Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 16-09-2024 Uruchomiony przez Administrator (administrator) MEFISTO-REMOTE (Micro-Star International Co., Ltd. MS-7C09) (16-10-2024 08:48:21) Uruchomiony z E:\\FRST64.exe Załadowane profile: Administrator Platforma: Microsoft Windows 10 Enterprise for Virtual Desktops Wersja 22H2 19045.5011 (X64) Język: Polski (Polska) Domyślna przeglądarka: Edge Tryb startu: Normal ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Asseco Data Systems S.A. -> Certum) C:\Program Files (x86)\Certum\proCertum CardManager\cryptoCertumScanner.exe (DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxEM.exe (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (services.exe ->) (GLAVSOFT, OOO -> GlavSoft LLC.) C:\Program Files\TightVNC\tvnserver.exe <2> (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxCUIService.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_c2ac023763d5d3ad\OneApp.IGCC.WinService.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\IntelCpHDCPSvc.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\IntelCpHeciSvc.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (services.exe ->) (Microsoft Windows -> ) C:\Windows\System32\OpenSSH\sshd.exe (services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\snmptrap.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MsMpEng.exe (svchost.exe ->) (Janos Mathe -> H.D.S. Hungary) C:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.186.0915.0004\FileCoAuth.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mobsync.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe ==================== Rejestr (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [tvncontrol] => C:\Program Files\TightVNC\tvnserver.exe [1826232 2023-05-02] (GLAVSOFT, OOO -> GlavSoft LLC.) HKLM-x32\...\Run: [AutoRegisterCerts] => C:\Program Files (x86)\Certum\proCertum CardManager\cryptoCertumScanner.exe [175952 2022-10-25] (Asseco Data Systems S.A. -> Certum) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [748624 2023-10-04] (Oracle America, Inc. -> Oracle Corporation) HKU\S-1-5-21-45412628-241958549-1367884618-1000\...\RunOnce: [Delete Cached Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\Aleksandraf\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" [70024624 2024-07-11] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-45412628-241958549-1367884618-1000\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\Aleksandraf\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Brak pliku) HKU\S-1-5-21-45412628-241958549-1367884618-1000\...\RunOnce: [Uninstall 24.116.0609.0005] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Aleksandraf\AppData\Local\Microsoft\OneDrive\24.116.0609.0005" [0 2024-07-22] () <==== UWAGA [zerobajtowy plik/folder] HKU\S-1-5-21-45412628-241958549-1367884618-1007\...\Run: [MicrosoftEdgeAutoLaunch_CCE580130DBB985DFA4965DB86581D3F] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3794984 2024-10-10] (Microsoft Corporation -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [>OpenVPN_UserSetup] -> reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /f HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\129.0.6668.100\Installer\chrmstp.exe [2024-10-10] (Google LLC -> Google LLC) IFEO\osppsvc.exe: [VerifierDlls] SppExtComObjHook.dll IFEO\SppExtComObj.exe: [VerifierDlls] SppExtComObjHook.dll Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\e-archiwizacja nexo.lnk [2024-06-17] ShortcutTarget: e-archiwizacja nexo.lnk -> C:\Program Files (x86)\InsERT\nexo\e-archiwizacja-nexo.exe ("INSERT" S.A. -> InsERT S.A.) GroupPolicy: Ograniczenia ? <==== UWAGA Policies: C:\ProgramData\NTUSER.pol: Ograniczenia <==== UWAGA ==================== Zaplanowane zadania (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {FD8E628D-6DEC-4D1B-9BCF-7CE827161FE0} - Brak ścieżki do pliku. <==== UWAGA Task: {0CAA3BCE-838B-4679-96E5-B6FA4F65C765} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1563080 2024-07-31] (Adobe Inc. -> Adobe Inc.) Task: {736028FB-22C9-40E6-A6E4-D142421DA389} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem130.0.6679.0{C09165F5-C47B-4703-8077-605CF173B388} => C:\Program Files (x86)\Google\GoogleUpdater\130.0.6679.0\updater.exe [4884584 