Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 01-11-2026
Uruchomiony przez Rafałek (administrator)  DESKTOP-ELUSHB3 (02-11-2026 14:12:41)
Uruchomiony z C:\Users\Rafałek\Downloads\FRST64.exe
Załadowane profile: Rafałek
Platforma: Microsoft Windows 11 Education Insider Preview Wersja 26H2 26340.9843 (X64) Język: Polski (Polska)
Domyślna przeglądarka: "C:\Users\Rafałek\AppData\Local\Programs\Opera GX\opera.exe" -noautoupdate -- "%1"
Tryb startu: Normal

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

() [Brak podpisu cyfrowego] D:\srv_apps\bbgate\Apache.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files\WindowsApps\AdobeSystemsIncorporated.AdobePhotoshopExpress_6.9.30.0_x64__mtcwf2zmmt10c\Adobe Crash Processor.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ->) (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(C:\Program Files (x86)\Overwolf\0.311.1.6\Overwolf.exe ->) (Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.311.1.6\OverwolfHelper.exe
(C:\Program Files (x86)\Overwolf\0.311.1.6\Overwolf.exe ->) (Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.311.1.6\OverwolfHelper64.exe
(C:\Program Files (x86)\Overwolf\0.311.1.6\Overwolf.exe ->) (Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Overwolf\0.311.1.6\OverwolfBrowser.exe <4>
(C:\Program Files\Google\Play Games Services\26.10.318.0\Service\GooglePlayGamesServices.exe ->) (Google LLC -> ) C:\Program Files\Google\Play Games Services\26.10.318.0\Service\data\windows.assets\crashpad_handler.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer.exe
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\tv_w32.exe
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\tv_x64.exe
(C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.164.0_x64__97hta09mmv6hy\Build\Lively.exe ->) (D80CB9E2-21E6-4D9B-8533-660C768F3C5B -> ) C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.164.0_x64__97hta09mmv6hy\Build\Plugins\Mpv\mpv.exe
(C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.164.0_x64__97hta09mmv6hy\Build\Lively.exe ->) (D80CB9E2-21E6-4D9B-8533-660C768F3C5B -> ) C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.164.0_x64__97hta09mmv6hy\Build\Plugins\Watchdog\Lively.Watchdog.exe
(C:\Program Files\WindowsApps\AppleInc.AppleDevices_1.1792.39682.0_x64__nzyj5cx40ttqa\AppleMobileDeviceLauncher.exe ->) (Apple Inc. -> ) C:\Program Files\WindowsApps\AppleInc.AppleDevices_1.1792.39682.0_x64__nzyj5cx40ttqa\AppleMobileDeviceProcess.exe
(C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe ->) (Spotify AB -> ) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\crashpad_handler.exe
(C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\SpotifyXboxGamebarWebView.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe
(C:\Program Files\XboxService\x64\XboxService.exe ->) (Microsoft Corporation -> ) C:\Program Files\Microsoft GameInput\x64\GameInputRawInputProxy.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\DefenderAiPlatformHost.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\DefenderSessionHelper.exe
(C:\Users\Rafałek\AppData\Local\Programs\Opera GX\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Rafałek\AppData\Local\Programs\Opera GX\138.0.6044.45\opera_crashreporter.exe
(C:\Windows\runSW.exe ->) (Realtek Semiconductor Corp. -> Realtek) C:\Windows\SwUSB.exe
(Discord Inc. -> Discord Inc.) C:\Users\Rafałek\AppData\Local\Discord\app-1.0.9266\Discord.exe <6>
(discord-code-sign-windows-admin -> Discord Inc.) C:\Users\Rafałek\AppData\Local\Discord\app-1.0.9266\modules\discord_utils-1\discord_utils\DiscordSystemHelper.exe <2>
(explorer.exe ->) (Adobe Inc. -> PSExpressBroker) C:\Program Files\WindowsApps\AdobeSystemsIncorporated.AdobePhotoshopExpress_6.9.30.0_x64__mtcwf2zmmt10c\PSExpressBroker.exe
(explorer.exe ->) (Adobe Inc. -> PSExpressCore) C:\Program Files\WindowsApps\AdobeSystemsIncorporated.AdobePhotoshopExpress_6.9.30.0_x64__mtcwf2zmmt10c\PSExpressCore.exe
(explorer.exe ->) (M.O.B.A. Network AB -> M.O.B.A. Network) C:\Users\Rafałek\AppData\Local\Programs\Porofessor Standalone\Porofessor Standalone.exe
(explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Rafałek\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
(explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Rafałek\AppData\Local\Programs\Opera GX\opera.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(explorer.exe ->) (Riot Games, Inc. -> Riot Games, Inc.) C:\Program Files\Riot Vanguard\vgtray.exe
(M.O.B.A. Network AB -> M.O.B.A. Network) C:\Users\Rafałek\AppData\Local\Programs\Porofessor Standalone\Porofessor Standalone.exe <6>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe <10>
(Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
(Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\XboxService\x64\XboxService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_8dfba354c9333cfd\Display.NvContainer\NVDisplay.Container.exe
(Opera Norway AS -> Opera Software) C:\Users\Rafałek\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
(Opera Norway AS -> Opera Software) C:\Users\Rafałek\AppData\Local\Programs\Opera GX\opera.exe <32>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Overwolf\0.311.1.6\Overwolf.exe
(services.exe ->) () [Brak podpisu cyfrowego] D:\srv_apps\bbgate\Apache.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\Service\AorusLcdService.exe
(services.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Play Games Services\26.10.318.0\Service\GooglePlayGamesServices.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
(services.exe ->) (Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\XboxService\x64\XboxService.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MidiSrv.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd) C:\Windows\SysWOW64\Creative.UWPRPCService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_8dfba354c9333cfd\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Realtek Semiconductor Corp. -> ) C:\Windows\runSW.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\System32\DriverStore\FileRepository\netrtwlanu.inf_amd64_0dc97ba2af82c338\RTUWPSrvcMain.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (VOLKSWAGEN AG) [Brak podpisu cyfrowego] D:\srv_apps\bbgate\BBGate.exe
