Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 01-11-2026 Uruchomiony przez Rafałek (02-11-2026 14:15:22) Uruchomiony z C:\Users\Rafałek\Downloads Microsoft Windows 11 Education Insider Preview Wersja 26H2 26340.9843 (X64) (2026-08-03 17:11:26) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= (Załączenie wejścia w fixlist spowoduje jego usunięcie.) Administrator (S-1-5-21-3177584935-2586668752-2516186833-500 - Administrators - Disabled) Gość (S-1-5-21-3177584935-2586668752-2516186833-501 - Limited - Disabled) Konto domyślne (S-1-5-21-3177584935-2586668752-2516186833-503 - Limited - Disabled) Rafałek (S-1-5-21-3177584935-2586668752-2516186833-1001 - Administrators - Enabled) => C:\Users\Rafałek WDAGUtilityAccount (S-1-5-21-3177584935-2586668752-2516186833-504 - Limited - Disabled) ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1033-1033-7760-BC15014EA700}) (Version: 26.002.22031 - Adobe) Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601180}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden Adobe SVG Viewer 3.0 (HKLM-x32\...\Adobe SVG Viewer) (Version: 3.0 - ) AORUS ENGINE (HKLM-x32\...\AORUS ENGINE_is1) (Version: 2.3.1.0 - GIGABYTE Technology Co.,Inc.) Aslain's WoT Modpack 2.4.1.0.08 (HKLM-x32\...\Aslains_WoT_Modpack_Installer_is1) (Version: 2.4.1.0.08 - Aslain) ASRRGBLED v1.0.108 (HKLM-x32\...\ASRock RGB LED_is1) (Version: 1.0.108 - ASRock Inc.) Assassins Creed Valhalla (HKLM-x32\...\Assassins Creed Valhalla_is1) (Version: 0.0.0 - DODI-Repacks) Assassin's Creed Valhalla (HKLM-x32\...\Uplay Install 13504) (Version: - Ubisoft) BitTorrent Web (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\btweb) (Version: 1.6.0 - BitTorrent Limited) BlueStacks (HKLM\...\BlueStacks_nxt) (Version: 5.22.125.1001 - now.gg, Inc.) BlueStacks Services (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\BlueStacksServices) (Version: 3.0.9 - now.gg, Inc.) Car Mechanic Simulator 2021 (HKLM-x32\...\Car Mechanic Simulator 2021_is1) (Version: - ) Construction Simulator (HKLM-x32\...\Construction Simulator_is1) (Version: - ) Construction Simulator 3 (HKLM-x32\...\Construction Simulator 3) (Version: - TiNYiSO) CPUID HWMonitor 1.55 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.55 - CPUID, Inc.) Discord (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Discord) (Version: 1.0.9266 - Discord Inc.) Dokan Library 2.3.1.1000 (x64) (HKLM\...\{9A7325EA-D3C9-0203-0001-250928162350}) (Version: 2.3.1.1000 - Dokany Project) Hidden Dokan Library 2.3.1.1000 Bundle (HKLM-x32\...\{FF3E91D8-59CF-4326-BEFB-426D9DB883CE}) (Version: 2.3.1.1000 - Dokany Project) ENE_AIC_Marvell_HAL (HKLM\...\{085E2365-0A70-4230-B664-02D5E4FE7E9C}) (Version: 1.0.7.0 - ENE TECHNOLOGY INC.) Hidden ENE_AIC_Marvell_HAL (HKLM-x32\...\{887e18fb-6bc3-4cd4-b34e-32d9ff71bbae}) (Version: 1.0.7.0 - ENE TECHNOLOGY INC.) Hidden ENE_DRAM_RGB_AIO (HKLM\...\{3040B30D-99AF-43F7-97F1-64B33CE4DF2E}) (Version: 1.0.8.3 - Ene Tech.) Hidden ENE_DRAM_RGB_AIO (HKLM-x32\...\{26c43412-bffc-40bb-a4ab-0d79c8f5010e}) (Version: 1.0.8.3 - Ene Tech.) Hidden ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.13.0 - ENE TECHNOLOGY INC.) Hidden ENE_EHD_M2_HAL (HKLM-x32\...\{0d380ad9-daa5-4680-ada2-dc3ed9207e16}) (Version: 1.0.13.0 - ENE TECHNOLOGY INC.) Hidden ENE_External_Device_HAL (HKLM\...\{2B8E611F-0B51-4FAC-87BB-AF50D82E7DDA}) (Version: 1.0.10.4 - ENE Tech) Hidden ENE_External_Device_HAL (HKLM-x32\...\{38581c7d-8a6c-4129-9046-8f5df621478b}) (Version: 1.0.10.4 - ENE Tech) Hidden ENE_MousePad_HAL (HKLM\...\{9E97178A-ADB8-4778-BE60-7E28E2A72721}) (Version: 1.0.1.8 - ENE TECHNOLOGY INC.) Hidden ENE_MousePad_HAL (HKLM-x32\...\{bf256b46-8ff7-48be-ab7f-5661e9a0651f}) (Version: 1.0.1.8 - ENE TECHNOLOGY INC.) Hidden ENE_X_AIC_HAL (HKLM\...\{CF703694-01C6-4062-B797-84DB215662BC}) (Version: 1.0.4.0 - ENE TECHNOLOGY INC.) Hidden ENE_X_AIC_HAL (HKLM-x32\...\{ec10ac91-2e61-460a-b493-33f794a07682}) (Version: 1.0.4.0 - ENE TECHNOLOGY INC.) Hidden Epic Games Launcher (HKLM-x32\...\{A662430E-6319-4082-8D9F-ABC0359B892A}) (Version: 1.3.93.0 - Epic Games, Inc.) Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Epic Online Services (HKLM-x32\...\{786992A0-5C37-4552-B402-69D172EC2474}) (Version: 4.3.0 - Epic Games, Inc.) EPSON BX635FWD Series Printer Uninstall (HKLM\...\EPSON BX635FWD Series) (Version: - SEIKO EPSON Corporation) EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation) Epson Software Updater (HKLM-x32\...\{EEF0814F-F67C-49F6-A705-230209F14DF9}) (Version: 4.6.9 - Seiko Epson Corporation) EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION) EpsonNet Setup 3.3 (HKLM-x32\...\{C9D8A041-2963-4B31-8FFC-1500F3DB9293}) (Version: 3.3b - SEIKO EPSON CORPORATION) FACEIT (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\FACEIT) (Version: 2.0.41 - FACEIT Ltd.) FACEIT Anti-Cheat (HKLM\...\{1419E44C-0EF4-4822-9194-9F1A4D43973D}_is1) (Version: 2.1 - FACEIT LTD) Farming Simulator 25 (HKLM-x32\...\Farming Simulator 25_is1) (Version: 0.0.0 - DODI-Repacks) Farming Simulator 25 MULTi26 - ElAmigos wersja 1.11.0.0 (HKLM-x32\...\{35E547D1-CB59-42A6-8CA8-DF896DBFCFE0}_is1) (Version: 1.11.0.0 - Giants Software) FiveM (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\CitizenFX_FiveM) (Version: - Cfx.re) Forza Horizon 6 (HKLM-x32\...\Forza Horizon 6_is1) (Version: 0.0.0 - DODI-Repacks) FxSound (HKLM\...\{601AB94A-F47C-4637-9FD3-0EA0CB2BA072}) (Version: 1.2.5.0 - FxSound LLC) GBT_RGB_Sync_Control 25.10.15.01 (HKLM\...\GBT_RGB_Sync_Control) (Version: 25.10.15.01 - GIGABYTE) GBT_VGA 25.08.13.01 (HKLM\...\GBT_VGA) (Version: 25.08.13.01 - GIGABYTE) GIANTS Editor 9.0.6 64-bit (HKLM\...\giants_editor_9.0.6_win64_is1) (Version: 9.0.6 - GIANTS Software GmbH) GIGABYTE Control Center 25.10.16.01 (HKLM\...\GIGABYTE Control Center) (Version: 25.10.16.01 - GIGABYTE) GOG GALAXY (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: 2.0.92.24 - GOG.com) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 156.0.8078.79 - Google LLC) Gry Google Play (HKLM\...\GooglePlayGames) (Version: 26.10.561.2 - Google LLC) Java 8 Update 503 (64-bit) (HKLM\...\{77124AE4-039E-4CA4-87B4-2F64180503F0}) (Version: 8.0.5030.1 - Oracle Corporation) Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden League of Legends (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Riot Game league_of_legends.live) (Version: - Riot Games, Inc) Malwarebytes version 5.7.2.358 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.7.2.358 - Malwarebytes) Microsoft .NET Host - 6.0.21 (x64) (HKLM\...\{26FF35F7-ADBB-4C9F-97DA-79120DB80EC6}) (Version: 48.87.64667 - Microsoft Corporation) Hidden Microsoft .NET Host - 8.0.10 (x64) (HKLM\...\{3A80EBC5-6B68-49B9-BEBD-E1A6C966B416}) (Version: 64.40.21578 - Microsoft Corporation) Hidden Microsoft .NET Host - 9.0.12 (x64) (HKLM\...\{DF2523B4-4A7A-4B51-AD93-A74AACE4012D}) (Version: 72.48.45417 - Microsoft Corporation) Hidden Microsoft .NET Host FX Resolver - 6.0.21 (x64) (HKLM\...\{D937EF87-F11D-4778-973C-B71E178F95D0}) (Version: 48.87.64667 - Microsoft Corporation) Hidden Microsoft .NET Host FX Resolver - 8.0.10 (x64) (HKLM\...\{062CD1ED-0A3C-483C-A871-50173240C545}) (Version: 64.40.21578 - Microsoft Corporation) Hidden Microsoft .NET Host FX Resolver - 9.0.12 (x64) (HKLM\...\{C70906D7-4A73-42A3-A985-3BEFC2788D07}) (Version: 72.48.45417 - Microsoft Corporation) Hidden Microsoft .NET Runtime - 6.0.21 (x64) (HKLM\...