HKLM-x32\...\Run: [] => [X]
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-3399670195-734195552-4159410357-1002\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
SearchScopes: HKLM-x32 -> DefaultScope value is missing
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
2015-10-16 13:50 - 2015-10-16 13:50 - 00398336 __RSH C:\Windows\SysWOW64\NOISEQ.dll
2015-10-16 13:50 - 2015-10-16 13:50 - 00002592 _____ C:\Windows\System32\Tasks\qyqvfov
2015-10-16 17:09 - 2014-11-06 00:27 - 00000000 ____D C:\Windows\AutoKMS
CustomCLSID: HKU\S-1-5-21-3399670195-734195552-4159410357-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Samuel\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay => No File
Task: {3A0A8816-2CF0-4D76-AC98-356D3B3C6C3D} - System32\Tasks\qyqvfov => Rundll32.exe "C:\Windows\SysWOW64\NOISEQ.dll",ERTQUAZDDU
Task: {B334D14E-23FD-42A3-8A87-4D0EECCA1825} - \AutoKMS -> No File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Temp:DED17083
AlternateDataStreams: C:\Users\Samuel\Local Settings:dBx60XsvYsG61xwsojRanjS
AlternateDataStreams: C:\Users\Samuel\AppData\Local:dBx60XsvYsG61xwsojRanjS
AlternateDataStreams: C:\Users\Samuel\AppData\Local\Application Data:dBx60XsvYsG61xwsojRanjS
AlternateDataStreams: C:\Users\Samuel\AppData\Local\Temp:JQX8ZjKxTW5moBIQHh164fINp
AlternateDataStreams: C:\Users\Samuel\AppData\Local\Temporary Internet Files:HB9Xw3xdXJFXHOjGIl7CQmGX4K
AlternateDataStreams: C:\Users\Samuel\AppData\Local\Temporary Internet Files:kpPHkXdaCG7yMzVlZcC9M1eT0bxb
EmtpyTemp: