Preventívka - podozrenie na malware
Napsal: 22 čer 2013 13:31
Dobrý deň, mám podozrenie, že môj PC bol opäť napadnutý niečím nekalím. Google mi napr. píše "We're sorry...
... but your computer or network may be sending automated queries." Stalo sa mi to prvý krát v živote. Medzi tým som už spustil Ccleaner, zatiaľ nepomohlo. RSIT log :
Logfile of random's system information tool 1.09 (written by random/random)
Run by Maros at 2013-06-22 14:27:42
Microsoft Windows 8 Pro
System drive C: has 163 GB (34%) free of 477 GB
Total RAM: 4007 MB (57% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:27:45, on 22. 6. 2013
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16384)
Boot mode: Normal
Running processes:
C:\WINDOWS\SysWOW64\rundll32.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
C:\Windows\SysWOW64\ACEngSvr.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Maros.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IB Updater Helper - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [SonicMasterTray] C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Maros\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [MouseServer] "C:\Program Files (x86)\MouseServer\MouseServer.exe"
O4 - HKCU\..\Run: [Sony PC Companion] "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - HKUS\S-1-5-21-2383265717-2937714768-3459393529-1005\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'UpdatusUser')
O4 - Startup: Dropbox.lnk = Maros\AppData\Roaming\Dropbox\bin\Dropbox.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~3\Office12\GRA32A~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: AtherosSvc - Unknown owner - C:\WINDOWS\system32\AdminService.exe (file missing)
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: IB Updater - Unknown owner - C:\Program Files\IB Updater\ExtensionUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10678 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Windows\system32\FBAgent.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\system32\AdminService.exe
dashost.exe {4dab1f71-603f-4d78-8a01eed976fb9072}
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
"C:\Program Files\IB Updater\ExtensionUpdaterService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\WINDOWS\SysWOW64\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\WINDOWS\System32\WinLogon.exe -SpecialSession
-hiberboot
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session
taskhostex.exe
C:\WINDOWS\SysWOW64\rundll32.exe "C:\Program Files (x86)\Garena Plus\ggspawn.dll",rundll_entry -p 0
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
C:\WINDOWS\Explorer.EXE
ATKOSD.exe
KBFiltr.exe
taskeng.exe {75E86671-76B2-4C2E-8A40-C5257F8A114A}
"C:\Program Files\P4G\BatteryLife.exe"
taskeng.exe {B733F79A-3AEE-4BB6-B6C7-EADAF50397CE}
WDC.exe
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\SysWOW64\ACEngSvr.exe -Embedding
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SF3
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe"
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe"
"C:\WINDOWS\system32\wuauclt.exe"
"C:\Windows\AsScrPro.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE" /n /dde
C:\WINDOWS\splwow64.exe 8192
"C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe" "C:\Users\Maros\Downloads\bakalárka - event marketing v prostredí sociálnych médií - Topercer - FINAL FINAL.pdf"
"C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe" --channel=5464.006DFA78.643359954 --type=renderer "C:\Users\Maros\Downloads\bakalárka - event marketing v prostredí sociálnych médií - Topercer - FINAL FINAL.pdf"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe" -Embedding
taskeng.exe {EC5DBE8A-7294-479D-94A4-C2B95D39F9FB}
C:\WINDOWS\System32\svchost.exe -k swprv
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="9124.0.463085664\260229308" --supports-dual-gpus=false --reduce-gpu-sandbox --gpu-vendor-id=0x8086 --gpu-device-id=0x0116 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=9.17.10.2867 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyGroup9 channel:stable mods:100/InstantExtended/Padding1 channel:stable/OmniboxSearchSuggestTrialStarted2013Q1/12/OneClickSignIn/Standard/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/" --extension-process --renderer-print-preview --enable-threaded-compositing --channel="9124.1.1927239265\376442767" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="9124.5.1015753572\1313507058" --lang=sk --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyGroup9 channel:stable mods:100/InstantExtended/Padding1 channel:stable/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/12/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SpdyCwnd/cwnd16/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --channel="9124.6.337097140\887999370" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyGroup9 channel:stable mods:100/InstantExtended/Padding1 channel:stable/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/12/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SpdyCwnd/cwnd16/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --channel="9124.8.1604297842\1434695255" /prefetch:673131151
C:\WINDOWS\System32\ThumbnailExtractionHost.exe -Embedding
"C:\Users\Maros\Downloads\RSITx64 (1).exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-2383265717-2937714768-3459393529-1000Core.job
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-2383265717-2937714768-3459393529-1000UA.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
=========Mozilla firefox=========
ProfilePath - C:\Users\Maros\AppData\Roaming\Mozilla\Firefox\Profiles\bo0k498e.default
"{336D0C35-8A85-403a-B9D2-65C292C39087}"=C:\Program Files\IB Updater\Firefox
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.221 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_221.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@checkpoint.com/FFApi]
"Description"=ZoneAlarm LTD Toolbar Api
"Path"=C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_37]
"Description"=
"Path"=C:\Windows\SysWOW64\npdeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.221 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_221.dll
C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files (x86)\Mozilla Firefox\searchplugins\
atlas-sk.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]
IB Updater - C:\Program Files\IB Updater\Extension64.dll [2012-10-09 218456]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]
IB Updater - C:\Program Files\IB Updater\Extension32.dll [2012-10-09 172376]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-09-24 329712]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-09-24 59376]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2011-04-12 2589992]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2011-05-17 2226280]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-01-13 2918656]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2012-10-10 171040]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2012-10-10 399392]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2012-10-10 441888]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-05-16 1012000]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]
"Facebook Update"=C:\Users\Maros\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-11-21 138096]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-02-07 17706088]
"MouseServer"=C:\Program Files (x86)\MouseServer\MouseServer.exe [2013-02-07 240128]
"Sony PC Companion"=C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [2013-03-18 448736]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\Windows\AsScrPro.exe [2011-10-27 3058304]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-05-17 11855976]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [2010-10-07 170624]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-17 5732992]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"SonicMasterTray"=C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [2010-07-10 984400]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-09-17 254896]
"Wireless Console 3"=C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2010-09-24 1601536]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2012-12-14 2255360]
C:\Users\Maros\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Maros\AppData\Roaming\Dropbox\bin\Dropbox.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2012-10-10 441856]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmartcardSimulator]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VirtualSmartcardReader]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wcmsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"EnableUIADesktopToggle"=0
"EnableCursorSuppression"=1
"ConsentPromptBehaviorUser"=3
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"disablecad"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktopChanges"=1
"NoActiveDesktop"=1
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.XFR1"=xfcodec64.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-06-22 14:27:42 ----D---- C:\rsit
2013-06-22 11:16:45 ----A---- C:\WINDOWS\system32\netcfg-318052593.txt
2013-06-22 00:33:34 ----A---- C:\WINDOWS\system32\netcfg-279461015.txt
2013-06-21 23:54:58 ----A---- C:\WINDOWS\system32\netcfg-277145000.txt