(sihost.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.AppleDevices_1.1792.39682.0_x64__nzyj5cx40ttqa\AppleMobileDeviceLauncher.exe
(sihost.exe ->) (D80CB9E2-21E6-4D9B-8533-660C768F3C5B -> ) C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.164.0_x64__97hta09mmv6hy\Build\Lively.exe
(sihost.exe ->) (Spotify AB -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe
(Spotify AB -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe <8>
(svchost.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files\GIGABYTE\Control Center\GCC.exe
(svchost.exe ->) (GIGABYTE Technology Co.,Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\AORUS.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2611.1001.10.0_x64__8wekyb3d8bbwe\XboxGameBarWidgets.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2611.1001.10.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.326.10141.0_x64__8wekyb3d8bbwe\GameBar.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.326.10141.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(svchost.exe ->) (Spotify AB -> ) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\SpotifyXboxGamebarWebView.exe

==================== Rejestr (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [SteelSeriesGG] => C:\Program Files\SteelSeries\GG\SteelSeriesGGEZ.exe [195640 2026-08-24] (GN Hearing A/S -> SteelSeries A/S)
HKLM\...\Run: [Cm108BSound] => C:\Program Files\SPC Gear Viro Plus USB\CPL\XearAudioCenter_x64.exe [2461664 2021-01-14] () [Brak podpisu cyfrowego]
HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [857376 2019-01-16] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [7336968 2026-10-01] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM-x32\...\Run: [Launch 0 FwCustom] => C:\Program Files\SPC_Gear\GK550.exe [3572224 2018-11-30] (0) [Brak podpisu cyfrowego]
HKLM-x32\...\Run: [Wraith Prism] => C:\Program Files (x86)\AMD Wraith\Wraith Prism\Wraith Prism HID.exe [1899520 2019-05-03] (Cooler Master) [Brak podpisu cyfrowego]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [742536 2026-07-23] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Run: [Discord] => C:\Users\Rafałek\AppData\Local\Discord\Update.exe [1515904 2024-10-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [52777912 2026-09-24] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5823128 2026-10-21] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Run: [Opera GX Stable] => "C:\Users\Rafałek\AppData\Local\Programs\Opera GX\opera.exe" --autostart [3529672 2026-10-29] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Run: [btweb] => C:\Users\Rafałek\AppData\Roaming\BitTorrent Web\btweb.exe [9507944 2026-06-16] (Rainberry Inc -> BitTorrent Limited)
HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Run: [GogGalaxy] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [14592560 2025-12-11] (GOG  sp. z o.o -> GOG.com)
HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Run: [RiotClient] => E:\GRY\Riot Games\Riot Client\RiotClientServices.exe [76543296 2026-10-23] (Riot Games, Inc. -> Riot Games, Inc.)
HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Run: [electron.app.BlueStacks Services] => C:\Users\Rafałek\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe [162219656 2024-05-08] (Now.gg, INC -> now.gg, Inc.)
HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Run: [MicrosoftEdgeAutoLaunch_88A367E8F038C00D58C51B99B35FA499] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5072200 2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Run: [EPSDNMON] => C:\Program Files (x86)\Epson Software\Download Navigator\EPSDNMON.EXE [350032 2022-07-21] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [45649368 2026-10-13] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIHVE.EXE [239488 2011-04-24] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [2125640 2026-10-29] (Overwolf Ltd -> Overwolf Ltd.)
HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Run: [PorofessorApp] => C:\Users\Rafałek\AppData\Local\Programs\Porofessor Standalone\Porofessor Standalone.exe [211960080 2026-10-31] (M.O.B.A. Network AB -> M.O.B.A. Network)
HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Run: [YouTubeToMP3] => "C:\Program Files\BBFly\BBFly\BBFly64.exe" mode=StartWhenPowerUp (Brak pliku)
HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\...\Run: [Opera GX Browser Assistant] => C:\Users\Rafałek\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe [5609416 2026-10-29] (Opera Norway AS -> Opera Software)
HKLM\...\Print\Monitors\EPSON BX635FWD Series 64MonitorBE: C:\WINDOWS\system32\E_YLMHVE.DLL [118784 2010-09-28] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\EPSON Universal Print Driver 64MonitorBE: C:\WINDOWS\system32\E_2LM0DE.DLL [247992 2025-01-30] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [558592 2012-11-12] (SEIKO EPSON CORPORATION) [Brak podpisu cyfrowego]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\156.0.8078.79\Installer\chrmstp.exe [8358040 2026-10-30] (Google LLC -> Google LLC)
Startup: C:\Users\Rafałek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AORUS ENGINE.lnk [2026-07-12]
ShortcutTarget: AORUS ENGINE.lnk -> C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\autorun.exe () [Brak podpisu cyfrowego]
Startup: C:\Users\Rafałek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk [2025-06-29]
ShortcutTarget: Xfire.lnk -> C:\Program Files (x86)\Xfire\Xfire.exe (Xfire -> Xfire Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FxSound.lnk [2026-01-30]
ShortcutTarget: FxSound.lnk -> C:\Program Files\FxSound LLC\FxSound\FxSound.exe (FxSound, LLC -> FxSound LLC)

==================== Zaplanowane zadania (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {DA462C1C-0D54-4EFB-96AC-13B0559F720C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1617408 2026-08-03] (Adobe Inc. -> Adobe Inc.)
Task: {D3D58D2A-33BB-48CB-9F03-2A7F7B1EE18E} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [303024 2025-10-03] (Now.gg, INC -> BlueStack Systems, Inc.)
