Logfile of random's system information tool 1.09 (written by random/random)
Run by Jenda at 2014-01-12 16:07:02
Microsoft Windows 8.1
System drive C: has 795 GB (87%) free of 912 GB
Total RAM: 7364 MB (71% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:07:04, on 12. 1. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.16384)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Valve\Steam\Steam.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\trend micro\Jenda.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://lenovo13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Valve\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
O4 - HKUS\S-1-5-18\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~1\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Autodesk Content Service - Autodesk, Inc. - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Conexant Audio Message Service (CxAudMsg) - Unknown owner - C:\windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: Distributed Computing Experiment (DCE) - Unknown owner - C:\Program Files\DCE\dce.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LSCWinService - Unknown owner - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: VeriFaceSrv - Unknown owner - C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
--
End of file - 10668 bytes
======Listing Processes======
wininit.exe
winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\atiesrxx.exe
"dwm.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
atieclxx
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe"
C:\windows\system32\CxAudMsg64.exe
"C:\Program Files\DCE\dce.exe"
dashost.exe {a6ef83d1-3e73-4b44-9262c0a2a298f7b4}
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe"
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-792f7dd7-e0f3-48d0-af8f-fd32d3749b2e -SystemEventPortName:HostProcess-6ced9666-52dc-4065-948b-d0a4ba13c6c6 -IoCancelEventPortName:HostProcess-2a4d66e8-8398-498d-80e1-2e1bee82ad8f -NonStateChangingEventPortName:HostProcess-064beeeb-50ae-4666-8530-86b4ea892223 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:b22b7690-a944-43c1-8868-253840643f0a -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 592 596 604 65536 600
taskeng.exe {6C96732D-0229-4B9D-8E11-99A42640D123}
taskhostex.exe
C:\WINDOWS\Explorer.EXE
"C:\WINDOWS\notepad.exe" C:\_OTM\MovedFiles\01122014_160105.log
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
C:\Windows\System32\skydrive.exe -Embedding
"C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
C:\Windows\System32\RuntimeBroker.exe -Embedding
taskhost.exe $(Arg0)
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files\Elantech\ETDIntelligent.exe"
"C:\Windows\RTFTrack.exe"
"C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe"
C:\WINDOWS\System32\svchost.exe -k WerSvcGroup
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Valve\Steam\Steam.exe" -silent
C:\WINDOWS\WinStore\WSHost.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4340.0.1246197653\869890701" --disable-image-transport-surface --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,3,12,22 --reduce-gpu-sandbox --gpu-vendor-id=0x1002 --gpu-device-id=0x9903 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=13.251.0.0 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group5 pct:10d stable:pp3 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_75/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --instant-process --disable-html-notifications --channel="4340.1.1941031602\408243041" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group5 pct:10d stable:pp3 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_75/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --channel="4340.2.596337958\1726125865" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group5 pct:10d stable:pp3 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_75/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --channel="4340.3.1584105312\1868629934" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group5 pct:10d stable:pp3 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_75/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --channel="4340.4.1335530605\1598430103" /prefetch:673131151
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group5 pct:10d stable:pp3 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_75/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="4340.5.613328373\572149020" /prefetch:673131151
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group5 pct:10d stable:pp3 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_75/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="4340.6.1061963505\1454275562" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group5 pct:10d stable:pp3 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_75/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="4340.7.1128585699\2014208039" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group5 pct:10d stable:pp3 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_75/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="4340.8.1137214843\1531216054" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group5 pct:10d stable:pp3 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_75/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="4340.9.108098088\1626813168" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group5 pct:10d stable:pp3 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_75/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="4340.10.26284520\411874162" /prefetch:673131151
"C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group5 pct:10d stable:pp3 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_75/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="4340.11.1857993194\1428415446" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="4340.12.491788533\454060056" --ppapi-flash-args --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9600.16422_x64__8wekyb3d8bbwe\glcnd.exe" -ServerName:Microsoft.Reader.AppXtszmc7avrx02s7n8gch63tzwg517wd9k.mca
