Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 22-04-2020 Uruchomiony przez admin (administrator) DOM (Hewlett-Packard HP Compaq nx7400 (RH644ES#AKD)) (23-03-2020 20:34:42) Uruchomiony z C:\Documents and Settings\admin\Pulpit\logi\Nowy folder Załadowane profile: admin (Dostępne profile: admin & Administrator) Platform: Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) Język: Polski Internet Explorer Wersja 8 (Domyślna przeglądarka: Opera) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) () [Brak podpisu cyfrowego] C:\PROGRA~1\HPQ\Shared\HPQTOA~1.EXE (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc. -> Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Apple Inc. -> Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Broadcom Corporation.) [Brak podpisu cyfrowego] C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe (Broadcom Corporation.) [Brak podpisu cyfrowego] C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Google Inc -> Google Inc.) C:\Program Files\Google\Update\GoogleUpdate.exe (Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) [Brak podpisu cyfrowego] C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.) [Brak podpisu cyfrowego] C:\Program Files\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard Company -> Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe (Hewlett-Packard Company -> ) C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe (Hewlett-Packard Company -> ) C:\WINDOWS\SMINST\Scheduler.exe (Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe (Hewlett-Packard Company -> Hewlett-Packard Development Company L.P.) C:\Program Files\Hewlett-Packard\Shared\hpCaslNotification.exe (Hewlett-Packard Development Company, L.P.) [Brak podpisu cyfrowego] C:\Program Files\HPQ\HP Wireless Assistant\HP Wireless Assistant.exe (Intel Corporation -> Intel Corporation) C:\WINDOWS\system32\hkcmd.exe (Intel Corporation -> Intel Corporation) C:\WINDOWS\system32\igfxpers.exe (Intel Corporation -> Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe (Intel Corporation -> Intel Corporation) C:\WINDOWS\system32\igfxtray.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Windows Component Publisher -> Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe (Microsoft Windows Component Publisher -> Microsoft Corporation) C:\WINDOWS\system32\alg.exe (Microsoft Windows Hardware Compatibility Publisher -> Agere Systems) C:\WINDOWS\system32\agrsmsvc.exe (Microsoft Windows Hardware Compatibility Publisher -> Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe (Microsoft Windows Hardware Compatibility Publisher -> Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Opera Software ASA -> Opera Software) C:\Program Files\Opera\op\36.0.2130.80\opera.exe <6> (Piriform Software Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe (Plik w użyciu) [Brak podpisu cyfrowego ?] C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe ==================== Rejestr (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [SoundMAX] => C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [729088 2006-07-13] (Analog Devices, Inc.) [Brak podpisu cyfrowego] HKLM\...\Run: [QlbCtrl.exe] => C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [177456 2007-10-19] (Hewlett-Packard Company -> Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [Recguard] => C:\WINDOWS\Sminst\Recguard.exe [1187840 2005-12-20] () [Brak podpisu cyfrowego] HKLM\...\Run: [Reminder] => C:\WINDOWS\Creator\Remind_XP.exe [806912 2006-03-09] () [Brak podpisu cyfrowego] HKLM\...\Run: [Scheduler] => C:\WINDOWS\SMINST\Scheduler.exe [697976 2006-10-09] (Hewlett-Packard Company -> ) HKLM\...\Run: [hpWirelessAssistant] => C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe [454656 2006-02-14] (Hewlett-Packard Development Company, L.P.) [Brak podpisu cyfrowego] HKLM\...\Run: [Cpqset] => C:\Program Files\HPQ\Default Settings\cpqset.exe [40960 2006-02-22] () [Brak podpisu cyfrowego] HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation -> Microsoft Corporation) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242392 2018-11-19] (AVAST Software s.r.o. -> AVAST Software) HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2007-03-11] (Hewlett-Packard Co.) [Brak podpisu cyfrowego] HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) HKLM\...