Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 11.03.2018 01 Uruchomiony przez Sekretariat (administrator) SEKRETARIAT (12-03-2018 12:09:15) Uruchomiony z C:\Users\Sekretariat\Downloads Załadowane profile: Sekretariat (Dostępne profile: Sekretariat & Stażystka & Ewa & ASI) Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: IE) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (ESET) C:\Program Files\ESET\ESET Security\ekrn.exe (Egis Technology Inc. ) C:\Program Files\Common Files\EgisTec\Services\EgisTicketService.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe () C:\OEM\USBDECTIONX86\USBS3S4Detection.exe (Renesas Electronics Corporation) C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (ESET) C:\Program Files\ESET\ESET Security\egui.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [NUSB3MON] => C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation) HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [300440 2017-12-18] (ESET) Winlogon\Notify\ScCertProp: wlnotify.dll [X] HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> HKU\S-1-5-21-2326368182-1617307045-2659704587-1003\...\Policies\system: [DisableCMD] 0 HKU\S-1-5-21-2326368182-1617307045-2659704587-1003\...\MountPoints2: F - F:\Windows/AutoRun.exe HKU\S-1-5-21-2326368182-1617307045-2659704587-1003\...\MountPoints2: {aab00b81-45c2-11e2-901c-c89cdca98801} - F:\LaunchU3.exe -a HKU\S-1-5-21-2326368182-1617307045-2659704587-1003\Control Panel\Desktop\\SCRNSAVE.EXE -> HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> Lsa: [Notification Packages] scecli EgisPwdFilter EgisDSPwdFilter GroupPolicy: Ograniczenia - Chrome <==== UWAGA CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\..\Interfaces\{433AA000-AF3B-4FB4-88DE-802DE2849120}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{7E6030CF-887A-4577-909D-507742504432}: [NameServer] 192.168.0.1,8.8.8.8 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131515874348436163&GUID=00000000-0000-0000-0000-000000000000 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131515874348436163&GUID=00000000-0000-0000-0000-000000000000 HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.v9.com?type=hp&ts=1438074236&from=mych123&uid=st3500413as_w2adl5s1xxxxw2adl5s1&z=d0fe1d0ebb80bd866d8606eg7zdc9b8e9m5z1o7c2t HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131515874348436163&GUID=00000000-0000-0000-0000-000000000000 HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.v9.com?type=hp&ts=1438074236&from=mych123&uid=st3500413as_w2adl5s1xxxxw2adl5s1&z=d0fe1d0ebb80bd866d8606eg7zdc9b8e9m5z1o7c2t HKU\S-1-5-21-2326368182-1617307045-2659704587-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.pl/ SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE SearchScopes: HKU\S-1-5-21-2326368182-1617307045-2659704587-1003 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-2326368182-1617307045-2659704587-1003 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-2326368182-1617307045-2659704587-1003 -> {58BB876C-3187-4A17-9D9A-8ABCD191A59F} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-2326368182-1617307045-2659704587-1003 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-2326368182-1617307045-2659704587-1003 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-2326368182-1617307045-2659704587-1003 -> {EFEAB411-6284-420B-93E1-AA2AF036FD76} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-2326368182-1617307045-2659704587-1003 -> {F0D5D8B0-2CC9-4777-8DD9-8E86D90D43C3} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} BHO: EgisPBIE Sign-in Helper -> {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} -> C:\Program Files\Acer ProShield\EgisPBIE.dll [2012-02-02] (Egis Technology Inc.) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2016-01-11] (Oracle Corporation) Toolbar: HKU\S-1-5-21-2326368182-1617307045-2659704587-1003 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Brak pliku DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_66-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab DPF: {CAFEEFAC-0018-0000-0040-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_40-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab FireFox: ======== FF DefaultProfile: 7z46xgsr.default FF ProfilePath: C:\Users\Sekretariat\AppData\Roaming\Mozilla\Firefox\Profiles\7z46xgsr.default [2018-03-12] FF Homepage: Mozilla\Firefox\Profiles\7z46xgsr.default -> hxxps://www.google.pl/?gws_rd=ssl FF NewTab: Mozilla\Firefox\Profiles\7z46xgsr.default -> chrome://quick_start/content/index.html FF Extension: (Adblock Plus) - C:\Users\Sekretariat\AppData\Roaming\Mozilla\Firefox\Profiles\7z46xgsr.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-12-21] FF HKLM\...\Firefox\Extensions: [{41ecbc0b-34d5-4cd4-935f-253a30e2cb7e}] - C:\Program Files\Acer ProShield\FFExt FF Extension: ( Online Accounts Extension ) - C:\Program Files\Acer ProShield\FFExt [2012-07-18] [Przestarzałe] [Brak podpisu cyfrowego] FF HKLM\...\Firefox\Extensions: [{d4da7309-b89a-45ec-8ebb-cfb2ae13618b}] - C:\Program Files\Acer ProShield\FFExt20 FF Extension: ( Online Accounts Extension ) - C:\Program Files\Acer ProShield\FFExt20 [2012-07-18] [Przestarzałe] [Brak podpisu cyfrowego] FF HKLM\...\Firefox\Extensions: [quick_searchff@gmail.com] - C:\Users\Sekretariat\AppData\Roaming\Mozilla\Firefox\Profiles\7z46xgsr.default\extensions\quick_searchff@gmail.com => nie znaleziono FF HKLM\...\Firefox\Extensions: [sweetsearch@gmail.com] - C:\Users\Sekretariat\AppData\Roaming\Mozilla\Firefox\Profiles\7z46xgsr.default\extensions\sweetsearch@gmail.com => nie znaleziono FF HKLM\...\Firefox\Extensions: [defsearchp@gmail.com] - C:\Users\Sekretariat\AppData\Roaming\Mozilla\Firefox\Profiles\7z46xgsr.default\extensions\defsearchp@gmail.com => nie znaleziono FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2016-01-11] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2016-01-11] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-02-11] (Adobe Systems Inc.) Chrome: ======= CHR DefaultProfile: Default CHR HomePage: Default -> hxxp://v9.com?type=hp&ts=1450257587&from=mych123&uid=st3500413as_w2adl5s1xxxxw2adl5s1&z=59695ad791a8ebb7f0bff21g3z6wfe7o4w1m4w0tfo CHR StartupUrls: Default -> "hxxp://v9.com?type=hp&ts=1450257587&from=mych123&uid=st3500413as_w2adl5s1xxxxw2adl5s1&z=59695ad791a8ebb7f0bff21g3z6wfe7o4w1m4w0tfo" CHR Profile: C:\Users\Sekretariat\AppData\Local\Google\Chrome\User Data\Default [2018-01-17] CHR Extension: (Dokumenty Google) - C:\Users\Sekretariat\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-26] CHR Extension: (Dysk Google) - C:\Users\Sekretariat\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-17] CHR Extension: (YouTube) - C:\Users\Sekretariat\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24] CHR Extension: (Google Search) - C:\Users\Sekretariat\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-01] CHR Extension: (Adobe Acrobat) - C:\Users\Sekretariat\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-10-11] CHR Extension: (Round World) - C:\Users\Sekretariat\AppData\Local\Google\Chrome\User Data\Default\Extensions\egkpojibogaemajbehmhdkfadcjmnnae [2015-02-05] [UpdateUrl: hxxp://wwwmyroundworldc-a.akamaihd.net/update/chrome] <==== UWAGA CHR Extension: (Dokumenty Google offline) - C:\Users\Sekretariat\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-10-10] CHR Extension: (Online Accounts Extension ) - C:\Users\Sekretariat\AppData\Local\Google\Chrome\User Data\Default\Extensions\ladimmjldcgbeamniagencjbodhnmgen [2017-10-10] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Sekretariat\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-10-06] CHR Extension: (Gmail) - C:\Users\Sekretariat\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-05] CHR Extension: (Chrome Media Router) - C:\Users\Sekretariat\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-10-06] CHR HKLM\...