Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 15-07-2026 Uruchomiony przez bait1 (administrator) BAIT (Notebook NHx0ERQ_EPS) (15-07-2026 17:45:00) Uruchomiony z C:\Users\bait1\Desktop\FRST64.exe Załadowane profile: bait1 Platforma: Microsoft Windows 11 Pro Wersja 24H2 26100.4652 (X64) Język: Polski (Polska) Domyślna przeglądarka: Chrome Tryb startu: Normal ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (C:\Program Files (x86)\EaseUS\ENS\ensserver.exe ->) (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\ENS\AliyunWrapExe.exe (C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe ->) (CHENGDU YIWO Tech Development Co., Ltd. -> ) C:\Program Files\EaseUS\Todo Backup\bin\TodoBackupService.exe (C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe (C:\Program Files\Oculus\Support\oculus-remote-desktop\RemoteDesktopCompanion.exe ->) () [Brak podpisu cyfrowego] C:\Program Files\Oculus\Support\oculus-remote-desktop\MQRDCrashpadHandler.exe (C:\Program Files\Oculus\Support\oculus-runtime\OVRServer_x64.exe ->) (Meta Platforms, Inc. -> Meta Platforms Technologies LLC) C:\Program Files\Oculus\Support\oculus-remote-desktop\RemoteDesktopCompanion.exe (C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe ->) (Meta Platforms, Inc. -> Facebook Technologies, LLC) C:\Program Files\Oculus\Support\oculus-runtime\OVRRedir.exe (C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe ->) (Meta Platforms, Inc. -> Facebook Technologies, LLC) C:\Program Files\Oculus\Support\oculus-runtime\OVRServer_x64.exe (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe (DriverStore\FileRepository\u0405470.inf_amd64_2e71ce0e27c179e1\B404884\atiesrxx.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0405470.inf_amd64_2e71ce0e27c179e1\B404884\atieclxx.exe (explorer.exe ->) (54418920-1845-464B-A595-EDBEA032F08F -> ) C:\Program Files\WindowsApps\CLEVOCO.FnhotkeysandOSD_7.35.1.0_x64__6h6z29zh29qx0\FnKey\FnKey.exe (explorer.exe ->) (F.lux Software LLC -> f.lux Software LLC) C:\Users\bait1\AppData\Local\FluxSoftware\Flux\flux.exe (explorer.exe ->) (Now.gg, INC -> now.gg, Inc.) C:\Users\bait1\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe (explorer.exe ->) (VENEA.NET) [Brak podpisu cyfrowego] C:\Program Files\NetTraffic\NetTraffic.exe (Kilonova LLC -> Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.5.0.7\Lightshot.exe (Now.gg, INC -> now.gg, Inc.) C:\Users\bait1\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe <3> (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvcvi.inf_amd64_75c4fbdef32fe73d\Display.NvContainer\NVDisplay.Container.exe (services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (services.exe ->) (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Brak podpisu cyfrowego] C:\Program Files (x86)\EaseUS\ENS\ensserver.exe (services.exe ->) (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe (services.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe <2> (services.exe ->) (Hewlett-Packard Company -> HP) C:\Windows\System32\HPSIsvc.exe (services.exe ->) (HP Inc.) [Brak podpisu cyfrowego] C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe (services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (services.exe ->) (Meta Platforms, Inc. -> Facebook Technologies, LLC) C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\DriverStore\FileRepository\acpibridge1.inf_amd64_6172acb3e289f51f\DCHUService.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0405470.inf_amd64_2e71ce0e27c179e1\B404884\atiesrxx.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Insyde Software Corp.) C:\Program Files (x86)\ControlCenter\Driver\x64\HKClipSvc.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpDefenderCoreService.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MsMpEng.exe (services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvcvi.inf_amd64_75c4fbdef32fe73d\Display.NvContainer\NVDisplay.Container.exe (services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_73592056cffa61ae\RtkAudUService64.exe (svchost.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe (svchost.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe (svchost.exe ->) (Filipe Lourenço -> Filipe Lourenço) C:\Program Files\BatteryCare\BatteryCare.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SppExtComObj.Exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vdsldr.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.4651_none_a510910d775cffb2\TiWorker.exe ==================== Rejestr (filtrowane) =================== HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_73592056cffa61ae\RtkAudUService64.exe [1231912 2021-02-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226728 2019-07-21] (Kilonova LLC -> ) HKLM-x32\...\Run: [TrayProcess] => C:\Program Files\EaseUS\Todo Backup\bin\TrayProcess.exe [1018376 2023-11-29] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) HKLM\Software\Policies\...\system: [AllowBlockingAppsAtShutdown] 0 HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\Run: [f.lux] => C:\Users\bait1\AppData\Local\FluxSoftware\Flux\flux.exe [1533560 2024-08-08] (F.lux Software LLC -> f.lux Software LLC) HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\Run: [NetTraffic] => C:\Program Files\NetTraffic\NetTraffic.exe [721920 2023-09-25] (VENEA.NET) [Brak podpisu cyfrowego] HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\Run: [MicrosoftEdgeAutoLaunch_A46EBA3BAB6D8CF3410B91796761EB2B] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [4113488 2025-07-24] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-420650328-1192798164-3798175123-1001\...\Run: [electron.app.BlueStacks Services] => C:\Users\bait1\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe [162219656 2024-05-08] (Now.gg, INC -> now.gg, Inc.) HKLM\...\Windows x64\Print Processors\HP1100PrintProc: C:\Windows\System32\spool\prtprocs\x64\HP1100PP.DLL [74240 2012-08-31] (Microsoft Windows Hardware Compatibility Publisher -> ) HKLM\...\Print\Monitors\Advanced TCP/IP Port Monitor: C:\Windows\system32\mvtcpmon.dll [541184 2009-06-25] (Marvell Semiconductor, Inc.) [Brak podpisu cyfrowego] HKLM\...\Print\Monitors\HP Standard TCP/IP Port: C:\Windows\system32\HpTcpMon.dll [331264 2009-09-16] (Hewlett Packard) [Brak podpisu cyfrowego] HKLM\...\Print\Monitors\HP1100LM: C:\Windows\system32\HP1100LM.DLL [288768 2012-08-31] (Microsoft Windows Hardware Compatibility Publisher -> ) HKLM\Software\...\AppCompatFlags\Custom\H3Blade.exe: [{62a24b39-0106-4990-90ea-3a09e9dda7a6}.sdb] -> HoMM III Compatibility Database HKLM\Software\...\AppCompatFlags\InstalledSDB\{62a24b39-0106-4990-90ea-3a09e9dda7a6}: [DatabasePath] -> C:\Windows\AppPatch\CustomSDB\{62a24b39-0106-4990-90ea-3a09e9dda7a6}.sdb [2024-09-28] HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\138.0.7204.184\Installer\chrmstp.exe [6297240 2025-08-01] (Google LLC -> Google LLC) ==================== Zaplanowane zadania (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {790242AD-569C-4759-9020-522B1A6B24E5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1580992 2025-03-21] (Adobe Inc. -> Adobe Inc.) Task: {4978A54E-4CFD-4FE8-8F78-2568792E559B} - System32\Tasks\BatteryCareAuto => C:\Program Files\BatteryCare\BatteryCare.exe [815336 2021-07-12] (Filipe Lourenço -> Filipe Lourenço) Task: {6CEC3623-4D2C-4CEE-AC86-D3C8F9FDECC4} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) Task: {4BE1EA3C-71D8-4DC5-8C98-34EBC6898A0D} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) Task: {BBE88855-1678-4BA0-BB67-AF3447117532} - System32\Tasks\COMODO\COMODO Maintenance {947247B5-026A-4437-9371-770782BE839D} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) Task: {33F3FE9B-93E2-42B1-965F-933F04B779C1} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) Task: {5528E575-30C2-43C4-ABD8-2C70F8627C45} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) Task: {819AE283-6BDC-4D08-A6F8-97218621D170} - System32\Tasks\COMODO\COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) Task: {5EDD64A1-A891-4DD0-B045-A351CF3094EB} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) Task: {ED7A51D5-AC47-4A63-91A6-7DEF879CE9C7} - System32\Tasks\FxSound\Update => C:\Program -> Files\FxSound LLC\FxSound\updater.exe /silent Task: {7B058D8D-1D06-4FC7-A4D4-9117061829F1} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem140.0.7273.0{87D96129-6477-4989-B79C-6ECF4E7F2A3E} => C:\Program Files (x86)\Google\GoogleUpdater\140.0.7273.0\updater.exe [6836832 2025-07-02] (Google LLC -> Google LLC) Task: {1E00A80D-F0FD-4DFB-B56B-CF60CC5BFEEC} - System32\Tasks\HPLJCustParticipation => C:\Program Files (x86)\HP\HPLJUT\HPLJUTSCH.exe [89840 2014-10-19] (Hewlett-Packard Company -> Hewlett Packard) Task: {90D1A821-0250-4B38-BF24-E7ECA06EC127} - System32\Tasks\Launch Adobe CCXProcess => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [194048 2025-02-04] (Adobe Inc. -> Adobe Inc.) Task: {BF6A8AAC-B465-4761-B6ED-2DFF0F437EA1} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28610600 2025-07-02] (Microsoft Corporation -> Microsoft Corporation) Task: {F250B61A-9343-4687-A150-03066D7C2F8A} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28610600 2025-07-02] (Microsoft Corporation -> Microsoft Corporation) Task: {95FF2165-45FB-4A20-BADD-62FDE8D9C4A2} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [313288 2025-07-14] (Microsoft Corporation -> Microsoft Corporation) Task: {8838CA56-6185-4401-B251-7BAF015E75B1} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [313288 2025-07-14] (Microsoft Corporation -> Microsoft Corporation) Task: {0DD5F5B1-6170-4284-BE43-4852D136ED7D} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [187024 2024-08-15] (Microsoft Corporation -> Microsoft Corporation) Task: {4F2024C5-E277-4A7F-A3EE-C2B5D3A2337D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-12] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {0C80CF41-F7AB-42B6-A36E-A30DE7CAA932} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-12] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {E53032A2-FB22-409C-AB0F-73B04F969FEE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-12] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {AC7FCE28-3BDC-487F-82FA-B034B50A9DB7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-12] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {ABC6A3FC-071F-4EBF-8005-68C2CB10738D} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-420650328-1192798164-3798175123-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [694912 2025-07-27] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (dane wartości zawierają 6 znaków więcej). Task: {DAF7CD30-8F2C-4285-9C02-3BAB10B45112} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34944 2025-07-27] (Mozilla Corporation -> Mozilla Foundation) Task: {A23E4963-3746-4EEE-9B83-1A3B073C7C0B} - System32\Tasks\StartAllBack Update => C:\Program Files\StartAllBack\UpdateCheck.exe [49888 2025-06-11] (IP Zinukhov Stanislav Igorevich -> www.startisback.com) Task: {3D78FE16-CED5-4CCF-BE90-AD8636543BDC} - System32\Tasks\update-S-1-5-21-420650328-1192798164-3798175123-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: ) Task: {8910AAD0-7D81-477D-9796-F08B3394CE93} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: ) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\update-S-1-5-21-420650328-1192798164-3798175123-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.1 Tcpip\..\Interfaces\{27f888e3-f1f8-4b92-84b4-6630ed71c01b}: [NameServer] 156.154.70.25,156.154.71.25 Tcpip\..\Interfaces\{27f888e3-f1f8-4b92-84b4-6630ed71c01b}: [DhcpNameServer] 192.168.1.1 0.0.0.0 Tcpip\..\Interfaces\{7c8bdef4-5d87-437b-b5b8-9b70de1f0522}: [DhcpNameServer] 192.168.0.1 192.168.0.1 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}: [NameServer] 156.154.70.25,156.154.71.25 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}: [DhcpNameServer] 192.168.0.1 192.168.0.1 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\24169647: [NameServer] 156.154.70.25,156.154.71.25 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\24169647: [DhcpNameServer] 192.168.3.71 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\75C414E413D2339353148403: [NameServer] 156.154.70.25,156.154.71.25 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\75C414E413D2339353148403: [DhcpNameServer] 192.168.8.1 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\8456166756E6023427563747F55374F5548545: [NameServer] 156.154.70.25,156.154.71.25 Tcpip\..