Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:26-07-2015
Ran by lenovo (administrator) on IDEA-PC (26-07-2015 14:29:39)
Running from C:\Users\lenovo\Desktop
Loaded Profiles: lenovo (Available Profiles: lenovo)
Platform: Windows 8 (X64) Language: Angielski (Stany Zjednoczone)
Internet Explorer Version 10 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Symantec Corporation) C:\Program Files (x86)\Norton AntiVirus\Engine\22.5.0.124\NAV.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Symantec Corporation) C:\Program Files (x86)\Norton AntiVirus\Engine\22.5.0.124\NAV.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Power Software Ltd) C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtsFT] => C:\windows\RTFTrack.exe [6334096 2012-10-17] (Realtek semiconductor)
HKLM\...\Run: [SynLenovoGestureMgr] => C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [677104 2013-03-25] (Synaptics)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13262480 2012-12-07] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1256080 2012-12-03] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-15] (Lenovo)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2013-07-17] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2013-07-17] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [168464 2012-10-31] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-19] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [366904 2015-04-08] (Power Software Ltd)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1930146046-466709810-403476640-1001\...\Run: [ALLUpdate] => C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [3000704 2014-01-29] (ALLPlayer Group Ltd.)
ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton AntiVirus\Engine64\22.5.0.124\buShell.dll [2015-06-06] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton AntiVirus\Engine64\22.5.0.124\buShell.dll [2015-06-06] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton AntiVirus\Engine64\22.5.0.124\buShell.dll [2015-06-06] (Symantec Corporation)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-10-20] (IvoSoft)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-10-20] (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts=1435769927&z=1b427a411a76e17f630defdgbz4c9w9mbq2t4t3oeo&from=cor&uid=ST1000LM024XHN-M101MBB_S2SMJ9KD602702&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts=1435769927&z=1b427a411a76e17f630defdgbz4c9w9mbq2t4t3oeo&from=cor&uid=ST1000LM024XHN-M101MBB_S2SMJ9KD602702&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1435769927&z=1b427a411a76e17f630defdgbz4c9w9mbq2t4t3oeo&from=cor&uid=ST1000LM024XHN-M101MBB_S2SMJ9KD602702
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1435769927&z=1b427a411a76e17f630defdgbz4c9w9mbq2t4t3oeo&from=cor&uid=ST1000LM024XHN-M101MBB_S2SMJ9KD602702
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts=1435769927&z=1b427a411a76e17f630defdgbz4c9w9mbq2t4t3oeo&from=cor&uid=ST1000LM024XHN-M101MBB_S2SMJ9KD602702&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts=1435769927&z=1b427a411a76e17f630defdgbz4c9w9mbq2t4t3oeo&from=cor&uid=ST1000LM024XHN-M101MBB_S2SMJ9KD602702&q={searchTerms}
HKU\S-1-5-21-1930146046-466709810-403476640-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1435769927&z=1b427a411a76e17f630defdgbz4c9w9mbq2t4t3oeo&from=cor&uid=ST1000LM024XHN-M101MBB_S2SMJ9KD602702
HKU\S-1-5-21-1930146046-466709810-403476640-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://home.lenovo.com
HKU\S-1-5-21-1930146046-466709810-403476640-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://home.lenovo.com
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds&ts=1435769927&z=1b427a411a76e17f630defdgbz4c9w9mbq2t4t3oeo&from=cor&uid=ST1000LM024XHN-M101MBB_S2SMJ9KD602702&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds&ts=1435769927&z=1b427a411a76e17f630defdgbz4c9w9mbq2t4t3oeo&from=cor&uid=ST1000LM024XHN-M101MBB_S2SMJ9KD602702&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds&ts=1435769927&z=1b427a411a76e17f630defdgbz4c9w9mbq2t4t3oeo&from=cor&uid=ST1000LM024XHN-M101MBB_S2SMJ9KD602702&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds&ts=1435769927&z=1b427a411a76e17f630defdgbz4c9w9mbq2t4t3oeo&from=cor&uid=ST1000LM024XHN-M101MBB_S2SMJ9KD602702&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1930146046-466709810-403476640-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds&ts=1435769927&z=1b427a411a76e17f630defdgbz4c9w9mbq2t4t3oeo&from=cor&uid=ST1000LM024XHN-M101MBB_S2SMJ9KD602702&q={searchTerms}
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-10-20] (IvoSoft)
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton AntiVirus\Engine64\22.5.0.124\coIEPlg.dll [2015-06-05] (Symantec Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-10-20] (IvoSoft)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton AntiVirus\Engine\22.5.0.124\coIEPlg.dll [2015-06-05] (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton AntiVirus\Engine\21.7.0.11\IPS\IPSBHO.DLL No File
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-10-20] (IvoSoft)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton AntiVirus\Engine64\22.5.0.124\coIEPlg.dll [2015-06-05] (Symantec Corporation)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-10-20] (IvoSoft)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton AntiVirus\Engine\22.5.0.124\coIEPlg.dll [2015-06-05] (Symantec Corporation)
Toolbar: HKU\S-1-5-21-1930146046-466709810-403476640-1001 -> No Name - {A13C2648-91D4-4BF3-BC6D-0079707C4389} -  No File
Toolbar: HKU\S-1-5-21-1930146046-466709810-403476640-1001 -> Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton AntiVirus\Engine64\22.5.0.124\coIEPlg.dll [2015-06-05] (Symantec Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{22E7ED44-0367-485B-A718-A50553B2AEDD}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{CF087134-6B51-44FF-971C-16EED02BC463}: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-08-13] (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll [2012-12-14] (Nitro PDF)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-05-08] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_22.5.0.124\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_22.5.0.124\coFFPlgn [2015-07-26]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton AntiVirus\Engine\22.5.0.124\Exts\Chrome.crx [2015-07-16]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton AntiVirus\Engine\22.5.0.124\Exts\Chrome.crx [2015-07-16]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx

Opera: 
=======
OPR Extension: (Ghostery) - C:\Users\lenovo\AppData\Roaming\Opera Software\Opera Stable\Extensions\bbkekonodcdmedgffkkbgmnnekbainbg [2015-01-31]
OPR Extension: (sailormax) - C:\Users\lenovo\AppData\Roaming\Opera Software\Opera Stable\Extensions\cnbpedcoekjafichoehopgaaldogogch [2014-02-24]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-29] ()
R2 NAV; C:\Program Files (x86)\Norton AntiVirus\Engine\22.5.0.124\NAV.exe [282016 2015-06-18] (Symantec Corporation)
R2 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230408 2012-12-14] (Nitro PDF Software)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16024 2015-01-31] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-29] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 BHDrvx64; C:\Program Files (x86)\Norton AntiVirus\NortonData\22.5.0.124\Definitions\BASHDefs\20150706.001\BHDrvx64.sys [1648880 2015-06-22] (Symantec Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [121728 2012-08-27] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [857472 2012-08-29] (Motorola Solutions, Inc.)
R1 ccSet_NAV; C:\Windows\system32\drivers\NAVx64\1605000.07C\ccSetx64.sys [165080 2015-06-04] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2015-06-16] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [153936 2015-06-16] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton AntiVirus\NortonData\22.5.0.124\Definitions\IPSDefs\20150724.001\IDSvia64.sys [692984 2015-07-17] (Symantec Corporation)
S3 NAVENG; C:\Program Files (x86)\Norton AntiVirus\NortonData\22.5.0.124\Definitions\VirusDefs\20150725.003\ENG64.SYS [138488 2015-05-20] (Symantec Corporation)
S3 NAVEX15; C:\Program Files (x86)\Norton AntiVirus\NortonData\22.5.0.124\Definitions\VirusDefs\20150725.003\EX64.SYS [2146040 2015-05-20] (Symantec Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-10-09] (Intel Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8230160 2012-10-17] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33008 2013-03-25] (Synaptics Incorporated)
S3 SRTSP; C:\Windows\System32\Drivers\NAVx64\1605000.07C\SRTSP64.SYS [917720 2015-06-04] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NAVx64\1605000.07C\SRTSPX64.SYS [42200 2015-06-04] (Symantec Corporation)
