Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2015 Ran by Toshiba (administrator) on TOSHIBA-TOSH on 04-02-2015 11:33:22 Running from C:\Users\Toshiba\Downloads\FRST64 Loaded Profiles: Toshiba (Available profiles: Toshiba) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 9 (Default browser: IE) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe () C:\Program Files (x86)\XSManager\WTGService.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-2084366123-426833693-2885736349-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 FireFox: ======== FF Extension: No Name - C:\Program Files (x86)\AmiExt\flashEnhancer\ff [Not Found] FF Extension: No Name - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha2437\ff [Not Found] FF Extension: No Name - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha625\ff [Not Found] FF Extension: No Name - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2934\ff [Not Found] FF Extension: No Name - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha6046\ff [Not Found] FF Extension: No Name - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home6968\ff [Not Found] FF Extension: No Name - C:\Program Files (x86)\MediaBuzzV1\MediaBuzzV1mode8558\ff [Not Found] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [923136 2009-05-21] (Hewlett-Packard Co.) [File not signed] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed] R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [File not signed] R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [File not signed] R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation) R2 WTGService; C:\Program Files (x86)\XSManager\WTGService.exe [329168 2010-04-12] () ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 a4djavs; C:\Windows\System32\Drivers\a4djavs.sys [359784 2012-12-18] (Native Instruments GmbH) S3 a4djavs_x64; C:\Windows\System32\Drivers\a4djavs_x64.sys [44560 2009-03-26] (Native Instruments GmbH) S3 a4djusb_svc; C:\Windows\System32\Drivers\a4djusb.sys [99688 2012-12-18] (Native Instruments GmbH) S3 a4djusb_x64; C:\Windows\System32\Drivers\a4djusb_x64.sys [249872 2009-03-26] (Native Instruments GmbH) U5 AppMgmt; C:\Windows\system32\svchost.exe [27648 2011-03-01] (Microsoft Corporation) S3 cmnsusbser; C:\Windows\System32\DRIVERS\cmnsusbser.sys [117888 2015-01-25] (Mobile Connector) S3 cmntnet; C:\Windows\System32\DRIVERS\cmntnet.sys [141824 2015-01-25] (Wireless Data Device) S3 cmnuusbser; C:\Windows\System32\DRIVERS\cmnuusbser.sys [123904 2015-01-25] (Wireless Device) S3 E100B; C:\Windows\System32\DRIVERS\efe5b32e.sys [192256 2009-06-10] (Intel Corporation) S3 mm2avs; C:\Windows\System32\Drivers\mm2avs.sys [358520 2012-06-06] (Native Instruments GmbH) S3 mm2usb_svc; C:\Windows\System32\Drivers\mm2usb.sys [45688 2012-06-06] (Native Instruments GmbH) S3 NETwLv64; C:\Windows\System32\DRIVERS\NETwLv64.sys [7533568 2010-10-07] (Intel Corporation) [File not signed] S3 NETwNs64; C:\Windows\System32\DRIVERS\NETwNs64.sys [8507392 2011-01-04] (Intel Corporation) [File not signed] S3 TASCAM_US600_MIDI; C:\Windows\System32\drivers\tus600_m.sys [32032 2011-02-08] (TASCAM) S3 TASCAM_US600_USB; C:\Windows\System32\Drivers\tus600_u.sys [416032 2011-02-08] (TASCAM) S3 TASCAM_US600_WDM; C:\Windows\System32\drivers\tus600_a.sys [54560 2011-02-08] (TASCAM) S3 TosRfSnd; C:\Windows\System32\drivers\tosrfsnd.sys [63488 2010-04-26] (TOSHIBA Corporation) [File not signed] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-04 11:26 - 2015-02-04 11:27 - 00025658 _____ () C:\Users\Toshiba\Downloads\~ESETUninstaller.log 2015-02-04 11:09 - 2015-02-04 11:09 - 00671432 _____ (ESET) C:\Users\Toshiba\Downloads\ESETUninstaller.exe 2015-02-04 10:58 - 2015-02-04 11:32 - 00000008 __RSH () C:\ProgramData\ntuser.pol 2015-02-04 01:17 - 2015-02-04 01:17 - 00019822 _____ () C:\ComboFix.txt 2015-02-03 14:58 - 2015-02-04 11:33 - 00000000 ____D () C:\Users\Toshiba\Downloads\FRST64 2015-02-03 08:46 - 2015-02-03 08:46 - 00000130 _____ () C:\Users\Toshiba\Desktop\link.txt 2015-02-03 08:36 - 2015-02-03 08:36 - 00000000 ____D () C:\OETemp 2015-01-31 17:51 - 2015-01-31 17:51 - 00148780 _____ () C:\Users\Toshiba\Desktop\hybryda auto PL.jpeg 2015-01-30 12:20 - 2015-01-30 12:22 - 00000000 ____D () C:\Users\Toshiba\Desktop\Bewerbungs Anlagen 2015-01-28 23:03 - 2015-01-28 23:25 - 00000000 ____D () C:\Users\Toshiba\Desktop\projekty Remix dla pappe daty 2015-01-28 16:05 - 2015-01-28 16:06 - 13828342 _____ () C:\Users\Toshiba\Downloads\trigger pack parts.rar 2015-01-28 05:50 - 2015-01-28 06:04 - 00000000 ____D () C:\Users\Toshiba\Desktop\Privat 2015-01-27 23:17 - 2015-01-28 02:50 - 00000475 _____ () C:\Users\Toshiba\Desktop\problem z massive .txt.txt 2015-01-27 20:41 - 2015-01-27 20:41 - 01963227 _____ () C:\Users\Toshiba\Desktop\FL Problem.wmv 2015-01-27 00:01 - 2015-02-04 01:26 - 00000000 ____D () C:\Users\Toshiba\Desktop\pliki na fixpc 2015-01-26 16:38 - 2015-01-26 16:37 - 24413797 _____ () C:\Users\Toshiba\Desktop\hercules 3.wmv 2015-01-26 16:26 - 2015-01-26 16:26 - 23706117 _____ () C:\Users\Toshiba\Desktop\hercules 2.wmv 2015-01-26 16:19 - 2015-01-26 16:19 - 24198949 _____ () C:\Users\Toshiba\Desktop\hercules .wmv 2015-01-25 20:55 - 2015-01-31 13:48 - 00000000 ____D () C:\Users\Toshiba\AppData\Roaming\XSManager 2015-01-25 20:55 - 2015-01-25 20:56 - 00101056 _____ () C:\Windows\system32\Drivers\dvb_nova_12mhz_b0.inp 2015-01-25 20:55 - 2015-01-25 20:56 - 00092456 _____ () C:\Windows\system32\Drivers\isdbt_nova_12mhz_b0.inp 2015-01-25 20:55 - 2015-01-25 20:56 - 00079036 _____ () C:\Windows\system32\Drivers\tdmb_nova_12mhz_b0.inp 2015-01-25 20:55 - 2015-01-25 20:56 - 00001900 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\XSManager.lnk 2015-01-25 20:55 - 2015-01-25 20:56 - 00001894 _____ () C:\Users\Public\Desktop\XSManager.lnk 2015-01-25 20:55 - 2015-01-25 20:56 - 00000040 _____ () C:\Windows\system32\Drivers\smsbda.cfg 2015-01-25 20:55 - 2015-01-25 20:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XSManager 2015-01-25 19:56 - 2015-01-25 19:56 - 00380416 _____ () C:\Users\Toshiba\Downloads\t7gfg2co.exe 2015-01-25 19:48 - 2015-02-04 11:33 - 00000000 ____D () C:\FRST 2015-01-25 17:23 - 2015-01-25 17:23 - 00001042 _____ () C:\Users\Public\Desktop\FastStone Capture.lnk 2015-01-25 17:23 - 2015-01-25 17:23 - 00000000 ____D () C:\Users\Toshiba\AppData\Roaming\FastStone 2015-01-25 17:23 - 2015-01-25 17:23 - 00000000 ____D () C:\Users\Toshiba\AppData\Local\FastStone 2015-01-25 17:23 - 2015-01-25 17:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture 2015-01-25 17:23 - 2015-01-25 17:23 - 00000000 ____D () C:\Program Files (x86)\FastStone Capture 2015-01-25 17:22 - 2015-01-25 17:22 - 02945706 _____ () C:\Users\Toshiba\Downloads\FSCaptureSetup80.exe 2015-01-25 11:01 - 2015-01-25 11:01 - 00010817 _____ () C:\Users\Toshiba\Desktop\scan 2 - 25.01.15 - Godz 11 .txt 2015-01-25 10:12 - 2015-01-25 10:12 - 00008450 _____ () C:\Users\Toshiba\Desktop\Scan 1.txt 2015-01-25 09:54 - 2015-01-25 09:54 - 02347384 _____ (ESET) C:\Users\Toshiba\Downloads\esetsmartinstaller_plk.exe 2015-01-24 16:33 - 2015-01-24 16:33 - 00000541 _____ () C:\Users\Toshiba\Desktop\FL Studio 9.lnk 2015-01-24 16:20 - 2009-09-15 10:14 - 01554944 _____ (HMS http://hp.vector.co.jp/authors/VA012897/) C:\Windows\SysWOW64\vorbis.acm 2015-01-24 16:06 - 2010-03-01 09:34 - 194977559 _____ () C:\Users\Toshiba\Desktop\Image Line FL Studio XXL v9.0.3 [ENG] [RegKey].exe 2015-01-24 15:57 - 2015-01-24 16:47 - 00000000 ____D () C:\Users\Toshiba\Desktop\Pappenheimer - The Tune with the Baseline (Krystian Kash Remix) 2015-01-24 02:35 - 2015-01-24 02:35 - 00000000 ____D () C:\Users\Toshiba\AppData\Roaming\ESET 2015-01-24 02:35 - 2015-01-24 02:35 - 00000000 ____D () C:\Users\Toshiba\AppData\Local\ESET 2015-01-24 02:19 - 2015-01-24 02:19 - 01660616 _____ (ESET) C:\Users\Toshiba\Downloads\eset_smart_security_live_installer_.exe 2015-01-23 23:28 - 2015-02-04 11:31 - 00007168 _____ () C:\Windows\setupact.log 2015-01-23 23:28 - 2015-02-04 10:57 - 00004526 _____ () C:\Windows\PFRO.log 2015-01-23 23:28 - 2015-01-23 23:28 - 00000000 _____ () C:\Windows\setuperr.log 2015-01-23 21:47 - 2015-01-24 01:28 - 00000000 ____D () C:\Users\Toshiba\Desktop\Pappenheimer - The Tune with the Baseline 2015-01-23 19:07 - 2015-01-23 19:07 - 00000000 _____ () C:\autoexec.bat 2015-01-17 16:39 - 2015-01-17 16:39 - 10769101 _____ () C:\Users\Toshiba\Downloads\Ohm Force Ohmicide Pro [CRACKED].zip 2015-01-17 16:13 - 2015-01-17 16:13 - 00011466 _____ () C:\Users\Toshiba\Downloads\Preset + Midi.zip 2015-01-17 16:04 - 2015-01-17 16:04 - 01983421 _____ () C:\Users\Toshiba\Downloads\Novation.V-Station.VSTi.v1.5.1.incl.Keygen-AiR.rar 2015-01-16 00:07 - 2015-02-04 01:18 - 00000000 ____D () C:\Qoobox 2015-01-16 00:07 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2015-01-16 00:07 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2015-01-16 00:07 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2015-01-16 00:07 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2015-01-16 00:07 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2015-01-16 00:07 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2015-01-16 00:07 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2015-01-16 00:07 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2015-01-16 00:06 - 2015-01-24 04:39 - 00000000 ____D () C:\Windows\erdnt 2015-01-16 00:03 - 2015-02-04 00:54 - 05611380 ____R (Swearware) C:\Users\Toshiba\Downloads\ComboFix.exe 2015-01-14 19:57 - 2015-01-15 12:37 - 00000000 ____D () C:\Users\Toshiba\Desktop\Wise guys remix ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-04 11:32 - 2012-04-17 10:16 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-02-04 11:31 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-04 11:30 - 2014-11-12 21:28 - 00000000 ____D () C:\Users\Toshiba\Desktop\Narzedzia 2015-02-04 11:30 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2015-02-04 11:24 - 2014-11-22 18:36 - 00952855 _____ () C:\Windows\WindowsUpdate.log 2015-02-04 11:05 - 2009-07-14 05:45 - 00024912 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-02-04 11:05 - 2009-07-14 05:45 - 00024912 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-02-04 11:02 - 2011-02-11 09:21 - 00654166 _____ () C:\Windows\system32\perfh007.dat 2015-02-04 11:02 - 2011-02-11 09:21 - 00130006 _____ () C:\Windows\system32\perfc007.dat 2015-02-04 11:02 - 2009-07-14 06:13 - 01498506 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-02-04 11:00 - 2012-08-25 18:53 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-02-04 01:07 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini 2015-02-03 08:38 - 2014-04-25 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2015-02-03 08:38 - 2011-08-03 11:38 - 00000000 ____D () C:\Program Files (x86)\Java 2015-02-03 08:36 - 2014-09-27 18:07 - 00000000 ____D () C:\ProgramData\Package Cache 2015-02-03 08:34 - 2011-08-03 11:01 - 00000000 ____D () C:\ProgramData\Adobe 2015-02-03 08:31 - 2014-11-12 02:28 - 00000000 ____D () C:\Users\Toshiba\AppData\Roaming\LavasoftStatistics 2015-02-02 19:57 - 2014-12-04 11:35 - 00000000 ____D () C:\Users\Toshiba\Desktop\Bewerbungen 4 Dezember 2014 2015-02-01 16:32 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2015-01-28 21:00 - 2012-08-25 18:53 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-01-28 18:13 - 2014-11-24 14:32 - 00000000 ____D () C:\Users\Toshiba\Desktop\Remix dla Pappenheimer 2015-01-27 22:00 - 2012-08-25 18:53 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-01-27 22:00 - 2012-08-25 18:53 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-01-25 20:56 - 2014-08-27 21:08 - 00000000 ____D () C:\Program Files (x86)\XSManager 2015-01-25 20:56 - 2012-04-19 18:30 - 00133120 _____ (C-motech Co.,Ltd.) C:\Windows\system32\Drivers\cm_netamd.sys 2015-01-25 20:56 - 2012-04-19 18:30 - 00118272 _____ (C-motech Co.,Ltd.) C:\Windows\system32\Drivers\cm_seramd.sys 2015-01-25 20:56 - 2012-04-19 18:30 - 00117888 _____ (Mobile Connector) C:\Windows\system32\Drivers\cmnsusbser.sys 2015-01-25 20:56 - 2012-04-19 18:30 - 00112640 _____ (C-motech Co.,Ltd.) C:\Windows\system32\Drivers\cm_net32.sys 2015-01-25 20:56 - 2012-04-19 18:30 - 00103680 _____ (C-motech Co.,Ltd.) C:\Windows\system32\Drivers\cm_ser32.sys 2015-01-25 20:56 - 2012-04-19 18:30 - 00063648 _____ (Siano) C:\Windows\system32\Drivers\smsbda.sys 2015-01-25 20:55 - 2014-07-03 17:07 - 00141824 _____ (Wireless Data Device) C:\Windows\system32\Drivers\cmntnet.sys 2015-01-25 20:55 - 2014-07-03 17:07 - 00123904 _____ (Wireless Device) C:\Windows\system32\Drivers\cmnuusbser.sys 2015-01-24 16:33 - 2013-05-15 17:01 - 00000000 ____D () C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line 2015-01-24 16:29 - 2013-05-15 17:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line 2015-01-24 16:12 - 2014-08-28 22:39 - 00000000 ____D () C:\Program Files\VstPlugIns 2015-01-24 04:39 - 2012-04-17 10:51 - 00000000 ____D () C:\Users\Toshiba 2015-01-24 04:39 - 2010-11-21 08:16 - 00000000 ___RD () C:\Users\Public\Recorded TV 2015-01-24 04:39 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2015-01-24 01:28 - 2014-11-09 21:03 - 00000000 ____D () C:\Users\Toshiba\Desktop\soundclound fotos 2015-01-23 20:33 - 2014-09-02 21:57 - 00000000 ____D () C:\Users\Toshiba\AppData\Roaming\Eisenberg 2015-01-20 01:18 - 2014-12-01 22:00 - 00000000 ____D () C:\Users\Toshiba\Desktop\sample packs KASH 2015-01-16 00:32 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default ==================== Files in the root of some directories ======= 2014-11-05 22:49 - 2014-11-05 22:49 - 0001764 _____ () C:\Users\Toshiba\AppData\Local\recently-used.xbel 2012-07-01 14:40 - 2014-12-09 02:29 - 0007649 _____ () C:\Users\Toshiba\AppData\Local\Resmon.ResmonCfg 2014-08-28 23:59 - 2014-08-29 00:00 - 0000016 _____ () C:\ProgramData\autobk.inc 2014-12-04 13:34 - 2014-12-04 13:39 - 0000342 _____ () C:\ProgramData\hpzinstall.log ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-02-03 01:26 ==================== End Of Log ============================