\{8D2EC92E-5903-4B25-9406-182B8EFA834F}) (Version: 48.87.64667 - Microsoft Corporation) Hidden Microsoft .NET Runtime - 8.0.10 (x64) (HKLM\...\{15B7D0C2-F209-4C28-AF1C-FD8326F4D58A}) (Version: 64.40.21578 - Microsoft Corporation) Hidden Microsoft .NET Runtime - 9.0.12 (x64) (HKLM\...\{7498D287-D936-4786-AA56-67E81A7E7348}) (Version: 72.48.45417 - Microsoft Corporation) Hidden Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 157.0.4341.30 - Microsoft Corporation) Microsoft GameInput (HKLM\...\{0DA71DCF-F605-435D-9B16-051DFBE7CB76}) (Version: 4.0.302.0 - Microsoft Corporation) Microsoft Office Professional Plus 2021 - pl-pl (HKLM\...\ProPlus2021Retail - pl-pl) (Version: 16.0.20326.20232 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X64 Additional Runtime - 14.51.36247 (HKLM\...\{6FA797CF-6B76-4B6D-87EE-768F92008720}) (Version: 14.51.36247 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36247 (HKLM\...\{931A2CF0-2404-45EA-82F5-345735AE6A90}) (Version: 14.51.36247 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Additional Runtime - 14.51.36247 (HKLM-x32\...\{582BA719-E6F1-4651-A873-049E6A0DDDAF}) (Version: 14.51.36247 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.51.36247 (HKLM-x32\...\{4BF7CE18-E151-449F-9190-6CDBED0BB4A2}) (Version: 14.51.36247 - Microsoft Corporation) Hidden Microsoft Visual C++ v14 Redistributable (x64) - 14.51.36247 (HKLM-x32\...\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}) (Version: 14.51.36247.0 - Microsoft Corporation) Microsoft Visual C++ v14 Redistributable (x86) - 14.51.36247 (HKLM-x32\...\{9a6ce18d-11c0-4452-aa35-9f2b8437c686}) (Version: 14.51.36247.0 - Microsoft Corporation) Microsoft Visual Studio Code (User) (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.108.2 - Microsoft Corporation) Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - ) Microsoft Windows Desktop Runtime - 6.0.21 (x64) (HKLM\...\{AF6BF7DD-2B12-40C5-919C-2EC99054BBE1}) (Version: 48.87.64723 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 6.0.21 (x64) (HKLM-x32\...\{0f39db03-9030-48f3-82ef-5384bed81d85}) (Version: 6.0.21.32717 - Microsoft Corporation) Microsoft Windows Desktop Runtime - 8.0.10 (x64) (HKLM\...\{614C9740-3FD4-4788-A277-7C35CB4C323B}) (Version: 64.40.21605 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 8.0.10 (x64) (HKLM-x32\...\{d990096d-6282-42c5-8d16-71272c5be274}) (Version: 8.0.10.34118 - Microsoft Corporation) Microsoft Windows Desktop Runtime - 9.0.12 (x64) (HKLM\...\{FE52B4ED-13FE-4577-AF57-150ED5995731}) (Version: 72.48.45460 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 9.0.12 (x64) (HKLM-x32\...\{8a3524df-7973-474d-bf63-3c2d1d8fa368}) (Version: 9.0.12.35609 - Microsoft Corporation) MineyMap (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Overwolf_blgibcgmfheopafbgiginhhjhkkiadancbliicha) (Version: 0.29.12 - Overwolf app) Movavi Video Converter (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Movavi Video Converter) (Version: 24.3.0 - Movavi) Node.js (HKLM\...\{686EA7E1-608A-4B99-A50A-448A2B2A7E73}) (Version: 24.12.0 - Node.js Foundation) nodongle.biz dongle backup solution (HKLM-x32\...\AuDaS0) (Version: - ) Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.6.7 - Notepad++ Team) NVIDIA App 11.0.7.247 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.7.247 - NVIDIA Corporation) NVIDIA FrameView SDK 1.7.12227.37421622 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.7.12227.37421622 - NVIDIA Corporation) NVIDIA Oprogramowanie systemu PhysX 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation) NVIDIA Sterownik dźwięku HD 1.4.5.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.5.0 - NVIDIA Corporation) NVIDIA Sterownik graficzny 581.08 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 581.08 - NVIDIA Corporation) OBS Studio (HKLM-x32\...\OBS Studio) (Version: 31.0.1 - OBS Project) Odinstaluj drukarkę EPSON Universal Print Driver (HKLM\...\EPSON Universal Print Driver) (Version: - SEIKO EPSON Corporation) Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.20326.20072 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0415-1000-0000000FF1CE}) (Version: 16.0.20326.20100 - Microsoft Corporation) Hidden Opera GX Stable 138.0.6044.45 (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Opera GX 138.0.6044.45) (Version: 138.0.6044.45 - Opera Software) Oracle VirtualBox 7.1.4 (HKLM\...\{B7EE9AB2-4188-4B5F-8499-43114E7AD7DA}) (Version: 7.1.4 - Oracle and/or its affiliates) Overwolf (HKLM-x32\...\Overwolf) (Version: 0.311.1.6 - Overwolf Ltd.) Patriot Viper M2 SSD RGB (HKLM\...\{8B4C0A3D-C135-4E1F-98D8-3926494B4D61}) (Version: 1.1.0.1 - Patriot Memory) Hidden Patriot Viper M2 SSD RGB (HKLM-x32\...\{07236f40-ec25-4646-8cb6-b6aaf1597324}) (Version: 1.1.0.1 - Patriot Memory) Hidden Porofessor Standalone 2.16.42 (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\e9d21053-87a2-5e0e-8f60-50c0fc431e5d) (Version: 2.16.42 - M.O.B.A. Network) Quick CPU (HKLM\...\{BBD585B5-A00D-4D90-A795-05497584A746}) (Version: 6.0.0.0 - CoderBag LLC) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1166.001.0714.2021 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8619 - Realtek Semiconductor Corp.) REDlauncher (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\{7258BA11-600C-430E-A759-27E2C691A335}-REDlauncher_is1) (Version: - CD Projekt RED) RGB Fusion (HKLM-x32\...\{FFA8F1FA-3C2C-4A94-AC0B-0DF47272C25F}) (Version: 3.22.1130.1 - Gigabyte) Riot Client (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Riot Game Riot_Client.) (Version: - Riot Games, Inc) Riot Vanguard (HKLM\...\Riot Vanguard) (Version: - Riot Games, Inc.) Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.106.2879 - Rockstar Games) Rockstar Games SDK (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.4.0.216 - Rockstar Games) Sons Of The Forest (HKLM-x32\...\Sons Of The Forest_is1) (Version: 0.0.0 - DODI-Repacks) Sons Of The Forest (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Overwolf_kkgfkggfpkmndnadgkegoheijamdjkeagojfbbfn) (Version: 1.0.0 - Overwolf app) SPC Gear GK550 Omnis Kailh RGB (HKLM-x32\...\{12F382E1-63D4-4B94-BD32-5F845E74FC79}) (Version: 1.00 - COOLING.PL Zdziech Spolka Jawna) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) SteelSeries GG 118.0.0 (HKLM\...\SteelSeries GG) (Version: 118.0.0 - SteelSeries ApS) Środowisko uruchomieniowe Microsoft Edge WebView2 (HKLM-x32\...\Microsoft EdgeWebView) (Version: 156.0.4314.58 - Microsoft Corporation) Hidden Teamfight Tactics (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Riot Game teamfighttactics.live) (Version: - Riot Games, Inc) TeamViewer Host (HKLM\...\TeamViewer) (Version: 15.82.6 - TeamViewer) The Witcher 3: Wild Hunt - Game of the Year Edition (HKLM-x32\...\1495134320_is1) (Version: 4.04a_REDkit_Update_2 - GOG.com) tomato.gg (wersja 2025.04.03.1) (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\{F0A2ADC1-0B7F-4356-8B40-F54F40BD1134}_is1) (Version: 2025.04.03.1 - poliroid) Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.03 - Ghisler Software GmbH) TP-Link Archer T3U Plus Driver (HKLM-x32\...\{C93FD3E7-E450-46ED-B2B2-6F86B479BDBE}) (Version: 2.1.0 - TP-Link) TruckersMP Launcher (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\TruckersMP) (Version: 1.3.19 - TruckersMP) Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 169.3.12963 - Ubisoft) VALORANT (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Riot Game valorant.live) (Version: - Riot Games, Inc) VIRO Plus (HKLM-x32\...