2024-08-26] (Google LLC -> Google LLC) Task: {8DF834EB-ECB7-45BB-BD33-C7F60F438B18} - System32\Tasks\HardDiskSentinel\Hard Disk Sentinel_Administrator => C:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe [6632064 2024-02-20] (Janos Mathe -> H.D.S. Hungary) Task: {30FC07BC-3495-430E-9518-7DA31CF0D266} - System32\Tasks\Mapowanie => C:\mapowanie.bat [77 2023-11-03] () [Brak podpisu cyfrowego] Task: {B03125ED-39FA-478E-B4B5-2ED175754407} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [316632 2015-07-31] (Microsoft Corporation -> Microsoft Corporation) Task: {60FFA9BD-BCC1-4B6D-8B87-348A750F23B5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation) Task: {DB46DEB4-F44A-47B2-872F-6F5ED8D154B7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation) Task: {B7A26AEA-E454-486A-9348-8CF34620A133} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => C:\Windows\system32\clipesu.exe [221680 2024-09-25] (Microsoft Windows -> Microsoft Corporation) Task: {9204F8BA-3171-42C4-8B0D-622BDFE930C9} - System32\Tasks\Microsoft\Windows\termsrv\licensing\TlsWarning => C:\Windows\system32\tlsbln.exe [39936 2023-11-06] (Microsoft Windows -> Microsoft Corporation) Task: {9D9A1A97-BAD5-4E23-9A1A-E8EF84326988} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MpCmdRun.exe [1650024 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {8E7F2F8F-1E24-4B99-B21D-6624990CC4AF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MpCmdRun.exe [1650024 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {6370CC79-F01C-4C56-833A-97790CFDF704} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MpCmdRun.exe [1650024 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {FB16EB0D-5B99-4327-8DDC-EF4F3934F5DC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MpCmdRun.exe [1650024 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {C8832D6D-F936-4E8E-B592-82B2C3CABB16} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [672328 2024-10-08] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (dane wartości zawierają 6 znaków więcej). Task: {34096297-2271-4AB0-9064-8190CC12E93B} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-45412628-241958549-1367884618-1003 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [672328 2024-10-08] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (dane wartości zawierają 6 znaków więcej). Task: {AFD3EBBA-EB2E-4F63-A01C-2BB57269D44F} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-45412628-241958549-1367884618-1010 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [672328 2024-10-08] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (dane wartości zawierają 6 znaków więcej). Task: {CACDB042-FBAB-4025-A6AC-181A7D3D49BA} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-45412628-241958549-1367884618-500 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [672328 2024-10-08] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (dane wartości zawierają 6 znaków więcej). Task: {A8D94E58-F1AD-418B-8E81-EAC3FBB81B94} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34376 2024-10-08] (Mozilla Corporation -> Mozilla Foundation) Task: {65C78833-0E58-44C1-AEFF-397AA9AE5129} - System32\Tasks\Restart => C:\restart.bat [19 2024-10-12] () [Brak podpisu cyfrowego] (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 176.109.163.6 8.8.8.8 Tcpip\..\Interfaces\{3e21e89f-01f1-41fe-ab2d-373309ec7685}: [DhcpNameServer] 176.109.163.6 8.8.8.8 Edge: ======= Edge Profile: C:\Users\Administrator\AppData\Local\Microsoft\Edge\User Data\Default [2024-03-08] Edge Extension: (Dokumenty Google offline) - C:\Users\Administrator\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-03-08] Edge Extension: (Edge relevant text changes) - C:\Users\Administrator\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-03-08] Edge HKU\S-1-5-21-45412628-241958549-1367884618-1003\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [jcpgbnbdnakoblgfkbgggankeidkfcdl] Edge HKU\S-1-5-21-45412628-241958549-1367884618-1005\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [jcpgbnbdnakoblgfkbgggankeidkfcdl] Edge HKU\S-1-5-21-45412628-241958549-1367884618-500\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [jcpgbnbdnakoblgfkbgggankeidkfcdl] Edge HKLM-x32\...