Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-02-2015 01 Ran by Blysku (administrator) on BLYSKU-KOMPUTER on 19-02-2015 11:54:05 Running from C:\Users\Blysku\Desktop Loaded Profiles: Blysku (Available profiles: Błysku & Blysku) Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Polski (Polska) Internet Explorer Version 10 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Lenovo (Beijing) Limited) C:\Program Files\Lenovo\Energy Management\Energy Management.exe (Lenovo(beijing) Limited) C:\Program Files\Lenovo\Energy Management\utility.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (GG Network S.A.) C:\Users\Blysku\AppData\Local\GG\Application\gghub.exe (GG Network S.A.) C:\Users\Blysku\AppData\Local\GG\Application\ggapp.exe (GG Network S.A.) C:\Users\Blysku\AppData\Local\GG\Application\ggdrive\ggdrive.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Energy Management] => C:\Program Files\Lenovo\Energy Management\Energy Management.exe [8943520 2010-12-06] (Lenovo (Beijing) Limited) HKLM\...\Run: [EnergyUtility] => C:\Program Files\Lenovo\Energy Management\Utility.exe [5117856 2010-12-13] (Lenovo(beijing) Limited) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-27] (AVAST Software) HKU\S-1-5-21-859423121-132849420-3883132106-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) HKU\S-1-5-21-859423121-132849420-3883132106-1001\...\Run: [GG] => C:\Users\Blysku\AppData\Local\GG\Application\gghub.exe [4023872 2015-02-12] (GG Network S.A.) HKU\S-1-5-21-859423121-132849420-3883132106-1001\...\MountPoints2: {cb66f308-7fc5-11e4-97fe-001eecc2abac} - F:\start.exe ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220150217 HKU\S-1-5-21-859423121-132849420-3883132106-1001\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220150217 HKU\S-1-5-21-859423121-132849420-3883132106-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: No Name -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> No File BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Blysku\AppData\Roaming\Mozilla\Firefox\Profiles\19z2k71w.default FF Homepage: www.wp.pl/?src01=dp220150217 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll () FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: Strong Signal - C:\Users\Blysku\AppData\Roaming\Mozilla\Firefox\Profiles\19z2k71w.default\Extensions\{6dc74982-0c33-45a3-aaec-8285d2089296}.xpi [2015-02-17] FF Extension: Adblock Plus - C:\Users\Blysku\AppData\Roaming\Mozilla\Firefox\Profiles\19z2k71w.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-19] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-09] Chrome: ======= CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2014-12-09] CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-09] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-09] (AVAST Software) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 ACPIVPC; C:\Windows\System32\DRIVERS\AcpiVpc.sys [23136 2010-10-25] (Lenovo Corporation) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-12-09] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [70384 2014-12-09] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-12-09] (AVAST Software) R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-12-09] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787800 2014-12-09] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423784 2014-12-09] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [91496 2014-12-09] (AVAST Software) R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206248 2014-12-09] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-12-09] (Disc Soft Ltd) R0 LHDmgr; C:\Windows\System32\DRIVERS\LhdX86.sys [32352 2010-01-15] (Lenovo.) S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-19 11:54 - 2015-02-19 11:54 - 00008464 _____ () C:\Users\Blysku\Desktop\FRST.txt 2015-02-19 11:52 - 2015-02-19 11:54 - 00000000 ____D () C:\FRST 2015-02-19 11:49 - 2015-02-19 11:49 - 00037354 _____ () C:\Users\Blysku\Desktop\Extras.Txt 2015-02-19 11:48 - 2015-02-19 11:48 - 00058658 _____ () C:\Users\Blysku\Desktop\OTL.Txt 2015-02-19 11:39 - 2015-02-19 11:36 - 00602112 _____ (OldTimer Tools) C:\Users\Blysku\Desktop\OTL.exe 2015-02-19 11:39 - 2015-02-19 11:29 - 00380416 _____ () C:\Users\Blysku\Desktop\xh090ldr.exe 2015-02-19 11:39 - 2015-02-19 11:28 - 01126400 _____ (Farbar) C:\Users\Blysku\Desktop\FRST.exe 2015-02-19 11:38 - 2015-02-19 11:38 - 02078692 _____ () C:\Users\Blysku\Downloads\Desktop.rar 2015-02-19 11:10 - 2015-02-19 11:14 - 00000000 ____D () C:\AdwCleaner 2015-02-19 11:10 - 2015-02-19 11:10 - 02126848 _____ () C:\Users\Blysku\Downloads\adwcleaner_4.111.exe 2015-02-19 11:06 - 2015-02-19 11:07 - 00700120 _____ (Web Software Generic ) C:\Users\Blysku\Downloads\AdwCleaner 4.109.exe 2015-02-19 11:03 - 2015-02-19 11:03 - 00000000 ____D () C:\Program Files\Common Files\Java 2015-02-19 08:35 - 2014-05-14 17:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-02-19 08:35 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-02-19 08:35 - 2014-05-14 17:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-02-19 08:35 - 2014-05-14 17:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-02-19 08:35 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-02-19 08:35 - 2014-05-14 17:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-02-19 08:35 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-02-19 08:35 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-02-19 08:35 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-02-18 10:11 - 2015-02-18 10:11 - 00001583 _____ () C:\Users\Blysku\Desktop\GG dysk.lnk 2015-02-18 10:11 - 2015-02-18 10:11 - 00000000 ___SD () C:\Users\Blysku\GG dysk 2015-02-18 10:10 - 2015-02-19 10:41 - 00000000 ____D () C:\Users\Blysku\AppData\Roaming\GG 2015-02-18 10:10 - 2015-02-18 10:11 - 00000000 ____D () C:\Users\Blysku\AppData\Local\GG 2015-02-18 10:10 - 2015-02-18 10:10 - 00001149 _____ () C:\Users\Blysku\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenFM.lnk 2015-02-18 10:10 - 2015-02-18 10:10 - 00001141 _____ () C:\Users\Blysku\Desktop\OpenFM.lnk 2015-02-18 10:10 - 2015-02-18 10:10 - 00001110 _____ () C:\Users\Blysku\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk 2015-02-18 10:10 - 2015-02-18 10:10 - 00001102 _____ () C:\Users\Blysku\Desktop\GG.lnk 2015-02-18 10:10 - 2015-02-18 10:10 - 00000000 ____D () C:\Users\Blysku\AppData\Local\OpenFM 2015-02-18 10:08 - 2015-02-18 10:08 - 00395056 _____ () C:\Users\Blysku\Downloads\gg-install.exe 2015-02-17 12:46 - 2015-02-17 12:47 - 00700120 _____ (Web Software Generic ) C:\Users\Blysku\Downloads\Avidemux 2.6.7.exe 2015-02-17 12:37 - 2015-02-17 12:37 - 00000000 ____D () C:\Users\Blysku\AppData\Local\Ashampoo Movie Studio 2015-02-17 12:34 - 2015-02-17 12:34 - 173559640 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Blysku\Downloads\ashampoo_movie_studio_sm.exe 2015-02-17 12:32 - 2015-02-19 08:33 - 00000000 ____D () C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce 2015-02-17 12:32 - 2015-02-19 08:33 - 00000000 ____D () C:\Program Files\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce 2015-02-17 12:22 - 2015-02-17 12:22 - 01292136 _____ (Microsoft Corporation) C:\Users\Blysku\Downloads\wlsetup-web(2).exe 2015-02-17 12:22 - 2015-02-17 12:22 - 00000000 ____D () C:\Users\Blysku\AppData\Local\{69B37D62-5CE9-41D3-A477-DC9884E93C3D} 2015-02-17 12:20 - 2015-02-17 12:20 - 01239752 _____ (Microsoft Corporation) C:\Users\Blysku\Downloads\wlsetup-web(1).exe 2015-02-17 12:12 - 2015-02-17 12:12 - 00000000 ____D () C:\Users\Blysku\AppData\Local\Windows Live 2015-02-17 12:12 - 2015-02-17 12:12 - 00000000 ____D () C:\Program Files\Common Files\Windows Live 2015-02-17 12:10 - 2015-02-17 12:11 - 01245896 _____ (Microsoft Corporation) C:\Users\Blysku\Downloads\wlsetup-web.exe 2015-02-06 17:18 - 2015-02-06 17:18 - 05675402 _____ (MARKUSPORT ) C:\Users\Blysku\Downloads\trener_setup_2.02.001.exe 2015-02-06 17:18 - 2015-02-06 17:18 - 00000000 ____D () C:\Windows\Downloaded Installations 2015-02-06 17:12 - 2015-02-06 17:12 - 00000000 ____D () C:\Users\Blysku\Downloads\Nowy folder 2015-02-06 11:21 - 2015-02-06 11:22 - 01722880 _____ () C:\Users\Blysku\Downloads\Gry_kształtujące_wytrzymałość.ppt 2015-01-28 11:16 - 2015-01-28 11:16 - 00000000 ____D () C:\ProgramData\McAfee 2015-01-24 14:38 - 2015-01-24 14:38 - 00001148 _____ () C:\Users\Blysku\Desktop\Asterix & Obelix XXL.lnk 2015-01-24 14:38 - 2015-01-24 14:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atari 2015-01-24 14:36 - 2015-01-24 14:36 - 00000000 ____D () C:\Program Files\Atari 2015-01-22 08:07 - 2015-01-22 08:20 - 847813725 _____ () C:\Users\Blysku\Downloads\Władysław Tatarkiewicz Historia filozofii Tom 3 Audiobook PL.rar 2015-01-22 08:06 - 2015-01-22 08:17 - 511058131 _____ () C:\Users\Blysku\Downloads\Władysław Tatarkiewicz - Historia filozofii Tom 2 Audiobook PL.rar 2015-01-22 07:43 - 2015-01-22 07:43 - 00232532 _____ () C:\Users\Blysku\Downloads\01 01 Ścieżka 1.wma 2015-01-22 07:34 - 2015-01-22 07:34 - 00000000 ____D () C:\Users\Blysku\Downloads\ANATOMAMP3 2015-01-22 07:21 - 2015-01-22 07:21 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2015-01-22 07:13 - 2015-01-22 08:08 - 00000000 ____D () C:\Users\Blysku\Desktop\Językimp3 2015-01-21 11:59 - 2015-02-06 21:19 - 00000000 ____D () C:\Users\Blysku\Desktop\KursPAKiS ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-19 11:50 - 2014-12-09 14:27 - 01624229 _____ () C:\Windows\WindowsUpdate.log 2015-02-19 11:23 - 2009-07-14 05:34 - 00021072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-02-19 11:23 - 2009-07-14 05:34 - 00021072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-02-19 11:21 - 2011-04-12 06:08 - 00737480 _____ () C:\Windows\system32\perfh015.dat 2015-02-19 11:21 - 2011-04-12 06:08 - 00154136 _____ () C:\Windows\system32\perfc015.dat 2015-02-19 11:21 - 2010-11-20 22:01 - 01661232 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-02-19 11:17 - 2014-12-09 18:49 - 00000292 _____ () C:\Windows\Tasks\AutoKMS.job 2015-02-19 11:16 - 2014-12-09 18:49 - 00151552 _____ () C:\Windows\KMSEmulator.exe 2015-02-19 11:16 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-19 11:13 - 2014-12-09 15:44 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-02-19 11:04 - 2014-12-09 18:44 - 00000000 ____D () C:\Program Files\Java 2015-02-19 11:04 - 2014-12-09 18:37 - 00000000 ____D () C:\ProgramData\Oracle 2015-02-19 11:03 - 2014-12-09 18:44 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2015-02-19 11:00 - 2014-12-29 17:36 - 00000000 ____D () C:\Users\Blysku\AppData\Roaming\DAEMON Tools Lite 2015-02-19 09:10 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL 2015-02-18 16:08 - 2014-12-09 16:08 - 00000268 _____ () C:\Windows\Tasks\DriverDoc_UPDATES.job 2015-02-18 10:11 - 2014-12-10 13:44 - 00000000 ____D () C:\Users\Blysku 2015-02-17 13:09 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET 2015-02-17 12:41 - 2014-12-10 10:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo 2015-02-17 12:36 - 2014-12-10 10:08 - 00000000 ____D () C:\ProgramData\ashampoo 2015-02-17 12:16 - 2014-12-09 18:25 - 00000000 ____D () C:\Program Files\Microsoft.NET 2015-02-16 16:02 - 2015-01-17 12:15 - 00000000 ____D () C:\Users\Blysku\AppData\Local\Crazy Chicken Tales 2015-02-14 14:35 - 2014-12-10 13:45 - 00000000 ____D () C:\Users\Blysku\Documents\FIFA 12 2015-02-12 08:54 - 2009-07-14 03:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2015-02-04 20:16 - 2014-12-09 15:44 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2015-02-04 20:16 - 2014-12-09 15:44 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2015-01-28 11:16 - 2014-12-11 11:15 - 00000000 ____D () C:\Users\Blysku\AppData\Local\Adobe 2015-01-28 11:03 - 2014-12-09 15:34 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2015-01-25 13:31 - 2014-12-10 13:44 - 00000000 ____D () C:\Users\Blysku\AppData\Local\VirtualStore 2015-01-22 07:43 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Public\Libraries ==================== Files in the root of some directories ======= 2015-01-17 09:57 - 2015-01-17 09:57 - 0001138 _____ () C:\Program Files\MoorHuhnKartThunder.lnk Some content of TEMP: ==================== C:\Users\Blysku\AppData\Local\Temp\jre-8u31-windows-au.exe C:\Users\Blysku\AppData\Local\Temp\Quarantine.exe C:\Users\Blysku\AppData\Local\Temp\sqlite3.dll C:\Users\Błysku\AppData\Local\Temp\bitool.dll C:\Users\Błysku\AppData\Local\Temp\ose00000.exe C:\Users\Błysku\AppData\Local\Temp\SRLDetectionLibrary7100477087581110347.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-02-14 09:55 ==================== End Of Log ============================