Prosím o kontrolu logu, mockrát děkuji!
Napsal: 22 pro 2012 22:02
Logfile of random's system information tool 1.09 (written by random/random)
Run by gregor at 2012-12-22 21:57:13
Microsoft Windows 8 Pro with Media Center
System drive C: has 57 GB (43%) free of 132 GB
Total RAM: 3838 MB (58% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:57:17, on 22.12.2012
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16453)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Users\gregor\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\gregor.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [Google Update] "C:\Users\gregor\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - Startup: Dropbox.lnk = C:\Users\gregor\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: GamePark klient 2.lnk = C:\Program Files\GamePark2\gpcl.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Unknown owner - C:\WINDOWS\System32\appdrvrem01.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 8041 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
atieclxx
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
dashost.exe {03f105d1-3316-489a-a8c79148273ecc5c}
"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"
C:\WINDOWS\SysWOW64\PnkBstrA.exe
C:\WINDOWS\SysWOW64\PnkBstrB.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
taskhostex.exe
C:\WINDOWS\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
"C:\Users\gregor\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4396.1016_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4588.2.346217362\1431757826" --gpu-vendor-id=0x1002 --gpu-device-id=0x9612 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=8.970.100.3000 --ignored=" --type=renderer " /prefetch:12
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/18/OneClickSignIn/Standard/Prerender/PrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warmest_socket/ --extension-process --renderer-print-preview --channel="4588.3.1577987683\1927123517" /prefetch:3
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/18/OneClickSignIn/Standard/Prerender/PrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warmest_socket/ --renderer-print-preview --channel="4588.7.1747773815\1439361392" /prefetch:3
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="4588.8.380825130\1190547040" --lang=cs --ignored=" --type=renderer " /prefetch:13
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/18/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warmest_socket/ --renderer-print-preview --channel="4588.18.1380384782\1059332359" /prefetch:3
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/18/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warmest_socket/ --renderer-print-preview --channel="4588.23.1001044048\677448419" /prefetch:3
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/18/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warmest_socket/ --renderer-print-preview --channel="4588.28.24103842\1892349435" /prefetch:3
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/18/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warmest_socket/ --renderer-print-preview --channel="4588.30.1337723138\1727874666" /prefetch:3
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/18/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warmest_socket/ --renderer-print-preview --channel="4588.33.1512665494\238319727" /prefetch:3
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 552 556 564 65536 560
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\gregor\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1613717319-2366056463-1278901721-1001Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1613717319-2366056463-1278901721-1001UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 689040]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-10-30 449512]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 561552]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-10-30 155384]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-06-18 1808168]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\gregor\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-26 116648]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-09-23 926896]
"VirtualCloneDrive"=C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-09-28 642728]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes Anti-Malware"=C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2012-09-29 766536]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
GamePark klient 2.lnk - C:\Program Files\GamePark2\gpcl.exe
C:\Users\gregor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\gregor\AppData\Roaming\Dropbox\bin\Dropbox.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmartcardSimulator]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VirtualSmartcardReader]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wcmsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"PromptOnSecureDesktop"=0
"ConsentPromptBehaviorAdmin"=0
"EnableUIADesktopToggle"=0
"EnableCursorSuppression"=1
"ConsentPromptBehaviorUser"=3
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktopChanges"=1
"NoActiveDesktop"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2012-12-22 21:54:56 ----D---- C:\Program Files\trend micro
2012-12-22 21:54:55 ----D---- C:\rsit
2012-12-22 21:42:31 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-12-22 21:42:31 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2012-12-22 21:27:21 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2012-12-21 15:43:09 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2012-12-21 15:43:09 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2012-12-21 15:43:09 ----A---- C:\WINDOWS\system32\atmlib.dll
2012-12-21 15:43:09 ----A---- C:\WINDOWS\system32\atmfd.dll
2012-12-19 17:09:40 ----A---- C:\Users\gregor\AppData\Roaming\burnaware.ini
2012-12-19 17:07:57 ----D---- C:\Program Files (x86)\BurnAware Free
2012-12-18 22:27:35 ----D---- C:\Program Files (x86)\GeMM
2012-12-18 20:46:20 ----A---- C:\WINDOWS\system32\drivers\appdrv01.sys
2012-12-18 20:46:19 ----A---- C:\WINDOWS\system32\appdrvrem01.exe
2012-12-18 19:48:23 ----D---- C:\WINDOWS\SYSWOW64\xlive
2012-12-18 19:48:22 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2012-12-16 01:46:35 ----D---- C:\Users\gregor\AppData\Roaming\Red Alert 3