Task: {069F5037-57C9-440E-8DC1-654D72889A9C} - System32\Tasks\GCC => C:\Program Files\GIGABYTE\Control Center\GCC.exe [35425448 2025-09-12] (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) -> C:\Program Files\GIGABYTE\Control Center\\-b
Task: {0264E31F-9E5F-4172-B6E0-A4ED45DFB9F5} - System32\Tasks\Google Play Games Notifier => C:\Program Files\Google\Play Games\Bootstrapper.exe [378008 2026-10-24] (Google LLC -> Google LLC)
Task: {AE18F0CE-3E71-4CC4-9625-DBFD274DBC63} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem157.0.8089.0{7D930D0C-60D8-43E3-905F-A98D722DCF2C} => C:\Program Files (x86)\Google\GoogleUpdater\157.0.8089.0\updater.exe [9958552 2026-10-06] (Google LLC -> Google LLC)
Task: {424BF154-E8EA-4786-A917-F24878609408} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
Task: {B142E8C1-94B2-4BD5-94BC-66618E6605CE} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
Task: {2EC3FDF1-2636-438B-9413-7954E100C35A} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelperOnUnlock => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
Task: {3BAD6803-9D88-4E71-9C4F-2C8AEEE44464} - System32\Tasks\Launcher GIGABYTE AORUS GRAPHICS ENGINE => C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\AORUS.exe [34677248 2025-12-22] (GIGABYTE Technology Co.,Ltd.) [Brak podpisu cyfrowego]
Task: {438720AB-8C0F-43CD-AAD8-1B989F64563B} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [16470320 2026-10-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {F52D45A5-C3D1-4C64-B7C9-160A7D4768DC} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28440896 2026-10-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {DB6B7CA4-4E2A-4B89-AFF0-8DED91CBD781} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\opushutil.exe [69976 2026-10-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {F2B90668-6BCD-4F73-8350-BC96B96A7178} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28440896 2026-10-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {8DBB33D5-B5F6-45BD-949B-405A2D5BE943} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [426272 2026-10-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {1A0E1129-CC06-4DB1-96A8-9A691BA6BDCE} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [426272 2026-10-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {F8B53700-714D-4BFB-9064-F2CB3E40A053} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [1328920 2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {DC4F892F-D0B0-497E-BBFA-3E7029933249} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [16470320 2026-10-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {189112B2-E302-419B-9E1A-11C871E4EF53} - System32\Tasks\Microsoft\Windows\BitLocker\BitLocker PIN Protector Removal => {492efed4-8549-4b30-a53e-7bd4560e954c} C:\WINDOWS\System32\bdetask.dll [147456 2026-10-24] (Microsoft Windows -> Microsoft Corporation)
Task: {D767CBC7-9815-4CA6-AD1F-4313EF47F319} - System32\Tasks\Microsoft\Windows\BitLocker\BitLocker PIN Protector Required => {492efed4-8549-4b30-a53e-7bd4560e954c} C:\WINDOWS\System32\bdetask.dll [147456 2026-10-24] (Microsoft Windows -> Microsoft Corporation)
Task: {8056CB22-49E5-4DEB-AECE-38BBCE8A1690} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Brak pliku)
Task: {7275C7F7-1862-4822-ACA4-A2132FF080F8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {36D4C04E-3E43-48D9-9952-CB562E1EA767} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D5ED4C37-FAD4-4D07-9B00-EBCC20A803BA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1AF3369D-636B-438D-B0C2-09A8A941CF6C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5C124B12-55C0-4BC7-A6EC-ECB0D66C60C3} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3346544 2026-04-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6AE68949-E064-4F3C-9363-FDC80FDCB1B3} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1730910569 => C:\Users\Rafałek\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe [7777736 2026-10-23] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --installdir="C:\Users\Rafałek\AppData\Local\Programs\Opera GX\assistant" --producttype=assistant $(Arg0)
Task: {4A9C83C0-4047-42B0-962F-E4C5EBE8CC90} - System32\Tasks\Opera GX scheduled Autoupdate 1729336364 => C:\Users\Rafałek\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe [7777736 2026-10-23] (Opera Norway AS -> Opera Software)
Task: {B0D4A42B-8332-4623-A8F2-879A5B0FC2E5} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2408264 2026-10-29] (Overwolf Ltd -> Overwolf LTD) -> C:\Program Files (x86)\Overwolf\/RunningFrom Schedule
Task: {2D33173F-4375-49C7-BCFA-C743F09F23CE} - System32\Tasks\Ubisoft\Ubisoft Connect Background Update => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe [17622520 2026-10-06] (UBISOFT ENTERTAINMENT INC. -> Ubisoft)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{2fa9a76a-4737-4b58-85b2-7b9b3feb5a6e}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{dc98a76f-2ed1-4e95-93b1-529fac4cc13e}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{dc98a76f-2ed1-4e95-93b1-529fac4cc13e}: [DhcpDomain] mynet

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.503.2 -> C:\Program Files\Java\jre1.8.0_503\bin\dtplugin\npDeployJava1.dll [2026-07-23] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.503.2 -> C:\Program Files\Java\jre1.8.0_503\bin\plugin2\npjp2.dll [2026-07-23] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-10-13] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Rafałek\AppData\Local\Microsoft\Edge\User Data\Default [2026-10-29]
Edge Extension: (Dokumenty Google offline) - C:\Users\Rafałek\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-11-29]
Edge Extension: (Edge relevant text changes) - C:\Users\Rafałek\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-10-19]
Edge Extension: (Microsoft Power Automate) - C:\Users\Rafałek\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kagpabjoboikccfdghpdlaaopmgpgfdc [2025-11-15]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [kagpabjoboikccfdghpdlaaopmgpgfdc]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]

Chrome: 
=======
CHR Profile: C:\Users\Rafałek\AppData\Local\Google\Chrome\User Data\Default [2026-10-29]
CHR Extension: (Adblock Plus - darmowy adblocker) - C:\Users\Rafałek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2026-01-19]
CHR Extension: (alerabat.com | kupony i cashback) - C:\Users\Rafałek\AppData\Local\Google\Chrome\User Data\Default\Extensions\dacdinoicboceafielngnmjjplncljhj [2026-01-19]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Rafałek\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-01-19]
CHR Extension: (Dark Reader) - C:\Users\Rafałek\AppData\Local\Google\Chrome\User Data\Default\Extensions\eimadpbcbfnmbkopoojfekhnkhdbieeh [2026-01-19]
CHR Extension: (Dokumenty Google offline) - C:\Users\Rafałek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-10-27]
CHR Extension: (AdBlock — najlepszy bloker reklam) - C:\Users\Rafałek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2026-01-19]
CHR Extension: (Microsoft Power Automate) - C:\Users\Rafałek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljglajjnnkapghbckkcmodicjhacbfhk [2026-01-19]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Rafałek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-07-10]
CHR Extension: (Open Multiple URLs) - C:\Users\Rafałek\AppData\Local\Google\Chrome\User Data\Default\Extensions\oifijhaokejakekmnjmphonojcfkpbbh [2025-07-10]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-3177584935-2586668752-2516186833-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ljglajjnnkapghbckkcmodicjhacbfhk]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

Opera: 
=======
OPR DefaultProfile: Default
StartMenuInternet: (HKU\S-1-5-21-3177584935-2586668752-2516186833-1001) Opera GXStable - "C:\Users\Rafałek\AppData\Local\Programs\Opera GX\opera.exe"

==================== Usługi (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [182776 2026-08-03] (Adobe Inc. -> Adobe Inc.)