\Edge\Extension: [jcpgbnbdnakoblgfkbgggankeidkfcdl] FireFox: ======== FF DefaultProfile: d2jpov9w.default FF ProfilePath: C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\d2jpov9w.default [2023-10-26] FF ProfilePath: C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\0v62yggp.default-release [2024-08-06] FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.391.2 -> C:\Program Files (x86)\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.391.2 -> C:\Program Files (x86)\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2024-10-01] (Adobe Inc. -> Adobe Systems Inc.) Chrome: ======= CHR Profile: C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default [2024-10-15] CHR Extension: (Dokumenty Google offline) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-03-13] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-10-26] CHR HKU\S-1-5-21-45412628-241958549-1367884618-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [llbcnfanfmjhpedaedhbcnpgeepdnnok] CHR HKU\S-1-5-21-45412628-241958549-1367884618-1005\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [llbcnfanfmjhpedaedhbcnpgeepdnnok] CHR HKU\S-1-5-21-45412628-241958549-1367884618-500\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [llbcnfanfmjhpedaedhbcnpgeepdnnok] CHR HKLM-x32\...\Chrome\Extension: [llbcnfanfmjhpedaedhbcnpgeepdnnok] ==================== Usługi (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-07-31] (Adobe Inc. -> Adobe Inc.) S2 AktualizujPP; C:\Program Files\Asseco Poland SA\Platnik\ASSECO.AKTUALIZUJ.PP.exe [67504 2024-01-10] (Asseco Poland S.A. -> Asseco Poland S.A.) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [530488 2024-08-30] (Microsoft Windows Publisher -> Microsoft Corporation) R2 tvnserver; C:\Program Files\TightVNC\tvnserver.exe [1826232 2023-05-02] (GLAVSOFT, OOO -> GlavSoft LLC.) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\NisSrv.exe [3191272 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MsMpEng.exe [133688 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Sterowniki (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 TSFairShare; C:\Windows\System32\drivers\TSFairShare.sys [80384 2023-11-06] (Microsoft Windows -> Microsoft Corporation) R0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [20928 2024-03-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [603416 2024-03-13] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105752 2024-03-13] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2024-10-16 08:48 - 2024-10-16 08:48 - 000000000 ____D C:\FRST 2024-10-15 15:21 - 2024-10-15 15:21 - 000000000 __SHD C:\found.000 2024-10-15 10:44 - 2024-10-15 10:44 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Sun 2024-10-15 10:44 - 2024-10-15 10:44 - 000000000 ____D C:\Users\Administrator\AppData\LocalLow\Sun 2024-10-15 10:40 - 2024-10-15 10:40 - 000000000 ____D C:\Users\Administrator\AppData\Local\ElevatedDiagnostics 2024-10-15 10:38 - 2024-10-15 10:38 - 001098820 _____ C:\Windows\Minidump\101524-7656-01.dmp 2024-10-12 11:03 - 2024-10-12 11:03 - 000000019 _____ C:\restart.bat 2024-10-12 11:01 - 2024-10-12 11:03 - 000003430 _____ C:\Windows\system32\Tasks\Restart 2024-10-11 13:39 - 2024-10-11 13:39 - 000091363 _____ C:\Users\Malgosia\Downloads\Stan urlopów.pdf 2024-10-11 09:15 - 2024-10-11 09:15 - 000718024 _____ C:\Users\Malgosia\Downloads\zus (3).pdf 2024-10-09 20:12 - 2024-10-09 20:12 - 000238260 _____ C:\Users\Malgosia\Downloads\Podstawa_składki_zdrowotnej_(skala___liniowy)__2024_09_KOMARNICKI_PRZEMYSŁAW_8841776654.pdf 2024-10-09 19:11 - 2024-10-09 19:11 - 000446696 _____ C:\Users\Malgosia\Downloads\20241008151514305.pdf 2024-10-09 19:09 - 2024-10-09 19:09 - 000222898 _____ C:\Users\Malgosia\Downloads\20241008152349079.pdf 2024-10-09 19:09 - 2024-10-09 19:09 - 000222898 _____ C:\Users\Malgosia\Downloads\20241008152349079 (6).pdf 2024-10-09 19:09 - 2024-10-09 19:09 - 000222898 _____ C:\Users\Malgosia\Downloads\20241008152349079 (5).pdf 2024-10-09 19:09 - 2024-10-09 19:09 - 000222898 _____ C:\Users\Malgosia\Downloads\20241008152349079 (4).pdf 2024-10-09 19:09 - 2024-10-09 19:09 - 000222898 _____ C:\Users\Malgosia\Downloads\20241008152349079 (3).pdf 2024-10-09 19:09 - 2024-10-09 19:09 - 000222898 _____ C:\Users\Malgosia\Downloads\20241008152349079 (2).pdf 