2013-06-21 18:54:57 ----A---- C:\WINDOWS\system32\netcfg-259144531.txt
2013-06-21 10:22:11 ----A---- C:\WINDOWS\system32\netcfg-228377921.txt
2013-06-20 23:28:48 ----A---- C:\WINDOWS\system32\netcfg-189174968.txt
2013-06-20 22:46:19 ----A---- C:\WINDOWS\system32\netcfg-186626531.txt
2013-06-20 22:46:18 ----A---- C:\WINDOWS\system32\netcfg-186625312.txt
2013-06-20 11:04:24 ----A---- C:\WINDOWS\system32\netcfg-144510968.txt
2013-06-20 11:04:20 ----A---- C:\WINDOWS\system32\netcfg-144506937.txt
2013-06-19 18:14:42 ----A---- C:\WINDOWS\system32\netcfg-83926421.txt
2013-06-19 18:14:30 ----A---- C:\WINDOWS\system32\netcfg-83914609.txt
2013-06-19 07:49:04 ----A---- C:\WINDOWS\system32\netcfg-46387703.txt
2013-06-19 07:49:03 ----A---- C:\WINDOWS\system32\netcfg-46387609.txt
2013-06-18 23:04:30 ----A---- C:\WINDOWS\system32\netcfg-14913953.txt
2013-06-18 18:55:38 ----A---- C:\WINDOWS\system32\netcfg-1108765265.txt
2013-06-18 18:35:19 ----A---- C:\WINDOWS\system32\netcfg-1107546453.txt
2013-06-18 18:27:59 ----RSHD---- C:\Windows Activation Technologies
2013-06-18 18:26:00 ----A---- C:\WINDOWS\KJ.exe
2013-06-18 18:24:14 ----A---- C:\WINDOWS\system32\netcfg-1106881437.txt
2013-06-18 16:14:47 ----A---- C:\WINDOWS\system32\netcfg-1099114750.txt
2013-06-18 16:14:45 ----A---- C:\WINDOWS\system32\netcfg-1099112609.txt
2013-06-18 14:18:15 ----A---- C:\WINDOWS\system32\netcfg-1092122156.txt
2013-06-18 14:18:10 ----A---- C:\WINDOWS\system32\netcfg-1092117156.txt
2013-06-18 12:14:31 ----A---- C:\WINDOWS\system32\netcfg-1084699078.txt
2013-06-18 09:44:31 ----A---- C:\WINDOWS\system32\netcfg-1075698593.txt
2013-06-18 09:41:19 ----A---- C:\WINDOWS\system32\netcfg-1075506484.txt
2013-06-18 09:40:59 ----A---- C:\WINDOWS\system32\netcfg-1075486218.txt
2013-06-18 09:37:52 ----A---- C:\WINDOWS\system32\netcfg-1075299390.txt
2013-06-18 09:37:50 ----A---- C:\WINDOWS\system32\netcfg-1075297734.txt
2013-06-18 09:34:57 ----A---- C:\WINDOWS\system32\netcfg-1075124593.txt
2013-06-18 09:34:55 ----A---- C:\WINDOWS\system32\netcfg-1075122968.txt
2013-06-18 09:30:10 ----A---- C:\WINDOWS\system32\netcfg-1074837937.txt
2013-06-18 09:30:09 ----A---- C:\WINDOWS\system32\netcfg-1074836187.txt
2013-06-18 09:28:53 ----A---- C:\WINDOWS\system32\netcfg-1074760546.txt
2013-06-18 09:28:49 ----A---- C:\WINDOWS\system32\netcfg-1074756203.txt
2013-06-18 09:26:38 ----A---- C:\WINDOWS\system32\netcfg-1074625140.txt
2013-06-18 09:26:35 ----A---- C:\WINDOWS\system32\netcfg-1074622796.txt
2013-06-18 09:24:05 ----A---- C:\WINDOWS\system32\netcfg-1074473015.txt
2013-06-18 08:11:11 ----A---- C:\WINDOWS\system32\netcfg-1070098703.txt
2013-06-18 08:07:39 ----A---- C:\WINDOWS\system32\netcfg-1069886515.txt
2013-06-18 08:07:37 ----A---- C:\WINDOWS\system32\netcfg-1069884875.txt
2013-06-18 08:05:02 ----A---- C:\WINDOWS\system32\netcfg-1069729921.txt
2013-06-18 08:05:02 ----A---- C:\WINDOWS\system32\netcfg-1069729546.txt
2013-06-18 08:03:58 ----A---- C:\WINDOWS\system32\netcfg-1069665234.txt
2013-06-18 00:04:25 ----A---- C:\WINDOWS\system32\netcfg-1040892562.txt
2013-06-17 17:30:01 ----A---- C:\WINDOWS\system32\netcfg-1017228531.txt
2013-06-17 12:30:37 ----A---- C:\WINDOWS\system32\netcfg-999264343.txt
2013-06-17 10:59:27 ----A---- C:\WINDOWS\system32\netcfg-993794343.txt
2013-06-17 10:11:35 ----A---- C:\WINDOWS\system32\netcfg-990922218.txt
2013-06-17 10:10:36 ----A---- C:\WINDOWS\system32\netcfg-990864000.txt
2013-06-17 00:53:25 ----A---- C:\WINDOWS\system32\netcfg-957432625.txt
2013-06-17 00:06:38 ----A---- C:\WINDOWS\system32\netcfg-954625984.txt
2013-06-16 22:19:50 ----A---- C:\WINDOWS\system32\netcfg-948217406.txt
2013-06-16 20:50:50 ----A---- C:\WINDOWS\system32\netcfg-942877234.txt
2013-06-16 20:50:47 ----A---- C:\WINDOWS\system32\netcfg-942874218.txt
2013-06-16 20:50:12 ----A---- C:\WINDOWS\system32\netcfg-942840062.txt
2013-06-16 20:50:11 ----A---- C:\WINDOWS\system32\netcfg-942838437.txt
2013-06-16 20:49:25 ----A---- C:\WINDOWS\system32\netcfg-942792500.txt
2013-06-16 20:49:25 ----A---- C:\WINDOWS\system32\netcfg-942792171.txt
2013-06-16 20:48:21 ----A---- C:\WINDOWS\system32\netcfg-942728687.txt
2013-06-16 10:21:13 ----A---- C:\WINDOWS\system32\netcfg-905100921.txt
2013-06-16 10:18:58 ----A---- C:\WINDOWS\system32\netcfg-904965500.txt
2013-06-16 10:18:47 ----A---- C:\WINDOWS\system32\netcfg-904954859.txt
2013-06-16 09:33:39 ----A---- C:\WINDOWS\system32\netcfg-902247000.txt
2013-06-16 09:33:33 ----A---- C:\WINDOWS\system32\netcfg-902240546.txt
2013-06-15 23:27:46 ----A---- C:\WINDOWS\system32\netcfg-865893421.txt
2013-06-15 23:27:43 ----A---- C:\WINDOWS\system32\netcfg-865890906.txt
2013-06-15 23:27:29 ----A---- C:\WINDOWS\system32\netcfg-865876328.txt
2013-06-15 23:27:27 ----A---- C:\WINDOWS\system32\netcfg-865874750.txt
2013-06-15 20:46:48 ----A---- C:\WINDOWS\system32\netcfg-856235359.txt
2013-06-15 20:46:43 ----A---- C:\WINDOWS\system32\netcfg-856230375.txt
2013-06-15 20:45:27 ----A---- C:\WINDOWS\system32\netcfg-856154140.txt
2013-06-15 10:21:28 ----A---- C:\WINDOWS\system32\netcfg-818715437.txt
2013-06-15 09:37:01 ----A---- C:\WINDOWS\system32\netcfg-816048234.txt
2013-06-15 09:36:59 ----A---- C:\WINDOWS\system32\netcfg-816046531.txt
2013-06-15 09:35:33 ----A---- C:\WINDOWS\system32\netcfg-815960640.txt
2013-06-15 02:03:20 ----A---- C:\WINDOWS\system32\netcfg-788827390.txt
2013-06-15 01:57:58 ----A---- C:\WINDOWS\system32\netcfg-788505296.txt
2013-06-14 21:16:24 ----A---- C:\WINDOWS\system32\netcfg-771612000.txt
2013-06-14 21:07:15 ----A---- C:\WINDOWS\system32\netcfg-771063015.txt
2013-06-14 08:37:25 ----A---- C:\WINDOWS\system32\netcfg-726072921.txt
2013-06-14 07:43:25 ----A---- C:\WINDOWS\system32\netcfg-722832375.txt
2013-06-14 00:21:32 ----A---- C:\WINDOWS\system32\netcfg-696319515.txt
2013-06-13 22:24:00 ----A---- C:\WINDOWS\system32\netcfg-689267625.txt
2013-06-13 22:23:07 ----A---- C:\WINDOWS\system32\netcfg-689214140.txt
2013-06-13 21:29:36 ----A---- C:\WINDOWS\system32\netcfg-686003656.txt
2013-06-13 21:28:38 ----A---- C:\WINDOWS\system32\netcfg-685945437.txt
2013-06-13 21:14:25 ----A---- C:\WINDOWS\system32\netcfg-685092343.txt
2013-06-13 21:13:24 ----A---- C:\WINDOWS\system32\netcfg-685031437.txt
2013-06-13 21:10:13 ----A---- C:\WINDOWS\system32\netcfg-684841015.txt
2013-06-13 08:42:58 ----A---- C:\WINDOWS\system32\netcfg-640005265.txt
2013-06-13 08:01:57 ----A---- C:\WINDOWS\system32\netcfg-637544500.txt
2013-06-13 08:01:55 ----A---- C:\WINDOWS\system32\netcfg-637542859.txt
2013-06-13 07:56:04 ----A---- C:\WINDOWS\system32\netcfg-637191515.txt
2013-06-13 07:56:02 ----A---- C:\WINDOWS\system32\netcfg-637190015.txt
2013-06-13 07:53:53 ----A---- C:\WINDOWS\system32\netcfg-637060578.txt
2013-06-13 07:53:49 ----A---- C:\WINDOWS\system32\netcfg-637056609.txt
2013-06-12 20:53:06 ----A---- C:\WINDOWS\system32\netcfg-597414000.txt
2013-06-12 20:53:02 ----A---- C:\WINDOWS\system32\netcfg-597409781.txt
2013-06-12 20:50:32 ----A---- C:\WINDOWS\system32\netcfg-597259593.txt
2013-06-12 20:50:27 ----A---- C:\WINDOWS\system32\netcfg-597254640.txt
2013-06-12 20:36:21 ----A---- C:\WINDOWS\system32\netcfg-596409046.txt
2013-06-12 20:36:11 ----A---- C:\WINDOWS\system32\netcfg-596399093.txt
2013-06-12 19:13:56 ----A---- C:\WINDOWS\system32\netcfg-591463453.txt
2013-06-12 19:13:45 ----A---- C:\WINDOWS\system32\netcfg-591452484.txt
2013-06-12 19:12:24 ----A---- C:\WINDOWS\system32\netcfg-591371906.txt
2013-06-12 19:12:20 ----A---- C:\WINDOWS\system32\netcfg-591367421.txt
2013-06-12 19:11:47 ----A---- C:\WINDOWS\system32\netcfg-591334890.txt
2013-06-12 12:03:05 ----A---- C:\WINDOWS\system32\netcfg-565612578.txt
2013-06-12 10:54:59 ----A---- C:\WINDOWS\system32\netcfg-561526171.txt
2013-06-12 10:54:55 ----A---- C:\WINDOWS\system32\netcfg-561522515.txt
2013-06-12 10:49:40 ----A---- C:\WINDOWS\system32\netcfg-561207234.txt
2013-06-12 10:49:38 ----A---- C:\WINDOWS\system32\netcfg-561205484.txt
2013-06-12 10:47:57 ----A---- C:\WINDOWS\system32\netcfg-561104312.txt
2013-06-12 01:18:16 ----A---- C:\WINDOWS\system32\netcfg-526923828.txt
2013-06-12 00:21:21 ----A---- C:\WINDOWS\system32\netcfg-523508750.txt
2013-06-12 00:21:18 ----A---- C:\WINDOWS\system32\netcfg-523506031.txt
2013-06-11 23:44:40 ----A---- C:\WINDOWS\system32\netcfg-521307906.txt
2013-06-11 23:44:33 ----A---- C:\WINDOWS\system32\netcfg-521300234.txt
2013-06-11 23:03:49 ----A---- C:\WINDOWS\system32\netcfg-518857078.txt
2013-06-11 23:03:44 ----A---- C:\WINDOWS\system32\netcfg-518851281.txt
2013-06-11 22:35:03 ----A---- C:\WINDOWS\system32\netcfg-517131015.txt
2013-06-11 22:34:58 ----A---- C:\WINDOWS\system32\netcfg-517126062.txt
2013-06-11 21:59:41 ----A---- C:\WINDOWS\system32\netcfg-515008218.txt
2013-06-11 21:59:32 ----A---- C:\WINDOWS\system32\netcfg-514999625.txt
2013-06-11 21:19:39 ----A---- C:\WINDOWS\system32\netcfg-512606859.txt
2013-06-11 21:19:36 ----A---- C:\WINDOWS\system32\netcfg-512603156.txt
2013-06-11 20:41:43 ----A---- C:\WINDOWS\system32\netcfg-510330546.txt
2013-06-11 19:28:00 ----A---- C:\WINDOWS\system32\netcfg-505907265.txt
2013-06-11 19:14:50 ----A---- C:\WINDOWS\system32\netcfg-505117187.txt
2013-06-11 19:14:46 ----A---- C:\WINDOWS\system32\netcfg-505114125.txt
2013-06-11 19:13:40 ----A---- C:\WINDOWS\system32\netcfg-505047843.txt
2013-06-11 19:13:37 ----A---- C:\WINDOWS\system32\netcfg-505044890.txt
2013-06-11 19:12:23 ----A---- C:\WINDOWS\system32\netcfg-504970984.txt
2013-06-11 19:06:37 ----A---- C:\WINDOWS\system32\netcfg-504624671.txt
2013-06-11 18:53:34 ----A---- C:\WINDOWS\system32\netcfg-503842031.txt
2013-06-11 18:53:33 ----A---- C:\WINDOWS\system32\netcfg-503840484.txt
2013-06-11 18:51:40 ----A---- C:\WINDOWS\system32\netcfg-503727328.txt
2013-06-11 18:51:38 ----A---- C:\WINDOWS\system32\netcfg-503725609.txt
2013-06-11 16:01:22 ----A---- C:\WINDOWS\system32\netcfg-493509640.txt
2013-06-11 16:01:20 ----A---- C:\WINDOWS\system32\netcfg-493507812.txt
2013-06-11 13:48:13 ----A---- C:\WINDOWS\system32\netcfg-485520406.txt
2013-06-11 13:47:29 ----A---- C:\WINDOWS\system32\netcfg-485476609.txt
2013-06-11 13:44:58 ----A---- C:\WINDOWS\system32\netcfg-485326062.txt
2013-06-11 08:09:12 ----A---- C:\WINDOWS\system32\netcfg-465179203.txt
2013-06-11 07:25:50 ----A---- C:\WINDOWS\system32\netcfg-462577562.txt
2013-06-11 07:25:49 ----A---- C:\WINDOWS\system32\netcfg-462576140.txt
2013-06-11 07:21:16 ----A---- C:\WINDOWS\system32\netcfg-462304031.txt
2013-06-11 00:43:57 ----A---- C:\WINDOWS\system32\netcfg-438464484.txt
2013-06-10 18:51:34 ----A---- C:\WINDOWS\system32\netcfg-417321328.txt
2013-06-10 18:50:50 ----A---- C:\WINDOWS\system32\netcfg-417277562.txt
2013-06-10 17:21:28 ----A---- C:\WINDOWS\system32\netcfg-411915937.txt
2013-06-10 13:16:34 ----A---- C:\WINDOWS\system32\netcfg-397222046.txt
2013-06-10 11:33:38 ----A---- C:\WINDOWS\system32\netcfg-391045437.txt
2013-06-10 11:33:09 ----A---- C:\WINDOWS\system32\netcfg-391017046.txt
2013-06-10 11:33:08 ----A---- C:\WINDOWS\system32\netcfg-391015453.txt
2013-06-10 10:55:43 ----A---- C:\WINDOWS\system32\netcfg-388770640.txt
2013-06-10 02:15:54 ----A---- C:\WINDOWS\system32\netcfg-357581250.txt
2013-06-09 22:49:28 ----A---- C:\WINDOWS\system32\netcfg-345195343.txt
2013-06-09 10:14:13 ----A---- C:\WINDOWS\system32\netcfg-299880671.txt
2013-06-09 09:36:56 ----A---- C:\WINDOWS\system32\netcfg-297644015.txt
2013-06-09 09:36:54 ----A---- C:\WINDOWS\system32\netcfg-297641359.txt
2013-06-09 09:35:02 ----A---- C:\WINDOWS\system32\netcfg-297529781.txt
2013-06-09 00:46:32 ----A---- C:\WINDOWS\system32\netcfg-265819937.txt
2013-06-09 00:41:33 ----A---- C:\WINDOWS\system32\netcfg-265520484.txt
2013-06-09 00:40:32 ----A---- C:\WINDOWS\system32\netcfg-265459890.txt
2013-06-09 00:20:04 ----A---- C:\WINDOWS\system32\netcfg-264231968.txt
2013-06-09 00:19:25 ----A---- C:\WINDOWS\system32\netcfg-264192984.txt
2013-06-09 00:10:42 ----A---- C:\WINDOWS\system32\netcfg-263670109.txt
2013-06-09 00:10:16 ----A---- C:\WINDOWS\system32\netcfg-263643328.txt
2013-06-08 22:49:26 ----A---- C:\WINDOWS\system32\netcfg-258793718.txt
2013-06-08 22:49:12 ----A---- C:\WINDOWS\system32\netcfg-258779890.txt
2013-06-08 22:08:48 ----A---- C:\WINDOWS\system32\netcfg-256356078.txt
2013-06-08 10:17:57 ----A---- C:\WINDOWS\system32\netcfg-213704437.txt
2013-06-08 10:07:03 ----A---- C:\WINDOWS\system32\netcfg-213050312.txt
2013-06-08 10:06:59 ----A---- C:\WINDOWS\system32\netcfg-213046187.txt
2013-06-08 09:34:00 ----A---- C:\WINDOWS\system32\netcfg-211067296.txt
2013-06-08 09:33:58 ----A---- C:\WINDOWS\system32\netcfg-211065781.txt
2013-06-08 09:32:24 ----A---- C:\WINDOWS\system32\netcfg-210971125.txt
2013-06-08 00:58:04 ----A---- C:\WINDOWS\system32\netcfg-180111265.txt
2013-06-08 00:39:51 ----A---- C:\WINDOWS\system32\netcfg-179013734.txt
2013-06-07 20:59:20 ----A---- C:\WINDOWS\system32\netcfg-165782890.txt
2013-06-07 20:44:20 ----A---- C:\WINDOWS\system32\netcfg-164883328.txt
2013-06-07 10:18:00 ----A---- C:\WINDOWS\system32\netcfg-127303000.txt
2013-06-07 10:08:57 ----A---- C:\WINDOWS\system32\netcfg-126759734.txt
2013-06-07 10:01:59 ----A---- C:\WINDOWS\system32\netcfg-126342156.txt
2013-06-07 09:43:23 ----A---- C:\WINDOWS\system32\netcfg-125226484.txt
2013-06-07 09:43:13 ----A---- C:\WINDOWS\system32\netcfg-125216421.txt
2013-06-07 09:32:27 ----A---- C:\WINDOWS\system32\netcfg-124569859.txt
2013-06-07 00:06:25 ----A---- C:\WINDOWS\system32\netcfg-90608343.txt
2013-06-06 20:52:36 ----A---- C:\WINDOWS\system32\netcfg-78979640.txt
2013-06-06 20:52:33 ----A---- C:\WINDOWS\system32\netcfg-78976625.txt
2013-06-06 20:51:27 ----A---- C:\WINDOWS\system32\netcfg-78910046.txt
2013-06-06 06:57:21 ----A---- C:\WINDOWS\system32\netcfg-28863750.txt
2013-06-06 06:52:34 ----A---- C:\WINDOWS\system32\netcfg-28577234.txt
2013-06-05 23:09:49 ----A---- C:\WINDOWS\system32\netcfg-811890.txt
2013-06-05 21:57:05 ----A---- C:\WINDOWS\system32\netcfg-83028953.txt
2013-06-05 19:23:37 ----A---- C:\WINDOWS\system32\netcfg-73820796.txt
2013-06-05 16:54:42 ----A---- C:\WINDOWS\system32\netcfg-64886296.txt
2013-06-05 15:56:03 ----A---- C:\WINDOWS\system32\netcfg-61366890.txt
2013-06-05 12:15:01 ----A---- C:\WINDOWS\system32\netcfg-48105015.txt
2013-06-05 12:14:58 ----A---- C:\WINDOWS\system32\netcfg-48102640.txt
2013-06-04 22:54:12 ----A---- C:\WINDOWS\system32\netcfg-56578.txt
2013-06-04 22:54:11 ----A---- C:\WINDOWS\system32\netcfg-55593.txt
2013-06-04 22:52:36 ----A---- C:\WINDOWS\system32\netcfg-625854015.txt
2013-06-04 22:49:19 ----A---- C:\WINDOWS\system32\netcfg-625657468.txt
2013-06-04 19:59:20 ----A---- C:\WINDOWS\system32\netcfg-615458031.txt
2013-06-04 19:34:07 ----A---- C:\WINDOWS\system32\netcfg-613944703.txt
2013-06-04 19:34:06 ----A---- C:\WINDOWS\system32\netcfg-613944656.txt
2013-06-04 19:34:06 ----A---- C:\WINDOWS\system32\netcfg-613944500.txt
2013-06-04 19:33:56 ----A---- C:\WINDOWS\system32\netcfg-613933968.txt
2013-06-04 19:33:55 ----A---- C:\WINDOWS\system32\netcfg-613933203.txt
2013-06-04 09:04:44 ----A---- C:\WINDOWS\system32\netcfg-576182578.txt
2013-06-04 01:11:45 ----A---- C:\WINDOWS\system32\netcfg-547803609.txt
2013-06-04 01:11:45 ----A---- C:\WINDOWS\system32\netcfg-547803546.txt
2013-06-04 00:28:03 ----A---- C:\WINDOWS\system32\netcfg-545181328.txt
2013-06-04 00:24:45 ----A---- C:\WINDOWS\system32\netcfg-544983546.txt
2013-06-04 00:24:42 ----A---- C:\WINDOWS\system32\netcfg-544980250.txt
2013-06-04 00:23:42 ----A---- C:\WINDOWS\system32\netcfg-544919796.txt
2013-06-04 00:23:41 ----A---- C:\WINDOWS\system32\netcfg-544919671.txt
2013-06-04 00:23:41 ----A---- C:\WINDOWS\system32\netcfg-544919546.txt
2013-06-04 00:09:05 ----D---- C:\Program Files (x86)\MSECache
2013-06-04 00:08:50 ----A---- C:\WINDOWS\SYSWOW64\MRT.exe
2013-06-03 23:55:03 ----A---- C:\WINDOWS\system32\netcfg-543201171.txt
2013-06-03 23:54:22 ----A---- C:\WINDOWS\system32\netcfg-543160640.txt
2013-06-03 23:54:19 ----A---- C:\WINDOWS\system32\netcfg-543157453.txt
2013-06-03 23:53:52 ----A---- C:\WINDOWS\system32\netcfg-543129781.txt
2013-06-03 22:22:25 ----A---- C:\WINDOWS\system32\netcfg-537643421.txt
2013-06-03 22:22:22 ----A---- C:\WINDOWS\system32\netcfg-537640625.txt
2013-06-03 20:38:49 ----A---- C:\WINDOWS\system32\netcfg-531427109.txt
2013-06-03 20:34:17 ----A---- C:\WINDOWS\system32\netcfg-531154781.txt
2013-06-03 19:37:08 ----A---- C:\WINDOWS\system32\netcfg-527726390.txt
2013-06-03 19:37:05 ----A---- C:\WINDOWS\system32\netcfg-527723281.txt
2013-06-03 19:36:54 ----A---- C:\WINDOWS\system32\netcfg-527712656.txt
2013-06-03 19:36:53 ----A---- C:\WINDOWS\system32\netcfg-527711468.txt
2013-06-03 17:02:20 ----A---- C:\WINDOWS\system32\netcfg-518438343.txt
2013-06-03 17:02:16 ----A---- C:\WINDOWS\system32\netcfg-518434640.txt
2013-06-03 16:55:10 ----A---- C:\WINDOWS\system32\netcfg-518007843.txt
2013-06-03 16:55:07 ----A---- C:\WINDOWS\system32\netcfg-518004718.txt
2013-06-03 16:55:00 ----A---- C:\WINDOWS\system32\netcfg-517998281.txt
2013-06-03 16:51:07 ----A---- C:\WINDOWS\system32\netcfg-517765187.txt
2013-06-03 16:47:18 ----A---- C:\WINDOWS\system32\netcfg-517536140.txt
2013-06-03 14:56:43 ----A---- C:\WINDOWS\system32\netcfg-510901562.txt
2013-06-03 14:56:43 ----A---- C:\WINDOWS\system32\netcfg-510901406.txt
2013-06-03 14:56:43 ----A---- C:\WINDOWS\system32\netcfg-510901312.txt
2013-06-03 12:21:43 ----A---- C:\WINDOWS\system32\netcfg-501601203.txt
2013-06-03 12:20:46 ----A---- C:\WINDOWS\system32\netcfg-501544046.txt
2013-06-03 12:20:43 ----A---- C:\WINDOWS\system32\netcfg-501540937.txt
2013-06-03 01:06:46 ----A---- C:\WINDOWS\system32\netcfg-461103734.txt
2013-06-03 01:06:45 ----A---- C:\WINDOWS\system32\netcfg-461103687.txt
2013-06-03 00:29:55 ----A---- C:\WINDOWS\system32\netcfg-458893171.txt
2013-06-03 00:28:31 ----A---- C:\WINDOWS\system32\netcfg-458809343.txt
2013-06-03 00:28:29 ----A---- C:\WINDOWS\system32\netcfg-458807687.txt
2013-06-03 00:27:37 ----A---- C:\WINDOWS\system32\netcfg-458754843.txt
2013-06-03 00:27:23 ----A---- C:\WINDOWS\system32\netcfg-458741437.txt
2013-06-03 00:26:20 ----A---- C:\WINDOWS\system32\netcfg-458677906.txt
2013-06-02 22:19:40 ----A---- C:\WINDOWS\system32\netcfg-451077906.txt
2013-06-02 22:11:30 ----A---- C:\WINDOWS\system32\netcfg-450588156.txt
2013-06-02 10:12:35 ----A---- C:\WINDOWS\system32\netcfg-407453546.txt
2013-06-02 10:01:42 ----A---- C:\WINDOWS\system32\netcfg-406799890.txt
2013-06-02 10:00:49 ----A---- C:\WINDOWS\system32\netcfg-406747109.txt
2013-06-02 09:34:49 ----A---- C:\WINDOWS\system32\netcfg-405186750.txt
2013-06-02 09:34:47 ----A---- C:\WINDOWS\system32\netcfg-405185437.txt
2013-06-02 09:34:13 ----A---- C:\WINDOWS\system32\netcfg-405151078.txt
2013-06-02 09:34:13 ----A---- C:\WINDOWS\system32\netcfg-405150984.txt
2013-06-02 09:34:13 ----A---- C:\WINDOWS\system32\netcfg-405150828.txt
2013-05-31 10:22:00 ----A---- C:\WINDOWS\system32\netcfg-235218640.txt
2013-05-31 09:53:26 ----A---- C:\WINDOWS\system32\netcfg-233504406.txt
2013-05-31 09:53:21 ----A---- C:\WINDOWS\system32\netcfg-233499468.txt
2013-05-31 09:47:02 ----A---- C:\WINDOWS\system32\netcfg-233120500.txt
2013-05-31 09:47:00 ----A---- C:\WINDOWS\system32\netcfg-233117875.txt
2013-05-31 09:41:34 ----A---- C:\WINDOWS\system32\netcfg-232792453.txt
2013-05-31 09:41:28 ----A---- C:\WINDOWS\system32\netcfg-232786250.txt
2013-05-31 09:40:10 ----A---- C:\WINDOWS\system32\netcfg-232708312.txt
2013-05-31 01:12:35 ----A---- C:\WINDOWS\system32\netcfg-202253281.txt
2013-05-30 23:01:20 ----A---- C:\WINDOWS\system32\netcfg-194377859.txt
2013-05-30 21:02:57 ----A---- C:\WINDOWS\system32\netcfg-187275015.txt
2013-05-30 21:01:51 ----D---- C:\ProgramData\Sony Ericsson
2013-05-30 21:01:31 ----D---- C:\Program Files (x86)\Sony Ericsson
2013-05-30 20:56:23 ----D---- C:\ProgramData\Sony
2013-05-30 20:56:23 ----D---- C:\Program Files (x86)\Sony
2013-05-30 20:52:08 ----A---- C:\WINDOWS\system32\netcfg-186625765.txt
2013-05-30 20:52:00 ----A---- C:\WINDOWS\system32\netcfg-186618531.txt
2013-05-30 20:40:29 ----A---- C:\WINDOWS\system32\netcfg-185927593.txt
2013-05-30 20:11:25 ----A---- C:\WINDOWS\system32\netcfg-184183687.txt
2013-05-30 20:10:51 ----A---- C:\WINDOWS\system32\netcfg-184148859.txt
2013-05-30 19:33:07 ----A---- C:\WINDOWS\system32\netcfg-181885562.txt
2013-05-30 19:33:04 ----A---- C:\WINDOWS\system32\netcfg-181882609.txt
2013-05-30 19:32:30 ----A---- C:\WINDOWS\system32\netcfg-181848421.txt
2013-05-30 19:32:30 ----A---- C:\WINDOWS\system32\netcfg-181848359.txt
2013-05-30 19:32:29 ----A---- C:\WINDOWS\system32\netcfg-181847640.txt
2013-05-29 07:47:42 ----A---- C:\WINDOWS\system32\netcfg-53159718.txt
2013-05-29 07:27:53 ----A---- C:\WINDOWS\system32\netcfg-51970750.txt
2013-05-29 07:27:51 ----A---- C:\WINDOWS\system32\netcfg-51969046.txt
2013-05-29 07:23:06 ----A---- C:\WINDOWS\system32\netcfg-51684562.txt
2013-05-29 01:22:50 ----A---- C:\WINDOWS\system32\netcfg-30068125.txt
2013-05-29 00:58:39 ----A---- C:\WINDOWS\system32\netcfg-28617593.txt
2013-05-29 00:58:37 ----A---- C:\WINDOWS\system32\netcfg-28615093.txt
2013-05-28 16:05:50 ----A---- C:\WINDOWS\system32\netcfg-93381828.txt
2013-05-28 16:05:49 ----A---- C:\WINDOWS\system32\netcfg-93381390.txt
2013-05-28 15:06:32 ----A---- C:\WINDOWS\system32\netcfg-89824593.txt
2013-05-28 15:06:27 ----A---- C:\WINDOWS\system32\netcfg-89818953.txt
2013-05-28 14:51:52 ----A---- C:\WINDOWS\system32\netcfg-88944312.txt
2013-05-28 14:51:49 ----A---- C:\WINDOWS\system32\netcfg-88941156.txt
2013-05-28 14:51:49 ----A---- C:\WINDOWS\system32\netcfg-88940718.txt
2013-05-28 14:51:16 ----A---- C:\WINDOWS\system32\netcfg-88907781.txt
2013-05-28 11:57:28 ----A---- C:\WINDOWS\system32\netcfg-78479812.txt
2013-05-28 11:00:34 ----A---- C:\WINDOWS\system32\netcfg-75066296.txt
2013-05-28 10:31:19 ----A---- C:\WINDOWS\system32\netcfg-73311656.txt
2013-05-28 10:30:04 ----A---- C:\WINDOWS\system32\netcfg-73236078.txt
2013-05-27 21:24:55 ----A---- C:\WINDOWS\system32\netcfg-26127453.txt
2013-05-27 21:24:47 ----A---- C:\WINDOWS\system32\netcfg-26119171.txt
2013-05-27 21:21:29 ----A---- C:\WINDOWS\system32\netcfg-25921562.txt
2013-05-27 16:31:56 ----A---- C:\WINDOWS\system32\netcfg-8548265.txt
2013-05-27 14:05:18 ----A---- C:\WINDOWS\system32\netcfg-275184453.txt
2013-05-27 14:05:14 ----A---- C:\WINDOWS\system32\netcfg-275179921.txt
2013-05-27 14:03:46 ----A---- C:\WINDOWS\system32\netcfg-275092515.txt
2013-05-27 14:03:45 ----A---- C:\WINDOWS\system32\netcfg-275090953.txt
2013-05-27 13:41:14 ----A---- C:\WINDOWS\system32\netcfg-273739781.txt
2013-05-27 13:41:11 ----A---- C:\WINDOWS\system32\netcfg-273736828.txt
2013-05-27 13:40:45 ----A---- C:\WINDOWS\system32\netcfg-273711265.txt
2013-05-27 13:40:42 ----A---- C:\WINDOWS\system32\netcfg-273707937.txt
2013-05-26 23:40:47 ----A---- C:\WINDOWS\system32\netcfg-223313437.txt
2013-05-26 23:40:47 ----A---- C:\WINDOWS\system32\netcfg-223312890.txt
2013-05-26 22:42:54 ----A---- C:\WINDOWS\system32\netcfg-219839953.txt
2013-05-26 22:42:53 ----A---- C:\WINDOWS\system32\netcfg-219839062.txt
2013-05-26 09:49:06 ----A---- C:\WINDOWS\system32\netcfg-173412125.txt
2013-05-26 09:49:04 ----A---- C:\WINDOWS\system32\netcfg-173410171.txt
2013-05-25 22:11:28 ----A---- C:\WINDOWS\system32\netcfg-131554671.txt
2013-05-25 10:19:53 ----A---- C:\WINDOWS\system32\netcfg-88859656.txt
2013-05-25 09:21:45 ----A---- C:\WINDOWS\system32\netcfg-85371031.txt
2013-05-25 09:21:39 ----A---- C:\WINDOWS\system32\netcfg-85365078.txt
2013-05-25 09:19:38 ----A---- C:\WINDOWS\system32\netcfg-85243859.txt
2013-05-25 00:53:55 ----A---- C:\WINDOWS\system32\netcfg-54901093.txt
2013-05-24 23:57:08 ----A---- C:\WINDOWS\system32\netcfg-51493750.txt
2013-05-24 23:56:47 ----A---- C:\WINDOWS\system32\netcfg-51473046.txt
2013-05-24 23:36:23 ----A---- C:\WINDOWS\system32\netcfg-50249203.txt
2013-05-24 23:36:22 ----A---- C:\WINDOWS\system32\netcfg-50248171.txt
2013-05-24 22:49:04 ----D---- C:\WINDOWS\SYSWOW64\NV
2013-05-24 22:49:04 ----D---- C:\WINDOWS\system32\NV
2013-05-24 22:45:40 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2013-05-24 22:45:40 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\nvcuvenc.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvopencl.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvdispgenco6432018.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvdispco6432018.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvcuda.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\drivers\nvpciflt.sys
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2013-05-24 22:09:43 ----A---- C:\WINDOWS\system32\netcfg-45049593.txt
2013-05-24 10:22:53 ----A---- C:\WINDOWS\system32\netcfg-2639406.txt
2013-05-24 09:54:05 ----A---- C:\WINDOWS\system32\netcfg-911625.txt
2013-05-24 09:54:02 ----A---- C:\WINDOWS\system32\netcfg-908578.txt
2013-05-24 09:52:36 ----A---- C:\WINDOWS\system32\netcfg-822109.txt
2013-05-24 09:51:54 ----A---- C:\WINDOWS\system32\netcfg-780109.txt
2013-05-24 09:35:24 ----A---- C:\WINDOWS\system32\netcfg-689537015.txt
2013-05-24 09:35:22 ----A---- C:\WINDOWS\system32\netcfg-689534359.txt
2013-05-24 09:28:53 ----A---- C:\WINDOWS\system32\netcfg-689146062.txt
2013-05-23 23:52:07 ----A---- C:\WINDOWS\system32\netcfg-654539312.txt
2013-05-23 22:32:36 ----D---- C:\WINDOWS\LastGood
2013-05-23 22:31:13 ----A---- C:\WINDOWS\system32\nvdispgenco6431422.dll
2013-05-23 22:31:13 ----A---- C:\WINDOWS\system32\nvdispco6431422.dll
2013-05-23 22:09:11 ----A---- C:\WINDOWS\system32\netcfg-648363828.txt
2013-05-23 10:20:19 ----A---- C:\WINDOWS\system32\netcfg-605831765.txt
2013-05-23 09:44:57 ----A---- C:\WINDOWS\system32\netcfg-603709406.txt
2013-05-23 09:44:47 ----A---- C:\WINDOWS\system32\netcfg-603699328.txt
2013-05-23 09:30:40 ----A---- C:\WINDOWS\system32\netcfg-602853078.txt
======List of files/folders modified in the last 1 month======
2013-06-22 14:27:44 ----D---- C:\Program Files\trend micro
2013-06-22 14:27:40 ----D---- C:\WINDOWS\Temp
2013-06-22 14:24:51 ----D---- C:\WINDOWS\Prefetch
2013-06-22 14:20:54 ----D---- C:\Users\Maros\AppData\Roaming\uTorrent
2013-06-22 14:20:54 ----D---- C:\Users\Maros\AppData\Roaming\DAEMON Tools Lite
2013-06-22 14:20:51 ----D---- C:\WINDOWS\Logs
2013-06-22 14:20:51 ----D---- C:\WINDOWS\Inf
2013-06-22 14:20:51 ----D---- C:\Windows
2013-06-22 14:00:00 ----D---- C:\WINDOWS\system32\sru
2013-06-22 12:40:35 ----D---- C:\WINDOWS\Microsoft.NET
2013-06-22 11:20:52 ----RD---- C:\WINDOWS\System32
2013-06-22 11:20:52 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-06-22 11:18:50 ----HD---- C:\Program Files\WindowsApps
2013-06-22 11:18:47 ----D---- C:\WINDOWS\AUInstallAgent
2013-06-21 15:49:55 ----D---- C:\ProgramData\PMB Files
2013-06-21 00:27:40 ----D---- C:\Users\Maros\AppData\Roaming\vlc
2013-06-20 14:05:02 ----D---- C:\WINDOWS\system32\config
2013-06-19 19:39:34 ----SHD---- C:\System Volume Information
2013-06-19 18:16:04 ----D---- C:\WINDOWS\system32\Tasks
2013-06-18 18:27:57 ----D---- C:\WINDOWS\SysWOW64
2013-06-18 18:27:55 ----D---- C:\WINDOWS\system32\en-US
2013-06-18 18:25:49 ----D---- C:\WINDOWS\KJ
2013-06-18 09:27:08 ----D---- C:\WINDOWS\system32\NDF
2013-06-12 19:12:36 ----A---- C:\WINDOWS\SYSWOW64\acovcnt.exe
2013-06-12 00:16:23 ----SHD---- C:\WINDOWS\Installer
2013-06-12 00:16:21 ----SD---- C:\Users\Maros\AppData\Roaming\Microsoft
2013-06-05 18:48:35 ----D---- C:\Users\Maros\AppData\Roaming\Skype
2013-06-04 22:55:27 ----A---- C:\WINDOWS\system32\ServiceFilter.ini
2013-06-04 22:55:13 ----A---- C:\WINDOWS\system32\AutoRunFilter.ini
2013-06-04 00:09:05 ----RD---- C:\Program Files (x86)
2013-05-30 21:01:57 ----D---- C:\WINDOWS\system32\DriverStore
2013-05-30 21:01:57 ----D---- C:\WINDOWS\system32\catroot
2013-05-30 21:01:51 ----HD---- C:\ProgramData
2013-05-30 20:57:18 ----D---- C:\WINDOWS\system32\catroot2
2013-05-30 20:56:23 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-05-27 21:28:55 ----D---- C:\WINDOWS\system32\Drivers
2013-05-24 22:51:40 ----D---- C:\ProgramData\NVIDIA Corporation
2013-05-24 22:49:24 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-05-24 22:49:03 ----D---- C:\ProgramData\NVIDIA
2013-05-23 22:32:37 ----D---- C:\Program Files\NVIDIA Corporation
