winsvchost.exe 100% zatížení CPU
Napsal: 03 pro 2013 14:00
Čau všichni, měl sem problém s jednim programem (virem) jmenoval se winschvost.exe (našel sem kde je umístěný → (C:) → Martin → Appdata → Roaming → AdobeX2 → winsvchost.exe) a vždy po zapnutí pc začal procesor běžět na 100% tak sem spustil správce úloh a winsvchost sem zavřel, později sem chtěl počítač prohlédnout pomocí ComboFix ale když sem jej chtěl zapnout ukázala se mi chyba, tak sem použil jiný program (antivir, antispawer) který mi odstranil pár škodlivejch programů ale winsvchost tam zůstal.. zkoušel sem ho odstranit ručně (celou složku vymazat) ale po pár minutách se udělá znovu..
poradíte někdo? předem dík
Tady máte log:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Martin at 2013-12-03 13:48:28
Microsoft Windows 8.1
System drive C: has 123 GB (17%) free of 705 GB
Total RAM: 8058 MB (63% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:48:32, on 3. 12. 2013
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.16384)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 6\Monitor.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
C:\Users\Martin\Videos\napsnap.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
C:\Users\Martin\Videos\mfcmifc.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASC.exe
C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper_32.exe
C:\Program Files\trend micro\Martin.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www2.delta-search.com/?babsrc=HP ... n&tsp=5008
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: (no name) - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\17.1.3.1\AVG SafeGuard toolbar_toolbar.dll
O2 - BHO: (no name) - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - (no file)
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\Microsoft Office\Office14\URLREDIR.DLL
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\ADVANC~1\BROWER~1\ASCPlugin_Protection.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - (no file)
O3 - Toolbar: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\17.1.3.1\AVG SafeGuard toolbar_toolbar.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKLM\..\Run: [Adobe] C:\ProgramData\Adobe\BAC2CA.vbe
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Advanced SystemCare 6] "C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [AdobeUpdate] wscript "C:\Users\Martin\AppData\Roaming\AdobeX2\invis.vbs" "C:\Users\Martin\AppData\Roaming\AdobeX2\bat.bat"
O4 - HKCU\..\RunOnce: [MFC Managed Interfaces Library] C:\Users\Martin\Videos\mfcmifc.exe
O4 - HKUS\S-1-5-21-3418796237-2015644284-3891413543-1131\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3418796237-2015644284-3891413543-1131\..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3418796237-2015644284-3891413543-1131\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3418796237-2015644284-3891413543-1131\..\Run: [Advanced SystemCare 6] "C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3418796237-2015644284-3891413543-1131\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3418796237-2015644284-3891413543-1131\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\Microsoft Office\Office14\ONBttnIE.dll/105
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Rich Media Downloader - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - (no file)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.1.3\ViProtocol.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 6 (AdvancedSystemCareService6) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
O23 - Service: @oem104.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - C:\windows\system32\mfevtps.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater17.1.3 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.3\ToolbarUpdater.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) Extreme Tuning Utility Service (XTU3SERVICE) - Intel(R) Corporation - C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
--
End of file - 14654 bytes
======Listing Processes======
wininit.exe
winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe"
"dwm.exe"
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\WLANExt.exe 1020031069184
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe"
C:\WINDOWS\system32\BtwRSupportService.exe
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
dashost.exe {a10d93e8-4283-49e8-b9e1c971a8789f59}
"C:\windows\system32\mfevtps.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\WINDOWS\SysWOW64\PnkBstrA.exe
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe"
"C:\WINDOWS\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.3\ToolbarUpdater.exe"
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
"C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe"
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.3\loggingserver.exe" 72648 "C:\ProgramData\AVG SafeGuard toolbar\Logger\logger.properties"
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-4d46bad0-e2dc-444c-9154-1bbf79ff700b -SystemEventPortName:HostProcess-9f45f44e-468b-4f58-af3a-2759496b88a7 -IoCancelEventPortName:HostProcess-4e93c07f-49ab-47c5-ad6c-6e3c8a843e39 -NonStateChangingEventPortName:HostProcess-71976710-d34c-431c-9b7c-ef022d8ef9fa -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d2e98b29-23ec-4950-83cd-c4eec28c7155 -DeviceGroupId:WudfDefaultDevicePool
"\Program Files\Synaptics\SynTP\SynTPEnh.exe"
taskhostex.exe
"C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe" /STARTUP
"C:\Program Files (x86)\IObit\Advanced SystemCare 6\Monitor.exe"
C:\WINDOWS\Explorer.EXE
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\Windows\System32\skydrive.exe -Embedding
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\WINDOWS\system32\igfxsrvc.exe" -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe"
"C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe" /m
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
"C:\Users\Martin\Videos\napsnap.exe"
"C:\Windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe"
"C:\Users\Martin\Videos\mfcmifc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
taskhost.exe $(Arg0)
C:\WINDOWS\WinStore\WSHost.exe -Embedding
"C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASC.exe"
"C:\Program Files\Realtek\Audio\HDA\FMAPP.exe" -START
"C:\Program Files\Opera x64\opera.exe"
"C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper_32.exe" -newprocess "7072 5 0 1 4" -logfolder "C:\Users\Martin\AppData\Local\Opera\Opera x64\logs"
"C:\Users\Martin\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\ParetoLogic Registration3.job
C:\WINDOWS\tasks\ParetoLogic Update Version3 Startup Task.job
C:\WINDOWS\tasks\ParetoLogic Update Version3.job
C:\WINDOWS\tasks\RegCure Pro.job
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-03 553384]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-10-09 6270336]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06 690392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-03 210856]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-03 462248]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG SafeGuard toolbar - C:\Program Files (x86)\AVG SafeGuard toolbar\17.1.3.1\AVG SafeGuard toolbar_toolbar.dll [2013-11-20 3135664]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-10-09 4502400]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06 562904]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}]