2024-10-09 19:09 - 2024-10-09 19:09 - 000222898 _____ C:\Users\Malgosia\Downloads\20241008152349079 (1).pdf 2024-10-09 19:03 - 2024-10-09 19:03 - 000172670 _____ C:\Users\Malgosia\Downloads\SPL Printer24100813000.pdf 2024-10-09 18:49 - 2024-10-09 18:49 - 000749786 _____ C:\Users\Malgosia\Downloads\2024-10-07-12-52-03-01.pdf 2024-10-09 18:29 - 2024-10-09 18:29 - 000174660 _____ C:\Users\Malgosia\Downloads\P_1600_ID4496237.PDF 2024-10-09 17:56 - 2024-10-09 17:56 - 000005740 _____ C:\Users\Malgosia\Documents\Zaświadczenie ZUS Z-3 -Jabłońska Beata (07-10-2024).xml 2024-10-09 17:54 - 2024-10-09 17:54 - 000004065 _____ C:\Users\Malgosia\Downloads\eksport_dokumentow_09-10-2024_17-54.zip 2024-10-09 17:53 - 2024-10-09 17:53 - 000106287 _____ C:\Users\Malgosia\Downloads\PPK Skamet (2).pdf 2024-10-09 17:53 - 2024-10-09 17:53 - 000106287 _____ C:\Users\Malgosia\Downloads\PPK Skamet (1).pdf 2024-10-09 17:52 - 2024-10-09 17:52 - 000113948 _____ C:\Users\Malgosia\Downloads\PPK Skamet.pdf 2024-10-09 17:43 - 2024-10-09 17:43 - 000010179 _____ C:\Users\Malgosia\Downloads\eksport_dokumentow_09-10-2024_17-43.zip 2024-10-09 04:08 - 2024-10-09 04:08 - 000845508 _____ C:\Windows\Minidump\100924-5953-01.dmp 2024-10-08 23:48 - 2024-10-08 23:49 - 000794516 _____ C:\Windows\Minidump\100824-16875-01.dmp 2024-10-08 23:45 - 2024-10-08 23:45 - 001906524 _____ C:\Windows\Minidump\100824-24625-01.dmp 2024-10-08 23:18 - 2024-10-08 23:18 - 000000000 ___HD C:\$WinREAgent 2024-10-08 04:39 - 2024-10-08 11:39 - 000000000 ____D C:\Program Files\Mozilla Firefox 2024-10-07 20:12 - 2024-10-07 20:12 - 000059549 _____ C:\Users\UlaB\Downloads\24100314471.pdf 2024-10-07 20:12 - 2024-10-07 20:12 - 000049355 _____ C:\Users\UlaB\Downloads\24100314470 (1).pdf 2024-10-07 20:11 - 2024-10-07 20:11 - 000049355 _____ C:\Users\UlaB\Downloads\24100314470.pdf 2024-10-06 18:59 - 2024-10-06 18:59 - 000001394 _____ C:\Users\AnnaW\Desktop\DYWIDAG_-_SYSTEMS_INTERNATIONAL_SPÓŁKA_Z_OGRANICZONĄ_ODPOWIEDZIALNOŚCIĄ_ZUS_2024-10-06.xml 2024-10-06 14:43 - 2024-10-06 14:43 - 000080648 _____ C:\Users\Malgosia\Downloads\02V2683D8N9AJKT8S.pdf 2024-10-06 13:51 - 2024-10-06 13:51 - 000269778 _____ C:\Users\Malgosia\Downloads\Zaliczka miesięczna od wypłat PIT (6) - sierpień 2024 (7).pdf 2024-10-06 03:56 - 2024-10-06 03:56 - 001051900 _____ C:\Windows\Minidump\100624-8921-01.dmp 2024-10-05 13:55 - 2024-10-05 13:55 - 000269438 _____ C:\Users\Malgosia\Downloads\Zaliczka miesięczna od wypłat PIT (6) - wrzesień 2024 (1).pdf 2024-10-05 13:32 - 2024-10-05 13:32 - 000096764 _____ C:\Users\Malgosia\Downloads\Lista rachunków LR 1_09_2024.pdf 2024-10-05 11:48 - 2024-10-05 11:48 - 001852332 _____ C:\Users\Malgosia\Downloads\FW_SKAMET_-WYKAZ-_WRZESIEN.zip 2024-10-05 11:41 - 2024-10-05 11:41 - 000003331 _____ C:\Users\Malgosia\Downloads\eksport_dokumentow_05-10-2024_11-42.zip 2024-10-04 23:50 - 2024-10-04 23:50 - 000000000 ____D C:\Users\UlaB\AppData\Roaming\Microsoft\QuickStyles 2024-10-04 21:33 - 2024-10-04 21:33 - 000003181 _____ C:\Users\Malgosia\Downloads\eksport_dokumentow_04-10-2024_21-33.zip 2024-10-04 20:50 - 2024-10-04 20:50 - 022976733 _____ C:\Users\Malgosia\Downloads\FW_pismo_z_ZUS_PASNIK_KOMORNIK.zip 2024-10-04 19:25 - 2024-10-04 19:27 - 000000000 ____D C:\Users\UlaB\Desktop\do maila 2024-10-04 19:14 - 2024-10-04 19:14 - 001429456 _____ C:\Users\UlaB\Downloads\scan10042024_20241004090605.pdf 2024-10-04 19:08 - 2024-10-04 19:05 - 000091728 _____ C:\Users\UlaB\Desktop\0281_001.pdf 2024-10-04 16:17 - 2024-10-04 16:17 - 000926589 _____ C:\Users\Malgosia\Downloads\20241004_12380078.pdf 2024-10-04 12:09 - 2024-10-04 12:09 - 000091728 _____ C:\Users\Malgosia\Downloads\0281_001.pdf 2024-10-04 11:25 - 2024-10-04 11:25 - 000936001 _____ C:\Users\Malgosia\Downloads\20241004_10544324.pdf 2024-10-04 09:58 - 2024-10-04 09:58 - 000006469 _____ C:\Users\Malgosia\Downloads\eksport_dokumentow_04-10-2024_09-58.zip 2024-10-04 09:11 - 2024-10-04 09:11 - 000399011 _____ C:\Users\Malgosia\Downloads\ewidencja czasu pracy wrzesień AW.pdf 2024-10-04 08:53 - 2024-10-04 08:53 - 000333114 _____ C:\Users\Malgosia\Downloads\RCP- Derdziński Marek 09.2024.pdf 2024-10-04 08:10 - 2024-10-04 08:10 - 000059951 _____ C:\Users\Malgosia\Downloads\WYNAGRODZENIE 09,2024.xlsx 2024-10-03 23:08 - 