SystemLook 30.07.11 by jpshortstuff
Log created at 21:42 on 16/07/2012 by Admin
Administrator - Elevation successful

========== regfind ==========

Searching for "PCTCore"
[HKEY_LOCAL_MACHINE\SOFTWARE\PCTools\Live Update\SD\Updates\pctcore.cat]
[HKEY_LOCAL_MACHINE\SOFTWARE\PCTools\Live Update\SD\Updates\PCTCore.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E967-E325-11CE-BFC1-08002BE10318}]
"LowerFilters"="PCTCore"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
"UpperFilters"="PCTCore kbdclass"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
"UpperFilters"="PCTCore mouclass"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\System]
"Sources"="WZCSVC Wudf01000 WpdUsb WPDMTPDriver WPDClassInstaller Workstation WMPNetworkSvc WindowsMedia Windows Update Agent Windows Script Host Windows Installer 3.1 Windows File Protection Win32k Wdf01007 W32Time VolSnap viaide VgaSave Usługa Magazyn wymienny USER32 UPS ultra udfs toside TermServSessDir TermService TermServDevices TermDD tdi TCPMon Tcpip System Error sym_u3 sym_hi symc8xx symc810 StillImage SSDPSRV Srv srservice sr sptd sparrow sndblst SMSvcHost 3.0.0.0 Simbad SideBySide sfloppy Setup Service Control Manager Server sermouse serial scsiport Schedule Schannel SCardSvr Save Dump SAM s1018bus RSVP RemoteAccess redbook Rdbss RasMan RasAuto ql1280 ql1240 ql12160 ql10wnt ql1080 PSched Processor PrintFilterPipelineSvc Print PptpMiniport PolicyAgent PlugPlayManager perc2 PCTCore pcmcia pciide pci parvdm partmgr parport OSPFMib OSPF NVENETFD nvata nv null NtServicePack ntfs npfs Nla Netlogon NetDDE NetBT NetBIOS NdisWan NdisIP ndis 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\System\PCTCore]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\System\PCTCore]
"EventMessageFile"="%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\PCTCore.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PCTCore]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PCTCore]
"ImagePath"="system32\drivers\PCTCore.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PCTCore\Instances]
"DefaultInstance"="PCTCore"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PCTCore\Instances\PCTCore]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E967-E325-11CE-BFC1-08002BE10318}]
"LowerFilters"="PCTCore"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
"UpperFilters"="PCTCore kbdclass"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
"UpperFilters"="PCTCore mouclass"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Eventlog\System]
"Sources"="WZCSVC Wudf01000 WpdUsb WPDMTPDriver WPDClassInstaller Workstation WMPNetworkSvc WindowsMedia Windows Update Agent Windows Script Host Windows Installer 3.1 Windows File Protection Win32k Wdf01007 W32Time VolSnap viaide VgaSave Usługa Magazyn wymienny USER32 UPS ultra udfs toside TermServSessDir TermService TermServDevices TermDD tdi TCPMon Tcpip System Error sym_u3 sym_hi symc8xx symc810 StillImage SSDPSRV Srv srservice sr sptd sparrow sndblst SMSvcHost 3.0.0.0 Simbad SideBySide sfloppy Setup Service Control Manager Server sermouse serial scsiport Schedule Schannel SCardSvr Save Dump SAM s1018bus RSVP RemoteAccess redbook Rdbss RasMan RasAuto ql1280 ql1240 ql12160 ql10wnt ql1080 PSched Processor PrintFilterPipelineSvc Print PptpMiniport PolicyAgent PlugPlayManager perc2 PCTCore pcmcia pciide pci parvdm partmgr parport OSPFMib OSPF NVENETFD nvata nv null NtServicePack ntfs npfs Nla Netlogon NetDDE NetBT NetBIOS NdisWan NdisIP ndis 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Eventlog\System\PCTCore]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Eventlog\System\PCTCore]
"EventMessageFile"="%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\PCTCore.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\PCTCore]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\PCTCore]
"ImagePath"="system32\drivers\PCTCore.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\PCTCore\Instances]
"DefaultInstance"="PCTCore"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\PCTCore\Instances\PCTCore]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E967-E325-11CE-BFC1-08002BE10318}]
"LowerFilters"="PCTCore"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
"UpperFilters"="PCTCore kbdclass"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
"UpperFilters"="PCTCore mouclass"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System]
"Sources"="WZCSVC Wudf01000 WpdUsb WPDMTPDriver WPDClassInstaller Workstation WMPNetworkSvc WindowsMedia Windows Update Agent Windows Script Host Windows Installer 3.1 Windows File Protection Win32k Wdf01007 W32Time VolSnap viaide VgaSave Usługa Magazyn wymienny USER32 UPS ultra udfs toside TermServSessDir TermService TermServDevices TermDD tdi TCPMon Tcpip System Error sym_u3 sym_hi symc8xx symc810 StillImage SSDPSRV Srv srservice sr sptd sparrow sndblst SMSvcHost 3.0.0.0 Simbad SideBySide sfloppy Setup Service Control Manager Server sermouse serial scsiport Schedule Schannel SCardSvr Save Dump SAM s1018bus RSVP RemoteAccess redbook Rdbss RasMan RasAuto ql1280 ql1240 ql12160 ql10wnt ql1080 PSched Processor PrintFilterPipelineSvc Print PptpMiniport PolicyAgent PlugPlayManager perc2 PCTCore pcmcia pciide pci parvdm partmgr parport OSPFMib OSPF NVENETFD nvata nv null NtServicePack ntfs npfs Nla Netlogon NetDDE NetBT NetBIOS NdisWan NdisIP n
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\PCTCore]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\PCTCore]
"EventMessageFile"="%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\PCTCore.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PCTCore]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PCTCore]
"ImagePath"="system32\drivers\PCTCore.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PCTCore\Instances]
"DefaultInstance"="PCTCore"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PCTCore\Instances\PCTCore]

-= EOF =-