R2 AorusLcdService; C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\Service\AorusLcdService.exe [58840 2024-10-28] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
R2 BBGate; D:\srv_apps\bbgate\BBGate.exe [1211392 2012-06-27] (VOLKSWAGEN AG) [Brak podpisu cyfrowego]
R2 BBGate-HTTPD; D:\srv_apps\bbgate\Apache.exe [20480 2011-12-06] () [Brak podpisu cyfrowego]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [20352680 2026-06-06] (BattlEye Innovations e.K. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13375296 2026-10-12] (Microsoft Corporation -> Microsoft Corporation)
S3 DiscordSystemHelper; C:\Program Files\Common Files\Discord\Discord\DiscordSystemHelper.exe [2247552 2026-09-12] (discord-code-sign-windows-admin -> Discord Inc.)
S3 EpicGamesUpdater; C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesUpdater.exe [3418552 2026-09-24] (Epic Games Inc. -> Epic Games, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [2619832 2026-09-24] (Epic Games Inc. -> Epic Games, Inc.)
S4 FACEITService; C:\Program Files\FACEIT AC\faceitservice.exe [82822376 2025-02-25] (ESL FACEIT Group Ltd. -> )
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [2443312 2025-12-11] (GOG  sp. z o.o -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [7657008 2025-08-25] (GOG  sp. z o.o -> GOG.com)
R2 GameInputRedistService; C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe [466600 2026-10-19] (Microsoft Corporation -> Windows (R) Win 7 DDK provider)
R2 GooglePlayGamesServices-26.10.318.0; C:\Program Files\Google\Play Games Services\26.10.318.0\Service\GooglePlayGamesServices.exe [520856 2026-10-13] (Google LLC -> Google LLC)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11667704 2026-10-21] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [4291576 2026-07-05] (Malwarebytes Inc -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe [2386280 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_8dfba354c9333cfd\Display.NvContainer\NVDisplay.Container.exe [1703256 2026-09-29] (NVIDIA Corporation -> NVIDIA Corporation)
S3 OverwolfUpdater; C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2408264 2026-10-29] (Overwolf Ltd -> Overwolf LTD)
S3 PlutonQcService; C:\WINDOWS\system32\PlutonQcService.exe [163840 2026-10-24] (Microsoft Windows -> Microsoft Corporation)
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [1682040 2026-06-22] (Rockstar Games, Inc. -> Rockstar Games)
R2 RTUsbSwSrvc; C:\WINDOWS\System32\DriverStore\FileRepository\netrtwlanu.inf_amd64_0dc97ba2af82c338\RTUWPSrvcMain.exe [1026936 2026-01-22] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
R2 RunSwUSB; C:\Windows\runSW.exe [59232 2019-08-19] (Realtek Semiconductor Corp. -> )
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [915416 2026-08-21] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 SteelSeriesGGUpdateServiceProxy; C:\Program Files\SteelSeries\GG\updateService\SteelSeriesGGUpdateServiceProxy.exe [1587712 2025-03-12] (GN Hearing A/S -> )
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [28242768 2026-09-21] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 UpcElevationService; C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher Core\UpcElevationService.exe [356344 2026-10-06] (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
R2 UWPService; C:\WINDOWS\SysWOW64\Creative.UWPRPCService.exe [357288 2020-10-27] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd)
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [763024 2024-10-10] (Oracle America, Inc. -> Oracle and/or its affiliates)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [107505544 2026-10-01] (Riot Games, Inc. -> Riot Games, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe [5609240 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe [378128 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 XboxService; C:\Program Files\XboxService\x64\XboxService.exe [579752 2026-10-14] (Microsoft Corporation -> Windows (R) Win 7 DDK provider)

===================== Sterowniki (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 108B_VIRO_PLUS; C:\WINDOWS\System32\drivers\108B_VIRO_PLUS.sys [3677096 2021-02-01] (Microsoft Windows Hardware Compatibility Publisher -> CMedia Inc.)
R3 AmdTools64; C:\WINDOWS\System32\drivers\AmdTools64.sys [77240 2022-07-18] (Advanced Micro Devices Inc. -> AMD)
S3 AsrDrv200; \??\C:\Windows\SysWOW64\Drivers\AsrDrv200.sys [67792 2024-10-19] (ASROCK INC. -> )
S3 AsrDrv202; \??\C:\Windows\SysWOW64\Drivers\AsrDrv202.sys [68208 2024-10-19] (ASROCK INC. -> )
R2 BlueStacksDrv_nxt; \??\C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [394272 2025-10-03] (Microsoft Windows Hardware Compatibility Publisher -> )
R1 CTIIO; \??\C:\Windows\system32\drivers\CtiIo64.sys [32840 2024-10-19] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 Dokan2; C:\WINDOWS\system32\drivers\dokan2.sys [398496 2025-09-28] (Microsoft Windows Hardware Compatibility Publisher -> Dokan Project)
S3 EuMrx; C:\WINDOWS\System32\DRIVERS\EuMrx.sys [215704 2025-06-20] (CHENGDU YIWO Tech Development Co., Ltd. -> Windows (R) Win 7 DDK provider)
S4 FACEIT; \??\C:\Program Files\FACEIT AC\FACEIT_AC.sys [110395064 2025-03-04] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 FXVAD; C:\WINDOWS\system32\drivers\fxvad.sys [326656 2025-07-14] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R3 gdrv3; \??\C:\WINDOWS\System32\drivers\gdrv3.sys [52432 2026-07-12] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
R1 googlehaxm; \??\C:\WINDOWS\system32\drivers\GoogleHaxm.sys [237248 2026-08-21] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 hidgamepad; C:\WINDOWS\System32\DriverStore\FileRepository\hidgamepad.inf_amd64_fe5db2b39878d53e\hidgamepad.sys [73728 2026-10-24] (Microsoft Windows -> Microsoft Corporation)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82968 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [235624 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2026-07-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [245864 2026-10-06] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBfilt; C:\WINDOWS\system32\drivers\MBfilt64.sys [43456 2019-05-06] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd.)
S3 MSIO; \??\C:\Program Files (x86)\ASRock Utility\ASRRGBLED\Bin\msio64.sys [19672 2023-12-10] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 rtcx21; C:\WINDOWS\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_0dc51f5b5ad8efe9\rtcx21x64.sys [961688 2026-09-02] (Realtek Semiconductor Corp. -> Realtek)
R3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [12434304 2026-01-22] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
S2 Sentinel64; C:\WINDOWS\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc. -> SafeNet, Inc.)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [43568 2025-11-04] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [55856 2026-08-24] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
R3 SteelSeries_Sonar_VAD; C:\WINDOWS\System32\DriverStore\FileRepository\steelseries-sonar-vad.inf_amd64_036e27f3054ae1bc\SteelSeries-Sonar-VAD.sys [95912 2026-05-06] (GN Hearing A/S -> Windows (R) Win 7 DDK provider)
R3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [246200 2024-10-10] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxSup; C:\WINDOWS\system32\DRIVERS\VBoxSup.sys [1051944 2024-10-10] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [195560 2024-10-10] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 vgk; \??\C:\Program Files\Riot Vanguard\vgk.sys [109721528 2026-10-01] (Riot Games, Inc. -> )
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-10-28] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [677952 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [144408 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
S0 wesp; C:\WINDOWS\System32\drivers\wesp.sys [4820624 2026-11-01] (Microsoft Windows -> Microsoft Corporation)
S0 wespelam; C:\WINDOWS\System32\drivers\wesp_elam.sys [1612720 2026-11-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

==================== SvcHost (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc (utworzone) (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2026-11-02 14:12 - 2026-11-02 14:13 - 000041575 _____ C:\Users\Rafałek\Downloads\FRST.txt
2026-11-02 14:10 - 2026-11-02 14:10 - 000000000 ____D C:\Users\Rafałek\Downloads\FRST-OlderVersion
2026-11-02 13:06 - 2026-11-02 13:06 - 000782206 _____ C:\WINDOWS\system32\perfh015.dat
2026-11-02 13:06 - 2026-11-02 13:06 - 000160056 _____ C:\WINDOWS\system32\perfc015.dat
2026-11-01 22:57 - 2026-11-01 22:57 - 000000000 ____D C:\WINDOWS\system32\UOPProviders
2026-11-01 18:04 - 2026-11-02 13:16 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-11-01 02:07 - 2026-11-01 02:07 - 000000000 ____D C:\Users\Rafałek\AppData\Local\Programs\Porofessor Standalone
2026-10-30 22:57 - 2026-10-30 22:57 - 000000000 ____D C:\Users\Rafałek\Downloads\ForzaHorizon6_Fix_Repair_Steam_V2_Generic
2026-10-30 22:56 - 2026-10-30 22:56 - 011794526 _____ C:\Users\Rafałek\Downloads\ForzaHorizon6_Fix_Repair_Steam_V2_Generic.rar
2026-10-30 22:55 - 2026-10-30 22:55 - 000000000 ____D C:\Users\Rafałek\AppData\Roaming\Microsoft\HTML Help
2026-10-30 22:54 - 2026-10-30 22:54 - 000450090 _____ C:\Users\Rafałek\Downloads\Forza.Horizon.6.v354.221-OFME.torrent
2026-10-29 21:30 - 2026-10-29 21:30 - 000000000 ____D C:\Users\Rafałek\AppData\LocalLow\com.adobe.crashreporter
2026-10-29 21:30 - 2026-10-29 21:30 - 000000000 ____D C:\Users\Public\NGL
2026-10-29 21:30 - 2026-10-29 21:30 - 000000000 ____D C:\Users\Public\Adobe
2026-10-29 21:17 - 2026-10-29 21:17 - 000000000 ____D C:\Program Files (x86)\LexCom
2026-10-29 21:16 - 2026-10-29 21:17 - 035062336 _____ C:\Users\Rafałek\Downloads\ETKA_DMSBB_Services.exe
2026-10-29 21:09 - 2026-11-02 13:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsaWin
2026-10-29 21:09 - 2011-12-06 15:55 - 000036864 _____ () C:\WINDOWS\SysWOW64\StdIo.dll
2026-10-29 21:08 - 2026-10-29 21:08 - 000000000 ____D C:\VW
2026-10-29 21:07 - 2026-10-30 14:15 - 000000000 ____D C:\Users\Rafałek\Downloads\elsawin 4 1 keygen 16
2026-10-29 21:05 - 2026-10-29 21:05 - 015328307 _____ C:\Users\Rafałek\Downloads\elsawin 4 1 keygen 16.7z
2026-10-29 21:00 - 2026-10-29 21:00 - 000000000 ____D C:\WINDOWS\SysWOW64\Adobe
2026-10-29 20:57 - 2026-11-02 13:46 - 000000028 _____ C:\WINDOWS\ODBC.INI
2026-10-29 20:57 - 2026-10-29 20:57 - 000000000 ____D C:\Program Files (x86)\Diagnose-BK
2026-10-29 20:51 - 2026-10-29 20:51 - 000000000 ____D C:\Users\Rafałek\Downloads\PowerShell-7.6.6-win-x64
2026-10-29 20:50 - 2026-10-29 20:50 - 106328873 _____ C:\Users\Rafałek\Downloads\PowerShell-7.6.6-win-x64.zip
2026-10-28 22:57 - 2026-10-28 22:58 - 871700480 _____ C:\Users\Rafałek\Downloads\VS2008SP1ENUX1512962.iso
2026-10-28 22:16 - 2026-10-28 22:16 - 020042319 _____ C:\Users\Rafałek\Downloads\Oracle_VirtualBox_Extension_Pack-7.2.22.vbox-extpack
2026-10-28 21:07 - 2026-10-28 21:11 - 2091812864 _____ C:\Users\Rafałek\Downloads\pl-pl_windows_10_22h2_19045.6396_multi_editions_updated_september_2025_x64_fd91b7ad.iso
2026-10-28 20:39 - 2026-10-28 20:39 - 008820072 _____ (InstallShield Software Corporation) C:\Users\Rafałek\Downloads\5.0_acrobat50.exe
2026-10-28 19:35 - 2026-10-28 22:20 - 000000000 ____D C:\Users\Rafałek\Downloads\ELSA
2026-10-28 19:34 - 2026-10-28 19:34 - 000104245 _____ C:\Users\Rafałek\Downloads\ELSA 6.0 VW 01.2017.torrent
2026-10-28 19:31 - 2026-10-28 19:31 - 000000000 ____D C:\Users\Rafałek\Downloads\ELSAWIN VW 6.0 01.2017
2026-10-28 19:29 - 2026-10-28 19:29 - 000084984 _____ C:\Users\Rafałek\Downloads\ELSAWIN VW 6.0 01.2017.rar
2026-10-27 07:11 - 2026-10-27 07:11 - 000061548 _____ C:\Users\Rafałek\Downloads\fizy.pdf
2026-10-24 16:13 - 2026-10-24 16:13 - 072777887 _____ (Aslain ) C:\Users\Rafałek\Downloads\Aslains_WoT_Modpack_Installer_v.2.4.1.0_08.exe
2026-10-24 14:48 - 2026-10-24 14:48 - 000092642 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-10-24 14:48 - 2026-10-24 14:48 - 000092642 _____ C:\WINDOWS\system32\ctac.json
2026-10-23 18:03 - 2026-10-23 18:03 - 000000000 ____D C:\Program Files\XboxService
2026-10-23 18:02 - 2026-10-23 18:02 - 003607664 _____ (Overwolf Ltd.) C:\Users\Rafałek\Downloads\Porofessor Standalone - Installer (1).exe
2026-10-23 18:02 - 2026-10-23 18:02 - 000526792 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_16.dll.0
2026-10-23 18:02 - 2026-10-23 18:02 - 000000000 ____D C:\Program Files\Microsoft GameInput
2026-10-23 18:01 - 2026-10-23 18:01 - 003321200 _____ (Overwolf Ltd.) C:\Users\Rafałek\Downloads\Porofessor.gg - Installer.exe
2026-10-23 18:00 - 2026-10-23 18:00 - 000000000 ____D C:\ProgramData\Riot Vanguard
2026-10-23 16:47 - 2026-10-23 17:20 - 000001665 _____ C:\Users\Public\Desktop\League of Legends.lnk
2026-10-23 16:47 - 2026-10-23 16:47 - 075831048 _____ (Riot Games, Inc.) C:\Users\Rafałek\Downloads\Install League of Legends eune.exe
2026-10-23 16:47 - 2026-10-23 16:47 - 000000695 _____ C:\Users\Public\Desktop\Riot Client.lnk
2026-10-19 15:48 - 2026-10-19 15:48 - 000581104 _____ C:\Users\Rafałek\Downloads\Zaświadczenie_lekarskie_PSM_I_st.pdf
2026-10-18 15:25 - 2026-09-29 17:37 - 002803872 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-10-18 15:25 - 2026-09-29 17:37 - 002803872 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-10-18 15:25 - 2026-09-29 17:37 - 002404512 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-10-18 15:25 - 2026-09-29 17:37 - 002404512 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-10-18 15:25 - 2026-09-29 17:37 - 001695904 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-10-18 15:25 - 2026-09-29 17:37 - 001695904 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-10-18 15:25 - 2026-09-29 17:37 - 001511072 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-10-18 15:25 - 2026-09-29 17:37 - 001511072 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-10-18 15:25 - 2026-09-29 17:37 - 000542040 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-10-18 15:25 - 2026-09-29 17:37 - 000419160 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-10-18 15:25 - 2026-09-29 17:33 - 022848856 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-10-18 15:25 - 2026-09-29 17:33 - 001710936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-10-18 15:25 - 2026-09-29 17:33 - 001599320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-10-18 15:25 - 2026-09-29 17:33 - 001549656 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-10-18 15:25 - 2026-09-29 17:33 - 001243480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-10-18 15:25 - 2026-09-29 17:33 - 000686424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-10-18 15:25 - 2026-09-29 17:33 - 000514392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-10-18 15:25 - 2026-09-29 17:32 - 002346328 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-10-18 15:25 - 2026-09-29 17:32 - 001737560 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-10-18 15:25 - 2026-09-29 17:32 - 001101656 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2026-10-18 15:25 - 2026-09-29 17:32 - 000849240 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2026-10-18 15:25 - 2026-09-29 17:31 - 029559128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-10-18 15:25 - 2026-09-29 17:31 - 020062552 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-10-18 15:25 - 2026-09-29 17:31 - 008488792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-10-18 15:25 - 2026-09-29 17:31 - 006053208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-10-18 15:25 - 2026-09-29 17:31 - 005012824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-10-18 15:25 - 2026-09-29 17:31 - 000313688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-10-18 15:25 - 2026-09-29 17:30 - 005933912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-10-18 15:25 - 2026-09-29 17:30 - 000854360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-10-18 15:25 - 2026-09-29 17:30 - 000574664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-10-18 15:25 - 2026-09-29 17:30 - 000443256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-10-18 15:25 - 2026-09-29 17:12 - 000190001 _____ C:\WINDOWS\system32\nvinfo.pb
2026-10-11 15:19 - 2026-10-11 15:19 - 000000000 ____D C:\Users\Rafałek\AppData\Local\ForzaHorizon6 — kopia
2026-10-10 15:21 - 2026-10-30 14:15 - 000000000 ____D C:\Users\Rafałek\Downloads\FH6AllInOneTrainer-v8.7.0
2026-10-10 15:21 - 2026-10-10 15:21 - 072451931 _____ C:\Users\Rafałek\Downloads\FH6AllInOneTrainer-v8.7.0.zip
2026-10-10 15:21 - 2026-10-10 15:21 - 000000000 ____D C:\Users\Rafałek\AppData\Roaming\FH6AllInOneTrainer
2026-10-10 15:20 - 2026-10-10 15:20 - 000000000 ____D C:\Users\Rafałek\Downloads\FH6-AllInOne-Trainer-master
2026-10-10 15:19 - 2026-10-10 15:19 - 000741810 _____ C:\Users\Rafałek\Downloads\FH6-AllInOne-Trainer-master.zip
2026-10-10 14:37 - 2026-11-01 15:53 - 000000000 ____D C:\Users\Rafałek\AppData\Local\ForzaHorizon6
2026-10-10 14:37 - 2026-10-10 14:37 - 000000000 ____D C:\Users\Public\Documents\MicrosoftStore
2026-10-09 16:41 - 2026-10-29 21:55 - 000000475 _____ C:\Users\Public\Desktop\Play Forza Horizon 6.lnk
2026-10-09 16:41 - 2026-10-09 16:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Forza Horizon 6
2026-10-06 22:29 - 2026-10-06 22:29 - 000038397 _____ C:\Users\Rafałek\Downloads\Dokument bez tytułu (1).pdf
2026-10-06 19:24 - 2026-10-06 19:24 - 064911621 _____ (Aslain ) C:\Users\Rafałek\Downloads\Aslains_WoT_Modpack_Installer_v.2.4.0.2_02.exe
2026-10-05 13:59 - 2026-10-05 13:59 - 000018208 _____ C:\WINDOWS\system32\ecoscore_config.json

==================== Jeden miesiąc (zmodyfikowane) ==================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2026-11-02 14:13 - 2026-07-02 19:00 - 000000000 ____D C:\FRST
2026-11-02 14:10 - 2026-07-02 18:59 - 002457088 _____ (Farbar) C:\Users\Rafałek\Downloads\FRST64.exe
2026-11-02 14:08 - 2026-07-17 13:16 - 000000000 ___HD C:\Program Files\WindowsApps
2026-11-02 14:08 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-11-02 14:08 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-11-02 14:07 - 2026-07-17 13:16 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-11-02 14:01 - 2026-03-23 21:22 - 000000000 ____D C:\Users\Rafałek\AppData\Roaming\Porofessor Standalone
2026-11-02 13:51 - 2024-10-18 19:37 - 000000000 ____D C:\Users\Rafałek\AppData\Roaming\discord
2026-11-02 13:51 - 2024-10-18 19:37 - 000000000 ____D C:\Users\Rafałek\AppData\Local\Discord
2026-11-02 13:16 - 2026-07-17 13:16 - 000000000 ____D C:\ProgramData\USOPrivate
2026-11-02 13:12 - 2024-10-19 12:10 - 000000000 ____D C:\Users\Rafałek\AppData\Local\Programs\Opera GX
2026-11-02 13:06 - 2026-08-03 18:17 - 001769830 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-11-02 13:06 - 2026-07-17 13:14 - 000000000 ____D C:\WINDOWS\INF
2026-11-02 13:06 - 2026-07-05 16:49 - 000000000 ____D C:\Users\Rafałek\AppData\Local\Malwarebytes
2026-11-02 13:03 - 2025-03-30 21:01 - 000000001 _____ C:\WINDOWS\vgkbootstatus.dat
2026-11-02 13:01 - 2026-08-02 17:35 - 000003450 _____ C:\WINDOWS\system32\Tasks\GCC
2026-11-02 13:01 - 2026-02-24 14:21 - 000002328 _____ C:\Users\Rafałek\Desktop\MineyMap.lnk
2026-11-02 13:01 - 2025-12-29 14:44 - 000002328 _____ C:\Users\Rafałek\Desktop\Sons Of The Forest.lnk
2026-11-02 13:01 - 2024-11-23 19:14 - 000000000 ____D C:\Users\Rafałek\AppData\Local\Overwolf
2026-11-02 13:00 - 2026-08-02 17:35 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-11-02 13:00 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\ServiceState
2026-11-02 13:00 - 2025-01-03 02:59 - 000069642 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-11-02 13:00 - 2024-10-26 20:17 - 000000000 ____D C:\Program Files\TeamViewer
2026-11-02 13:00 - 2024-10-18 17:15 - 000000000 ____D C:\ProgramData\NVIDIA
2026-11-01 22:59 - 2026-07-17 13:13 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2026-11-01 22:58 - 2026-08-02 17:30 - 000495456 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-11-01 22:57 - 2026-08-02 18:23 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-11-01 22:57 - 2026-08-02 18:23 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-11-01 22:57 - 2026-07-17 13:16 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-11-01 22:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\UUS
2026-11-01 22:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-11-01 22:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2026-11-01 22:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\SystemResources
2026-11-01 22:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-11-01 22:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-11-01 22:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-11-01 22:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-11-01 22:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-11-01 22:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\system32\Com
2026-11-01 22:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-11-01 22:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-11-01 22:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-11-01 22:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\Provisioning
2026-11-01 22:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-11-01 22:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-11-01 22:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-11-01 22:01 - 2026-08-02 17:30 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-11-01 21:56 - 2025-11-28 21:54 - 000000000 ____D C:\Users\Rafałek\AppData\Local\Ubisoft Game Launcher
2026-11-01 18:02 - 2024-10-18 17:10 - 000000000 ____D C:\Users\Rafałek\AppData\Local\D3DSCache
2026-11-01 17:38 - 2026-08-02 17:33 - 003384320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-11-01 01:27 - 2024-10-18 19:47 - 000000000 ____D C:\Program Files (x86)\Steam
2026-10-31 00:42 - 2024-10-18 17:03 - 000002527 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-10-31 00:42 - 2024-10-18 17:03 - 000002359 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2026-10-30 16:23 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-10-30 14:11 - 2026-08-01 13:38 - 000001322 _____ C:\Users\Rafałek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord.lnk
2026-10-30 14:11 - 2024-10-18 19:37 - 000002265 _____ C:\Users\Rafałek\Desktop\Discord.lnk
2026-10-30 14:03 - 2025-12-29 14:44 - 000000000 ____D C:\Program Files (x86)\Overwolf
2026-10-30 14:02 - 2024-10-18 17:14 - 000002332 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-10-30 14:02 - 2024-10-18 17:14 - 000002285 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2026-10-29 22:53 - 2024-10-19 19:44 - 000000000 ____D C:\Users\Rafałek\AppData\Local\CrashDumps
2026-10-29 21:30 - 2025-07-21 21:51 - 000000000 ____D C:\Users\Rafałek\AppData\Local\Adobe
2026-10-29 21:30 - 2024-10-18 17:06 - 000000000 ____D C:\Users\Rafałek\AppData\Local\Packages
2026-10-29 21:30 - 2024-10-18 17:05 - 000000000 ____D C:\ProgramData\Packages
2026-10-29 21:29 - 2026-06-23 00:21 - 000004414 _____ C:\WINDOWS\system32\InstallMonitorLog.csv
2026-10-29 20:37 - 2026-08-02 17:35 - 000003564 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-10-29 20:37 - 2026-08-02 17:35 - 000003492 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-10-29 20:36 - 2026-08-02 17:35 - 000004552 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled assistant Autoupdate 1730910569
