Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:30-07-2015 Ran by Grzegorz (administrator) on GRZEGORZ-PRV (31-07-2015 11:41:58) Running from C:\Users\Grzegorz\Downloads Loaded Profiles: Grzegorz (Available Profiles: Grzegorz) Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Polski (Polska) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe () C:\Program Files (x86)\Common Files\Microsoft\Care Suite\ADUService\ADUService.exe () C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe (F-Secure Corporation) C:\Program Files (x86)\F-Secure\Anti-Virus\fsgk32st.exe (F-Secure Corporation) C:\Program Files (x86)\F-Secure\common\FSMA32.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (F-Secure Corporation) C:\Program Files (x86)\F-Secure\Anti-Virus\fsgk32.exe (F-Secure Corporation) C:\Program Files (x86)\F-Secure\common\FSHDLL32.EXE (Wireless) C:\Program Files (x86)\Wireless\WPS\jswpbapi.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe (F-Secure Corporation) C:\Program Files (x86)\F-Secure\common\FSHDLL64.EXE (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (PC Tools) C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (F-Secure Corporation) C:\Program Files (x86)\F-Secure\ORSP Client\fsorsp.exe (F-Secure Corporation) C:\Program Files (x86)\F-Secure\FWES\program\fsdfwd.exe (F-Secure Corporation) C:\Program Files (x86)\F-Secure\common\FNRB32.exe (F-Secure Corporation) C:\Program Files (x86)\F-Secure\common\FIH32.exe (F-Secure Corporation) C:\Program Files (x86)\F-Secure\Anti-Virus\fssm32.exe (F-Secure Corporation) C:\Program Files (x86)\F-Secure\Anti-Virus\fsav32.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe () C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe (Spotify Ltd) C:\Users\Grzegorz\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (F-Secure Corporation) C:\Program Files (x86)\F-Secure\common\FSM32.EXE (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2631824 2015-07-14] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2621440 2010-02-09] (Brother Industries, Ltd.) HKLM-x32\...\Run: [F-Secure Manager] => C:\Program Files (x86)\F-Secure\Common\FSM32.EXE [301680 2009-11-26] (F-Secure Corporation) HKLM-x32\...\Run: [F-Secure TNB] => C:\Program Files (x86)\F-Secure\FSGUI\TNBUtil.exe [1653360 2009-11-26] (F-Secure Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1 HKLM\...\Policies\Explorer: [NoResolveSearch] 0 HKU\S-1-5-21-1558215053-3341806664-3877457628-1000\...\Run: [ccleaner] => C:\Program Files\CCleaner\CCleaner64.exe [3527992 2011-04-01] (Piriform Ltd) HKU\S-1-5-21-1558215053-3341806664-3877457628-1000\...\Run: [OscarX7Mouse5Mode] => C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe [3571712 2013-02-01] () HKU\S-1-5-21-1558215053-3341806664-3877457628-1000\...\Run: [Spotify Web Helper] => C:\Users\Grzegorz\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2014-12-30] (Spotify Ltd) BootExecute: autocheck autochk * ROBoot64 \??\C:\Windows\system32\ASOROSet.bin GroupPolicy: Group Policy on Chrome detected <======= ATTENTION GroupPolicy-x32: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-1558215053-3341806664-3877457628-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-1558215053-3341806664-3877457628-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://msn.gazeta.pl/msn/0,0.html?pc=UP97&ocid=UP97DHP HKU\S-1-5-21-1558215053-3341806664-3877457628-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch URLSearchHook: HKLM-x32 - Default Value = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D} SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-1558215053-3341806664-3877457628-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.bing.com/search?FORM=UP97DF&PC=UP97&q={searchTerms}&src=IE-SearchBox BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-29] (Oracle Corporation) BHO-x32: Pomocnik logowania za pomocą konta Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Browsing Protection Class -> {C6867EB7-8350-4856-877F-93CF8AE3DC9C} -> C:\Program Files (x86)\F-Secure\NRS\iescript\baselitmus.dll [2015-07-31] (F-Secure Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-29] (Oracle Corporation) Toolbar: HKLM-x32 - Browsing Protection Toolbar - {265EEE8E-3228-44D3-AEA5-F7FDF5860049} - C:\Program Files (x86)\F-Secure\NRS\iescript\baselitmus.dll [2015-07-31] (F-Secure Corporation) DPF: HKLM-x32 {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} http://download.gigabyte.com.tw/object/Dldrv.ocx DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2013-02-26] (Skype Technologies) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation) DefaultPrefix-x32: => http://spacesearch.ru/?ri=1&rsid=332cf4a9208253ec0a62136604cb12fa&q= <==== ATTENTION Winsock: Catalog9 01 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp.dll [187504 2015-07-31] (F-Secure Corporation) Winsock: Catalog9 02 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp.dll [187504 2015-07-31] (F-Secure Corporation) Winsock: Catalog9 03 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp.dll [187504 2015-07-31] (F-Secure Corporation) Winsock: Catalog9 04 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp.dll [187504 2015-07-31] (F-Secure Corporation) Winsock: Catalog9 05 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp.dll [187504 2015-07-31] (F-Secure Corporation) Winsock: Catalog9 06 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp.dll [187504 2015-07-31] (F-Secure Corporation) Winsock: Catalog9 07 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp.dll [187504 2015-07-31] (F-Secure Corporation) Winsock: Catalog9 08 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp.dll [187504 2015-07-31] (F-Secure Corporation) Winsock: Catalog9 09 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp.dll [187504 2015-07-31] (F-Secure Corporation) Winsock: Catalog9 10 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp.dll [187504 2015-07-31] (F-Secure Corporation) Winsock: Catalog9 21 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp.dll [187504 2015-07-31] (F-Secure Corporation) Winsock: Catalog9-x64 01 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp_x64.dll [217712 2015-07-31] (F-Secure Corporation) Winsock: Catalog9-x64 02 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp_x64.dll [217712 2015-07-31] (F-Secure Corporation) Winsock: Catalog9-x64 03 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp_x64.dll [217712 2015-07-31] (F-Secure Corporation) Winsock: Catalog9-x64 04 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp_x64.dll [217712 2015-07-31] (F-Secure Corporation) Winsock: Catalog9-x64 05 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp_x64.dll [217712 2015-07-31] (F-Secure Corporation) Winsock: Catalog9-x64 06 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp_x64.dll [217712 2015-07-31] (F-Secure Corporation) Winsock: Catalog9-x64 07 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp_x64.dll [217712 2015-07-31] (F-Secure Corporation) Winsock: Catalog9-x64 08 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp_x64.dll [217712 2015-07-31] (F-Secure Corporation) Winsock: Catalog9-x64 09 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp_x64.dll [217712 2015-07-31] (F-Secure Corporation) Winsock: Catalog9-x64 10 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp_x64.dll [217712 2015-07-31] (F-Secure Corporation) Winsock: Catalog9-x64 21 C:\Program Files (x86)\F-Secure\FSPS\program\fslsp_x64.dll [217712 2015-07-31] (F-Secure Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{77A49725-B28B-467B-AE68-C5C760A26079}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{80D28283-8DED-4EB2-89B4-29B26A208CA0}: [NameServer] 192.168.0.1,194.204.159.1 Tcpip\..\Interfaces\{80D28283-8DED-4EB2-89B4-29B26A208CA0}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{94C07693-22AC-4CFA-AB3B-901B1AF559F8}: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Grzegorz\AppData\Roaming\Mozilla\Firefox\Profiles\hbiuk2f0.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll [2011-12-18] () FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-29] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-29] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-29] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2015-04-05] (Nexon) FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll [2014-11-19] ( ) FF Plugin-x32: @nosltd.com/getPlus+(R),version=1.6.2.97 -> C:\Program Files (x86)\NOS\bin\np_gp.dll [2010-11-29] (NOS Microsystems Ltd.) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-06-29] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-06-29] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-31] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-31] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-1558215053-3341806664-3877457628-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Grzegorz\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-1558215053-3341806664-3877457628-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2012-10-17] (Ubisoft) FF Extension: Test Pilot - C:\Users\Grzegorz\AppData\Roaming\Mozilla\Firefox\Profiles\hbiuk2f0.default\Extensions\testpilot@labs.mozilla.com.xpi [2012-07-21] FF HKLM-x32\...