2012-12-16 01:01:59 ----D---- C:\ProgramData\RELOADED
2012-12-15 19:48:10 ----A---- C:\WINDOWS\SYSWOW64\wrap_oal.dll
2012-12-15 19:48:09 ----A---- C:\WINDOWS\SYSWOW64\OpenAL32.dll
2012-12-13 18:38:23 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2012-12-13 18:38:22 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2012-12-13 18:38:22 ----A---- C:\WINDOWS\system32\msctf.dll
2012-12-13 18:38:22 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2012-12-13 18:38:21 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2012-12-13 18:38:20 ----A---- C:\WINDOWS\SYSWOW64\KBDKURD.DLL
2012-12-13 18:38:20 ----A---- C:\WINDOWS\SYSWOW64\Display.dll
2012-12-13 18:38:20 ----A---- C:\WINDOWS\SYSWOW64\DevDispItemProvider.dll
2012-12-13 18:38:20 ----A---- C:\WINDOWS\system32\KBDKURD.DLL
2012-12-13 18:38:20 ----A---- C:\WINDOWS\system32\drivers\usbohci.sys
2012-12-13 18:38:20 ----A---- C:\WINDOWS\system32\drivers\hidi2c.sys
2012-12-13 18:38:20 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys
2012-12-13 18:38:20 ----A---- C:\WINDOWS\system32\Display.dll
2012-12-13 18:38:20 ----A---- C:\WINDOWS\system32\DevDispItemProvider.dll
2012-12-13 18:38:18 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2012-12-13 18:38:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2012-12-13 18:38:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2012-12-13 18:38:18 ----A---- C:\WINDOWS\system32\WSShared.dll
2012-12-13 18:38:18 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2012-12-13 18:38:18 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2012-12-13 18:37:36 ----A---- C:\WINDOWS\system32\glcndFilter.dll
2012-12-13 18:37:34 ----A---- C:\WINDOWS\system32\twinui.dll
2012-12-13 18:37:33 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2012-12-13 18:37:32 ----A---- C:\WINDOWS\SYSWOW64\glcndFilter.dll
2012-12-13 18:37:29 ----A---- C:\WINDOWS\system32\wuaueng.dll
2012-12-13 18:37:28 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2012-12-13 18:37:28 ----A---- C:\WINDOWS\system32\winhttp.dll
2012-12-13 18:37:28 ----A---- C:\WINDOWS\system32\mfcore.dll
2012-12-13 18:37:28 ----A---- C:\WINDOWS\system32\KernelBase.dll
2012-12-13 18:37:27 ----A---- C:\WINDOWS\system32\ole32.dll
2012-12-13 18:37:27 ----A---- C:\WINDOWS\system32\mstscax.dll
2012-12-13 18:37:26 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2012-12-13 18:37:26 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2012-12-13 18:37:26 ----A---- C:\WINDOWS\system32\localspl.dll
2012-12-13 18:37:26 ----A---- C:\WINDOWS\system32\audiosrv.dll
2012-12-13 18:37:25 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2012-12-13 18:37:25 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2012-12-13 18:37:25 ----A---- C:\WINDOWS\system32\AudioSes.dll
2012-12-13 18:37:25 ----A---- C:\WINDOWS\system32\AudioEng.dll
2012-12-13 18:37:24 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2012-12-13 18:37:24 ----A---- C:\WINDOWS\system32\authui.dll
2012-12-13 18:37:24 ----A---- C:\WINDOWS\system32\audiodg.exe
2012-12-13 18:37:24 ----A---- C:\WINDOWS\HelpPane.exe
2012-12-13 18:37:23 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2012-12-13 18:37:23 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2012-12-13 18:37:23 ----A---- C:\WINDOWS\system32\wuapi.dll
2012-12-13 18:37:23 ----A---- C:\WINDOWS\system32\drvstore.dll
2012-12-13 18:37:23 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2012-12-13 18:37:21 ----A---- C:\WINDOWS\SYSWOW64\drvstore.dll
2012-12-13 18:37:20 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2012-12-13 18:37:20 ----A---- C:\WINDOWS\system32\wlansvc.dll
2012-12-13 18:37:20 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2012-12-13 18:37:20 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2012-12-13 18:37:19 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2012-12-13 18:37:18 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2012-12-13 18:37:18 ----A---- C:\WINDOWS\system32\drivers\http.sys
2012-12-13 18:37:17 ----A---- C:\WINDOWS\system32\shell32.dll
2012-12-13 18:37:17 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2012-12-13 18:37:16 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2012-12-13 18:37:16 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2012-12-13 18:37:16 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2012-12-13 18:37:16 ----A---- C:\WINDOWS\system32\dafWCN.dll
2012-12-13 18:37:16 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2012-12-13 18:37:15 ----A---- C:\WINDOWS\SYSWOW64\wlanmsm.dll
2012-12-13 18:37:15 ----A---- C:\WINDOWS\system32\wucltux.dll
2012-12-13 18:37:15 ----A---- C:\WINDOWS\system32\wuauclt.exe
2012-12-13 18:37:15 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2012-12-13 18:37:15 ----A---- C:\WINDOWS\system32\drivers\msiscsi.sys
2012-12-13 18:37:15 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2012-12-13 18:37:15 ----A---- C:\WINDOWS\system32\BFE.DLL
2012-12-13 18:37:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2012-12-13 18:37:14 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2012-12-13 18:37:14 ----A---- C:\WINDOWS\system32\rdpclip.exe
2012-12-13 18:37:14 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2012-12-13 18:37:13 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2012-12-13 18:37:13 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2012-12-13 18:37:13 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2012-12-13 18:37:13 ----A---- C:\WINDOWS\system32\wuwebv.dll
2012-12-13 18:37:13 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2012-12-13 18:37:13 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2012-12-13 18:37:13 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2012-12-13 18:37:12 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2012-12-13 18:37:12 ----A---- C:\WINDOWS\SYSWOW64\ubpm.dll
2012-12-13 18:37:12 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2012-12-13 18:37:12 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2012-12-13 18:37:12 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2012-12-13 18:37:12 ----A---- C:\WINDOWS\system32\wuapp.exe
2012-12-13 18:37:12 ----A---- C:\WINDOWS\system32\ubpm.dll
2012-12-13 18:37:12 ----A---- C:\WINDOWS\system32\nshwfp.dll