\Run: [EaseUS EPM tray] => E:\EaseUS Partition Master 11.9\bin\EpmNews.exe HKLM\...\Run: [EaseUS Cleanup] => "E:\EaseUS Partition Master 11.9\bin\CleanUpUI.exe" 10 300 HKLM\...\Run: [SoundMAXPnP] => C:\Program Files\Analog Devices\Core\smax4pnp.exe [872448 2007-01-05] (Microsoft Windows Hardware Compatibility Publisher -> Analog Devices, Inc.) HKLM\...\Run: [SynTPStart] => C:\Program Files\Synaptics\SynTP\SynTPStart.exe [102400 2007-09-14] (Microsoft Windows Hardware Compatibility Publisher -> Synaptics, Inc.) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157456 2015-09-12] (Apple Inc. -> Apple Inc.) HKLM\...\Run: [KernelFaultCheck] => %systemroot%\system32\dumprep 0 -k HKU\S-1-5-21-1343024091-1454471165-1417001333-1006\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation) HKU\S-1-5-21-1343024091-1454471165-1417001333-1006\...\Run: [NBJ] => C:\Program Files\Ahead\Nero BackItUp\NBJ.exe [2048000 2006-09-15] (Ahead Software AG) [Brak podpisu cyfrowego] HKU\S-1-5-21-1343024091-1454471165-1417001333-1006\...\Run: [Chromium] => "c:\documents and settings\admin\ustawienia lokalne\dane aplikacji\chromium\application\chrome.exe" --auto-launch-at-startup --profile-directory="Default" --restore-last-session HKU\S-1-5-21-1343024091-1454471165-1417001333-1006\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-15] (Piriform Software Ltd -> Piriform Ltd) HKU\S-1-5-21-1343024091-1454471165-1417001333-1006\...\MountPoints2: {3275efca-5944-11e5-8e3d-001a730106e9} - E:\LG_PC_Programs.exe HKU\S-1-5-21-1343024091-1454471165-1417001333-1006\...\MountPoints2: {d96af438-3518-11e6-91ce-001641d887a5} - E:\HiSuiteDownLoader.exe HKLM\Software\Microsoft\Active Setup\Installed Components: [<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}] -> C:\WINDOWS\system32\ieudinit.exe [2009-03-08] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] -> C:\WINDOWS\inf\unregmp2.exe [2008-04-15] (Microsoft Windows Component Publisher -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] -> C:\WINDOWS\system32\shmgrate.exe [2008-04-15] (Microsoft Windows Component Publisher -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}] -> HKLM\Software\Microsoft\Active Setup\Installed Components: [{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] -> HKLM\Software\Microsoft\Active Setup\Installed Components: [{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] -> C:\Program Files\Outlook Express\setup50.exe [2008-04-15] (Microsoft Windows Component Publisher -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] -> C:\WINDOWS\system32\advpack.dll [2009-03-08] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{5945c046-1e7d-11d1-bc44-00c04fd912be}] -> C:\WINDOWS\system32\advpack.dll [2009-03-08] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{6BF52A52-394A-11d3-B153-00C04F79FAA6}] -> C:\WINDOWS\system32\advpack.dll [2009-03-08] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{7790769C-0471-11d2-AF11-00C04FA35D02}] -> C:\Program Files\Outlook Express\setup50.exe [2008-04-15] (Microsoft Windows Component Publisher -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\49.0.2623.112\Installer\chrmstp.exe [2016-04-11] (Google Inc -> Google Inc.) HKLM\Software\...\Winlogon\GPExtensions: [{C631DF4C-088F-4156-B058-4375F0853CD8}] -> C:\WINDOWS\System32\cscui.dll [2008-04-15] (Microsoft Windows Component Publisher -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{c6dc5466-785a-11d2-84d0-00c04fb169f7}] -> appmgmts.dll Startup: C:\Documents and Settings\admin\Menu Start\Programy\Autostart\AutorunsDisabled [2014-09-30] () Startup: C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Autostart\BTTray.lnk [2019-01-26] ShortcutTarget: BTTray.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) [Brak podpisu cyfrowego] Startup: C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk [2020-03-22] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.) Startup: C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Autostart\BTTray.lnk [2019-01-26] ShortcutTarget: BTTray.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) [Brak podpisu cyfrowego] Startup: C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk [2020-03-22] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.) ==================== Zaplanowane zadania============================= (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\WINDOWS\Tasks\Avast Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe Task: C:\WINDOWS\Tasks\CCleaner Update.job => C:\Program Files\CCleaner\CCUpdate.exe Task: C:\WINDOWS\Tasks\Opera scheduled Autoupdate 1584913759.job => C:\Program Files\Opera\op\launcher.exe ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 0.0.0.0 Tcpip\..\Interfaces\{1A5CAE47-77D4-4FC0-A016-910A61A14B65}: [DhcpNameServer] 192.168.0.1 0.0.0.0 Internet Explorer: ================== HKU\S-1-5-21-1343024091-1454471165-1417001333-1006\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation -> Microsoft Corporation) DPF: {CAFEEFAC-0018-0000-00111-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_111-windows-i586.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation -> Microsoft Corporation) FireFox: ======== FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: (Microsoft .NET Framework Assistant) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-09-30] [Przestarzałe] [Brak podpisu cyfrowego] FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2015-09-04] (Apple Inc. -> ) FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems, Incorporated -> Adobe Systems Inc.) Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default [2020-03-23] CHR Notifications: Default -> hxxp://poczta.onet.pl; hxxps://kobieta.wp.pl; hxxps://wiadomosci.wp.pl; hxxps://www.alibaba.com; hxxps://www.eholiday.pl; hxxps://www.fixitpc.pl; hxxps://www.wp.pl; hxxps://www.wp.pl CHR StartupUrls: Default -> "hxxp://www.google.com/" CHR Extension: (Dokumenty) - C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-28] CHR Extension: (Dysk Google) - C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-25] CHR Extension: (YouTube) - C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-25] CHR Extension: (Google Search) - C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-25] CHR Extension: (Dokumenty Google offline) - C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-22] CHR Extension: (Avast Online Security) - C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2020-04-19] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-04-19] CHR Extension: (Gmail) - C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-06-24] CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx CHR HKLM\...\Chrome\Extension: [ofoeigeaodhbjogdigckajfhjbonaofg] Opera: ======= OPR Extension: (Szafir SDK Web) - C:\Documents and Settings\admin\Dane aplikacji\Opera Software\Opera Stable\Extensions\bikmiknjdohdfmehchjpbiemekemgndp [2020-04-22] ==================== Usługi (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335872 2019-02-12] (Adobe Systems Incorporated -> Adobe Systems Incorporated) [Brak podpisu cyfrowego] R2 AgereModemAudio; C:\WINDOWS\system32\agrsmsvc.exe [13312 2008-03-18] (Microsoft Windows Hardware Compatibility Publisher -> Agere Systems) R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6799632 2018-11-19] (AVAST Software s.r.o. -> AVAST Software) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [324000 2018-11-19] (AVAST Software s.r.o. -> AVAST Software) R2 btwdins; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [258103 2006-02-15] (Broadcom Corporation.) [Brak podpisu cyfrowego] R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2007-06-04] (Hewlett-Packard Co.) [Brak podpisu cyfrowego] R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [131072 2007-06-04] (Hewlett-Packard Co.) [Brak podpisu cyfrowego] S2 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego] S2 PCA; C:\WINDOWS\SMINST\PCAngel.exe [294912 2006-01-12] (SoftThinks) [Brak podpisu cyfrowego] R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego] S3 SwPrv; C:\WINDOWS\system32\dllhost.exe /Processid:{1196FD15-3AC5-445B-9E02-93A48ECF0746} [5120 2008-04-15] (Microsoft Windows Component Publisher -> Microsoft Corporation) ===================== Sterowniki (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 ADIHdAudAddService; C:\WINDOWS\System32\drivers\ADIHdAud.sys [281600 2007-10-01] (Microsoft Windows Hardware Compatibility Publisher -> Analog Devices, Inc.) R3 AEAudio; C:\WINDOWS\System32\drivers\AEAudio.sys [94976 2007-07-13] (Microsoft Windows Hardware Compatibility Publisher -> Andrea Electronics Corporation) R3 AgereSoftModem; C:\WINDOWS\System32\DRIVERS\AGRSM.sys [1203776 2008-03-21] (Microsoft Windows Hardware Compatibility Publisher -> Agere Systems) S3 arusb(Atheros); C:\WINDOWS\System32\DRIVERS\arusb.sys [601088 2010-04-20] (Atheros Communications, Inc.) [Brak podpisu cyfrowego] R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [167480 2018-11-19] (AVAST Software s.r.o. -> AVAST Software) R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriverx.sys [188976 2018-11-19] (AVAST Software s.r.o. -> AVAST Software) R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidshx.sys [165384 2018-11-19] (AVAST Software s.r.o. -> AVAST Software) R0 aswblog; C:\WINDOWS\System32\drivers\aswblogx.sys [284256 2018-11-19] (AVAST Software s.r.o. -> AVAST Software) R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbunivx.sys [57904 2018-11-19] (AVAST Software s.r.o. -> AVAST Software) R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [183176 2018-11-26] (AVAST Software s.r.o. -> AVAST Software) S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [42736 2018-11-19] (AVAST Software s.r.o. -> AVAST Software) R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [40688 2018-11-19] (AVAST Software s.r.o. -> AVAST Software) R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [135200 2019-01-18] (AVAST Software s.r.o. -> AVAST Software) R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr.sys [70640 2018-11-19] (AVAST Software s.r.o. -> AVAST Software) R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [72800 2018-11-19] (AVAST Software s.r.o. -> AVAST Software) R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [784552 2019-05-23] (AVAST Software s.r.o. -> AVAST Software) R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [397984 2019-05-23] (AVAST Software s.r.o. -> AVAST Software) R3 aswStmXP; C:\WINDOWS\System32\drivers\aswStmXP.sys [146584 2018-11-19] (AVAST Software s.r.o. -> AVAST Software) R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [310200 2018-11-19] (AVAST Software s.r.o. -> AVAST Software) R3 BCM43XX; C:\WINDOWS\System32\DRIVERS\bcmwl5.sys [1123328 2019-01-26] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Corp.) S3 bcm4sbxp; C:\WINDOWS\System32\DRIVERS\bcm4sbxp.sys [45312 2005-08-05] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Corporation) R3 btaudio; C:\WINDOWS\System32\drivers\btaudio.sys [401664 2006-02-15] (Broadcom Corporation.) [Brak podpisu cyfrowego] R3 BTDriver; C:\WINDOWS\System32\DRIVERS\btport.sys [30363 2006-02-15] (Broadcom Corporation.) [Brak podpisu cyfrowego] R3 BTKRNL; C:\WINDOWS\System32\DRIVERS\btkrnl.sys [1342570 2006-02-15] (Broadcom Corporation.) [Brak podpisu cyfrowego] R3 BTWDNDIS; C:\WINDOWS\System32\DRIVERS\btwdndis.sys [148168 2006-02-15] (Broadcom Corporation.) [Brak podpisu cyfrowego] R3 btwmodem; C:\WINDOWS\System32\DRIVERS\btwmodem.sys [30189 2006-02-15] (Broadcom Corporation.) [Brak podpisu cyfrowego] R3 BTWUSB; C:\WINDOWS\System32\Drivers\btwusb.sys [57096 2006-02-15] (Broadcom Corporation.) [Brak podpisu cyfrowego] S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Windows Component Publisher -> Microsoft Corporation) S3 dg_ssudbus; C:\WINDOWS\System32\DRIVERS\ssudbus.sys [109456 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) S3 epmntdrv; C:\WINDOWS\system32\epmntdrv.sys [20472 2016-01-14] (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Brak podpisu cyfrowego] S3 EuGdiDrv; C:\WINDOWS\system32\EuGdiDrv.sys [10208 2016-07-11] (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Brak podpisu cyfrowego] R3 HBtnKey; C:\WINDOWS\System32\DRIVERS\cpqbttn.sys [9472 2006-06-28] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Development Company, L.P.) R3 HDAudBus; C:\WINDOWS\System32\DRIVERS\HDAudBus.sys [144384 2008-04-15] (Microsoft Windows Component Publisher -> Windows (R) Server 2003 DDK provider) R3 HpqKbFiltr; C:\WINDOWS\System32\DRIVERS\HpqKbFiltr.sys [16768 2007-06-18] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Development Company, L.P.) S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [49920 2007-03-07] (Microsoft Windows Hardware Compatibility Publisher -> HP) S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2007-03-07] (Microsoft Windows Hardware Compatibility Publisher -> HP) S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21568 2007-03-07] (Microsoft Windows Hardware Compatibility Publisher -> HP) S3 MarvinBus; C:\WINDOWS\System32\DRIVERS\MarvinBus.sys [171520 2005-09-23] (Pinnacle Systems GmbH) [Brak podpisu cyfrowego] S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Windows Component Publisher -> Microsoft Corporation) R3 Ptilink; C:\WINDOWS\System32\DRIVERS\ptilink.sys [17792 2008-04-15] (Microsoft Windows Component Publisher -> Parallel Technologies, Inc.) S3 Secdrv; C:\WINDOWS\System32\DRIVERS\secdrv.sys [20480 2008-04-15] (Microsoft Windows Component Publisher -> Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) R3 SynTP; C:\WINDOWS\System32\DRIVERS\SynTP.sys [213696 2007-09-14] (Microsoft Windows Hardware Compatibility Publisher -> Synaptics, Inc.) S3 USBAAPL; C:\WINDOWS\System32\Drivers\usbaapl.sys [45056 2015-06-17] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.) S1 wceusbsh; C:\WINDOWS\System32\DRIVERS\wceusbsh.sys [31872 2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation) S3 wdf_usb; C:\WINDOWS\System32\drivers\usb2ser.sys [58112 2011-05-18] (Microsoft Windows Hardware Compatibility Publisher -> MediaTek Inc.) U1 WS2IFSL; Brak ImagePath ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) =================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2020-04-22 08:56 - 2020-04-22 08:56 - 000042496 ____C C:\Documents and Settings\admin\Moje dokumenty\15zzd_załacznik_nr_1_do_wniosku_pozyczka_v1.xls 2020-04-22 08:56 - 2020-03-22 23:58 - 000000000 ____D C:\Documents and Settings\admin\Pulpit\tarcza 2020-04-17 18:17 - 2020-04-17 18:17 - 000701591 ____C C:\Documents and Settings\admin\Moje dokumenty\pozyczki-sedziowskie.pdf 2020-04-17 17:58 - 2020-04-17 17:58 - 000699194 ____C C:\Documents and Settings\admin\Moje dokumenty\aktualnosci.pdf 2020-04-16 18:55 - 2020-04-16 18:55 - 000151466 ____C C:\Documents and Settings\admin\Moje dokumenty\Potwierdzenie wykonania przelewu (1).pdf 2020-04-16 18:47 - 2020-04-16 18:47 - 000819205 ____C C:\Documents and Settings\admin\Moje dokumenty\ZESTAWIENIE_TRANSAKCJI_KART_3E1R18_2020-03-25_014536 (4).pdf 2020-04-16 18:46 - 2020-04-16 18:46 - 000819205 ____C C:\Documents and Settings\admin\Moje dokumenty\ZESTAWIENIE_TRANSAKCJI_KART_3E1R18_2020-03-25_014536 (3).pdf 2020-04-16 18:46 - 2020-04-16 18:46 - 000819205 ____C C:\Documents and Settings\admin\Moje dokumenty\ZESTAWIENIE_TRANSAKCJI_KART_3E1R18_2020-03-25_014536 (2).pdf 2020-04-16 18:46 - 2020-04-16 18:46 - 000819205 ____C C:\Documents and Settings\admin\Moje dokumenty\ZESTAWIENIE_TRANSAKCJI_KART_3E1R18_2020-03-25_014536 (1).pdf 2020-04-09 20:01 - 2020-04-09 20:01 - 000257854 ____C C:\Documents and Settings\admin\Moje dokumenty\Your annual summary_23102019.pdf 2020-04-08 08:51 - 2020-04-08 08:51 - 000059998 ____C C:\Documents and Settings\admin\Moje dokumenty\pko_trans_details_20200408_095038.pdf 2020-04-08 08:51 - 2020-04-08 08:51 - 000059418 ____C C:\Documents and Settings\admin\Moje dokumenty\pko_trans_details_20200408_095059.pdf 2020-04-08 08:50 - 2020-04-08 08:50 - 000060263 ____C C:\Documents and Settings\admin\Moje dokumenty\pko_trans_details_20200408_094948.pdf 2020-04-08 08:50 - 2020-04-08 08:50 - 000059799 ____C C:\Documents and Settings\admin\Moje dokumenty\pko_trans_details_20200408_095014.pdf 2020-04-08 08:48 - 2020-04-08 08:48 - 000062214 ____C C:\Documents and Settings\admin\Moje dokumenty\pko_trans_details_20200408_094828.pdf 2020-04-08 08:43 - 2020-04-08 08:43 - 000060397 ____C C:\Documents and Settings\admin\Moje