\Firefox\Extensions: [litmus-ff@f-secure.com] - C:\Program Files (x86)\F-Secure\NRS\litmus-ff@f-secure.com FF Extension: Browsing Protection - C:\Program Files (x86)\F-Secure\NRS\litmus-ff@f-secure.com [2015-02-11] FF Extension: No Name - C:\Program Files (x86)\Aurora\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [not found] Chrome: ======= CHR Profile: C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Profile 2 CHR Extension: (Google Slides) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-31] CHR Extension: (Dr.Web Anti-Virus Link Checker) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aleggpabliehgbeagmfhnodcijcmbonb [2015-07-31] CHR Extension: (Google Docs) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-31] CHR Extension: (Google Drive) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-31] CHR Extension: (YouTube) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-07-31] CHR Extension: (Google Search) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-31] CHR Extension: (Google Sheets) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-31] CHR Extension: (Chrome Web Store Payments) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-31] CHR Extension: (Gmail) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-31] (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 ADUServiceNSRT; C:\Program Files (x86)\Common Files\Microsoft\Care Suite\ADUService\ADUService.exe [94832 2015-03-02] () S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [441216 2015-05-10] () S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [File not signed] R2 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] () [File not signed] R2 F-Secure Gatekeeper Handler Starter; C:\Program Files (x86)\F-Secure\Anti-Virus\fsgk32st.exe [219760 2009-11-26] (F-Secure Corporation) R3 F-Secure Network Request Broker; C:\Program Files (x86)\F-Secure\Common\FNRB32.EXE [166512 2009-11-26] (F-Secure Corporation) R3 FSDFWD; C:\Program Files (x86)\F-Secure\FWES\Program\fsdfwd.exe [844400 2009-11-26] (F-Secure Corporation) R2 FSMA; C:\Program Files (x86)\F-Secure\Common\FSMA32.EXE [186992 2009-11-26] (F-Secure Corporation) R3 FSORSPClient; C:\Program Files (x86)\F-Secure\ORSP Client\fsorsp.exe [60456 2015-03-09] (F-Secure Corporation) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155216 2015-07-14] (NVIDIA Corporation) R2 jswpbapi; C:\Program Files (x86)\Wireless\WPS\jswpbapi.exe [265216 2010-03-16] (Wireless) [File not signed] S3 jswpsapi; C:\Program Files (x86)\Wireless\WPS\jswpsapi.exe [954368 2010-03-16] (Wireless) [File not signed] R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation) S3 nosGetPlusHelper; C:\Program Files (x86)\NOS\bin\getPlus_Helper_3004.dll [58944 2010-11-29] (NOS Microsystems Ltd.) S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4160376 2011-04-25] (INCA Internet Co., Ltd.) [File not signed] R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504 2015-07-14] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544592 2015-07-14] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1997168 2015-06-11] (Electronic Arts) S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1001200 2015-07-19] (Overwolf LTD) R2 PCToolsSSDMonitorSvc; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [583640 2009-11-25] (PC Tools) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-02-20] () R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [32768 2010-04-29] (Google Inc) S3 asusgsb; C:\Windows\System32\drivers\asusgsb.sys [17792 2008-09-08] (ASUSTeK Computer Inc.) [File not signed] R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-09-05] () R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [254528 2011-01-31] (DT Soft Ltd) S1 EIO_XP; C:\Windows\system32\drivers\EIO64_XP.sys [15360 2006-06-14] (ASUSTeK Computer Inc.) [File not signed] S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-07-30] () S4 F-Secure Filter; C:\Program Files (x86)\F-Secure\Anti-Virus\Win2K\FSfilter.sys [39792 2009-11-26] () R3 F-Secure Gatekeeper; C:\Program Files (x86)\F-Secure\Anti-Virus\minifilter\fsgk.sys [202176 2015-07-31] (F-Secure Corporation) R1 F-Secure HIPS; C:\Program Files (x86)\F-Secure\HIPS\drivers\fshs.sys [57936 2009-11-26] (F-Secure Corporation) S4 F-Secure Recognizer; C:\Program Files (x86)\F-Secure\Anti-Virus\Win2K\FSrec.sys [25200 2009-11-26] () R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [55336 2015-05-26] () R0 fsbts; C:\Windows\SysWOW64\Drivers\fsbts.sys [33408 2015-02-11] () R1 FSES; C:\Windows\System32\drivers\fses.sys [44496 2009-11-26] (F-Secure Corporation) R1 FSFW; C:\Windows\System32\drivers\fsdfw.sys [92176 2009-11-26] (F-Secure Corporation) R1 fsvista; C:\Program Files (x86)\F-Secure\Anti-Virus\minifilter\fsvista.sys [14904 2009-11-26] () R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-09-05] () R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-07-31] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation) S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-02] (INCA Internet Co., Ltd.) [File not signed] R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-07-14] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47976 2015-07-03] (NVIDIA Corporation) S3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [52736 2009-07-23] (Realtek Semiconductor Corporation ) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-07-31 11:41 - 2015-07-31 11:42 - 00023444 _____ C:\Users\Grzegorz\Downloads\FRST.txt 2015-07-31 11:41 - 2015-07-31 11:41 - 00000000 ____D C:\Users\Grzegorz\Downloads\FRST-OlderVersion 2015-07-31 10:48 - 2015-07-31 11:42 - 00000000 ____D C:\FRST 2015-07-31 10:48 - 2015-07-31 11:41 - 02168832 _____ (Farbar) C:\Users\Grzegorz\Downloads\FRST64.exe 2015-07-31 10:40 - 2015-07-31 10:42 - 168548968 _____ C:\Users\Grzegorz\Downloads\xn575xg9.exe 2015-07-31 10:24 - 2015-07-31 10:24 - 00000000 ____D C:\Device 2015-07-31 09:47 - 2015-07-31 10:24 - 00000000 ____D C:\Users\Grzegorz\Doctor Web 2015-07-31 09:44 - 2015-07-31 09:45 - 168545128 _____ C:\Users\Grzegorz\Downloads\46du7sfr.exe 2015-07-31 09:04 - 2015-07-31 09:04 - 00602112 _____ (OldTimer Tools) C:\Users\Grzegorz\Downloads\OTL 3.2.69.0.exe 2015-07-31 08:55 - 2015-07-31 09:38 - 00000000 ____D C:\Users\Grzegorz\Desktop\OTL 3 2015-07-31 08:40 - 2015-07-31 11:14 - 00031732 ____N C:\Windows\WindowsUpdate.log 2015-07-31 06:33 - 2015-07-31 06:33 - 00931408 _____ (Google Inc.) C:\Users\Grzegorz\Downloads\ChromeSetup (2).exe 2015-07-31 00:55 - 2015-07-31 00:55 - 00001144 _____ C:\Users\Grzegorz\Desktop\Live PC Help.lnk 2015-07-31 00:43 - 2015-07-31 00:43 - 03237248 _____ (Enigma Software Group USA, LLC.) C:\Users\Grzegorz\Downloads\sh-remover.exe 2015-07-31 00:37 - 2015-07-31 00:55 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\Systweak 2015-07-31 00:32 - 2015-07-31 00:32 - 00931408 _____ (Google Inc.) C:\Users\Grzegorz\Downloads\ChromeSetup (1).exe 2015-07-31 00:27 - 2015-07-31 11:39 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-07-31 00:27 - 2015-07-31 11:38 - 00001052 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-07-31 00:27 - 2015-07-31 00:33 - 00004048 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-07-31 00:27 - 2015-07-31 00:33 - 00003796 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-07-31 00:27 - 2015-07-31 00:33 - 00002265 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-07-31 00:27 - 2015-07-31 00:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-07-30 23:58 - 2015-07-30 23:58 - 00033529 _____ C:\ComboFix.txt 2015-07-30 23:28 - 2015-07-30 23:46 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\Enigma Software Group 2015-07-30 23:28 - 2015-07-30 23:28 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys 2015-07-30 23:28 - 2015-07-30 23:28 - 00000000 ____D C:\sh4ldr 2015-07-30 18:52 - 2015-07-30 18:52 - 00000008 __RSH C:\Users\Grzegorz\ntuser.pol 2015-07-30 18:45 - 2015-07-31 00:21 - 00000000 ____D C:\adb 2015-07-30 18:42 - 2015-07-30 18:42 - 09560052 _____ () C:\Users\Grzegorz\Desktop\adb-setup-1.3.exe 2015-07-30 18:13 - 2015-07-30 18:14 - 01305804 _____ C:\Users\Grzegorz\Desktop\com.alephzain.framaroot_1.9.3_free-www.apkhere.com.apk 2015-07-29 19:06 - 2015-06-29 21:07 - 00606920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2015-07-29 19:01 - 2015-06-30 00:53 - 31514312 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2015-07-29 19:01 - 2015-06-30 00:53 - 24200336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2015-07-29 19:01 - 2015-06-30 00:53 - 22992072 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2015-07-29 19:01 - 2015-06-30 00:53 - 17559432 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2015-07-29 19:01 - 2015-06-30 00:53 - 15294280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2015-07-29 19:01 - 2015-06-30 00:53 - 13916600 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2015-07-29 19:01 - 2015-06-30 00:53 - 13828032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2015-07-29 19:01 - 2015-06-30 00:53 - 12896400 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2015-07-29 19:01 - 2015-06-30 00:53 - 11272240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2015-07-29 19:01 - 2015-06-30 00:53 - 11209192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2015-07-29 19:01 - 2015-06-30 00:53 - 04245832 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2015-07-29 