Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 02-03-2015 Ran by M (administrator) on MARTA-PC on 03-03-2015 10:46:36 Running from C:\Documents and Settings\M\Moje dokumenty\Downloads Loaded Profiles: UpdatusUser & M (Available profiles: UpdatusUser & M & Administrator) Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski Internet Explorer Version 6 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE () C:\Program Files\AutoInstall\ZD1211B_Auto_Install_CD_Only_Gen_0ACE20FF\AutoEJCD.EXE (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe (Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE () C:\Program Files\WLAN_Software\ZD1211B\ZDWLan.EXE (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [AutoEJCD_0ACE20FF] => C:\Program Files\AutoInstall\ZD1211B_Auto_Install_CD_Only_Gen_0ACE20FF\AutoEJCD.EXE [40960 2015-01-24] () HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-12-03] (Adobe Systems Incorporated) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-24] (AVAST Software) HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [20145368 2015-01-24] (Realtek Semiconductor Corp.) HKLM\...\Run: [ZDWLan_Utility] => C:\Program Files\WLAN_Software\ZD1211B\ZDWLan.EXE [487424 2008-08-21] () HKU\S-1-5-21-299502267-1275210071-1801674531-1005\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd) HKU\S-1-5-21-299502267-1275210071-1801674531-1005\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd) HKU\S-1-5-21-299502267-1275210071-1801674531-1005\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssbezier.scr [19968 2008-04-15] (Microsoft Corporation) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=1422566338&from=cor&uid=WDCXWD3200AAKS-00VYA0_WD-WCARW064391443914&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1422566338&from=cor&uid=WDCXWD3200AAKS-00VYA0_WD-WCARW064391443914&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm HKU\S-1-5-21-299502267-1275210071-1801674531-1005\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-299502267-1275210071-1801674531-1005\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=1422566338&from=cor&uid=WDCXWD3200AAKS-00VYA0_WD-WCARW064391443914&q={searchTerms} HKU\S-1-5-21-299502267-1275210071-1801674531-1005\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1422566338&from=cor&uid=WDCXWD3200AAKS-00VYA0_WD-WCARW064391443914&q={searchTerms} URLSearchHook: [S-1-5-21-299502267-1275210071-1801674531-1003] ATTENTION ==> Default URLSearchHook is missing. URLSearchHook: HKU\S-1-5-21-299502267-1275210071-1801674531-1005 - Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation) HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "" <======= ATTENTION SearchScopes: HKLM -> DefaultScope value is missing. SearchScopes: HKU\S-1-5-21-299502267-1275210071-1801674531-1005 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 62.179.1.63 62.179.1.62 FireFox: ======== FF ProfilePath: C:\Documents and Settings\M\Dane aplikacji\Mozilla\Firefox\Profiles\2o7c43x7.default FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF user.js: detected! => C:\Documents and Settings\M\Dane aplikacji\Mozilla\Firefox\Profiles\2o7c43x7.default\user.js FF SearchPlugin: C:\Documents and Settings\M\Dane aplikacji\Mozilla\Firefox\Profiles\2o7c43x7.default\searchplugins\omiga-plus.xml FF Extension: FF Toolbar - C:\Documents and Settings\M\Dane aplikacji\Mozilla\Firefox\Profiles\2o7c43x7.default\Extensions\fftoolbar2014@etech.com [2015-01-29] FF Extension: ace race 1.0.1 - C:\Documents and Settings\M\Dane aplikacji\Mozilla\Firefox\Profiles\2o7c43x7.default\Extensions\{f2944598-b89f-4e10-b544-5173761572df}.xpi [2015-01-30] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-24] FF HKLM\...\Firefox\Extensions: [fftoolbar2014@etech.com] - C:\Documents and Settings\M\Dane aplikacji\Mozilla\Firefox\Profiles\2o7c43x7.default\extensions\fftoolbar2014@etech.com Chrome: ======= CHR HomePage: Default -> hxxp://www.pajacyk.pl/ CHR StartupUrls: Default -> "hxxp://pajacyk.pl/" CHR DefaultSearchURL: Default -> http://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t CHR DefaultSuggestURL: Default -> http://suggestqueries.google.com/complete/search?q={searchTerms} CHR Profile: C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default CHR Extension: (Google Slides) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-24] CHR Extension: (Google Docs) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-24] CHR Extension: (Google Drive) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-24] CHR Extension: (YouTube) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-24] CHR Extension: (Adblock Plus) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-24] CHR Extension: (Adblock for Youtube™) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2015-01-24] CHR Extension: (Google Search) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-24] CHR Extension: (HTML5 video for YouTube™) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\dolajcekhnohkpncmhgledbmndjpblei [2015-01-24] CHR Extension: (Avast SafePrice) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-01-29] CHR Extension: (Google Sheets) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-24] CHR Extension: (AdBlock) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-01-24] CHR Extension: (Avast Online Security) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-24] CHR Extension: (Stefanie Posavec) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\mcdfoihgbodkinaeoamnenflcacjhbal [2015-01-24] CHR Extension: (Google Mail Checker) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2015-01-24] CHR Extension: (Google Wallet) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-24] CHR Extension: (ace race) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nofipaokfpfmoiijkdjolhcjhamjccgb [2015-02-03] CHR Extension: (Gmail) - C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-24] CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-01-24] CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-01-24] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-01-24] (AVAST Software) R2 nvUpdatusService; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2253120 2011-10-08] (NVIDIA Corporation) S2 Update ace race; "C:\Program Files\ace race\updateacerace.exe" [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2015-01-24] (Creative) R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2015-01-24] () R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [70384 2015-01-24] (AVAST Software) R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55240 2015-01-24] (AVAST Software) R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2015-01-24] () R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787800 2015-01-24] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [423784 2015-01-24] (AVAST Software) R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57928 2015-01-24] (AVAST Software) R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [206248 2015-01-24] () S3 BRGSp50; C:\WINDOWS\System32\Drivers\BRGSp50.sys [20608 2015-01-24] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed] S3 FET5X86V; C:\WINDOWS\System32\DRIVERS\fetnd5bv.sys [48128 2015-01-24] (VIA Technologies, Inc. ) R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO32.SYS [23840 2015-01-24] (REALiX(tm)) R3 JMCF; C:\WINDOWS\System32\DRIVERS\jmcf.sys [68720 2000-01-01] (JMicron Technology Corporation) S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2015-01-24] (Creative Technology Ltd.) R3 whfltr2k; C:\WINDOWS\System32\DRIVERS\whfltr2k.sys [7424 2000-01-01] () R3 ZD1211BU(Atheros); C:\WINDOWS\System32\DRIVERS\zd1211Bu.sys [735232 2008-09-23] (Atheros Communications, Inc.) R3 ZDPSp50; C:\WINDOWS\System32\Drivers\ZDPSp50.sys [17664 2015-01-24] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed] R1 {7a11bc7a-fa65-4d5a-ade4-5a0d20eea01d}t; C:\WINDOWS\System32\drivers\{7a11bc7a-fa65-4d5a-ade4-5a0d20eea01d}t.sys [55824 2015-02-25] (StdLib) S4 IntelIde; No ImagePath U1 WS2IFSL; No ImagePath ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-03 10:46 - 2015-03-03 10:46 - 00000000 ____D () C:\FRST 2015-03-03 09:26 - 2015-03-03 09:26 - 00000000 ____D () C:\WINDOWS\system32\appmgmt 2015-02-25 17:39 - 2015-02-25 06:11 - 00055824 _____ (StdLib) C:\WINDOWS\system32\Drivers\{7a11bc7a-fa65-4d5a-ade4-5a0d20eea01d}t.sys 2015-02-05 13:27 - 2015-02-05 13:27 - 05070512 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe 2015-02-03 20:13 - 2015-02-03 20:13 - 00000472 __RSH () C:\Documents and Settings\All Users\ntuser.pol 2015-02-03 18:47 - 2015-02-03 18:47 - 00000000 ____D () C:\WINDOWS\system32\GroupPolicy ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-03 10:47 - 2015-01-24 17:38 - 00000000 ____D () C:\Documents and Settings\M\Ustawienia lokalne\Temp 2015-03-03 10:31 - 2015-01-24 11:27 - 02091573 _____ () C:\WINDOWS\WindowsUpdate.log 2015-03-03 10:27 - 2015-01-25 20:02 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2015-03-03 09:57 - 2015-01-24 17:47 - 00001036 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-03-03 09:51 - 2015-01-24 17:38 - 00000000 ____D () C:\Documents and Settings\M 2015-03-03 09:37 - 2015-01-24 12:08 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\TEMP 2015-03-03 09:36 - 2015-01-24 12:44 - 00001936 _____ () C:\WINDOWS\system32\nvAppTimestamps 2015-03-03 09:31 - 2015-01-24 17:38 - 00000000 ___RD () C:\Documents and Settings\M\Menu Start\Programy 2015-03-03 09:31 - 2015-01-24 12:19 - 01114416 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2015-03-03 09:31 - 2015-01-24 12:18 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy 2015-03-03 09:31 - 2008-04-15 15:30 - 00501498 _____ () C:\WINDOWS\system32\perfh015.dat 2015-03-03 09:31 - 2008-04-15 15:30 - 00088124 _____ () C:\WINDOWS\system32\perfc015.dat 2015-03-03 09:30 - 2015-01-29 22:19 - 00000000 ____D () C:\Documents and Settings\M\Dane aplikacji\omiga-plus 2015-03-03 09:29 - 2015-01-24 12:21 - 00000378 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job 2015-03-03 09:25 - 2015-01-25 17:19 - 00000000 ___RD () C:\Documents and Settings\M\Pulpit\- 2015-03-03 09:25 - 2015-01-24 17:38 - 00000000 ____D () C:\Documents and Settings\M\Pulpit 2015-03-03 09:24 - 2015-01-24 17:47 - 00001032 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-03-03 09:24 - 2015-01-24 12:37 - 00000330 _____ () C:\WINDOWS\Tasks\AutoKMS.job 2015-03-03 09:23 - 2015-01-29 22:18 - 00000000 ____D () C:\Program Files\ace race 2015-03-03 09:23 - 2015-01-24 11:35 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2015-03-03 09:22 - 2015-01-24 17:38 - 00000188 ___SH () C:\Documents and Settings\M\ntuser.ini 2015-03-03 09:22 - 2015-01-24 11:35 - 00032496 ____N () C:\WINDOWS\SchedLgU.Txt 2015-03-03 08:06 - 2008-04-15 15:30 - 00000579 _____ () C:\WINDOWS\win.ini 2015-02-25 17:33 - 2008-04-15 15:30 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl 2015-02-11 17:10 - 2015-01-25 17:46 - 00000000 ____D () C:\WINDOWS\system32\MRT 2015-02-11 17:04 - 2015-01-25 17:46 - 113756392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2015-02-05 13:57 - 2015-01-24 17:38 - 00000000 ___HD () C:\Documents and Settings\M\Ustawienia lokalne\Dane aplikacji 2015-02-05 13:27 - 2015-01-25 20:02 - 00701616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2015-02-05 13:27 - 2015-01-25 20:02 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl Some content of TEMP: ==================== C:\Documents and Settings\M\Ustawienia lokalne\Temp\ICReinstall_Fliqlo 1.2.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed ==================== End Of Log ============================