Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 20-09-2026
Uruchomiony przez tadek (administrator)  DESKTOP-VMMEQKJ (22-09-2026 21:15:53)
Uruchomiony z H:\Fixitpc\FRST\FRST64.exe
Załadowane profile: tadek
Platforma: Microsoft Windows 10 Pro Wersja 22H2 19045.6466 (X64) Język: Polski (Polska)
Domyślna przeglądarka: FF
Tryb startu: Normal

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\ShadowPlay\nvsphelper64.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\DefenderSessionHelper.exe
(C:\Users\tadek\AppData\Roaming\utorrent\updates\3.6.0_47162\utorrentie.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\153.0.4234.48\msedgewebview2.exe
(C:\Users\tadek\AppData\Roaming\utorrent\uTorrent.exe ->) (BitTorrent Inc -> BitTorrent Inc.) C:\Users\tadek\AppData\Roaming\utorrent\updates\3.6.0_47162\utorrentie.exe <2>
(explorer.exe ->) (BitTorrent Inc -> BitTorrent Limited) C:\Users\tadek\AppData\Roaming\utorrent\uTorrent.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\153.0.4234.48\msedgewebview2.exe <7>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <17>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe <4>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_3cae04f75ee04f42\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(services.exe ->) (Digital Wave Ltd -> Digital Wave Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_3cae04f75ee04f42\Display.NvContainer\NVDisplay.Container.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>

==================== Rejestr (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16696840 2016-09-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [VMSnap3] => C:\WINDOWS\VMSnap3.exe (Brak pliku)
HKLM\...\Run: [Domino] => C:\WINDOWS\Domino.exe (Brak pliku)
HKLM\SYSTEM\...\Terminal Server: [fDenyTSConnections] = 0 <==== UWAGA
HKU\S-1-5-21-775853094-2457260142-234843481-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [484408 2024-09-30] (AVB Disc Soft, SIA -> Disc Soft FZE LLC)
HKU\S-1-5-21-775853094-2457260142-234843481-1001\...\Run: [CCleanerBrowserAutoLaunch_D63B1C46E20DA6688FF3BD164F22318A] => C:\Program Files\CCleaner Browser\Application\CCleanerBrowser.exe [5033048 2026-09-11] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-775853094-2457260142-234843481-1001\...\Run: [Spotify] => C:\Users\tadek\AppData\Roaming\Spotify\Spotify.exe [38327680 2025-08-08] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-775853094-2457260142-234843481-1001\...\Run: [Discord] => C:\Users\tadek\AppData\Local\Discord\Update.exe [1526504 2024-09-04] (Discord Inc. -> GitHub)
HKU\S-1-5-21-775853094-2457260142-234843481-1001\...\Run: [ut] => C:\Users\tadek\AppData\Roaming\utorrent\uTorrent.exe [2071048 2024-10-07] (BitTorrent Inc -> BitTorrent Limited)
HKLM\...\Windows x64\Print Processors\Canon MP220 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPD8T.DLL [27648 2007-03-19] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MP220 series: C:\Windows\System32\CNMLM8T.DLL [259584 2008-02-06] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\PDF-XChange Lite Port Monitor: C:\WINDOWS\system32\pxcpmL.dll [915280 2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{052EB454-9F19-CB42-7875-807F79F311C4}] -> C:\Program Files\CCleaner Browser\Application\152.0.35367.42\Installer\chrmstp.exe [6383736 2026-09-21] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\153.0.8010.53\Installer\chrmstp.exe [8030872 2026-09-21] (Google LLC -> Google LLC)
Startup: C:\Users\tadek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2025-08-20]
ShortcutTarget: MEGAsync.lnk -> C:\Users\tadek\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited -> Mega Limited)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA

==================== Zaplanowane zadania (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {FC04A88E-FCCF-4B61-9350-E30436848366} - System32\Tasks\CCleaner Browser Heartbeat Task (Hourly) => C:\Program Files\CCleaner Browser\Application\CCleanerBrowser.exe [5033048 2026-09-11] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {27FA491B-748D-4F3E-A1F1-732A9EA91C25} - System32\Tasks\CCleaner Browser Heartbeat Task (Logon) => C:\Program Files\CCleaner Browser\Application\CCleanerBrowser.exe [5033048 2026-09-11] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {8179D38A-142A-4EDF-81D7-07F20BEC3D55} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [3480504 2025-08-14] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {792F3717-35E4-47CA-8FE9-F943EBD35343} - System32\Tasks\CCleanerBrowserProtectS-1-5-21-775853094-2457260142-234843481-1001 => C:\Program Files\CCleaner Browser\Application\CCleanerBrowserProtect.exe [2004984 2026-08-20] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {CA17570D-AF2E-412D-B8D5-2A12BC315423} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [6140640 2025-08-14] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "8ecd8ecc-48b2-4e84-880e-65904aef2c75" --version "6.39.0.11548" --silent
Task: {E3678888-5B47-4F5D-B433-DD95591086B3} - System32\Tasks\CCleanerSkipUAC - tadek => C:\Program Files\CCleaner\CCleaner.exe [39822560 2025-08-14] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {0E8FA4C3-148D-4E30-BE93-50231270E923} - System32\Tasks\CCleanerUpdateTaskMachineCore => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208688 2024-11-12] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.)
Task: {7D53AF95-08FC-4FC2-B61A-4E059CE00FD2} - System32\Tasks\CCleanerUpdateTaskMachineUA => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208688 2024-11-12] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.)
Task: {941595C3-1072-44A6-A3D8-09778B49DC3E} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{7B0A8197-4647-4032-8F27-7C26930AD224} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [9512088 2026-07-05] (Google LLC -> Google LLC)
Task: {B486393E-BF41-4A0E-95B2-0D8761E944FC} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
Task: {E98715C5-8E72-4F50-A1AB-92DB2C76DBD6} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
Task: {82E091FE-55CF-4C3D-9789-098F06C2E643} - System32\Tasks\klcp_update => F:\K-Lite Codec Pack\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2118144 2024-12-18] () [Brak podpisu cyfrowego]
Task: {B4DCCC76-B9A3-48FE-BE9D-36CF48D12A74} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-775853094-2457260142-234843481-1001 => C:\Users\tadek\AppData\Local\MEGAsync\MEGAupdater.exe [1815776 2026-04-16] (Mega Limited -> )
Task: {A20667EC-E8B3-43A2-B03A-D44CB1B080AA} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1626328 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {602CD258-70BD-4134-BEEB-77C375D4C723} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => F:\MSOffice\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {2F6C94FA-6409-4BCC-94A9-59156ED8D56C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => F:\MSOffice\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {5F3FA009-174D-44A1-80AE-AA2D3E358C3D} - System32\Tasks\Microsoft\Windows\termsrv\RemoteFX\RemoteFXvGPUDisableTask => C:\WINDOWS\System32\RemoteFXvGPUDisablement.exe [12288 2020-07-27] (Microsoft Corporation) [Brak podpisu cyfrowego]
Task: {B55429E2-7D3F-48ED-B996-9BEC69BA4C84} - System32\Tasks\Microsoft\Windows\termsrv\RemoteFX\RemoteFXWarningTask => C:\WINDOWS\System32\RemoteFXvGPUDisablement.exe [12288 2020-07-27] (Microsoft Corporation) [Brak podpisu cyfrowego]
Task: {F16E6033-108A-48AF-B933-E1D7054AD62A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {ABE32E48-C793-45AA-A101-C215555007C5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8138F6D9-3A01-46E9-BF59-6C13843E00F3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0998A218-88BF-4603-BD44-DE6725848CF6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CFB9310F-6483-42A2-8E38-951CBB184E0A} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [44160 2026-09-16] (Mozilla Corporation -> Mozilla Foundation)
Task: {964BF9D0-F256-43CC-A093-5ED6E5CE3FDF} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3275808 2025-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7B50E364-4459-4E6B-8CC2-B70BF04A3C2C} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1732701501 => C:\Users\tadek\AppData\Local\Programs\Opera GX\launcher.exe  -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\tadek\AppData\Local\Programs\Opera GX\assistant" $(Arg0)
Task: {28AE3DE7-871F-444C-9539-62D46ACE00CB} - System32\Tasks\Opera GX scheduled Autoupdate 1731323434 => C:\Users\tadek\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe  --scheduledtask --bypasslauncher $(Arg0) (Brak pliku)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)

Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{d29d895d-68bd-46ec-9e0e-90078f41baf8}: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: od2jiw68.default-release -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\tadek\AppData\Roaming\Mozilla\Firefox\Profiles\4ej5f49q.default [2024-11-10]
FF ProfilePath: C:\Users\tadek\AppData\Roaming\Mozilla\Firefox\Profiles\od2jiw68.default-release [2026-09-22]
FF NetworkProxy: Mozilla\Firefox\Profiles\od2jiw68.default-release -> type", 0
FF Notifications: Mozilla\Firefox\Profiles\od2jiw68.default-release -> hxxps://subtitlecat.com; hxxps://cinemamovies.pl; hxxps://boerse.to; hxxps://radiobigbbs.ovh; hxxps://zrzutka.pl; hxxps://da67oranaffc739kibgg.lbzt-defender.pro; hxxps://dacshqinaffc73aaqjs0.springprivacygo.it.com; hxxps://dad1te2naffc73agpi1g.pointcarego.it.com; hxxps://dajgvhqnaffc73a2lerg.skydock.it.com; hxxps://daktnianaffc73c0dl20.skydock.it.com
FF Extension: (Bloker reklam AdGuard) - C:\Users\tadek\AppData\Roaming\Mozilla\Firefox\Profiles\od2jiw68.default-release\Extensions\adguardadblocker@adguard.com.xpi [2026-08-27]
FF Extension: (New Tab) - C:\Users\tadek\AppData\Roaming\Mozilla\Firefox\Profiles\od2jiw68.default-release\Extensions\newtab@mozilla.org.xpi [2026-09-20]
FF Extension: (SoundFixer) - C:\Users\tadek\AppData\Roaming\Mozilla\Firefox\Profiles\od2jiw68.default-release\Extensions\soundfixer@unrelenting.technology.xpi [2025-03-13]
FF Extension: (Alternate Player for Twitch.tv) - C:\Users\tadek\AppData\Roaming\Mozilla\Firefox\Profiles\od2jiw68.default-release\Extensions\twitch5@coolcmd.xpi [2026-06-30]
FF Extension: (Video DownloadHelper) - C:\Users\tadek\AppData\Roaming\Mozilla\Firefox\Profiles\od2jiw68.default-release\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2025-06-05]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> F:\MSOffice\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> G:\PDF-XChange Editor\PDF Editor\npPDFXEditPlugin.x64.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> G:\PDF-XChange Editor\PDF Editor\npPDFXEditPlugin.x64.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> G:\PDF-XChange Editor\PDF Editor\npPDFXEditPlugin.x64.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)
FF Plugin: @videolan.org/vlc,version=3.0.21 -> F:\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-04-14] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> G:\PDF-XChange Editor\PDF Editor\npPDFXEditPlugin.x86.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> G:\PDF-XChange Editor\PDF Editor\npPDFXEditPlugin.x86.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> G:\PDF-XChange Editor\PDF Editor\npPDFXEditPlugin.x86.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=3 -> C:\Program Files (x86)\CCleaner Browser\Update\1.8.1691.6\npCCleanerBrowserUpdate3.dll [2024-11-12] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.)
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=9 -> C:\Program Files (x86)\CCleaner Browser\Update\1.8.1691.6\npCCleanerBrowserUpdate3.dll [2024-11-12] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.)
FF Plugin HKU\S-1-5-21-775853094-2457260142-234843481-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> G:\PDF-XChange Editor\PDF Editor\npPDFXEditPlugin.x64.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)
FF Plugin HKU\S-1-5-21-775853094-2457260142-234843481-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> G:\PDF-XChange Editor\PDF Editor\npPDFXEditPlugin.x64.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)
FF Plugin HKU\S-1-5-21-775853094-2457260142-234843481-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> G:\PDF-XChange Editor\PDF Editor\npPDFXEditPlugin.x64.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)

