API tools faq
paste
Advertisement
Guest User

FRST

a guest
Apr 28th, 2015
205
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 20.25 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-04-2015
  2. Ran by HANNO (administrator) on HANNO-PC on 28-04-2015 18:58:38
  3. Running from C:\Users\HANNO\Desktop
  4. Loaded Profiles: HANNO (Available profiles: HANNO & UpdatusUser)
  5. Platform: Windows 7 Ultimate (X64) OS Language: English (United States)
  6. Internet Explorer Version 9 (Default browser: Chrome)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  15. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
  16. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
  17. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  18. (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
  19. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
  20. (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
  21. (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
  22. (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
  23. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
  24. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  25. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  26. (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
  27. (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
  28. () C:\ProgramData\DatacardService\HWDeviceService64.exe
  29. (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
  30. () C:\Windows\SysWOW64\PnkBstrA.exe
  31. () C:\Windows\SysWOW64\PnkBstrB.exe
  32. (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
  33. (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
  34. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  35. (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
  36. (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
  37. (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
  38. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  39.  
  40.  
  41. ==================== Registry (Whitelisted) ==================
  42.  
  43. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  44.  
  45. HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
  46. HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1796056 2014-08-19] (NVIDIA Corporation)
  47. HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
  48. HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)
  49. HKU\S-1-5-21-273865730-2057091556-2042736630-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3632472 2015-04-11] (Electronic Arts)
  50. HKU\S-1-5-21-273865730-2057091556-2042736630-1000\...\Run: [EpicScale] => [X]
  51. HKU\S-1-5-21-273865730-2057091556-2042736630-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2889408 2015-04-14] (Valve Corporation)
  52. HKU\S-1-5-21-273865730-2057091556-2042736630-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
  53. HKU\S-1-5-21-273865730-2057091556-2042736630-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
  54. HKU\S-1-5-21-273865730-2057091556-2042736630-1000\...\Run: [Clownfish] => [X]
  55. HKU\S-1-5-21-273865730-2057091556-2042736630-1000\...\MountPoints2: D - D:\INSTALL.EXE
  56. HKU\S-1-5-21-273865730-2057091556-2042736630-1000\...\MountPoints2: {09db0a65-43ad-11e3-a2de-d43d7e03426d} - D:\AutoRun.exe
  57. HKU\S-1-5-21-273865730-2057091556-2042736630-1000\...\MountPoints2: {21dc2ce5-01b6-11e3-b94a-d43d7e03426d} - D:\AutoRun.exe
  58. HKU\S-1-5-21-273865730-2057091556-2042736630-1000\...\MountPoints2: {21dc2cf5-01b6-11e3-b94a-d43d7e03426d} - D:\AutoRun.exe
  59. HKU\S-1-5-21-273865730-2057091556-2042736630-1000\...\MountPoints2: {ef3b3d94-8b23-11e3-a676-d43d7e03426d} - D:\INSTALL.EXE
  60. HKU\S-1-5-21-273865730-2057091556-2042736630-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\scrnsave.scr [11264 2009-07-14] (Microsoft Corporation)
  61. Startup: C:\Users\HANNO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\N6bIXtK.lnk [2015-04-14]
  62. ShortcutTarget: N6bIXtK.lnk -> C:\Users\HANNO\AppData\Roaming\DSILlzCwXB\dSrQ1Vb72t.exe (No File)
  63. ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
  64. GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
  65. CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
  66.  
  67. ==================== Internet (Whitelisted) ====================
  68.  
  69. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  70.  
  71. HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
  72. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
  73. HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
  74. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
  75. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
  76. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
  77. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
  78. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
  79. SearchScopes: HKLM-x32 -> DefaultScope value is missing.
  80. SearchScopes: HKU\S-1-5-21-273865730-2057091556-2042736630-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  81. SearchScopes: HKU\S-1-5-21-273865730-2057091556-2042736630-1000 -> {6CED31C0-CC14-406B-9CA5-65489B43C3EB} URL = http://search.us.com/serp?guid={FB333439-8416-4E71-9280-247B7FAC7257}&action=default_search&serpv=5&k={searchTerms}
  82. SearchScopes: HKU\S-1-5-21-273865730-2057091556-2042736630-1000 -> {E34C6F9B-B618-4D24-8943-18BFEEA8D2EE} URL = http://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=10583
  83. BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
  84. BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-25] (Oracle Corporation)
  85. BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
  86. BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-25] (Oracle Corporation)
  87. Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
  88. Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
  89. Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
  90. Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
  91. Tcpip\..\Interfaces\{77C6AA95-904A-4D4A-BD73-AFD6C8A0FF02}: [NameServer] 212.247.156.70 212.247.156.66
  92. Tcpip\..\Interfaces\{8B3927CE-16AC-4EBD-8EBC-176588C6E1A6}: [NameServer] 212.247.156.66 212.247.156.70
  93. StartMenuInternet: IEXPLORE.EXE - iexplore.exe
  94.  
  95. FireFox:
  96. ========
  97. FF ProfilePath: C:\Users\HANNO\AppData\Roaming\Mozilla\Firefox\Profiles\cuskc5we.default
  98. FF NetworkProxy: "type",
  99. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
  100. FF Plugin: @microsoft.com/GENUINE -> disabled No File
  101. FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
  102. FF Plugin-x32: @ei.PopularScreensavers_7i.com/Plugin -> C:\Program Files (x86)\PopularScreensavers_7iEI\Installr\1.bin\NP7iEISB.dll No File
  103. FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll No File
  104. FF Plugin-x32: @esn/npbattlelog,version=2.3.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll No File
  105. FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-25] (Oracle Corporation)
  106. FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-25] (Oracle Corporation)
  107. FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
  108. FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-07-02] (NVIDIA Corporation)
  109. FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-07-02] (NVIDIA Corporation)
  110. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-15] (Google Inc.)
  111. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-15] (Google Inc.)
  112. FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
  113. FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
  114.  
  115. Chrome:
  116. =======
  117. CHR dev: Chrome dev build detected! <======= ATTENTION
  118. CHR Profile: C:\Users\HANNO\AppData\Local\Google\Chrome\User Data\Default
  119. CHR Extension: (Skype Click to Call) - C:\Users\HANNO\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-04-16]
  120. CHR HKU\S-1-5-21-273865730-2057091556-2042736630-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - https://clients2.google.com/service/update2/crx
  121. CHR HKLM-x32\...\Chrome\Extension: [bcjagnifjocnddgeknajocbkkhlgibem] - C:\Program Files (x86)\Surf Canyon\surfcanyon.crx [Not Found]
  122. CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
  123.  
  124. ==================== Services (Whitelisted) =================
  125.  
  126. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  127.  
  128. R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
  129. R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
  130. R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
  131. S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1931632 2015-04-11] (Electronic Arts)
  132. R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-04-16] ()
  133. R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [189248 2014-04-16] ()
  134. R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
  135. S2 40fb51a7; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\PragmaFunc\PragmaFunc.dll",serv
  136. S2 Tele2 Mobile Partner. RunOuc; C:\Program Files (x86)\Tele2 Mobile Partner\UpdateDog\ouc.exe [X]
  137.  
  138. ==================== Drivers (Whitelisted) ====================
  139.  
  140. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  141.  
  142. R2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-02] (Samsung Electronics Co., Ltd.)
  143. S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [238080 2013-08-10] (Huawei Technologies Co., Ltd.)
  144. S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)
  145. S3 atrfiltr; system32\drivers\atrfiltr.sys [X]
  146. S3 CV2K1; system32\DRIVERS\cv2k1.sys [X]
  147. S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]
  148. S3 MSICDSetup; \??\D:\CDriver64.sys [X]
  149. S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
  150. S2 SPDRIVER_1.38.0.1425; \??\C:\Program Files (x86)\ShopperPro\JSDriver\1.38.0.1425\jsdrv.sys [X]
  151.  
  152. ==================== NetSvcs (Whitelisted) ===================
  153.  
  154. (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
  155.  
  156.  
  157. ==================== One Month Created Files and Folders ========
  158.  
  159. (If an entry is included in the fixlist, the file\folder will be moved.)
  160.  
