VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Preventivka - Mrkew

https://forum.viry.cz:443/viewtopic.php?t=118130

Stránka 1 z 1

Preventivka - Mrkew

Napsal: 26 pro 2011 19:56
od mrkew2
Pouze preventivní kontrola po půl roce jestli tam něco není. Doufám že ne, ale zdá se mi počítač někdy nějaký pomalejší //možná jsem jen náročnější. No nechám to na vás jestli tam něco je. Děkuji předem.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Mrkew at 2011-12-26 19:52:57
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 24 GB (29%) free of 82 GB
Total RAM: 4092 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:53:05, on 26.12.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Pidgin\pidgin.exe
D:\Steam\Steam.exe
C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Icon7\iConfig for Gamers\Z500\hid.exe
C:\Program Files (x86)\Icon7\iConfig for Gamers\Z300\hid300.exe
C:\Program Files (x86)\Evernote\EvernoteClipper.exe
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files (x86)\Icon7\iConfig for Gamers\Tray.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Program Files\trend micro\Mrkew.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [iConfig-z500] "C:\Program Files (x86)\Icon7\iConfig for Gamers\Z500\hid.exe"
O4 - HKLM\..\Run: [iConfig-z300] "C:\Program Files (x86)\Icon7\iConfig for Gamers\Z300\hid300.exe"
O4 - HKLM\..\Run: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [Pidgin] "C:\Program Files (x86)\Pidgin\pidgin.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Steam] "D:\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [EPSON39A7C4 (Epson Stylus SX420W)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE /FU "C:\Windows\TEMP\E_S2B55.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-820899778-1618390194-1231141903-1005\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-820899778-1618390194-1231141903-1005\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\EvernoteClipper.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O8 - Extra context menu item: Add to Evernote 4.0 - res://C:\Program Files (x86)\Evernote\EvernoteIE.dll/204
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files (x86)\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\EvernoteIE.dll/204 (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\EvernoteIE.dll/204 (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Futuremark SystemInfo Service - Futuremark Corporation - C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.21\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.5.16\bin\mysqld.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10193 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
winlogon.exe
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 1992
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_000006c8
\??\C:\Windows\system32\conhost.exe "-933026386-923545303898904843-148114094255026647-690133463516010409641130880
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\RAVCpl64.exe"
"C:\Program Files (x86)\Pidgin\pidgin.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"D:\Steam\Steam.exe" -silent
"C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe"
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"C:\Program Files (x86)\Icon7\iConfig for Gamers\Z500\hid.exe"
"C:\Program Files (x86)\Icon7\iConfig for Gamers\Z300\hid300.exe"
"C:\Program Files (x86)\Evernote\EvernoteClipper.exe"
"C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe"
"C:\Program Files (x86)\Icon7\iConfig for Gamers\Tray.exe"
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\\TosA2dp.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\\TosBtHid.exe"
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\\TosBtHsp.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\Windows\system32\svchost.exe -k SDRSVC
"taskhost.exe"
C:\Windows\System32\svchost.exe -k swprv
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files (x86)\Opera\opera.exe"
"C:\Users\Mrkew\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-820899778-1618390194-1231141903-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-820899778-1618390194-1231141903-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2011-10-27 75656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RAVCpl64.exe [2008-07-03 6430208]
"Skytel"=C:\Windows\Skytel.exe [2008-06-25 1826816]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-03-15 499608]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Pidgin"=C:\Program Files (x86)\Pidgin\pidgin.exe [2011-08-20 48618]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2011-10-13 17351304]
"Steam"=D:\Steam\steam.exe [2011-10-09 1242448]
"EPSON39A7C4 (Epson Stylus SX420W)"=C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE [2009-09-14 224768]
"KiesPDLR"=C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2011-09-29 20880]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Mrkew\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-09 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\googletalk]
C:\Program Files (x86)\Google\Google Talk\googletalk.exe [2007-01-01 3739648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2011-08-15 1955208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando Media Booster]
C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Mrkew^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
C:\Users\Mrkew\AppData\Roaming\Dropbox\bin\Dropbox.exe [2011-09-02 24183152]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2011-09-23 258512]
"iConfig-z500"=C:\Program Files (x86)\Icon7\iConfig for Gamers\Z500\hid.exe [2010-06-13 361472]
"iConfig-z300"=C:\Program Files (x86)\Icon7\iConfig for Gamers\Z300\hid300.exe [2010-06-13 358912]
"KiesHelper"=C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe [2011-09-29 929680]
"KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2011-09-29 3508112]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5.5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [2011-01-12 1523360]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth Manager.lnk - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe

C:\Users\Mrkew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
EvernoteClipper.lnk - C:\Program Files (x86)\Evernote\EvernoteClipper.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SolutoService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SolutoService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsdoc.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsdoc.exe:*:Enabled:cdsdoc (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsinfo.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsinfo.exe:*:Enabled:cdsinfo (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsmps.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsmps.exe:*:Enabled:cdsmps (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsMsgServer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsMsgServer.exe:*:Enabled:cdsMsgServer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsNameServer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsNameServer.exe:*:Enabled:cdsNameServer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsRemshClient.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsRemshClient.exe:*:Enabled:cdsRemshClient (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsRunHidden.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsRunHidden.exe:*:Enabled:cdsRunHidden (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsUnzip.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsUnzip.exe:*:Enabled:cdsUnzip (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdswhich.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdswhich.exe:*:Enabled:cdswhich (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsZip.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsZip.exe:*:Enabled:cdsZip (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cds_root.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cds_root.exe:*:Enabled:cds_root (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clsAdminTool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clsAdminTool.exe:*:Enabled:clsAdminTool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clsbd.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clsbd.exe:*:Enabled:clsbd (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clu.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clu.exe:*:Enabled:clu (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\dregprint.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\dregprint.exe:*:Enabled:dregprint (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\mpsinfo.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\mpsinfo.exe:*:Enabled:mpsinfo (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\nmp.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\nmp.exe:*:Enabled:nmp (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\nmppath.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\nmppath.exe:*:Enabled:nmppath (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\obServer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\obServer.exe:*:Enabled:obServer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\van.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\van.exe:*:Enabled:van (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\versionviewer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\versionviewer.exe:*:Enabled:versionviewer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\capture.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\capture.exe:*:Enabled:capture (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\comp16.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\comp16.exe:*:Enabled:comp16 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pcadi.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pcadi.exe:*:Enabled:pcadi (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pspiceexplorersrvr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pspiceexplorersrvr.exe:*:Enabled:pspiceexplorersrvr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pstswp.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pstswp.exe:*:Enabled:pstswp (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\regsvr32.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\regsvr32.exe:*:Enabled:regsvr32 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\sch2cap.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\sch2cap.exe:*:Enabled:sch2cap (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\SETBROWS.EXE"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\SETBROWS.EXE:*:Enabled:SETBROWS (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\tutorial\CAPTUTOR.EXE"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\tutorial\CAPTUTOR.EXE:*:Enabled:CAPTUTOR (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\cdsdoc\bin\cdsdocIndexer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\cdsdoc\bin\cdsdocIndexer.exe:*:Enabled:cdsdocIndexer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\cdsdoc\bin\obServer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\cdsdoc\bin\obServer.exe:*:Enabled:obServer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\cdsservipc.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\cdsservipc.exe:*:Enabled:cdsservipc (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\skill.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\skill.exe:*:Enabled:skill (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\skill_g.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\skill_g.exe:*:Enabled:skill_g (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\fet\bin\mkdefcfg.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\fet\bin\mkdefcfg.exe:*:Enabled:mkdefcfg (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\fet\bin\versiontool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\fet\bin\versiontool.exe:*:Enabled:versiontool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\javaws-1_2_0_02-windows-i586-i.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\javaws-1_2_0_02-windows-i586-i.exe:*:Enabled:javaws-1_2_0_02-windows-i586-i (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\java.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\java.exe:*:Enabled:java (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\javaw.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\javaw.exe:*:Enabled:javaw (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\jpicpl32.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\jpicpl32.exe:*:Enabled:jpicpl32 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\keytool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\keytool.exe:*:Enabled:keytool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\kinit.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\kinit.exe:*:Enabled:kinit (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\klist.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\klist.exe:*:Enabled:klist (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\ktab.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\ktab.exe:*:Enabled:ktab (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\orbd.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\orbd.exe:*:Enabled:orbd (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\policytool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\policytool.exe:*:Enabled:policytool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\rmid.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\rmid.exe:*:Enabled:rmid (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\rmiregistry.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\rmiregistry.exe:*:Enabled:rmiregistry (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\servertool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\servertool.exe:*:Enabled:servertool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\tnameserv.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\tnameserv.exe:*:Enabled:tnameserv (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\fvupdateutil.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\fvupdateutil.exe:*:Enabled:fvupdateutil (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\gcdin.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\gcdin.exe:*:Enabled:gcdin (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\idfin.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\idfin.exe:*:Enabled:idfin (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\layout.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\layout.exe:*:Enabled:layout (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\libcat.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\libcat.exe:*:Enabled:libcat (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\lsession.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\lsession.exe:*:Enabled:lsession (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxascx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxascx.exe:*:Enabled:maxascx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxdxf.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxdxf.exe:*:Enabled:maxdxf (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxeco.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxeco.exe:*:Enabled:maxeco (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxfnetx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxfnetx.exe:*:Enabled:maxfnetx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxminx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxminx.exe:*:Enabled:maxminx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxorcad.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxorcad.exe:*:Enabled:maxorcad (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxp99x.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxp99x.exe:*:Enabled:maxp99x (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxpadx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxpadx.exe:*:Enabled:maxpadx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxpcadx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxpcadx.exe:*:Enabled:maxpcadx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxprotx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxprotx.exe:*:Enabled:maxprotx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxstrx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxstrx.exe:*:Enabled:maxstrx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxtangx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxtangx.exe:*:Enabled:maxtangx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\mfceco.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\mfceco.exe:*:Enabled:mfceco (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\padx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\padx.exe:*:Enabled:padx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\pcadx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\pcadx.exe:*:Enabled:pcadx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\pcb2max.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\pcb2max.exe:*:Enabled:pcb2max (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\prcat.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\prcat.exe:*:Enabled:prcat (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\protx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\protx.exe:*:Enabled:protx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\searchTool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\searchTool.exe:*:Enabled:searchTool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\setbrows.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\setbrows.exe:*:Enabled:setbrows (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\specin.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\specin.exe:*:Enabled:specin (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\strx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\strx.exe:*:Enabled:strx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tangx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tangx.exe:*:Enabled:tangx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tomax.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tomax.exe:*:Enabled:tomax (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tospec.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tospec.exe:*:Enabled:tospec (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\update90.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\update90.exe:*:Enabled:update90 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\sroute\batch32.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\sroute\batch32.exe:*:Enabled:batch32 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\sroute\sroute.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\sroute\sroute.exe:*:Enabled:sroute (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tutorial\laytutor.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tutorial\laytutor.exe:*:Enabled:laytutor (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pcb\bin\specctra.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pcb\bin\specctra.exe:*:Enabled:specctra (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\IndiceFileGeneration.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\IndiceFileGeneration.exe:*:Enabled:IndiceFileGeneration (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\Magneticdesigner.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\Magneticdesigner.exe:*:Enabled:Magneticdesigner (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\modeled.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\modeled.exe:*:Enabled:modeled (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\MrkSrvr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\MrkSrvr.exe:*:Enabled:MrkSrvr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspice.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspice.exe:*:Enabled:pspice (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspiceaa.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspiceaa.exe:*:Enabled:pspiceaa (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspiceexplorersrvr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspiceexplorersrvr.exe:*:Enabled:pspiceexplorersrvr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\psp_cmd.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\psp_cmd.exe:*:Enabled:psp_cmd (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\regsvr32.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\regsvr32.exe:*:Enabled:regsvr32 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\simmgr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\simmgr.exe:*:Enabled:simmgr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\simsrvr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\simsrvr.exe:*:Enabled:simsrvr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\stmed.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\stmed.exe:*:Enabled:stmed (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\specctra\bin\specctra.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\specctra\bin\specctra.exe:*:Enabled:specctra (OrCAD 10.5 Demo)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsdoc.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsdoc.exe:*:Enabled:cdsdoc (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsinfo.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsinfo.exe:*:Enabled:cdsinfo (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsmps.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsmps.exe:*:Enabled:cdsmps (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsMsgServer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsMsgServer.exe:*:Enabled:cdsMsgServer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsNameServer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsNameServer.exe:*:Enabled:cdsNameServer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsRemshClient.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsRemshClient.exe:*:Enabled:cdsRemshClient (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsRunHidden.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsRunHidden.exe:*:Enabled:cdsRunHidden (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsUnzip.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsUnzip.exe:*:Enabled:cdsUnzip (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdswhich.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdswhich.exe:*:Enabled:cdswhich (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsZip.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsZip.exe:*:Enabled:cdsZip (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cds_root.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cds_root.exe:*:Enabled:cds_root (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clsAdminTool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clsAdminTool.exe:*:Enabled:clsAdminTool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clsbd.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clsbd.exe:*:Enabled:clsbd (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clu.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clu.exe:*:Enabled:clu (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\dregprint.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\dregprint.exe:*:Enabled:dregprint (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\mpsinfo.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\mpsinfo.exe:*:Enabled:mpsinfo (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\nmp.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\nmp.exe:*:Enabled:nmp (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\nmppath.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\nmppath.exe:*:Enabled:nmppath (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\obServer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\obServer.exe:*:Enabled:obServer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\van.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\van.exe:*:Enabled:van (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\versionviewer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\versionviewer.exe:*:Enabled:versionviewer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\capture.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\capture.exe:*:Enabled:capture (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\comp16.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\comp16.exe:*:Enabled:comp16 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pcadi.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pcadi.exe:*:Enabled:pcadi (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pspiceexplorersrvr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pspiceexplorersrvr.exe:*:Enabled:pspiceexplorersrvr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pstswp.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pstswp.exe:*:Enabled:pstswp (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\regsvr32.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\regsvr32.exe:*:Enabled:regsvr32 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\sch2cap.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\sch2cap.exe:*:Enabled:sch2cap (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\SETBROWS.EXE"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\SETBROWS.EXE:*:Enabled:SETBROWS (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\tutorial\CAPTUTOR.EXE"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\tutorial\CAPTUTOR.EXE:*:Enabled:CAPTUTOR (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\cdsdoc\bin\cdsdocIndexer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\cdsdoc\bin\cdsdocIndexer.exe:*:Enabled:cdsdocIndexer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\cdsdoc\bin\obServer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\cdsdoc\bin\obServer.exe:*:Enabled:obServer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\cdsservipc.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\cdsservipc.exe:*:Enabled:cdsservipc (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\skill.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\skill.exe:*:Enabled:skill (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\skill_g.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\skill_g.exe:*:Enabled:skill_g (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\fet\bin\mkdefcfg.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\fet\bin\mkdefcfg.exe:*:Enabled:mkdefcfg (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\fet\bin\versiontool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\fet\bin\versiontool.exe:*:Enabled:versiontool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\javaws-1_2_0_02-windows-i586-i.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\javaws-1_2_0_02-windows-i586-i.exe:*:Enabled:javaws-1_2_0_02-windows-i586-i (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\java.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\java.exe:*:Enabled:java (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\javaw.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\javaw.exe:*:Enabled:javaw (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\jpicpl32.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\jpicpl32.exe:*:Enabled:jpicpl32 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\keytool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\keytool.exe:*:Enabled:keytool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\kinit.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\kinit.exe:*:Enabled:kinit (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\klist.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\klist.exe:*:Enabled:klist (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\ktab.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\ktab.exe:*:Enabled:ktab (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\orbd.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\orbd.exe:*:Enabled:orbd (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\policytool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\policytool.exe:*:Enabled:policytool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\rmid.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\rmid.exe:*:Enabled:rmid (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\rmiregistry.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\rmiregistry.exe:*:Enabled:rmiregistry (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\servertool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\servertool.exe:*:Enabled:servertool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\tnameserv.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\tnameserv.exe:*:Enabled:tnameserv (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\fvupdateutil.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\fvupdateutil.exe:*:Enabled:fvupdateutil (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\gcdin.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\gcdin.exe:*:Enabled:gcdin (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\idfin.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\idfin.exe:*:Enabled:idfin (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\layout.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\layout.exe:*:Enabled:layout (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\libcat.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\libcat.exe:*:Enabled:libcat (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\lsession.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\lsession.exe:*:Enabled:lsession (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxascx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxascx.exe:*:Enabled:maxascx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxdxf.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxdxf.exe:*:Enabled:maxdxf (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxeco.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxeco.exe:*:Enabled:maxeco (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxfnetx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxfnetx.exe:*:Enabled:maxfnetx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxminx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxminx.exe:*:Enabled:maxminx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxorcad.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxorcad.exe:*:Enabled:maxorcad (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxp99x.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxp99x.exe:*:Enabled:maxp99x (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxpadx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxpadx.exe:*:Enabled:maxpadx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxpcadx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxpcadx.exe:*:Enabled:maxpcadx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxprotx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxprotx.exe:*:Enabled:maxprotx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxstrx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxstrx.exe:*:Enabled:maxstrx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxtangx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxtangx.exe:*:Enabled:maxtangx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\mfceco.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\mfceco.exe:*:Enabled:mfceco (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\padx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\padx.exe:*:Enabled:padx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\pcadx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\pcadx.exe:*:Enabled:pcadx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\pcb2max.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\pcb2max.exe:*:Enabled:pcb2max (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\prcat.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\prcat.exe:*:Enabled:prcat (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\protx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\protx.exe:*:Enabled:protx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\searchTool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\searchTool.exe:*:Enabled:searchTool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\setbrows.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\setbrows.exe:*:Enabled:setbrows (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\specin.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\specin.exe:*:Enabled:specin (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\strx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\strx.exe:*:Enabled:strx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tangx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tangx.exe:*:Enabled:tangx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tomax.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tomax.exe:*:Enabled:tomax (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tospec.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tospec.exe:*:Enabled:tospec (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\update90.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\update90.exe:*:Enabled:update90 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\sroute\batch32.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\sroute\batch32.exe:*:Enabled:batch32 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\sroute\sroute.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\sroute\sroute.exe:*:Enabled:sroute (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tutorial\laytutor.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tutorial\laytutor.exe:*:Enabled:laytutor (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pcb\bin\specctra.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pcb\bin\specctra.exe:*:Enabled:specctra (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\IndiceFileGeneration.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\IndiceFileGeneration.exe:*:Enabled:IndiceFileGeneration (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\Magneticdesigner.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\Magneticdesigner.exe:*:Enabled:Magneticdesigner (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\modeled.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\modeled.exe:*:Enabled:modeled (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\MrkSrvr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\MrkSrvr.exe:*:Enabled:MrkSrvr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspice.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspice.exe:*:Enabled:pspice (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspiceaa.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspiceaa.exe:*:Enabled:pspiceaa (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspiceexplorersrvr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspiceexplorersrvr.exe:*:Enabled:pspiceexplorersrvr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\psp_cmd.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\psp_cmd.exe:*:Enabled:psp_cmd (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\regsvr32.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\regsvr32.exe:*:Enabled:regsvr32 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\simmgr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\simmgr.exe:*:Enabled:simmgr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\simsrvr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\simsrvr.exe:*:Enabled:simsrvr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\stmed.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\stmed.exe:*:Enabled:stmed (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\specctra\bin\specctra.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\specctra\bin\specctra.exe:*:Enabled:specctra (OrCAD 10.5 Demo)"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"vidc.tscc"=C:\Windows\SysWOW64\tsccvid64.dll
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.txt - open - "C:\Program Files (x86)\PSPad editor\PSPad.exe" "%1"