2026-10-29 20:28 - 2026-08-02 17:35 - 000004302 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1729336364
2026-10-29 20:28 - 2024-11-08 22:32 - 000000000 ____D C:\Users\Rafałek\.VirtualBox
2026-10-29 20:28 - 2024-10-19 12:12 - 000001490 _____ C:\Users\Rafałek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Przeglądarka Opera GX.lnk
2026-10-29 20:26 - 2024-10-18 17:03 - 000012288 ___SH C:\DumpStack.log.tmp
2026-10-28 19:34 - 2024-10-26 19:41 - 000000000 ____D C:\Users\Rafałek\AppData\Roaming\BitTorrent Web
2026-10-28 15:51 - 2024-10-18 17:03 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-10-25 11:35 - 2025-12-29 14:44 - 000000000 ____D C:\Users\Rafałek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2026-10-24 16:57 - 2026-07-17 17:10 - 000000000 ____D C:\WINDOWS\InboxApps
2026-10-24 16:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-10-24 16:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2026-10-24 16:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-10-24 16:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-10-24 16:57 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-10-24 16:57 - 2026-07-17 13:13 - 000000000 ____D C:\WINDOWS\servicing
2026-10-24 16:56 - 2025-03-30 20:44 - 000000000 ____D C:\Users\Rafałek\AppData\Roaming\riot-client-ux
2026-10-24 16:39 - 2025-03-30 21:01 - 268440632 _____ C:\WINDOWS\392667600.dat
2026-10-24 16:24 - 2025-03-30 20:43 - 000000000 ____D C:\ProgramData\Riot Games
2026-10-24 16:21 - 2026-03-18 14:42 - 000000000 ____D C:\Users\Rafałek\AppData\Roaming\Riot Client
2026-10-24 13:52 - 2026-03-23 21:22 - 000000000 ____D C:\Users\Rafałek\AppData\Local\porofessor-overwolf-app-updater
2026-10-23 18:08 - 2025-03-30 20:48 - 000000000 ____D C:\Program Files\Riot Vanguard
2026-10-23 18:02 - 2025-12-29 14:34 - 000000000 ____D C:\ProgramData\temp
2026-10-23 18:02 - 2024-10-30 12:14 - 004671944 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2026-10-23 18:02 - 2024-10-30 12:14 - 001223112 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2026-10-23 18:02 - 2024-10-30 12:14 - 000330184 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2026-10-23 18:02 - 2024-10-30 12:14 - 000281032 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2026-10-23 18:02 - 2024-10-30 12:14 - 000166344 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2026-10-23 18:02 - 2024-10-30 12:14 - 000158152 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2026-10-23 18:02 - 2024-10-30 12:14 - 000084424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2026-10-23 16:58 - 2025-03-30 20:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games
2026-10-23 16:48 - 2025-03-30 20:43 - 000000000 ____D C:\Users\Rafałek\AppData\Local\Riot Games
2026-10-19 20:03 - 2025-09-25 15:54 - 001092224 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\GameInputRedist.dll
2026-10-19 20:02 - 2025-09-25 15:54 - 000873600 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\GameInputRedist.dll
2026-10-19 14:45 - 2025-07-21 21:55 - 000000000 ____D C:\Users\Rafałek\AppData\Roaming\com.adobe.dunamis
2026-10-18 15:28 - 2026-07-17 17:10 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-10-18 15:28 - 2026-07-17 17:10 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-10-18 15:28 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-10-18 15:28 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-10-18 15:28 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-10-18 15:28 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-10-18 15:28 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-10-18 15:28 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\system32\setup
2026-10-18 15:28 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-10-18 15:28 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-10-18 15:28 - 2026-07-17 13:16 - 000000000 ____D C:\Program Files\Common Files\System
2026-10-18 11:27 - 2026-07-17 13:16 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2026-10-18 11:27 - 2026-07-17 13:16 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2026-10-18 10:23 - 2024-10-18 18:24 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-10-18 10:20 - 2024-10-18 18:24 - 230303336 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-10-18 10:11 - 2026-08-02 17:35 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2026-10-18 10:11 - 2025-07-21 21:53 - 000002149 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2026-10-18 10:11 - 2025-07-21 21:53 - 000002064 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2026-10-14 17:21 - 2024-11-12 20:23 - 000000000 ____D C:\Program Files\Microsoft Office
2026-10-11 15:20 - 2024-10-30 11:44 - 000000000 ____D C:\Users\Public\Documents\OnlineFix
2026-10-08 18:06 - 2026-07-17 13:16 - 000000000 ____D C:\WINDOWS\WUModels
2026-10-06 19:19 - 2026-07-05 16:48 - 000245864 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys

==================== Pliki w katalogu głównym wybranych folderów ========

2026-09-09 15:12 - 2026-09-09 15:12 - 000000018 _____ () C:\Users\Rafałek\AppData\Roaming\.cache9050425797200915815.dat
2025-03-04 20:24 - 2025-03-04 20:24 - 000000050 _____ () C:\Users\Rafałek\AppData\Roaming\.crystalinst
2026-09-11 15:10 - 2026-09-11 15:10 - 000000012 _____ () C:\Users\Rafałek\AppData\Roaming\440fe67b9f675dc481e79e8a05b86cff
2025-11-24 20:25 - 2025-11-24 20:39 - 000208896 _____ () C:\Users\Rafałek\AppData\Roaming\emp.bin
2024-12-21 14:24 - 2024-12-21 14:26 - 000108288 _____ () C:\Users\Rafałek\AppData\Local\dxdiag.log
2025-02-08 13:06 - 2026-06-20 10:13 - 000007605 _____ () C:\Users\Rafałek\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

==================== Koniec  FRST.txt ========================