2012-12-13 18:37:12 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2012-12-13 18:37:11 ----A---- C:\WINDOWS\system32\wcncsvc.dll
2012-12-13 18:37:11 ----A---- C:\WINDOWS\system32\storewuauth.dll
2012-12-13 18:37:11 ----A---- C:\WINDOWS\system32\fsquirt.exe
2012-12-13 18:37:10 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2012-12-13 18:37:10 ----A---- C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
2012-12-13 18:37:10 ----A---- C:\WINDOWS\system32\wudriver.dll
2012-12-13 18:37:10 ----A---- C:\WINDOWS\system32\wlanapi.dll
2012-12-13 18:37:10 ----A---- C:\WINDOWS\system32\taskhostex.exe
2012-12-13 18:37:10 ----A---- C:\WINDOWS\system32\taskhost.exe
2012-12-13 18:37:10 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL
2012-12-13 18:37:10 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2012-12-13 18:37:10 ----A---- C:\WINDOWS\system32\aaclient.dll
2012-12-13 18:37:09 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2012-12-13 18:37:09 ----A---- C:\WINDOWS\SYSWOW64\aaclient.dll
2012-12-13 18:37:08 ----A---- C:\WINDOWS\SYSWOW64\wlansec.dll
2012-12-13 18:37:08 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll
2012-12-13 18:37:08 ----A---- C:\WINDOWS\system32\wlansec.dll
2012-12-13 18:37:08 ----A---- C:\WINDOWS\system32\WcnApi.dll
2012-12-13 18:37:07 ----A---- C:\WINDOWS\SYSWOW64\tsgqec.dll
2012-12-13 18:37:07 ----A---- C:\WINDOWS\SYSWOW64\fdWCN.dll
2012-12-13 18:37:07 ----A---- C:\WINDOWS\system32\WcnEapAuthProxy.dll
2012-12-13 18:37:07 ----A---- C:\WINDOWS\system32\tsgqec.dll
2012-12-13 18:37:07 ----A---- C:\WINDOWS\system32\fdWCN.dll
2012-12-13 18:37:06 ----A---- C:\WINDOWS\system32\wfdprov.dll
2012-12-13 18:37:06 ----A---- C:\WINDOWS\system32\WcnEapPeerProxy.dll
2012-12-13 18:37:05 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2012-12-13 18:37:05 ----A---- C:\WINDOWS\system32\wups2.dll
2012-12-13 18:37:05 ----A---- C:\WINDOWS\system32\wups.dll
2012-12-13 18:37:05 ----A---- C:\WINDOWS\system32\EncDump.dll
2012-12-13 18:37:05 ----A---- C:\WINDOWS\system32\actxprxy.dll
2012-12-13 18:37:04 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2012-12-13 18:37:04 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2012-12-13 18:37:04 ----A---- C:\WINDOWS\system32\wuaext.dll
2012-12-13 18:37:04 ----A---- C:\WINDOWS\system32\drivers\processr.sys
2012-12-13 18:37:04 ----A---- C:\WINDOWS\system32\drivers\intelppm.sys
2012-12-13 18:37:04 ----A---- C:\WINDOWS\system32\drivers\fxppm.sys
2012-12-13 18:37:04 ----A---- C:\WINDOWS\system32\drivers\BTHUSB.SYS
2012-12-13 18:37:04 ----A---- C:\WINDOWS\system32\drivers\amdppm.sys
2012-12-13 18:37:04 ----A---- C:\WINDOWS\system32\drivers\amdk8.sys
2012-12-13 18:37:03 ----A---- C:\WINDOWS\SYSWOW64\wlanhlp.dll
2012-12-13 18:37:03 ----A---- C:\WINDOWS\system32\wushareduxresources.dll
2012-12-13 18:37:03 ----A---- C:\WINDOWS\system32\wlanhlp.dll
2012-12-13 18:37:03 ----A---- C:\WINDOWS\system32\iscsilog.dll
2012-12-13 18:37:03 ----A---- C:\WINDOWS\system32\drivers\bthenum.sys
2012-12-13 17:44:02 ----A---- C:\WINDOWS\system32\MRT.exe
2012-12-13 17:32:20 ----A---- C:\WINDOWS\system32\tssdisai.dll
2012-12-13 17:32:19 ----A---- C:\WINDOWS\SYSWOW64\poqexec.exe
2012-12-13 17:32:19 ----A---- C:\WINDOWS\system32\VmHostAI.dll
2012-12-13 17:32:19 ----A---- C:\WINDOWS\system32\RDWebAI.dll
2012-12-13 17:32:19 ----A---- C:\WINDOWS\system32\poqexec.exe
2012-12-13 17:32:19 ----A---- C:\WINDOWS\system32\appserverai.dll
2012-12-13 17:31:11 ----A---- C:\WINDOWS\SYSWOW64\dpnsvr.exe
2012-12-13 17:31:11 ----A---- C:\WINDOWS\SYSWOW64\dpnet.dll
2012-12-13 17:31:11 ----A---- C:\WINDOWS\SYSWOW64\dpnathlp.dll
2012-12-13 17:31:11 ----A---- C:\WINDOWS\system32\dpnsvr.exe
2012-12-13 17:31:11 ----A---- C:\WINDOWS\system32\dpnhupnp.dll
2012-12-13 17:31:11 ----A---- C:\WINDOWS\system32\dpnhpast.dll
2012-12-13 17:31:11 ----A---- C:\WINDOWS\system32\dpnet.dll
2012-12-13 17:31:11 ----A---- C:\WINDOWS\system32\dpnathlp.dll
2012-12-13 17:31:10 ----A---- C:\WINDOWS\SYSWOW64\dpnlobby.dll
2012-12-13 17:31:10 ----A---- C:\WINDOWS\SYSWOW64\dpnhupnp.dll
2012-12-13 17:31:10 ----A---- C:\WINDOWS\SYSWOW64\dpnhpast.dll
2012-12-13 17:31:10 ----A---- C:\WINDOWS\SYSWOW64\dpnaddr.dll
2012-12-13 17:31:10 ----A---- C:\WINDOWS\system32\dpnlobby.dll
2012-12-13 17:31:10 ----A---- C:\WINDOWS\system32\dpnaddr.dll
2012-12-13 17:31:02 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2012-12-13 17:31:02 ----A---- C:\WINDOWS\system32\tzres.dll
2012-12-13 17:30:57 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2012-12-13 17:30:57 ----A---- C:\WINDOWS\SYSWOW64\dciman32.dll
2012-12-13 17:30:57 ----A---- C:\WINDOWS\system32\fontsub.dll
2012-12-13 17:30:57 ----A---- C:\WINDOWS\system32\dciman32.dll
2012-12-13 17:30:56 ----A---- C:\WINDOWS\SYSWOW64\lpk.dll
2012-12-13 17:30:56 ----A---- C:\WINDOWS\system32\win32k.sys
2012-12-13 17:30:56 ----A---- C:\WINDOWS\system32\lpk.dll
2012-12-13 17:30:55 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2012-12-13 17:30:55 ----A---- C:\WINDOWS\system32\sysreset.exe
2012-12-13 17:30:55 ----A---- C:\WINDOWS\system32\resetengmig.dll
2012-12-13 17:30:55 ----A---- C:\WINDOWS\system32\reseteng.dll
2012-12-13 17:30:55 ----A---- C:\WINDOWS\system32\ReAgent.dll
2012-12-13 17:30:52 ----A---- C:\WINDOWS\system32\mshtml.dll
2012-12-13 17:30:48 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2012-12-13 17:30:46 ----A---- C:\WINDOWS\system32\ieframe.dll
2012-12-13 17:30:44 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2012-12-13 17:30:43 ----A---- C:\WINDOWS\system32\wininet.dll
2012-12-13 17:30:42 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2012-12-13 17:30:42 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2012-12-13 17:30:42 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2012-12-13 17:30:42 ----A---- C:\WINDOWS\system32\urlmon.dll
2012-12-13 17:30:42 ----A---- C:\WINDOWS\system32\iertutil.dll
2012-12-13 17:30:41 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2012-12-13 17:30:41 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2012-12-13 17:30:41 ----A---- C:\WINDOWS\SYSWOW64\iesysprep.dll
2012-12-13 17:30:41 ----A---- C:\WINDOWS\system32\uxtheme.dll
2012-12-13 17:30:41 ----A---- C:\WINDOWS\system32\msfeeds.dll
2012-12-13 17:30:41 ----A---- C:\WINDOWS\system32\jscript9.dll