\{9BBE5BFB-BC39-4813-91C6-5D71E627510D}) (Version: 1.1 - COOLING.PL Zdziech Spolka Jawna) Wargaming.net Game Center (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Wargaming.net Game Center) (Version: 26.6.0.3882 - Wargaming.net) WD P40 Game Drive (HKLM\...\{EE55DBAE-ECDD-4ADD-AAB5-23DE848B0996}) (Version: 1.0.2.18 - Western Digital Corporation) Hidden WD P40 Game Drive (HKLM-x32\...\{72b1a866-fc31-4381-bff3-fa6cd8823777}) (Version: 1.0.2.18 - Western Digital Corporation) Hidden WinRAR 7.01 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 7.01.0 - win.rar GmbH) WizTree v4.22 (HKLM\...\WizTree_is1) (Version: 4.22 - Antibody Software) World of Tanks EU (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\1545387067) (Version: - Wargaming.net) Wraith Prism Settings software (HKLM-x32\...\{1A3E3EA7-5A7C-4292-8A13-B0DE1BF49E13}_COOLER_MASTER_SR4) (Version: 1.18 - AMD Wraith) Xbox Service (HKLM\...\{81F706B1-AB0A-4D88-B2DB-E5BAF88C87C6}) (Version: 4.0.300.0 - Microsoft Corporation) Xfire (remove only) (HKLM-x32\...\Xfire) (Version: - ) Packages: ========= Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2026-10-18] () Adobe Express Photos -> C:\Program Files\WindowsApps\AdobeSystemsIncorporated.AdobePhotoshopExpress_6.9.30.0_x64__mtcwf2zmmt10c [2026-10-29] (Adobe Inc.) [Startup Task] AppleInc.AppleDevices -> C:\Program Files\WindowsApps\AppleInc.AppleDevices_1.1792.39682.0_x64__nzyj5cx40ttqa [2026-10-29] (Apple Inc.) [Startup Task] Lively Wallpaper -> C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.164.0_x64__97hta09mmv6hy [2026-10-05] (rocksdanister) [Startup Task] Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AI [2026-10-14] () Malwarebytes Anti-Malware -> C:\Program Files\Malwarebytes\Anti-Malware [2026-10-21] () Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-10-14] () Notepad++ -> C:\Program Files\Notepad++\contextMenu [2024-10-19] (Notepad++) NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-08] (NVIDIA Corp.) OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-10-14] () Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.1.137.0_x64__dt26b99r8h8gj [2024-10-19] (Realtek Semiconductor Corp) Sound Blaster Connect -> C:\Program Files\WindowsApps\CreativeTechnologyLtd.SoundBlasterConnect_2.2.15.0_x86__13fcda18mhdz2 [2024-10-18] (Creative Technology Ltd.) SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0 [2026-10-29] (Spotify AB) [Startup Task] WinRAR -> C:\Program Files\WinRAR [2024-10-18] (win.rar GmbH) ==================== Niestandardowe rejestracje CLSID (filtrowane): ============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) CustomCLSID: HKU\S-1-5-21-3177584935-2586668752-2516186833-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe) CustomCLSID: HKU\S-1-5-21-3177584935-2586668752-2516186833-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe) CustomCLSID: HKU\S-1-5-21-3177584935-2586668752-2516186833-1001_Classes\CLSID\{6282d2e9-5906-bbf9-4b71-0c2869c6a835}\localserver32 -> C:\Program Files\Google\Play Games\current\service\Service.exe (Google LLC -> Google LLC) CustomCLSID: HKU\S-1-5-21-3177584935-2586668752-2516186833-1001_Classes\CLSID\{6a27a1a9-7be8-1491-04ca-ee68a211c258}\localserver32 -> C:\Program Files\Google\Play Games\current\service\Service.exe (Google LLC -> Google LLC) CustomCLSID: HKU\S-1-5-21-3177584935-2586668752-2516186833-1001_Classes\CLSID\{8e753cfb-7931-feaa-1eab-682683f4b136}\localserver32 -> "D:\Disk Drill\DD.exe" -ToastActivated => Brak pliku CustomCLSID: HKU\S-1-5-21-3177584935-2586668752-2516186833-1001_Classes\CLSID\{C83EE3AE-802B-44BE-8E7F-F69D82E42E58}\localserver32 -> C:\Users\Rafałek\AppData\Local\Discord\app-1.0.9266\Discord.exe (Discord Inc. -> Discord Inc.) CustomCLSID: HKU\S-1-5-21-3177584935-2586668752-2516186833-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC) ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Brak pliku ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-06-08] (Adobe Inc. -> Adobe Systems Inc.) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-07-05] (Malwarebytes Inc -> Malwarebytes) ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll [2026-04-24] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_8dfba354c9333cfd\nvshext.dll [2026-09-29] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-07-05] (Malwarebytes Inc -> Malwarebytes) ==================== Codecs (filtrowane) ==================== ==================== Skróty & WMI ======================== ==================== Załadowane moduły (filtrowane) ============= 2026-11-01 02:07 - 2026-10-31 23:58 - 000107520 _____ () [Brak podpisu cyfrowego] \\?\C:\Users\Rafałek\AppData\Local\Programs\Porofessor Standalone\resources\app.asar.unpacked\node_modules\electron-click-drag-plugin\build\Release\win32-x64\drag.node 2026-11-01 02:07 - 2026-10-31 23:58 - 000131584 _____ () [Brak podpisu cyfrowego] \\?\C:\Users\Rafałek\AppData\Local\Programs\Porofessor Standalone\resources\app.asar.unpacked\node_modules\extract-file-icon\build\Release\addon.node 2026-11-01 02:07 - 2026-10-31 23:58 - 000707584 _____ () [Brak podpisu cyfrowego] \\?\C:\Users\Rafałek\AppData\Local\Programs\Porofessor Standalone\resources\app.asar.unpacked\node_modules\keytar\build\Release\keytar.node 2026-11-01 02:07 - 2026-10-31 23:58 - 000142848 _____ () [Brak podpisu cyfrowego] \\?\C:\Users\Rafałek\AppData\Local\Programs\Porofessor Standalone\resources\app.asar.unpacked\node_modules\node-window-manager\build\Release\addon.node 2026-07-12 19:09 - 2019-08-05 12:26 - 000025088 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\BSL430.dll 2026-07-12 19:09 - 2019-08-05 12:26 - 000225792 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvFireware.dll 2026-07-12 19:09 - 2022-04-01 14:48 - 000045056 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvIntelI2C.dll 2026-07-12 19:09 - 2021-05-04 10:39 - 000185344 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\ITEDriver.dll 2026-11-01 02:07 - 2026-10-31 23:58 - 003058176 _____ () [Brak podpisu cyfrowego] C:\Users\Rafałek\AppData\Local\Programs\Porofessor Standalone\ffmpeg.dll 2026-11-01 02:07 - 2026-10-31 23:58 - 000504320 _____ () [Brak podpisu cyfrowego] C:\Users\Rafałek\AppData\Local\Programs\Porofessor Standalone\libegl.dll 2026-11-01 02:07 - 2026-10-31 23:58 - 008400896 _____ () [Brak podpisu cyfrowego] C:\Users\Rafałek\AppData\Local\Programs\Porofessor Standalone\libglesv2.dll 2026-11-01 02:07 - 2026-10-31 23:58 - 005640192 _____ () [Brak podpisu cyfrowego] C:\Users\Rafałek\AppData\Local\Programs\Porofessor Standalone\vk_swiftshader.dll 2026-11-01 02:07 - 2026-10-31 23:58 - 000944128 _____ () [Brak podpisu cyfrowego] C:\Users\Rafałek\AppData\Local\Programs\Porofessor Standalone\vulkan-1.dll 2026-10-29 21:09 - 2011-12-06 15:55 - 000299008 _____ () [Brak podpisu cyfrowego] D:\srv_apps\bbgate\ApacheCore.dll 2024-11-12 20:24 - 2024-11-12 20:24 - 000000000 ____L () [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll 2024-11-12 20:24 - 2024-11-12 20:24 - 000000000 ____L () [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll 2025-01-03 00:12 - 2026-06-29 15:11 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll 2026-07-12 19:09 - 2021-12-22 14:15 - 000732672 _____ (GIGABYTE Technology Co.,Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvComW.dll 2026-07-12 19:09 - 2019-08-05 12:26 - 000013312 _____ (GIGABYTE Technology Co.,Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvCrypt.dll 2026-07-12 19:09 - 2022-06-23 09:13 - 000524800 _____ (GIGABYTE Technology Co.,Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GVDisplay.dll 2026-07-12 19:09 - 2020-11-05 13:16 - 000268800 _____ (GIGABYTE Technology Co.,Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvIllumLib.dll 2026-07-12 19:09 - 2019-08-05 12:26 - 000218112 _____ (GIGABYTE Technology Co.,Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvOrderLib.dll 2026-07-12 19:09 - 2019-08-05 12:27 - 001079808 _____ (Microsoft Corporation) [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\MFC80U.DLL 2026-11-01 02:07 - 2026-10-31 23:58 - 026076160 _____ (Microsoft(r) Corporation) [Brak podpisu cyfrowego] C:\Users\Rafałek\AppData\Local\Programs\Porofessor Standalone\dxcompiler.dll 2025-06-17 18:18 - 2012-11-12 14:15 - 000558592 _____ (SEIKO EPSON CORPORATION) [Brak podpisu cyfrowego] C:\WINDOWS\System32\enppmon.dll 2025-06-17 18:18 - 2012-10-22 16:19 - 000219648 _____ (SEIKO EPSON CORPORATION) [Brak podpisu cyfrowego] C:\WINDOWS\System32\enpres.dll 2026-07-12 19:09 - 2019-08-27 12:22 - 000224256 _____ (TODO: ) [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvAutoUpdate.dll ==================== Alternate Data Streams (filtrowane) ======== (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) AlternateDataStreams: C:\Users\Rafałek\Downloads\adwcleaner.exe:MBAM.Zone.Identifier [818] AlternateDataStreams: C:\Users\Rafałek\Downloads\AORUS_ENGINE_SETUP_V2.3.1.0_B251226_x86_Signed.exe:MBAM.Zone.Identifier [338] ==================== Tryb awaryjny (filtrowane) ================== ==================== Powiązania plików (filtrowane) ================= ==================== Internet Explorer (filtrowane) ============= BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_503\bin\ssv.dll [2026-07-23] (Oracle America, Inc. -> Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_503\bin\jp2ssv.dll [2026-07-23] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-08-23] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation) ==================== Hosts - zawartość: ========================= (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2022-05-07 06:24 - 2026-06-05 12:31 - 000005000 _____ C:\WINDOWS\system32\drivers\etc\hosts 109.94.209.70 fitgirl-repacks-site.org # Fake FitGirl site 109.94.209.70 fitgirlrepacks.in # Fake FitGirl site 109.94.209.70 www.fitgirlrepacks.in # Fake FitGirl site 109.94.209.70 fitgirlrepacks.co # Fake FitGirl site 109.94.209.70 fitgirl-repacks.cc # Fake FitGirl site 109.94.209.70 fitgirl-repacks.to # Fake FitGirl site 109.94.209.70 fitgirl-repack.com # Fake FitGirl site 109.94.209.70 fitgirl-repacks.website # Fake FitGirl site 109.94.209.70 www.fitgirlrepacks.co # Fake FitGirl site 109.94.209.70 www.fitgirl-repacks.cc # Fake FitGirl site 109.94.209.70 www.fitgirl-repacks.to # Fake FitGirl site 109.94.209.70 www.fitgirl-repack.com # Fake FitGirl site 109.94.209.70 www.fitgirl-repacks.website # Fake FitGirl site 109.94.209.70 ww9.fitgirl-repacks.xyz # Fake FitGirl site 109.94.209.70 fitgirl-repacks.xyz # Fake FitGirl site 109.94.209.70 fitgirl-repack.net # Fake FitGirl site 109.94.209.70 www.fitgirl-repack.net # Fake FitGirl site 109.94.209.70 fitgirlpack.site # Fake FitGirl site 109.94.209.70 www.fitgirlpack.site # Fake FitGirl site 109.94.209.70 fitgirl-repack.org # Fake FitGirl site 109.94.209.70 www.fitgirl-repack.org # Fake FitGirl site 109.94.209.70 fitgirlrepacks.pro # Fake FitGirl site 109.94.209.70 www.fitgirlrepacks.pro # Fake FitGirl site 109.94.209.70 fitgirlrepack.games # Fake FitGirl site 109.94.209.70 www.fitgirlrepack.games # Fake FitGirl site 109.94.209.70 www.fitgirl-repacks-site.org # Fake FitGirl site 109.94.209.70 fitgirls-repacks.com # Fake FitGirl site 109.94.209.70 fitgirlrepack.cc # Fake FitGirl site 109.94.209.70 fitgirlrepacks.org # Fake FitGirl site 109.94.209.70 www.fitgirls-repacks.com # Fake FitGirl site 2025-06-17 18:33 - 2025-06-17 18:33 - 000000445 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics ==================== Network =========================== (Obecnie brak automatycznej naprawy dla tej sekcji.) DNS Servers: 192.168.1.1 Zapora systemu Windows [funkcja włączona] Network Binding: ============= Ethernet: Realtek PCIe GbE Family Controller -> rtcx21x64.sys Wi-Fi: TP-Link Wireless MU-MIMO USB Adapter -> rtwlanu.sys Ethernet 5: VirtualBox Host-Only Ethernet Adapter -> VBoxNetAdp6.sys ==================== Inne obszary =========================== (Obecnie brak automatycznej naprawy dla tej sekcji.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\java8path;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\dotnet\;C:\Program Files\NVIDIA Corporation\NVIDIA app\NvDLISR;C:\Program Files\nodejs\ HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Rafałek\Pictures\misurina-sunset.jpg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 4) (TamperProtectionSource: 2) HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0) HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|E:\Sons Of The Forest HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|E:\Sons Of The Forest\OnlineFix64.dll HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|E:\GRY\FH5 HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|D:\Slime Rancher 2 HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|E:\GRY\Assassins Creed Valhalla HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|E:\GRY\Sons Of The Forest HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|E:\GRY\Sons Of The Forest\OnlineFix64.dll HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|E:\GRY\Forza Horizon 6 [DODI Repack] HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|E:\SnowRunner HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|E:\GRY\Forza Horizon 6 ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == (Załączenie wejścia w fixlist spowoduje jego usunięcie.) HKLM\...\StartupApproved\StartupFolder: => "FxSound.lnk" HKLM\...\StartupApproved\Run: => "SecurityHealth" HKLM\...\StartupApproved\Run: => "SteelSeriesGG" HKLM\...\StartupApproved\Run: => "Cm108BSound" HKLM\...\StartupApproved\Run32: => "Launch 0 FwCustom" HKLM\...\StartupApproved\Run32: => "Wraith Prism" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\StartupFolder: => "Xfire.lnk" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\Run: => "EpicGamesLauncher" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_88A367E8F038C00D58C51B99B35FA499" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\Run: => "Opera GX Stable" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\Run: => "Steam" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\Run: => "Discord" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\Run: => "btweb" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\Run: => "Trucky" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\Run: => "ProtonVPN" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\Run: => "NoxMultiPlayer" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\Run: => "FACEIT" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\Run: => "RiotClient" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\Run: => "Opera Browser Assistant" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\Run: => "Opera Stable" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\Run: => "EPSDNMON" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\Run: => "GogGalaxy" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\Run: => "Adobe Acrobat Synchronizer" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\Run: => "electron.app.BlueStacks Services" HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\StartupApproved\Run: => "EPLTarget\P0000000000000000" ==================== Reguły Zapory systemu Windows (filtrowane) ================ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [UDP Query User{775392ED-AE71-42FB-82D6-D469617DC254}D:\steamlibrary\steamapps\common\farming simulator 25\x64\farmingsimulator2025game.exe] => (Allow) D:\steamlibrary\steamapps\common\farming simulator 25\x64\farmingsimulator2025game.exe (GIANTS Software GmbH -> GIANTS Software GmbH) FirewallRules: [TCP Query User{B166CAA2-2855-4195-92C2-AEB8931370C5}D:\steamlibrary\steamapps\common\farming simulator 25\x64\farmingsimulator2025game.exe] => (Allow) D:\steamlibrary\steamapps\common\farming simulator 25\x64\farmingsimulator2025game.exe (GIANTS Software GmbH -> GIANTS Software GmbH) FirewallRules: [UDP Query User{7B6CAD38-F08B-49D6-AA5A-E0711543AEE2}E:\epic games\gtavenhanced\gta5_enhanced.exe] => (Allow) E:\epic games\gtavenhanced\gta5_enhanced.exe (Rockstar Games, Inc. -> Rockstar Games) FirewallRules: [TCP Query User{916BED16-2E78-4563-A148-AACE73B6D9A0}E:\epic games\gtavenhanced\gta5_enhanced.exe] => (Allow) E:\epic games\gtavenhanced\gta5_enhanced.exe (Rockstar Games, Inc. -> Rockstar Games) FirewallRules: [{154B18D0-3414-4D33-9DB1-24FCB2C0977C}] => (Allow) E:\SteamLibrary\steamapps\common\theHunterCotW\theHunterCotW_F.exe () [Brak podpisu cyfrowego] FirewallRules: [{0BA27E1C-BDE4-4D5E-974D-CE43A4AD3DDC}] => (Allow) E:\SteamLibrary\steamapps\common\theHunterCotW\theHunterCotW_F.exe () [Brak podpisu cyfrowego] FirewallRules: [UDP Query User{95A473FE-D4AC-4A6D-B493-19A58BA22D6C}C:\users\rafałek\downloads\jacksmith-weapons-and-warriors-steamrip.com\jacksmith weapons and warriors\jacksmith.exe] => (Allow) C:\users\rafałek\downloads\jacksmith-weapons-and-warriors-steamrip.com\jacksmith weapons and warriors\jacksmith.exe () [Brak podpisu cyfrowego] FirewallRules: [TCP Query User{514371EF-D5A2-47BD-90BC-CE20F2CD4881}C:\users\rafałek\downloads\jacksmith-weapons-and-warriors-steamrip.com\jacksmith weapons and warriors\jacksmith.exe] => (Allow) C:\users\rafałek\downloads\jacksmith-weapons-and-warriors-steamrip.com\jacksmith weapons and warriors\jacksmith.exe () [Brak podpisu cyfrowego] FirewallRules: [UDP Query User{2850741C-44EF-495E-A66D-D72BBEB517B9}E:\gry\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) E:\gry\riot games\riot client\riotclientelectron\riot client.exe (Riot Games, Inc. -> Riot Games, Inc.) FirewallRules: [TCP Query User{7FD7864F-054C-4A04-BC9E-FBFF8DF4AFB8}E:\gry\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) E:\gry\riot games\riot client\riotclientelectron\riot client.exe (Riot Games, Inc. -> Riot Games, Inc.) FirewallRules: [UDP Query User{4BAE428E-622C-41A6-B041-A04AE4BD294C}C:\users\rafałek\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe] => (Allow) C:\users\rafałek\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe (Microsoft) [Brak podpisu cyfrowego] FirewallRules: [TCP Query User{E6C0BA83-3BCC-4DA2-9C02-532F17B4D0FA}C:\users\rafałek\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe] => (Allow) C:\users\rafałek\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe (Microsoft) [Brak podpisu cyfrowego] FirewallRules: [UDP Query User{F402731A-F026-4993-B882-B1FD6E87443D}C:\users\rafałek\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe] => (Allow) C:\users\rafałek\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe => Brak pliku FirewallRules: [TCP Query User{B5729323-7EA6-4023-A4E5-DF8C58C79249}C:\users\rafałek\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe] => (Allow) C:\users\rafałek\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe => Brak pliku FirewallRules: [UDP Query User{11372823-BE24-4455-8B08-DFFA5B923899}C:\users\rafałek\appdata\local\faceit\app-2.0.41\faceit.exe] => (Allow) C:\users\rafałek\appdata\local\faceit\app-2.0.41\faceit.exe (ESL Gaming GmbH -> FACEIT Ltd.) FirewallRules: [TCP Query User{5C0C54F5-49E6-4032-87D6-39E87C03E896}C:\users\rafałek\appdata\local\faceit\app-2.0.41\faceit.exe] => (Allow) C:\users\rafałek\appdata\local\faceit\app-2.0.41\faceit.exe (ESL Gaming GmbH -> FACEIT Ltd.) FirewallRules: [UDP Query User{A213CBC6-9667-41EB-ABB0-97C520E12760}C:\users\rafałek\appdata\local\faceit\app-2.0.40\faceit.exe] => (Allow) C:\users\rafałek\appdata\local\faceit\app-2.0.40\faceit.exe (ESL Gaming GmbH -> FACEIT Ltd.) FirewallRules: [TCP Query User{B182ED62-1DE4-432C-888B-B14A6309C191}C:\users\rafałek\appdata\local\faceit\app-2.0.40\faceit.exe] => (Allow) C:\users\rafałek\appdata\local\faceit\app-2.0.40\faceit.exe (ESL Gaming GmbH -> FACEIT Ltd.) FirewallRules: [UDP Query User{5AE3C0B6-3E60-4F00-9EF5-2F66AE0D4178}C:\program files\obs-studio\obs-plugins\64bit\obs-browser-page.exe] => (Allow) C:\program files\obs-studio\obs-plugins\64bit\obs-browser-page.exe (OBS Project, LLC -> ) FirewallRules: [TCP Query User{60970096-57B7-43BD-A18C-E555F39201CC}C:\program files\obs-studio\obs-plugins\64bit\obs-browser-page.exe] => (Allow) C:\program files\obs-studio\obs-plugins\64bit\obs-browser-page.exe (OBS Project, LLC -> ) FirewallRules: [UDP Query User{8CE10192-E330-4E5A-A713-B06A25855261}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Allow) C:\programdata\wargaming.net\gamecenter\wgc.exe (Wargaming Group Limited -> Wargaming.net) FirewallRules: [TCP Query User{384BE27F-6F78-469B-9B67-F9A23116F389}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Allow) C:\programdata\wargaming.net\gamecenter\wgc.exe (Wargaming Group Limited -> Wargaming.net) FirewallRules: [TCP Query User{0C320FCC-A862-4D3E-909C-53ED865577B4}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{6FF36804-0112-4F79-A233-130CE2BD199B}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [{8DBF79CB-6E95-4EEA-B87C-B4C094931147}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{0D6AABF8-AE43-4B8F-B904-58D7CFD67CC1}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [TCP Query User{40970F23-F38A-486D-B947-2D316104136D}C:\users\rafałek\appdata\local\programs\opera gx\opera.exe] => (Block) C:\users\rafałek\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [UDP Query User{F5ABDCD9-7E58-4EFE-BA18-67CE61E7B0F9}C:\users\rafałek\appdata\local\programs\opera gx\opera.exe] => (Block) C:\users\rafałek\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [{72220179-8263-484B-912C-5E48FFD1ECBC}] => (Allow) C:\Users\Rafałek\AppData\Roaming\BitTorrent Web\btweb.exe (Rainberry Inc -> BitTorrent Limited) FirewallRules: [{E9B29D6A-8A05-4607-A403-33AE58173178}] => (Allow) C:\Users\Rafałek\AppData\Roaming\BitTorrent Web\btweb.exe (Rainberry Inc -> BitTorrent Limited) FirewallRules: [{4B1651EC-F72C-4D3D-AE03-BA4C24195B78}] => (Allow) C:\Program Files (x86)\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) FirewallRules: [{0F87CD7F-3034-42A0-962E-7A858EA6E51E}] => (Allow) C:\Program Files (x86)\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) FirewallRules: [TCP Query User{E22F3368-3604-4AD7-B53D-C574B33DC515}C:\users\rafałek\appdata\local\faceit\app-2.1.30\faceit.exe] => (Block) C:\users\rafałek\appdata\local\faceit\app-2.1.30\faceit.exe (ESL Gaming GmbH -> FACEIT Ltd.) FirewallRules: [UDP Query User{7799AF84-836D-49A8-93B3-96B5D9782068}C:\users\rafałek\appdata\local\faceit\app-2.1.30\faceit.exe] => (Block) C:\users\rafałek\appdata\local\faceit\app-2.1.30\faceit.exe (ESL Gaming GmbH -> FACEIT Ltd.) FirewallRules: [{0E9325A9-1C5C-4032-8576-9D71401B05EA}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{C3FC1CE3-CD8E-4804-8532-384352C36975}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe (Now.gg, INC -> BlueStack Systems) FirewallRules: [{394D1EB6-84BC-4DBE-A9EB-954E4C574525}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe (Now.gg, INC -> The Qt Company Ltd.) FirewallRules: [TCP Query User{FEA0605C-ED8B-44EA-9900-8BEFA0B36C43}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{A16786D3-E2FC-481B-AAF0-E8D3CC775EC3}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [{25AEC48F-200B-4C47-B7BB-164E8DF7B43B}] => (Allow) C:\Program Files\GIGABYTE\Control Center\GCC.