2024-10-03 23:08 - 001782928 _____ C:\Users\Malgosia\Downloads\Book1 (15).xlsx 2024-10-03 21:17 - 2024-10-03 21:17 - 000155613 _____ C:\Users\Malgosia\Downloads\p.Wolfram.pdf 2024-10-03 21:16 - 2024-10-03 21:16 - 000331975 _____ C:\Users\Malgosia\Downloads\Lista obecności - WRZESIEŃ 2024 (1).pdf 2024-10-03 20:37 - 2024-10-03 20:37 - 000003562 _____ C:\Users\Malgosia\Downloads\eksport_dokumentow_03-10-2024_20-37.zip 2024-10-03 20:27 - 2024-10-03 20:27 - 001274464 _____ C:\Users\Malgosia\Downloads\Book1 (14).xlsx 2024-10-03 18:52 - 2024-10-03 18:52 - 000435980 _____ C:\Users\Malgosia\Downloads\Pismo RN.pdf 2024-10-03 16:12 - 2024-10-03 16:12 - 000016684 _____ C:\Users\Malgosia\Downloads\Handlowcy Premia 2024.09 — Mefi.xlsx 2024-10-03 15:56 - 2024-10-03 15:56 - 000295279 _____ C:\Users\Malgosia\Downloads\20241003100235572.pdf 2024-10-03 15:49 - 2024-10-03 15:49 - 000006669 _____ C:\Users\Malgosia\Downloads\eksport_dokumentow_03-10-2024_15-49.zip 2024-10-03 15:28 - 2024-10-03 15:28 - 000049792 _____ C:\Users\Malgosia\Downloads\kasprzyk zus.pdf 2024-10-03 00:09 - 2024-10-03 00:09 - 000256186 _____ C:\Users\Malgosia\Downloads\RE_[EXTERNAL]_RE_PLACE_092024 (2).zip 2024-10-03 00:07 - 2024-10-03 00:07 - 030892640 _____ C:\Users\Malgosia\Downloads\RE_[EXTERNAL]_RE_PLACE_092024.zip 2024-10-03 00:07 - 2024-10-03 00:07 - 030892640 _____ C:\Users\Malgosia\Downloads\RE_[EXTERNAL]_RE_PLACE_092024 (1).zip 2024-10-02 23:17 - 2024-10-02 23:17 - 000022196 _____ C:\Users\Malgosia\Downloads\MEFISTO WRZESIEŃ 24.xlsx 2024-10-02 23:17 - 2024-10-02 23:17 - 000022196 _____ C:\Users\Malgosia\Downloads\MEFISTO WRZESIEŃ 24 (1).xlsx 2024-10-02 22:42 - 2024-10-02 22:42 - 001230718 _____ C:\Users\Malgosia\Downloads\FW_Grafik_IIIQ_-_2024xlsx.zip 2024-10-02 22:42 - 2024-10-02 22:42 - 000538517 _____ C:\Users\Malgosia\Downloads\Grafik IIIQ - 2024 (2).xlsx 2024-10-02 22:25 - 2024-10-02 22:25 - 000158664 _____ C:\Users\Malgosia\Downloads\bc_pi103.pdf 2024-10-02 22:21 - 2024-10-02 22:21 - 000003738 _____ C:\Users\Malgosia\Downloads\eksport_dokumentow_02-10-2024_22-21.zip 2024-10-02 18:24 - 2024-10-02 18:17 - 000420596 _____ C:\Users\UlaB\Desktop\eskulap mulitisport.pdf 2024-10-02 18:23 - 2024-10-01 17:13 - 000011762 _____ C:\Users\UlaB\Desktop\lista składek .xlsx 2024-10-02 17:09 - 2024-10-02 17:09 - 000006445 _____ C:\Users\Malgosia\Downloads\eksport_dokumentow_02-10-2024_17-09.zip 2024-10-02 17:08 - 2024-10-02 17:08 - 000003436 _____ C:\Users\Malgosia\Downloads\eksport_dokumentow_02-10-2024_17-08.zip 2024-10-02 17:07 - 2024-10-02 17:07 - 000000883 _____ C:\Users\Malgosia\Downloads\Zaswiadczenia lekarskie ubezpieczonych platnika.csv 2024-10-02 14:47 - 2024-10-02 14:47 - 003252418 _____ C:\Users\Malgosia\Downloads\FW_Dane_do_wynagrodzen_wrzesien_2024.zip 2024-10-02 13:50 - 2024-10-02 13:50 - 000247548 _____ C:\Users\Malgosia\Downloads\mobilizacja natanek wrzesien 24.pdf 2024-10-02 13:24 - 2024-10-02 13:24 - 000425380 _____ C:\Users\Malgosia\Downloads\Zgłoszenie (1).pdf 2024-10-02 13:23 - 2024-10-02 13:23 - 000425380 _____ C:\Users\Malgosia\Downloads\Zgłoszenie.pdf 2024-09-30 17:41 - 2024-09-30 17:41 - 000646751 _____ C:\Users\Malgosia\Downloads\20240930130949850.pdf 2024-09-30 17:38 - 2024-09-30 17:38 - 000058469 _____ C:\Users\Malgosia\Downloads\20240930150855021.pdf 2024-09-30 17:30 - 2024-09-30 17:30 - 000022392 _____ C:\Users\Malgosia\Downloads\20240930_Warta_Potracenia-2024-10.xlsx 2024-09-30 10:32 - 2024-09-30 10:32 - 000398827 _____ C:\Users\Malgosia\Downloads\Świadectwo pracy - 2023 - UP 1_2024 - Oberle Anna .pdf 2024-09-30 09:54 - 2024-09-30 09:54 - 000161278 _____ C:\Users\Malgosia\Downloads\Wniosek o urlop - 20-09-2024 - 11-10-2024 - Oberle Anna .pdf 2024-09-30 06:45 - 2024-09-30 06:45 - 000268560 _____ C:\Users\Malgosia\Downloads\Zaliczka miesięczna od wypłat PIT (6) - wrzesień 2024.pdf 2024-09-29 19:37 - 2024-09-30 20:38 - 000000000 ____D C:\Users\UrszulaM\AppData\Roaming\rsappui 2024-09-27 17:25 - 2024-09-27 17:25 - 001024094 _____ C:\Users\Malgosia\Downloads\PLACE_092024.zip 2024-09-27 16:09 - 2024-09-27 16:09 - 000003070 _____ C:\Users\Malgosia\Downloads\Zaświadczenie ZUS ZAS-12 -Borysiewicz Agnieszka (05-09-2024).xml 2024-09-26 18:15 - 2024-09-26 18:15 - 000331658 _____ C:\Users\Malgosia\Downloads\SPL