2012-12-13 17:30:41 ----A---- C:\WINDOWS\system32\iesysprep.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\SYSWOW64\uxtheme.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\SYSWOW64\UXInit.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\system32\UXInit.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\system32\jsproxy.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\system32\jscript.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\system32\iesetup.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\system32\iernonce.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2012-12-10 19:21:05 ----D---- C:\Users\gregor\AppData\Roaming\My Battle for Middle-earth Files
2012-12-10 15:22:50 ----D---- C:\Program Files\GamePark2
2012-12-09 21:17:37 ----A---- C:\WINDOWS\SYSWOW64\PnkBstrB.exe
2012-12-09 21:17:31 ----A---- C:\WINDOWS\SYSWOW64\PnkBstrA.exe
2012-12-09 19:39:55 ----D---- C:\Program Files (x86)\uTorrent
2012-12-09 19:39:21 ----D---- C:\Users\gregor\AppData\Roaming\uTorrent
2012-12-09 17:48:47 ----A---- C:\WINDOWS\SYSWOW64\lMMLDeleteUserData42107612FX.tmp
2012-12-07 19:17:04 ----D---- C:\Program Files (x86)\DsNET Corp
2012-12-07 19:16:43 ----D---- C:\ProgramData\Ask
2012-12-05 14:43:09 ----D---- C:\Program Files\Defraggler
2012-12-04 19:32:53 ----D---- C:\Users\gregor\AppData\Roaming\My Battle for Middle-earth(tm) II Files
2012-12-04 13:28:38 ----A---- C:\WINDOWS\SYSWOW64\Access.dat
2012-12-04 13:20:42 ----D---- C:\Users\gregor\AppData\Roaming\Tunngle
2012-12-04 13:20:41 ----A---- C:\WINDOWS\system32\drivers\tap0901t.sys
2012-12-04 12:32:19 ----D---- C:\Users\gregor\AppData\Roaming\Hamachi
2012-12-03 22:28:46 ----D---- C:\ProgramData\Orbit
2012-11-30 19:28:18 ----D---- C:\WINDOWS\Minidump
2012-11-27 20:22:59 ----A---- C:\WINDOWS\system32\pcasvc.dll
2012-11-27 20:22:59 ----A---- C:\WINDOWS\system32\pcalua.exe
2012-11-27 20:22:59 ----A---- C:\WINDOWS\system32\pcaevts.dll
2012-11-27 20:22:59 ----A---- C:\WINDOWS\system32\pcadm.dll
2012-11-25 14:49:20 ----HD---- C:\ProgramData\CanonBJ
2012-11-25 14:48:54 ----A---- C:\WINDOWS\system32\CNMLMAT.DLL
2012-11-23 14:10:30 ----D---- C:\ProgramData\ESET
2012-11-23 14:10:29 ----D---- C:\Program Files\ESET
2012-11-23 14:02:16 ----D---- C:\Program Files\Synaptics
2012-11-23 14:00:57 ----A---- C:\WINDOWS\system32\WdfCoInstaller01009.dll
2012-11-23 14:00:56 ----A---- C:\WINDOWS\SYSWOW64\SynTPCOM.dll
2012-11-23 14:00:56 ----A---- C:\WINDOWS\system32\SynTPCo4.dll
2012-11-23 14:00:56 ----A---- C:\WINDOWS\system32\SynTPAPI.dll
2012-11-23 14:00:56 ----A---- C:\WINDOWS\system32\drivers\SynTP.sys
2012-11-23 14:00:55 ----A---- C:\WINDOWS\SYSWOW64\SynCtrl.dll
2012-11-23 14:00:55 ----A---- C:\WINDOWS\SYSWOW64\SynCOM.dll
2012-11-23 14:00:55 ----A---- C:\WINDOWS\system32\SynCtrl.dll
2012-11-23 14:00:55 ----A---- C:\WINDOWS\system32\SynCOM.dll
======List of files/folders modified in the last 1 month======
2012-12-22 21:57:16 ----D---- C:\WINDOWS\Temp
2012-12-22 21:56:32 ----D---- C:\WINDOWS\Prefetch
2012-12-22 21:54:56 ----RD---- C:\Program Files
2012-12-22 21:42:31 ----RD---- C:\Program Files (x86)
2012-12-22 21:42:31 ----D---- C:\WINDOWS\system32\Drivers
2012-12-22 21:29:49 ----D---- C:\Users\gregor\AppData\Roaming\Dropbox
2012-12-22 21:27:21 ----RD---- C:\WINDOWS\System32
2012-12-22 21:27:16 ----D---- C:\WINDOWS\system32\config
2012-12-22 20:00:10 ----D---- C:\WINDOWS\system32\sru
2012-12-22 19:55:58 ----D---- C:\WINDOWS\AUInstallAgent
2012-12-22 19:54:45 ----HD---- C:\Program Files\WindowsApps
2012-12-21 19:25:01 ----SHD---- C:\WINDOWS\Installer
2012-12-21 19:25:01 ----SHD---- C:\Config.Msi
2012-12-21 19:25:01 ----D---- C:\Windows
2012-12-21 19:23:45 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-12-21 19:20:58 ----SHD---- C:\System Volume Information
2012-12-21 18:17:34 ----D---- C:\WINDOWS\Microsoft.NET
2012-12-21 17:46:49 ----D---- C:\WINDOWS\Inf
2012-12-21 17:46:49 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-12-21 16:05:24 ----D---- C:\WINDOWS\WinSxS
2012-12-21 16:02:27 ----D---- C:\WINDOWS\SysWOW64
2012-12-21 15:50:05 ----D---- C:\WINDOWS\CbsTemp
2012-12-20 00:22:36 ----SD---- C:\Users\gregor\AppData\Roaming\Microsoft
2012-12-19 18:41:01 ----D---- C:\Users\gregor\AppData\Roaming\Skype
2012-12-19 18:28:48 ----RSD---- C:\WINDOWS\assembly
2012-12-18 22:36:01 ----SD---- C:\ProgramData\Microsoft
2012-12-18 19:48:26 ----D---- C:\WINDOWS\Logs
2012-12-16 20:10:55 ----D---- C:\WINDOWS\debug
2012-12-16 01:01:59 ----HD---- C:\ProgramData
2012-12-16 00:55:57 ----D---- C:\Program Files\Common Files\microsoft shared
2012-12-16 00:40:48 ----D---- C:\WINDOWS\system32\Tasks
2012-12-14 20:25:34 ----D---- C:\WINDOWS\rescache
2012-12-13 19:04:17 ----RD---- C:\WINDOWS\ToastData
2012-12-13 19:04:17 ----D---- C:\WINDOWS\WinStore
2012-12-13 19:04:14 ----D---- C:\WINDOWS\SYSWOW64\en-US
2012-12-13 19:04:14 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2012-12-13 19:04:12 ----D---- C:\WINDOWS\system32\cs-CZ
2012-12-13 19:04:11 ----D---- C:\WINDOWS\system32\en-US
2012-12-13 19:04:06 ----D---- C:\WINDOWS\system32\DriverStore
2012-12-13 18:34:14 ----D---- C:\WINDOWS\system32\catroot2
2012-12-13 17:50:00 ----D---- C:\Program Files\Internet Explorer
2012-12-13 17:50:00 ----D---- C:\Program Files (x86)\Internet Explorer
2012-12-10 22:46:32 ----D---- C:\WINDOWS\LiveKernelReports
2012-12-09 17:50:58 ----RSD---- C:\WINDOWS\Fonts
2012-12-09 17:49:30 ----D---- C:\Program Files (x86)\HTC
2012-12-09 17:49:17 ----D---- C:\Program Files (x86)\Common Files
2012-12-08 22:23:56 ----D---- C:\WINDOWS\SoftwareDistribution
2012-12-05 22:23:59 ----D---- C:\Users\gregor\AppData\Roaming\Bioshock
2012-12-04 23:24:59 ----D---- C:\WINDOWS\system32\NDF
2012-11-30 18:38:25 ----D---- C:\WINDOWS\system32\drivers\etc
2012-11-30 17:33:57 ----D---- C:\Users\gregor\AppData\Roaming\Mount&Blade Warband
2012-11-30 00:06:06 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2012-11-29 19:03:28 ----D---- C:\ProgramData\Skype
2012-11-29 19:03:14 ----RD---- C:\Program Files (x86)\Skype
2012-11-27 22:00:48 ----D---- C:\Program Files\CCleaner
2012-11-27 20:23:45 ----D---- C:\WINDOWS\apppatch
2012-11-23 20:32:23 ----D---- C:\WINDOWS\system32\wdi
2012-11-23 14:02:12 ----D---- C:\WINDOWS\system32\catroot
Run by gregor at 2012-12-22 21:57:13