R0 SymEFASI; C:\Windows\System32\drivers\NAVx64\1605000.07C\SYMEFASI64.SYS [1611992 2015-06-04] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NAVx64\1605000.07C\SymELAM.sys [23568 2015-06-04] (Symantec Corporation)
R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [102616 2015-07-16] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NAVx64\1605000.07C\Ironx64.SYS [288984 2015-06-04] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NAVx64\1605000.07C\SYMNETS.SYS [567512 2015-06-04] (Symantec Corporation)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [47072 2012-11-30] (Windows (R) Win 7 DDK provider)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)
R3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188896 2012-11-30] (Windows (R) Win 7 DDK provider)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-26 14:22 - 2015-07-26 14:22 - 02146816 _____ (Farbar) C:\Users\lenovo\Desktop\FRST64.exe
2015-07-26 14:16 - 2015-07-26 14:16 - 00000000 ____D C:\Users\ADMINI~1
2015-07-26 11:03 - 2015-07-26 14:27 - 00000000 ____D C:\Users\lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera Software
2015-07-20 22:56 - 2015-07-14 22:11 - 00035328 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2015-07-20 22:56 - 2015-07-14 22:09 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2015-07-20 22:56 - 2015-07-14 21:43 - 00366592 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2015-07-20 22:56 - 2015-07-14 21:43 - 00304128 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2015-07-17 18:13 - 2015-07-17 18:13 - 00000000 ____D C:\windows\System32\Tasks\Norton AntiVirus
2015-07-17 18:00 - 2015-07-17 18:00 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton AntiVirus
2015-07-14 21:56 - 2015-06-27 18:36 - 00171352 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-07-14 21:56 - 2015-06-27 15:56 - 00452608 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2015-07-14 21:56 - 2015-06-27 15:55 - 00668160 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-07-14 21:56 - 2015-06-27 15:55 - 00273920 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2015-07-14 21:56 - 2015-06-27 15:46 - 01314816 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2015-07-14 21:56 - 2015-06-27 15:46 - 00829952 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-07-14 21:56 - 2015-06-27 15:46 - 00588800 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2015-07-14 21:56 - 2015-06-27 15:46 - 00318464 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-07-14 21:56 - 2015-06-27 15:23 - 00694784 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2015-07-14 21:56 - 2015-06-25 20:29 - 00210432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2015-07-14 21:56 - 2015-06-25 20:27 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2015-07-14 21:56 - 2015-06-15 17:22 - 13771264 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-07-14 21:56 - 2015-06-15 17:22 - 02056704 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-07-14 21:56 - 2015-06-15 17:22 - 01763328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-07-14 21:56 - 2015-06-15 17:22 - 01181696 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-07-14 21:56 - 2015-06-15 17:22 - 00737280 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcomm.dll
2015-07-14 21:56 - 2015-06-15 17:22 - 00690176 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-07-14 21:56 - 2015-06-15 17:22 - 00524288 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-07-14 21:56 - 2015-06-15 17:22 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-07-14 21:56 - 2015-06-15 17:22 - 00357888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-07-14 21:56 - 2015-06-15 17:22 - 00226816 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-07-14 21:56 - 2015-06-15 17:22 - 00226816 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-07-14 21:56 - 2015-06-15 17:22 - 00080384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-07-14 21:56 - 2015-06-15 17:20 - 15415296 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-07-14 21:56 - 2015-06-15 17:20 - 02656768 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-07-14 21:56 - 2015-06-15 17:20 - 02237440 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-07-14 21:56 - 2015-06-15 17:20 - 01409024 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-07-14 21:56 - 2015-06-15 17:20 - 00949760 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll
2015-07-14 21:56 - 2015-06-15 17:20 - 00856064 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-07-14 21:56 - 2015-06-15 17:20 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-07-14 21:56 - 2015-06-15 17:20 - 00601600 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-07-14 21:56 - 2015-06-15 17:20 - 00255488 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-07-14 21:56 - 2015-06-15 17:20 - 00097280 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-07-14 21:56 - 2015-06-15 17:19 - 01509376 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-07-14 21:56 - 2015-06-15 17:19 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-07-14 21:55 - 2015-06-27 15:55 - 02865152 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-07-14 21:55 - 2015-06-27 15:46 - 03960320 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-07-14 21:55 - 2015-04-30 15:44 - 00478296 _____ C:\windows\SysWOW64\locale.nls
2015-07-14 21:55 - 2015-04-30 15:44 - 00478296 _____ C:\windows\system32\locale.nls
2015-07-14 21:55 - 2015-01-07 06:25 - 00403456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2015-07-14 21:54 - 2015-07-02 22:31 - 19291136 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-07-14 21:54 - 2015-07-02 21:15 - 14384640 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-07-14 21:47 - 2015-06-17 16:13 - 01150264 _____ (Microsoft Corporation) C:\windows\SysWOW64\ole32.dll
2015-07-14 21:47 - 2015-06-17 15:44 - 01567560 _____ (Microsoft Corporation) C:\windows\system32\ole32.dll
2015-07-14 21:47 - 2015-06-15 17:22 - 08858112 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
2015-07-14 21:47 - 2015-06-15 17:22 - 02416640 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2015-07-14 21:47 - 2015-06-15 17:22 - 02037760 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2015-07-14 21:47 - 2015-06-15 17:22 - 00062976 _____ (Microsoft Corporation) C:\windows\SysWOW64\msiexec.exe
2015-07-14 21:47 - 2015-06-15 17:21 - 00124416 _____ (Microsoft Corporation) C:\windows\system32\msiexec.exe
2015-07-14 21:47 - 2015-06-15 17:20 - 10116608 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
2015-07-14 21:47 - 2015-06-15 17:20 - 02886144 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2015-07-14 21:47 - 2015-06-15 17:19 - 02307072 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2015-07-14 21:47 - 2015-06-11 22:29 - 01302528 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2015-07-14 21:47 - 2015-06-11 18:27 - 01024000 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2015-07-14 21:47 - 2015-06-09 15:57 - 03248640 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2015-07-14 21:47 - 2015-04-21 15:53 - 01174528 _____ (Microsoft Corporation) C:\windows\system32\sppobjs.dll
2015-07-14 21:44 - 2015-06-29 18:18 - 00026288 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe
2015-07-14 21:44 - 2015-06-29 15:28 - 00726528 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2015-07-14 21:44 - 2015-06-29 15:27 - 01084928 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2015-07-14 21:44 - 2015-06-29 15:27 - 00764928 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2015-07-14 21:44 - 2015-06-29 15:27 - 00433152 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2015-07-14 21:44 - 2015-06-29 15:27 - 00227328 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2015-07-14 21:44 - 2015-06-29 15:27 - 00067584 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2015-07-14 21:44 - 2015-06-26 15:07 - 01145856 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2015-07-14 21:43 - 2015-06-25 03:54 - 04064768 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-07-14 21:43 - 2015-05-07 15:05 - 00410739 _____ C:\windows\system32\ApnDatabase.xml
2015-07-13 19:48 - 2015-07-13 19:48 - 15079921 _____ C:\Users\lenovo\Desktop\Slub+wesele.zip
2015-07-01 18:59 - 2015-07-01 18:59 - 34759912 _____ (Mozilla) C:\Users\lenovo\Downloads\Thunderbird%20Setup%2038.0.1.exe
2015-07-01 18:59 - 2015-07-01 18:59 - 00000000 ____D C:\Users\lenovo\AppData\Roaming\istartsurf
2015-06-30 23:00 - 2015-06-30 23:50 - 00000000 ____D C:\Users\lenovo\Desktop\Odebrane_20150630-2300

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-26 14:29 - 2015-03-10 21:24 - 00021732 _____ C:\Users\lenovo\Desktop\FRST.txt
2015-07-26 14:29 - 2015-03-10 21:23 - 00000000 ____D C:\FRST
2015-07-26 14:26 - 2014-02-23 23:56 - 02574848 ___SH C:\Users\lenovo\Desktop\Thumbs.db
2015-07-26 14:25 - 2013-03-25 23:02 - 00102668 _____ C:\windows\PFRO.log
2015-07-26 14:25 - 2012-07-26 09:22 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-07-26 14:23 - 2013-07-17 17:49 - 01513715 _____ C:\windows\WindowsUpdate.log
2015-07-26 14:20 - 2014-02-23 23:57 - 00000000 ____D C:\Users\lenovo\AppData\Roaming\ClassicShell
2015-07-26 14:16 - 2013-07-17 18:01 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-07-26 14:09 - 2014-12-11 20:36 - 00000000 ____D C:\Users\lenovo\Desktop\Kupony
2015-07-26 13:00 - 2012-07-26 10:12 - 00000000 ____D C:\windows\system32\sru
2015-07-26 09:51 - 2014-02-17 11:07 - 00794946 _____ C:\windows\system32\perfh015.dat
2015-07-26 09:51 - 2014-02-17 11:07 - 00159530 _____ C:\windows\system32\perfc015.dat
2015-07-26 09:51 - 2012-07-26 09:28 - 01793398 _____ C:\windows\system32\PerfStringBackup.INI
2015-07-25 22:36 - 2014-02-24 19:18 - 00000000 ____D C:\Program Files (x86)\Opera
2015-07-25 17:30 - 2014-02-25 22:31 - 00000000 ____D C:\Users\lenovo\Desktop\Zdjecia
2015-07-25 17:16 - 2015-04-23 20:57 - 00000000 ____D C:\Program Files (x86)\PowerISO
2015-07-23 23:46 - 2012-07-26 07:26 - 00262144 ___SH C:\windows\system32\config\BBI
2015-07-22 22:33 - 2012-07-26 07:26 - 00262144 ___SH C:\windows\system32\config\ELAM
2015-07-21 22:14 - 2015-03-12 18:20 - 00352536 _____ C:\windows\system32\FNTCACHE.DAT
2015-07-20 22:59 - 2012-07-26 09:59 - 00000000 ____D C:\windows\CbsTemp
2015-07-20 17:59 - 2014-11-22 00:09 - 00000000 ___HD C:\$Windows.~BT
2015-07-19 22:45 - 2012-07-26 10:12 - 00000000 ____D C:\windows\rescache
2015-07-18 05:55 - 2012-07-26 10:12 - 00000000 ___HD C:\windows\ELAMBKUP
2015-07-17 18:01 - 2014-03-20 19:48 - 00000000 ____D C:\windows\system32\Drivers\NAVx64
2015-07-17 18:00 - 2014-05-01 09:19 - 00000000 ____D C:\Users\lenovo\AppData\Local\CrashDumps
2015-07-17 18:00 - 2014-03-20 19:49 - 00003220 _____ C:\windows\System32\Tasks\Norton WSC Integration
2015-07-17 18:00 - 2014-03-20 19:49 - 00002337 _____ C:\Users\Public\Desktop\Norton AntiVirus.LNK
2015-07-17 18:00 - 2014-03-20 19:40 - 00000000 ____D C:\ProgramData\Norton
2015-07-16 23:55 - 2015-01-06 01:21 - 00000000 ____D C:\windows\system32\appraiser
2015-07-16 23:55 - 2014-07-22 23:53 - 00000000 ___SD C:\windows\system32\CompatTel
2015-07-16 23:55 - 2012-07-26 10:12 - 00000000 ___RD C:\windows\ToastData
2015-07-16 19:29 - 2014-03-06 22:10 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-16 19:22 - 2014-03-20 19:49 - 00102616 _____ (Symantec Corporation) C:\windows\system32\Drivers\SYMEVENT64x86.SYS
2015-07-16 19:22 - 2014-03-20 19:49 - 00008166 _____ C:\windows\system32\Drivers\SYMEVENT64x86.CAT
2015-07-16 19:22 - 2014-03-20 19:49 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2015-07-16 19:13 - 2014-03-20 19:40 - 00000000 ____D C:\Users\Public\Downloads\Norton
2015-07-14 21:16 - 2014-06-04 17:24 - 00003870 _____ C:\windows\System32\Tasks\Opera scheduled Autoupdate 1393262303
2015-07-14 21:16 - 2014-02-24 19:18 - 00001062 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-07-13 23:22 - 2015-02-19 20:29 - 00792032 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-07-13 23:22 - 2015-02-19 20:29 - 00177632 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-13 19:34 - 2012-07-26 10:12 - 00000000 ____D C:\windows\AUInstallAgent
2015-07-11 19:05 - 2014-03-06 22:28 - 00000000 ____D C:\Users\lenovo\AppData\Roaming\Nitro PDF
2015-07-07 19:38 - 2014-07-27 22:41 - 00019964 ____H C:\Users\lenovo\Desktop\jpeggeri.dat
2015-07-02 16:23 - 2014-02-26 22:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-07-01 19:01 - 2014-02-26 22:21 - 00001220 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2015-07-01 19:00 - 2015-05-19 18:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2015-07-01 19:00 - 2014-02-26 22:21 - 00000000 ____D C:\Users\lenovo\AppData\Local\Thunderbird
2015-06-28 13:41 - 2012-07-26 09:21 - 00044526 _____ C:\windows\setupact.log

==================== Files in the root of some directories =======

2015-01-12 19:29 - 2015-01-12 19:29 - 0003584 _____ () C:\Users\lenovo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-02-23 21:24 - 2014-02-23 21:24 - 0000017 _____ () C:\Users\lenovo\AppData\Local\resmon.resmoncfg
2013-07-17 18:39 - 2013-07-17 18:39 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-07-22 22:07

==================== End of log ============================