Start
CreateRestorePoint:
HKU\S-1-5-21-4102688973-2130496443-4087980055-1000\...\MountPoints2: {52d012e3-d5ad-11e1-b991-e89a8f581443} - E:\AutoRun.exe
HKU\S-1-5-21-4102688973-2130496443-4087980055-1000\...\MountPoints2: {64e851e3-d31e-11e1-b5fa-e89a8f581443} - E:\AutoRun.exe
HKU\S-1-5-21-4102688973-2130496443-4087980055-1000\...\MountPoints2: {64e851ea-d31e-11e1-b5fa-e89a8f581443} - E:\AutoRun.exe
HKU\S-1-5-21-4102688973-2130496443-4087980055-1000\...\MountPoints2: {84b1a606-d4a6-11e1-a63d-e89a8f581443} - E:\setup_vmb_lite.exe /checkApplicationPresence
HKU\S-1-5-21-4102688973-2130496443-4087980055-1000\...\MountPoints2: {84b1a654-d4a6-11e1-a63d-e89a8f581443} - F:\setup_vmb_lite.exe /checkApplicationPresence
IFEO\pcdlauncher.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
2015-01-06 23:28 - 2015-01-06 23:28 - 00000000 _____ () C:\Windows\SysWOW64\shoB03E.tmp
2015-01-04 23:21 - 2015-01-04 23:21 - 00000000 _____ () C:\Windows\SysWOW64\sho7B28.tmp
2014-12-19 22:38 - 2014-12-19 22:38 - 00000000 _____ () C:\Windows\SysWOW64\sho6C6A.tmp
2014-12-19 20:24 - 2014-12-19 20:24 - 00000000 _____ () C:\Windows\SysWOW64\sho1881.tmp
2014-12-18 23:46 - 2014-12-18 23:46 - 00000000 _____ () C:\Windows\SysWOW64\sho7149.tmp
2014-12-15 22:16 - 2014-12-15 22:16 - 00000000 _____ () C:\Windows\SysWOW64\shoD809.tmp
2015-01-08 12:23 - 2014-08-29 21:10 - 00087780 _____ () C:\Users\gismeu\F23.DAT
2015-01-08 12:23 - 2014-04-19 18:49 - 00071456 _____ () C:\Users\gismeu\F17.DAT
2015-01-08 12:23 - 2014-03-26 11:40 - 00120764 _____ () C:\Users\gismeu\F16.DAT
2015-01-08 12:23 - 2013-11-27 06:49 - 00170968 _____ () C:\Users\gismeu\F14.DAT
2015-01-08 12:22 - 2013-10-11 19:21 - 00119672 _____ () C:\Users\gismeu\F13.DAT
2015-01-08 12:22 - 2013-06-10 08:33 - 00141820 _____ () C:\Users\gismeu\F11.DAT
2015-01-08 12:22 - 2011-08-05 11:30 - 00306796 _____ () C:\Users\gismeu\F3.DAT
2015-01-01 23:54 - 2013-07-02 09:58 - 00000000 ____D () C:\Users\gismeu\AppData\Local\AVG SafeGuard toolbar
C:\Users\gismeu\F1.DAT
C:\Users\gismeu\F11.DAT
C:\Users\gismeu\F13.DAT
C:\Users\gismeu\F14.DAT
C:\Users\gismeu\F16.DAT
C:\Users\gismeu\F17.DAT
C:\Users\gismeu\F23.DAT
C:\Users\gismeu\F3.DAT
EmptyTemp:
End