prosím o preventivku
Napsal: 03 led 2013 18:19
ahojte měl jsem nějaké trable,nakonec jsem sáhl po obnově vše jede,ale mohl by někdo preventivně mrknout zda je to čisté
dil1
Logfile of random's system information tool 1.09 (written by random/random)
Run by mixik at 2013-01-03 18:13:04
Microsoft Windows 8 Pro
System drive C: has 43 GB (61%) free of 71 GB
Total RAM: 2046 MB (39% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:17:18, on 3. 1. 2013
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal
Running processes:
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\Explorer.EXE
C:\Program Files\Advanced SystemCare 6\Monitor.exe
C:\Windows\system32\taskhostex.exe
C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x86__8wekyb3d8bbwe\LiveComm.exe
C:\Windows\System32\RuntimeBroker.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Rainlendar2\Rainlendar2.exe
C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\PROGRA~1\MICROS~1\Office14\OUTLOOK.EXE
C:\Windows\system32\wwahost.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\mixik\Downloads\RSIT.exe
C:\Program Files\trend micro\mixik.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [TrueImageMonitor.exe] "C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe"
O4 - HKLM\..\Run: [AcronisTibMounterMonitor] C:\Program Files\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
O4 - HKLM\..\Run: [Služba Acronis Scheduler2] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{867B2987-0686-48EF-8AAC-51ED664334C8}: NameServer = 10.0.0.1,82.119.243.5
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Služba Acronis Scheduler2 (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Acronis Nonstop Backup Service (afcdpsrv) - Acronis - C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Acronis Sync Agent Service (syncagentsrv) - Acronis - C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe
--
End of file - 4573 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-01-01 449512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-01-01 155384]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\PROGRA~1\LAUNCH~1\LManager.exe [2007-06-14 850704]
"TrueImageMonitor.exe"=C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [2012-09-24 6036056]
"AcronisTibMounterMonitor"=C:\Program Files\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [2012-07-24 943344]
"Služba Acronis Scheduler2"=C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [2012-09-24 404280]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2012-12-11 969104]
"Rainlendar2"=C:\Program Files\Rainlendar2\Rainlendar2.exe [2012-12-28 2587136]
"Zoner Photo Studio Autoupdate"=C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [2012-12-04 773728]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload]
c:\program files\samsung\kies\kies.exe [2012-12-20 1476104]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
c:\program files\samsung\kies\kiestrayagent.exe [2012-12-20 310280]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
c:\program files\common files\java\java update\jusched.exe [2012-07-03 252848]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USBSafelyRemove.exe]
c:\program files\usb safely remove\usbsafelyremove.exe [2012-01-30 6061056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate]
c:\program files\zoner\photo studio 15\program32\zpstray.exe [2012-12-04 773728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmartcardSimulator]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VirtualSmartcardReader]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wcmsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"EnableCursorSuppression"=1
"EnableUIADesktopToggle"=0
"ConsentPromptBehaviorUser"=3
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"vidc.cvid"=iccvid.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-01-03 18:13:05 ----D---- C:\Program Files\trend micro
2013-01-03 18:13:04 ----D---- C:\rsit
2013-01-03 16:59:05 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2013-01-02 17:25:34 ----D---- C:\Users\mixik\AppData\Roaming\vlc
2013-01-02 17:24:06 ----D---- C:\Program Files\VideoLAN
2013-01-02 16:25:22 ----D---- C:\Program Files\Medieval Software
2013-01-02 11:40:11 ----D---- C:\Users\mixik\AppData\Roaming\Acronis
2013-01-02 11:29:08 ----A---- C:\Windows\system32\drivers\afcdp.sys
2013-01-02 11:28:52 ----A---- C:\Windows\system32\drivers\tdrpman.sys
2013-01-02 11:28:49 ----A---- C:\Windows\system32\drivers\tib_mounter.sys
2013-01-02 11:28:46 ----A---- C:\Windows\system32\drivers\snapman.sys
2013-01-02 11:28:42 ----A---- C:\Windows\system32\drivers\fltsrv.sys
2013-01-02 11:28:41 ----D---- C:\ProgramData\Acronis
2013-01-02 11:28:11 ----D---- C:\Program Files\Acronis
2013-01-02 11:28:10 ----D---- C:\Program Files\Common Files\Acronis
2013-01-02 11:02:42 ----D---- C:\Users\mixik\AppData\Roaming\Malwarebytes
2013-01-02 11:02:20 ----D---- C:\ProgramData\Malwarebytes
2013-01-02 11:02:18 ----A---- C:\Windows\system32\drivers\mbam.sys
2013-01-02 11:02:17 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2013-01-02 11:01:51 ----D---- C:\Program Files\4KDownload
2013-01-01 22:29:17 ----A---- C:\Windows\system32\netcfg-127796.txt
2013-01-01 22:29:15 ----A---- C:\Windows\system32\netcfg-125768.txt
2013-01-01 19:24:44 ----D---- C:\Program Files\ConvertHelper
2013-01-01 19:22:36 ----A---- C:\Windows\system32\RegistryDefragBootTime.exe
2013-01-01 19:04:03 ----A---- C:\Windows\system32\FNTCACHE.DAT
2013-01-01 18:57:34 ----A---- C:\Windows\system32\MRT.exe
2013-01-01 18:50:56 ----D---- C:\Users\mixik\AppData\Roaming\esmska
2013-01-01 18:47:27 ----D---- C:\ProgramData\Sun
2013-01-01 18:47:26 ----D---- C:\Program Files\Common Files\Java
2013-01-01 18:47:23 ----A---- C:\Windows\system32\deployJava1.dll
2013-01-01 18:47:22 ----A---- C:\Windows\system32\npDeployJava1.dll
2013-01-01 18:47:22 ----A---- C:\Windows\system32\javaws.exe
2013-01-01 18:47:06 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2013-01-01 18:47:06 ----A---- C:\Windows\system32\javaw.exe
2013-01-01 18:47:05 ----A---- C:\Windows\system32\java.exe
2013-01-01 18:46:49 ----D---- C:\Program Files\Java
2013-01-01 18:39:55 ----D---- C:\Program Files\esmska-0.21
2013-01-01 18:31:38 ----D---- C:\Program Files\MyFree Codec
2013-01-01 18:21:49 ----A---- C:\Windows\system32\Redemption.dll
2013-01-01 18:21:36 ----A---- C:\Windows\system32\dgderapi.dll
2013-01-01 18:21:21 ----D---- C:\Program Files\InstallShield Installation Information
2013-01-01 18:20:29 ----D---- C:\ProgramData\dvdfab
2013-01-01 18:19:22 ----D---- C:\ProgramData\Samsung
2013-01-01 18:19:22 ----D---- C:\Program Files\Samsung
2013-01-01 18:15:48 ----D---- C:\Users\mixik\AppData\Roaming\Nero
2013-01-01 18:15:19 ----D---- C:\Program Files\Nero
2013-01-01 18:15:08 ----D---- C:\Program Files\Common Files\Nero
2013-01-01 18:01:04 ----D---- C:\Users\mixik\AppData\Roaming\Sony Creative Software Inc
2013-01-01 17:56:48 ----D---- C:\ProgramData\Sony
2013-01-01 17:56:48 ----D---- C:\Program Files\Sony
2013-01-01 17:55:43 ----D---- C:\Users\mixik\AppData\Roaming\Sony
2013-01-01 17:53:29 ----D---- C:\Users\mixik\AppData\Roaming\Identities
2013-01-01 17:22:29 ----D---- C:\Windows\AutoKMS
2013-01-01 17:11:06 ----D---- C:\Program Files\Common Files\DESIGNER
2013-01-01 17:10:52 ----D---- C:\Windows\PCHEALTH
2013-01-01 17:08:20 ----D---- C:\Program Files\Microsoft Analysis Services
2013-01-01 17:07:55 ----D---- C:\Program Files\Microsoft Office
2013-01-01 17:07:54 ----D---- C:\ProgramData\Microsoft Help
2013-01-01 17:03:51 ----D---- C:\Program Files\Reference Assemblies
2013-01-01 17:03:51 ----D---- C:\Program Files\MSBuild
2013-01-01 17:03:13 ----D---- C:\Windows\system32\XPSViewer
2013-01-01 17:01:32 ----A---- C:\Windows\system32\TsWpfWrp.exe
2013-01-01 17:01:32 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2013-01-01 17:01:31 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-01-01 16:46:17 ----D---- C:\Users\mixik\AppData\Roaming\Macromedia
2013-01-01 16:39:23 ----D---- C:\Program Files\DVDFab 8 Qt
2013-01-01 16:37:16 ----D---- C:\ProgramData\IObit
2013-01-01 16:36:49 ----D---- C:\Users\mixik\AppData\Roaming\IObit
2013-01-01 16:32:29 ----D---- C:\Program Files\DVDFab 8
2013-01-01 16:24:16 ----D---- C:\Users\mixik\AppData\Roaming\WinRAR
2013-01-01 15:59:46 ----D---- C:\Users\mixik\AppData\Roaming\Mozilla
2013-01-01 15:55:04 ----D---- C:\Program Files\Launch Manager
2013-01-01 15:53:47 ----A---- C:\Windows\Setup.INI
2013-01-01 15:50:11 ----D---- C:\Users\mixik\AppData\Roaming\GHISLER
2013-01-01 15:48:21 ----D---- C:\Program Files\Advanced SystemCare 6
2013-01-01 15:46:44 ----D---- C:\Users\mixik\AppData\Roaming\uTorrent
2013-01-01 15:46:13 ----D---- C:\Users\mixik\AppData\Roaming\USBSafelyRemove
2013-01-01 15:46:06 ----D---- C:\Program Files\Rainlendar2
2013-01-01 15:46:03 ----D---- C:\Program Files\rajce
2013-01-01 15:45:27 ----D---- C:\Program Files\USB Safely Remove
2013-01-01 15:45:22 ----D---- C:\Program Files\totalcmd
2013-01-01 15:44:41 ----D---- C:\Program Files\uTorrent
2013-01-01 15:38:46 ----RD---- C:\Windows\BrowserChoice
2013-01-01 15:35:14 ----D---- C:\ProgramData\Zoner
2013-01-01 15:34:32 ----D---- C:\Program Files\WYSIWYG Web Builder 8
2013-01-01 15:34:25 ----D---- C:\Program Files\WinRAR
2013-01-01 15:33:05 ----D---- C:\Program Files\Zoner
2013-01-01 15:33:03 ----D---- C:\Program Files\Mozilla Firefox
2013-01-01 15:28:49 ----D---- C:\Program Files\Google
2013-01-01 15:27:50 ----N---- C:\Windows\system32\MpSigStub.exe
2013-01-01 15:25:02 ----D---- C:\Program Files\CCleaner
2013-01-01 15:22:11 ----A---- C:\Windows\system32\netcfg-907629.txt
2013-01-01 15:17:25 ----A---- C:\Windows\system32\drivers\pdc.sys
2013-01-01 15:16:59 ----A---- C:\Windows\system32\KBDKURD.DLL
2013-01-01 15:16:59 ----A---- C:\Windows\system32\DevDispItemProvider.dll
2013-01-01 15:16:58 ----A---- C:\Windows\system32\Display.dll
2013-01-01 15:16:57 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-01-01 15:16:57 ----A---- C:\Windows\system32\drivers\hidi2c.sys
2013-01-01 15:16:56 ----A---- C:\Windows\system32\drivers\usbohci.sys
2013-01-01 15:16:56 ----A---- C:\Windows\system32\drivers\hidclass.sys
2013-01-01 15:16:45 ----A---- C:\Windows\system32\msctf.dll
2013-01-01 15:16:45 ----A---- C:\Windows\system32\AppXDeploymentServer.dll
2013-01-01 15:16:45 ----A---- C:\Windows\system32\AppXDeploymentExtensions.dll
2013-01-01 15:16:39 ----A---- C:\Windows\system32\WSShared.dll
2013-01-01 15:16:39 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-01-01 15:16:39 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.dll
2013-01-01 15:16:33 ----A---- C:\Windows\system32\sysreset.exe
2013-01-01 15:16:33 ----A---- C:\Windows\system32\resetengmig.dll
2013-01-01 15:16:33 ----A---- C:\Windows\system32\reseteng.dll
2013-01-01 15:16:33 ----A---- C:\Windows\system32\ReAgent.dll
2013-01-01 15:15:50 ----A---- C:\Windows\system32\WUSettingsProvider.dll
2013-01-01 15:15:50 ----A---- C:\Windows\system32\wups2.dll
2013-01-01 15:15:50 ----A---- C:\Windows\system32\wups.dll
2013-01-01 15:15:50 ----A---- C:\Windows\system32\wudriver.dll
2013-01-01 15:15:50 ----A---- C:\Windows\system32\wuaueng.dll
2013-01-01 15:15:50 ----A---- C:\Windows\system32\wuauclt.exe
2013-01-01 15:15:50 ----A---- C:\Windows\system32\wuapi.dll
2013-01-01 15:15:50 ----A---- C:\Windows\system32\netcfg-526706.txt
2013-01-01 15:15:49 ----A---- C:\Windows\system32\wushareduxresources.dll
2013-01-01 15:15:49 ----A---- C:\Windows\system32\wucltux.dll
2013-01-01 15:15:49 ----A---- C:\Windows\system32\wuaext.dll
2013-01-01 15:15:47 ----A---- C:\Windows\system32\rdpclip.exe
2013-01-01 15:15:46 ----A---- C:\Windows\system32\storewuauth.dll
2013-01-01 15:15:45 ----A---- C:\Windows\system32\tsgqec.dll
2013-01-01 15:15:45 ----A---- C:\Windows\system32\mstscax.dll
2013-01-01 15:15:45 ----A---- C:\Windows\system32\aaclient.dll
2013-01-01 15:15:44 ----A---- C:\Windows\system32\DevicePairing.dll
2013-01-01 15:15:44 ----A---- C:\Windows\system32\authui.dll
2013-01-01 15:15:43 ----A---- C:\Windows\system32\glcndFilter.dll
2013-01-01 15:15:42 ----A---- C:\Windows\system32\twinui.dll
2013-01-01 15:15:42 ----A---- C:\Windows\system32\shell32.dll
2013-01-01 15:15:41 ----A---- C:\Windows\system32\nshwfp.dll
2013-01-01 15:15:41 ----A---- C:\Windows\system32\localspl.dll
2013-01-01 15:15:41 ----A---- C:\Windows\system32\IKEEXT.DLL
2013-01-01 15:15:41 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2013-01-01 15:15:41 ----A---- C:\Windows\system32\drivers\wfplwfs.sys
2013-01-01 15:15:41 ----A---- C:\Windows\system32\BFE.DLL
2013-01-01 15:15:40 ----A---- C:\Windows\system32\wuwebv.dll
2013-01-01 15:15:40 ----A---- C:\Windows\system32\wuapp.exe
2013-01-01 15:15:40 ----A---- C:\Windows\system32\ole32.dll
2013-01-01 15:15:40 ----A---- C:\Windows\system32\actxprxy.dll
2013-01-01 15:15:40 ----A---- C:\Windows\HelpPane.exe
2013-01-01 15:15:39 ----A---- C:\Windows\system32\ubpm.dll
2013-01-01 15:15:39 ----A---- C:\Windows\system32\taskhostex.exe
2013-01-01 15:15:39 ----A---- C:\Windows\system32\taskhost.exe
2013-01-01 15:15:39 ----A---- C:\Windows\system32\EncDump.dll
2013-01-01 15:15:39 ----A---- C:\Windows\system32\drvstore.dll
2013-01-01 15:15:39 ----A---- C:\Windows\system32\audiosrv.dll
2013-01-01 15:15:39 ----A---- C:\Windows\system32\AudioSes.dll
2013-01-01 15:15:39 ----A---- C:\Windows\system32\AUDIOKSE.dll
2013-01-01 15:15:39 ----A---- C:\Windows\system32\AudioEng.dll
2013-01-01 15:15:39 ----A---- C:\Windows\system32\AudioEndpointBuilder.dll
2013-01-01 15:15:39 ----A---- C:\Windows\system32\audiodg.exe
2013-01-01 15:15:38 ----A---- C:\Windows\system32\mfreadwrite.dll
2013-01-01 15:15:38 ----A---- C:\Windows\system32\mfcore.dll
2013-01-01 15:15:38 ----A---- C:\Windows\system32\MFCaptureEngine.dll
2013-01-01 15:15:37 ----A---- C:\Windows\system32\wlanhlp.dll
2013-01-01 15:15:37 ----A---- C:\Windows\system32\wlanapi.dll
2013-01-01 15:15:37 ----A---- C:\Windows\system32\Windows.Networking.Connectivity.dll
2013-01-01 15:15:37 ----A---- C:\Windows\system32\WcnEapPeerProxy.dll
2013-01-01 15:15:37 ----A---- C:\Windows\system32\WcnEapAuthProxy.dll
2013-01-01 15:15:37 ----A---- C:\Windows\system32\wcncsvc.dll
2013-01-01 15:15:37 ----A---- C:\Windows\system32\WcnApi.dll
2013-01-01 15:15:37 ----A---- C:\Windows\system32\fdWCN.dll
2013-01-01 15:15:37 ----A---- C:\Windows\system32\dafWCN.dll
2013-01-01 15:15:36 ----A---- C:\Windows\system32\wlansvc.dll
2013-01-01 15:15:36 ----A---- C:\Windows\system32\wlansec.dll
2013-01-01 15:15:36 ----A---- C:\Windows\system32\wlanmsm.dll
2013-01-01 15:15:36 ----A---- C:\Windows\system32\wfdprov.dll
2013-01-01 15:15:34 ----A---- C:\Windows\system32\winhttp.dll
2013-01-01 15:15:34 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2013-01-01 15:15:34 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2013-01-01 15:15:34 ----A---- C:\Windows\system32\drivers\http.sys
2013-01-01 15:15:33 ----A---- C:\Windows\system32\KernelBase.dll
2013-01-01 15:15:33 ----A---- C:\Windows\system32\drivers\afd.sys
2013-01-01 15:15:29 ----A---- C:\Windows\system32\drivers\viac7.sys
2013-01-01 15:15:29 ----A---- C:\Windows\system32\drivers\sdbus.sys
2013-01-01 15:15:29 ----A---- C:\Windows\system32\drivers\processr.sys
2013-01-01 15:15:29 ----A---- C:\Windows\system32\drivers\intelppm.sys
2013-01-01 15:15:29 ----A---- C:\Windows\system32\drivers\fxppm.sys
2013-01-01 15:15:29 ----A---- C:\Windows\system32\drivers\dumpsd.sys
2013-01-01 15:15:29 ----A---- C:\Windows\system32\drivers\amdppm.sys
2013-01-01 15:15:29 ----A---- C:\Windows\system32\drivers\amdk8.sys
2013-01-01 15:15:28 ----A---- C:\Windows\system32\iscsilog.dll
2013-01-01 15:15:28 ----A---- C:\Windows\system32\drivers\USBHUB3.SYS
2013-01-01 15:15:28 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2013-01-01 15:14:48 ----A---- C:\Windows\system32\netcfg-464430.txt
2013-01-01 15:14:42 ----A---- C:\Windows\system32\tzres.dll
2013-01-01 15:14:32 ----A---- C:\Windows\system32\win32k.sys
2013-01-01 15:14:03 ----A---- C:\Windows\system32\pcasvc.dll
2013-01-01 15:14:03 ----A---- C:\Windows\system32\pcalua.exe
2013-01-01 15:14:03 ----A---- C:\Windows\system32\pcaevts.dll
2013-01-01 15:14:03 ----A---- C:\Windows\system32\pcadm.dll
2013-01-01 15:13:50 ----A---- C:\Windows\system32\halmacpi.dll
2013-01-01 15:13:50 ----A---- C:\Windows\system32\hal.dll
2013-01-01 15:13:36 ----A---- C:\Windows\system32\mfasfsrcsnk.dll
2013-01-01 15:13:35 ----A---- C:\Windows\system32\mfnetcore.dll
2013-01-01 15:13:35 ----A---- C:\Windows\system32\mfmpeg2srcsnk.dll
2013-01-01 15:13:34 ----A---- C:\Windows\system32\mfnetsrc.dll
2013-01-01 15:13:07 ----A---- C:\Windows\system32\poqexec.exe
2013-01-01 15:12:13 ----A---- C:\Windows\system32\Windows.UI.Immersive.dll
2013-01-01 15:12:10 ----A---- C:\Windows\system32\DWrite.dll
2013-01-01 15:12:10 ----A---- C:\Windows\system32\dwmcore.dll
2013-01-01 15:12:09 ----A---- C:\Windows\system32\gdi32.dll
2013-01-01 15:12:09 ----A---- C:\Windows\system32\FntCache.dll
2013-01-01 15:12:08 ----A---- C:\Windows\system32\kbdhebl3.dll
2013-01-01 15:12:08 ----A---- C:\Windows\system32\input.dll
2013-01-01 15:12:07 ----A---- C:\Windows\explorer.exe
2013-01-01 15:12:05 ----A---- C:\Windows\system32\usercpl.dll
2013-01-01 15:12:05 ----A---- C:\Windows\system32\SHCore.dll
2013-01-01 15:12:04 ----A---- C:\Windows\system32\AppxSip.dll
2013-01-01 15:12:03 ----A---- C:\Windows\system32\wfapigp.dll
2013-01-01 15:12:03 ----A---- C:\Windows\system32\MPSSVC.dll
2013-01-01 15:12:03 ----A---- C:\Windows\system32\icfupgd.dll
2013-01-01 15:12:03 ----A---- C:\Windows\system32\FirewallAPI.dll
2013-01-01 15:12:03 ----A---- C:\Windows\system32\drivers\mpsdrv.sys
2013-01-01 15:12:02 ----A---- C:\Windows\system32\winresume.exe
2013-01-01 15:12:02 ----A---- C:\Windows\system32\winload.exe
2013-01-01 15:11:59 ----A---- C:\Windows\system32\StructuredQuery.dll
2013-01-01 15:11:58 ----A---- C:\Windows\system32\winlogon.exe
2013-01-01 15:11:58 ----A---- C:\Windows\system32\PCPKsp.dll
2013-01-01 15:11:58 ----A---- C:\Windows\system32\microsoft-windows-pdc.dll
2013-01-01 15:11:58 ----A---- C:\Windows\system32\kerberos.dll
2013-01-01 15:11:55 ----A---- C:\Windows\system32\ListSvc.dll
2013-01-01 15:11:54 ----A---- C:\Windows\system32\tquery.dll
2013-01-01 15:11:54 ----A---- C:\Windows\system32\SearchIndexer.exe
2013-01-01 15:11:54 ----A---- C:\Windows\system32\mssprxy.dll
2013-01-01 15:11:54 ----A---- C:\Windows\system32\mssitlb.dll
2013-01-01 15:11:54 ----A---- C:\Windows\system32\BdeUISrv.exe
2013-01-01 15:11:54 ----A---- C:\Windows\system32\bdesvc.dll
2013-01-01 15:11:53 ----A---- C:\Windows\system32\SearchFilterHost.exe
2013-01-01 15:11:53 ----A---- C:\Windows\system32\mssrch.dll
2013-01-01 15:11:53 ----A---- C:\Windows\system32\mssph.dll
2013-01-01 15:11:53 ----A---- C:\Windows\system32\msshooks.dll
2013-01-01 15:11:53 ----A---- C:\Windows\system32\msscntrs.dll
2013-01-01 15:11:52 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2013-01-01 15:11:52 ----A---- C:\Windows\system32\mssvp.dll
2013-01-01 15:11:52 ----A---- C:\Windows\system32\mssphtb.dll
2013-01-01 15:11:47 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2013-01-01 15:11:32 ----A---- C:\Windows\system32\Windows.Networking.dll
2013-01-01 15:11:28 ----A---- C:\Windows\system32\drivers\dam.sys
2013-01-01 15:11:27 ----A---- C:\Windows\system32\SpaceControl.dll
2013-01-01 15:11:25 ----A---- C:\Windows\system32\Windows.Storage.Compression.dll
2013-01-01 15:11:25 ----A---- C:\Windows\system32\mfplat.dll
2013-01-01 15:11:24 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2013-01-01 15:11:24 ----A---- C:\Windows\system32\dhcpcsvc.dll
2013-01-01 15:11:24 ----A---- C:\Windows\system32\dhcpcore6.dll
2013-01-01 15:11:24 ----A---- C:\Windows\system32\dhcpcore.dll
2013-01-01 15:11:23 ----A---- C:\Windows\system32\mswsock.dll
2013-01-01 15:11:23 ----A---- C:\Windows\system32\lsasrv.dll
2013-01-01 15:11:23 ----A---- C:\Windows\system32\drivers\cng.sys
2013-01-01 15:11:22 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-01-01 15:11:22 ----A---- C:\Windows\system32\ci.dll
2013-01-01 15:11:21 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2013-01-01 15:11:20 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-01-01 15:11:19 ----A---- C:\Windows\system32\drivers\netio.sys
2013-01-01 15:11:17 ----A---- C:\Windows\system32\WMALFXGFXDSP.dll
2013-01-01 15:11:17 ----A---- C:\Windows\system32\SysFxUI.dll
2013-01-01 15:11:17 ----A---- C:\Windows\system32\drivers\sdstor.sys
2013-01-01 15:11:17 ----A---- C:\Windows\system32\drivers\portcls.sys
2013-01-01 15:11:17 ----A---- C:\Windows\system32\drivers\drmkaud.sys
2013-01-01 15:11:17 ----A---- C:\Windows\system32\drivers\drmk.sys
2013-01-01 15:11:15 ----A---- C:\Windows\system32\drivers\battc.sys
2013-01-01 15:09:23 ----A---- C:\Windows\system32\dpnlobby.dll
2013-01-01 15:09:23 ----A---- C:\Windows\system32\dpnhupnp.dll
2013-01-01 15:09:23 ----A---- C:\Windows\system32\dpnhpast.dll
2013-01-01 15:09:23 ----A---- C:\Windows\system32\dpnet.dll
2013-01-01 15:09:23 ----A---- C:\Windows\system32\dpnathlp.dll
2013-01-01 15:09:23 ----A---- C:\Windows\system32\dpnaddr.dll
2013-01-01 15:09:22 ----A---- C:\Windows\system32\dpnsvr.exe
2012-12-31 02:38:09 ----A---- C:\Windows\system32\netcfg-715826.txt
2012-12-31 02:37:37 ----A---- C:\Windows\system32\ReAgentc.exe
2012-12-31 02:37:33 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2012-12-31 02:37:30 ----A---- C:\Windows\system32\wwansvc.dll
2012-12-31 02:37:30 ----A---- C:\Windows\system32\wwanprotdim.dll
2012-12-31 02:37:17 ----A---- C:\Windows\system32\uxtheme.dll
2012-12-31 02:37:17 ----A---- C:\Windows\system32\UXInit.dll
2012-12-31 02:37:16 ----A---- C:\Windows\system32\wininet.dll
2012-12-31 02:37:16 ----A---- C:\Windows\system32\urlmon.dll
2012-12-31 02:37:16 ----A---- C:\Windows\system32\jsproxy.dll
2012-12-31 02:37:15 ----A---- C:\Windows\system32\msfeeds.dll
2012-12-31 02:37:15 ----A---- C:\Windows\system32\iertutil.dll
2012-12-31 02:37:14 ----A---- C:\Windows\system32\ieframe.dll
2012-12-31 02:37:13 ----A---- C:\Windows\system32\mshtml.dll
2012-12-31 02:37:13 ----A---- C:\Windows\system32\iesetup.dll
2012-12-31 02:37:13 ----A---- C:\Windows\system32\iernonce.dll
2012-12-31 02:37:13 ----A---- C:\Windows\system32\ie4uinit.exe
2012-12-31 02:37:12 ----A---- C:\Windows\system32\jscript9.dll
2012-12-31 02:37:12 ----A---- C:\Windows\system32\jscript.dll
2012-12-31 02:37:12 ----A---- C:\Windows\system32\iesysprep.dll
2012-12-31 02:36:50 ----A---- C:\Windows\system32\newdev.exe
2012-12-31 02:36:50 ----A---- C:\Windows\system32\newdev.dll
2012-12-31 02:36:50 ----A---- C:\Windows\system32\ndadmin.exe
2012-12-31 02:36:33 ----D---- C:\Windows\SoftwareDistribution
2012-12-31 02:36:31 ----A---- C:\Windows\system32\srmclient.dll
2012-12-31 02:36:31 ----A---- C:\Windows\system32\srm.dll
2012-12-31 02:36:31 ----A---- C:\Windows\system32\rfxvmt.dll
2012-12-31 02:36:31 ----A---- C:\Windows\system32\rdpudd.dll
2012-12-31 02:36:31 ----A---- C:\Windows\system32\rdpcorets.dll
2012-12-31 02:36:31 ----A---- C:\Windows\system32\dskquota.dll
2012-12-31 02:36:31 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2012-12-31 02:36:30 ----A---- C:\Windows\system32\srmtrace.dll
2012-12-31 02:36:30 ----A---- C:\Windows\system32\srmstormod.dll
2012-12-31 02:36:30 ----A---- C:\Windows\system32\srmshell.dll
2012-12-31 02:36:30 ----A---- C:\Windows\system32\srmscan.dll
2012-12-31 02:36:30 ----A---- C:\Windows\system32\srm_ps.dll
2012-12-31 02:36:30 ----A---- C:\Windows\system32\adrclient.dll
2012-12-31 02:36:28 ----A---- C:\Windows\system32\drivers\srv2.sys
2012-12-31 02:35:10 ----A---- C:\Windows\system32\wmpmde.dll
2012-12-31 02:35:09 ----A---- C:\Windows\system32\winmde.dll
2012-12-31 02:35:04 ----A---- C:\Windows\system32\d2d1.dll
2012-12-31 02:35:03 ----A---- C:\Windows\system32\uDWM.dll
2012-12-31 02:35:03 ----A---- C:\Windows\system32\dwmredir.dll
2012-12-31 02:35:03 ----A---- C:\Windows\system32\dwm.exe
2012-12-31 02:35:02 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2012-12-31 02:35:01 ----A---- C:\Windows\system32\dxgi.dll
2012-12-31 02:35:01 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2012-12-31 02:35:01 ----A---- C:\Windows\system32\d3d11.dll
2012-12-31 02:35:01 ----A---- C:\Windows\system32\d3d10warp.dll
2012-12-31 02:35:00 ----A---- C:\Windows\system32\user32.dll
2012-12-31 02:35:00 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2012-12-31 02:35:00 ----A---- C:\Windows\system32\cdd.dll
2012-12-31 02:34:59 ----A---- C:\Windows\system32\winsrv.dll
2012-12-31 02:34:59 ----A---- C:\Windows\system32\WindowsCodecs.dll
2012-12-31 02:34:59 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-12-31 02:34:58 ----A---- C:\Windows\system32\batmeter.dll
2012-12-31 02:34:57 ----A---- C:\Windows\system32\MUILanguageCleanup.dll
2012-12-31 02:34:57 ----A---- C:\Windows\system32\lpremove.exe
2012-12-31 02:34:57 ----A---- C:\Windows\system32\lpksetupproxyserv.dll
2012-12-31 02:34:57 ----A---- C:\Windows\system32\lpksetup.exe
2012-12-31 02:34:57 ----A---- C:\Windows\system32\LangCleanupSysprepAction.dll
2012-12-31 02:34:55 ----A---- C:\Windows\system32\propsys.dll
2012-12-31 02:34:52 ----A---- C:\Windows\system32\twinapi.dll
2012-12-31 02:34:51 ----A---- C:\Windows\system32\UserLanguagesCpl.dll
2012-12-31 02:34:50 ----A---- C:\Windows\system32\nlasvc.dll
2012-12-31 02:34:50 ----A---- C:\Windows\system32\nlaapi.dll
2012-12-31 02:34:50 ----A---- C:\Windows\system32\ncsi.dll
2012-12-31 02:34:49 ----A---- C:\Windows\system32\rasser.dll
2012-12-31 02:34:49 ----A---- C:\Windows\system32\rasmxs.dll
2012-12-31 02:34:49 ----A---- C:\Windows\system32\rasdiag.dll
2012-12-31 02:34:49 ----A---- C:\Windows\system32\rascfg.dll
2012-12-31 02:34:49 ----A---- C:\Windows\system32\drivers\wanarp.sys
2012-12-31 02:34:49 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2012-12-31 02:34:49 ----A---- C:\Windows\system32\drivers\ndistapi.sys
2012-12-31 02:34:48 ----A---- C:\Windows\system32\VAN.dll
2012-12-31 02:34:48 ----A---- C:\Windows\system32\drivers\ws2ifsl.sys
2012-12-31 02:34:47 ----A---- C:\Windows\system32\mmcss.dll
2012-12-31 02:34:47 ----A---- C:\Windows\system32\avrt.dll
2012-12-31 02:34:45 ----A---- C:\Windows\system32\cryptdlg.dll
2012-12-31 02:34:43 ----A---- C:\Windows\system32\WSSync.dll
2012-12-31 02:34:43 ----A---- C:\Windows\system32\WSClient.dll
2012-12-31 02:34:43 ----A---- C:\Windows\system32\OEMLicense.dll
2012-12-31 02:34:42 ----A---- C:\Windows\system32\WSService.dll
2012-12-31 02:34:40 ----A---- C:\Windows\system32\wintrust.dll
2012-12-31 02:34:40 ----A---- C:\Windows\system32\schannel.dll
2012-12-31 02:34:40 ----A---- C:\Windows\system32\sdbinst.exe
2012-12-31 02:34:40 ----A---- C:\Windows\system32\drivers\msgpioclx.sys
2012-12-31 02:34:40 ----A---- C:\Windows\system32\apphelp.dll
2012-12-31 02:34:40 ----A---- C:\Windows\system32\aelupsvc.dll
2012-12-31 02:34:39 ----A---- C:\Windows\system32\umpnpmgr.dll
2012-12-31 02:34:39 ----A---- C:\Windows\system32\shimeng.dll
2012-12-31 02:34:39 ----A---- C:\Windows\system32\setbcdlocale.dll
2012-12-31 02:34:39 ----A---- C:\Windows\system32\drvinst.exe
2012-12-31 02:34:39 ----A---- C:\Windows\system32\DAFWSD.dll
2012-12-31 02:34:39 ----A---- C:\Windows\system32\bcdsrv.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhtask.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhsvcctl.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhsvc.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhsrchph.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhsrchapi.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhshl.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhmanagew.exe
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhlisten.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhevents.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhengine.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhcleanup.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhcfg.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhcat.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhautoplay.dll
2012-12-31 02:34:37 ----A---- C:\Windows\system32\perfproc.dll
2012-12-31 02:34:37 ----A---- C:\Windows\system32\perfos.dll
2012-12-31 02:34:37 ----A---- C:\Windows\system32\perfnet.dll
2012-12-31 02:34:37 ----A---- C:\Windows\system32\perfdisk.dll
2012-12-31 02:34:37 ----A---- C:\Windows\system32\perfctrs.dll
2012-12-31 02:34:37 ----A---- C:\Windows\system32\microsoft-windows-kernel-power-events.dll
2012-12-31 02:34:36 ----A---- C:\Windows\system32\vdsutil.dll
2012-12-31 02:34:36 ----A---- C:\Windows\system32\vdsldr.exe
2012-12-31 02:34:36 ----A---- C:\Windows\system32\vds_ps.dll
2012-12-31 02:34:36 ----A---- C:\Windows\system32\vds.exe
2012-12-31 02:34:36 ----A---- C:\Windows\system32\TpmTasks.dll
2012-12-31 02:34:36 ----A---- C:\Windows\system32\RacEngn.dll
2012-12-31 02:34:35 ----A---- C:\Windows\system32\vsstrace.dll
2012-12-31 02:34:35 ----A---- C:\Windows\system32\vssapi.dll
2012-12-31 02:34:35 ----A---- C:\Windows\system32\eventcls.dll
2012-12-31 02:34:33 ----A---- C:\Windows\system32\taskeng.exe
2012-12-31 02:34:33 ----A---- C:\Windows\system32\MMDevAPI.dll
2012-12-31 02:34:33 ----A---- C:\Windows\system32\fveapibase.dll
2012-12-31 02:34:32 ----A---- C:\Windows\system32\fveapi.dll
2012-12-31 02:34:32 ----A---- C:\Windows\system32\drivers\fvevol.sys
2012-12-31 02:34:32 ----A---- C:\Windows\system32\drivers\dumpfve.sys
2012-12-31 02:34:28 ----A---- C:\Windows\system32\WpcMon.exe
2012-12-31 02:34:27 ----A---- C:\Windows\system32\drivers\csc.sys
2012-12-31 02:34:27 ----A---- C:\Windows\system32\CscMig.dll
2012-12-31 02:34:23 ----A---- C:\Windows\system32\Windows.Media.Streaming.dll
2012-12-31 02:34:23 ----A---- C:\Windows\system32\mfsvr.dll
2012-12-31 02:34:23 ----A---- C:\Windows\system32\MFMediaEngine.dll
2012-12-31 02:34:21 ----A---- C:\Windows\system32\msvproc.dll
2012-12-31 02:34:21 ----A---- C:\Windows\system32\mfsrcsnk.dll
2012-12-31 02:34:21 ----A---- C:\Windows\system32\MFPlay.dll
2012-12-31 02:34:20 ----A---- C:\Windows\system32\wmploc.DLL
2012-12-31 02:34:20 ----A---- C:\Windows\system32\wmp.dll
2012-12-31 02:34:20 ----A---- C:\Windows\system32\spwmp.dll
2012-12-31 02:34:19 ----A---- C:\Windows\system32\dxmasf.dll
2012-12-31 02:34:18 ----A---- C:\Windows\system32\mfh264enc.dll
2012-12-31 02:34:12 ----A---- C:\Windows\system32\wlroamextension.dll
2012-12-31 02:34:12 ----A---- C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2012-12-31 02:34:12 ----A---- C:\Windows\system32\SettingSyncHost.exe
2012-12-31 02:34:12 ----A---- C:\Windows\system32\provcore.dll
2012-12-31 02:34:10 ----A---- C:\Windows\system32\WWAHost.exe
2012-12-31 02:34:10 ----A---- C:\Windows\system32\wlidcredprov.dll
2012-12-31 02:34:10 ----A---- C:\Windows\system32\drivers\cnghwassist.sys
2012-12-31 02:34:10 ----A---- C:\Windows\system32\DevPropMgr.dll
2012-12-31 02:34:10 ----A---- C:\Windows\system32\bisrv.dll
2012-12-31 02:34:09 ----A---- C:\Windows\system32\wpnprv.dll
2012-12-31 02:34:09 ----A---- C:\Windows\system32\wpncore.dll
2012-12-31 02:34:09 ----A---- C:\Windows\system32\psmsrv.dll
2012-12-31 02:34:09 ----A---- C:\Windows\system32\ProximityService.dll
2012-12-31 02:34:09 ----A---- C:\Windows\system32\PackageStateRoaming.dll
2012-12-31 02:34:09 ----A---- C:\Windows\system32\MsSpellCheckingFacility.dll
2012-12-31 02:34:08 ----A---- C:\Windows\system32\WinSAT.exe
2012-12-31 02:34:08 ----A---- C:\Windows\system32\TimeBrokerServer.dll
2012-12-31 02:34:08 ----A---- C:\Windows\system32\SystemEventsBrokerServer.dll
2012-12-31 02:34:07 ----A---- C:\Windows\system32\WinSATAPI.dll
2012-12-31 02:34:07 ----A---- C:\Windows\system32\webio.dll
2012-12-31 02:34:06 ----A---- C:\Windows\system32\WinTypes.dll
2012-12-31 02:34:06 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2012-12-31 02:34:06 ----A---- C:\Windows\system32\dnsrslvr.dll
2012-12-31 02:34:06 ----A---- C:\Windows\system32\dnsapi.dll
2012-12-31 02:34:06 ----A---- C:\Windows\system32\combase.dll
2012-12-31 02:34:05 ----A---- C:\Windows\system32\umpo.dll
2012-12-31 02:34:05 ----A---- C:\Windows\system32\svchost.exe
2012-12-31 02:34:04 ----A---- C:\Windows\system32\services.exe
2012-12-31 02:34:03 ----A---- C:\Windows\system32\sspisrv.dll
2012-12-31 02:34:03 ----A---- C:\Windows\system32\sspicli.dll
2012-12-31 02:34:03 ----A---- C:\Windows\system32\lsass.exe
2012-12-31 02:34:03 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-12-31 02:34:00 ----A---- C:\Windows\system32\RpcEpMap.dll
2012-12-31 02:34:00 ----A---- C:\Windows\system32\ntdll.dll
2012-12-31 02:33:59 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-12-31 02:33:59 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2012-12-31 02:33:58 ----A---- C:\Windows\system32\drivers\msgpiowin32.sys
2012-12-31 02:33:52 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2012-12-31 02:33:52 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2012-12-31 02:33:51 ----A---- C:\Windows\system32\drivers\BthhfHid.sys
2012-12-31 02:33:51 ----A---- C:\Windows\system32\drivers\BthAvrcpTg.sys
2012-12-31 02:33:51 ----A---- C:\Windows\system32\drivers\BtaMPM.sys
2012-12-31 02:33:50 ----A---- C:\Windows\system32\HalExtIntcUartDMA.dll
2012-12-31 02:33:50 ----A---- C:\Windows\system32\HalExtIntcLpioDMA.dll
2012-12-31 02:33:50 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2012-12-31 02:33:50 ----A---- C:\Windows\system32\drivers\usbport.sys
2012-12-31 02:33:50 ----A---- C:\Windows\system32\drivers\usbhub.sys
2012-12-31 02:33:50 ----A---- C:\Windows\system32\drivers\usbehci.sys
2012-12-31 02:33:50 ----A---- C:\Windows\system32\drivers\usbd.sys
2012-12-31 02:33:50 ----A---- C:\Windows\system32\drivers\acpi.sys
2012-12-31 02:33:49 ----A---- C:\Windows\system32\drivers\USBXHCI.SYS
2012-12-31 02:33:49 ----A---- C:\Windows\system32\drivers\UCX01000.SYS
2012-12-31 02:33:49 ----A---- C:\Windows\system32\drivers\tpm.sys
2012-12-31 02:32:32 ----D---- C:\Users\mixik\AppData\Roaming\Adobe
2012-12-31 02:31:25 ----A---- C:\Windows\system32\lpk.dll
2012-12-31 02:31:25 ----A---- C:\Windows\system32\fontsub.dll
2012-12-31 02:31:25 ----A---- C:\Windows\system32\dciman32.dll
2012-12-31 02:31:25 ----A---- C:\Windows\system32\atmlib.dll
2012-12-31 02:31:25 ----A---- C:\Windows\system32\atmfd.dll
2012-12-31 02:29:51 ----A---- C:\Windows\system32\synceng.dll
2012-12-31 02:29:50 ----D---- C:\ProgramData\PRICache
2012-12-31 02:29:37 ----D---- C:\Windows\CSC
2012-12-31 02:28:03 ----SD---- C:\Users\mixik\AppData\Roaming\Microsoft
2012-12-31 02:27:39 ----A---- C:\Windows\system32\netcfg-85800.txt
2012-12-31 02:27:11 ----SHD---- C:\ProgramData\Šablony
2012-12-31 02:27:11 ----SHD---- C:\ProgramData\Nabídka Start
2012-12-31 02:27:10 ----SHD---- C:\ProgramData\Plocha
2012-12-31 02:27:10 ----SHD---- C:\ProgramData\Dokumenty
2012-12-31 02:27:10 ----SHD---- C:\ProgramData\Data aplikací
2012-12-31 02:25:10 ----A---- C:\Windows\system32\netcfg-153411.txt
2012-12-31 02:25:02 ----A---- C:\Windows\system32\atiicdxx.dat
2012-12-31 02:24:51 ----A---- C:\Windows\system32\netcfg-134566.txt
2012-12-31 02:24:39 ----A---- C:\Windows\system32\netcfg-122429.txt
2012-12-31 02:24:39 ----A---- C:\Windows\system32\netcfg-122055.txt
2012-12-31 02:24:38 ----A---- C:\Windows\system32\netcfg-121462.txt
2012-12-31 02:24:37 ----A---- C:\Windows\system32\netcfg-120931.txt
2012-12-31 02:24:37 ----A---- C:\Windows\system32\netcfg-120229.txt
2012-12-31 02:24:36 ----A---- C:\Windows\system32\netcfg-119699.txt
2012-12-31 02:24:36 ----A---- C:\Windows\system32\netcfg-119247.txt
2012-12-31 02:24:33 ----A---- C:\Windows\system32\netcfg-116641.txt
2012-12-31 02:24:33 ----A---- C:\Windows\system32\netcfg-116080.txt
2012-12-31 02:24:32 ----A---- C:\Windows\system32\netcfg-115003.txt
2012-12-31 02:24:22 ----D---- C:\Windows\Prefetch
2012-12-31 02:22:02 ----D---- C:\Windows.old
2012-12-31 02:12:50 ----D---- C:\Windows\Panther
2012-12-31 02:09:09 ----HD---- C:\$SysReset
2012-12-30 23:41:45 ----D---- C:\Download
2012-12-30 21:42:26 ----A---- C:\user.js
2012-12-18 10:06:10 ----A---- C:\Windows\MusiccityDownload.exe
2012-12-18 10:06:10 ----A---- C:\Windows\MASetupCaller.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\muzwmts.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\muzapp.exe
2012-12-18 10:06:06 ----A---- C:\Windows\system32\muzapp.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\muzaf1.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MTXSYNCICON.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MTTELECHIP.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MSLUR71.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MSFLib.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MSCLib.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MK_Lyric.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MaXMLProto.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MASetupCleaner.exe
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MAMACExtract.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MaJGUILib.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MaDRM.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MACXMLProto.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\issacapi_se-2.3.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\issacapi_pe-2.3.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\issacapi_bs-2.3.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\cis-2.4.dll
======List of files/folders modified in the last 1 month======
dil1
Logfile of random's system information tool 1.09 (written by random/random)
Run by mixik at 2013-01-03 18:13:04
Microsoft Windows 8 Pro
System drive C: has 43 GB (61%) free of 71 GB
Total RAM: 2046 MB (39% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:17:18, on 3. 1. 2013
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal
Running processes:
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\Explorer.EXE
C:\Program Files\Advanced SystemCare 6\Monitor.exe
C:\Windows\system32\taskhostex.exe
C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x86__8wekyb3d8bbwe\LiveComm.exe
C:\Windows\System32\RuntimeBroker.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Rainlendar2\Rainlendar2.exe
C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\PROGRA~1\MICROS~1\Office14\OUTLOOK.EXE
C:\Windows\system32\wwahost.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\mixik\Downloads\RSIT.exe
C:\Program Files\trend micro\mixik.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [TrueImageMonitor.exe] "C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe"
O4 - HKLM\..\Run: [AcronisTibMounterMonitor] C:\Program Files\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
O4 - HKLM\..\Run: [Služba Acronis Scheduler2] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{867B2987-0686-48EF-8AAC-51ED664334C8}: NameServer = 10.0.0.1,82.119.243.5
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Služba Acronis Scheduler2 (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Acronis Nonstop Backup Service (afcdpsrv) - Acronis - C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Acronis Sync Agent Service (syncagentsrv) - Acronis - C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe
--
End of file - 4573 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-01-01 449512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-01-01 155384]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\PROGRA~1\LAUNCH~1\LManager.exe [2007-06-14 850704]
"TrueImageMonitor.exe"=C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [2012-09-24 6036056]
"AcronisTibMounterMonitor"=C:\Program Files\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [2012-07-24 943344]
"Služba Acronis Scheduler2"=C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [2012-09-24 404280]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2012-12-11 969104]
"Rainlendar2"=C:\Program Files\Rainlendar2\Rainlendar2.exe [2012-12-28 2587136]
"Zoner Photo Studio Autoupdate"=C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [2012-12-04 773728]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload]
c:\program files\samsung\kies\kies.exe [2012-12-20 1476104]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
c:\program files\samsung\kies\kiestrayagent.exe [2012-12-20 310280]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
c:\program files\common files\java\java update\jusched.exe [2012-07-03 252848]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USBSafelyRemove.exe]
c:\program files\usb safely remove\usbsafelyremove.exe [2012-01-30 6061056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate]
c:\program files\zoner\photo studio 15\program32\zpstray.exe [2012-12-04 773728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmartcardSimulator]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VirtualSmartcardReader]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wcmsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"EnableCursorSuppression"=1
"EnableUIADesktopToggle"=0
"ConsentPromptBehaviorUser"=3
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"vidc.cvid"=iccvid.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-01-03 18:13:05 ----D---- C:\Program Files\trend micro
2013-01-03 18:13:04 ----D---- C:\rsit
2013-01-03 16:59:05 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2013-01-02 17:25:34 ----D---- C:\Users\mixik\AppData\Roaming\vlc
2013-01-02 17:24:06 ----D---- C:\Program Files\VideoLAN
2013-01-02 16:25:22 ----D---- C:\Program Files\Medieval Software
2013-01-02 11:40:11 ----D---- C:\Users\mixik\AppData\Roaming\Acronis
2013-01-02 11:29:08 ----A---- C:\Windows\system32\drivers\afcdp.sys
2013-01-02 11:28:52 ----A---- C:\Windows\system32\drivers\tdrpman.sys
2013-01-02 11:28:49 ----A---- C:\Windows\system32\drivers\tib_mounter.sys
2013-01-02 11:28:46 ----A---- C:\Windows\system32\drivers\snapman.sys
2013-01-02 11:28:42 ----A---- C:\Windows\system32\drivers\fltsrv.sys
2013-01-02 11:28:41 ----D---- C:\ProgramData\Acronis
2013-01-02 11:28:11 ----D---- C:\Program Files\Acronis
2013-01-02 11:28:10 ----D---- C:\Program Files\Common Files\Acronis
2013-01-02 11:02:42 ----D---- C:\Users\mixik\AppData\Roaming\Malwarebytes
2013-01-02 11:02:20 ----D---- C:\ProgramData\Malwarebytes
2013-01-02 11:02:18 ----A---- C:\Windows\system32\drivers\mbam.sys
2013-01-02 11:02:17 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2013-01-02 11:01:51 ----D---- C:\Program Files\4KDownload
2013-01-01 22:29:17 ----A---- C:\Windows\system32\netcfg-127796.txt
2013-01-01 22:29:15 ----A---- C:\Windows\system32\netcfg-125768.txt
2013-01-01 19:24:44 ----D---- C:\Program Files\ConvertHelper
2013-01-01 19:22:36 ----A---- C:\Windows\system32\RegistryDefragBootTime.exe
2013-01-01 19:04:03 ----A---- C:\Windows\system32\FNTCACHE.DAT
2013-01-01 18:57:34 ----A---- C:\Windows\system32\MRT.exe
2013-01-01 18:50:56 ----D---- C:\Users\mixik\AppData\Roaming\esmska
2013-01-01 18:47:27 ----D---- C:\ProgramData\Sun
2013-01-01 18:47:26 ----D---- C:\Program Files\Common Files\Java
2013-01-01 18:47:23 ----A---- C:\Windows\system32\deployJava1.dll
2013-01-01 18:47:22 ----A---- C:\Windows\system32\npDeployJava1.dll
2013-01-01 18:47:22 ----A---- C:\Windows\system32\javaws.exe
2013-01-01 18:47:06 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2013-01-01 18:47:06 ----A---- C:\Windows\system32\javaw.exe
2013-01-01 18:47:05 ----A---- C:\Windows\system32\java.exe
2013-01-01 18:46:49 ----D---- C:\Program Files\Java
2013-01-01 18:39:55 ----D---- C:\Program Files\esmska-0.21
2013-01-01 18:31:38 ----D---- C:\Program Files\MyFree Codec
2013-01-01 18:21:49 ----A---- C:\Windows\system32\Redemption.dll
2013-01-01 18:21:36 ----A---- C:\Windows\system32\dgderapi.dll
2013-01-01 18:21:21 ----D---- C:\Program Files\InstallShield Installation Information
2013-01-01 18:20:29 ----D---- C:\ProgramData\dvdfab
2013-01-01 18:19:22 ----D---- C:\ProgramData\Samsung
2013-01-01 18:19:22 ----D---- C:\Program Files\Samsung
2013-01-01 18:15:48 ----D---- C:\Users\mixik\AppData\Roaming\Nero
2013-01-01 18:15:19 ----D---- C:\Program Files\Nero
2013-01-01 18:15:08 ----D---- C:\Program Files\Common Files\Nero
2013-01-01 18:01:04 ----D---- C:\Users\mixik\AppData\Roaming\Sony Creative Software Inc
2013-01-01 17:56:48 ----D---- C:\ProgramData\Sony
2013-01-01 17:56:48 ----D---- C:\Program Files\Sony
2013-01-01 17:55:43 ----D---- C:\Users\mixik\AppData\Roaming\Sony
2013-01-01 17:53:29 ----D---- C:\Users\mixik\AppData\Roaming\Identities
2013-01-01 17:22:29 ----D---- C:\Windows\AutoKMS
2013-01-01 17:11:06 ----D---- C:\Program Files\Common Files\DESIGNER
2013-01-01 17:10:52 ----D---- C:\Windows\PCHEALTH
2013-01-01 17:08:20 ----D---- C:\Program Files\Microsoft Analysis Services
2013-01-01 17:07:55 ----D---- C:\Program Files\Microsoft Office
2013-01-01 17:07:54 ----D---- C:\ProgramData\Microsoft Help
2013-01-01 17:03:51 ----D---- C:\Program Files\Reference Assemblies
2013-01-01 17:03:51 ----D---- C:\Program Files\MSBuild
2013-01-01 17:03:13 ----D---- C:\Windows\system32\XPSViewer
2013-01-01 17:01:32 ----A---- C:\Windows\system32\TsWpfWrp.exe
2013-01-01 17:01:32 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2013-01-01 17:01:31 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-01-01 16:46:17 ----D---- C:\Users\mixik\AppData\Roaming\Macromedia
2013-01-01 16:39:23 ----D---- C:\Program Files\DVDFab 8 Qt
2013-01-01 16:37:16 ----D---- C:\ProgramData\IObit
2013-01-01 16:36:49 ----D---- C:\Users\mixik\AppData\Roaming\IObit
2013-01-01 16:32:29 ----D---- C:\Program Files\DVDFab 8
2013-01-01 16:24:16 ----D---- C:\Users\mixik\AppData\Roaming\WinRAR
2013-01-01 15:59:46 ----D---- C:\Users\mixik\AppData\Roaming\Mozilla
2013-01-01 15:55:04 ----D---- C:\Program Files\Launch Manager
2013-01-01 15:53:47 ----A---- C:\Windows\Setup.INI
2013-01-01 15:50:11 ----D---- C:\Users\mixik\AppData\Roaming\GHISLER
2013-01-01 15:48:21 ----D---- C:\Program Files\Advanced SystemCare 6
2013-01-01 15:46:44 ----D---- C:\Users\mixik\AppData\Roaming\uTorrent
2013-01-01 15:46:13 ----D---- C:\Users\mixik\AppData\Roaming\USBSafelyRemove
2013-01-01 15:46:06 ----D---- C:\Program Files\Rainlendar2
2013-01-01 15:46:03 ----D---- C:\Program Files\rajce
2013-01-01 15:45:27 ----D---- C:\Program Files\USB Safely Remove
2013-01-01 15:45:22 ----D---- C:\Program Files\totalcmd
2013-01-01 15:44:41 ----D---- C:\Program Files\uTorrent
2013-01-01 15:38:46 ----RD---- C:\Windows\BrowserChoice
2013-01-01 15:35:14 ----D---- C:\ProgramData\Zoner
2013-01-01 15:34:32 ----D---- C:\Program Files\WYSIWYG Web Builder 8
2013-01-01 15:34:25 ----D---- C:\Program Files\WinRAR
2013-01-01 15:33:05 ----D---- C:\Program Files\Zoner
2013-01-01 15:33:03 ----D---- C:\Program Files\Mozilla Firefox
2013-01-01 15:28:49 ----D---- C:\Program Files\Google