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) FirewallRules: [TCP Query User{738441E1-C527-40D7-9819-EE030A29078F}C:\program files (x86)\ubisoft\ubisoft game launcher\uplaywebcore.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\uplaywebcore.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft) FirewallRules: [UDP Query User{EAFF58E1-9D84-4F0E-A5DC-034870DC6EC3}C:\program files (x86)\ubisoft\ubisoft game launcher\uplaywebcore.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\uplaywebcore.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft) FirewallRules: [{E5573A59-0429-4FB2-98A7-FAEF0562B537}] => (Allow) E:\Ubisoft\Assassin's Creed Valhalla\ACValhalla_Plus.exe (UBISOFT ENTERTAINMENT INC. -> ) FirewallRules: [{056839C5-14D5-44EE-A9D1-FB80DFF7DE1D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{5D9A3B34-0C3B-45B1-A6A1-4C8E367F736B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [TCP Query User{C28A3D8D-8AAE-4C26-8BCA-AA86C2CC38E1}C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\game\bin\win64\cs2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\game\bin\win64\cs2.exe (Valve Corp. -> ) FirewallRules: [UDP Query User{1F156A59-3D08-4DD4-856B-9E91C29ED022}C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\game\bin\win64\cs2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\game\bin\win64\cs2.exe (Valve Corp. -> ) FirewallRules: [TCP Query User{46BD6426-BE01-4E4A-9891-FE6C39622F92}D:\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) D:\world_of_tanks_eu\win64\worldoftanks.exe (Wargaming Group Limited -> Wargaming.net) FirewallRules: [UDP Query User{EA97588E-58BC-46AA-814C-E02EECB8D365}D:\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) D:\world_of_tanks_eu\win64\worldoftanks.exe (Wargaming Group Limited -> Wargaming.net) FirewallRules: [TCP Query User{F9655EDD-7F2C-4575-810B-E73B012675A5}D:\disk drill\dd.exe] => (Allow) D:\disk drill\dd.exe => Brak pliku FirewallRules: [UDP Query User{944BDDDC-EDA6-4732-904C-1D6F2469748E}D:\disk drill\dd.exe] => (Allow) D:\disk drill\dd.exe => Brak pliku FirewallRules: [{2639235A-6CC3-4D2B-85F8-CD396712E730}] => (Allow) D:\SteamLibrary\steamapps\common\Farming Simulator 25\FarmingSimulator2025.exe (GIANTS Software GmbH -> GIANTS Software GmbH) FirewallRules: [{2B4921BE-558C-4E7F-9436-6DD35F8587EF}] => (Allow) D:\SteamLibrary\steamapps\common\Farming Simulator 25\FarmingSimulator2025.exe (GIANTS Software GmbH -> GIANTS Software GmbH) FirewallRules: [{4DA1D145-334F-42ED-8BDC-AD86E20F5E9F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software) FirewallRules: [{4BD8372F-58A6-4440-A17F-BFB0F290A201}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software) FirewallRules: [{89B96009-5CD0-4E1D-8191-E3C5BC461ED6}] => (Allow) E:\SteamLibrary\steamapps\common\Farming Simulator 22\x64\FarmingSimulator2022Game.exe (GIANTS Software GmbH -> GIANTS Software GmbH) FirewallRules: [{4380266E-0422-4E70-B598-BD18B183A000}] => (Allow) E:\SteamLibrary\steamapps\common\Farming Simulator 22\x64\FarmingSimulator2022Game.exe (GIANTS Software GmbH -> GIANTS Software GmbH) FirewallRules: [{759F5F55-81DE-422A-AEC5-93F9899FD26C}] => (Allow) E:\SteamLibrary\steamapps\common\SnowRunner\Sources\Bin\SnowRunner.exe => Brak pliku FirewallRules: [{6AB9A215-A2FE-4F1C-ADC2-46B64DF82619}] => (Allow) E:\SteamLibrary\steamapps\common\SnowRunner\Sources\Bin\SnowRunner.exe => Brak pliku FirewallRules: [{2EADAEF6-D056-4AB7-8466-EE49EC9AF811}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [{BCC64297-0859-423D-AB3F-35DEF47300CF}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [{EF6BC658-7EFF-452F-8596-F121A868AE9E}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [{070C662A-0BD3-4C2D-892F-0CA7BBACA8D6}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [TCP Query User{27557689-F4B7-4198-A1E6-151E3EA5B148}E:\gry\forza horizon 6\forzahorizon6.exe] => (Allow) E:\gry\forza horizon 6\forzahorizon6.exe (Playground Games -> ) FirewallRules: [UDP Query User{5D96B770-4BB3-44FE-83E3-D825F27C0206}E:\gry\forza horizon 6\forzahorizon6.exe] => (Allow) E:\gry\forza horizon 6\forzahorizon6.exe (Playground Games -> ) FirewallRules: [{83B35F86-0F85-481C-96F9-4A8AC77E83C5}] => (Allow) LPort=135 FirewallRules: [{BA5E7EF1-47E8-43E8-A97B-FD05220CF48E}] => (Allow) E:\GRY\ElsaWin\bin\ElsaWin.exe => Brak pliku FirewallRules: [{D36F26CF-4FA2-4F22-8CD1-F196F796A002}] => (Allow) E:\GRY\ElsaWin\bin\ElsaWin.exe => Brak pliku FirewallRules: [{FA0C5A94-508D-423B-BC41-490745A27131}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{5587A571-D047-427A-A4E0-278167340FCC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{163AEE59-1842-4165-AC63-443F05B155AE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{4568EFB2-7468-4099-A0A2-16BDB44301FE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{C9AE6483-0B53-4253-8043-7A1B551BB4F6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{0FADE21B-4383-4FCB-B3C1-B0C36F7CCBB1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{E662BA1A-4159-4670-A5F3-C2601190F555}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{83927670-A1E0-4526-89D6-0DB63471CEC6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{6F64BCF2-C871-43FA-B06B-FAD09043FD05}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{6A8C3834-A9AA-49E4-A6BB-5040C674947E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{C79D86AC-29E4-4DD7-8519-86917B7DAA07}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{D5D08449-2480-464F-9CF6-B19F70EDB728}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{DBDEABE0-E89D-4369-B563-63877C0B6440}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{7AE87D46-8BA8-46BA-9C02-A5C41D690A1D}] => (Allow) C:\Program Files\WindowsApps\AppleInc.AppleDevices_1.1792.39682.0_x64__nzyj5cx40ttqa\AppleMobileDeviceLauncher.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{82AB48F8-6931-475F-B97B-CF674B823842}] => (Allow) C:\Program Files\WindowsApps\AppleInc.AppleDevices_1.1792.39682.0_x64__nzyj5cx40ttqa\AppleMobileDeviceLauncher.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{187AF109-4A9D-443C-A56A-561517829849}] => (Allow) C:\Program Files\WindowsApps\AppleInc.AppleDevices_1.1792.39682.0_x64__nzyj5cx40ttqa\AMPDevicesAgent.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{62E82B99-7E76-4E5C-9359-0CF42173BE36}] => (Allow) C:\Program Files\WindowsApps\AppleInc.AppleDevices_1.1792.39682.0_x64__nzyj5cx40ttqa\AMPDevicesAgent.