\Chrome\Extension: [ladimmjldcgbeamniagencjbodhnmgen] - C:\Program Files\Acer ProShield\ChromeEx\EgisPBChromeExt.crx [2012-02-02] CHR HKU\S-1-5-21-2326368182-1617307045-2659704587-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [279000 2014-01-29] (Intel Corporation) R2 EgisTec Ticket Service; C:\Program Files\Common Files\EgisTec\Services\EgisTicketService.exe [180272 2012-02-02] (Egis Technology Inc. ) R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [1539560 2017-12-18] (ESET) R2 Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [255376 2012-02-07] (Acer Incorporated) R2 USBS3S4Detection; C:\oem\usbdectionx86\USBS3S4Detection.exe [76320 2009-12-09] () R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 cxbu0wdm; C:\Windows\System32\DRIVERS\cxbu0wdm.sys [131064 2014-05-14] (HID Global Corporation) R3 e1cexpress; C:\Windows\System32\DRIVERS\e1c6232.sys [262824 2011-02-08] (Intel Corporation) R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [114552 2017-11-07] (ESET) R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [90640 2017-11-07] (ESET) R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [141480 2017-11-07] (ESET) R2 ekbdflt; C:\Windows\System32\DRIVERS\ekbdflt.sys [42816 2017-11-07] (ESET) R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [71856 2017-11-07] (ESET) R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [53184 2017-11-07] (ESET) R1 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [90136 2017-11-07] (ESET) R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation) R1 mwlPSDFilter; C:\Windows\System32\DRIVERS\mwlPSDFilter.sys [21600 2012-07-18] (Egis Technology Inc.) R1 mwlPSDNServ; C:\Windows\System32\DRIVERS\mwlPSDNServ.sys [16936 2012-07-18] (Egis Technology Inc.) R1 mwlPSDVDisk; C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys [62240 2012-07-18] (Egis Technology Inc.) S3 vpcbus; C:\Windows\system32\drivers\vpchbus.sys [165376 2009-09-23] (Microsoft Corporation) R1 vpcnfltr; C:\Windows\System32\DRIVERS\vpcnfltr.sys [55040 2009-09-23] (Microsoft Corporation) S3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2009-09-23] (Microsoft Corporation) R1 vpcvmm; C:\Windows\System32\drivers\vpcvmm.sys [295936 2009-12-31] (Microsoft Corporation) S3 cpuz134; \??\C:\Users\SEKRET~1\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2018-03-12 12:09 - 2018-03-12 12:12 - 000017786 _____ C:\Users\Sekretariat\Downloads\FRST.txt 2018-03-12 12:09 - 2018-03-12 12:09 - 000899584 _____ (Farbar) C:\Users\Sekretariat\Downloads\FSS.exe 2018-03-12 12:07 - 2018-03-12 12:08 - 001763328 _____ (Farbar) C:\Users\Sekretariat\Downloads\FRST.exe 2018-03-09 11:00 - 2018-03-09 11:00 - 003453394 _____ C:\Users\Sekretariat\Desktop\zapytanie-ofertowe-kolonie-2017.pdf 2018-03-09 10:43 - 2018-03-09 10:43 - 001856240 _____ C:\Users\Sekretariat\Desktop\zapytanie-ofertowe-kolonie-2018-1519035613.pdf 2018-03-09 10:37 - 2018-03-09 10:37 - 002380592 _____ C:\Users\Sekretariat\Desktop\Zapytanie ofertowe - Zorganizowanie i przeprowadzenie kolonii letnich z programem profilaktycznym - BIP Urząd Gminy Dobra_dhtml.mht 2018-03-08 13:11 - 2018-03-08 13:11 - 001181500 _____ C:\Users\Sekretariat\Downloads\Obs_uga elektron spraw w SI KDR(5).pdf 2018-03-08 13:11 - 2018-03-08 13:11 - 001181500 _____ C:\Users\Sekretariat\Downloads\Obs_uga elektron spraw w SI KDR(4).pdf 2018-03-08 13:11 - 2018-03-08 13:11 - 001181500 _____ C:\Users\Sekretariat\Downloads\Obs_uga elektron spraw w SI KDR(3).pdf 2018-02-27 16:25 - 2018-02-27 16:25 - 000007500 _____ C:\Users\ASI\Downloads\MpsSvc.txt 2018-02-27 16:17 - 2018-02-27 16:17 - 000000402 _____ C:\Users\ASI\Desktop\fix.bat 2018-02-27 16:00 - 2018-02-27 16:00 - 000023127 _____ C:\Users\Sekretariat\Downloads\ESETSirefefCleaner.exe_20180227.160054.3948.zip 2018-02-27 15:59 - 2018-02-27 15:59 - 000430280 _____ (ESET) C:\Users\Sekretariat\Downloads\ESETSirefefCleaner.exe 2018-02-27 15:10 - 2018-03-09 17:55 - 000031310 _____ C:\Users\Sekretariat\Desktop\Kopia formularz-sprawozdawczy-npz-2016-2020-zalacznik-do-rozporzadzenia-7.xlsx 2018-02-23 10:03 - 2018-03-12 11:59 - 000000000 ____D C:\Users\Sekretariat\Desktop\KARTA