  161. 2015-04-28 18:58 - 2015-04-28 18:58 - 00013278 _____ () C:\Users\HANNO\Desktop\FRST.txt
  162. 2015-04-27 22:37 - 2015-04-27 22:37 - 00292584 _____ () C:\Windows\Minidump\042715-13306-01.dmp
  163. 2015-04-27 15:22 - 2015-04-28 18:58 - 00000000 ____D () C:\FRST
  164. 2015-04-27 15:22 - 2015-04-27 15:22 - 02100736 _____ (Farbar) C:\Users\HANNO\Desktop\FRST64.exe
  165. 2015-04-26 00:02 - 2015-04-26 00:06 - 00000000 ____D () C:\Users\HANNO\AppData\Roaming\Dropbox
  166. 2015-04-25 22:55 - 2015-04-26 00:11 - 01315588 _____ () C:\Windows\PFRO.log
  167. 2015-04-24 16:53 - 2015-04-28 17:27 - 00000784 _____ () C:\Windows\setupact.log
  168. 2015-04-24 16:53 - 2015-04-24 16:53 - 00000000 _____ () C:\Windows\setuperr.log
  169. 2015-04-21 16:35 - 2015-04-21 16:35 - 00000000 ____D () C:\Users\HANNO\Documents\Skype Voice Records
  170. 2015-04-21 16:34 - 2015-04-21 16:34 - 00000000 ____D () C:\Program Files (x86)\Clownfish
  171. 2015-04-20 22:16 - 2015-04-26 01:20 - 00000000 ____D () C:\ProgramData\TamoSoft
  172. 2015-04-20 17:10 - 2015-04-20 17:10 - 00000000 ____D () C:\Users\HANNO\AppData\Roaming\Wargaming.net
  173. 2015-04-19 00:47 - 2015-04-24 14:16 - 00000195 _____ () C:\Users\HANNO\Desktop\IP.txt
  174. 2015-04-16 20:45 - 2015-04-16 20:45 - 00002697 _____ () C:\Users\Public\Desktop\Skype.lnk
  175. 2015-04-16 20:45 - 2015-04-16 20:45 - 00000000 ___RD () C:\Program Files (x86)\Skype
  176. 2015-04-16 20:45 - 2015-04-16 20:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
  177. 2015-04-14 00:23 - 2015-04-14 01:04 - 00000000 ____D () C:\Users\HANNO\AppData\Local\Razer
  178. 2015-04-14 00:23 - 2015-04-14 01:04 - 00000000 ____D () C:\ProgramData\Razer
  179. 2015-04-14 00:23 - 2015-04-14 01:04 - 00000000 ____D () C:\Program Files (x86)\Razer
  180. 2015-04-14 00:20 - 2015-04-14 00:20 - 00000000 ____D () C:\Users\HANNO\AppData\Roaming\B3F1806A-3C2A-46BB-A4C3-D69294F2C01E
  181. 2015-04-07 23:57 - 2015-04-25 13:59 - 00000484 _____ () C:\Users\HANNO\Desktop\Links.txt
  182. 2015-03-30 23:13 - 2015-03-30 23:13 - 00000000 ____D () C:\Users\HANNO\AppData\Local\QuickScreenShare
  183. 2015-03-29 15:11 - 2015-03-29 15:11 - 00000000 ___HD () C:\Users\HANNO\AppData\Roaming\MSEmbed
  184.  
  185. ==================== One Month Modified Files and Folders =======
  186.  
  187. (If an entry is included in the fixlist, the file\folder will be moved.)
  188.  
  189. 2015-04-28 18:54 - 2015-03-26 21:56 - 00000000 ____D () C:\Users\HANNO\AppData\Roaming\.minecraft
  190. 2015-04-28 18:51 - 2013-04-10 19:09 - 00000000 ____D () C:\Users\HANNO\AppData\Roaming\Skype
  191. 2015-04-28 18:37 - 2014-11-04 01:26 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  192. 2015-04-28 18:37 - 2013-05-01 19:23 - 00000388 _____ () C:\Windows\Tasks\update-sys.job
  193. 2015-04-28 18:05 - 2013-01-12 15:32 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
  194. 2015-04-28 17:34 - 2009-07-14 08:13 - 00778150 _____ () C:\Windows\system32\PerfStringBackup.INI
  195. 2015-04-28 17:31 - 2013-01-12 20:30 - 01817672 _____ () C:\Windows\WindowsUpdate.log
  196. 2015-04-28 17:30 - 2013-08-15 20:45 - 00000000 ____D () C:\ProgramData\Origin
  197. 2015-04-28 17:27 - 2015-03-07 22:24 - 00000000 ____D () C:\Program Files (x86)\Steam
  198. 2015-04-28 17:27 - 2014-11-04 01:26 - 00000944 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  199. 2015-04-28 17:27 - 2014-11-04 00:26 - 00001336 _____ () C:\Windows\Tasks\IJTFW.job
  200. 2015-04-28 17:27 - 2014-11-04 00:26 - 00001334 _____ () C:\Windows\Tasks\WGYY.job
  201. 2015-04-28 17:27 - 2013-01-12 14:47 - 00000000 ____D () C:\ProgramData\NVIDIA
  202. 2015-04-28 17:27 - 2009-07-14 08:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
