Advertisement
Guest User

Untitled

a guest
Sep 29th, 2014
342
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 34.20 KB | None | 0 0
  1. Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-09-2014 02
  2. Ran by illang (administrator) on ILLANG-PC on 29-09-2014 11:54:04
  3. Running from C:\Users\illang\Downloads
  4. Loaded Profile: illang (Available profiles: illang & Esli)
  5. Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
  6. Internet Explorer Version 11
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (Lenovo.) C:\Windows\System32\ibmpmsvc.exe
  15. (Microsoft Corporation) C:\Windows\System32\wlanext.exe
  16. (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
  17. (Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
  18. (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
  19. (Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\AvrcpService.exe
  20. () C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
  21. (Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe
  22. (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
  23. (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
  24. (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe
  25. (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
  26. (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
  27. (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
  28. (Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\RtkBleServ.exe
  29. (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
  30. (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
  31. (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
  32. (Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
  33. (Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exe
  34. (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
  35. (Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
  36. (Microsoft Corporation) C:\Windows\System32\rundll32.exe
  37. (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\mkrmsg.exe
  38. (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
  39. (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
  40. (Intel Corporation) C:\Windows\System32\hkcmd.exe
  41. (Intel Corporation) C:\Windows\System32\igfxpers.exe
  42. (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
  43. (Intel Corporation) C:\Windows\System32\igfxsrvc.exe
  44. (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  45. (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
  46. () C:\Program Files (x86)\Integrated Camera\Monitor.exe
  47. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
  48. (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
  49. (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
  50. (Microsoft Corporation) C:\Windows\System32\rundll32.exe
  51. (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
  52. (Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
  53. (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
  54. (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
  55. (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
  56. (Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
  57. (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
  58. () C:\Program Files (x86)\Realtek\Realtek Bluetooth\SkypePlugin.exe
  59. (Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
  60. (Lenovo) C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe
  61. (Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe
  62. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
  63. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
  64. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  65. (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
  66. (Microsoft Corporation) C:\Windows\System32\rundll32.exe
  67. (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
  68. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  69. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  70. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  71. (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
  72. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  73. (Farbar) C:\Users\illang\Downloads\FRST64 (1).exe
  74.  
  75.  
  76. ==================== Registry (Whitelisted) ==================
  77.  
  78. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  79.  
  80. HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [280576 2013-10-21] (Realtek Semiconductor Corporation)
  81. HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [293672 2013-06-14] (Lenovo Group Limited)
  82. HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2985712 2013-06-04] (Synaptics Incorporated)
  83. HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-07-27] (CANON INC.)
  84. HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.)
  85. HKLM\...\Run: [AcWin7Hlpr] => C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [63832 2014-03-14] (Lenovo)
  86. HKLM-x32\...\Run: [Integrated Camera_Monitor] => C:\Program Files (x86)\Integrated Camera\monitor.exe [1718648 2013-04-26] ()
  87. HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
  88. HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
  89. HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4315872 2011-06-01] (Lenovo, Inc.)
  90. HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [1085744 2012-11-22] (Lenovo)
  91. HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-13] (Avira Operations GmbH & Co. KG)
  92. HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
  93. Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
  94. HKU\S-1-5-21-3193019097-1559123384-2487284630-1000\...\MountPoints2: {417c8f46-97af-11e3-b1e4-806e6f6e6963} - Q:\LenovoQDrive.exe
  95. ShellIconOverlayIdentifiers: SugarSyncBackedUp -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
  96. ShellIconOverlayIdentifiers: SugarSyncPending -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
  97. ShellIconOverlayIdentifiers: SugarSyncRoot -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
  98. ShellIconOverlayIdentifiers: SugarSyncShared -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
  99.  
  100. ==================== Internet (Whitelisted) ====================
  101.  
  102. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  103.  
  104. HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13-comm.msn.com/?pc=LNJB
  105. HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/welcome/thinkpad
  106. HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad
  107. SearchScopes: HKLM - {85E000AA-ED9B-48ED-92D8-821BAD141DD6} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB
  108. SearchScopes: HKLM-x32 - {85E000AA-ED9B-48ED-92D8-821BAD141DD6} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB
  109. SearchScopes: HKCU - {85E000AA-ED9B-48ED-92D8-821BAD141DD6} URL =
  110. BHO: No Name -> {41564952-412D-5637-4300-7A786E7484D7} -> No File
  111. BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
  112. BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
  113. Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
  114.  
  115. FireFox:
  116. ========
  117. FF ProfilePath: C:\Users\illang\AppData\Roaming\Mozilla\Firefox\Profiles\u5dhjzam.default
  118. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
  119. FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
  120. FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  121. FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
  122. FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
  123. FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
  124. FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
  125. FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
  126. FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
  127. FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
  128. FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  129. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  130. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
  131. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
  132. FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  133. FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
  134. FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
  135. FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
  136. FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
  137. FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
  138.  
  139. Chrome:
  140. =======
  141. CHR Profile: C:\Users\illang\AppData\Local\Google\Chrome\User Data\Default
  142. CHR Extension: (Google Slides) - C:\Users\illang\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-12]
  143. CHR Extension: (Google Docs) - C:\Users\illang\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-12]
  144. CHR Extension: (Google Drive) - C:\Users\illang\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-12]
  145. CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\illang\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-12]
  146. CHR Extension: (YouTube) - C:\Users\illang\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-12]
  147. CHR Extension: (Google Search) - C:\Users\illang\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-12]
  148. CHR Extension: (Google Sheets) - C:\Users\illang\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-12]
  149. CHR Extension: (Google Wallet) - C:\Users\illang\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-12]
  150. CHR Extension: (Gmail) - C:\Users\illang\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-12]
  151.  
  152. ==================== Services (Whitelisted) =================
  153.  
  154. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  155.  
  156. R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [804944 2014-08-13] (Avira Operations GmbH & Co. KG)
  157. R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-13] (Avira Operations GmbH & Co. KG)
  158. R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-13] (Avira Operations GmbH & Co. KG)
  159. R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1021520 2014-08-13] (Avira Operations GmbH & Co. KG)
  160. R2 AvrcpService; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe [35328 2013-05-07] (Realtek Semiconductor Corporation) [File not signed]
  161. R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [66560 2013-11-06] () [File not signed]
  162. R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [160048 2012-11-22] (Lenovo)
  163. R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
  164. S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
  165. R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-07-03] (Intel Corporation)
  166. S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
  167. R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-07-03] (Intel Corporation)
  168. R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [187688 2013-06-14] (Lenovo Group Limited)
  169. R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
  170. S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272776 2014-09-03] ()
  171. R2 RtkBleServ; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\RtkBleServ.exe [42496 2013-04-25] (Realtek Semiconductor Corporation) [File not signed]
  172.  
  173. ==================== Drivers (Whitelisted) ====================
  174.  
  175. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  176.  
  177. R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
  178. R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-20] (Avira Operations GmbH & Co. KG)
  179. R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)
  180. R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [42040 2014-07-10] (Avira Operations GmbH & Co. KG)
  181. S3 Fastboot; C:\Windows\System32\DRIVERS\Fastboot.sys [71472 2012-11-22] (Windows (R) Win 7 DDK provider)
  182. R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-16] (Intel Corporation)
  183. R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-29] (Malwarebytes Corporation)
  184. R3 RtkBtFilter; C:\Windows\System32\DRIVERS\RtkBtfilter.sys [554712 2013-11-04] (Realtek Semiconductor Corporation)
  185. R3 RTWlanE; C:\Windows\System32\DRIVERS\rtwlane.sys [2974424 2013-08-03] (Realtek Semiconductor Corporation )
  186. R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33008 2013-06-04] (Synaptics Incorporated)
  187. R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [1509112 2013-06-11] (Sunplus)
  188. R3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-08] (ThinkVantage Communications Utility)
  189.  
  190. ==================== NetSvcs (Whitelisted) ===================
  191.  
  192. (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
  193.  
  194.  
  195. ==================== One Month Created Files and Folders ========
  196.  
  197. (If an entry is included in the fixlist, the file\folder will be moved.)
  198.  