SENIORA 2018-02-19 18:56 - 2018-02-19 18:56 - 000000000 ____D C:\Users\Sekretariat\Desktop\Postaw na rodzinę 2018 2018-02-19 18:55 - 2018-02-19 18:56 - 000000000 ____D C:\Users\Sekretariat\Desktop\PARPA G-1 2017 2018-02-19 18:54 - 2018-02-21 13:32 - 000000000 ____D C:\Users\Sekretariat\Desktop\ZTU 2018 2018-02-15 12:01 - 2018-02-15 12:01 - 000063024 _____ C:\Users\Sekretariat\Downloads\S01_15-02-2018.pdf 2018-02-15 12:01 - 2018-02-15 12:01 - 000063024 _____ C:\Users\Sekretariat\Downloads\S01_15-02-2018(1).pdf 2018-02-14 16:19 - 2018-02-14 16:19 - 000073772 _____ C:\Users\Sekretariat\Downloads\S01_14-02-2018.pdf 2018-02-14 09:30 - 2018-01-22 00:42 - 000117480 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2018-02-14 09:30 - 2018-01-22 00:20 - 000533504 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2018-02-14 09:30 - 2018-01-19 15:05 - 001893888 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2018-02-14 09:30 - 2018-01-19 15:05 - 001314304 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2018-02-14 09:30 - 2018-01-19 15:05 - 000594944 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2018-02-14 09:30 - 2018-01-19 15:05 - 000508416 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2018-02-14 09:30 - 2018-01-19 15:05 - 000337920 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll 2018-02-14 09:30 - 2018-01-19 15:05 - 000311808 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2018-02-14 09:30 - 2018-01-19 15:05 - 000212992 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2018-02-14 09:30 - 2018-01-19 15:05 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2018-02-14 09:29 - 2018-02-10 20:03 - 000347296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2018-02-14 09:29 - 2018-02-10 07:20 - 020274176 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2018-02-14 09:29 - 2018-02-10 07:08 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2018-02-14 09:29 - 2018-02-10 07:07 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2018-02-14 09:29 - 2018-02-10 06:57 - 000499712 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2018-02-14 09:29 - 2018-02-10 06:57 - 000341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2018-02-14 09:29 - 2018-02-10 06:57 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2018-02-14 09:29 - 2018-02-10 06:57 - 000047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2018-02-14 09:29 - 2018-02-10 06:56 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2018-02-14 09:29 - 2018-02-10 06:54 - 002294272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2018-02-14 09:29 - 2018-02-10 06:52 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2018-02-14 09:29 - 2018-02-10 06:51 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2018-02-14 09:29 - 2018-02-10 06:50 - 000476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2018-02-14 09:29 - 2018-02-10 06:49 - 000662528 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2018-02-14 09:29 - 2018-02-10 06:49 - 000620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2018-02-14 09:29 - 2018-02-10 06:49 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2018-02-14 09:29 - 2018-02-10 06:49 - 000104960 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2018-02-14 09:29 - 2018-02-10 06:45 - 000668160 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2018-02-14 09:29 - 2018-02-10 06:42 - 000416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2018-02-14 09:29 - 2018-02-10 06:39 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2018-02-14 09:29 - 2018-02-10 06:38 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2018-02-14 09:29 - 2018-02-10 06:38 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2018-02-14 09:29 - 2018-02-10 06:36 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2018-02-14 09:29 - 2018-02-10 06:35 - 004498944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2018-02-14 09:29 - 2018-02-10 06:35 - 000279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2018-02-14 09:29 - 2018-02-10 06:35 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2018-02-14 09:29 - 2018-02-10 06:34 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2018-02-14 09:29 - 2018-02-10 06:33 - 013680640 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2018-02-14 09:29 - 2018-02-10 06:29 - 000230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2018-02-14 09:29 - 2018-02-10 06:27 - 002058752 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2018-02-14 09:29 - 2018-02-10 06:27 - 000694784 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2018-02-14 09:29 - 2018-02-10 06:27 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2018-02-14 09:29 - 2018-02-10 06:26 - 001155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2018-02-14 09:29 - 2018-02-10 06:14 - 002767872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2018-02-14 09:29 - 2018-02-10 06:10 - 001314304 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2018-02-14 09:29 - 2018-02-10 06:08 - 000710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2018-02-14 09:29 - 2018-01-12 17:29 - 004014312 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2018-02-14 09:29 - 2018-01-12 17:29 - 003959016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2018-02-14 09:29 - 2018-01-12 17:29 - 001309928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2018-02-14 09:29 - 2018-01-12 17:29 - 000250600 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys 2018-02-14 09:29 - 2018-01-12 17:29 - 000240872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2018-02-14 09:29 - 2018-01-12 17:29 - 000187624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2018-02-14 09:29 - 2018-01-12 17:29 - 000137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2018-02-14 09:29 - 2018-01-12 17:29 - 000067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2018-02-14 09:29 - 2018-01-12 17:27 - 001310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 001062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000554496 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2018-02-14 09:29 - 2018-01-12 17:26 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2018-02-14 09:29 - 2018-01-12 17:16 - 003405824 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe 2018-02-14 09:29 - 2018-01-12 17:05 - 000055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2018-02-14 09:29 - 2018-01-12 17:05 - 000025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2018-02-14 09:29 - 2018-01-12 17:05 - 000024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys 2018-02-14 09:29 - 2018-01-12 17:02 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2018-02-14 09:29 - 2018-01-12 17:02 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2018-02-14 09:29 - 2018-01-12 17:02 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2018-02-14 09:29 - 2018-01-12 17:02 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2018-02-14 09:29 - 2018-01-12 17:02 - 000016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2018-02-14 09:29 - 2018-01-12 16:59 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2018-02-14 09:29 - 2018-01-12 16:57 - 000226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2018-02-14 09:29 - 2018-01-12 16:57 - 000124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2018-02-14 09:29 - 2018-01-12 16:57 - 000098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2018-02-14 09:29 - 2018-01-12 16:57 - 000036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2018-02-14 09:29 - 2018-01-12 16:56 - 000069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2018-02-14 09:29 - 2018-01-12 16:56 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2018-02-14 09:29 - 2018-01-12 16:56 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2018-02-14 09:29 - 2018-01-11 17:22 - 000805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll 2018-02-14 09:29 - 2018-01-11 17:01 - 002403328 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2018-02-14 09:29 - 2018-01-05 