Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 02-07-2016 Uruchomiony przez Galon (administrator) KADRY-PC (05-07-2016 10:40:57) Uruchomiony z C:\FRST Załadowane profile: Galon (Dostępne profile: Galon & Administrator) Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) Język: Polski Internet Explorer Wersja 8 (Domyślna przeglądarka: IE) Tryb startu: Safe Mode (minimal) Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [HDAudDeck] => C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [41118320 2011-12-07] (VIA Technologies, Inc.) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation) HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2016-02-04] (Hewlett-Packard) HKLM\...\Run: [StatusAlerts] => C:\Program Files\HP\StatusAlerts\bin\HPStatusAlerts.exe [330176 2016-02-04] (Hewlett-Packard Company) HKLM\...\Run: [ControlCenter4] => C:\Program Files\ControlCenter4\BrCcBoot.exe [143360 2012-09-06] (Brother Industries, Ltd.) HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1491128 2016-06-28] (COMODO) HKLM Group Policy restriction on software: *.7z*.cmd <====== UWAGA HKLM Group Policy restriction on software: *.wav*.exe <====== UWAGA HKLM Group Policy restriction on software: %programfiles%\*\svchost.exe <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Start Menu\Programs\Startup\*.exe <====== UWAGA HKLM Group Policy restriction on software: *.pdf*.bat <====== UWAGA HKLM Group Policy restriction on software: *.rtf*.com <====== UWAGA HKLM Group Policy restriction on software: *.pub*.com <====== UWAGA HKLM Group Policy restriction on software: *.ppt*.com <====== UWAGA HKLM Group Policy restriction on software: *.rtf*.js <====== UWAGA HKLM Group Policy restriction on software: *.jpg*.js <====== UWAGA HKLM Group Policy restriction on software: *.gif*.pif <====== UWAGA HKLM Group Policy restriction on software: *.wmv*.com <====== UWAGA HKLM Group Policy restriction on software: *.avi*.exe <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Start Menu\Programs\Startup\*.pif <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Start Menu\Programs\Startup\*.js <====== UWAGA HKLM Group Policy restriction on software: *.rtf*.jse <====== UWAGA HKLM Group Policy restriction on software: %appdata%\*\*.js <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Application Data\*\*.scr <====== UWAGA HKLM Group Policy restriction on software: *.pub*.jse <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Local Settings\Application Data\*.bat <====== UWAGA HKLM Group Policy restriction on software: *.mp3*.com <====== UWAGA HKLM Group Policy restriction on software: *.png*.com <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\*.bat <====== UWAGA HKLM Group Policy restriction on software: *.pptx*.cmd <====== UWAGA HKLM Group Policy restriction on software: *.pdf*.scr <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Local Settings\Application Data\*\*.exe <====== UWAGA HKLM Group Policy restriction on software: *.rar*.scr <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Application Data\*.scr <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\*.cmd <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\*.com <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Local Settings\Application Data\*\*.exe <====== UWAGA HKLM Group Policy restriction on software: *.mp3*.pif <====== UWAGA HKLM Group Policy restriction on software: *.wma*.pif <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Local Settings\Application Data\*.js <====== UWAGA HKLM Group Policy restriction on software: *.mp3*.bat <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Local Settings\Application Data\*\*.com <====== UWAGA HKLM Group Policy restriction on software: *.avi*.pif <====== UWAGA HKLM Group Policy restriction on software: *.7z*.pif <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Local Settings\Application Data\*.cmd <====== UWAGA HKLM Group Policy restriction on software: *.doc*.com <====== UWAGA HKLM Group Policy restriction on software: *.avi*.scr <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Start Menu\Programs\Startup\*.com <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Start Menu\Programs\Startup\*.scr <====== UWAGA HKLM Group Policy restriction on software: *.pub*.cmd <====== UWAGA HKLM Group Policy restriction on software: *.rtf*.pif <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Application Data\*.bat <====== UWAGA HKLM Group Policy restriction on software: %appdata%\*\*.exe <====== UWAGA HKLM Group Policy restriction on software: *.pdf*.pif <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Start Menu\Programs\Startup\*.exe <====== UWAGA HKLM Group Policy restriction on software: *.bmp*.jse <====== UWAGA HKLM Group Policy restriction on software: *.ppt*.jse <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Local Settings\Application Data\*\*.com <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Local Settings\Application Data\*.js <====== UWAGA HKLM Group Policy restriction on software: *.7z*.com <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\*.scr <====== UWAGA HKLM Group Policy restriction on software: *.wmv*.pif <====== UWAGA HKLM Group Policy restriction on software: *.divx*.pif <====== UWAGA HKLM Group Policy restriction on software: *.gif*.com <====== UWAGA HKLM Group Policy restriction on software: *.jpg*.com <====== UWAGA HKLM Group Policy restriction on software: *.png*.scr <====== UWAGA HKLM Group Policy restriction on software: *.png*.jse <====== UWAGA HKLM Group Policy restriction on software: *.zip*.jse <====== UWAGA HKLM Group Policy restriction on software: *.pdf*.cmd <====== UWAGA HKLM Group Policy restriction on software: *.mp3*.exe <====== UWAGA HKLM Group Policy restriction on software: *.jpeg*.pif <====== UWAGA HKLM Group Policy restriction on software: *.pptx*.js <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\*.cmd <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Application Data\*\*.exe <====== UWAGA HKLM Group Policy restriction on software: *.divx*.js <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Application Data\*.exe <====== UWAGA HKLM Group Policy restriction on software: *.txt*.exe <====== UWAGA HKLM Group Policy restriction on software: *.rar*.com <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Local Settings\Application Data\*.scr <====== UWAGA HKLM Group Policy restriction on software: *.xlsx*.js <====== UWAGA HKLM Group Policy restriction on software: *.xls*.exe <====== UWAGA HKLM Group Policy restriction on software: *.doc*.js <====== UWAGA HKLM Group Policy restriction on software: *.jpg*.bat <====== UWAGA HKLM Group Policy restriction on software: %appdata%\*\*.jse <====== UWAGA HKLM Group Policy restriction on software: *.xls*.bat <====== UWAGA HKLM Group Policy restriction on software: *.rtf*.exe <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Application Data\*\*.scr <====== UWAGA HKLM Group Policy restriction on software: *.xlsx*.scr <====== UWAGA HKLM Group Policy restriction on software: *.avi*.cmd <====== UWAGA HKLM Group Policy restriction on software: *.zip*.cmd <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Local Settings\Application Data\*.com <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Application Data\*\*.js <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Start Menu\Programs\Startup\*.scr <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Local Settings\Application Data\*\*.cmd <====== UWAGA HKLM Group Policy restriction on software: lsassvrtdbks.exe <====== UWAGA HKLM Group Policy restriction on software: C:\Documents and Settings\*.jse <====== UWAGA HKLM Group Policy restriction on software: *.docx*.com <====== UWAGA HKLM Group Policy restriction on software: *.wmv*.jse <====== UWAGA HKLM Group Policy restriction on software: *.avi*.bat <====== UWAGA HKLM Group Policy restriction on software: cipher.exe <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\*.pif <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Start Menu\Programs\Startup\*.bat <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Application Data\*\*.js <====== UWAGA HKLM Group Policy restriction on software: *.7z*.bat <====== UWAGA HKLM Group Policy restriction on software: %appdata%\*.scr <====== UWAGA HKLM Group Policy restriction on software: *.mp4*.bat <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Local Settings\Application Data\*\*.js <====== UWAGA HKLM Group Policy restriction on software: *.xls*.pif <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Local Settings\Application Data\*.exe <====== UWAGA HKLM Group Policy restriction on software: *.bmp*.exe <====== UWAGA HKLM Group Policy restriction on software: *.wmv*.cmd <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Local Settings\Application Data\*.pif <====== UWAGA HKLM Group Policy restriction on software: *.bmp*.com <====== UWAGA HKLM Group Policy restriction on software: *.avi*.js <====== UWAGA HKLM Group Policy restriction on software: *.rtf*.bat <====== UWAGA HKLM Group Policy restriction on software: *.wmv*.scr <====== UWAGA HKLM Group Policy restriction on software: %appdata%\*.com <====== UWAGA HKLM Group Policy restriction on software: *.zip*.js <====== UWAGA HKLM Group Policy restriction on software: *.wav*.jse <====== UWAGA HKLM Group Policy restriction on software: *.pub*.scr <====== UWAGA HKLM Group Policy restriction on software: %appdata%\*.js <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Application Data\*\*.bat <====== UWAGA HKLM Group Policy restriction on software: *.xlsx*.cmd <====== UWAGA HKLM Group Policy restriction on software: *.doc*.scr <====== UWAGA HKLM Group Policy restriction on software: *.xlsx*.exe <====== UWAGA HKLM Group Policy restriction on software: *.wav*.pif <====== UWAGA HKLM Group Policy restriction on software: %appdata%\*\*.scr <====== UWAGA HKLM Group Policy restriction on software: *.xlsx*.bat <====== UWAGA HKLM Group Policy restriction on software: *.ppt*.exe <====== UWAGA HKLM Group Policy restriction on software: *.docx*.pif <====== UWAGA HKLM Group Policy restriction on software: *.wma*.jse <====== UWAGA HKLM Group Policy restriction on software: *.rar*.js <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Start Menu\Programs\Startup\*.jse <====== UWAGA HKLM Group Policy restriction on software: %appdata%\*\*.cmd <====== UWAGA HKLM Group Policy restriction on software: *.txt*.js <====== UWAGA HKLM Group Policy restriction on software: *.pptx*.exe <====== UWAGA HKLM Group Policy restriction on software: *.pptx*.scr <====== UWAGA HKLM Group Policy restriction on software: *.wmv*.bat <====== UWAGA HKLM Group Policy restriction on software: *.bmp*.cmd <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Local Settings\Application Data\*.com <====== UWAGA HKLM Group Policy restriction on software: *.mp4*.pif <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Local Settings\Application Data\*\*.cmd <====== UWAGA HKLM Group Policy restriction on software: C:\Documents and Settings\*.js <====== UWAGA HKLM Group Policy restriction on software: *.wma*.scr <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\*.bat <====== UWAGA HKLM Group Policy restriction on software: *.ppt*.scr <====== UWAGA HKLM Group Policy restriction on software: *.txt*.jse <====== UWAGA HKLM Group Policy restriction on software: *.mp4*.js <====== UWAGA HKLM Group Policy restriction on software: *.doc*.bat <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Application Data\Microsoft\Windows\IEUpdate\*.exe <====== UWAGA HKLM Group Policy restriction on software: *.xlsx*.com <====== UWAGA HKLM Group Policy restriction on software: *.7z*.scr <====== UWAGA HKLM Group Policy restriction on software: *.zip*.pif <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Application Data\*\*.bat <====== UWAGA HKLM Group Policy restriction on software: %appdata%\*.pif <====== UWAGA HKLM Group Policy restriction on software: *.mp4*.com <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Application Data\*.exe <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Application Data\*.js <====== UWAGA HKLM Group Policy restriction on software: ** <====== UWAGA HKLM Group Policy restriction on software: *.wma*.bat <====== UWAGA HKLM Group Policy restriction on software: *.divx*.jse <====== UWAGA HKLM Group Policy restriction on software: *.bmp*.js <====== UWAGA HKLM Group Policy restriction on software: *.docx*.scr <====== UWAGA HKLM Group Policy restriction on software: *.divx*.exe <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Application Data\*.cmd <====== UWAGA HKLM Group Policy restriction on software: *.wma*.js <====== UWAGA HKLM Group Policy restriction on software: *.wma*.com <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Local Settings\Application Data\*\*.jse <====== UWAGA HKLM Group Policy restriction on software: *.xls*.cmd <====== UWAGA HKLM Group Policy restriction on software: *.jpg*.scr <====== UWAGA HKLM Group Policy restriction on software: *.doc*.pif <====== UWAGA HKLM Group Policy restriction on software: *.txt*.com <====== UWAGA HKLM Group Policy restriction on software: %appdata%\*\*.com <====== UWAGA HKLM Group Policy restriction on software: *.png*.cmd <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Local Settings\Application Data\*\*.js <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Application Data\*\*.com <====== UWAGA HKLM Group Policy restriction on software: *.rar*.bat <====== UWAGA HKLM Group Policy restriction on software: *.wav*.com <====== UWAGA HKLM Group Policy restriction on software: *.jpeg*.cmd <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Local Settings\Application Data\*\*.pif <====== UWAGA HKLM Group Policy restriction on software: *.wmv*.exe <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Local Settings\Application Data\*\*.jse <====== UWAGA HKLM Group Policy restriction on software: *.rar*.jse <====== UWAGA HKLM Group Policy