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Jenda\Downloads\RSITx64.exe"
wmiadap.exe /F /T /R
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2013-11-15 218784]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-12-24 1372864]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
Shopper Pro - C:\ProgramData\ShopperPro\ShopperPro64.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2013-11-02 2331336]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2013-11-15 153248]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-12-24 1138536]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2013-11-02 1727176]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll []
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-12-24 1372864]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2013-03-05 2876816]
"RtsFT"=C:\WINDOWS\RTFTrack.exe [2013-04-10 6339656]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2013-02-04 899680]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2012-06-13 1647616]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2013-08-24 17097200]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2013-08-24 193008]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-01-25 131712]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files (x86)\Valve\Steam\Steam.exe [2014-01-07 1815464]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]
"Autodesk Sync"=C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [2013-02-05 1081224]
"AdobeBridge"= []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-04-25 642816]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2012-04-19 217088]
"RemoteControl10"=C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]
"mcui_exe"=C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey []
"Intel AppUp(SM) center"=C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-07-12 155488]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-12-24 3764024]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-01-25 131712]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SystemEventsBroker]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmartcardSimulator]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SystemEventsBroker]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VirtualSmartcardReader]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wcmsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"EnableUIADesktopToggle"=0
"EnableCursorSuppression"=1
"ConsentPromptBehaviorUser"=3
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"DisableCAD"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
""=
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktopChanges"=1
"NoActiveDesktop"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\WINDOWS\system32\notepad.exe "%1"
.scr - install -
.scr - config -
======List of files/folders created in the last 1 month======
2014-01-12 16:01:05 ----D---- C:\_OTM
2014-01-12 14:24:35 ----D---- C:\rsit
2014-01-12 14:24:35 ----D---- C:\Program Files\trend micro
2014-01-12 10:51:27 ----D---- C:\AdwCleaner
2014-01-06 10:01:21 ----D---- C:\Program Files (x86)\XBOX_360_Controller_emulator_v3.0_for_PC_games
2014-01-06 10:01:21 ----AS---- C:\WINDOWS\SYSWOW64\nircmdc.exe
2014-01-05 21:35:27 ----D---- C:\WINDOWS\SYSWOW64\xlive
2014-01-05 21:00:30 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-05 20:59:28 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_40.dll
2014-01-05 20:59:28 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_40.dll
2014-01-05 20:59:28 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2014-01-05 20:59:28 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2014-01-05 20:59:27 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_40.dll
2014-01-05 20:59:27 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2014-01-05 08:46:28 ----D---- C:\Program Files (x86)\epson
2013-12-27 14:15:44 ----RD---- C:\WINDOWS\BrowserChoice
2013-12-25 21:45:53 ----D---- C:\Users\Jenda\AppData\Roaming\TS3Client
2013-12-25 21:45:35 ----D---- C:\Program Files (x86)\TeamSpeak 3 Client
2013-12-25 19:50:29 ----D---- C:\Users\Jenda\AppData\Roaming\Google
2013-12-25 19:27:58 ----D---- C:\Program Files (x86)\Sniper Elite Nazi Zombie Army 2
2013-12-25 18:28:18 ----D---- C:\Program Files (x86)\Activision
2013-12-25 16:53:11 ----D---- C:\Program Files (x86)\SysPlayer
2013-12-25 16:50:59 ----D---- C:\Program Files\DCE
2013-12-25 16:49:59 ----D---- C:\Users\Jenda\AppData\Roaming\uTorrent
2013-12-25 12:45:07 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2013-12-25 12:43:20 ----D---- C:\Program Files\Adobe
2013-12-25 12:38:04 ----D---- C:\Program Files\Common Files\Adobe
2013-12-25 12:23:53 ----D---- C:\ProgramData\FLEXnet
2013-12-25 12:23:02 ----D---- C:\ProgramData\FARO
2013-12-25 12:15:21 ----D---- C:\Program Files\Common Files\Macrovision Shared
2013-12-25 12:12:49 ----D---- C:\Program Files\Common Files\Autodesk Shared
2013-12-25 12:12:49 ----D---- C:\Program Files\Autodesk
2013-12-25 12:07:47 ----D---- C:\Program Files (x86)\Autodesk
2013-12-25 11:21:02 ----D---- C:\Autodesk
2013-12-25 11:07:02 ----D---- C:\Users\Jenda\AppData\Roaming\Identities
2013-12-25 11:02:21 ----SHD---- C:\ProgramData\Šablony
2013-12-25 11:02:21 ----SHD---- C:\ProgramData\Plocha
2013-12-25 11:02:21 ----SHD---- C:\ProgramData\Nabídka Start
2013-12-25 11:02:21 ----SHD---- C:\ProgramData\Dokumenty
2013-12-25 11:02:21 ----SHD---- C:\ProgramData\Data aplikací
2013-12-25 11:01:14 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2013-12-25 10:48:47 ----SD---- C:\Users\Jenda\AppData\Roaming\Microsoft
2013-12-25 10:42:22 ----D---- C:\ProgramData\Conexant
2013-12-25 10:42:21 ----D---- C:\Program Files\CONEXANT