17:14 - 000309480 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2018-02-14 09:29 - 2018-01-05 17:11 - 000111104 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll 2018-02-14 09:29 - 2018-01-05 17:11 - 000071168 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2018-02-14 09:29 - 2018-01-05 17:11 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2018-02-14 09:29 - 2018-01-05 17:11 - 000010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2018-02-14 09:29 - 2018-01-05 16:50 - 000034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2018-02-14 09:29 - 2017-12-05 18:08 - 001176576 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2018-02-14 09:29 - 2017-12-05 18:08 - 000179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2018-02-14 09:29 - 2017-12-05 18:08 - 000145920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2018-02-14 09:29 - 2017-12-05 18:08 - 000135168 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll 2018-02-14 09:29 - 2017-12-05 18:08 - 000106496 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2018-02-14 09:29 - 2017-12-05 18:08 - 000072704 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll 2018-02-14 09:29 - 2017-12-05 16:54 - 000334848 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2018-03-12 12:12 - 2009-07-14 05:34 - 000027568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2018-03-12 12:12 - 2009-07-14 05:34 - 000027568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2018-03-12 12:09 - 2018-01-17 13:27 - 000000000 ____D C:\FRST 2018-03-12 12:05 - 2016-12-28 13:40 - 000000000 ____D C:\Users\Sekretariat\AppData\LocalLow\Mozilla 2018-03-12 12:04 - 2012-06-23 02:26 - 000741836 _____ C:\Windows\system32\perfh015.dat 2018-03-12 12:04 - 2012-06-23 02:26 - 000156480 _____ C:\Windows\system32\perfc015.dat 2018-03-12 12:04 - 2010-11-20 22:01 - 001669906 _____ C:\Windows\system32\PerfStringBackup.INI 2018-03-12 12:04 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\inf 2018-03-12 12:00 - 2012-09-06 13:19 - 000000358 _____ C:\Windows\Tasks\Acer Registration - Reminder Recall task.job 2018-03-12 11:59 - 2017-11-15 10:27 - 000000000 ____D C:\Users\Sekretariat\Desktop\Adm.Danych Osobowych 2018-03-12 11:39 - 2012-09-06 13:43 - 000000000 ____D C:\Users\Sekretariat\Documents\Pliki programu Outlook 2018-03-12 09:02 - 2009-07-14 05:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2018-03-09 18:09 - 2018-01-17 15:35 - 000000000 ____D C:\Users\Sekretariat\Desktop\Program alkoh. 2018, spraw. za 2017 2018-03-07 11:26 - 2017-01-04 15:30 - 000000000 ____D C:\Users\Sekretariat\Desktop\Ogólnopolska Karta Dużej Rodziny 2018-03-06 10:08 - 2012-09-06 12:03 - 000000000 ____D C:\Users\Sekretariat\Documents\Gminna Komisja 2018-03-05 18:27 - 2017-01-04 15:36 - 000000000 ____D C:\Users\Sekretariat\Desktop\Programy i sprawozdania za 2016 r 2018-03-05 15:38 - 2016-03-10 14:19 - 000000000 ____D C:\Users\Sekretariat\Desktop\Programy profilaktyczne 2018-03-02 13:26 - 2013-11-08 12:56 - 000000000 ____D C:\Users\Sekretariat\Desktop\Program Rodzinny Konstantynów Łd 2018-02-28 15:48 - 2017-10-11 09:36 - 000000000 ____D C:\Users\Sekretariat\Desktop\profilaktyka szkolna2017-18 2018-02-28 14:44 - 2012-09-06 12:31 - 000000000 ____D C:\Users\Sekretariat\Documents\Centrum informacje -kadry 2018-02-28 10:06 - 2015-01-15 11:30 - 000002180 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2018-02-27 17:44 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\rescache 2018-02-27 17:43 - 2016-01-22 18:42 - 000000000 ____D C:\Users\Sekretariat\AppData\Local\ElevatedDiagnostics 2018-02-27 16:43 - 2012-09-06 12:28 - 000000000 ____D C:\Users\Sekretariat\Documents\Zaświadczenia 2018-02-27 16:31 - 2018-01-17 13:06 - 000146188 _____ C:\Windows\ntbtlog.txt 2018-02-27 16:21 - 2018-01-17 14:15 - 000001378 _____ C:\Users\ASI\Downloads\mpsdrv.reg 2018-02-27 10:53 - 2014-12-31 12:49 - 000001056 _____ C:\Windows\wininit.ini 2018-02-27 10:50 - 2018-01-29 15:43 - 000001572 _____ C:\Users\Sekretariat\Desktop\skany — DYREKCJA.lnk 2018-02-26 09:19 - 2015-07-06 15:23 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2018-02-22 14:42 - 2012-09-06 12:06 - 000000000 ____D C:\Users\Sekretariat\Documents\Książki 2018-02-22 14:42 - 2012-09-06 12:04 - 000000000 ____D C:\Users\Sekretariat\Documents\Kamera JVC 2018-02-22 14:41 - 2017-06-28 14:47 - 000000000 ____D C:\Users\Sekretariat\Documents\Spotkania z pedagogami 2018-02-22 14:41 - 2012-09-06 12:04 - 000000000 ____D C:\Users\Sekretariat\Documents\Kampanie 2018-02-22 14:39 - 2012-09-06 12:15 - 000000000 ____D C:\Users\Sekretariat\Documents\PROJEKTY 2018-02-22 14:39 - 2012-09-06 12:15 - 000000000 ____D C:\Users\Sekretariat\Documents\Programy 2018-02-21 14:57 - 2012-09-06 14:05 - 000000000 ____D C:\Users\Sekretariat\Documents\Profilaktyka Szkolna 2018-02-19 18:55 - 2012-09-06 12:24 - 000000000 ____D C:\Users\Sekretariat\Documents\Świetlica 2018-02-19 11:17 - 2017-03-07 16:22 - 000000000 ____D C:\Users\Sekretariat\Documents\ZTU 2017 2018-02-19 10:02 - 2017-03-01 12:10 - 000000000 ____D C:\Users\Sekretariat\Desktop\Placówka Wsparcia Dziennego 2018-02-15 09:03 - 2009-07-14 05:33 - 000408272 _____ C:\Windows\system32\FNTCACHE.DAT 2018-02-15 09:01 - 2014-12-12 09:22 - 000000000 ____D C:\Windows\system32\appraiser 2018-02-14 18:51 - 2017-10-11 17:35 - 127229528 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe 2018-02-14 18:51 - 2013-07-31 17:21 - 000000000 ____D C:\Windows\system32\MRT 2018-02-14 18:51 - 2012-10-05 15:12 - 127229528 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2018-02-14 15:56 - 2015-07-08 12:49 - 000000000 ____D C:\Program Files\Mozilla Firefox 2018-02-14 15:56 - 2015-05-10 11:05 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service ==================== Pliki w katalogu głównym wybranych folderów ======= 2015-02-11 17:56 - 2015-02-11 17:56 - 000030270 _____ () C:\Users\Sekretariat\AppData\Local\Bron.tok.A9.em.bin 2013-04-03 15:18 - 2013-04-03 15:18 - 000000051 _____ () C:\Users\Sekretariat\AppData\Local\Kosong.Bron.Tok.txt 2016-04-11 11:19 - 2016-04-11 11:19 - 000000600 _____ () C:\Users\Sekretariat\AppData\Local\PUTTY.RND Niektóre pliki w TEMP: ==================== 2017-02-09 13:53 - 2017-02-09 13:53 - 002467568 _____ (CryptoTech Sp. z o.o.) C:\Users\Sekretariat\AppData\Local\Temp\CCP11s.dll 2014-01-22 09:26 - 2014-01-22 09:26 - 001070088 _____ (Solid State Networks) C:\Users\Sekretariat\AppData\Local\Temp\install_flashplayer12x32axau_gtba_chra_dy_aaa_aih.exe 2014-04-22 09:11 - 2014-04-22 09:11 - 001070088 _____ (Solid State Networks) C:\Users\Sekretariat\AppData\Local\Temp\install_flashplayer12x32axau_gtba_chra_dy_aaa_aih_1.exe 2012-11-07 17:14 - 2012-11-07 17:14 - 000998224 _____ (Solid State Networks) C:\Users\Sekretariat\AppData\Local\Temp\install_reader11_en_gtba_chra_dy_aih.exe 2013-12-31 13:09 - 2013-12-31 13:09 - 001069568 _____ (Solid State Networks) C:\Users\Sekretariat\AppData\Local\Temp\install_reader11_pl_gtba_chra_dy_aaa_aih.exe 2014-01-10 09:30 - 2014-01-10 09:30 - 001069568 _____ (Solid State Networks) C:\Users\Sekretariat\AppData\Local\Temp\install_reader11_pl_gtba_chra_dy_aaa_aih_1.exe 2015-05-05 13:39 - 2015-05-06 15:20 - 000562272 _____ (Oracle Corporation) C:\Users\Sekretariat\AppData\Local\Temp\jre-8u45-windows-au.exe 2017-02-09 13:53 - 2017-02-09 13:53 - 000099328 _____ (IAIK) C:\Users\Sekretariat\AppData\Local\Temp\pkcs11wrapper.dll 2018-01-17 13:51 - 2018-01-17 13:51 - 000099328 ____N (IAIK) C:\Users\Sekretariat\AppData\Local\Temp\pkcs11wrapper7054126515178619326.dll 2015-02-24 10:09 - 2015-02-24 10:09 - 000295912 _____ (Reimage®) C:\Users\Sekretariat\AppData\Local\Temp\ReiSysUpdate.exe 2014-05-25 10:59 - 2014-11-16 11:43 - 000383488 _____ () C:\Users\Sekretariat\AppData\Local\Temp\xuninst.exe 2014-11-16 11:47 - 2014-11-16 11:47 - 000310586 _____ () C:\Users\Sekretariat\AppData\Local\Temp\_inst1.exe ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2018-02-27 17:36 ==================== Koniec FRST.txt ============================