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{B8003DC9-D5BA-44D6-8297-5931404A3644}] => (Allow) C:\Program Files (x86)\Overwolf\0.311.1.4\OverwolfBrowser.exe => Brak pliku FirewallRules: [{8F2D2CF4-3E10-48BC-B079-4D8F8468E8B0}] => (Allow) C:\Program Files (x86)\Overwolf\0.311.1.4\OverwolfBrowser.exe => Brak pliku FirewallRules: [{9DC8A245-96B4-4784-A52F-D69FA0A80802}] => (Block) C:\Program Files (x86)\Overwolf\0.311.1.4\OverwolfBrowser.exe => Brak pliku FirewallRules: [{FB9FCD68-9203-4AE4-B65B-ED256CCE30D3}] => (Block) C:\Program Files (x86)\Overwolf\0.311.1.4\OverwolfBrowser.exe => Brak pliku FirewallRules: [{E45FCBA8-6D98-43FD-BE9D-B5D841520376}] => (Allow) C:\Program Files (x86)\Overwolf\0.311.1.6\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [{49C26757-0561-4415-A7D9-56D05FB0B13B}] => (Allow) C:\Program Files (x86)\Overwolf\0.311.1.6\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [{30B564CE-DBAF-468A-A4A4-C39FA4631166}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{6F61DE4A-A661-4F1C-80BA-BA821858C1E7}] => (Allow) C:\Program Files\Google\Play Games\current\emulator\crosvm.exe (Google LLC -> ) FirewallRules: [{7E7CEBE6-F1C3-44AB-8091-1E71FF4BD5B7}] => (Allow) C:\Program Files\Google\Play Games\current\emulator\crosvm.exe (Google LLC -> ) FirewallRules: [{239C44E5-9596-4256-AB22-A8E503C59A80}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{F2003365-1399-407E-A773-40B315BDACBB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{B2C93410-204A-45D4-9358-1F376F786E4B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{6AC0F90E-8C55-4942-BD40-8D1823F12E40}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation) ==================== Punkty Przywracania systemu ========================= 30-10-2026 18:34:43 Zaplanowany punkt kontrolny 01-11-2026 17:35:26 Instalator modułów systemu Windows ==================== Wadliwe urządzenia w Menedżerze urządzeń ============ ==================== Błędy w Dzienniku zdarzeń: ======================== Dziennik Aplikacja: ================== Error: (11/02/2026 01:00:52 PM) (Source: BBGate) (EventID: 151) (User: ZARZĄDZANIE NT) Description: COM error at HTTP post for WorkshopOrder Error: (11/02/2026 01:00:52 PM) (Source: BBGate) (EventID: 151) (User: ZARZĄDZANIE NT) Description: COM error at HTTP post for WorkshopOrder Error: (11/01/2026 11:00:15 PM) (Source: BBGate) (EventID: 151) (User: ZARZĄDZANIE NT) Description: COM error at HTTP post for WorkshopOrder Error: (11/01/2026 11:00:15 PM) (Source: BBGate) (EventID: 151) (User: ZARZĄDZANIE NT) Description: COM error at HTTP post for WorkshopOrder Error: (11/01/2026 10:59:22 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas wywoływania procedury CoCreateInstance. hr = 0x8007045b, Trwa proces zamykania systemu.. Error: (11/01/2026 10:59:22 PM) (Source: VSS) (EventID: 13) (User: ) Description: Informacje Usługi kopiowania woluminów w tle: nie można uruchomić serwera usługi COM z identyfikatorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} i nazwą CEventSystem. [0x8007045b, Trwa proces zamykania systemu.] Error: (11/01/2026 10:58:54 PM) (Source: BBGate) (EventID: 151) (User: ZARZĄDZANIE NT) Description: COM error at HTTP post for WorkshopOrder Error: (11/01/2026 10:58:54 PM) (Source: BBGate) (EventID: 151) (User: ZARZĄDZANIE NT) Description: COM error at HTTP post for WorkshopOrder Dziennik System: ============= Error: (11/02/2026 02:08:15 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: ZARZĄDZANIE NT) Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd (0x80073d02 = Nie można zainstalować pakietu, ponieważ zasoby, które on modyfikuje, są obecnie w użyciu.): 9NTM2QC6QWS7-12030rocksdanister.LivelyWallpaper. Error: (11/02/2026 01:00:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Sentinel64 z powodu następującego błędu: Nie można odnaleźć urządzenia. Error: (11/02/2026 01:00:45 PM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: ZARZĄDZANIE NT) Description: 18-2147024891 Error: (11/02/2026 01:00:45 PM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: ZARZĄDZANIE NT) Description: 18-2147024891 Error: (11/01/2026 11:00:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Sentinel64 z powodu następującego błędu: Nie można odnaleźć urządzenia. Error: (11/01/2026 11:00:09 PM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: ZARZĄDZANIE NT) Description: 18-2147024891 Error: (11/01/2026 11:00:09 PM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: ZARZĄDZANIE NT) Description: 18-2147024891 Error: (11/01/2026 10:58:58 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Usługa Usługa koordynatora aktualizacji zakończyła działanie; wystąpił następujący błąd: %%2149884192 Windows Defender: ================ TimeCreated : 01.11.2026 17:36:11 Message : Program antywirusowy Microsoft Defender ѕçãп ĥâѕ ъéëⁿ ŝţθрφĕδ ъęƒóŗё çθmрļêťìση.%ⁿ %ţŠсäл ÎĐ:%ь{29FFFA79- CD0D-4FDE-99D3-B9C6E3082404}%й %ŧŜсāń Ţŷρē:%ъNarzędzia chroniące przed złośliwym oprogramowaniem%η %τŚċàл Ρдѓдмëŧеґѕ:%вSzybkie skanowanie%η %ŧŬŝèѓ:%вZARZĄDZANIE NT\SYSTEM%п %тŚτòφ Ґєάšбņ:%вΓΡÇ ćθʼnⁿзćτιōⁿ гũńđб шπ TimeCreated : 30.10.2026 18:02:00 Message : Program antywirusowy Microsoft Defender ѕçãп ĥâѕ ъéëⁿ ŝţθрφĕδ ъęƒóŗё çθmрļêťìση.%ⁿ %ţŠсäл ÎĐ:%ь{BA75BC02- FBAD-4A99-8F3F-40E9EF4D0768}%й %ŧŜсāń Ţŷρē:%ъNarzędzia chroniące przed złośliwym oprogramowaniem%η %τŚċàл Ρдѓдмëŧеґѕ:%вSzybkie skanowanie%η %ŧŬŝèѓ:%вZARZĄDZANIE NT\SYSTEM%п %тŚτòφ Ґєάšбņ:%вŚ¢ħэđŭĺέδ śçαń щåş ś ќιρφèδ ьēçäŭŝę τђэ ŀǻşτ śυĉčёśśƒцł ѕćǻη щâš ώíţћιή ţћē ľāŝт 7 δαуš TimeCreated : 29.10.2026 21:05:04 Message : Produkt Program antywirusowy Microsoft Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niec hciane oprogramowanie. Aby uzyskać więcej informacji, zobacz: https://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/Keygen&threatid=2147593794&enterprise=0 Nazwa: HackTool:Win32/Keygen Identyfikator: 2147593794 Ważność: Wysoki Kategoria: Narzędzie Ścieżka: file:_C:\Users\Rafałek\AppData\Local\Opera Software\Opera GX Stable\Default\Cache\Cache_Data\f _0214f1; file:_C:\Users\Rafałek\Downloads\ELSA_Keygen.rar; file:_C:\Users\Rafałek\Downloads\ELSA_Keygen.r ar.opdownload; webfile:_C:\Users\Rafałek\Downloads\ELSA_Keygen.rar|https://s9996.chomikuj.pl/File.aspx?e= _uN-NlGYhUtSpUpBQd7BWAUOIM-ys9xxoMUHLkpfMQSxUsQLSfp1_qj-kG_N4LgzoMyxyrOK9ccCERVFX_pShLx5uyS8_aml5Vx5tMUA7 etqs9oP36LjEXpMXukX4xrkY5zS90XdYCF9hXJpe190O_aWTO6a5vz6iQJI_BvluZ1hz-OtUBLyVtHrZ0_M0hEdWefng5D-xIOTN4ps99 OuJ0UYJwNDxkb8GX0-PEDHFJwApWVb_F8gQk95LOR5L5waNO9pAuw3dOcFq0Ggwb1wFiHKFD14WgzCyh36XjIWK9WIF8vEwBD2pxo3VrZ yygAi9PKjH3Agv44paKJvPnmzZuXejCaEKijLk5Ugq1fDjTUwB0GqNXiPzMG7cyZeG_D6u6Om4-Mn-tjILr9LETx_Yg&pv=2|pid:2633 6,ProcessStart:134377779045237622 Pochodzenie wykrycia: Komputer lokalny Typ wykrycia: Konkretne Źródło wykrycia: Ochrona w czasie rzeczywistym Użytkownik: DESKTOP-ELUSHB3\Rafałek Nazwa procesu: C:\Users\Rafałek\AppData\Local\Programs\Opera GX\opera.exe Wersja analizy zabezpieczeń: AV: 1.463.28.0, AS: 1.463.28.0, NIS: 1.463.28.0 Wersja aparatu: AM: 1.1.26100.4, NIS: 1.1.26100.4 TimeCreated : 29.10.2026 21:05:04 Message : Produkt Program antywirusowy Microsoft Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niec hciane oprogramowanie. Aby uzyskać więcej informacji, zobacz: https://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/Keygen&threatid=2147593794&enterprise=0 Nazwa: HackTool:Win32/Keygen Identyfikator: 2147593794 Ważność: Wysoki Kategoria: Narzędzie Ścieżka: file:_C:\Users\Rafałek\AppData\Local\Opera Software\Opera GX Stable\Default\Cache\Cache_Data\f _0214f1; file:_C:\Users\Rafałek\Downloads\ELSA_Keygen.rar.opdownload Pochodzenie wykrycia: Komputer lokalny Typ wykrycia: Konkretne Źródło wykrycia: Ochrona w czasie rzeczywistym Użytkownik: DESKTOP-ELUSHB3\Rafałek Nazwa procesu: C:\Users\Rafałek\AppData\Local\Programs\Opera GX\opera.exe Wersja analizy zabezpieczeń: AV: 1.463.28.0, AS: 1.463.28.0, NIS: 1.463.28.0 Wersja aparatu: AM: 1.1.26100.4, NIS: 1.1.26100.4 TimeCreated : 29.10.2026 21:05:04 Message : Produkt Program antywirusowy Microsoft Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niec hciane oprogramowanie. Aby uzyskać więcej informacji, zobacz: https://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/Keygen&threatid=2147593794&enterprise=0 Nazwa: HackTool:Win32/Keygen Identyfikator: 2147593794 Ważność: Wysoki Kategoria: Narzędzie Ścieżka: file:_C:\Users\Rafałek\AppData\Local\Opera Software\Opera GX Stable\Default\Cache\Cache_Data\f _0214f1 Pochodzenie wykrycia: Komputer lokalny Typ wykrycia: Konkretne Źródło wykrycia: Ochrona w czasie rzeczywistym Użytkownik: DESKTOP-ELUSHB3\Rafałek Nazwa procesu: C:\Users\Rafałek\AppData\Local\Programs\Opera GX\opera.exe Wersja analizy zabezpieczeń: AV: 1.463.28.0, AS: 1.463.28.0, NIS: 1.463.28.0 Wersja aparatu: AM: 1.1.26100.4, NIS: 1.1.26100.4 TimeCreated : 28.10.2026 20:02:35 Message : Produkt Program antywirusowy Microsoft Defender wykrył złośliwe oprogramowanie lub inne potencjalnie niec hciane oprogramowanie. Aby uzyskać więcej informacji, zobacz: https://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/Keygen&threatid=2147593794&enterprise=0 Nazwa: HackTool:Win32/Keygen Identyfikator: 2147593794 Ważność: Wysoki Kategoria: Narzędzie Ścieżka: file:_C:\Users\Rafałek\Downloads\ELSA\VW\ELSA_Keygen.rar Pochodzenie wykrycia: Komputer lokalny Typ wykrycia: Konkretne Źródło wykrycia: Ochrona w czasie rzeczywistym Użytkownik: DESKTOP-ELUSHB3\Rafałek Nazwa procesu: C:\Users\Rafałek\AppData\Roaming\BitTorrent Web\btweb.exe Wersja analizy zabezpieczeń: AV: 1.463.9.0, AS: 1.463.9.0, NIS: 1.463.9.0 Wersja aparatu: AM: 1.1.26100.4, NIS: 1.1.26100.4 TimeCreated : 26.10.2026 17:36:54 Message : Program antywirusowy Microsoft Defender ѕçãп ĥâѕ ъéëⁿ ŝţθрφĕδ ъęƒóŗё çθmрļêťìση.%ⁿ %ţŠсäл ÎĐ:%ь{5F8C09FB- D86A-49C0-B8CE-1F6FCFADCE9D}%й %ŧŜсāń Ţŷρē:%ъNarzędzia chroniące przed złośliwym oprogramowaniem%η %τŚċàл Ρдѓдмëŧеґѕ:%вSzybkie skanowanie%η %ŧŬŝèѓ:%вZARZĄDZANIE NT\SYSTEM%п %тŚτòφ Ґєάšбņ:%вŜćħèðūŀêδ ŝсâʼn ωàš ş ќîφρзð вēčáùśĕ тħε ļăѕт ŝцĉ¢еšşƒüľ şċãή ẁаŝ ẅīţђϊη ţнê ŀåşτ 7 đăγš TimeCreated : 25.10.2026 11:35:17 Message : Program antywirusowy Microsoft Defender ѕçãп ĥâѕ ъéëⁿ ŝţθрφĕδ ъęƒóŗё çθmрļêťìση.%ⁿ %ţŠсäл ÎĐ:%ь{E1C030BA- 1433-4599-891F-C31A79205965}%й %ŧŜсāń Ţŷρē:%ъNarzędzia chroniące przed złośliwym oprogramowaniem%η %τŚċàл Ρдѓдмëŧеґѕ:%вSzybkie skanowanie%η %ŧŬŝèѓ:%вZARZĄDZANIE NT\SYSTEM%п %тŚτòφ Ґєάšбņ:%вҐΡĆ ¢оńʼnёčτĭôň ґùŋđó ẁπ CodeIntegrity: =============== Date: 2026-11-02 13:01:45 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Users\Rafałek\AppData\Local\Programs\Porofessor Standalone\Porofessor Standalone.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Microsoft signing level requirements. ==================== Statystyki pamięci =========================== BIOS: American Megatrends Inc. P4.80 03/10/2021 Płyta główna: ASRock B450 Gaming K4 Procesor: AMD Ryzen 5 3600 6-Core Processor Procent pamięci w użyciu: 59% Całkowita pamięć fizyczna: 16308.8 MB Dostępna pamięć fizyczna: 6534 MB Całkowita pamięć wirtualna: 36788.8 MB Dostępna pamięć wirtualna: 21735.84 MB ==================== Dyski ================================ Disk 2 - Drive c: (M.2) (Fixed) (Total:475.96 GB) (Free:27.78 GB) (Model: Lexar SSD NM620 512GB) NTFS Disk 0 - Drive d: (SSD) (Fixed) (Total:223.57 GB) (Free:64.77 GB) (Model: IRP-SSDPR-S25B-240) NTFS Disk 1 - Drive e: (HDD) (Fixed) (Total:931.51 GB) (Free:157.07 GB) (Model: TOSHIBA HDWD110) NTFS Disk 2 - \\?\Volume{786606c2-be62-43e7-b508-0c86a394a47b}\ () (Fixed) (Total:881 MB) (Free:77.25 MB) NTFS Disk 2 - \\?\Volume{2fe84d40-98b2-4c28-b0d3-3899404ed47f}\ () (Fixed) (Total:96 MB) (Free:61.29 MB) FAT32 ==================== MBR & Tablica partycji ==================== ============================================================ Disk: 0 (MBR Code: Windows 7/8/10) (Size: 223.57 GB) (Disk ID: 0B86070B) Partitions: =========== Partition Style : GPT Partition Count : 1 Disk ID : {1E87A74D-E27A-4F7A-BAEB-08151AC3E810} Usable Offset : 0.02 MB Usable Length : 223.57 GB Max Partitions : 128 Partition 1 Type : Basic Data Partition Size : 223.57 GB Offset : 1 MB Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7} Partition GUID : {7E663AB8-B218-41E1-96D8-07A337B2BFCB} GPT Name : Basic data partition Attributes : 0x0000000000000000 Attribute Flags : None Hidden : No Platform Required: No ------------------------------------------------------------ ============================================================ Disk: 1 (Size: 931.51 GB) (Disk ID: 5E81EB7D) Partitions: =========== Partition Style : GPT Partition Count : 1 Disk ID : {39E138F8-7285-11EA-B868-A8A1590D0AAF} Usable Offset : 0.02 MB Usable Length : 931.51 GB Max Partitions : 128 Partition 1 Type : Basic Data Partition Size : 931.51 GB Offset : 1 MB Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7} Partition GUID : {456BC14A-5051-40B4-8C8C-402D9CDF927B} GPT Name : Basic data partition Attributes : 0x0000000000000000 Attribute Flags : None Hidden : No Platform Required: No ------------------------------------------------------------ ============================================================ Disk: 2 (Size: 476.94 GB) (Disk ID: 0B86670B) Partitions: =========== Partition Style : GPT Partition Count : 4 Disk ID : {D5DCE5C1-DAD3-4115-B916-D028DC92B763} Usable Offset : 0.02 MB Usable Length : 476.94 GB Max Partitions : 128 Partition 1 Type : EFI System Partition Size : 100 MB Offset : 1 MB Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B} Partition GUID : {2FE84D40-98B2-4C28-B0D3-3899404ED47F} GPT Name : EFI system partition Attributes : 0x8000000000000000 Attribute Flags : No Default Drive Letter Hidden : Yes Platform Required: No ------------------------------------------------------------ Partition 2 Type : Microsoft Reserved (MSR) Size : 16 MB Offset : 101 MB Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE} Partition GUID : {621BD033-684B-4D35-8C3F-6420716A7474} GPT Name : Microsoft reserved partition Attributes : 0x8000000000000000 Attribute Flags : No Default Drive Letter Hidden : Yes Platform Required: No ------------------------------------------------------------ Partition 3 Type : Basic Data Partition Size : 475.96 GB Offset : 117 MB Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7} Partition GUID : {FFB818F4-0893-437E-AAE0-A7E68DF6AB58} GPT Name : Basic data partition Attributes : 0x0000000000000000 Attribute Flags : None Hidden : No Platform Required: No ------------------------------------------------------------ Partition 4 Type : Windows Recovery Size : 881 MB Offset : 487504 MB Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC} Partition GUID : {786606C2-BE62-43E7-B508-0C86A394A47B} Attributes : 0x8000000000000001 Attribute Flags : Platform Required, No Default Drive Letter Hidden : Yes Platform Required: Yes ------------------------------------------------------------ ============================================================ ==================== Koniec Addition.txt =======================