Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-01-2015 01 Ran by Pit (administrator) on DOM on 16-01-2015 21:38:32 Running from D:\Pobrane Loaded Profiles: UpdatusUser & Pit (Available profiles: UpdatusUser & Pit) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska) Internet Explorer Version 10 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Software 2000 Limited) C:\Windows\System32\spool\drivers\x64\3\HP1006MC.EXE ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1156712 2011-11-15] (Realtek Semiconductor) HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [8071680 2014-01-17] (Lenovo (Beijing) Limited) HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [6193152 2014-01-17] (Lenovo(beijing) Limited) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-27] (Intel Corporation) HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2660333226-2956138994-4221737075-1000\...\Run: [Power2GoExpress] => NA HKU\S-1-5-21-2660333226-2956138994-4221737075-1001\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_16_0_0_235_Plugin.exe [959152 2014-12-11] (Adobe Systems Incorporated) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [260928 2012-02-23] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [215360 2012-02-23] (NVIDIA Corporation) Lsa: [Notification Packages] scecli C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll ShellIconOverlayIdentifiers: [VeriFace Enc] -> {771C7324-DA80-49D3-8017-753B0AF60951} => C:\Windows\system32\IcnOvrly.dll () BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyServer: [S-1-5-21-2660333226-2956138994-4221737075-1001] => localhost:8080 HKU\S-1-5-21-2660333226-2956138994-4221737075-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com HKU\S-1-5-21-2660333226-2956138994-4221737075-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN HKU\S-1-5-21-2660333226-2956138994-4221737075-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN SearchScopes: HKU\S-1-5-21-2660333226-2956138994-4221737075-1001 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENN SearchScopes: HKU\S-1-5-21-2660333226-2956138994-4221737075-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENN Tcpip\Parameters: [DhcpNameServer] 217.172.224.160 89.231.1.206 192.168.1.1 Tcpip\..\Interfaces\{B7EF0052-C093-4208-87EB-7C4405390ABE}: [NameServer] 8.8.8.8,8.8.4.4 FireFox: ======== FF ProfilePath: C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\3d0udlzs.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll () FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: Blur (Formerly DoNotTrackMe) - C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\3d0udlzs.default\Extensions\donottrackplus@abine.com [2014-11-23] FF Extension: Ghostery - C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\3d0udlzs.default\Extensions\firefox@ghostery.com.xpi [2014-01-20] FF Extension: Turn Off the Lights - C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\3d0udlzs.default\Extensions\stefanvandamme@stefanvd.net.xpi [2014-04-24] FF Extension: Adblock Plus - C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\3d0udlzs.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-20] Chrome: ======= ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [945440 2012-02-02] (Broadcom Corporation.) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-08] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-08] (Intel Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] () S2 NSDSvc; C:\Windows\System32\NSDSvc.exe [120160 2011-12-24] (Lenovo) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [134696 2012-02-02] (Broadcom Corporation.) R0 NSD; C:\Windows\System32\drivers\nsd.sys [24160 2011-12-24] (Lenovo Corporation") R1 Nsdfltr; C:\Windows\System32\drivers\Nsdfltr.sys [59488 2011-12-22] (Lenovo Corporation) R3 SPUVCbv; C:\Windows\System32\Drivers\usbvideo.sys [185344 2013-07-12] (Microsoft Corporation) U3 BcmSqlStartupSvc; No ImagePath U2 CLKMSVC10_3A60B698; No ImagePath U2 CLKMSVC10_C3B3B687; No ImagePath U2 DriverService; No ImagePath U2 IAStorDataMgrSvc; No ImagePath U2 iATAgentService; No ImagePath U2 idealife Update Service; No ImagePath U3 IGRS; No ImagePath U2 IviRegMgr; No ImagePath U2 Oasis2Service; No ImagePath U2 PCCarerService; No ImagePath U2 ReadyComm.DirectRouter; No ImagePath U2 