  203. 2015-04-28 16:04 - 2013-05-01 19:23 - 00000388 _____ () C:\Windows\Tasks\update-S-1-5-21-273865730-2057091556-2042736630-1000.job
  204. 2015-04-27 22:37 - 2014-04-18 15:16 - 00000000 ____D () C:\Windows\Minidump
  205. 2015-04-26 00:10 - 2015-02-22 01:03 - 00000000 ____D () C:\ProgramData\AVAST Software
  206. 2015-04-25 22:55 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
  207. 2015-04-25 17:43 - 2013-08-17 13:57 - 00000000 ____D () C:\Users\HANNO\Documents\EA Games
  208. 2015-04-24 16:52 - 2009-07-14 07:45 - 00009584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  209. 2015-04-24 16:52 - 2009-07-14 07:45 - 00009584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  210. 2015-04-20 16:15 - 2015-01-19 22:55 - 00000000 ____D () C:\Windows\SysWOW64\directx
  211. 2015-04-20 16:13 - 2014-01-07 18:19 - 00000000 ____D () C:\Games
  212. 2015-04-16 20:45 - 2013-04-10 19:09 - 00000000 ____D () C:\ProgramData\Skype
  213. 2015-04-16 20:43 - 2014-11-04 00:26 - 00000000 ____D () C:\Users\HANNO\Documents\Optimizer Pro
  214. 2015-04-16 14:49 - 2013-01-12 15:24 - 00058016 _____ () C:\Users\HANNO\AppData\Local\GDIPFONTCACHEV1.DAT
  215. 2015-04-14 23:05 - 2013-01-12 15:32 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
  216. 2015-04-14 23:05 - 2013-01-12 15:32 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
  217. 2015-04-14 23:05 - 2013-01-12 15:32 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
  218. 2015-04-14 02:33 - 2009-07-14 07:45 - 00275712 _____ () C:\Windows\system32\FNTCACHE.DAT
  219. 2015-04-11 19:58 - 2014-09-10 01:15 - 00000000 ____D () C:\Program Files (x86)\Origin
  220. 2015-03-31 14:11 - 2009-07-14 08:08 - 00032652 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
  221. 2015-03-29 15:11 - 2014-11-16 19:27 - 00000000 ___HD () C:\Users\HANNO\AppData\Roaming\.kbd
  222.  
  223. ==================== Files in the root of some directories =======
  224.  
  225. 2015-03-06 15:43 - 2015-03-14 04:10 - 0000020 _____ () C:\Users\HANNO\AppData\Roaming\appdataFr3.bin
  226. 2013-09-16 02:04 - 2012-11-15 14:46 - 0759908 _____ ( ) C:\Users\HANNO\AppData\Local\defsea1.exe
  227. 2013-05-25 23:41 - 2013-05-25 23:41 - 0012096 _____ () C:\Users\HANNO\AppData\Local\recently-used.xbel
  228. 2013-05-01 19:23 - 2013-05-01 19:23 - 0000003 _____ () C:\Users\HANNO\AppData\Local\updater.log
  229. 2013-05-01 19:23 - 2014-12-10 18:18 - 0000059 _____ () C:\Users\HANNO\AppData\Local\UserProducts.xml
  230.  
  231. Some content of TEMP:
  232. ====================
  233. C:\Users\HANNO\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmps8aekw.dll
  234.  
  235.  
  236. ==================== Bamital & volsnap Check =================
  237.  
  238. (There is no automatic fix for files that do not pass verification.)
  239.  
  240. C:\Windows\System32\winlogon.exe => File is digitally signed
  241. C:\Windows\System32\wininit.exe => File is digitally signed
  242. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  243. C:\Windows\explorer.exe => File is digitally signed
  244. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  245. C:\Windows\System32\svchost.exe => File is digitally signed
  246. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  247. C:\Windows\System32\services.exe => File is digitally signed
  248. C:\Windows\System32\User32.dll => MD5 is legit
  249. C:\Windows\SysWOW64\User32.dll => MD5 is legit
  250. C:\Windows\System32\userinit.exe => File is digitally signed
  251. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  252. C:\Windows\System32\rpcss.dll => File is digitally signed
  253. C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
  254.  
  255.  
  256. LastRegBack: 2015-04-24 22:30
  257.  
  258. ==================== End Of Log ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!