Printer24092413400.pdf 2024-09-26 18:15 - 2024-09-26 18:15 - 000331658 _____ C:\Users\Malgosia\Downloads\SPL Printer24092413400 (2).pdf 2024-09-26 18:15 - 2024-09-26 18:15 - 000331658 _____ C:\Users\Malgosia\Downloads\SPL Printer24092413400 (1).pdf 2024-09-26 17:35 - 2024-09-26 17:35 - 000470973 _____ C:\Users\Malgosia\Downloads\oświadzcenie nagroda PIT 8ar.pdf 2024-09-26 13:56 - 2024-10-15 10:50 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\rsappui 2024-09-26 06:32 - 2024-09-26 06:32 - 000005248 _____ C:\Users\Malgosia\Downloads\Zaświadczenie ZUS Z-3 -Walski Janusz (10-09-2024).xml 2024-09-26 06:30 - 2024-09-26 06:30 - 000005248 _____ C:\Users\Malgosia\Documents\Zaświadczenie ZUS Z-3 -Walski Janusz (10-09-2024).xml 2024-09-26 06:00 - 2024-09-26 06:00 - 000003197 _____ C:\Users\Malgosia\Downloads\eksport_dokumentow_26-09-2024_06-00.zip 2024-09-26 05:16 - 2024-09-26 05:16 - 000331975 _____ C:\Users\Malgosia\Downloads\Lista obecności - WRZESIEŃ 2024.pdf 2024-09-26 04:43 - 2024-09-26 04:43 - 004135319 _____ C:\Users\Malgosia\Downloads\scan09252024.pdf 2024-09-25 20:24 - 2024-09-25 20:24 - 000457614 _____ C:\Users\AnnaW\Aneks - zmiana stawki - UP 13_2022 - Shtyl Vasyl.pdf 2024-09-25 07:17 - 2024-09-25 07:17 - 009509753 _____ C:\Users\Malgosia\Downloads\scan09242024_20240924140546.pdf 2024-09-23 16:37 - 2024-09-23 16:37 - 001387783 _____ C:\Users\Malgosia\Downloads\20240920074621688 (1).pdf 2024-09-23 16:36 - 2024-09-23 16:36 - 001387783 _____ C:\Users\Malgosia\Downloads\20240920074621688.pdf 2024-09-23 16:26 - 2024-09-23 16:26 - 000057552 _____ C:\Users\Malgosia\Downloads\20240923134434936.pdf 2024-09-23 16:24 - 2024-09-23 16:24 - 000316869 _____ C:\Users\Malgosia\Downloads\uchylenie zajęcia.pdf 2024-09-21 14:17 - 2024-09-21 14:17 - 000003493 _____ C:\Users\Malgosia\Downloads\eksport_dokumentow_21-09-2024_14-17.zip 2024-09-21 14:16 - 2024-09-21 14:16 - 000028407 _____ C:\Users\Malgosia\Downloads\raport.ZIP 2024-09-21 14:12 - 2024-09-21 14:12 - 000006704 _____ C:\Users\Malgosia\Downloads\eksport_dokumentow_21-09-2024_14-12.zip 2024-09-21 13:51 - 2024-09-21 13:51 - 000016384 _____ C:\Users\Malgosia\Downloads\Grajzer_Dorota.xls 2024-09-19 21:04 - 2024-09-19 21:04 - 068277122 _____ C:\Users\Malgosia\Downloads\Dokumenty Mefisto.zip 2024-09-19 09:47 - 2024-09-19 09:47 - 001563325 _____ C:\Users\Malgosia\Downloads\komornik Wójcik.pdf 2024-09-17 12:30 - 2024-09-17 12:30 - 000009914 _____ C:\Users\Malgosia\Downloads\eksport_dokumentow_17-09-2024_12-30.zip 2024-09-17 08:32 - 2024-10-08 09:34 - 000000000 ____D C:\Users\Kingaj\AppData\Roaming\rsappui 2024-09-16 22:35 - 2024-09-16 22:35 - 007012122 _____ C:\Users\Malgosia\Downloads\24.09.09-11 - Liezen - Austria.zip 2024-09-16 22:08 - 2024-09-16 22:08 - 000645041 _____ C:\Users\Malgosia\Downloads\20240916110509.pdf ==================== Jeden miesiąc (zmodyfikowane) ================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2024-10-16 08:48 - 2024-05-20 10:36 - 000000000 ____D C:\Users\Sandra 2024-10-16 08:48 - 2023-10-27 10:47 - 000000000 ____D C:\Users\Kingaj 2024-10-16 08:47 - 2024-06-28 08:58 - 000000000 __SHD C:\Users\Administrator\IntelGraphicsProfiles 2024-10-16 08:38 - 2023-10-26 13:33 - 001767984 _____ C:\Windows\system32\PerfStringBackup.INI 2024-10-16 08:38 - 2019-12-07 17:08 - 000784340 _____ C:\Windows\system32\perfh015.dat 2024-10-16 08:38 - 2019-12-07 17:08 - 000152236 _____ C:\Windows\system32\perfc015.dat 2024-10-16 08:38 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF 2024-10-16 08:34 - 2023-10-26 13:32 - 000000000 ____D C:\Intel 2024-10-16 08:34 - 2023-10-26 13:28 - 000000000 ____D C:\Users\Administrator 2024-10-16 08:34 - 2023-10-26 13:26 - 000008192 ___SH C:\DumpStack.log.tmp 2024-10-16 08:34 - 2023-10-26 13:26 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2024-10-16 08:34 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2024-10-15 15:48 - 2023-09-29 10:22 - 000000000 ____D C:\ProgramData\ssh 2024-10-15 15:48 - 2019-12-07 11:03 - 001572864 _____ C:\Windows\system32\config\BBI 2024-10-15 15:47 - 2023-10-26 13:30 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Microsoft\MMC 2024-10-15 15:46 - 2024-05-07 14:18 - 000000000 ____D C:\Program Files (x86)\Hard Disk Sentinel 2024-10-15 15:45 - 2023-10-26 14:23 - 000000000 ____D C:\Users\Administrator\AppData\Local\D3DSCache 2024-10-15 12:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness 2024-10-15 12:15 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel 2024-10-15 12:11 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\registration 2024-10-15 11:51 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp 2024-10-15 11:49 - 2023-10-26 13:29 - 000000000 ____D C:\Users\Administrator\AppData\Local\Packages 2024-10-15 11:40 - 2023-09-29 10:22 - 000000000 ____D C:\Windows\SystemTemp 2024-10-15 10:51 - 2024-05-20 10:36 - 000000000 ____D C:\Users\Sandra\AppData\Roaming\ReasonLabs 2024-10-15 10:51 - 2024-03-21 11:46 - 000000000 ____D C:\Users\IzabelaD\AppData\Roaming\ReasonLabs 2024-10-15 10:51 - 2024-03-18 21:48 - 000000000 ____D C:\Users\UrszulaM\AppData\Roaming\ReasonLabs 2024-10-15 10:51 - 2024-03-18 18:38 - 000000000 ____D C:\Users\UlaB\AppData\Roaming\ReasonLabs 2024-10-15 10:51 - 2024-03-16 12:12 - 000000000 ____D C:\Users\Malgosia\AppData\Roaming\ReasonLabs 2024-10-15 10:51 - 2024-03-14 13:56 - 000000000 ____D C:\Users\AnnaM\AppData\Roaming\ReasonLabs 2024-10-15 10:51 - 2024-03-14 12:36 - 000000000 ____D C:\Users\JanG\AppData\Roaming\ReasonLabs 2024-10-15 10:51 - 2024-03-13 17:34 - 000000000 ____D C:\Users\AnnaW\AppData\Roaming\ReasonLabs 2024-10-15 10:51 - 2024-03-13 17:02 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\ReasonLabs 2024-10-15 10:51 - 2024-03-13 16:56 - 000000000 ____D C:\Users\Kingaj\AppData\Roaming\ReasonLabs 2024-10-15 10:38 - 2023-11-06 01:37 - 1149120617 _____ C:\Windows\MEMORY.DMP 2024-10-15 10:38 - 2023-11-06 01:37 - 000000000 ____D C:\Windows\Minidump 2024-10-12 11:15 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\LiveKernelReports 2024-10-12 11:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ServiceState 2024-10-12 10:59 - 2024-07-24 08:07 - 000002443 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2024-10-12 10:59 - 2023-10-26 13:30 - 000003576 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-45412628-241958549-1367884618-500 2024-10-12 10:59 - 2023-10-26 13:29 - 000003386 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-45412628-241958549-1367884618-500 2024-10-12 10:16 - 2023-10-26 13:26 - 000002448 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2024-10-12 10:16 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps 2024-10-11 13:43 - 2024-09-12 14:54 - 000000000 ____D C:\Users\Malgosia\AppData\Roaming\rsappui 2024-10-10 23:18 - 2023-10-26 13:49 - 000002253 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2024-10-10 23:18 - 2023-10-26 13:49 - 000002212 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2024-10-10 18:47 - 2023-11-07 01:48 - 000000000 ____D C:\Users\Malgosia\AppData\Roaming\Microsoft\Szablony 2024-10-10 18:39 - 2023-10-27 09:55 - 000000000 ____D C:\Users\Malgosia\Desktop\ZUS 2024-10-10 18:18 - 2023-11-07 01:48 - 000000000 ____D C:\Users\Malgosia\AppData\Roaming\Microsoft\Word 2024-10-10 18:10 - 2023-10-26 13:26 - 000003566 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2024-10-10 18:10 - 2023-10-26 13:26 - 000003298 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2024-10-10 17:29 - 2024-09-12 16:49 - 000000000 ____D C:\Users\AnnaW\AppData\Roaming\rsappui 2024-10-10 17:29 - 2023-10-26 15:44 - 000000000 ____D C:\Users\AnnaW 2024-10-10 17:29 - 2023-10-26 13:38 - 000000000 ____D C:\Users\AnnaM 2024-10-10 16:21 - 2023-10-26 13:57 - 000000000 ____D C:\Users\AnnaM\AppData\Roaming\com.adobe.dunamis 2024-10-09 20:47 - 2023-10-27 09:15 - 000000000 ____D C:\Users\Malgosia\AppData\Local\Packages 2024-10-09 20:47 - 2023-10-26 13:29 - 000000000 ____D C:\ProgramData\Packages 2024-10-09 20:00 - 2023-11-02 19:15 - 000000000 ____D C:\Users\AnnaW\AppData\Roaming\Microsoft\Excel 2024-10-09 19:41 - 2023-10-26 15:44 - 000000000 ____D C:\Users\AnnaW\AppData\Local\Packages 2024-10-09 19:18 - 2023-11-02 21:20 - 000000000 ____D C:\Users\AnnaW\AppData\Roaming\Microsoft\Szablony 2024-10-09 18:09 - 2023-11-02 21:20 - 000000000 ____D C:\Users\AnnaW\AppData\Roaming\Microsoft\Word 2024-10-09 17:48 - 2023-10-26 13:56 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader.lnk 2024-10-09 00:26 - 2023-10-26 13:26 - 000371200 _____ C:\Windows\system32\FNTCACHE.DAT 2024-10-09 00:25 - 2019-12-07 17:09 - 000000000 ____D C:\Windows\system32\OpenSSH 2024-10-09 00:25 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources 2024-10-09 00:25 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\appraiser 2024-10-09 00:25 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr 2024-10-08 23:42 - 2023-10-26 13:29 - 003016192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll 2024-10-08 23:22 - 2023-10-26 14:37 - 000000000 ____D C:\Windows\system32\MRT 2024-10-08 23:18 - 2023-10-26 14:37 - 201324920 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2024-10-08 17:59 - 2024-09-12 20:34 - 000000000 ____D C:\Users\UlaB\AppData\Roaming\rsappui 2024-10-08 17:34 - 2023-10-26 15:31 - 000000000 ____D C:\Users\UlaB\AppData\Local\Packages 2024-10-08 17:33 - 2023-10-30 12:52 - 000000000 ____D C:\Users\UlaB\AppData\Roaming\Microsoft\Word 2024-10-08 11:39 - 2023-10-26 14:06 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2024-10-08 11:39 - 2023-10-26 14:06 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla 2024-10-08 11:39 - 2023-10-26 14:06 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2024-10-08 09:38 - 2023-10-27 10:47 - 000000000 ____D C:\Users\Kingaj\AppData\Local\Packages 2024-10-08 09:36 - 2024-01-30 16:18 - 000000000 ____D C:\Users\Kingaj\AppData\Local\D3DSCache 2024-10-07 20:28 - 2023-11-02 22:26 - 000000000 ____D C:\Users\UlaB\AppData\Roaming\Microsoft\Excel 2024-10-06 17:51 - 2023-10-27 16:06 - 000000000 ____D C:\Users\Malgosia\AppData\Roaming\Microsoft\Excel 2024-10-06 11:41 - 2023-10-27 09:10 - 000000000 ____D C:\Users\AnnaW\AppData\LocalLow\Adobe 2024-10-03 23:55 - 2023-10-27 09:15 - 000000000 ____D C:\Users\Malgosia 2024-10-03 21:13 - 2023-10-26 15:31 - 000000000 ____D C:\Users\UlaB 2024-10-02 13:45 - 2023-10-27 11:21 - 000000000 ____D C:\Users\AnnaW\AppData\Local\D3DSCache 2024-09-30 20:38 - 2023-10-27 09:17 - 000000000 ____D C:\Users\UrszulaM 2024-09-30 20:29 - 2023-10-30 21:46 - 000000000 ____D C:\Users\UrszulaM\AppData\Roaming\Microsoft\Excel 2024-09-30 20:29 - 2023-10-27 09:17 - 000000000 ____D C:\Users\UrszulaM\AppData\Local\Packages 2024-09-29 19:51 - 2023-10-30 20:49 - 000000000 ____D C:\Users\UrszulaM\Desktop\ZUS 2024-09-29 19:39 - 2023-10-30 20:35 - 000000000 ____D C:\Users\UrszulaM\AppData\Local\D3DSCache 2024-09-26 13:55 - 2023-10-26 15:27 - 000000000 ____D C:\Users\Administrator\AppData\Local\InsERT 2024-09-26 08:58 - 2023-10-30 12:48 - 000000000 ____D C:\Users\UlaB\AppData\Local\D3DSCache 2024-09-25 03:21 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata 2024-09-25 03:21 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism 2024-09-25 03:21 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinMetadata 2024-09-25 03:21 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe 2024-09-25 03:21 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism 2024-09-25 03:21 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellExperiences 2024-09-25 03:21 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\PolicyDefinitions 2024-09-23 17:53 - 2023-10-27 09:10 - 000000000 ____D C:\Users\AnnaW\AppData\Roaming\com.adobe.dunamis 2024-09-23 12:52 - 2024-01-24 15:19 - 000000000 ____D C:\Users\Kingaj\AppData\Roaming\Microsoft\Word 2024-09-23 12:51 - 2024-02-27 13:16 - 000000000 ____D C:\Users\Kingaj\AppData\Roaming\Microsoft\Excel 2024-09-21 12:34 - 2024-09-13 10:00 - 000000000 ____D C:\Users\Sandra\AppData\Roaming\rsappui 2024-09-19 18:26 - 2023-11-02 19:15 - 000000000 ____D C:\Users\AnnaW\AppData\Roaming\Microsoft\Office 2024-09-17 20:13 - 2023-10-26 15:43 - 000000000 ____D C:\Users\UlaB\AppData\Roaming\com.adobe.dunamis 2024-09-17 08:44 - 2023-11-08 19:06 - 000000000 ____D C:\Users\Kingaj\AppData\Roaming\com.adobe.dunamis 2024-09-16 21:42 - 2023-10-27 09:28 - 000000000 ____D C:\Users\Malgosia\AppData\Roaming\com.adobe.dunamis ==================== Pliki w katalogu głównym wybranych folderów ======== 2023-10-27 15:59 - 2024-01-10 15:36 - 000007636 _____ () C:\Users\Administrator\AppData\Local\Resmon.ResmonCfg ==================== SigCheck ============================ (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) ==================== Koniec FRST.txt ========================