API tools faq
paste
Advertisement
Guest User

FRST.txt

a guest
Jan 28th, 2015
19
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 26.67 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-01-2015
  2. Ran by Joseph (administrator) on JOSEPH-PC on 28-01-2015 13:36:11
  3. Running from C:\Users\Joseph\Desktop
  4. Loaded Profiles: Joseph (Available profiles: Joseph)
  5. Platform: Windows 8.1 (X64) OS Language: English (United States)
  6. Internet Explorer Version 11 (Default browser: IE)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.20\AllShareFrameworkManagerDMS.exe
  15. (Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.20\AllShareFrameworkDMS.exe
  16. (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  17. (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
  18. (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
  19. (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
  20. (Microsoft Corporation) C:\Windows\System32\dasHost.exe
  21. (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
  22. (Symantec Corporation) C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\n360.exe
  23. (Digital Delivery Networks, Inc.) C:\Program Files (x86)\DDNi\Oasis2Service\Oasis2Service.exe
  24. (Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
  25. (Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
  26. (Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\SettingsLauncher.exe
  27. (Samsung Electronics CO., LTD.) C:\ProgramData\SAMSUNG\SW Update Service\SWMAgent.exe
  28. (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
  29. (Symantec Corporation) C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\n360.exe
  30. (SAMSUNG Electronics co., LTD.) C:\ProgramData\SAMSUNG\ShutdownEvent.exe
  31. (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  32. (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
  33. (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
  34. (Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
  35. () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
  36. (Intel Corporation) C:\Windows\System32\igfxsrvc.exe
  37. (Intel Corporation) C:\Windows\System32\hkcmd.exe
  38. (Intel Corporation) C:\Windows\System32\igfxpers.exe
  39. (Crawler.com) C:\Program Files (x86)\CStart8\CStart8Tray64.exe
  40. (Microsoft Corporation) C:\Windows\System32\rundll32.exe
  41. (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
  42. (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
  43. (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
  44. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
  45. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
  46. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  47. (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
  48. (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
  49. (Microsoft Corporation) C:\Windows\System32\rundll32.exe
  50. (Apple Inc.) C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
  51. (Microsoft Corporation) C:\Windows\WinStore\WSHost.exe
  52. (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
  53. (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
  54. (Symantec Corporation) C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\cltlmh.exe
  55. (Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\msosync.exe
  56. (Digital Delivery Networks, Inc.) C:\Program Files (x86)\DDNi\Smart Advisor\CenterStage.exe
  57. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
  58.  
  59.  
  60. ==================== Registry (Whitelisted) ==================
  61.  
  62. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  63.  
  64. HKLM\...\Run: [Samsung Link] => C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe [597576 2013-10-10] (Copyright 2013 SAMSUNG)
  65. HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated)
  66. HKLM\...\Run: [Bitcasa] => C:\Program Files\Bitcasa\Bitcasa.exe [3965904 2013-06-05] ()
  67. HKLM-x32\...\Run: [CStart8] => C:\Program Files (x86)\CStart8\CStart8Tray64.exe [3135856 2014-04-14] (Crawler.com)
  68. HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
  69. Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
  70. HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [133760 2014-01-06] ( (Qualcomm®Atheros®))
  71. Startup: C:\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3C58F064F.lnk
  72. ShortcutTarget: 3C58F064F.lnk -> C:\ProgramData\F460F85C3.cpp ()
  73. SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
  74. SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\SysWow64\CbFsMntNtf3.dll (EldoS Corporation)
  75. ShellIconOverlayIdentifiers: [1EldosIconOverlay] -> {ACE3C048-4308-484E-80D9-15FD766C6929} => C:\windows\SYSTEM32\CbFsMntNtf3.dll (EldoS Corporation)
  76. ShellIconOverlayIdentifiers: [BitcasaIconOverlay] -> {A6975448-A999-49BB-B3E4-7730CF6A82C0} => C:\Program Files\Bitcasa\ExplorerMenu.dll ()
  77. ShellIconOverlayIdentifiers: [BitcasaProgressOverlay] -> {6FB8D52A-0064-45B2-B687-F596FEAD09C2} => C:\Program Files\Bitcasa\ExplorerMenu.dll ()
  78. ShellIconOverlayIdentifiers: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
  79. ShellIconOverlayIdentifiers: [OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Security Suite\Engine64\21.6.0.32\buShell.dll (Symantec Corporation)
  80. ShellIconOverlayIdentifiers: [OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Security Suite\Engine64\21.6.0.32\buShell.dll (Symantec Corporation)
  81. ShellIconOverlayIdentifiers: [OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Security Suite\Engine64\21.6.0.32\buShell.dll (Symantec Corporation)
  82. ShellIconOverlayIdentifiers-x32: [1EldosIconOverlay] -> {ACE3C048-4308-484E-80D9-15FD766C6929} => C:\windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)
  83. ShellIconOverlayIdentifiers-x32: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\windows\SysWow64\CbFsMntNtf3.dll (EldoS Corporation)
  84.  
  85. ==================== Internet (Whitelisted) ====================
  86.  
  87. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  88.  
  89. HKU\S-1-5-21-2908127871-921440657-2582812387-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://t.msn.com/
  90. HKU\S-1-5-21-2908127871-921440657-2582812387-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
  91. SearchScopes: HKU\S-1-5-21-2908127871-921440657-2582812387-1001 -> {5F0880DA-157B-4D2B-8B39-278573166784} URL =
  92. BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
  93. BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security Suite\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
  94. BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
  95. BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)
  96. BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\IPS\IPSBHO.DLL (Symantec Corporation)
  97. BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
  98. BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
  99. Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
  100. Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)
  101. Toolbar: HKU\S-1-5-21-2908127871-921440657-2582812387-1001 -> Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
  102. Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
  103. Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76
  104.  
  105. FireFox:
  106. ========
  107. FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
  108. FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
  109. FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
  110. FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  111. FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
  112. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
  113. FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  114. FF Plugin-x32: samsung.com/SamsungLinkPCPlugin -> C:\Program Files\Samsung\Samsung Link\utils\npSamsungLinkPCPlugin.dll (Samsung)
  115. FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
  116. FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF [2014-09-11]
  117. FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn
  118. FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn [2015-01-28]
  119.  
  120. Chrome:
  121. =======
  122. CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
  123. CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\Exts\Chrome.crx [2014-09-30]
  124. CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
  125. CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\Exts\Chrome.crx [2014-09-30]
  126.  
  127. ==================== Services (Whitelisted) =================
  128.  
  129. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  130.  
  131. R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [172104 2013-01-26] (Adobe Systems Incorporated)
  132. R2 AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.20\AllShareFrameworkManagerDMS.exe [404360 2013-09-30] (Samsung) [File not signed]
  133. R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [318592 2014-01-06] (Windows (R) Win 7 DDK provider)
  134. R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
  135. R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-26] (Intel(R) Corporation) [File not signed]
  136. S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-26] (Intel(R) Corporation)
  137. R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-16] (Intel Corporation)
  138. R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
  139. R2 N360; C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\N360.exe [265040 2014-09-22] (Symantec Corporation)
  140. R2 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [605768 2013-10-10] (Copyright 2013 SAMSUNG)
  141. R2 Settings Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\SettingsLauncher.exe [1592624 2013-12-10] (Samsung Electronics CO., LTD.)
  142. R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3000664 2014-08-28] (Samsung Electronics CO., LTD.)
  143. S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-21] (Microsoft Corporation)
  144. S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-21] (Microsoft Corporation)
  145. R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-01-06] (Atheros) [File not signed]
  146. S2 Winmgmt; C:\PROGRA~3\3C58F064F.zot [X]
  147.  
  148. ==================== Drivers (Whitelisted) ====================
  149.  
  150. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  151.  