Edge: 
=======
Edge Profile: C:\Users\tadek\AppData\Local\Microsoft\Edge\User Data\Default [2024-12-28]
Edge Extension: (Dokumenty Google offline) - C:\Users\tadek\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-11-11]
Edge Extension: (Edge relevant text changes) - C:\Users\tadek\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-11-11]

Chrome: 
=======
CHR Profile: C:\Users\tadek\AppData\Local\Google\Chrome\User Data\Default [2026-08-26]
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR DefaultSearchURL: Default -> hxxps://pl.search.yahoo.com/search?fr=mcafee&type=E210PL91105G0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR Extension: (MultiPassword — Password manager) - C:\Users\tadek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnlhokffphohmfcddnibpohmkdfafdli [2026-02-06]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\tadek\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2026-02-06]
CHR Extension: (Dokumenty Google offline) - C:\Users\tadek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-06-26]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\tadek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-11-10]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKU\S-1-5-21-775853094-2457260142-234843481-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [cnlhokffphohmfcddnibpohmkdfafdli]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]

Opera: 
=======
OPR DefaultProfile: Default

==================== Usługi (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S2 ccleaner; C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208688 2024-11-12] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.)
S3 CCleanerBrowserElevationService; C:\Program Files\CCleaner Browser\Application\152.0.35367.42\elevation_service.exe [4250560 2026-09-11] (Gen Digital Inc. -> Gen Digital Inc.)
S3 ccleanerm; C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208688 2024-11-12] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1080544 2025-08-14] (Gen Digital Inc. -> Gen Digital Inc.)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [387944 2016-05-24] (Digital Wave Ltd -> Digital Wave Ltd.) [Brak podpisu cyfrowego]
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4938808 2024-09-30] (AVB Disc Soft, SIA -> Disc Soft FZE LLC)
S3 Diskeeper; C:\Program Files\Condusiv Technologies\Diskeeper\DKService.exe [3173568 2018-06-07] (CONDUSIV TECHNOLOGIES -> Condusiv Technologies)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [460488 2024-04-03] (Canon Inc. -> )
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpDefenderCoreService.exe [2307776 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_3cae04f75ee04f42\Display.NvContainer\NVDisplay.Container.exe [1275560 2025-04-14] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [803064 2025-10-15] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [10752 2024-11-20] () [Brak podpisu cyfrowego]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\NisSrv.exe [5311776 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe [291360 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Sterowniki (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [Brak podpisu cyfrowego]
R0 DKDFM; C:\WINDOWS\System32\drivers\DKDFM.sys [57512 2018-01-18] (CONDUSIV TECHNOLOGIES -> Condusiv Technologies)
S3 DKRtWrt; \??\C:\Windows\system32\drivers\DKRtWrt.sys [48792 2016-01-28] (CONDUSIV TECHNOLOGIES -> )
R0 DKTLFSMF; C:\WINDOWS\System32\drivers\DKTLFSMF.sys [135872 2017-11-02] (CONDUSIV TECHNOLOGIES -> Condusiv Technologies)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2024-11-11] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [63696 2024-11-11] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R1 ISODrive; \??\F:\UltraISO.Premium.v9.5.3.2901.Incl.Keygen-MESMERiZE\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> )
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [83008 2026-09-03] (Microsoft Windows -> Microsoft Corporation)
R3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [12434304 2026-01-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
R1 tcefs; \??\C:\Windows\system32\drivers\tcefs.sys [26776 2015-08-18] (CONDUSIV TECHNOLOGIES -> )
R0 tcesd; C:\WINDOWS\System32\drivers\tcesd.sys [238280 2017-09-29] (CONDUSIV TECHNOLOGIES -> Condusiv Technologies Corporation)
S3 vvftav303; C:\WINDOWS\system32\drivers\vvftav303.sys [308096 2007-06-23] (Microsoft Windows Hardware Compatibility Publisher -> Vimicro Corporation)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51264 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-09-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [664592 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [137240 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
S3 ZSMC0303; C:\WINDOWS\System32\Drivers\usbVM303.sys [1494656 2007-03-25] (Microsoft Windows Hardware Compatibility Publisher -> Vimicro Corporation)
S2 AODDriver4.3; \??\G:\Asrock 970M Pro3 instal\ATI.ACE\Fuel\amd64\AODDriver2.sys (Brak pliku)