Microsoft Windows 8 Pro with Media Center
System drive C: has 57 GB (43%) free of 132 GB
Total RAM: 3838 MB (58% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:57:17, on 22.12.2012
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16453)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Users\gregor\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\gregor.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [Google Update] "C:\Users\gregor\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - Startup: Dropbox.lnk = C:\Users\gregor\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: GamePark klient 2.lnk = C:\Program Files\GamePark2\gpcl.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Unknown owner - C:\WINDOWS\System32\appdrvrem01.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 8041 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
atieclxx
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
dashost.exe {03f105d1-3316-489a-a8c79148273ecc5c}
"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"
C:\WINDOWS\SysWOW64\PnkBstrA.exe
C:\WINDOWS\SysWOW64\PnkBstrB.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
taskhostex.exe
C:\WINDOWS\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
"C:\Users\gregor\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4396.1016_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4588.2.346217362\1431757826" --gpu-vendor-id=0x1002 --gpu-device-id=0x9612 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=8.970.100.3000 --ignored=" --type=renderer " /prefetch:12
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/18/OneClickSignIn/Standard/Prerender/PrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warmest_socket/ --extension-process --renderer-print-preview --channel="4588.3.1577987683\1927123517" /prefetch:3
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/18/OneClickSignIn/Standard/Prerender/PrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warmest_socket/ --renderer-print-preview --channel="4588.7.1747773815\1439361392" /prefetch:3
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="4588.8.380825130\1190547040" --lang=cs --ignored=" --type=renderer " /prefetch:13
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/18/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warmest_socket/ --renderer-print-preview --channel="4588.18.1380384782\1059332359" /prefetch:3
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/18/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warmest_socket/ --renderer-print-preview --channel="4588.23.1001044048\677448419" /prefetch:3
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/18/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warmest_socket/ --renderer-print-preview --channel="4588.28.24103842\1892349435" /prefetch:3
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/18/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warmest_socket/ --renderer-print-preview --channel="4588.30.1337723138\1727874666" /prefetch:3
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Users\gregor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/EnableStage3D/enabled_default/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/18/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin16/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warmest_socket/ --renderer-print-preview --channel="4588.33.1512665494\238319727" /prefetch:3
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 552 556 564 65536 560
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\gregor\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1613717319-2366056463-1278901721-1001Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1613717319-2366056463-1278901721-1001UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 689040]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-10-30 449512]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 561552]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-10-30 155384]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-06-18 1808168]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\gregor\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-26 116648]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-09-23 926896]
"VirtualCloneDrive"=C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-09-28 642728]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes Anti-Malware"=C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2012-09-29 766536]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
GamePark klient 2.lnk - C:\Program Files\GamePark2\gpcl.exe
C:\Users\gregor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\gregor\AppData\Roaming\Dropbox\bin\Dropbox.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmartcardSimulator]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VirtualSmartcardReader]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wcmsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"PromptOnSecureDesktop"=0
"ConsentPromptBehaviorAdmin"=0
"EnableUIADesktopToggle"=0
"EnableCursorSuppression"=1
"ConsentPromptBehaviorUser"=3
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktopChanges"=1
"NoActiveDesktop"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2012-12-22 21:54:56 ----D---- C:\Program Files\trend micro
2012-12-22 21:54:55 ----D---- C:\rsit
2012-12-22 21:42:31 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-12-22 21:42:31 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2012-12-22 21:27:21 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2012-12-21 15:43:09 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2012-12-21 15:43:09 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2012-12-21 15:43:09 ----A---- C:\WINDOWS\system32\atmlib.dll
2012-12-21 15:43:09 ----A---- C:\WINDOWS\system32\atmfd.dll
2012-12-19 17:09:40 ----A---- C:\Users\gregor\AppData\Roaming\burnaware.ini
2012-12-19 17:07:57 ----D---- C:\Program Files (x86)\BurnAware Free
2012-12-18 22:27:35 ----D---- C:\Program Files (x86)\GeMM
2012-12-18 20:46:20 ----A---- C:\WINDOWS\system32\drivers\appdrv01.sys
2012-12-18 20:46:19 ----A---- C:\WINDOWS\system32\appdrvrem01.exe
2012-12-18 19:48:23 ----D---- C:\WINDOWS\SYSWOW64\xlive