restriction on software: *.docx*.bat <====== UWAGA HKLM Group Policy restriction on software: *.pdf*.com <====== UWAGA HKLM Group Policy restriction on software: *.txt*.pif <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Start Menu\Programs\Startup\*.com <====== UWAGA HKLM Group Policy restriction on software: *.pub*.exe <====== UWAGA HKLM Group Policy restriction on software: *.wma*.cmd <====== UWAGA HKLM Group Policy restriction on software: C:\Documents and Settings\*.cmd <====== UWAGA HKLM Group Policy restriction on software: *.mp4*.cmd <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Local Settings\Application Data\*.cmd <====== UWAGA HKLM Group Policy restriction on software: *.rtf*.cmd <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Application Data\*.jse <====== UWAGA HKLM Group Policy restriction on software: *.doc*.exe <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Start Menu\Programs\Startup\*.jse <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\*.scr <====== UWAGA HKLM Group Policy restriction on software: %appdata%\*.cmd <====== UWAGA HKLM Group Policy restriction on software: *.xls*.jse <====== UWAGA HKLM Group Policy restriction on software: *.jpeg*.jse <====== UWAGA HKLM Group Policy restriction on software: *.ppt*.pif <====== UWAGA HKLM Group Policy restriction on software: *.pptx*.jse <====== UWAGA HKLM Group Policy restriction on software: *.pptx*.bat <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Local Settings\Application Data\*.exe <====== UWAGA HKLM Group Policy restriction on software: *.mp4*.jse <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Application Data\*\*.pif <====== UWAGA HKLM Group Policy restriction on software: *.rar*.pif <====== UWAGA HKLM Group Policy restriction on software: %appdata%\*.exe <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Application Data\*\*.jse <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Application Data\*.pif <====== UWAGA HKLM Group Policy restriction on software: *.xls*.scr <====== UWAGA HKLM Group Policy restriction on software: *.zip*.exe <====== UWAGA HKLM Group Policy restriction on software: *.rtf*.scr <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\*.js <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Application Data\*.scr <====== UWAGA HKLM Group Policy restriction on software: *.jpeg*.exe <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Local Settings\Application Data\*\*.bat <====== UWAGA HKLM Group Policy restriction on software: *.7z*.jse <====== UWAGA HKLM Group Policy restriction on software: scsvserv.exe <====== UWAGA HKLM Group Policy restriction on software: *.jpeg*.js <====== UWAGA HKLM Group Policy restriction on software: *.7z*.js <====== UWAGA HKLM Group Policy restriction on software: *.jpeg*.scr <====== UWAGA HKLM Group Policy restriction on software: *.xls*.js <====== UWAGA HKLM Group Policy restriction on software: *.mp3*.js <====== UWAGA HKLM Group Policy restriction on software: %systemdrive%\*\svchost.exe <====== UWAGA HKLM Group Policy restriction on software: *.bmp*.pif <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\*.jse <====== UWAGA HKLM Group Policy restriction on software: *.pptx*.com <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Application Data\*\*.jse <====== UWAGA HKLM Group Policy restriction on software: *.bmp*.scr <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Application Data\*.pif <====== UWAGA HKLM Group Policy restriction on software: *.xlsx*.pif <====== UWAGA HKLM Group Policy restriction on software: *.jpg*.cmd <====== UWAGA HKLM Group Policy restriction on software: *.png*.exe <====== UWAGA HKLM Group Policy restriction on software: *.pdf*.jse <====== UWAGA HKLM Group Policy restriction on software: *.avi*.com <====== UWAGA HKLM Group Policy restriction on software: *.rar*.cmd <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Local Settings\Application Data\*\*.scr <====== UWAGA HKLM Group Policy restriction on software: %appdata%\*.jse <====== UWAGA HKLM Group Policy restriction on software: *.bmp*.bat <====== UWAGA HKLM Group Policy restriction on software: *.mp3*.cmd <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Application Data\*.com <====== UWAGA HKLM Group Policy restriction on software: *.divx*.bat <====== UWAGA HKLM Group Policy restriction on software: *.docx*.exe <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Local Settings\Application Data\*.scr <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Application Data\*.cmd <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Local Settings\Application Data\*\*.pif <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Application Data\*.js <====== UWAGA HKLM Group Policy restriction on software: *.divx*.scr <====== UWAGA HKLM Group Policy restriction on software: *.ppt*.js <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\*.pif <====== UWAGA HKLM Group Policy restriction on software: *.gif*.exe <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Start Menu\Programs\Startup\*.cmd <====== UWAGA HKLM Group Policy restriction on software: *.jpg*.pif <====== UWAGA HKLM Group Policy restriction on software: *.txt*.bat <====== UWAGA HKLM Group Policy restriction on software: *.mp4*.scr <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Local Settings\Application Data\*.jse <====== UWAGA HKLM Group Policy restriction on software: *.wmv*.js <====== UWAGA HKLM Group Policy restriction on software: *.xls*.com <====== UWAGA HKLM Group Policy restriction on software: *.png*.js <====== UWAGA HKLM Group Policy restriction on software: *.ppt*.bat <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Application Data\*.jse <====== UWAGA HKLM Group Policy restriction on software: %appdata%\*.bat <====== UWAGA HKLM Group Policy restriction on software: C:\Documents and Settings\*.exe <====== UWAGA HKLM Group Policy restriction on software: *.7z*.exe <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Start Menu\Programs\Startup\*.bat <====== UWAGA HKLM Group Policy restriction on software: *.ppt*.cmd <====== UWAGA HKLM Group Policy restriction on software: *.pub*.js <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Application Data\*\*.com <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Local Settings\Application Data\*.bat <====== UWAGA HKLM Group Policy restriction on software: *.doc*.jse <====== UWAGA HKLM Group Policy restriction on software: *.gif*.bat <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\*.jse <====== UWAGA HKLM Group Policy restriction on software: *.divx*.cmd <====== UWAGA HKLM Group Policy restriction on software: C:\Documents and Settings\*.bat <====== UWAGA HKLM Group Policy restriction on software: *.gif*.jse <====== UWAGA HKLM Group Policy restriction on software: *.mp3*.jse <====== UWAGA HKLM Group Policy restriction on software: *.wav*.scr <====== UWAGA HKLM Group Policy restriction on software: *.docx*.js <====== UWAGA HKLM Group Policy restriction on software: *.jpg*.exe <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Start Menu\Programs\Startup\*.pif <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\*.exe <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Application Data\*.bat <====== UWAGA HKLM Group Policy restriction on software: *.gif*.cmd <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\*.exe <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Application Data\*\*.cmd <====== UWAGA HKLM Group Policy restriction on software: *.pdf*.exe <====== UWAGA HKLM Group Policy restriction on software: *.zip*.scr <====== UWAGA HKLM Group Policy restriction on software: *.gif*.js <====== UWAGA HKLM Group Policy restriction on software: *.jpeg*.com <====== UWAGA HKLM Group Policy restriction on software: *.png*.pif <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Local Settings\Application Data\*\*.bat <====== UWAGA HKLM Group Policy restriction on software: C:\Documents and Settings\*.scr <====== UWAGA HKLM Group Policy restriction on software: *.pptx*.pif <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Application Data\*.com <====== UWAGA HKLM Group Policy restriction on software: *.avi*.jse <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Start Menu\Programs\Startup\*.js <====== UWAGA HKLM Group Policy restriction on software: *.divx*.com <====== UWAGA HKLM Group Policy restriction on software: *.pub*.bat <====== UWAGA HKLM Group Policy restriction on software: *:\RECYCLER <====== UWAGA HKLM Group Policy restriction on software: *.png*.bat <====== UWAGA HKLM Group Policy restriction on software: *.txt*.scr <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Application Data\*\*.pif <====== UWAGA HKLM Group Policy restriction on software: *.mp3*.scr <====== UWAGA HKLM Group Policy restriction on software: *.wav*.bat <====== UWAGA HKLM Group Policy restriction on software: *.rar*.exe <====== UWAGA HKLM Group Policy restriction on software: *.gif*.scr <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Application Data\*\*.cmd <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Start Menu\Programs\Startup\*.cmd <====== UWAGA HKLM Group Policy restriction on software: %appdata%\*\*.bat <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\*.com <====== UWAGA HKLM Group Policy restriction on software: *.zip*.bat <====== UWAGA HKLM Group Policy restriction on software: *.doc*.cmd <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Local Settings\Application Data\*.pif <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Application Data\*\*.exe <====== UWAGA HKLM Group Policy restriction on software: %programdata%\*\svchost.exe <====== UWAGA HKLM Group Policy restriction on software: *.jpeg*.bat <====== UWAGA HKLM Group Policy restriction on software: *.txt*.cmd <====== UWAGA HKLM Group Policy restriction on software: C:\Documents and Settings\*.pif <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\*.js <====== UWAGA HKLM Group Policy restriction on software: *.wma*.exe <====== UWAGA HKLM Group Policy restriction on software: *.xlsx*.jse <====== UWAGA HKLM Group Policy restriction on software: *.pub*.pif <====== UWAGA HKLM Group Policy restriction on software: *.docx*.cmd <====== UWAGA HKLM Group Policy restriction on software: %appdata%\*\*.pif <====== UWAGA HKLM Group Policy restriction on software: *.pdf*.js <====== UWAGA HKLM Group Policy restriction on software: *.wav*.cmd <====== UWAGA HKLM Group Policy restriction on software: lsassw86s.exe <====== UWAGA HKLM Group Policy restriction on software: *.mp4*.exe <====== UWAGA HKLM Group Policy restriction on software: %allusersprofile%\Local Settings\Application Data\*.jse <====== UWAGA HKLM Group Policy restriction on software: syskey.exe <====== UWAGA HKLM Group Policy restriction on software: %userprofile%\Local Settings\Application Data\*\*.scr <====== UWAGA HKLM Group Policy restriction on software: *.docx*.jse <====== UWAGA HKLM Group Policy restriction on software: *.jpg*.jse <====== UWAGA HKLM Group Policy restriction on software: *.wav*.js <====== UWAGA HKLM Group Policy restriction on software: *.zip*.com <====== UWAGA HKLM Group Policy restriction on software: vssadmin.exe <====== UWAGA HKU\S-1-5-21-1229272821-1960408961-725345543-1003\...\Run: [COLS] => C:\Program Files\Comarch\Comarch ERP Menadżer Licencji\ComarchMLTray.exe [151560 2013-02-11] (Comarch) HKU\S-1-5-21-1229272821-1960408961-725345543-1003\...\Run: [iBard24] => C:\Program Files\iBard24\iBardClient.exe [238592 2013-07-15] (iComarch24 S.A.) HKU\S-1-5-21-1229272821-1960408961-725345543-1003\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation) ShellIconOverlayIdentifiers: [IB24SynchronizationPending] -> {08AD9864-E486-4cdb-8781-D507026CF5D6} => C:\Program Files\iBard24\\2.9.3.11337\IB24VirtualDrive.dll Brak pliku ShellIconOverlayIdentifiers: [IB24Synchronized] -> {08AD9864-E486-4cdb-8781-D507026CF5D7} => C:\Program Files\iBard24\\2.9.3.11337\IB24VirtualDrive.dll Brak pliku Startup: C:\Documents and Settings\Galon\Menu Start\Programy\Autostart\@F2596B8E6D73.lnk [1899-12-30] ShortcutTarget: @F2596B8E6D73.lnk -> C:\WINDOWS\system32\regsvr32.exe (Microsoft Corporation) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{E7A65DE2-AF9C-4250-AB4E-77BA9CE8B0D0}: [NameServer] 8.8.8.8,4.4.4.4 Tcpip\..\Interfaces\{E7A65DE2-AF9C-4250-AB4E-77BA9CE8B0D0}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKU\S-1-5-21-1229272821-1960408961-725345543-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.pl/ HKU\S-1-5-21-1229272821-1960408961-725345543-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-1229272821-1960408961-725345543-1003\Software\Microsoft\Internet Explorer\Main,Start Page Restore = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "hxxp://www.google.com" <======= UWAGA SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-12-17] (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-17] (Oracle Corporation) DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1366279826671 DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1366279932140 DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_45-windows-i586.cab DPF: {CAFEEFAC-0018-0000-0045-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_45-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_45-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL [2000-04-19] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Documents and Settings\Galon\Dane aplikacji\Mozilla\Firefox\Profiles\rqq4ggsg.default FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_22_0_0_192.dll [2016-06-17] () FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation) FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation) FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-17] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-17] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-12-18] (Adobe Systems Inc.) FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-04-19] [Brak podpisu cyfrowego] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S2 AktualizujPP; C:\Program Files\Asseco Poland SA\Płatnik\ASSECO.AKTUALIZUJ.PP.exe [35152 2016-07-04] (Asseco Poland S.A.) [Brak podpisu cyfrowego] S3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [Brak podpisu cyfrowego] S2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [4561512 2016-06-28] (COMODO) S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [1670840 2016-06-28] (COMODO) S2 ComarchML; C:\Program Files\Comarch\Comarch ERP Menadżer Licencji\ComarchML.exe [1000968 2013-02-11] (Comarch S.A.) S3 ComarchOptimaAutomatWindykacji; C:\Program Files\Comarch ERP Optima\ComarchOptimaAutomatWindykacji.exe [51720 2014-03-17] (Comarch S.A.) S2 HP LaserJet Service; C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe [176128 2016-02-04] (HP) [Brak podpisu cyfrowego] S2 IB24Service; C:\Program Files\iBard24\iBard24Service.exe [35328 2013-07-15] (iComarch24 S.A.) [Brak podpisu cyfrowego] S2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [458464 2012-02-02] (Intel(R) Corporation) S2 jhi_service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [163608 2012-03-07] (Intel Corporation) S2 KaraokeService; C:\WINDOWS\system32\KaraokeSer.exe [88688 2011-11-13] (VIA Technologies, Inc.) S2 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [45568 2013-05-16] (Hewlett-Packard) [Brak podpisu cyfrowego] S2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [55808 2013-05-16] (Hewlett-Packard) [Brak podpisu cyfrowego] ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 ACSSCR; C:\WINDOWS\System32\DRIVERS\a38usb.sys [33536 2006-03-24] (Advanced Card Systems Ltd) S3 BrScnUsb; C:\WINDOWS\System32\DRIVERS\BrScnUsb.sys [15295 2004-10-15] (Brother Industries Ltd.) R1 cmderd; C:\WINDOWS\System32\DRIVERS\cmderd.sys [17288 2016-06-15] (COMODO) S1 cmdGuard; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [641728 2016-06-15] (COMODO) S1 cmdHlp; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [31704 2016-06-15] (COMODO) S2 Hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [693760 2006-11-22] (Aladdin Knowledge Systems Ltd.) S2 Haspnt; C:\WINDOWS\system32\drivers\Haspnt.sys [47616 2013-04-19] (Aladdin Knowledge Systems) [Brak podpisu cyfrowego] R0 Inspect; C:\WINDOWS\System32\DRIVERS\inspect.sys [107688 2016-06-15] (COMODO) R3 MEI; C:\WINDOWS\System32\DRIVERS\HECI.sys [46080 2011-11-10] (Intel Corporation) S3 VIAHdAudAddService; C:\WINDOWS\System32\drivers\viahduaa.sys [2820608 2011-12-04] (VIA Technologies, Inc.) S4 IntelIde; Brak ImagePath U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation) U1 WS2IFSL; Brak ImagePath ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-07-05 10:35 - 2016-07-05 10:36 - 00099438 _____ C:\WINDOWS\ntbtlog.txt 2016-07-04 14:51 - 2016-07-04 14:51 - 00053928 ____R C:\Documents and Settings\Galon\Moje dokumenty\umowa o pracę poninska.xml.9004B 2016-07-04 14:40 - 2009-02-02 11:38 - 00010325 _____ C:\Documents and Settings\Galon\Moje dokumenty\Kopia umowa Ponińska- czas nieokreślony 2016-07-04 14:40 - 2009-02-02 11:38 - 00010325 _____ C:\Documents and Settings\Galon\Moje dokumenty\Kopia (3) umowa Ponińska- czas nieokreślony 2016-07-04 14:40 - 2009-02-02 11:38 - 00010325 _____ C:\Documents and Settings\Galon\Moje dokumenty\Kopia (2) umowa Ponińska- czas nieokreślony 2016-07-04 14:32 - 2013-03-15 08:54 - 00017852 ____R C:\Documents and Settings\Galon\Moje dokumenty\Kopia Umowa o pracę WęGRZAK okres próbny.rtf.9004B 2016-07-04 14:32 - 2013-03-15 08:54 - 00017852 ____R C:\Documents and Settings\Galon\Moje dokumenty\Kopia (2) Umowa o pracę WęGRZAK okres próbny.rtf.9004B 2016-07-04 14:30 - 2015-06-25 10:49 - 00024644 ____R C:\Documents and Settings\Galon\Moje dokumenty\Umowa o pracę KRYGIER czas próbny 2016.rtf.9004B 2016-07-01 12:01 - 2016-07-01 12:05 - 00021976 ____R C:\Documents and Settings\Galon\Moje dokumenty\Przesunięcie na 1 m-c-Gumól.doc.9004B 2016-06-30 10:21 - 2016-06-30 10:21 - 00000568 ____T C:\Documents and Settings\All Users\Dane aplikacji\@F2596B8E6D73.cfg 2016-06-23 08:18 - 2016-06-23 08:26 - 00026648 ____R C:\Documents and Settings\Galon\Moje dokumenty\Rachunek um.o dzieło Pieniążek 2016.doc.9004B 2016-06-23 08:05 - 2016-06-23 08:16 - 00031256 ____R C:\Documents and Settings\Galon\Moje dokumenty\UMOWA O DZIEŁO - Pieniążek 2016.doc.9004B 2016-06-21 07:34 - 2016-06-21 07:34 - 00021464 ____R C:\Documents and Settings\Galon\Moje dokumenty\zaświadczenie ZUS.doc.9004B 2016-06-21 07:12 - 2016-06-21 07:19 - 00021464 ____R C:\Documents and Settings\Galon\Moje dokumenty\Wyjaśnienia pfron 2016.doc.9004B 2016-06-17 08:46 - 2016-06-17 08:46 - 00021464 ____R C:\Documents and Settings\Galon\Moje dokumenty\Urząd Miasta- Wojtas.doc.9004B 2016-06-17 08:46 - 2016-06-17 08:46 - 00000506 ____R C:\Documents and Settings\Galon\Moje dokumenty\~$ząd Miasta- Wojtas.doc.9004B 2016-06-15 09:55 - 2016-06-15 09:56 - 00009799 ____R C:\Documents and Settings\Galon\Moje dokumenty\zaświadczenie Otreba 2016.rtf.9004B 2016-06-09 10:59 - 2016-06-09 11:02 - 00031768 ____R C:\Documents and Settings\Galon\Moje dokumenty\Potracenia za m-c maj 2016.doc.9004B 2016-06-08 12:37 - 2016-06-08 12:49 - 00254922 ____R C:\Documents and Settings\Galon\Moje dokumenty\PIT-37(22)_Ciszewska 2015.pdf.9004B 2016-06-06 08:29 - 2016-06-06 08:29 - 00092184 ____R C:\Documents and Settings\Galon\Pulpit\2016.04.19 protokół nr 5-poprawiony.doc.9004B 2016-06-06 08:29 - 2016-06-06 08:29 - 00090072 ____R C:\Documents and Settings\Galon\Pulpit\160311 protokół nr 4-poprawiony.doc.9004B 2016-06-06 08:29 - 2016-06-06 08:29 - 00057048 ____R C:\Documents and Settings\Galon\Pulpit\2016.04.29 protokół nr 6-poprawiony.doc.9004B ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-07-05 10:50 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\ANGAŻE 2012 2016-07-05 10:41 - 2013-04-09 16:38 - 00000000 ____D C:\Documents and Settings\Galon\Ustawienia lokalne\Temp 2016-07-05 10:40 - 2015-01-23 13:52 - 00000000 ____D C:\FRST 2016-07-05 10:40 - 2013-04-09 18:18 - 01265782 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-07-05 10:40 - 2013-04-09 18:10 - 00559056 _____ C:\WINDOWS\system32\perfh015.dat 2016-07-05 10:40 - 2013-04-09 18:10 - 00106252 _____ C:\WINDOWS\system32\perfc015.dat 2016-07-05 10:37 - 2013-04-09 18:10 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl 2016-07-05 10:30 - 2016-03-29 09:35 - 00013002 _____ C:\WINDOWS\system32\Drivers\fvstore.dat 2016-07-05 10:27 - 2016-03-22 13:17 - 00000440 _____ C:\WINDOWS\Tasks\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9}.job 2016-07-05 10:02 - 2016-03-22 13:17 - 00000440 _____ C:\WINDOWS\Tasks\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}.job 2016-07-05 10:02 - 2016-03-22 13:17 - 00000440 _____ C:\WINDOWS\Tasks\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59}.job 2016-07-05 10:02 - 2016-03-22 13:17 - 00000440 _____ C:\WINDOWS\Tasks\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22}.job 2016-07-05 09:58 - 2014-03-11 07:47 - 00000222 _____ C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job 2016-07-05 09:58 - 2013-04-09 18:17 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji 2016-07-05 09:58 - 2013-04-09 16:34 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-07-05 09:57 - 2016-03-22 13:16 - 01372640 _____ C:\WINDOWS\system32\Drivers\sfi.dat 2016-07-05 07:31 - 2013-04-19 13:42 - 00398846 _____ C:\WINDOWS\system32\HASPLog.txt 2016-07-05 07:21 - 2013-04-12 11:47 - 00002539 _____ C:\Documents and Settings\Galon\Pulpit\Microsoft Office Word 2003.lnk 2016-07-05 06:36 - 2013-04-10 10:04 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-07-05 06:26 - 2016-02-11 10:53 - 00000000 ____D C:\Documents and Settings\Galon\Pulpit\DOKUMENTY 2016 2016-07-05 06:26 - 2015-10-13 11:35 - 00000000 ____D C:\Documents and Settings\Galon\Pulpit\ABI 2016-07-05 06:26 - 2015-07-30 14:12 - 00000000 ____D C:\Documents and Settings\Galon\Pulpit\członkostwo 2016-07-05 06:26 - 2015-02-27 11:09 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\Świadectwa Pracy 2016-07-05 06:26 - 2013-04-12 11:46 - 00000000 ____D C:\Documents and Settings\Galon\Pulpit\DOKUMENTY RÓŻNE 2016-07-05 06:26 - 2013-04-09 16:38 - 00000000 ___RD C:\Documents and Settings\Galon\Moje dokumenty 2016-07-05 06:26 - 2013-04-09 16:38 - 00000000 ____D C:\Documents and Settings\Galon\Pulpit 2016-07-04 14:55 - 2013-04-09 16:34 - 00032574 _____ C:\WINDOWS\SchedLgU.Txt 2016-07-04 14:54 - 2013-04-09 16:38 - 00000292 ___SH C:\Documents and Settings\Galon\ntuser.ini 2016-07-04 14:47 - 2013-04-12 11:48 - 00014670 _____ C:\Documents and Settings\Galon\Moje dokumenty\umowa Ponińska- czas nieokreślony 2016-07-04 13:05 - 2016-02-15 14:04 - 00000000 ____D C:\Documents and Settings\Galon\Pulpit\scany dokumentów 2016 2016-07-04 10:25 - 2014-05-13 08:26 - 00000000 ____D C:\Program Files\Comarch ERP Optima 2016-07-04 06:47 - 2015-05-22 10:30 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\WOGÓRKA 2016-07-04 06:47 - 2015-05-12 09:00 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\wyjscia po 15 2016-07-04 06:47 - 2015-03-20 11:04 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\Sprzedaż 2015 2016-07-04 06:47 - 2015-01-19 10:43 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\wnioski o przeszeregowanie 2015 2016-07-04 06:47 - 2014-02-27 12:28 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\wyp.warunków pracy 2014 2016-07-04 06:47 - 2014-02-06 13:23 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\umowy 2014 2016-07-04 06:47 - 2013-09-19 09:54 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\wypowiedzenia 09 2013 2016-07-04 06:47 - 2013-09-17 08:10 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\skaner 2016-07-04 06:47 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\Zest.stawek 2016-07-04 06:47 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\ZAKRESY OBOWIĄZKÓW 2016-07-04 06:47 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\umowy o pracę 2016-07-04 06:47 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\TAPETY 2016-07-04 06:47 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\świadecta pracy zwolnionych 2016-07-04 06:47 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\szkolenia bhp 2016-07-04 06:46 - 2015-02-09 13:48 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\potrącenia 2015 2016-07-04 06:46 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\RADA NADZORCZA - 2008 2016-07-04 06:46 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\PZU ROSZCZENIA 2016-07-04 06:46 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\protokoły 2016-07-04 06:46 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\Płace 2011 2016-07-04 06:45 - 2016-03-31 09:18 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\PIT 2016-07-04 06:45 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\Portierzy stawki 2016-07-04 06:44 - 2016-03-03 09:49 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\PFRON Adam 2016-07-04 06:44 - 2015-02-20 12:57 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\OFERTY PRACY 2016-07-04 06:44 - 2014-12-18 12:42 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\pisma sąd 2016-07-04 06:44 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\pisma związkowe 2016-07-04 06:44 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\pisma różne 2016-07-04 06:44 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\listy pracowników 2016-07-04 06:44 - 2013-04-09 16:38 - 00000000 ___RD C:\Documents and Settings\Galon\Moje dokumenty\Moje obrazy 2016-07-04 06:43 - 2015-02-27 11:12 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\Kopia ANGAZE 2016-07-04 06:43 - 2015-02-27 11:12 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\Kopia AGA 2016-07-04 06:43 - 2014-02-06 10:11 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\Infonetax 2016-07-04 06:43 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\informacje dodatkowe pracowników 2016-07-04 06:43 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\eRU - Szczegóły roszczenia_pliki 2016-07-04 06:43 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\druki 2016-07-04 06:43 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\Ciocia Jannula,teściowa i Angelika w Anglii 2016-07-04 06:38 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\ciekawe 2016-07-04 06:38 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\ANGAZE 2016-07-04 06:36 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Moje dokumenty\AGA 2016-07-04 06:35 - 2015-02-25 14:06 - 00000000 ____D C:\Documents and Settings\Galon\Dane aplikacji\GofinDruki 2016-07-04 06:35 - 2013-04-22 11:37 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\zwolnienia 2008 2016-07-04 06:35 - 2013-04-22 11:37 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\ZUZP2005 2016-07-04 06:35 - 2013-04-22 11:37 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\ZUZP 2010 2016-07-04 06:35 - 2013-04-22 11:37 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\ZUZP 2009 2016-07-04 06:35 - 2013-04-22 11:37 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\ZUZP 2007 2016-07-04 06:35 - 2013-04-22 11:37 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\ZUZP 2006 2016-07-04 06:35 - 2013-04-22 11:37 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Zuzp 2004 2016-07-04 06:35 - 2013-04-22 11:37 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\ZUZP 2016-07-04 06:35 - 2013-04-22 11:37 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\ZUS-korespondencja 2016-07-04 06:35 - 2013-04-19 13:40 - 00000000 ____D C:\Documents and Settings\Galon\Dane aplikacji\Comarch ERP Serwis Zabezpieczen 2016-07-04 06:35 - 2013-04-18 12:08 - 00000000 ____D C:\Documents and Settings\Galon\Dane aplikacji\Comarch OPT!MA 2016-07-04 06:35 - 2013-04-12 12:25 - 00000000 ____D C:\Documents and Settings\Galon\Dane aplikacji\DAEMON Tools Lite 2016-07-04 06:34 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Zatrudnienie2000 2016-07-04 06:34 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\ZATRUDNIENIE 2008 2016-07-04 06:34 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\ZATRUDNIENIE 2007 2016-07-04 06:34 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\ZATRUDNIENIE 2006 2016-07-04 06:34 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\ZATRUDNIENIE 2005 2016-07-04 06:34 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\ZATRUDNIENIE 2004 2016-07-04 06:34 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\zatrudnienie 2003 2016-07-04 06:34 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\zatrudnienie 2002 2016-07-04 06:34 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Zatrudnienie 2001 2016-07-04 06:34 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\zatrudnienie 2016-07-04 06:34 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\ZAKRESY CZYNNOŚCI 2010 2016-07-04 06:34 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Zakresy czynności 2016-07-04 06:34 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\zakresy 2012 2016-07-04 06:34 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\zakaz konkurencji 2016-07-04 06:34 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\WYDRUKI SPRZEDAŻY rocznej 2016-07-04 06:34 - 2013-04-22 11:37 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\ZUS-instrukcje 2016-07-04 06:34 - 2013-04-22 11:37 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO 2016-07-04 06:33 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Walne1999 2016-07-04 06:33 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Walne ZP 2007 2016-07-04 06:33 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Walne ZP 2006 2016-07-04 06:33 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Walne ZP 2005 2016-07-04 06:33 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Walne ZP 2004 2016-07-04 06:33 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\WALNE ZGROMADZENIE 2012 2016-07-04 06:33 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\WALNE ZGROMADZENIE 2011 2016-07-04 06:33 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\WALNE ZGROMADZENIE 2010 2016-07-04 06:33 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\WALNE ZGROMADZENIE 2009 2016-07-04 06:33 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Walne Zgromadzenie 2008 2016-07-04 06:33 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\WALNE ZGROMADZENIE 2013 2016-07-04 06:33 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Walne 2003 2016-07-04 06:33 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Walne 2002 2016-07-04 06:33 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Walne 2001 2016-07-01 07:31 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Walne 2000 2016-07-01 07:31 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\URZĘDY SKARBOWE ZA 2010 2016-07-01 07:31 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\URZĘDY SKARBOWE ZA 2009 2016-07-01 07:31 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\URZĘDY SKARBOWE ZA 2008 2016-07-01 07:31 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\URZĘDY SKARBOWE ZA 2007 2016-07-01 07:31 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\URZĘDY SKARBOWE ZA 2006 2016-07-01 07:31 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\URZĘDY SKARBOWE ZA 2005 2016-07-01 07:31 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\URZĘDY SKARBOWE ZA 2011 2016-07-01 07:31 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\urzędy skarbowe 2016-07-01 07:30 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\urzędy pracy 2016-07-01 07:30 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\SZKOLENIA W 2010roku 2016-07-01 07:30 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\SZKOLENIA W 2009roku 2016-07-01 07:30 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\SZKOLENIA W 2008roku 2016-07-01 07:30 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\SZKOLENIA W 2007roku 2016-07-01 07:30 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\szkolenia obowiązkowe 2016-07-01 07:30 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\struktura organizacyjna 2016-07-01 07:30 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\sprawy kadrowe 2016-07-01 07:30 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\sprawy członkowskie 2016-07-01 07:30 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\rekrutacja pracowników 2016-07-01 07:29 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\regulamin pracy 2016-07-01 07:29 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\RADA NADZORCZA od 2007 2016-07-01 07:29 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\RADA NADZORCZA 2002 2016-07-01 07:29 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\RADA NADZORCZA 2001 2016-07-01 07:29 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\RADA NADZORCZA 2016-07-01 07:29 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\powierzenie obowiązków pracownikom 2016-07-01 07:29 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\PŁACE 2016-07-01 07:29 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Plan szkoleń na 2008r 2016-07-01 07:29 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\pisma sprawy płacowe 2016-07-01 07:29 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\pisma sprawy kadrowe 2016-07-01 07:29 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\PIP 2016-07-01 07:29 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\pdof 2016-07-01 07:29 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\odpow.mater.-umowy 2016-07-01 07:29 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\nowa wersja PIK 2016-07-01 07:29 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\moje dokumenty 2016-07-01 07:29 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Kopia ZUZP 2010 2016-07-01 07:28 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Kopia URZĘDY SKARBOWE ZA 2011 2016-07-01 07:28 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Konieczność gospodarcza 2011 2016-07-01 07:28 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\konieczność gospodarcza 2010 2016-07-01 07:28 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\konieczność gospodarcza 2007 i inne rozw.umowy o pracę 2016-07-01 07:28 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\konieczność gospodarcza 2005 i 2006 2016-07-01 07:28 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\konieczność gospod 2016-07-01 07:28 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\KODY ZAWODÓW 2016-07-01 07:28 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\ISO 2009 2016-07-01 07:28 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\ISO 2008 2016-07-01 07:28 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\instrukcje 2016-07-01 07:28 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\GUS 2011 2016-07-01 07:28 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\GUS 2010 2016-07-01 07:28 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\GUS 2009 2016-07-01 07:28 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\GUS 