  152. R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
  153. R1 BHDrvx64; C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\BASHDefs\20150106.001\BHDrvx64.sys [1622744 2015-01-06] (Symantec Corporation)
  154. R3 BTATH_HID; C:\Windows\system32\DRIVERS\btath_hid.sys [223432 2014-01-06] (Qualcomm Atheros)
  155. R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-01-06] (Qualcomm Atheros)
  156. R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
  157. R1 cbfs3; C:\windows\system32\drivers\cbfs3.sys [352448 2013-02-10] (EldoS Corporation)
  158. R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1506000.020\ccSetx64.sys [162392 2013-09-25] (Symantec Corporation)
  159. R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-12-11] (Symantec Corporation)
  160. R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-12-11] (Symantec Corporation)
  161. R1 IDSVia64; C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\IPSDefs\20150127.001\IDSvia64.sys [668888 2015-01-11] (Symantec Corporation)
  162. R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
  163. R3 NAVENG; C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\VirusDefs\20150127.020\ENG64.SYS [129752 2015-01-20] (Symantec Corporation)
  164. R3 NAVEX15; C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\VirusDefs\20150127.020\EX64.SYS [2137304 2015-01-20] (Symantec Corporation)
  165. R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-09] (Corel Corporation)
  166. R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
  167. R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1506000.020\SRTSP64.SYS [876248 2014-08-25] (Symantec Corporation)
  168. R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1506000.020\SRTSPX64.SYS [37592 2014-08-25] (Symantec Corporation)
  169. S3 ssuddmgr; C:\Windows\System32\drivers\ssuddmgr.sys [204568 2013-08-20] (DEVGURU Co., LTD.(www.devguru.co.kr))
  170. S3 ssudobex; C:\Windows\System32\drivers\ssudobex.sys [204568 2013-08-20] (DEVGURU Co., LTD.(www.devguru.co.kr))
  171. S3 ssudrmnet; C:\Windows\System32\drivers\ssudrmnet.sys [68888 2013-08-20] (DEVGURU Co., LTD.)
  172. S3 ssudserd; C:\Windows\System32\drivers\ssudserd.sys [204568 2013-08-20] (DEVGURU Co., LTD.(www.devguru.co.kr))
  173. R0 SymDS; C:\Windows\System32\drivers\N360x64\1506000.020\SYMDS64.SYS [493656 2013-09-09] (Symantec Corporation)
  174. R0 SymEFA; C:\Windows\System32\drivers\N360x64\1506000.020\SYMEFA64.SYS [1148120 2014-08-25] (Symantec Corporation)
  175. S0 SymELAM; C:\Windows\System32\drivers\N360x64\1506000.020\SymELAM.sys [23568 2013-09-09] (Symantec Corporation)
  176. R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-09-11] (Symantec Corporation)
  177. R1 SymIRON; C:\Windows\system32\drivers\N360x64\1506000.020\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)
  178. R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1506000.020\SYMNETS.SYS [593112 2014-08-25] (Symantec Corporation)
  179. S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-21] (Microsoft Corporation)
  180. S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
  181. S3 SBIOSIO; \??\C:\Users\Joseph\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys [X]
  182. S3 TVICPORT; \??\C:\windows\system32\DRIVERS\TVICPORT.SYS [X]
  183.  
  184. ==================== NetSvcs (Whitelisted) ===================
  185.  
  186. (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
  187.  
  188.  
  189. ==================== One Month Created Files and Folders ========
  190.  
  191. (If an entry is included in the fixlist, the file\folder will be moved.)
  192.  
  193. 2015-01-28 13:36 - 2015-01-28 13:36 - 00018392 _____ () C:\Users\Joseph\Desktop\FRST.txt
  194. 2015-01-28 13:32 - 2015-01-28 13:36 - 00000000 ____D () C:\FRST
  195. 2015-01-28 13:32 - 2015-01-28 13:32 - 02130432 _____ (Farbar) C:\Users\Joseph\Desktop\FRST64.exe
  196. 2015-01-28 13:15 - 2015-01-28 13:15 - 00000000 ___RD () C:\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
  197. 2015-01-26 15:36 - 2015-01-26 15:36 - 00208896 _____ () C:\ProgramData\F460F85C3.cpp
  198. 2015-01-20 17:09 - 2015-01-27 17:55 - 00000000 ____D () C:\Users\Joseph\Downloads\eo_Hand_Spanking