2012-12-18 19:48:22 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2012-12-16 01:46:35 ----D---- C:\Users\gregor\AppData\Roaming\Red Alert 3
2012-12-16 01:01:59 ----D---- C:\ProgramData\RELOADED
2012-12-15 19:48:10 ----A---- C:\WINDOWS\SYSWOW64\wrap_oal.dll
2012-12-15 19:48:09 ----A---- C:\WINDOWS\SYSWOW64\OpenAL32.dll
2012-12-13 18:38:23 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2012-12-13 18:38:22 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2012-12-13 18:38:22 ----A---- C:\WINDOWS\system32\msctf.dll
2012-12-13 18:38:22 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2012-12-13 18:38:21 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2012-12-13 18:38:20 ----A---- C:\WINDOWS\SYSWOW64\KBDKURD.DLL
2012-12-13 18:38:20 ----A---- C:\WINDOWS\SYSWOW64\Display.dll
2012-12-13 18:38:20 ----A---- C:\WINDOWS\SYSWOW64\DevDispItemProvider.dll
2012-12-13 18:38:20 ----A---- C:\WINDOWS\system32\KBDKURD.DLL
2012-12-13 18:38:20 ----A---- C:\WINDOWS\system32\drivers\usbohci.sys
2012-12-13 18:38:20 ----A---- C:\WINDOWS\system32\drivers\hidi2c.sys
2012-12-13 18:38:20 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys
2012-12-13 18:38:20 ----A---- C:\WINDOWS\system32\Display.dll
2012-12-13 18:38:20 ----A---- C:\WINDOWS\system32\DevDispItemProvider.dll
2012-12-13 18:38:18 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2012-12-13 18:38:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2012-12-13 18:38:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2012-12-13 18:38:18 ----A---- C:\WINDOWS\system32\WSShared.dll
2012-12-13 18:38:18 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2012-12-13 18:38:18 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2012-12-13 18:37:36 ----A---- C:\WINDOWS\system32\glcndFilter.dll
2012-12-13 18:37:34 ----A---- C:\WINDOWS\system32\twinui.dll
2012-12-13 18:37:33 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2012-12-13 18:37:32 ----A---- C:\WINDOWS\SYSWOW64\glcndFilter.dll
2012-12-13 18:37:29 ----A---- C:\WINDOWS\system32\wuaueng.dll
2012-12-13 18:37:28 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2012-12-13 18:37:28 ----A---- C:\WINDOWS\system32\winhttp.dll
2012-12-13 18:37:28 ----A---- C:\WINDOWS\system32\mfcore.dll
2012-12-13 18:37:28 ----A---- C:\WINDOWS\system32\KernelBase.dll
2012-12-13 18:37:27 ----A---- C:\WINDOWS\system32\ole32.dll
2012-12-13 18:37:27 ----A---- C:\WINDOWS\system32\mstscax.dll
2012-12-13 18:37:26 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2012-12-13 18:37:26 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2012-12-13 18:37:26 ----A---- C:\WINDOWS\system32\localspl.dll
2012-12-13 18:37:26 ----A---- C:\WINDOWS\system32\audiosrv.dll
2012-12-13 18:37:25 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2012-12-13 18:37:25 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2012-12-13 18:37:25 ----A---- C:\WINDOWS\system32\AudioSes.dll
2012-12-13 18:37:25 ----A---- C:\WINDOWS\system32\AudioEng.dll
2012-12-13 18:37:24 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2012-12-13 18:37:24 ----A---- C:\WINDOWS\system32\authui.dll
2012-12-13 18:37:24 ----A---- C:\WINDOWS\system32\audiodg.exe
2012-12-13 18:37:24 ----A---- C:\WINDOWS\HelpPane.exe
2012-12-13 18:37:23 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2012-12-13 18:37:23 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2012-12-13 18:37:23 ----A---- C:\WINDOWS\system32\wuapi.dll
2012-12-13 18:37:23 ----A---- C:\WINDOWS\system32\drvstore.dll
2012-12-13 18:37:23 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2012-12-13 18:37:21 ----A---- C:\WINDOWS\SYSWOW64\drvstore.dll
2012-12-13 18:37:20 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2012-12-13 18:37:20 ----A---- C:\WINDOWS\system32\wlansvc.dll
2012-12-13 18:37:20 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2012-12-13 18:37:20 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2012-12-13 18:37:19 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2012-12-13 18:37:18 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2012-12-13 18:37:18 ----A---- C:\WINDOWS\system32\drivers\http.sys
2012-12-13 18:37:17 ----A---- C:\WINDOWS\system32\shell32.dll
2012-12-13 18:37:17 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2012-12-13 18:37:16 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2012-12-13 18:37:16 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2012-12-13 18:37:16 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2012-12-13 18:37:16 ----A---- C:\WINDOWS\system32\dafWCN.dll
2012-12-13 18:37:16 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2012-12-13 18:37:15 ----A---- C:\WINDOWS\SYSWOW64\wlanmsm.dll
2012-12-13 18:37:15 ----A---- C:\WINDOWS\system32\wucltux.dll
2012-12-13 18:37:15 ----A---- C:\WINDOWS\system32\wuauclt.exe
2012-12-13 18:37:15 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2012-12-13 18:37:15 ----A---- C:\WINDOWS\system32\drivers\msiscsi.sys
2012-12-13 18:37:15 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2012-12-13 18:37:15 ----A---- C:\WINDOWS\system32\BFE.DLL
2012-12-13 18:37:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2012-12-13 18:37:14 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2012-12-13 18:37:14 ----A---- C:\WINDOWS\system32\rdpclip.exe
2012-12-13 18:37:14 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2012-12-13 18:37:13 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2012-12-13 18:37:13 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2012-12-13 18:37:13 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2012-12-13 18:37:13 ----A---- C:\WINDOWS\system32\wuwebv.dll
2012-12-13 18:37:13 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2012-12-13 18:37:13 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2012-12-13 18:37:13 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2012-12-13 18:37:12 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2012-12-13 18:37:12 ----A---- C:\WINDOWS\SYSWOW64\ubpm.dll
2012-12-13 18:37:12 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2012-12-13 18:37:12 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2012-12-13 18:37:12 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2012-12-13 18:37:12 ----A---- C:\WINDOWS\system32\wuapp.exe
2012-12-13 18:37:12 ----A---- C:\WINDOWS\system32\ubpm.dll
