SvcHost (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2026-07-15 01:59 - 2026-07-15 01:59 - 000002156 _____ C:\Users\Public\Desktop\Meta Horizon Link.lnk 2026-07-15 01:59 - 2026-07-15 01:59 - 000000000 ____D C:\Users\bait1\AppData\Roaming\MetaXR 2026-07-15 01:59 - 2026-07-15 01:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Meta Horizon Link 2026-07-15 01:57 - 2026-07-15 01:58 - 000037454 _____ C:\Users\bait1\Downloads\FRST.txt 2026-07-15 01:57 - 2026-07-15 01:57 - 000783460 _____ C:\Windows\system32\perfh015.dat 2026-07-15 01:57 - 2026-07-15 01:57 - 000160274 _____ C:\Windows\system32\perfc015.dat 2026-07-15 01:57 - 2026-07-15 01:57 - 000000000 ____D C:\FRST 2026-07-15 01:56 - 2026-07-15 01:56 - 002451456 _____ (Farbar) C:\Users\bait1\Downloads\FRST64.exe 2026-07-15 01:49 - 2026-07-15 01:49 - 000012288 ___SH C:\DumpStack.log.tmp ==================== Jeden miesiąc (zmodyfikowane) ================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2026-07-15 01:59 - 2024-12-13 17:01 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task 2026-07-15 01:59 - 2024-11-19 09:59 - 000000000 ____D C:\Users\bait1\AppData\Roaming\Oculus Remote Desktop 2026-07-15 01:59 - 2024-08-22 16:59 - 001474832 _____ C:\Windows\system32\Drivers\sfi.dat 2026-07-15 01:59 - 2024-08-09 10:25 - 000000000 ____D C:\Users\bait1\AppData\Local\Oculus 2026-07-15 01:59 - 2024-08-01 16:03 - 000002448 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2026-07-15 01:58 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SystemTemp 2026-07-15 01:57 - 2024-12-13 17:06 - 001769838 _____ C:\Windows\system32\PerfStringBackup.INI 2026-07-15 01:57 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\Registration 2026-07-15 01:57 - 2024-04-01 09:24 - 000000000 ____D C:\Windows\INF 2026-07-15 01:56 - 2024-09-02 10:17 - 000069680 _____ C:\Windows\system32\Drivers\fvstore.dat 2026-07-15 01:55 - 2024-08-01 16:54 - 000002253 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2026-07-15 01:55 - 2024-08-01 16:54 - 000002212 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2026-07-15 01:55 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps 2026-07-15 01:55 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\AppReadiness 2026-07-15 01:52 - 2024-08-01 17:10 - 000002156 _____ C:\Users\bait1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\f.lux.lnk 2026-07-15 01:51 - 2024-12-13 17:01 - 000003566 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2026-07-15 01:51 - 2024-12-13 17:01 - 000003440 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2026-07-15 01:50 - 2025-07-10 12:27 - 000000000 ____D C:\Windows\CbsTemp 2026-07-15 01:50 - 2024-12-13 16:59 - 000003212 _____ C:\Windows\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2 2026-07-15 01:50 - 2024-08-09 10:41 - 000000000 ____D C:\Program Files\Oculus 2026-07-15 01:50 - 2024-08-01 16:46 - 000000000 ____D C:\Users\bait1\AppData\Local\D3DSCache 2026-07-15 01:49 - 2025-07-27 21:53 - 000000000 ____D C:\Program Files\Mozilla Firefox 2026-07-15 01:49 - 2024-12-13 17:01 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2026-07-15 01:49 - 2024-12-13 16:57 - 000000000 ____D C:\Users\bait1 2026-07-15 01:49 - 2024-12-13 16:56 - 000001575 _____ C:\Windows\system32\config\VSMIDK 2026-07-15 01:49 - 2024-12-13 16:56 - 000000000 ____D C:\Windows\system32\SleepStudy 2026-07-15 01:49 - 2024-08-01 17:11 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2026-07-15 01:49 - 2024-08-01 16:16 - 000000000 ____D C:\ProgramData\NVIDIA 2026-07-15 01:49 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2026-07-15 01:30 - 2024-04-01 09:26 - 000028672 _____ C:\Windows\system32\config\BCD-Template ==================== Pliki w katalogu głównym wybranych folderów ======== 2024-08-22 16:56 - 2021-11-10 10:18 - 000451976 _____ (COMODO) C:\ProgramData\cmdres.dll 2024-08-06 23:13 - 2025-04-26 16:39 - 000000018 _____ () C:\Users\bait1\AppData\Roaming\.cache17951620050788523514.dat 2024-08-08 16:46 - 2024-08-08 16:46 - 000000017 _____ () C:\Users\bait1\AppData\Local\resmon.resmoncfg 2024-08-01 19:05 - 2024-08-01 19:05 - 000000003 _____ () C:\Users\bait1\AppData\Local\updater.log 2024-08-01 19:05 - 2024-08-01 19:05 - 000000424 _____ () C:\Users\bait1\AppData\Local\UserProducts.xml ==================== SigCheck ============================ (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) ==================== Koniec FRST.txt ========================