ÿþRkill 2.8.4 by Lawrence Abrams (Grinler) http://www.bleepingcomputer.com/ Copyright 2008-2017 BleepingComputer.com More Information about Rkill can be found at this link: http://www.bleepingcomputer.com/forums/topic308364.html Program started at: 06/17/2017 12:48:47 AM in x64 mode. Windows Version: Windows Embedded 8.1 Industry Enterprise Checking for Windows services to stop: * No malware services found to stop. Checking for processes to terminate: * No malware processes found to kill. Checking Registry for malware related settings: * No issues found in the Registry. Resetting .EXE, .COM, & .BAT associations in the Windows Registry. Performing miscellaneous checks: * Windows Defender Disabled [HKLM\SOFTWARE\Microsoft\Windows Defender] "DisableAntiSpyware" = dword:00000001 Checking Windows Service Integrity: * AllUserInstallAgent [Missing Service] * Browser [Missing Service] * SDRSVC [Missing Service] * adp94xx [Missing Service] * adpahci [Missing Service] * adpu320 [Missing Service] * arc [Missing Service] * AsyncMac [Missing Service] * discache [Missing Service] * iirsp [Missing Service] * LSI_SCSI [Missing Service] * mrxsmb10 [Missing Service] * nfrd960 [Missing Service] * PptpMiniport [Missing Service] * RasAgileVpn [Missing Service] * Rasl2tp [Missing Service] * RasSstp [Missing Service] * srv [Missing Service] * Wanarp [Missing Service] * Wanarpv6 [Missing Service] * Wd [Missing Service] * SystemEventsBroker => %SystemRoot%\system32\svchost.exe -k DcomLaunch [Incorrect ImagePath] * WSService => %SystemRoot%\System32\svchost.exe -k wsappx [Incorrect ImagePath] Searching for Missing Digital Signatures: * No issues found. Checking HOSTS File: * HOSTS file entries found: 127.0.0.1 bandicam.com 127.0.0.1 ssl.bandisoft.com 127.0.0.1 clients2.google.com 127.0.0.1 activation.cloud.techsmith.com 127.0.0.1 oscount.techsmith.com 127.0.0.1 65.52.240.48 127.0.0.1 69.167.144.18 127.0.0.1 157.56.8.159 127.0.0.1 69.167.144.15 127.0.0.1 updater.techsmith.com 127.0.0.1 camtasiatudi.techsmith.com 127.0.0.1 tsccloud.cloudapp.net 127.0.0.1 assets.cloud.techsmith.com 127.0.0.1 activation.cloud.techsmith.com 127.0.0.1 oscount.techsmith.com 127.0.0.1 65.52.240.48 127.0.0.1 69.167.144.18 127.0.0.1 157.56.8.159 127.0.0.1 69.167.144.15 127.0.0.1 updater.techsmith.com 20 out of 50 HOSTS entries shown. Please review HOSTS file for further entries. Program finished at: 06/17/2017 12:49:29 AM Execution time: 0 hours(s), 0 minute(s), and 41 seconds(s)