==================== SvcHost (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc (utworzone) (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2026-09-22 21:04 - 2026-09-22 21:16 - 000000000 ____D C:\FRST
2026-09-22 19:28 - 2026-09-22 19:29 - 000000000 ____D C:\ProgramData\mks_vir
2026-09-22 19:28 - 2026-09-22 19:28 - 000000961 _____ C:\Users\tadek\Desktop\mks_vir skaner online.lnk
2026-09-18 00:33 - 2026-09-18 00:33 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2026-09-16 22:51 - 2026-09-22 18:59 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-09-13 18:43 - 2026-09-13 18:44 - 000000000 ____D C:\Users\tadek\Desktop\ENERGETYKA
2026-08-31 17:37 - 2026-08-31 17:37 - 000000245 _____ C:\Users\tadek\Desktop\Insignificance 1985 Napisy CDA · Crazy Juliet 14 lis 2022.url
2026-08-28 13:51 - 2026-08-28 13:51 - 000000000 _____ C:\Users\tadek\copy
2026-08-26 20:29 - 2026-08-26 20:29 - 000001172 _____ C:\Users\Public\Desktop\Free Netflix Download.lnk
2026-08-26 20:29 - 2026-08-26 20:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeGrabApp
2026-08-26 20:28 - 2026-08-26 20:29 - 000000000 ____D C:\Users\tadek\AppData\Roaming\FreeGrabApp
2026-08-24 20:28 - 2026-08-24 20:31 - 000000000 ____D C:\Users\tadek\Desktop\Video DownloadHelper

