CloseProcesses:
CreateRestorePoint:
EmptyTemp:
CustomCLSID: HKU\S-1-5-21-3033997393-2674688898-342668537-1000_Classes\CLSID\{28B7AA99-C0F9-4C47-995E-8A8D729603A1}\localserver32 -> C:\Windows.old\Program Files\Autodesk\ACADM 2009\acad.exe /Automation => No File
CustomCLSID: HKU\S-1-5-21-3033997393-2674688898-342668537-1000_Classes\CLSID\{2F1F7574-ECCA-4361-B4DE-C411BF7EEE23}\localserver32 -> C:\Windows.old\Program Files\Autodesk\ACADM 2009\acad.exe /Automation => No File
CustomCLSID: HKU\S-1-5-21-3033997393-2674688898-342668537-1000_Classes\CLSID\{6AB55F46-2523-4701-A912-B226F46252BA}\localserver32 -> C:\Windows.old\Program Files\Autodesk\ACADM 2009\acad.exe /Automation => No File
CustomCLSID: HKU\S-1-5-21-3033997393-2674688898-342668537-1000_Classes\CLSID\{7AABBB95-79BE-4C0F-8024-EB6AF271231C}\localserver32 -> C:\Windows.old\Program Files\Autodesk\ACADM 2009\acad.exe => No File
Task: {93132486-5749-43BC-A8B8-28095AAAB279} - System32\Tasks\{4C5FF1D8-FE5D-4A92-9C96-48E8D6EF101E} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\QT Lite\QTSystem\quicktime.cpl"
HKU\S-1-5-19\...\Winlogon: [Shell] C:\Windows\explorer.exe [2872320 2010-11-20] (Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-20\...\Winlogon: [Shell] C:\Windows\explorer.exe [2872320 2010-11-20] (Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-21-3033997393-2674688898-342668537-1000\...\Policies\Explorer: [] 
HKU\S-1-5-21-3033997393-2674688898-342668537-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-18\...\Winlogon: [Shell] C:\Windows\explorer.exe [2872320 2010-11-20] (Microsoft Corporation) <==== ATTENTION
BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
BHO-x32: No Name -> {c0b1016f-b7e5-46f0-b415-6bf9e55ab00d} -> No File
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]