... but your computer or network may be sending automated queries." Stalo sa mi to prvý krát v živote. Medzi tým som už spustil Ccleaner, zatiaľ nepomohlo. RSIT log :
Logfile of random's system information tool 1.09 (written by random/random)
Run by Maros at 2013-06-22 14:27:42
Microsoft Windows 8 Pro
System drive C: has 163 GB (34%) free of 477 GB
Total RAM: 4007 MB (57% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:27:45, on 22. 6. 2013
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16384)
Boot mode: Normal
Running processes:
C:\WINDOWS\SysWOW64\rundll32.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
C:\Windows\SysWOW64\ACEngSvr.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Maros.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IB Updater Helper - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [SonicMasterTray] C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Maros\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [MouseServer] "C:\Program Files (x86)\MouseServer\MouseServer.exe"
O4 - HKCU\..\Run: [Sony PC Companion] "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - HKUS\S-1-5-21-2383265717-2937714768-3459393529-1005\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'UpdatusUser')
O4 - Startup: Dropbox.lnk = Maros\AppData\Roaming\Dropbox\bin\Dropbox.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~3\Office12\GRA32A~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: AtherosSvc - Unknown owner - C:\WINDOWS\system32\AdminService.exe (file missing)
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: IB Updater - Unknown owner - C:\Program Files\IB Updater\ExtensionUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10678 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Windows\system32\FBAgent.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\system32\AdminService.exe
dashost.exe {4dab1f71-603f-4d78-8a01eed976fb9072}
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
"C:\Program Files\IB Updater\ExtensionUpdaterService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\WINDOWS\SysWOW64\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\WINDOWS\System32\WinLogon.exe -SpecialSession
-hiberboot
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session
taskhostex.exe
C:\WINDOWS\SysWOW64\rundll32.exe "C:\Program Files (x86)\Garena Plus\ggspawn.dll",rundll_entry -p 0
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
C:\WINDOWS\Explorer.EXE
ATKOSD.exe
KBFiltr.exe
taskeng.exe {75E86671-76B2-4C2E-8A40-C5257F8A114A}
"C:\Program Files\P4G\BatteryLife.exe"
taskeng.exe {B733F79A-3AEE-4BB6-B6C7-EADAF50397CE}
WDC.exe
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\SysWOW64\ACEngSvr.exe -Embedding
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SF3
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe"
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe"
"C:\WINDOWS\system32\wuauclt.exe"
"C:\Windows\AsScrPro.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE" /n /dde
C:\WINDOWS\splwow64.exe 8192
"C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe" "C:\Users\Maros\Downloads\bakalárka - event marketing v prostredí sociálnych médií - Topercer - FINAL FINAL.pdf"
"C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe" --channel=5464.006DFA78.643359954 --type=renderer "C:\Users\Maros\Downloads\bakalárka - event marketing v prostredí sociálnych médií - Topercer - FINAL FINAL.pdf"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe" -Embedding
taskeng.exe {EC5DBE8A-7294-479D-94A4-C2B95D39F9FB}
C:\WINDOWS\System32\svchost.exe -k swprv
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="9124.0.463085664\260229308" --supports-dual-gpus=false --reduce-gpu-sandbox --gpu-vendor-id=0x8086 --gpu-device-id=0x0116 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=9.17.10.2867 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyGroup9 channel:stable mods:100/InstantExtended/Padding1 channel:stable/OmniboxSearchSuggestTrialStarted2013Q1/12/OneClickSignIn/Standard/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/" --extension-process --renderer-print-preview --enable-threaded-compositing --channel="9124.1.1927239265\376442767" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="9124.5.1015753572\1313507058" --lang=sk --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyGroup9 channel:stable mods:100/InstantExtended/Padding1 channel:stable/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/12/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SpdyCwnd/cwnd16/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --channel="9124.6.337097140\887999370" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyGroup9 channel:stable mods:100/InstantExtended/Padding1 channel:stable/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxSearchSuggestTrialStarted2013Q1/12/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SpdyCwnd/cwnd16/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_71/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_05/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --channel="9124.8.1604297842\1434695255" /prefetch:673131151
C:\WINDOWS\System32\ThumbnailExtractionHost.exe -Embedding
"C:\Users\Maros\Downloads\RSITx64 (1).exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-2383265717-2937714768-3459393529-1000Core.job
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-2383265717-2937714768-3459393529-1000UA.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
=========Mozilla firefox=========
ProfilePath - C:\Users\Maros\AppData\Roaming\Mozilla\Firefox\Profiles\bo0k498e.default
"{336D0C35-8A85-403a-B9D2-65C292C39087}"=C:\Program Files\IB Updater\Firefox
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.221 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_221.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@checkpoint.com/FFApi]
"Description"=ZoneAlarm LTD Toolbar Api
"Path"=C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_37]
"Description"=
"Path"=C:\Windows\SysWOW64\npdeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.221 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_221.dll
C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files (x86)\Mozilla Firefox\searchplugins\
atlas-sk.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]
IB Updater - C:\Program Files\IB Updater\Extension64.dll [2012-10-09 218456]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]
IB Updater - C:\Program Files\IB Updater\Extension32.dll [2012-10-09 172376]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-09-24 329712]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-09-24 59376]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2011-04-12 2589992]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2011-05-17 2226280]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-01-13 2918656]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2012-10-10 171040]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2012-10-10 399392]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2012-10-10 441888]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-05-16 1012000]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]
"Facebook Update"=C:\Users\Maros\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-11-21 138096]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-02-07 17706088]
"MouseServer"=C:\Program Files (x86)\MouseServer\MouseServer.exe [2013-02-07 240128]
"Sony PC Companion"=C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [2013-03-18 448736]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\Windows\AsScrPro.exe [2011-10-27 3058304]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-05-17 11855976]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [2010-10-07 170624]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-17 5732992]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"SonicMasterTray"=C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [2010-07-10 984400]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-09-17 254896]
"Wireless Console 3"=C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2010-09-24 1601536]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2012-12-14 2255360]
C:\Users\Maros\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Maros\AppData\Roaming\Dropbox\bin\Dropbox.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2012-10-10 441856]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmartcardSimulator]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VirtualSmartcardReader]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wcmsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"EnableUIADesktopToggle"=0
"EnableCursorSuppression"=1
"ConsentPromptBehaviorUser"=3
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"disablecad"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktopChanges"=1
"NoActiveDesktop"=1
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.XFR1"=xfcodec64.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-06-22 14:27:42 ----D---- C:\rsit
2013-06-22 11:16:45 ----A---- C:\WINDOWS\system32\netcfg-318052593.txt
2013-06-22 00:33:34 ----A---- C:\WINDOWS\system32\netcfg-279461015.txt
2013-06-21 23:54:58 ----A---- C:\WINDOWS\system32\netcfg-277145000.txt
2013-06-21 18:54:57 ----A---- C:\WINDOWS\system32\netcfg-259144531.txt
2013-06-21 10:22:11 ----A---- C:\WINDOWS\system32\netcfg-228377921.txt
2013-06-20 23:28:48 ----A---- C:\WINDOWS\system32\netcfg-189174968.txt
2013-06-20 22:46:19 ----A---- C:\WINDOWS\system32\netcfg-186626531.txt
2013-06-20 22:46:18 ----A---- C:\WINDOWS\system32\netcfg-186625312.txt
2013-06-20 11:04:24 ----A---- C:\WINDOWS\system32\netcfg-144510968.txt
2013-06-20 11:04:20 ----A---- C:\WINDOWS\system32\netcfg-144506937.txt
2013-06-19 18:14:42 ----A---- C:\WINDOWS\system32\netcfg-83926421.txt
2013-06-19 18:14:30 ----A---- C:\WINDOWS\system32\netcfg-83914609.txt
2013-06-19 07:49:04 ----A---- C:\WINDOWS\system32\netcfg-46387703.txt
2013-06-19 07:49:03 ----A---- C:\WINDOWS\system32\netcfg-46387609.txt
2013-06-18 23:04:30 ----A---- C:\WINDOWS\system32\netcfg-14913953.txt
2013-06-18 18:55:38 ----A---- C:\WINDOWS\system32\netcfg-1108765265.txt
2013-06-18 18:35:19 ----A---- C:\WINDOWS\system32\netcfg-1107546453.txt
2013-06-18 18:27:59 ----RSHD---- C:\Windows Activation Technologies
2013-06-18 18:26:00 ----A---- C:\WINDOWS\KJ.exe
2013-06-18 18:24:14 ----A---- C:\WINDOWS\system32\netcfg-1106881437.txt
2013-06-18 16:14:47 ----A---- C:\WINDOWS\system32\netcfg-1099114750.txt
2013-06-18 16:14:45 ----A---- C:\WINDOWS\system32\netcfg-1099112609.txt
2013-06-18 14:18:15 ----A---- C:\WINDOWS\system32\netcfg-1092122156.txt
2013-06-18 14:18:10 ----A---- C:\WINDOWS\system32\netcfg-1092117156.txt
2013-06-18 12:14:31 ----A---- C:\WINDOWS\system32\netcfg-1084699078.txt
2013-06-18 09:44:31 ----A---- C:\WINDOWS\system32\netcfg-1075698593.txt
2013-06-18 09:41:19 ----A---- C:\WINDOWS\system32\netcfg-1075506484.txt
2013-06-18 09:40:59 ----A---- C:\WINDOWS\system32\netcfg-1075486218.txt
2013-06-18 09:37:52 ----A---- C:\WINDOWS\system32\netcfg-1075299390.txt
2013-06-18 09:37:50 ----A---- C:\WINDOWS\system32\netcfg-1075297734.txt
2013-06-18 09:34:57 ----A---- C:\WINDOWS\system32\netcfg-1075124593.txt
2013-06-18 09:34:55 ----A---- C:\WINDOWS\system32\netcfg-1075122968.txt
2013-06-18 09:30:10 ----A---- C:\WINDOWS\system32\netcfg-1074837937.txt
2013-06-18 09:30:09 ----A---- C:\WINDOWS\system32\netcfg-1074836187.txt
2013-06-18 09:28:53 ----A---- C:\WINDOWS\system32\netcfg-1074760546.txt
2013-06-18 09:28:49 ----A---- C:\WINDOWS\system32\netcfg-1074756203.txt
2013-06-18 09:26:38 ----A---- C:\WINDOWS\system32\netcfg-1074625140.txt
2013-06-18 09:26:35 ----A---- C:\WINDOWS\system32\netcfg-1074622796.txt
2013-06-18 09:24:05 ----A---- C:\WINDOWS\system32\netcfg-1074473015.txt
2013-06-18 08:11:11 ----A---- C:\WINDOWS\system32\netcfg-1070098703.txt
2013-06-18 08:07:39 ----A---- C:\WINDOWS\system32\netcfg-1069886515.txt
2013-06-18 08:07:37 ----A---- C:\WINDOWS\system32\netcfg-1069884875.txt
2013-06-18 08:05:02 ----A---- C:\WINDOWS\system32\netcfg-1069729921.txt
2013-06-18 08:05:02 ----A---- C:\WINDOWS\system32\netcfg-1069729546.txt
2013-06-18 08:03:58 ----A---- C:\WINDOWS\system32\netcfg-1069665234.txt
2013-06-18 00:04:25 ----A---- C:\WINDOWS\system32\netcfg-1040892562.txt
2013-06-17 17:30:01 ----A---- C:\WINDOWS\system32\netcfg-1017228531.txt
2013-06-17 12:30:37 ----A---- C:\WINDOWS\system32\netcfg-999264343.txt
2013-06-17 10:59:27 ----A---- C:\WINDOWS\system32\netcfg-993794343.txt
2013-06-17 10:11:35 ----A---- C:\WINDOWS\system32\netcfg-990922218.txt
2013-06-17 10:10:36 ----A---- C:\WINDOWS\system32\netcfg-990864000.txt
2013-06-17 00:53:25 ----A---- C:\WINDOWS\system32\netcfg-957432625.txt
2013-06-17 00:06:38 ----A---- C:\WINDOWS\system32\netcfg-954625984.txt
2013-06-16 22:19:50 ----A---- C:\WINDOWS\system32\netcfg-948217406.txt
2013-06-16 20:50:50 ----A---- C:\WINDOWS\system32\netcfg-942877234.txt
2013-06-16 20:50:47 ----A---- C:\WINDOWS\system32\netcfg-942874218.txt
2013-06-16 20:50:12 ----A---- C:\WINDOWS\system32\netcfg-942840062.txt
2013-06-16 20:50:11 ----A---- C:\WINDOWS\system32\netcfg-942838437.txt
2013-06-16 20:49:25 ----A---- C:\WINDOWS\system32\netcfg-942792500.txt
2013-06-16 20:49:25 ----A---- C:\WINDOWS\system32\netcfg-942792171.txt
2013-06-16 20:48:21 ----A---- C:\WINDOWS\system32\netcfg-942728687.txt
2013-06-16 10:21:13 ----A---- C:\WINDOWS\system32\netcfg-905100921.txt
2013-06-16 10:18:58 ----A---- C:\WINDOWS\system32\netcfg-904965500.txt
2013-06-16 10:18:47 ----A---- C:\WINDOWS\system32\netcfg-904954859.txt
2013-06-16 09:33:39 ----A---- C:\WINDOWS\system32\netcfg-902247000.txt
2013-06-16 09:33:33 ----A---- C:\WINDOWS\system32\netcfg-902240546.txt
2013-06-15 23:27:46 ----A---- C:\WINDOWS\system32\netcfg-865893421.txt
2013-06-15 23:27:43 ----A---- C:\WINDOWS\system32\netcfg-865890906.txt
2013-06-15 23:27:29 ----A---- C:\WINDOWS\system32\netcfg-865876328.txt
2013-06-15 23:27:27 ----A---- C:\WINDOWS\system32\netcfg-865874750.txt
2013-06-15 20:46:48 ----A---- C:\WINDOWS\system32\netcfg-856235359.txt
2013-06-15 20:46:43 ----A---- C:\WINDOWS\system32\netcfg-856230375.txt
2013-06-15 20:45:27 ----A---- C:\WINDOWS\system32\netcfg-856154140.txt
2013-06-15 10:21:28 ----A---- C:\WINDOWS\system32\netcfg-818715437.txt
2013-06-15 09:37:01 ----A---- C:\WINDOWS\system32\netcfg-816048234.txt
2013-06-15 09:36:59 ----A---- C:\WINDOWS\system32\netcfg-816046531.txt
2013-06-15 09:35:33 ----A---- C:\WINDOWS\system32\netcfg-815960640.txt
2013-06-15 02:03:20 ----A---- C:\WINDOWS\system32\netcfg-788827390.txt
2013-06-15 01:57:58 ----A---- C:\WINDOWS\system32\netcfg-788505296.txt
2013-06-14 21:16:24 ----A---- C:\WINDOWS\system32\netcfg-771612000.txt
2013-06-14 21:07:15 ----A---- C:\WINDOWS\system32\netcfg-771063015.txt
2013-06-14 08:37:25 ----A---- C:\WINDOWS\system32\netcfg-726072921.txt
2013-06-14 07:43:25 ----A---- C:\WINDOWS\system32\netcfg-722832375.txt
2013-06-14 00:21:32 ----A---- C:\WINDOWS\system32\netcfg-696319515.txt
2013-06-13 22:24:00 ----A---- C:\WINDOWS\system32\netcfg-689267625.txt
2013-06-13 22:23:07 ----A---- C:\WINDOWS\system32\netcfg-689214140.txt
2013-06-13 21:29:36 ----A---- C:\WINDOWS\system32\netcfg-686003656.txt
2013-06-13 21:28:38 ----A---- C:\WINDOWS\system32\netcfg-685945437.txt
2013-06-13 21:14:25 ----A---- C:\WINDOWS\system32\netcfg-685092343.txt
2013-06-13 21:13:24 ----A---- C:\WINDOWS\system32\netcfg-685031437.txt
2013-06-13 21:10:13 ----A---- C:\WINDOWS\system32\netcfg-684841015.txt
2013-06-13 08:42:58 ----A---- C:\WINDOWS\system32\netcfg-640005265.txt
2013-06-13 08:01:57 ----A---- C:\WINDOWS\system32\netcfg-637544500.txt
2013-06-13 08:01:55 ----A---- C:\WINDOWS\system32\netcfg-637542859.txt
2013-06-13 07:56:04 ----A---- C:\WINDOWS\system32\netcfg-637191515.txt
2013-06-13 07:56:02 ----A---- C:\WINDOWS\system32\netcfg-637190015.txt
2013-06-13 07:53:53 ----A---- C:\WINDOWS\system32\netcfg-637060578.txt
2013-06-13 07:53:49 ----A---- C:\WINDOWS\system32\netcfg-637056609.txt
2013-06-12 20:53:06 ----A---- C:\WINDOWS\system32\netcfg-597414000.txt
2013-06-12 20:53:02 ----A---- C:\WINDOWS\system32\netcfg-597409781.txt
2013-06-12 20:50:32 ----A---- C:\WINDOWS\system32\netcfg-597259593.txt
2013-06-12 20:50:27 ----A---- C:\WINDOWS\system32\netcfg-597254640.txt
2013-06-12 20:36:21 ----A---- C:\WINDOWS\system32\netcfg-596409046.txt
2013-06-12 20:36:11 ----A---- C:\WINDOWS\system32\netcfg-596399093.txt
2013-06-12 19:13:56 ----A---- C:\WINDOWS\system32\netcfg-591463453.txt
2013-06-12 19:13:45 ----A---- C:\WINDOWS\system32\netcfg-591452484.txt
2013-06-12 19:12:24 ----A---- C:\WINDOWS\system32\netcfg-591371906.txt
2013-06-12 19:12:20 ----A---- C:\WINDOWS\system32\netcfg-591367421.txt
2013-06-12 19:11:47 ----A---- C:\WINDOWS\system32\netcfg-591334890.txt
2013-06-12 12:03:05 ----A---- C:\WINDOWS\system32\netcfg-565612578.txt
2013-06-12 10:54:59 ----A---- C:\WINDOWS\system32\netcfg-561526171.txt
2013-06-12 10:54:55 ----A---- C:\WINDOWS\system32\netcfg-561522515.txt
2013-06-12 10:49:40 ----A---- C:\WINDOWS\system32\netcfg-561207234.txt
2013-06-12 10:49:38 ----A---- C:\WINDOWS\system32\netcfg-561205484.txt
2013-06-12 10:47:57 ----A---- C:\WINDOWS\system32\netcfg-561104312.txt
2013-06-12 01:18:16 ----A---- C:\WINDOWS\system32\netcfg-526923828.txt
2013-06-12 00:21:21 ----A---- C:\WINDOWS\system32\netcfg-523508750.txt
2013-06-12 00:21:18 ----A---- C:\WINDOWS\system32\netcfg-523506031.txt
2013-06-11 23:44:40 ----A---- C:\WINDOWS\system32\netcfg-521307906.txt
2013-06-11 23:44:33 ----A---- C:\WINDOWS\system32\netcfg-521300234.txt
2013-06-11 23:03:49 ----A---- C:\WINDOWS\system32\netcfg-518857078.txt
2013-06-11 23:03:44 ----A---- C:\WINDOWS\system32\netcfg-518851281.txt
2013-06-11 22:35:03 ----A---- C:\WINDOWS\system32\netcfg-517131015.txt
2013-06-11 22:34:58 ----A---- C:\WINDOWS\system32\netcfg-517126062.txt
2013-06-11 21:59:41 ----A---- C:\WINDOWS\system32\netcfg-515008218.txt
2013-06-11 21:59:32 ----A---- C:\WINDOWS\system32\netcfg-514999625.txt
2013-06-11 21:19:39 ----A---- C:\WINDOWS\system32\netcfg-512606859.txt
2013-06-11 21:19:36 ----A---- C:\WINDOWS\system32\netcfg-512603156.txt
2013-06-11 20:41:43 ----A---- C:\WINDOWS\system32\netcfg-510330546.txt
2013-06-11 19:28:00 ----A---- C:\WINDOWS\system32\netcfg-505907265.txt
2013-06-11 19:14:50 ----A---- C:\WINDOWS\system32\netcfg-505117187.txt
2013-06-11 19:14:46 ----A---- C:\WINDOWS\system32\netcfg-505114125.txt
2013-06-11 19:13:40 ----A---- C:\WINDOWS\system32\netcfg-505047843.txt
2013-06-11 19:13:37 ----A---- C:\WINDOWS\system32\netcfg-505044890.txt
2013-06-11 19:12:23 ----A---- C:\WINDOWS\system32\netcfg-504970984.txt
2013-06-11 19:06:37 ----A---- C:\WINDOWS\system32\netcfg-504624671.txt
2013-06-11 18:53:34 ----A---- C:\WINDOWS\system32\netcfg-503842031.txt
2013-06-11 18:53:33 ----A---- C:\WINDOWS\system32\netcfg-503840484.txt
2013-06-11 18:51:40 ----A---- C:\WINDOWS\system32\netcfg-503727328.txt
2013-06-11 18:51:38 ----A---- C:\WINDOWS\system32\netcfg-503725609.txt
2013-06-11 16:01:22 ----A---- C:\WINDOWS\system32\netcfg-493509640.txt
2013-06-11 16:01:20 ----A---- C:\WINDOWS\system32\netcfg-493507812.txt
2013-06-11 13:48:13 ----A---- C:\WINDOWS\system32\netcfg-485520406.txt
2013-06-11 13:47:29 ----A---- C:\WINDOWS\system32\netcfg-485476609.txt
2013-06-11 13:44:58 ----A---- C:\WINDOWS\system32\netcfg-485326062.txt
2013-06-11 08:09:12 ----A---- C:\WINDOWS\system32\netcfg-465179203.txt
2013-06-11 07:25:50 ----A---- C:\WINDOWS\system32\netcfg-462577562.txt
2013-06-11 07:25:49 ----A---- C:\WINDOWS\system32\netcfg-462576140.txt
2013-06-11 07:21:16 ----A---- C:\WINDOWS\system32\netcfg-462304031.txt
2013-06-11 00:43:57 ----A---- C:\WINDOWS\system32\netcfg-438464484.txt
2013-06-10 18:51:34 ----A---- C:\WINDOWS\system32\netcfg-417321328.txt
2013-06-10 18:50:50 ----A---- C:\WINDOWS\system32\netcfg-417277562.txt
2013-06-10 17:21:28 ----A---- C:\WINDOWS\system32\netcfg-411915937.txt
2013-06-10 13:16:34 ----A---- C:\WINDOWS\system32\netcfg-397222046.txt
2013-06-10 11:33:38 ----A---- C:\WINDOWS\system32\netcfg-391045437.txt
2013-06-10 11:33:09 ----A---- C:\WINDOWS\system32\netcfg-391017046.txt
2013-06-10 11:33:08 ----A---- C:\WINDOWS\system32\netcfg-391015453.txt
2013-06-10 10:55:43 ----A---- C:\WINDOWS\system32\netcfg-388770640.txt
2013-06-10 02:15:54 ----A---- C:\WINDOWS\system32\netcfg-357581250.txt
2013-06-09 22:49:28 ----A---- C:\WINDOWS\system32\netcfg-345195343.txt
2013-06-09 10:14:13 ----A---- C:\WINDOWS\system32\netcfg-299880671.txt
2013-06-09 09:36:56 ----A---- C:\WINDOWS\system32\netcfg-297644015.txt
2013-06-09 09:36:54 ----A---- C:\WINDOWS\system32\netcfg-297641359.txt
2013-06-09 09:35:02 ----A---- C:\WINDOWS\system32\netcfg-297529781.txt
2013-06-09 00:46:32 ----A---- C:\WINDOWS\system32\netcfg-265819937.txt
2013-06-09 00:41:33 ----A---- C:\WINDOWS\system32\netcfg-265520484.txt
2013-06-09 00:40:32 ----A---- C:\WINDOWS\system32\netcfg-265459890.txt
2013-06-09 00:20:04 ----A---- C:\WINDOWS\system32\netcfg-264231968.txt
2013-06-09 00:19:25 ----A---- C:\WINDOWS\system32\netcfg-264192984.txt
2013-06-09 00:10:42 ----A---- C:\WINDOWS\system32\netcfg-263670109.txt
2013-06-09 00:10:16 ----A---- C:\WINDOWS\system32\netcfg-263643328.txt
2013-06-08 22:49:26 ----A---- C:\WINDOWS\system32\netcfg-258793718.txt
2013-06-08 22:49:12 ----A---- C:\WINDOWS\system32\netcfg-258779890.txt
2013-06-08 22:08:48 ----A---- C:\WINDOWS\system32\netcfg-256356078.txt
2013-06-08 10:17:57 ----A---- C:\WINDOWS\system32\netcfg-213704437.txt
2013-06-08 10:07:03 ----A---- C:\WINDOWS\system32\netcfg-213050312.txt
2013-06-08 10:06:59 ----A---- C:\WINDOWS\system32\netcfg-213046187.txt
2013-06-08 09:34:00 ----A---- C:\WINDOWS\system32\netcfg-211067296.txt
2013-06-08 09:33:58 ----A---- C:\WINDOWS\system32\netcfg-211065781.txt
2013-06-08 09:32:24 ----A---- C:\WINDOWS\system32\netcfg-210971125.txt
2013-06-08 00:58:04 ----A---- C:\WINDOWS\system32\netcfg-180111265.txt
2013-06-08 00:39:51 ----A---- C:\WINDOWS\system32\netcfg-179013734.txt
2013-06-07 20:59:20 ----A---- C:\WINDOWS\system32\netcfg-165782890.txt
2013-06-07 20:44:20 ----A---- C:\WINDOWS\system32\netcfg-164883328.txt
2013-06-07 10:18:00 ----A---- C:\WINDOWS\system32\netcfg-127303000.txt
2013-06-07 10:08:57 ----A---- C:\WINDOWS\system32\netcfg-126759734.txt
2013-06-07 10:01:59 ----A---- C:\WINDOWS\system32\netcfg-126342156.txt
2013-06-07 09:43:23 ----A---- C:\WINDOWS\system32\netcfg-125226484.txt
2013-06-07 09:43:13 ----A---- C:\WINDOWS\system32\netcfg-125216421.txt
2013-06-07 09:32:27 ----A---- C:\WINDOWS\system32\netcfg-124569859.txt
2013-06-07 00:06:25 ----A---- C:\WINDOWS\system32\netcfg-90608343.txt
2013-06-06 20:52:36 ----A---- C:\WINDOWS\system32\netcfg-78979640.txt
2013-06-06 20:52:33 ----A---- C:\WINDOWS\system32\netcfg-78976625.txt
2013-06-06 20:51:27 ----A---- C:\WINDOWS\system32\netcfg-78910046.txt
2013-06-06 06:57:21 ----A---- C:\WINDOWS\system32\netcfg-28863750.txt
2013-06-06 06:52:34 ----A---- C:\WINDOWS\system32\netcfg-28577234.txt
2013-06-05 23:09:49 ----A---- C:\WINDOWS\system32\netcfg-811890.txt
2013-06-05 21:57:05 ----A---- C:\WINDOWS\system32\netcfg-83028953.txt
2013-06-05 19:23:37 ----A---- C:\WINDOWS\system32\netcfg-73820796.txt
2013-06-05 16:54:42 ----A---- C:\WINDOWS\system32\netcfg-64886296.txt
2013-06-05 15:56:03 ----A---- C:\WINDOWS\system32\netcfg-61366890.txt
2013-06-05 12:15:01 ----A---- C:\WINDOWS\system32\netcfg-48105015.txt
2013-06-05 12:14:58 ----A---- C:\WINDOWS\system32\netcfg-48102640.txt
2013-06-04 22:54:12 ----A---- C:\WINDOWS\system32\netcfg-56578.txt
2013-06-04 22:54:11 ----A---- C:\WINDOWS\system32\netcfg-55593.txt
2013-06-04 22:52:36 ----A---- C:\WINDOWS\system32\netcfg-625854015.txt
2013-06-04 22:49:19 ----A---- C:\WINDOWS\system32\netcfg-625657468.txt
2013-06-04 19:59:20 ----A---- C:\WINDOWS\system32\netcfg-615458031.txt
2013-06-04 19:34:07 ----A---- C:\WINDOWS\system32\netcfg-613944703.txt
2013-06-04 19:34:06 ----A---- C:\WINDOWS\system32\netcfg-613944656.txt
2013-06-04 19:34:06 ----A---- C:\WINDOWS\system32\netcfg-613944500.txt
2013-06-04 19:33:56 ----A---- C:\WINDOWS\system32\netcfg-613933968.txt
2013-06-04 19:33:55 ----A---- C:\WINDOWS\system32\netcfg-613933203.txt
2013-06-04 09:04:44 ----A---- C:\WINDOWS\system32\netcfg-576182578.txt
2013-06-04 01:11:45 ----A---- C:\WINDOWS\system32\netcfg-547803609.txt
2013-06-04 01:11:45 ----A---- C:\WINDOWS\system32\netcfg-547803546.txt
2013-06-04 00:28:03 ----A---- C:\WINDOWS\system32\netcfg-545181328.txt
2013-06-04 00:24:45 ----A---- C:\WINDOWS\system32\netcfg-544983546.txt
2013-06-04 00:24:42 ----A---- C:\WINDOWS\system32\netcfg-544980250.txt
2013-06-04 00:23:42 ----A---- C:\WINDOWS\system32\netcfg-544919796.txt
2013-06-04 00:23:41 ----A---- C:\WINDOWS\system32\netcfg-544919671.txt
2013-06-04 00:23:41 ----A---- C:\WINDOWS\system32\netcfg-544919546.txt
2013-06-04 00:09:05 ----D---- C:\Program Files (x86)\MSECache
2013-06-04 00:08:50 ----A---- C:\WINDOWS\SYSWOW64\MRT.exe
2013-06-03 23:55:03 ----A---- C:\WINDOWS\system32\netcfg-543201171.txt
2013-06-03 23:54:22 ----A---- C:\WINDOWS\system32\netcfg-543160640.txt
2013-06-03 23:54:19 ----A---- C:\WINDOWS\system32\netcfg-543157453.txt
2013-06-03 23:53:52 ----A---- C:\WINDOWS\system32\netcfg-543129781.txt
2013-06-03 22:22:25 ----A---- C:\WINDOWS\system32\netcfg-537643421.txt
2013-06-03 22:22:22 ----A---- C:\WINDOWS\system32\netcfg-537640625.txt
2013-06-03 20:38:49 ----A---- C:\WINDOWS\system32\netcfg-531427109.txt
2013-06-03 20:34:17 ----A---- C:\WINDOWS\system32\netcfg-531154781.txt
2013-06-03 19:37:08 ----A---- C:\WINDOWS\system32\netcfg-527726390.txt
2013-06-03 19:37:05 ----A---- C:\WINDOWS\system32\netcfg-527723281.txt
2013-06-03 19:36:54 ----A---- C:\WINDOWS\system32\netcfg-527712656.txt
2013-06-03 19:36:53 ----A---- C:\WINDOWS\system32\netcfg-527711468.txt
2013-06-03 17:02:20 ----A---- C:\WINDOWS\system32\netcfg-518438343.txt
2013-06-03 17:02:16 ----A---- C:\WINDOWS\system32\netcfg-518434640.txt
2013-06-03 16:55:10 ----A---- C:\WINDOWS\system32\netcfg-518007843.txt
2013-06-03 16:55:07 ----A---- C:\WINDOWS\system32\netcfg-518004718.txt
2013-06-03 16:55:00 ----A---- C:\WINDOWS\system32\netcfg-517998281.txt
2013-06-03 16:51:07 ----A---- C:\WINDOWS\system32\netcfg-517765187.txt
2013-06-03 16:47:18 ----A---- C:\WINDOWS\system32\netcfg-517536140.txt
2013-06-03 14:56:43 ----A---- C:\WINDOWS\system32\netcfg-510901562.txt
2013-06-03 14:56:43 ----A---- C:\WINDOWS\system32\netcfg-510901406.txt
2013-06-03 14:56:43 ----A---- C:\WINDOWS\system32\netcfg-510901312.txt
2013-06-03 12:21:43 ----A---- C:\WINDOWS\system32\netcfg-501601203.txt
2013-06-03 12:20:46 ----A---- C:\WINDOWS\system32\netcfg-501544046.txt
2013-06-03 12:20:43 ----A---- C:\WINDOWS\system32\netcfg-501540937.txt
2013-06-03 01:06:46 ----A---- C:\WINDOWS\system32\netcfg-461103734.txt
2013-06-03 01:06:45 ----A---- C:\WINDOWS\system32\netcfg-461103687.txt
2013-06-03 00:29:55 ----A---- C:\WINDOWS\system32\netcfg-458893171.txt
2013-06-03 00:28:31 ----A---- C:\WINDOWS\system32\netcfg-458809343.txt
2013-06-03 00:28:29 ----A---- C:\WINDOWS\system32\netcfg-458807687.txt
2013-06-03 00:27:37 ----A---- C:\WINDOWS\system32\netcfg-458754843.txt
2013-06-03 00:27:23 ----A---- C:\WINDOWS\system32\netcfg-458741437.txt
2013-06-03 00:26:20 ----A---- C:\WINDOWS\system32\netcfg-458677906.txt
2013-06-02 22:19:40 ----A---- C:\WINDOWS\system32\netcfg-451077906.txt
2013-06-02 22:11:30 ----A---- C:\WINDOWS\system32\netcfg-450588156.txt
2013-06-02 10:12:35 ----A---- C:\WINDOWS\system32\netcfg-407453546.txt
2013-06-02 10:01:42 ----A---- C:\WINDOWS\system32\netcfg-406799890.txt
2013-06-02 10:00:49 ----A---- C:\WINDOWS\system32\netcfg-406747109.txt
2013-06-02 09:34:49 ----A---- C:\WINDOWS\system32\netcfg-405186750.txt
2013-06-02 09:34:47 ----A---- C:\WINDOWS\system32\netcfg-405185437.txt
2013-06-02 09:34:13 ----A---- C:\WINDOWS\system32\netcfg-405151078.txt
2013-06-02 09:34:13 ----A---- C:\WINDOWS\system32\netcfg-405150984.txt
2013-06-02 09:34:13 ----A---- C:\WINDOWS\system32\netcfg-405150828.txt
2013-05-31 10:22:00 ----A---- C:\WINDOWS\system32\netcfg-235218640.txt
2013-05-31 09:53:26 ----A---- C:\WINDOWS\system32\netcfg-233504406.txt
2013-05-31 09:53:21 ----A---- C:\WINDOWS\system32\netcfg-233499468.txt
2013-05-31 09:47:02 ----A---- C:\WINDOWS\system32\netcfg-233120500.txt
2013-05-31 09:47:00 ----A---- C:\WINDOWS\system32\netcfg-233117875.txt
2013-05-31 09:41:34 ----A---- C:\WINDOWS\system32\netcfg-232792453.txt
2013-05-31 09:41:28 ----A---- C:\WINDOWS\system32\netcfg-232786250.txt
2013-05-31 09:40:10 ----A---- C:\WINDOWS\system32\netcfg-232708312.txt
2013-05-31 01:12:35 ----A---- C:\WINDOWS\system32\netcfg-202253281.txt
2013-05-30 23:01:20 ----A---- C:\WINDOWS\system32\netcfg-194377859.txt
2013-05-30 21:02:57 ----A---- C:\WINDOWS\system32\netcfg-187275015.txt
2013-05-30 21:01:51 ----D---- C:\ProgramData\Sony Ericsson
2013-05-30 21:01:31 ----D---- C:\Program Files (x86)\Sony Ericsson
2013-05-30 20:56:23 ----D---- C:\ProgramData\Sony
2013-05-30 20:56:23 ----D---- C:\Program Files (x86)\Sony
2013-05-30 20:52:08 ----A---- C:\WINDOWS\system32\netcfg-186625765.txt
2013-05-30 20:52:00 ----A---- C:\WINDOWS\system32\netcfg-186618531.txt
2013-05-30 20:40:29 ----A---- C:\WINDOWS\system32\netcfg-185927593.txt
2013-05-30 20:11:25 ----A---- C:\WINDOWS\system32\netcfg-184183687.txt
2013-05-30 20:10:51 ----A---- C:\WINDOWS\system32\netcfg-184148859.txt
2013-05-30 19:33:07 ----A---- C:\WINDOWS\system32\netcfg-181885562.txt
2013-05-30 19:33:04 ----A---- C:\WINDOWS\system32\netcfg-181882609.txt
2013-05-30 19:32:30 ----A---- C:\WINDOWS\system32\netcfg-181848421.txt
2013-05-30 19:32:30 ----A---- C:\WINDOWS\system32\netcfg-181848359.txt
2013-05-30 19:32:29 ----A---- C:\WINDOWS\system32\netcfg-181847640.txt
2013-05-29 07:47:42 ----A---- C:\WINDOWS\system32\netcfg-53159718.txt
2013-05-29 07:27:53 ----A---- C:\WINDOWS\system32\netcfg-51970750.txt
2013-05-29 07:27:51 ----A---- C:\WINDOWS\system32\netcfg-51969046.txt
2013-05-29 07:23:06 ----A---- C:\WINDOWS\system32\netcfg-51684562.txt
2013-05-29 01:22:50 ----A---- C:\WINDOWS\system32\netcfg-30068125.txt
2013-05-29 00:58:39 ----A---- C:\WINDOWS\system32\netcfg-28617593.txt
2013-05-29 00:58:37 ----A---- C:\WINDOWS\system32\netcfg-28615093.txt
2013-05-28 16:05:50 ----A---- C:\WINDOWS\system32\netcfg-93381828.txt
2013-05-28 16:05:49 ----A---- C:\WINDOWS\system32\netcfg-93381390.txt
2013-05-28 15:06:32 ----A---- C:\WINDOWS\system32\netcfg-89824593.txt
2013-05-28 15:06:27 ----A---- C:\WINDOWS\system32\netcfg-89818953.txt
2013-05-28 14:51:52 ----A---- C:\WINDOWS\system32\netcfg-88944312.txt
2013-05-28 14:51:49 ----A---- C:\WINDOWS\system32\netcfg-88941156.txt
2013-05-28 14:51:49 ----A---- C:\WINDOWS\system32\netcfg-88940718.txt
2013-05-28 14:51:16 ----A---- C:\WINDOWS\system32\netcfg-88907781.txt
2013-05-28 11:57:28 ----A---- C:\WINDOWS\system32\netcfg-78479812.txt
2013-05-28 11:00:34 ----A---- C:\WINDOWS\system32\netcfg-75066296.txt
2013-05-28 10:31:19 ----A---- C:\WINDOWS\system32\netcfg-73311656.txt
2013-05-28 10:30:04 ----A---- C:\WINDOWS\system32\netcfg-73236078.txt
2013-05-27 21:24:55 ----A---- C:\WINDOWS\system32\netcfg-26127453.txt
2013-05-27 21:24:47 ----A---- C:\WINDOWS\system32\netcfg-26119171.txt
2013-05-27 21:21:29 ----A---- C:\WINDOWS\system32\netcfg-25921562.txt
2013-05-27 16:31:56 ----A---- C:\WINDOWS\system32\netcfg-8548265.txt
2013-05-27 14:05:18 ----A---- C:\WINDOWS\system32\netcfg-275184453.txt
2013-05-27 14:05:14 ----A---- C:\WINDOWS\system32\netcfg-275179921.txt
2013-05-27 14:03:46 ----A---- C:\WINDOWS\system32\netcfg-275092515.txt
2013-05-27 14:03:45 ----A---- C:\WINDOWS\system32\netcfg-275090953.txt
2013-05-27 13:41:14 ----A---- C:\WINDOWS\system32\netcfg-273739781.txt
2013-05-27 13:41:11 ----A---- C:\WINDOWS\system32\netcfg-273736828.txt
2013-05-27 13:40:45 ----A---- C:\WINDOWS\system32\netcfg-273711265.txt
2013-05-27 13:40:42 ----A---- C:\WINDOWS\system32\netcfg-273707937.txt
2013-05-26 23:40:47 ----A---- C:\WINDOWS\system32\netcfg-223313437.txt
2013-05-26 23:40:47 ----A---- C:\WINDOWS\system32\netcfg-223312890.txt
2013-05-26 22:42:54 ----A---- C:\WINDOWS\system32\netcfg-219839953.txt
2013-05-26 22:42:53 ----A---- C:\WINDOWS\system32\netcfg-219839062.txt
2013-05-26 09:49:06 ----A---- C:\WINDOWS\system32\netcfg-173412125.txt
2013-05-26 09:49:04 ----A---- C:\WINDOWS\system32\netcfg-173410171.txt
2013-05-25 22:11:28 ----A---- C:\WINDOWS\system32\netcfg-131554671.txt
2013-05-25 10:19:53 ----A---- C:\WINDOWS\system32\netcfg-88859656.txt
2013-05-25 09:21:45 ----A---- C:\WINDOWS\system32\netcfg-85371031.txt
2013-05-25 09:21:39 ----A---- C:\WINDOWS\system32\netcfg-85365078.txt
2013-05-25 09:19:38 ----A---- C:\WINDOWS\system32\netcfg-85243859.txt
2013-05-25 00:53:55 ----A---- C:\WINDOWS\system32\netcfg-54901093.txt
2013-05-24 23:57:08 ----A---- C:\WINDOWS\system32\netcfg-51493750.txt
2013-05-24 23:56:47 ----A---- C:\WINDOWS\system32\netcfg-51473046.txt
2013-05-24 23:36:23 ----A---- C:\WINDOWS\system32\netcfg-50249203.txt
2013-05-24 23:36:22 ----A---- C:\WINDOWS\system32\netcfg-50248171.txt
2013-05-24 22:49:04 ----D---- C:\WINDOWS\SYSWOW64\NV
2013-05-24 22:49:04 ----D---- C:\WINDOWS\system32\NV
2013-05-24 22:45:40 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2013-05-24 22:45:40 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\nvcuvenc.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvopencl.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvdispgenco6432018.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvdispco6432018.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvcuda.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\drivers\nvpciflt.sys
2013-05-24 22:45:39 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2013-05-24 22:09:43 ----A---- C:\WINDOWS\system32\netcfg-45049593.txt
2013-05-24 10:22:53 ----A---- C:\WINDOWS\system32\netcfg-2639406.txt
2013-05-24 09:54:05 ----A---- C:\WINDOWS\system32\netcfg-911625.txt
2013-05-24 09:54:02 ----A---- C:\WINDOWS\system32\netcfg-908578.txt
2013-05-24 09:52:36 ----A---- C:\WINDOWS\system32\netcfg-822109.txt
2013-05-24 09:51:54 ----A---- C:\WINDOWS\system32\netcfg-780109.txt
2013-05-24 09:35:24 ----A---- C:\WINDOWS\system32\netcfg-689537015.txt
2013-05-24 09:35:22 ----A---- C:\WINDOWS\system32\netcfg-689534359.txt
2013-05-24 09:28:53 ----A---- C:\WINDOWS\system32\netcfg-689146062.txt
2013-05-23 23:52:07 ----A---- C:\WINDOWS\system32\netcfg-654539312.txt
2013-05-23 22:32:36 ----D---- C:\WINDOWS\LastGood
2013-05-23 22:31:13 ----A---- C:\WINDOWS\system32\nvdispgenco6431422.dll
2013-05-23 22:31:13 ----A---- C:\WINDOWS\system32\nvdispco6431422.dll
2013-05-23 22:09:11 ----A---- C:\WINDOWS\system32\netcfg-648363828.txt
2013-05-23 10:20:19 ----A---- C:\WINDOWS\system32\netcfg-605831765.txt
2013-05-23 09:44:57 ----A---- C:\WINDOWS\system32\netcfg-603709406.txt
2013-05-23 09:44:47 ----A---- C:\WINDOWS\system32\netcfg-603699328.txt
2013-05-23 09:30:40 ----A---- C:\WINDOWS\system32\netcfg-602853078.txt
======List of files/folders modified in the last 1 month======
2013-06-22 14:27:44 ----D---- C:\Program Files\trend micro
2013-06-22 14:27:40 ----D---- C:\WINDOWS\Temp
2013-06-22 14:24:51 ----D---- C:\WINDOWS\Prefetch
2013-06-22 14:20:54 ----D---- C:\Users\Maros\AppData\Roaming\uTorrent
2013-06-22 14:20:54 ----D---- C:\Users\Maros\AppData\Roaming\DAEMON Tools Lite
2013-06-22 14:20:51 ----D---- C:\WINDOWS\Logs
2013-06-22 14:20:51 ----D---- C:\WINDOWS\Inf
2013-06-22 14:20:51 ----D---- C:\Windows
2013-06-22 14:00:00 ----D---- C:\WINDOWS\system32\sru
2013-06-22 12:40:35 ----D---- C:\WINDOWS\Microsoft.NET
2013-06-22 11:20:52 ----RD---- C:\WINDOWS\System32
2013-06-22 11:20:52 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-06-22 11:18:50 ----HD---- C:\Program Files\WindowsApps
2013-06-22 11:18:47 ----D---- C:\WINDOWS\AUInstallAgent
2013-06-21 15:49:55 ----D---- C:\ProgramData\PMB Files
2013-06-21 00:27:40 ----D---- C:\Users\Maros\AppData\Roaming\vlc
2013-06-20 14:05:02 ----D---- C:\WINDOWS\system32\config
2013-06-19 19:39:34 ----SHD---- C:\System Volume Information
2013-06-19 18:16:04 ----D---- C:\WINDOWS\system32\Tasks
2013-06-18 18:27:57 ----D---- C:\WINDOWS\SysWOW64
2013-06-18 18:27:55 ----D---- C:\WINDOWS\system32\en-US
2013-06-18 18:25:49 ----D---- C:\WINDOWS\KJ
2013-06-18 09:27:08 ----D---- C:\WINDOWS\system32\NDF
2013-06-12 19:12:36 ----A---- C:\WINDOWS\SYSWOW64\acovcnt.exe
2013-06-12 00:16:23 ----SHD---- C:\WINDOWS\Installer
2013-06-12 00:16:21 ----SD---- C:\Users\Maros\AppData\Roaming\Microsoft
2013-06-05 18:48:35 ----D---- C:\Users\Maros\AppData\Roaming\Skype
2013-06-04 22:55:27 ----A---- C:\WINDOWS\system32\ServiceFilter.ini
2013-06-04 22:55:13 ----A---- C:\WINDOWS\system32\AutoRunFilter.ini
2013-06-04 00:09:05 ----RD---- C:\Program Files (x86)
2013-05-30 21:01:57 ----D---- C:\WINDOWS\system32\DriverStore
2013-05-30 21:01:57 ----D---- C:\WINDOWS\system32\catroot
2013-05-30 21:01:51 ----HD---- C:\ProgramData
2013-05-30 20:57:18 ----D---- C:\WINDOWS\system32\catroot2
2013-05-30 20:56:23 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-05-27 21:28:55 ----D---- C:\WINDOWS\system32\Drivers
2013-05-24 22:51:40 ----D---- C:\ProgramData\NVIDIA Corporation
2013-05-24 22:49:24 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-05-24 22:49:03 ----D---- C:\ProgramData\NVIDIA
2013-05-23 22:32:37 ----D---- C:\Program Files\NVIDIA Corporation