dokumenty\pko_trans_details_20200408_094322.pdf 2020-04-06 09:13 - 2020-04-06 09:13 - 000036099 ____C C:\Documents and Settings\admin\Moje dokumenty\eKonto nr _70141790 za 2020-03.htm 2020-04-06 09:12 - 2020-04-06 09:12 - 000006327 ____C C:\Documents and Settings\admin\Moje dokumenty\smime (17).p7s 2020-03-31 18:27 - 2020-03-31 18:27 - 000819205 ____C C:\Documents and Settings\admin\Moje dokumenty\ZESTAWIENIE_TRANSAKCJI_KART_3E1R18_2020-03-25_014536.pdf 2020-03-26 07:01 - 2020-03-26 07:01 - 000350264 ____C C:\Documents and Settings\admin\Moje dokumenty\20200311183148_4_Zalacznik 3_klauzula informacyjna (2).pdf 2020-03-25 02:43 - 2020-03-25 02:43 - 000819713 ____C C:\Documents and Settings\admin\Moje dokumenty\ZESTAWIENIE_TRANSAKCJI_KART_3E1R18_2020-02-25_014452 (1).pdf 2020-03-24 20:42 - 2020-03-24 20:42 - 000059763 ____C C:\Documents and Settings\admin\Moje dokumenty\pdf_Roztoczański_Park_Narodowy_w_Zwierzyńcu_ogłasza_przetarg_pisemny_nieograniczony_na_dzierżawę_nieruchomości_oraz_obsługę_przewozów_turystycznych_elektrycznymi_pojazdami_wolnobieżnymi.pdf 2020-03-24 20:40 - 2020-03-24 20:40 - 000094678 ____C C:\Documents and Settings\admin\Moje dokumenty\20100604133046_Postanowienie dyrektora.pdf 2020-03-24 20:28 - 2020-03-24 20:28 - 000350264 ____C C:\Documents and Settings\admin\Moje dokumenty\20200311183148_4_Zalacznik 3_klauzula informacyjna (1).pdf 2020-03-24 19:45 - 2020-03-24 19:45 - 000878525 ____C C:\Documents and Settings\admin\Moje dokumenty\20200311183114_3_Zalacznik 2_wzor umowy dzierzawy (2).pdf 2020-03-24 18:03 - 2020-03-24 18:03 - 000528929 ____C C:\Documents and Settings\admin\Moje dokumenty\20200225110216_Ogloszenie o przetargu.pdf 2020-03-23 20:20 - 2020-03-23 20:35 - 000000000 ___DC C:\FRST 2020-03-23 20:17 - 2020-03-23 20:30 - 000000000 ____D C:\Documents and Settings\admin\Pulpit\logi 2020-03-23 17:09 - 2020-03-23 17:08 - 000106496 _____ C:\WINDOWS\Minidump\Mini032320-01.dmp 2020-03-23 09:16 - 2020-03-23 09:16 - 000311807 ____C C:\Documents and Settings\admin\Pulpit\wojtowicz_zasw (1).pdf 2020-03-23 01:04 - 2020-03-23 01:06 - 000558900 ___SH C:\Documents and Settings\Kasia\Thumbs.db 2020-03-22 23:08 - 2020-03-22 23:08 - 000042496 ____C C:\Documents and Settings\admin\Moje dokumenty\15zzd_załacznik_nr_1_do_wniosku_pozyczka.xls 2020-03-22 22:49 - 2020-03-23 18:05 - 000000438 _____ C:\WINDOWS\Tasks\Opera scheduled Autoupdate 1584913759.job 2020-03-22 22:49 - 2020-03-22 22:49 - 000000736 _____ C:\Documents and Settings\All Users.WINDOWS\Pulpit\Opera.lnk 2020-03-22 22:49 - 2020-03-22 22:49 - 000000736 _____ C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Opera.lnk 2020-03-22 22:49 - 2020-03-22 22:49 - 000000736 _____ C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Opera.lnk 2020-03-22 22:41 - 2020-03-22 22:41 - 000002710 ____C C:\Documents and Settings\admin\Moje dokumenty\cc_20200322_224055.reg 2020-03-22 19:02 - 2020-03-22 19:02 - 000112360 ____C C:\Documents and Settings\admin\Moje dokumenty\70141790_200222_200322 (1).pdf 2020-03-22 19:01 - 2020-03-22 19:01 - 000112363 ____C C:\Documents and Settings\admin\Moje dokumenty\70141790_200222_200322.pdf 2020-03-22 17:39 - 2020-03-22 17:39 - 000109530 ____C C:\Documents and Settings\admin\Moje dokumenty\RODO.pdf 2020-03-22 17:39 - 2020-03-22 17:39 - 000005226 ____C C:\Documents and Settings\admin\Moje dokumenty\wojtowicz_zasw.pdf (1).XAdES 2020-03-22 17:38 - 2020-03-22 17:38 - 000311807 ____C C:\Documents and Settings\admin\Pulpit\wojtowicz_zasw.pdf 2020-03-22 17:37 - 2020-03-22 17:37 - 000311807 ____C C:\Documents and Settings\admin\Moje dokumenty\wojtowicz_zasw.pdf 2020-03-22 17:36 - 2020-03-22 17:36 - 000005226 ____C C:\Documents and Settings\admin\Moje dokumenty\wojtowicz_zasw.pdf.XAdES 2020-03-22 11:42 - 2020-03-22 11:42 - 000350264 ____C C:\Documents and Settings\admin\Moje dokumenty\20200311183148_4_Zalacznik 3_klauzula informacyjna.pdf 2020-03-22 11:41 - 2020-03-22 11:41 - 000878525 ____C C:\Documents and Settings\admin\Moje dokumenty\20200311183114_3_Zalacznik 2_wzor umowy dzierzawy (1).pdf 2020-03-22 11:24 - 2020-03-22 11:24 - 000167473 ____C C:\Documents and Settings\admin\Moje dokumenty\pomidor-brillante-f1.pdf 2020-03-22 10:46 - 2020-03-22 10:46 - 000001858 _____ C:\Documents and Settings\All Users.WINDOWS\Pulpit\HP Photosmart Essential 2.01.lnk 2020-03-22 10:45 - 2020-03-22 10:45 - 000000725 _____ C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Rejestracja programu I.R.I.S. OCR.lnk 2020-03-22 10:45 - 2020-03-22 10:45 - 000000725 _____ C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Rejestracja programu I.R.I.S. OCR.lnk 2020-03-22 10:29 - 2020-03-22 10:52 - 000155219 _____ C:\WINDOWS\hpoins14.dat 2020-03-22 10:29 - 2008-04-02 09:01 - 000002000 ____N C:\WINDOWS\hpomdl14.dat 2020-03-13 16:50 - 2020-03-13 16:50 - 000819713 ____C C:\Documents and Settings\admin\Moje dokumenty\ZESTAWIENIE_TRANSAKCJI_KART_3E1R18_2020-02-25_014452.pdf 2020-03-12 15:53 - 2020-03-12 15:53 - 000878525 ____C C:\Documents and Settings\admin\Moje dokumenty\20200311183114_3_Zalacznik 2_wzor umowy dzierzawy.pdf 2020-03-11 19:48 - 2020-03-11 19:48 - 005352604 ____C C:\Documents and Settings\admin\Moje dokumenty\Gazetasadowa_0028_2019_01-1.pdf 2020-03-03 20:12 - 2020-03-03 20:44 - 000000000 ____D C:\Documents and Settings\admin\Pulpit\do wgrania 2020-03-03 19:35 - 2020-03-03 19:37 - 000000000 ____D C:\Documents and Settings\admin\Pulpit\testowy 2020 2020-03-02 20:14 - 2020-03-03 19:31 - 000000000 ____D C:\Documents and Settings\admin\Pulpit\test 2020 pl komplet na początek 2020-02-28 19:54 - 2020-03-03 19:34 - 000000000 ____D C:\Documents and Settings\admin\Pulpit\audio 2020 2020-02-26 13:56 - 2020-02-26 13:56 - 000222073 _____ C:\Documents and Settings\admin\Pulpit\biuro@bigholiday.com.pl.pdf ==================== Jeden miesiąc (zmodyfikowane) ================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2020-04-22 07:44 - 2012-07-27 20:51 - 000000000 ____D C:\Documents and Settings\admin\Moje dokumenty\Bluetooth Exchange Folder 2020-04-22 07:00 - 2012-07-27 20:51 - 000000000 ___HD C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji 2020-04-11 17:09 - 2019-02-02 21:31 - 000000000 ____C C:\Documents and Settings\admin\last.dump 2020-04-09 15:35 - 2017-04-14 13:46 - 000000000 ____C C:\WINDOWS\system32\last.dump 2020-03-26 08:00 - 2016-07-17 10:10 - 000000000 ___DC C:\Documents and Settings\wieŚmac 2020-03-26 07:09 - 2017-03-09 18:43 - 000000000 ____D C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\HPSSUPPLY 2020-03-26 07:09 - 2017-03-09 18:43 - 000000000 ____D C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\HPSSUPPLY 2020-03-25 17:37 - 2017-05-19 18:51 - 000567846 __SHC C:\Documents and Settings\admin\Pulpit\Thumbs.db 2020-03-23 20:35 - 2012-07-27 20:51 - 000000000 ____D C:\Documents and Settings\admin\Ustawienia lokalne\Temp 2020-03-23 20:34 - 2012-07-27 20:51 - 000000000 __RDC C:\Documents and Settings\admin\Moje dokumenty 2020-03-23 20:17 - 2012-07-27 20:51 - 000000000 ____D C:\Documents and Settings\admin\Pulpit 2020-03-23 18:09 - 2012-05-12 18:43 - 000006826 ____C C:\WINDOWS\system32\PerfStringBackup.INI 2020-03-23 18:09 - 2008-04-15 13:00 - 003314010 ____C C:\WINDOWS\system32\perfh015.dat 2020-03-23 18:09 - 2008-04-15 13:00 - 001742704 ____C C:\WINDOWS\system32\perfc015.dat 2020-03-23 18:05 - 2019-01-26 11:10 - 000000328 ____H C:\WINDOWS\Tasks\CCleaner Update.job 2020-03-23 18:05 - 2018-01-09 18:19 - 000000358 ____H C:\WINDOWS\Tasks\Avast Emergency Update.job 2020-03-23 18:05 - 2012-05-12 17:01 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2020-03-23 18:05 - 2012-05-12 07:52 - 000000000 ____D C:\WINDOWS\SMINST 2020-03-23 18:05 - 2008-04-15 13:00 - 000011936 _____ C:\WINDOWS\system32\wpa.dbl 2020-03-23 17:40 - 2012-07-27 20:51 - 000000188 __SHC C:\Documents and Settings\admin\ntuser.ini 2020-03-23 17:40 - 2012-07-27 20:51 - 000000000 ___DC C:\Documents and Settings\admin 2020-03-23 17:40 - 2012-05-12 17:01 - 000032624 _____ C:\WINDOWS\SchedLgU.Txt 2020-03-23 17:09 - 2012-09-23 20:33 - 000000000 ____D C:\WINDOWS\Minidump 2020-03-23 09:02 - 2012-05-12 18:33 - 000000000 ____D C:\WINDOWS\Network Diagnostic 2020-03-23 01:09 - 2012-05-12 22:43 - 000000000 ____D C:\Program Files\Opera 2020-03-23 01:05 - 2019-06-16 23:18 - 000000000 ___DC C:\Documents and Settings\admin\Dane