Farbar Recovery Scan Tool (x64) Version: 12-02-2015 Ran by SYSTEM at 2015-02-14 10:29:43 Running from F:\Nowy folder Boot Mode: Recovery ================== Search Files: "csrss.exe;winlogon.exe" ============= C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_ce434d9704d2c730\winlogon.exe [2014-10-14 09:41][2014-07-15 19:23] 0455680 ____A (Microsoft Corporation) 98AA0BFEE089C7E5DADB94190D93456C C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_ce748d1d04acf24f\winlogon.exe [2014-05-14 12:06][2014-03-04 03:08] 0455680 ____A (Microsoft Corporation) 6CE2AE073BD21C542FC2C707CAE944CC C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_cdc47ed1ebad0e4e\winlogon.exe [2014-10-14 09:41][2014-07-16 18:07] 0455168 ____A (Microsoft Corporation) 8CEBD9D0A0A879CDE9F36F4383B7CAEA C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_cdf8bf35eb848572\winlogon.exe [2014-05-14 12:06][2014-03-04 01:43] 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe [2010-11-20 19:24][2010-11-20 19:24] 0390656 ____A (Microsoft Corporation) 1151B1BAA6F350B1DB6598E0FEA7C457 C:\Windows\winsxs\amd64_microsoft-windows-csrss_31bf3856ad364e35_6.1.7600.16385_none_b4d8d57efdc6b4f3\csrss.exe [2009-07-13 15:19][2009-07-13 17:39] 0007680 ____A (Microsoft Corporation) 60C2862B4BF0FD9F582EF344C2B1EC72 C:\Windows\System32\csrss.exe [2015-02-12 23:05][2009-07-14 02:39] 0007680 ____A (Microsoft Corporation) 60C2862B4BF0FD9F582EF344C2B1EC72 C:\Windows\System32\winlogon.exe [2015-02-12 23:05][2015-02-12 22:51] 0455168 ____A (Microsoft Corporation) 8CEBD9D0A0A879CDE9F36F4383B7CAEA X:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe [2009-07-13 15:52][2009-07-13 17:39] 0389120 ____A (Microsoft Corporation) 132328DF455B0028F13BF0ABEE51A63A X:\Windows\winsxs\amd64_microsoft-windows-csrss_31bf3856ad364e35_6.1.7600.16385_none_b4d8d57efdc6b4f3\csrss.exe [2009-07-13 15:19][2009-07-13 17:39] 0007680 ____A (Microsoft Corporation) 60C2862B4BF0FD9F582EF344C2B1EC72 X:\Windows\System32\csrss.exe [2009-07-13 15:19][2009-07-13 17:39] 0007680 ____A (Microsoft Corporation) 60C2862B4BF0FD9F582EF344C2B1EC72 X:\Windows\System32\winlogon.exe [2009-07-13 15:52][2009-07-13 17:39] 0389120 ____A (Microsoft Corporation) 132328DF455B0028F13BF0ABEE51A63A ====== End Of Search ======