Advanced SystemCare Browser Protection - C:\PROGRA~2\IObit\ADVANC~1\BROWER~1\ASCPlugin_Protection.dll [2013-04-24 659264]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-03 171944]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
{95B7759C-8C7F-4BF1-B163-73684A933233} - AVG SafeGuard toolbar - C:\Program Files (x86)\AVG SafeGuard toolbar\17.1.3.1\AVG SafeGuard toolbar_toolbar.dll [2013-11-20 3135664]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-10-03 391128]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-10-03 771032]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-10-03 769496]
"SynLenovoGestureMgr"=C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [2012-08-27 665400]
"OnekeyStudio"=C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [2012-08-10 4196432]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2013-11-12 17111056]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2013-11-12 193008]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-11-08 1028384]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2013-11-08 1064224]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-27 2916152]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-08-27 13647576]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-08-07 1321688]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2013-10-30 1820584]
"NokiaSuite.exe"=C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2012-12-21 1090040]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-06-21 19875432]
"Advanced SystemCare 6"=C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe [2013-04-18 491840]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]
"AdobeUpdate"=wscript C:\Users\Martin\AppData\Roaming\AdobeX2\invis.vbs C:\Users\Martin\AppData\Roaming\AdobeX2\bat.bat []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"MFC Managed Interfaces Library"=C:\Users\Martin\Videos\mfcmifc.exe [2013-12-02 16896]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2012-08-23 56128]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-11-08 139792]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2012-11-08 168464]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2012-04-19 217088]
"RemoteControl10"=C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]
"SearchSettings"=C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [2013-07-05 1303360]
"Adobe"=C:\ProgramData\Adobe\BAC2CA.vbe [2012-10-02 7147]
"vProt"=C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe [2013-11-20 2334384]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\nvinitx.dll,C:\windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\SYSTEM32\igfxdev.dll [2013-10-03 623616]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SystemEventsBroker]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmartcardSimulator]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SystemEventsBroker]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VirtualSmartcardReader]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wcmsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"EnableUIADesktopToggle"=0
"EnableCursorSuppression"=1
"ConsentPromptBehaviorUser"=3
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktop"=1
"NoDrives"=0
"HideSCAHealth"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.FPS1"=frapsv64.dll
"VIDC.RTV1"=rtvcvfw64.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-12-03 13:40:24 ----D---- C:\rsit
2013-12-03 13:40:24 ----D---- C:\Program Files\trend micro
2013-12-02 22:19:45 ----D---- C:\Users\Martin\AppData\Roaming\Adobe
2013-12-02 22:19:29 ----D---- C:\Users\Martin\AppData\Roaming\AdobeX2
2013-11-30 09:29:30 ----A---- C:\WINDOWS\SYSWOW64\PnkBstrB.exe
2013-11-20 00:05:42 ----D---- C:\WINDOWS\SYSWOW64\NV
2013-11-20 00:05:42 ----D---- C:\WINDOWS\system32\NV
2013-11-20 00:01:47 ----A---- C:\WINDOWS\system32\nvshext.dll
2013-11-20 00:01:47 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2013-11-19 23:59:46 ----D---- C:\WINDOWS\LastGood.Tmp
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvcuvenc.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvopencl.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvinitx.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvdispgenco6433182.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvdispco6433182.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvcuda.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvapi64.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\drivers\nvpciflt.sys
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2013-11-16 20:47:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2013-11-16 20:46:59 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2013-11-16 20:46:59 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2013-11-16 20:46:58 ----A---- C:\WINDOWS\system32\twinui.dll
2013-11-16 20:46:56 ----A---- C:\WINDOWS\system32\shell32.dll
2013-11-16 20:46:48 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2013-11-16 20:46:02 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2013-11-16 20:46:02 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2013-11-16 20:46:02 ----A---- C:\WINDOWS\system32\actxprxy.dll
2013-11-16 20:46:01 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2013-11-15 22:08:05 ----D---- C:\Program Files (x86)\Need for Speed(TM) Rivals-SG
2013-11-13 18:44:58 ----D---- C:\Program Files (x86)\Assassin's Creed IV Black Flag Gold Edition
2013-11-12 23:55:42 ----D---- C:\Program Files\Dolby Digital Plus
2013-11-12 23:55:18 ----D---- C:\Program Files\Realtek
2013-11-12 23:54:21 ----A---- C:\WINDOWS\system32\WavesGUILib64.dll
2013-11-12 23:54:20 ----A---- C:\WINDOWS\system32\SRSWOW64.dll
2013-11-12 23:54:20 ----A---- C:\WINDOWS\system32\SRSTSX64.dll
2013-11-12 23:54:20 ----A---- C:\WINDOWS\system32\SRSTSH64.dll
2013-11-12 23:54:20 ----A---- C:\WINDOWS\system32\SRSHP64.dll
2013-11-12 23:54:18 ----A---- C:\WINDOWS\SYSWOW64\SFCOM.dll
2013-11-12 23:54:18 ----A---- C:\WINDOWS\system32\SFSS_APO.dll
2013-11-12 23:54:18 ----A---- C:\WINDOWS\system32\SFNHK64.dll
2013-11-12 23:54:18 ----A---- C:\WINDOWS\system32\SFCOM64.dll
2013-11-12 23:54:18 ----A---- C:\WINDOWS\system32\SFAPO64.dll
2013-11-12 23:54:17 ----A---- C:\WINDOWS\system32\RtPgEx64.dll
2013-11-12 23:54:17 ----A---- C:\WINDOWS\system32\drivers\rtvienna.dat
2013-11-12 23:54:16 ----A---- C:\WINDOWS\system32\RtlCPAPI64.dll
2013-11-12 23:54:15 ----A---- C:\WINDOWS\system32\drivers\RTKVHD64.sys
2013-11-12 23:54:14 ----A---- C:\WINDOWS\system32\RtkGuiCompLib.dll
2013-11-12 23:54:14 ----A---- C:\WINDOWS\system32\RtkCoLDR64.dll
2013-11-12 23:54:14 ----A---- C:\WINDOWS\system32\RtkCfg64.dll
2013-11-12 23:54:14 ----A---- C:\WINDOWS\system32\RtkAPO64.dll
2013-11-12 23:54:13 ----A---- C:\WINDOWS\system32\RtkApi64.dll
2013-11-12 23:54:13 ----A---- C:\WINDOWS\system32\RTEEP64A.dll
2013-11-12 23:54:13 ----A---- C:\WINDOWS\system32\RTEEL64A.dll
2013-11-12 23:54:13 ----A---- C:\WINDOWS\system32\RTEEG64A.dll
2013-11-12 23:54:13 ----A---- C:\WINDOWS\system32\RTEED64A.dll
2013-11-12 23:54:13 ----A---- C:\WINDOWS\system32\RtDataProc64.dll
2013-11-12 23:54:12 ----A---- C:\WINDOWS\system32\RTCOM64.dll
2013-11-12 23:54:11 ----A---- C:\WINDOWS\system32\RP3DHT64.dll
2013-11-12 23:54:11 ----A---- C:\WINDOWS\system32\RP3DAA64.dll
2013-11-12 23:54:11 ----A---- C:\WINDOWS\system32\drivers\RTAIODAT.DAT
2013-11-12 23:54:02 ----A---- C:\WINDOWS\system32\RCoRes64.dat
2013-11-12 23:54:01 ----A---- C:\WINDOWS\system32\RCoInstII64.dll
2013-11-12 23:53:59 ----A---- C:\WINDOWS\system32\R4EEP64A.dll
2013-11-12 23:53:59 ----A---- C:\WINDOWS\system32\R4EEL64A.dll
2013-11-12 23:53:59 ----A---- C:\WINDOWS\system32\R4EEG64A.dll
2013-11-12 23:53:59 ----A---- C:\WINDOWS\system32\R4EED64A.dll
2013-11-12 23:53:59 ----A---- C:\WINDOWS\system32\R4EEA64A.dll
2013-11-12 23:53:56 ----A---- C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2013-11-12 23:53:49 ----A---- C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2013-11-12 23:53:48 ----A---- C:\WINDOWS\system32\MaxxAudioRealtek264.dll
2013-11-12 23:53:48 ----A---- C:\WINDOWS\system32\MaxxAudioEQ64.dll
2013-11-12 23:53:48 ----A---- C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2013-11-12 23:53:47 ----A---- C:\WINDOWS\system32\MaxxAudioAPO30.dll
2013-11-12 23:53:47 ----A---- C:\WINDOWS\system32\MaxxAudioAPO20.dll
2013-11-12 23:53:41 ----A---- C:\WINDOWS\system32\FMAPO64.dll
2013-11-12 23:53:40 ----A---- C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2013-11-12 23:53:39 ----A---- C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2013-11-12 23:53:39 ----A---- C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2013-11-12 23:53:39 ----A---- C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2013-11-12 23:53:39 ----A---- C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2013-11-12 23:53:38 ----A---- C:\WINDOWS\system32\DTSLimiterDLL64.dll
2013-11-12 23:53:38 ----A---- C:\WINDOWS\system32\DTSLFXAPO64.dll
2013-11-12 23:53:38 ----A---- C:\WINDOWS\system32\DTSGFXAPONS64.dll
2013-11-12 23:53:38 ----A---- C:\WINDOWS\system32\DTSGFXAPO64.dll
2013-11-12 23:53:38 ----A---- C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2013-11-12 23:53:38 ----A---- C:\WINDOWS\system32\DTSBoostDLL64.dll
2013-11-12 23:53:37 ----A---- C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2013-11-12 23:53:37 ----A---- C:\WINDOWS\system32\DDPP64A.dll
2013-11-12 23:53:36 ----A---- C:\WINDOWS\system32\DDPO64A.dll
2013-11-12 23:53:36 ----A---- C:\WINDOWS\system32\DDPD64A.dll
2013-11-12 23:53:36 ----A---- C:\WINDOWS\system32\DDPA64.dll
2013-11-12 23:53:35 ----A---- C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2013-11-12 23:53:34 ----A---- C:\WINDOWS\system32\AERTAR64.dll
2013-11-12 23:53:34 ----A---- C:\WINDOWS\system32\AERTAC64.dll
2013-11-12 23:52:28 ----A---- C:\WINDOWS\RtlExUpd.dll
2013-11-12 23:36:49 ----A---- C:\WINDOWS\system32\WudfUpdate_01011.dll
2013-11-12 23:36:49 ----A---- C:\WINDOWS\system32\LenovoSDKEmSubSystem.dll
2013-11-12 23:36:49 ----A---- C:\WINDOWS\system32\drivers\LhdX64.sys
2013-11-12 23:36:49 ----A---- C:\WINDOWS\system32\drivers\AcpiVpc.sys
2013-11-12 23:27:19 ----D---- C:\Users\Martin\AppData\Roaming\Lenovo
2013-11-12 23:27:11 ----D---- C:\Users\Martin\AppData\Roaming\LSC
2013-11-12 23:27:10 ----D---- C:\ldiag
2013-11-12 23:26:46 ----D---- C:\WINDOWS\Downloaded Installations
2013-11-12 23:14:51 ----A---- C:\WINDOWS\system32\drivers\avgtpx64.sys
2013-11-12 23:14:49 ----D---- C:\ProgramData\AVG SafeGuard toolbar
2013-11-12 23:14:48 ----D---- C:\Program Files (x86)\AVG SafeGuard toolbar
2013-11-12 23:14:22 ----D---- C:\Program Files (x86)\eSupport.com
2013-11-12 23:00:03 ----D---- C:\Program Files\CPUID
2013-11-12 22:41:26 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2013-11-12 22:31:24 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2013-11-12 22:31:24 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2013-11-12 22:31:24 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2013-11-12 22:31:24 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2013-11-12 22:31:24 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2013-11-12 22:31:24 ----A---- C:\WINDOWS\system32\wmpmde.dll
2013-11-12 22:31:24 ----A---- C:\WINDOWS\system32\winmde.dll
2013-11-12 22:31:24 ----A---- C:\WINDOWS\system32\rdpclip.exe
2013-11-12 22:31:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2013-11-12 22:31:23 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2013-11-12 22:31:23 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2013-11-12 22:31:23 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2013-11-12 22:31:23 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2013-11-12 22:31:23 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2013-11-12 22:31:23 ----A---- C:\WINDOWS\system32\mfsvr.dll
2013-11-12 22:31:23 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2013-11-12 22:31:23 ----A---- C:\WINDOWS\system32\ieframe.dll
2013-11-12 22:31:20 ----A---- C:\WINDOWS\system32\mshtml.dll
2013-11-12 22:31:20 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\shsetup.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\Display.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\system32\WorkFoldersShell.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\system32\jscript9.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\miutils.dll
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\ftp.exe
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\eapphost.dll
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\eappgnui.dll
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\eapp3hst.dll
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\apphelp.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\win32k.sys
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\TSWbPrxy.exe
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\tsmf.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\shsetup.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\mstscax.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\iuilp.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\dwmcore.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\Display.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\d3d9.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\d3d10level9.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\d2d1.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\comdlg32.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\authui.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\explorer.exe
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\TSWorkspace.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\tsmf.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\d3d10level9.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\WWAHost.exe
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\wucltux.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\wuaueng.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\wuauclt.exe
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\WSShared.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\WSService.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\wldp.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\wintrust.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\wininet.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\Windows.Web.Http.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\urlmon.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\samsrv.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\psmsrv.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\profsvc.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\ploptin.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\pcsvDevice.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\msched.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\miutils.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\kernel32.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\kd_02_8086.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\iertutil.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\ftp.exe
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\eapphost.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\eappgnui.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\eappcfg.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\drivers\rdyboost.sys
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\dnsapi.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\dafWfdProvider.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\dafBth.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\AudioSes.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\apphelp.dll
2013-11-12 22:31:14 ----AC---- C:\WINDOWS\system32\drivers\portcls.sys
2013-11-12 22:31:14 ----AC---- C:\WINDOWS\system32\drivers\intelpep.sys
2013-11-12 22:31:14 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2013-11-12 22:31:12 ----AC---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2013-11-12 22:31:12 ----AC---- C:\WINDOWS\system32\drivers\usbccgp.sys
2013-11-12 22:31:12 ----AC---- C:\WINDOWS\system32\drivers\stornvme.sys
2013-11-12 22:31:12 ----AC---- C:\WINDOWS\system32\drivers\spaceport.sys
2013-11-12 22:31:12 ----AC---- C:\WINDOWS\system32\drivers\acpi.sys
2013-11-12 22:26:26 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2013-11-12 22:26:26 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2013-11-12 22:26:26 ----A---- C:\WINDOWS\system32\BFE.DLL
2013-11-12 22:26:04 ----A---- C:\WINDOWS\SYSWOW64\crypt32.dll
2013-11-12 22:26:04 ----A---- C:\WINDOWS\system32\crypt32.dll
2013-11-12 22:25:41 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2013-11-12 22:25:41 ----A---- C:\WINDOWS\system32\gdi32.dll
2013-11-12 18:20:43 ----A---- C:\WINDOWS\SYSWOW64\nvspcap.dll
2013-11-12 00:02:26 ----A---- C:\WINDOWS\system32\nvspcap64.dll
2013-11-11 23:59:20 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2013-11-10 21:57:09 ----ASH---- C:\pagefile.sys
2013-11-10 21:39:23 ----D---- C:\WINDOWS\Minidump
2013-11-09 17:16:02 ----H---- C:\Users\Martin\AppData\Roaming\Martin-wchelper.dll
2013-11-06 19:09:33 ----D---- C:\Program Files (x86)\Battlefield 4
2013-11-06 18:56:41 ----D---- C:\ProgramData\EA Core
2013-11-04 20:58:18 ----D---- C:\Program Files (x86)\Call of Duty Ghosts
======List of files/folders modified in the last 1 month======
2013-12-03 13:45:18 ----D---- C:\WINDOWS\Prefetch
2013-12-03 13:40:24 ----RD---- C:\Program Files
2013-12-03 13:39:05 ----D---- C:\WINDOWS\Temp
2013-12-03 13:38:41 ----D---- C:\WINDOWS\system32\sru
2013-12-03 05:05:50 ----D---- C:\WINDOWS\Inf
2013-12-03 05:05:49 ----D---- C:\Windows
2013-12-03 02:12:35 ----D---- C:\WINDOWS\Microsoft.NET
2013-12-02 22:34:25 ----HD---- C:\Program Files\WindowsApps
2013-12-02 22:34:25 ----D---- C:\WINDOWS\AppReadiness
2013-12-02 22:24:06 ----HD---- C:\ProgramData
2013-12-02 22:24:06 ----D---- C:\WINDOWS\Tasks
2013-12-02 22:24:06 ----D---- C:\WINDOWS\system32\Tasks
2013-12-02 22:20:17 ----RD---- C:\Program Files (x86)
2013-12-02 22:20:17 ----D---- C:\Config.Msi
2013-12-02 22:20:12 ----SHD---- C:\WINDOWS\Installer
2013-12-02 22:13:36 ----D---- C:\Users\Martin\AppData\Roaming\uTorrent
2013-12-02 22:09:45 ----D---- C:\Program Files (x86)\Sniper Elite Nazi Zombie Army 2
2013-12-02 17:18:49 ----D---- C:\WINDOWS\debug
2013-12-01 20:36:50 ----SHD---- C:\System Volume Information
2013-12-01 11:01:40 ----D---- C:\ProgramData\Orbit
2013-12-01 09:55:51 ----D---- C:\ProgramData\Origin
2013-11-30 11:16:55 ----D---- C:\Program Files (x86)\Steam
2013-11-30 09:29:30 ----D---- C:\WINDOWS\SysWOW64
2013-11-29 22:53:36 ----D---- C:\Program Files (x86)\SleepingDogs
2013-11-27 19:00:34 ----D---- C:\WINDOWS\system32\config
2013-11-23 10:35:30 ----D---- C:\WINDOWS\SoftwareDistribution
2013-11-23 10:22:40 ----D---- C:\Program Files (x86)\Crysis3.Digital.Deluxe
2013-11-23 00:32:36 ----D---- C:\WINDOWS\Logs
2013-11-21 23:01:16 ----D---- C:\Program Files (x86)\Ubisoft
2013-11-21 22:15:10 ----D---- C:\Users\Martin\AppData\Roaming\Origin
2013-11-21 22:11:22 ----RSD---- C:\WINDOWS\assembly
2013-11-20 00:05:42 ----RD---- C:\WINDOWS\System32
2013-11-20 00:02:43 ----D---- C:\temp
2013-11-20 00:02:17 ----D---- C:\ProgramData\NVIDIA
2013-11-19 23:59:48 ----D---- C:\WINDOWS\system32\drivers
2013-11-19 23:59:37 ----D---- C:\WINDOWS\system32\DriverStore
2013-11-19 11:30:34 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2013-11-19 10:22:28 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-11-19 10:19:09 ----D---- C:\WINDOWS\system32\drivers\UMDF
2013-11-18 07:16:25 ----D---- C:\WINDOWS\WinSxS
2013-11-18 07:14:02 ----RD---- C:\WINDOWS\ToastData
2013-11-16 21:33:24 ----D---- C:\WINDOWS\CbsTemp
2013-11-16 10:54:00 ----D---- C:\WINDOWS\rescache
2013-11-16 00:45:01 ----D---- C:\Program Files (x86)\MSI Afterburner
2013-11-13 23:24:18 ----D---- C:\Program Files (x86)\IObit
2013-11-13 19:18:31 ----D---- C:\ProgramData\Microsoft Help
2013-11-13 19:17:25 ----D---- C:\WINDOWS\system32\MRT
2013-11-13 19:07:45 ----A---- C:\WINDOWS\system32\MRT.exe
2013-11-13 00:14:08 ----D---- C:\Program Files\Lenovo
2013-11-12 23:58:14 ----HD---- C:\Program Files (x86)\Temp
2013-11-12 23:55:18 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2013-11-12 23:50:31 ----D---- C:\WINDOWS\system32\catroot
2013-11-12 23:45:23 ----D---- C:\Drivers
2013-11-12 23:38:11 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2013-11-12 23:37:48 ----D---- C:\Program Files (x86)\Intel
2013-11-12 23:35:49 ----D---- C:\ProgramData\Downloaded Installations
2013-11-12 23:26:41 ----D---- C:\ProgramData\Adobe
2013-11-12 23:26:39 ----D---- C:\Program Files (x86)\Common Files
2013-11-12 23:18:41 ----D---- C:\WINDOWS\SYSWOW64\drivers
2013-11-12 23:14:30 ----HD---- C:\ProgramData\Common Files
2013-11-12 22:48:52 ----SD---- C:\Users\Martin\AppData\Roaming\Microsoft
2013-11-12 22:48:39 ----SD---- C:\ProgramData\Microsoft
2013-11-12 22:37:47 ----D---- C:\WINDOWS\WinStore
2013-11-12 22:37:47 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2013-11-12 22:37:47 ----D---- C:\Program Files\Internet Explorer
2013-11-12 22:37:46 ----D---- C:\WINDOWS\system32\migwiz
2013-11-12 22:37:46 ----D---- C:\WINDOWS\system32\cs-CZ
2013-11-12 22:37:46 ----D---- C:\WINDOWS\PolicyDefinitions
2013-11-12 22:37:46 ----D---- C:\WINDOWS\apppatch
2013-11-12 22:31:07 ----D---- C:\WINDOWS\system32\catroot2
2013-11-11 22:22:01 ----D---- C:\Users\Martin\AppData\Roaming\Theta
2013-11-11 16:02:02 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2013-11-11 16:02:02 ----A---- C:\WINDOWS\system32\nvcpl.dll
2013-11-11 16:01:59 ----A---- C:\WINDOWS\SYSWOW64\oemdspif.dll
2013-11-11 16:01:59 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2013-11-11 16:01:59 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2013-11-11 16:01:59 ----A---- C:\WINDOWS\system32\nvmctray.dll
2013-11-10 22:08:02 ----HD---- C:\Users\Martin\AppData\Roaming\B0F48396
2013-11-10 22:08:02 ----DC---- C:\WINDOWS\Panther
2013-11-10 21:40:39 ----RSHD---- C:\Users\Martin\AppData\Roaming\svchost
2013-11-08 00:37:12 ----D---- C:\Program Files (x86)\Batman Arkham Origins
2013-11-07 00:54:36 ----D---- C:\Users\Martin\AppData\Roaming\DAEMON Tools Lite
2013-11-06 19:59:02 ----A---- C:\WINDOWS\SYSWOW64\PnkBstrA.exe
2013-11-06 18:56:42 ----D---- C:\ProgramData\Electronic Arts
2013-11-06 17:01:04 ----D---- C:\Program Files (x86)\Huntsman - The Orphanage
2013-11-05 14:40:08 ----D---- C:\Program Files (x86)\Dead Space 3 Limited Edition FULL-MULTI
2013-11-05 09:40:26 ----D---- C:\WINDOWS\system32\wdi
2013-11-04 19:44:32 ----D---- C:\WINDOWS\system32\NDF
2013-11-04 17:06:45 ----D---- C:\WINDOWS\system32\LogFiles


Tady máte log:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Martin at 2013-12-03 13:48:28
Microsoft Windows 8.1
System drive C: has 123 GB (17%) free of 705 GB
Total RAM: 8058 MB (63% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:48:32, on 3. 12. 2013
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.16384)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 6\Monitor.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
C:\Users\Martin\Videos\napsnap.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
C:\Users\Martin\Videos\mfcmifc.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASC.exe
C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper_32.exe
C:\Program Files\trend micro\Martin.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www2.delta-search.com/?babsrc=HP ... n&tsp=5008
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: (no name) - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\17.1.3.1\AVG SafeGuard toolbar_toolbar.dll
O2 - BHO: (no name) - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - (no file)
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\Microsoft Office\Office14\URLREDIR.DLL
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\ADVANC~1\BROWER~1\ASCPlugin_Protection.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - (no file)
O3 - Toolbar: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\17.1.3.1\AVG SafeGuard toolbar_toolbar.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKLM\..\Run: [Adobe] C:\ProgramData\Adobe\BAC2CA.vbe
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Advanced SystemCare 6] "C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [AdobeUpdate] wscript "C:\Users\Martin\AppData\Roaming\AdobeX2\invis.vbs" "C:\Users\Martin\AppData\Roaming\AdobeX2\bat.bat"
O4 - HKCU\..\RunOnce: [MFC Managed Interfaces Library] C:\Users\Martin\Videos\mfcmifc.exe
O4 - HKUS\S-1-5-21-3418796237-2015644284-3891413543-1131\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3418796237-2015644284-3891413543-1131\..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3418796237-2015644284-3891413543-1131\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3418796237-2015644284-3891413543-1131\..\Run: [Advanced SystemCare 6] "C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3418796237-2015644284-3891413543-1131\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3418796237-2015644284-3891413543-1131\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\Microsoft Office\Office14\ONBttnIE.dll/105
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Rich Media Downloader - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - (no file)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.1.3\ViProtocol.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 6 (AdvancedSystemCareService6) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
O23 - Service: @oem104.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - C:\windows\system32\mfevtps.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater17.1.3 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.3\ToolbarUpdater.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) Extreme Tuning Utility Service (XTU3SERVICE) - Intel(R) Corporation - C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
--
End of file - 14654 bytes
======Listing Processes======
wininit.exe
winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe"
"dwm.exe"
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\WLANExt.exe 1020031069184
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe"
C:\WINDOWS\system32\BtwRSupportService.exe
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
dashost.exe {a10d93e8-4283-49e8-b9e1c971a8789f59}
"C:\windows\system32\mfevtps.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\WINDOWS\SysWOW64\PnkBstrA.exe
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe"
"C:\WINDOWS\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.3\ToolbarUpdater.exe"
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
"C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe"
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.3\loggingserver.exe" 72648 "C:\ProgramData\AVG SafeGuard toolbar\Logger\logger.properties"
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-4d46bad0-e2dc-444c-9154-1bbf79ff700b -SystemEventPortName:HostProcess-9f45f44e-468b-4f58-af3a-2759496b88a7 -IoCancelEventPortName:HostProcess-4e93c07f-49ab-47c5-ad6c-6e3c8a843e39 -NonStateChangingEventPortName:HostProcess-71976710-d34c-431c-9b7c-ef022d8ef9fa -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d2e98b29-23ec-4950-83cd-c4eec28c7155 -DeviceGroupId:WudfDefaultDevicePool
"\Program Files\Synaptics\SynTP\SynTPEnh.exe"
taskhostex.exe
"C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe" /STARTUP
"C:\Program Files (x86)\IObit\Advanced SystemCare 6\Monitor.exe"
C:\WINDOWS\Explorer.EXE
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\Windows\System32\skydrive.exe -Embedding
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\WINDOWS\system32\igfxsrvc.exe" -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe"
"C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe" /m
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
"C:\Users\Martin\Videos\napsnap.exe"
"C:\Windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe"
"C:\Users\Martin\Videos\mfcmifc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
taskhost.exe $(Arg0)
C:\WINDOWS\WinStore\WSHost.exe -Embedding
"C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASC.exe"
"C:\Program Files\Realtek\Audio\HDA\FMAPP.exe" -START
"C:\Program Files\Opera x64\opera.exe"
"C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper_32.exe" -newprocess "7072 5 0 1 4" -logfolder "C:\Users\Martin\AppData\Local\Opera\Opera x64\logs"
"C:\Users\Martin\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\ParetoLogic Registration3.job
C:\WINDOWS\tasks\ParetoLogic Update Version3 Startup Task.job
C:\WINDOWS\tasks\ParetoLogic Update Version3.job
C:\WINDOWS\tasks\RegCure Pro.job
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-03 553384]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-10-09 6270336]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06 690392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-03 210856]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-03 462248]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG SafeGuard toolbar - C:\Program Files (x86)\AVG SafeGuard toolbar\17.1.3.1\AVG SafeGuard toolbar_toolbar.dll [2013-11-20 3135664]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-10-09 4502400]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06 562904]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}]
Advanced SystemCare Browser Protection - C:\PROGRA~2\IObit\ADVANC~1\BROWER~1\ASCPlugin_Protection.dll [2013-04-24 659264]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-03 171944]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
{95B7759C-8C7F-4BF1-B163-73684A933233} - AVG SafeGuard toolbar - C:\Program Files (x86)\AVG SafeGuard toolbar\17.1.3.1\AVG SafeGuard toolbar_toolbar.dll [2013-11-20 3135664]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-10-03 391128]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-10-03 771032]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-10-03 769496]
"SynLenovoGestureMgr"=C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [2012-08-27 665400]
"OnekeyStudio"=C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [2012-08-10 4196432]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2013-11-12 17111056]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2013-11-12 193008]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-11-08 1028384]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2013-11-08 1064224]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-27 2916152]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-08-27 13647576]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-08-07 1321688]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2013-10-30 1820584]
"NokiaSuite.exe"=C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2012-12-21 1090040]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-06-21 19875432]
"Advanced SystemCare 6"=C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe [2013-04-18 491840]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]
"AdobeUpdate"=wscript C:\Users\Martin\AppData\Roaming\AdobeX2\invis.vbs C:\Users\Martin\AppData\Roaming\AdobeX2\bat.bat []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"MFC Managed Interfaces Library"=C:\Users\Martin\Videos\mfcmifc.exe [2013-12-02 16896]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2012-08-23 56128]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-11-08 139792]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2012-11-08 168464]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2012-04-19 217088]
"RemoteControl10"=C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]
"SearchSettings"=C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [2013-07-05 1303360]
"Adobe"=C:\ProgramData\Adobe\BAC2CA.vbe [2012-10-02 7147]
"vProt"=C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe [2013-11-20 2334384]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\nvinitx.dll,C:\windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\SYSTEM32\igfxdev.dll [2013-10-03 623616]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SystemEventsBroker]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmartcardSimulator]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SystemEventsBroker]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VirtualSmartcardReader]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wcmsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"EnableUIADesktopToggle"=0
"EnableCursorSuppression"=1
"ConsentPromptBehaviorUser"=3
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktop"=1
"NoDrives"=0
"HideSCAHealth"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.FPS1"=frapsv64.dll
"VIDC.RTV1"=rtvcvfw64.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-12-03 13:40:24 ----D---- C:\rsit
2013-12-03 13:40:24 ----D---- C:\Program Files\trend micro
2013-12-02 22:19:45 ----D---- C:\Users\Martin\AppData\Roaming\Adobe
2013-12-02 22:19:29 ----D---- C:\Users\Martin\AppData\Roaming\AdobeX2
2013-11-30 09:29:30 ----A---- C:\WINDOWS\SYSWOW64\PnkBstrB.exe
2013-11-20 00:05:42 ----D---- C:\WINDOWS\SYSWOW64\NV
2013-11-20 00:05:42 ----D---- C:\WINDOWS\system32\NV
2013-11-20 00:01:47 ----A---- C:\WINDOWS\system32\nvshext.dll
2013-11-20 00:01:47 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2013-11-19 23:59:46 ----D---- C:\WINDOWS\LastGood.Tmp
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvcuvenc.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvopencl.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvinitx.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvdispgenco6433182.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvdispco6433182.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvcuda.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\nvapi64.dll
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\drivers\nvpciflt.sys
2013-11-19 23:58:08 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2013-11-16 20:47:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2013-11-16 20:46:59 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2013-11-16 20:46:59 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2013-11-16 20:46:58 ----A---- C:\WINDOWS\system32\twinui.dll
2013-11-16 20:46:56 ----A---- C:\WINDOWS\system32\shell32.dll
2013-11-16 20:46:48 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2013-11-16 20:46:02 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2013-11-16 20:46:02 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2013-11-16 20:46:02 ----A---- C:\WINDOWS\system32\actxprxy.dll
2013-11-16 20:46:01 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2013-11-15 22:08:05 ----D---- C:\Program Files (x86)\Need for Speed(TM) Rivals-SG
2013-11-13 18:44:58 ----D---- C:\Program Files (x86)\Assassin's Creed IV Black Flag Gold Edition
2013-11-12 23:55:42 ----D---- C:\Program Files\Dolby Digital Plus
2013-11-12 23:55:18 ----D---- C:\Program Files\Realtek
2013-11-12 23:54:21 ----A---- C:\WINDOWS\system32\WavesGUILib64.dll
2013-11-12 23:54:20 ----A---- C:\WINDOWS\system32\SRSWOW64.dll
2013-11-12 23:54:20 ----A---- C:\WINDOWS\system32\SRSTSX64.dll
2013-11-12 23:54:20 ----A---- C:\WINDOWS\system32\SRSTSH64.dll
2013-11-12 23:54:20 ----A---- C:\WINDOWS\system32\SRSHP64.dll
2013-11-12 23:54:18 ----A---- C:\WINDOWS\SYSWOW64\SFCOM.dll
2013-11-12 23:54:18 ----A---- C:\WINDOWS\system32\SFSS_APO.dll
2013-11-12 23:54:18 ----A---- C:\WINDOWS\system32\SFNHK64.dll
2013-11-12 23:54:18 ----A---- C:\WINDOWS\system32\SFCOM64.dll
2013-11-12 23:54:18 ----A---- C:\WINDOWS\system32\SFAPO64.dll
2013-11-12 23:54:17 ----A---- C:\WINDOWS\system32\RtPgEx64.dll
2013-11-12 23:54:17 ----A---- C:\WINDOWS\system32\drivers\rtvienna.dat
2013-11-12 23:54:16 ----A---- C:\WINDOWS\system32\RtlCPAPI64.dll
2013-11-12 23:54:15 ----A---- C:\WINDOWS\system32\drivers\RTKVHD64.sys
2013-11-12 23:54:14 ----A---- C:\WINDOWS\system32\RtkGuiCompLib.dll
2013-11-12 23:54:14 ----A---- C:\WINDOWS\system32\RtkCoLDR64.dll
2013-11-12 23:54:14 ----A---- C:\WINDOWS\system32\RtkCfg64.dll
2013-11-12 23:54:14 ----A---- C:\WINDOWS\system32\RtkAPO64.dll
2013-11-12 23:54:13 ----A---- C:\WINDOWS\system32\RtkApi64.dll
2013-11-12 23:54:13 ----A---- C:\WINDOWS\system32\RTEEP64A.dll
2013-11-12 23:54:13 ----A---- C:\WINDOWS\system32\RTEEL64A.dll
2013-11-12 23:54:13 ----A---- C:\WINDOWS\system32\RTEEG64A.dll
2013-11-12 23:54:13 ----A---- C:\WINDOWS\system32\RTEED64A.dll
2013-11-12 23:54:13 ----A---- C:\WINDOWS\system32\RtDataProc64.dll
2013-11-12 23:54:12 ----A---- C:\WINDOWS\system32\RTCOM64.dll
2013-11-12 23:54:11 ----A---- C:\WINDOWS\system32\RP3DHT64.dll
2013-11-12 23:54:11 ----A---- C:\WINDOWS\system32\RP3DAA64.dll
2013-11-12 23:54:11 ----A---- C:\WINDOWS\system32\drivers\RTAIODAT.DAT
2013-11-12 23:54:02 ----A---- C:\WINDOWS\system32\RCoRes64.dat
2013-11-12 23:54:01 ----A---- C:\WINDOWS\system32\RCoInstII64.dll
2013-11-12 23:53:59 ----A---- C:\WINDOWS\system32\R4EEP64A.dll
2013-11-12 23:53:59 ----A---- C:\WINDOWS\system32\R4EEL64A.dll
2013-11-12 23:53:59 ----A---- C:\WINDOWS\system32\R4EEG64A.dll
2013-11-12 23:53:59 ----A---- C:\WINDOWS\system32\R4EED64A.dll
2013-11-12 23:53:59 ----A---- C:\WINDOWS\system32\R4EEA64A.dll
2013-11-12 23:53:56 ----A---- C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2013-11-12 23:53:49 ----A---- C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2013-11-12 23:53:48 ----A---- C:\WINDOWS\system32\MaxxAudioRealtek264.dll
2013-11-12 23:53:48 ----A---- C:\WINDOWS\system32\MaxxAudioEQ64.dll
2013-11-12 23:53:48 ----A---- C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2013-11-12 23:53:47 ----A---- C:\WINDOWS\system32\MaxxAudioAPO30.dll
2013-11-12 23:53:47 ----A---- C:\WINDOWS\system32\MaxxAudioAPO20.dll
2013-11-12 23:53:41 ----A---- C:\WINDOWS\system32\FMAPO64.dll
2013-11-12 23:53:40 ----A---- C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2013-11-12 23:53:39 ----A---- C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2013-11-12 23:53:39 ----A---- C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2013-11-12 23:53:39 ----A---- C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2013-11-12 23:53:39 ----A---- C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2013-11-12 23:53:38 ----A---- C:\WINDOWS\system32\DTSLimiterDLL64.dll
2013-11-12 23:53:38 ----A---- C:\WINDOWS\system32\DTSLFXAPO64.dll
2013-11-12 23:53:38 ----A---- C:\WINDOWS\system32\DTSGFXAPONS64.dll
2013-11-12 23:53:38 ----A---- C:\WINDOWS\system32\DTSGFXAPO64.dll
2013-11-12 23:53:38 ----A---- C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2013-11-12 23:53:38 ----A---- C:\WINDOWS\system32\DTSBoostDLL64.dll
2013-11-12 23:53:37 ----A---- C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2013-11-12 23:53:37 ----A---- C:\WINDOWS\system32\DDPP64A.dll
2013-11-12 23:53:36 ----A---- C:\WINDOWS\system32\DDPO64A.dll
2013-11-12 23:53:36 ----A---- C:\WINDOWS\system32\DDPD64A.dll
2013-11-12 23:53:36 ----A---- C:\WINDOWS\system32\DDPA64.dll
2013-11-12 23:53:35 ----A---- C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2013-11-12 23:53:34 ----A---- C:\WINDOWS\system32\AERTAR64.dll
2013-11-12 23:53:34 ----A---- C:\WINDOWS\system32\AERTAC64.dll
2013-11-12 23:52:28 ----A---- C:\WINDOWS\RtlExUpd.dll
2013-11-12 23:36:49 ----A---- C:\WINDOWS\system32\WudfUpdate_01011.dll
2013-11-12 23:36:49 ----A---- C:\WINDOWS\system32\LenovoSDKEmSubSystem.dll
2013-11-12 23:36:49 ----A---- C:\WINDOWS\system32\drivers\LhdX64.sys
2013-11-12 23:36:49 ----A---- C:\WINDOWS\system32\drivers\AcpiVpc.sys
2013-11-12 23:27:19 ----D---- C:\Users\Martin\AppData\Roaming\Lenovo
2013-11-12 23:27:11 ----D---- C:\Users\Martin\AppData\Roaming\LSC
2013-11-12 23:27:10 ----D---- C:\ldiag
2013-11-12 23:26:46 ----D---- C:\WINDOWS\Downloaded Installations
2013-11-12 23:14:51 ----A---- C:\WINDOWS\system32\drivers\avgtpx64.sys
2013-11-12 23:14:49 ----D---- C:\ProgramData\AVG SafeGuard toolbar
2013-11-12 23:14:48 ----D---- C:\Program Files (x86)\AVG SafeGuard toolbar
2013-11-12 23:14:22 ----D---- C:\Program Files (x86)\eSupport.com
2013-11-12 23:00:03 ----D---- C:\Program Files\CPUID
2013-11-12 22:41:26 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2013-11-12 22:31:24 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2013-11-12 22:31:24 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2013-11-12 22:31:24 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2013-11-12 22:31:24 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2013-11-12 22:31:24 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2013-11-12 22:31:24 ----A---- C:\WINDOWS\system32\wmpmde.dll
2013-11-12 22:31:24 ----A---- C:\WINDOWS\system32\winmde.dll
2013-11-12 22:31:24 ----A---- C:\WINDOWS\system32\rdpclip.exe
2013-11-12 22:31:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2013-11-12 22:31:23 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2013-11-12 22:31:23 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2013-11-12 22:31:23 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2013-11-12 22:31:23 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2013-11-12 22:31:23 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2013-11-12 22:31:23 ----A---- C:\WINDOWS\system32\mfsvr.dll
2013-11-12 22:31:23 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2013-11-12 22:31:23 ----A---- C:\WINDOWS\system32\ieframe.dll
2013-11-12 22:31:20 ----A---- C:\WINDOWS\system32\mshtml.dll
2013-11-12 22:31:20 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\shsetup.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\Display.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\system32\WorkFoldersShell.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\system32\jscript9.dll
2013-11-12 22:31:18 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\miutils.dll
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\ftp.exe
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\eapphost.dll
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\eappgnui.dll
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\eapp3hst.dll
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2013-11-12 22:31:17 ----A---- C:\WINDOWS\SYSWOW64\apphelp.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\win32k.sys
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\TSWbPrxy.exe
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\tsmf.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\shsetup.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\mstscax.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\iuilp.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\dwmcore.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\Display.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\d3d9.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\d3d10level9.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\d2d1.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\comdlg32.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\authui.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2013-11-12 22:31:16 ----A---- C:\WINDOWS\explorer.exe
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\TSWorkspace.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\tsmf.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\d3d10level9.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\WWAHost.exe
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\wucltux.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\wuaueng.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\wuauclt.exe
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\WSShared.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\WSService.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\wldp.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\wintrust.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\wininet.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\Windows.Web.Http.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\urlmon.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\samsrv.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\psmsrv.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\profsvc.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\ploptin.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\pcsvDevice.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\msched.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\miutils.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\kernel32.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\kd_02_8086.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\iertutil.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\ftp.exe
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\eapphost.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\eappgnui.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\eappcfg.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\drivers\rdyboost.sys
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\dnsapi.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\dafWfdProvider.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\dafBth.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\AudioSes.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2013-11-12 22:31:15 ----A---- C:\WINDOWS\system32\apphelp.dll
2013-11-12 22:31:14 ----AC---- C:\WINDOWS\system32\drivers\portcls.sys
2013-11-12 22:31:14 ----AC---- C:\WINDOWS\system32\drivers\intelpep.sys
2013-11-12 22:31:14 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2013-11-12 22:31:12 ----AC---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2013-11-12 22:31:12 ----AC---- C:\WINDOWS\system32\drivers\usbccgp.sys
2013-11-12 22:31:12 ----AC---- C:\WINDOWS\system32\drivers\stornvme.sys
2013-11-12 22:31:12 ----AC---- C:\WINDOWS\system32\drivers\spaceport.sys
2013-11-12 22:31:12 ----AC---- C:\WINDOWS\system32\drivers\acpi.sys
2013-11-12 22:26:26 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2013-11-12 22:26:26 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2013-11-12 22:26:26 ----A---- C:\WINDOWS\system32\BFE.DLL
2013-11-12 22:26:04 ----A---- C:\WINDOWS\SYSWOW64\crypt32.dll
2013-11-12 22:26:04 ----A---- C:\WINDOWS\system32\crypt32.dll
2013-11-12 22:25:41 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2013-11-12 22:25:41 ----A---- C:\WINDOWS\system32\gdi32.dll
2013-11-12 18:20:43 ----A---- C:\WINDOWS\SYSWOW64\nvspcap.dll
2013-11-12 00:02:26 ----A---- C:\WINDOWS\system32\nvspcap64.dll
2013-11-11 23:59:20 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2013-11-10 21:57:09 ----ASH---- C:\pagefile.sys
2013-11-10 21:39:23 ----D---- C:\WINDOWS\Minidump
2013-11-09 17:16:02 ----H---- C:\Users\Martin\AppData\Roaming\Martin-wchelper.dll
2013-11-06 19:09:33 ----D---- C:\Program Files (x86)\Battlefield 4
2013-11-06 18:56:41 ----D---- C:\ProgramData\EA Core
2013-11-04 20:58:18 ----D---- C:\Program Files (x86)\Call of Duty Ghosts
======List of files/folders modified in the last 1 month======
2013-12-03 13:45:18 ----D---- C:\WINDOWS\Prefetch
2013-12-03 13:40:24 ----RD---- C:\Program Files
2013-12-03 13:39:05 ----D---- C:\WINDOWS\Temp
2013-12-03 13:38:41 ----D---- C:\WINDOWS\system32\sru
2013-12-03 05:05:50 ----D---- C:\WINDOWS\Inf
2013-12-03 05:05:49 ----D---- C:\Windows
2013-12-03 02:12:35 ----D---- C:\WINDOWS\Microsoft.NET
2013-12-02 22:34:25 ----HD---- C:\Program Files\WindowsApps
2013-12-02 22:34:25 ----D---- C:\WINDOWS\AppReadiness
2013-12-02 22:24:06 ----HD---- C:\ProgramData
2013-12-02 22:24:06 ----D---- C:\WINDOWS\Tasks
2013-12-02 22:24:06 ----D---- C:\WINDOWS\system32\Tasks
2013-12-02 22:20:17 ----RD---- C:\Program Files (x86)
2013-12-02 22:20:17 ----D---- C:\Config.Msi
2013-12-02 22:20:12 ----SHD---- C:\WINDOWS\Installer
2013-12-02 22:13:36 ----D---- C:\Users\Martin\AppData\Roaming\uTorrent
2013-12-02 22:09:45 ----D---- C:\Program Files (x86)\Sniper Elite Nazi Zombie Army 2
2013-12-02 17:18:49 ----D---- C:\WINDOWS\debug
2013-12-01 20:36:50 ----SHD---- C:\System Volume Information
2013-12-01 11:01:40 ----D---- C:\ProgramData\Orbit
2013-12-01 09:55:51 ----D---- C:\ProgramData\Origin
2013-11-30 11:16:55 ----D---- C:\Program Files (x86)\Steam
2013-11-30 09:29:30 ----D---- C:\WINDOWS\SysWOW64
2013-11-29 22:53:36 ----D---- C:\Program Files (x86)\SleepingDogs
2013-11-27 19:00:34 ----D---- C:\WINDOWS\system32\config
2013-11-23 10:35:30 ----D---- C:\WINDOWS\SoftwareDistribution
2013-11-23 10:22:40 ----D---- C:\Program Files (x86)\Crysis3.Digital.Deluxe
2013-11-23 00:32:36 ----D---- C:\WINDOWS\Logs
2013-11-21 23:01:16 ----D---- C:\Program Files (x86)\Ubisoft
2013-11-21 22:15:10 ----D---- C:\Users\Martin\AppData\Roaming\Origin
2013-11-21 22:11:22 ----RSD---- C:\WINDOWS\assembly
2013-11-20 00:05:42 ----RD---- C:\WINDOWS\System32
2013-11-20 00:02:43 ----D---- C:\temp
2013-11-20 00:02:17 ----D---- C:\ProgramData\NVIDIA
2013-11-19 23:59:48 ----D---- C:\WINDOWS\system32\drivers
2013-11-19 23:59:37 ----D---- C:\WINDOWS\system32\DriverStore
2013-11-19 11:30:34 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2013-11-19 10:22:28 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-11-19 10:19:09 ----D---- C:\WINDOWS\system32\drivers\UMDF
2013-11-18 07:16:25 ----D---- C:\WINDOWS\WinSxS
2013-11-18 07:14:02 ----RD---- C:\WINDOWS\ToastData
2013-11-16 21:33:24 ----D---- C:\WINDOWS\CbsTemp
2013-11-16 10:54:00 ----D---- C:\WINDOWS\rescache
2013-11-16 00:45:01 ----D---- C:\Program Files (x86)\MSI Afterburner
2013-11-13 23:24:18 ----D---- C:\Program Files (x86)\IObit
2013-11-13 19:18:31 ----D---- C:\ProgramData\Microsoft Help
2013-11-13 19:17:25 ----D---- C:\WINDOWS\system32\MRT
2013-11-13 19:07:45 ----A---- C:\WINDOWS\system32\MRT.exe
2013-11-13 00:14:08 ----D---- C:\Program Files\Lenovo
2013-11-12 23:58:14 ----HD---- C:\Program Files (x86)\Temp
2013-11-12 23:55:18 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2013-11-12 23:50:31 ----D---- C:\WINDOWS\system32\catroot
2013-11-12 23:45:23 ----D---- C:\Drivers
2013-11-12 23:38:11 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2013-11-12 23:37:48 ----D---- C:\Program Files (x86)\Intel
2013-11-12 23:35:49 ----D---- C:\ProgramData\Downloaded Installations
2013-11-12 23:26:41 ----D---- C:\ProgramData\Adobe
2013-11-12 23:26:39 ----D---- C:\Program Files (x86)\Common Files
2013-11-12 23:18:41 ----D---- C:\WINDOWS\SYSWOW64\drivers
2013-11-12 23:14:30 ----HD---- C:\ProgramData\Common Files
2013-11-12 22:48:52 ----SD---- C:\Users\Martin\AppData\Roaming\Microsoft
2013-11-12 22:48:39 ----SD---- C:\ProgramData\Microsoft
2013-11-12 22:37:47 ----D---- C:\WINDOWS\WinStore
2013-11-12 22:37:47 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2013-11-12 22:37:47 ----D---- C:\Program Files\Internet Explorer
2013-11-12 22:37:46 ----D---- C:\WINDOWS\system32\migwiz
2013-11-12 22:37:46 ----D---- C:\WINDOWS\system32\cs-CZ
2013-11-12 22:37:46 ----D---- C:\WINDOWS\PolicyDefinitions
2013-11-12 22:37:46 ----D---- C:\WINDOWS\apppatch
2013-11-12 22:31:07 ----D---- C:\WINDOWS\system32\catroot2
2013-11-11 22:22:01 ----D---- C:\Users\Martin\AppData\Roaming\Theta
2013-11-11 16:02:02 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2013-11-11 16:02:02 ----A---- C:\WINDOWS\system32\nvcpl.dll
2013-11-11 16:01:59 ----A---- C:\WINDOWS\SYSWOW64\oemdspif.dll
2013-11-11 16:01:59 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2013-11-11 16:01:59 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2013-11-11 16:01:59 ----A---- C:\WINDOWS\system32\nvmctray.dll
2013-11-10 22:08:02 ----HD---- C:\Users\Martin\AppData\Roaming\B0F48396
2013-11-10 22:08:02 ----DC---- C:\WINDOWS\Panther
2013-11-10 21:40:39 ----RSHD---- C:\Users\Martin\AppData\Roaming\svchost
2013-11-08 00:37:12 ----D---- C:\Program Files (x86)\Batman Arkham Origins
2013-11-07 00:54:36 ----D---- C:\Users\Martin\AppData\Roaming\DAEMON Tools Lite
2013-11-06 19:59:02 ----A---- C:\WINDOWS\SYSWOW64\PnkBstrA.exe
2013-11-06 18:56:42 ----D---- C:\ProgramData\Electronic Arts
2013-11-06 17:01:04 ----D---- C:\Program Files (x86)\Huntsman - The Orphanage
2013-11-05 14:40:08 ----D---- C:\Program Files (x86)\Dead Space 3 Limited Edition FULL-MULTI
2013-11-05 09:40:26 ----D---- C:\WINDOWS\system32\wdi
2013-11-04 19:44:32 ----D---- C:\WINDOWS\system32\NDF
2013-11-04 17:06:45 ----D---- C:\WINDOWS\system32\LogFiles