2012-12-13 18:37:12 ----A---- C:\WINDOWS\system32\nshwfp.dll
2012-12-13 18:37:12 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2012-12-13 18:37:11 ----A---- C:\WINDOWS\system32\wcncsvc.dll
2012-12-13 18:37:11 ----A---- C:\WINDOWS\system32\storewuauth.dll
2012-12-13 18:37:11 ----A---- C:\WINDOWS\system32\fsquirt.exe
2012-12-13 18:37:10 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2012-12-13 18:37:10 ----A---- C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
2012-12-13 18:37:10 ----A---- C:\WINDOWS\system32\wudriver.dll
2012-12-13 18:37:10 ----A---- C:\WINDOWS\system32\wlanapi.dll
2012-12-13 18:37:10 ----A---- C:\WINDOWS\system32\taskhostex.exe
2012-12-13 18:37:10 ----A---- C:\WINDOWS\system32\taskhost.exe
2012-12-13 18:37:10 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL
2012-12-13 18:37:10 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2012-12-13 18:37:10 ----A---- C:\WINDOWS\system32\aaclient.dll
2012-12-13 18:37:09 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2012-12-13 18:37:09 ----A---- C:\WINDOWS\SYSWOW64\aaclient.dll
2012-12-13 18:37:08 ----A---- C:\WINDOWS\SYSWOW64\wlansec.dll
2012-12-13 18:37:08 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll
2012-12-13 18:37:08 ----A---- C:\WINDOWS\system32\wlansec.dll
2012-12-13 18:37:08 ----A---- C:\WINDOWS\system32\WcnApi.dll
2012-12-13 18:37:07 ----A---- C:\WINDOWS\SYSWOW64\tsgqec.dll
2012-12-13 18:37:07 ----A---- C:\WINDOWS\SYSWOW64\fdWCN.dll
2012-12-13 18:37:07 ----A---- C:\WINDOWS\system32\WcnEapAuthProxy.dll
2012-12-13 18:37:07 ----A---- C:\WINDOWS\system32\tsgqec.dll
2012-12-13 18:37:07 ----A---- C:\WINDOWS\system32\fdWCN.dll
2012-12-13 18:37:06 ----A---- C:\WINDOWS\system32\wfdprov.dll
2012-12-13 18:37:06 ----A---- C:\WINDOWS\system32\WcnEapPeerProxy.dll
2012-12-13 18:37:05 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2012-12-13 18:37:05 ----A---- C:\WINDOWS\system32\wups2.dll
2012-12-13 18:37:05 ----A---- C:\WINDOWS\system32\wups.dll
2012-12-13 18:37:05 ----A---- C:\WINDOWS\system32\EncDump.dll
2012-12-13 18:37:05 ----A---- C:\WINDOWS\system32\actxprxy.dll
2012-12-13 18:37:04 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2012-12-13 18:37:04 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2012-12-13 18:37:04 ----A---- C:\WINDOWS\system32\wuaext.dll
2012-12-13 18:37:04 ----A---- C:\WINDOWS\system32\drivers\processr.sys
2012-12-13 18:37:04 ----A---- C:\WINDOWS\system32\drivers\intelppm.sys
2012-12-13 18:37:04 ----A---- C:\WINDOWS\system32\drivers\fxppm.sys
2012-12-13 18:37:04 ----A---- C:\WINDOWS\system32\drivers\BTHUSB.SYS
2012-12-13 18:37:04 ----A---- C:\WINDOWS\system32\drivers\amdppm.sys
2012-12-13 18:37:04 ----A---- C:\WINDOWS\system32\drivers\amdk8.sys
2012-12-13 18:37:03 ----A---- C:\WINDOWS\SYSWOW64\wlanhlp.dll
2012-12-13 18:37:03 ----A---- C:\WINDOWS\system32\wushareduxresources.dll
2012-12-13 18:37:03 ----A---- C:\WINDOWS\system32\wlanhlp.dll
2012-12-13 18:37:03 ----A---- C:\WINDOWS\system32\iscsilog.dll
2012-12-13 18:37:03 ----A---- C:\WINDOWS\system32\drivers\bthenum.sys
2012-12-13 17:44:02 ----A---- C:\WINDOWS\system32\MRT.exe
2012-12-13 17:32:20 ----A---- C:\WINDOWS\system32\tssdisai.dll
2012-12-13 17:32:19 ----A---- C:\WINDOWS\SYSWOW64\poqexec.exe
2012-12-13 17:32:19 ----A---- C:\WINDOWS\system32\VmHostAI.dll
2012-12-13 17:32:19 ----A---- C:\WINDOWS\system32\RDWebAI.dll
2012-12-13 17:32:19 ----A---- C:\WINDOWS\system32\poqexec.exe
2012-12-13 17:32:19 ----A---- C:\WINDOWS\system32\appserverai.dll
2012-12-13 17:31:11 ----A---- C:\WINDOWS\SYSWOW64\dpnsvr.exe
2012-12-13 17:31:11 ----A---- C:\WINDOWS\SYSWOW64\dpnet.dll
2012-12-13 17:31:11 ----A---- C:\WINDOWS\SYSWOW64\dpnathlp.dll
2012-12-13 17:31:11 ----A---- C:\WINDOWS\system32\dpnsvr.exe
2012-12-13 17:31:11 ----A---- C:\WINDOWS\system32\dpnhupnp.dll
2012-12-13 17:31:11 ----A---- C:\WINDOWS\system32\dpnhpast.dll
2012-12-13 17:31:11 ----A---- C:\WINDOWS\system32\dpnet.dll
2012-12-13 17:31:11 ----A---- C:\WINDOWS\system32\dpnathlp.dll
2012-12-13 17:31:10 ----A---- C:\WINDOWS\SYSWOW64\dpnlobby.dll
2012-12-13 17:31:10 ----A---- C:\WINDOWS\SYSWOW64\dpnhupnp.dll
2012-12-13 17:31:10 ----A---- C:\WINDOWS\SYSWOW64\dpnhpast.dll
2012-12-13 17:31:10 ----A---- C:\WINDOWS\SYSWOW64\dpnaddr.dll
2012-12-13 17:31:10 ----A---- C:\WINDOWS\system32\dpnlobby.dll
2012-12-13 17:31:10 ----A---- C:\WINDOWS\system32\dpnaddr.dll
2012-12-13 17:31:02 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2012-12-13 17:31:02 ----A---- C:\WINDOWS\system32\tzres.dll
2012-12-13 17:30:57 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2012-12-13 17:30:57 ----A---- C:\WINDOWS\SYSWOW64\dciman32.dll
2012-12-13 17:30:57 ----A---- C:\WINDOWS\system32\fontsub.dll
2012-12-13 17:30:57 ----A---- C:\WINDOWS\system32\dciman32.dll
2012-12-13 17:30:56 ----A---- C:\WINDOWS\SYSWOW64\lpk.dll
2012-12-13 17:30:56 ----A---- C:\WINDOWS\system32\win32k.sys
2012-12-13 17:30:56 ----A---- C:\WINDOWS\system32\lpk.dll
2012-12-13 17:30:55 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2012-12-13 17:30:55 ----A---- C:\WINDOWS\system32\sysreset.exe
2012-12-13 17:30:55 ----A---- C:\WINDOWS\system32\resetengmig.dll
2012-12-13 17:30:55 ----A---- C:\WINDOWS\system32\reseteng.dll
2012-12-13 17:30:55 ----A---- C:\WINDOWS\system32\ReAgent.dll
2012-12-13 17:30:52 ----A---- C:\WINDOWS\system32\mshtml.dll
2012-12-13 17:30:48 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2012-12-13 17:30:46 ----A---- C:\WINDOWS\system32\ieframe.dll
2012-12-13 17:30:44 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2012-12-13 17:30:43 ----A---- C:\WINDOWS\system32\wininet.dll
2012-12-13 17:30:42 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2012-12-13 17:30:42 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2012-12-13 17:30:42 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2012-12-13 17:30:42 ----A---- C:\WINDOWS\system32\urlmon.dll
2012-12-13 17:30:42 ----A---- C:\WINDOWS\system32\iertutil.dll
2012-12-13 17:30:41 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2012-12-13 17:30:41 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2012-12-13 17:30:41 ----A---- C:\WINDOWS\SYSWOW64\iesysprep.dll
2012-12-13 17:30:41 ----A---- C:\WINDOWS\system32\uxtheme.dll
2012-12-13 17:30:41 ----A---- C:\WINDOWS\system32\msfeeds.dll
2012-12-13 17:30:41 ----A---- C:\WINDOWS\system32\jscript9.dll