RichVideo; No ImagePath U2 RtLedService; No ImagePath U2 SeaPort; No ImagePath U2 SoftwareService; No ImagePath U3 SQLWriter; No ImagePath U2 wlidsvc; No ImagePath ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-12 19:32 - 2015-01-12 19:10 - 01402684 _____ () C:\Users\Pit\Desktop\20150112_1902_ussr-IS-7_37_caucasus.wotreplay 2015-01-11 23:22 - 2015-01-11 23:22 - 00063792 _____ () C:\Users\Pit\Desktop\FRST2.txt 2015-01-11 23:22 - 2015-01-11 23:22 - 00023368 _____ () C:\Users\Pit\Desktop\Addition2.txt 2015-01-11 22:58 - 2015-01-16 21:38 - 00000000 ____D () C:\FRST 2015-01-11 19:41 - 2015-01-11 19:41 - 00619381 _____ () C:\Users\Pit\Desktop\GMER.log 2015-01-09 01:09 - 2015-01-16 21:38 - 00003192 _____ () C:\Windows\setupact.log 2015-01-09 01:09 - 2015-01-15 16:08 - 00001368 _____ () C:\Windows\PFRO.log 2015-01-09 01:09 - 2015-01-09 01:09 - 00000000 _____ () C:\Windows\setuperr.log 2015-01-08 23:25 - 2015-01-16 20:32 - 00290419 _____ () C:\Windows\WindowsUpdate.log 2014-12-23 11:10 - 2014-12-23 11:10 - 00000000 _____ () C:\Users\Pit\Desktop\Nowy dokument tekstowy.txt 2014-12-18 19:07 - 2014-12-18 19:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-12-18 16:17 - 2014-12-18 16:17 - 19283456 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 15400960 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 14364672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 13758976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 02861568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 02655232 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 02054656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 01762816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-12-18 16:17 - 2014-12-18 16:17 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-12-18 16:17 - 2014-12-18 16:17 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 01409536 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-12-18 16:17 - 2014-12-18 16:17 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-12-18 16:17 - 2014-12-18 16:17 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-12-18 16:17 - 2014-12-18 16:17 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-12-18 16:17 - 2014-12-18 16:17 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-12-18 16:17 - 2014-11-21 08:00 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-12-18 16:17 - 2014-11-21 07:54 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-12-18 16:17 - 2014-11-21 07:31 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-12-18 16:17 - 2014-11-21 07:24 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-16 21:38 - 2014-06-01 16:55 - 00000000 ____D () C:\Users\Pit\AppData\Roaming\TS3Client 2015-01-16 19:50 - 2009-07-14 05:45 - 00031248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-01-16 19:50 - 2009-07-14 05:45 - 00031248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-01-16 19:43 - 2014-01-17 17:18 - 00907221 _____ () C:\FaceProv.log 2015-01-16 19:43 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-01-14 19:56 - 2012-10-01 11:27 - 00859672 _____ () C:\Windows\system32\perfh015.dat 2015-01-14 19:56 - 2012-10-01 11:27 - 00216980 _____ () C:\Windows\system32\perfc015.dat 2015-01-14 19:56 - 2009-07-14 06:13 - 01867400 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-01-11 22:08 - 2014-01-20 21:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2015-01-11 16:47 - 2009-07-14 06:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2015-01-09 01:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Resources 2015-01-08 23:28 - 2014-07-06 22:11 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-01-08 23:27 - 2014-07-06 22:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2015-01-08 23:27 - 2014-07-06 22:10 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2015-01-08 23:24 - 2011-02-24 18:03 - 00000000 ____D () C:\Windows\Panther 2015-01-08 09:55 - 2010-11-21 04:27 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-12-19 15:47 - 2014-02-10 17:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-12-18 16:21 - 2014-01-20 21:48 - 00000000 ____D () C:\Windows\system32\MRT 2014-12-18 16:19 - 2014-02-03 20:12 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-01-14 16:55 ==================== End Of Log ============================