drasticky se zpomalil...virus?
Napsal: 15 kvě 2019 12:37
dekuji vrele, ze se na to podivate...
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17.03.2019
Ran by X220 (administrator) on X220-PC (15-05-2019 13:29:39)
Running from C:\Users\X220\Downloads\FRST-OlderVersion
Loaded Profiles: X220 (Available Profiles: X220 & DefaultAppPool)
Platform: Windows 10 Pro Version 1803 17134.523 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
SearchScopes: HKU\S-1-5-21-3465244428-113409522-2167852280-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation -> Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2019-03-13] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll [2018-03-07] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-03-07] (Oracle America, Inc. -> Oracle Corporation)
FireFox:
========
FF DefaultProfile: en0h23em.default
FF ProfilePath: C:\Users\X220\AppData\Roaming\TomTom\HOME\Profiles\lqh3uc1l.default [2018-02-22]
FF Extension: (No Name) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [not found]
FF ProfilePath: C:\Users\X220\AppData\Roaming\Mozilla\Firefox\Profiles\en0h23em.default [2019-05-15]
FF NewTab: Mozilla\Firefox\Profiles\en0h23em.default -> about:newtab
FF Extension: (hotfix-update-xpi-intermediate) - C:\Users\X220\AppData\Roaming\Mozilla\Firefox\Profiles\en0h23em.default\Extensions\hotfix-update-xpi-intermediate@mozilla.com.xpi [2019-05-15]
FF Extension: (No Name) - C:\Users\X220\AppData\Roaming\Mozilla\Firefox\Profiles\en0h23em.default\Extensions\sp@avast.com.xpi [2019-02-08]
FF Extension: (Avast Online Security) - C:\Users\X220\AppData\Roaming\Mozilla\Firefox\Profiles\en0h23em.default\Extensions\wrc@avast.com.xpi [2019-05-14] [UpdateUrl:hxxps://firefoxext.avcdn.net/firefoxext/avast/aos/update.json]
FF Extension: (Baidu Search Update) - C:\Users\X220\AppData\Roaming\Mozilla\Firefox\Profiles\en0h23em.default\features\{410d5977-370b-4290-99ac-dbded95fa123}\baidu-code-update@mozillaonline.com.xpi [2019-05-08]
FF HKU\S-1-5-21-3465244428-113409522-2167852280-1000\...\Firefox\Extensions: [{F74D5734-46F5-4B16-96F0-1E7FBF41B750}] - C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12
FF Extension: (ThinkVantage Password Manager) - C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12 [2014-10-27] [Legacy] [not signed]
FF HKU\S-1-5-21-3465244428-113409522-2167852280-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: (McAfee Security Scan Plus) - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_142.dll [2019-02-15] (Adobe Systems Incorporated -> )
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_142.dll [2019-02-15] (Adobe Systems Incorporated -> )
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1232202.dll [2018-03-09] (Adobe Systems, Inc.) [File not signed]
FF Plugin-x32: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-03-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-03-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-27] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-27] (Google Inc -> Google LLC)
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: ChromeDefaultData
CHR HomePage: ChromeDefaultData -> hxxp://search.findwide.com/?guid={85EE7439-38F2-48C5-8D6E-0748D8390267}&serpv=22
CHR StartupUrls: ChromeDefaultData -> "hxxps://www.google.com/?trackid=sp-006","hxxps: ... google.com"
CHR DefaultSearchURL: ChromeDefaultData -> hxxps://mail.google.com/mail/u/0/?zx=4op6qrv76z89#inbox
CHR Profile: C:\Users\X220\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2019-05-15] <==== ATTENTION
CHR Extension: (ThinkVantage Password Manager) - C:\Users\X220\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\lpdfbkehegfmedglgemnhbnpmfmioggj [2019-04-07]
CHR Extension: (Chrome Web Store Payments) - C:\Users\X220\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-04-08]
CHR Extension: (Chrome Media Router) - C:\Users\X220\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-05-08]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lpdfbkehegfmedglgemnhbnpmfmioggj] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6660888 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-03-31] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [362488 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-03-31] (AVAST Software s.r.o. -> AVAST Software)
S3 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-08-31] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-08-31] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [51024 2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
R2 ImControllerService; C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [76968 2019-04-24] (Lenovo -> Lenovo Group Ltd.)