==================== Jeden miesiąc (zmodyfikowane) ==================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2026-09-22 21:18 - 2024-11-11 01:16 - 000000000 ____D C:\Users\tadek\AppData\Roaming\utorrent
2026-09-22 20:59 - 2024-11-21 00:33 - 000000000 ____D C:\Users\tadek\AppData\Roaming\avidemux
2026-09-22 20:14 - 2024-11-11 02:32 - 000000000 ____D C:\Users\tadek\AppData\Roaming\vlc
2026-09-22 19:16 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2026-09-22 19:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-09-22 19:15 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-09-22 19:07 - 2024-11-12 01:15 - 001768168 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-09-22 19:07 - 2019-12-07 17:09 - 000784384 _____ C:\WINDOWS\system32\perfh015.dat
2026-09-22 19:07 - 2019-12-07 17:09 - 000152280 _____ C:\WINDOWS\system32\perfc015.dat
2026-09-22 19:07 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2026-09-22 19:05 - 2024-11-12 01:01 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-09-22 19:02 - 2024-11-12 01:15 - 000003326 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2026-09-22 19:02 - 2024-11-11 19:07 - 000000670 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2026-09-22 19:01 - 2024-11-11 01:00 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-09-22 19:00 - 2024-11-12 01:15 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-09-22 19:00 - 2024-11-11 01:04 - 000000000 ____D C:\ProgramData\NVIDIA
2026-09-22 18:59 - 2024-11-12 01:06 - 000008192 ___SH C:\DumpStack.log.tmp
2026-09-22 18:59 - 2024-11-11 01:00 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-09-22 18:58 - 2024-11-12 01:08 - 000000000 ____D C:\Users\tadek
2026-09-22 18:58 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2026-09-22 18:43 - 2024-11-11 01:19 - 000000000 ____D C:\Users\tadek\AppData\Local\D3DSCache
2026-09-22 18:40 - 2025-01-03 11:09 - 000000000 ____D C:\Users\tadek\AppData\Local\BitTorrentHelper
2026-09-22 17:40 - 2024-11-12 01:07 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-09-21 23:04 - 2024-11-11 01:17 - 000002219 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-09-21 13:08 - 2024-11-12 12:03 - 000002305 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner Browser.lnk
2026-09-21 13:08 - 2024-11-12 12:02 - 000000000 ____D C:\Program Files\CCleaner Browser
2026-09-20 01:49 - 2024-11-12 01:15 - 000003564 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-09-20 01:49 - 2024-11-12 01:15 - 000003492 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-09-18 21:22 - 2024-11-12 18:19 - 000000000 ____D C:\Users\tadek\Desktop\FOT
2026-09-18 17:03 - 2024-11-20 20:47 - 000000000 ____D C:\Users\tadek\AppData\Roaming\GG
2026-09-18 11:04 - 2024-11-10 21:30 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-09-18 00:33 - 2026-08-22 08:48 - 000002115 _____ C:\Users\tadek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-09-18 00:33 - 2024-11-11 01:00 - 000001095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-09-16 22:52 - 2025-12-10 15:08 - 000402048 _____ (Mozilla Foundation) C:\Users\tadek\Desktop\Firefox.exe
2026-09-16 21:00 - 2025-03-24 17:16 - 000000826 _____ C:\Users\tadek\Desktop\NOWE.txt
2026-09-15 23:42 - 2024-12-31 13:51 - 000000280 _____ C:\Users\tadek\Desktop\2024 PL BluRay.txt
2026-09-13 23:12 - 2025-03-29 01:31 - 000000000 ____D C:\Users\tadek\.gstreamer-0.10
2026-09-13 23:12 - 2025-03-29 01:21 - 000000000 ____D C:\Users\tadek\AppData\Local\ChomikBox
2026-09-09 19:21 - 2024-11-12 01:17 - 000000000 ____D C:\Users\tadek\AppData\Local\CrashDumps
2026-09-09 19:18 - 2025-06-18 00:24 - 000000921 _____ C:\Users\tadek\Desktop\MediaHuman YouTube Downloader.lnk
2026-09-09 19:18 - 2025-06-12 17:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MediaHuman YouTube Downloader
2026-09-09 06:30 - 2024-11-11 12:32 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-09-09 06:22 - 2024-11-11 12:32 - 230964456 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-09-09 06:22 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-08-31 14:56 - 2025-03-13 00:54 - 000000000 ____D C:\Users\tadek\AppData\Roaming\qBittorrent
2026-08-29 01:31 - 2025-01-01 23:08 - 000000000 ____D C:\Users\tadek\AppData\Roaming\MPC-HC
2026-08-28 14:20 - 2024-12-26 13:52 - 000000000 ____D C:\Users\tadek\Desktop\PlikScalony
2026-08-26 22:40 - 2024-11-11 19:07 - 000000000 ____D C:\Program Files\CCleaner
2026-08-26 20:29 - 2024-12-22 11:26 - 000000000 ____D C:\ProgramData\FreeGrabApp

==================== Pliki w katalogu głównym wybranych folderów ========

2024-11-11 02:13 - 2024-11-11 02:13 - 000559528 _____ (Helge Klein) C:\ProgramData\SetACLx64.exe
2024-11-11 01:17 - 2024-11-11 01:17 - 000048689 _____ () C:\Program Files\chrome_installer.log
2024-11-11 04:23 - 2024-11-11 12:30 - 000017051 _____ () C:\Program Files\msedge_installer.log
2024-11-26 12:45 - 2024-11-26 12:45 - 000000017 _____ () C:\Users\tadek\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

==================== Koniec  FRST.txt ========================