aplikacji\vlc 2020-03-23 01:05 - 2019-01-04 20:32 - 000000000 ____D C:\Documents and Settings\Kasia\Nowy folder 2020-03-23 01:04 - 2019-01-04 20:30 - 000000000 ____D C:\Documents and Settings\Kasia\londyn sierpień 16 2020-03-23 01:04 - 2012-05-13 16:42 - 000000000 ____D C:\Documents and Settings\Kasia 2020-03-22 22:49 - 2012-05-12 18:43 - 000000000 ___RD C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy 2020-03-22 22:49 - 2012-05-12 18:43 - 000000000 ___RD C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy 2020-03-22 22:49 - 2012-05-12 18:43 - 000000000 ____D C:\Documents and Settings\All Users.WINDOWS\Pulpit 2020-03-22 22:45 - 2012-05-12 20:28 - 000000000 ____D C:\pewne i potrzebne instalki 2020-03-22 18:28 - 2014-06-01 19:34 - 000000000 ____D C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Temp 2020-03-22 10:53 - 2008-04-15 13:00 - 000000621 _____ C:\WINDOWS\win.ini 2020-03-22 10:47 - 2012-07-01 16:06 - 000000000 ____D C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\HP 2020-03-22 10:47 - 2012-07-01 16:06 - 000000000 ____D C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\HP 2020-03-22 10:46 - 2012-05-12 18:43 - 000000000 ___RD C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Autostart 2020-03-22 10:46 - 2012-05-12 18:43 - 000000000 ___RD C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Autostart 2020-03-22 10:33 - 2012-05-10 17:21 - 000000000 ___HD C:\WINDOWS\inf 2020-03-22 09:49 - 2012-05-12 18:43 - 000000000 ___RD C:\Documents and Settings\All Users.WINDOWS\Menu Start 2020-03-22 09:48 - 2012-07-01 16:06 - 000000000 ____D C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\HP 2020-03-22 09:48 - 2012-07-01 16:06 - 000000000 ____D C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\HP 2020-03-22 09:48 - 2012-05-12 18:42 - 000000000 __RHD C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji 2020-03-22 09:42 - 2017-03-09 17:49 - 000154714 ____C C:\WINDOWS\hpoins14.dat.temp 2020-03-03 20:21 - 2012-07-27 20:51 - 000000000 ___RD C:\Documents and Settings\admin\Moje dokumenty\Moje obrazy 2020-03-03 11:22 - 2019-12-25 22:47 - 000000000 ____D C:\Documents and Settings\admin\Pulpit\do nagrania 2020-03-02 20:32 - 2020-02-01 11:12 - 000000000 ____D C:\Documents and Settings\admin\Pulpit\ciekawostki 2020-03-01 11:30 - 2012-05-12 22:05 - 000065536 _____ C:\WINDOWS\system32\config\ODiag.evt 2020-02-27 18:54 - 2015-11-26 14:45 - 000180828 _____ C:\Documents and Settings\wieŚmac\zestawienie melex zoo.xlsx 2020-02-26 13:50 - 2019-02-12 11:16 - 000220611 _____ C:\Documents and Settings\admin\Pulpit\Zwiedzaj z nami Melexami dla Szkoły.pdf ==================== Pliki w katalogu głównym wybranych folderów ======== 2013-02-14 12:36 - 2013-02-14 12:36 - 004126720 ____C () C:\Program Files\GUT387.tmp 2018-09-13 22:33 - 2018-11-19 20:03 - 000000583 ____C () C:\Documents and Settings\admin\Dane aplikacji\enigmaProviderCertSign.properties 2018-09-13 22:33 - 2018-09-13 22:33 - 000000277 ____C () C:\Documents and Settings\admin\Dane aplikacji\enigmaSecApp.properties 2012-07-27 20:51 - 2012-07-27 20:51 - 000000000 ____C () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\AtStart.txt 2012-08-02 17:33 - 2019-04-23 17:29 - 000066048 ____C () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2012-07-27 20:51 - 2012-07-27 20:51 - 000000000 ____C () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\DSwitch.txt 2015-10-19 12:04 - 2017-10-05 19:46 - 000000000 ____C () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\FnF4.txt 2019-01-11 11:12 - 2019-01-11 11:12 - 000004096 ___HC () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\keyfile3.drm 2012-07-27 20:51 - 2012-07-27 20:51 - 000000000 ____C () C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\QSwitch.txt 2012-07-01 15:55 - 2020-03-22 10:47 - 000070998 ____C () C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\hpzinstall.log ==================== FLock ============================== 2012-05-12 21:47 C:\System Recovery ==================== SigCheck ============================ (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) ==================== Koniec FRST.txt ========================