S3 LSC.Services.SystemService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe [273232 2016-06-02] (LENOVO -> Lenovo)
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [239184 2013-01-28] (Huawei Technologies Co., Ltd. -> )
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737448 2018-07-15] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ShareItSvc; C:\Program Files (x86)\Lenovo\SHAREit\Shareit.Service.exe [31176 2016-01-20] (LENOVO -> SHAREit Technologies Co.Ltd)
R2 SROSVC; C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SROSVC.exe [446800 2012-03-05] (Lenovo (Japan) Ltd. -> Lenovo Group Limited)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [251480 2018-01-19] (Synaptics Incorporated -> Synaptics Incorporated)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\NisSrv.exe [3917016 2018-10-31] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\MsMpEng.exe [114208 2018-10-31] (Microsoft Corporation -> Microsoft Corporation)
S3 AvastSecureBrowserElevationService; "C:\Program Files (x86)\AVAST Software\Browser\Application\73.0.1270.87\elevation_service.exe" [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [37104 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [205400 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [254128 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [196000 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R0 aswblog; C:\WINDOWS\System32\drivers\aswblog.sys [320624 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [57888 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [15488 2019-01-05] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [257832 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42288 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [166848 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [112520 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [88160 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1031000 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [476776 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [220640 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [385848 2019-05-02] (AVAST Software s.r.o. -> AVAST Software)
S3 b06diag; C:\WINDOWS\system32\drivers\bxdiaga.sys [88104 2012-03-08] (Broadcom Corporation -> Broadcom Corporation)
S3 BFN7x64; C:\WINDOWS\system32\drivers\Xeno7x64.sys [157288 2012-02-22] (Bigfoot Networks, Inc. -> Bigfoot Networks, Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 e1cexpress; C:\WINDOWS\system32\DRIVERS\e1c65x64.sys [480040 2015-06-16] (Intel(R) Intel Network Drivers -> Intel Corporation)
R3 igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [5382856 2017-03-09] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
R3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3343872 2018-04-12] (Microsoft Windows -> Intel Corporation)
S3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [52912 2015-08-07] (Synaptics Incorporated -> Synaptics Incorporated)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46184 2018-10-31] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [328696 2018-10-31] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [60408 2018-10-31] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-05-15 13:28 - 2019-05-15 13:29 - 000000000 ____D C:\Users\X220\Downloads\FRST-OlderVersion
2019-05-15 09:55 - 2019-05-15 09:55 - 000000000 ____D C:\WINDOWS\Panther
2019-05-12 16:47 - 2019-04-25 09:18 - 000362888 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2019-05-11 18:15 - 2019-05-13 09:06 - 000004264 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2019-05-09 23:06 - 2019-04-24 09:06 - 000425128 _____ (Lenovo Group Limited) C:\WINDOWS\system32\iMDriverHelper.dll
2019-05-09 23:06 - 2019-04-24 09:06 - 000205992 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\Lenovo.Modern.CoreTypes.dll
2019-05-09 23:06 - 2019-04-24 09:06 - 000130728 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\Lenovo.Modern.Utilities.dll
2019-05-09 23:06 - 2019-04-24 09:06 - 000097448 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\Lenovo.Modern.ImController.ImClient.dll
2019-05-09 23:06 - 2019-04-24 09:06 - 000043688 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\Lenovo.ImController.EventLogging.dll
2019-05-08 22:43 - 2019-05-08 22:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2019-05-07 21:51 - 2019-05-07 21:51 - 000051024 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2019-05-07 21:51 - 2019-05-07 21:51 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2019-05-07 21:51 - 2019-05-07 21:51 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2019-05-07 21:51 - 2019-05-07 21:51 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2019-05-07 09:27 - 2019-05-14 11:20 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2019-04-25 09:19 - 2019-04-25 09:19 - 000000077 _____ C:\WINDOWS\system32\Drivers\aswSP.sys.sum
2019-04-25 09:13 - 2019-04-25 09:23 - 000000000 ____D C:\WINDOWS\Minidump
2019-04-24 03:36 - 2019-02-13 07:47 - 001909560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
==================== One month (modified) ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-05-15 13:29 - 2019-04-06 19:59 - 000000000 ____D C:\FRST
2019-05-15 13:29 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-05-15 13:28 - 2019-04-06 19:57 - 000196608 _____ C:\Users\X220\Downloads\FRST64.exe
2019-05-15 09:54 - 2014-10-27 12:03 - 000000000 ____C C:\WINDOWS\system32\MRT.exe
2019-05-15 09:31 - 2018-04-12 01:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-05-15 08:09 - 2018-10-30 03:15 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-05-15 03:28 - 2018-06-26 09:07 - 000000000 ___DC C:\Users\X220\AppData\Local\CrashDumps
2019-05-14 23:59 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-05-14 20:21 - 2018-10-30 03:38 - 000002858 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3465244428-113409522-2167852280-1000
2019-05-14 20:21 - 2018-10-30 03:38 - 000000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2019-05-14 11:20 - 2018-03-05 12:51 - 000000000 ___DC C:\Users\X220\AppData\LocalLow\Mozilla
2019-05-14 08:47 - 2019-03-08 21:43 - 000000000 ___DC C:\Users\X220\Desktop\vyhodit
2019-05-13 22:53 - 2018-04-12 01:38 - 000000000 ___HD C:\Program Files\WindowsApps
2019-05-13 22:20 - 2017-01-03 14:00 - 000000000 ___DC C:\Users\X220\Documents\important
2019-05-12 18:03 - 2018-10-30 12:08 - 000774036 _____ C:\WINDOWS\system32\perfh01D.dat
2019-05-12 18:03 - 2018-10-30 12:08 - 000169034 _____ C:\WINDOWS\system32\perfc01D.dat
2019-05-12 18:03 - 2018-10-30 03:17 - 001902138 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-05-12 18:03 - 2018-04-12 01:36 - 000000000 ____D C:\WINDOWS\INF
2019-05-12 17:54 - 2018-10-30 03:38 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-05-12 17:54 - 2018-04-11 23:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2019-05-12 16:48 - 2016-07-12 14:06 - 000002088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2019-05-12 16:48 - 2015-10-13 10:47 - 000002076 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2019-05-12 16:47 - 2018-04-12 01:38 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2019-05-10 14:17 - 2018-10-30 03:21 - 000000000 ____D C:\Users\X220
2019-05-09 23:08 - 2014-12-10 13:57 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-05-08 22:43 - 2016-08-31 11:49 - 000000000 ____D C:\Program Files (x86)\Dropbox
2019-05-08 10:38 - 2014-12-10 13:57 - 000001147 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-05-08 09:06 - 2018-10-30 03:21 - 000002397 ____C C:\Users\X220\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-05-08 09:06 - 2016-06-24 23:03 - 000000000 ___RD C:\Users\X220\OneDrive
2019-05-07 21:34 - 2015-04-26 16:08 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-05-07 21:34 - 2015-04-26 16:08 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-05-06 23:17 - 2018-09-15 12:18 - 000000000 ___HD C:\$WINDOWS.~BT
2019-05-05 21:32 - 2015-05-12 11:25 - 000000000 ___DC C:\Users\X220\Documents\jobs
2019-05-02 09:27 - 2014-11-14 00:36 - 000385848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2019-05-02 08:26 - 2014-11-14 00:34 - 000000000 ____D C:\Program Files\AVAST Software
2019-05-02 08:25 - 2014-11-14 00:34 - 000000000 ____D C:\ProgramData\AVAST Software
2019-05-01 11:54 - 2018-03-05 18:32 - 000000000 ___DC C:\Users\X220\AppData\Local\Packages
2019-04-29 11:22 - 2015-04-07 13:18 - 000000000 ___DC C:\Users\X220\Documents\gender
2019-04-26 17:15 - 2018-10-31 20:19 - 000000000 _____ C:\WINDOWS\system32\last.dump
2019-04-25 09:20 - 2019-04-11 22:50 - 000003856 _____ C:\WINDOWS\System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2019-04-25 09:20 - 2019-04-11 22:50 - 000003272 _____ C:\WINDOWS\System32\Tasks\Avast Secure Browser Heartbeat Task (Logon)
2019-04-25 09:20 - 2018-10-30 03:38 - 000003458 _____ C:\WINDOWS\System32\Tasks\AvastUpdateTaskMachineUA
2019-04-25 09:20 - 2018-10-30 03:38 - 000003334 _____ C:\WINDOWS\System32\Tasks\AvastUpdateTaskMachineCore
2019-04-25 09:20 - 2018-03-31 09:11 - 000002570 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2019-04-25 09:20 - 2018-03-31 09:11 - 000002535 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2019-04-25 09:19 - 2014-11-14 00:36 - 000476776 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2019-04-25 09:18 - 2019-02-13 11:37 - 000257832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHdsKe.sys
2019-04-25 09:18 - 2019-01-14 17:48 - 000254128 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2019-04-25 09:18 - 2019-01-05 13:47 - 000320624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswblog.sys
2019-04-25 09:18 - 2019-01-05 13:47 - 000196000 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2019-04-25 09:18 - 2019-01-05 13:47 - 000057888 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2019-04-25 09:18 - 2019-01-05 13:47 - 000037104 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2019-04-25 09:18 - 2017-11-17 22:39 - 000205400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2019-04-25 09:18 - 2016-07-12 14:06 - 000042288 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2019-04-25 09:18 - 2014-11-14 00:36 - 001031000 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2019-04-25 09:18 - 2014-11-14 00:36 - 000220640 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2019-04-25 09:18 - 2014-11-14 00:36 - 000166848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2019-04-25 09:18 - 2014-11-14 00:36 - 000112520 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2019-04-25 09:18 - 2014-11-14 00:36 - 000088160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2019-04-24 09:06 - 2018-06-23 08:13 - 000104616 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\WudfUpdate_02000.dll
2019-04-24 09:06 - 2018-06-23 08:13 - 000054440 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\ImController.InfInstaller.exe
2019-04-24 09:06 - 2017-12-16 21:03 - 000104616 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\ImController.CoInstaller.dll
2019-04-23 13:11 - 2014-12-11 11:28 - 000000000 ___DC C:\Users\X220\Documents\health
2019-04-22 08:42 - 2016-08-31 11:53 - 000000000 ___RD C:\Users\X220\Dropbox
2019-04-19 21:42 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
==================== Files in the root of some directories =======
2016-06-17 08:54 - 2016-06-17 08:54 - 000000225 ____C () C:\Users\X220\AppData\Roaming\10-sub-pixel-bgr.conf
2016-06-17 08:54 - 2016-06-17 08:54 - 000004341 ____C () C:\Users\X220\AppData\Roaming\administration.config
2016-06-17 08:54 - 2016-06-17 08:54 - 000003472 ____C () C:\Users\X220\AppData\Roaming\Adobe-GB1-0
2016-06-17 08:54 - 2016-06-17 08:54 - 000003524 ____C () C:\Users\X220\AppData\Roaming\Adobe-Japan1-1
2016-06-17 08:54 - 2016-06-17 08:54 - 000002400 ____C () C:\Users\X220\AppData\Roaming\AlienFX.Communication.Andromeda.tlb
2016-06-17 08:54 - 2016-06-17 08:54 - 000003244 ____C () C:\Users\X220\AppData\Roaming\api-doc.xml
2016-06-17 08:53 - 2016-06-17 08:53 - 000000599 ____C () C:\Users\X220\AppData\Roaming\blue.svg
2016-06-17 08:53 - 2016-06-17 08:53 - 000001234 ____C () C:\Users\X220\AppData\Roaming\body.end.indent.xml
2016-06-17 08:53 - 2016-06-17 08:53 - 000004399 ____C () C:\Users\X220\AppData\Roaming\b_ar.jpg
2016-06-17 08:53 - 2016-06-17 08:53 - 000002011 ____C () C:\Users\X220\AppData\Roaming\calendar.rdf
2016-06-17 08:53 - 2016-06-17 08:53 - 000001290 ____C () C:\Users\X220\AppData\Roaming\callout.unicode.start.character.xml
2013-04-16 09:00 - 2013-04-16 09:00 - 000049763 ____C () C:\Users\X220\AppData\Roaming\Catboat.m
2016-06-17 08:53 - 2016-06-17 08:53 - 000001464 ____C () C:\Users\X220\AppData\Roaming\cp_keyboard.png
2016-06-17 08:53 - 2016-06-17 08:53 - 000000946 ____C () C:\Users\X220\AppData\Roaming\crop.mark.bleed.xml
2016-06-17 08:53 - 2016-06-17 08:53 - 000003973 ____C () C:\Users\X220\AppData\Roaming\editSettings.png
2016-06-17 08:53 - 2016-06-17 08:53 - 000001704 ____C () C:\Users\X220\AppData\Roaming\f1.png
2016-06-17 08:53 - 2016-06-17 08:53 - 000003652 ____C () C:\Users\X220\AppData\Roaming\generate.toc.xml
2016-06-17 08:53 - 2016-06-17 08:53 - 000001309 ____C () C:\Users\X220\AppData\Roaming\glossterm.auto.link.xml
2016-06-17 08:53 - 2016-06-17 08:53 - 000000935 ____C () C:\Users\X220\AppData\Roaming\glossterm.width.xml
1986-05-12 09:00 - 1986-05-12 09:00 - 000001750 ____C () C:\Users\X220\AppData\Roaming\MasseurChromophore.uPS
2018-03-04 00:09 - 2018-03-04 00:09 - 000029696 ____C () C:\Users\X220\AppData\Local\MSGBOX.EXE
2018-12-06 11:52 - 2018-12-06 11:52 - 000000017 ____C () C:\Users\X220\AppData\Local\resmon.resmoncfg
Some zero byte size files/folders:
==========================
C:\Windows\System32\MRT.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\dllhost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\dllhost.exe => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-10-30 03:15
==================== End of FRST.txt ============================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17.03.2019
Ran by X220 (administrator) on X220-PC (15-05-2019 13:29:39)
Running from C:\Users\X220\Downloads\FRST-OlderVersion
Loaded Profiles: X220 (Available Profiles: X220 & DefaultAppPool)
Platform: Windows 10 Pro Version 1803 17134.523 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
SearchScopes: HKU\S-1-5-21-3465244428-113409522-2167852280-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation -> Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2019-03-13] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll [2018-03-07] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-03-07] (Oracle America, Inc. -> Oracle Corporation)
FireFox:
========
FF DefaultProfile: en0h23em.default
FF ProfilePath: C:\Users\X220\AppData\Roaming\TomTom\HOME\Profiles\lqh3uc1l.default [2018-02-22]
FF Extension: (No Name) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [not found]
FF ProfilePath: C:\Users\X220\AppData\Roaming\Mozilla\Firefox\Profiles\en0h23em.default [2019-05-15]
FF NewTab: Mozilla\Firefox\Profiles\en0h23em.default -> about:newtab
FF Extension: (hotfix-update-xpi-intermediate) - C:\Users\X220\AppData\Roaming\Mozilla\Firefox\Profiles\en0h23em.default\Extensions\hotfix-update-xpi-intermediate@mozilla.com.xpi [2019-05-15]
FF Extension: (No Name) - C:\Users\X220\AppData\Roaming\Mozilla\Firefox\Profiles\en0h23em.default\Extensions\sp@avast.com.xpi [2019-02-08]
FF Extension: (Avast Online Security) - C:\Users\X220\AppData\Roaming\Mozilla\Firefox\Profiles\en0h23em.default\Extensions\wrc@avast.com.xpi [2019-05-14] [UpdateUrl:hxxps://firefoxext.avcdn.net/firefoxext/avast/aos/update.json]
FF Extension: (Baidu Search Update) - C:\Users\X220\AppData\Roaming\Mozilla\Firefox\Profiles\en0h23em.default\features\{410d5977-370b-4290-99ac-dbded95fa123}\baidu-code-update@mozillaonline.com.xpi [2019-05-08]
FF HKU\S-1-5-21-3465244428-113409522-2167852280-1000\...\Firefox\Extensions: [{F74D5734-46F5-4B16-96F0-1E7FBF41B750}] - C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12
FF Extension: (ThinkVantage Password Manager) - C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12 [2014-10-27] [Legacy] [not signed]
FF HKU\S-1-5-21-3465244428-113409522-2167852280-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: (McAfee Security Scan Plus) - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_142.dll [2019-02-15] (Adobe Systems Incorporated -> )
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_142.dll [2019-02-15] (Adobe Systems Incorporated -> )
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1232202.dll [2018-03-09] (Adobe Systems, Inc.) [File not signed]
FF Plugin-x32: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-03-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-03-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-27] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-27] (Google Inc -> Google LLC)
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: ChromeDefaultData
CHR HomePage: ChromeDefaultData -> hxxp://search.findwide.com/?guid={85EE7439-38F2-48C5-8D6E-0748D8390267}&serpv=22
CHR StartupUrls: ChromeDefaultData -> "hxxps://www.google.com/?trackid=sp-006","hxxps: ... google.com"
CHR DefaultSearchURL: ChromeDefaultData -> hxxps://mail.google.com/mail/u/0/?zx=4op6qrv76z89#inbox
CHR Profile: C:\Users\X220\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2019-05-15] <==== ATTENTION
CHR Extension: (ThinkVantage Password Manager) - C:\Users\X220\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\lpdfbkehegfmedglgemnhbnpmfmioggj [2019-04-07]
CHR Extension: (Chrome Web Store Payments) - C:\Users\X220\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-04-08]
CHR Extension: (Chrome Media Router) - C:\Users\X220\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-05-08]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lpdfbkehegfmedglgemnhbnpmfmioggj] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6660888 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-03-31] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [362488 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-03-31] (AVAST Software s.r.o. -> AVAST Software)
S3 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-08-31] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-08-31] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [51024 2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
R2 ImControllerService; C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [76968 2019-04-24] (Lenovo -> Lenovo Group Ltd.)
S3 LSC.Services.SystemService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe [273232 2016-06-02] (LENOVO -> Lenovo)
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [239184 2013-01-28] (Huawei Technologies Co., Ltd. -> )
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737448 2018-07-15] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ShareItSvc; C:\Program Files (x86)\Lenovo\SHAREit\Shareit.Service.exe [31176 2016-01-20] (LENOVO -> SHAREit Technologies Co.Ltd)
R2 SROSVC; C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SROSVC.exe [446800 2012-03-05] (Lenovo (Japan) Ltd. -> Lenovo Group Limited)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [251480 2018-01-19] (Synaptics Incorporated -> Synaptics Incorporated)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\NisSrv.exe [3917016 2018-10-31] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\MsMpEng.exe [114208 2018-10-31] (Microsoft Corporation -> Microsoft Corporation)
S3 AvastSecureBrowserElevationService; "C:\Program Files (x86)\AVAST Software\Browser\Application\73.0.1270.87\elevation_service.exe" [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [37104 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [205400 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [254128 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [196000 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R0 aswblog; C:\WINDOWS\System32\drivers\aswblog.sys [320624 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [57888 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [15488 2019-01-05] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [257832 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42288 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [166848 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [112520 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [88160 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1031000 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [476776 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [220640 2019-04-25] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [385848 2019-05-02] (AVAST Software s.r.o. -> AVAST Software)
S3 b06diag; C:\WINDOWS\system32\drivers\bxdiaga.sys [88104 2012-03-08] (Broadcom Corporation -> Broadcom Corporation)
S3 BFN7x64; C:\WINDOWS\system32\drivers\Xeno7x64.sys [157288 2012-02-22] (Bigfoot Networks, Inc. -> Bigfoot Networks, Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 e1cexpress; C:\WINDOWS\system32\DRIVERS\e1c65x64.sys [480040 2015-06-16] (Intel(R) Intel Network Drivers -> Intel Corporation)
R3 igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [5382856 2017-03-09] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
R3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3343872 2018-04-12] (Microsoft Windows -> Intel Corporation)
S3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [52912 2015-08-07] (Synaptics Incorporated -> Synaptics Incorporated)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46184 2018-10-31] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [328696 2018-10-31] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [60408 2018-10-31] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-05-15 13:28 - 2019-05-15 13:29 - 000000000 ____D C:\Users\X220\Downloads\FRST-OlderVersion
2019-05-15 09:55 - 2019-05-15 09:55 - 000000000 ____D C:\WINDOWS\Panther
2019-05-12 16:47 - 2019-04-25 09:18 - 000362888 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2019-05-11 18:15 - 2019-05-13 09:06 - 000004264 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2019-05-09 23:06 - 2019-04-24 09:06 - 000425128 _____ (Lenovo Group Limited) C:\WINDOWS\system32\iMDriverHelper.dll
2019-05-09 23:06 - 2019-04-24 09:06 - 000205992 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\Lenovo.Modern.CoreTypes.dll
2019-05-09 23:06 - 2019-04-24 09:06 - 000130728 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\Lenovo.Modern.Utilities.dll
2019-05-09 23:06 - 2019-04-24 09:06 - 000097448 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\Lenovo.Modern.ImController.ImClient.dll
2019-05-09 23:06 - 2019-04-24 09:06 - 000043688 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\Lenovo.ImController.EventLogging.dll
2019-05-08 22:43 - 2019-05-08 22:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2019-05-07 21:51 - 2019-05-07 21:51 - 000051024 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2019-05-07 21:51 - 2019-05-07 21:51 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2019-05-07 21:51 - 2019-05-07 21:51 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2019-05-07 21:51 - 2019-05-07 21:51 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2019-05-07 09:27 - 2019-05-14 11:20 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2019-04-25 09:19 - 2019-04-25 09:19 - 000000077 _____ C:\WINDOWS\system32\Drivers\aswSP.sys.sum
2019-04-25 09:13 - 2019-04-25 09:23 - 000000000 ____D C:\WINDOWS\Minidump
2019-04-24 03:36 - 2019-02-13 07:47 - 001909560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
==================== One month (modified) ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-05-15 13:29 - 2019-04-06 19:59 - 000000000 ____D C:\FRST
2019-05-15 13:29 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-05-15 13:28 - 2019-04-06 19:57 - 000196608 _____ C:\Users\X220\Downloads\FRST64.exe
2019-05-15 09:54 - 2014-10-27 12:03 - 000000000 ____C C:\WINDOWS\system32\MRT.exe
2019-05-15 09:31 - 2018-04-12 01:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-05-15 08:09 - 2018-10-30 03:15 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-05-15 03:28 - 2018-06-26 09:07 - 000000000 ___DC C:\Users\X220\AppData\Local\CrashDumps
2019-05-14 23:59 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-05-14 20:21 - 2018-10-30 03:38 - 000002858 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3465244428-113409522-2167852280-1000
2019-05-14 20:21 - 2018-10-30 03:38 - 000000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2019-05-14 11:20 - 2018-03-05 12:51 - 000000000 ___DC C:\Users\X220\AppData\LocalLow\Mozilla
2019-05-14 08:47 - 2019-03-08 21:43 - 000000000 ___DC C:\Users\X220\Desktop\vyhodit
2019-05-13 22:53 - 2018-04-12 01:38 - 000000000 ___HD C:\Program Files\WindowsApps
2019-05-13 22:20 - 2017-01-03 14:00 - 000000000 ___DC C:\Users\X220\Documents\important
2019-05-12 18:03 - 2018-10-30 12:08 - 000774036 _____ C:\WINDOWS\system32\perfh01D.dat
2019-05-12 18:03 - 2018-10-30 12:08 - 000169034 _____ C:\WINDOWS\system32\perfc01D.dat
2019-05-12 18:03 - 2018-10-30 03:17 - 001902138 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-05-12 18:03 - 2018-04-12 01:36 - 000000000 ____D C:\WINDOWS\INF
2019-05-12 17:54 - 2018-10-30 03:38 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-05-12 17:54 - 2018-04-11 23:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2019-05-12 16:48 - 2016-07-12 14:06 - 000002088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2019-05-12 16:48 - 2015-10-13 10:47 - 000002076 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2019-05-12 16:47 - 2018-04-12 01:38 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2019-05-10 14:17 - 2018-10-30 03:21 - 000000000 ____D C:\Users\X220
2019-05-09 23:08 - 2014-12-10 13:57 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-05-08 22:43 - 2016-08-31 11:49 - 000000000 ____D C:\Program Files (x86)\Dropbox
2019-05-08 10:38 - 2014-12-10 13:57 - 000001147 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-05-08 09:06 - 2018-10-30 03:21 - 000002397 ____C C:\Users\X220\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-05-08 09:06 - 2016-06-24 23:03 - 000000000 ___RD C:\Users\X220\OneDrive
2019-05-07 21:34 - 2015-04-26 16:08 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-05-07 21:34 - 2015-04-26 16:08 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-05-06 23:17 - 2018-09-15 12:18 - 000000000 ___HD C:\$WINDOWS.~BT
2019-05-05 21:32 - 2015-05-12 11:25 - 000000000 ___DC C:\Users\X220\Documents\jobs
2019-05-02 09:27 - 2014-11-14 00:36 - 000385848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2019-05-02 08:26 - 2014-11-14 00:34 - 000000000 ____D C:\Program Files\AVAST Software
2019-05-02 08:25 - 2014-11-14 00:34 - 000000000 ____D C:\ProgramData\AVAST Software
2019-05-01 11:54 - 2018-03-05 18:32 - 000000000 ___DC C:\Users\X220\AppData\Local\Packages
2019-04-29 11:22 - 2015-04-07 13:18 - 000000000 ___DC C:\Users\X220\Documents\gender
2019-04-26 17:15 - 2018-10-31 20:19 - 000000000 _____ C:\WINDOWS\system32\last.dump
2019-04-25 09:20 - 2019-04-11 22:50 - 000003856 _____ C:\WINDOWS\System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2019-04-25 09:20 - 2019-04-11 22:50 - 000003272 _____ C:\WINDOWS\System32\Tasks\Avast Secure Browser Heartbeat Task (Logon)
2019-04-25 09:20 - 2018-10-30 03:38 - 000003458 _____ C:\WINDOWS\System32\Tasks\AvastUpdateTaskMachineUA
2019-04-25 09:20 - 2018-10-30 03:38 - 000003334 _____ C:\WINDOWS\System32\Tasks\AvastUpdateTaskMachineCore
2019-04-25 09:20 - 2018-03-31 09:11 - 000002570 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2019-04-25 09:20 - 2018-03-31 09:11 - 000002535 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2019-04-25 09:19 - 2014-11-14 00:36 - 000476776 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2019-04-25 09:18 - 2019-02-13 11:37 - 000257832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHdsKe.sys
2019-04-25 09:18 - 2019-01-14 17:48 - 000254128 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2019-04-25 09:18 - 2019-01-05 13:47 - 000320624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswblog.sys
2019-04-25 09:18 - 2019-01-05 13:47 - 000196000 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2019-04-25 09:18 - 2019-01-05 13:47 - 000057888 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2019-04-25 09:18 - 2019-01-05 13:47 - 000037104 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2019-04-25 09:18 - 2017-11-17 22:39 - 000205400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2019-04-25 09:18 - 2016-07-12 14:06 - 000042288 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2019-04-25 09:18 - 2014-11-14 00:36 - 001031000 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2019-04-25 09:18 - 2014-11-14 00:36 - 000220640 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2019-04-25 09:18 - 2014-11-14 00:36 - 000166848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2019-04-25 09:18 - 2014-11-14 00:36 - 000112520 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2019-04-25 09:18 - 2014-11-14 00:36 - 000088160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2019-04-24 09:06 - 2018-06-23 08:13 - 000104616 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\WudfUpdate_02000.dll
2019-04-24 09:06 - 2018-06-23 08:13 - 000054440 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\ImController.InfInstaller.exe
2019-04-24 09:06 - 2017-12-16 21:03 - 000104616 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\ImController.CoInstaller.dll
2019-04-23 13:11 - 2014-12-11 11:28 - 000000000 ___DC C:\Users\X220\Documents\health
2019-04-22 08:42 - 2016-08-31 11:53 - 000000000 ___RD C:\Users\X220\Dropbox
2019-04-19 21:42 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
==================== Files in the root of some directories =======
2016-06-17 08:54 - 2016-06-17 08:54 - 000000225 ____C () C:\Users\X220\AppData\Roaming\10-sub-pixel-bgr.conf
2016-06-17 08:54 - 2016-06-17 08:54 - 000004341 ____C () C:\Users\X220\AppData\Roaming\administration.config
2016-06-17 08:54 - 2016-06-17 08:54 - 000003472 ____C () C:\Users\X220\AppData\Roaming\Adobe-GB1-0
2016-06-17 08:54 - 2016-06-17 08:54 - 000003524 ____C () C:\Users\X220\AppData\Roaming\Adobe-Japan1-1
2016-06-17 08:54 - 2016-06-17 08:54 - 000002400 ____C () C:\Users\X220\AppData\Roaming\AlienFX.Communication.Andromeda.tlb
2016-06-17 08:54 - 2016-06-17 08:54 - 000003244 ____C () C:\Users\X220\AppData\Roaming\api-doc.xml
2016-06-17 08:53 - 2016-06-17 08:53 - 000000599 ____C () C:\Users\X220\AppData\Roaming\blue.svg
2016-06-17 08:53 - 2016-06-17 08:53 - 000001234 ____C () C:\Users\X220\AppData\Roaming\body.end.indent.xml
2016-06-17 08:53 - 2016-06-17 08:53 - 000004399 ____C () C:\Users\X220\AppData\Roaming\b_ar.jpg
2016-06-17 08:53 - 2016-06-17 08:53 - 000002011 ____C () C:\Users\X220\AppData\Roaming\calendar.rdf
2016-06-17 08:53 - 2016-06-17 08:53 - 000001290 ____C () C:\Users\X220\AppData\Roaming\callout.unicode.start.character.xml
2013-04-16 09:00 - 2013-04-16 09:00 - 000049763 ____C () C:\Users\X220\AppData\Roaming\Catboat.m
2016-06-17 08:53 - 2016-06-17 08:53 - 000001464 ____C () C:\Users\X220\AppData\Roaming\cp_keyboard.png
2016-06-17 08:53 - 2016-06-17 08:53 - 000000946 ____C () C:\Users\X220\AppData\Roaming\crop.mark.bleed.xml
2016-06-17 08:53 - 2016-06-17 08:53 - 000003973 ____C () C:\Users\X220\AppData\Roaming\editSettings.png
2016-06-17 08:53 - 2016-06-17 08:53 - 000001704 ____C () C:\Users\X220\AppData\Roaming\f1.png
2016-06-17 08:53 - 2016-06-17 08:53 - 000003652 ____C () C:\Users\X220\AppData\Roaming\generate.toc.xml
2016-06-17 08:53 - 2016-06-17 08:53 - 000001309 ____C () C:\Users\X220\AppData\Roaming\glossterm.auto.link.xml
2016-06-17 08:53 - 2016-06-17 08:53 - 000000935 ____C () C:\Users\X220\AppData\Roaming\glossterm.width.xml
1986-05-12 09:00 - 1986-05-12 09:00 - 000001750 ____C () C:\Users\X220\AppData\Roaming\MasseurChromophore.uPS
2018-03-04 00:09 - 2018-03-04 00:09 - 000029696 ____C () C:\Users\X220\AppData\Local\MSGBOX.EXE
2018-12-06 11:52 - 2018-12-06 11:52 - 000000017 ____C () C:\Users\X220\AppData\Local\resmon.resmoncfg
Some zero byte size files/folders:
==========================
C:\Windows\System32\MRT.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\dllhost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\dllhost.exe => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-10-30 03:15
==================== End of FRST.txt ============================