  199. 2014-09-29 11:54 - 2014-09-29 11:54 - 00017565 _____ () C:\Users\illang\Downloads\FRST.txt
  200. 2014-09-29 11:52 - 2014-09-29 11:52 - 02108928 _____ (Farbar) C:\Users\illang\Downloads\FRST64 (2).exe
  201. 2014-09-29 11:52 - 2014-09-29 11:52 - 02108928 _____ (Farbar) C:\Users\illang\Downloads\FRST64 (1).exe
  202. 2014-09-29 11:01 - 2014-09-29 11:07 - 00000000 ____D () C:\Users\illang\Downloads\FRST-OlderVersion
  203. 2014-09-24 17:58 - 2014-09-24 17:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
  204. 2014-09-24 17:49 - 2014-09-10 00:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
  205. 2014-09-24 17:49 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
  206. 2014-09-21 18:17 - 2014-09-21 18:17 - 00002741 _____ () C:\Users\illang\AppData\Local\recently-used.xbel
  207. 2014-09-21 18:07 - 2014-09-21 18:14 - 00000000 ____D () C:\Users\illang\AppData\Roaming\Opera Software
  208. 2014-09-21 18:07 - 2014-09-21 18:14 - 00000000 ____D () C:\Users\illang\AppData\Local\Opera Software
  209. 2014-09-21 18:07 - 2014-09-21 18:14 - 00000000 ____D () C:\Program Files (x86)\Opera
  210. 2014-09-21 18:06 - 2014-09-21 18:05 - 00289792 _____ (Dr. Wuro Industries) C:\Users\illang\Downloads\verkleinerer17b_CB-DL-Manager [1].exe
  211. 2014-09-13 17:43 - 2014-09-13 17:44 - 00000000 ____D () C:\Users\illang\Desktop\autorunsettings
  212. 2014-09-13 17:42 - 2014-09-13 17:42 - 00014987 _____ () C:\Users\illang\Desktop\autorunsettings.zip
  213. 2014-09-12 15:04 - 2014-09-12 15:04 - 00002002 _____ () C:\Users\Public\Desktop\Lenovo Solution Center.lnk
  214. 2014-09-12 15:01 - 2014-09-12 15:06 - 00000000 ____D () C:\Users\illang\AppData\Roaming\LSC
  215. 2014-09-12 14:57 - 2014-09-12 14:58 - 36501352 _____ (Lenovo Group Limited) C:\Users\illang\Downloads\lscsetup_x64_25002.exe
  216. 2014-09-12 11:51 - 2014-09-25 15:58 - 00002186 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
  217. 2014-09-12 11:51 - 2014-09-12 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
  218. 2014-09-12 11:50 - 2014-09-29 10:55 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  219. 2014-09-12 11:50 - 2014-09-29 09:31 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  220. 2014-09-12 11:50 - 2014-09-12 11:50 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
  221. 2014-09-12 11:50 - 2014-09-12 11:50 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
  222. 2014-09-12 11:49 - 2014-09-12 11:49 - 00895120 _____ (Google Inc.) C:\Users\illang\Downloads\ChromeSetup.exe
  223. 2014-09-11 14:26 - 2014-09-29 11:54 - 00000000 ____D () C:\FRST
  224. 2014-09-11 08:27 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
  225. 2014-09-11 08:27 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
  226. 2014-09-11 08:27 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
  227. 2014-09-11 08:27 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
  228. 2014-09-11 08:27 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
  229. 2014-09-11 08:27 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
  230. 2014-09-11 08:27 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
  231. 2014-09-11 08:27 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
  232. 2014-09-11 08:27 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
  233. 2014-09-11 08:27 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
  234. 2014-09-11 08:27 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
  235. 2014-09-11 08:27 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
  236. 2014-09-11 08:27 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
  237. 2014-09-11 08:27 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
  238. 2014-09-11 08:27 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
  239. 2014-09-11 08:27 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
  240. 2014-09-11 08:27 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
  241. 2014-09-11 08:27 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
  242. 2014-09-11 08:27 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
  243. 2014-09-11 08:27 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
  244. 2014-09-11 08:27 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
  245. 2014-09-11 08:27 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
  246. 2014-09-11 08:27 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
  247. 2014-09-11 08:27 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
  248. 2014-09-11 08:27 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
  249. 2014-09-11 08:27 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
  250. 2014-09-11 08:27 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
  251. 2014-09-11 08:27 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
  252. 2014-09-11 08:27 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
  253. 2014-09-11 08:27 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
  254. 2014-09-11 08:27 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
  255. 2014-09-11 08:27 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
  256. 2014-09-11 08:27 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
  257. 2014-09-11 08:27 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
  258. 2014-09-11 08:27 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
  259. 2014-09-11 08:27 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
  260. 2014-09-11 08:27 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
  261. 2014-09-11 08:27 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
  262. 2014-09-11 08:27 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
  263. 2014-09-11 08:27 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
  264. 2014-09-11 08:27 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
  265. 2014-09-11 08:27 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
  266. 2014-09-11 08:27 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
  267. 2014-09-11 08:27 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
  268. 2014-09-11 08:27 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
  269. 2014-09-11 08:27 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
  270. 2014-09-11 08:27 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
  271. 2014-09-11 08:27 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
  272. 2014-09-11 08:27 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
  273. 2014-09-11 08:27 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
  274. 2014-09-11 08:27 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
  275. 2014-09-11 08:27 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
  276. 2014-09-11 08:27 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
  277. 2014-09-11 08:27 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
  278. 2014-09-11 08:27 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
  279. 2014-09-11 08:27 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
  280. 2014-09-11 08:17 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
  281. 2014-09-11 08:17 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
  282. 2014-09-11 08:12 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
  283. 2014-09-11 08:12 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
  284. 2014-09-11 08:11 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
  285. 2014-09-11 08:11 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
  286. 2014-09-11 08:11 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
  287. 2014-09-11 08:11 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
  288. 2014-09-11 08:11 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
  289. 2014-09-11 08:11 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
  290. 2014-09-11 08:11 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
  291. 2014-09-11 08:11 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
  292. 2014-09-11 08:11 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
  293. 2014-09-10 19:58 - 2014-09-10 19:58 - 00000000 __SHD () C:\Users\illang\AppData\Local\EmieUserList
  294. 2014-09-10 19:58 - 2014-09-10 19:58 - 00000000 __SHD () C:\Users\illang\AppData\Local\EmieSiteList
  295. 2014-09-10 16:55 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
  296. 2014-09-10 16:48 - 2014-09-10 16:48 - 01370467 _____ () C:\Users\illang\Downloads\AdwCleaner(12).exe
  297. 2014-09-09 21:11 - 2014-09-09 21:11 - 00000000 ____D () C:\Users\illang\Downloads\Handelsregister Eintrag SHS
  298. 2014-08-30 14:27 - 2014-09-29 09:44 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
  299. 2014-08-30 14:27 - 2014-09-10 17:36 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
  300. 2014-08-30 14:27 - 2014-08-30 14:27 - 00001117 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  301. 2014-08-30 14:27 - 2014-08-30 14:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
  302. 2014-08-30 14:27 - 2014-08-30 14:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
  303. 2014-08-30 14:27 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
  304. 2014-08-30 14:27 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
  305.  
  306. ==================== One Month Modified Files and Folders =======
  307.  
  308. (If an entry is included in the fixlist, the file\folder will be moved.)
  309.  
  310. 2014-09-29 11:33 - 2014-04-23 16:56 - 00000000 ____D () C:\Users\illang\Documents\Outlook-Dateien
  311. 2014-09-29 11:33 - 2014-04-17 16:27 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
  312. 2014-09-29 11:07 - 2014-02-17 10:44 - 01770272 _____ () C:\Windows\WindowsUpdate.log
  313. 2014-09-29 09:41 - 2009-07-14 06:51 - 00097678 _____ () C:\Windows\setupact.log
  314. 2014-09-29 09:39 - 2009-07-14 06:45 - 00034208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  315. 2014-09-29 09:39 - 2009-07-14 06:45 - 00034208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  316. 2014-09-29 09:33 - 2014-04-24 14:41 - 00000000 ____D () C:\Users\illang\Documents\Eigene Dateien
  317. 2014-09-29 09:32 - 2014-04-17 11:59 - 01559851 _____ () C:\Users\illang\AppData\Local\BTServer.log
  318. 2014-09-29 09:31 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
  319. 2014-09-29 09:30 - 2010-11-21 05:47 - 00347490 _____ () C:\Windows\PFRO.log
  320. 2014-09-25 15:36 - 2014-04-17 12:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
  321. 2014-09-21 18:19 - 2014-04-17 15:13 - 00000000 ____D () C:\Users\illang\Documents\Software
  322. 2014-09-21 18:17 - 2014-04-17 16:47 - 00000000 ____D () C:\Users\illang\.gimp-2.8
  323. 2014-09-21 18:14 - 2014-04-17 12:03 - 00001436 _____ () C:\Users\illang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
  324. 2014-09-21 17:58 - 2014-04-17 16:49 - 00000000 ____D () C:\Users\illang\AppData\Local\gtk-2.0
  325. 2014-09-18 16:47 - 2014-04-17 11:58 - 00000000 ____D () C:\Users\illang
  326. 2014-09-17 14:04 - 2014-05-06 09:55 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
  327. 2014-09-15 09:06 - 2010-11-21 05:27 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
  328. 2014-09-12 15:04 - 2014-02-17 11:06 - 00000000 ____D () C:\Windows\System32\Tasks\Lenovo
  329. 2014-09-12 15:04 - 2014-02-17 10:54 - 00000000 ____D () C:\Program Files\Lenovo
  330. 2014-09-12 15:03 - 2014-02-17 11:05 - 00000000 ____D () C:\Windows\Downloaded Installations
  331. 2014-09-12 11:51 - 2014-04-17 16:13 - 00000000 ____D () C:\Users\illang\AppData\Local\Google
  332. 2014-09-12 11:51 - 2014-04-17 16:13 - 00000000 ____D () C:\Program Files (x86)\Google
  333. 2014-09-11 19:48 - 2014-04-17 15:37 - 00000000 ____D () C:\Windows\system32\appmgmt
  334. 2014-09-11 13:53 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
  335. 2014-09-11 08:27 - 2014-04-23 16:30 - 00000000 ____D () C:\ProgramData\Microsoft Help
  336. 2014-09-11 08:25 - 2014-02-17 19:10 - 00699342 _____ () C:\Windows\system32\perfh007.dat
  337. 2014-09-11 08:25 - 2014-02-17 19:10 - 00149450 _____ () C:\Windows\system32\perfc007.dat
  338. 2014-09-11 08:25 - 2014-02-17 10:51 - 01593564 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
  339. 2014-09-11 08:25 - 2009-07-14 07:13 - 01593564 _____ () C:\Windows\system32\PerfStringBackup.INI
  340. 2014-09-11 08:24 - 2014-04-18 09:53 - 00000000 ____D () C:\Windows\system32\MRT
  341. 2014-09-11 08:17 - 2014-04-18 09:53 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
  342. 2014-09-11 08:16 - 2014-05-06 11:13 - 00000000 ___SD () C:\Windows\system32\CompatTel
  343. 2014-09-10 17:08 - 2014-04-17 12:23 - 00001174 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
  344. 2014-09-10 17:08 - 2014-04-17 12:23 - 00001162 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
  345. 2014-09-10 16:56 - 2014-06-22 15:05 - 00000000 ____D () C:\AdwCleaner
  346. 2014-09-09 21:33 - 2014-04-17 16:27 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
  347. 2014-09-09 21:33 - 2014-04-17 16:27 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
  348. 2014-09-09 21:33 - 2014-04-17 16:27 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
  349. 2014-08-30 15:55 - 2014-05-03 18:12 - 00049415 _____ () C:\Users\Esli\AppData\Local\BTServer.log
  350.  
  351. Some content of TEMP:
  352. ====================
  353. C:\Users\Esli\AppData\Local\Temp\avgnt.exe
  354. C:\Users\Esli\AppData\Local\Temp\Quarantine.exe
  355. C:\Users\illang\AppData\Local\Temp\avgnt.exe
  356. C:\Users\illang\AppData\Local\Temp\DllMonoCtrl.dll
  357. C:\Users\illang\AppData\Local\Temp\MSETUP4.EXE
  358. C:\Users\illang\AppData\Local\Temp\Offercast_AVIRAV7_.exe
  359. C:\Users\illang\AppData\Local\Temp\Quarantine.exe
  360.  
  361.  
  362. ==================== Bamital & volsnap Check =================
  363.  
  364. (There is no automatic fix for files that do not pass verification.)
  365.  
  366. C:\Windows\System32\winlogon.exe => File is digitally signed
  367. C:\Windows\System32\wininit.exe => File is digitally signed
  368. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  369. C:\Windows\explorer.exe => File is digitally signed
  370. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  371. C:\Windows\System32\svchost.exe => File is digitally signed
  372. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  373. C:\Windows\System32\services.exe => File is digitally signed
  374. C:\Windows\System32\User32.dll => File is digitally signed
  375. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  376. C:\Windows\System32\userinit.exe => File is digitally signed
  377. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  378. C:\Windows\System32\rpcss.dll => File is digitally signed
  379. C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
  380.  
  381.  
  382. LastRegBack: 2014-09-29 10:48
  383.  
  384. ==================== End Of Log ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement