[RUN][SUSP PATH] HKCU\[...]\RunOnce : MATS-RunOnce ("C:\Windows\TEMP\RunBoot-Temp_.02749b26-3f81-40aa-9289-93d35c9d2bba\MatsBoot.exe" /Boot /Manifest "C:\Users\Snowball\AppData\Local\Temp\MATS-Temp\RunOnceManifest.XML" /DeleteLocalSource /Rebooted [7][-]) -> NALEZENO
[RUN][SUSP PATH] HKUS\S-1-5-21-1263782536-2748032887-3110968528-1000\[...]\RunOnce : MATS-RunOnce ("C:\Windows\TEMP\RunBoot-Temp_.02749b26-3f81-40aa-9289-93d35c9d2bba\MatsBoot.exe" /Boot /Manifest "C:\Users\Snowball\AppData\Local\Temp\MATS-Temp\RunOnceManifest.XML" /DeleteLocalSource /Rebooted [7][-]) -> NALEZENO
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> NALEZENO
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowPrinters (0) -> NALEZENO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO