cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:12-06-2016 01
Ran by TopoGigio (administrator) on DESKTOP-060VE46 (12-06-2016 14:50:44)
Running from C:\Users\TopoGigio\Downloads
Loaded Profiles: TopoGigio (Available Profiles: TopoGigio)
Platform: Microsoft Windows 10 Pro Version 1511 (X86) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
(Foxit Software Inc.) C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.Systray.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Secure By Design Inc.) C:\Users\TopoGigio\Downloads\Ninite Avast Malwarebytes Spybot 2 SUPERAntiSpyware Installer.exe
(Secure By Design Inc.) C:\Users\TopoGigio\AppData\Local\Temp\087006f9-30c5-11e6-b522-001e90f6f145\Ninite.exe
(Secure By Design Inc.) C:\Users\TopoGigio\AppData\Local\Temp\087006f9-30c5-11e6-b522-001e90f6f145\Ninite.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.325.12390.0_x86__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.19761.0_x86__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\Antivirus\avgnt.exe [807392 2016-02-22] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira SystrayStartTrigger] => C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-04-25] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-1265530682-2191566991-3259641471-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6490904 2015-08-19] (Piriform Ltd)
BootExecute: autocheck autochk * sdnclean.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.25.1
Tcpip\..\Interfaces\{391bf246-9fd2-40d7-b5a8-9ed0e30df51e}: [DhcpNameServer] 192.168.25.1

Internet Explorer:
==================
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_73\bin\ssv.dll [2016-03-12] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-03-12] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\TopoGigio\AppData\Roaming\Mozilla\Firefox\Profiles\ok7y7krj.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-08] ()
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2012-12-13] (Google)
FF Plugin: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-03-12] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-03-12] (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-02-09] (Adobe Systems Inc.)
FF Extension: SaveFrom.net - helper - C:\Users\TopoGigio\AppData\Roaming\Mozilla\Firefox\Profiles\ok7y7krj.default\Extensions\helper-sig@savefrom.net.xpi [2016-06-08]
FF Extension: Adblock Plus - C:\Users\TopoGigio\AppData\Roaming\Mozilla\Firefox\Profiles\ok7y7krj.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28]

Chrome:
=======
CHR Profile: C:\Users\TopoGigio\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Apresentações) - C:\Users\TopoGigio\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-03-05]
CHR Extension: (Google Docs) - C:\Users\TopoGigio\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-03-12]
CHR Extension: (Google Drive) - C:\Users\TopoGigio\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-12]
CHR Extension: (YouTube) - C:\Users\TopoGigio\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-12]
CHR Extension: (Planilhas do Google) - C:\Users\TopoGigio\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-03-05]
CHR Extension: (Documentos Google off-line) - C:\Users\TopoGigio\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-19]
CHR Extension: (Video Downloader Pro) - C:\Users\TopoGigio\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilppkoakomgpcblpemgbloapenijdcho [2016-06-12]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\TopoGigio\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-15]
CHR Extension: (Gmail) - C:\Users\TopoGigio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-12]

Opera:
=======
OPR Extension: (No Name) - C:\Users\TopoGigio\AppData\Roaming\Opera Software\Opera Stable\Extensions\npdpplbicnmpoigidfdjadamgfkilaak [2016-06-12]
OPR Extension: (No Name) - C:\Users\TopoGigio\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2016-06-12]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [142648 2014-07-22] (SUPERAntiSpyware.com)
S2 AntiVirMailService; C:\Program Files\Avira\Antivirus\avmailc7.exe [955736 2016-02-22] (Avira Operations GmbH & Co. KG)
S2 AntiVirSchedulerService; C:\Program Files\Avira\Antivirus\sched.exe [466504 2016-02-22] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files\Avira\Antivirus\avguard.exe [466504 2016-02-22] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\Antivirus\avwebg7.exe [1424880 2016-02-22] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [280008 2016-04-25] (Avira Operations GmbH & Co. KG)
R2 FoxitCloudUpdateService; C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [242880 2015-07-02] (Foxit Software Inc.)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [280376 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23256 2015-10-30] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\System32\drivers\athwn.sys [3205632 2015-10-30] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [104480 2016-02-22] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [137392 2016-02-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [44208 2016-02-22] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [57088 2016-02-22] (Avira Operations GmbH & Co. KG)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [108032 2016-04-25] (Samsung Electronics Co., Ltd.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [24448 2016-03-10] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [53120 2016-03-10] (Malwarebytes Corporation)
S1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [31848 2016-02-22] (Avira Operations GmbH & Co. KG)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [199936 2016-04-25] (Samsung Electronics Co., Ltd.)
S3 ssudserd; C:\Windows\system32\DRIVERS\ssudserd.sys [192944 2015-12-08] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [37400 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [246104 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [98648 2015-10-30] (Microsoft Corporation)
S3 WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [163328 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-06-12 14:50 - 2016-06-12 14:51 - 00012192 _____ C:\Users\TopoGigio\Downloads\FRST.txt
2016-06-12 14:50 - 2016-06-12 14:50 - 00000000 ____D C:\FRST
2016-06-12 14:49 - 2016-06-12 14:50 - 01735680 _____ (Farbar) C:\Users\TopoGigio\Downloads\FRST.exe
2016-06-12 14:48 - 2016-06-12 14:49 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-06-12 14:48 - 2016-06-12 14:48 - 00002204 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2016-06-12 14:48 - 2016-06-12 14:48 - 00002192 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2016-06-12 14:48 - 2016-06-12 14:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2016-06-12 14:48 - 2016-06-12 14:48 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2016-06-12 14:48 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean.exe
2016-06-12 14:46 - 2016-06-12 14:46 - 00001958 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2016-06-12 14:46 - 2016-06-12 14:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2016-06-12 14:45 - 2016-06-12 14:46 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2016-06-12 14:45 - 2016-06-12 14:45 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2016-06-12 14:44 - 2016-06-12 14:44 - 00001133 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-06-12 14:44 - 2016-06-12 14:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-06-12 14:43 - 2016-06-12 14:44 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2016-06-12 14:43 - 2016-06-12 14:43 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-06-12 14:43 - 2016-03-10 14:09 - 00053120 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-06-12 14:43 - 2016-03-10 14:08 - 00126336 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-06-12 14:43 - 2016-03-10 14:08 - 00024448 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-06-12 14:42 - 2016-06-12 14:42 - 00307200 _____ (Secure By Design Inc.) C:\Users\TopoGigio\Downloads\Ninite Avast Malwarebytes Spybot 2 SUPERAntiSpyware Installer.exe
2016-06-12 14:41 - 2016-06-12 14:41 - 00000000 ____D C:\Program Files\Enigma Software Group
2016-06-12 14:40 - 2016-06-12 14:40 - 03482800 _____ (Enigma Software Group USA, LLC.) C:\Users\TopoGigio\Downloads\SpyHunter-Installer.exe
2016-06-11 19:55 - 2016-06-11 21:36 - 00000000 ____D C:\ProgramData\AVAST Software
2016-06-10 20:16 - 2016-06-10 20:16 - 00000000 ____D C:\Windows\system32\appmgmt

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-06-12 19:21 - 2016-05-04 16:31 - 00000000 ____D C:\Windows\LastGood.Tmp
2016-06-12 19:21 - 2016-03-05 11:58 - 00000000 ____D C:\Users\TopoGigio\AppData\Roaming\vlc
2016-06-12 19:21 - 2016-03-05 11:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-06-12 19:21 - 2016-03-05 11:47 - 00000000 ____D C:\Users\TopoGigio\AppData\Roaming\IrfanView
2016-06-12 19:21 - 2016-03-05 11:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView
2016-06-12 19:21 - 2015-10-30 03:58 - 00000000 ____D C:\Windows\ShellNew
2016-06-12 19:21 - 2015-10-30 03:58 - 00000000 ____D C:\Program Files\Windows Journal
2016-06-12 19:21 - 2015-10-30 02:48 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-06-12 19:21 - 2015-10-30 02:48 - 00000000 ____D C:\Windows\system32\oobe
2016-06-12 19:21 - 2015-10-30 02:48 - 00000000 ____D C:\Windows\system32\appraiser
2016-06-12 19:21 - 2015-10-30 02:48 - 00000000 ____D C:\Windows\Provisioning
2016-06-12 19:21 - 2015-10-30 02:48 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-06-12 19:21 - 2015-10-30 02:48 - 00000000 ____D C:\Windows\L2Schemas
2016-06-12 19:21 - 2015-10-30 02:48 - 00000000 ____D C:\Windows\bcastdvr
2016-06-12 19:21 - 2015-10-30 02:13 - 00000000 ____D C:\Windows\system32\Sysprep
2016-06-12 19:20 - 2016-05-09 15:57 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-06-12 19:20 - 2016-04-12 16:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-06-12 19:20 - 2016-03-05 12:03 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-06-12 19:20 - 2016-03-05 11:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2016-06-12 19:20 - 2016-03-05 11:47 - 00000000 ____D C:\Program Files\IrfanView
2016-06-12 19:20 - 2016-03-05 11:31 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-06-12 19:19 - 2015-10-30 02:48 - 00000000 ___HD C:\Program Files\WindowsApps
2016-06-12 19:15 - 2015-10-30 02:48 - 00000000 ____D C:\Windows\registration
2016-06-12 19:14 - 2015-10-30 02:48 - 00000000 ____D C:\Windows\SystemResources
2016-06-12 19:13 - 2015-10-30 02:13 - 00000000 ____D C:\Windows\servicing
2016-06-12 19:11 - 2016-03-05 12:02 - 00000000 ____D C:\Users\TopoGigio\AppData\Roaming\Opera Software
2016-06-12 19:11 - 2016-03-05 11:31 - 00000000 ____D C:\Users\TopoGigio\AppData\Local\Packages
2016-06-12 19:10 - 2016-04-12 16:47 - 00000000 ____D C:\ProgramData\Avira
2016-06-12 19:10 - 2016-03-05 11:57 - 00000000 ____D C:\Program Files\VideoLAN
2016-06-12 19:09 - 2016-04-12 16:47 - 00000000 ____D C:\Program Files\Avira
2016-06-12 19:09 - 2016-03-05 12:10 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-06-12 19:09 - 2016-03-05 12:10 - 00000000 ____D C:\Program Files\Adobe
2016-06-12 14:39 - 2016-03-05 12:01 - 00000000 ____D C:\Program Files\Opera
2016-06-12 14:34 - 2016-03-05 11:42 - 00000000 ____D C:\ProgramData\KMSAutoS
2016-06-12 14:30 - 2016-03-05 11:53 - 00000000 ____D C:\Program Files\Google
2016-06-12 14:29 - 2016-03-05 11:40 - 00834360 _____ C:\Windows\system32\PerfStringBackup.INI
2016-06-12 14:29 - 2015-10-30 02:47 - 00000000 ____D C:\Windows\INF
2016-06-12 14:24 - 2016-04-13 14:06 - 00000000 ____D C:\ProgramData\Package Cache
2016-06-12 14:24 - 2016-03-05 11:31 - 00000000 ____D C:\Users\TopoGigio
2016-06-12 14:23 - 2016-03-05 11:24 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-06-12 00:16 - 2015-10-30 02:48 - 00000000 ____D C:\Windows\system32\WinBioDatabase
2016-06-11 20:58 - 2015-10-30 02:48 - 00000000 ____D C:\Windows\AppReadiness
2016-06-10 20:17 - 2016-03-05 12:02 - 00000000 ____D C:\Users\TopoGigio\AppData\Local\Opera Software
2016-06-08 17:23 - 2016-03-05 11:34 - 00000000 ___RD C:\Users\TopoGigio\OneDrive
2016-05-19 14:03 - 2015-10-30 02:39 - 00000000 ____D C:\Windows\CbsTemp

Some zero byte size files/folders:
==========================
C:\Windows\System32\evr.dll

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-06-10 22:16

==================== End of FRST.txt ============================

Publicité


Signaler le contenu de ce document

Publicité