19:01 - 2015-06-30 00:53 - 03986632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2015-07-29 19:01 - 2015-06-30 00:53 - 01907400 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434174.dll 2015-07-29 19:01 - 2015-06-30 00:53 - 01557832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434174.dll 2015-07-29 19:01 - 2015-06-30 00:53 - 00945480 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2015-07-29 19:01 - 2015-06-30 00:53 - 00907464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2015-07-29 19:01 - 2015-06-30 00:53 - 00903496 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2015-07-29 19:01 - 2015-06-30 00:53 - 00870032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2015-07-29 18:33 - 2015-07-03 06:28 - 00065896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2015-07-29 18:33 - 2015-07-03 06:28 - 00047976 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2015-07-28 19:13 - 2015-07-28 19:13 - 00001035 _____ C:\Users\Grzegorz\Desktop\PhotoScape.lnk 2015-07-28 19:13 - 2015-07-28 19:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape 2015-07-28 19:13 - 2015-07-28 19:13 - 00000000 ____D C:\Program Files (x86)\PhotoScape 2015-07-26 17:48 - 2015-07-26 14:54 - 159087831 _____ C:\Users\Grzegorz\Desktop\WP_20150726_003.mp4 2015-07-26 11:41 - 2015-07-26 11:41 - 00014876 _____ C:\Users\Grzegorz\Downloads\Sep 2012 [HDRip][XviD-QrN] [FILM PL] [marcinc33][Torrenty.org].torrent 2015-07-21 11:05 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2015-07-21 11:05 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2015-07-21 11:05 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2015-07-21 11:05 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2015-07-21 11:05 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2015-07-21 11:05 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2015-07-21 11:05 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2015-07-21 11:05 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2015-07-21 11:05 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2015-07-21 11:05 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2015-07-18 22:33 - 2015-07-18 22:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-07-17 15:15 - 2015-07-17 15:15 - 00000000 ____D C:\Users\Grzegorz\Desktop\Liberty_dokumenty 2015-07-16 15:52 - 2015-07-16 15:52 - 00070656 _____ C:\Users\Grzegorz\AppData\Local\GDIPFONTCACHEV1.DAT 2015-07-16 15:48 - 2015-07-22 16:07 - 00317832 _____ C:\Windows\system32\FNTCACHE.DAT 2015-07-15 09:26 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-07-15 09:26 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-07-15 09:26 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-07-15 09:26 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-07-15 09:26 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-07-15 09:26 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-07-15 09:26 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-07-15 09:26 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-07-15 09:26 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-07-15 09:26 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-07-15 09:26 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-07-15 09:26 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-07-15 09:26 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-07-15 09:26 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-07-15 09:26 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-07-15 09:26 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-07-15 09:26 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-07-15 09:26 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-07-15 09:26 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-07-15 09:26 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll 2015-07-15 09:26 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll 2015-07-15 09:25 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-07-15 09:25 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-07-15 09:25 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-07-15 09:25 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-07-15 09:25 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-07-15 09:25 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-07-15 09:25 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-07-15 09:25 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-07-15 09:25 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-07-15 09:25 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-07-15 09:25 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-07-15 