\Interfaces\{859314cd-36f1-4c44-96f8-b15225bb9b64}\8456166756E6023427563747F55374F5548545: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox FF DefaultProfile: i3vlxujl.default-release-1 -> 308046B0AF4A39CB FF ProfilePath: C:\Users\bait1\AppData\Roaming\Mozilla\Firefox\Profiles\i3vlxujl.default-release-1 [2026-07-15] FF Extension: (Video DownloadHelper) - C:\Users\bait1\AppData\Roaming\Mozilla\Firefox\Profiles\i3vlxujl.default-release-1\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2025-06-05] FF Extension: (Adblock Plus - darmowy adblocker) - C:\Users\bait1\AppData\Roaming\Mozilla\Firefox\Profiles\i3vlxujl.default-release-1\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2025-07-17] FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-08-01] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN) FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2025-07-15] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-08-15] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-08-01] (Microsoft Corporation -> Microsoft Corporation) Edge: ======= Edge Profile: C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default [2026-07-15] Edge Extension: (Tłumacz Google) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2025-04-28] Edge Extension: (LastPass: Free Password Manager) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bbcinlkgjjkejfdpemiealijmmooekmp [2025-04-28] Edge Extension: (Pobieranie filmów z Telegramu) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bbjnnajeogkkmljfdoengamaiomfhbch [2025-04-28] Edge Extension: (Stylus) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\clngdbkpkpeebahjckkjfobafhncgmne [2025-04-28] Edge Extension: (AliExpress Wyszukaj Według Obrazu) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cpodebcggidjigndghagpkepglfbhali [2025-04-28] Edge Extension: (alerabat.com | kupony i cashback) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\dacdinoicboceafielngnmjjplncljhj [2025-05-25] Edge Extension: (MetaMask) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ejbalbakoplchlghecdalmeeeajnimhm [2025-04-28] Edge Extension: (Video Downloader Professional) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2025-04-28] Edge Extension: (uBlock) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\epcnnfbjfcgphgdmggkamkmgojdagdnn [2025-04-28] Edge Extension: (GoFullPage - Full Page Screen Capture) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2025-04-28] Edge Extension: (Dokumenty Google offline) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-28] Edge Extension: (Screen Capture) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghihpjhpgdepnohngpgfcmcijmkggpaf [2025-04-28] Edge Extension: (Adblock Plus - darmowy adblocker) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmgoamodcdcjnbaobigkjelfplakmdhh [2025-04-28] Edge Extension: (Edge relevant text changes) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-08-01] Edge Extension: (Video DownloadHelper) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmkaglaafmhbcpleggkmaliipiilhldn [2025-04-28] Edge Extension: (Usługa zwrotu gotówki LetyShops) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\lphicbbhfmllgmomkkhjfkpbdlncafbn [2025-04-28] Edge Extension: (Zaakceptuj wszystkie pliki cookie) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ofpnikijgfhlmmjlpkfaifhhdonchhoi [2025-04-28] Edge Extension: (Slush — A Sui wallet) - C:\Users\bait1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\opcgpfmipidbgpenhmajoajpbobppdil [2025-04-28] Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default [2026-07-15] CHR DownloadDir: D:\Pobrane CHR Notifications: Default -> hxxps://android.com.pl; hxxps://app.zoom.us; hxxps://badoo.com; hxxps://bitcoinwisdom.io; hxxps://cointelegraph.com; hxxps://ebok.pgnig.pl; hxxps://gcx.aliexpress.com; hxxps://laneperfumy-pl-02.salesmanagopush.com; hxxps://pl.tradingview.com; hxxps://platform.trans.eu; hxxps://rankomat.pl; hxxps://system.trans.eu; hxxps://tinder.com; hxxps://twitter.com; hxxps://www.cargo.pl; hxxps://www.just-whisky.co.uk; hxxps://www.oferteo.pl; hxxps://www.webhostingtalk.pl; hxxps://www.wosp.org.pl; hxxps://www.wyjatkowyprezent.pl CHR HomePage: Default -> hxxp://google.pl/ CHR Extension: (Tłumacz Google) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2024-09-15] CHR Extension: (Pobieranie filmów z Telegramu) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjnnajeogkkmljfdoengamaiomfhbch [2025-01-16] CHR Extension: (Adblock Plus - darmowy adblocker) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2026-07-15] CHR Extension: (Stylus) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\clngdbkpkpeebahjckkjfobafhncgmne [2025-07-10] CHR Extension: (AliExpress Wyszukaj Według Obrazu) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpodebcggidjigndghagpkepglfbhali [2024-08-01] CHR Extension: (alerabat.com | kupony i cashback) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\dacdinoicboceafielngnmjjplncljhj [2025-06-07] CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-07-15] CHR Extension: (Video Downloader Professional) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2024-08-01] CHR Extension: (uBlock) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\epcnnfbjfcgphgdmggkamkmgojdagdnn [2025-03-24] CHR Extension: (GoFullPage - Full Page Screen Capture) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2025-03-24] CHR Extension: (Screen Capture) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghihpjhpgdepnohngpgfcmcijmkggpaf [2024-11-08] CHR Extension: (LastPass: Free Password Manager) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2025-07-22] CHR Extension: (Konwertuj głos na tekst) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\jdcdafhjjjfnkoeilnjmnadadaoehgdc [2024-08-01] CHR Extension: (Video DownloadHelper) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2025-05-30] CHR Extension: (Usługa zwrotu gotówki LetyShops) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lphicbbhfmllgmomkkhjfkpbdlncafbn [2024-12-18] CHR Extension: (MetaMask) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2026-07-15] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-08-01] CHR Extension: (Zaakceptuj wszystkie pliki cookie) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofpnikijgfhlmmjlpkfaifhhdonchhoi [2025-02-27] CHR Extension: (Slush — A Sui wallet) - C:\Users\bait1\AppData\Local\Google\Chrome\User Data\Default\Extensions\opcgpfmipidbgpenhmajoajpbobppdil [2026-07-15] CHR Profile: C:\Users\bait1\AppData\Local\Google\Chrome\User Data\System Profile [2024-08-01] CHR HKU\S-1-5-21-420650328-1192798164-3798175123-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] ==================== Usługi (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174520 2025-03-21] (Adobe Inc. -> Adobe Inc.) R2 CCDCHUService; C:\Windows\System32\DriverStore\FileRepository\acpibridge1.inf_amd64_6172acb3e289f51f\DCHUService.exe [84528 2024-08-09] (Microsoft Windows Hardware Compatibility Publisher -> ) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14045704 2025-07-02] (Microsoft Corporation -> Microsoft Corporation) R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [11334144 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R2 CmdAgentProt; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [11334144 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2675504 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R2 EaseUS Agent; C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe [45064 2023-11-29] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) R2 EaseUS UPDATE SERVICE; C:\Program Files (x86)\EaseUS\ENS\ensserver.exe [27784 2023-01-04] (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Brak podpisu cyfrowego] R2 HKClipSvc; C:\Program Files (x86)\ControlCenter\Driver\x64\HKClipSvc.exe [431696 2019-03-06] (Microsoft Windows Hardware Compatibility Publisher -> Insyde Software Corp.) R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [176640 2020-02-11] (HP Inc.) [Brak podpisu cyfrowego] R2 HPSIService; C:\Windows\system32\HPSIsvc.exe [126880 2012-09-27] (Hewlett-Packard Company -> HP) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11529224 2026-07-15] (Malwarebytes Inc -> Malwarebytes) S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [4291576 2026-07-15] (Malwarebytes Inc -> Malwarebytes) R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpDefenderCoreService.exe [1926976 2025-03-12] (Microsoft Windows Publisher -> Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvcvi.inf_amd64_75c4fbdef32fe73d\Display.NvContainer\NVDisplay.Container.exe [1275008 2024-08-13] (NVIDIA Corporation -> NVIDIA Corporation) S3 OVRLibraryService; C:\Program Files\Oculus\Support\oculus-librarian\OVRLibraryService.exe [58552 2025-06-25] (Meta Platforms, Inc. -> Facebook Technologies, LLC) R2 OVRService; C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe [435384 2025-06-25] (Meta Platforms, Inc. -> Facebook Technologies, LLC) S3 ProtonVPN Service; C:\Program Files\Proton\VPN\v3.3.2\ProtonVPNService.exe [474848 2024-08-12] (Proton AG -> ProtonVPN) S3 ProtonVPN WireGuard; C:\Program Files\Proton\VPN\v3.3.2\ProtonVPN.WireGuardService.exe [474336 2024-08-12] (Proton AG -> ProtonVPN) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [917472 