2013-12-25 10:42:15 ----D---- C:\AMD
2013-12-25 10:42:08 ----D---- C:\Program Files\Common Files\ATI Technologies
2013-12-25 10:42:05 ----D---- C:\Program Files\AMD
2013-12-25 10:41:44 ----D---- C:\Program Files\Elantech
2013-12-25 10:39:47 ----D---- C:\WINDOWS\Prefetch
2013-12-25 10:37:18 ----SHD---- C:\Recovery
2013-12-25 10:37:09 ----DC---- C:\WINDOWS\Panther
2013-12-25 10:34:33 ----A---- C:\WINDOWS\SYSWOW64\imagehlp.dll
2013-12-25 10:34:33 ----A---- C:\WINDOWS\system32\imagehlp.dll
2013-12-25 10:34:09 ----A---- C:\WINDOWS\SYSWOW64\WMPhoto.dll
2013-12-25 10:34:09 ----A---- C:\WINDOWS\system32\WMPhoto.dll
2013-12-25 10:33:58 ----A---- C:\WINDOWS\SYSWOW64\scrrun.dll
2013-12-25 10:33:58 ----A---- C:\WINDOWS\system32\scrrun.dll
2013-12-25 10:33:45 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll
2013-12-25 10:33:45 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2013-12-25 10:33:45 ----A---- C:\WINDOWS\system32\MDMAgent.exe
2013-12-25 10:32:38 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2013-12-25 10:32:38 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2013-12-25 10:32:38 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2013-12-25 10:32:37 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2013-12-25 10:32:37 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2013-12-25 10:32:37 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2013-12-25 10:32:37 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2013-12-25 10:32:37 ----A---- C:\WINDOWS\system32\wininet.dll
2013-12-25 10:32:37 ----A---- C:\WINDOWS\system32\urlmon.dll
2013-12-25 10:32:37 ----A---- C:\WINDOWS\system32\mshtml.dll
2013-12-25 10:32:37 ----A---- C:\WINDOWS\system32\jscript9.dll
2013-12-25 10:32:37 ----A---- C:\WINDOWS\system32\iertutil.dll
2013-12-25 10:32:37 ----A---- C:\WINDOWS\system32\ieframe.dll
2013-12-25 10:32:37 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2013-12-25 10:32:37 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2013-12-25 10:31:25 ----A---- C:\WINDOWS\system32\win32k.sys
2013-12-25 10:31:15 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2013-12-25 10:31:15 ----A---- C:\WINDOWS\system32\SkyDrive.exe
2013-12-25 10:30:32 ----AC---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2013-12-25 10:30:32 ----AC---- C:\WINDOWS\system32\drivers\spaceport.sys
2013-12-25 10:30:32 ----AC---- C:\WINDOWS\system32\drivers\intelpep.sys
2013-12-25 10:30:32 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2013-12-25 10:30:32 ----A---- C:\WINDOWS\SYSWOW64\wlidcli.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2013-12-25 10:30:32 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\SYSWOW64\Display.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\SYSWOW64\dcomp.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\SYSWOW64\CredentialMigrationHandler.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\WSShared.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\wpncore.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\wlidcli.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\winresume.exe
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\winload.exe
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\winbici.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\twinui.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\msftedit.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\dxgi.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\dwmcore.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\drivers\SerCx2.sys
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\Display.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\dcomp.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\d3d11.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\CredentialMigrationHandler.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2013-12-25 10:30:32 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2013-12-25 10:24:00 ----D---- C:\Program Files (x86)\Reference Assemblies
2013-12-25 10:24:00 ----D---- C:\Program Files (x86)\MSBuild
2013-12-25 10:23:56 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2013-12-25 10:23:55 ----D---- C:\Program Files\Reference Assemblies
2013-12-25 10:23:55 ----D---- C:\Program Files\MSBuild
2013-12-25 10:22:49 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2013-12-25 10:22:49 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2013-12-25 10:22:49 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-12-25 10:22:48 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2013-12-25 10:22:48 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-12-25 10:22:47 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2013-12-25 09:37:55 ----D---- C:\ProgramData\Steam
2013-12-25 09:37:54 ----D---- C:\ProgramData\Bohemia Interactive
2013-12-25 09:36:48 ----D---- C:\ProgramData\Package Cache
2013-12-25 09:34:32 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_7.dll
2013-12-25 09:34:32 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_5.dll
2013-12-25 09:34:32 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2013-12-25 09:34:32 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2013-12-25 09:34:31 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_7.dll
2013-12-25 09:34:31 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2013-12-25 09:34:30 ----A---- C:\WINDOWS\SYSWOW64\d3dcsx_43.dll
2013-12-25 09:34:30 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_43.dll
2013-12-25 09:34:30 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2013-12-25 09:34:30 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2013-12-25 09:34:29 ----A---- C:\WINDOWS\SYSWOW64\d3dx11_43.dll
2013-12-25 09:34:29 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2013-12-25 09:34:28 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_43.dll
2013-12-25 09:34:28 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_43.dll
2013-12-25 09:34:28 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2013-12-25 09:34:28 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2013-12-25 09:34:27 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_6.dll
2013-12-25 09:34:27 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_4.dll
2013-12-25 09:34:27 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2013-12-25 09:34:27 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2013-12-25 09:34:26 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_6.dll
2013-12-25 09:34:26 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2013-12-25 09:34:25 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_7.dll
2013-12-25 09:34:25 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2013-12-25 09:34:24 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_5.dll
2013-12-25 09:34:24 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2013-12-25 09:34:23 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_5.dll
2013-12-25 09:34:23 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_42.dll
2013-12-25 09:34:23 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2013-12-25 09:34:23 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2013-12-25 09:34:22 ----A---- C:\WINDOWS\SYSWOW64\d3dcsx_42.dll
2013-12-25 09:34:22 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2013-12-25 09:34:21 ----A---- C:\WINDOWS\SYSWOW64\d3dx11_42.dll
2013-12-25 09:34:21 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2013-12-25 09:34:20 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_42.dll
2013-12-25 09:34:20 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2013-12-25 09:34:19 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_42.dll
2013-12-25 09:34:19 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2013-12-25 09:34:18 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_41.dll
2013-12-25 09:34:18 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_41.dll
2013-12-25 09:34:18 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2013-12-25 09:34:18 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2013-12-25 09:34:17 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_41.dll
2013-12-25 09:34:17 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2013-12-25 09:34:16 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_4.dll
2013-12-25 09:34:16 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_3.dll
2013-12-25 09:34:16 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2013-12-25 09:34:16 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2013-12-25 09:34:14 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_4.dll
2013-12-25 09:34:14 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2013-12-25 09:34:13 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_6.dll
2013-12-25 09:34:13 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2013-12-25 09:34:10 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_3.dll
2013-12-25 09:34:10 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_2.dll
2013-12-25 09:34:10 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2013-12-25 09:34:10 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2013-12-25 09:34:09 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_3.dll
2013-12-25 09:34:09 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_5.dll
2013-12-25 09:34:09 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2013-12-25 09:34:09 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2013-12-25 09:34:08 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_2.dll
2013-12-25 09:34:08 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_1.dll
2013-12-25 09:34:08 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2013-12-25 09:34:08 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2013-12-25 09:34:07 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_2.dll
2013-12-25 09:34:07 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2013-12-25 09:34:06 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_39.dll
2013-12-25 09:34:06 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_39.dll
2013-12-25 09:34:06 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_39.dll
2013-12-25 09:34:06 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2013-12-25 09:34:06 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2013-12-25 09:34:06 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2013-12-25 09:34:05 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_1.dll
2013-12-25 09:34:05 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_0.dll
2013-12-25 09:34:05 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2013-12-25 09:34:05 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2013-12-25 09:34:04 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_1.dll
2013-12-25 09:34:04 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_4.dll
2013-12-25 09:34:04 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2013-12-25 09:34:04 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2013-12-25 09:34:03 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_38.dll
2013-12-25 09:34:03 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_38.dll
2013-12-25 09:34:03 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2013-12-25 09:34:03 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2013-12-25 09:34:02 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_38.dll
2013-12-25 09:34:02 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2013-12-25 09:34:01 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_0.dll
2013-12-25 09:34:01 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2013-12-25 09:34:00 ----A---- C:\WINDOWS\SYSWOW64\xactengine3_0.dll
2013-12-25 09:34:00 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_3.dll
2013-12-25 09:34:00 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2013-12-25 09:34:00 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2013-12-25 09:33:59 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_37.dll
2013-12-25 09:33:59 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_37.dll
2013-12-25 09:33:59 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2013-12-25 09:33:59 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2013-12-25 09:33:58 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_37.dll
2013-12-25 09:33:58 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2013-12-25 09:33:57 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_10.dll
2013-12-25 09:33:57 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2013-12-25 09:33:56 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_36.dll
2013-12-25 09:33:56 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_36.dll
2013-12-25 09:33:56 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2013-12-25 09:33:56 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2013-12-25 09:33:55 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_36.dll
2013-12-25 09:33:55 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2013-12-25 09:33:54 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_9.dll
2013-12-25 09:33:54 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2013-12-25 09:33:53 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_35.dll
2013-12-25 09:33:53 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_35.dll
2013-12-25 09:33:53 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2013-12-25 09:33:53 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2013-12-25 09:33:52 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_35.dll
2013-12-25 09:33:52 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2013-12-25 09:33:51 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_8.dll
2013-12-25 09:33:51 ----A---- C:\WINDOWS\SYSWOW64\X3DAudio1_2.dll
2013-12-25 09:33:51 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2013-12-25 09:33:51 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2013-12-25 09:33:50 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_34.dll
2013-12-25 09:33:50 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_34.dll
2013-12-25 09:33:50 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2013-12-25 09:33:50 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2013-12-25 09:33:49 ----A---- C:\WINDOWS\SYSWOW64\xinput1_3.dll
2013-12-25 09:33:49 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_34.dll
2013-12-25 09:33:49 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2013-12-25 09:33:49 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2013-12-25 09:33:48 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_7.dll
2013-12-25 09:33:48 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2013-12-25 09:33:46 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_33.dll
2013-12-25 09:33:46 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_33.dll
2013-12-25 09:33:46 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2013-12-25 09:33:46 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2013-12-25 09:33:45 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_33.dll
2013-12-25 09:33:45 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2013-12-25 09:33:44 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_6.dll
2013-12-25 09:33:44 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_5.dll
2013-12-25 09:33:44 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2013-12-25 09:33:44 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2013-12-25 09:33:43 ----A---- C:\WINDOWS\SYSWOW64\d3dx10.dll
2013-12-25 09:33:43 ----A---- C:\WINDOWS\system32\d3dx10.dll
2013-12-25 09:33:42 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_4.dll
2013-12-25 09:33:42 ----A---- C:\WINDOWS\SYSWOW64\x3daudio1_1.dll
2013-12-25 09:33:42 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_32.dll
2013-12-25 09:33:42 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2013-12-25 09:33:42 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2013-12-25 09:33:42 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2013-12-25 09:33:41 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_31.dll
2013-12-25 09:33:41 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2013-12-25 09:33:40 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_3.dll
2013-12-25 09:33:40 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2013-12-25 09:33:39 ----A---- C:\WINDOWS\SYSWOW64\xinput1_2.dll
2013-12-25 09:33:39 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_2.dll
2013-12-25 09:33:39 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2013-12-25 09:33:39 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2013-12-25 09:33:38 ----A---- C:\WINDOWS\SYSWOW64\xinput1_1.dll
2013-12-25 09:33:38 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2013-12-25 09:33:37 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_1.dll
2013-12-25 09:33:37 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2013-12-25 09:33:34 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_30.dll
2013-12-25 09:33:34 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2013-12-25 09:33:33 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_0.dll
2013-12-25 09:33:33 ----A---- C:\WINDOWS\SYSWOW64\x3daudio1_0.dll
2013-12-25 09:33:33 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2013-12-25 09:33:33 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2013-12-25 09:33:32 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_29.dll
2013-12-25 09:33:32 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_28.dll
2013-12-25 09:33:32 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2013-12-25 09:33:32 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2013-12-25 09:33:31 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_27.dll
2013-12-25 09:33:31 ----A---- C:\WINDOWS\system32\d3dx9_27.dll