09:25 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-07-15 09:25 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-07-15 09:25 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-07-15 09:25 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-07-15 09:25 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-07-15 09:25 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-07-15 09:25 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-07-15 09:25 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-07-15 09:25 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-07-15 09:25 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-07-15 09:25 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-07-15 09:25 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-07-15 09:25 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-07-15 09:25 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-07-15 09:25 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-07-15 09:25 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-07-15 09:25 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-07-15 09:25 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-07-15 09:25 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-07-15 09:25 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-07-15 09:25 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-07-15 09:25 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-07-15 09:25 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-07-15 09:25 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-07-15 09:25 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-07-15 09:25 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-07-15 09:25 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-07-15 09:25 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-07-15 09:25 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-07-15 09:25 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-07-15 09:25 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-07-15 09:25 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-07-15 09:25 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-07-15 09:24 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2015-07-15 09:24 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2015-07-15 09:24 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-07-15 09:24 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-07-15 09:24 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-07-15 09:24 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-07-15 09:24 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-07-15 09:24 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-07-15 09:24 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-07-15 09:24 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-07-15 09:24 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-07-15 09:24 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-07-15 09:24 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-07-15 09:24 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-07-15 09:24 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-07-15 09:24 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2015-07-15 09:24 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-07-15 09:24 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-07-15 09:24 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-07-15 09:24 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-07-15 09:24 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-07-15 09:24 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-07-15 09:24 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-07-15 09:24 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-07-15 09:24 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-07-15 09:24 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-07-15 09:24 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-07-15 09:24 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-07-15 09:24 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2015-07-15 09:24 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-07-15 09:24 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-07-15 09:24 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-07-15 09:24 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-07-15 09:24 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-07-15 09:24 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-07-15 09:24 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-07-15 09:24 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-07-15 