2025-06-11] (Microsoft Windows Publisher -> Microsoft Corporation) R3 VssEaseusProvider; C:\WINDOWS\system32\dllhost.exe /Processid:{D9BF8E41-4F8F-46AC-B917-1F70DAFA632D} [50504 2024-12-13] (Microsoft Windows -> Microsoft Corporation) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\NisSrv.exe [4352456 2025-03-12] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MsMpEng.exe [270056 2025-03-12] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Sterowniki (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 AcpiBridge; C:\Windows\System32\drivers\AcpiBridge.sys [64032 2024-05-30] (Insyde Software Corp. -> Insyde Software Corporation) R3 AirplaneModeHid; C:\Windows\System32\drivers\AirplaneModeHid.sys [66064 2024-05-24] (Insyde Software Corp. -> Insyde Software Corporation) R3 amdwddmg; C:\Windows\System32\DriverStore\FileRepository\u0405470.inf_amd64_2e71ce0e27c179e1\B404884\amdkmdag.sys [106382520 2024-08-01] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) R3 ANXUcmCxCD; C:\Windows\System32\drivers\ANXUcmCxCD.sys [101592 2024-08-01] (Analogix Semiconductor, Inc. -> ) S0 cmdboot; C:\Windows\System32\DRIVERS\cmdboot.sys [17576 2019-10-22] (Microsoft Windows Early Launch Anti-malware Publisher -> COMODO) R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [38880 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [844000 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R1 cmdhlp; C:\Windows\system32\DRIVERS\cmdhlp.sys [47104 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R0 EUBAKUP; C:\Windows\System32\drivers\eubakup.sys [75848 2023-01-04] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd) R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [55352 2023-11-08] (Microsoft Windows Hardware Compatibility Publisher -> ) R1 EUDSKACS; C:\Windows\system32\drivers\eudskacs.sys [24152 2023-01-04] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd) R1 EUFDDISK; C:\Windows\system32\drivers\EuFdDisk.sys [565456 2023-08-07] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd) R3 euimgprt; C:\Windows\System32\DRIVERS\euimgprt.sys [29248 2023-08-29] (CHENGDU YIWO Tech Development Co., Ltd. -> ) R0 EUSSRDVR; C:\Windows\System32\drivers\EUSSRDVR.sys [66768 2023-11-21] (Microsoft Windows Hardware Compatibility Publisher -> ) R3 FXVAD; C:\Windows\system32\drivers\fxvad.sys [326656 2022-05-30] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) R3 HKKbdFltr; C:\Windows\system32\DRIVERS\HKKbdFltr.sys [40320 2019-03-06] (WDKTestCert stone.cheng,131963286194994418 -> Insyde Software Corp.) R3 HKMouFltr; C:\Windows\system32\DRIVERS\HKMouFltr.sys [38552 2019-03-06] (WDKTestCert stone.cheng,131963286194994418 -> Insyde Software Corp.) R1 inspect; C:\Windows\system32\DRIVERS\inspect.sys [130256 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [278944 2025-03-12] (Microsoft Windows -> Microsoft Corporation) R2 mbamchameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [235624 2026-07-15] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [22120 2026-07-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [246376 2026-07-15] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-09-26] (Microsoft Windows Hardware Compatibility Publisher -> Marvell Semiconductor, Inc.) R3 nvpcf; C:\Windows\System32\drivers\nvpcf.sys [236696 2024-08-01] (NVIDIA Corporation -> NVIDIA Corporation) R3 oculusvad_oculusvad; C:\Windows\System32\drivers\oculusvad.sys [73400 2024-08-09] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) R3 Oculus_ViGEmBus; C:\Windows\System32\drivers\Oculus_ViGEmBus.sys [32856 2024-08-09] (Oculus VR, LLC -> Facebook Inc.) S3 ProtonVPNCallout; C:\Program Files\Proton\VPN\v3.3.2\Resources\ProtonVPN.CalloutDriver.sys [37768 2024-07-30] (Proton AG -> Proton Technologies AG) R3 rt25cx21; C:\Windows\System32\DriverStore\FileRepository\rt25cx21x64.inf_amd64_f1c3cf27b6967f47\rt25cx21x64.sys [831320 2024-08-13] (Realtek Semiconductor Corp. -> Realtek) S3 Ser2pl; C:\Windows\system32\DRIVERS\ser2pl64.sys [262160 2019-08-11] (WDKTestCert charles-yeh,132058328970830801 -> Prolific Technology Inc.) S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [20016 2025-03-12] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [601520 2025-03-12] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [100768 2025-03-12] (Microsoft Windows -> Microsoft Corporation) R3 WinRing0_1_2_0; C:\Program Files\BatteryCare\WinRing0x64.sys [14544 2014-03-22] (Noriyuki MIYAZAKI -> OpenLibSys.org) S3 WSDPrintDevice; C:\Windows\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2024-12-13] (Microsoft Windows -> Microsoft Corporation) S3 WSDScan; C:\Windows\System32\DriverStore\FileRepository\sti.inf_amd64_971c769b103df369\WSDScan.sys [61440 2024-12-13] (Microsoft Windows -> Microsoft Corporation) ==================== SvcHost (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2026-07-15 17:45 - 2026-07-15 17:45 - 000037094 _____ C:\Users\bait1\Desktop\FRST.txt 2026-07-15 17:19 - 2026-07-15 17:45 - 000000000 ____D C:\FRST 2026-07-15 16:24 - 2026-07-15 16:24 - 000000712 _____ C:\Users\bait1\Desktop\Pobrane — skrót .lnk 2026-07-15 16:22 - 2026-07-15 16:22 - 000783460 _____ C:\Windows\system32\perfh015.dat 2026-07-15 16:22 - 2026-07-15 16:22 - 000160274 _____ C:\Windows\system32\perfc015.dat 2026-07-15 15:06 - 2026-07-15 17:18 - 000000000 ____D C:\AdwCleaner 2026-07-15 15:04 - 2026-07-15 15:04 - 000000000 ____D C:\Users\bait1\Desktop\Sobański Damian - Człowiek W Poszukiwaniu Siebie 2026-07-15 15:04 - 2026-05-12 14:34 - 000000319 _____ C:\Users\bait1\Desktop\Bari.txt 2026-07-15 15:04 - 2026-01-14 00:09 - 000000335 _____ C:\Users\bait1\Desktop\Rabaty i kontakty.txt 2026-07-15 15:04 - 2025-10-05 07:23 - 000389898 _____ C:\Users\bait1\Desktop\Bilety_3470095_sunrise.pdf 2026-07-15 15:02 - 2026-07-15 15:02 - 000000728 _____ C:\Users\bait1\Desktop\Angielski — skrót .lnk 2026-07-15 14:57 - 2026-07-15 14:57 - 000000949 _____ C:\Users\bait1\Desktop\Czynsz.xlsx — skrót .lnk 2026-07-15 14:57 - 2026-07-15 14:57 - 000000922 _____ C:\Users\bait1\Desktop\Trading Champions — skrót .lnk 2026-07-15 14:57 - 2026-07-15 14:57 - 000000915 _____ C:\Users\bait1\Desktop\Przelewy Revolut — skrót .lnk 2026-07-15 14:57 - 2026-07-15 14:57 - 000000874 _____ C:\Users\bait1\Desktop\Tor Browser — skrót .lnk 2026-07-15 14:57 - 2026-07-15 14:57 - 000000867 _____ C:\Users\bait1\Desktop\Trans - FV — skrót .lnk 2026-07-15 14:57 - 2026-07-15 14:57 - 000000867 _____ C:\Users\bait1\Desktop\KRYPTO ALL — skrót .lnk 2026-07-15 14:57 - 2026-07-15 14:57 - 000000858 _____ C:\Users\bait1\Desktop\Zdrowotne — skrót .lnk 2026-07-15 14:57 - 2026-07-15 14:57 - 000000851 _____ C:\Users\bait1\Desktop\Leczenie — skrót .lnk 2026-07-15 14:57 - 2026-07-15 14:57 - 000000835 _____ C:\Users\bait1\Desktop\Sprawy — skrót .lnk 2026-07-15 14:57 - 2026-07-15 14:57 - 000000826 _____ C:\Users\bait1\Desktop\Prawo — skrót .lnk 2026-07-15 14:57 - 2026-07-15 14:57 - 000000826 _____ C:\Users\bait1\Desktop\OTHER — skrót .lnk 2026-07-15 14:57 - 2026-07-15 14:57 - 000000826 _____ C:\Users\bait1\Desktop\ebook — skrót .lnk 2026-07-15 14:57 - 2026-07-15 14:57 - 000000819 _____ C:\Users\bait1\Desktop\Sube — skrót .lnk 2026-07-15 14:57 - 2026-07-15 14:57 - 000000810 _____ C:\Users\bait1\Desktop\Dom — skrót .lnk 2026-07-15 14:57 - 2026-07-15 14:57 - 000000803 _____ C:\Users\bait1\Desktop\US — skrót .lnk 2026-07-15 14:55 - 2026-07-15 14:55 - 000001464 _____ C:\adwcleaner.txt 2026-07-15 14:54 - 2026-07-15 05:40 - 009630992 _____ (Malwarebytes) C:\Users\bait1\Desktop\adwcleaner.exe 2026-07-15 14:27 - 2026-07-15 14:28 - 000000869 _____ C:\scan.txt 2026-07-15 14:06 - 2026-07-15 14:06 - 000000008 _____ C:\ProgramData\ntuser.pol 2026-07-15 14:02 - 2026-07-15 14:04 - 000011130 _____ C:\fixlog.txt 2026-07-15 14:00 - 2026-07-15 04:47 - 002451968 _____ (Farbar) C:\Users\bait1\Desktop\FRST64.exe 2026-07-15 14:00 - 2026-07-15 04:45 - 000004082 _____ C:\Users\bait1\Desktop\New Text Document.txt 2026-07-15 13:42 - 2026-07-15 17:44 - 000000000 ____D C:\Users\bait1\AppData\Local\Malwarebytes 2026-07-15 13:42 - 2026-07-15 13:42 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk 2026-07-15 13:42 - 2026-07-15 13:42 - 000002081 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2026-07-15 13:42 - 2026-07-15 13:42 - 000000000 ____D C:\ProgramData\Malwarebytes 2026-07-15 13:42 - 2026-07-15 13:42 - 000000000 ____D C:\Program Files\Malwarebytes 2026-07-15 13:41 - 2026-07-15 13:14 - 432375984 _____ (Malwarebytes) C:\Users\bait1\Desktop\mb5-setup-consumer-5.6.2.268-160.0.5677-1.0.111932.exe 2026-07-15 13:40 - 2026-07-15 17:44 - 000012288 ___SH C:\DumpStack.log.tmp ==================== Jeden miesiąc (zmodyfikowane) ================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2026-07-15 17:45 - 2025-02-04 17:18 - 000000000 ____D C:\Users\bait1\AppData\Roaming\bluestacks-services 2026-07-15 17:45 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\Registration 2026-07-15 17:44 - 2025-07-10 12:27 - 000000000 ____D C:\Windows\CbsTemp 2026-07-15 17:44 - 2024-12-13 17:01 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2026-07-15 17:44 - 2024-11-19 09:59 - 000000000 ____D C:\Users\bait1\AppData\Roaming\Oculus Remote Desktop 2026-07-15 17:44 - 2024-08-09 10:25 - 000000000 ____D C:\Users\bait1\AppData\Local\Oculus 2026-07-15 17:44 - 2024-08-01 16:16 - 000000000 ____D C:\ProgramData\NVIDIA 2026-07-15 17:44 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SystemTemp 2026-07-15 17:44 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\AppReadiness 2026-07-15 17:44 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2026-07-15 17:43 - 2024-08-22 16:59 - 001474832 _____ C:\Windows\system32\Drivers\sfi.dat 2026-07-15 17:43 - 2024-04-01 09:21 - 000524288 _____ C:\Windows\system32\config\BBI 2026-07-15 16:57 - 2024-08-01 16:46 - 000000000 ____D C:\Users\bait1\AppData\Local\D3DSCache 2026-07-15 16:24 - 2024-04-01 09:24 - 000000000 ____D C:\Windows\INF 2026-07-15 16:22 - 2024-12-13 17:06 - 001769838 _____ C:\Windows\system32\PerfStringBackup.INI 2026-07-15 16:22 - 2024-08-01 17:08 - 000000000 ____D C:\Users\bait1\AppData\Roaming\vlc 2026-07-15 16:19 - 2024-08-01 17:30 - 000000000 ___RD C:\Users\bait1\Desktop\Programy 2026-07-15 16:14 - 2024-12-13 16:56 - 000001575 _____ C:\Windows\system32\config\VSMIDK 2026-07-15 14:54 - 2024-12-10 23:53 - 000000000 ____D C:\Users\Public\Documents\TaxMachine 2026-07-15 14:53 - 2024-08-01 17:12 - 000000000 ____D C:\ProgramData\Adobe 2026-07-15 14:53 - 2024-08-01 17:10 - 000000000 ____D C:\Program Files\Common Files\Adobe 2026-07-15 14:53 - 2024-08-01 17:10 - 000000000 ____D C:\Program Files\Adobe 2026-07-15 14:53 - 2024-08-01 17:07 - 000000000 ____D C:\Users\bait1\AppData\Local\Adobe 2026-07-15 14:51 - 2025-02-04 17:14 - 000000000 ____D C:\Users\bait1\AppData\Local\Bluestacks 2026-07-15 14:31 - 2024-04-01 09:26 - 000028672 _____ C:\Windows\system32\config\BCD-Template 2026-07-15 14:26 - 2024-12-13 17:01 - 009990964 _____ C:\dism.txt 2026-07-15 14:07 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps 2026-07-15 14:05 - 2024-09-02 10:17 - 000069104 _____ C:\Windows\system32\Drivers\fvstore.dat 2026-07-15 14:04 - 2025-06-24 19:06 - 000000000 ____D C:\Users\bait1\AppData\LocalLow\Temp 2026-07-15 14:02 - 2025-01-03 20:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Age of Wonders 4 [GOG.com] 2026-07-15 14:02 - 2022-05-07 07:24 - 000000000 ___HD C:\Windows\system32\GroupPolicy 2026-07-15 13:47 - 2024-12-13 22:07 - 000000000 ____D C:\Program Files\Killuminati 2026-07-15 13:47 - 2024-08-01 17:27 - 000000000 ____D C:\Users\bait1\AppData\Roaming\uTorrent 2026-07-15 13:42 - 2024-08-11 10:39 - 000000000 ____D C:\Users\bait1\AppData\Local\Sentry 2026-07-15 13:42 - 2024-08-01 16:46 - 000000000 ____D C:\Users\bait1\AppData\Local\Packages 2026-07-15 13:42 - 2024-08-01 16:05 - 000000000 ____D C:\ProgramData\Packages 2026-07-15 13:42 - 2024-04-01 09:26 - 000000000 ___HD C:\Windows\ELAMBKUP 2026-07-15 13:41 - 2024-12-13 16:57 - 000000000 ____D C:\Users\bait1 2026-07-15 13:41 - 2024-12-13 16:56 - 000000000 ____D C:\Windows\system32\SleepStudy 2026-07-15 13:40 - 2025-07-27 21:53 - 000000000 ____D C:\Program Files\Mozilla Firefox 2026-07-15 13:40 - 2024-08-01 17:11 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service ==================== Pliki w katalogu głównym wybranych folderów ======== 2024-08-22 16:56 - 2021-11-10 10:18 - 000451976 _____ (COMODO) C:\ProgramData\cmdres.dll 2024-08-06 23:13 - 2025-04-26 16:39 - 000000018 _____ () C:\Users\bait1\AppData\Roaming\.cache17951620050788523514.dat 2024-08-08 16:46 - 2024-08-08 16:46 - 000000017 _____ () C:\Users\bait1\AppData\Local\resmon.resmoncfg 2024-08-01 19:05 - 2024-08-01 19:05 - 000000003 _____ () C:\Users\bait1\AppData\Local\updater.log 2024-08-01 19:05 - 2024-08-01 19:05 - 000000424 _____ () C:\Users\bait1\AppData\Local\UserProducts.xml ==================== SigCheck ============================ (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) ==================== Koniec FRST.txt ========================