  199. 2015-01-20 16:26 - 2015-01-27 17:55 - 00000000 ____D () C:\Users\Joseph\Downloads\eo_myspankingroom1
  200. 2015-01-19 23:40 - 2015-01-21 17:34 - 00000000 ____D () C:\Users\Joseph\Downloads\svw
  201. 2015-01-19 13:57 - 2015-01-19 13:57 - 00000046 _____ () C:\Users\Joseph\Documents\documentkey.txt
  202. 2015-01-15 18:16 - 2015-01-16 12:49 - 00000000 ____D () C:\Users\Joseph\Downloads\eo_Spank Sinn
  203. 2015-01-15 17:51 - 2015-01-28 01:10 - 00000000 ____D () C:\Users\Joseph\AppData\Roaming\uTorrent
  204. 2015-01-13 13:59 - 2014-12-08 19:50 - 00225280 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
  205. 2015-01-13 13:59 - 2014-12-05 21:17 - 00360448 _____ (Microsoft Corporation) C:\windows\system32\ncsi.dll
  206. 2015-01-13 13:58 - 2014-12-19 00:26 - 00140800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
  207. 2015-01-13 13:58 - 2014-12-11 20:04 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
  208. 2015-01-13 13:58 - 2014-12-11 18:51 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ahcache.sys
  209. 2015-01-13 13:58 - 2014-12-08 13:42 - 00535640 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
  210. 2015-01-13 13:58 - 2014-12-08 13:42 - 00531616 _____ (Microsoft Corporation) C:\windows\system32\ci.dll
  211. 2015-01-13 13:58 - 2014-12-08 13:42 - 00448792 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll
  212. 2015-01-13 13:58 - 2014-12-08 13:42 - 00413248 _____ (Microsoft Corporation) C:\windows\system32\Faultrep.dll
  213. 2015-01-13 13:58 - 2014-12-08 13:42 - 00372408 _____ (Microsoft Corporation) C:\windows\SysWOW64\Faultrep.dll
  214. 2015-01-13 13:58 - 2014-12-08 13:42 - 00108944 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll
  215. 2015-01-13 13:58 - 2014-12-08 13:42 - 00038264 _____ (Microsoft Corporation) C:\windows\system32\WerFaultSecure.exe
  216. 2015-01-13 13:58 - 2014-12-08 13:42 - 00033584 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFaultSecure.exe
  217. 2015-01-13 13:58 - 2014-12-05 19:41 - 00391680 _____ (Microsoft Corporation) C:\windows\system32\nlasvc.dll
  218. 2015-01-13 13:58 - 2014-12-05 19:35 - 00229888 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll
  219. 2015-01-13 13:58 - 2014-10-28 22:00 - 00465320 _____ (Microsoft Corporation) C:\windows\system32\WerFault.exe
  220. 2015-01-13 13:58 - 2014-10-28 22:00 - 00139984 _____ (Microsoft Corporation) C:\windows\system32\wermgr.exe
  221. 2015-01-13 13:58 - 2014-10-28 21:52 - 00500016 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll
  222. 2015-01-13 13:58 - 2014-10-28 21:52 - 00482872 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll
  223. 2015-01-13 13:58 - 2014-10-28 21:52 - 00394120 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
  224. 2015-01-13 13:58 - 2014-10-28 21:52 - 00272248 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe
  225. 2015-01-13 13:58 - 2014-10-28 21:12 - 00413136 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFault.exe
  226. 2015-01-13 13:58 - 2014-10-28 21:12 - 00136296 _____ (Microsoft Corporation) C:\windows\SysWOW64\wermgr.exe
  227. 2015-01-13 13:58 - 2014-10-28 21:07 - 00424544 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll
  228. 2015-01-13 13:58 - 2014-10-28 21:07 - 00370424 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll
  229. 2015-01-13 13:58 - 2014-10-28 21:07 - 00344536 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll
  230. 2015-01-13 13:58 - 2014-10-28 20:44 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\werdiagcontroller.dll
  231. 2015-01-13 13:58 - 2014-10-28 19:59 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\werdiagcontroller.dll
  232. 2015-01-13 13:58 - 2014-10-28 19:24 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\nlaapi.dll
  233. 2015-01-13 13:58 - 2014-10-28 19:02 - 00911360 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
  234. 2015-01-13 13:58 - 2014-10-28 19:01 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlaapi.dll
  235.  
  236. ==================== One Month Modified Files and Folders =======
  237.  
  238. (If an entry is included in the fixlist, the file\folder will be moved.)
  239.  
  240. 2015-01-28 13:33 - 2014-07-12 21:52 - 01073398 _____ () C:\windows\WindowsUpdate.log
  241. 2015-01-28 13:27 - 2014-09-08 21:20 - 00004982 _____ () C:\windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for JOSEPH-PC-Joseph joseph-pc
  242. 2015-01-28 13:25 - 2014-07-24 00:15 - 00000000 ____D () C:\Users\Joseph\AppData\Local\CrashDumps
  243. 2015-01-28 13:15 - 2014-07-12 22:00 - 00000000 ___DO () C:\Users\Joseph\SkyDrive
  244. 2015-01-28 13:14 - 2013-08-26 22:50 - 00822800 _____ () C:\windows\PFRO.log
  245. 2015-01-28 13:14 - 2013-08-22 09:36 - 00000000 ___HD () C:\windows\ELAMBKUP
  246. 2015-01-28 13:14 - 2013-08-22 08:46 - 00023962 _____ () C:\windows\setupact.log
  247. 2015-01-28 13:14 - 2013-08-22 08:45 - 00000006 ____H () C:\windows\Tasks\SA.DAT
  248. 2015-01-28 01:16 - 2013-08-22 07:25 - 00262144 ___SH () C:\windows\system32\config\BBI
  249. 2015-01-28 01:02 - 2013-08-22 09:36 - 00000000 ____D () C:\windows\system32\sru
  250. 2015-01-27 21:03 - 2013-08-22 09:20 - 00000000 ____D () C:\windows\CbsTemp
  251. 2015-01-27 14:27 - 2014-03-24 20:14 - 00000000 ____D () C:\ProgramData\WinClon
  252. 2015-01-26 02:22 - 2014-07-12 21:57 - 00000000 ____D () C:\Users\Joseph\AppData\Local\Packages
  253. 2015-01-25 07:59 - 2013-08-22 07:25 - 00262144 ___SH () C:\windows\system32\config\ELAM
  254. 2015-01-24 14:20 - 2014-07-13 06:33 - 00714720 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
  255. 2015-01-24 14:20 - 2014-07-13 06:33 - 00106976 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
  256. 2015-01-23 14:56 - 2014-07-12 22:04 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2908127871-921440657-2582812387-1001
  257. 2015-01-23 00:45 - 2014-10-14 21:29 - 00000000 ____D () C:\Program Files (x86)\Java
  258. 2015-01-23 00:45 - 2014-07-24 20:48 - 00000000 ____D () C:\ProgramData\Oracle
  259. 2015-01-23 00:44 - 2014-10-14 21:29 - 00272296 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
  260. 2015-01-23 00:44 - 2014-10-14 21:29 - 00176552 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
  261. 2015-01-23 00:44 - 2014-10-14 21:29 - 00176552 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
  262. 2015-01-23 00:44 - 2014-10-14 21:29 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
  263. 2015-01-20 23:30 - 2013-08-22 09:36 - 00000000 ____D () C:\windows\AppReadiness
  264. 2015-01-14 02:07 - 2014-07-12 22:22 - 00000000 ____D () C:\windows\system32\MRT
  265. 2015-01-14 02:05 - 2014-07-12 22:22 - 113365784 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
  266. 2015-01-04 21:56 - 2013-08-22 09:36 - 00000000 ____D () C:\windows\system32\NDF
  267.  
  268. ==================== Files in the root of some directories =======
  269.  
  270. 2014-03-24 19:12 - 2014-03-24 19:12 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
  271. 2015-01-26 15:36 - 2015-01-26 15:36 - 0208896 _____ () C:\ProgramData\F460F85C3.cpp
  272. 2014-03-24 19:23 - 2013-02-19 01:34 - 2064264 _____ (Samsung Electronics) C:\ProgramData\MakeMarkerFile.exe
  273. 2014-03-24 19:23 - 2013-01-12 08:51 - 0003004 _____ () C:\ProgramData\MakeMarkerFile.xml
  274.  
  275. Files to move or delete:
  276. ====================
  277. C:\ProgramData\MakeMarkerFile.exe
  278. C:\Users\EasySurvey\EasySurvey.exe
  279.  
  280.  
  281. ==================== Bamital & volsnap Check =================
  282.  
  283. (There is no automatic fix for files that do not pass verification.)
  284.  
  285. C:\Windows\System32\winlogon.exe => File is digitally signed
  286. C:\Windows\System32\wininit.exe => File is digitally signed
  287. C:\Windows\explorer.exe => File is digitally signed
  288. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  289. C:\Windows\System32\svchost.exe => File is digitally signed
  290. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  291. C:\Windows\System32\services.exe => File is digitally signed
  292. C:\Windows\System32\User32.dll => File is digitally signed
  293. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  294. C:\Windows\System32\userinit.exe => File is digitally signed
  295. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  296. C:\Windows\System32\rpcss.dll => File is digitally signed
  297. C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!