2008 2016-07-01 07:28 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\GUS 2007 2016-07-01 07:28 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\GUS 2006 2016-07-01 07:27 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\GUS 2005 2016-07-01 07:27 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\GUS 2004 2016-07-01 07:27 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\GUS 2003 2016-07-01 07:27 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\fundusz2001 2016-07-01 07:27 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\FUNDUSZ PŁAC 2012 2016-07-01 07:27 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\FUNDUSZ 2010 2016-07-01 07:27 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\FUNDUSZ 2009 2016-07-01 07:27 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\FUNDUSZ 2008 2016-07-01 07:27 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\FUNDUSZ 2007 2016-07-01 07:27 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\FUNDUSZ 2006 2016-07-01 07:27 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\FUNDUSZ 2005 2016-07-01 07:27 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\FUNDUSZ 2004 2016-07-01 07:27 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\fundusz 2000 2016-07-01 07:27 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Druki dokumentów 2016-07-01 07:27 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\COMARCH 2016-07-01 07:27 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Certyfikaty i klucze ZUS 2016-07-01 07:27 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\cdn 2016-07-01 07:26 - 2013-09-24 10:22 - 00000000 ____D C:\DLL 2016-07-01 07:26 - 2013-09-09 13:47 - 00000000 ___HD C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji 2016-07-01 07:26 - 2013-09-09 13:47 - 00000000 ___HD C:\Documents and Settings\Administrator\Szablony 2016-07-01 07:26 - 2013-04-22 11:38 - 00000000 ____D C:\Documents and Settings\DOKUMENTY CHEĆKO\Aneksy do regulaminu pracy 2016-07-01 07:26 - 2013-04-09 18:18 - 00000000 ___HD C:\Documents and Settings\Default User\Szablony 2016-06-30 14:24 - 2014-01-09 15:02 - 00865800 _____ C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat 2016-06-30 14:24 - 2013-04-09 16:34 - 00000000 ___HD C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji 2016-06-30 10:22 - 2013-09-25 07:42 - 00000000 ____D C:\Baza Płatnik kopia 25.09.2013 2016-06-30 10:21 - 2015-01-23 13:48 - 00000000 ____D C:\AdwCleaner 2016-06-30 10:21 - 2013-04-09 16:38 - 00000000 ___RD C:\Documents and Settings\Galon\Menu Start\Programy\Autostart 2016-06-30 10:21 - 2013-04-09 16:38 - 00000000 ___RD C:\Documents and Settings\Galon\Menu Start\Programy 2016-06-29 12:00 - 2016-02-11 10:55 - 00000000 ____D C:\Documents and Settings\Galon\Pulpit\WALNE 2016-06-28 07:42 - 2016-02-19 12:33 - 00000000 ____D C:\Documents and Settings\Galon\Pulpit\SEKRETARIAT 2016 2016-06-28 07:01 - 2016-03-22 13:13 - 00001862 _____ C:\Documents and Settings\All Users\Pulpit\COMODO Antivirus.lnk 2016-06-28 07:01 - 2015-06-15 11:25 - 00560944 _____ C:\WINDOWS\system32\prfh0415.dat 2016-06-28 07:01 - 2015-06-15 11:25 - 00107536 _____ C:\WINDOWS\system32\prfc0415.dat 2016-06-23 10:06 - 2015-07-30 14:12 - 00000000 ____D C:\Documents and Settings\Galon\Pulpit\skierowania na badania 2016-06-23 09:15 - 2013-04-12 11:47 - 00000000 ____D C:\Documents and Settings\Galon\Pulpit\ZAPOMOGI SOCJALNY 2016-06-17 11:36 - 2013-04-10 10:04 - 00796352 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2016-06-17 11:36 - 2013-04-10 10:04 - 00142528 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2016-06-15 14:52 - 2013-07-31 13:52 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-06-15 14:49 - 2013-04-19 11:31 - 139785240 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-06-15 08:09 - 2015-11-18 18:13 - 00641728 _____ (COMODO) C:\WINDOWS\system32\Drivers\cmdGuard.sys 2016-06-15 08:09 - 2015-11-18 18:13 - 00017288 _____ (COMODO) C:\WINDOWS\system32\Drivers\cmderd.sys 2016-06-15 08:09 - 2015-08-05 00:30 - 00107688 _____ (COMODO) C:\WINDOWS\system32\Drivers\inspect.sys 2016-06-15 08:09 - 2015-08-05 00:30 - 00031704 _____ (COMODO) C:\WINDOWS\system32\Drivers\cmdhlp.sys 2016-06-15 08:08 - 2015-09-03 12:52 - 00626288 _____ (COMODO) C:\WINDOWS\system32\guard32.dll 2016-06-15 08:08 - 2015-08-05 01:29 - 00044000 _____ (COMODO) C:\WINDOWS\system32\cmdcsr.dll 2016-06-15 07:58 - 2015-08-05 01:27 - 00296120 _____ (COMODO) C:\WINDOWS\system32\cmdvrt32.dll 2016-06-15 07:56 - 2015-08-05 01:26 - 00046776 _____ (COMODO) C:\WINDOWS\system32\cmdkbd32.dll 2016-06-15 07:50 - 2016-02-11 10:57 - 00000000 ____D C:\Documents and Settings\Galon\Pulpit\NOWE 2016 2016-06-09 12:12 - 2013-05-09 08:35 - 00000000 ____D C:\wypłaty 2016-06-09 11:26 - 2015-10-12 10:18 - 00024024 ____R C:\Documents and Settings\Galon\Moje dokumenty\N U M E R A C J A L I S T P Ł A C 2016.doc.9004B 2016-06-08 11:20 - 2016-02-09 11:42 - 00000000 ____D C:\Listy płac 2016 2016-06-06 10:50 - 2013-09-26 12:19 - 00000000 ____D C:\Documents and Settings\Galon\Pulpit\ZUZP 2013 ==================== Pliki w katalogu głównym wybranych folderów ======= 2015-01-16 10:43 - 2015-04-16 14:01 - 0011289 _____ () C:\Documents and Settings\Galon\Ustawienia lokalne\Dane aplikacji\unins000.dat 2015-04-16 14:01 - 2015-04-16 14:01 - 0707744 _____ () C:\Documents and Settings\Galon\Ustawienia lokalne\Dane aplikacji\unins000.exe 2015-01-16 10:43 - 2015-04-16 14:01 - 0011761 _____ () C:\Documents and Settings\Galon\Ustawienia lokalne\Dane aplikacji\unins000.msg 1899-12-30 00:00 - 1899-12-30 00:00 - 1572918 ____T () C:\Documents and Settings\All Users\Dane aplikacji\@F2596B8E6D73.bmp 2016-06-30 10:21 - 2016-06-30 10:21 - 0000568 ____T () C:\Documents and Settings\All Users\Dane aplikacji\@F2596B8E6D73.cfg 1601-06-30 01:18 - 1601-06-30 01:18 - 0036204 _____ () C:\Documents and Settings\All Users\Dane aplikacji\@F2596B8E6D73.html 2014-04-09 13:00 - 2012-07-16 18:28 - 0024772 _____ () C:\Documents and Settings\All Users\Dane aplikacji\P1100DEF.css 2014-04-09 13:00 - 2012-08-13 21:22 - 0004412 ____R () C:\Documents and Settings\All Users\Dane aplikacji\P1100OS.HTM 2014-04-09 13:00 - 2012-07-16 18:28 - 0002944 _____ () C:\Documents and Settings\All Users\Dane aplikacji\P1100SIG.GIF Niektóre pliki w TEMP: ==================== C:\Documents and Settings\Galon\Ustawienia lokalne\Temp\CCP11s.dll C:\Documents and Settings\Galon\Ustawienia lokalne\Temp\pkcs11wrapper2851957498882875973.dll C:\Documents and Settings\Galon\Ustawienia lokalne\Temp\pkcs11wrapper3906676507804077312.dll C:\Documents and Settings\Galon\Ustawienia lokalne\Temp\pkcs11wrapper4048812929346010068.dll C:\Documents and Settings\Galon\Ustawienia lokalne\Temp\pkcs11wrapper5883033249840667367.dll C:\Documents and Settings\Galon\Ustawienia lokalne\Temp\radDF502.tmp.dll C:\Documents and Settings\Galon\Ustawienia lokalne\Temp\wnskmeg0.dll ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo ==================== Koniec FRST.txt ============================