09:24 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-07-15 09:24 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2015-07-15 09:24 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-07-15 09:24 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2015-07-15 09:24 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-07-15 09:24 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-07-15 09:24 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2015-07-15 09:24 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2015-07-15 09:24 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2015-07-15 09:24 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2015-07-15 09:24 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2015-07-15 09:24 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2015-07-15 09:24 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe 2015-07-15 09:24 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll 2015-07-15 09:24 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll 2015-07-15 09:24 - 2015-06-11 19:56 - 01112576 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2015-07-15 09:24 - 2015-06-11 19:16 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2015-07-15 09:24 - 2015-06-11 19:15 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2015-07-14 23:36 - 2015-07-14 23:37 - 00000036 _____ C:\Users\Grzegorz\Desktop\adres Ilony.txt 2015-07-13 13:31 - 2015-07-13 13:31 - 00931408 _____ (Google Inc.) C:\Users\Grzegorz\Desktop\ChromeSetup.exe 2015-07-13 13:30 - 2015-07-31 11:39 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-07-13 13:29 - 2015-07-13 13:29 - 00001106 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2015-07-13 13:29 - 2015-07-13 13:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2015-07-13 13:29 - 2015-07-13 13:29 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2015-07-13 13:29 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-07-13 13:29 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-07-13 13:29 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-07-13 13:25 - 2015-07-13 13:29 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\2958563E.sys ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-07-31 11:39 - 2011-01-10 18:34 - 00000000 ____D C:\Users\Grzegorz 2015-07-31 11:18 - 2009-07-14 06:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-07-31 11:18 - 2009-07-14 06:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-07-31 11:10 - 2011-01-12 09:27 - 00000000 ____D C:\ProgramData\NVIDIA 2015-07-31 11:10 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-07-31 08:59 - 2015-06-27 19:33 - 00135680 ___SH C:\Users\Grzegorz\Desktop\Thumbs.db 2015-07-31 00:58 - 2011-01-10 18:54 - 00000000 ____D C:\Program Files (x86)\F-Secure 2015-07-31 00:54 - 2014-10-28 23:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Disk Cleaner 2015-07-31 00:54 - 2014-10-25 21:12 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\Wise Disk Cleaner 2015-07-31 00:52 - 2011-01-10 18:55 - 00000000 ____D C:\ProgramData\fssg 2015-07-31 00:27 - 2011-01-13 08:22 - 00000000 ____D C:\Program Files (x86)\Google 2015-07-31 00:27 - 2011-01-10 20:49 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Google 2015-07-31 00:21 - 2015-05-25 19:42 - 00000000 ____D C:\Program Files\DIFX 2015-07-31 00:21 - 2014-10-29 15:04 - 00000000 ____D C:\Users\Grzegorz\Desktop\czyszczenie 2015-07-31 00:21 - 2012-11-23 13:19 - 00000000 ____D C:\Windows\erdnt 2015-07-31 00:21 - 2011-03-16 11:50 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\PhotoScape 2015-07-31 00:21 - 2011-01-13 14:55 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Apps\2.0 2015-07-31 00:21 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy 2015-07-31 00:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy 2015-07-31 00:18 - 2012-10-13 12:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-07-31 00:18 - 2012-02-22 00:00 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2015-07-31 00:18 - 2011-01-12 09:25 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2015-07-31 00:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help 2015-07-31 00:04 - 2014-10-29 01:11 - 00000000 ____D C:\AdwCleaner 2015-07-31 00:01 - 2011-05-18 18:23 - 00000000 ____D C:\ProgramData\TEMP 2015-07-30 23:58 - 2012-11-23 13:20 - 00000000 ____D C:\Qoobox 2015-07-30 23:55 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2015-07-30 23:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2015-07-30 20:56 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\Offline Web Pages 2015-07-30 18:58 - 2011-01-13 14:55 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Deployment 2015-07-30 17:29 - 2014-11-05 19:05 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\foobar2000 2015-07-30 17:24 - 2013-03-08 09:55 - 00000000 ____D C:\Users\Grzegorz\Desktop\Muzyka 2015-07-30 17:21 - 2011-01-10 20:55 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2015-07-30 17:18 - 2015-04-08 19:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live 2015-07-29 19:07 - 2013-12-03 16:53 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\NVIDIA Corporation 2015-07-29 19:07 - 2012-07-20 13:54 - 00000000 ____D C:\Temp 2015-07-29 18:34 - 2011-01-12 09:26 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2015-07-28 19:19 - 2014-05-15 08:34 - 00000000 ____D C:\Users\Grzegorz\Desktop\DCIM 2015-07-28 19:11 - 2012-07-09 07:32 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\XnView 2015-07-27 20:12 - 2013-08-31 20:03 - 00000000 ____D C:\Program Files (x86)\Overwolf 2015-07-27 15:56 - 2009-07-14 07:08 - 00032604 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-07-26 17:20 - 2014-07-09 12:52 - 00000000 ____D C:\Program Files (x86)\Steam 2015-07-26 11:54 - 2011-01-11 17:44 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\uTorrent 2015-07-22 16:37 - 2014-10-13 09:22 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2015-07-19 18:29 - 2009-07-14 19:55 - 00765112 _____ C:\Windows\system32\perfh015.dat 2015-07-19 18:29 - 2009-07-14 19:55 - 00168500 _____ C:\Windows\system32\perfc015.dat 2015-07-19 18:29 - 2009-07-14 07:13 - 01744994 _____ C:\Windows\system32\PerfStringBackup.INI 2015-07-19 06:43 - 2013-06-05 16:14 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\TS3Client 2015-07-18 22:33 - 2014-08-07 16:04 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk 2015-07-18 22:33 - 2014-08-07 16:04 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-07-18 22:33 - 2013-01-09 21:02 - 00000000 ____D C:\ProgramData\Skype 2015-07-17 15:12 - 2013-02-09 14:58 - 00000404 _____ C:\Windows\BRWMARK.INI 2015-07-16 15:42 - 2014-10-29 23:50 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2015-07-16 13:09 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2015-07-16 08:09 - 2015-05-14 19:47 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2015-07-15 10:51 - 2013-08-14 16:24 - 00000000 ____D C:\Windows\system32\MRT 2015-07-14 21:06 - 2015-05-05 14:40 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2015-07-14 21:06 - 2013-12-03 16:53 - 01423120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2015-07-14 21:05 - 2015-05-05 14:40 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2015-07-14 21:05 - 2013-12-03 16:53 - 01710056 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2015-07-12 22:12 - 2013-11-21 10:00 - 00000000 ____D C:\Users\Grzegorz\Desktop\MAMA OPŁATY 2015-07-09 20:00 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2015-07-03 08:43 - 2011-01-11 20:46 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-07-03 06:28 - 2013-12-18 12:49 - 00069992 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2015-07-01 19:05 - 2012-09-14 18:31 - 00103736 _____ C:\Windows\SysWOW64\PnkBstrB.exe 2015-07-01 19:05 - 2012-09-14 18:31 - 00103736 _____ C:\Windows\SysWOW64\PnkBstrB.ex0 ==================== Files in the root of some directories ======= 2011-01-17 02:29 - 2014-11-10 11:23 - 0000627 _____ () C:\Users\Grzegorz\AppData\Roaming\burnaware.ini 2012-08-10 09:14 - 2012-08-10 12:44 - 0008679 _____ () C:\Users\Grzegorz\AppData\Roaming\PStrip.bak 2012-08-10 09:15 - 2012-08-10 09:15 - 0008679 _____ () C:\Users\Grzegorz\AppData\Roaming\PStrip.bk! 2012-08-10 12:44 - 2012-08-10 09:15 - 0008679 _____ () C:\Users\Grzegorz\AppData\Roaming\PStrip.bko 2012-08-10 07:39 - 2012-08-10 12:44 - 0008679 _____ () C:\Users\Grzegorz\AppData\Roaming\PStrip.ini 2014-03-30 12:46 - 2014-03-30 12:49 - 0034816 _____ () C:\Users\Grzegorz\AppData\Roaming\RZR_00101c944d69a12836002b1ed74c.db 2011-02-20 10:01 - 2011-02-20 10:01 - 0000096 _____ () C:\Users\Grzegorz\AppData\Local\fusioncache.dat 2011-05-20 15:50 - 2011-05-20 16:02 - 0003592 _____ () C:\Users\Grzegorz\AppData\Local\HH.SAV 2011-06-23 12:28 - 2011-06-23 12:32 - 0007615 _____ () C:\Users\Grzegorz\AppData\Local\resmon.resmoncfg 2015-02-26 13:13 - 2015-02-26 13:13 - 0003186 _____ () C:\Users\Grzegorz\AppData\Local\unins000.dat 2015-02-26 13:13 - 2015-02-26 13:13 - 0011761 _____ () C:\Users\Grzegorz\AppData\Local\unins000.msg 2014-10-29 02:06 - 2014-10-29 02:06 - 0000000 _____ () C:\Users\Grzegorz\AppData\Local\{34D25A19-4E8F-47BA-A405-2E554B18B40D} ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-07-23 20:00 ==================== End of log ============================