2013-01-01 15:27:50 ----N---- C:\Windows\system32\MpSigStub.exe
2013-01-01 15:25:02 ----D---- C:\Program Files\CCleaner
2013-01-01 15:22:11 ----A---- C:\Windows\system32\netcfg-907629.txt
2013-01-01 15:17:25 ----A---- C:\Windows\system32\drivers\pdc.sys
2013-01-01 15:16:59 ----A---- C:\Windows\system32\KBDKURD.DLL
2013-01-01 15:16:59 ----A---- C:\Windows\system32\DevDispItemProvider.dll
2013-01-01 15:16:58 ----A---- C:\Windows\system32\Display.dll
2013-01-01 15:16:57 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-01-01 15:16:57 ----A---- C:\Windows\system32\drivers\hidi2c.sys
2013-01-01 15:16:56 ----A---- C:\Windows\system32\drivers\usbohci.sys
2013-01-01 15:16:56 ----A---- C:\Windows\system32\drivers\hidclass.sys
2013-01-01 15:16:45 ----A---- C:\Windows\system32\msctf.dll
2013-01-01 15:16:45 ----A---- C:\Windows\system32\AppXDeploymentServer.dll
2013-01-01 15:16:45 ----A---- C:\Windows\system32\AppXDeploymentExtensions.dll
2013-01-01 15:16:39 ----A---- C:\Windows\system32\WSShared.dll
2013-01-01 15:16:39 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-01-01 15:16:39 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.dll
2013-01-01 15:16:33 ----A---- C:\Windows\system32\sysreset.exe
2013-01-01 15:16:33 ----A---- C:\Windows\system32\resetengmig.dll
2013-01-01 15:16:33 ----A---- C:\Windows\system32\reseteng.dll
2013-01-01 15:16:33 ----A---- C:\Windows\system32\ReAgent.dll
2013-01-01 15:15:50 ----A---- C:\Windows\system32\WUSettingsProvider.dll
2013-01-01 15:15:50 ----A---- C:\Windows\system32\wups2.dll
2013-01-01 15:15:50 ----A---- C:\Windows\system32\wups.dll
2013-01-01 15:15:50 ----A---- C:\Windows\system32\wudriver.dll
2013-01-01 15:15:50 ----A---- C:\Windows\system32\wuaueng.dll
2013-01-01 15:15:50 ----A---- C:\Windows\system32\wuauclt.exe
2013-01-01 15:15:50 ----A---- C:\Windows\system32\wuapi.dll
2013-01-01 15:15:50 ----A---- C:\Windows\system32\netcfg-526706.txt
2013-01-01 15:15:49 ----A---- C:\Windows\system32\wushareduxresources.dll
2013-01-01 15:15:49 ----A---- C:\Windows\system32\wucltux.dll
2013-01-01 15:15:49 ----A---- C:\Windows\system32\wuaext.dll
2013-01-01 15:15:47 ----A---- C:\Windows\system32\rdpclip.exe
2013-01-01 15:15:46 ----A---- C:\Windows\system32\storewuauth.dll
2013-01-01 15:15:45 ----A---- C:\Windows\system32\tsgqec.dll
2013-01-01 15:15:45 ----A---- C:\Windows\system32\mstscax.dll
2013-01-01 15:15:45 ----A---- C:\Windows\system32\aaclient.dll
2013-01-01 15:15:44 ----A---- C:\Windows\system32\DevicePairing.dll
2013-01-01 15:15:44 ----A---- C:\Windows\system32\authui.dll
2013-01-01 15:15:43 ----A---- C:\Windows\system32\glcndFilter.dll
2013-01-01 15:15:42 ----A---- C:\Windows\system32\twinui.dll
2013-01-01 15:15:42 ----A---- C:\Windows\system32\shell32.dll
2013-01-01 15:15:41 ----A---- C:\Windows\system32\nshwfp.dll
2013-01-01 15:15:41 ----A---- C:\Windows\system32\localspl.dll
2013-01-01 15:15:41 ----A---- C:\Windows\system32\IKEEXT.DLL
2013-01-01 15:15:41 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2013-01-01 15:15:41 ----A---- C:\Windows\system32\drivers\wfplwfs.sys
2013-01-01 15:15:41 ----A---- C:\Windows\system32\BFE.DLL
2013-01-01 15:15:40 ----A---- C:\Windows\system32\wuwebv.dll
2013-01-01 15:15:40 ----A---- C:\Windows\system32\wuapp.exe
2013-01-01 15:15:40 ----A---- C:\Windows\system32\ole32.dll
2013-01-01 15:15:40 ----A---- C:\Windows\system32\actxprxy.dll
2013-01-01 15:15:40 ----A---- C:\Windows\HelpPane.exe
2013-01-01 15:15:39 ----A---- C:\Windows\system32\ubpm.dll
2013-01-01 15:15:39 ----A---- C:\Windows\system32\taskhostex.exe
2013-01-01 15:15:39 ----A---- C:\Windows\system32\taskhost.exe
2013-01-01 15:15:39 ----A---- C:\Windows\system32\EncDump.dll
2013-01-01 15:15:39 ----A---- C:\Windows\system32\drvstore.dll
2013-01-01 15:15:39 ----A---- C:\Windows\system32\audiosrv.dll
2013-01-01 15:15:39 ----A---- C:\Windows\system32\AudioSes.dll
2013-01-01 15:15:39 ----A---- C:\Windows\system32\AUDIOKSE.dll
2013-01-01 15:15:39 ----A---- C:\Windows\system32\AudioEng.dll
2013-01-01 15:15:39 ----A---- C:\Windows\system32\AudioEndpointBuilder.dll
2013-01-01 15:15:39 ----A---- C:\Windows\system32\audiodg.exe
2013-01-01 15:15:38 ----A---- C:\Windows\system32\mfreadwrite.dll
2013-01-01 15:15:38 ----A---- C:\Windows\system32\mfcore.dll
2013-01-01 15:15:38 ----A---- C:\Windows\system32\MFCaptureEngine.dll
2013-01-01 15:15:37 ----A---- C:\Windows\system32\wlanhlp.dll
2013-01-01 15:15:37 ----A---- C:\Windows\system32\wlanapi.dll
2013-01-01 15:15:37 ----A---- C:\Windows\system32\Windows.Networking.Connectivity.dll
2013-01-01 15:15:37 ----A---- C:\Windows\system32\WcnEapPeerProxy.dll
2013-01-01 15:15:37 ----A---- C:\Windows\system32\WcnEapAuthProxy.dll
2013-01-01 15:15:37 ----A---- C:\Windows\system32\wcncsvc.dll
2013-01-01 15:15:37 ----A---- C:\Windows\system32\WcnApi.dll
2013-01-01 15:15:37 ----A---- C:\Windows\system32\fdWCN.dll
2013-01-01 15:15:37 ----A---- C:\Windows\system32\dafWCN.dll
2013-01-01 15:15:36 ----A---- C:\Windows\system32\wlansvc.dll
2013-01-01 15:15:36 ----A---- C:\Windows\system32\wlansec.dll
2013-01-01 15:15:36 ----A---- C:\Windows\system32\wlanmsm.dll
2013-01-01 15:15:36 ----A---- C:\Windows\system32\wfdprov.dll
2013-01-01 15:15:34 ----A---- C:\Windows\system32\winhttp.dll
2013-01-01 15:15:34 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2013-01-01 15:15:34 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2013-01-01 15:15:34 ----A---- C:\Windows\system32\drivers\http.sys
2013-01-01 15:15:33 ----A---- C:\Windows\system32\KernelBase.dll
2013-01-01 15:15:33 ----A---- C:\Windows\system32\drivers\afd.sys
2013-01-01 15:15:29 ----A---- C:\Windows\system32\drivers\viac7.sys
2013-01-01 15:15:29 ----A---- C:\Windows\system32\drivers\sdbus.sys
2013-01-01 15:15:29 ----A---- C:\Windows\system32\drivers\processr.sys
2013-01-01 15:15:29 ----A---- C:\Windows\system32\drivers\intelppm.sys
2013-01-01 15:15:29 ----A---- C:\Windows\system32\drivers\fxppm.sys
2013-01-01 15:15:29 ----A---- C:\Windows\system32\drivers\dumpsd.sys
2013-01-01 15:15:29 ----A---- C:\Windows\system32\drivers\amdppm.sys
2013-01-01 15:15:29 ----A---- C:\Windows\system32\drivers\amdk8.sys
2013-01-01 15:15:28 ----A---- C:\Windows\system32\iscsilog.dll
2013-01-01 15:15:28 ----A---- C:\Windows\system32\drivers\USBHUB3.SYS
2013-01-01 15:15:28 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2013-01-01 15:14:48 ----A---- C:\Windows\system32\netcfg-464430.txt
2013-01-01 15:14:42 ----A---- C:\Windows\system32\tzres.dll
2013-01-01 15:14:32 ----A---- C:\Windows\system32\win32k.sys
2013-01-01 15:14:03 ----A---- C:\Windows\system32\pcasvc.dll
2013-01-01 15:14:03 ----A---- C:\Windows\system32\pcalua.exe
2013-01-01 15:14:03 ----A---- C:\Windows\system32\pcaevts.dll
2013-01-01 15:14:03 ----A---- C:\Windows\system32\pcadm.dll
2013-01-01 15:13:50 ----A---- C:\Windows\system32\halmacpi.dll
2013-01-01 15:13:50 ----A---- C:\Windows\system32\hal.dll
2013-01-01 15:13:36 ----A---- C:\Windows\system32\mfasfsrcsnk.dll
2013-01-01 15:13:35 ----A---- C:\Windows\system32\mfnetcore.dll
2013-01-01 15:13:35 ----A---- C:\Windows\system32\mfmpeg2srcsnk.dll
2013-01-01 15:13:34 ----A---- C:\Windows\system32\mfnetsrc.dll
2013-01-01 15:13:07 ----A---- C:\Windows\system32\poqexec.exe
2013-01-01 15:12:13 ----A---- C:\Windows\system32\Windows.UI.Immersive.dll
2013-01-01 15:12:10 ----A---- C:\Windows\system32\DWrite.dll
2013-01-01 15:12:10 ----A---- C:\Windows\system32\dwmcore.dll
2013-01-01 15:12:09 ----A---- C:\Windows\system32\gdi32.dll
2013-01-01 15:12:09 ----A---- C:\Windows\system32\FntCache.dll
2013-01-01 15:12:08 ----A---- C:\Windows\system32\kbdhebl3.dll
2013-01-01 15:12:08 ----A---- C:\Windows\system32\input.dll
2013-01-01 15:12:07 ----A---- C:\Windows\explorer.exe
2013-01-01 15:12:05 ----A---- C:\Windows\system32\usercpl.dll
2013-01-01 15:12:05 ----A---- C:\Windows\system32\SHCore.dll
2013-01-01 15:12:04 ----A---- C:\Windows\system32\AppxSip.dll
2013-01-01 15:12:03 ----A---- C:\Windows\system32\wfapigp.dll
2013-01-01 15:12:03 ----A---- C:\Windows\system32\MPSSVC.dll
2013-01-01 15:12:03 ----A---- C:\Windows\system32\icfupgd.dll
2013-01-01 15:12:03 ----A---- C:\Windows\system32\FirewallAPI.dll
2013-01-01 15:12:03 ----A---- C:\Windows\system32\drivers\mpsdrv.sys
2013-01-01 15:12:02 ----A---- C:\Windows\system32\winresume.exe
2013-01-01 15:12:02 ----A---- C:\Windows\system32\winload.exe
2013-01-01 15:11:59 ----A---- C:\Windows\system32\StructuredQuery.dll
2013-01-01 15:11:58 ----A---- C:\Windows\system32\winlogon.exe
2013-01-01 15:11:58 ----A---- C:\Windows\system32\PCPKsp.dll
2013-01-01 15:11:58 ----A---- C:\Windows\system32\microsoft-windows-pdc.dll
2013-01-01 15:11:58 ----A---- C:\Windows\system32\kerberos.dll
2013-01-01 15:11:55 ----A---- C:\Windows\system32\ListSvc.dll
2013-01-01 15:11:54 ----A---- C:\Windows\system32\tquery.dll
2013-01-01 15:11:54 ----A---- C:\Windows\system32\SearchIndexer.exe
2013-01-01 15:11:54 ----A---- C:\Windows\system32\mssprxy.dll
2013-01-01 15:11:54 ----A---- C:\Windows\system32\mssitlb.dll
2013-01-01 15:11:54 ----A---- C:\Windows\system32\BdeUISrv.exe
2013-01-01 15:11:54 ----A---- C:\Windows\system32\bdesvc.dll
2013-01-01 15:11:53 ----A---- C:\Windows\system32\SearchFilterHost.exe
2013-01-01 15:11:53 ----A---- C:\Windows\system32\mssrch.dll
2013-01-01 15:11:53 ----A---- C:\Windows\system32\mssph.dll
2013-01-01 15:11:53 ----A---- C:\Windows\system32\msshooks.dll
2013-01-01 15:11:53 ----A---- C:\Windows\system32\msscntrs.dll
2013-01-01 15:11:52 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2013-01-01 15:11:52 ----A---- C:\Windows\system32\mssvp.dll
2013-01-01 15:11:52 ----A---- C:\Windows\system32\mssphtb.dll
2013-01-01 15:11:47 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2013-01-01 15:11:32 ----A---- C:\Windows\system32\Windows.Networking.dll
2013-01-01 15:11:28 ----A---- C:\Windows\system32\drivers\dam.sys
2013-01-01 15:11:27 ----A---- C:\Windows\system32\SpaceControl.dll
2013-01-01 15:11:25 ----A---- C:\Windows\system32\Windows.Storage.Compression.dll
2013-01-01 15:11:25 ----A---- C:\Windows\system32\mfplat.dll
2013-01-01 15:11:24 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2013-01-01 15:11:24 ----A---- C:\Windows\system32\dhcpcsvc.dll
2013-01-01 15:11:24 ----A---- C:\Windows\system32\dhcpcore6.dll
2013-01-01 15:11:24 ----A---- C:\Windows\system32\dhcpcore.dll
2013-01-01 15:11:23 ----A---- C:\Windows\system32\mswsock.dll
2013-01-01 15:11:23 ----A---- C:\Windows\system32\lsasrv.dll
2013-01-01 15:11:23 ----A---- C:\Windows\system32\drivers\cng.sys
2013-01-01 15:11:22 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-01-01 15:11:22 ----A---- C:\Windows\system32\ci.dll
2013-01-01 15:11:21 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2013-01-01 15:11:20 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-01-01 15:11:19 ----A---- C:\Windows\system32\drivers\netio.sys
2013-01-01 15:11:17 ----A---- C:\Windows\system32\WMALFXGFXDSP.dll
2013-01-01 15:11:17 ----A---- C:\Windows\system32\SysFxUI.dll
2013-01-01 15:11:17 ----A---- C:\Windows\system32\drivers\sdstor.sys
2013-01-01 15:11:17 ----A---- C:\Windows\system32\drivers\portcls.sys
2013-01-01 15:11:17 ----A---- C:\Windows\system32\drivers\drmkaud.sys
2013-01-01 15:11:17 ----A---- C:\Windows\system32\drivers\drmk.sys
2013-01-01 15:11:15 ----A---- C:\Windows\system32\drivers\battc.sys
2013-01-01 15:09:23 ----A---- C:\Windows\system32\dpnlobby.dll
2013-01-01 15:09:23 ----A---- C:\Windows\system32\dpnhupnp.dll
2013-01-01 15:09:23 ----A---- C:\Windows\system32\dpnhpast.dll
2013-01-01 15:09:23 ----A---- C:\Windows\system32\dpnet.dll
2013-01-01 15:09:23 ----A---- C:\Windows\system32\dpnathlp.dll
2013-01-01 15:09:23 ----A---- C:\Windows\system32\dpnaddr.dll
2013-01-01 15:09:22 ----A---- C:\Windows\system32\dpnsvr.exe
2012-12-31 02:38:09 ----A---- C:\Windows\system32\netcfg-715826.txt
2012-12-31 02:37:37 ----A---- C:\Windows\system32\ReAgentc.exe
2012-12-31 02:37:33 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2012-12-31 02:37:30 ----A---- C:\Windows\system32\wwansvc.dll
2012-12-31 02:37:30 ----A---- C:\Windows\system32\wwanprotdim.dll
2012-12-31 02:37:17 ----A---- C:\Windows\system32\uxtheme.dll
2012-12-31 02:37:17 ----A---- C:\Windows\system32\UXInit.dll
2012-12-31 02:37:16 ----A---- C:\Windows\system32\wininet.dll
2012-12-31 02:37:16 ----A---- C:\Windows\system32\urlmon.dll
2012-12-31 02:37:16 ----A---- C:\Windows\system32\jsproxy.dll
2012-12-31 02:37:15 ----A---- C:\Windows\system32\msfeeds.dll
2012-12-31 02:37:15 ----A---- C:\Windows\system32\iertutil.dll
2012-12-31 02:37:14 ----A---- C:\Windows\system32\ieframe.dll
2012-12-31 02:37:13 ----A---- C:\Windows\system32\mshtml.dll
2012-12-31 02:37:13 ----A---- C:\Windows\system32\iesetup.dll
2012-12-31 02:37:13 ----A---- C:\Windows\system32\iernonce.dll
2012-12-31 02:37:13 ----A---- C:\Windows\system32\ie4uinit.exe
2012-12-31 02:37:12 ----A---- C:\Windows\system32\jscript9.dll
2012-12-31 02:37:12 ----A---- C:\Windows\system32\jscript.dll
2012-12-31 02:37:12 ----A---- C:\Windows\system32\iesysprep.dll
2012-12-31 02:36:50 ----A---- C:\Windows\system32\newdev.exe
2012-12-31 02:36:50 ----A---- C:\Windows\system32\newdev.dll
2012-12-31 02:36:50 ----A---- C:\Windows\system32\ndadmin.exe
2012-12-31 02:36:33 ----D---- C:\Windows\SoftwareDistribution
2012-12-31 02:36:31 ----A---- C:\Windows\system32\srmclient.dll
2012-12-31 02:36:31 ----A---- C:\Windows\system32\srm.dll
2012-12-31 02:36:31 ----A---- C:\Windows\system32\rfxvmt.dll
2012-12-31 02:36:31 ----A---- C:\Windows\system32\rdpudd.dll
2012-12-31 02:36:31 ----A---- C:\Windows\system32\rdpcorets.dll
2012-12-31 02:36:31 ----A---- C:\Windows\system32\dskquota.dll
2012-12-31 02:36:31 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2012-12-31 02:36:30 ----A---- C:\Windows\system32\srmtrace.dll
2012-12-31 02:36:30 ----A---- C:\Windows\system32\srmstormod.dll
2012-12-31 02:36:30 ----A---- C:\Windows\system32\srmshell.dll
2012-12-31 02:36:30 ----A---- C:\Windows\system32\srmscan.dll
2012-12-31 02:36:30 ----A---- C:\Windows\system32\srm_ps.dll
2012-12-31 02:36:30 ----A---- C:\Windows\system32\adrclient.dll
2012-12-31 02:36:28 ----A---- C:\Windows\system32\drivers\srv2.sys
2012-12-31 02:35:10 ----A---- C:\Windows\system32\wmpmde.dll
2012-12-31 02:35:09 ----A---- C:\Windows\system32\winmde.dll
2012-12-31 02:35:04 ----A---- C:\Windows\system32\d2d1.dll
2012-12-31 02:35:03 ----A---- C:\Windows\system32\uDWM.dll
2012-12-31 02:35:03 ----A---- C:\Windows\system32\dwmredir.dll
2012-12-31 02:35:03 ----A---- C:\Windows\system32\dwm.exe
2012-12-31 02:35:02 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2012-12-31 02:35:01 ----A---- C:\Windows\system32\dxgi.dll
2012-12-31 02:35:01 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2012-12-31 02:35:01 ----A---- C:\Windows\system32\d3d11.dll
2012-12-31 02:35:01 ----A---- C:\Windows\system32\d3d10warp.dll
2012-12-31 02:35:00 ----A---- C:\Windows\system32\user32.dll
2012-12-31 02:35:00 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2012-12-31 02:35:00 ----A---- C:\Windows\system32\cdd.dll
2012-12-31 02:34:59 ----A---- C:\Windows\system32\winsrv.dll
2012-12-31 02:34:59 ----A---- C:\Windows\system32\WindowsCodecs.dll
2012-12-31 02:34:59 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-12-31 02:34:58 ----A---- C:\Windows\system32\batmeter.dll
2012-12-31 02:34:57 ----A---- C:\Windows\system32\MUILanguageCleanup.dll
2012-12-31 02:34:57 ----A---- C:\Windows\system32\lpremove.exe
2012-12-31 02:34:57 ----A---- C:\Windows\system32\lpksetupproxyserv.dll
2012-12-31 02:34:57 ----A---- C:\Windows\system32\lpksetup.exe
2012-12-31 02:34:57 ----A---- C:\Windows\system32\LangCleanupSysprepAction.dll
2012-12-31 02:34:55 ----A---- C:\Windows\system32\propsys.dll
2012-12-31 02:34:52 ----A---- C:\Windows\system32\twinapi.dll
2012-12-31 02:34:51 ----A---- C:\Windows\system32\UserLanguagesCpl.dll
2012-12-31 02:34:50 ----A---- C:\Windows\system32\nlasvc.dll
2012-12-31 02:34:50 ----A---- C:\Windows\system32\nlaapi.dll
2012-12-31 02:34:50 ----A---- C:\Windows\system32\ncsi.dll
2012-12-31 02:34:49 ----A---- C:\Windows\system32\rasser.dll
2012-12-31 02:34:49 ----A---- C:\Windows\system32\rasmxs.dll
2012-12-31 02:34:49 ----A---- C:\Windows\system32\rasdiag.dll
2012-12-31 02:34:49 ----A---- C:\Windows\system32\rascfg.dll
2012-12-31 02:34:49 ----A---- C:\Windows\system32\drivers\wanarp.sys
2012-12-31 02:34:49 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2012-12-31 02:34:49 ----A---- C:\Windows\system32\drivers\ndistapi.sys
2012-12-31 02:34:48 ----A---- C:\Windows\system32\VAN.dll
2012-12-31 02:34:48 ----A---- C:\Windows\system32\drivers\ws2ifsl.sys
2012-12-31 02:34:47 ----A---- C:\Windows\system32\mmcss.dll
2012-12-31 02:34:47 ----A---- C:\Windows\system32\avrt.dll
2012-12-31 02:34:45 ----A---- C:\Windows\system32\cryptdlg.dll
2012-12-31 02:34:43 ----A---- C:\Windows\system32\WSSync.dll
2012-12-31 02:34:43 ----A---- C:\Windows\system32\WSClient.dll
2012-12-31 02:34:43 ----A---- C:\Windows\system32\OEMLicense.dll
2012-12-31 02:34:42 ----A---- C:\Windows\system32\WSService.dll
2012-12-31 02:34:40 ----A---- C:\Windows\system32\wintrust.dll
2012-12-31 02:34:40 ----A---- C:\Windows\system32\schannel.dll
2012-12-31 02:34:40 ----A---- C:\Windows\system32\sdbinst.exe
2012-12-31 02:34:40 ----A---- C:\Windows\system32\drivers\msgpioclx.sys
2012-12-31 02:34:40 ----A---- C:\Windows\system32\apphelp.dll
2012-12-31 02:34:40 ----A---- C:\Windows\system32\aelupsvc.dll
2012-12-31 02:34:39 ----A---- C:\Windows\system32\umpnpmgr.dll
2012-12-31 02:34:39 ----A---- C:\Windows\system32\shimeng.dll
2012-12-31 02:34:39 ----A---- C:\Windows\system32\setbcdlocale.dll
2012-12-31 02:34:39 ----A---- C:\Windows\system32\drvinst.exe
2012-12-31 02:34:39 ----A---- C:\Windows\system32\DAFWSD.dll
2012-12-31 02:34:39 ----A---- C:\Windows\system32\bcdsrv.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhtask.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhsvcctl.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhsvc.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhsrchph.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhsrchapi.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhshl.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhmanagew.exe
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhlisten.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhevents.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhengine.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhcleanup.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhcfg.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhcat.dll
2012-12-31 02:34:38 ----A---- C:\Windows\system32\fhautoplay.dll
2012-12-31 02:34:37 ----A---- C:\Windows\system32\perfproc.dll
2012-12-31 02:34:37 ----A---- C:\Windows\system32\perfos.dll
2012-12-31 02:34:37 ----A---- C:\Windows\system32\perfnet.dll
2012-12-31 02:34:37 ----A---- C:\Windows\system32\perfdisk.dll
2012-12-31 02:34:37 ----A---- C:\Windows\system32\perfctrs.dll
2012-12-31 02:34:37 ----A---- C:\Windows\system32\microsoft-windows-kernel-power-events.dll
2012-12-31 02:34:36 ----A---- C:\Windows\system32\vdsutil.dll
2012-12-31 02:34:36 ----A---- C:\Windows\system32\vdsldr.exe
2012-12-31 02:34:36 ----A---- C:\Windows\system32\vds_ps.dll
2012-12-31 02:34:36 ----A---- C:\Windows\system32\vds.exe
2012-12-31 02:34:36 ----A---- C:\Windows\system32\TpmTasks.dll
2012-12-31 02:34:36 ----A---- C:\Windows\system32\RacEngn.dll
2012-12-31 02:34:35 ----A---- C:\Windows\system32\vsstrace.dll
2012-12-31 02:34:35 ----A---- C:\Windows\system32\vssapi.dll
2012-12-31 02:34:35 ----A---- C:\Windows\system32\eventcls.dll
2012-12-31 02:34:33 ----A---- C:\Windows\system32\taskeng.exe
2012-12-31 02:34:33 ----A---- C:\Windows\system32\MMDevAPI.dll
2012-12-31 02:34:33 ----A---- C:\Windows\system32\fveapibase.dll
2012-12-31 02:34:32 ----A---- C:\Windows\system32\fveapi.dll
2012-12-31 02:34:32 ----A---- C:\Windows\system32\drivers\fvevol.sys
2012-12-31 02:34:32 ----A---- C:\Windows\system32\drivers\dumpfve.sys
2012-12-31 02:34:28 ----A---- C:\Windows\system32\WpcMon.exe
2012-12-31 02:34:27 ----A---- C:\Windows\system32\drivers\csc.sys
2012-12-31 02:34:27 ----A---- C:\Windows\system32\CscMig.dll
2012-12-31 02:34:23 ----A---- C:\Windows\system32\Windows.Media.Streaming.dll
2012-12-31 02:34:23 ----A---- C:\Windows\system32\mfsvr.dll
2012-12-31 02:34:23 ----A---- C:\Windows\system32\MFMediaEngine.dll
2012-12-31 02:34:21 ----A---- C:\Windows\system32\msvproc.dll
2012-12-31 02:34:21 ----A---- C:\Windows\system32\mfsrcsnk.dll
2012-12-31 02:34:21 ----A---- C:\Windows\system32\MFPlay.dll
2012-12-31 02:34:20 ----A---- C:\Windows\system32\wmploc.DLL
2012-12-31 02:34:20 ----A---- C:\Windows\system32\wmp.dll
2012-12-31 02:34:20 ----A---- C:\Windows\system32\spwmp.dll
2012-12-31 02:34:19 ----A---- C:\Windows\system32\dxmasf.dll
2012-12-31 02:34:18 ----A---- C:\Windows\system32\mfh264enc.dll
2012-12-31 02:34:12 ----A---- C:\Windows\system32\wlroamextension.dll
2012-12-31 02:34:12 ----A---- C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2012-12-31 02:34:12 ----A---- C:\Windows\system32\SettingSyncHost.exe
2012-12-31 02:34:12 ----A---- C:\Windows\system32\provcore.dll
2012-12-31 02:34:10 ----A---- C:\Windows\system32\WWAHost.exe
2012-12-31 02:34:10 ----A---- C:\Windows\system32\wlidcredprov.dll
2012-12-31 02:34:10 ----A---- C:\Windows\system32\drivers\cnghwassist.sys
2012-12-31 02:34:10 ----A---- C:\Windows\system32\DevPropMgr.dll
2012-12-31 02:34:10 ----A---- C:\Windows\system32\bisrv.dll
2012-12-31 02:34:09 ----A---- C:\Windows\system32\wpnprv.dll
2012-12-31 02:34:09 ----A---- C:\Windows\system32\wpncore.dll
2012-12-31 02:34:09 ----A---- C:\Windows\system32\psmsrv.dll
2012-12-31 02:34:09 ----A---- C:\Windows\system32\ProximityService.dll
2012-12-31 02:34:09 ----A---- C:\Windows\system32\PackageStateRoaming.dll
2012-12-31 02:34:09 ----A---- C:\Windows\system32\MsSpellCheckingFacility.dll
2012-12-31 02:34:08 ----A---- C:\Windows\system32\WinSAT.exe
2012-12-31 02:34:08 ----A---- C:\Windows\system32\TimeBrokerServer.dll
2012-12-31 02:34:08 ----A---- C:\Windows\system32\SystemEventsBrokerServer.dll
2012-12-31 02:34:07 ----A---- C:\Windows\system32\WinSATAPI.dll
2012-12-31 02:34:07 ----A---- C:\Windows\system32\webio.dll
2012-12-31 02:34:06 ----A---- C:\Windows\system32\WinTypes.dll
2012-12-31 02:34:06 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2012-12-31 02:34:06 ----A---- C:\Windows\system32\dnsrslvr.dll
2012-12-31 02:34:06 ----A---- C:\Windows\system32\dnsapi.dll
2012-12-31 02:34:06 ----A---- C:\Windows\system32\combase.dll
2012-12-31 02:34:05 ----A---- C:\Windows\system32\umpo.dll
2012-12-31 02:34:05 ----A---- C:\Windows\system32\svchost.exe
2012-12-31 02:34:04 ----A---- C:\Windows\system32\services.exe
2012-12-31 02:34:03 ----A---- C:\Windows\system32\sspisrv.dll
2012-12-31 02:34:03 ----A---- C:\Windows\system32\sspicli.dll
2012-12-31 02:34:03 ----A---- C:\Windows\system32\lsass.exe
2012-12-31 02:34:03 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-12-31 02:34:00 ----A---- C:\Windows\system32\RpcEpMap.dll
2012-12-31 02:34:00 ----A---- C:\Windows\system32\ntdll.dll
2012-12-31 02:33:59 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-12-31 02:33:59 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2012-12-31 02:33:58 ----A---- C:\Windows\system32\drivers\msgpiowin32.sys
2012-12-31 02:33:52 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2012-12-31 02:33:52 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2012-12-31 02:33:51 ----A---- C:\Windows\system32\drivers\BthhfHid.sys
2012-12-31 02:33:51 ----A---- C:\Windows\system32\drivers\BthAvrcpTg.sys
2012-12-31 02:33:51 ----A---- C:\Windows\system32\drivers\BtaMPM.sys
2012-12-31 02:33:50 ----A---- C:\Windows\system32\HalExtIntcUartDMA.dll
2012-12-31 02:33:50 ----A---- C:\Windows\system32\HalExtIntcLpioDMA.dll
2012-12-31 02:33:50 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2012-12-31 02:33:50 ----A---- C:\Windows\system32\drivers\usbport.sys
2012-12-31 02:33:50 ----A---- C:\Windows\system32\drivers\usbhub.sys
2012-12-31 02:33:50 ----A---- C:\Windows\system32\drivers\usbehci.sys
2012-12-31 02:33:50 ----A---- C:\Windows\system32\drivers\usbd.sys
2012-12-31 02:33:50 ----A---- C:\Windows\system32\drivers\acpi.sys
2012-12-31 02:33:49 ----A---- C:\Windows\system32\drivers\USBXHCI.SYS
2012-12-31 02:33:49 ----A---- C:\Windows\system32\drivers\UCX01000.SYS
2012-12-31 02:33:49 ----A---- C:\Windows\system32\drivers\tpm.sys
2012-12-31 02:32:32 ----D---- C:\Users\mixik\AppData\Roaming\Adobe
2012-12-31 02:31:25 ----A---- C:\Windows\system32\lpk.dll
2012-12-31 02:31:25 ----A---- C:\Windows\system32\fontsub.dll
2012-12-31 02:31:25 ----A---- C:\Windows\system32\dciman32.dll
2012-12-31 02:31:25 ----A---- C:\Windows\system32\atmlib.dll
2012-12-31 02:31:25 ----A---- C:\Windows\system32\atmfd.dll
2012-12-31 02:29:51 ----A---- C:\Windows\system32\synceng.dll
2012-12-31 02:29:50 ----D---- C:\ProgramData\PRICache
2012-12-31 02:29:37 ----D---- C:\Windows\CSC
2012-12-31 02:28:03 ----SD---- C:\Users\mixik\AppData\Roaming\Microsoft
2012-12-31 02:27:39 ----A---- C:\Windows\system32\netcfg-85800.txt
2012-12-31 02:27:11 ----SHD---- C:\ProgramData\Šablony
2012-12-31 02:27:11 ----SHD---- C:\ProgramData\Nabídka Start
2012-12-31 02:27:10 ----SHD---- C:\ProgramData\Plocha
2012-12-31 02:27:10 ----SHD---- C:\ProgramData\Dokumenty
2012-12-31 02:27:10 ----SHD---- C:\ProgramData\Data aplikací
2012-12-31 02:25:10 ----A---- C:\Windows\system32\netcfg-153411.txt
2012-12-31 02:25:02 ----A---- C:\Windows\system32\atiicdxx.dat
2012-12-31 02:24:51 ----A---- C:\Windows\system32\netcfg-134566.txt
2012-12-31 02:24:39 ----A---- C:\Windows\system32\netcfg-122429.txt
2012-12-31 02:24:39 ----A---- C:\Windows\system32\netcfg-122055.txt
2012-12-31 02:24:38 ----A---- C:\Windows\system32\netcfg-121462.txt
2012-12-31 02:24:37 ----A---- C:\Windows\system32\netcfg-120931.txt
2012-12-31 02:24:37 ----A---- C:\Windows\system32\netcfg-120229.txt
2012-12-31 02:24:36 ----A---- C:\Windows\system32\netcfg-119699.txt
2012-12-31 02:24:36 ----A---- C:\Windows\system32\netcfg-119247.txt
2012-12-31 02:24:33 ----A---- C:\Windows\system32\netcfg-116641.txt
2012-12-31 02:24:33 ----A---- C:\Windows\system32\netcfg-116080.txt
2012-12-31 02:24:32 ----A---- C:\Windows\system32\netcfg-115003.txt
2012-12-31 02:24:22 ----D---- C:\Windows\Prefetch
2012-12-31 02:22:02 ----D---- C:\Windows.old
2012-12-31 02:12:50 ----D---- C:\Windows\Panther
2012-12-31 02:09:09 ----HD---- C:\$SysReset
2012-12-30 23:41:45 ----D---- C:\Download
2012-12-30 21:42:26 ----A---- C:\user.js
2012-12-18 10:06:10 ----A---- C:\Windows\MusiccityDownload.exe
2012-12-18 10:06:10 ----A---- C:\Windows\MASetupCaller.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\muzwmts.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\muzapp.exe
2012-12-18 10:06:06 ----A---- C:\Windows\system32\muzapp.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\muzaf1.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MTXSYNCICON.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MTTELECHIP.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MSLUR71.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MSFLib.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MSCLib.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MK_Lyric.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MaXMLProto.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MASetupCleaner.exe
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MAMACExtract.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MaJGUILib.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MaDRM.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\MACXMLProto.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\issacapi_se-2.3.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\issacapi_pe-2.3.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\issacapi_bs-2.3.dll
2012-12-18 10:06:06 ----A---- C:\Windows\system32\cis-2.4.dll
======List of files/folders modified in the last 1 month======