======List of files/folders created in the last 1 month======

2011-12-26 19:52:58 ----D---- C:\Program Files\trend micro
2011-12-26 19:52:57 ----D---- C:\rsit
2011-12-26 19:45:49 ----D---- C:\Program Files (x86)\proXPN
2011-12-25 13:41:07 ----D---- C:\Fraps
2011-12-25 11:46:27 ----D---- C:\Users\Mrkew\AppData\Roaming\Broken Rules
2011-12-25 11:46:23 ----A---- C:\Windows\d3dx.dat
2011-12-24 13:24:03 ----D---- C:\Users\Mrkew\AppData\Roaming\Tropico 4 Demo
2011-12-23 21:01:06 ----D---- C:\Program Files (x86)\Zachtronics Industries
2011-12-23 15:45:06 ----D---- C:\Program Files (x86)\Virgin Interactive
2011-12-20 22:15:40 ----RA---- C:\ProgramData\hash.dat
2011-12-20 19:52:03 ----D---- C:\Program Files (x86)\Adobe Story
2011-12-20 19:49:53 ----D---- C:\Program Files\Common Files\Adobe
2011-12-20 19:49:36 ----D---- C:\Program Files\Adobe
2011-12-20 18:56:56 ----D---- C:\Program Files (x86)\Adobe Download Assistant
2011-12-19 17:09:36 ----D---- C:\Users\Mrkew\AppData\Roaming\GetRightToGo
2011-12-18 18:37:53 ----D---- C:\Program Files (x86)\Microsoft Office
2011-12-11 12:58:44 ----D---- C:\ProgramData\SecuROM
2011-12-11 10:05:09 ----A---- C:\Windows\system32\FNTCACHE.DAT
2011-12-10 22:27:33 ----D---- C:\Windows\system32\appmgmt
2011-12-10 19:46:43 ----D---- C:\Windows\506DDFBE983F4BC384B865F423B2D798.TMP
2011-12-10 18:06:02 ----RHD---- C:\Users\Mrkew\AppData\Roaming\SecuROM
2011-12-10 18:06:01 ----A---- C:\Windows\SYSWOW64\CmdLineExt_x64.dll
2011-12-10 17:42:59 ----D---- C:\Windows\95FC26FB19FD4A96BBB1B1062E8648F5.TMP
2011-12-10 15:57:47 ----D---- C:\Program Files (x86)\FreeRapid-0.86u1
2011-12-10 12:41:30 ----RA---- C:\Windows\SYSWOW64\tmpE4C5.tmp
2011-12-06 22:22:28 ----D---- C:\Program Files (x86)\SplitMediaLabs
2011-12-03 17:53:09 ----D---- C:\Users\Mrkew\AppData\Roaming\TeamViewer
2011-11-30 20:21:51 ----D---- C:\wamp
2011-11-28 18:15:57 ----D---- C:\Program Files (x86)\Microsoft Silverlight