2012-12-13 17:30:41 ----A---- C:\WINDOWS\system32\iesysprep.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\SYSWOW64\uxtheme.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\SYSWOW64\UXInit.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\system32\UXInit.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\system32\jsproxy.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\system32\jscript.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\system32\iesetup.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\system32\iernonce.dll
2012-12-13 17:30:40 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2012-12-10 19:21:05 ----D---- C:\Users\gregor\AppData\Roaming\My Battle for Middle-earth Files
2012-12-10 15:22:50 ----D---- C:\Program Files\GamePark2
2012-12-09 21:17:37 ----A---- C:\WINDOWS\SYSWOW64\PnkBstrB.exe
2012-12-09 21:17:31 ----A---- C:\WINDOWS\SYSWOW64\PnkBstrA.exe
2012-12-09 19:39:55 ----D---- C:\Program Files (x86)\uTorrent
2012-12-09 19:39:21 ----D---- C:\Users\gregor\AppData\Roaming\uTorrent
2012-12-09 17:48:47 ----A---- C:\WINDOWS\SYSWOW64\lMMLDeleteUserData42107612FX.tmp
2012-12-07 19:17:04 ----D---- C:\Program Files (x86)\DsNET Corp
2012-12-07 19:16:43 ----D---- C:\ProgramData\Ask
2012-12-05 14:43:09 ----D---- C:\Program Files\Defraggler
2012-12-04 19:32:53 ----D---- C:\Users\gregor\AppData\Roaming\My Battle for Middle-earth(tm) II Files
2012-12-04 13:28:38 ----A---- C:\WINDOWS\SYSWOW64\Access.dat
2012-12-04 13:20:42 ----D---- C:\Users\gregor\AppData\Roaming\Tunngle
2012-12-04 13:20:41 ----A---- C:\WINDOWS\system32\drivers\tap0901t.sys
2012-12-04 12:32:19 ----D---- C:\Users\gregor\AppData\Roaming\Hamachi
2012-12-03 22:28:46 ----D---- C:\ProgramData\Orbit
2012-11-30 19:28:18 ----D---- C:\WINDOWS\Minidump
2012-11-27 20:22:59 ----A---- C:\WINDOWS\system32\pcasvc.dll
2012-11-27 20:22:59 ----A---- C:\WINDOWS\system32\pcalua.exe
2012-11-27 20:22:59 ----A---- C:\WINDOWS\system32\pcaevts.dll
2012-11-27 20:22:59 ----A---- C:\WINDOWS\system32\pcadm.dll
2012-11-25 14:49:20 ----HD---- C:\ProgramData\CanonBJ
2012-11-25 14:48:54 ----A---- C:\WINDOWS\system32\CNMLMAT.DLL
2012-11-23 14:10:30 ----D---- C:\ProgramData\ESET
2012-11-23 14:10:29 ----D---- C:\Program Files\ESET
2012-11-23 14:02:16 ----D---- C:\Program Files\Synaptics
2012-11-23 14:00:57 ----A---- C:\WINDOWS\system32\WdfCoInstaller01009.dll
2012-11-23 14:00:56 ----A---- C:\WINDOWS\SYSWOW64\SynTPCOM.dll
2012-11-23 14:00:56 ----A---- C:\WINDOWS\system32\SynTPCo4.dll
2012-11-23 14:00:56 ----A---- C:\WINDOWS\system32\SynTPAPI.dll
2012-11-23 14:00:56 ----A---- C:\WINDOWS\system32\drivers\SynTP.sys
2012-11-23 14:00:55 ----A---- C:\WINDOWS\SYSWOW64\SynCtrl.dll
2012-11-23 14:00:55 ----A---- C:\WINDOWS\SYSWOW64\SynCOM.dll
2012-11-23 14:00:55 ----A---- C:\WINDOWS\system32\SynCtrl.dll
2012-11-23 14:00:55 ----A---- C:\WINDOWS\system32\SynCOM.dll
======List of files/folders modified in the last 1 month======
2012-12-22 21:57:16 ----D---- C:\WINDOWS\Temp
2012-12-22 21:56:32 ----D---- C:\WINDOWS\Prefetch
2012-12-22 21:54:56 ----RD---- C:\Program Files
2012-12-22 21:42:31 ----RD---- C:\Program Files (x86)
2012-12-22 21:42:31 ----D---- C:\WINDOWS\system32\Drivers
2012-12-22 21:29:49 ----D---- C:\Users\gregor\AppData\Roaming\Dropbox
2012-12-22 21:27:21 ----RD---- C:\WINDOWS\System32
2012-12-22 21:27:16 ----D---- C:\WINDOWS\system32\config
2012-12-22 20:00:10 ----D---- C:\WINDOWS\system32\sru
2012-12-22 19:55:58 ----D---- C:\WINDOWS\AUInstallAgent
2012-12-22 19:54:45 ----HD---- C:\Program Files\WindowsApps
2012-12-21 19:25:01 ----SHD---- C:\WINDOWS\Installer
2012-12-21 19:25:01 ----SHD---- C:\Config.Msi
2012-12-21 19:25:01 ----D---- C:\Windows
2012-12-21 19:23:45 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-12-21 19:20:58 ----SHD---- C:\System Volume Information
2012-12-21 18:17:34 ----D---- C:\WINDOWS\Microsoft.NET
2012-12-21 17:46:49 ----D---- C:\WINDOWS\Inf
2012-12-21 17:46:49 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-12-21 16:05:24 ----D---- C:\WINDOWS\WinSxS
2012-12-21 16:02:27 ----D---- C:\WINDOWS\SysWOW64
2012-12-21 15:50:05 ----D---- C:\WINDOWS\CbsTemp
2012-12-20 00:22:36 ----SD---- C:\Users\gregor\AppData\Roaming\Microsoft
2012-12-19 18:41:01 ----D---- C:\Users\gregor\AppData\Roaming\Skype
2012-12-19 18:28:48 ----RSD---- C:\WINDOWS\assembly
2012-12-18 22:36:01 ----SD---- C:\ProgramData\Microsoft
2012-12-18 19:48:26 ----D---- C:\WINDOWS\Logs
2012-12-16 20:10:55 ----D---- C:\WINDOWS\debug
2012-12-16 01:01:59 ----HD---- C:\ProgramData
2012-12-16 00:55:57 ----D---- C:\Program Files\Common Files\microsoft shared
2012-12-16 00:40:48 ----D---- C:\WINDOWS\system32\Tasks
2012-12-14 20:25:34 ----D---- C:\WINDOWS\rescache
2012-12-13 19:04:17 ----RD---- C:\WINDOWS\ToastData
2012-12-13 19:04:17 ----D---- C:\WINDOWS\WinStore
2012-12-13 19:04:14 ----D---- C:\WINDOWS\SYSWOW64\en-US
2012-12-13 19:04:14 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2012-12-13 19:04:12 ----D---- C:\WINDOWS\system32\cs-CZ
2012-12-13 19:04:11 ----D---- C:\WINDOWS\system32\en-US
2012-12-13 19:04:06 ----D---- C:\WINDOWS\system32\DriverStore
2012-12-13 18:34:14 ----D---- C:\WINDOWS\system32\catroot2
2012-12-13 17:50:00 ----D---- C:\Program Files\Internet Explorer
2012-12-13 17:50:00 ----D---- C:\Program Files (x86)\Internet Explorer
2012-12-10 22:46:32 ----D---- C:\WINDOWS\LiveKernelReports
2012-12-09 17:50:58 ----RSD---- C:\WINDOWS\Fonts
2012-12-09 17:49:30 ----D---- C:\Program Files (x86)\HTC
2012-12-09 17:49:17 ----D---- C:\Program Files (x86)\Common Files
2012-12-08 22:23:56 ----D---- C:\WINDOWS\SoftwareDistribution
2012-12-05 22:23:59 ----D---- C:\Users\gregor\AppData\Roaming\Bioshock
2012-12-04 23:24:59 ----D---- C:\WINDOWS\system32\NDF
2012-11-30 18:38:25 ----D---- C:\WINDOWS\system32\drivers\etc
2012-11-30 17:33:57 ----D---- C:\Users\gregor\AppData\Roaming\Mount&Blade Warband
2012-11-30 00:06:06 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2012-11-29 19:03:28 ----D---- C:\ProgramData\Skype
2012-11-29 19:03:14 ----RD---- C:\Program Files (x86)\Skype
2012-11-27 22:00:48 ----D---- C:\Program Files\CCleaner
2012-11-27 20:23:45 ----D---- C:\WINDOWS\apppatch
2012-11-23 20:32:23 ----D---- C:\WINDOWS\system32\wdi
2012-11-23 14:02:12 ----D---- C:\WINDOWS\system32\catroot