======List of files/folders modified in the last 1 month======

2011-12-26 19:52:59 ----D---- C:\Windows\Temp
2011-12-26 19:52:58 ----D---- C:\Program Files
2011-12-26 19:50:03 ----D---- C:\Users\Mrkew\AppData\Roaming\Skype
2011-12-26 19:47:55 ----A---- C:\Windows\win.ini
2011-12-26 19:47:43 ----D---- C:\Windows\system32\drivers
2011-12-26 19:47:42 ----D---- C:\Windows\inf
2011-12-26 19:47:41 ----D---- C:\Windows\system32\DriverStore
2011-12-26 19:47:40 ----SHD---- C:\System Volume Information
2011-12-26 19:45:49 ----RD---- C:\Program Files (x86)
2011-12-26 19:40:54 ----D---- C:\Users\Mrkew\AppData\Roaming\.purple
2011-12-26 09:49:50 ----D---- C:\Users\Mrkew\AppData\Roaming\GHISLER
2011-12-25 22:18:41 ----A---- C:\Windows\WirelessFTP.INI
2011-12-25 20:51:38 ----D---- C:\Windows\System32
2011-12-25 20:51:38 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-12-25 15:37:07 ----D---- C:\Users\Mrkew\AppData\Roaming\Audacity
2011-12-25 14:46:30 ----D---- C:\Users\Mrkew\AppData\Roaming\uTorrent
2011-12-25 12:13:06 ----D---- C:\Windows\system32\config
2011-12-25 12:03:50 ----A---- C:\Windows\system32\wrap_oal.dll
2011-12-25 12:03:49 ----D---- C:\Windows\SysWOW64
2011-12-25 12:03:49 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2011-12-25 12:03:49 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2011-12-25 12:03:49 ----A---- C:\Windows\system32\OpenAL32.dll
2011-12-25 12:02:57 ----SHD---- C:\Windows\Installer
2011-12-25 12:02:53 ----D---- C:\Windows\winsxs
2011-12-25 11:46:23 ----D---- C:\Windows
2011-12-25 10:43:11 ----D---- C:\Windows\system32\Tasks
2011-12-24 13:27:03 ----RSD---- C:\Windows\assembly
2011-12-23 14:26:18 ----D---- C:\Windows\Prefetch
2011-12-23 13:04:38 ----D---- C:\Users\Mrkew\AppData\Roaming\.minecraft
2011-12-22 21:50:35 ----D---- C:\Users\Mrkew\AppData\Roaming\Publish Providers
2011-12-20 22:15:41 ----HD---- C:\ProgramData
2011-12-20 21:30:26 ----ASD---- C:\ProgramData\Microsoft
2011-12-20 21:30:26 ----AD---- C:\Program Files\Common Files\Microsoft Shared
2011-12-20 21:30:26 ----A---- C:\Windows\SurCode.INI
2011-12-20 20:00:40 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2011-12-20 19:59:24 ----D---- C:\Users\Mrkew\AppData\Roaming\Adobe
2011-12-20 19:57:00 ----D---- C:\Program Files (x86)\Adobe
2011-12-20 19:53:21 ----RSD---- C:\Windows\Fonts
2011-12-20 19:51:01 ----D---- C:\Windows\system32\catroot
2011-12-20 19:49:53 ----D---- C:\Program Files\Common Files
2011-12-20 19:47:49 ----D---- C:\ProgramData\Adobe
2011-12-19 20:06:29 ----SD---- C:\Users\Mrkew\AppData\Roaming\Microsoft
2011-12-18 18:39:17 ----A---- C:\Windows\ODBC.INI
2011-12-18 18:38:13 ----D---- C:\Windows\ShellNew
2011-12-18 18:38:07 ----D---- C:\Program Files (x86)\Common Files
2011-12-18 18:37:53 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-12-18 18:35:37 ----D---- C:\Windows\system
2011-12-16 06:11:49 ----D---- C:\Windows\system32\FxsTmp
2011-12-15 16:47:52 ----D---- C:\Windows\system32\catroot2
2011-12-11 15:24:08 ----D---- C:\Windows\Minidump
2011-12-10 22:49:00 ----D---- C:\Windows\Logs
2011-12-10 22:29:13 ----D---- C:\Users\Mrkew\AppData\Roaming\DAEMON Tools Lite
2011-12-10 12:42:33 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2011-12-09 06:34:35 ----D---- C:\Program Files (x86)\Opera
2011-12-08 20:58:11 ----D---- C:\Windows\Downloaded Program Files
2011-12-05 21:42:05 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2011-12-04 22:01:05 ----D---- C:\Program Files (x86)\Evernote
2011-12-03 17:14:50 ----D---- C:\Program Files\Sony
2011-12-03 16:45:23 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-11-30 19:08:41 ----D---- C:\Program Files\Java
2011-11-30 19:01:32 ----D---- C:\Program Files (x86)\Android
2011-11-28 16:58:42 ----D---- C:\Users\Mrkew\AppData\Roaming\Origin
2011-11-28 16:42:55 ----D---- C:\Program Files (x86)\Origin

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2009-07-09 55280]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2011-12-08 130760]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2011-09-15 27760]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-10-13 270912]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Program Files\HWiNFO64\HWiNFO64A.SYS [2011-09-22 30080]
R1 Tosrfcom;Bluetooth RFCOMM; C:\Windows\System32\Drivers\tosrfcom.sys [2007-10-02 76160]
R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys [2010-11-20 59392]
R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys [2010-11-20 360832]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2011-09-15 97312]
R3 athur;Atheros AR9271 Wireless Network Adapter Service; C:\Windows\system32\DRIVERS\athurx.sys [2010-01-05 1847296]
R3 enecir;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys [2008-01-24 60928]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 I7Z300Filter;Icon7_Z300; C:\Windows\system32\drivers\I7Z300.sys [2010-01-20 16384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2008-07-03 1477272]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2010-06-29 931168]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2011-07-08 174184]
R3 NVNET;NVIDIA nForce Ethernet Driver; C:\Windows\system32\DRIVERS\nvmf6264.sys [2010-08-12 350952]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2008-03-31 27680]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\SmSerl64.sys [2009-06-10 1227776]
R3 tap0901;tap0901; C:\Windows\system32\DRIVERS\tap0901.sys [2011-06-07 40128]
R3 tosporte;Bluetooth COM Port; C:\Windows\system32\DRIVERS\tosporte.sys [2006-10-11 50688]
R3 vpcbus;Služba hostitelské sběrnice programu Virtual PC; C:\Windows\system32\DRIVERS\vpchbus.sys [2010-11-20 194944]
R3 vpcusb;Služba konektoru virtualizace rozhraní USB; C:\Windows\system32\DRIVERS\vpcusb.sys [2010-11-20 95232]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2010-12-21 36328]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 cpuz135;cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys []
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena Classic\safedrv.sys []
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx64.sys [2008-01-29 1486752]
S3 pwdrvio;pwdrvio; \??\C:\Windows\syswow64\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\Windows\syswow64\pwdspio.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-06-02 157672]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-06-02 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-06-02 177640]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2011-06-02 146920]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2010-12-21 136264]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2010-12-21 19016]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2010-12-21 172104]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 tosrfbd;Bluetooth RFBUS; C:\Windows\system32\DRIVERS\tosrfbd.sys [2008-02-15 165120]
S3 tosrfbnp;Bluetooth RFBNEP; C:\Windows\System32\Drivers\tosrfbnp.sys [2007-11-29 44800]
S3 Tosrfhid;Bluetooth RFHID; C:\Windows\system32\DRIVERS\Tosrfhid.sys [2008-01-31 88448]
S3 tosrfnds;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\tosrfnds.sys [2005-07-13 28160]
S3 TosRfSnd;Bluetooth Audio; C:\Windows\system32\drivers\tosrfsnd.sys [2008-01-22 56320]
S3 Tosrfusb;Bluetooth USB Controller; C:\Windows\system32\DRIVERS\tosrfusb.sys [2007-10-18 51328]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2009-07-14 19968]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WSDPrintDevice;Podpora tisku WSD prostřednictvím funkce UMB; C:\Windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040]
S3 WSDScan;Podpora skenování WSD přes UMB; C:\Windows\system32\DRIVERS\WSDScan.sys [2009-07-14 25088]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AntiVirService;Avira Realtime Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2011-09-23 110032]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2011-09-23 86224]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2011-08-15 2329480]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-10-15 1640768]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-10-09 75136]
R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2007-09-28 168296]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-11-07 136176]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe [2011-08-15 130976]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-11-07 136176]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2011-12-07 419624]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 wampapache;wampapache; c:\wamp\bin\apache\apache2.2.21\bin\httpd.exe [2011-09-26 21504]
S3 wampmysqld;wampmysqld; c:\wamp\bin\mysql\mysql5.5.16\bin\mysqld.exe [2011-09-26 9665536]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-10-08 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Re: Preventivka - Mrkew

Napsal: 26 pro 2011 23:15
od Roli
Zdravím, přes Start >> Všechny programy >> Příslušenství >> Spustit >> napiš - services.msc >> Enter. Najdi službu :

Služba Google Update (gupdate)

Služba Google Update (gupdatem)

NVIDIA Update Service Daemon

klikni na ni pravým myšítkem, zvol vlastnosti, na další kartě nejprve službu zastav tlačítkem Zastavit a u položky Typ spouštění zvol Zakázáno.


A ještě uklidíme, stáhni a spusť OTMoveIt

do levého okna aplikace pod Paste Instructions for Items to be Moved zkopíruj tento text:

Kód: Vybrat vše

:processes
explorer.exe       

:files 
C:\*.tmp
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\*.tmp

:commands
[purity]
[emptytemp]
[start explorer]
klikni na MoveIt! a v pravém zeleném okně aplikace se Ti objeví info o provedene akci, obsah okna zkopíruj sem,

pokud aplikace bude požadovat restart, klikni na YES

v tom případě sem chci zkopírovat obsah logu uloženého na C:\_OTMoveIt\MovedFiles\

Re: Preventivka - Mrkew

Napsal: 26 pro 2011 23:34
od mrkew2
All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== FILES ==========
File/Folder C:\*.tmp not found.
C:\WINDOWS\System32\tmpE466.tmp moved successfully.
C:\WINDOWS\System32\tmpE4C5.tmp moved successfully.
C:\WINDOWS\506DDFBE983F4BC384B865F423B2D798.TMP folder moved successfully.
C:\WINDOWS\95FC26FB19FD4A96BBB1B1062E8648F5.TMP folder moved successfully.
C:\WINDOWS\D56B0E274A3E46C9B5C1D93D580C099C.TMP folder moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 56475 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Mrkew
->Temp folder emptied: 212825503 bytes
->Temporary Internet Files folder emptied: 25684959 bytes
->Java cache emptied: 27436 bytes
->Google Chrome cache emptied: 26549449 bytes
->Opera cache emptied: 22069612 bytes
->Flash cache emptied: 72000 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 10288 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50507 bytes
RecycleBin emptied: 2255900509 bytes

Total Files Cleaned = 2 425,00 mb


OTM by OldTimer - Version 3.1.19.0 log created on 12262011_232452

Files moved on Reboot...
C:\Users\Mrkew\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...

Re: Preventivka - Mrkew

Napsal: 27 pro 2011 14:10
od Roli
Znovu spusť OTMoveIt a nahoře v aplikaci klini na CleanUP!

tímto po sobě uklidí.


No a pokud s PC není žádný problém je to z mé strany vše.

Re: Preventivka - Mrkew

Napsal: 27 pro 2011 14:28
od mrkew2
Ještě pro finální kontrolu. A jinak přeji hodně štěstí v novém roce a o něco méně havěti.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Mrkew at 2011-12-27 14:21:58
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 23 GB (28%) free of 82 GB
Total RAM: 4092 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:22:16, on 27.12.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Pidgin\pidgin.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
D:\Steam\Steam.exe
C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Icon7\iConfig for Gamers\Z500\hid.exe
C:\Program Files (x86)\Icon7\iConfig for Gamers\Z300\hid300.exe
C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files (x86)\Evernote\EvernoteClipper.exe
C:\Program Files (x86)\Icon7\iConfig for Gamers\Tray.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\trend micro\Mrkew.exe
C:\Program Files (x86)\Samsung\Kies\External\DeviceModules\DeviceManager.exe
C:\Program Files (x86)\Samsung\Kies\External\DeviceModules\ConnectionManager.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [iConfig-z500] "C:\Program Files (x86)\Icon7\iConfig for Gamers\Z500\hid.exe"
O4 - HKLM\..\Run: [iConfig-z300] "C:\Program Files (x86)\Icon7\iConfig for Gamers\Z300\hid300.exe"
O4 - HKLM\..\Run: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [Pidgin] "C:\Program Files (x86)\Pidgin\pidgin.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Steam] "D:\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [EPSON39A7C4 (Epson Stylus SX420W)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE /FU "C:\Windows\TEMP\E_S2B55.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\EvernoteClipper.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O8 - Extra context menu item: Add to Evernote 4.0 - res://C:\Program Files (x86)\Evernote\EvernoteIE.dll/204
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files (x86)\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\EvernoteIE.dll/204 (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\EvernoteIE.dll/204 (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Futuremark SystemInfo Service - Futuremark Corporation - C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.21\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.5.16\bin\mysqld.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9671 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
winlogon.exe
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 1092
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_000006a0
\??\C:\Windows\system32\conhost.exe "-1013983296980617812122729583-16536397891290219284-1455946029-302275842342120805
"taskhost.exe"
taskeng.exe {7AC6DDE3-8637-4952-B442-80C9871188F9}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:\Windows\RAVCpl64.exe"
"C:\Program Files (x86)\Pidgin\pidgin.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"D:\Steam\Steam.exe" -silent
"C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe"
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"C:\Program Files (x86)\Icon7\iConfig for Gamers\Z500\hid.exe"
"C:\Program Files (x86)\Icon7\iConfig for Gamers\Z300\hid300.exe"
"C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe" /s
"C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe"
"C:\Program Files (x86)\Evernote\EvernoteClipper.exe"
"C:\Program Files (x86)\Icon7\iConfig for Gamers\Tray.exe"
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\\TosA2dp.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\\TosBtHid.exe"
"C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\\TosBtHsp.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\sppsvc.exe
"C:\Users\Mrkew\Desktop\RSITx64.exe"
"C:\Program Files (x86)\Samsung\Kies\External\DeviceModules\DeviceManager.exe" -Embedding
"C:\Program Files (x86)\Samsung\Kies\External\DeviceModules\ConnectionManager.exe" -Embedding

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-820899778-1618390194-1231141903-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-820899778-1618390194-1231141903-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2011-10-27 75656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RAVCpl64.exe [2008-07-03 6430208]
"Skytel"=C:\Windows\Skytel.exe [2008-06-25 1826816]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-03-15 499608]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Pidgin"=C:\Program Files (x86)\Pidgin\pidgin.exe [2011-08-20 48618]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2011-10-13 17351304]
"Steam"=D:\Steam\steam.exe [2011-10-09 1242448]
"EPSON39A7C4 (Epson Stylus SX420W)"=C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE [2009-09-14 224768]
"KiesPDLR"=C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2011-09-29 20880]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Mrkew\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-09 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\googletalk]
C:\Program Files (x86)\Google\Google Talk\googletalk.exe [2007-01-01 3739648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2011-08-15 1955208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando Media Booster]
C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Mrkew^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
C:\Users\Mrkew\AppData\Roaming\Dropbox\bin\Dropbox.exe [2011-09-02 24183152]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2011-09-23 258512]
"iConfig-z500"=C:\Program Files (x86)\Icon7\iConfig for Gamers\Z500\hid.exe [2010-06-13 361472]
"iConfig-z300"=C:\Program Files (x86)\Icon7\iConfig for Gamers\Z300\hid300.exe [2010-06-13 358912]
"KiesHelper"=C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe [2011-09-29 929680]
"KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2011-09-29 3508112]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5.5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [2011-01-12 1523360]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth Manager.lnk - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe

C:\Users\Mrkew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
EvernoteClipper.lnk - C:\Program Files (x86)\Evernote\EvernoteClipper.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SolutoService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SolutoService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsdoc.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsdoc.exe:*:Enabled:cdsdoc (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsinfo.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsinfo.exe:*:Enabled:cdsinfo (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsmps.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsmps.exe:*:Enabled:cdsmps (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsMsgServer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsMsgServer.exe:*:Enabled:cdsMsgServer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsNameServer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsNameServer.exe:*:Enabled:cdsNameServer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsRemshClient.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsRemshClient.exe:*:Enabled:cdsRemshClient (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsRunHidden.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsRunHidden.exe:*:Enabled:cdsRunHidden (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsUnzip.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsUnzip.exe:*:Enabled:cdsUnzip (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdswhich.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdswhich.exe:*:Enabled:cdswhich (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsZip.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsZip.exe:*:Enabled:cdsZip (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cds_root.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cds_root.exe:*:Enabled:cds_root (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clsAdminTool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clsAdminTool.exe:*:Enabled:clsAdminTool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clsbd.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clsbd.exe:*:Enabled:clsbd (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clu.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clu.exe:*:Enabled:clu (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\dregprint.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\dregprint.exe:*:Enabled:dregprint (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\mpsinfo.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\mpsinfo.exe:*:Enabled:mpsinfo (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\nmp.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\nmp.exe:*:Enabled:nmp (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\nmppath.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\nmppath.exe:*:Enabled:nmppath (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\obServer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\obServer.exe:*:Enabled:obServer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\van.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\van.exe:*:Enabled:van (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\versionviewer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\versionviewer.exe:*:Enabled:versionviewer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\capture.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\capture.exe:*:Enabled:capture (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\comp16.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\comp16.exe:*:Enabled:comp16 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pcadi.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pcadi.exe:*:Enabled:pcadi (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pspiceexplorersrvr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pspiceexplorersrvr.exe:*:Enabled:pspiceexplorersrvr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pstswp.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pstswp.exe:*:Enabled:pstswp (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\regsvr32.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\regsvr32.exe:*:Enabled:regsvr32 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\sch2cap.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\sch2cap.exe:*:Enabled:sch2cap (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\SETBROWS.EXE"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\SETBROWS.EXE:*:Enabled:SETBROWS (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\tutorial\CAPTUTOR.EXE"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\tutorial\CAPTUTOR.EXE:*:Enabled:CAPTUTOR (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\cdsdoc\bin\cdsdocIndexer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\cdsdoc\bin\cdsdocIndexer.exe:*:Enabled:cdsdocIndexer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\cdsdoc\bin\obServer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\cdsdoc\bin\obServer.exe:*:Enabled:obServer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\cdsservipc.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\cdsservipc.exe:*:Enabled:cdsservipc (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\skill.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\skill.exe:*:Enabled:skill (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\skill_g.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\skill_g.exe:*:Enabled:skill_g (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\fet\bin\mkdefcfg.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\fet\bin\mkdefcfg.exe:*:Enabled:mkdefcfg (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\fet\bin\versiontool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\fet\bin\versiontool.exe:*:Enabled:versiontool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\javaws-1_2_0_02-windows-i586-i.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\javaws-1_2_0_02-windows-i586-i.exe:*:Enabled:javaws-1_2_0_02-windows-i586-i (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\java.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\java.exe:*:Enabled:java (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\javaw.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\javaw.exe:*:Enabled:javaw (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\jpicpl32.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\jpicpl32.exe:*:Enabled:jpicpl32 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\keytool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\keytool.exe:*:Enabled:keytool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\kinit.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\kinit.exe:*:Enabled:kinit (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\klist.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\klist.exe:*:Enabled:klist (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\ktab.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\ktab.exe:*:Enabled:ktab (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\orbd.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\orbd.exe:*:Enabled:orbd (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\policytool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\policytool.exe:*:Enabled:policytool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\rmid.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\rmid.exe:*:Enabled:rmid (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\rmiregistry.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\rmiregistry.exe:*:Enabled:rmiregistry (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\servertool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\servertool.exe:*:Enabled:servertool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\tnameserv.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\tnameserv.exe:*:Enabled:tnameserv (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\fvupdateutil.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\fvupdateutil.exe:*:Enabled:fvupdateutil (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\gcdin.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\gcdin.exe:*:Enabled:gcdin (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\idfin.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\idfin.exe:*:Enabled:idfin (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\layout.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\layout.exe:*:Enabled:layout (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\libcat.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\libcat.exe:*:Enabled:libcat (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\lsession.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\lsession.exe:*:Enabled:lsession (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxascx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxascx.exe:*:Enabled:maxascx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxdxf.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxdxf.exe:*:Enabled:maxdxf (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxeco.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxeco.exe:*:Enabled:maxeco (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxfnetx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxfnetx.exe:*:Enabled:maxfnetx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxminx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxminx.exe:*:Enabled:maxminx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxorcad.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxorcad.exe:*:Enabled:maxorcad (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxp99x.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxp99x.exe:*:Enabled:maxp99x (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxpadx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxpadx.exe:*:Enabled:maxpadx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxpcadx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxpcadx.exe:*:Enabled:maxpcadx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxprotx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxprotx.exe:*:Enabled:maxprotx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxstrx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxstrx.exe:*:Enabled:maxstrx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxtangx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxtangx.exe:*:Enabled:maxtangx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\mfceco.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\mfceco.exe:*:Enabled:mfceco (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\padx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\padx.exe:*:Enabled:padx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\pcadx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\pcadx.exe:*:Enabled:pcadx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\pcb2max.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\pcb2max.exe:*:Enabled:pcb2max (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\prcat.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\prcat.exe:*:Enabled:prcat (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\protx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\protx.exe:*:Enabled:protx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\searchTool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\searchTool.exe:*:Enabled:searchTool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\setbrows.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\setbrows.exe:*:Enabled:setbrows (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\specin.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\specin.exe:*:Enabled:specin (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\strx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\strx.exe:*:Enabled:strx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tangx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tangx.exe:*:Enabled:tangx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tomax.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tomax.exe:*:Enabled:tomax (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tospec.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tospec.exe:*:Enabled:tospec (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\update90.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\update90.exe:*:Enabled:update90 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\sroute\batch32.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\sroute\batch32.exe:*:Enabled:batch32 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\sroute\sroute.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\sroute\sroute.exe:*:Enabled:sroute (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tutorial\laytutor.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tutorial\laytutor.exe:*:Enabled:laytutor (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pcb\bin\specctra.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pcb\bin\specctra.exe:*:Enabled:specctra (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\IndiceFileGeneration.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\IndiceFileGeneration.exe:*:Enabled:IndiceFileGeneration (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\Magneticdesigner.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\Magneticdesigner.exe:*:Enabled:Magneticdesigner (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\modeled.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\modeled.exe:*:Enabled:modeled (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\MrkSrvr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\MrkSrvr.exe:*:Enabled:MrkSrvr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspice.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspice.exe:*:Enabled:pspice (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspiceaa.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspiceaa.exe:*:Enabled:pspiceaa (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspiceexplorersrvr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspiceexplorersrvr.exe:*:Enabled:pspiceexplorersrvr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\psp_cmd.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\psp_cmd.exe:*:Enabled:psp_cmd (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\regsvr32.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\regsvr32.exe:*:Enabled:regsvr32 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\simmgr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\simmgr.exe:*:Enabled:simmgr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\simsrvr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\simsrvr.exe:*:Enabled:simsrvr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\stmed.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\stmed.exe:*:Enabled:stmed (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\specctra\bin\specctra.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\specctra\bin\specctra.exe:*:Enabled:specctra (OrCAD 10.5 Demo)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsdoc.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsdoc.exe:*:Enabled:cdsdoc (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsinfo.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsinfo.exe:*:Enabled:cdsinfo (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsmps.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsmps.exe:*:Enabled:cdsmps (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsMsgServer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsMsgServer.exe:*:Enabled:cdsMsgServer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsNameServer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsNameServer.exe:*:Enabled:cdsNameServer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsRemshClient.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsRemshClient.exe:*:Enabled:cdsRemshClient (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsRunHidden.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsRunHidden.exe:*:Enabled:cdsRunHidden (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsUnzip.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsUnzip.exe:*:Enabled:cdsUnzip (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdswhich.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdswhich.exe:*:Enabled:cdswhich (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsZip.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cdsZip.exe:*:Enabled:cdsZip (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cds_root.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\cds_root.exe:*:Enabled:cds_root (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clsAdminTool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clsAdminTool.exe:*:Enabled:clsAdminTool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clsbd.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clsbd.exe:*:Enabled:clsbd (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clu.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\clu.exe:*:Enabled:clu (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\dregprint.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\dregprint.exe:*:Enabled:dregprint (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\mpsinfo.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\mpsinfo.exe:*:Enabled:mpsinfo (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\nmp.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\nmp.exe:*:Enabled:nmp (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\nmppath.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\nmppath.exe:*:Enabled:nmppath (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\obServer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\obServer.exe:*:Enabled:obServer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\van.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\van.exe:*:Enabled:van (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\bin\versionviewer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\bin\versionviewer.exe:*:Enabled:versionviewer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\capture.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\capture.exe:*:Enabled:capture (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\comp16.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\comp16.exe:*:Enabled:comp16 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pcadi.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pcadi.exe:*:Enabled:pcadi (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pspiceexplorersrvr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pspiceexplorersrvr.exe:*:Enabled:pspiceexplorersrvr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pstswp.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\pstswp.exe:*:Enabled:pstswp (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\regsvr32.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\regsvr32.exe:*:Enabled:regsvr32 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\sch2cap.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\sch2cap.exe:*:Enabled:sch2cap (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\SETBROWS.EXE"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\SETBROWS.EXE:*:Enabled:SETBROWS (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\capture\tutorial\CAPTUTOR.EXE"="C:\OrCAD\OrCAD_10.5_Demo\tools\capture\tutorial\CAPTUTOR.EXE:*:Enabled:CAPTUTOR (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\cdsdoc\bin\cdsdocIndexer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\cdsdoc\bin\cdsdocIndexer.exe:*:Enabled:cdsdocIndexer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\cdsdoc\bin\obServer.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\cdsdoc\bin\obServer.exe:*:Enabled:obServer (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\cdsservipc.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\cdsservipc.exe:*:Enabled:cdsservipc (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\skill.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\skill.exe:*:Enabled:skill (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\skill_g.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\dfII\bin\skill_g.exe:*:Enabled:skill_g (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\fet\bin\mkdefcfg.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\fet\bin\mkdefcfg.exe:*:Enabled:mkdefcfg (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\fet\bin\versiontool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\fet\bin\versiontool.exe:*:Enabled:versiontool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\javaws-1_2_0_02-windows-i586-i.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\javaws-1_2_0_02-windows-i586-i.exe:*:Enabled:javaws-1_2_0_02-windows-i586-i (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\java.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\java.exe:*:Enabled:java (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\javaw.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\javaw.exe:*:Enabled:javaw (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\jpicpl32.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\jpicpl32.exe:*:Enabled:jpicpl32 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\keytool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\keytool.exe:*:Enabled:keytool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\kinit.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\kinit.exe:*:Enabled:kinit (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\klist.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\klist.exe:*:Enabled:klist (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\ktab.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\ktab.exe:*:Enabled:ktab (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\orbd.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\orbd.exe:*:Enabled:orbd (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\policytool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\policytool.exe:*:Enabled:policytool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\rmid.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\rmid.exe:*:Enabled:rmid (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\rmiregistry.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\rmiregistry.exe:*:Enabled:rmiregistry (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\servertool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\servertool.exe:*:Enabled:servertool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\tnameserv.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\jre\bin\tnameserv.exe:*:Enabled:tnameserv (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\fvupdateutil.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\fvupdateutil.exe:*:Enabled:fvupdateutil (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\gcdin.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\gcdin.exe:*:Enabled:gcdin (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\idfin.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\idfin.exe:*:Enabled:idfin (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\layout.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\layout.exe:*:Enabled:layout (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\libcat.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\libcat.exe:*:Enabled:libcat (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\lsession.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\lsession.exe:*:Enabled:lsession (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxascx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxascx.exe:*:Enabled:maxascx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxdxf.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxdxf.exe:*:Enabled:maxdxf (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxeco.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxeco.exe:*:Enabled:maxeco (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxfnetx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxfnetx.exe:*:Enabled:maxfnetx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxminx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxminx.exe:*:Enabled:maxminx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxorcad.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxorcad.exe:*:Enabled:maxorcad (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxp99x.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxp99x.exe:*:Enabled:maxp99x (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxpadx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxpadx.exe:*:Enabled:maxpadx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxpcadx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxpcadx.exe:*:Enabled:maxpcadx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxprotx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxprotx.exe:*:Enabled:maxprotx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxstrx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxstrx.exe:*:Enabled:maxstrx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxtangx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\maxtangx.exe:*:Enabled:maxtangx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\mfceco.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\mfceco.exe:*:Enabled:mfceco (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\padx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\padx.exe:*:Enabled:padx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\pcadx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\pcadx.exe:*:Enabled:pcadx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\pcb2max.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\pcb2max.exe:*:Enabled:pcb2max (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\prcat.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\prcat.exe:*:Enabled:prcat (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\protx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\protx.exe:*:Enabled:protx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\searchTool.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\searchTool.exe:*:Enabled:searchTool (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\setbrows.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\setbrows.exe:*:Enabled:setbrows (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\specin.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\specin.exe:*:Enabled:specin (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\strx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\strx.exe:*:Enabled:strx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tangx.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tangx.exe:*:Enabled:tangx (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tomax.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tomax.exe:*:Enabled:tomax (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tospec.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tospec.exe:*:Enabled:tospec (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\update90.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\update90.exe:*:Enabled:update90 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\sroute\batch32.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\sroute\batch32.exe:*:Enabled:batch32 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\sroute\sroute.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\sroute\sroute.exe:*:Enabled:sroute (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tutorial\laytutor.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\layout\tutorial\laytutor.exe:*:Enabled:laytutor (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pcb\bin\specctra.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pcb\bin\specctra.exe:*:Enabled:specctra (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\IndiceFileGeneration.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\IndiceFileGeneration.exe:*:Enabled:IndiceFileGeneration (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\Magneticdesigner.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\Magneticdesigner.exe:*:Enabled:Magneticdesigner (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\modeled.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\modeled.exe:*:Enabled:modeled (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\MrkSrvr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\MrkSrvr.exe:*:Enabled:MrkSrvr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspice.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspice.exe:*:Enabled:pspice (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspiceaa.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspiceaa.exe:*:Enabled:pspiceaa (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspiceexplorersrvr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\pspiceexplorersrvr.exe:*:Enabled:pspiceexplorersrvr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\psp_cmd.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\psp_cmd.exe:*:Enabled:psp_cmd (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\regsvr32.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\regsvr32.exe:*:Enabled:regsvr32 (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\simmgr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\simmgr.exe:*:Enabled:simmgr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\simsrvr.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\simsrvr.exe:*:Enabled:simsrvr (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\stmed.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\pspice\stmed.exe:*:Enabled:stmed (OrCAD 10.5 Demo)"
"C:\OrCAD\OrCAD_10.5_Demo\tools\specctra\bin\specctra.exe"="C:\OrCAD\OrCAD_10.5_Demo\tools\specctra\bin\specctra.exe:*:Enabled:specctra (OrCAD 10.5 Demo)"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"vidc.tscc"=C:\Windows\SysWOW64\tsccvid64.dll
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.txt - open - "C:\Program Files (x86)\PSPad editor\PSPad.exe" "%1"

======List of files/folders created in the last 1 month======

2011-12-27 14:21:58 ----D---- C:\rsit
2011-12-26 21:27:14 ----D---- C:\Users\Mrkew\AppData\Roaming\AtomZombieData
2011-12-26 19:52:58 ----D---- C:\Program Files\trend micro
2011-12-26 19:45:49 ----D---- C:\Program Files (x86)\proXPN
2011-12-25 13:41:07 ----D---- C:\Fraps
2011-12-25 11:46:27 ----D---- C:\Users\Mrkew\AppData\Roaming\Broken Rules
2011-12-25 11:46:23 ----A---- C:\Windows\d3dx.dat
2011-12-24 13:24:03 ----D---- C:\Users\Mrkew\AppData\Roaming\Tropico 4 Demo
2011-12-23 21:01:06 ----D---- C:\Program Files (x86)\Zachtronics Industries
2011-12-23 15:45:06 ----D---- C:\Program Files (x86)\Virgin Interactive
2011-12-20 22:15:40 ----RA---- C:\ProgramData\hash.dat
2011-12-20 19:52:03 ----D---- C:\Program Files (x86)\Adobe Story
2011-12-20 19:49:53 ----D---- C:\Program Files\Common Files\Adobe
2011-12-20 19:49:36 ----D---- C:\Program Files\Adobe
2011-12-20 18:56:56 ----D---- C:\Program Files (x86)\Adobe Download Assistant
2011-12-19 17:09:36 ----D---- C:\Users\Mrkew\AppData\Roaming\GetRightToGo
2011-12-18 18:37:53 ----D---- C:\Program Files (x86)\Microsoft Office
2011-12-11 12:58:44 ----D---- C:\ProgramData\SecuROM
2011-12-11 10:05:09 ----A---- C:\Windows\system32\FNTCACHE.DAT
2011-12-10 22:27:33 ----D---- C:\Windows\system32\appmgmt
2011-12-10 18:06:02 ----RHD---- C:\Users\Mrkew\AppData\Roaming\SecuROM
2011-12-10 18:06:01 ----A---- C:\Windows\SYSWOW64\CmdLineExt_x64.dll
2011-12-10 15:57:47 ----D---- C:\Program Files (x86)\FreeRapid-0.86u1
2011-12-06 22:22:28 ----D---- C:\Program Files (x86)\SplitMediaLabs
2011-12-03 17:53:09 ----D---- C:\Users\Mrkew\AppData\Roaming\TeamViewer
2011-11-30 20:21:51 ----D---- C:\wamp
2011-11-28 18:15:57 ----D---- C:\Program Files (x86)\Microsoft Silverlight

======List of files/folders modified in the last 1 month======

2011-12-27 14:22:13 ----D---- C:\Users\Mrkew\AppData\Roaming\Skype
2011-12-27 14:22:04 ----D---- C:\Windows\Temp
2011-12-27 14:21:20 ----D---- C:\Users\Mrkew\AppData\Roaming\.purple
2011-12-27 13:03:12 ----D---- C:\Windows\system32\drivers
2011-12-27 11:08:58 ----D---- C:\Windows\System32
2011-12-27 11:08:58 ----D---- C:\Windows\inf
2011-12-27 11:08:58 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-12-27 10:33:15 ----D---- C:\Windows\system32\catroot2
2011-12-26 23:24:53 ----D---- C:\Windows
2011-12-26 23:24:52 ----D---- C:\Windows\SysWOW64
2011-12-26 20:14:04 ----D---- C:\Windows\system32\Tasks
2011-12-26 19:52:58 ----D---- C:\Program Files
2011-12-26 19:47:55 ----A---- C:\Windows\win.ini
2011-12-26 19:47:41 ----D---- C:\Windows\system32\DriverStore
2011-12-26 19:47:40 ----SHD---- C:\System Volume Information
2011-12-26 19:45:49 ----RD---- C:\Program Files (x86)
2011-12-26 09:49:50 ----D---- C:\Users\Mrkew\AppData\Roaming\GHISLER
2011-12-25 22:18:41 ----A---- C:\Windows\WirelessFTP.INI
2011-12-25 15:37:07 ----D---- C:\Users\Mrkew\AppData\Roaming\Audacity
2011-12-25 14:46:30 ----D---- C:\Users\Mrkew\AppData\Roaming\uTorrent
2011-12-25 12:13:06 ----D---- C:\Windows\system32\config
2011-12-25 12:03:50 ----A---- C:\Windows\system32\wrap_oal.dll
2011-12-25 12:03:49 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2011-12-25 12:03:49 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2011-12-25 12:03:49 ----A---- C:\Windows\system32\OpenAL32.dll
2011-12-25 12:02:57 ----SHD---- C:\Windows\Installer
2011-12-25 12:02:53 ----D---- C:\Windows\winsxs
2011-12-24 13:27:03 ----RSD---- C:\Windows\assembly
2011-12-23 14:26:18 ----D---- C:\Windows\Prefetch
2011-12-23 13:04:38 ----D---- C:\Users\Mrkew\AppData\Roaming\.minecraft
2011-12-22 21:50:35 ----D---- C:\Users\Mrkew\AppData\Roaming\Publish Providers
2011-12-20 22:15:41 ----HD---- C:\ProgramData
2011-12-20 21:30:26 ----ASD---- C:\ProgramData\Microsoft
2011-12-20 21:30:26 ----AD---- C:\Program Files\Common Files\Microsoft Shared
2011-12-20 21:30:26 ----A---- C:\Windows\SurCode.INI
2011-12-20 20:00:40 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2011-12-20 19:59:24 ----D---- C:\Users\Mrkew\AppData\Roaming\Adobe
2011-12-20 19:57:00 ----D---- C:\Program Files (x86)\Adobe
2011-12-20 19:53:21 ----RSD---- C:\Windows\Fonts
2011-12-20 19:51:01 ----D---- C:\Windows\system32\catroot
2011-12-20 19:49:53 ----D---- C:\Program Files\Common Files
2011-12-20 19:47:49 ----D---- C:\ProgramData\Adobe
2011-12-19 20:06:29 ----SD---- C:\Users\Mrkew\AppData\Roaming\Microsoft
2011-12-18 18:39:17 ----A---- C:\Windows\ODBC.INI
2011-12-18 18:38:13 ----D---- C:\Windows\ShellNew
2011-12-18 18:38:07 ----D---- C:\Program Files (x86)\Common Files
2011-12-18 18:37:53 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-12-18 18:35:37 ----D---- C:\Windows\system
2011-12-16 06:11:50 ----D---- C:\Windows\system32\FxsTmp
2011-12-11 15:24:08 ----D---- C:\Windows\Minidump
2011-12-10 22:49:00 ----D---- C:\Windows\Logs
2011-12-10 22:29:13 ----D---- C:\Users\Mrkew\AppData\Roaming\DAEMON Tools Lite
2011-12-10 12:42:33 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2011-12-09 06:34:35 ----D---- C:\Program Files (x86)\Opera
2011-12-08 20:58:11 ----D---- C:\Windows\Downloaded Program Files
2011-12-05 21:42:05 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2011-12-04 22:01:05 ----D---- C:\Program Files (x86)\Evernote
2011-12-03 17:14:50 ----D---- C:\Program Files\Sony
2011-12-03 16:45:23 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-11-30 19:08:41 ----D---- C:\Program Files\Java
2011-11-30 19:01:32 ----D---- C:\Program Files (x86)\Android
2011-11-28 16:58:42 ----D---- C:\Users\Mrkew\AppData\Roaming\Origin
2011-11-28 16:42:55 ----D---- C:\Program Files (x86)\Origin

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2009-07-09 55280]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2011-12-08 130760]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2011-09-15 27760]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-10-13 270912]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Program Files\HWiNFO64\HWiNFO64A.SYS [2011-09-22 30080]
R1 Tosrfcom;Bluetooth RFCOMM; C:\Windows\System32\Drivers\tosrfcom.sys [2007-10-02 76160]
R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys [2010-11-20 59392]
R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys [2010-11-20 360832]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2011-09-15 97312]
R3 athur;Atheros AR9271 Wireless Network Adapter Service; C:\Windows\system32\DRIVERS\athurx.sys [2010-01-05 1847296]
R3 enecir;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys [2008-01-24 60928]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 I7Z300Filter;Icon7_Z300; C:\Windows\system32\drivers\I7Z300.sys [2010-01-20 16384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2008-07-03 1477272]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2010-06-29 931168]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2011-07-08 174184]
R3 NVNET;NVIDIA nForce Ethernet Driver; C:\Windows\system32\DRIVERS\nvmf6264.sys [2010-08-12 350952]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2008-03-31 27680]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\SmSerl64.sys [2009-06-10 1227776]
R3 tap0901;tap0901; C:\Windows\system32\DRIVERS\tap0901.sys [2011-06-07 40128]
R3 tosporte;Bluetooth COM Port; C:\Windows\system32\DRIVERS\tosporte.sys [2006-10-11 50688]
R3 vpcbus;Služba hostitelské sběrnice programu Virtual PC; C:\Windows\system32\DRIVERS\vpchbus.sys [2010-11-20 194944]
R3 vpcusb;Služba konektoru virtualizace rozhraní USB; C:\Windows\system32\DRIVERS\vpcusb.sys [2010-11-20 95232]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2010-12-21 36328]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 cpuz135;cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys []
S3 EagleX64;EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys []
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena Classic\safedrv.sys []
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx64.sys [2008-01-29 1486752]
S3 pwdrvio;pwdrvio; \??\C:\Windows\syswow64\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\Windows\syswow64\pwdspio.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-06-02 157672]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-06-02 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-06-02 177640]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2011-06-02 146920]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2010-12-21 136264]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2010-12-21 19016]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2010-12-21 172104]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 tosrfbd;Bluetooth RFBUS; C:\Windows\system32\DRIVERS\tosrfbd.sys [2008-02-15 165120]
S3 tosrfbnp;Bluetooth RFBNEP; C:\Windows\System32\Drivers\tosrfbnp.sys [2007-11-29 44800]
S3 Tosrfhid;Bluetooth RFHID; C:\Windows\system32\DRIVERS\Tosrfhid.sys [2008-01-31 88448]
S3 tosrfnds;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\tosrfnds.sys [2005-07-13 28160]
S3 TosRfSnd;Bluetooth Audio; C:\Windows\system32\drivers\tosrfsnd.sys [2008-01-22 56320]
S3 Tosrfusb;Bluetooth USB Controller; C:\Windows\system32\DRIVERS\tosrfusb.sys [2007-10-18 51328]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2009-07-14 19968]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WSDPrintDevice;Podpora tisku WSD prostřednictvím funkce UMB; C:\Windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040]
S3 WSDScan;Podpora skenování WSD přes UMB; C:\Windows\system32\DRIVERS\WSDScan.sys [2009-07-14 25088]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AntiVirService;Avira Realtime Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2011-09-23 110032]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2011-09-23 86224]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2011-08-15 2329480]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-10-15 1640768]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-10-09 75136]
R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2007-09-28 168296]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe [2011-08-15 130976]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2011-12-07 419624]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 wampapache;wampapache; c:\wamp\bin\apache\apache2.2.21\bin\httpd.exe [2011-09-26 21504]
S3 wampmysqld;wampmysqld; c:\wamp\bin\mysql\mysql5.5.16\bin\mysqld.exe [2011-09-26 9665536]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-10-08 1255736]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-11-07 136176]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-11-07 136176]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]

-----------------EOF-----------------

Re: Preventivka - Mrkew

Napsal: 27 pro 2011 14:50
od Roli
Jen bych fixnul tyhle zbytečnosti v HJT :

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)

HJT najdeš zde :

C:\Program Files\trend micro\Mrkew.exe

Fix znamená že spustíš HJT Obrázek jako admin

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Jinak vše v pořádku.

Re: Preventivka - Mrkew

Napsal: 27 pro 2011 15:13
od mrkew2
Ok to bude vše. Děkuju.

Re: Preventivka - Mrkew

Napsal: 27 pro 2011 15:51
od Roli
Není zač.
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz