Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 93097 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

MalwareBytes removed a serious threat but Win 7 machine crippled

MalwareBytes Windows 7 64bit black desktop only mouse move

  • This topic is locked This topic is locked
71 replies to this topic

#46 Safe

Safe

    Authentic Member

  • Authentic Member
  • PipPip
  • 41 posts

Posted 20 March 2018 - 10:13 AM

Very sorry Satchfan, but I still have not found the logs.  Boggin at Tweaking forum told me another way to view hidden files and you way (as I read it) did not work.  He pointed me to  https://www.howtogee...-windows-vista/ .

 

And, this site with pictures was very clear, but still that path C:\Users\Morgan Pierce Parker\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs has nothing.  I even looked under C:\Users\Morgan Pierce Parker\AppData\Roaming and there was no Malwarebytes anywhere.

 

I am thinking that there are two Malwarebytes programs and I am running the wrong one.  But, whatever I download, it always seems to be the same Malwarebytes program.


    Advertisements

Register to Remove


#47 Safe

Safe

    Authentic Member

  • Authentic Member
  • PipPip
  • 41 posts

Posted 20 March 2018 - 10:27 AM

OK, Satchfan, Boggin just asked me to look at the Malwarebytes window and I discovered that I can check the reports and export the logs.  Maybe this is what you want.

 

Here is the one marked Malware bytes EXPORT log 2018 03 20:

 

Malwarebytes
www.malwarebytes.com
 
-Log Details-
Scan Date: 3/20/18
Scan Time: 10:26 AM
Log File: bba8299e-2c4a-11e8-a485-00ff83c10af3.json
Administrator: Yes
 
-Software Information-
Version: 3.4.4.2398
Components Version: 1.0.322
Update Package Version: 1.0.4422
License: Expired
 
-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: M764-140-DQ64G3\Morgan Pierce Parker
 
-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 804234
Threats Detected: 7
Threats Quarantined: 7
Time Elapsed: 16 min, 41 sec
 
-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
 
-Scan Details-
Process: 0
(No malicious items detected)
 
Module: 0
(No malicious items detected)
 
Registry Key: 0
(No malicious items detected)
 
Registry Value: 0
(No malicious items detected)
 
Registry Data: 0
(No malicious items detected)
 
Data Stream: 0
(No malicious items detected)
 
Folder: 3
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_metadata, Quarantined, [2172], [373186],1.0.4422
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0, Quarantined, [2172], [373186],1.0.4422
PUP.Optional.FastestTube, C:\USERS\MORGAN PIERCE PARKER\APPDATA\ROAMING\OPERA SOFTWARE\OPERA STABLE\EXTENSIONS\PHAHNHBGFDHGOBENEBNJBGMACGPBFAAG, Quarantined, [2172], [373186],1.0.4422
 
File: 4
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_metadata\computed_hashes.json, Quarantined, [2172], [373186],1.0.4422
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_metadata\verified_contents.json, Quarantined, [2172], [373186],1.0.4422
PUP.Optional.FindWide, C:\USERS\MORGAN PIERCE PARKER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\DZYGI7OP.DEFAULT\PREFS.JS, Replaced, [7323], [301558],1.0.4422
PUP.Optional.Freshy, C:\USERS\MORGAN PIERCE PARKER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\DZYGI7OP.DEFAULT\PREFS.JS, Replaced, [184], [301562],1.0.4422
 
Physical Sector: 0
(No malicious items detected)
 
 
(end)
 
 
AND HERE IS THE ONE MARKED Malware bytes EXPORT log 2018 03 19
 
Malwarebytes
www.malwarebytes.com
 
-Log Details-
Scan Date: 3/19/18
Scan Time: 2:40 PM
Log File: ffceddda-2ba4-11e8-8fb0-00ff83c10af3.json
Administrator: Yes
 
-Software Information-
Version: 3.4.4.2398
Components Version: 1.0.322
Update Package Version: 1.0.4412
License: Expired
 
-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: M764-140-DQ64G3\Morgan Pierce Parker
 
-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 801658
Threats Detected: 265
Threats Quarantined: 265
Time Elapsed: 13 min, 5 sec
 
-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
 
-Scan Details-
Process: 0
(No malicious items detected)
 
Module: 0
(No malicious items detected)
 
Registry Key: 92
PUP.Optional.4SharedTB, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\4shared.com Toolbar, Quarantined, [9587], [173844],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{119DE230-46C4-4D54-BECE-8AC1F43A8590}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{16B9C0E6-BF69-4EEF-85E1-104B4C37A533}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{18CA14A3-6530-4067-951E-4C5A1EEC9147}, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1EA673AB-A95E-45B6-A9BB-91A471D9F3C8}, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{225A91E0-FA68-4580-92C5-CAA3BCFDC1DD}, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{238090EB-A87F-4A93-A7D0-45BD10B7BD4B}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2F9D201A-6878-4F59-A411-8DA0DCC055E3}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{302D08E7-9CAE-4D12-809B-1C7119958F55}, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{319F7FEC-A1E1-4F08-B080-C19E6C69DD27}, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{32207822-C26C-46DD-99A7-C69C9F113B60}, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{387EF62A-2EF0-44F9-AF21-89FACD661C13}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3CFF5F15-1565-4669-869F-464C88BD4882}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3FFC4080-FFAB-4293-8CA0-98A8A136A19B}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{47762822-8565-42F7-8413-78AE12BDD7E5}, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BF932C3-E01C-483F-A7F4-1DB83E23C429}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{50E80BBD-B413-4AB6-9F70-ECD96F28C8D0}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5370AE25-54EB-4EFC-B0BE-80F6D4C3EA83}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{61B8292E-AE69-43D1-9AB0-7F128CACED88}, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{64BAEFEB-C4E8-4B51-95F4-E0E72A757DAD}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6B6952F0-F597-46C9-B8EF-48A147E1C156}, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{81ABFA87-404E-4102-9DD4-5871F591DDBB}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{827E47A7-9AEB-4E6F-A6C7-C1443B692848}, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8AC385E6-F4F2-47A9-B0BA-EF1E7FB46C46}, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8B9E15D8-C3F8-425F-BF20-FAD97C67BA98}, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C9D78FC-C9F4-455C-A36B-146F731193EF}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{92CC8B6D-6BC7-48E5-A6A6-BB2B9F62F6CA}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9EFD7A56-5A0D-4434-9027-5C42DCC85C63}, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AA262DFB-D627-4C78-BAB0-B6DE4278AA2F}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B3959830-4AC6-4173-B171-3E707BC89D8B}, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B7C3F14C-DC83-4766-BCA6-546FD73F3F41}, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B97167AB-AFB6-4ED7-929F-598EB359B17F}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C219EE8C-E1CF-4617-9B64-CBCBB9C1767E}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CEF28C34-F054-487B-9BEF-379339A0FA21}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D18816A7-DD3A-41FE-B6B6-2533FF72231D}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DA71BAC4-D221-4D09-ADE0-B6ECA7B0F5C6}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E23AF6B3-1FAA-48F4-A711-5775B6C1D764}, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EEB7CD76-A713-438A-B14D-2DD549872C33}, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F64C8C61-23C6-48F6-B133-96266B5EC998}, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F857CDED-2627-4A22-8D3A-E1C1969E4AC5}, Quarantined, [204], [237488],1.0.4412
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\ehhlaekjfiiojlddgndcnefflngfmhen, Quarantined, [2958], [239418],1.0.4412
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\nbljechdpodpbchbmjcoamidppmpnmlc, Quarantined, [2958], [239422],1.0.4412
PUP.Optional.Conduit.Generic, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4D1B637F-E1AF-4BBF-92B2-C38522805E18}, Quarantined, [1776], [443512],1.0.4412
PUP.Optional.Conduit.Generic, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8FDE505F-3CE4-4293-B777-76957792DD25}, Quarantined, [1776], [443512],1.0.4412
PUP.Optional.DriverRestore, HKLM\SOFTWARE\MICROSOFT\TRACING\DriverRestore_RASAPI32, Quarantined, [702], [336784],1.0.4412
PUP.Optional.DriverRestore, HKLM\SOFTWARE\MICROSOFT\TRACING\DriverRestore_RASMANCS, Quarantined, [702], [336784],1.0.4412
PUP.Optional.DriverWhiz, HKLM\SOFTWARE\MICROSOFT\TRACING\DriverWhiz_RASAPI32, Quarantined, [512], [336788],1.0.4412
PUP.Optional.DriverWhiz, HKLM\SOFTWARE\MICROSOFT\TRACING\DriverWhiz_RASMANCS, Quarantined, [512], [336788],1.0.4412
PUP.Optional.Incredibar, HKU\S-1-5-21-2396228472-3482715812-2186985281-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}, Quarantined, [6153], [239474],1.0.4412
PUP.Optional.AuslogicsBoostSpeed, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\AUSLOGICS\BoostSpeed, Quarantined, [1615], [383076],1.0.4412
PUP.Optional.2YourFace, HKU\S-1-5-21-2396228472-3482715812-2186985281-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}, Quarantined, [9599], [167612],1.0.4412
PUP.Optional.2YourFace, HKU\S-1-5-21-2396228472-3482715812-2186985281-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}, Quarantined, [9599], [167612],1.0.4412
PUP.Optional.2YourFace, HKU\S-1-5-21-2396228472-3482715812-2186985281-1007\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}, Quarantined, [9599], [167612],1.0.4412
PUP.Optional.2YourFace, HKU\S-1-5-21-2396228472-3482715812-2186985281-1008\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}, Quarantined, [9599], [167612],1.0.4412
PUP.Optional.2YourFace, HKU\S-1-5-21-2396228472-3482715812-2186985281-1016\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}, Quarantined, [9599], [167612],1.0.4412
PUP.Optional.2YourFace, HKU\S-1-5-21-2396228472-3482715812-2186985281-1018\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}, Quarantined, [9599], [167612],1.0.4412
PUP.Optional.2YourFace, HKU\S-1-5-21-2396228472-3482715812-2186985281-1021\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}, Quarantined, [9599], [167612],1.0.4412
PUP.Optional.2YourFace, HKU\S-1-5-21-2396228472-3482715812-2186985281-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}, Quarantined, [9599], [167612],1.0.4412
PUP.Optional.2YourFace, HKU\S-1-5-21-2396228472-3482715812-2186985281-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}, Quarantined, [9599], [167612],1.0.4412
PUP.Optional.2YourFace, HKU\S-1-5-21-2396228472-3482715812-2186985281-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}, Quarantined, [9599], [167612],1.0.4412
PUP.Optional.2YourFace, HKU\S-1-5-21-2396228472-3482715812-2186985281-1007\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}, Quarantined, [9599], [167612],1.0.4412
PUP.Optional.2YourFace, HKU\S-1-5-21-2396228472-3482715812-2186985281-1008\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}, Quarantined, [9599], [167612],1.0.4412
PUP.Optional.2YourFace, HKU\S-1-5-21-2396228472-3482715812-2186985281-1016\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}, Quarantined, [9599], [167612],1.0.4412
PUP.Optional.2YourFace, HKU\S-1-5-21-2396228472-3482715812-2186985281-1018\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}, Quarantined, [9599], [167612],1.0.4412
PUP.Optional.2YourFace, HKU\S-1-5-21-2396228472-3482715812-2186985281-1021\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}, Quarantined, [9599], [167612],1.0.4412
PUP.Optional.2YourFace, HKU\S-1-5-21-2396228472-3482715812-2186985281-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}, Quarantined, [9599], [167612],1.0.4412
PUP.Optional.FanTapper, HKLM\SOFTWARE\CLASSES\Fantapper.FantapperBHO, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKLM\SOFTWARE\CLASSES\CLSID\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKLM\SOFTWARE\CLASSES\Fantapper.FantapperBHO.1, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-1007\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-1008\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-1016\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-1018\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-1021\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-500\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-1007\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-1008\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-1016\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-1018\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-1021\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKU\S-1-5-21-2396228472-3482715812-2186985281-500\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.FanTapper, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{8A86D350-37AB-410A-8531-7D1363F317B3}, Quarantined, [9688], [167956],1.0.4412
PUP.Optional.SweetIM, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{DEDAF650-12B8-48F5-A843-BBA100716106}, Quarantined, [1128], [168883],1.0.4412
 
Registry Value: 50
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{119DE230-46C4-4D54-BECE-8AC1F43A8590}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{16B9C0E6-BF69-4EEF-85E1-104B4C37A533}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{18CA14A3-6530-4067-951E-4C5A1EEC9147}|APPNAME, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1EA673AB-A95E-45B6-A9BB-91A471D9F3C8}|APPNAME, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{225A91E0-FA68-4580-92C5-CAA3BCFDC1DD}|APPNAME, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{238090EB-A87F-4A93-A7D0-45BD10B7BD4B}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2F9D201A-6878-4F59-A411-8DA0DCC055E3}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{302D08E7-9CAE-4D12-809B-1C7119958F55}|APPNAME, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{319F7FEC-A1E1-4F08-B080-C19E6C69DD27}|APPNAME, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{32207822-C26C-46DD-99A7-C69C9F113B60}|APPNAME, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{387EF62A-2EF0-44F9-AF21-89FACD661C13}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3CFF5F15-1565-4669-869F-464C88BD4882}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3FFC4080-FFAB-4293-8CA0-98A8A136A19B}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{47762822-8565-42F7-8413-78AE12BDD7E5}|APPNAME, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BF932C3-E01C-483F-A7F4-1DB83E23C429}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{50E80BBD-B413-4AB6-9F70-ECD96F28C8D0}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5370AE25-54EB-4EFC-B0BE-80F6D4C3EA83}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{61B8292E-AE69-43D1-9AB0-7F128CACED88}|APPNAME, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{64BAEFEB-C4E8-4B51-95F4-E0E72A757DAD}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6B6952F0-F597-46C9-B8EF-48A147E1C156}|APPNAME, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{81ABFA87-404E-4102-9DD4-5871F591DDBB}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{827E47A7-9AEB-4E6F-A6C7-C1443B692848}|APPNAME, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8AC385E6-F4F2-47A9-B0BA-EF1E7FB46C46}|APPNAME, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8B9E15D8-C3F8-425F-BF20-FAD97C67BA98}|APPNAME, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C9D78FC-C9F4-455C-A36B-146F731193EF}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{92CC8B6D-6BC7-48E5-A6A6-BB2B9F62F6CA}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9EFD7A56-5A0D-4434-9027-5C42DCC85C63}|APPNAME, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AA262DFB-D627-4C78-BAB0-B6DE4278AA2F}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B3959830-4AC6-4173-B171-3E707BC89D8B}|APPNAME, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B7C3F14C-DC83-4766-BCA6-546FD73F3F41}|APPNAME, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B97167AB-AFB6-4ED7-929F-598EB359B17F}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C219EE8C-E1CF-4617-9B64-CBCBB9C1767E}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CEF28C34-F054-487B-9BEF-379339A0FA21}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D18816A7-DD3A-41FE-B6B6-2533FF72231D}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DA71BAC4-D221-4D09-ADE0-B6ECA7B0F5C6}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E23AF6B3-1FAA-48F4-A711-5775B6C1D764}|APPNAME, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EEB7CD76-A713-438A-B14D-2DD549872C33}|APPNAME, Quarantined, [204], [237487],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F64C8C61-23C6-48F6-B133-96266B5EC998}|APPNAME, Quarantined, [204], [237488],1.0.4412
PUP.Optional.CrossRider, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F857CDED-2627-4A22-8D3A-E1C1969E4AC5}|APPNAME, Quarantined, [204], [237488],1.0.4412
PUP.Optional.Conduit.Generic, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4D1B637F-E1AF-4BBF-92B2-C38522805E18}|APPPATH, Quarantined, [1776], [443512],1.0.4412
PUP.Optional.Conduit.Generic, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8FDE505F-3CE4-4293-B777-76957792DD25}|APPPATH, Quarantined, [1776], [443512],1.0.4412
PUP.Optional.Incredibar, HKU\S-1-5-21-2396228472-3482715812-2186985281-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|URL, Quarantined, [6153], [239474],1.0.4412
PUP.Optional.ASK, HKU\S-1-5-21-2396228472-3482715812-2186985281-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{D4027C7F-154A-4066-A1AD-4243D8127440}, Quarantined, [480], [306571],1.0.4412
PUP.Optional.ASK, HKU\S-1-5-21-2396228472-3482715812-2186985281-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{D4027C7F-154A-4066-A1AD-4243D8127440}, Quarantined, [480], [306571],1.0.4412
PUP.Optional.ASK, HKU\S-1-5-21-2396228472-3482715812-2186985281-1007\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{D4027C7F-154A-4066-A1AD-4243D8127440}, Quarantined, [480], [306571],1.0.4412
PUP.Optional.ASK, HKU\S-1-5-21-2396228472-3482715812-2186985281-1008\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{D4027C7F-154A-4066-A1AD-4243D8127440}, Quarantined, [480], [306571],1.0.4412
PUP.Optional.ASK, HKU\S-1-5-21-2396228472-3482715812-2186985281-1016\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{D4027C7F-154A-4066-A1AD-4243D8127440}, Quarantined, [480], [306571],1.0.4412
PUP.Optional.ASK, HKU\S-1-5-21-2396228472-3482715812-2186985281-1018\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{D4027C7F-154A-4066-A1AD-4243D8127440}, Quarantined, [480], [306571],1.0.4412
PUP.Optional.ASK, HKU\S-1-5-21-2396228472-3482715812-2186985281-500\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{D4027C7F-154A-4066-A1AD-4243D8127440}, Quarantined, [480], [306571],1.0.4412
PUP.Optional.ASK, HKU\S-1-5-21-2396228472-3482715812-2186985281-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{D4027C7F-154A-4066-A1AD-4243D8127440}, Quarantined, [480], [306571],1.0.4412
 
Registry Data: 1
PUP.Optional.Spigot, HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [604], [293199],1.0.4412
 
Data Stream: 0
(No malicious items detected)
 
Folder: 27
PUP.Optional.4SharedTB, C:\PROGRAM FILES\4SHARED.COM, Quarantined, [9587], [173844],1.0.4412
PUP.Optional.BazaarFriend, C:\Users\NewAdmin\AppData\Roaming\Mozilla\Firefox\Profiles\bvdhqxe7.default\extensions\addon@bazaarfriend.com\defaults\preferences, Quarantined, [10482], [175571],1.0.4412
PUP.Optional.BazaarFriend, C:\Users\NewAdmin\AppData\Roaming\Mozilla\Firefox\Profiles\bvdhqxe7.default\extensions\addon@bazaarfriend.com\defaults, Quarantined, [10482], [175571],1.0.4412
PUP.Optional.BazaarFriend, C:\USERS\NEWADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BVDHQXE7.DEFAULT\EXTENSIONS\ADDON@BAZAARFRIEND.COM, Quarantined, [10482], [175571],1.0.4412
PUP.Optional.Web2Save, C:\Users\NewAdmin\AppData\Roaming\Mozilla\Firefox\Profiles\bvdhqxe7.default\extensions\{f80bc79c-ab5e-418a-a0be-3d9e66b4e976}\defaults\preferences, Quarantined, [11164], [180389],1.0.4412
PUP.Optional.Web2Save, C:\Users\NewAdmin\AppData\Roaming\Mozilla\Firefox\Profiles\bvdhqxe7.default\extensions\{f80bc79c-ab5e-418a-a0be-3d9e66b4e976}\defaults, Quarantined, [11164], [180389],1.0.4412
PUP.Optional.Web2Save, C:\USERS\NEWADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BVDHQXE7.DEFAULT\EXTENSIONS\{F80BC79C-AB5E-418A-A0BE-3D9E66B4E976}, Quarantined, [11164], [180389],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_locales\de, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_locales\en, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_locales\es, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_locales\fr, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_locales\it, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_locales\ja, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_locales\nl, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_locales\ru, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_metadata, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\includes, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_locales, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\icons, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\USERS\MORGAN PIERCE PARKER\APPDATA\ROAMING\OPERA SOFTWARE\OPERA STABLE\EXTENSIONS\PHAHNHBGFDHGOBENEBNJBGMACGPBFAAG, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.Converter, C:\Users\Morgan Pierce Parker\AppData\Roaming\Mozilla\Firefox\Profiles\dzygi7op.default\jetpack\@Converter\simple-storage, Quarantined, [7291], [386988],1.0.4412
PUP.Optional.Converter, C:\USERS\MORGAN PIERCE PARKER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\DZYGI7OP.DEFAULT\JETPACK\@CONVERTER, Quarantined, [7291], [386988],1.0.4412
PUP.Optional.DriverSupport, C:\Users\Morgan Pierce Parker\AppData\Local\PC_Drivers_Headquarters\DriverRestore.exe_Url_qzg0ugsq4hj2h1bgcn3aj0icon2ajv4w\8.2.0.10, Quarantined, [2356], [484513],1.0.4412
PUP.Optional.DriverSupport, C:\Users\Morgan Pierce Parker\AppData\Local\PC_Drivers_Headquarters\DriverRestore.exe_Url_qzg0ugsq4hj2h1bgcn3aj0icon2ajv4w, Quarantined, [2356], [484513],1.0.4412
PUP.Optional.DriverSupport, C:\USERS\MORGAN PIERCE PARKER\APPDATA\LOCAL\PC_Drivers_Headquarters, Quarantined, [2356], [484513],1.0.4412
 
File: 95
PUP.Optional.4SharedTB, C:\Program Files\4shared.com\4shared.comToolbarHelper.exe, Quarantined, [9587], [173844],1.0.4412
PUP.Optional.4SharedTB, C:\Program Files\4shared.com\4shared.comToolbarHelper1.exe, Quarantined, [9587], [173844],1.0.4412
PUP.Optional.4SharedTB, C:\Program Files\4shared.com\tb4sh1.dll, Quarantined, [9587], [173844],1.0.4412
PUP.Optional.4SharedTB, C:\Program Files\4shared.com\tb4sh2.dll, Quarantined, [9587], [173844],1.0.4412
PUP.Optional.4SharedTB, C:\Program Files\4shared.com\tb4sha.dll, Quarantined, [9587], [173844],1.0.4412
PUP.Optional.4SharedTB, C:\Program Files\4shared.com\toolbar.cfg, Quarantined, [9587], [173844],1.0.4412
PUP.Optional.4SharedTB, C:\Program Files\4shared.com\uninstall.exe, Quarantined, [9587], [173844],1.0.4412
PUP.Optional.4SharedTB, C:\Program Files\4shared.com\UNWISE.EXE, Quarantined, [9587], [173844],1.0.4412
PUP.Optional.BazaarFriend, C:\Users\NewAdmin\AppData\Roaming\Mozilla\Firefox\Profiles\bvdhqxe7.default\extensions\addon@bazaarfriend.com\defaults\preferences\defaults.js, Quarantined, [10482], [175571],1.0.4412
PUP.Optional.BazaarFriend, C:\Users\NewAdmin\AppData\Roaming\Mozilla\Firefox\Profiles\bvdhqxe7.default\extensions\addon@bazaarfriend.com\chrome.manifest, Quarantined, [10482], [175571],1.0.4412
PUP.Optional.Converter, C:\USERS\MORGAN PIERCE PARKER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\DZYGI7OP.DEFAULT\EXTENSIONS\@CONVERTER.XPI, Quarantined, [7291], [386989],1.0.4412
PUP.Optional.Web2Save, C:\Users\NewAdmin\AppData\Roaming\Mozilla\Firefox\Profiles\bvdhqxe7.default\extensions\{f80bc79c-ab5e-418a-a0be-3d9e66b4e976}\defaults\preferences\defaults.js, Quarantined, [11164], [180389],1.0.4412
PUP.Optional.Web2Save, C:\Users\NewAdmin\AppData\Roaming\Mozilla\Firefox\Profiles\bvdhqxe7.default\extensions\{f80bc79c-ab5e-418a-a0be-3d9e66b4e976}\chrome.manifest, Quarantined, [11164], [180389],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\icons\icon100.png, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\icons\icon128.ico, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\icons\icon128.png, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\icons\icon32.png, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\icons\icon48.png, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\includes\content.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\includes\content_init.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\includes\content_messages.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\includes\content_messages_server.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\includes\frames_communicator_content.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\includes\greasemonkey_client.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\includes\i18n.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\includes\invokeAsyncImpl.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\includes\networkContentProxy.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\includes\wombat_content.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\browser.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\console.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\content_scripts_at_start_loader.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\deferred.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\downloads.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\event_listener.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\event_listener_common.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\frames_communicator_background.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\greasemonkey.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\i18n.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\init.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\io.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\json.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\messages.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\messages_bgClient.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\network.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\storage.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\storage_websql.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\storage_websql_preopen.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\system.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\timer.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\toolbox.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\wombat.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat\xml.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_locales\de\messages.json, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_locales\en\messages.json, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_locales\es\messages.json, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_locales\fr\messages.json, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_locales\it\messages.json, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_locales\ja\messages.json, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_locales\nl\messages.json, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_locales\ru\messages.json, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_metadata\computed_hashes.json, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\_metadata\verified_contents.json, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\ad-checker.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\background.html, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\cached_http_request.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\constants_ad.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\extension_info.json, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\fastesttube.css, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\fastesttube.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\fastesttube_bg.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\fastesttube_infobubble.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\inject.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\logger.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\main.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\manifest.json, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\opera_gallery_tracker.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\page-context-inject.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\statistics.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\statistics_host.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\stop_autoplay.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat_bg_utils.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\wombat_utils.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.FastestTube, C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag\2.4.0.19_0\youtube_ad_remover.js, Quarantined, [2171], [373186],1.0.4412
PUP.Optional.Converter, C:\Users\Morgan Pierce Parker\AppData\Roaming\Mozilla\Firefox\Profiles\dzygi7op.default\jetpack\@Converter\simple-storage\store.json, Quarantined, [7291], [386988],1.0.4412
PUP.Optional.DriverSupport, C:\Users\Morgan Pierce Parker\AppData\Local\PC_Drivers_Headquarters\DriverRestore.exe_Url_qzg0ugsq4hj2h1bgcn3aj0icon2ajv4w\8.2.0.10\user.config, Quarantined, [2356], [484513],1.0.4412
PUP.Optional.Iminent, C:\USERS\NEWADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BVDHQXE7.DEFAULT\PREFS.JS, Replaced, [2958], [301714],1.0.4412
PUP.Optional.Iminent, C:\USERS\NEWADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BVDHQXE7.DEFAULT\PREFS.JS, Replaced, [2958], [301714],1.0.4412
PUP.Optional.Iminent, C:\USERS\NEWADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BVDHQXE7.DEFAULT\PREFS.JS, Replaced, [2958], [301714],1.0.4412
PUP.Optional.Iminent, C:\USERS\NEWADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BVDHQXE7.DEFAULT\PREFS.JS, Replaced, [2958], [301714],1.0.4412
PUP.Optional.Iminent, C:\USERS\NEWADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BVDHQXE7.DEFAULT\PREFS.JS, Replaced, [2958], [301714],1.0.4412
PUP.Optional.Iminent, C:\USERS\NEWADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BVDHQXE7.DEFAULT\PREFS.JS, Replaced, [2958], [301714],1.0.4412
PUP.Optional.FindWide, C:\USERS\MORGAN PIERCE PARKER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\DZYGI7OP.DEFAULT\PREFS.JS, Replaced, [7321], [301558],1.0.4412
PUP.Optional.Freshy, C:\USERS\MORGAN PIERCE PARKER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\DZYGI7OP.DEFAULT\PREFS.JS, Replaced, [184], [301562],1.0.4412
PUP.Optional.AuslogicsBoostSpeed, C:\PROGRAMDATA\MFADATA\SELFUPD\TUNEUPA.CAB, Quarantined, [1615], [464521],1.0.4412
PUP.Optional.ASK, C:\WINDOWS\ASKTOOLBARINSTALLER.EXE, Quarantined, [480], [383618],1.0.4412
 
Physical Sector: 0
(No malicious items detected)
 
 
(end)


#48 Safe

Safe

    Authentic Member

  • Authentic Member
  • PipPip
  • 41 posts

Posted 20 March 2018 - 10:28 AM

Boggin also said:

 

You can also tell him that after conferring with garioch7 it was me that sent you to the BC forum and while you are being helped there, there will be no input from me.



#49 Satchfan

Satchfan

    SuperHelper

  • Malware Team
  • 6,813 posts
  • Interests:LFC, music, more LFC, more music

Posted 21 March 2018 - 04:10 AM

Are youy receiving help at the BC or any other forum?

 

If you have posted in multiple forums, it is not fair on the volunteers who offer their free time and can also lead to confusion for you if you receive conflicting advice.


NINA - Proud graduate of the WTT Classroom

Member of UNITE

The help you receive here is free but if you feel I have helped, you may consider making a Donation.

#50 Safe

Safe

    Authentic Member

  • Authentic Member
  • PipPip
  • 41 posts

Posted 21 March 2018 - 09:42 AM

Hi Satchfan,

 

No, I stopped with the Tweaking forum and all inquiries at other forums once Boggin told me to come here; in fact if I remember correctly the only other forum was the Opera forum which has to do with Opera only.  I did post something at MS or Dell on the original problem on Tweaking (which Boggin took over) but that was many, many months ago.  They offered no solutions.

 

When I could not post the output log from Malware, I went an tried to post the log output as images  on Tweking for you, but it was still too large for Tweaking; I was thinking that if I could post it there, then, I could direct you to the Tweaking post  Then, Boggin pointed out something and i was able to figure out how to get the TXT for the two posts I made above.


Edited by Safe, 21 March 2018 - 02:19 PM.


#51 Satchfan

Satchfan

    SuperHelper

  • Malware Team
  • 6,813 posts
  • Interests:LFC, music, more LFC, more music

Posted 21 March 2018 - 03:40 PM

Please uninstall:


4shared Desktop
4shared.com Toolbar
Foxit Reader Packages
Free File Viewer 2014
Movavi Photo Editor 2
Multi Image Optimizer Pro version 1.0.5.737
Opera 12.11
Opera 12.18
Opera Stable 18.0.1284.63
Opera Stable 19.0.1326.56
Opera Stable 51.0.2830.55


===================================================

Please run FRST again and make sure there is a checkmark next to ‘Addition.txt’ before you hit Scan.

Logs to include with next post:

New Frst.txt
New Addition.txt


Thanks

Satchfan

 


NINA - Proud graduate of the WTT Classroom

Member of UNITE

The help you receive here is free but if you feel I have helped, you may consider making a Donation.

#52 Safe

Safe

    Authentic Member

  • Authentic Member
  • PipPip
  • 41 posts

Posted 22 March 2018 - 01:14 PM

Howdy Satchfan, (when I say deleted below, I mean un-installed.)

 

I deleted Foxit Reader Packages, but I also saw Foxit Reader and Foxit Creator <=== did not delete as you did not specify these, but will if they should have been included in Foxit Packages)

 

Could not find Free File Viewer 2014 (Also, I believe this was on the list previously and I remember deleting it then.)

 

Movavi (Program nicely asked for feedback regarding deletion so I mentioned that BC said it compromised my computer.  Too bad, I really liked this program.  If Movavi improves or another program wants to install that has "machine compromise problems" how will I know if it is dangerous or not?)

 

Deleted Multi Image Optimizer Pro version 1.0.5.737 (<=== Hate to see this go also.)

 

I am posting before the next steps as deleting Opera 51 may close this page.



#53 Safe

Safe

    Authentic Member

  • Authentic Member
  • PipPip
  • 41 posts

Posted 22 March 2018 - 06:27 PM

OK, Satchfan,

 

I've had trouble getting back on as post was two long.  Also, remembered that I originally logged on in early March as FreeCat, but could not get in again as FreeCat so that is why I created "Safe" for the original problem (the one you are working on)..  I do not know what to do about those FreeCat entries as I can not get to them.

 

Here is log fro FRST: (next post for Addition)

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14.03.2018
Ran by Morgan Pierce Parker (administrator) on M764-140-DQ64G3 (22-03-2018 19:58:16)
Running from C:\Users\Morgan Pierce Parker\Desktop
Loaded Profiles: Morgan Pierce Parker (Available Profiles: Transition & ASPNET & Harriet Parker Mann & Morgan Pierce Parker & Pee Wee & Pierce Potye & _ocster_1clk_backup_ & NewAdmin & Administrator & DefaultAppPool)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(QILING Tech Co., Ltd.) C:\Program Files\QILING\Disk Master\DmAgent.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files\EASEUS\Todo Backup\bin\Agent.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(Microsoft) C:\Program Files\Softland\novaPDF 9\Server\novapdfs.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(zebNet Ltd) C:\Program Files\zebNet\Volume Shadow Copy Service\Volume Shadow Copy Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
() C:\Program Files\EASEUS\Todo Backup\bin\TodoBackupService.exe
(Irfan Skiljan) C:\Program Files (x86)\IrfanView\i_view32.exe
(AnVir Software) C:\Program Files (x86)\AnVir Task Manager Pro\AnVir.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(AnVir Software) C:\Program Files (x86)\AnVir Task Manager Pro\anvir64.exe
() C:\Program Files (x86)\YOUTUBE DOWNLOADER HD\YouTubeDownloaderHD.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(AntGROUP) C:\Program Files (x86)\Ant Download Manager\antFF\antFF.exe
(NinjaTrader LLC, hxxp://www.ninjatrader.com) C:\Program Files (x86)\NinjaTrader 7\bin64\NinjaTrader.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
(concept/design GmbH) C:\Program Files (x86)\concept design\onlineTV 13\onlineTV.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Readygo Soft) C:\Program Files (x86)\Readygo Screen Recorder\ReadygoScreenRecorder.exe
(thinkorswim, Inc) C:\Program Files\thinkorswim2\thinkorswim.exe
(Greatis Software) C:\Program Files (x86)\Greatis\Screen Beagle\SBPro.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Zhuhai Kingsoft Office-software Co.,Ltd) C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\wps.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
(Opera Software) C:\Program Files\Opera\52.0.2871.30\opera.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
Winlogon\Notify\dimsntfy: C:\Windows\system32\dimsntfy.dll [2007-02-18] (Microsoft Corporation)
Winlogon\Notify\EFS: C:\Windows\system32\sclgntfy.dll [2007-02-18] (Microsoft Corporation)
Winlogon\Notify\ScCertProp: C:\Windows\system32\wlnotify.dll [2007-02-18] (Microsoft Corporation)
Winlogon\Notify\Schedule: C:\Windows\system32\wlnotify.dll [2007-02-18] (Microsoft Corporation)
Winlogon\Notify\sclgntfy: C:\Windows\system32\sclgntfy.dll [2007-02-18] (Microsoft Corporation)
Winlogon\Notify\SensLogn: C:\Windows\system32\WlNotify.dll [2007-02-18] (Microsoft Corporation)
Winlogon\Notify\wlballoon: C:\Windows\system32\wlnotify.dll [2007-02-18] (Microsoft Corporation)
HKLM\...\Policies\Explorer: [MemCheckBoxInRunDlg] 1
HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Run: [Greatis Screen Beagle] => [X]
HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Policies\Explorer: [MaxRecentDocs] 0
HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Solar_System_Mars_3D.scr
SecurityProviders: credssp.dll, digest.dll
SSODL: EldosMountNotificator-cbfs5 - {DAA49CA1-B4BD-4873-A191-1ACD70F262D9} - C:\Windows\system32\cbfsMntNtf5.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator-cbfs5 - {DAA49CA1-B4BD-4873-A191-1ACD70F262D9} - C:\Windows\SysWOW64\cbfsMntNtf5.dll (EldoS Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Disabled [2016-09-02] ()
Startup: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Ensign Software (3).lnk [2014-04-03]
ShortcutTarget: Ensign Software (3).lnk -> C:\Ensign10\Ensign.exe (No File)
Startup: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Ensign Windows.lnk [2014-04-03]
ShortcutTarget: Ensign Windows.lnk -> C:\Program Files\ENSIGNNEW\Ensign.exe (Ensign Software, Inc.)
Startup: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0 105 Desktop - Shortcut [2016-09-02] ()
Startup: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1 DOWNLOADS - Shortcut [2016-09-02] ()
Startup: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\140 - Shortcut [2016-09-02] ()
Startup: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Z OLD HOLDS [2017-12-24] ()
Startup: C:\Users\Transition\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AnVir Task Manager Pro.lnk [2012-05-09]
ShortcutTarget: AnVir Task Manager Pro.lnk -> C:\Program Files (x86)\AnVir Task Manager Pro\AnVir.exe (AnVir Software)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{047E6F90-FFFB-43B3-8B31-820B734306B1}: [NameServer] 167.206.254.1,167.206.254.2
Tcpip\..\Interfaces\{42B00B05-B9F7-45D5-B008-21E7076BEE9B}: [NameServer] 167.206.13.180,167.206.13.181
Tcpip\..\Interfaces\{50B23566-AD4D-44F4-A1E4-3CD5FF34029E}: [DhcpNameServer] 192.168.1.1
 
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
SearchScopes: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006 -> DefaultScope {E8307B89-5F41-4591-83AE-91CC210327DF} URL = hxxp://search.findwide.com/serp?guid={8923D673-FC0B-4784-9C22-AB23B57D4599}&action=default_search&k={searchTerms}
SearchScopes: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006 -> {E8307B89-5F41-4591-83AE-91CC210327DF} URL = hxxp://search.findwide.com/serp?guid={8923D673-FC0B-4784-9C22-AB23B57D4599}&action=default_search&k={searchTerms}
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> c:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2015-09-16] (RealDownloader)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2017-09-05] (Microsoft Corporation)
BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2015-08-24] (Siber Systems Inc.)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\ssv.dll [2011-11-08] (Oracle Corporation)
BHO: Ant Download Manager BHO -> {8ABC6AE5-74BD-4c73-BB34-44526792D2AE} -> C:\Program Files (x86)\Ant Download Manager\antIE\antIE64.dll [2017-11-27] (AntGROUP)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-25] (Logitech, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2017-09-05] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2017-09-05] (Microsoft Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll [2011-11-08] (Oracle Corporation)
BHO-x32: Wondershare YouTube Downloader -> {133232D2-DAE3-4B6F-AAC2-17CD87495682} -> C:\Program Files (x86)\Wondershare\AllMyTube\SVRIEPlugin.dll [2012-03-06] (Wondershare Software Co., Ltd.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> c:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2015-09-16] (RealDownloader)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2017-08-15] (Microsoft Corporation)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> c:\Program Files (x86)\PDF Architect\PDFIEHelper.dll [2013-04-08] (pdfforge GmbH)
BHO-x32: Wondershare Player 1.6.0 -> {43D9786F-A485-683B-9B5B-ACC97ABC17FC} -> C:\ProgramData\Wondershare\Player\WSBrowserAppMgr.dll [2013-09-28] (Wondershare)
BHO-x32: Wondershare Video Converter Ultimate 7.1.0 -> {451C804F-C205-4F03-B48E-537EC94937BF} -> C:\ProgramData\Wondershare\Video Converter Ultimate\WSBrowserAppMgr.dll [2015-08-13] (Wondershare)
BHO-x32: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2015-08-24] (Siber Systems Inc.)
BHO-x32: Ant Download Manager BHO -> {8ABC6AE5-74BD-4c73-BB34-44526792D2AE} -> C:\Program Files (x86)\Ant Download Manager\antIE\antIE.dll [2017-11-27] (AntGROUP)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2015-08-25] (Logitech, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2017-09-05] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2017-09-05] (Microsoft Corporation)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2015-08-24] (Siber Systems Inc.)
Toolbar: HKLM - Steganos Password Manager Toolbar - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} - C:\Program Files (x86)\Steganos Privacy Suite 15\SPMIEToolbar64.dll [2014-07-29] (Steganos Software GmbH)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2015-08-24] (Siber Systems Inc.)
Toolbar: HKLM-x32 - CaptureSaver - {5148AB7D-8868-4490-B6DA-F98368488582} - C:\Program Files (x86)\CaptureSaver\CaptureSaverIE.dll [2011-06-20] (www.capturesaver.com)
Toolbar: HKLM-x32 - Steganos Password Manager Toolbar - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} - C:\Program Files (x86)\Steganos Privacy Suite 15\SPMIEToolbar.dll [2014-08-04] (Steganos Software GmbH)
Toolbar: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006 -> &Address - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\explorerframe.dll [2017-05-10] (Microsoft Corporation)
Toolbar: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006 -> &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\shell32.dll [2017-05-10] (Microsoft Corporation)
Toolbar: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2015-08-24] (Siber Systems Inc.)
DPF: HKLM-x32 {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} hxxp://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1340673899312
DPF: HKLM-x32 {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1343353673750
DPF: HKLM-x32 {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1253383444393
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} hxxps://akamaicdn.webex.com/client/WBXclient-T28L10NSP11-16469/event/ieatgpc1.cab
DPF: HKLM-x32 {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} hxxps://secure.logmein.com//activex/ractrl.cab?lmi=1100
Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll [2017-12-04] (Belarc, Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2017-07-18] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-07-18] (Skype Technologies)
 
FireFox:
========
FF ProfilePath: C:\Users\Morgan Pierce Parker\AppData\Roaming\Netscape\Navigator\Profiles\j0juhuu6.default [2013-12-19]
FF Extension: (DOM Inspector) - C:\Program Files (x86)\Netscape\Navigator 9\extensions\inspector@mozilla.org [2016-09-02] [Legacy] [not signed]
FF Extension: (Netscape 9 Migrator) - C:\Program Files (x86)\Netscape\Navigator 9\extensions\netscape9migrator@flock.com [2016-09-02] [Legacy] [not signed]
FF ProfilePath: C:\Users\Morgan Pierce Parker\AppData\Roaming\Mozilla\Firefox\Profiles\dzygi7op.default [2018-03-22]
FF Homepage: Mozilla\Firefox\Profiles\dzygi7op.default -> hxxps://email06.godaddy.com/webmail.php?view=1&uid=1166&folder=INBOX&part=&raw=&more=
FF NewTab: Mozilla\Firefox\Profiles\dzygi7op.default -> hxxp://services.freshy.com/general/newhometab.php?hometab=tab&partner=11147&guid={8923D673-FC0B-4784-9C22-AB23B57D4599}&i=
FF HomepageOverride: Mozilla\Firefox\Profiles\dzygi7op.default -> Disabled: @Converter
FF NewTabOverride: Mozilla\Firefox\Profiles\dzygi7op.default -> Disabled: @Converter
FF Extension: (Grammarly for Firefox) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Mozilla\Firefox\Profiles\dzygi7op.default\Extensions\87677a2c52b84ad3a151a4a72f5bd3c4@jetpack.xpi [2018-02-28]
FF Extension: (Define Ext) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Mozilla\Firefox\Profiles\dzygi7op.default\Extensions\zgvstddqqjlabihif@opvrjrelhkc.org [2013-09-09] [Legacy] [not signed]
FF Extension: (Fast Discountz) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Mozilla\Firefox\Profiles\dzygi7op.default\Extensions\{2a4808f0-e451-4d0b-982a-bb0f44d3354d} [2013-09-18] [Legacy] [not signed]
FF Extension: (VideoGet FireFox extension) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Mozilla\Firefox\Profiles\dzygi7op.default\Extensions\{85E85FF9-E50C-42DE-8A3D-61485FD6C8DB}.xpi [2013-05-01] [Legacy] [not signed]
FF Extension: (OkayFreedom) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Mozilla\Firefox\Profiles\dzygi7op.default\Extensions\{DB981CCA-088E-4731-A4A2-2FE218703C0E}.xpi [2016-09-01]
FF Extension: (Skype) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-04-29] [Legacy]
FF HKLM-x32\...\Firefox\Extensions: [{9193F654-D886-4fef-8894-A97EF6623104}] - C:\Program Files (x86)\Wondershare\AllMyTube\SVRFirefoxExt
FF Extension: (Wondershare YouTube Downloader) - C:\Program Files (x86)\Wondershare\AllMyTube\SVRFirefoxExt [2016-09-02] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [Player@Wondershare.com] - C:\ProgramData\Wondershare\Player\Player@Wondershare.com
FF Extension: (Wondershare Player) - C:\ProgramData\Wondershare\Player\Player@Wondershare.com [2016-09-02] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files (x86)\Steganos Privacy Suite 15\spmplugin3
FF Extension: (Steganos Password Manager) - C:\Program Files (x86)\Steganos Privacy Suite 15\spmplugin3 [2016-09-02] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi
FF Extension: (RoboForm Toolbar) - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi [2015-08-24] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [WSVCU@Wondershare.com] - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com
FF Extension: (Wondershare Video Converter Ultimate) - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com [2016-09-02] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - c:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: (PDF Architect Converter For Firefox) - c:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2016-09-02] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2018-02-23] [Legacy] [not signed]
FF HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Firefox\Extensions: [{54affe52-8223-453b-be1e-2fe2e250045c}] - C:\Users\Morgan Pierce Parker\AppData\Roaming\Lamantine\Sticky Password\spAutofill
FF Extension: (Sticky Password Autofill Engine) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Lamantine\Sticky Password\spAutofill [2015-08-13] [Legacy] [not signed]
FF HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Firefox\Extensions: [CaptureSaver@goldgingko.com] - C:\Program Files (x86)\CaptureSaver\Firefox
FF Extension: (CaptureSaver) - C:\Program Files (x86)\CaptureSaver\Firefox [2016-09-02] [Legacy] [not signed]
FF HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi
FF HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Firefox\Extensions: [antff@antdownloadmanager.com] - C:\Program Files (x86)\Ant Download Manager\antFF\antFF2.xpi
FF Extension: (antFF2) - C:\Program Files (x86)\Ant Download Manager\antFF\antFF2.xpi [2017-11-30]
FF HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Firefox\Extensions: [{6EBED4D8-13D9-4270-8D44-B57DDB7A787C}] - C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.15.4.6607\BVDFirefoxExt
FF Extension: (Allavsoft Video Downloader Firefox Extension) - C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.15.4.6607\BVDFirefoxExt [2018-02-23] [Legacy]
FF HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\SeaMonkey\Extensions: [antgroup@antdownloadmanager.com] - C:\Program Files (x86)\Ant Download Manager\antFF\antFF.xpi
FF Extension: (AntFF) - C:\Program Files (x86)\Ant Download Manager\antFF\antFF.xpi [2016-12-19] [Legacy]
FF HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\SeaMonkey\Extensions: [antff.popup.helper@antdownloadmanager.com] - C:\Program Files (x86)\Ant Download Manager\antFF\antff.popup.helper.xpi
FF Extension: (antFF Popup Helper for Mozilla) - C:\Program Files (x86)\Ant Download Manager\antFF\antff.popup.helper.xpi [2017-08-03]
FF HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Waterfox\Extensions: [antgroup@antdownloadmanager.com] - C:\Program Files (x86)\Ant Download Manager\antFF\antFF.xpi
FF HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Waterfox\Extensions: [antff.popup.helper@antdownloadmanager.com] - C:\Program Files (x86)\Ant Download Manager\antFF\antff.popup.helper.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_137.dll [2017-07-19] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2017-05-20] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.2.1 -> C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\dtplugin\npDeployJava1.dll [2011-11-08] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.2.1 -> C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\new_plugin\npjp2.dll [2011-11-08] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-22] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-22] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_137.dll [2017-07-19] ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2013-08-28] (DivX, LLC)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2017-05-20] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [No File]
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll [2011-05-10] (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-12] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-08-03] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=18.1.0.1236 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2015-09-21] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.1.13 -> C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-01-17] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.1.13 -> C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-01-17] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=18.1.0.1236 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2015-09-21] (RealTimes)
FF Plugin-x32: @siber.com/RoboForm -> C:\Program Files (x86)\Siber Systems\AI RoboForm\chrome\plugin\np-rf-plugin.dll [2015-08-24] (Siber Systems Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=1.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 -> C:\Program Files (x86)\VideoLAN\VLC-2-0-2\npvlc.dll [2012-06-27] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1 -> C:\Program Files (x86)\Yahoo!\Common\npyaxmpb.dll [2006-08-16] (Yahoo! Inc.)
FF Plugin HKU\S-1-5-21-2396228472-3482715812-2186985281-1006: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2017-05-20] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-2396228472-3482715812-2186985281-1006: @stickypassword.com/Sticky Password -> C:\Program Files (x86)\Sticky Password\npspAutofill.dll [2015-06-08] (Lamantine Software a.s.)
FF Plugin HKU\S-1-5-21-2396228472-3482715812-2186985281-1006: @zoom.us/ZoomVideoPlugin -> C:\Users\Morgan Pierce Parker\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2016-09-08] (Zoom Video Communications, Inc.)
FF Plugin HKU\S-1-5-21-2396228472-3482715812-2186985281-1006: tdameritrade.com/thinkorswim -> C:\Program Files\thinkorswim2\npthinkorswim.dll [2018-03-21] (TD Ameritrade)
FF Plugin HKU\S-1-5-21-2396228472-3482715812-2186985281-1006: tdameritrade.com/tossc -> C:\Program Files\thinkorswim2\nptossc.dll [2018-03-21] (TD Ameritrade)
StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox64\firefox.exe
 
Chrome: 
=======
CHR Profile: C:\Users\Morgan Pierce Parker\AppData\Local\Google\Chrome\User Data\Default [2018-03-16]
CHR Extension: (Wondershare Player) - C:\Users\Morgan Pierce Parker\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkdegagmpemadclljncealhmmkojfoam [2016-08-30]
CHR Extension: (DLHelper) - C:\Users\Morgan Pierce Parker\AppData\Local\Google\Chrome\User Data\Default\Extensions\dalgiebmfcjackkbjfbfmlnflbdfbekj [2018-02-23]
CHR Extension: (Allavsoft video downloader converter) - C:\Users\Morgan Pierce Parker\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhancbnhabhandieicagelcddkdfgoif [2018-02-23]
CHR Extension: (Bitdefender Wallet) - C:\Users\Morgan Pierce Parker\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabcmochhfpldjekobfaaggijgohadih [2016-08-30]
CHR Extension: (Skype) - C:\Users\Morgan Pierce Parker\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2018-02-23]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Morgan Pierce Parker\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-02-23]
CHR Extension: (Chrome Media Router) - C:\Users\Morgan Pierce Parker\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-02-23]
CHR HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dalgiebmfcjackkbjfbfmlnflbdfbekj] - C:\Program Files (x86)\Ant Download Manager\antCH\antCH.crx [2017-12-16]
CHR HKLM-x32\...\Chrome\Extension: [bkdegagmpemadclljncealhmmkojfoam] - C:\ProgramData\Wondershare\Player\Player@Wondershare.com.crx [2014-07-24]
CHR HKLM-x32\...\Chrome\Extension: [dhancbnhabhandieicagelcddkdfgoif] - C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.15.4.6607\BVDChromeExt.crx [2018-02-23]
CHR HKLM-x32\...\Chrome\Extension: [fabcmochhfpldjekobfaaggijgohadih] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
 
Opera: 
=======
OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\acghaimmohdiildbgkbcjfmkdgglpofi [2017-09-06]
OPR Extension: (AdBlock) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\aobdicepooefnbaeokijohmhjlleamfj [2016-09-02]
OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\baefahljeadgnnicbeiekpcfnecbbell [2016-09-02]
OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\bbkekonodcdmedgffkkbgmnnekbainbg [2018-03-09]
OPR Extension: (Turn Off the Lights) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\ccbdoklfbpcifppcfahmmpmbkfdjjccm [2017-08-21]
OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\cfbekbndggmbdkfhjandenfihkdkndil [2016-09-02]
OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\cnbpedcoekjafichoehopgaaldogogch [2016-12-16]
OPR Extension: (HTTPS Everywhere) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\edaplhobcmdaneconioghljnnopmkhgm [2018-03-16]
OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\eeokceolphhfjdfcibaiiopmekmcbedp [2017-03-19]
OPR Extension: (QR Code Generator) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\ehcgjadobjgpoblppedbeogpgkjeiham [2016-09-02]
OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\eiinejdcihhdbdbipfapahmjndejdpjb [2016-09-02]
OPR Extension: (PDF Viewer) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\encfpfilknmenlmjemepncnlbbjlabkc [2016-09-02]
OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\fbjpiaeohiikdienjkfpbdmooefgliac [2016-09-02]
OPR Extension: (Stop Reclame) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\fcnodchihpbcjiofidkkeaioejgpijkl [2017-08-10]
OPR Extension: (HD Video Downloader) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\gacckcgfmoapndlfjdjiffiblljijhep [2016-09-02]
OPR Extension: (Search in YouTube) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\gclmonidkokknfccffpefiplnbepbgfm [2016-09-02]
OPR Extension: (V7 Stash) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\gjcfmfokccpieoonenflmcacfbdhbdck [2016-09-06]
OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\hciohocinlhbdkbjldffomiadmnhjnoj [2016-09-02]
OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\hedlhkdmdlcjhiblbmfggdiaeekblnoi [2016-09-02]
OPR Extension: (Netcraft Extension) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\hhhfihlmbcifeafjbbjfkclpofddkalf [2017-12-23]
OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\iacaccplnfbooopaakeckhpjipnkdmeb [2016-09-02]
OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\iikighlpichfheooodpapakdheilalcj [2016-09-02]
OPR Extension: (No-Script Suite Lite) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\ipiopppcaojnchgoepoemlbdccogeije [2017-02-02]
OPR Extension: (QR Codematic) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\jaddaopkajokblichanfjehmgahbnaek [2017-06-22]
OPR Extension: (Disable HTML5 Autoplay) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\jbinbhipioellbajhbkjlpioadehpfdj [2016-09-02]
OPR Extension: (YouTube Downloader) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\kclijeogghhkmenkommbnjobhnndpfba [2016-09-02]
OPR Extension: (Price Rocket) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\lfhckbkckplhenjjfjmnbehmgdgklklp [2016-09-02]
OPR Extension: (Speed-Up Browsing) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\lklibmbcgphmjobehnffhmioggnljmcl [2018-02-10]
OPR Extension: (YouWatch) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\lolpdhiocgjpmamiogamfejeakmnlehj [2016-09-05]
OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\lpbhfckilgccpclafjiapbcelgpfmjfa [2016-09-02]
OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\maeombkgfpjdnjkhohbjachnnmpbipol [2017-02-20]
OPR Extension: (Clearly) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\mallmmeebeojpflmiolfchfcgbjflklc [2016-09-02]
OPR Extension: (Similar image search) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\mboaembapglkclamgifhbdhbiojoichj [2016-09-02]
OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\mgblffipaipjkemfkjpmdmfedljnifen [2018-01-30]
OPR Extension: (Amazon Assistant for Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\mmmbddcnnndpbdflpccgcknaaabgldak [2017-10-31]
OPR Extension: (Hover Preview) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\ncmainmpfbkbofiidnfgoocbhljigiko [2017-05-25]
OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\neacgcjokggofibnbfapeaejhclmpple [2016-09-02]
OPR Extension: (c̲o̲t̲t̲o̲n̲Tracks) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\nhcmfmnggfnjnlpkpmlbmnbmjgjeeoig [2016-09-02]
OPR Extension: (Magic Actions for YouTube™) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\nlffnljnicbkfhnlomjhjlebndachaka [2016-10-04]
OPR Extension: (WebM Inline Player) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\nmjjonagmhdjhlphocidlpcgclkgadcg [2016-09-02]
OPR Extension: (eBay Extension for Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\nonelnbmpmjifbnoclpchjakhkeolcbh [2016-09-02]
OPR Extension: (SaveFrom.net helper) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\npdpplbicnmpoigidfdjadamgfkilaak [2018-02-10]
OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\objncbokngchniifnaijjjilieiahogg [2016-09-02]
OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\okedekoialagmggelklgigdidkfljanc [2016-09-02]
OPR Extension: (Youtube - Most Popular) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\oldapoiohefbnmggejjodihigclfhnka [2017-06-22]
OPR Extension: (Spot - Date Clipper for Google Calendar™) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phaddhclhomejoackbdbhabbbfgilhof [2016-09-02]
OPR Extension: (FastestTube - YouTube Video Downloader) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag [2018-03-22]
OPR Extension: (RoboForm) - C:\Program Files (x86)\Siber Systems\AI RoboForm\Opera [2016-09-02]
StartMenuInternet: (HKLM) Opera - C:\Program Files\Opera x64\Opera.exe
StartMenuInternet: (HKLM) Opera.exe - C:\Program Files\Opera Next x64\Opera.exe
StartMenuInternet: (HKLM) OperaNext - C:\program files\opera next x64\Opera.exe
 
==================== Services (Whitelisted) ====================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
S4 ABBYY.Licensing.BCR.Windows.2.0; C:\Program Files (x86)\ABBYY Business Card Reader 2.0\NetworkLicenseServer.exe [821048 2013-06-04] (ABBYY InfoPoisk LLC)
S4 ABBYY.Licensing.PDFTransformer.Classic.4.0; C:\Program Files (x86)\ABBYY PDF Transformer+\NetworkLicenseServer.exe [961744 2014-09-09] (ABBYY Production LLC)
S3 AeLookupSvc; C:\Windows\SysWOW64\aelupsvc.dll [26624 2007-02-18] (Microsoft Corporation) [File not signed]
S4 AHDDC2; C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Service.exe [1518504 2012-07-30] ()
S4 Alerter; C:\Windows\system32\alrsvc.dll [29696 2007-02-18] (Microsoft Corporation) [File not signed]
S4 ALG; C:\Windows\SysWOW64\alg.exe [45056 2007-02-18] (Microsoft Corporation) [File not signed]
S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-04-03] (Apple Inc.)
S4 ASFAgent; C:\Program Files (x86)\Intel\ASF Agent\ASFAgent.exe [118784 2004-02-08] (Intel Corporation) [File not signed]
S4 ASFIPmon; C:\Program Files (x86)\Broadcom\ASFIPMon\AsfIpMon.exe [61440 2005-10-18] (Broadcom Corporation) [File not signed]
S4 AtomicAlarmClock; C:\Program Files\Atomic Alarm Clock\timeserv.exe [2007040 2013-04-24] () [File not signed]
R2 AudioEndpointBuilder; C:\Windows\SysWOW64\Audiosrv.dll [41472 2007-02-18] (Microsoft Corporation) [File not signed]
R2 AudioSrv; C:\Windows\SysWOW64\Audiosrv.dll [41472 2007-02-18] (Microsoft Corporation) [File not signed]
S4 Backup4all5Srv; C:\Program Files (x86)\Softland\Backup4all 5\bService.exe [4686360 2015-08-04] (Softland)
S4 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [122736 2017-08-11] (AOMEI Tech Co., Ltd.)
R3 Browser; C:\Windows\SysWOW64\browser.dll [78336 2012-06-29] (Microsoft Corporation) [File not signed]
S4 BstHdAndroidSvc; c:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2014-05-01] (BlueStack Systems, Inc.)
S4 BstHdLogRotatorSvc; c:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2014-05-01] (BlueStack Systems, Inc.)
S4 BstHdUpdaterSvc; c:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [774928 2014-05-01] (BlueStack Systems, Inc.)
S4 CachemanService; C:\Program Files (x86)\Cacheman\CachemanServ.exe [238152 2013-05-14] (Outertech)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3058416 2017-09-05] (Microsoft Corporation)
S3 ClipSrv; C:\Windows\system32\clipsrv.exe [49664 2007-02-18] (Microsoft Corporation) [File not signed]
S3 ClipSrv; C:\Windows\SysWOW64\clipsrv.exe [32256 2007-02-18] (Microsoft Corporation) [File not signed]
S4 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [246256 2010-05-25] (CyberLink)
S4 CloudBerry Drive Service; C:\Program Files\CloudBerryLab\CloudBerry Drive\CloudBerryDriveService.exe [315688 2015-07-24] (CloudBerry Lab)
S4 Crypkey License; C:\Windows\system32\crypserv.exe [122880 2008-05-07] (CrypKey (Canada) Ltd.) [File not signed]
S4 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-08-12] (Dropbox, Inc.)
S4 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-08-12] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [51024 2018-03-15] (Dropbox, Inc.)
S4 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [208792 2017-12-14] (Dell Inc.)
S4 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [3294608 2017-12-14] (Dell Inc.)
S4 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [217488 2017-12-14] (Dell Inc.)
S4 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\DfSdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany) [File not signed]
S3 dmadmin; C:\Windows\System32\dmadmin.exe [399872 2007-02-18] (Microsoft Corporation) [File not signed]
R2 DmAgent; C:\Program Files\QILING\Disk Master\DmAgent.exe [67384 2018-02-05] (QILING Tech Co., Ltd.)
S2 dmserver; C:\Windows\System32\dmserver.dll [37376 2007-02-18] (Microsoft Corporation) [File not signed]
R2 Dnscache; C:\Windows\SysWOW64\dnsrslvr.dll [45568 2011-03-03] (Microsoft Corporation) [File not signed]
R2 EaseUS Agent; C:\Program Files\EASEUS\Todo Backup\bin\Agent.exe [40080 2017-08-30] (CHENGDU YIWO Tech Development Co., Ltd)
S4 ERSvc; C:\Windows\System32\ersvc.dll [31744 2007-02-18] (Microsoft Corporation) [File not signed]
S4 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed]
S4 FileMarkerApplyIconService; C:\Program Files (x86)\FileMarker.NET\FileMarkerService.exe [717576 2013-11-01] (ArcticLine Software)
S4 FileReplicatorService; C:\Program Files (x86)\FileReplicatorService\File Replicator Service.exe [28160 2011-10-26] (Chris Butterfield Software Solutions, LLC) [File not signed]
S4 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]
S4 FLService; C:\Program Files (x86)\idoo\File Encryption\FLService.exe [107008 2011-06-09] () [File not signed]
S4 fsproflt2; C:\Windows\SysWOW64\fsproflt2.exe [69408 2014-10-06] (FSPro Labs)
S4 GenieTimelineService; C:\Program Files\Genie9\Genie Timeline\GenieTimelineService.exe [662104 2012-09-16] (Genie9)
S4 GFIBckFAtt; C:\Program Files (x86)\GFI\GFI BackUp Freeware\GFIFInst.exe [1011056 2012-01-12] (GFI Software Ltd.)
S4 GFIBckFSched; C:\Program Files (x86)\GFI\GFI BackUp Freeware\GFIFSched.exe [2664816 2012-01-12] (GFI Software Ltd.)
S4 GoToAssist; C:\Program Files (x86)\Citrix\GoToAssist Corporate\1205\G2AC_Service.exe [309712 2017-04-06] (Citrix Systems, Inc.)
S4 HideMyIpSRV; C:\Program Files (x86)\Hide My IP 6\HideMyIpSRV.exe [4341760 2015-04-26] (Hide My IP) [File not signed]
S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S3 ImapiService; C:\WINDOWS\system32\imapi.exe [265728 2007-02-18] (Microsoft Corporation) [File not signed]
S4 imdsksvc; C:\Windows\system32\imdsksvc.exe [21568 2012-10-02] (Olof Lagerkvist)
S4 InterBaseGuardian; C:\Program Files\Borland\InterBase\bin\ibguard.exe [32768 2001-11-29] (Borland Software Corporation) [File not signed]
S4 InterBaseServer; C:\Program Files\Borland\InterBase\bin\ibserver.exe [1769472 2001-11-29] (Borland Software Corporation) [File not signed]
S4 InterServer; C:\Program Files\Borland\InterBase\InterClient\bin\interserver.exe [114176 2001-11-29] (InterBase) [File not signed]
S4 JavaQuickStarterService; C:\Program Files\Java\jre6\bin\jqs.exe [153376 2011-05-10] (Sun Microsystems, Inc.)
S4 JetDrive WindowsClosingService; C:\WINDOWS\SysWOW64\WindowsClosingService.exe [9216 2011-03-12] () [File not signed]
S4 KooRaRooMediaServer; C:\Program Files\KooRaRoo Media\KooRaRooMediaServer.exe [6472760 2014-01-17] (Programming Sunrise)
S4 Leawo_service; C:\Program Files (x86)\Common Files\Appkeys\yytool64.exe [1232880 2014-05-04] ()
S4 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-04-22] (Hewlett-Packard Company) [File not signed]
R2 lmhosts; C:\Windows\SysWOW64\lmhsvc.dll [19968 2007-02-18] (Microsoft Corporation) [File not signed]
S4 MaxSyncUpService; C:\Program Files (x86)\MaxSyncUp\msusvc.exe [1701280 2012-08-07] (@MAX Software) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6440736 2018-03-03] (Malwarebytes)
S4 MegaMonitorSrv; C:\Program Files (x86)\Dell SAS RAID Storage Manager\MegaMonitor\mrmonitor.exe [434176 2007-07-18] () [File not signed]
S4 Messenger; C:\Windows\System32\msgsvc.dll [57344 2007-02-18] (Microsoft Corporation) [File not signed]
S4 MSMFramework; C:\Program Files (x86)\Dell SAS RAID Storage Manager\Framework\VivaldiFramework.exe [53248 2006-11-29] () [File not signed]
S3 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe [7520337 2002-12-17] (Microsoft Corporation) [File not signed]
S3 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [66112 2002-12-17] (Microsoft Corporation) [File not signed]
S4 NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [774144 2007-01-15] (Nero AG) [File not signed]
S3 NetDDE; C:\Windows\system32\netdde.exe [160768 2007-02-18] (Microsoft Corporation) [File not signed]
S3 NetDDE; C:\Windows\SysWOW64\netdde.exe [110080 2007-02-18] (Microsoft Corporation) [File not signed]
S3 NetDDEdsdm; C:\Windows\system32\netdde.exe [160768 2007-02-18] (Microsoft Corporation) [File not signed]
S3 NetDDEdsdm; C:\Windows\SysWOW64\netdde.exe [110080 2007-02-18] (Microsoft Corporation) [File not signed]
S4 NetgearSwitchUSB; C:\Program Files (x86)\NETGEAR\A6210\NetgearSwitchUSB.exe [192232 2015-09-17] ()
R3 Netman; C:\Windows\SysWOW64\netman.dll [263680 2007-02-18] (Microsoft Corporation) [File not signed]
S4 NetSvc; C:\Program Files (x86)\Intel\PROSetWired\NCS\Sync\NetSvc.exe [143360 2003-12-17] (Intel® Corporation) [File not signed]
S4 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-03-12] (Nero AG)
R2 NovaPdf9Server; C:\Program Files\Softland\novaPDF 9\Server\novapdfs.exe [52616 2018-02-19] (Microsoft)
S4 OkayFreedom VPN Starter Service; C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe [347680 2016-05-09] (Steganos Software GmbH)
S4 OO DiskImage; C:\Program Files\OO Software\DiskImage\oodiag.exe [8160032 2018-02-09] (O&O Software GmbH)
S4 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [14848 2011-12-15] () [File not signed]
S4 osagent; C:\Program Files\Borland\VBroker\\bin\osagent.exe [193536 1998-03-12] () [File not signed]
S4 PAExec; C:\Windows\PAExec.exe [189112 2017-12-03] (Power Admin LLC)
S4 PDF Architect Helper Service; c:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
S4 PDF Architect Service; c:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
S4 PlaysService; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [32528 2016-05-31] (Plays.tv, LLC)
R3 PolicyAgent; C:\Windows\SysWOW64\ipsecsvc.dll [188928 2007-02-18] (Microsoft Corporation) [File not signed]
S4 Printer Control; C:\WINDOWS\system32\PrintCtrl.exe [78848 2010-05-07] (ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM) [File not signed]
S4 prio_svc; C:\Program Files\Prio\prio_svc.exe [12656 2012-11-08] ()
S4 PuranDefrag; C:\Windows\system32\PuranDefragS.exe [292736 2013-08-15] (Puran Software) [File not signed]
S3 RasAuto; C:\Windows\SysWOW64\rasauto.dll [91648 2007-02-18] (Microsoft Corporation) [File not signed]
S3 RasMan; C:\Windows\SysWOW64\rasmans.dll [181760 2007-02-18] (Microsoft Corporation) [File not signed]
S4 RDSessMgr; C:\WINDOWS\system32\sessmgr.exe [212480 2007-02-18] (Microsoft Corporation) [File not signed]
S4 reaConverter_service; C:\Program Files (x86)\reaConverter 7 Standard\rc_service.exe [2129408 2015-07-20] () [File not signed]
S4 RealPlayerUpdateSvc; c:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [33088 2015-09-16] ()
S4 RealTimes Desktop Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1103656 2015-09-21] (RealNetworks, Inc.)
S4 RemoteRegistry; C:\Windows\SysWOW64\regsvc.dll [69120 2007-02-18] (Microsoft Corporation) [File not signed]
S4 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254552 2012-08-08] ()
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-08-25] ()
S4 RioMSC; C:\WINDOWS\SysWOW64\RioMSC.exe [282624 2004-08-26] (Digital Networks North America, Inc.) [File not signed]
S3 RpcLocator; C:\Windows\SysWOW64\locator.exe [71680 2007-02-18] (Microsoft Corporation) [File not signed]
S4 SandraDataSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII.SP1\Win32\RpcDataSrv.exe [213176 2007-12-12] (SiSoftware)
S4 SandraTheSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII.SP1\RpcSandraSrv.exe [1619136 2007-12-12] (SiSoftware)
R2 Schedule; C:\Windows\SysWOW64\schedsvc.dll [202240 2007-02-18] (Microsoft Corporation) [File not signed]
S2 SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [240512 2009-05-19] (Microsoft Corporation)
R3 seclogon; C:\Windows\SysWOW64\seclogon.dll [18432 2007-02-18] (Microsoft Corporation) [File not signed]
S4 Seed4.Me Service; C:\Program Files\Seed4.Me VPN\bin\Seed4.Me_service.exe [3911504 2017-04-21] (Seed4.Me)
S3 SharedAccess; C:\Windows\SysWOW64\ipnathlp.dll [343552 2007-02-18] (Microsoft Corporation) [File not signed]
S3 spupdsvc; C:\WINDOWS\system32\spupdsvc.exe [28704 2009-01-07] (Microsoft Corporation)
S3 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE [311872 2002-12-17] (Microsoft Corporation) [File not signed]
S2 srservice; C:\WINDOWS\system32\srsvc.dll [231424 2007-02-18] (Microsoft Corporation) [File not signed]
S4 SSDPSRV; C:\Windows\SysWOW64\ssdpsrv.dll [72192 2007-02-18] (Microsoft Corporation) [File not signed]
S3 stisvc; C:\Windows\SysWOW64\wiaservc.dll [348160 2007-02-18] (Microsoft Corporation) [File not signed]
S4 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [41432 2017-12-22] (Dell Inc.)
S4 svcChoiceMail; C:\Program Files y\DigiPortal Software\ChoiceMail\\CMServer.exe [4308992 2009-10-19] (DigiPortal Software, Inc.) [File not signed]
S4 svcCMPreApproval; C:\Program Files y\DigiPortal Software\ChoiceMail\\CMPreapproval.exe [1688576 2009-10-19] (DigiPortal Software, Inc) [File not signed]
S4 SW Administration Service; C:\Program Files (x86)\SXR Software\StatWin\ExecStat.exe [321288 2011-05-16] (SXR Software)
S4 SynoDrService; C:\Program Files (x86)\Synology Data Replicator  3\SynoDrServicex64.exe [381312 2012-06-28] () [File not signed]
S3 SysmonLog; C:\Windows\system32\smlogsvc.exe [133120 2007-02-18] (Microsoft Corporation) [File not signed]
S3 SysmonLog; C:\Windows\SysWOW64\smlogsvc.exe [96256 2007-02-18] (Microsoft Corporation) [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7757552 2018-02-26] (TeamViewer GmbH)
R2 TrkWks; C:\Windows\SysWOW64\trkwks.dll [86528 2007-02-18] (Microsoft Corporation) [File not signed]
S4 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [294168 2018-02-27] (Reason Software Company Inc.)
S4 UPS; C:\Windows\System32\ups.exe [34816 2007-02-18] (Microsoft Corporation) [File not signed]
S4 UPS; C:\Windows\SysWOW64\ups.exe [16896 2007-02-18] (Microsoft Corporation) [File not signed]
S4 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [245760 2011-02-18] () [File not signed]
S4 USBSafelyRemoveService; C:\Program Files (x86)\USB Safely Remove\USBSRService.exe [1523000 2014-08-18] (Crystal Rich Ltd)
S4 W32Time; C:\Windows\SysWOW64\w32time.dll [227328 2007-02-18] (Microsoft Corporation) [File not signed]
S4 WebUpdate4; C:\Windows\SysWOW64\WebUpdateSvc4.exe [412776 2013-11-25] (Data Perceptions / PowerProgrammer)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S4 WinExtService; C:\Program Files (x86)\TSS\WinExt\WinExt Service.exe [29184 2017-07-14] (TriSun Software) [File not signed]
S3 WmdmPmSN; C:\WINDOWS\SysWOW64\mspmsnsv.dll [25088 2007-02-18] (Microsoft Corporation) [File not signed]
S2 WMPNetworkSvc; C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe [913408 2006-10-18] (Microsoft Corporation) [File not signed]
S4 WsAppService; C:\Program Files (x86)\Wondershare\WAF\WsAppService.exe [356352 2015-09-23] (Wondershare) [File not signed]
S4 WsDrvInst; C:\Program Files (x86)\Wondershare\MirrorGo\DriverInstall.exe [103736 2015-10-10] (Wondershare)
R2 wuauserv; C:\Windows\SysWOW64\wuaueng.dll [1933848 2012-06-02] (Microsoft Corporation)
S2 WZCSVC; C:\Windows\System32\wzcsvc.dll [659968 2007-02-18] (Microsoft Corporation) [File not signed]
S2 WZCSVC; C:\Windows\SysWOW64\wzcsvc.dll [489472 2007-02-18] (Microsoft Corporation) [File not signed]
S4 ZAMSvc; C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [15775888 2017-08-09] (Copyright 2017.)
R2 zebNet Volume Shadow Copy Service; C:\Program Files\zebNet\Volume Shadow Copy Service\Volume Shadow Copy Service.exe [167608 2018-01-03] (zebNet Ltd)
S4 Zoolz 2 Service; C:\Program Files\Genie9\Zoolz2\ZoolzService.exe [450064 2013-03-18] (Genie9)
S4 {0CBD4F48-3751-475D-BE88-4F271385B672}; C:\Program Files\Shadow Defender\Service.exe [74936 2015-07-27] (SHADOWDEFENDER.COM)
S4 ocster_1clk_backup; "c:\Program Files\Ocster 1-Click Backup\bin\backupService-ox1c.exe" "--controlFolder=c:\ProgramData\Ocster 1-Click Backup\control" "--id=ocster_1clk_backup" daemon
R2 VssProvider; C:\Windows\system32\dllhost.exe /Processid:{645E0355-F501-48F6-A44D-6A15A35F0D66}
 
===================== Drivers (Whitelisted) ======================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 61883; C:\Windows\System32\DRIVERS\61883.sys [60288 2009-07-13] (Microsoft Corporation)
R3 A6210; C:\Windows\System32\DRIVERS\A6210.sys [2258608 2017-02-10] (MediaTek Inc.)
R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [51120 2016-12-23] ()
R2 ammntdrv; C:\Windows\system32\ammntdrv.sys [171952 2016-12-23] ()
S3 ampa; C:\Windows\system32\ampa.sys [38320 2016-12-26] ()
S3 ampa; C:\Windows\SysWOW64\ampa.sys [38320 2016-12-26] ()
R2 amwrtdrv; C:\Windows\system32\amwrtdrv.sys [38320 2016-12-23] ()
R1 AntiLog32; C:\Windows\system32\drivers\AntiLog64.sys [49752 2014-11-26] (Zemana Ltd.)
S3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [150440 2015-04-28] (SlySoft, Inc.)
S3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [150440 2015-04-28] (SlySoft, Inc.)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare)
S4 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [46368 2013-11-12] (AVG Technologies)
S3 awealloc; C:\Windows\system32\drivers\awealloc.sys [19520 2012-10-02] (Olof Lagerkvist)
R2 BASFND; C:\Program Files\Broadcom\BACS\BASFND.sys [15200 2007-06-20] (Broadcom Corporation) [File not signed]
R2 BstHdDrv; c:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [123152 2014-05-01] (BlueStack Systems)
U5 BTHPORT; C:\Windows\System32\Drivers\BTHPORT.sys [320512 2008-05-21] (Microsoft Corporation) [File not signed]
R1 cbfs5; C:\Windows\system32\drivers\cbfs5.sys [422080 2015-04-24] (EldoS Corporation)
R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [41608 2017-12-14] (Dell Inc.)
R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [41208 2017-12-14] (Dell Computer Corporation)
S3 DigiartyVirtualCDBus; C:\Windows\System32\drivers\DigiartyVirtualCDBus.sys [276256 2018-02-25] (Digiarty Software, Inc.)
R0 diskbckp; C:\Windows\System32\drivers\diskbckp.sys [45368 2018-02-05] (QILING Tech Co., Ltd.)
R0 diskpt; C:\Windows\System32\drivers\diskpt.sys [403128 2015-07-27] (SHADOWDEFENDER.COM)
S3 DrvSnSht; C:\Program Files (x86)\R-Drive Image\DrvSnSht64.sys [132432 2010-06-01] (R-TT Inc.)
S3 dvdfab; C:\Windows\System32\drivers\dvdfab.sys [79232 2011-08-15] (Fengtao Software Inc.)
R1 ElbyCDIO; C:\Windows\SysWOW64\Drivers\ElbyCDIO.sys [24232 2009-02-17] (Elaborate Bytes AG)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [18528 2014-11-18] () [File not signed]
S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [15968 2014-11-18] () [File not signed]
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [53240 2016-12-06] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9800 2013-03-07] () [File not signed]
S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [9160 2013-03-07] () [File not signed]
R0 FSProFilter2; C:\Windows\System32\Drivers\FSPFltd2.sys [57648 2011-06-04] (FSPro Labs)
R1 GSVDRIVE; C:\Windows\System32\DRIVERS\GSVDRIVE.sys [30816 2013-02-22] (GiliSoft International LLC.)
S3 GUMHFilters; C:\Program Files (x86)\Glarysoft\Malware Hunter\Native\winxp_x64\GUMHFilter.sys [37688 2016-11-04] (GlarySoft Ltd)
R1 GUSBootStartup; C:\Windows\System32\drivers\GUSBootStartup.sys [20160 2017-02-16] (Glarysoft Ltd)
R0 hotcore3; C:\Windows\System32\DRIVERS\hotcore3.sys [34056 2013-12-16] (Paragon Software Group)
S3 imdisk; C:\Windows\system32\drivers\imdisk.sys [55360 2012-10-02] (Olof Lagerkvist)
R2 inpoutx64; C:\Windows\System32\Drivers\inpoutx64.sys [15008 2017-05-16] (Highresolution Enterprises [www.highrez.co.uk])
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
R3 ISpeakVA; C:\Windows\System32\drivers\wav_mixer.sys [35592 2014-05-09] ()
R3 leawo_vad; C:\Windows\System32\drivers\leawo_vad.sys [33048 2013-05-21] (Shenzhen Moyea Software)
S4 LMIRfsClientNP; no ImagePath
R2 MacriumImageGuardianDriver; C:\Windows\system32\Drivers\mrigflt.sys [50408 2017-10-04] (Windows ® Win 7 DDK provider)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253664 2018-03-20] (Malwarebytes)
R3 mcdevice; C:\Windows\System32\DRIVERS\mcdevice.sys [334400 2011-05-19] (ShiningMorning Inc.)
S3 MDA_NTDRV; C:\Windows\system32\MDA_NTDRV.sys [21208 2013-02-25] ()
R0 mrcbt; C:\Windows\System32\drivers\mrcbt.sys [73928 2017-10-04] (Windows ® Win 7 DDK provider)
R1 NetworkX; C:\Windows\system32\ckldrv.sys [28664 2008-03-17] ()
R2 npf; C:\Windows\System32\drivers\npf.sys [47632 2010-01-26] (CACE Technologies, Inc.)
R0 oodisr; C:\Windows\System32\DRIVERS\oodisr.sys [116888 2018-02-09] (O&O Software GmbH)
R0 oodisrh; C:\Windows\System32\DRIVERS\oodisrh.sys [41112 2018-02-09] (O&O Software GmbH)
R0 oodivd; C:\Windows\System32\DRIVERS\oodivd.sys [265080 2018-02-09] (O&O Software GmbH)
R0 oodivdh; C:\Windows\System32\DRIVERS\oodivdh.sys [51576 2018-02-09] (O&O Software GmbH)
U0 Partizan; C:\Windows\SysWOW64\drivers\Partizan.sys [40304 2015-06-18] (Greatis Software)
R3 PCWinSoft; C:\Windows\System32\DRIVERS\scrcamhrdrv_x64.sys [241800 2012-10-11] (Windows ® Server 2003 DDK provider)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19640 2014-04-02] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12480 2014-04-02] ()
S3 R-ImageDisk; C:\Program Files (x86)\R-Drive Image\R-ImageDisk64.sys [213584 2014-10-10] (R-TT Inc.)
R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [24744 2014-04-28] (Audials AG)
S3 rzc5309za; C:\Windows\system32\drivers\zinstall_z77\rzc5309za.sys [236096 2012-10-02] (rzc5309za Foundation)
S3 rzc6660za; C:\Windows\system32\drivers\zinstall_z77\rzc6660za.sys [245672 2015-05-18] (rzc6660za Foundation)
R1 SLEE_18_DRIVER; C:\Windows\Sleen1864.sys [109144 2014-07-29] (Softwareentwicklung Remus - ArchiCrypt - )
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381608 2015-12-22] (Duplex Secure Ltd.)
R1 StarPortLite; C:\Windows\System32\DRIVERS\StarPortLite.sys [120704 2013-02-04] (StarWind Software)
R3 tapwindscribe0901; C:\Windows\System32\DRIVERS\tapwindscribe0901.sys [45560 2017-09-13] (The OpenVPN Project)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [28272 2018-03-09] ()
R1 UimBus; C:\Windows\System32\DRIVERS\UimBus.sys [102664 2013-12-16] ()
R1 Uim_DEVIM; C:\Windows\System32\DRIVERS\uim_devim.sys [25992 2013-12-16] ()
R1 Uim_IM; C:\Windows\System32\DRIVERS\uim_im.sys [700680 2013-12-16] ()
S1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390224 2012-10-31] (Paragon)
R3 VASDeviceDrm; C:\Windows\System32\drivers\vasdDev.sys [1454896 2012-03-19] (ShiningMorning Inc.)
R3 vDisk; C:\Windows\System32\DRIVERS\vDisk.sys [256312 2018-02-05] (QILING Tech Co., Ltd.)
R3 vpnpbus; C:\Windows\System32\DRIVERS\vpnpbus.sys [18624 2015-04-24] (EldoS Corporation)
R3 vrvd5; C:\Windows\System32\DRIVERS\vrvd5.sys [13344 2017-06-11] (Rsupport Corporation)
R2 WinisoCDBus; C:\Windows\System32\drivers\WinisoCDBus.sys [204032 2013-06-06] (WinISO.com)
S3 WiseHDInfo; C:\Windows\WiseHDInfo64.dll [14800 2015-09-28] (wisecleaner.com) [File not signed]
R1 ZAM; C:\Windows\System32\drivers\zam64.sys [203680 2017-11-23] (Zemana Ltd.)
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2018-03-22 19:58 - 2018-03-22 19:59 - 000067496 _____ C:\Users\Morgan Pierce Parker\Desktop\FRST.txt
2018-03-22 15:45 - 2018-03-22 15:45 - 000003868 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1521747948
2018-03-22 15:45 - 2018-03-22 15:45 - 000001104 _____ C:\Users\Public\Desktop\Opera Browser.lnk
2018-03-22 15:45 - 2018-03-22 15:45 - 000001104 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera Browser.lnk
2018-03-22 15:14 - 2018-03-22 15:14 - 001357600 _____ (Opera Software) C:\Users\Morgan Pierce Parker\Downloads\OperaSetup.exe
2018-03-22 15:05 - 2018-03-22 15:05 - 000756705 _____ C:\Users\Morgan Pierce Parker\Documents\opera books marks old more.adr
2018-03-22 11:23 - 2018-03-22 11:21 - 000001043 _____ C:\Users\Morgan Pierce Parker\Desktop\PosterIt!.lnk
2018-03-22 11:22 - 2018-03-22 11:22 - 000001178 _____ C:\Users\Morgan Pierce Parker\Desktop\Screen Beagle Pro.lnk
2018-03-22 11:21 - 2018-03-22 11:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PosterIt!
2018-03-22 11:21 - 2018-03-22 11:21 - 000000000 ____D C:\Program Files (x86)\PosterIt!
2018-03-22 11:13 - 2018-03-22 11:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screen Beagle
2018-03-22 11:13 - 2018-03-22 11:13 - 000000000 ____D C:\Program Files (x86)\Greatis
2018-03-20 12:24 - 2018-03-20 12:24 - 000055049 _____ C:\Users\Morgan Pierce Parker\Desktop\Malware bytes EXPORT log 2018 03 19.txt
2018-03-20 12:23 - 2018-03-20 12:23 - 000002492 _____ C:\Users\Morgan Pierce Parker\Desktop\Malware bytes EXPORT log 2018 03 20.txt
2018-03-20 10:44 - 2018-03-20 10:46 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\concept design
2018-03-20 10:44 - 2018-03-20 10:44 - 000001244 _____ C:\Users\Public\Desktop\onlineTV 13.lnk
2018-03-20 10:44 - 2018-03-20 10:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\concept design
2018-03-20 10:44 - 2018-03-20 10:44 - 000000000 ____D C:\Program Files (x86)\concept design
2018-03-20 10:23 - 2018-03-20 10:23 - 000253664 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-03-20 10:21 - 2018-03-20 10:21 - 000001882 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-03-20 10:21 - 2018-03-20 10:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-03-20 10:21 - 2018-01-18 08:03 - 000076200 _____ C:\Windows\system32\Drivers\mbae64.sys
2018-03-20 10:17 - 2018-03-20 10:18 - 000000000 ____D C:\Users\Morgan Pierce Parker\Desktop\Malwarebytes Antimalware
2018-03-19 15:18 - 2018-03-19 15:18 - 000001024 _____ C:\Users\Public\Desktop\Hasleo WinToHDD.lnk
2018-03-19 15:18 - 2018-03-19 15:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hasleo WinToHDD
2018-03-18 14:43 - 2018-03-18 14:43 - 000001067 _____ C:\Users\Morgan Pierce Parker\Desktop\RGSA LOG 2018 03 18 SALog.txt
2018-03-18 14:42 - 2018-03-18 14:42 - 000001070 _____ C:\Users\Morgan Pierce Parker\Desktop\SALog.txt
2018-03-18 14:42 - 2018-03-18 14:16 - 000899584 _____ C:\Users\Morgan Pierce Parker\Desktop\RGSA.exe
2018-03-18 14:41 - 2018-03-18 14:41 - 000015444 _____ C:\Users\Morgan Pierce Parker\Desktop\EMISOFTE EMERGENCY KIT AFTER QUARANTEEN 2018 03 18 scan_180318-142241.txt
2018-03-18 14:36 - 2018-03-18 14:36 - 000008870 _____ C:\Users\Morgan Pierce Parker\Desktop\EMISOFT EMERGENCY KIT 2018 03 18 scan_180318-142241.txt
2018-03-18 14:17 - 2018-03-18 14:17 - 000000000 ____D C:\ProgramData\Emsisoft
2018-03-18 14:14 - 2018-03-18 14:41 - 000000000 ____D C:\EEK
2018-03-18 14:02 - 2018-03-18 13:43 - 320075296 _____ C:\Users\Morgan Pierce Parker\Desktop\EmsisoftEmergencyKit.exe
2018-03-18 13:41 - 2018-03-18 13:41 - 000001261 _____ C:\Users\Morgan Pierce Parker\Desktop\Revo Uninstaller Pro.lnk
2018-03-18 12:47 - 2018-03-18 12:47 - 000000000 ____D C:\ProgramData\VS Revo Group
2018-03-18 12:44 - 2018-03-18 12:44 - 012052552 _____ (VS Revo Group ) C:\Users\Morgan Pierce Parker\Desktop\RevoUninProSetup.exe
2018-03-17 09:28 - 2018-03-17 09:28 - 000000994 _____ C:\Users\Public\Desktop\zebNet MailShelf Basic.lnk
2018-03-17 09:28 - 2018-03-17 09:28 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\zebNet
2018-03-17 09:28 - 2018-03-17 09:28 - 000000000 ____D C:\ProgramData\zebNet
2018-03-17 09:28 - 2018-03-17 09:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\zebNet MailShelf Basic
2018-03-17 09:28 - 2018-03-17 09:28 - 000000000 ____D C:\Program Files\zebNet
2018-03-16 19:10 - 2018-03-16 19:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2018-03-16 12:39 - 2018-03-16 12:39 - 000022295 _____ C:\Users\Morgan Pierce Parker\Desktop\Fixlog 2018 03 16 also WerFault-exe wanted startup.txt
2018-03-16 12:01 - 2018-03-16 12:01 - 000007957 _____ C:\Users\Morgan Pierce Parker\Desktop\FRST SCRIPT FOR 2018 03 16.txt
2018-03-16 11:54 - 2018-03-16 12:17 - 000022292 _____ C:\Users\Morgan Pierce Parker\Desktop\Fixlog.txt
2018-03-16 11:54 - 2018-03-16 11:54 - 000007950 _____ C:\Users\Morgan Pierce Parker\Desktop\lvdeemcxduijznbx.txt
2018-03-16 11:52 - 2018-03-16 11:52 - 000000000 ____D C:\Users\Morgan Pierce Parker\Desktop\FRST-OlderVersion
2018-03-16 11:02 - 2018-03-16 11:02 - 000002092 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink ColorDirector 5 (64-bit).lnk
2018-03-16 11:02 - 2018-03-16 11:02 - 000002080 _____ C:\Users\Public\Desktop\CyberLink ColorDirector 5 (64-bit).lnk
2018-03-16 11:00 - 2018-03-16 11:00 - 000000000 ____D C:\ProgramData\Sun
2018-03-16 10:56 - 2018-03-16 10:57 - 170321520 _____ C:\Users\Morgan Pierce Parker\Downloads\ColorDirector_5.0.7213.194237_GM4_LE_LE_CDR180307-01.exe
2018-03-15 07:50 - 2018-03-15 07:50 - 000051024 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2018-03-15 07:50 - 2018-03-15 07:50 - 000045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2018-03-15 07:50 - 2018-03-15 07:50 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2018-03-15 07:50 - 2018-03-15 07:50 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2018-03-11 00:12 - 2018-03-11 00:12 - 000001346 _____ C:\Users\Morgan Pierce Parker\Desktop\Anti-Malware - Shortcut.lnk
2018-03-10 23:54 - 2018-03-22 19:58 - 000000000 ____D C:\FRST
2018-03-10 20:36 - 2018-03-16 11:52 - 002403328 _____ (Farbar) C:\Users\Morgan Pierce Parker\Desktop\FRST64.exe
2018-03-10 20:35 - 2018-03-10 20:35 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-03-10 16:11 - 2018-03-10 16:11 - 000002142 _____ C:\Users\Morgan Pierce Parker\Desktop\SharpDevelop 5.1.lnk
2018-03-10 16:09 - 2018-03-10 16:09 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\NuGet
2018-03-10 16:09 - 2018-03-10 16:09 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\ICSharpCode
2018-03-10 16:04 - 2018-03-10 16:04 - 000002142 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharpDevelop 5.1.lnk
2018-03-10 16:04 - 2018-03-10 16:04 - 000002130 _____ C:\Users\Public\Desktop\SharpDevelop 5.1.lnk
2018-03-10 16:04 - 2018-03-10 16:04 - 000000000 ____D C:\Program Files (x86)\SharpDevelop
2018-03-09 14:21 - 2018-03-09 14:21 - 000028272 _____ C:\Windows\system32\Drivers\TrueSight.sys
2018-03-09 14:19 - 2018-03-09 14:19 - 000000871 _____ C:\Users\Public\Desktop\RogueKiller.lnk
2018-03-09 14:19 - 2018-03-09 14:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2018-03-09 14:19 - 2018-03-09 14:19 - 000000000 ____D C:\Program Files\RogueKiller
2018-03-09 10:52 - 2018-03-16 09:51 - 000003406 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2396228472-3482715812-2186985281-1006
2018-03-09 09:49 - 2018-03-09 09:49 - 000018988 _____ C:\Users\Morgan Pierce Parker\Documents\Rkill 2018 03 07.txt
2018-03-08 15:12 - 2018-03-08 15:12 - 000000318 ____H C:\Windows\Tasks\User_Feed_Synchronization-{1B73630D-E1E9-42D4-AC78-4AD6896403D9}.job
2018-03-07 23:08 - 2018-03-09 09:51 - 000012494 _____ C:\Users\Morgan Pierce Parker\Desktop\Rkill.txt
2018-03-07 17:51 - 2018-03-07 17:51 - 000059713 _____ C:\Windows\SysWOW64\stub.json
2018-03-06 11:43 - 2018-03-06 11:43 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\SoftOrbits
2018-03-06 11:32 - 2018-03-06 11:32 - 000001145 _____ C:\Users\Morgan Pierce Parker\Desktop\Video Watermark Maker.lnk
2018-03-06 11:32 - 2018-03-06 11:32 - 000000000 ____D C:\Windows\SysWOW64\LibAV
2018-03-06 11:32 - 2015-08-09 01:29 - 001790976 _____ () C:\Windows\SysWOW64\AVEditLibOcx.ocx
2018-03-03 22:55 - 2018-03-03 22:55 - 000004096 ___SH C:\{64CC589E-2BFF-4C2A-9C02-4F3D6033C731}.CBM
2018-03-03 21:08 - 2018-03-03 21:08 - 000477696 ___SH C:\EUMONBMP.SYS
2018-03-03 21:08 - 2018-03-03 21:08 - 000000000 ____D C:\Windows\system32\config\regsave
2018-03-03 21:07 - 2018-03-03 21:07 - 000000000 ____D C:\easeus_tb_cloud
2018-03-03 21:02 - 2018-03-03 21:02 - 000002345 _____ C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromium.lnk
2018-03-03 21:02 - 2018-03-03 21:02 - 000002337 _____ C:\Users\Morgan Pierce Parker\Desktop\Chromium.lnk
2018-03-03 21:02 - 2018-03-03 21:02 - 000000000 ____D C:\ProgramData\SystemAcCrux
2018-03-03 17:00 - 2018-03-03 17:00 - 000001925 _____ C:\Users\Public\Desktop\EaseUS Todo Backup Free 10.6.lnk
2018-03-03 17:00 - 2018-03-03 17:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Todo Backup 10.6
2018-03-03 15:56 - 2018-03-03 15:51 - 000000997 _____ C:\Users\Morgan Pierce Parker\Desktop\Disk Master Professional.lnk
2018-03-03 15:51 - 2018-03-03 15:51 - 000000979 _____ C:\Users\Public\Desktop\Disk Master Professional.lnk
2018-03-03 15:51 - 2018-03-03 15:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Disk Master Professional
2018-03-03 15:51 - 2018-02-05 23:06 - 000256312 _____ (QILING Tech Co., Ltd.) C:\Windows\system32\Drivers\vDisk.sys
2018-03-03 15:51 - 2018-02-05 23:06 - 000045368 _____ (QILING Tech Co., Ltd.) C:\Windows\system32\Drivers\diskbckp.sys
2018-03-02 18:29 - 2018-03-02 18:29 - 000000825 _____ C:\Users\Morgan Pierce Parker\Desktop\Morgan Pierce Parker my-dvd-iso - Shortcut.lnk
2018-03-01 21:51 - 2018-03-01 21:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inpaint 7
2018-03-01 21:51 - 2018-03-01 21:51 - 000000000 ____D C:\Program Files\Inpaint7
2018-03-01 12:46 - 2018-03-01 12:46 - 000003271 _____ C:\Users\Morgan Pierce Parker\Desktop\ELDIM - EDIDViewer.lnk
2018-03-01 10:49 - 2018-03-01 10:49 - 000000000 ____D C:\Program Files\Malwarebytes
2018-02-28 17:58 - 2018-02-28 18:01 - 000000000 ____D C:\Users\Morgan Pierce Parker\Desktop\miscel images dups - but ken delete interesting
2018-02-28 09:34 - 2016-05-11 11:55 - 000001951 _____ C:\Users\Morgan Pierce Parker\Desktop\thinkorswim.lnk
2018-02-28 04:14 - 2018-02-28 07:51 - 000000000 ____D C:\Users\Morgan Pierce Parker\Documents\WR-Permissions Backup-2018_02_28-03_14_files
2018-02-28 03:33 - 2018-02-28 03:33 - 000003796 _____ C:\Windows\System32\Tasks\Dell SupportAssistAgent AutoUpdate
2018-02-26 15:56 - 2018-02-26 15:56 - 000001119 _____ C:\Users\Public\Desktop\AOMEI PE Builder 2.0.lnk
2018-02-26 15:56 - 2018-02-26 15:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI PE Builder 2.0
2018-02-26 15:51 - 2018-02-26 15:56 - 000000000 ____D C:\Program Files (x86)\AOMEI PE Builder 2.0
2018-02-26 11:30 - 2018-02-26 11:30 - 000000826 _____ C:\Users\Morgan Pierce Parker\Desktop\Aml Pages.lnk
2018-02-25 15:53 - 2018-02-25 15:53 - 000001650 _____ C:\Users\Morgan Pierce Parker\Desktop\DVD_ISO - Shortcut (2).lnk
2018-02-25 15:49 - 2018-02-25 15:49 - 000000509 _____ C:\Local Disk © - Shortcut.lnk
2018-02-24 11:16 - 2018-02-24 11:16 - 000003608 _____ C:\Windows\System32\Tasks\doPDF 9 Update
2018-02-24 11:16 - 2018-02-24 11:16 - 000003588 _____ C:\Windows\System32\Tasks\doPDF 9 Telemetry
2018-02-24 11:15 - 2018-02-24 11:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\doPDF 9
2018-02-24 10:39 - 2018-02-01 10:30 - 000001204 _____ C:\Users\Morgan Pierce Parker\Desktop\Youtube Downloader HD (4).lnk
2018-02-23 15:51 - 2018-02-23 15:42 - 000002563 _____ C:\Users\Morgan Pierce Parker\Desktop\O&O DiskImage.lnk
2018-02-23 15:42 - 2018-02-23 15:42 - 000002539 _____ C:\Users\Public\Desktop\O&O DiskImage.lnk
2018-02-23 15:42 - 2018-02-23 15:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\O&O Software
2018-02-23 12:49 - 2018-02-28 08:54 - 000018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2018-02-23 12:01 - 2018-02-23 12:49 - 000000000 ____D C:\Program Files\Common Files\LogiShrd
2018-02-23 11:46 - 2018-02-23 11:42 - 000001383 _____ C:\Users\Morgan Pierce Parker\Desktop\Allavsoft.lnk
2018-02-23 11:43 - 2018-02-23 11:45 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\Allavsoft
2018-02-23 11:43 - 2018-02-23 11:43 - 000000000 ____D C:\Users\Morgan Pierce Parker\Documents\Allavsoft
2018-02-23 11:42 - 2018-02-23 11:42 - 000001341 _____ C:\Users\Public\Desktop\Allavsoft.lnk
2018-02-23 11:42 - 2018-02-23 11:42 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Allavsoft
2018-02-23 11:42 - 2018-02-23 11:42 - 000000000 ____D C:\Program Files (x86)\Allavsoft
2018-02-23 11:32 - 2018-02-23 12:01 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\Logishrd
2018-02-22 17:15 - 2018-02-28 09:33 - 000000000 ____D C:\Program Files\thinkorswim
2018-02-22 11:29 - 2018-02-22 11:29 - 000000819 _____ C:\Users\Users - Shortcut.lnk
2018-02-20 12:42 - 2018-02-20 12:42 - 000001344 _____ C:\Users\Morgan Pierce Parker\Desktop\autorunsc64.exe - Shortcut.lnk
2018-02-20 12:42 - 2018-02-20 12:42 - 000001339 _____ C:\Users\Morgan Pierce Parker\Desktop\Autoruns64.exe - Shortcut.lnk
2018-02-20 12:41 - 2018-02-20 12:42 - 000000000 ____D C:\Program Files\Autoruns
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2018-03-22 19:59 - 2017-11-23 11:52 - 000323662 _____ C:\Windows\ZAM.krnl.trace
2018-03-22 19:51 - 2013-03-18 13:25 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\Skype
2018-03-22 19:26 - 2014-03-03 09:37 - 000000624 _____ C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-2396228472-3482715812-2186985281-1006.job
2018-03-22 19:09 - 2017-05-16 18:40 - 000000404 _____ C:\Windows\Tasks\WpsUpdateTask_Morgan Pierce Parker.job
2018-03-22 19:06 - 2009-07-14 00:45 - 000035552 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-03-22 19:06 - 2009-07-14 00:45 - 000035552 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-03-22 19:03 - 2017-08-12 19:58 - 000000936 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2018-03-22 18:20 - 2015-07-21 14:24 - 000000720 _____ C:\Windows\Tasks\G2MUploadTask-S-1-5-21-2396228472-3482715812-2186985281-1006.job
2018-03-22 16:28 - 2016-05-11 11:55 - 000000000 ____D C:\Program Files\thinkorswim2
2018-03-22 15:46 - 2017-08-27 14:51 - 000000000 ____D C:\Program Files\Opera
2018-03-22 15:26 - 2014-12-02 09:07 - 000000294 _____ C:\Windows\Tasks\StartupStar Firewall.job
2018-03-22 15:14 - 2014-03-31 16:00 - 000000000 ____D C:\Program Files (x86)\Opera20
2018-03-22 15:08 - 2012-11-16 12:39 - 000000000 ____D C:\Program Files\Opera x64
2018-03-22 15:02 - 2016-09-27 09:23 - 000000000 ____D C:\Users\Morgan Pierce Parker\Documents\Tabbles
2018-03-22 11:57 - 2014-02-09 17:16 - 000000000 ____D C:\Users\Morgan Pierce Parker\.thinkorswim
2018-03-22 11:43 - 2015-04-30 14:27 - 000000000 ____D C:\ProgramData\Movavi
2018-03-21 12:07 - 2012-02-16 15:05 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\vlc
2018-03-21 10:11 - 2016-08-16 10:14 - 000000000 ____D C:\Users\Morgan Pierce Parker\Documents\ReadygoScreenRecorder
2018-03-20 15:03 - 2017-07-27 02:37 - 000003216 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2396228472-3482715812-2186985281-1006
2018-03-20 15:02 - 2017-06-11 09:39 - 000002212 _____ C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2018-03-20 15:02 - 2017-06-11 09:39 - 000000000 ___RD C:\Users\Morgan Pierce Parker\OneDrive
2018-03-19 16:28 - 2016-11-26 09:42 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\LocalLow\Mozilla
2018-03-19 16:27 - 2013-05-01 11:05 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-03-19 16:27 - 2012-01-18 17:24 - 000000000 ____D C:\Program Files\Mozilla Firefox
2018-03-19 15:26 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\registration
2018-03-19 15:25 - 2009-07-14 01:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-03-19 15:21 - 2017-10-03 12:22 - 000065536 _____ C:\Windows\system32\spu_storage.bin
2018-03-19 15:20 - 2012-02-17 12:11 - 000000808 _____ C:\Windows\WORDPAD.INI
2018-03-18 14:39 - 2014-06-03 16:04 - 000000000 ____D C:\Program Files (x86)\Freemore Audio Video Suite
2018-03-18 14:39 - 2012-01-18 17:24 - 000000000 ____D C:\Program Files\Multi_Media_US
2018-03-18 14:39 - 2012-01-18 10:43 - 000000000 ____D C:\Program Files (x86)\AMiGO (IB)
2018-03-18 13:54 - 2013-09-08 10:40 - 000000000 ____D C:\Users\Morgan Pierce Parker\Documents\My Kindle Content
2018-03-18 12:47 - 2012-01-21 15:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2018-03-17 19:38 - 2016-05-07 09:16 - 000000892 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2018-03-17 19:38 - 2012-01-16 11:45 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-03-17 16:24 - 2013-03-28 17:16 - 000000000 ____D C:\ProgramData\TEMP
2018-03-16 19:11 - 2017-08-12 19:57 - 000000000 ____D C:\Program Files (x86)\Dropbox
2018-03-16 12:17 - 2013-06-11 12:03 - 000000008 __RSH C:\Users\Morgan Pierce Parker\ntuser.pol
2018-03-16 12:17 - 2013-06-10 23:34 - 000000000 ____D C:\Users\Morgan Pierce Parker
2018-03-16 12:07 - 2013-04-01 15:11 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\LocalLow\Temp
2018-03-16 12:03 - 2017-11-23 11:52 - 000116052 _____ C:\Windows\ZAM_Guard.krnl.trace
2018-03-16 11:54 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2018-03-16 11:54 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\system32\GroupPolicy
2018-03-16 11:15 - 2012-01-18 17:32 - 000000000 ____D C:\Program Files\Wise PC Engineer
2018-03-16 11:03 - 2012-05-13 18:39 - 000000000 ____D C:\Users\Morgan Pierce Parker\Documents\CyberLink
2018-03-16 11:02 - 2016-12-03 12:43 - 000000000 ____D C:\Program Files (x86)\NSIS Uninstall Information
2018-03-16 11:02 - 2012-01-17 10:34 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2018-03-16 10:58 - 2016-12-03 12:41 - 000000000 ____D C:\ProgramData\SUPPORTDIR
2018-03-16 10:58 - 2016-12-03 12:41 - 000000000 ____D C:\ProgramData\install_backup
2018-03-16 10:58 - 2014-09-13 23:36 - 000000000 ____D C:\ProgramData\install_clap
2018-03-16 10:58 - 2012-01-18 16:55 - 000000000 ____D C:\Program Files\CyberLink
2018-03-15 18:06 - 2017-06-15 14:33 - 000000000 ____D C:\Users\Morgan Pierce Parker\Documents\NinjaTrader Backup
2018-03-15 18:01 - 2014-01-22 21:54 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\GlarySoft
2018-03-15 17:54 - 2013-01-01 18:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Care 365
2018-03-15 17:28 - 2012-01-18 11:20 - 000000000 ____D C:\Program Files (x86)\eMule
2018-03-15 17:09 - 2012-01-18 17:32 - 000000000 ____D C:\Program Files\uTorrent
2018-03-14 16:05 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\Cursors
2018-03-13 22:30 - 2012-01-30 19:31 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-03-12 15:00 - 2013-07-05 19:34 - 000000000 ____D C:\Program Files\WhoCrashed
2018-03-11 20:52 - 2009-07-14 01:13 - 000887860 _____ C:\Windows\system32\PerfStringBackup.INI
2018-03-11 20:51 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\inf
2018-03-11 20:45 - 2018-02-14 17:38 - 000000248 _____ C:\Windows\SysWOW64\PARTIZLO.EXE
2018-03-11 19:58 - 2012-01-30 19:32 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\TeamViewer
2018-03-10 17:10 - 2017-08-12 14:19 - 000000000 ____D C:\AdwCleaner
2018-03-10 10:40 - 2014-05-18 00:50 - 000000000 ____D C:\ComIntRepair
2018-03-10 10:40 - 2014-03-21 11:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Hard Disk Manager™ 14 Professional
2018-03-09 14:20 - 2016-08-30 19:56 - 000000000 ____D C:\ProgramData\RogueKiller
2018-03-09 13:40 - 2015-07-21 14:24 - 000003794 _____ C:\Windows\System32\Tasks\G2MUploadTask-S-1-5-21-2396228472-3482715812-2186985281-1006
2018-03-09 13:40 - 2014-03-03 09:37 - 000003698 _____ C:\Windows\System32\Tasks\G2MUpdateTask-S-1-5-21-2396228472-3482715812-2186985281-1006
2018-03-09 10:09 - 2016-09-02 20:52 - 000000000 ____D C:\Program Files (x86)\iolo
2018-03-09 09:53 - 2017-08-08 09:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2018-03-09 09:53 - 2017-08-08 09:01 - 000000000 ____D C:\ProgramData\WinZip
2018-03-07 23:08 - 2009-07-14 01:08 - 000032614 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2018-03-06 11:33 - 2013-07-24 10:36 - 000000000 ____D C:\Program Files (x86)\Video Watermark Maker
2018-03-06 11:32 - 2017-06-29 08:44 - 000000452 _____ C:\Users\Morgan Pierce Parker\Desktop\My Software Deals.url
2018-03-06 11:32 - 2013-07-24 10:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Watermark Maker
2018-03-03 16:51 - 2012-01-18 17:17 - 000000000 ____D C:\Program Files\EASEUS
2018-03-03 15:52 - 2015-09-10 10:44 - 000000000 ____D C:\ProgramData\Disk Master
2018-03-03 12:03 - 2012-01-18 17:06 - 000000000 ____D C:\Program Files\tradertechniques
2018-03-02 14:28 - 2010-11-21 03:16 - 000000000 ____D C:\Windows\CSC
2018-03-02 14:28 - 2009-07-14 00:45 - 000819520 _____ C:\Windows\system32\FNTCACHE.DAT
2018-03-01 13:05 - 2009-07-13 22:34 - 000001151 _____ C:\Windows\win.ini
2018-03-01 12:47 - 2013-06-10 23:31 - 000887860 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2018-03-01 10:22 - 2017-08-26 14:49 - 000000000 ____D C:\Program Files (x86)\AOMEI Backupper
2018-03-01 10:22 - 2015-04-28 22:30 - 000000082 _____ C:\Windows\SysWOW64\winsevr.dat
2018-03-01 10:22 - 2013-03-17 13:56 - 000005970 _____ C:\Windows\system32\Drivers\etc\hosts_bak_144
2018-02-28 20:18 - 2014-05-18 05:43 - 000000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2018-02-28 15:22 - 2016-05-31 00:01 - 000000000 ____D C:\140 Sychronicity
2018-02-28 09:36 - 2017-06-12 15:14 - 000000000 ___RD C:\Users\Morgan Pierce Parker\Desktop\MASTER DESKTOP
2018-02-27 20:55 - 2017-09-26 11:30 - 000000000 ____D C:\ProgramData\scre..tion_2c2536e5112611c9_0006.0003_35e631e4ee1ef81a
2018-02-27 20:48 - 2017-06-14 15:31 - 000002176 _____ C:\Users\Morgan Pierce Parker\Desktop\Tweaking.com - Windows Repair.lnk
2018-02-27 17:19 - 2012-06-05 13:18 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aml Pages
2018-02-27 14:47 - 2015-04-28 22:30 - 000000000 ____D C:\ProgramData\AomeiBR
2018-02-27 02:42 - 2016-09-02 21:30 - 000002231 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-02-26 16:22 - 2015-12-23 18:42 - 000000000 ____D C:\Users\Morgan Pierce Parker\Desktop\140 ADDITIONAL DESKTOP SHORTCUTS
2018-02-26 16:22 - 2015-09-21 16:04 - 000000000 ___RD C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE
2018-02-26 11:56 - 2017-12-16 01:57 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\AntDM
2018-02-26 11:30 - 2014-10-06 17:31 - 000000826 _____ C:\Users\Transition\Desktop\Aml Pages.lnk
2018-02-26 11:30 - 2014-10-06 17:31 - 000000826 _____ C:\Users\Pierce Potye\Desktop\Aml Pages.lnk
2018-02-26 11:30 - 2014-10-06 17:31 - 000000826 _____ C:\Users\Pee Wee\Desktop\Aml Pages.lnk
2018-02-26 11:30 - 2014-10-06 17:31 - 000000826 _____ C:\Users\NewAdmin\Desktop\Aml Pages.lnk
2018-02-26 11:30 - 2014-10-06 17:31 - 000000826 _____ C:\Users\Harriet Parker Mann\Desktop\Aml Pages.lnk
2018-02-26 11:30 - 2014-10-06 17:31 - 000000826 _____ C:\Users\ASPNET\Desktop\Aml Pages.lnk
2018-02-26 11:30 - 2014-10-06 17:31 - 000000826 _____ C:\Users\Administrator\Desktop\Aml Pages.lnk
2018-02-26 11:30 - 2014-10-06 17:31 - 000000826 _____ C:\Users\_ocster_1clk_backup_\Desktop\Aml Pages.lnk
2018-02-26 11:30 - 2012-06-05 13:18 - 000000850 _____ C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Aml Pages.lnk
2018-02-26 11:27 - 2012-01-18 19:22 - 000000000 ____D C:\Program Files\Aml Pages
2018-02-25 15:47 - 2012-03-29 17:33 - 000276256 _____ (Digiarty Software, Inc.) C:\Windows\system32\Drivers\DigiartyVirtualCDBus.sys
2018-02-24 11:16 - 2012-01-23 18:57 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\Softland
2018-02-24 11:15 - 2012-01-23 18:57 - 000000000 ____D C:\ProgramData\Softland
2018-02-24 11:12 - 2012-01-18 19:40 - 000000000 ____D C:\Program Files\Softland
2018-02-24 11:10 - 2013-11-19 12:02 - 000000000 ____D C:\ProgramData\Package Cache
2018-02-24 11:10 - 2012-01-31 10:23 - 000000000 ____D C:\Program Files (x86)\Softland
2018-02-23 13:06 - 2015-12-15 12:44 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\MyPhoneExplorer
2018-02-23 13:06 - 2014-03-25 14:31 - 000000000 ____D C:\ProgramData\LogSaver
2018-02-23 13:06 - 2013-07-14 16:23 - 000000000 ____D C:\Program Files\Puran Defrag
2018-02-23 13:06 - 2012-09-28 10:48 - 000000000 ____D C:\Users\Transition\AppData\Roaming\ProcessLasso
2018-02-23 13:06 - 2012-02-23 18:23 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\TeraCopy
2018-02-23 13:06 - 2012-01-22 16:36 - 000000000 ____D C:\ProgramData\launcher
2018-02-23 13:06 - 2012-01-22 16:36 - 000000000 ____D C:\ProgramData\explauncher
2018-02-23 13:03 - 2014-09-18 18:15 - 000000000 ____D C:\Users\Morgan Pierce Parker\Documents\DVDFab Media Player
2018-02-23 13:03 - 2014-06-03 16:39 - 000000000 ____D C:\Users\Morgan Pierce Parker\Documents\My CamStudio Temp Files
2018-02-23 13:03 - 2012-04-05 14:17 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\dvdcss
2018-02-23 13:02 - 2016-01-03 10:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Lasso
2018-02-23 13:02 - 2012-01-18 19:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Studio 10
2018-02-23 13:02 - 2012-01-18 19:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ensign Software
2018-02-23 12:51 - 2012-01-18 19:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2018-02-23 12:50 - 2014-04-18 08:19 - 000000000 ____D C:\ProgramData\LogiShrd
2018-02-23 12:46 - 2012-01-18 17:02 - 000000000 ____D C:\Program Files\Logitech
2018-02-23 12:00 - 2014-04-18 08:18 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\Logitech
2018-02-22 17:15 - 2012-01-18 19:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\thinkorswim
2018-02-22 08:26 - 2017-07-08 22:31 - 000000000 ____D C:\Program Files (x86)\GoToMeeting
 
==================== Files in the root of some directories =======
 
2014-03-24 16:15 - 2014-04-22 11:34 - 000006292 _____ () C:\ProgramData\takesys.dat
2004-01-13 09:51 - 2004-01-13 09:51 - 000000566 _____ () C:\Program Files\095 eSignal.lnk
2006-02-12 16:09 - 2006-02-12 16:09 - 000012382 _____ () C:\Program Files\123-modifiedx.dat
2005-08-19 17:33 - 2012-01-18 19:05 - 000000478 _____ () C:\Program Files\AmiBroker (2).lnk
2005-10-29 11:18 - 2012-01-18 19:05 - 000000478 _____ () C:\Program Files\AmiBroker (3).lnk
2005-04-12 11:35 - 2012-01-18 19:05 - 000000478 _____ () C:\Program Files\AmiBroker.lnk
2003-09-10 20:39 - 2012-01-18 16:55 - 000000587 _____ () C:\Program Files\Creative.lnk
2005-11-10 12:45 - 2012-01-18 19:11 - 000000489 _____ () C:\Program Files\ENSIGN.lnk
2003-10-24 20:43 - 2005-09-15 14:48 - 000021952 _____ () C:\Program Files\folder.htt
2008-12-27 19:04 - 2012-01-18 19:40 - 000000513 _____ () C:\Program Files\Microsoft Office2000 install here.lnk
2006-09-23 09:42 - 2006-09-23 09:42 - 001412179 _____ () C:\Program Files\NAttache COPY BEFORE 9-23-06.zip
2008-10-02 07:12 - 2008-10-01 12:05 - 000024576 _____ () C:\Program Files\Peter Chat 9-30-08 Agreement basicsv2.doc
2004-04-08 17:51 - 2004-04-08 17:51 - 000000216 _____ () C:\Program Files\PTKC_INSTALL.LOG
2011-11-28 19:36 - 2011-11-28 19:36 - 000000008 _____ () C:\Program Files\SysResources Managersys112.dat
2006-02-12 22:48 - 2006-02-12 22:48 - 000013590 _____ () C:\Program Files\testc 123 HA WHILTE CANDLES.dat
2006-02-12 22:47 - 2006-02-12 22:47 - 000013590 _____ () C:\Program Files\testc.dat
2016-11-12 09:05 - 2016-07-20 13:26 - 000000999 _____ () C:\Program Files\zz available.rtf - Shortcut.lnk
2016-11-12 09:05 - 2016-05-24 19:38 - 000001287 _____ () C:\Program Files\ZZ WIDE WORD DOCUMENT BLANK - Shortcut (2).lnk
2016-11-12 09:05 - 2016-07-02 08:00 - 000002111 _____ () C:\Program Files\ZZO available observations.rtf - Shortcut.lnk
2016-11-12 09:05 - 2016-07-02 08:00 - 000002102 _____ () C:\Program Files\ZZP AVAILABLE FILE POETRY.rtf - Shortcut.lnk
2016-11-12 09:05 - 2016-05-24 19:38 - 000001290 _____ () C:\Program Files\ZZZ DOC AVAILABLE - Shortcut (2).lnk
2016-11-12 09:05 - 2016-05-24 19:37 - 000001211 _____ () C:\Program Files\ZZZ DOC WIDE AVAILABLE - Shortcut.lnk
2005-11-19 16:43 - 2012-01-18 11:03 - 000000596 _____ () C:\Program Files (x86)\BROWSER - Set Default Browser.lnk
2013-09-09 15:14 - 2013-11-12 11:29 - 000003745 _____ () C:\Program Files (x86)\Mozilla Firefoxsafeguard-secure-search.xml
2011-04-12 19:16 - 2011-04-12 19:16 - 000000008 _____ () C:\Program Files (x86)\SysResources Managersys111.dat
2006-03-31 21:35 - 2006-03-31 21:35 - 000000004 _____ () C:\Program Files\Common Files\Cvtaqlog.dat
2015-08-28 08:59 - 2015-08-27 16:48 - 000444283 _____ () C:\Program Files\Common Files\WinPcapNmap.exe
2011-01-12 02:00 - 2011-01-12 02:00 - 000146944 _____ () C:\Program Files (x86)\Common Files\dsfFLACDecoder.dll
2011-01-12 02:00 - 2011-01-12 02:00 - 000221184 _____ () C:\Program Files (x86)\Common Files\dsfFLACEncoder.dll
2011-01-12 02:00 - 2011-01-12 02:00 - 000204800 _____ () C:\Program Files (x86)\Common Files\dsfNativeFLACSource.dll
2012-05-11 14:16 - 2012-05-11 14:16 - 000171520 _____ () C:\Program Files (x86)\Common Files\dsfOggDemux2.dll
2011-01-12 02:00 - 2011-01-12 02:00 - 000240128 _____ () C:\Program Files (x86)\Common Files\dsfVorbisDecoder.dll
2009-07-11 23:08 - 2009-07-11 23:08 - 000001860 _____ () C:\Program Files (x86)\Common Files\Microsoft.VC90.CRT.manifest
2011-04-18 22:51 - 2011-04-18 22:51 - 000569680 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\MSVCP90.dll
2011-04-18 22:51 - 2011-04-18 22:51 - 000653136 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\MSVCR90.dll
2010-12-16 21:39 - 2010-12-16 21:39 - 000412672 _____ (Google) C:\Program Files (x86)\Common Files\vp8decoder.dll
2010-12-16 21:39 - 2010-12-16 21:39 - 000701440 _____ (Google) C:\Program Files (x86)\Common Files\vp8encoder.dll
2010-12-16 21:39 - 2010-12-16 21:39 - 000302592 _____ (Google) C:\Program Files (x86)\Common Files\webmmux.dll
2010-12-16 21:39 - 2010-12-16 21:39 - 000292352 _____ (Google) C:\Program Files (x86)\Common Files\webmsplit.dll
2011-01-12 02:00 - 2011-01-12 02:00 - 000030208 _____ () C:\Program Files (x86)\Common Files\wmpinfo.dll
2014-11-18 19:07 - 2015-09-02 10:26 - 000000261 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\1119HOTK.dat
2012-10-31 15:28 - 2015-11-22 11:18 - 000000344 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\15a05a1824a8793fae296ac6f79b78023a0c9d3c
2013-09-02 09:15 - 2013-09-02 09:15 - 000001929 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\Ashampoo Gadge It event.log
2013-04-10 17:58 - 2013-11-14 16:30 - 000000000 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\AVSDVDPlayer.m3u
2012-12-05 13:12 - 2015-12-30 12:51 - 000001004 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\burnaware.ini
2012-03-05 16:11 - 2015-11-22 11:18 - 000000332 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\c1972b1a7030edbaa8a0231998d2d434906484f2
2014-06-03 16:48 - 2014-11-15 09:18 - 000000095 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\Camdata.ini
2014-06-03 16:48 - 2014-11-15 09:18 - 000000408 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\CamLayout.ini
2014-06-03 16:48 - 2014-11-15 09:18 - 000000408 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\CamShapes.ini
2014-06-03 16:48 - 2014-11-15 09:18 - 000004543 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\CamStudio.cfg
2014-11-14 19:04 - 2014-11-14 19:12 - 000000098 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\CamStudio.Producer.command
2014-11-14 19:07 - 2014-11-14 19:14 - 000000000 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\CamStudio.Producer.Data.ini
2014-11-14 19:07 - 2014-11-14 19:14 - 000001206 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\CamStudio.Producer.ini
2016-12-22 12:05 - 2016-12-22 12:05 - 000000040 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\cdr.ini
2017-07-10 15:34 - 2017-07-10 15:35 - 000000703 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\codec.dll
2017-02-21 19:49 - 2017-02-21 19:49 - 000029516 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\Comma Separated Values.ADR
2012-05-05 17:11 - 2012-07-06 17:24 - 000000227 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\default.rss
2012-05-06 15:54 - 2012-05-06 15:54 - 000000000 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\downloads.m3u
2017-01-01 20:53 - 2017-01-01 20:55 - 000000110 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\IP.dat
2014-06-23 17:36 - 2014-06-23 17:37 - 000002058 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\moyea_dia.log
2015-06-18 14:21 - 2015-06-18 14:21 - 000000000 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\mru.ini
2013-07-14 14:07 - 2008-07-07 14:22 - 000000014 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\options.ini
2013-07-14 14:07 - 2012-07-07 14:04 - 000000003 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\options_pdfcombine.ini
2013-07-14 14:07 - 2013-02-23 13:15 - 000000003 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\options_pdfrotator.ini
2017-10-26 20:20 - 2017-05-04 14:05 - 000000002 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\paclan.ini
2017-10-26 20:20 - 2017-10-26 20:21 - 000000008 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\pacsound.dll
2016-11-01 10:06 - 2016-11-01 10:07 - 000000703 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\pcsound.dll
2015-03-10 14:25 - 2015-09-04 08:49 - 000000010 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\pdfdrawcodec.dll
2015-08-13 09:04 - 2015-08-13 09:05 - 000000008 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\pecodec.dll
2013-07-14 14:07 - 2013-06-09 10:38 - 000000053 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\setting.ini
2013-07-14 14:07 - 2013-06-08 14:43 - 000000030 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\setup.ini
2013-07-14 14:07 - 2013-06-09 10:30 - 000000043 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\setup_pdfcombine.ini
2013-07-14 14:07 - 2013-06-09 11:34 - 000000043 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\setup_pdfrotator.ini
2016-09-27 17:22 - 2016-09-27 17:22 - 000000011 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\tabbles_hwnd_main
2016-09-27 17:22 - 2016-09-27 17:22 - 000000009 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\tabbles_hwnd_quick_link
2014-06-03 16:26 - 2014-06-03 16:26 - 000000096 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\version2.xml
2013-07-30 11:20 - 2013-09-24 00:20 - 000000112 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\WB.CFG
2013-09-11 00:13 - 2013-09-11 00:13 - 000000005 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\WBPU-Q5-TTL.DAT
2013-06-24 06:47 - 2013-09-24 00:20 - 000000005 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\WBPU-TTL.DAT
2014-03-31 11:25 - 2013-03-18 18:45 - 001122304 _____ (The OpenSSL Project, http://www.openssl.org/)C:\Users\Morgan Pierce Parker\AppData\Local\libeay32.dll
2014-03-31 11:25 - 2011-06-11 01:58 - 000421200 _____ (Microsoft Corporation) C:\Users\Morgan Pierce Parker\AppData\Local\msvcp100.dll
2014-03-31 11:25 - 2011-06-11 01:58 - 000773968 _____ (Microsoft Corporation) C:\Users\Morgan Pierce Parker\AppData\Local\msvcr100.dll
2013-07-07 15:15 - 2013-07-07 15:15 - 000007630 _____ () C:\Users\Morgan Pierce Parker\AppData\Local\Resmon.ResmonCfg
2014-03-31 11:25 - 2013-03-18 18:45 - 000274432 _____ (The OpenSSL Project, http://www.openssl.org/)C:\Users\Morgan Pierce Parker\AppData\Local\ssleay32.dll
 
==================== Bamital & volsnap ======================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 
ATTENTION: ==> Could not access BCD. 
 
LastRegBack: 2018-03-09 17:15
 
==================== End of FRST.txt ============================


#54 Safe

Safe

    Authentic Member

  • Authentic Member
  • PipPip
  • 41 posts

Posted 22 March 2018 - 06:30 PM

Addition log:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14.03.2018
Ran by Morgan Pierce Parker (22-03-2018 20:00:37)
Running from C:\Users\Morgan Pierce Parker\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2013-06-11 16:03:35)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-2396228472-3482715812-2186985281-500 - Administrator - Enabled) => C:\Users\Administrator
ASPNET (S-1-5-21-2396228472-3482715812-2186985281-1003 - Limited - Enabled) => C:\Users\ASPNET
Guest (S-1-5-21-2396228472-3482715812-2186985281-501 - Limited - Disabled)
Harriet Parker Mann (S-1-5-21-2396228472-3482715812-2186985281-1004 - Administrator - Enabled) => C:\Users\Harriet Parker Mann
HelpAssistant (S-1-5-21-2396228472-3482715812-2186985281-1005 - Limited - Enabled)
Morgan Pierce Parker (S-1-5-21-2396228472-3482715812-2186985281-1006 - Administrator - Enabled) => C:\Users\Morgan Pierce Parker
morganp (S-1-5-21-2396228472-3482715812-2186985281-1024 - Administrator - Enabled)
NewAdmin (S-1-5-21-2396228472-3482715812-2186985281-1021 - Administrator - Enabled) => C:\Users\NewAdmin
Pee Wee (S-1-5-21-2396228472-3482715812-2186985281-1007 - Administrator - Enabled) => C:\Users\Pee Wee
Pierce Potye (S-1-5-21-2396228472-3482715812-2186985281-1008 - Administrator - Enabled) => C:\Users\Pierce Potye
SIMLIVEEXC001 (S-1-5-21-2396228472-3482715812-2186985281-1009 - Limited - Enabled)
SUPPORT_388945a0 (S-1-5-21-2396228472-3482715812-2186985281-1010 - Limited - Enabled)
Transition (S-1-5-21-2396228472-3482715812-2186985281-1000 - Administrator - Enabled) => C:\Users\Transition
TTADMXXX001 (S-1-5-21-2396228472-3482715812-2186985281-1011 - Limited - Enabled)
TTADMXXXMGR (S-1-5-21-2396228472-3482715812-2186985281-1012 - Limited - Enabled)
TTSIMSAM001 (S-1-5-21-2396228472-3482715812-2186985281-1013 - Limited - Enabled)
TTSIMSIM001 (S-1-5-21-2396228472-3482715812-2186985281-1014 - Limited - Enabled)
TTSIMSIM002 (S-1-5-21-2396228472-3482715812-2186985281-1015 - Limited - Enabled)
_ocster_1clk_backup_ (S-1-5-21-2396228472-3482715812-2186985281-1018 - Administrator - Enabled) => C:\Users\_ocster_1clk_backup_
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
"Nero SoundTrax Help (HKLM-x32\...\{B96C2601-52F5-4D5D-816A-63469EA311EF}) (Version: 4.0.15.0 - Nero AG) Hidden
@MAX SyncUp 2.9 (HKLM\...\{68EF9E48-C970-4124-BBC1-85C8ADD59109}_is1) (Version:  - @MAX Software)
100% Free Chess 6.54 (HKLM-x32\...\FreeChess_is1) (Version: 6.54 - DreamQuest)
100% Free Chess 7.42 (HKLM-x32\...\FreeChess) (Version: 7.42 - DreamQuest)
1-abc.net File Renamer (Remove only) (HKLM-x32\...\1-abc.net File Renamer) (Version:  - )
1-abc.net File Washer (HKLM-x32\...\1-abc.net File Washer) (Version:  - 1-abc.net Software Development and Distribution)
1-abc.net Synchronizer (HKLM-x32\...\1-abc.net Synchronizer) (Version:  - 1-abc.net Software Development and Distribution)
1AVCapture version 1.9.4.20 (HKLM-x32\...\{8EB278E8-7FDA-4ED9-A429-C87A76F95087}_is1) (Version: 1.9.4.20 - PCWinSoft Systems)
1AVCenter version 2.2.7.21 (HKLM-x32\...\{C3208FCF-EAF5-43EE-972B-812DEA54FC72}_is1) (Version: 2.2.7.21 - PCWinSoft Systems Informatica Ltda)
1AVShare registered to GiveAwayOfTheDay version 1.7.8.82 (HKLM-x32\...\{645C273A-98F6-441A-9DD9-3147F97FA659}_is1) (Version: 1.7.8.82 - PCWinSoft Software)
1AVStreamer version 1.9.8.70 (HKLM-x32\...\{17DF20F4-4FA3-4BEC-868A-DEDF0178341E}_is1) (Version: 1.9.8.70 - PCWinSoft Software)
25 Clips (HKLM-x32\...\25 Clips) (Version:  - )
2Tware Mount Disk Image 2012 version 5.0 (HKLM-x32\...\{619C3277-E30C-4A4B-B8A6-C344CC91886D}_is1) (Version: 5.0 - 2TWare, Inc.)
3.0.3.711 (HKLM-x32\...\{6E0B9419-A8D9-402F-BC56-1A10EA5677C1}_is1) (Version:  - )
3.5.0 (HKLM-x32\...\{AE117F4B-840D-448B-A843-C0AE9F5EE50C}_is1) (Version: 3.5.0 - Arduino Software)
3D Youtube Downloader (x64) (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\3D Youtube Downloader (x64)) (Version: 1.16.1 - 3DYD Soft)
3StepIcon version 1.0.0 (HKLM-x32\...\{44F8E787-21B1-4EED-83A7-37C6998D6F6D}_is1) (Version: 1.0.0 - )
3StepPDF version 1.2.0 (HKLM-x32\...\{B98D2852-0E2D-4936-BEF4-E999682EC618}_is1) (Version: 1.2.0 - )
4K Stogram 1.9 (HKLM-x32\...\4K Stogram_is1) (Version: 1.9.6.974 - Open Media LLC)
4Media Burner Studio (HKLM-x32\...\4Media Burner Studio) (Version: 1.0.64.0827 - 4Media)
4Media Photo Slideshow Maker (HKLM-x32\...\4Media Photo Slideshow Maker) (Version: 1.0.2.0214 - 4Media)
4Media Ringtone Maker (HKLM-x32\...\4Media Ringtone Maker) (Version: 2.0.4.0908 - 4Media)
4Videosoft iOS Transfer 8.2.58 (HKLM-x32\...\{E8C3E38D-FE43-4a26-8B93-886E4F2C4710}_is1) (Version: 8.2.58 - 4Videosoft Studio)
5 Icons Income 1.0 (HKLM-x32\...\5 Icons Income_is1) (Version:  - TriSun Software Inc.)
5KPlayer 2.1 (HKLM-x32\...\5KPlayer_is1) (Version:  - DearMob, Inc.)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
7-Zip 9.21 (HKLM-x32\...\{23170F69-40C1-2701-0921-000001000000}) (Version: 9.21.00.0 - Igor Pavlov)
A4DeskPro v7.10 (Standard Edition) (HKLM-x32\...\a4deskpro_webunion_is1) (Version:  - WebUnion Media Ltd.)
ABBYY Business Card Reader 2.0 (HKLM-x32\...\{BC200000-0001-0000-0000-074957833700}) (Version: 2.0.178 - ABBYY)
ABBYY FineReader 5.0 Sprint (HKLM-x32\...\{D1696920-9794-4BBC-8A30-7A88763DE5A2}) (Version: 5.0.0.3347 - ABBYY Software House)
ABBYY FineReader 6.0 (HKLM-x32\...\{AF600F7B-67A7-48D9-BA3B-0FF97F35F970}) (Version: 6.0.759.29410 - ABBYY Software House)
ABBYY PDF Transformer+ (HKLM\...\{FA400000-0001-6400-0000-074957833700}) (Version: 4.1.283 - ABBYY Production LLC)
ABC Birthday Reminder version 2.6 (HKLM-x32\...\ABC Birthday Reminder_is1) (Version: 2.6 - OrgBusiness Software)
AbiWord 2.6.4 (HKLM-x32\...\AbiWord2) (Version: 2.6.4 - AbiSource Developers)
AbstractCurves (HKLM\...\AbstractCurves AbstractCurves 1) (Version: 1.179 - AbstractCurves Software)
AbstractCurves x64 (HKLM\...\AbstractCurves AbstractCurves x64 1) (Version: 1.190 - AbstractCurves Software)
abylon WLAN-LIVE-SCANNER 2017.1 (Privatversion) (HKLM\...\abylonprotectionmanagerwlan-live-scanner_is1) (Version: 2017.1 - abylonsoft)
AC3Filter (remove only) (HKLM-x32\...\AC3Filter) (Version:  - )
AC3Filter 2.6.0b (HKLM-x32\...\AC3Filter_is1) (Version: 2.6.0b - Alexander Vigovsky)
AceThinker Music Recorder V1.0.0 (HKLM-x32\...\{398bc5b8-5f7a-4a3a-bd02-dbc809070f0c}_is1) (Version: 1.0.0 - ACETHINKER LIMITED)
AcroPano Photo Stitcher, Panorama software (HKLM-x32\...\{E44C57E8-2E0B-418A-AAC1-043EF2065EB7}) (Version:  - )
ActionOutline Lite 3.4 (Free) (HKLM-x32\...\ActionOutline_is1) (Version: 3.4 - Green Parrots Software)
ActivePresenter (HKLM-x32\...\{A2A40277-D807-4754-95A3-2F294C2C51D3}_is1) (Version: 5.5.3 - Atomi Systems, Inc.)
AD Unlocker Pro (HKLM-x32\...\{A2AE0CA9-CF24-49F8-9978-1FB5D5220CAE}) (Version: 1.0.0 - Harry Davies Pro Software)
Adobe Acrobat 3.01 (HKLM-x32\...\Adobe Acrobat 3.01) (Version:  - )
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Flash Player 22 ActiveX (HKLM-x32\...\{392DC543-3818-4DCA-B95E-C587D83E1C20}) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Adobe Flash Player 24 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.137 - Adobe Systems Incorporated)
Adobe Shockwave Player (HKLM-x32\...\Adobe Shockwave Player) (Version: 10.1.4.20 - Adobe Systems, Inc.)
Adobe® Photoshop® Album Starter Edition 3.0 (HKLM-x32\...\{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}) (Version: 3.00.000 - Adobe Systems, Inc.)
Advanced Date Time Calculator 4.0 (HKLM-x32\...\Advanced Date Time Calculator_is1) (Version:  - TriSun Software Inc.)
Advanced Uninstaller PRO - Version 11 (HKLM-x32\...\AU11_is1) (Version: 11 - Innovative Solutions)
Advanced ZIP Password Recovery (remove only) (HKLM-x32\...\Advanced ZIP Password Recovery) (Version:  - )
Advertising Center (HKLM-x32\...\{9F3523F8-DAD7-AE52-6DA7-45CDDDF33726}) (Version: 0.0.0.1 - Nero AG) Hidden
AgataSoft HotKey Manger (HKLM-x32\...\AgataSoft HotKey Manger_is1) (Version:  - AgataSoft)
AgataSoft PingMaster Pro (HKLM-x32\...\AgataSoft PingMaster Pro_is1) (Version:  - AgataSoft)
Aidfile recovery software version 3.6.5.8 (HKLM-x32\...\{456B239A-C1E0-4178-810E-8E8F09B06877}_is1) (Version: 3.6.5.8 - Mitusoft, Inc.)
Aimersoft PDF Converter Pro (Build 3.1.1) (HKLM-x32\...\{C28729BF-059E-4A2B-BCD6-08CD91FE06E1}_is1) (Version: 3.1.1 - Aimersoft Software)
Aimersoft Video Editor(Build 3.5.0) (HKLM-x32\...\Aimersoft Video Editor_is1) (Version:  - Aimersoft Software)
Ainishare Audio Recorder 1.5.0 (HKLM-x32\...\{30AB2FCD-FBF2-4bed-3333-13E6A1468621}_is1) (Version: 1.5.0 - Ainishare International LLC.)
Airy (HKLM-x32\...\Airy 1.0_is1) (Version: 1.0.30 - ELTIMA Software)
Aiseesoft 3D Converter 6.3.18 (HKLM-x32\...\{DBAFFECB-8062-4f19-9EFD-B7B53E922806}_is1) (Version:  - )
Aiseesoft Audio Converter 6.3.20 (HKLM-x32\...\{4061F26E-B6D6-443c-994B-01194541A2D7}_is1) (Version: 6.3.20 - Aiseesoft Studio)
Aiseesoft BD to MKV Copy 6.1.6 (HKLM-x32\...\{6755EE06-A0B2-47b7-89B9-D59C0141F37D}_is1) (Version: 6.1.6 - Aiseesoft Studio)
Aiseesoft Blu-ray Copy 7.0.18 (HKLM-x32\...\{A24AAF6D-3EDB-43da-89BE-1A95D5CFA672}_is1) (Version: 7.0.18 - Aiseesoft Studio)
Aiseesoft Blu-ray Creator 1.0.8 (HKLM-x32\...\{451CE7DE-6225-466f-A1FF-A60835F87DB5}_is1) (Version: 1.0.8 - Aiseesoft Studio)
Aiseesoft Blu-ray Player 6.2.70 (HKLM-x32\...\{3E1A13C3-E458-4995-BEA6-4B9BE279D502}_is1) (Version: 6.2.70 - Aiseesoft Studio)
Aiseesoft Blu-ray Ripper 6.3.62 (HKLM-x32\...\{D1B455C8-C170-44fe-8A90-31263B5153C2}_is1) (Version: 6.3.62 - Aiseesoft Studio)
Aiseesoft Blu-ray to MKV Ripper 6.3.22 (HKLM-x32\...\{3AB9A475-E02F-4219-99E2-381057E3F7CF}_is1) (Version:  - )
Aiseesoft DVD Copy 5.0.12 (HKLM-x32\...\{4F23DE27-8262-4c5a-9D7E-223FF16D9968}_is1) (Version:  - )
Aiseesoft DVD Creator 5.1.20 (HKLM-x32\...\{094BCE17-69CE-45ce-A131-F674CE996B3F}_is1) (Version:  - )
Aiseesoft DVD Ripper 6.2.26 (HKLM-x32\...\{D6BAD6AB-D3D9-46ad-B2C4-5A969006CE48}_is1) (Version:  - )
Aiseesoft DVD Ripper Platinum 7.1.8 (HKLM-x32\...\{40B5E57A-1D03-482c-88C5-233C3090AAB6}_is1) (Version: 7.1.8 - Aiseesoft Studio)
Aiseesoft HD Video Converter 6.3.68 (HKLM-x32\...\{3039577D-975E-42fc-89FC-2F1FF42F3FCA}_is1) (Version: 6.3.68 - Aiseesoft Studio)
Aiseesoft iPhone to Computer Transfer Ultimate 5.1.10 (HKLM-x32\...\Aiseesoft iPhone to Computer Transfer Ultimate_is1) (Version:  - )
Aiseesoft iPhone Transfer 7.0.30 (HKLM-x32\...\{ED0F3D85-995D-4605-88C5-226644C25DF1}_is1) (Version: 7.0.30 - Aiseesoft Studio)
Aiseesoft iPhone Transfer Platinum 6.1.22 (HKLM-x32\...\{7C2E211D-4B90-4bc6-BF40-E71A20BF8BE0}_is1) (Version:  - )
Aiseesoft Media Converter Ultimate 6.3.58 (HKLM-x32\...\{5FA3097C-03C5-492e-ACF0-9924A56985C2}_is1) (Version: 6.3.58 - Aiseesoft Studio)
Aiseesoft MXF Converter 6.3.32 (HKLM-x32\...\{BCBB05D5-AE8A-4ea6-9C57-C4854AF338F3}_is1) (Version: 6.3.32 - Aiseesoft Studio)
Aiseesoft PDF to Word Converter 3.2.6 (HKLM-x32\...\{3CF515C0-55D9-4591-824F-1934352AC10E}_is1) (Version: 3.2.6 - Aiseesoft Studio)
Aiseesoft Screen Recorder 1.0.8 (HKLM-x32\...\{DD85E531-C84E-4247-B7A3-5F0C22D276DB}_is1) (Version: 1.0.8 - Aiseesoft Studio)
Aiseesoft Total Media Converter 5.2.30 (HKLM-x32\...\Aiseesoft Total Media Converter_is1) (Version:  - )
Aiseesoft Total Media Converter Platinum 6.3.28 (HKLM-x32\...\{240E8FDB-BF8B-4bc3-963B-B28B7528BEBD}_is1) (Version: 6.3.28 - Aiseesoft Studio)
Aiseesoft Total Video Converter 7.1.22 (HKLM-x32\...\{E09CEBAA-4435-4404-8D82-4C029F6391E4}_is1) (Version: 7.1.22 - Aiseesoft Studio)
Aiseesoft Total Video Converter Platinum 7.1.8 (HKLM-x32\...\{3661F243-518C-4d05-8BDF-7B10CC22689F}_is1) (Version: 7.1.8 - Aiseesoft Studio)
Aiseesoft Video Converter Ultimate 9.0.8 (HKLM-x32\...\{BD446D04-7426-4a27-9B0B-33B0C386F71B}_is1) (Version: 9.0.8 - Aiseesoft Studio)
Aiseesoft Video Enhancer 1.0.32 (HKLM-x32\...\{0F8A1CB4-7F19-4fe9-A724-5F3DE1CB4513}_is1) (Version: 1.0.32 - Aiseesoft Studio)
Akamai NetSession Interface (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Akamai) (Version:  - Akamai Technologies, Inc)
AKS Text Replacer 1.5 (HKLM-x32\...\AKS Text Replacer_is1) (Version:  - AKS-Labs)
Alfa eBooks Manager (HKLM-x32\...\{E10F7227-310A-4686-B57D-D672D07BEDC9}) (Version: 7.0.01 - Alfa.NetSoft)
All My Books 3.9 [GOTD] (HKLM-x32\...\{3A9FE5C3-799E-4E41-AF4E-943F9BC4C4BD}_is1) (Version: 3.9 - Bolide Software)
All My Movies (HKLM-x32\...\{DEE77D4F-249F-46DF-8176-4BC4822D68AD}_is1) (Version: 7.9 - Bolide Software)
All PDF Converter (HKLM-x32\...\{10E189EE-0691-4FA2-8078-B59F09D4A444}) (Version: 2.4.2 - PDF Converters)
Allavsoft 3.15.4.6607 (HKLM-x32\...\{6EBED4D8-13D9-4270-8D44-B57DDB7A787C}_is1) (Version:  - Allavsoft Corporation)
ALLCapture 3.0 (HKLM-x32\...\{32E50C3F-46FB-4827-9BC3-0429860F5288}_is1) (Version:  - balesio AG)
AllMedia Grabber (HKLM-x32\...\AllMedia Grabber5.1) (Version: 5.1 - Fotis)
AllMedia Grabber (HKLM-x32\...\AllMedia Grabber6.2) (Version: 6.2 - OptWin Software)
AllMyNotes Organizer (HKLM-x32\...\AllMyNotes Organizer) (Version: 2.85 - Vladonai Software)
AllMySongs Database (HKLM-x32\...\AllMySongs Database1.5) (Version: 1.5 - Fotis)
AllMySongs Database (HKLM-x32\...\AllMySongs Database2.2) (Version: 2.2 - OptWin Software)
AllMySongs Database (HKLM-x32\...\AllMySongs Database2.5) (Version: 2.5 - OptWin Software)
AllWebMenus PRO 5.3.908 (HKLM\...\{1E3CA1C4-1E90-401B-8CC0-911DF018D8D8}) (Version: 5.3.908 - Likno Software)
Almeza MultiSet Professional 7.9.4 (HKLM-x32\...\Almeza MultiSet Professional_is1) (Version:  - Almeza Company)
AlomWare Actions (HKLM-x32\...\AlomWare Actions AlomWare_is1) (Version: 1.34 - AlomWare)
AlterCam (HKLM-x32\...\{358AF097-92D1-4750-80E1-F71904AC8CE2}_is1) (Version: 1.5 - Bolide® Software)
Amacsoft PDF to Excel Converter (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Amacsoft PDF to Excel Converter) (Version: 2.1.6 - Amacsoft)
Amazon Kindle (HKLM-x32\...\Amazon Kindle) (Version:  - Amazon)
Amazon Kindle (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Amazon Kindle) (Version: 1.16.0.44025 - Amazon)
Amazon Music (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Amazon Amazon Music) (Version: 3.2.0.591 - Amazon Services LLC)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.8 - Advanced Micro Devices, Inc.)
Aml Pages 9.82 (GOTD) (HKLM-x32\...\Aml Pages) (Version: 9.82 (GOTD) - G&G Software, Mazov Gosha aka Carc)
Amolto Call Recorder Premium for Skype (HKLM-x32\...\{AE32F725-4623-43E4-8F6D-D237F06BA723}) (Version: 3.7.1.0 - Amolto)
ANALOG projects 3 (64-Bit) (HKLM\...\ANALOG_PROJECTS_3_2_38D54FE3_is1) (Version: 3.21 - Franzis Verlag GmbH)
Aneesoft Flash Gallery Classic (HKLM-x32\...\{714549D0-C470-4757-B10C-FB932F3C98D0}}_is1) (Version:  - Aneesoft Corporation)
Aneesoft Video Converter Pro 3.6.0.0 (HKLM-x32\...\{00CB84A4-25AC-489D-A91C-D7DBC545E5B4}}_is1) (Version:  - Aneesoft Co., Ltd.)
Animated Screensaver Maker (HKLM-x32\...\Animated Screensaver Maker) (Version: 3.2.5 - DesktopPaints.com)
Animated Wallpaper Maker (HKLM-x32\...\Animated Wallpaper Maker) (Version: 4.2.4 - DesktopPaints.com)
Ann Video Converter 4.5.0 (HKLM-x32\...\{30AB2FCD-FBF2-4bed-4444-13E6A1468621}_is1) (Version: 4.5.0 - AnnVideo International LLC.)
Ant Download Manager version 1.7.0.promo.GiveawayOfTheDay.com (HKLM-x32\...\{754CB6A3-3FE2-40DA-9FE5-2864909BD1CC}_is1) (Version: 1.7.0.promo.GiveawayOfTheDay.com - AntGROUP, Inc.)
Antenna (HKLM-x32\...\Antenna) (Version: 6.4.0.900 - by Stormdance)
AntiLogger (HKLM-x32\...\{014534FF-1D46-4A77-9B48-29EFD145995B}) (Version: 1.9.3.527 - Zemana Ltd.) Hidden
AntiLogger (HKLM-x32\...\AntiLogger) (Version:  - Zemana Ltd.)
AntiPhotoSpy 2012 (HKLM-x32\...\{F5593F5B-B3A9-40CB-BB69-8190675F8DD9}_is1) (Version: 1.4 - Abelssoft)
Anti-Twin (Installation 2/23/2017) (HKLM-x32\...\Anti-Twin 2017-02-23 17.16.39) (Version:  - Joerg Rosenthal, Germany)
AnVir Task Manager (HKLM-x32\...\AnVir Task Manager) (Version:  - AnVir Software)
AnVir Task Manager Pro (HKLM-x32\...\AnVir Task Manager Pro) (Version:  - AnVir Software)
AnvSoft Photo Slideshow Maker Professional 5.56 (HKLM-x32\...\AnvSoft Photo Slideshow Maker Professional) (Version: 5.56 - AnvSoft, Inc.)
AnyDVD (HKLM-x32\...\AnyDVD) (Version: 7.6.2.0 - SlySoft)
AnyMP4 DVD Toolkit 6.0.38 (HKLM-x32\...\{0B656B87-BF80-4239-85B5-C6E673158C9E}_is1) (Version:  - )
AnyMP4 Video Converter Platinum 6.1.38 (HKLM-x32\...\{3E48324E-4843-4818-834D-C5219B51248E}_is1) (Version: 6.1.38 - AnyMP4 Studio)
AnyPic Image Converter 1.0.1 (HKLM-x32\...\{2FCFFE64-B076-4C21-874E-1C8ADEE8B378}_is1) (Version:  - AnyPic Soft)
Aoao Video to GIF Converter (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\AoaoVideotoGIF) (Version:  - AoaoPhoto Digital Studio. All Rights Reserved.)
Aoao Watermark 8.7 (HKLM-x32\...\Aoao Watermark) (Version: 8.7 - AoaoPhoto Digital Studio.)
AOMEI Backupper Professional (HKLM-x32\...\{A83692F5-3E9B-4E95-9E7E-B5DF5536CE9D}_is1) (Version:  - AOMEI Technology Co., Ltd.)
AOMEI Partition Assistant Pro Edition 6.1 (HKLM-x32\...\{02F850ED-FD0E-4ED1-BE0B-5498165BF300}_is1) (Version:  - AOMEI Technology Co., Ltd.)
AOMEI PE Builder 2.0 (HKLM-x32\...\{A83692F5-3E9B-4E95-9E7E-B5DF5566909D}_is1) (Version:  - AOMEI Technology Co., Ltd.)
A-PDF Number Pro (HKLM-x32\...\A-PDF Number Pro_is1) (Version:  - A-PDF Solution)
A-PDF Scan Paper (HKLM-x32\...\A-PDF Scan Paper_is1) (Version:  - A-PDF Solution)
Apex All in One PDF Tools 2.4.8.2 (HKLM\...\Apex All in One PDF Tools_is1) (Version: 2.4.8.2 - apexsofts.com)
Apex Text to Speech 2.3.8.2 (HKLM\...\Apex Text to Speech_is1) (Version: 2.3.8.2 - apexsofts.com)
Apiary Fund MetaTrader (HKLM-x32\...\{C95C9FD7-FE1C-4A5D-9BE3-AC2AE78735D9}) (Version: 2.1.5 - Apiary Investment Fund) Hidden
Apiary Fund MetaTrader (HKLM-x32\...\Apiary Fund MetaTrader 2.1.5) (Version: 2.1.5 - Apiary Investment Fund)
Aplus Combo PDF Tools 2.0.1.5 (HKLM\...\Aplus Combo PDF Tools_is1) (Version: 2.0.1.5 - Aplus Software)
Aplus Text to Speech 2.0.1.5 (HKLM-x32\...\Aplus Text to Speech 2.0.1.5) (Version:  - )
ApowerMirror V1.2.0 (HKLM-x32\...\{a9482532-9c34-478c-80c3-85bdccbb981f}_is1) (Version: 1.2.0 - APOWERSOFT LIMITED)
Apowersoft Phone Manager version 2.4.5 (HKLM-x32\...\{4A00E3C4-2D0F-4AE7-9F2A-74870BE09EF8}_is1) (Version: 2.4.5 - APOWERSOFT LIMITED)
Apowersoft Screen Capture Pro V1.1.3 (HKLM-x32\...\{eaee5526-f8bd-4d74-a24c-50e5b5f36521}_is1) (Version: 1.1.3 - APOWERSOFT LIMITED)
Apowersoft Screen Recorder Pro V1.1.9 (HKLM-x32\...\{BADAA284-1D15-4EBB-B1E5-7C86603CDBBB}_is1) (Version: 1.1.9 - Apowersoft)
Apple Application Support (32-bit) (HKLM-x32\...\{E92BB800-BCC5-4C25-8102-AC2C3B7C7C1E}) (Version: 5.5 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{9C912B1E-06DD-43EF-BB2B-45CB2C88BAAE}) (Version: 5.5 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{0A596141-97D5-45FA-9281-98DFAF48D579}) (Version: 10.3.2.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
AquaSoft DiaShow 7 Premium (HKLM-x32\...\{9FFC4C2D-374D-482B-AA58-67282CE23695}) (Version: 7.8.01 - AquaSoft) Hidden
AquaSoft DiaShow 7 Premium (HKLM-x32\...\AquaSoft DiaShow 7 Premium) (Version: 7.8.01 - AquaSoft)
ArcSoft Perfect365 (HKLM-x32\...\{5B5E949E-3924-45E3-9229-84E8270BED68}) (Version: 1.8.0.3 - ArcSoft, Inc.)
Ares 3.1.6.3040 (HKLM-x32\...\{C9FF844C-02F5-4221-8AD4-0BD823533C6E}_is1) (Version: 3.1.6.3040 - Ares)
Art Plus Calendar Designer PRO 2.0.2 (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Art Plus Calendar Designer) (Version: 2.0.2.208 - Art Plus Marketing & Publishing)
Artensoft Photo Collage Maker (HKLM\...\Artensoft Photo Collage Maker_is1) (Version: 1.4 - Artensoft)
Artensoft Photo Mosaic Wizard (HKLM\...\Artensoft Photo Mosaic Wizard_is1) (Version: 1.8 - Artensoft)
Artensoft Tilt Shift Generator (HKLM\...\Artensoft Tilt Shift Generator_is1) (Version: 1.2 - Artensoft)
ArtScope (HKLM-x32\...\{4F5803ED-3227-48A3-84FD-7B8A3795C2FE}) (Version: 1.98.353 - HelpSoft)
Ashampoo 3D CAD Architecture 5 v.5.0.0 (HKLM\...\{35D15FAA-42DC-4814-A02D-F03B72C3CBB6}_is1) (Version: 5.0.0 - Ashampoo GmbH & Co. KG)
Ashampoo Burning Studio 15 v.15.0.4 (HKLM-x32\...\{91B33C97-5B38-0A92-D04A-A0F26F3F87D4}_is1) (Version: 15.0.4 - Ashampoo GmbH & Co. KG)
Ashampoo Burning Studio 2012 v.10.0.15 (HKLM-x32\...\Ashampoo Burning Studio 2012_is1) (Version: 10.0.15 - Ashampoo GmbH & Co. KG)
Ashampoo Burning Studio 2013 v.11.0.5 (HKLM-x32\...\{91B33C97-0FBA-74AE-E802-D782F5C8AA89}_is1) (Version: 11.0.5 - Ashampoo GmbH & Co. KG)
Ashampoo Burning Studio 2014 v.12.0.5 (HKLM-x32\...\{91B33C97-280F-B76D-E27B-E712D7041B76}_is1) (Version: 12.0.5 - Ashampoo GmbH & Co. KG)
Ashampoo Burning Studio Elements 10.0.9 (HKLM-x32\...\Ashampoo Burning Studio Elements_is1) (Version: 3.1.1 - Ashampoo GmbH & Co. KG)
Ashampoo Gadge It v.1.0.1 (HKLM-x32\...\{91B33C97-5A0B-2CB7-3038-22701B2F2CED}_is1) (Version: 1.0.1 - Ashampoo GmbH & Co. KG)
Ashampoo GetBack Photo v.1.0.1 (HKLM-x32\...\{C92AB6F1-2490-D7C3-A45D-23F3C33ECFA5}_is1) (Version: 1.0.1 - Ashampoo GmbH & Co. KG)
Ashampoo HDD Control 1.12 (HKLM-x32\...\Ashampoo HDD Control_is1) (Version: 3.1.1 - Ashampoo GmbH & Co. KG)
Ashampoo HDD Control 2 v.2.1.0 (HKLM-x32\...\{4209F371-A431-385E-2D7E-ACDA5DA3BA0B}_is1) (Version: 2.1.0 - Ashampoo GmbH & Co. KG)
Ashampoo Home Designer Pro 2 v.2.0.0 (HKLM-x32\...\{1C65E4A9-E199-4E8A-9DB7-0F2057DF546D}_is1) (Version: 2.0.0 - Creative Amadeo GmbH)
Ashampoo Movie Studio 2013 v.1.0.4 (HKLM-x32\...\{91B33C97-EB09-F0A4-36AC-3895F9F93DD1}_is1) (Version: 1.0.4 - Ashampoo GmbH & Co. KG)
Ashampoo Music Studio 2013 v.4.0.7 (HKLM-x32\...\{91B33C97-0D61-2DA9-07F6-0EF54C520FE3}_is1) (Version: 4.0.7 - Ashampoo GmbH & Co. KG)
Ashampoo Music Studio 4 v.4.1.2 (HKLM-x32\...\{91B33C97-7650-0EB0-B6C7-DDBA2932B7B4}_is1) (Version: 4.1.2 - Ashampoo GmbH & Co. KG)
Ashampoo Music Studio 5 v.5.0.7 (HKLM-x32\...\{91B33C97-5BBE-576E-893B-711D4D8298ED}_is1) (Version: 5.0.7 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Card v.1.0.0 (HKLM-x32\...\{C92AB6F1-EC2E-85C8-C6D7-5BB8C2F89C7F}_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 11 v.11.1.7 (HKLM-x32\...\{C92AB6F1-0F9C-8526-5DF1-0A2FD0FB33D9}_is1) (Version: 11.1.7 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 9 v.9.4.3 (HKLM-x32\...\{C92AB6F1-6A1B-F954-7C68-B44BA8E357A4}_is1) (Version: 9.4.3 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Converter 2 v.2.0.0 (HKLM-x32\...\{C92AB6F1-5566-A904-B32C-720C3BA1A819}_is1) (Version: 2.0.0 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Converter v.1.0.1 (HKLM-x32\...\{C92AB6F1-BE98-C332-924C-9C25746AA5F2}_is1) (Version: 1.0.1 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Optimizer 3 v.3.13 (HKLM-x32\...\Ashampoo Photo Optimizer 3_is1) (Version: 3.1.3 - Ashampoo Technology GmbH & Co. KG)
Ashampoo Photo Optimizer 4 v.4.0.3 (HKLM-x32\...\{91B33C97-37F7-77B5-78CD-6F9A9ADD6BAA}_is1) (Version: 4.0.3 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Optimizer 5 v.5.7.0 (HKLM-x32\...\{91B33C97-9E02-D93E-656C-D2D81585F29B}_is1) (Version: 5.7.0 - Ashampoo GmbH & Co. KG)
Ashampoo Slideshow Studio 2013 v.1.0.2 (HKLM-x32\...\{91B33C97-34D2-9841-084D-BE4849F6A38F}_is1) (Version: 1.0.2 - Ashampoo GmbH & Co. KG)
Ashampoo Slideshow Studio 2015 v.1.0.0 (HKLM-x32\...\{91B33C97-4A6F-D11F-A387-040BB4E1094E}_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG)
Ashampoo Snap 4 v.4.3.1 (HKLM-x32\...\Ashampoo Snap 4_is1) (Version: 4.3.1 - Ashampoo GmbH & Co. KG)
Ashampoo Snap 5 v.5.1.2 (HKLM-x32\...\Ashampoo Snap 5_is1) (Version: 5.1.2 - Ashampoo GmbH & Co. KG)
Ashampoo Snap 7 v.7.0.10 (HKLM-x32\...\{C92AB6F1-9C93-0F51-ED50-15ABBCBDD142}_is1) (Version: 7.0.10 - Ashampoo GmbH & Co. KG)
Ashampoo Video Styler 2013 v.1.0.1 (HKLM-x32\...\{91B33C97-8914-D2D4-EB40-39C1714271FF}_is1) (Version: 1.0.1 - Ashampoo GmbH & Co. KG)
Ashampoo WinOptimizer 2012 v.8.1.4 (HKLM-x32\...\Ashampoo WinOptimizer 2012_is1) (Version: 8.1.4 - Ashampoo GmbH & Co. KG)
Asterisk Password Decryptor (HKLM-x32\...\{7AB6C326-A486-4CBE-A799-7A55CEEEFF2C}) (Version: 2.92.84 - KRyLack Software)
Atlantis Word Processor (HKLM-x32\...\Atlantis Word Processor) (Version:  - )
Atomic Alarm Clock 6.12 (HKLM\...\Atomic Alarm Clock_is1) (Version:  - Drive Software Company)
aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 2.9.1347 - DsNET Corp)
Auction Sentry Deluxe (HKLM-x32\...\{01979CA0-B550-47D0-AD16-553B2C3FCF97}) (Version: 3.0.3 - Auction Sentry)
Audacity 1.2.6 (HKLM-x32\...\Audacity_is1) (Version:  - )
Audials (HKLM-x32\...\{6A388B01-D414-429D-A917-B27BEC991A85}) (Version: 11.0.53800.0 - Audials AG)
Audials (HKLM-x32\...\{F2C88A2D-1A41-4493-89E4-067F30F58D43}) (Version: 8.0.43807.700 - RapidSolution Software AG)
Audials TV (HKLM-x32\...\{4044436C-3A01-4ECA-8FC9-AC8F3F838EDC}) (Version: 1.3.10803.300 - RapidSolution Software AG)
Audio Catalog 4.4 (HKLM-x32\...\Audio Catalog_is1) (Version:  - Digital Action, Inc.)
Audio Control (HKLM-x32\...\{D3373741-9581-4335-8AA8-E0770ECB77D4}) (Version: 4 - MBBSoftware)
Audio Record Wizard (HKLM-x32\...\Audio Record Wizard) (Version: 7.12 - NowSmart)
Audio Recorder 1.5 (HKLM-x32\...\{6873814C-1E89-4ADC-A0D6-CEEE306A6416}_is1) (Version:  - MediaVigor Software)
Audio Speed Changer Pro 1.5 (HKLM-x32\...\Audio Speed Changer Pro) (Version: 1.5 - SuperUtils.com Software)
Audiobook Downloader Pro 1.3 (HKLM-x32\...\Audiobook Downloader Pro) (Version: 1.3 - SuperUtils.com Software)
Audiodope 0.24 (HKLM-x32\...\Audiodope_is1) (Version:  - Audiodope Team)
Aurora Blu-ray Media Player (HKLM-x32\...\Aurora Blu-ray Media Player) (Version: 2.12.8.1277 - Aurora Software Inc.)
Auslogics Duplicate File Finder (HKLM-x32\...\{6845255F-15CC-4DD1-94D5-D38F370118B3}_is1) (Version: version 2.2 - Auslogics Software Pty Ltd)
Auto Data Backup Manager v2.0 (HKLM-x32\...\Auto Data Backup Manager v2.0) (Version:  - AlgoLogic)
Auto Mail Sender Birthday Edition 3.1 (HKLM-x32\...\Auto Mail Sender Birthday Edition_is1) (Version:  - TriSun Software Inc.)
Auto Screenshot Maker 3.0 (HKLM-x32\...\{6C9A0BF3-CE9C-4830-A26F-46AE774352C6}_is1) (Version:  - AutoScreenshotMaker)
AutoQ3D CAD 5.12 (HKLM-x32\...\AutoQ3D CAD_is1) (Version:  - AutoQ3D Team)
Autorun Organizer version 1.25 (HKLM-x32\...\Autorun Organizer_is1) (Version: 1.25 - ChemTable Software)
AV Audio & Sound Recorder (HKLM-x32\...\AV Audio & Sound Recorder) (Version: 2.0.3 - AVSoft Corp. (VN))
AV Audio Converter (HKLM-x32\...\AV Audio Converter) (Version: 2.0.3 - AVSoft Corp. (VN))
AV Audio Editor (HKLM-x32\...\AV Audio Editor) (Version: 2.0.3 - AVSoft Corp. (VN))
AV Audio Morpher (HKLM-x32\...\AV Audio Morpher) (Version: 6.0.3 - AVSoft Corp. (VN))
AV CD Grabber (HKLM-x32\...\AV CD Grabber) (Version: 2.0.3 - AVSoft Corp. (VN))
AV Media Player Morpher (HKLM-x32\...\AV Media Player Morpher) (Version: 6.0.19 - AVSoft Corp. (VN))
AV Media Uploader (HKLM-x32\...\AV Media Uploader) (Version: 1.0.16 - AVSoft Corp. (VN))
AV Music Morpher (HKLM-x32\...\AV Music Morpher) (Version:  - )
AV Music Morpher Gold (HKLM-x32\...\AV Music Morpher Gold) (Version:  - )
AV Tube (HKLM-x32\...\AV Tube) (Version: 1.0.20 - AVSoft Corp. (VN))
AV Video Morpher (HKLM-x32\...\AV Video Morpher) (Version: 3.0.53 - AVSOFT Corporation)
AV VoizGame 6.0 (HKLM-x32\...\AV VoizGame 6.0) (Version: 6.0.39 - Avnex Ltd.)
AV WebCam Morpher 2.0 (HKLM-x32\...\AV WebCam Morpher 2.0) (Version: 2.0.44 - Avnex Ltd.)
AVG 2012 (HKLM-x32\...\{8398852A-7B61-4808-8F58-D0A40D1B2CB6}) (Version: 12.0.2109 - AVG Technologies) Hidden
AVG 2012 (HKLM-x32\...\{E171F5DA-6F17-472D-A223-92468142C5E8}) (Version: 12.0.1901 - AVG Technologies) Hidden
Avidemux 2.5 (HKLM-x32\...\Avidemux 2.5) (Version: 2.5.4.6714 - )
AviSynth 2.5 (HKLM-x32\...\AviSynth) (Version:  - )
AVS Audio Converter 7.2 (HKLM-x32\...\AVS Audio Converter_is1) (Version: 7.2.2.529 - Online Media Technologies Ltd.)
AVS Audio Editor 7.2 (HKLM-x32\...\AVS Audio Editor_is1) (Version: 7.2.2.488 - Online Media Technologies Ltd.)
AVS Audio Recorder version 4.0 (HKLM-x32\...\AVS Audio Recorder_is1) (Version:  - Online Media Technologies Ltd.)
AVS Cover Editor 2.0.1.3 (HKLM-x32\...\AVSCoverEditor2_is1) (Version:  - Online Media Technologies Ltd.)
AVS Disc Creator version 4.1 (HKLM-x32\...\AVS Disc Creator_is1) (Version:  - Online Media Technologies Ltd.)
AVS DVD Player version 2.4 (HKLM-x32\...\AVS DVD Player_is1) (Version:  - Online Media Technologies Ltd.)
AVS Update Manager 1.0 (HKLM-x32\...\AVS Update Manager_is1) (Version:  - Online Media Technologies Ltd.)
AVS Video Converter 6 (HKLM-x32\...\AVS4YOU Video Converter 6_is1) (Version:  - Online Media Technologies Ltd.)
AVS Video Converter 8 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version:  - Online Media Technologies Ltd.)
AVS Video Editor 6.5 (HKLM-x32\...\AVS Video Editor_is1) (Version: 6.5.1.246 - Online Media Technologies Ltd.)
AVS4YOU Software Navigator 1.4 (HKLM-x32\...\AVS4YOU Software Navigator_is1) (Version:  - Online Media Technologies Ltd.)
AVStoDVD 2.4.2 (HKLM-x32\...\AVStoDVD) (Version: 2.4.2 - MrC)
AweEraserEraser Trial 2.0 (HKLM-x32\...\AweEraser Trial 2.0_is1) (Version:  - Magoshare)
Backup4all 5 (HKLM-x32\...\{B6F36B7D-96C2-4860-9C44-0EF80B247379}) (Version: 5.4.813 - Softland) Hidden
Backup4all 5.4 (HKLM-x32\...\{b18024ae-1a64-48d6-9056-812a9b9cb0fc}) (Version: 5.4.813.0 - Softland)
Backup4all Professional 4 (HKLM-x32\...\{D4B5DC75-8065-42A0-BCA9-C104FEA32439}) (Version: 4.6.261 - Softland)
Backupery for Wordpress version 5.2.86 (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\AF127A0C-93EF-4601-A74E-2614734627A1_is1) (Version: 5.2.86 - Backupery)
BackupSF version 2.7 (HKLM-x32\...\{FED16A43-758E-4D08-A5FD-6DEEBB8B19CC}_is1) (Version: 2.7 - EasySector)
Bamboo File Sync and Backup 3.0.9 (HKLM-x32\...\Bamboo File Sync and Backup_is1) (Version:  - Haxar Limited)
Bandicut (HKLM-x32\...\Bandicut) (Version: 2.8.1.353 - Bandicam.com)
Bass Audio Decoder (remove only) (HKLM-x32\...\Bass Audio Decoder) (Version:  - )
Batch Image Enhancer 5.6 (HKLM-x32\...\Batch Image Enhancer) (Version: 5.6 - BinaryMark)
Batch Photo Watermarker 3.5 (HKLM-x32\...\Batch Photo Watermarker_is1) (Version:  - EasySector)
Batch Picture Protector 6.6 (HKLM-x32\...\Batch Picture Protector_is1) (Version: 6.6 - SoftOrbits)
Batch Picture Resizer 6.2 (HKLM-x32\...\Batch Picture Resizer_is1) (Version: 6.2 - SoftOrbits)
Batch Rename .EXE version 2.0.0.6 (HKLM\...\{2DAC69AC-93C7-4B26-B37E-C5727C1FA1EC}_is1) (Version: 2.0.0.6 - SoftTech InterCorp)
Batch Word Replace 5.6 (HKLM-x32\...\Batch Word Replace) (Version: 5.6 - BinaryMark)
Batch Word to PDF Converter 2016 (HKLM-x32\...\{A33B5CEE-AF9C-4116-98DF-337A7C05CA99}_is1) (Version:  - Batchwork Software)
BatchInpaint 2.0 (HKLM-x32\...\{BA413735-865A-4BF5-AAD2-B4D2998ED019}}_is1) (Version:  - teorex)
BatchInpaint 2.2 (HKLM\...\{BA413735-865A-4BF5-AAD2-B4D2998ED019}}_is1) (Version:  - teorex)
Beauty Guide 2.2.6 (HKLM\...\Beauty Guide_is1) (Version: 2.2.6 - Tint Guide)
Beauty Pilot Free 2.5.2 (HKLM\...\Beauty Pilot Free_is1) (Version: 2.5.2 - Two Pilots)
Belarc Advisor 8.6 (HKLM-x32\...\Belarc Advisor) (Version: 8.6.0.0 - Belarc Inc.)
BetterMemo version 1.1 (HKLM-x32\...\BetterMemo_is1) (Version: 1.1 - BetterMemo Solutions Inc.)
Beyond Share 2.1.8.68 (HKLM-x32\...\Beyond Share_is1) (Version:  - Fevosoft)
Bigasoft Total Video Converter 3.5.18.4353 (HKLM-x32\...\{a72ce741-1f32-4d79-bffb-a714375c678d}_is1) (Version:  - Bigasoft Corporation)
Black Bird System Info (HKLM-x32\...\Black Bird System Info) (Version: 1.0.0.0 - Black Bird Cleaner)
BLACK WHITE projects 3 elements (64-Bit) (HKLM\...\SILVER_PROJECTS_3_2_28B15F1D_is1) (Version: 3.34 - Franzis Verlag GmbH)
Blitz FlashCards (GOTD Version) (remove only) (HKLM-x32\...\Blitz FlashCards (GOTD Version)) (Version:  - )
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.8.9.3088 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{4C02AFA8-074D-44FE-B0E1-A73D4AA65390}) (Version: 0.8.9.3088 - BlueStack Systems, Inc.)
Boilsoft Video Joiner 6.57 (HKLM-x32\...\{FD39EF4B-0B5C-4B33-8D57-2EE865A80EB1}_is1) (Version:  - Boilsoft, Inc.)
Boilsoft Video Splitter 6.34 (HKLM-x32\...\{24549038-9956-4EE5-976D-4419AAEA7DD5}_is1) (Version:  - Boilsoft, Inc.)
Bolide Movie Creator (HKLM-x32\...\{CBC12489-0C5F-4290-B497-57D8C74F12D9}_is1) (Version: 3.0 - Bolide Software)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Bookmark Docs 2.1 (HKLM-x32\...\{41F16763-45B1-4A4B-A0E4-DE35E1A23C19}_is1) (Version:  - BookmarkSoft)
Booknizer 5.1 (HKLM-x32\...\Booknizer_is1) (Version:  - Booknizer.com)
Boot Media Builder for Paragon Hard Disk Manager™ 14 Professional (HKLM-x32\...\{F75021D1-0615-53CD-89B5-84EBF785DCB3}) (Version: 1.00.0000 - Paragon Software)
Borland Delphi 6 (HKLM-x32\...\{B7886D87-ADA4-46A0-8A8D-02AB16B9F95A}) (Version: 6.0 - Borland Software Corporation)
Borland Delphi 7 (HKLM-x32\...\{72263053-50D1-4598-9502-51ED64E54C51}) (Version: 7.0 - Borland Software Corporation)
Boxoft Photo Slideshow Builder 1.6 (HKLM-x32\...\Boxoft Photo Slideshow Builder_is1) (Version:  - Boxoft Solution)
Boxoft Screen Tutorial Creator (HKLM-x32\...\Boxoft Screen Tutorial Creator_is1) (Version:  - A-PDF Solution)
Bracket Trader 06.1208a1 (HKLM-x32\...\Bracket Trader_is1) (Version:  - Bracket Trader Software)
Brain Builder (HKLM-x32\...\Brain Builder) (Version:  - )
Brightness Guide 2.4.2 (HKLM\...\Brightness Guide_is1) (Version: 2.4.2 - Tint Guide)
Broadcom ASF Management Applications (HKLM-x32\...\{071B9AFA-EBE8-4ABF-8F4A-9F92612F517E}) (Version: 8.17.03 - Broadcom)
Broadcom Gigabit Integrated Controller (HKLM\...\{FC57FC53-104C-415C-98D7-B05E659461A9}) (Version: 10.50.03 - Broadcom Corporation)
Broadcom Management Programs (HKLM\...\{177D1318-3E4B-4A7C-A300-AC4E21BE090B}) (Version: 10.20.03 - Broadcom Corporation)
BSR Screen Recorder 5 (HKLM-x32\...\BSRScreenRecorder5) (Version:  - )
BurnAware Home 5.5 GOTD (HKLM-x32\...\BurnAware Home_is1) (Version:  - Burnaware Technologies)
BurnAware Premium 11.0 GAOTD (HKLM-x32\...\BurnAware Premium_is1) (Version:  - Burnaware)
Burnova 1.2.6 (HKLM-x32\...\{1545EC4A-2820-4F0E-8F6E-07D16F34F477}_is1) (Version: 1.2.6 - Aiseesoft Studio)
Business Card Maker 9.0 (HKLM-x32\...\{89F6B580-50CC-4E66-8621-298364BD9010}_is1) (Version: 9.0 - AMS Software)
BusinessCards MX (HKLM-x32\...\{0D5B5ED2-3E38-4585-B1F3-64B2A9EA95D6}_is1) (Version: 4.73 - MOJOSOFT)
BYclouder Data Recovery Pro (HKLM-x32\...\BYclouder Data Recovery Pro) (Version: 6.8.0.0 - BYclouder Corporation)
ByteScout Spreadsheet Tools 2.0.0.100 (HKLM\...\ByteScout Spreadsheet Tools_is1) (Version:  - ByteScout Inc.)
Cacheman (HKLM-x32\...\Cacheman) (Version: 7.90 - Outertech)
calibre (HKLM-x32\...\{1E376DEC-875A-4F53-9149-168582A0E274}) (Version: 2.71.0 - Kovid Goyal)
Camera Capture Monitor 9.03 (HKLM-x32\...\{5B998657-47FF-4F22-802D-71C4C82B06BE}_is1) (Version:  - Dobest Software Studio)
CamStudio (HKLM-x32\...\CamStudio) (Version:  - )
CamStudio 2.7.2 (HKLM\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7.2 - CamStudio Open Source)
CamStudio OSS Desktop Recorder (HKLM-x32\...\{FD9C31B6-F572-414D-81E3-89368C97A125}_is1) (Version: 2.6 Beta r294 - CamStudio Open Source Dev Team)
CamStudio version 2.7 (HKLM-x32\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7 - CamStudio Open Source)
Camtasia Studio 4 (HKLM-x32\...\{1C6D9FD0-8BE2-4226-8D9F-4929CBC1C396}) (Version: 4.0.1 - TechSmith Corporation)
Camtasia Studio 7 (HKLM-x32\...\{C0E8FE43-C35B-451D-B35F-D4BD056D70E7}) (Version: 7.1.1 - TechSmith Corporation)
Camtasia Studio 8 (HKLM-x32\...\{B9691991-64D3-435B-8A83-69CC21016936}) (Version: 8.4.0.1699 - TechSmith Corporation)
Candy Clock (HKLM-x32\...\Candy Clock) (Version:  - )
CaptureSaver V4.3.0 (HKLM-x32\...\CaptureSaver_is1) (Version:  - www.CaptureSaver.com)
Cardiris 3.5 (HKLM-x32\...\{2605D3D2-AE1C-429A-8A2F-2E6440EC0AB2}) (Version: 3.05.001 - I.R.I.S.) Hidden
Cardiris 3.5 (HKLM-x32\...\InstallShield_{2605D3D2-AE1C-429A-8A2F-2E6440EC0AB2}) (Version: 3.05.001 - I.R.I.S.)
Catalyst Control Center Next Localization BR (HKLM\...\{0FB3752E-254C-260C-A582-3C797F1CD6D6}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (HKLM\...\{37112DCB-17E0-6685-6CDF-FA073AF80E5D}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{2ED1A7E1-78EA-634A-93FB-382F064E6302}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{B671B799-D617-4210-4493-00AAE85FC9AD}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{17A5E9C0-CAD3-EE1D-7C59-F024CA733A36}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{21FC9401-9B30-4B26-15FF-7F10ED02C381}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{B61FE697-92BD-91BE-F1FC-BD7DEEAA7CAC}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{6345478C-2E72-80EC-9E35-7D923C3B6176}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{B7C25298-739B-AB31-A749-CF523BA1797E}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{4ACBF068-4B45-CB7C-D10E-40A32DE21F89}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{AEBE688E-5084-4BBA-4D70-2F9A82D43414}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{0B5398E6-8C9D-A248-1463-45D86D8B6143}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{27F711D0-FABF-CBDA-DD19-44BB8258C537}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{1A106344-06FC-BEF1-0F47-4A4E5A355A78}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{AED48362-C723-9805-78AB-D5B446232E51}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{3FBD959F-357C-D3F8-49AD-23616B68EB72}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{F8CB4C60-1B25-B45A-139D-69830920CF5C}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{08347657-938B-E873-796F-F3BCA8975FDA}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{1C442265-C485-A502-584D-927D2214D535}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{129E6C37-86E7-DCE3-12F7-8A47E1F239DD}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{6D3A22FF-DD4C-B17D-4042-FEE38FA5E0BC}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{A4BBB652-1AF1-E896-67CE-2DD1BA1A8171}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{E76C1041-A288-A716-768A-E2AB8E6555EE}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{B96257A7-E824-A431-CCBA-20969185B735}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{EDC68ACC-EB6A-C08C-FCD3-A8927E05EB17}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{2C3CB667-297D-86EA-60ED-5DBFD7299C3F}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{F398C4C4-523A-6B69-8014-00E881DCB0B1}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{741B6703-B20F-67C9-3914-B7CDECD7267D}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{E19E1115-7380-EF31-2F27-4BEEF4724B56}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{51FA4B5F-A747-F4B8-B309-60FD9A760126}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{CF6EA231-7E9B-40EA-154B-4B8B1AF83783}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{51AADEB6-331F-10AC-7437-80FD97085C2B}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{85D2E4DA-8228-5DD2-90AE-8C109ED78456}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{58CD51DF-8BB5-2A0C-A20E-CF08A23E8B24}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{FFCCD869-9F53-8574-FE74-48B452776213}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{8AFEDEB0-4B10-01DE-748A-801A99639FC8}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{EB4ECE91-CB71-6E85-273F-AA27B306F53E}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{449C722B-8EFE-6046-068B-37C3877340C7}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{8ED6BC6E-6C98-4D08-D4C0-2652356C3699}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{238E396D-5070-9C60-526F-09642BAABFC6}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{C899B952-D3A7-CACB-275F-119DC0809EB8}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.21 - Piriform)
CCScore (HKLM-x32\...\{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}) (Version: 6.02.1001.0001 - EASTMAN KODAK Company) Hidden
CD Audio Reader Filter (remove only) (HKLM-x32\...\CD Audio Reader Filter) (Version:  - )
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.0.3717 - CDBurnerXP)
CDRWIN 8 (HKLM-x32\...\{23D4A873-14FF-474E-0001-6529DDC11226}) (Version: 8.0.11.0121 - Engelmann Media GmbH)
Centra Client (HKLM-x32\...\CentraClient) (Version:  - )
CHM Editor (HKLM-x32\...\CHM Editor) (Version: 3.0.2 - )
ChoiceMail 2010 (HKLM-x32\...\ChoiceMail 2010) (Version: 4.2 - DigiPortal Software Inc)
Chromium (HKLM-x32\...\{574ABF8A-07CA-6E0A-B64A-1E8A66CACD0A}) (Version:  - )
Chrysanth Diary [Starter] (HKLM-x32\...\AC970D9B-E5C8-44D8-910B-D763DDF6D32A_is1) (Version: 5.0 - Chrysanth Software Sdn. Bhd.)
Cinch Audio Recorder version 2.0.1 (HKLM-x32\...\{F145F781-A266-4A33-8F34-65561BF29B25}_is1) (Version: 2.0.1 - Cinch Solutions)
Cinch PDF Converter version 1.0.1 (HKLM-x32\...\{A891E76E-086E-41DC-BD0F-DA2D5BA12BD3}_is1) (Version: 1.0.1 - Cinch Solutions)
CinemaHD 4 Free (HKLM-x32\...\{A2FA92C7-DEEE-4508-8BC3-F0A85B5FADA8}) (Version: 4.0.5533.27174 - Engelmann Media GmbH) Hidden
CinemaHD 4 Free (HKLM-x32\...\{d6fdf5fc-8c5f-48c0-a314-83b565e1dc97}) (Version: 4.0.5533.27229 - Engelmann Media GmbH)
Cisco WebEx Meetings (HKLM-x32\...\ActiveTouchMeetingClient) (Version:  - Cisco WebEx LLC)
Cleanse Uninstaller Pro 10.0  (HKLM-x32\...\Cleanse Uninstaller Pro 10.0) (Version:  - Zards software)
Cleanse Uninstaller Pro 8.0  (HKLM-x32\...\Cleanse Uninstaller Pro 8.0) (Version:  - Zards software)
CleverPrint (HKLM-x32\...\CleverPrint_is1) (Version: 3.00 - Abelssoft GmbH)
Clipà.Vu Clipboard for Windows Desktop (HKLM-x32\...\{63c6bc38-b169-4261-bd37-eca78ad5f7c8}) (Version: 4.1.1558 - Jan Zeman)
Clipà.Vu Clipboard for Windows Desktop (HKLM-x32\...\{B1F748A1-5BA6-4B6F-91FB-1556DC362CD3}) (Version: 4.1.1558 - Jan Zeman) Hidden
ClipboardCC 5.2.0.0 (HKLM-x32\...\{A7CED170-295C-4238-8683-9CEE34F3CCE5}_is1) (Version:  - Albert Sadykov)
Clipdiary 3.65 (HKLM-x32\...\Clipdiary) (Version: 3.65 - Tiushkov Nikolay)
Clone Terminator (HKLM-x32\...\Clone Terminator_is1) (Version:  - )
CloneCD (HKLM-x32\...\CloneCD) (Version:  - SlySoft)
CloudBerry Drive 2.0.1 (HKLM\...\CloudBerry Drive) (Version: 2.0.1 - CloudBerryLab)
ClPhpEd(remove only) (HKLM-x32\...\ClPhpEd) (Version:  - )
Colasoft Capsa 7 Professional (HKLM-x32\...\Colasoft Capsa 7 Professional_is1) (Version: 7.5 - Colasoft)
CollageIt 1.9.5 (HKLM-x32\...\{D9757258-30B2-496E-86F2-84920C5858E1}_is1) (Version: 1.9.5 - PearlMountain Technology Co., Ltd)
COLOR projects professional (64-Bit) (HKLM\...\COLOR_PROJECTS_1_3_C935FDA1_is1) (Version: 1.14 - Franzis Verlag GmbH)
Commander (HKLM-x32\...\Commander) (Version:  - )
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6514.5001 - Microsoft Corporation)
ComPresto (HKLM-x32\...\ComPresto) (Version:  - )
concept/design onlineTV 13 (HKLM-x32\...\{32B1D875-8CFA-41DD-BDC6-A9CA59CECADE}_is1) (Version: 13.17.11.2 - concept/design GmbH)
CookBook+Calendar version 2.5 (HKLM-x32\...\CookBook+Calendar_is1) (Version: 2.5 - Binary House Software)
Cool Record Edit Pro v8.8.3 (HKLM-x32\...\Cool Record Edit Pro_is1) (Version:  - Copyright© 2005-2014 CoolMedia, Inc.)
Cool Timer Deluxe 1.0.7 (HKLM-x32\...\Cool Timer Deluxe_is1) (Version:  - Harmony Hollow Software)
Coolmuster Android Assistant (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Coolmuster Android Assistant) (Version: 3.1.0.1 - Coolmuster)
Coolmuster iPad iPhone iPod to Computer Transfer (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Coolmuster iPad iPhone iPod to Computer Transfer) (Version: 2.2.39 - Coolmuster)
Copy Contents (SharewareOnSale) version 2.0 (HKLM-x32\...\{DA02CCC9-3964-4B2D-B1D1-7E236F6A8D07}_is1) (Version: 2.0 - Chris Gingerich)
C-Organizer Pro v 4.0.5 (HKLM-x32\...\C-Organizer Professional_is1) (Version:  - CSoftLab)
Cosmetic Guide 2.2.7 (HKLM\...\Cosmetic Guide_is1) (Version: 2.2.7 - Tint Guide)
CPUID ROG CPU-Z 1.57.1 (HKLM-x32\...\CPUID ROG CPU-Z_is1) (Version: 1.57.1 - CPUID, Inc.)
Crave World Clock 1.4 (HKLM-x32\...\Crave World Clock_is1) (Version:  - Reflection Software Solutions Pvt. Ltd.)
CrazyTalk v7.32 Standard (HKLM-x32\...\{27C4EA98-84A3-4CDF-A436-F984A0283357}) (Version: 7.32.3114.1 - Reallusion Inc.)
Creative Element Power Tools (HKLM-x32\...\Creative Element Power Tools) (Version: 2.8.885 - Creative Element)
CryptoGiveaway Bounty (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\{D1E32054-6F8F-42D3-9D95-4713E2C74A4F}}_is1) (Version: 1.0.0.246 - Softdeluxe)
Crystal.NET Setup (HKLM-x32\...\{B579B35B-4DF9-4DE4-A203-DB6C66B8296C}) (Version: 1.0.0 - Nirvana)
CSE HTML Validator Professional v16.05 (HKLM-x32\...\CSEHTMLVALIDATOR160_is1) (Version: 16.5.0.0 - AI Internet Solutions LLC)
Cute Reminder Standard Edition 2.6 (HKLM-x32\...\Cute Reminder Standard Edition_is1) (Version: 2.6.317 - CuteReminder Labs)
CutePDF Professional 3.6 (Evaluation) (HKLM-x32\...\CutePDF Professional (Evaluation)_is1) (Version:  - Acro Software Inc.)
CutePDF Writer 2.8 (HKLM\...\CutePDF Writer Installation) (Version:  - )
CutePDF Writer 2.8 (HKLM-x32\...\CutePDF Writer Installation) (Version:  - )
Cute-Timer V2.3.1 (HKLM-x32\...\{DB3D8937-44C9-4EED-BCED-2D1E65F84010}_is1) (Version: 2.3.1 - iWiiBoard Tech)
CutOut 4.0 (HKLM\...\CutOut 4_is1) (Version: 4.0 - Franzis.de)
CyberLink AudioDirector 6 (HKLM-x32\...\{4CB7DDA7-1134-4BA5-841C-3D64C5A0DAA7}) (Version: 6.0.7123.0 - CyberLink Corp.)
CyberLink Blu-ray Disc Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.3226 - CyberLink Corp.)
CyberLink ColorDirector 5 (HKLM-x32\...\{293B15F9-91A8-44D4-ACBB-E13E8E2EC97D}) (Version: 5.0.7213.0 - CyberLink Corp.)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1916 - CyberLink Corp.)
CyberLink LG Burning Tool (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.2.4009 - CyberLink Corp.)
CyberLink MediaShow (HKLM-x32\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 4.1.3402 - CyberLink Corp.)
CyberLink PhotoDirector 5 (HKLM\...\{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.6312.0 - CyberLink Corp.) Hidden
CyberLink PhotoDirector 5 (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.6312.0 - CyberLink Corp.)
CyberLink PowerBackup (HKLM-x32\...\{ADD5DB49-72CF-11D8-9D75-000129760D75}) (Version: 2.5.6023 - CyberLink Corp.)
CyberLink PowerDirector 11 (HKLM-x32\...\InstallShield_{551F492A-01B0-4DC4-866F-875EC4EDC0A8}) (Version: 11.0.0.2329 - CyberLink Corp.)
CyberLink PowerDirector 12 (HKLM\...\{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.3617.0 - CyberLink Corp.) Hidden
CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.3617.0 - CyberLink Corp.)
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.2925.52 - CyberLink Corp.)
CyberLink PowerProducer (HKLM-x32\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.2.2512 - CyberLink Corp.)
CyberLink YouCam 5 (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.4628.0 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Daily To-Do List 4.0203 (HKLM-x32\...\Daily To-Do List_is1) (Version: 4.0203 - Jiri Novotny, Dextronet)
DAK Wave MP3 Editor PRO v3.6b (HKLM-x32\...\{1C02D187-9256-4B08-92D1-82922DBE4D52}) (Version: 3.6.1 - DAK - developed by Code-it Software, Inc.)
Daminion 3.0.0.994 (HKLM-x32\...\{EFD0A11E-2F0B-40A9-A4BA-DD63C779E4D5}_is1) (Version: 3.0.0.994 - Daminion Software)
Date Time Counter 6.0 (HKLM-x32\...\Date Time Counter_is1) (Version:  - TriSun Software Limited)
DBFX Trading Station (HKLM-x32\...\DBFX Trading Station) (Version:  - )
DBGallery (HKLM-x32\...\{00A4F00D-D363-4B99-8786-155F62AD4271}) (Version: 4.3 - GRR Systems)
DC-Bass Source 1.3.0 (HKLM-x32\...\DC-Bass Source) (Version:  - )
DCoder Image Source (remove only) (HKLM-x32\...\DCoder Image Source) (Version:  - )
Defraggler (HKLM\...\Defraggler) (Version: 2.15 - Piriform)
Dell Driver Download Manager (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\bd4d3a0508d364f5) (Version: 3.0.0.0 - Dell Inc)
Dell Resource CD (HKLM-x32\...\{FCD9CD52-7222-4672-94A0-A722BA702FD0}) (Version: 1.00.0000 - Dell Inc.)
Dell SAS RAID Storage Manager (HKLM-x32\...\{09A02B7A-45A5-4E24-9AF3-14B8A86E18CA}) (Version: 2.16.0000 - LSI Corp.) Hidden
Dell SAS RAID Storage Manager v2.16-00 (HKLM-x32\...\InstallShield_{09A02B7A-45A5-4E24-9AF3-14B8A86E18CA}) (Version: 2.16.0000 - LSI Corp.)
Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 2.0.6875.668 - Dell)
Dell SupportAssistAgent (HKLM\...\{8D7B279C-A661-465C-9658-F62FBD6A6B91}) (Version: 2.1.3.5 - Dell)
DesignBox version 1.06.02 (HKLM-x32\...\{4E84R4BC-F3G3-4H97-A0DF-C38DR5D0N93D}_is1) (Version: 1.06.02 - Aurora3D Software)
DeskRule LITE edition 1.4.0.2 (HKLM-x32\...\DeskRule LITE edition) (Version: 1.4.0.2 - zabkat)
Desktop (search) rules 1.2.1.0 (HKLM\...\Desktop (search) rules) (Version: 1.2.1.0 - zabkat)
Desktop Restore (HKLM\...\{15D07D6F-E4CC-41D9-88A3-94115E5E5A10}) (Version: 1.6.3 - JOConnell)
Dia (remove only) (HKLM-x32\...\Dia) (Version:  - )
diashapes (HKLM-x32\...\diashapes) (Version: 0.2.2 - Steffen Macke)
DigiBand version 1.6 (HKLM-x32\...\{BA3A4E83-7935-4939-A6FF-435423A416A9}_is1) (Version: 1.6 - AthTek Software)
Digital Physiognomy (remove only) (HKLM-x32\...\Digital Physiognomy) (Version:  - )
Dimo Videomate version 3.6.1 (HKLM-x32\...\299AF5A5-0809-4CE0-8FD5-1E6EFD27E518_is1) (Version: 3.6.1 - DimoSoft, Inc.)
Direct Show Ogg Vorbis Filter (remove only) (HKLM-x32\...\OggDS) (Version:  - )
DirectVobSub (remove only) (HKLM-x32\...\DirectVobSub) (Version:  - )
DirectVobSub 2.40.4209 (HKLM-x32\...\vsfilter_is1) (Version: 2.40.4209 - MPC-HC Team)
DirectX for Managed Code Update (Summer 2004) (HKLM-x32\...\{E9E34215-82EF-4909-BE2F-F581F0DC9062}) (Version: 9.02.2904 - Microsoft) Hidden
DiscAPI (Studio 10) (HKLM-x32\...\{A77F3C2D-50CC-4A29-A1FB-1E018BE4DCA2}) (Version: 3.00.0033 - Pinnacle Systems) Hidden
Disk Master Professional version 4.3.7 (HKLM\...\{8213CE5C-49D8-45CC-98C1-7355D18995C5}_is1) (Version: 4.3.7 - QILING Tech Co., Ltd.)
Disk Sorter Pro 8.8.12 (HKLM-x32\...\Disk Sorter Pro) (Version: 8.8.12 - Flexense Computing Systems Ltd.)
DiskBoss Pro 2.0.16 (HKLM-x32\...\DiskBoss Pro) (Version: 2.0.16 - Flexense Computing Systems Ltd.)
DiskFerret (HKLM\...\DiskFerret) (Version: 2.2.0.2 - Swooft Software, LLC)
DivX Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.8 - DivX, LLC)
DocLock (HKLM-x32\...\DocLock) (Version: 1.0.1.278 - Large Software)
DocuCan (HKLM\...\DocuCan) (Version: 1.6.0 - Marsep KCD)
DolbyFiles (HKLM-x32\...\{56BE5CC9-95E6-4128-ABEA-968414CA9C80}) (Version: 2.0 - Nero AG) Hidden
Dolce Ear Training v1.9.6 (HKLM-x32\...\Dolce Ear Training_is1) (Version:  - Fast Rabbit Software, LLC)
doPDF (HKLM\...\{84D0B3C2-9B4A-45A8-BC74-40402110BCC2}) (Version: 9.1.232 - Softland) Hidden
doPDF 9 (HKLM-x32\...\{6c42fbe7-5b71-4a8e-9da1-a59317dffa9a}) (Version: 9.1.232 - Softland)
doPDF 9 add-in for Microsoft Office (x64) (HKLM\...\{CA14C18F-8F65-4258-A1CF-ECFB17891B59}) (Version: 9.1.232 - Softland)
doPDF 9 add-in for Microsoft Office (x86) (HKLM-x32\...\{93476622-206D-4957-B751-1B9E7E5A9324}) (Version: 9.1.232 - Softland)
doPDF 9 Printer Driver (HKLM\...\{D3EF3B42-1314-43EE-86A8-0E33964335EC}) (Version: 9.1.232 - Softland)
Doronix Math ToolBox version 1.0.3 (HKLM-x32\...\{3DE28B26-A895-4936-ACD0-A91D4CF31A6C}_is1) (Version: 1.0.3 - Doronix)
DoubleSafety (HKLM-x32\...\DoubleSafety) (Version: 4.5 - Power Labs)
DP Animation Maker (HKLM-x32\...\DP Animation Maker) (Version: 2.2.5 - DesktopPaints.com)
Driver Magician 3.71 (HKLM-x32\...\Driver Magician_is1) (Version:  - GoldSolution Software, Inc.)
Driver Restore (HKLM-x32\...\{273130E8-117C-4237-A0FA-83EBBF11E051}) (Version: 8.1 - Driver Restore)
Dropbox (HKLM-x32\...\Dropbox) (Version: 45.4.92 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.65.1 - Dropbox, Inc.) Hidden
DScaler 5 Mpeg Decoders (HKLM-x32\...\DScaler 5 Mpeg Decoders_is1) (Version:  - )
Dup Scout Pro 10.4.16 (HKLM-x32\...\Dup Scout Pro) (Version: 10.4.16 - Flexense Computing Systems Ltd.)
Duplicate Cleaner 2.1b (HKLM-x32\...\Duplicate Cleaner) (Version: 2.1b - DigitalVolcano)
Duplicate Cleaner Pro 3.0.9 (HKLM-x32\...\Duplicate Cleaner Pro) (Version: 3.0.9 - DigitalVolcano)
Duplicate File Finder Plus 4.0 (HKLM-x32\...\Duplicate File Finder Plus_is1) (Version:  - TriSun Software Inc.)
Duplicate Photo Finder Plus 7.0 (HKLM-x32\...\Duplicate Photo Finder Plus_is1) (Version:  - TriSun Software Limited)
DVD Chief (HKLM-x32\...\{25AB95D1-1FBF-4C00-8507-21BD65D9941F}_is1) (Version: 2.10.367 - Adit Software)
DVD Flick 1.3.0.7 (HKLM-x32\...\DVD Flick_is1) (Version: 1.3.0.7 - Dennis Meuwissen)
DVDCutter Stream and MpCDWav Converter Std v5.03 (HKLM-x32\...\DVDCutter Stream and MpCDWav Converter Std) (Version:  - )
DVDFab 9.2.0.9 (13/08/2015) (HKLM-x32\...\DVDFab 9_is1) (Version:  - Fengtao Software Inc.)
DVDFab Media Player 1.0.1.5 (27/07/2012) (HKLM-x32\...\DVDFab Media Player_is1) (Version:  - Fengtao Software Inc.)
DVDFab Media Player 2 (HKLM-x32\...\DVDFab Media Player 2_is1) (Version: 2.4.3.7 - Fengtao Software Inc.)
DVDFab Passkey 8.2.4.7 (18/08/2015) (HKLM-x32\...\DVDFab Passkey 8_is1) (Version:  - Fengtao Software Inc.)
DVDFab Platinum 3.1.5.0 (HKLM-x32\...\DVDFab Platinum_is1) (Version:  - )
DVDXCopy Xpress 3.0.2 (HKLM-x32\...\DVDXCopyXpress) (Version:  - )
DxO ViewPoint (HKLM\...\{A0A7372A-C28E-48BE-B88C-3C3C3EEFC2EA}) (Version: 1.2.14.0 - DxO Labs)
Ear Training Play It By Ear HN (HKLM-x32\...\Ear Training Play It By Ear HN) (Version:  - )
Earth Alerts (HKLM-x32\...\{FB774FC6-AE2F-4AE5-9C02-D4D1BE6648E5}) (Version: 12.1.50 - South Wind Technologies)
EASEUS Data Recovery Wizard 5.0.1 (HKLM-x32\...\EASEUS Data Recovery Wizard 5.0.1_is1) (Version:  - EASEUS)
EaseUS EverySync 2.1 (HKLM-x32\...\EaseUS EverySync_is1) (Version:  - EaseUS)
EaseUS Partition Master 10.0 Trial Edition (HKLM-x32\...\EaseUS Partition Master Trial Edition_is1) (Version:  - EaseUS)
EaseUS Todo Backup Free 10.6 (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 10.6 - CHENGDU YIWO Tech Development Co., Ltd)
EASEUS Todo Backup Professional 2.5 (HKLM-x32\...\EASEUS Todo Backup Professional 2.5_is1) (Version: 2.5.0.1 - CHENGDU YIWO Tech Development Co., Ltd)
EaseUS Todo PCTrans 8.0 (HKLM-x32\...\EaseUS Todo PCTrans_is1) (Version:  - EaseUS)
Eassos System Restore 2.0.1 (HKLM\...\{37E567C7-EB03-4349-B068-1FD0A2CD55FE}_is1) (Version:  - Eassos Co., Ltd.)
Easy Archive Recovery (HKLM-x32\...\Easy Archive Recovery) (Version: 2.0 - MunSoft)
Easy audio mixer 2.3.1 (HKLM-x32\...\EasyAudioMixer2_is1) (Version: 2.3.1 - G.F. Software)
Easy Clone Detective (HKLM-x32\...\Easy Clone Detective1.4) (Version: 1.4 - Refero Group)
Easy Digital Photo Recovery (HKLM-x32\...\Easy Digital Photo Recovery) (Version: 3.0 - MunSoft)
Easy Drive Data Recovery (HKLM-x32\...\Easy Drive Data Recovery) (Version: 3.0 - MunSoft)
Easy Flyer Creator 2.0 (HKLM-x32\...\{F6591A9D-A7EF-4FDF-8440-F42C725E37F4}) (Version: 2.0.0 - Peridot Technologies)
Easy Flyer Creator 3.0 (HKLM-x32\...\{B07CB2BA-819B-41C5-BBE0-484A4C23972E}) (Version: 3.0.0 - Peridot Technologies)
Easy Macro Recorder 4.9 (HKLM-x32\...\Easy Macro Recorder_is1) (Version:  - GoldSolution Software, Inc.)
Easy Mail Recovery (HKLM-x32\...\Easy Mail Recovery) (Version: 2.0 - MunSoft)
Easy Office Recovery (HKLM-x32\...\Easy Office Recovery) (Version: 2.0 - MunSoft)
Easy Photo Denoise 2.0 (HKLM-x32\...\Easy Photo Denoise_is1) (Version: 2.0 - SoftOrbits)
Easy Photo Unblur 1.0 (HKLM-x32\...\Easy Photo Unblur_is1) (Version: 1.0 - SoftOrbits)
Easy Watermark Studio (HKLM-x32\...\Easy Watermark Studio3.1) (Version: 3.1 - Refero Group)
Easy Watermark Studio versie 3.5 (HKLM-x32\...\{5EC71BC9-52DB-417C-807F-19E6381863E8}_is1) (Version: 3.5 - Refero Group SRL)
Easy Work Time Calculator 4.1 (HKLM-x32\...\Easy Work Time Calculator_is1) (Version:  - TriSun Software Inc.)
EasyTune version 1.2.3 (HKLM-x32\...\{F015AA47-5058-47F7-A877-7F864BEC3E1A}_is1) (Version: 1.2.3 - Sly Software Solutions)
eChat (HKLM-x32\...\eChat) (Version: Ensign eChat - Ensign Software, Inc.)
Efficient Calendar 5.22 (HKLM-x32\...\Efficient Calendar_is1) (Version:  - Efficient Software)
ELDIM - EDIDViewer (HKLM-x32\...\{EDB18C3D-C6A8-41EB-962B-FC535C9FD8F2}) (Version: 4.0.0 - ELDIM)
Eleven version 5.0.0.14 (HKLM-x32\...\{12ED4488-46CB-4ACD-80B5-40D07B42FA04}_is1) (Version: 5.0.0.14 - Elevenapp)
Emsa Advanced Port Blocker v 1.0 (HKLM-x32\...\Emsa Advanced Port Blocker_is1) (Version:  - Emsai Industrial)
Epubor Ultimate (HKLM-x32\...\Epubor Ultimate) (Version: 3.0.9.1031 - Epubor Inc.)
Epubor Ultimate version 1.50.5.4 (HKLM-x32\...\{AD88DF59-7FD3-4A41-9F52-EC673AB80378}_is1) (Version: 1.50.5.4 - Epubor)
eReg (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
eSpeakEdit version 1.46.02 (HKLM-x32\...\eSpeakEdit_is1) (Version:  - )
ESSBrwr (HKLM-x32\...\{643EAE81-920C-4931-9F0B-4B343B225CA6}) (Version: 6.02.0001.0001 - EASTMAN KODAK Company) Hidden
ESSCDBK (HKLM-x32\...\{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}) (Version: 6.02.0001.0001 - EASTMAN KODAK Company) Hidden
ESScore (HKLM-x32\...\{9D8FEE90-0377-49A9-AEFB-525BDE549BA4}) (Version: 6.02.1002.0001 - EASTMAN KODAK Company) Hidden
ESSgui (HKLM-x32\...\{91517631-A9F3-4B7C-B482-43E0068FD55A}) (Version: 6.02.1002.0001 - EASTMAN KODAK Company) Hidden
ESSini (HKLM-x32\...\{8E92D746-CD9F-4B90-9668-42B74C14F765}) (Version: 6.02.1001.0001 - EASTMAN KODAK Company) Hidden
ESSPCD (HKLM-x32\...\{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}) (Version: 6.02.1001.0001 - EASTMAN KODAK Company) Hidden
ESSPDock (HKLM-x32\...\{FCDB1C92-03C6-4C76-8625-371224256091}) (Version: 6.02.0001.0002 - EASTMAN KODAK Company) Hidden
ESSSONIC (HKLM-x32\...\{073F22CE-9A5B-4A40-A604-C7270AC6BF34}) (Version: 6.2.0001.0001 - EASTMAN KODAK Company) Hidden
ESSTOOLS (HKLM-x32\...\{8A502E38-29C9-49FA-BCFA-D727CA062589}) (Version: 5.00.0000.0004 - EASTMAN KODAK Company) Hidden
essvatgt (HKLM-x32\...\{2D03B6F8-DF36-4980-B7B6-5B93D5BA3A8F}) (Version: 6.02.1001.0001 - EASTMAN KODAK Company) Hidden
EverDesk Google Edition (HKLM-x32\...\{7C0CB7FD-BC33-4979-9B18-8089831C2513}) (Version: 5.1.1 - EverEZ Systems Limited) Hidden
EverDesk Google Edition (HKLM-x32\...\EverDesk Google Edition) (Version: 5.1.1 - EverEZ Systems Limited)
Evernote v. 4.5.10 (HKLM-x32\...\{EF7E46B8-1FB7-11E2-B6B3-984BE15F174E}) (Version: 4.5.10.7472 - Evernote Corp.)
Everything 1.2.1.371 (HKLM-x32\...\Everything) (Version:  - )
Excel RTD Add-in (HKLM-x32\...\{82005880-27D3-4848-AA67-82A5D8C28200}) (Version: 1.0.0 - Sti)
ExifCleaner 1.5 (HKLM-x32\...\ExifCleaner) (Version: 1.5 - SuperUtils.com Software)
EximiousSoft Banner Maker V5.45 (HKLM-x32\...\EximiousSoft Banner Maker_is1) (Version:  - EximiousSoft)
Express Burn Disc Burning Software (HKLM-x32\...\ExpressBurn) (Version:  - NCH Software)
Express Scribe (HKLM-x32\...\Scribe) (Version:  - NCH Software)
Exsate DV Capture Live (HKLM-x32\...\Exsate DV Capture Live_is1) (Version: 1.1 - Exsate Software)
Extreme Thumbnail Generator 1.19.2 (HKLM-x32\...\Extreme Thumbnail Generator_is1) (Version: 1.19.2 - Extreme Internet Software)
EZBurner registered to GiveAwayOfTheDay version 1.0.1.41 (HKLM-x32\...\{9F09B18A-CCC5-4597-B295-540C759C70B7}_is1) (Version: 1.0.1.41 - PCWinSoft Software)
EzGenerator 4.0 (HKLM-x32\...\EzGenerator) (Version: 4.0 - Image-line)
EZTalks 2.1.0.0 (HKLM-x32\...\{4DE4DFB5-1D3D-4639-853C-928AA5C6191C}_is1) (Version:  - CUMeeting Inc.)
Fantapper Player (HKLM-x32\...\{CDACD4C9-F984-409A-9D26-DF77E003FD89}) (Version: 2.0.3 - Brand Affinity Technologies)
Fantapper Updater (HKLM-x32\...\{603C0DC4-665E-4CC9-8ED1-7FE1F03AB943}) (Version: 2.0.1 - Brand Affinity Technologies)
Fantastic Flame Screensaver (HKLM-x32\...\Fantastic Flame Screensaver) (Version:  - Laconic Software)
Fast Resize 1.0.2 (HKLM\...\{C5310B36-626E-470B-B7B3-DF1D03D81638}_is1) (Version: 1.0.2 - Picture Instruments)
Fast Site Inspector (HKLM\...\{CA9344D7-33D3-46E6-BE5F-1AD229CE5B3B}) (Version: 3.0.700 - WebTweakTools.com)
Fast Spell Checker (HKLM\...\{F0AC1918-447F-473B-863B-812F25E37885}) (Version: 3.0.700 - WebTweakTools.com)
Fast VD 3.0.0.10 (HKLM-x32\...\9ED08AFF-E977-47db-8923-2499D74C97C5_Fast VD_is1) (Version: 3.0.0.10 - FastPcTools)
FastPaste 2.63 (HKLM-x32\...\FastPaste_is1) (Version:  - Dextronet)
FBM PDF Converter (HKLM-x32\...\FBM PDF Converter_is1) (Version:  - flip-book-maker.com Solution)
ffdshow v1.3.4533 [2014-09-29] (HKLM-x32\...\ffdshow_is1) (Version: 1.3.4533.0 - )
FFMPEG Core Files (remove only) (HKLM-x32\...\FFMPEG Core Files) (Version:  - )
File Replicator Service (HKLM-x32\...\{8AAF07BD-3D8D-4747-B491-7800372766A9}) (Version: 1.0.0 - Chris Butterfield Software Solutions, LLC)
FileMarker.NET Pro (GAOTD Edition) (HKLM\...\{A5A0E0B5-578C-43CE-B201-1C01A0388DA9}_is1) (Version: 1.0 - ArcticLine Software)
FileSearchy Pro (HKLM-x32\...\FileSearchy Pro) (Version: 1.3 - Midlinesoft)
FileStream FrameShop (HKLM-x32\...\FileStream FrameShop) (Version: 2.1 - FileStream, Inc.)
FileStream Take-1 Recorder (HKLM-x32\...\FileStream Take-1 Recorder) (Version: 2.0 - FileStream, Inc.)
FileStream Turbo Browser (HKLM-x32\...\FileStream Turbo Browser) (Version: 11.6 - FileStream, Inc.)
FileStream Web Boomerang (HKLM-x32\...\FileStream Web Boomerang) (Version: 3.0 - FileStream, Inc.)
FileWing Pro (HKLM-x32\...\FileWing Pro_is1) (Version: 2.3 - Abelssoft)
FileZilla Client 3.3.4.1 (HKLM-x32\...\FileZilla Client) (Version: 3.3.4.1 - )
Fimat PreferredTrade, a Product of Fimat USA, LLC (HKLM-x32\...\{AA93E93A-4C25-481D-91F1-749AAE29503F}) (Version: 6.3.0.8 - Fimat PreferredTrade, a Division of Fimat USA, LLC)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
Firetip (HKLM-x32\...\Firetip) (Version: 4.1.0.0 - )
First Draft 3.5 (HKLM-x32\...\First Draft_is1) (Version:  - Just Outsourcing)
Fix Genius  (HKLM-x32\...\Fix Genius) (Version:  - Tenorshare, Inc.)
FLAC To MP3 V4.0.4 (HKLM-x32\...\FLAC To MP3_is1) (Version:  - FLAC To MP3, Inc.)
Flame Painter 3 (HKLM\...\Flame Painter 3_is1) (Version: 3.2.0 - Escape Motions, s.r.o)
Flash Movie Player 1.5 (HKLM-x32\...\Flash Movie Player) (Version: 1.5 - Eolsoft)
Flash Video Capture 4.2.0 build 4557 (HKLM-x32\...\Flash Video Capture_is1) (Version:  - FlashVideoCapture.com)
Flashpaste 6.0 (HKLM-x32\...\Flashpaste) (Version: 6.0 - Softvoile)
FLDraw Floor Plan Software 3.30 (HKLM-x32\...\{5FEB5FE4-883A-4339-9C11-BBE76A2A6D80}) (Version: 3.30 - FLDraw)
Flip Image (HKLM-x32\...\Flip Image_is1) (Version:  - Flipbuilder Solution)
Flip PowerPoint Professional (HKLM-x32\...\Flip PowerPoint Professional_is1) (Version:  - FlipBuilder Solution)
FlipBook Maker  3.6.3 (HKLM-x32\...\FlipBook Maker_is1) (Version: 3.6.3 - Kvisoft Co,. Ltd)
Flipbook Maker4.3.4 (HKLM\...\Kvisoft Flipbook Maker_is1) (Version: 4.3.4 - kvisoft.com)
Flock (2.6.2) (HKLM-x32\...\Flock (2.6.2)) (Version: 2.6.2 (en-US) - Flock)
Floor Plan Maker 7.9 (HKLM-x32\...\Floor Plan Maker_is1) (Version:  - EdrawSoft)
FlowHeater® 4.0.8.2 (64 Bit) (HKLM\...\{54435955-D757-4663-93A6-063143D44AD9}_is1) (Version:  - FlowHeater GmbH)
Fly DVD Copier V4.3 (HKLM-x32\...\Fly DVD Copier_is1) (Version:  - Magic DVD Software, Inc.)
focus booster (HKLM-x32\...\{06ED8674-1191-5DF4-88E9-5732C927ADF7}) (Version: 1.2 - The Memphis Agency) Hidden
focus booster (HKLM-x32\...\com.focusboosterapp.focusbooster.8E5F79C899747AD22E21DB62AA496926DA6BBC64.1) (Version: 1.2 - The Memphis Agency)
Focus Photoeditor 6.3.9.8 SE (HKLM-x32\...\Focus Photoeditor_is1) (Version:  - NWS Centurybyte)
Focusky (HKLM-x32\...\Focusky_is1) (Version:  - Focusky Solution)
Focusky 2.12.1 (HKLM-x32\...\focuskyen_is1) (Version: 2.12.1 - Focusky Solution)
Folder Marker Home (GAOTD Edition) (HKLM\...\Folder Marker Home (GAOTD Edition)_is1) (Version: 4.2 - ArcticLine Software)
Folder Marker Home v 3.1 GAOTD Edition (HKLM-x32\...\Folder Marker_is1) (Version: 3.1 - ArcticLine Software)
Folder Marker Home v 3.2 GAOTD Edition (HKLM\...\Folder Marker_is1) (Version: 3.2 - ArcticLine Software)
Folder Size & Analyze Professional (HKLM-x32\...\{BB7DECBC-52E2-4890-A727-3CCABF986BD1}) (Version: 5.20 - SagaxSoft, Inc.)
FolderClone Standard Edition v2.1.1 (HKLM-x32\...\FolderClone Standard Edition_is1) (Version:  - )
FolderIco 4.0 (HKLM\...\{22C37D82-6137-40BF-8625-7A846ED65F3A}_is1) (Version:  - teorex)
FolderMatch v3.7.3 (HKLM-x32\...\FolderMatch_is1) (Version:  - )
FolderViewer (HKLM-x32\...\FolderViewer) (Version: 5.1 - MatirSoft)
FORTE 5 - Basic Edition (HKLM-x32\...\FORTE 5 Basic) (Version: 5 - FORTE)
Fotor 2.0.2 (HKLM-x32\...\Fotor) (Version: 2.0.2 - Everimaging Co., Ltd.)
Foxit Creator (HKLM-x32\...\Foxit Creator) (Version: 3,0,2,0506 - Foxit Corporation)
Foxit Reader (HKLM-x32\...\Foxit Reader) (Version: 4.3.0.1110 - Foxit Corporation)
Free Duplicate Remover 0.5 (HKLM-x32\...\Free Duplicate Remover) (Version:  - )
Free Easy Burner V 5.1 (HKLM-x32\...\Free Easy Burner_is1) (Version: 5.1.0.0 - Koyote soft)
Free Sound Recorder 2010 v9.2.1 (HKLM-x32\...\Free Sound Recorder_is1) (Version:  - Copyright© 2005-2010 FreeSoundRecorder Technologies, Inc.)
FreeFileSync 5.7 (HKLM-x32\...\FreeFileSync) (Version: 5.7 - ZenJu)
FreeFixer (HKLM-x32\...\FreeFixer1.14) (Version: 1.14 - Kephyr)
Freemore Audio Video Suite 3.5.2 (HKLM-x32\...\Freemore Audio Video Suite_is1) (Version:  - FreeMoreSoft, Inc.)
FYZip 1.00 (HKLM-x32\...\FYZip) (Version: 1.00 - TightRope Interactive)
Gabest MPEG Splitter (remove only) (HKLM-x32\...\Gabest MPEG Splitter) (Version:  - )
Game Booster (HKLM-x32\...\Game Booster_is1) (Version: 2.3.0.0 - IObit)
Genie Timeline (HKLM-x32\...\Genie Timeline) (Version: 3.0 - Genie9)
GFI BackUp Freeware (HKLM-x32\...\GFI BackUp Freeware) (Version: 4.0 - GFI Software Ltd.)
GiliSoft Audio Recorder Free 5.3.0 (HKLM-x32\...\{C3570380-9D39-4A03-F42F-6E263462D92C}_is1) (Version: 5.3.0 - GiliSoft International LLC.)
GiliSoft Screen Recorder 6.1.0 (HKLM-x32\...\{2F9CCB8C-8584-45CF-B916-E8C98F6497A4}_is1) (Version: 6.1.0 - GiliSoft International LLC.)
GiliSoft Video Editor 7.1.0 (HKLM-x32\...\{3908B421-EF03-4389-A38C-DBAF6252E312}_is1) (Version: 7.1.0 - GiliSoft International LLC.)
GnuCash 2.4.10 (HKLM-x32\...\GnuCash_is1) (Version:  - GnuCash Development Team)
Goal Genie (HKLM-x32\...\{EC8BC76F-E305-4F90-9FC7-37FA7BF2CDD2}) (Version: 01.01.0006.0000 - Software Nuggets, Inc.)
GoldenSection Notes (HKLM-x32\...\GoldenSection Notes) (Version: 4.4 (Build 1900) - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 64.0.3282.186 - Google Inc.)
Google Earth (HKLM-x32\...\{1E04F83B-2AB9-4301-9EF7-E86307F79C72}) (Version: 4.2.205.5730 - Google)
Google Earth Pro (HKLM-x32\...\{FA1BBF34-E994-4310-95D7-BE93092B8E61}) (Version: 7.3.1.4507 - Google)
Google Gears (HKLM-x32\...\{2FA41EBB-3F5A-35C3-85D6-51EC72A11FBD}) (Version: 0.5.3600 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.115 - Google Inc.) Hidden
GooPatient (HKLM-x32\...\{2513C88B-51D2-4413-ACE8-C9B324C25AB2}) (Version: 3.1.01 - Alfa.NetSoft)
GOTD Promotion version. version 3.8.0 (HKLM-x32\...\GOTD Promotion version._is1) (Version: 3.8.0 - Bytesignals)
GoTo Opener (HKLM-x32\...\{8B2D47CC-1558-4939-B27F-41E30530072A}) (Version: 1.0.467 - LogMeIn, Inc.)
GoToAssist Corporate (HKLM-x32\...\GoToAssist) (Version: 11.8.0.1205 - Citrix Systems, Inc.)
GoToMeeting 8.22.0.8473 (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\GoToMeeting) (Version: 8.22.0.8473 - LogMeIn, Inc.)
GPL Ghostscript 8.71 (HKLM-x32\...\GPL Ghostscript 8.71) (Version:  - )
GPS Location Remover For Photos version 1.2.0 (HKLM-x32\...\{511DB2D7-CD4B-4E89-94E8-AD09049A4AD5}_is1) (Version: 1.2.0 - EaseYou Software)
G-Recorder (remove only) (HKLM-x32\...\G-Recorder) (Version: 2.2.5 - G-Recorder)
GTD Timer (HKLM-x32\...\{37C88389-8B5F-4F45-8963-9E091D2EF3D3}) (Version: 2012.6.7.115 - ProductivityScientific.com)
GuitarTab Maestro (HKLM-x32\...\GuitarTab Maestro_is1) (Version:  - )
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version:  - )
Hamster Free EbookConverter (HKLM-x32\...\{441AC599-200D-4E04-B274-C6B7B50C281D}_is1) (Version: 1.0.0.13 - HamsterSoft)
HashOnClick (HKLM\...\HashOnClick_is1) (Version:  - 2BrightSparks)
HD Video Converter Factory Pro (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\HDVideoConverterFactoryPro) (Version:  - WonderFox Soft, Inc. All Rights Reserved.)
HD Video Converter Factory Pro 9.1 (HKLM-x32\...\HD Video Converter Factory Pro) (Version: 9.1 - WonderFox Soft, Inc.)
HDR projects 2 (64-Bit) (HKLM\...\HDR_PROJECTS_2_2_3BF7CE82_is1) (Version: 2.26 - Franzis Verlag GmbH)
HDR projects 3 professional (64-Bit) (HKLM\...\HDR_PROJECTS_3_3_3BF7CE82_is1) (Version: 3.34 - Franzis Verlag GmbH)
Heimdal Agent (HKLM-x32\...\{55E41A62-DB4D-4E16-9BDA-C1BBDFC4E7EA}) (Version: 2.2.161 - Heimdal Security)
HHD Software Hex Editor Neo 5.13 (HKLM\...\{8EB85C0E-DE7D-4A53-BD66-708B8F2C80B0}) (Version: 5.13.1.4770 - HHD Software, Ltd.)
Hi Slider (HKLM-x32\...\Hi Slider_is1) (Version:  - HiSlider Solution)
Hide My IP 6 (HKLM-x32\...\HIDEMYIP_is1) (Version:  - My Privacy Tools, Inc)
HippoEDIT 1.60.10 (HKLM-x32\...\HippoEDIT) (Version: 1.60.10 - HippoEDIT.com)
HitFactor 4.3.0 (HKLM-x32\...\HitFactor 4.3.0) (Version: 4.3.0.0 - BelaDaddy Software)
HitFilm 2 Express (HKLM\...\{5D249E93-D4B4-44EE-AA07-865093316560}) (Version: 2.0.3010.30403 - FXhome)
HitFilm 3 Express (HKLM\...\{AFD4EBF8-F2E9-47C8-BE6D-049A0E0CEC01}) (Version: 3.1.4724.15452 - FXhome)
Home Multimedia Library (HKLM-x32\...\{27DA72CA-0D3B-45A9-B9B3-A4A456BFE14E}) (Version: 2.1 - Sprintbit Software)
Honeycam (HKLM\...\Honeycam) (Version: 1.02 - Bandisoft.com)
Hot Alarm Clock 2.0.2.0 (HKLM-x32\...\{672C1EE5-D13F-4EDB-A8CA-26711696C040}_is1) (Version: 2.0 - Comfort Software Group)
hotComm Lite® (HKLM-x32\...\hotComm Lite®) (Version: 7.50.070x - 1stWorks Corporation)
HP Memories Disc (HKLM-x32\...\{B376402D-58EA-45EA-BD50-DD924EB67A70}) (Version: 1.0.4.805 - Hewlett-Packard Company)
HP Photo and Imaging 2.3 - Scanjet 4600 Series (HKLM-x32\...\{3E270C95-8327-4C2F-A8E1-902CC2604A20}) (Version: 2.3.0000 - {&Tahoma8}Hewlett-Packard)
HyperCam 3 (HKLM-x32\...\HyperCam 3) (Version: 3.2.1107.20 - Solveig Multimedia)
IBM Lotus Symphony (HKLM-x32\...\{294f69aa-9abb-4211-ace2-cb18379c2742}) (Version: 3.0.10289 - IBM)
iCare Card Recovery Pro 2.0 (HKLM-x32\...\iCare Card Recovery Pro_is1) (Version:  - iCare Software)
iCare Format Recovery 4.6.3.3 (HKLM-x32\...\iCare Format Recovery_is1) (Version:  - iCare Software)
Icecream Ebook Reader version 4.24 (HKLM-x32\...\{B8C30F0F-1F23-49E1-A3ED-44DE17660EE2}_is1) (Version: 4.24 - Icecream Apps)
Icecream PDF Converter version 2.34 (HKLM-x32\...\{6811A286-E9F4-4035-9738-7721C087E500}_is1) (Version: 2.34 - Icecream Apps)
Icecream PDF Split and Merge version 2.03 (HKLM-x32\...\{95DC4DB4-99FB-4FB2-ADBD-97F194EDEB4D}_is1) (Version: 2.03 - Icecream Apps)
Icecream Slideshow Maker version 2.67 (HKLM-x32\...\{3674ADB5-6374-4EBA-BB46-7C6EFB266661}_is1) (Version: 2.67 - Icecream Apps)
iClone v5.51 Standard (HKLM-x32\...\{E8EB9130-8C34-4DCE-A6C4-B1C5A399F616}) (Version: 5.51.3507.1 - Reallusion Inc.)
iClone v6.54 Standard (HKLM-x32\...\{9FDDEF0B-4D60-4A36-981B-269C787DB23E}) (Version: 6.54.4306.1 - Reallusion Inc.)
icomancer 1.3.3.103 (HKLM-x32\...\{4304ADDC-824B-4888-A6E7-F8E48D7FDBBD}_is1) (Version: 1.3.3.103 - lavasoftworks.com)
IconLover (HKLM-x32\...\IconLover) (Version: 5.34 - Aha-Soft)
iDailyDiary 3.91 (HKLM-x32\...\iDailyDiary_is1) (Version:  - Splinterware Software Solutions)
Ideal DVD Copy V4.1.2 (HKLM-x32\...\Ideal DVD Copy_is1) (Version:  - Ideal DVD Software, Inc.)
IdolSoundLab 6.2.4 (HKLM-x32\...\IdolSoundLab 6.2.4) (Version: 6.2.4.1 - Beladaddy Software)
idoo File Encryption Pro 5.3 (HKLM-x32\...\{30AB2FCD-FBF2-4bed-AC6A-13E6A1468621}_is1) (Version: 5.3 - idoo Software Co.,Ltd.)
idoo Secure Disc Creator 3.0 (HKLM-x32\...\{30AB2FCD-FBF2-4bed-1111-13E6A1418621}_is1) (Version: 3.0 - idoo International LLC.)
idoo Video Editor Pro 1.4.0 (HKLM-x32\...\{3908B421-EF03-3489-A38C-DBAF6252E312}_is1) (Version: 1.4.0 - idoo International LLC.)
iGetting Audio  (HKLM-x32\...\iGetting Audio) (Version:  - Tenorshare, Inc.)
iiCreator v5.80 (Standard Version GOTD Edition) (HKLM-x32\...\interactiveimagecreator_webunion_is1) (Version:  - WebUnion Media Ltd.)
Image Assistant (HKLM-x32\...\{317A50BC-06BE-472D-BDCE-A802AA944B62}_is1) (Version:  - Extralabs Software)
Image Cartoonizer Premium version 1.4.0 (HKLM-x32\...\{5ED0A232-CB60-4112-AEC7-582135B45F23}_is1) (Version: 1.4.0 - Cartoonize.net)
Image Merger .EXE version 2.0.0.8 (HKLM\...\{1976B99F-FC9B-47C2-9AD2-B8E8537B2173}_is1) (Version: 2.0.0.8 - SoftTech InterCorp)
Image Resize Guide 1.4.1 (HKLM\...\Image Resize Guide_is1) (Version: 1.4.1 - Tint Guide)
ImageMagick 6.8.0-8 Q16 (2012-12-01) (HKLM-x32\...\ImageMagick 6.8.0 Q16_is1) (Version: 6.8.0 - ImageMagick Studio LLC)
Images Generator version 09.79 (HKLM-x32\...\{8450B3F1-64AC-4E45-99ED-7E4A5E0AA7FF}_is1) (Version: 09.79 - Panasoft)
ImagXpress (HKLM-x32\...\{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}) (Version: 7.0.74.0 - Nero AG) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.5.0 - LIGHTNING UK!)
IM-Magic Partition Resizer Professional 2013 (HKLM-x32\...\IM-Magic Partition Resizer Professional) (Version: 2013 - IM Magic Inc.)
iMyfone D-Back 3.6.5.0 (HKLM-x32\...\{5032269A-E8F7-4748-BA16-C7EFC96DDD97}_is1) (Version: 3.6.5.0 - Shenzhen iMyfone Technology Co., Ltd.)
iMyFone TunesMate 2.1.0.12 (HKLM-x32\...\{C117E587-8C43-4B82-84AB-3A29902C52E0}_is1) (Version: 2.1.0.12 - Shenzhen iMyFone Technology Co., Ltd.)
Incomedia WebSite X5 v10 - Home (HKLM-x32\...\{22B260EE-79AD-4F4C-9E06-349E8F1D958C}_is1) (Version: 10.1.4.45 - Incomedia s.r.l.)
Incomedia WebSite X5 v11 - Home (HKLM-x32\...\{C5743DB8-7BDF-47D3-8D41-0BBD487B48A1}_is1) (Version: 11.0.6.27 - Incomedia s.r.l.)
Incomedia WebSite X5 v13 - Start (HKLM\...\{5565A488-E1C8-4DFC-AEB7-1919D6A41DAF}_is1) (Version: 13.1.4.13 - Incomedia s.r.l.)
Incomedia WebSite X5 v14 - Start (HKLM\...\{9D29720A-FFD5-43E6-98CA-E8DAAF4E1AB7}_is1) (Version: 14.0.4.3 - Incomedia s.r.l.)
Info Center 1.0.0.5 (HKLM-x32\...\Info Center_is1) (Version: 1.0.0.5 - PC Pitstop LLC)
Inpaint 4.7 (HKLM-x32\...\{2AEDC172-479F-47AE-8A48-A0524D4AED5B}_is1) (Version:  - Teorex)
Inpaint 6.0 (HKLM\...\{2AEDC172-479F-47AE-8A48-A0524D4AED5B}_is1) (Version:  - Teorex)
Inpaint 7.1 (HKLM\...\{5808866F-D115-46B2-8123-BB6801968101}_is1) (Version:  - Teorex)
InspirationLibrary (HKLM-x32\...\{CE28932A-98B7-4382-A3A2-712864A54B8F}_is1) (Version: 2.06 - Beenokle)
Installer (HKLM-x32\...\{504346FD-9491-4D9D-83C9-593CE32E8C5D}) (Version: 1.205.5189.27981 - SharkIndicators) Hidden
InstallIQ Updater (HKLM-x32\...\{5EFA68C8-CFFD-407F-8B17-7D7C61D2F93A}) (Version: 1.1.2.0 - W3i, LLC)
InstantPhotoSketch Pro 2.1 (HKLM-x32\...\{2CEC6A7A-3366-4CE0-B8FD-540434ED3702}_is1) (Version:  - CPSSoftware)
Intel ® Pro Alerting Agent (HKLM-x32\...\{C3BAE6D2-0FAD-4C32-8138-8A226460C864}) (Version: 4.2.5 - Intel ® Corporation)
Intel® PROSet for Wired Connections (HKLM-x32\...\{17334AAF-C9E7-483B-9F45-E3FCAF07FFA7}) (Version: 8.00.5000 - Dell)
Interactive Image Creator (HKLM-x32\...\{9D3B7659-1C80-4DC8-9D09-91750E60D495}) (Version: 3.50 - FLDraw)
InterBase 6.5 (HKLM-x32\...\InterBase) (Version:  - )
iPixSoft Flash Slideshow Creator (4.0.0.1) (HKLM-x32\...\iPixSoft Flash Slideshow Creator_is1) (Version: 4.0.0.1 - iPixSoft)
iPixSoft SWF to Video Converter (2.2.1.0) (HKLM-x32\...\iPixSoft SWF to Video Converter_is1) (Version: 2.2.1.0 - iPixSoft)
iPixSoft Video Slideshow Maker (3.4.1.0) (HKLM-x32\...\iPixSoft Video Slideshow Maker_is1) (Version: 3.4.1.0 - iPixSoft)
IP-MAC Scanner 2.0.5 (HKLM-x32\...\{44365BFB-F35A-45B0-AECA-6DFA06717118}_is1) (Version:  - XimuSoft, Inc.)
IQFeed Client 4.2.1.4 (HKLM-x32\...\IQFeed Client) (Version: 4.2.1.4 - DTN)
iResizer 2.2 (HKLM-x32\...\{FD071DBA-2994-4350-93BB-EC245D0D3C74}_is1) (Version:  - teorex)
iResizer 3.0 (HKLM\...\{FD071DBA-2994-4350-93BB-EC245D0D3C74}_is1) (Version:  - teorex)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version:  - )
Iris - Software for eye protection (HKLM-x32\...\IrisTech Iris) (Version: "0.6.9" - "IrisTech")
Iris mini - Software for eye protection (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\IrisTech Iris mini) (Version: "0.3.7" - "IrisTech")
iSkysoft DVD Creator(Build 3.0.0) (HKLM-x32\...\iSkysoft DVD Creator_is1) (Version:  - Wondershare Software)
iSkysoft Video Editor(Build 4.1.2) (HKLM-x32\...\iSkysoft Video Editor_is1) (Version:  - iSkysoft Software)
iSpring Converter 6 (HKLM\...\{1D3D8759-7CF3-4034-87A8-0682004A808C}) (Version: 6.1.0 - iSpring Solutions Inc.)
iSpring Presenter 5 (HKLM-x32\...\{19FDEED8-3016-4862-A430-AB2B41D5C322}) (Version: 5.6.1 - iSpring Solutions Inc.)
iStonsoft iPhone Backup Extractor (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\iStonsoft iPhone Backup Extractor) (Version: 2.1.32 - iStonsoft)
iToon version 1.1.2 (HKLM-x32\...\{3CEFEA4A-CC8C-4C31-830A-36AB1D4AC901}_is1) (Version: 1.1.2 - itoon.net)
Jarte 4.3 (HKLM-x32\...\Jarte_is1) (Version: 4.3 - Carolina Road Software L.L.C.)
Java™ 6 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216025FF}) (Version: 6.0.250 - Oracle)
Java™ SE Development Kit 7 Update 2 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170020}) (Version: 1.7.0.20 - Oracle)
JavaFX 2.0.2 (64-bit) (HKLM\...\{1111706F-666A-4037-7777-202648764D10}) (Version: 2.0.2 - Oracle Corporation)
JavaFX 2.0.2 SDK (64-bit) (HKLM\...\{2222706F-666A-4037-7777-202648764D10}) (Version: 2.0.2 - Oracle Corporation)
JDownloader 0.9 (HKLM-x32\...\1489-3350-5074-6281) (Version: 0.9 - AppWork GmbH)
Jet Screenshot v 3.1 (HKLM-x32\...\Jet Screenshot_is1) (Version: 3.1 - ArcticLine Software)
JetDrive (HKLM-x32\...\JetDrive_is1) (Version: 5.63 - Abelssoft)
Jihosoft Phone Transfer version 2.2.9 (HKLM-x32\...\{116B8806-B959-4600-8591-35E60440BD3D}_is1) (Version: 2.2.9 - HONGKONG JIHO CO., LIMITED)
join.me (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\JoinMe) (Version: 1.14.0.138 - LogMeIn, Inc.)
JPG To PDF 2.2.1 (HKLM-x32\...\JPG To PDF_is1) (Version:  - JPG To PDF Developer Team)
JPG2PDF 2.2.1 (HKLM-x32\...\JPG2PDF_is1) (Version:  - JPG2PDF Developer Team)
Kahlown (HKLM-x32\...\{D3CB90C2-BEC1-4D15-8E05-11623357861B}) (Version: 2.6 - LeSoftRejion)
KB Piano 2.5.1 GOTD (HKLM-x32\...\KB Piano_is1) (Version:  - )
KC Softwares AudioGrail (HKLM-x32\...\KC Softwares AudioGrail_is1) (Version: 7.5.0.195 - KC Softwares)
KC Softwares AVIToolbox (HKLM-x32\...\KC Softwares AVIToolbox_is1) (Version: 2.5.2.54 - KC Softwares)
KC Softwares dot11Expert (HKLM-x32\...\KC Softwares dot11Expert_is1) (Version: 1.2.1.7 - KC Softwares)
KC Softwares K-ML (HKLM-x32\...\KC Softwares K-ML_is1) (Version:  - KC Softwares)
KC Softwares PhotoToFilm (HKLM-x32\...\KC Softwares PhotoToFilm_is1) (Version: 3.3.0.82 - KC Softwares)
Kestrel GX (HKLM-x32\...\{B1219669-DCFF-43E1-A218-2506673C3C6D}_is1) (Version: 1.3.1 - Cerieus)
kgcbase (HKLM-x32\...\{F22C222C-3CE2-4A4B-A83F-AF4681371ABE}) (Version: 5.03.0000.0004 - EASTMAN KODAK Company) Hidden
Kindle Auto eBook Converter 0.4.50 (HKLM-x32\...\Kindle Auto eBook Converter) (Version: 0.4.50 - The Messenger)
Kindle DRM Removal (HKLM-x32\...\KindleDRMRemoval) (Version: 1.2.1 - eBook Converter)
Kingo ROOT version 1.2.3.2051 (HKLM-x32\...\{AE7675D6-0B31-494F-ABFA-822E1A0FDF17}_is1) (Version: 1.2.3.2051 - Kingosoft Technology Ltd.)
Kingsoft Presentation  (8.1.0.3019) (HKLM-x32\...\Kingsoft Presentation) (Version: 8.1.0.3019 - Kingsoft Corp.)
Kingsoft Writer  (8.1.0.3019) (HKLM-x32\...\Kingsoft Writer) (Version: 8.1.0.3019 - Kingsoft Corp.)
K-Lite Codec Pack 10.2.0 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.2.0 - )
Kodak EasyShare software (HKLM-x32\...\{D32470A1-B10C-4059-BA53-CF0486F68EBC}) (Version:  - Eastman Kodak Company)
KooRaRoo Media (HKLM\...\{C46CC07F-400F-4AEE-918A-52BA1C69244C}_is1) (Version: 2.3.0.0 - Programming Sunrise)
Kotobee Author version 1.3.4 (HKLM-x32\...\{11FC9C17-17FF-4F2B-9D5A-4DE097629F21}}_is1) (Version: 1.3.4 - Vijua, Inc.)
Kryptel Standard Edition (HKLM-x32\...\{081617FD-3462-4906-B3C9-50F5CB887169}) (Version: 7.11 - Inv Softworks)
KSU (HKLM-x32\...\{B997C2A0-4383-41BF-B76E-9B8B7ECFB267}) (Version: 632.62.0004.0001 - EASTMAN KODAK Company) Hidden
Kvisoft Flash Video Gallery 1.5.6 (HKLM-x32\...\Kvisoft Flash Video Gallery_is1) (Version: 1.5.6 - kvisoft, Inc.)
LADSPA_plugins-win-0.4.15 (HKLM-x32\...\LADSPA_plugins-win_is1) (Version:  - Audacity Team)
Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
LangoMax Adult Advantage (HKLM-x32\...\{18562567-BC92-9861-00B8-90B8F5545EA8}) (Version: 1 - PLL Media, Inc) Hidden
LangoMax Adult Advantage (HKLM-x32\...\AdultAdvantage) (Version: Adult Advantage - PLL Media, Inc)
Launchy 2.5 (HKLM-x32\...\Launchy_21344213_is1) (Version:  - Code Jelly)
LAV Filters 0.65 (HKLM-x32\...\lavfilters_is1) (Version: 0.65 - Hendrik Leppkes)
Lazesoft Data Recovery version 3.2 Professional Edition (HKLM-x32\...\LS-815EE836-7F81-47A9-8C3F-123C58F89CAE_is1) (Version: 3.2 - Lazesoft)
Lazesoft Recovery Suite version 4.1 Professional Edition (HKLM-x32\...\LS-32CB12D5-CC47-4BC8-BC97-0613CDCB0406_is1) (Version: 4.1 - Lazesoft)
LeaderTask 8.2.2.1 (HKLM-x32\...\LeaderTask_is1) (Version:  - Organizer LeaderTask LLC)
Leawo Blu-ray Copy version  7.3.0.3 (HKLM-x32\...\{9B97E64D-B46A-4453-8AC5-664F7D2729AA}_is1) (Version: 7.3.0.3 - Leawo Software)
Leawo Blu-ray Creator version  7.3.0.3 (HKLM-x32\...\{F73E2159-E3DA-4B2F-BFE7-63D57141F5D0}_is1) (Version: 7.3.0.3 - Leawo Software)
Leawo Blu-ray Player (HKLM-x32\...\{CF7F52BF-DEE0-44CD-A7E1-AADD5CCECCDD}_is1) (Version: 1.5.0.0 - leawo Software)
Leawo Blu-ray Video Converter version  7.0.2.1 (HKLM-x32\...\{68AC7535-85AE-4903-A6C8-25BAD4847334}_is1) (Version: 7.0.2.1 - Leawo Software)
Leawo DVD Creator version  5.2.0.0 (HKLM-x32\...\{29312768-5795-483C-805A-7D01B8FC7C0E}_is1) (Version: 5.2.0.0 - Leawo Software Co., Ltd.)
Leawo DVD to MP4 Converter version  4.3.0.0 (HKLM-x32\...\{E583A6F3-8F2F-4644-97FF-748F83A58D68}_is1) (Version: 4.3.0.0 - Leawo Software Co., Ltd.)
Leawo iTransfer version  1.9.0.0 (HKLM-x32\...\{93337CC5-9BC4-4FB0-B82E-38EC63E149F3}_is1) (Version: 1.9.0.0 - Leawo Software)
Leawo Music Recorder version  1.1.0.0 (HKLM-x32\...\{FAF11D3B-7633-402B-BAFA-4BCAAE030F20}_is1) (Version: 1.1.0.0 - Leawo Software)
Leawo PowerPoint to DVD Pro version 4.6.4.0 (HKLM-x32\...\{1FAD9CDD-BEE6-4240-BE2C-A47A2573F29D}_is1) (Version: 4.6.4.0 - Leawo Software)
Leawo PowerPoint to Video Pro version 2.6.0.68 (HKLM-x32\...\{5D5CB188-F9B1-4103-B2AD-07FB33068377}_is1) (Version: 2.6.0.68 - Leawo Software)
Leawo Prof. Media version  7.5.0.0 (HKLM-x32\...\{A5F041A4-812A-47C2-AD53-8893A81019FB}_is1) (Version: 7.5.0.0 - Leawo Software)
Leawo TunesCopy version  1.0.0.0 (HKLM-x32\...\{6B9F4449-3F1B-45C2-B099-5D59DA4AA01A}_is1) (Version: 1.0.0.0 - Leawo Software)
Leawo Video Accelerator Version: 4.1.0.0 (HKLM-x32\...\{6D217AEE-2D67-4486-A73D-106C726BCDF1}_is1) (Version:  - )
Leawo Video Converter Pro version  6.2.0.0 (HKLM-x32\...\{2A533488-2D72-4367-AC73-9FCE91C2910E}_is1) (Version: 6.2.0.0 - Leawo Software Co.,Ltd.)
Leawo Video Converter version  5.3.0.0 (HKLM-x32\...\{331ED3CF-3A1B-467C-9A62-899E2D3B20C4}_is1) (Version: 5.3.0.0 - Leawo Software Co.,Ltd.)
Lernout & Hauspie TruVoice American English TTS Engine (HKLM-x32\...\tv_enua) (Version:  - )
Light Developer v7.1, build 12452 (HKLM-x32\...\Light Developer_is1) (Version:  - Stepok Image Lab.)
Lighten PDF to Word Converter version 3.2.0 (HKLM-x32\...\{3C21CE5E-8702-422A-A44F-E08F9219E3C1}_is1) (Version: 3.2.0 - Lighten Software Limited)
LightScribe System Software (HKLM-x32\...\{A8F1CA85-C713-4B1F-B3B4-B2B7A6824146}) (Version: 1.18.14.1 - LightScribe)
Liquid Story Binder XE version 4.93 (HKLM-x32\...\{FF0CA85F-BB7D-475C-9836-BAF48AE712FD}_is1) (Version: 4.93 - Black Obelisk Software)
Loaris Trojan Remover 1.3.7.0 (HKLM\...\{29988DC6-9C4A-49B2-AC86-5C380B29ADB9}_is1) (Version:  - Loaris, Inc.)
Logitech Options (HKLM\...\LogiOptions) (Version: 6.72.344 - Logitech)
Logitech Resource Center (HKLM-x32\...\Logitech Resource Center) (Version:  - )
Logitech SetPoint 6.22 (HKLM-x32\...\sp6) (Version: 6.22.24 - Logitech)
Logitech SetPoint 6.67 (HKLM\...\sp6) (Version: 6.67.83 - Logitech)
LogMeIn (HKLM-x32\...\{53E10F4E-B361-45D7-8DBD-A6BF073236F0}) (Version: 4.1.3430 - LogMeIn, Inc.)
LogMeIn (HKLM-x32\...\{5C5778DB-3E5A-499D-865D-740E67D1F165}) (Version: 4.1.2600 - LogMeIn, Inc.)
LogoMaker 3.1 (HKLM-x32\...\LogoMaker_is1) (Version:  - Studio V5)
Longo Blu-ray Copy V2.4.1 (HKLM-x32\...\Longo Blu-ray Copy_is1) (Version:  - Longo DVD Software, Inc.)
Longo DVD Copy V4.00 (HKLM-x32\...\Longo DVD Copy_is1) (Version:  - Longo DVD Soft, Inc.)
Longo DVD Ripper2.0.1 (HKLM-x32\...\Longo DVD Ripper_is1) (Version:  - Longo DVD Software, Inc.)
Mac Blu-ray Player (HKLM-x32\...\Mac Blu-ray Player) (Version: 2.10.3.1608 - Macgo Inc.)
MadVR (remove only) (HKLM-x32\...\MadVR) (Version:  - )
Magic Collage (HKLM-x32\...\{54E6E975-E089-4575-BD33-64DC10022D46}) (Version: 2.3 - PixelApp Studio)
Magic ISO Maker v5.5 (build 0281) (HKLM-x32\...\Magic ISO Maker v5.5 (build 0281)) (Version:  - )
Magic Landscape Filter (HKLM-x32\...\{88EDDC73-6EB3-4FC6-AD52-71C8F34B86ED}) (Version: 1.1 - PixelApp Studio)
Magic Skin Filter (HKLM-x32\...\{236DA83A-BFFF-4FDF-A380-5A3CEFE427F9}) (Version: 1.1 - PixelApp Studio)
MagicCamera 8.9 (HKLM-x32\...\{70376A8D-C6E7-4A61-9E30-42AD268CD45D}_is1) (Version: 8.9 - ShiningMorning)
magicJack (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\magicJack) (Version: 4.1.7574.5297 - magicJack L.P.)
MagicScore (HKLM-x32\...\MagicScore_is1) (Version:  - )
MagicScore OneTouch Composer (HKLM-x32\...\MagicScore OneTouch Composer_is1) (Version:  - )
MAGIX Connector (HKLM-x32\...\MAGIX_connector_is1) (Version: 2.5.1.55 - simplitec GmbH)
MAGIX Content and Soundpools (HKLM-x32\...\MAGIX_GlobalContent) (Version: 1.0.0.0 - MAGIX Software GmbH)
MAGIX Fastcut (HKLM\...\{8AD7AD4F-0B1F-4FA2-90AE-CB10C21056F1}) (Version: 2.0.1.145 - MAGIX Software GmbH) Hidden
MAGIX Fastcut (HKLM\...\MX.{8AD7AD4F-0B1F-4FA2-90AE-CB10C21056F1}) (Version: 2.0.1.145 - MAGIX Software GmbH)
MAGIX Photo Manager 12 (HKLM\...\{C9E4CB14-BF4F-4F76-B2CF-E3D993469513}) (Version: 10.0.0.271 - MAGIX AG) Hidden
MAGIX Photo Manager 12 (HKLM-x32\...\MX.{C9E4CB14-BF4F-4F76-B2CF-E3D993469513}) (Version: 10.0.0.271 - MAGIX AG)
MAGIX Soundpool Music Maker - Feel good (HKLM\...\{EAC67138-ADA4-47E4-B2BF-A69B986B10AE}) (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden
MailWasherPro (HKLM-x32\...\{3F914D52-8A29-4E37-9BF7-7FD7A303D0D5}) (Version: 7.5 - Firetrust)
MakeUp Guide 1.4.2 (HKLM\...\MakeUp Guide_is1) (Version: 1.4.2 - Tint Guide)
MakeUp Pilot Free 4.5.2 (HKLM\...\MakeUp Pilot Free_is1) (Version: 4.5.2 - Two Pilots)
Malware Hunter 1.28.0.48 (HKLM-x32\...\Malware Hunter) (Version: 1.28.0.48 - Glarysoft Ltd)
Malwarebytes version 3.4.4.2398 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.4.4.2398 - Malwarebytes)
Managed DirectX (0900) (HKLM-x32\...\{7F34A21F-2DEB-4598-BB19-611D6BD24271}) (Version: 4.09.00.0900 - Microsoft) Hidden
Maple Professional (HKLM-x32\...\{C34BCD5E-5898-4572-93B7-C143F5A9F527}_is1) (Version: 8.31 - Crystal Office Systems)
Market Analyst 7 (HKLM-x32\...\Market Analyst 7) (Version: 7 - Market Analyst International)
Mask Surf (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Mask Surf) (Version: 3.7 - )
Mask Surf Everything (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Mask Surf Everything) (Version: 2.3 - )
Maxtor Quick Start (HKLM-x32\...\{1C875160-7E87-45C6-85C5-4FE2A840A3B8}) (Version: 1.02.0122 - Maxtor) Hidden
Maxtor Quick Start (HKLM-x32\...\InstallShield_{1C875160-7E87-45C6-85C5-4FE2A840A3B8}) (Version: 1.02.0122 - Maxtor)
MD5Check 3.0 (HKLM-x32\...\MD5Check_is1) (Version:  - )
MEDIA Revolution (HKLM-x32\...\MEDIA Revolution_is1) (Version: Aktuelle Version - IN MEDIA KG)
MediaBase (GOTD) (remove only) (HKLM-x32\...\MediaBase (GOTD)) (Version:  - )
mediAvatar DVD Converter (HKLM-x32\...\mediAvatar DVD Converter) (Version: 6.0.12.0919 - mediAvatar)
mediAvatar Photo to Flash (HKLM-x32\...\mediAvatar Photo to Flash) (Version: 1.0.1.0224 - mediAvatar)
mediAvatar Video to DVD Converter (HKLM-x32\...\mediAvatar Video to DVD Converter) (Version: 6.2.1.0301 - mediAvatar)
Melomania (HKLM-x32\...\Melomania) (Version: 1.8.9.3 - Able Apples)
Menu Templates - Starter Kit (HKLM-x32\...\{C99C89A3-119A-45E6-B26E-DD5643CAA0C5}) (Version: 9.0.4.0 - Nero AG) Hidden
MetaProducts DeskTool (HKLM-x32\...\DeskTool) (Version:  - )
Metaproducts Picture Downloader (HKLM-x32\...\Metaproducts Picture Downloader) (Version:  - )
Micro DVD Player (HKLM-x32\...\Micro DVD Player) (Version:  - )
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft AntiXSS v4.2.1 (HKLM-x32\...\{F7D011B7-EF6B-4FCF-9571-44D60282329A}) (Version: 4.2.1 - Microsoft Corporation)
Microsoft Application Compatibility Toolkit 5.6 (HKLM-x32\...\{0F5AEBB0-43F3-4571-ACE7-A7942E8AA179}) (Version: 5.6.7324.0 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95120000-0122-0409-0000-0000000FF1CE}) (Version: 12.0.6423.1000 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{91110409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 - en-us (HKLM\...\ProPlusRetail - en-us) (Version: 15.0.4981.1001 - Microsoft Corporation)
Microsoft Office Sounds (HKLM-x32\...\{10CE1EA2-12E9-11D3-825E-00C04F6843FE}) (Version: 1.0.0.0 - Microsoft Corp)
Microsoft OneDrive (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\OneDriveSetup.exe) (Version: 18.025.0204.0009 - Microsoft Corporation)
Microsoft Outlook Personal Folders Backup (HKLM-x32\...\{C63E7C60-25EB-11D3-8EDA-00A0C911E8E5}) (Version: 1.10.0.0 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0409-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Reader (HKLM-x32\...\{B6F7DBE7-2FE2-458F-A738-B10832746036}) (Version:  - )
Microsoft Save as PDF Add-in for 2007 Microsoft Office programs (HKLM-x32\...\{90120000-00B0-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 (HKLM-x32\...\Microsoft SQL Server 2005) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{E75776B2-EAE5-42F9-A800-0A10763DEDF0}) (Version: 11.0.2318.0 - Microsoft Corporation)
Microsoft SQL Server 2014 Express LocalDB  (HKLM\...\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 Design Tools ENU (HKLM-x32\...\{2E5C075E-11AB-4BDD-918C-7B9A68953FF8}) (Version: 3.5.5386.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{A14F2EA1-93E5-4AEB-8395-F2BCC8FE1CCC}) (Version: 3.5.8085.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{2C254FCE-43EF-4DE9-B7D8-60579B3325E3}) (Version: 3.5.8085.0 - Microsoft Corporation)
Microsoft SQL Server Desktop Engine (HKLM-x32\...\{E09B48B5-E141-427A-AB0C-D3605127224A}) (Version: 8.00.761 - Microsoft Corporation)
Microsoft SQL Server Native Client (HKLM-x32\...\{7670D32F-DAE6-4E49-8C8B-B3F08B5B1686}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server Setup Support Files (English) (HKLM-x32\...\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM-x32\...\{E9F44C98-B8B6-480F-AF7B-E42A0A46F4E3}) (Version: 9.00.3042.00 - Microsoft Corporation)
Microsoft Text-to-Speech Engine 4.0 (English) (HKLM-x32\...\MSTTS) (Version:  - )
Microsoft Visual C# 2008 Express Edition - ENU (HKLM-x32\...\Microsoft Visual C# 2008 Express Edition - ENU) (Version:  - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{4fd02573-5f12-4ae4-8027-c63f8e1115af}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24123 (HKLM-x32\...\{2cbcedbb-f38c-48a3-a3e1-6c6fd821a7f4}) (Version: 14.0.24123.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24123 (HKLM-x32\...\{206898cc-4b41-4d98-ac28-9f9ae57f91fe}) (Version: 14.0.24123.0 - Microsoft Corporation)
Microsoft Visual C++ Run Time  Lib Setup (HKLM-x32\...\{AAF4238F-7C29-451D-9925-C753271A5728}) (Version: 1.0.0 - Microsoft)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework (HKLM-x32\...\{B4C0A315-07FB-39F9-85CD-8CE20C019350}) (Version: 3.5.21022 - Microsoft)
Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32 (HKLM-x32\...\{07FCBED5-94C3-4F94-B9D3-360FA27C7B06}) (Version: 6.1.5288.17011 - Microsoft Corporation)
Microsoft_VC100_CRT_x64 (HKLM\...\{17106CA8-E65A-4D02-95BE-79AF8C698935}) (Version: 1.0.0 - Microsoft)
Microsys Launcher (HKLM\...\560CEE382FE04EEE8EE428712CD776BE_is1) (Version: 2.1.0 - Micro-Sys ApS)
MicroTrends Squawk Box (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\488a5e15e6cf4819) (Version: 2.0.1.7 - MicroTrends)
Mindomo 8.0.20 (HKLM\...\68388fc2-5a22-11e6-a23f-0cc47a024924) (Version: 8.0.20 - Expert Software Applications srl)
MiniTool Partition Wizard Professional Edition 8.1.1 (HKLM-x32\...\{2991A446-D356-44EC-930A-42E8B02A67C0}_is1) (Version:  - MiniTool Solution Ltd.)
MiniTool Partition Wizard Professional Edition 9.0 (HKLM-x32\...\{69237D97-3063-450F-AE49-2357B191EA5D}_is1) (Version:  - MiniTool Solution Ltd.)
MKVtoolnix 4.9.1 (HKLM-x32\...\MKVtoolnix) (Version: 4.9.1 - Moritz Bunkus)
MobiKin Doctor for Android (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\MobiKin Doctor for Android) (Version: 1.1.0.18 - MobiKin)
MobiKin Doctor for iOS (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\MobiKin Doctor for iOS) (Version: 1.0.0.1 - MobiKin)
Mobile Video 2.0 (HKLM-x32\...\{8CB5AFA8-B19F-4656-0001-F2B05D5BB04E}) (Version: 2.11.0713 - Engelmann Media GmbH)
Mobipocket Reader 6.2 (HKLM-x32\...\{342126E1-173C-4585-BFBE-3EBDD20E3E9E}) (Version: 6.2.608 - Mobipocket.com)
ModelMaker 6.20 (HKLM-x32\...\ModelMaker 6.20) (Version:  - )
Modiac Blu-ray Ripper (HKLM-x32\...\Modiac Blu-ray Ripper) (Version: 1.0.0.4077 - Modiac Inc.)
Modiac DVD Ripper (HKLM-x32\...\Modiac DVD Ripper) (Version: 1.7.0.4077 - Modiac Inc.)
Modiac Video Converter (HKLM-x32\...\Modiac Video Converter) (Version: 2.5.0.4078 - Modiac Inc.)
Moo Calendar 1.0.2.131 (HKLM\...\Moo Calendar_is1) (Version:  - Moo Calendar Team)
Mosaico (HKLM-x32\...\Mosaico) (Version: 1.3.0P - Soulid Studio)
Mosaico version 1.4 (HKLM-x32\...\{2C954515-1DA8-4A2F-8EC8-6C31A4952E3C}_is1) (Version: 1.4 - Soulid Studio)
mov Audio Extractor 9.1.5 (HKLM-x32\...\mov Audio Extractor_is1) (Version:  - CoolMedia Co.,Ltd.)
Movie Maker (HKLM-x32\...\{38F03569-A636-4CF3-BDDE-032C8C251304}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Templates - Starter Kit (HKLM-x32\...\{BCD82AB5-670D-4242-90FA-1F97103C16CD}) (Version: 9.0.4.0 - Nero AG) Hidden
MovieJack (HKLM-x32\...\{02ED828A-ED95-499D-BF08-B26053D9CF8D}) (Version: 4.0.6444.34216 - Engelmann Media GmbH) Hidden
MOVIEJACK free (HKLM-x32\...\{36c30694-fb11-43ef-8fff-d26924d944e1}) (Version: 4.0.6444.34364 - Engelmann Media GmbH)
Mozilla Firefox 53.0.3 (x86 en-US) (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Mozilla Firefox 53.0.3 (x86 en-US)) (Version: 53.0.3 - Mozilla)
Mozilla Firefox 59.0.1 (x64 en-US) (HKLM\...\Mozilla Firefox 59.0.1 (x64 en-US)) (Version: 59.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 58.0.1 - Mozilla)
MP3 Cutter 1.1.1 (HKLM-x32\...\MP3 Cutter_is1) (Version:  - MP3Cutter.org)
MP3 Tag Express 6.8.5 (HKLM-x32\...\MP3 Tag Express 6.8.5) (Version:  - George Taylor - ISD)
MP3 Tag Express V6 (HKLM-x32\...\{0A393685-A856-49D3-84D3-5D2BCFC9BED5}) (Version: 6.0.0 - George Taylor)
MP3 Toolkit 1.1 (HKLM-x32\...\MP3 Toolkit_is1) (Version:  - MP3Toolkit.com)
Mp3tag v2.49b (HKLM-x32\...\Mp3tag) (Version: v2.49b - Florian Heidenreich)
MP4 To MP3 Converter V3.0.4 (HKLM-x32\...\MP4 To MP3 Converter_is1) (Version:  - hxxp://www.MP4ToMP3Converter.net)
MSDN Library for Microsoft Visual Studio 2008 Express Editions (HKLM-x32\...\{DF38F332-2AC3-37FF-9FDC-8C4C80E531FB}) (Version: 9.0.21022 - Microsoft Corporation) Hidden
MSDN Library for Microsoft Visual Studio 2008 Express Editions (HKLM-x32\...\MSDN Library for Microsoft Visual Studio 2008 Express Editions) (Version:  - Microsoft Corporation)
MSXML 4.0 SP2 (KB927978) (HKLM-x32\...\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}) (Version: 4.20.9841.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB936181) (HKLM-x32\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 6 Service Pack 2 (KB2721693) (HKLM\...\{2511745F-5778-45C5-A6BF-C5F0969F02C0}) (Version: 6.20.2012.0 - Microsoft Corporation)
MT Data Entry Assistant (HKLM-x32\...\{02D5EE1A-7F74-4D1D-8466-69094DBA2518}) (Version: 2.0 - Office Mini Tools)
Multi Media US Toolbar (HKLM-x32\...\Multi Media US Toolbar) (Version:  - )
MultiCollector (HKLM-x32\...\MultiCollector) (Version:  - )
MultiView Inpaint 1.2 (HKLM\...\{8188F7D9-812D-417D-B502-BE0D34ABFD81}_is1) (Version:  - Teorex)
MunSoft Data Recovery Suite (HKLM-x32\...\MunSoft Data Recovery Suite) (Version: 2.0 - MunSoft)
Music Maker (HKLM\...\{D5FF45D3-3AE3-4490-85DE-04D059606382}) (Version: 25.0.0.23 - MAGIX Software GmbH) Hidden
Music Maker (HKLM-x32\...\MX.{D5FF45D3-3AE3-4490-85DE-04D059606382}) (Version: 25.0.0.23 - MAGIX Software GmbH)
MusicExtractor (HKLM-x32\...\MusicExtractor_is1) (Version: 1.0 - Abelssoft)
MUSICMATCH Jukebox (HKLM-x32\...\MUSICMATCH Jukebox) (Version:  - )
My Audio Cutter 1.2 (HKLM-x32\...\My Audio Cutter_is1) (Version:  - )
My Autoplay 12 Lite F (HKLM-x32\...\My Autoplay_is1) (Version:  - Arafasoft, Inc.)
MyDraw 2.0.0 (HKLM-x32\...\{3F3EE940-69C2-42D0-AA46-033D4CA1F51D}_is1) (Version: 2.0.0 - Nevron Software)
MyFormatConverter (HKLM-x32\...\{4aacb3a2-f7f1-4dbc-ae72-9d21552ac858}) (Version: 10.0.6109.25552 - Engelmann Distribution UG)
MyFormatConverter (HKLM-x32\...\{A249A3E5-DD4C-4F2C-AC2B-CCE9090DACDC}) (Version: 10.0.6109.25379 - Engelmann Distribution UG) Hidden
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.7 - F.J. Wechselberger)
MySlideShow 3.5.6 (HKLM-x32\...\MySlideShow3_is1) (Version: 3.5.6 - Anix Software)
MyTube 6 (HKLM-x32\...\{02C15B8C-26BE-479C-0001-7E31094C1376}) (Version: 6.0.14.115 - S.A.D.)
MZ Cheque Print (HKLM-x32\...\{5DDA634C-8D62-42E8-A615-CA16BAAFC13A}) (Version: 1.0.0.1311 - MSTech (Modern Software Technology))
NaturalReaderFree (HKLM-x32\...\{262EFBD9-A907-490F-81F4-561FDD3A8C5C}) (Version: 1.00.0000 - Naturalsoft limited)
NeoDownloader 2.8.1 (GiveAwayOfTheDay Version) (HKLM-x32\...\{E76CDDCE-EFC0-4FE5-9972-9489CE49AA55}_is1) (Version: 2.8.1 - Neowise Software)
neoDVDstandard4 (HKLM-x32\...\{D1AD7439-FBCA-4345-A780-2A5617EBA9DE}) (Version: 4.0.0 - MedioStream)
NeoPaint 4.7c (HKLM-x32\...\{50206644-C226-498D-8273-9F5F300807E2}_is1) (Version: 4.7c - NeoSoft Corp.)
Nero 7 (HKLM-x32\...\{06024F70-15BC-4447-B53A-F1A7BBA21033}) (Version: 7.02.6387 - Nero AG)
Nero 9 (HKLM-x32\...\{b7dc4df1-aba8-4439-86d1-e080892e0f66}) (Version:  - Nero AG)
netbrdg (HKLM-x32\...\{4537EA4B-F603-4181-89FB-2953FC695AB1}) (Version: 6.02.1002.0001 - EASTMAN KODAK Company) Hidden
NETGEAR A6210 Genie (HKLM-x32\...\{24352157-CF75-4215-A0B5-3AF01F78CB0A}) (Version: 36.0.0.0 - NETGEAR) Hidden
NETGEAR A6210 Genie (HKLM-x32\...\InstallShield_{24352157-CF75-4215-A0B5-3AF01F78CB0A}) (Version: 36.0.0.0 - NETGEAR)
Netscape Navigator (9.0.0.6) (HKLM-x32\...\Netscape Navigator (9.0.0.6)) (Version: 9.0.0.6 (en-US) - Netscape)
Netumo Desktop (HKLM-x32\...\{08067B4D-A769-436D-B1DF-B045FF24E349}) (Version: 1.00.0005 - AIRO Software)
Network Recording Player (HKLM-x32\...\{830C1687-F55F-45C1-AD2B-405824DC65DB}) (Version: 2.3.1700 - Cisco WebEx LLC)
News Publisher 1.0 (HKLM-x32\...\{F512A66C-EE26-47DF-B1BA-9BC753AB7DD4}_is1) (Version: 1.0 - Soft Solutions)
NewzScape v1.2.0 (HKLM-x32\...\NewzScape_is1) (Version:  - )
NewzToolz-EZ v2.0.3 (HKLM-x32\...\NewzToolz-EZ_is1) (Version:  - )
NinjaTrader 7 (HKLM-x32\...\{94A2EF87-0F5B-4DC8-98DE-FD569674C05F}) (Version: 7.0.1037 - NinjaTrader)
NinjaTrader 8 (HKLM-x32\...\{6F0768CA-F6F4-4763-ABFB-BDCBDBAB06BD}) (Version: 8.0.8.0 - NinjaTrader, LLC)
Notebook 2.0 (HKLM-x32\...\Notebook_is1) (Version:  - Johannes Wallroth)
NotePro (HKLM-x32\...\{8B89A2F8-DB3D-445E-8689-104D20D36896}_is1) (Version: 4.31 - Crystal Office Systems)
Notifier (HKLM-x32\...\{0008546E-DF6E-4CC1-AFD0-2CB8E16C95A2}) (Version: 6.02.0001.0001 - EASTMAN KODAK Company) Hidden
novaPDF Lite Desktop 7.6 printer (HKLM\...\novaPDF Lite Desktop 7 printer_is1) (Version:  - Softland)
Nuclear Coffee - My Music Collection (HKLM-x32\...\My Music Collection_is1) (Version: 1.0.2.34 - Nuclear Coffee)
Nuclear Coffee - VideoGet (HKLM-x32\...\VideoGet_is1) (Version: 2012 - Nuclear Coffee)
O&O DiskImage Professional (HKLM\...\{811CD98A-197E-4918-8D85-1F42F88C43C2}) (Version: 11.3.182 - O&O Software GmbH)
Ocster 1-Click Backup (HKLM\...\Ocster 1-Click Backup) (Version: 1.10 - Ocster GmbH & Co. KG)
ODF Add-in for Microsoft Office (HKLM-x32\...\{2BC21CD2-8053-406A-80F6-9AB61717B49D}) (Version: 4.0.5309.0 - OpenXML/ODF Translator Team)
Odin U Disk Encrypt Creator 5.4.1 (HKLM-x32\...\Odin U Disk Encrypt Creator_is1) (Version:  - Odin Share Company)
Odin Video Converter 5.4.2 (HKLM-x32\...\Odin Video Converter_is1) (Version:  - Odin Share Company.)
Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.4981.1001 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.4981.1001 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-0409-0000-0000000FF1CE}) (Version: 15.0.4981.1001 - Microsoft Corporation) Hidden
Office Animation Runtime (HKLM-x32\...\{AEEB3643-71DE-414d-9E3F-1159177FE211}) (Version: 11.0.5510.0 - Microsoft Corporation)
Office Regenerator (HKLM-x32\...\{EDA176C4-5302-4BA2-9490-304C2D29E18B}) (Version: 20.11.0003 - Abstradrome)
OfotoXMI (HKLM-x32\...\{B162D0A6-9A1D-4B7C-91A5-88FB48113C45}) (Version: 6.02.0001.0001 - EASTMAN KODAK Company) Hidden
OkayFreedom (HKLM-x32\...\{3F3FB10C-7175-4D38-9335-3488B89C12AF}) (Version: 1.7.2 - Steganos Software GmbH)
oMega Commander 2.3.14.4267 (HKLM\...\{19A00CE2-FDE9-41AD-8CAA-E7BF2E3EAEDE}_is1) (Version:  - Pylonos.com LLC)
ONEKEY PDF Convert to Word version 3.0 (HKLM-x32\...\{C6C05D6E-B19C-4537-9F4D-09A636D05D3B}_is1) (Version: 3.0 - EasyAppSoft)
OpdiTracker (HKLM-x32\...\{3716C0FF-CB5C-4EF3-A944-11F02A7830F3}) (Version: 2.21.1085 - Opdicom)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenOffice 4.0.0 (HKLM-x32\...\{55E61709-D7D4-43C0-B45D-BFAF5C09A02D}) (Version: 4.00.9702 - Apache Software Foundation)
OpenSource AVI Splitter (remove only) (HKLM-x32\...\OpenSource AVI Splitter) (Version:  - )
OpenSource DTS/AC3/DD+ Source Filter (remove only) (HKLM-x32\...\OpenSource DTS/AC3/DD+ Source Filter) (Version:  - )
OpenSource Flash Video Splitter 1.0.0.5 (HKLM-x32\...\OpenSource Flash Video Splitter) (Version: 1.0.0.5 - )
OpenVPN 2.2.2 (HKLM-x32\...\OpenVPN) (Version: 2.2.2 - )
Opera Stable 18.0.1284.63 (HKLM-x32\...\Opera 18.0.1284.63) (Version: 18.0.1284.63 - Opera Software ASA)
Opera Stable 19.0.1326.56 (HKLM-x32\...\Opera 19.0.1326.56) (Version: 19.0.1326.56 - Opera Software ASA)
Opera Stable 52.0.2871.30 (HKLM-x32\...\Opera 52.0.2871.30) (Version: 52.0.2871.30 - Opera Software)
OrgScheduler version 6.6 (HKLM-x32\...\OrgScheduler_is1) (Version: 6.6 - OrgBusiness Software)
Page Builder V2.2 (HKLM-x32\...\{1F00B5F9-D652-4F86-95F5-E98962440900}_is1) (Version:  - CellSoftNet)
PageFlip PDF to Flash Converter (HKLM-x32\...\PageFlip PDF to Flash Converter_is1) (Version:  - PageFlipPDF Solution)
PaintSupreme (HKLM-x32\...\PaintSupreme 1.1) (Version: 1.1 - BrainDistrict GmbH)
PaperPort (HKLM-x32\...\{DF4C31CF-0EED-4680-873F-F6AD64E21B46}) (Version: 9.02.0818 - ScanSoft, Inc.)
Paradise Mountain Animated Wallpaper version 1.0 (HKLM-x32\...\Paradise Mountain Animated Wallpaper_is1) (Version:  - )
Paragon Backup & Recovery™ 10 Home Special Edition (HKLM-x32\...\{CD79CE4F-A5E5-11DF-AD00-005056C00008}) (Version: 90.00.0003 - Paragon Software)
Paragon Backup and Recovery™ 14 Home (HKLM\...\{485DF5E7-8379-4BFA-BAE1-9B8DBFE0D6B4}) (Version: 90.00.0003 - Paragon Software)
Paragon Disk Wiper™ 11 Personal Special Edition (HKLM-x32\...\{7E7F1A4F-781C-11DE-9EB8-005056C00008}) (Version: 90.00.0003 - Paragon Software)
Paragon Drive Copy™ 11 Professional Special Edition (English) (HKLM-x32\...\{24371D30-7CFF-11DE-B053-005056C00008}) (Version: 90.00.0003 - Paragon Software)
Paragon HFS+ for Windows™ 9.0 Special Edition (HKLM-x32\...\{456534C0-51E7-11DF-B336-005056C00008}) (Version: 1.00 - Paragon Software)
Paragon Migrate OS to SSD™ Special Edition (HKLM-x32\...\{D4378A80-C713-11DF-9399-005056C00008}) (Version: 90.00.0003 - Paragon Software)
Paragon Virtualization Manager™ 14 Compact (HKLM-x32\...\{BF50CF00-7CE6-11DE-A06C-005056C00008}) (Version: 90.00.0003 - Paragon Software)
ParkControl (HKLM-x32\...\ParkControl) (Version: 1.2.5.6 - Bitsum)
Particle 9 version 9 (HKLM-x32\...\{04932CAE-9C52-4986-BA2D-E26BA31FA77E}_is1) (Version: 9 - Daniel Ritchie)
Password Recovery Bundle 2014 (HKLM-x32\...\Password Recovery Bundle 2014_is1) (Version:  - Top Password Software, Inc.)
Pavtube Blu-ray Ripper Ver 4.1.3.4090 (HKLM-x32\...\{3CE715EB-457A-4C92-A907-0895AC264F75}_is1) (Version:  - )
PC Matic 1.1.0.41 (HKLM-x32\...\PC Matic_is1) (Version: 1.1.0.41 - PC Pitstop LLC)
PC WorkBreak 1.13 (HKLM-x32\...\PC WorkBreak_is1) (Version:  - TriSun Software Inc.)
PCmover Professional (HKLM-x32\...\{71AA2137-C3F3-45C6-A408-81697FE5A3B8}) (Version: 6.00.620.0 - Laplink Software, Inc.)
PDF Anti-Copy V2.0.3 (HKLM-x32\...\PDF Anti-Copy_is1) (Version:  - hxxps://PDFAntiCopy.com)
PDF Architect (HKLM-x32\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH)
PDF Combine 1.2 (HKLM-x32\...\PDF Combine_is1) (Version:  - PDF Combine)
PDF Composer (HKLM-x32\...\{0A660D90-BC82-4D25-BD19-5B86C8789904}) (Version: 1.2.0 - Impressions Future Media)
PDF Compressor 3.1.2 (HKLM-x32\...\PDFCompressor_is1) (Version:  - PDF Compressor)
PDF Eraser V1.4 (HKLM-x32\...\PDF Eraser_is1) (Version:  - hxxp://www.PDFEraser.net)
PDF Files Text Extractor v1.0.6 (HKLM-x32\...\PDF Files Text Extractor v1.0.6) (Version:  - AlgoLogic India)
PDF Impress 2014 (HKLM\...\{9E603249-BA86-4C15-A53B-BD7F92A1B99A}) (Version: 31.06.115 - BinaryNow, Inc.)
PDF Logo Remover 1.0 (HKLM-x32\...\PDF Logo Remover_is1) (Version: 1.0 - SoftOrbits)
PDF OCR 4.3.3 (HKLM-x32\...\{3D122AF9-1E02-4035-8003-334D378C1B62}_is1) (Version:  - PDF OCR)
PDF Pro 10 (HKLM-x32\...\{FC279721-37A6-4777-AFD8-7A56681EBA14}) (Version: 10.8.0000 - PDF Pro Software)
PDF Protection Remover (HKLM-x32\...\{6A1AEF96-769E-414E-B4EB-ED82AA51BA0B}) (Version: 7.0 - PDFArea Software)
PDF Protector Splitter and Merger Pro (HKLM-x32\...\PDF Protector Splitter and Merger Pro) (Version:  - AlgoLogic)
PDF Rotator 1.0.2 (HKLM-x32\...\PDF Rotator_is1) (Version:  - PDF Rotator)
PDF To Excel Converter V3.0 (HKLM-x32\...\PDF To Excel Converter_is1) (Version:  - hxxp://www.PDFExcelConverter.com)
PDF to JPG 3.6 (HKLM-x32\...\PDF to JPG_is1) (Version:  - PDF Helper)
PDF To JPG Converter 2.0.2 (HKLM-x32\...\PDF To JPG Converter_is1) (Version:  - PDF To JPG Converter)
PDF to Text 3.3 (HKLM-x32\...\PDF to Text_is1) (Version:  - PDF Helper)
PDF To Word Converter 3.70 (HKLM-x32\...\{BC58612B-71F0-4354-8A3F-54751AF9B19F}}_is1) (Version:  - AdeptPDF Studio)
PDF To Word Converter V3.0.3 (HKLM-x32\...\PDF To Word Converter_is1) (Version:  - hxxp://www.PDFWordConverter.net)
PDF to X 7.0 (HKLM-x32\...\PDF to X_is1) (Version:  - TriSun Software Limited)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.2 - pdfforge)
PDFPasswordRemover 1.6.2 (HKLM-x32\...\PDFPasswordRemover_is1) (Version:  - PDFPasswordRemover)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.322.4 - Tracker Software Products Ltd)
PDFZilla V3.0.6 (HKLM-x32\...\PDFZilla_is1) (Version:  - PDFZilla, Inc.)
Perfect Hotkey version 1.32 (HKLM-x32\...\{4D9D70B0-31B9-4D04-A7E8-F6BA16FE51EC}_is1) (Version: 1.32 - YL Computing)
PerformanceTest v7.0 (HKLM-x32\...\PerformanceTest 7_is1) (Version: 7.0 - Passmark Software)
Personal Monitor 2014 (HKLM\...\{EF660923-D284-4F7A-A080-9D3E94814F71}_is1) (Version:  - Exeone)
Perspective Pilot Free 3.4.0 (HKLM\...\Perspective Pilot Free_is1) (Version: 3.4.0 - Two Pilots)
Pet Eye Fix Guide 2.2.4 (HKLM\...\Pet Eye Fix Guide_is1) (Version: 2.2.4 - Tint Guide)
Photo Background Remover 1.1 (HKLM-x32\...\Photo Background Remover_is1) (Version: 1.1 - SoftOrbits)
Photo BUZZER (64-Bit) (HKLM\...\EMOTION_PROJECTS_1_2_CDF5610E_is1) (Version: 1.14 - Franzis Verlag GmbH)
Photo Calendar Creator version 7.0 (HKLM-x32\...\{D03F6C43-F73C-44F7-AF54-1626BE90B410}_is1) (Version: 7.0 - AMS Software)
Photo Collage Maker 4.1.2 (HKLM-x32\...\{5BC0748C-22F5-4358-80F2-2CB990CC2917}_is1) (Version: 4.1.2 - PearlMountain Technology Co., Ltd)
Photo Naming Assistant (HKLM-x32\...\{E07ADFF1-AC73-45F5-B0CD-6D6351E04CEB}) (Version: 1.02.0001 - Bobolink Software)
Photo Stamp Remover 7.3 (HKLM-x32\...\Photo Stamp Remover_is1) (Version: 7.3 - SoftOrbits)
Photo to FlipBook (HKLM-x32\...\Photo to FlipBook_is1) (Version:  - Flippagemaker Solution)
Photo to Sketch Converter 2.0 (HKLM-x32\...\Photo to Sketch Converter_is1) (Version: 2.0 - SoftOrbits)
Photo Toolbox for Windows version 1.12.3.1 (HKLM\...\{A61AE368-B88C-414C-9118-503EECFC3AC8}_is1) (Version: 1.12.3.1 - LifeSniffer, Inc.)
PhotoMagic 1.0.0.0 (HKLM-x32\...\PhotoMagic_is1) (Version:  - )
Photomizer Retro (HKLM-x32\...\{41B5224D-7853-4EA5-0001-C8949A33B608}) (Version: 2.0.13.308 - Engelmann Media GmbH)
Photomizer Scan 2 (HKLM-x32\...\{CCE60D92-F3EC-4EF7-0001-C8949A33B608}) (Version: 2.0.13.704 - Engelmann Media GmbH)
Photopus 1.1 (HKLM-x32\...\Photopus_is1) (Version:  - )
PhotoScissors 4.0 (HKLM\...\{664FCCAE-8187-4EC5-B191-758C040C999C}_is1) (Version:  - teorex)
PhotoShow Deluxe 3 (HKLM-x32\...\PhotoShow Deluxe 3) (Version: 3.0 - Simple Star, Inc.)
PhotoStitcher 1.2 (HKLM-x32\...\{299EB32D-0525-4482-A8B5-1F30725AB6F1}_is1) (Version:  - Teorex)
PhotoStitcher 1.5 (HKLM\...\{299EB32D-0525-4482-A8B5-1F30725AB6F1}_is1) (Version:  - Teorex)
Phototheca 2.8.0.1972 (HKLM-x32\...\{B685A488-2894-465F-95C0-AE287DF86447}_is1) (Version: 2.8.0.1972 - Lunarship Software)
Photoupz 1.63 (HKLM-x32\...\Photoupz) (Version: 1.63 - EvenPixel Ltd)
PhraseExpander 4.1.0.0 (HKLM-x32\...\PhraseExpander_is1) (Version:  - Nagarsoft)
PicaJet FX 2.6.5.696 (HKLM-x32\...\PicaJet FX_is1) (Version: PicaJet FX 2.6.5.696 - PicaJet.Com)
Picture Collage Maker 4.1.2 (HKLM-x32\...\{D53599B0-AA76-4CC6-B9EF-CC2F27B56F24}_is1) (Version: 4.1.2 - PearlMountain Technology Co., Ltd)
Picture Collage Maker Pro 4.1.3 (HKLM-x32\...\{6D308A90-6C14-4A02-9B04-CB0EF17894A9}_is1) (Version: 4.1.3 - PearlMountain Technology Co., Ltd)
Picture Cutout Guide 3.2.10 (HKLM\...\Picture Cutout Guide_is1) (Version: 3.2.10 - Tint Guide)
Pinnacle Hollywood FX for Studio (HKLM-x32\...\Hollywood FX for Studio) (Version:  - )
Pixelplan - Flow Architect Studio 3D (HKLM-x32\...\Flow Architect Studio 3D) (Version:  - )
Pixillion Image Converter (HKLM-x32\...\Pixillion) (Version:  - NCH Software)
Pixo (HKLM-x32\...\{FAAEB46F-6BEE-409B-8983-264C21B9C415}) (Version: 3.5.6 - Bendigo Design)
Plagiarism Checker X (HKLM-x32\...\{B23E0CBF-D5F6-4682-99A0-A32C6FD93B5B}) (Version: 5.0.0 - Plagiarism Checker X, LLC) Hidden
Plagiarism Checker X (HKLM-x32\...\Plagiarism Checker X 5.0.0) (Version: 5.0.0 - Plagiarism Checker X, LLC)
PlayClaw 4 (HKLM-x32\...\PlayClaw 4_is1) (Version: 4 - )
PlaysTV (HKLM-x32\...\PlaysTV) (Version: 1.11.1-r113407-release - Plays.tv, LLC)
PomodoroApp 2.2 (HKLM-x32\...\PomodoroApp_is1) (Version: 2.2 - PomodoroApp)
PosterIt! (HKLM-x32\...\PosterIt!_is1) (Version:  - )
Power Time Tracker version 1.0.0 (HKLM-x32\...\{44DCFA45-F2E0-4B95-9377-5E226E02B58A}_is1) (Version: 1.0.0 - George Taylor)
PowerCHM 7.4 (HKLM-x32\...\PowerCHM_is1) (Version: 7.4 - Dawningsoft)
PowerCmd 2.2 (HKLM-x32\...\PowerCmd_is1) (Version: AppVerName - PowerCmd)
PowerKey (HKLM-x32\...\PowerKey) (Version: 2.11.0.3 - Elcor Software)
Presentation Assistant V2.4.3 (HKLM-x32\...\Presentation Assistant_is1) (Version:  - www.presentation-assistant.com)
Presentation Marker V2.2.5 (HKLM-x32\...\Presentation Marker_is1) (Version:  - www.presentation-assistant.com)
Presentation Screen Master V1.1.6 (HKLM-x32\...\Presentation Screen Master_is1) (Version:  - www.presentation-assistant.com)
PresentationTube Recorder 3.0 (HKLM-x32\...\{91F8441B-E7A7-4513-9D7C-080B643D2FD6}_is1) (Version: 3.0 - PresentationTube)
PrintableCal (HKLM-x32\...\{0F6AE757-F680-4DD3-8449-7ED9A6AE3363}) (Version: 1.6.4 - VueSoft LLC) Hidden
PrintableCal (HKLM-x32\...\{a5584919-fd52-49b5-859d-6c27583c7579}) (Version: 1.6.4 - VueSoft LLC)
Prio (HKLM\...\Prio) (Version: 2.0.0.2960 - )
Privacy Eraser (HKLM\...\{CB5AC03C-B8AD-980F-998E-51969A6DFC9F}_is1) (Version: 3.5.4.1132 - Cybertron Software Co., Ltd.)
Process Lasso (HKLM-x32\...\ProcessLasso) (Version: 9.0.0.426 - Bitsum)
Process Tamer 2.11.01 (HKLM-x32\...\Process Tamer_is1) (Version:  - )
proDAD ProDRENALIN 1.0 (64bit) (HKLM\...\proDAD-ProDRENALIN-1.0) (Version: 1.0.72.1 - proDAD GmbH)
Project Dogwaffle Howler version 8.2 (HKLM-x32\...\{0DA77807-8CC9-4026-A318-64B863E34BAA}_is1) (Version: 8.2 - Daniel Ritchie)
ProphecyMaster v1.1 (HKLM-x32\...\ProphecyMaster_is1) (Version: 1.1 - Luxand, Inc.)
Protected Folder (HKLM-x32\...\Protected Folder_is1) (Version:  - IObit)
PT Photo Editor 2.1.2 (HKLM\...\{5C65692A-A64B-4B54-8E1E-429A56979DB0}_is1) (Version: 2.1.2 - PHOTO-TOOLBOX.COM)
Puran Defrag 7.7 (HKLM\...\Puran Defrag_is1) (Version:  - Puran Software)
Quick Video Cutter  (HKLM-x32\...\Quick Video Cutter) (Version:  - Adoreshare, Inc.)
QuickTime for Windows (32-bit) (HKLM-x32\...\QuickTime32) (Version:  - )
QuizCreator (HKLM-x32\...\Wondershare QuizCreator (Build 4.5.1)_is1) (Version:  - Wondershare Software)
QuoteTracker (HKLM-x32\...\QuoteTracker_is1) (Version:  - T2 API Technologies, LLC)
RadioZilla 1.0 (HKLM-x32\...\{27957F25-AEA5-4639-8943-698199B18CBF}_is1) (Version:  - teorex)
Rankaware version 1.4 (HKLM-x32\...\{A2C8C41A-94C0-43C6-A8B2-5E3D9D7FA5E5}_is1) (Version: 1.4 - SharpNight Co,Ltd.)
RAPID (Studio 10) (HKLM-x32\...\{EEECE229-49F6-4851-A73A-99B058221F8C}) (Version: 3.00.0014 - Pinnacle Systems) Hidden
Raptr (HKLM-x32\...\Raptr) (Version: 5.2.6-r115593-release - Raptr, Inc)
RationalPlan Single (HKLM-x32\...\RationalPlan Single) (Version: 4.11.11 - Stand By Soft Ltd)
R-Drive Image 6.0 (HKLM-x32\...\R-Drive Image 6.0NSIS) (Version: 6.0.6007 - R-Tools Technology Inc.)
reaConverter 7 Standard (HKLM-x32\...\{659727C6-7267-4076-803B-351A467F6CAF}_is1) (Version: 7.1.51.0 - reaConverter LLC)
ReadPlease 2003/ReadPlease PLUS 2003 (HKLM-x32\...\ReadPlease 2003_is1) (Version: 2003.1.10 - ReadPlease Corporation)
Readygo Screen Recorder (HKLM\...\Readygo Screen Recorder) (Version: 1.0.0.8 - ReadygoSoft)
Real Chess (HKLM-x32\...\RealChess_is1) (Version: 1.0 - Media Contact LLC)
RealA2V 1.0 (HKLM-x32\...\{1ABF3A36-C233-4A1D-9C2D-22CFC3803D72}_is1) (Version: 1.0 - RealA2v)
RealDownloader (HKLM-x32\...\{13743594-F75E-491E-9EFF-203C8F8DF705}) (Version: 18.1.4.144 - RealNetworks) Hidden
RealDownloader (HKLM-x32\...\{f05bfa4b-0c78-4a3e-aa74-8c220b4a7782}) (Version: 18.1.4.144 - RealNetworks) Hidden
RealDownloader (HKLM-x32\...\{FB20AA56-F683-463A-8812-90A3507E96F9}) (Version: 18.1.0.1233 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (HKLM-x32\...\{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}) (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (HKLM\...\{21E47F47-C9A7-4454-BA48-388327B0EA00}) (Version: 10.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (HKLM-x32\...\{AAECF7BA-E83B-4A10-87EA-DE0B333F8734}) (Version: 10.0 - RealNetworks, Inc) Hidden
RealUpgrade 1.1 (HKLM-x32\...\{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}) (Version: 1.1.0 - RealNetworks, Inc.) Hidden
RealWorld Cursor Editor (HKLM-x32\...\{25A344BB-378D-4E51-9A39-780755012B2D}) (Version: 13.1.0 - RealWorld Graphics)
RecordMax Burning Studio 6.0.1 (HKLM-x32\...\RecordMax Burning Studio_is1) (Version:  - NITBits Co., Ltd.)
Recover Passwords (HKLM-x32\...\Recover Passwords_is1) (Version: 1.0.0.19 - Recover Passwords)
Reminder Commander 4.04 (HKLM-x32\...\Reminder Commander_is1) (Version:  - Abaiko Software)
Remove Logo Now! 1.2 (HKLM-x32\...\Remove Logo Now!_is1) (Version: 1.2 - SoftOrbits)
Retouch Pilot Free 3.5.3 (HKLM\...\Retouch Pilot Free_is1) (Version: 3.5.3 - Two Pilots)
Revo Uninstaller Pro 3.2.0 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.2.0 - VS Revo Group, Ltd.)
RidNacs 2.0.3 (HKLM-x32\...\RidNacs_is1) (Version:  - Stephan Plath)
RightNote 3.4.1.2 (HKLM-x32\...\RightNote_is1) (Version:  - BauerApps)
Rio Internet Update (HKLM-x32\...\{493F2531-C2E5-4B73-8B11-66E9CFDA9AFA}) (Version: 2.90 - Rio Audio)
Rio Music Manager (HKLM-x32\...\{282EF7E3-AE54-48AE-A11D-27F512F23AB3}) (Version: 2.90 - Rio Audio)
RoboFolder 1.2.0.72 (HKLM-x32\...\RoboFolder_is1) (Version: RoboFolder 1.2.0.72 - PicaJet.Com)
RoboForm 7-9-15-8 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-9-15-8 - Siber Systems)
RoboTask (HKLM-x32\...\{BC45995A-7451-430C-9779-5FF455E710D9}_is1) (Version: 4.4 - NeoWise Software)
RogueKiller version 12.12.7.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.12.7.0 - Adlice Software)
RonyaSoft CD DVD Label Maker 3.01 (HKLM-x32\...\RonyaSoft CD DVD Label Maker) (Version: 3.01 - RonyaSoft)
RonyaSoft Poster Designer (Poster Forge) 2.02 (HKLM-x32\...\RonyaSoft Poster Designer (Poster Forge)) (Version: 2.02 - RonyaSoft)
RonyaSoft Poster Designer 2.03 (HKLM-x32\...\RonyaSoft Poster Designer) (Version: 2.03 - RonyaSoft)
Roxio DLA (HKLM\...\{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}) (Version: 5.2.0 - Roxio)
Roxio Express Labeler (HKLM-x32\...\{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}) (Version: 2.1.0 - Roxio)
Roxio RecordNow Audio (HKLM-x32\...\{AB708C9B-97C8-4AC9-899B-DBF226AC9382}) (Version: 2.0.4 - Roxio)
Roxio RecordNow Copy (HKLM-x32\...\{B12665F4-4E93-4AB4-B7FC-37053B524629}) (Version: 2.0.4 - Roxio)
Roxio RecordNow Data (HKLM-x32\...\{075473F5-846A-448B-BCB3-104AA1760205}) (Version: 2.0.4 - Roxio)
RSS Wizard (HKLM-x32\...\{B342ACAF-2A8A-4CF0-87FE-7E130A9B1197}_is1) (Version:  - Extralabs Software)
Safari (HKLM-x32\...\{F2AF3E5D-9697-485C-A5AC-E2B9468C446A}) (Version: 5.34.52.7 - Apple Inc.)
Scadarlia version 1.1.2 (HKLM-x32\...\{AAC7A336-EC23-4829-865A-EAE041171023}_is1) (Version: 1.1.2 - Kalidor WEB, Ltd.)
Scan2Encrypt 2 (HKLM-x32\...\{07092199-993B-4D17-B72F-532B59C1658F}) (Version: 21.14.13 - BinaryNow, Inc.)
Scanitto Pro (HKLM-x32\...\{FC9FED7B-11C5-4BAA-AAF0-395AD111EE92}_is1) (Version: 2.8.17.201 - Masters ITC Software)
ScanMyReg 2.2 (HKLM-x32\...\{FC274982-5AAD-4C20-848D-A9D60D18D757}_is1) (Version:  - YL Computing, Inc)
ScanPapyrus (HKLM-x32\...\{D243A198-99BB-42A0-828E-98AE3F01D215}_is1) (Version: 15.7 - BlackParrot Software)
ScanSoft OmniPage 15.0 (HKLM-x32\...\{0B7DDCD3-D6D8-4366-A6D8-9B6495A2925E}) (Version: 15.00.0001 - ScanSoft, Inc.)
Screen Beagle Pro (HKLM-x32\...\Screen Beagle Pro 1.72_is1) (Version:  - )
Screen Capturer Recorder uninstall (HKLM-x32\...\Screen Capturer Recorder_is1) (Version:  - )
Screen Recording Suite V2.4.8 (HKLM-x32\...\{EB9F3F92-4857-4121-AA6F-1C424AC6C266}_is1) (Version: 2.4.8 - Apowersoft)
ScreenBackTracker registered to GiveAwayOfTheDay version 1.0.1.91 (HKLM-x32\...\{D62C8411-1C35-44EA-A45D-01A32EEC724C}_is1) (Version: 1.0.1.91 - PCWinSoft Software)
ScreenCamera registered to GiveAwayOfTheDay version 3.1.1.41 (HKLM-x32\...\{D47A18EF-38BC-4951-A344-9800D3BF4D53}_is1) (Version: 3.1.1.41 - PCWinSoft Software)
ScreenStep Maker (HKLM-x32\...\ScreenStep Maker_is1) (Version:  - PDF-To-Flash-Converter Solution)
Sendspace Wizard (HKLM-x32\...\{1636273D-F29B-4E1F-8E83-2DD0536C3C3A}) (Version: 1.6.3.0 - sendspace.com)
Session Planner Pro GOTD Edition (HKLM-x32\...\{538D2196-D0B4-5B32-409C-4716F9BCE1A8}) (Version: 1.00.15 - Limitless OU) Hidden
Session Planner Pro GOTD Edition (HKLM-x32\...\com.limitlessprojects.sessionplannerprogotd) (Version: 1.00.15 - Limitless OU)
SFR (HKLM-x32\...\{DB02F716-6275-42E9-B8D2-83BA2BF5100B}) (Version: 6.02.0001.0001 - Eastman Kodak Company) Hidden
SGsoft WordPad Version 1.0.1 (HKLM-x32\...\SGsoft WordPad_is1) (Version:  - SGsoft Canada)
Shadow Defender (HKLM\...\{93A07A0D-454E-43d1-86A9-5DE9C5F4411A}) (Version: 1.4.0.589 - ShadowDefender.com)
SharewareOnSale Notifier (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\SharewareOnSale Notifier) (Version: 20 - SharewareOnSale)
SharkIndicators BloodHound (HKLM-x32\...\Installer 1.205.5189.27981) (Version: 1.205.5189.27981 - SharkIndicators)
SharpDevelop 5.1 (HKLM-x32\...\{0C19BC81-7C9B-443F-8AEA-B89DC30EDCE4}) (Version: 5.1.5216 - ic#code)
SHASTA (HKLM-x32\...\{605A4E39-613C-4A12-B56F-DEFBE6757237}) (Version: 6.02.0001.0001 - EASTMAN KODAK Company) Hidden
Silver Key Standard Edition (HKLM-x32\...\{081617FD-3462-4906-B3C9-50F5CB88716A}) (Version: 4.3 - Inv Softworks)
SILVER projects premium (64-Bit) (HKLM\...\SILVER_PROJECTS_1_2_28B15F1D_is1) (Version: 1.14 - Franzis Verlag GmbH)
Simple Photo Editor 1.3 (HKLM-x32\...\Simple Photo Editor_is1) (Version: 1.3 - SoftOrbits)
Simply Good Pictures 2 (HKLM-x32\...\{DD2FEA6F-5AC2-46B2-0001-C2A0C077FD2C}) (Version: 2.0.12.1210 - Engelmann Media GmbH)
Simply Good Pictures 3 Free (HKLM-x32\...\{21e0f7f8-3db3-4ba3-b2d2-bb08738679a4}) (Version: 3.0.5256.28661 - Engelmann Media GmbH)
Simply Good Pictures 3 Free (HKLM-x32\...\{F65EBED8-6A2A-43FA-B0AC-B70E4DEF10F5}) (Version: 3.0.5256.28637 - Engelmann Media GmbH) Hidden
Simply Good Pictures 4 Free (HKLM\...\{02CDA37C-E26A-4301-B4FD-0647086EFFFC}) (Version: 4.0.5956.22030 - Engelmann Media GmbH) Hidden
Simply Good Pictures 4 Free (HKLM-x32\...\{41beccfc-71a7-4aba-8a48-3329bb75b549}) (Version: 4.0.5956.22106 - Engelmann Media GmbH)
SimplyGoodPictures (HKLM-x32\...\{29205904-A7A8-4545-0001-697935602C90}) (Version: 1.0.12.426 - Engelmann Media GmbH)
Simpo PDF to PowerPoint (HKLM-x32\...\Simpo PDF to PowerPoint_is1) (Version:  - Simpo Technologies)
SiSoftware Sandra Lite XII.SP1 (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2096}_is1) (Version: 13.12.2008.1 - SiSoftware)
Site Visualizer Professional 1.5.10 (HKLM-x32\...\Site Visualizer Professional_is1) (Version: 1.5.10 - Elphsoft)
SIW Pro Edition (GOTD) (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2015.01.08 - Topala Software Solutions)
Sketch Drawer 5.1 (HKLM-x32\...\Sketch Drawer_is1) (Version: 5.1 - SoftOrbits)
SKIN0001 (HKLM-x32\...\{FDF9943A-3D5C-46B3-9679-586BD237DDEE}) (Version: 6.02.1001.0001 - EASTMAN KODAK Company) Hidden
SKINXSDK (HKLM-x32\...\{F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}) (Version: 6.02.1001.0001 - EASTMAN KODAK Company) Hidden
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.104 - Skype Technologies S.A.)
Smart CD Catalog Pro 3.08 (HKLM-x32\...\Smart CD Catalog Professional_is1) (Version:  - Abaiko Software)
Smart Diary Suite 4 (HKLM-x32\...\{4E0B21EE-F414-412A-B916-19CBDEA5EF64}_is1) (Version:  - Programming Sunrise)
SmartAudioEditor v6.0.1 (HKLM-x32\...\Smart Audio Editor_is1) (Version:  - SmartAudio Soft Co., Ltd.)
SmartPixel (HKLM-x32\...\SmartPixel) (Version: 3.2.0.0 - Beyond Magic Limited)
SmartRead (HKLM-x32\...\{B342025C-B2F7-4ADC-8F8B-1FFC45DB67CD}) (Version: 0.80.08.0331 - SmartySoft Studio)
SmartSHOW 2.15 (HKLM-x32\...\{400EBE76-B6D2-4977-B4C9-18BB60112654}_is1) (Version:  - AMS Software)
SmartSleep 3.62 (HKLM-x32\...\SmartSleep_is1) (Version:  - Dextronet)
SmartSound Quicktracks Plugin (HKLM-x32\...\{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}) (Version: 3.0.2.7 - SmartSound Software Inc) Hidden
SmartSound Quicktracks Plugin (HKLM-x32\...\InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}) (Version: 3.0.2.7 - SmartSound Software Inc)
Smarty Uninstaller Pro (HKLM-x32\...\{C20A5184-E994-4CF4-A388-30236A94AD41}_is1) (Version: 3.0.1 - WINner Tweak Software)
SnowFox Photo Collage Maker 1.1.0.0 (HKLM-x32\...\SnowFox Photo Collage Maker_is1) (Version:  - )
SnowFox Total Video Converter 2.8.1.1 (HKLM-x32\...\SnowFox Total Video Converter_is1) (Version:  - )
Soft Organizer version 3.51 (HKLM-x32\...\Soft Organizer_is1) (Version: 3.51 - ChemTable Software)
Softdiv PDF to Image Converter 1.1 (HKLM-x32\...\Softdiv PDF to Image Converter_is1) (Version:  - )
SoftMaker Office Standard 2012 (HKLM-x32\...\{8EBB8452-274B-465D-8324-00B0832FBB02}) (Version: 12.0.3513 - SoftMaker Software GmbH)
SoftOrbits Flash Drive Recovery 2.0 (HKLM-x32\...\SoftOrbits Flash Drive Recovery_is1) (Version: 2.0 - SoftOrbits)
SoftOrbits Photo Editor 3.2 (HKLM-x32\...\SoftOrbits Photo Editor_is1) (Version: 3.2 - SoftOrbits)
SoftOrbits Photo Retoucher 2.0 (HKLM-x32\...\SoftOrbits Photo Retoucher_is1) (Version: 2.0 - SoftOrbits)
SoftSkin Photo Makeup 2.3 (HKLM-x32\...\SoftSkin Photo Makeup_is1) (Version: 2.3 - SoftOrbits)
Solar System - Earth 3D Screensaver v1.9.05 (HKLM-x32\...\Solar System - Earth 3D Screensaver_is1) (Version:  - Rixane Interactive)
Solar System - Mars 3D Screensaver v1.7.02 (HKLM-x32\...\Solar System - Mars 3D Screensaver_is1) (Version:  - Rixane Interactive)
SolveigMM Video Splitter Home Edition (HKLM-x32\...\SolveigMM Video Splitter Home Edition 4.0.1502.19) (Version: 4.0.1502.19 - Solveig Multimedia)
Song Surgeon Trainer 1.0.0.5 (HKLM-x32\...\{03853A8E-10F5-517D-1010-4D69C7C5VD1Z}_is1) (Version:  - Todd, Michael & James, Inc.)
Sonic Foundry ACID 4.0e (HKLM-x32\...\{9B7DE025-A6AF-446B-86BE-3BD9604B498A}) (Version: 4.0.408 - Sonic Foundry)
Sonic Update Manager (HKLM-x32\...\{30465B6C-B53F-49A1-9EBA-A3F187AD502E}) (Version: 3.0.0 - Sonic Solutions)
Sony Sound Forge 7.0 (HKLM-x32\...\{0712667C-A171-49AE-A098-4ACDA28625F8}) (Version: 7.0.214 - Sony)
Sothink Flash Menu (HKLM-x32\...\{06620764-D772-496C-B75E-28C06CB8F89D}_is1) (Version: 1.2 - SourceTec Software Co., LTD)
Sothink Logo Maker Special (HKLM-x32\...\{E97A8C79-C035-4964-9DF5-B7B6D243A18C}_is1) (Version: 3.5 - SourceTec Software Co., LTD)
Sothink SWF Catcher Special (HKLM-x32\...\{7FA2E0C1-0B07-4829-87BE-CB371165162D}_is1) (Version: 2.6 - SourceTec Software Co., LTD)
Sound Editor Deluxe v6.0.1 (HKLM-x32\...\Sound Editor Deluxe_is1) (Version:  - SEDSoftwareeluxe Development Inc.)
Sound Editor Pro v7.5.1 (HKLM-x32\...\Sound Editor Pro_is1) (Version:  - NCMediaSoft Co., Ltd.)
SoundFrost (HKLM-x32\...\SoundFrost_is1) (Version: 3.8.2.0 - SoundFrost Company)
SoundTrax (HKLM-x32\...\{3097B151-1F61-4211-A4CC-D70127B226AE}) (Version: 4.0.18.0 - Nero AG) Hidden
Spartan (HKLM-x32\...\Spartan) (Version:  - )
Speakonia (HKLM-x32\...\Speakonia_is1) (Version: 1.0.3.5 - CFS-Technologies)
Speccy (HKLM\...\Speccy) (Version: 1.31 - Piriform)
Speed MP3 Downloader (HKLM-x32\...\SpeedMP3Downloader) (Version: 2.2.5.6 - )
SpringPublisher (HKLM-x32\...\{39AD1D17-7D06-499E-BC78-F54D4DB93D22}) (Version: 2.5.5 - SpringPublisher Team)
Stanza (HKLM-x32\...\Stanza) (Version:  - )
StarBurn Version 14.1 (Build 0x20130128) (HKLM-x32\...\StarBurn_is1) (Version: 14.1 - StarBurn Software)
StarReminder, SharewareOnSale.com Special Edition (HKLM-x32\...\StarReminder_is1) (Version: 4.22.06 (Build:14 May 2017) - StarMessage Software)
Start Menu 10 version 5.55 (HKLM\...\{19E4D194-A672-4564-94EC-65C5A725026D}_is1) (Version: 5.55 - OrdinarySoft)
Start Menu X version 4.01 (HKLM-x32\...\{3E494002-985C-4908-B72C-5B4DD15BE090}_is1) (Version: 4.01 - OrdinarySoft)
Start Menu X version 5.46 (HKLM\...\{3E494002-985C-4908-B72C-5B4DD15BE090}_is1) (Version: 5.46 - OrdinarySoft)
STARTUP COP!LOT (HKLM-x32\...\STARTUP COP!LOT_is1) (Version: 3.01 - STARTUP COP!LOT)
StartupStar (HKLM-x32\...\{C8A6121E-BE35-418D-91EF-A9536DA70B36}_is1) (Version: 6.3 - Abelssoft)
staticcr (HKLM-x32\...\{8943CE61-53BD-475E-90E1-A580869E98A2}) (Version: 5.03.0000.0001 - EASTMAN KODAK Company) Hidden
StatWin (HKLM-x32\...\StatWin Professional_is1) (Version: 8.4 - SXR Software)
Steganos Privacy Suite 15 (HKLM-x32\...\{704C8372-B1C3-4A76-AA5C-B91021B1DCFA}) (Version: 15.2.4 - Steganos Software GmbH)
Stellar Phoenix CD DVD Data Recovery (HKLM-x32\...\Stellar Phoenix CD DVD Data Recovery_is1) (Version: 4.1.0.0 - Stellar Information Systems Ltd)
SterJo Portable Firewall PRO (HKLM-x32\...\{1C29833F-E9F1-4A71-B1DC-7E4D143E5477}_is1) (Version: 2.8 - SterJo Software)
Sticky Password 8.0.4.34 (HKLM-x32\...\Sticky Password_is1) (Version: 8.0 - Lamantine Software)
Streaming Audio Recorder V3.3.1 (HKLM-x32\...\{B6D9D06B-4B4D-4B41-B963-C056B627F704}_is1) (Version: 3.3.1 - Apowersoft)
StudyX version 5.5 (HKLM-x32\...\StudyX_is1) (Version: 5.5 - Jeff Computers)
StudyX version 5.9.5 (HKLM\...\StudyX_is1) (Version: 5.9.5 - Jeff Computers)
Style Windows (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\f00f1920b400237f) (Version: 2.2.0.4 - Hunter in the Woods)
SuperEasy Photo Booster v.1.1.3056 (HKLM-x32\...\{039BC111-1600-6CEF-A8E5-198B376ED64D}_is1) (Version: 1.1.3056 - SuperEasy Software GmbH & Co. KG)
SuperEasy Video Booster v.1.1.3056 (HKLM-x32\...\{039BC111-ED4E-CCDF-634D-AF330C24ACB8}_is1) (Version: 1.1.3056 - SuperEasy Software GmbH & Co. KG)
SuperEasy Video Converter 2 v.2.1.3063 (HKLM-x32\...\{039BC111-5D42-BD22-5D57-C7073E40209A}_is1) (Version: 2.1.3063 - SuperEasy Software GmbH & Co. KG)
SuperEZ Wave Editor Pro v12.2.6 (HKLM-x32\...\SuperEZ Wave Editor Pro_is1) (Version:  - SuperEZMedia Development Inc.)
SuperEZ Wave Editor v12.2.1 (HKLM-x32\...\SuperEZ Wave Editor_is1) (Version:  - SuperEZMedia Development Inc.)
SWF & FLV Player 3.0 (build 3.0.33.5106) (HKLM-x32\...\SWF & FLV Player_is1) (Version: 3.0.33.5106 - Eltima Software)
SWF Opener (HKLM-x32\...\SWF Opener) (Version:  - )
Switch Sound File Converter (HKLM-x32\...\Switch) (Version:  - NCH Software)
SyncBackSE (HKLM-x32\...\SyncBackSE_is1) (Version: 6.4.3.8 - 2BrightSparks)
Synei System Utilities (HKLM-x32\...\{BFDC3B26-7DB0-43D3-BC84-7E9649C157EA}_is1) (Version: 2.10 - Synei)
Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version:  - )
Synology Data Replicator  3 (HKLM-x32\...\{8E310838-457C-4269-B177-3EFB300CBDDC}) (Version: 1.0.0.0 - Synology Inc.)
SysResources Manager (HKLM-x32\...\SysResources Manager11.1) (Version: 11.1 - Fotis)
System Scheduler 4.23 (HKLM-x32\...\Windows Scheduler_is1) (Version:  - Splinterware Software Solutions)
SyvirSen (HKLM-x32\...\ST6UNST #1) (Version:  - )
Tabbles (HKLM-x32\...\{1d37f30f-bc3c-44db-aafd-c8d9a3e349ba}) (Version: 4.0.10 - Yellow Blue Soft)
Tabbles (HKLM-x32\...\{577160A2-B171-48D9-9445-BD179CDC9392}) (Version: 4.0.10 - Yellow Blue Soft) Hidden
TagJet 2.1 (HKLM-x32\...\TagJet) (Version:  - )
TagTuner 2.0 (HKLM-x32\...\TagTuner_is1) (Version:  - TagTuner.com)
Talking Clipboard 2.9.1.0 (HKLM-x32\...\Talking Clipboard) (Version: 2.9.1.0 - Talking Clipboard, Inc.)
Task Coach 1.3.36 (HKLM-x32\...\Task Coach_is1) (Version:  - Frank Niessink, Jerome Laheurte, and Aaron Wolf)
TaskmgrPro V1.4.5 (HKLM\...\TaskmgrPro_is1) (Version:  - GoldGingko Software)
TDMore DVD Copy 1.0.1.1 (20/03/2015) (HKLM-x32\...\TDMore DVD Copy_is1) (Version:  - TDMore Technology Limited)
TDMore Free DVD Copy 1.0.1.1 (19/03/2015) (HKLM-x32\...\TDMore Free DVD Copy_is1) (Version:  - TDMore Technology Limited)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.93231 - TeamViewer)
Teleport Pro (HKLM-x32\...\Teleport Pro) (Version: 1.72 - Tennyson Maxwell Information Systems, Inc.)
Text Paster v1.8 (Giveaway of the Day) (HKLM-x32\...\Text Paster_is1) (Version: 1.8.0.160 - ATNSOFT)
The Archivist (HKLM-x32\...\{0001BB5B-D46E-4F6F-875C-B4DF1E3ACA4A}_is1) (Version: 4.3 - WiseOwlTech)
The Cleaner 2012 (HKLM-x32\...\The Cleaner_is1) (Version:  - MooSoft Development LLC)
TheBrain 8 (HKLM-x32\...\1190-3857-8766-9166) (Version: 8.0.1.7 - TheBrain Technologies)
thinkorswim (HKLM\...\9968-4488-2169-7623) (Version: desktop - thinkorswim, Inc)
thinkorswim (HKLM\...\9968-4488-2169-7623-1) (Version: desktop - thinkorswim, Inc)
This version is for only GOTD Promotion. version 2.4.0 (HKLM-x32\...\This version is for only GOTD Promotion._is1) (Version: 2.4.0 - Dajia Chu)
Throttle (HKLM-x32\...\Throttle_is1) (Version: 8.8.31.2015 - PGWARE LLC)
ThunderSoft Flash Gallery Creator (1.0.2.2) (HKLM-x32\...\ThunderSoft Flash Gallery Creator_is1) (Version:  - )
ThunderSoft Flash to Video Converter (1.1.5.1) (HKLM-x32\...\ThunderSoft Flash to Video Converter_is1) (Version:  - )
ThunderSoft Slideshow Factory (3.5.1.0) (HKLM-x32\...\ThunderSoft Slideshow Factory_is1) (Version: 3.5.1.0 - ThunderSoft)
ThunderSoft Video to GIF Converter (1.4.3.0) (HKLM-x32\...\ThunderSoft Video to GIF Converter_is1) (Version: 1.4.3.0 - ThunderSoft)
TIDAL (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\TIDAL) (Version: 2.1.14 - TIDAL Music AS)
Tidy Start Menu (HKLM-x32\...\Tidy Start Menu) (Version:  - )
TightProjector 2.1.3 (HKLM-x32\...\TightProjector_is1) (Version: 2.1.3 - TightProjector software)
TightVNC 1.3.9 (HKLM-x32\...\TightVNC_is1) (Version: 1.3.9 - TightVNC Group)
TimeBell (HKLM-x32\...\TimeBell) (Version:  - )
Tipard Blu-ray Converter 6.3.60 (HKLM-x32\...\{8B944923-1082-4830-85FC-D1430A63801C}_is1) (Version: 6.3.60 - Tipard Studio)
Tipard Blu-ray to MP4 Ripper 7.2.6 (HKLM-x32\...\{18009670-D50D-49e9-9098-F82FD2CFF915}_is1) (Version: 7.2.6 - Tipard Studio)
Tipard DVD Cloner 6 6.2.18 (HKLM-x32\...\{20835774-7DDC-4f70-90A3-36BD31E556C1}_is1) (Version: 6.2.18 - Tipard Studio)
Tipard DVD Ripper 6.1.20 (HKLM-x32\...\{CB31166F-62E4-4172-8186-16E539B1096B}_is1) (Version:  - )
Tipard DVD Ripper Platinum 6.2.20 (HKLM-x32\...\{C145A9AD-BD43-4255-B5F9-2803289C2F96}_is1) (Version: 6.2.20 - Tipard Studio)
Tipard DVD to MP4 Converter 7.1.52 (HKLM-x32\...\{C782478F-CEF3-4a53-9078-92DB75C1665B}_is1) (Version: 7.1.52 - Tipard Studio)
Tipard Mod Converter 6.1.16 (HKLM-x32\...\Tipard Mod Converter_is1) (Version:  - )
Tipard MP4 Video Converter 7.1.50 (HKLM-x32\...\{318CBD5F-D20F-463d-A1DB-CD040AE1E645}_is1) (Version: 7.1.50 - Tipard Studio)
Tipard Video Converter 6.1.18 (HKLM-x32\...\{4843A9B1-335C-4a13-8CFC-9B986AEBE1E2}_is1) (Version:  - )
Tipard Video Converter Platinum 6.2.16 (HKLM-x32\...\{F4A43B47-0518-4a39-B377-15DC62076AC0}_is1) (Version: 6.2.16 - Tipard Studio)
Tipard Video Enhancer 9.2.12 (HKLM-x32\...\{718FB78B-3AAF-46d6-B2E6-F9FB07B51A7D}_is1) (Version: 9.2.12 - Tipard Studio)
TNR Utilities version 1.0.0 (HKLM-x32\...\{DC3E4435-0D12-4D95-AB39-B7C77253AA05}_is1) (Version: 1.0.0 - TNR Technologies)
tooltips (HKLM-x32\...\{E79987F0-0E34-42CC-B8FF-6C860AEEB26A}) (Version: 6.02.0001.0001 - EASTMAN KODAK Company) Hidden
Top Any Video Converter version 3.2 (HKLM-x32\...\Top Any Video Converter_is1) (Version: 3.2 - Top Studio)
Torrent Episode Downloader (HKLM-x32\...\Torrent Episode Downloader 0.9715) (Version: 0.9715 - Roel and Joost)
Total Uninstall 5.10.1 (HKLM-x32\...\Total Uninstall 5_is1) (Version: 5.10.1 - Gavrila Martau)
Total Uninstall 6.2.0 (HKLM\...\Total Uninstall 6_is1) (Version: 6.2.0 - Gavrila Martau)
TotalAudioConverter (HKLM-x32\...\Total Audio Converter_is1) (Version:  - Softplicity, Inc.)
TotalImageConverter (HKLM-x32\...\Total Image Converter_is1) (Version: 2.5 - Softplicity, Inc.)
TransActAT (HKLM-x32\...\BB29F88B-A742-4E2C-B0F3-FFEC11E1BA06) (Version: 5.6.7.10 - TransAct Futures LLC)
Tree Notes 2.53 (HKLM-x32\...\Tree Notes_is1) (Version: 2.53 - Jiri Novotny, Dextronet)
TreePad Lite 4.3 (HKLM-x32\...\TreePadLite4) (Version:  - )
TreePad PLUS 7.5.3 (HKLM-x32\...\TreePadPLUS) (Version:  - )
TreeSize Free V3.3.2 (HKLM-x32\...\TreeSize Free_is1) (Version: 3.3.2 - JAM Software)
True Launch Bar (Giveaway of the Day) (HKLM-x32\...\{FC712CA0-A945-11d4-A594-956F6349FC18}) (Version: 5.2.0.0 - Tordex)
True Time Tracker (HKLM-x32\...\{1A414CE4-CE57-4718-A4E0-B2C33DC4D620}_is1) (Version:  - ExtraSpy Software)
TuneFab M4V Converter for PC version 1.0.1 (HKLM-x32\...\{1841EDEA-A666-499E-BC56-649C8AE7F7B4}_is1) (Version: 1.0.1 - TuneFab, Inc.)
TuneMobie Apple Music Converter version 2.2.7 (HKLM-x32\...\{750b5483-82c0-40cd-8ee5-71f5e7ec171c}_is1) (Version: 2.2.7 - TuneMobie, Inc.)
TunesKit for Windows 2.8.5.115 (HKLM-x32\...\TunesKit for Windows_is1) (Version:  - TunesKit, Inc.)
TuneUpMedic (HKLM-x32\...\TuneUpMedic) (Version:  - TuneUpMedic)
Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 1.6.0 - Tweaking.com)
Tweaking.com - Windows Repair (All in One) (HKLM-x32\...\Tweaking.com - Windows Repair (All in One)) (Version: 2.1.0 - Tweaking.com)
Tweaking.com - Windows Repair (HKLM-x32\...\Tweaking.com - Windows Repair) (Version: 4.0.14 - Tweaking.com)
Tweeten (HKLM\...\{35BC7F0D-DCF9-46CB-B547-020D3A6D8837}_is1) (Version: 3.2.0 - Tweeten, Inc.)
TwistedBrush Pro Studio (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\TwistedBrush Pro Studio) (Version:  - )
tZirr (HKLM-x32\...\{F1A23BC3-83CC-41E7-8CD9-E67B8238639B}) (Version: 1.0.0 - Nascor Technologies Private Limited)
UAC Trust Shortcut 1.0 (HKLM\...\{4C4A1499-1381-4174-9DB5-F6DE9249D23E}) (Version: 1.0.1 - ITknowledge24.com)
UBitMenu UK (HKLM-x32\...\{C8748FFB-1713-4e95-B3DF-4F1622D96F93}_is1) (Version: 01.04 - UBit Schweiz AG)
UK's Kalender 2.4.3 (HKLM-x32\...\UK's Kalender_is1) (Version:  - Ulrich Krebs)
Ultima Steganography 1.6 (HKLM-x32\...\Ultima Steganography_is1) (Version:  - )
Ultra Resizer (HKLM-x32\...\Ultra Resizer) (Version:  - )
UltraISO Premium V9.53 (HKLM-x32\...\UltraISO_is1) (Version:  - )
uMark 3 (HKLM-x32\...\{8D54F874-E16C-4785-84E9-36209269FBB3}) (Version: 3.12 - Uconomix)
UmmyVideoDownloader 1.4.0.3 (HKLM-x32\...\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1) (Version:  - ) <==== ATTENTION
Unchecky v1.1 (HKLM-x32\...\Unchecky) (Version: 1.1 - Reason Software Company Inc.)
UnHackMe 7.76 release (HKLM-x32\...\UnHackMe_is1) (Version:  - Greatis Software, LLC.)
UnHackMe GE 9.50 release (HKLM-x32\...\UnHackMe Giveaway Edition_is1) (Version:  - Greatis Software, LLC.)
Unknown File Handler (HKLM-x32\...\UFH_is1) (Version: 2015.12.29.0 - File.org)
Unlimited Filters 1.2.2 (HKLM\...\{8B775809-D58C-4351-ACBF-4ED5231514FA}_is1) (Version: 1.2.2 - Picture Instruments)
UpdateMyDrivers (HKLM-x32\...\{CD104A82-D92A-484B-90F9-4CA044315DEC}) (Version: 7.0.0.169 - SmartTweak Software) Hidden
UpdateService (HKLM-x32\...\{E3AE96D6-E196-45B4-AF62-2B41998B9E37}) (Version: 1.0.0 - RealNetworks, Inc.) Hidden
uRex DVD Ripper Platinum (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\uRexDVDRipperPlatinum) (Version:  - uRexsoft, Inc. All Rights Reserved.)
uRex Video Converter Platinum (HKLM-x32\...\uRexVideoConverter) (Version:  - uRexsoft, Inc. All Rights Reserved.)
uRex Videomark Platinum (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\uRexWatermarkPlatinum) (Version:  - uRexSoft, Inc. All Rights Reserved.)
USB Safely Remove 5.2 (HKLM-x32\...\USB Safely Remove_is1) (Version:  - SafelyRemove.com)
USB-Ethernet Adapter Device (HKLM\...\USB-Ethernet Adapter Device) (Version:  - )
VC80CRTRedist - 8.0.50727.6195 (HKLM-x32\...\{933B4015-4618-4716-A828-5289FC03165F}) (Version: 1.2.0 - DivX, Inc) Hidden
VDownloader 4.1.1463 (HKLM\...\{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1) (Version:  - Vitzo Limited)
Ventrilo Client (HKLM-x32\...\{789289CA-F73A-4A16-A331-54D498CE069F}) (Version: 3.0.1 - Flagship Industries, Inc.)
Ventrilo Client for Windows x64 (HKLM\...\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}) (Version: 3.0.8.0 - Flagship Industries, Inc.)
Verbose Text to Speech (HKLM-x32\...\Verbose) (Version:  - NCH Software)
Vibosoft PDF Password Remover (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Vibosoft PDF Password Remover) (Version: 2.1.10 - Vibosoft)
Video Booth (HKLM-x32\...\VideoBooth) (Version: 2.3.2.6 - )
Video Downloader (HKLM-x32\...\{8B6202FD-3790-4DD4-B343-51736F7FF4E5}) (Version: 1.2.0 - RealNetworks) Hidden
Video Magic Ultimate 6.1.1.0 (HKLM-x32\...\Video Magic Ultimate_is1) (Version:  - BlazeVideo)
Video Rotator V1.0.9 (HKLM-x32\...\{EC0FD3E2-A241-4D37-BF16-7815EC1E7A29}_is1) (Version:  - VideoRotator.com)
Video to Exe Converter registered to GiveAwayOfTheDay version 1.0.0.31 (HKLM-x32\...\{86695B09-B0BC-4504-BCF6-4CA943C4EEFE}_is1) (Version: 1.0.0.31 - PCWinSoft Software)
Video to GIF 5.3 (HKLM-x32\...\Video to GIF) (Version: 5.3 - AoaoPhoto Digital Studio.)
Video to Picture (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\VideoToPicture) (Version:  - Watermark Software. All Rights Reserved.)
Video to Picture version 5.0 (HKLM-x32\...\{3CE42A9D-F659-4FF0-87EB-A14699AB2D1C}_is1) (Version: 5.0 - watermark-software.com)
Video Watermark Maker 1.4 (HKLM-x32\...\Video Watermark Maker_is1) (Version: 1.4 - SoftOrbits)
Video Watermark Pro (HKLM-x32\...\VideoWatermarkPro) (Version:  - WonderFox Soft, Inc. All Rights Reserved.)
Video Watermark Pro (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\VideoWatermarkPro) (Version:  - WonderFox Soft, Inc. All Rights Reserved.)
VideoCompressor (HKLM-x32\...\VideoCompressor_is1) (Version: 1.1 - Abelssoft)
VideoFlick 1.0 (HKLM-x32\...\{878E1DB1-0C8F-4ffb-8C51-A2B10368F433}_is1) (Version:  - VideoFlick)
Virtual Audio Streaming 4.0 (HKLM-x32\...\{B9FDEDF1-DD77-42BD-B2BD-ABCB30655C73}_is1) (Version: 4.0 - ShiningMorning Inc.)
Virtual Magnifying Glass v3.4 (HKLM-x32\...\Virtual Magnifying Glass_is1) (Version:  - )
VirtualDub (remove only) (HKLM-x32\...\VirtualDub) (Version:  - )
Visual MP3 CD Burner 1.3 (HKLM-x32\...\Visual MP3 CD Burner_is1) (Version:  - iProgram Development)
Visual Search Pony version 7.52 (HKLM-x32\...\{58C526E3-2BAE-4933-86D0-938F547756D7}_is1) (Version: 7.52 - Visual Search Pony)
Vita Concert Grand LE (HKLM\...\{C3535B11-DF83-4FF8-923F-76835630825E}) (Version: 2.4.0.95 - MAGIX Software GmbH) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
Vole Edutainment (HKLM-x32\...\{600C936B-7684-42F0-9FBF-04726F3D45E2}) (Version: 3.58.7041 - Sanwhole)
Vole Magic Note (HKLM-x32\...\{925B61EB-DB5A-482E-9620-F1B67BC88393}) (Version: 3.58.7041 - Sanwhole)
Vole Media CHM (HKLM-x32\...\{023ACD35-5046-418A-9C75-7D83BEA34AC3}) (Version: 3.11.40108 - Sanwhole)
Vole Windows Expedition (HKLM-x32\...\{10A7315E-3376-48F3-A681-8DE609CB47E2}) (Version: 3.58.7052 - Sanwhole)
VPRINTOL (HKLM-x32\...\{999D43F4-9709-4887-9B1A-83EBB15A8370}) (Version: 6.02.0001.0001 - EASTMAN KODAK Company) Hidden
VSDC Free Video Editor version 5.7.7.702 (HKLM-x32\...\VSDC Free Video Editor_is1) (Version: 5.7.7.702 - Flash-Integro LLC)
VST Bridge 1.1 (HKLM-x32\...\VST Bridge_is1) (Version:  - )
VueMinder Calendar Pro (HKLM-x32\...\{7D5EB2C9-D207-44DE-9AAA-A3DB8D91067D}) (Version: 8.0.1100 - VueSoft)
VueScan x64 (HKLM\...\VueScan x64) (Version:  - )
Vulkan Run Time Libraries 1.0.17.0 (HKLM\...\VulkanRT1.0.17.0) (Version: 1.0.17.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.54.0 (HKLM\...\VulkanRT1.0.54.0) (Version: 1.0.54.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.54.0 (HKLM\...\VulkanRT1.0.54.0-2) (Version: 1.0.54.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.54.0 (HKLM\...\VulkanRT1.0.54.0-3) (Version: 1.0.54.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.54.0 (HKLM\...\VulkanRT1.0.54.0-4) (Version: 1.0.54.0 - LunarG, Inc.) Hidden
VX Search Pro 3.4.38 (HKLM-x32\...\VX Search Pro) (Version: 3.4.38 - Flexense Computing Systems Ltd.)
Watermark Express (HKLM-x32\...\{FFE95BC0-A436-453A-9889-8BBD41EEEABC}) (Version: 1.0 - PixelApp Studio)
Watermark Software (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\WatermarkSoftware) (Version:  - Watermark Software. All Rights Reserved.)
Watermark Software 8.0 (HKLM-x32\...\Watermark Software) (Version: 8.0 - watermark-software.com)
WaveMax Sound Editor 5.0.1 (HKLM-x32\...\WaveMax Sound Editor_is1) (Version:  - NITBits Co., Ltd.)
WavePad Sound Editor (HKLM-x32\...\WavePad) (Version:  - NCH Software)
WD Diagnostics (HKLM-x32\...\{0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B}) (Version: 1.07.0000 - Western Digital Technologies)
Web Scraper V1.8 (HKLM-x32\...\Web Scraper V1.8) (Version:  - )
WebAnimator Go version 2.3.7 (HKLM-x32\...\{71002165-A4E7-4526-ACFC-D4720A342781}_is1) (Version: 2.3.7 - soft-evolution GmbH & Co. KG)
Web-Based Email Tools (HKLM-x32\...\{C5CFF65B-1E1E-489E-86E2-C2A3AF4C88D9}) (Version: 1.0.15 - Starfield)
WebFldrs XP (HKLM-x32\...\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}) (Version: 9.50.7523 - Microsoft Corporation) Hidden
WebM Project Directshow Filters (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\webmdshow) (Version: 1.0.4.1 - WebM Project)
WhoCrashed 5.54 (HKLM\...\WhoCrashed_is1) (Version:  - Resplendence Software Projects Sp.)
WinCatalog 2014 (HKLM-x32\...\{94145C48-3CDB-42FA-A8F4-8DAD34A564C5}_is1) (Version: 11 - WinCatalog.com)
WinDjView 1.0.3 (HKLM-x32\...\WinDjView) (Version: 1.0.3 - Andrew Zhezherun)
Windows 7 Upgrade Advisor (HKLM-x32\...\{AB05F2C8-F608-403b-95E1-FD8ADFACD31E}) (Version: 2.0.5000.0 - Microsoft Corporation)
Windows Automated Installation Kit (HKLM\...\{31E8F586-4EF7-4500-844D-BA8756474FF1}) (Version: 2.0.0.0 - Microsoft Corporation)
Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140744 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Media Format 11 runtime (HKLM\...\Windows Media Format Runtime) (Version:  - )
Windows Media Player 11 (HKLM\...\Windows Media Player) (Version:  - )
Windows Resource Kit Tools - SubInAcl.exe (HKLM-x32\...\{D3EE034D-5B92-4A55-AA02-2E6D0A6A96EE}) (Version: 5.2.3790.1164 - Microsoft Corporation)
Windscribe (HKLM-x32\...\{fa690e90-ddb0-4f0c-b3f1-136c084e5fc7}_is1) (Version: 1.80 Build 33 - Windscribe Limited)
Windsor Direct 4.00 (HKLM-x32\...\{3E5CBADD-2E51-47C1-BBE2-B802DB6DA56A}) (Version: 4.00 - MetaQuotes Software Corp.)
WinExt 2.1 (HKLM-x32\...\WinExt_is1) (Version:  - TriSun Software Limited)
WinISO (HKLM-x32\...\WinISO) (Version: 6.3.0.4905 - WinISO Computing Inc.)
WinOrganizer (HKLM-x32\...\WinOrganizer) (Version: 4.4 (Build 1900) - )
WinPcap 4.1.1 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.1753 - CACE Technologies)
WinPDFEditor V3 (HKLM-x32\...\WinPDFEditor_is1) (Version:  - hxxp://www.WinPDFEditor.com)
WinRAR 4.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version:  - )
WinSettings (HKLM-x32\...\WinSettings) (Version: 8.1 - FileStream, Inc.)
WinToHDD version 2.8 (HKLM\...\WinToHDD_is1) (Version: 2.8 - Hasleo Software.)
WinUtilities Professional Edition 11.45 (HKLM-x32\...\{FC274982-5AAD-4C20-848D-4424A5043009}_is1) (Version: 11.45 - YL Computing, Inc)
WinX Blu-ray Decrypter 3.0.0 (HKLM-x32\...\WinX Blu-ray Decrypter_is1) (Version:  - Digiarty)
WinX DVD Copy Pro 3.6.5 (HKLM\...\WinX DVD Copy Pro_is1) (Version:  - Digiarty Software,Inc.)
WinX DVD Ripper Platinum 8.7.0 (HKLM-x32\...\WinX DVD Ripper Platinum_is1) (Version:  - Digiarty Software, Inc.)
WinX DVD Ripper Platinum Streamer Edition 6.8.2 (HKLM-x32\...\WinX DVD Ripper Platinum Streamer Edition_is1) (Version:  - Digiarty Software, Inc.)
WinX HD Video Converter Deluxe 5.6.0 (HKLM-x32\...\WinX HD Video Converter Deluxe_is1) (Version:  - Digiarty Software, Inc.)
WinX MediaTrans (HKLM-x32\...\WinX MediaTrans) (Version: 3.8 - Digiarty Software, Inc.)
WIRELESS (HKLM-x32\...\{F9593CFB-D836-49BC-BFF1-0E669A411D9F}) (Version: 6.02.0001.0001 - EASTMAN KODAK Company) Hidden
Wise Video Converter 1.31 (HKLM-x32\...\Wise Video Converter_is1) (Version: 1.31 - WiseCleaner.com, Inc.)
WonderFox DVD Ripper (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\WonderFoxDVDRipper) (Version:  - WonderFox Soft, Inc. All Rights Reserved.)
WonderFox DVD Ripper Pro 9.7 (HKLM-x32\...\WonderFox DVD Ripper Pro) (Version: 9.7 - WonderFox Soft, Inc.)
WonderFox DVD Video Converter (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\WonderFoxDVDVideoConverter) (Version:  - WonderFox Soft, Inc. All Rights Reserved.)
WonderFox DVD Video Converter version 7.5 (HKLM-x32\...\{278D58D4-2B08-4ABF-957C-F0A2F8A1FBB7}_is1) (Version: 7.5 - WonderFox Soft, Inc)
WonderFox Video Watermark (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\WonderFoxVideoWatermark) (Version:  - WonderFox Soft, Inc. All Rights Reserved.)
Wondershare AllMyTube(Build 2.2.0.6) (HKLM-x32\...\Wondershare AllMyTube_is1) (Version: 2.2.0.6 - Wondershare Software Co.,Ltd.)
Wondershare DVD Creator(Build 2.6.5) (HKLM-x32\...\Wondershare DVD Creator_is1) (Version:  - Wondershare)
Wondershare DVD Slideshow Builder Deluxe(Build 6.1.14.0) (HKLM-x32\...\Wondershare DVD Slideshow Builder Deluxe_is1) (Version: 6.1.14.0 - WonderShare Software Co.,Ltd.)
Wondershare DVD Slideshow Builder Standard(Build 6.1.11.67) (HKLM-x32\...\Wondershare DVD Slideshow Builder Standard_is1) (Version: 6.1.11.67 - WonderShare Software Co.,Ltd.)
Wondershare Filmora(Build 6.0.3) (HKLM-x32\...\Wondershare Filmora_is1) (Version:  - Wondershare Software)
Wondershare Flash Gallery Factory Deluxe 5.2.1.15 (HKLM-x32\...\Wondershare Flash Gallery Factory Deluxe_is1) (Version: 5.2.1.15 - Wondershare Software Co.,Ltd.)
Wondershare MirrorGo(Version 1.3.1) (HKLM-x32\...\{EE843B49-D9BC-4A9E-A8A7-B9F14C0381C7}_is1) (Version: 1.3.1 - Wondershare)
Wondershare PDF Converter (Build 4.0.1) (HKLM-x32\...\{E16C056F-CA75-4D7C-AE79-5813DE0F03F1}_is1) (Version: 4.0.1 - Wondershare Software)
Wondershare PDF Converter (Build 4.0.5) (HKLM-x32\...\{A888A8D1-ACCB-4EBE-AAA8-903D2B8FB6A4}_is1) (Version: 4.0.5 - Wondershare Software)
Wondershare Photo Collage Studio 4.2.16.5 (HKLM-x32\...\Wondershare Photo Collage Studio GOTD Edition_is1) (Version: 4.2.16.5 - Wondershare Software Co.,Ltd.)
Wondershare Photo Recovery (build 3.0.1) (HKLM-x32\...\Wondershare Photo Recovery_is1) (Version:  - Wondershare Software Co., Ltd.)
Wondershare Player(Build 1.6.0) (HKLM-x32\...\Wondershare Player_is1) (Version: 1.6.0.3 - Wondershare)
Wondershare Video Converter Ultimate(Build 8.4.0.0) (HKLM-x32\...\Wondershare Video Converter Ultimate_is1) (Version: 8.4.0.0 - Wondershare Software)
Wondershare Video Studio Express(Build 1.2.0.5) (HKLM-x32\...\Wondershare Video Studio Express_is1) (Version:  - Wondershare Software)
Word to FlippingBook (HKLM-x32\...\Word to FlippingBook_is1) (Version:  - FlippingBook Solution)
WowTron PDF Page Organizer 1.1.1 (HKLM-x32\...\WowTron PDF Page Organizer 1.1.1) (Version: 1.1.1 - WowTron Software Co. Ltd.)
WowTron PDF Restriction Remover (HKLM-x32\...\{7D68F994-CCD6-4C09-8127-E3E1A0333DA0}) (Version: 1.1.1 - WowTron Software Co. Ltd.)
Xara Photo & Graphic Designer 9 (HKLM\...\{8F248F78-37CD-4909-935B-986A455A48FF}) (Version: 9.2.7.30974 - Xara Group Ltd) Hidden
Xara Photo & Graphic Designer 9 (HKLM-x32\...\MX.{8F248F78-37CD-4909-935B-986A455A48FF}) (Version: 9.2.7.30974 - Xara Group Ltd)
Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)
X-Lite 2.0 release 1103m (HKLM-x32\...\X-Lite_is1) (Version:  - Xten Networks, Inc.)
XML Paper Specification Shared Components Pack 1.0 (HKLM\...\XpsEPSC) (Version:  - Microsoft Corporation) Hidden
XUS Desktop 1.1.21 (HKLM-x32\...\XUS Desktop GOTD Edition_is1) (Version: 1.1.21 - EDesksoft)
Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)
XYplorer 15.90 (HKLM-x32\...\XYplorer) (Version: 15.90 - Donald Lessau)
Yahoo! Messenger (HKLM-x32\...\Yahoo! Messenger) (Version:  - )
Your Uninstaller! 7 (HKLM-x32\...\YU2010_is1) (Version: 7.4.2011.12 - URSoft, Inc.)
YouTube Downloader 2 (HKLM-x32\...\{F23AC816-C189-493E-B077-6126E8D065B0}_is1) (Version:  - MediaVigor Software)
Youtube Downloader HD v. 2.9.9.30 (HKLM-x32\...\Youtube Downloader HD_is1) (Version:  - YoutubeDownloaderHD.com)
YouTube Downloader Suite V3.1.7 (HKLM-x32\...\{3FF2F54D-FA3A-406F-9F9E-6CDD95B9A1A9}_is1) (Version: 3.1.7 - Apowersoft)
Youtube Music Downloader 7.9 (HKLM-x32\...\{00AA23A3-F4F7-4805-AA6B-4C2A74F3AB2B}_is1) (Version: 7.9 - YoutubeMusicDownloader.us LLC.)
YouTube to MP3 High Quality Downloader V4.0.2 (HKLM-x32\...\YouTube to MP3 High Quality Downloader_is1) (Version:  - YouTube to MP3 High Quality Downloader)
YouTubeGet 5.9.1 (HKLM-x32\...\YouTubeGet_is1) (Version:  - YouTubeGet Developer Team)
Youtuber (HKLM-x32\...\Youtuber) (Version:  - )
YoWindow (HKLM-x32\...\yowindow) (Version: 3 - RepkaSoft)
zebNet MailShelf Basic (HKLM\...\{F8F64EDE-1E54-4AC4-8841-3DD7B05B4308}_is1) (Version: 1.1.5.6 - zebNet Ltd)
zebNet Volume Shadow Copy Service (HKLM\...\{7D2C60DC-1A28-4572-81CA-762FDFCECE4A}_is1) (Version: 1.1.4.25 - zebNet Ltd)
Zebra-Media Surveillance System version 1.3 (HKLM-x32\...\Zebra-Media Surveillance System_is1) (Version: 1.3 - Zebra-Media Software)
Zemana AntiMalware (HKLM-x32\...\{8F0CD7D1-42F3-4195-95CD-833578D45057}_is1) (Version: 2.74.0.150 - Zemana Ltd.)
ZenWriter (HKLM-x32\...\{52B1B817-B6FF-410D-878E-0119372986FA}_is1) (Version: 1.04 - Beenokle)
Zoner Photo Studio 13 (HKLM-x32\...\ZonerPhotoStudio13_EN_is1) (Version: 13.0.1.7 - ZONER software)
Zoner Photo Studio 14 (HKLM\...\ZonerPhotoStudio14_EN_is1) (Version: 14.0.1.7 - ZONER software)
Zoner Photo Studio 15 (HKLM\...\ZonerPhotoStudio15_EN_is1) (Version: 15.0.1.7 - ZONER software)
Zoner Photo Studio 16 (HKLM\...\ZonerPhotoStudio16_EN_is1) (Version:  - ZONER software)
Zoolz2 (HKLM-x32\...\Zoolz2) (Version: 2.0 - Genie9)
Zoom (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\ZoomUMX) (Version: 3.5 - Zoom Video Communications, Inc.)
Zoom Player (remove only) (HKLM-x32\...\ZoomPlayer) (Version: 10.0.0 - Inmatrix LTD)
ZoomInfo Contact Contributor (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\ZoomInfo Contact Contributor) (Version: 45 - )
Zortam Mp3 Media Studio 19.25 (HKLM-x32\...\Zortam Mp3 Media Studio_is1) (Version:  - Zortam)
ZTreeWin (remove only) (HKLM-x32\...\ZTreeWin) (Version:  - )
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{0990CC1E-EC15-3ABE-A951-D1823826B652}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{0A4BC6CB-0BC9-3231-BF8B-C6745E4DD9F6}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{0CFC6643-69E9-34B9-9C05-5D15FFD2F5B7}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{11056249-C369-49CA-B0E8-326B5C32AD3C}\InprocServer32 -> C:\Program Files (x86)\Kryptel\Shx64.dll (Inv Softworks LLC)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{11056249-C369-49CA-B0E8-326B5C32AD3D}\InprocServer32 -> C:\Program Files (x86)\Silver Key\SkShx64.dll (Inv Softworks LLC)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{11056249-F58F-4AC8-9FBF-75990E973B6C}\InprocServer32 -> C:\Program Files (x86)\Kryptel\Shx64.dll (Inv Softworks LLC)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{11056249-F58F-4AC8-9FBF-75990E973B6D}\InprocServer32 -> C:\Program Files (x86)\Silver Key\SkShx64.dll (Inv Softworks LLC)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{11056249-F7FB-49E6-9BBD-434D74005CF5}\InprocServer32 -> C:\Program Files (x86)\Kryptel\Shx64.dll (Inv Softworks LLC)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{119CE57E-9F65-3ECD-9652-3A899D5256E5}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{158D5911-C43F-35CC-A33E-DC1A8021CCEF}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{1EF21503-5C5C-31D5-B4D0-68D09A9409F8}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{216D7037-9377-33ED-B0BE-1145DCAE4994}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{21FE1E76-CAC8-36C9-B249-9064D8E54609}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{221DCCA9-34FE-3860-8212-DE2121A29363}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{29F29067-19FE-3764-81EE-3AC96CA5BBB8}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{2F22A817-D89A-35EA-A001-7766C522675C}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{355B1AF8-B95A-3C54-B828-2D434BC7F519}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{3E896C32-F77C-3EFB-985E-1A6FC02268BA}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{455FD43F-0E1A-3362-9162-29A90EB67D48}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{4DBA0474-0CE7-39DD-9B19-212CBCBFE58C}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{50C65189-1B04-33FC-AB83-C8E0858980C6}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{54C70910-461F-32A3-AD7B-2DFC9B6FDE9C}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{58911049-20B5-3139-93EA-B681338508BB}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{65F66485-FAE7-34DF-9460-55CD501458D7}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{66E5A3F9-5A62-3289-9769-B204F4A4C4FB}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{6B53B0C7-2A36-3CB2-A22A-8098A4855794}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{6D0B5247-C8F3-3842-AF56-815E0352FEDA}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{6E4B0BF7-28BA-3E63-B5A7-B44FC1B8C076}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{744D9F12-DACE-3AEE-94C1-9591F969D1D3}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{758DBEE5-7971-3F6A-9F5A-7695A19A1FBC}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{7EF1427C-1576-3893-A135-DC830E8230AE}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{816D683E-A76F-3FF9-AF71-F1B35A86BEDD}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{83303EB4-01FE-364A-8179-6CF6D1EF9205}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{834341DC-D59D-34B7-BD4C-584BAF5F5BE5}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Program Files (x86)\GoToMeeting\7759\G2MOutlookAddin64.dll (LogMeIn, Inc.)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{8A5DDD94-1929-3D01-B927-70610EA75B46}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{8D6A5693-C203-3C49-BCBB-455A7EE5ED09}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{95222FCC-5F15-3903-9DAC-BE6A0B6C7780}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{9560CA87-37D3-43DF-A35D-8627811E4A7B}\InprocServer32 -> C:\Windows\system32\kernel32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{9708FDC5-23D7-3CAC-9067-E0B75B6230BB}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{9C3D8CC3-9922-312C-AEB1-409381274F48}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{A0749CAE-E21E-3B8C-BFD9-C2D1C038E75A}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{A07A3F5B-5DDA-33F4-9B9F-2093CEE95A18}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{A80A2214-E3BD-3C37-A26B-5018F65AEA21}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{B06674B1-D948-302A-B5B7-D38BFDEEFB17}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{B07265AB-1DE6-3F2E-9FAF-691D3F4110C6}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{B4C6A1D8-AFD6-3A80-B1BD-E966C74EA3AB}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{C07417BF-A849-31A4-A152-43A5FCBA869B}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{C1142845-1C0C-3875-8114-28DE6950E3F6}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{C12323F9-0989-328D-BD35-C8FE40702BFE}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{C2002A98-34DD-35BB-9634-FA06BA8B5306}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{C43B9BAA-1385-EC72-3B7A-6445C04B012F}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{D2053133-FB5D-4F1F-B0D0-A625EE6B567E}\InprocServer32 -> C:\Users\Morgan Pierce Parker\AppData\Roaming\Nascor Technologies Private Limited\tZirr\bin\adxloader64.dll ()
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{D455D299-3ACF-3655-AD54-A3AD903C3913}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{D5839061-0ACC-35AC-9EAB-C82F4245194C}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{D821E61E-1ED2-3DF7-A3C0-71BD317D68EE}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{D8C0798E-6FEC-36E6-8A78-E788228303AB}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{DA60723F-7F5D-30C7-865E-E641031F82D2}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{DA662925-1ACA-32E4-BADA-B855AC88E17E}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{DF23F430-4697-30A7-8F3E-4CDFE4DA99EF}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{E090BCF4-70E1-39D0-B47F-56664178D51D}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{E1AF2E7D-C3C1-39FD-AE9F-E99ED9910F30}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{E28E3C0A-C722-319E-AAF0-04D09AA67171}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{E46B220D-0BDB-39E5-8E02-087D13E037B5}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{E6915B6E-8846-3F35-839F-BD7C8DC794FB}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{E8471C78-164B-3243-92A8-C05DD7ECA47D}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{EC510A1C-FBF4-3D2C-BF59-860A0237A3C6}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{FB6D33D8-28E7-3BC8-A138-732A404586A9}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{FBD254B1-E2DF-EEE7-0EBC-A361A4423FF8}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{FCBFAE27-3333-3591-A9DC-582AAD558395}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [   ""TabblesOverlayHandler] -> {87dba6b9-6669-340d-94ee-97e0039cda8f} => C:\Windows\system32\mscoree.dll [2010-11-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [EldosIconOverlay-cbfs5] -> {3C99CEFA-E695-48B5-9754-73A6C502EF3D} => C:\Windows\system32\cbfsMntNtf5.dll [2015-04-25] (EldoS Corporation)
ShellIconOverlayIdentifiers: [OODIIcon] -> {14A94384-BBED-47ed-86C0-6BF63FD892D0} => C:\Program Files\OO Software\DiskImage\oodishi.dll [2018-02-09] (O&O Software GmbH)
ShellIconOverlayIdentifiers: [__SafeBox1] -> {152C96EB-288E-4EDC-B7C6-D21F8250ADF3} =>  -> No File
ShellIconOverlayIdentifiers: [__SafeBox2] -> {342DAA0B-D796-460D-8566-901E08A1CCAD} =>  -> No File
ShellIconOverlayIdentifiers: [__SafeBox3] -> {57595DAE-1AE1-4D97-A49E-67CBB53B52DF} =>  -> No File
ShellIconOverlayIdentifiers: [__SafeBox4] -> {33816773-98AE-4723-ADE0-EBE54C8B5A67} =>  -> No File
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay-cbfs5] -> {3C99CEFA-E695-48B5-9754-73A6C502EF3D} => C:\Windows\system32\cbfsMntNtf5.dll [2015-04-25] (EldoS Corporation)
ContextMenuHandlers1: [2.0 Zemana AntiMalware] -> {6ABB1C11-E261-4CEA-BBB5-3836225689DD} => C:\Program Files (x86)\Zemana AntiMalware\ZAMShellExt64.dll [2017-11-23] ()
ContextMenuHandlers1-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => c:\Program Files (x86)\7-Zip\7-zip.dll [2011-04-11] (Igor Pavlov)
ContextMenuHandlers1-x32: [AweFileSyncShlMenu] -> {ABE7BF64-6790-4873-8704-606E622B3E8D} => C:\Program Files (x86)\Magoshare\AweEraser\AweExtMenux64.dll [2017-11-12] (Magoshare)
ContextMenuHandlers1-x32: [BDFVCtxMenuExt] -> {9E96C1F5-0EFA-4348-9460-15D6802C70AA} =>  -> No File
ContextMenuHandlers1-x32: [BytescoutSpreadsheetTools] -> {9EAE3807-3C24-4245-AF42-44AEF31CF21D} => C:\Program Files\ByteScout Spreadsheet Tools\Bytescout.SpreadsheetTools.ShellExt.dll [2017-12-07] (Bytescout Software)
ContextMenuHandlers1-x32-x32: [ComPresto.ContextMenu] -> {9785BFAA-1BAA-444A-818B-DDBC81F8E87F} => C:\Program Files\Vazari\ComPresto\CmprSL.dll [2004-01-10] (Vazari Software)
ContextMenuHandlers1-x32-x32-x32: [Cover Designer] -> {73FCA462-9BD5-4065-A73F-A8E5F6904EF7} => C:\Program Files (x86)\Nero\Nero 9\Nero 9\Nero CoverDesigner\CoverEdExtension.dll [2008-09-19] (Nero AG)
ContextMenuHandlers1-x32-x32-x32: [DefenderContextMenuExt] -> {5EE8E9E6-2853-4D28-B2DE-6529EDA0A294} => C:\Program Files\Shadow Defender\ShellExt.dll [2015-07-27] (SHADOWDEFENDER.COM)
ContextMenuHandlers1-x32-x32-x32: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ContextMenuHandlers1-x32-x32-x32: [EUFileSyncShlMenu] -> {9BE7BF64-6790-4873-8704-606E622B3E8C} => C:\Program Files (x86)\EaseUS\EaseUS EverySync\bin\EUSyncExtMenux64.dll [2015-02-05] (CHENGDU Yiwo Tech Development Co., Ltd.)
ContextMenuHandlers1-x32-x32-x32: [File Marker] -> {B70B7A24-5180-4092-B3BA-6266F914C053} => C:\Program Files (x86)\FileMarker.NET\FileMarkerShlExt64.dll [2017-05-18] (ArcticLine Software)
ContextMenuHandlers1-x32-x32-x32-x32: [FYZip] -> {D28EDC94-5193-4CA3-ABA5-4556E661F07D} => C:\Program Files (x86)\FYZip\FYzip.dll [2011-02-25] (TightRope Interactive)
ContextMenuHandlers1-x32-x32-x32-x32-x32: [Gili FileLock Pro] -> {58264032-9730-4ab3-BEA2-A6CE3EEF6080} => C:\Program Files (x86)\idoo\File Encryption\GiliFileshell.dll [2011-12-13] ()
ContextMenuHandlers1-x32-x32-x32-x32-x32: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 4\x64\ContextHandler.dll -> No File
ContextMenuHandlers1-x32-x32-x32-x32-x32: [Glarysoft MalwareHunter] -> {EA847F47-97F1-4D78-AB99-C63CA1C327F0} => C:\Program Files (x86)\Glarysoft\Malware Hunter\x64\MHContextHandlerx64.dll [2016-06-23] (Glarysoft Ltd)
ContextMenuHandlers1-x32-x32-x32-x32-x32-x32: [HippoEDIT] -> {B22D427A-8423-4ccb-83E9-58ED62868763} => C:\Program Files (x86)\HippoEDIT\ShellReg.dll [2015-01-26] (HippoEDIT.com)
ContextMenuHandlers1-x32-x32-x32-x32-x32-x32: [ISOWINDOWMENU] -> {3A05F453-60CA-4311-9DA3-FE348CB76056} => C:\Program Files\Digiarty\WinX_DVD_Copy_Pro\IsoWindowMenu64.dll [2013-11-19] (TODO: <Company name>)
ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32: [MagicISO] -> {DB85C504-C730-49DD-BEC1-7B39C6103B7A} => C:\Program Files (x86)\MagicISO\misosh.dll [2008-05-22] (MagicISO, Inc.)
ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32: [MyPhoneExplorer] -> {A372C6DF-7A85-41B1-B3B0-D1E24073DCBF} => C:\Program Files (x86)\MyPhoneExplorer\DLL\ShellMgr.dll [2010-03-30] (F.J. Wechselberger)
ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [PCFiles] -> {1d102f1a-463b-41cc-a26e-56ff48f9850a} => C:\Windows\system32\mscoree.dll [2010-11-20] (Microsoft Corporation)
ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [PDFArchitectExtension] -> {DBDB3433-0E01-40CE-A026-D9F54FAC3CA9} => c:\Program Files (x86)\PDF Architect\ContextMenuExt.dll [2013-04-08] (pdfforge GmbH)
ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [Picajet Organizer] -> {C916D440-D489-4A79-B306-5FDC1E7932C0} => C:\Program Files (x86)\PicaJet\PJExt.dll [2013-01-16] ()
ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [ReaConverter7_std] -> {0C83C06D-41F5-4666-B1C2-0923EA75EB10} => C:\Program Files (x86)\reaConverter 7 Standard\newcontext64.dll [2015-06-19] ()
ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [ShellMenuObj] -> {3f6e99b1-5620-11e0-8b43-005056c00008} => C:\Program Files\Common Files\SoftTech InterCorp\Extension\stshellextension64.dll [2012-10-30] (SoftTech InterCorp)
ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files\EASEUS\Todo Backup\bin\x64\ImageSh.dll [2017-09-04] (CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [TabblesContextMenu] -> {6fd80da4-7ae1-3d7b-b1f9-a566df137f0f} => C:\Windows\system32\mscoree.dll [2010-11-20] (Microsoft Corporation)
ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [TurboBrowser] -> {CDDF1652-9770-4381-8A4B-B935CA4467C5} => C:\Program Files (x86)\FileStream\Turbo Browser\tbext.dll [2012-02-09] (FileStream, Inc.®)
ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [VDownloader] -> {911ef3a1-1010-4fd4-8556-2310201d6e46} => C:\Windows\system32\mscoree.dll [2010-11-20] (Microsoft Corporation)
ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [WondershareVideoConverterFileOpreation] -> {FEB746CA-95C2-485F-B386-C30D4E56D22E} => C:\Windows\SysWOW64\WSCM64.dll [2015-02-27] ()
ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [Zeon.ShellExt] -> {B8E8494C-9300-48AC-BD8E-EDED185E5A04} =>  -> No File
ContextMenuHandlers2: [.TagTuner] -> {08073B06-A465-413A-BC71-085CEE78EB6D} => C:\Program Files (x86)\TagTuner\TagTuner64.dll [2011-11-28] ()
ContextMenuHandlers2: [DefenderContextMenuExt] -> {5EE8E9E6-2853-4D28-B2DE-6529EDA0A294} => C:\Program Files\Shadow Defender\ShellExt.dll [2015-07-27] (SHADOWDEFENDER.COM)
ContextMenuHandlers2: [Genie-Soft Timeline Backup Context Menu Extension] -> {D821600B-0B5D-4D7E-B1CC-034C652E8288} => C:\Program Files\Genie9\Genie Timeline\GSTimelineContextMenu.gtl [2012-09-10] (Genie9)
ContextMenuHandlers2: [Genie9 Zoolz Context Menu Extension] -> {88DE42CC-760E-4BF4-B305-0B0B9374A7E3} => C:\Program Files\Genie9\Zoolz2\ZoolzContextMenu.dll [2013-01-15] (Genie9)
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 4\x64\ContextHandler.dll -> No File
ContextMenuHandlers2: [Glarysoft MalwareHunter] -> {EA847F47-97F1-4D78-AB99-C63CA1C327F0} => C:\Program Files (x86)\Glarysoft\Malware Hunter\x64\MHContextHandlerx64.dll [2016-06-23] (Glarysoft Ltd)
ContextMenuHandlers2: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2012-01-16] (Florian Heidenreich)
ContextMenuHandlers2-x32: [OODIDismount] -> {BF5F9978-5B95-4F2E-BB19-5D95234187EE} => C:\Program Files\OO Software\DiskImage\oodishd.dll [2018-02-09] (O&O Software GmbH)
ContextMenuHandlers2-x32-x32: [Picajet Organizer] -> {C916D440-D489-4A79-B306-5FDC1E7932C0} => C:\Program Files (x86)\PicaJet\PJExt.dll [2013-01-16] ()
ContextMenuHandlers2-x32-x32: [PuranDefrag] -> {E23C9C4A-0F55-40e2-A47F-93DCB54DF04D} => C:\Windows\system32\PuranDefrag.dll [2013-08-15] (Puran Software)
ContextMenuHandlers2-x32-x32: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files\EASEUS\Todo Backup\bin\x64\ImageSh.dll [2017-09-04] (CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers2-x32-x32: [SteganosShellExtension] -> {FAE0A3E0-3010-41BA-9DDC-A631394F047F} => C:\Program Files (x86)\Steganos Privacy Suite 15\ShellExtension.dll [2014-07-29] ()
ContextMenuHandlers2-x32-x32: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2009-10-22] (EZB Systems, Inc.)
ContextMenuHandlers2-x32-x32-x32: [~Bamboo] -> {53EF4C11-2947-445E-BDBD-7B077BB38CCA} => C:\Program Files (x86)\Bamboo File Sync and Backup\BambooSH.dll [2011-02-26] (Haxar Limited)
ContextMenuHandlers3: [SteganosShellExtension] -> {FAE0A3E0-3010-41BA-9DDC-A631394F047F} => C:\Program Files (x86)\Steganos Privacy Suite 15\ShellExtension.dll [2014-07-29] ()
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => c:\program files (x86)\real\realplayer\RPDS\Bin64\rpcontextmenu.dll [2015-09-21] (RealNetworks, Inc.)
ContextMenuHandlers4-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => c:\Program Files (x86)\7-Zip\7-zip.dll [2011-04-11] (Igor Pavlov)
ContextMenuHandlers4-x32: [AweFileSyncShlMenu] -> {ABE7BF64-6790-4873-8704-606E622B3E8D} => C:\Program Files (x86)\Magoshare\AweEraser\AweExtMenux64.dll [2017-11-12] (Magoshare)
ContextMenuHandlers4-x32: [BDFVCtxMenuExt] -> {9E96C1F5-0EFA-4348-9460-15D6802C70AA} =>  -> No File
ContextMenuHandlers4-x32: [DefenderContextMenuExt] -> {5EE8E9E6-2853-4D28-B2DE-6529EDA0A294} => C:\Program Files\Shadow Defender\ShellExt.dll [2015-07-27] (SHADOWDEFENDER.COM)
ContextMenuHandlers4-x32: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ContextMenuHandlers4-x32: [EUFileSyncShlMenu] -> {9BE7BF64-6790-4873-8704-606E622B3E8C} => C:\Program Files (x86)\EaseUS\EaseUS EverySync\bin\EUSyncExtMenux64.dll [2015-02-05] (CHENGDU Yiwo Tech Development Co., Ltd.)
ContextMenuHandlers4-x32-x32: [FYZip] -> {D28EDC94-5193-4CA3-ABA5-4556E661F07D} => C:\Program Files (x86)\FYZip\FYzip.dll [2011-02-25] (TightRope Interactive)
ContextMenuHandlers4-x32-x32-x32: [MagicISO] -> {DB85C504-C730-49DD-BEC1-7B39C6103B7A} => C:\Program Files (x86)\MagicISO\misosh.dll [2008-05-22] (MagicISO, Inc.)
ContextMenuHandlers4-x32-x32-x32: [ReaConverter7_std] -> {0C83C06D-41F5-4666-B1C2-0923EA75EB10} => C:\Program Files (x86)\reaConverter 7 Standard\newcontext64.dll [2015-06-19] ()
ContextMenuHandlers4-x32-x32-x32: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files\EASEUS\Todo Backup\bin\x64\ImageSh.dll [2017-09-04] (CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers4-x32-x32-x32: [TabblesContextMenu] -> {6fd80da4-7ae1-3d7b-b1f9-a566df137f0f} => C:\Windows\system32\mscoree.dll [2010-11-20] (Microsoft Corporation)
ContextMenuHandlers4-x32-x32-x32-x32: [TurboBrowser] -> {CDDF1652-9770-4381-8A4B-B935CA4467C5} => C:\Program Files (x86)\FileStream\Turbo Browser\tbext.dll [2012-02-09] (FileStream, Inc.®)
ContextMenuHandlers4-x32-x32-x32-x32: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2009-10-22] (EZB Systems, Inc.)
ContextMenuHandlers4-x32-x32-x32-x32: [ZPShellExt] -> {ABE00001-0123-ABED-1248-0248ADFA1909} => C:\Program Files (x86)\Zoom Player\zpshlext64.dll [2008-08-05] ()
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2017-12-01] (Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [AweFileSyncShlMenu] -> {ABE7BF64-6790-4873-8704-606E622B3E8D} => C:\Program Files (x86)\Magoshare\AweEraser\AweExtMenux64.dll [2017-11-12] (Magoshare)
ContextMenuHandlers5: [BDFVCtxMenuExt] -> {9E96C1F5-0EFA-4348-9460-15D6802C70AA} =>  -> No File
ContextMenuHandlers5: [DeskMenu] -> {7E74422F-2393-11D4-98E0-444553540000} => C:\Program Files (x86)\Desktop Restore\dkticnsr.dll [2010-11-12] (Jamie O'Connell)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-15] (Dropbox, Inc.)
ContextMenuHandlers5: [EUFileSyncShlMenu] -> {9BE7BF64-6790-4873-8704-606E622B3E8C} => C:\Program Files (x86)\EaseUS\EaseUS EverySync\bin\EUSyncExtMenux64.dll [2015-02-05] (CHENGDU Yiwo Tech Development Co., Ltd.)
ContextMenuHandlers5: [SafeBoxContext] -> {0244E652-07EF-43C2-8AAD-ABA3CF40DF16} =>  -> No File
ContextMenuHandlers6: [2.0 Zemana AntiMalware] -> {6ABB1C11-E261-4CEA-BBB5-3836225689DD} => C:\Program Files (x86)\Zemana AntiMalware\ZAMShellExt64.dll [2017-11-23] ()
ContextMenuHandlers6: [AweFileSyncShlMenu] -> {ABE7BF64-6790-4873-8704-606E622B3E8D} => C:\Program Files (x86)\Magoshare\AweEraser\AweExtMenux64.dll [2017-11-12] (Magoshare)
ContextMenuHandlers6: [BDFVCtxMenuExt] -> {9E96C1F5-0EFA-4348-9460-15D6802C70AA} =>  -> No File
ContextMenuHandlers6-x32: [ComPresto.ContextMenu] -> {9785BFAA-1BAA-444A-818B-DDBC81F8E87F} => C:\Program Files\Vazari\ComPresto\CmprSL.dll [2004-01-10] (Vazari Software)
ContextMenuHandlers6-x32: [EUFileSyncShlMenu] -> {9BE7BF64-6790-4873-8704-606E622B3E8C} => C:\Program Files (x86)\EaseUS\EaseUS EverySync\bin\EUSyncExtMenux64.dll [2015-02-05] (CHENGDU Yiwo Tech Development Co., Ltd.)
ContextMenuHandlers6-x32: [FMMenuExt] -> {47C91696-894C-46A1-B196-2C7CA1952F45} => C:\Program Files (x86)\Folder Marker\ShellExt64.dll [2013-08-21] (ArcticLine Software)
ContextMenuHandlers6-x32: [Folderico] -> {CC0C45C5-EFDE-4B8A-A8B0-9ED733D9E6AC} => C:\Program Files\FolderIco\FolderIco.dll [2015-08-30] (TeoreX)
ContextMenuHandlers6-x32-x32: [Gili FileLock Pro] -> {58264032-9730-4ab3-BEA2-A6CE3EEF6080} => C:\Program Files (x86)\idoo\File Encryption\GiliFileshell.dll [2011-12-13] ()
ContextMenuHandlers6-x32-x32: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 4\x64\ContextHandler.dll -> No File
ContextMenuHandlers6-x32-x32: [Glarysoft MalwareHunter] -> {EA847F47-97F1-4D78-AB99-C63CA1C327F0} => C:\Program Files (x86)\Glarysoft\Malware Hunter\x64\MHContextHandlerx64.dll [2016-06-23] (Glarysoft Ltd)
ContextMenuHandlers6-x32-x32-x32: [MagicISO] -> {DB85C504-C730-49DD-BEC1-7B39C6103B7A} => C:\Program Files (x86)\MagicISO\misosh.dll [2008-05-22] (MagicISO, Inc.)
ContextMenuHandlers6-x32-x32-x32-x32: [PCFolder] -> {0d450ada-c3f4-41eb-9803-ca1540fe8d1d} => C:\Windows\system32\mscoree.dll [2010-11-20] (Microsoft Corporation)
ContextMenuHandlers6-x32-x32-x32-x32-x32: [Picajet Organizer] -> {C916D440-D489-4A79-B306-5FDC1E7932C0} => C:\Program Files (x86)\PicaJet\PJExt.dll [2013-01-16] ()
ContextMenuHandlers6-x32-x32-x32-x32-x32: [ReaConverter7_std] -> {0C83C06D-41F5-4666-B1C2-0923EA75EB10} => C:\Program Files (x86)\reaConverter 7 Standard\newcontext64.dll [2015-06-19] ()
ContextMenuHandlers6-x32-x32-x32-x32-x32: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2016-12-15] (VS Revo Group)
ContextMenuHandlers6-x32-x32-x32-x32-x32: [ShellMenuObj] -> {3f6e99b1-5620-11e0-8b43-005056c00008} => C:\Program Files\Common Files\SoftTech InterCorp\Extension\stshellextension64.dll [2012-10-30] (SoftTech InterCorp)
ContextMenuHandlers6-x32-x32-x32-x32-x32-x32: [TurboBrowser] -> {CDDF1652-9770-4381-8A4B-B935CA4467C5} => C:\Program Files (x86)\FileStream\Turbo Browser\tbext.dll [2012-02-09] (FileStream, Inc.®)
ContextMenuHandlers6-x32-x32-x32-x32-x32-x32: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2009-10-22] (EZB Systems, Inc.)
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {1ADB9F71-E95D-4856-B625-03420D4B2500} - System32\Tasks\{644D6AE8-CCC1-4142-B677-3D3ECA63900F} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Foxit Software\Foxit Reader\Uninstall.exe"
Task: {1DA47348-F686-445C-9125-4C8B85ED8111} - System32\Tasks\UAC pass\Kindle => C:\Program Files (x86)\Amazon\Kindle\Kindle.exe [2016-04-25] (Amazon.com)
Task: {20FB3618-2F5B-4FEA-B94A-67E2AFB7D62C} - System32\Tasks\MasterSeeker.UACBypass.873de2543bb272ce30b0c639a8cba518 => C:\Program Files\MASTERSEEKER\MasterSeeker.exe [2014-09-26] (DxCK)
Task: {21F00EB1-2A42-4B56-921A-A315F4DEA2B0} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2396228472-3482715812-2186985281-1006 => c:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2015-09-16] (RealNetworks, Inc.)
Task: {23694C52-C4F7-45A7-A161-A39F66EBA52F} - System32\Tasks\GoogleUpdateTaskMachineUA1cb747391241274 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-17] (Google Inc.)
Task: {2777D579-3588-4E83-A28E-D487FC68A5FB} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\Dell\SupportAssist\sessionchecker.exe [2017-09-14] (PC-Doctor, Inc.)
Task: {2AD18346-FA07-4450-866A-B7D0D09F8ED8} - System32\Tasks\{7C2188BF-E704-4A29-A903-B2E31CA30305} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\ENSIGNNEW\eChat\eChatsALL\CIO\eChat 2014 09 22 latest 2015 05 11 setupechat (1).exe" -d "C:\Program Files\ENSIGNNEW\eChat\eChatsALL\CIO"
Task: {2DB75400-90C2-479C-B6A2-2EC111B4F95D} - System32\Tasks\{571CB34F-56DB-43D0-A8CD-99C1A22D167C} => C:\Windows\system32\pcalua.exe -a "F:\3- User Guide\Setup.exe" -d "F:\3- User Guide"
Task: {2E4C7563-5760-4F13-B9D1-FFBFBB3BC474} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2396228472-3482715812-2186985281-1006 => c:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2015-09-16] (RealNetworks, Inc.)
Task: {32D8C650-FC17-46E6-B4E9-C8F8FE250713} - System32\Tasks\Driver Restore-RTMUpdater => c:\Program Files (x86)\Driver Restore\Driver Restore\DriverRestore.exe [2013-09-19] (PC Drivers Headquarters)
Task: {34F9AFAF-5684-4C2A-955D-8E74A2ED8F0E} - System32\Tasks\EW Overnigh run => C:\Program Files\ENSIGNNEW\Ensign.exe [2016-04-12] (Ensign Software, Inc.)
Task: {394A74D7-21CC-4DAD-B483-DC453B448763} - System32\Tasks\EW DD Run => C:\Program Files\ENSIGNNEW\Ensign.exe [2016-04-12] (Ensign Software, Inc.)
Task: {3981730B-85B5-4ACD-8050-BCB50749B836} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfig
Task: {3981730B-85B5-4ACD-8050-BCB50749B836} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(2): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshContent
Task: {3981730B-85B5-4ACD-8050-BCB50749B836} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(3): C:\Windows\system32\GWX\GWXDetector.exe [2015-09-30] (Microsoft Corporation)
Task: {4C9156C1-39E7-4C9D-BDEE-CAF33AA31B01} - System32\Tasks\UAC pass\i_view32 - IrfanView 4.23 => C:\Program Files (x86)\IrfanView\i_view32.exe [2012-01-17] (Irfan Skiljan)
Task: {5688B95E-C238-4216-A164-4129D394D56C} - System32\Tasks\doPDF 9 Update => C:\Program Files\Softland\novaPDF 9\Driver\UpdateApplication.exe [2018-02-19] ()
Task: {5856763E-FA06-40AA-8B2B-5F4AAB8684BF} - System32\Tasks\Paragon Archive name arc_150414111230859 => C:\Program Files\Paragon Software\Backup and Recovery 14 Home\program\scripts.exe [2013-12-16] (Paragon Software Group)
Task: {5A671D5B-FDB8-4D57-B190-395FF791EE63} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-03-14] (Microsoft Corporation)
Task: {63982C73-36D8-4D62-81C7-E7946138CD62} - System32\Tasks\Paragon Archive name arc_270314214029964 => C:\Program Files\Paragon Software\Backup and Recovery 14 Home\program\scripts.exe [2013-12-16] (Paragon Software Group)
Task: {655CDFD6-2773-49FF-9FB9-87D2A4DFA5EC} - System32\Tasks\Irfanview => \Program [Argument = Files (x86)\IrfanView\i_view32.exe]
Task: {68A5C451-4BAE-471F-B3AF-F32DFE83407D} - System32\Tasks\Paragon Archive name diff_280314115126006 => C:\Program Files\Paragon Software\Backup and Recovery 14 Home\program\scripts.exe [2013-12-16] (Paragon Software Group)
Task: {691B8C89-D2CD-45EF-91A3-984643639550} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-08-12] (Dropbox, Inc.)
Task: {6C03D774-FE36-456B-B6B3-0E1C22DB8466} - System32\Tasks\Amazon Music Helper => C:\Users\Morgan Pierce Parker\AppData\Local\Amazon Music\Amazon Music Helper.exe [2014-07-22] ()
Task: {736E4D0D-9D2A-4E9F-A208-10B0E78AFBE8} - System32\Tasks\RealDownloader Update Check => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [2016-07-05] ()
Task: {77234F49-B92B-4045-B0DE-D1F497030DC7} - System32\Tasks\{CAEE7B87-0724-4206-B147-A95BB5CC7641} => C:\Windows\system32\pcalua.exe -a H:\SETUP.EXE -d H:\ -c /AUTORUN
Task: {7E05A883-6D8A-4AA4-B46E-AEEE74E43EBD} - System32\Tasks\Microsoft\Windows\PLA\System Overview => C:\Windows\system32\rundll32.exe C:\Windows\system32\pla.dll,PlaHost "System Overview" "$(Arg0)"
Task: {7E292A1A-D251-45CF-8BA1-4347627DA7EC} - System32\Tasks\FileSearchyPro_SkipUAC => C:\Program Files (x86)\FileSearchy Pro\FileSearchyPro.exe [2014-09-27] ()
Task: {885EE158-2619-4CD2-9770-A23AEDB9136C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {891CB682-728B-481A-A5CE-14F6E51F73CE} - System32\Tasks\UAC pass\i_view32 => C:\Program Files (x86)\IrfanView\i_view32.exe [2012-01-17] (Irfan Skiljan)
Task: {8CB2ACD7-8DF8-4767-A8A4-3F5018274D34} - System32\Tasks\Cybertron\Privacy Eraser\SkipUAC_Morgan Pierce Parker => C:\Program Files\Cybertron\Privacy Eraser\PrivacyEraser.exe [2015-02-25] (Cybertron Software, Co., Ltd.)
Task: {8CFE8938-2D2C-4CB2-86C5-06D415EB7EEE} - System32\Tasks\Opera scheduled Autoupdate 1521747948 => C:\Program Files\Opera\launcher.exe [2018-03-21] (Opera Software)
Task: {8FD2AE7F-F946-4B6F-8DE8-B8CFC95B36FF} - System32\Tasks\G2MUpdateTask-S-1-5-21-2396228472-3482715812-2186985281-1006 => C:\Users\Morgan Pierce Parker\AppData\Local\GoToMeeting\8473\g2mupdate.exe [2018-03-09] (LogMeIn, Inc.)
Task: {9032B0DA-EC8C-445E-A810-BC91FACA4B88} - System32\Tasks\Driver Restore-RTMRules => c:\Program Files (x86)\Driver Restore\Driver Restore\DriverRestore.exe [2013-09-19] (PC Drivers Headquarters)
Task: {91D3FC3D-3C10-4473-AB03-4D763AC6BF9F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-09-05] (Microsoft Corporation)
Task: {A0C6EA20-610C-4BF0-B974-1B1D5F16A967} - System32\Tasks\AnVir Task Manager => C:\Program Files (x86)\AnVir Task Manager Pro\AnVir.exe [2013-01-25] (AnVir Software)
Task: {A32FBB8E-8C80-41D3-BE8A-0D8CAB0D4FEB} - System32\Tasks\WpsUpdateTask_Morgan Pierce Parker => C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\wpsupdate.exe [2011-10-29] (Zhuhai Kingsoft Office-software Co.,Ltd)
Task: {A36B8F51-691A-4464-AED7-5D00D2DB6F8C} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_24_0_0_194_pepper.exe [2017-02-13] (Adobe Systems Incorporated)
Task: {A46A6403-1CB7-4D5C-B538-BDF6F387C0E2} - System32\Tasks\G2MUploadTask-S-1-5-21-2396228472-3482715812-2186985281-1006 => C:\Users\Morgan Pierce Parker\AppData\Local\GoToMeeting\8473\g2mupload.exe [2018-03-09] (LogMeIn, Inc.)
Task: {A52F37D5-1B3C-4B96-8EE5-FD26A2C2B0A1} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssist.exe [2017-12-22] (Dell Inc.)
Task: {A83663BF-8DC3-4C61-AD29-14970D6CAD83} - System32\Tasks\{DD5420CB-6055-4B95-8475-C7343A458F58} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\ENSIGNNEW\eChat\eChatsALL\KevinP\setupechat.exe" -d "C:\Program Files\ENSIGNNEW\eChat\eChatsALL\KevinP"
Task: {AF3FAA29-55D5-45F2-A9B8-F0AA1FBDB359} - System32\Tasks\Driver Restore-RTMScan => c:\Program Files (x86)\Driver Restore\Driver Restore\DriverRestore.exe [2013-09-19] (PC Drivers Headquarters)
Task: {B180BD86-7AF1-4E1C-85B9-C03A93BF17EF} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfig
Task: {B180BD86-7AF1-4E1C-85B9-C03A93BF17EF} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2015-09-30] (Microsoft Corporation)
Task: {B819F3A7-E824-460D-9463-5854FBD96BBC} - System32\Tasks\Driver Restore-RTMScanRunOnce => c:\Program Files (x86)\Driver Restore\Driver Restore\DriverRestore.exe [2013-09-19] (PC Drivers Headquarters)
Task: {B8482C0F-8B5E-43F2-8B2F-CFDB077C625F} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2015-08-24] (Siber Systems)
Task: {D99243F3-4E5B-4F86-B02D-E46B417A301D} - System32\Tasks\{D2D1BFED-22C5-406C-B2E1-951998B456D8} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Smarty Uninstaller\SmartyUninstaller.exe" -d "C:\Program Files (x86)\Smarty Uninstaller"
Task: {DA30C641-C98A-4627-9C71-11D9511F49A4} - System32\Tasks\{D438FE00-0333-4CDC-AB6A-613919B2BC24} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\Aeroadmin Pro 4-1\Setup.exe" -d "C:\Program Files\Aeroadmin Pro 4-1"
Task: {DC3FF28E-D005-4856-8BB7-377B136F23E8} - System32\Tasks\{5908758A-2A8E-45E0-B049-6CED936831F2} => C:\Windows\system32\pcalua.exe -a "C:\Users\Morgan Pierce Parker\Downloads\vcredist_x64.exe" -d "C:\Users\Morgan Pierce Parker\Desktop"
Task: {E5FC7E2A-1635-4F51-B56E-AD78C3865E72} - System32\Tasks\UAC pass\VideoGet => C:\Program Files (x86)\Nuclear Coffee\VideoGet\VideoGet.exe [2012-07-24] (Nuclear Coffee Software)
Task: {E8833C63-722F-44FA-B230-75D6E695543B} - System32\Tasks\Open URL by RoboForm => C:\Windows\system32\rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMKJNMKJPMLMNMKMHMCNOMMMLJLJCNLMKMOJJJCNNJKMPMLMCNLJLJGMJJLMKJLMHMMMJMOJMMJNJICMIMCNGMCNOMKMFMOMOMCNPMCNGMJMPMPMFMJMCNOMCNIMJMPMOMCNNMJNPICMPMFMLJAJLIPMNMFMJMIMOMJNHICMIJAJLILJOMJNBJCMCLAJNIIJOJBJPNPKGJKJNIMJKJPNPKOJNIEJKJNIJN (the data entry has 73 more characters).
Task: {EA4E748B-D4D1-44AA-9707-D64545DEA062} - System32\Tasks\doPDF 9 Telemetry => C:\Program Files\Softland\novaPDF 9\Driver\GoogleAnalytics.exe [2018-02-19] ()
Task: {EA8FCF35-5BC8-4701-8819-642DDB0BB2FC} - System32\Tasks\GMHSkipUAC => C:\Program Files (x86)\Glarysoft\Malware Hunter\MalwareHunter.exe [2017-01-19] (Glarysoft Ltd)
Task: {ED0ECB85-5A04-4389-9010-959FA53F7719} - System32\Tasks\{DE11C23D-F00C-4043-B1F2-9B72E61E0AB4} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\ENSIGNNEW\eChat\eChatsALL\CIACIA\ECHAT 2015 11 04 .exe" -d "C:\Program Files\ENSIGNNEW\eChat\eChatsALL\CIACIA"
Task: {F023F227-A3F8-4CAE-893E-CFBF4FC4C81D} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\MpCmdRun.exe
Task: {F09A23A2-DC9D-4333-A7DC-67A6D0DDBC83} - System32\Tasks\StartupStar Firewall => C:\Program Files (x86)\StartupStar\StartupStar.exe [2014-10-09] (Ascora GmbH)
Task: {F31A8AB1-5DBC-408C-A348-555C6892BA0A} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfigAndContent
Task: {F31A8AB1-5DBC-408C-A348-555C6892BA0A} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2015-09-30] (Microsoft Corporation)
Task: {F79A53DC-26AF-4F19-84AF-20D3EB081C7D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-03-14] (Microsoft Corporation)
Task: {FF26A1C0-CAB7-4883-A072-DC0478D449D1} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-09-05] (Microsoft Corporation)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_24_0_0_194_pepper.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\expressburnDowngrade.job => C:\Program Files\NCH Swift Sound\ExpressBurn\expressburn.exe
Task: C:\Windows\Tasks\expressburnShakeIcon.job => C:\Program Files\NCH Swift Sound\ExpressBurn\expressburn.exe
Task: C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-2396228472-3482715812-2186985281-1006.job => C:\Users\Morgan Pierce Parker\AppData\Local\GoToMeeting\8473\g2mupdate.exe
Task: C:\Windows\Tasks\G2MUploadTask-S-1-5-21-2396228472-3482715812-2186985281-1006.job => C:\Users\Morgan Pierce Parker\AppData\Local\GoToMeeting\8473\g2mupload.exe
Task: C:\Windows\Tasks\Paragon Archive name arc_150414111230859.job => C:\Program Files\Paragon Software\Backup and Recovery 14 Home\program\scripts.exe--rebootonconfirm -Wno --alternate --graph --multiple C:/Program Files/Paragon Software/Backup and Recovery 14 Home/scripts/scr_150414111554003.psl
Task: C:\Windows\Tasks\Paragon Archive name arc_270314214029964.job => C:\Program Files\Paragon Software\Backup and Recovery 14 Home\program\scripts.exe--rebootonconfirm -Wno --alternate --graph --multiple C:/Program Files/Paragon Software/Backup and Recovery 14 Home/scripts/scr_270314214212771.psl
Task: C:\Windows\Tasks\Paragon Archive name diff_280314115126006.job => C:\Program Files\Paragon Software\Backup and Recovery 14 Home\program\scripts.exe--rebootonconfirm -Wno --alternate --graph --multiple C:/Program Files/Paragon Software/Backup and Recovery 14 Home/scripts/scr_280314115746051.psl
Task: C:\Windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2083756155-906728473-3928301053-500.job => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe
Task: C:\Windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2083756155-906728473-3928301053-500.job => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe
Task: C:\Windows\Tasks\StartupStar Firewall.job => C:\Program Files (x86)\StartupStar\StartupStar.exe
Task: C:\Windows\Tasks\switchDowngrade.job => C:\Program Files\NCH Swift Sound\Switch\switch.exe
Task: C:\Windows\Tasks\switchShakeIcon.job => C:\Program Files\NCH Swift Sound\Switch\switch.exe
Task: C:\Windows\Tasks\User_Feed_Synchronization-{1B73630D-E1E9-42D4-AC78-4AD6896403D9}.job => C:\Windows\system32\msfeedssync.exe
Task: C:\Windows\Tasks\WpsUpdateTask_Morgan Pierce Parker.job => C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\wpsupdate.exe
Task: C:\Windows\Tasks\WpsUpdateTask_TEST.job => C:\Program Files (x86)\Kingsoft\Kingsoft Presentation\office6\wpsupdate.exe
 
==================== Shortcuts & WMI ========================  <NEXT POST


#55 Safe

Safe

    Authentic Member

  • Authentic Member
  • PipPip
  • 41 posts

Posted 22 March 2018 - 06:33 PM

==================== Shortcuts & WMI ========================
 
(The entries could be listed to be restored or removed.)
 
 
Shortcut: C:\Users\Morgan Pierce Parker\Favorites\Fotor for desktop.lnk -> hxxp://www.fotor.com/desktop/index.htm
Shortcut: C:\Users\Morgan Pierce Parker\Desktop\ALL MISCELANEOUS FOLDERS - Copy\0 DESKTOP SHORTCUTS - ALL - Copy\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()
Shortcut: C:\Users\Morgan Pierce Parker\Desktop\ALL MISCELANEOUS FOLDERS - Copy\0 DESKTOP SHORTCUTS - ALL\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()
Shortcut: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\ALL MISCELANEOUS FOLDERS - Copy\0 DESKTOP SHORTCUTS - ALL - Copy\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()
Shortcut: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\ALL MISCELANEOUS FOLDERS - Copy\0 DESKTOP SHORTCUTS - ALL\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()
Shortcut: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\ALL MISCELANEOUS FOLDERS\0 DESKTOP SHORTCUTS - ALL - Copy\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()
Shortcut: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\ALL MISCELANEOUS FOLDERS\0 DESKTOP SHORTCUTS - ALL\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()
Shortcut: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\140 Desktop Shortcuts - Copy\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()
Shortcut: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\140 Desktop Shortcuts\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()
Shortcut: C:\Users\Morgan Pierce Parker\Desktop\140 ADDITIONAL DESKTOP SHORTCUTS\140 Desktop Shortcuts - Copy\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()
Shortcut: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ELDIM\EDIDViewer\Uninstall EDIDViewer.lnk -> C:\Program Files (x86)\ELDIM\ELDIM - EDIDViewer\Uninstall.bat ()
Shortcut: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Network Shortcuts\My Web Sites on MSN\target.lnk -> hxxp://www.msnusers.co
Shortcut: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\krut.bat.lnk -> C:\Program Files\krut V093 Windows Package\krut.bat ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()
 
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\SHORTCUTS DUPLICATOS - Copy\TradeMiner 3.0 Forex.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/forex/tm3-forex.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\1cf9d141-2a8b9d94"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\SHORTCUTS DUPLICATOS - Copy\TradeMiner 3.0 Futures.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/futures/tm3-futures.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\4450f449-5bb16e56"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\SHORTCUTS DUPLICATOS - Copy\TradeMiner 3.0 Stocks.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/stocks/tm3-stocks.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\3875a387-2f089438"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\SHORTCUTS DUPLICATOS\TradeMiner 3.0 Forex.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/forex/tm3-forex.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\1cf9d141-2a8b9d94"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\SHORTCUTS DUPLICATOS\TradeMiner 3.0 Futures.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/futures/tm3-futures.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\4450f449-5bb16e56"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\SHORTCUTS DUPLICATOS\TradeMiner 3.0 Stocks.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/stocks/tm3-stocks.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\3875a387-2f089438"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\140 Desktop Shortcuts - Copy\TradeMiner 3.5 Forex.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/forex/tm3-forex.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\1cf9d141-52a7e7b8"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\140 Desktop Shortcuts - Copy\TradeMiner 3.5 Futures.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/futures/tm3-futures.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\4450f449-7413297e"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\140 Desktop Shortcuts - Copy\TradeMiner 3.5 Stocks.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/stocks/tm3-stocks.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\3875a387-5d73517c"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\140 Desktop Shortcuts\TradeMiner 3.5 Forex.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/forex/tm3-forex.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\1cf9d141-52a7e7b8"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\140 Desktop Shortcuts\TradeMiner 3.5 Futures.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/futures/tm3-futures.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\4450f449-7413297e"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\140 Desktop Shortcuts\TradeMiner 3.5 Stocks.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/stocks/tm3-stocks.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\3875a387-5d73517c"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 ADDITIONAL DESKTOP SHORTCUTS\140 Desktop Shortcuts - Copy\TradeMiner 3.5 Forex.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/forex/tm3-forex.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\1cf9d141-52a7e7b8"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 ADDITIONAL DESKTOP SHORTCUTS\140 Desktop Shortcuts - Copy\TradeMiner 3.5 Futures.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/futures/tm3-futures.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\4450f449-7413297e"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 ADDITIONAL DESKTOP SHORTCUTS\140 Desktop Shortcuts - Copy\TradeMiner 3.5 Stocks.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/stocks/tm3-stocks.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\3875a387-5d73517c"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gecko Software\TradeMiner 3.0 Forex.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/forex/tm3-forex.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\1cf9d141-2a8b9d94"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gecko Software\TradeMiner 3.0 Futures.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/futures/tm3-futures.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\4450f449-5bb16e56"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gecko Software\TradeMiner 3.0 Stocks.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/stocks/tm3-stocks.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\3875a387-2f089438"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gecko Software\TradeMiner 3.5 Forex.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/forex/tm3-forex.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\1cf9d141-52a7e7b8"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gecko Software\TradeMiner 3.5 Futures.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/futures/tm3-futures.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\4450f449-7413297e"
ShortcutWithArgument: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gecko Software\TradeMiner 3.5 Stocks.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/stocks/tm3-stocks.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\3875a387-5d73517c"
 
==================== Loaded Modules (Whitelisted) ==============
 
2015-07-31 14:13 - 2013-09-06 17:25 - 000122888 _____ () C:\Windows\System32\KVPrinterMon.dll
2015-08-03 11:37 - 2017-01-17 04:25 - 000117440 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2018-02-19 15:56 - 2018-02-19 15:56 - 000143104 _____ () C:\Program Files\Softland\novaPDF 9\Server\AgileDotNetRT64.dll
2015-08-25 12:29 - 2014-08-25 11:04 - 000389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2018-03-03 16:50 - 2017-08-30 13:29 - 000260752 _____ () C:\Program Files\EASEUS\Todo Backup\bin\TodoBackupService.exe
2015-09-05 10:43 - 2015-02-27 14:38 - 000721263 _____ () C:\Windows\SysWOW64\WSCM64.dll
2018-03-03 16:51 - 2017-08-30 13:27 - 000024208 _____ () C:\Program Files\EASEUS\Todo Backup\bin\x64\fsclog.dll
2018-02-01 10:30 - 2017-02-03 00:30 - 028067328 _____ () C:\Program Files (x86)\YOUTUBE DOWNLOADER HD\YouTubeDownloaderHD.exe
2018-01-09 19:18 - 2017-03-13 10:34 - 000098238 _____ () C:\Program Files (x86)\NinjaTrader 7\bin64\CliSecureRT64.dll
2014-03-22 11:12 - 2014-03-22 11:12 - 000219648 _____ () C:\Users\Morgan Pierce Parker\Documents\NinjaTrader 7\bin\Custom\CFRN_Ninja.dll
2016-11-18 17:13 - 2015-04-17 14:01 - 000048128 _____ () C:\Users\Morgan Pierce Parker\Documents\NinjaTrader 7\bin\Custom\PivotScalper.dll
2016-11-21 10:49 - 2016-05-22 22:52 - 000050688 _____ () C:\Users\Morgan Pierce Parker\Documents\NinjaTrader 7\bin\Custom\PivotScalper7.dll
2016-11-18 17:17 - 2015-09-03 10:39 - 000028672 _____ () C:\Users\Morgan Pierce Parker\Documents\NinjaTrader 7\bin\Custom\TOMbars2.dll
2013-03-21 13:21 - 2012-04-24 05:29 - 000045568 _____ () C:\Program Files\Genie9\Genie Timeline\GSLogging.gtl
2013-03-21 13:21 - 2012-09-10 10:29 - 000488960 _____ () C:\Program Files\Genie9\Genie Timeline\GSIndexDB.gtl
2013-03-21 13:21 - 2012-02-02 05:16 - 000740864 _____ () C:\Program Files\Genie9\Genie Timeline\sqlite3.gtl
2013-03-21 13:21 - 2012-04-24 05:29 - 000011264 _____ () C:\Program Files\Genie9\Genie Timeline\RWLock.gtl
2013-03-21 13:21 - 2012-09-10 10:29 - 000205824 _____ () C:\Program Files\Genie9\Genie Timeline\Settings.gtl
2013-03-21 13:21 - 2012-04-24 05:29 - 000089600 _____ () C:\Program Files\Genie9\Genie Timeline\GSEncryption.gtl
2013-03-21 13:21 - 2012-09-10 10:29 - 000708608 _____ () C:\Program Files\Genie9\Genie Timeline\GSBackupManager.gtl
2013-03-21 13:21 - 2012-09-10 10:29 - 000343552 _____ () C:\Program Files\Genie9\Genie Timeline\GSWatcher4.gtl
2013-03-21 13:21 - 2012-09-10 10:29 - 000332800 _____ () C:\Program Files\Genie9\Genie Timeline\OnlineHandler.gtl
2013-03-21 13:21 - 2012-09-10 10:29 - 000054784 _____ () C:\Program Files\Genie9\Genie Timeline\GSLogManager.gtl
2013-03-21 13:21 - 2012-09-10 10:29 - 000087040 _____ () C:\Program Files\Genie9\Genie Timeline\QueueManager.gtl
2013-03-21 13:21 - 2012-02-02 05:16 - 000010752 _____ () C:\Program Files\Genie9\Genie Timeline\VSSEngine_Proxy.gtl
2013-03-21 13:21 - 2012-04-24 05:29 - 000058368 _____ () C:\Program Files\Genie9\Genie Timeline\GSLibrariesManager.gtl
2014-07-29 10:25 - 2014-07-29 10:25 - 000220672 _____ () C:\Program Files (x86)\Steganos Privacy Suite 15\ShellExtension.dll
2015-06-22 09:49 - 2015-06-19 10:18 - 001787392 _____ () C:\Program Files (x86)\reaConverter 7 Standard\newcontext64.dll
2017-11-23 11:52 - 2017-11-23 11:52 - 000155504 _____ () C:\Program Files (x86)\Zemana AntiMalware\ZAMShellExt64.dll
2012-11-14 09:06 - 2012-11-14 09:06 - 000045568 _____ () C:\Program Files\Genie9\Zoolz2\GSLogging.dll
2013-03-14 04:38 - 2013-03-14 04:38 - 000092160 _____ () C:\Program Files\Genie9\Zoolz2\Communicator.dll
2014-08-28 13:25 - 2011-11-28 20:56 - 000919040 _____ () C:\Program Files (x86)\TagTuner\TagTuner64.dll
2008-08-05 14:01 - 2008-08-05 14:01 - 000092160 _____ () C:\Program Files (x86)\Zoom Player\zpshlext64.dll
2018-03-20 10:21 - 2018-02-05 14:44 - 002299168 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2017-08-15 16:15 - 2017-08-15 16:15 - 037469760 _____ () C:\Program Files\thinkorswim2\jre\bin\jfxwebkit.dll
2018-03-12 09:42 - 2018-03-12 09:42 - 000013824 _____ () C:\Program Files\thinkorswim2\usergui\1924.0.9\jWinAPI64.dll
2018-03-22 15:45 - 2018-03-21 02:17 - 098691672 _____ () C:\Program Files\Opera\52.0.2871.30\opera_browser.dll
2018-03-22 15:45 - 2018-03-21 02:17 - 004439128 _____ () C:\Program Files\Opera\52.0.2871.30\libglesv2.dll
2018-03-22 15:45 - 2018-03-21 02:17 - 000100440 _____ () C:\Program Files\Opera\52.0.2871.30\libegl.dll
2016-07-05 18:18 - 2016-07-05 18:18 - 000714992 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
2011-05-04 22:18 - 2017-02-21 18:19 - 000083136 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CodeLog.dll
2011-05-04 22:19 - 2016-03-07 19:08 - 001291264 _____ () C:\Program Files\EASEUS\Todo Backup\bin\libxml2.dll
2011-05-04 22:19 - 2004-10-05 04:08 - 000055808 _____ () C:\Program Files\EASEUS\Todo Backup\bin\zlib1.dll
2018-03-03 16:49 - 2016-12-06 03:43 - 000019648 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CompressFile.dll
2018-03-03 16:50 - 2016-12-06 03:44 - 000090816 _____ () C:\Program Files\EASEUS\Todo Backup\bin\TBGetRemoteNetInfo.dll
2018-03-03 16:49 - 2016-12-06 03:43 - 000024768 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CmcTbProxy.dll
2018-03-03 16:49 - 2016-12-06 03:43 - 000188608 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CMCPipeCenter.dll
2018-03-03 16:49 - 2017-08-30 13:25 - 000183440 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CMCAdapt.dll
2018-03-03 16:49 - 2016-12-06 03:43 - 000163520 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CMCAdapt_RTTO.dll
2018-03-03 16:50 - 2017-08-30 13:27 - 000055952 _____ () C:\Program Files\EASEUS\Todo Backup\bin\TBInfo.dll
2018-03-03 16:49 - 2016-12-06 03:43 - 000018112 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CMCNetTokenProxy.dll
2018-03-03 16:49 - 2017-08-30 13:25 - 000061072 _____ () C:\Program Files\EASEUS\Todo Backup\bin\ActivationOnline.dll
2018-03-03 16:50 - 2017-09-04 18:39 - 000699024 _____ () C:\Program Files\EASEUS\Todo Backup\bin\EuActiveOnline.dll
2018-03-03 16:49 - 2017-08-30 13:26 - 000487568 _____ () C:\Program Files\EASEUS\Todo Backup\bin\EULicenseDLL.DLL
2018-03-03 16:49 - 2017-08-30 13:26 - 000021648 _____ () C:\Program Files\EASEUS\Todo Backup\bin\fsclog.dll
2011-05-04 22:19 - 2017-08-30 13:26 - 000085648 _____ () C:\Program Files\EASEUS\Todo Backup\bin\logsys.dll
2018-03-03 16:49 - 2017-08-30 13:26 - 000032912 _____ () C:\Program Files\EASEUS\Todo Backup\bin\DiskSearchImg.dll
2011-05-04 22:19 - 2017-08-30 13:26 - 000070800 _____ () C:\Program Files\EASEUS\Todo Backup\bin\MountImg.dll
2011-05-04 22:19 - 2017-08-30 13:26 - 000160400 _____ () C:\Program Files\EASEUS\Todo Backup\bin\ImgFile.dll
2011-05-04 22:18 - 2017-08-30 13:26 - 000296592 _____ () C:\Program Files\EASEUS\Todo Backup\bin\DsImgFile.dll
2011-05-04 22:18 - 2016-12-06 03:43 - 000078528 _____ () C:\Program Files\EASEUS\Todo Backup\bin\FatLib.dll
2018-03-03 16:50 - 2017-08-30 13:26 - 000305808 _____ () C:\Program Files\EASEUS\Todo Backup\bin\NTFSUtil.dll
2011-05-04 22:19 - 2016-12-06 03:44 - 000210112 _____ () C:\Program Files\EASEUS\Todo Backup\bin\NTFSLib.dll
2011-05-04 22:18 - 2016-12-06 03:43 - 000026304 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CallbackOperator.dll
2011-05-04 22:18 - 2016-12-06 03:43 - 000074432 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CheckImg.dll
2011-05-04 22:19 - 2016-12-06 03:44 - 000142016 _____ () C:\Program Files\EASEUS\Todo Backup\bin\vhdvmdk.dll
2011-05-04 22:18 - 2017-09-11 15:28 - 000085136 _____ () C:\Program Files\EASEUS\Todo Backup\bin\BootDriver.dll
2018-03-03 16:49 - 2017-08-30 13:26 - 000844944 _____ () C:\Program Files\EASEUS\Todo Backup\bin\ExImage.dll
2018-03-03 16:49 - 2016-12-06 03:43 - 000195776 _____ () C:\Program Files\EASEUS\Todo Backup\bin\EmailBackupSize.dll
2018-03-03 16:49 - 2016-12-06 03:43 - 000414400 _____ () C:\Program Files\EASEUS\Todo Backup\bin\AndroidImage.dll
2011-05-04 22:18 - 2017-08-30 13:26 - 000162448 _____ () C:\Program Files\EASEUS\Todo Backup\bin\EnumDisk.dll
2011-05-04 22:18 - 2016-12-06 03:43 - 000029376 _____ () C:\Program Files\EASEUS\Todo Backup\bin\DeviceAdapter.dll
2018-03-03 16:49 - 2016-12-06 03:44 - 000114368 _____ () C:\Program Files\EASEUS\Todo Backup\bin\FileStorage.dll
2011-05-04 22:18 - 2016-12-06 03:44 - 000026816 _____ () C:\Program Files\EASEUS\Todo Backup\bin\GetDriverInfo.dll
2011-05-04 22:18 - 2016-12-06 03:43 - 000022720 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CorrectMbr.dll
2018-03-03 16:49 - 2017-08-30 13:26 - 000034448 _____ () C:\Program Files\EASEUS\Todo Backup\bin\EnumTapeDevice.dll
2018-03-03 16:50 - 2016-12-06 03:44 - 000054464 _____ () C:\Program Files\EASEUS\Todo Backup\bin\TbTapeBrowse.dll
2011-05-04 22:19 - 2016-12-06 03:44 - 000066240 _____ () C:\Program Files\EASEUS\Todo Backup\bin\RegLib.dll
2018-03-03 16:49 - 2017-08-30 13:25 - 000026768 _____ () C:\Program Files\EASEUS\Todo Backup\bin\AccountManager.dll
2018-03-03 16:50 - 2017-08-30 13:26 - 000072848 _____ () C:\Program Files\EASEUS\Todo Backup\bin\NasOperator.dll
2018-03-03 16:49 - 2016-12-06 03:43 - 000221376 _____ () C:\Program Files\EASEUS\Todo Backup\bin\EmailBrowser.dll
2018-03-03 16:49 - 2016-12-06 03:43 - 000079040 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CloudOperator.dll
2018-03-03 16:49 - 2017-08-30 13:25 - 000021648 _____ () C:\Program Files\EASEUS\Todo Backup\bin\ActiveOnline.dll
2018-03-03 16:50 - 2016-12-06 03:44 - 000138432 _____ () C:\Program Files\EASEUS\Todo Backup\bin\VMConfig.dll
2018-03-03 16:49 - 2016-12-06 03:43 - 000021696 _____ () C:\Program Files\EASEUS\Todo Backup\bin\AndroidDeviceManager.dll
2018-03-03 16:50 - 2017-08-30 13:27 - 000074896 _____ () C:\Program Files\EASEUS\Todo Backup\bin\SqlExBrowser.dll
2018-03-03 16:50 - 2017-08-30 13:27 - 000585872 _____ () C:\Program Files\EASEUS\Todo Backup\bin\SqlSMOCPlusPlus.dll
2011-05-04 22:19 - 2016-12-06 03:44 - 000045248 _____ () C:\Program Files\EASEUS\Todo Backup\bin\TbDataSwap.dll
2011-05-04 22:18 - 2017-08-30 13:25 - 000367760 _____ () C:\Program Files\EASEUS\Todo Backup\bin\DeviceManager.dll
2011-05-04 22:18 - 2017-08-30 13:25 - 000141456 _____ () C:\Program Files\EASEUS\Todo Backup\bin\Device.dll
2011-05-04 22:19 - 2016-12-06 03:44 - 000149184 _____ () C:\Program Files\EASEUS\Todo Backup\bin\Partition.dll
2011-05-04 22:18 - 2016-12-06 03:44 - 000052416 _____ () C:\Program Files\EASEUS\Todo Backup\bin\FileSystemAnalyser.dll
2011-05-04 22:18 - 2016-12-06 03:43 - 000064192 _____ () C:\Program Files\EASEUS\Todo Backup\bin\FATFileSystemAnalyser.dll
2011-05-04 22:18 - 2016-12-06 03:43 - 000091840 _____ () C:\Program Files\EASEUS\Todo Backup\bin\Common.dll
2011-05-04 22:19 - 2016-12-06 03:44 - 000058560 _____ () C:\Program Files\EASEUS\Todo Backup\bin\NTFSFileSystemAnalyser.dll
2018-03-03 16:50 - 2016-12-06 03:44 - 000210112 _____ () C:\Program Files\EASEUS\Todo Backup\bin\SmartBackup.dll
2002-04-17 10:49 - 2002-04-17 10:49 - 000024576 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Share-to-Web\hpgs2wnfps.dll
2018-03-20 10:45 - 2018-03-20 10:45 - 000576512 ____R () c:\temp\morganp\tmp\Local Settings\Temp\v~fBAEB3BB3-E704-42B9-9A89-B0D9817C0607.tmp
2007-02-18 08:00 - 2007-02-18 08:00 - 000025088 _____ () C:\Windows\system32\tsd32.dll
2017-09-26 22:22 - 2017-09-26 22:22 - 001984000 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll
2018-02-23 11:42 - 2018-02-02 17:47 - 000054784 _____ () C:\Program Files (x86)\Allavsoft\Video Downloader Converter\record\screen-capture-recorder.dll
2012-12-10 15:19 - 2012-12-07 13:21 - 005407744 _____ () C:\Program Files (x86)\PlayClaw4\playclaw-vcam.dll
2016-08-05 05:44 - 2016-08-05 05:44 - 000050408 _____ () C:\Program Files (x86)\Readygo Screen Recorder\TGEncoder.dll
2016-08-05 05:44 - 2016-08-05 05:44 - 001627880 _____ () C:\Program Files (x86)\Readygo Screen Recorder\TGGDISource.dll
2016-08-05 05:44 - 2016-08-05 05:44 - 000024296 _____ () C:\Program Files (x86)\Readygo Screen Recorder\TGAudio.dll
2011-10-29 12:00 - 2011-10-29 12:00 - 002572656 _____ () C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\QtCore4.dll
2011-10-29 12:00 - 2011-10-29 12:00 - 009053040 _____ () C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\QtGui4.dll
2011-10-29 12:00 - 2011-10-29 12:00 - 000379760 _____ () C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\QtXml4.dll
2011-10-29 12:00 - 2011-10-29 12:00 - 011045744 _____ () C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\QtWebKit4.dll
2011-10-29 12:00 - 2011-10-29 12:00 - 000249712 _____ () C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\phonon4.dll
2011-10-29 12:00 - 2011-10-29 12:00 - 000677744 _____ () C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\QtNetwork4.dll
2011-10-29 12:00 - 2011-10-29 12:00 - 000305520 _____ () C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\spelldllv3.dll
2011-10-29 12:00 - 2011-10-29 12:00 - 000471920 _____ () C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\wpstablestyle.DLL
2011-10-29 12:00 - 2011-10-29 12:00 - 000179568 _____ () C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\wpsdatalogic.dll
2011-10-29 12:00 - 2011-10-29 12:00 - 006901104 _____ () C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\typocore.dll
2011-10-29 12:00 - 2011-10-29 12:00 - 000175472 _____ () C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\griddrawer.dll
2011-11-22 22:23 - 2011-11-22 22:23 - 003021176 _____ () C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\dsm.dll
2011-10-29 12:00 - 2011-10-29 12:00 - 000209776 _____ () C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\wpslyt.DLL
2016-07-05 18:13 - 2016-07-05 18:13 - 001382048 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\cpprest100_1_2.dll
2015-09-21 10:59 - 2015-09-21 10:59 - 000653096 _____ () c:\program files (x86)\real\realplayer\RPDS\Lib\r1api.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
AlternateDataStreams: C:\Windows\system.ini:c1_encryption_d [14]
AlternateDataStreams: C:\Windows\win.ini:c1_encryption_d [14]
AlternateDataStreams: C:\ProgramData\Nalpeiron:user.ns1 [5]
AlternateDataStreams: C:\ProgramData\Nalpeiron:user.ns2 [5]
AlternateDataStreams: C:\ProgramData\Nalpeiron:user.ns3 [4]
AlternateDataStreams: C:\ProgramData\Nalpeiron:user.ns4 [5]
AlternateDataStreams: C:\ProgramData\TEMP:55DB0DDA [180]
AlternateDataStreams: C:\Users\Morgan Pierce Parker\Desktop\dll failure DVDChief.exe:{4C8E01B9-9DBC0591-1A263F88-3DB4076F} [146]
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Backup4all5Srv => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BFE => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\camsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\fsproflt2 => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\lfsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MpsSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP_TDI => ""="Driver Group"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Schedule => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\semgrsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SharedAccess => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\shellhwdetection => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TokenBroker => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WSService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{0CBD4F48-3751-475D-BE88-4F271385B672} => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AeroadminService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Backup4all5Srv => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\camsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\fsproflt2 => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\GoToAssist => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\HideMyIpSRV => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\lfsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SamSs => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Schedule => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\semgrsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\shellhwdetection => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv2 => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srvnet => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TokenBroker => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WiredTools => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WSService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{0CBD4F48-3751-475D-BE88-4F271385B672} => ""="Service"
 
==================== Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
IE trusted site: HKU\.DEFAULT\...\dell.com -> dell.com
IE trusted site: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\com -> hxxp://*.Wondershare.com
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2013-03-17 13:56 - 2018-03-01 13:06 - 000000855 _____ C:\Windows\system32\Drivers\etc\hosts
 
127.0.0.1       localhost
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
MSCONFIG\Services: ABBYY.Licensing.BCR.Windows.2.0 => 2
MSCONFIG\Services: ABBYY.Licensing.PDFTransformer.Classic.4.0 => 3
MSCONFIG\Services: AcronisAgent => 2
MSCONFIG\Services: AcrSch2Svc => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: AeLookupSvc => 3
MSCONFIG\Services: AHDDC2 => 2
MSCONFIG\Services: AMD External Events Utility => 2
MSCONFIG\Services: AppHostSvc => 2
MSCONFIG\Services: Apple Mobile Device => 2
MSCONFIG\Services: Apple Mobile Device Service => 2
MSCONFIG\Services: AppMgmt => 3
MSCONFIG\Services: ARSM => 2
MSCONFIG\Services: aspnet_state => 3
MSCONFIG\Services: AtomicAlarmClock => 2
MSCONFIG\Services: AudioEndpointBuilder => 2
MSCONFIG\Services: AudioSrv => 2
MSCONFIG\Services: AxInstSV => 3
MSCONFIG\Services: Backup4all5Srv => 2
MSCONFIG\Services: Backupper Service => 2
MSCONFIG\Services: BDESVC => 3
MSCONFIG\Services: BFE => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: Browser => 3
MSCONFIG\Services: BstHdAndroidSvc => 3
MSCONFIG\Services: BstHdLogRotatorSvc => 3
MSCONFIG\Services: BstHdUpdaterSvc => 3
MSCONFIG\Services: bthserv => 3
MSCONFIG\Services: CachemanService => 2
MSCONFIG\Services: CertPropSvc => 3
MSCONFIG\Services: ClickToRunSvc => 2
MSCONFIG\Services: ClipSrv => 3
MSCONFIG\Services: CloudBerry Drive Service => 3
MSCONFIG\Services: clr_optimization_v2.0.50727_32 => 3
MSCONFIG\Services: clr_optimization_v2.0.50727_64 => 3
MSCONFIG\Services: clr_optimization_v4.0.30319_32 => 2
MSCONFIG\Services: clr_optimization_v4.0.30319_64 => 2
MSCONFIG\Services: COMSysApp => 3
MSCONFIG\Services: Crypkey License => 2
MSCONFIG\Services: CryptSvc => 3
MSCONFIG\Services: dbupdate => 2
MSCONFIG\Services: dbupdatem => 3
MSCONFIG\Services: DbxSvc => 2
MSCONFIG\Services: DDVCollectorSvcApi => 2
MSCONFIG\Services: DDVDataCollector => 2
MSCONFIG\Services: DDVRulesProcessor => 2
MSCONFIG\Services: DfSdkS => 3
MSCONFIG\Services: Dhcp => 2
MSCONFIG\Services: dmadmin => 3
MSCONFIG\Services: dmserver => 2
MSCONFIG\Services: Dnscache => 2
MSCONFIG\Services: dot3svc => 3
MSCONFIG\Services: EapHost => 3
MSCONFIG\Services: EaseUS Agent => 3
MSCONFIG\Services: EFS => 3
MSCONFIG\Services: ehRecvr => 2
MSCONFIG\Services: ehSched => 2
MSCONFIG\Services: eventlog => 2
MSCONFIG\Services: EventSystem => 2
MSCONFIG\Services: Fabs => 2
MSCONFIG\Services: fdPHost => 3
MSCONFIG\Services: FDResPub => 2
MSCONFIG\Services: FileMarkerApplyIconService => 2
MSCONFIG\Services: FileReplicatorService => 3
MSCONFIG\Services: FirebirdServerMAGIXInstance => 3
MSCONFIG\Services: FontCache => 2
MSCONFIG\Services: FontCache3.0.0.0 => 3
MSCONFIG\Services: FrAgent => 2
MSCONFIG\Services: fsproflt2 => 2
MSCONFIG\Services: GenieTimelineService => 3
MSCONFIG\Services: GoToAssist => 3
MSCONFIG\Services: gpsvc => 2
MSCONFIG\Services: Guard Agent => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: HDDSvc => 3
MSCONFIG\Services: HideMyIpSRV => 2
MSCONFIG\Services: hidserv => 3
MSCONFIG\Services: hkmsvc => 3
MSCONFIG\Services: HomeGroupListener => 3
MSCONFIG\Services: HomeGroupProvider => 3
MSCONFIG\Services: IDriverT => 3
MSCONFIG\Services: IEEtwCollectorService => 3
MSCONFIG\Services: IKEEXT => 2
MSCONFIG\Services: ImapiService => 3
MSCONFIG\Services: imdsksvc => 3
MSCONFIG\Services: IPBusEnum => 3
MSCONFIG\Services: iphlpsvc => 3
MSCONFIG\Services: KeyIso => 3
MSCONFIG\Services: KooRaRooMediaServer => 3
MSCONFIG\Services: KtmRm => 3
MSCONFIG\Services: LanmanServer => 2
MSCONFIG\Services: LanmanWorkstation => 2
MSCONFIG\Services: LBTServ => 3
MSCONFIG\Services: Leawo_service => 2
MSCONFIG\Services: lltdsvc => 3
MSCONFIG\Services: lmhosts => 2
MSCONFIG\Services: LMIGuardianSvc => 2
MSCONFIG\Services: LMIMaint => 2
MSCONFIG\Services: LogMeIn => 2
MSCONFIG\Services: Mcx2Svc => 3
MSCONFIG\Services: MDM => 2
MSCONFIG\Services: MMCSS => 2
MSCONFIG\Services: MMS => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: MpsSvc => 2
MSCONFIG\Services: MSiSCSI => 3
MSCONFIG\Services: msiserver => 3
MSCONFIG\Services: MSSQLSERVER => 3
MSCONFIG\Services: MSSQLServerADHelper => 3
MSCONFIG\Services: napagent => 3
MSCONFIG\Services: NetDDE => 3
MSCONFIG\Services: NetDDEdsdm => 3
MSCONFIG\Services: NetgearSwitchUSB => 2
MSCONFIG\Services: Netlogon => 3
MSCONFIG\Services: Netman => 3
MSCONFIG\Services: NetMsmqActivator => 2
MSCONFIG\Services: NetPipeActivator => 2
MSCONFIG\Services: netprofm => 3
MSCONFIG\Services: NetTcpActivator => 2
MSCONFIG\Services: NlaSvc => 2
MSCONFIG\Services: NovaPdf9Server => 2
MSCONFIG\Services: nsi => 2
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: ocster_1clk_backup => 3
MSCONFIG\Services: OkayFreedom VPN Starter Service => 3
MSCONFIG\Services: OO DiskImage => 2
MSCONFIG\Services: ose => 3
MSCONFIG\Services: osppsvc => 3
MSCONFIG\Services: p2pimsvc => 3
MSCONFIG\Services: p2psvc => 3
MSCONFIG\Services: PAExec => 3
MSCONFIG\Services: PcaSvc => 2
MSCONFIG\Services: PDF Architect Helper Service => 2
MSCONFIG\Services: PDF Architect Service => 2
MSCONFIG\Services: PeerDistSvc => 3
MSCONFIG\Services: pla => 3
MSCONFIG\Services: PlaysService => 2
MSCONFIG\Services: PNRPAutoReg => 3
MSCONFIG\Services: PNRPsvc => 3
MSCONFIG\Services: PolicyAgent => 3
MSCONFIG\Services: Power => 2
MSCONFIG\Services: prio_svc => 2
MSCONFIG\Services: ProtectedStorage => 3
MSCONFIG\Services: QWAVE => 3
MSCONFIG\Services: RasAuto => 3
MSCONFIG\Services: RasMan => 3
MSCONFIG\Services: reaConverter_service => 2
MSCONFIG\Services: RealPlayerUpdateSvc => 2
MSCONFIG\Services: RealTimes Desktop Service => 2
MSCONFIG\Services: RichVideo => 3
MSCONFIG\Services: RichVideo64 => 2
MSCONFIG\Services: RpcEptMapper => 2
MSCONFIG\Services: RpcLocator => 3
MSCONFIG\Services: SamSs => 2
MSCONFIG\Services: Schedule => 2
MSCONFIG\Services: SDRSVC => 3
MSCONFIG\Services: SeaPort => 2
MSCONFIG\Services: seclogon => 3
MSCONFIG\Services: Seed4.Me Service => 2
MSCONFIG\Services: SENS => 2
MSCONFIG\Services: SharedAccess => 3
MSCONFIG\Services: ShellHWDetection => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: SNMPTRAP => 3
MSCONFIG\Services: Spooler => 2
MSCONFIG\Services: sppuinotify => 3
MSCONFIG\Services: spupdsvc => 3
MSCONFIG\Services: SQLSERVERAGENT => 3
MSCONFIG\Services: SQLWriter => 2
MSCONFIG\Services: srservice => 2
MSCONFIG\Services: SstpSvc => 3
MSCONFIG\Services: stisvc => 3
MSCONFIG\Services: SupportAssistAgent => 2
MSCONFIG\Services: swprv => 3
MSCONFIG\Services: SysMain => 2
MSCONFIG\Services: SysmonLog => 3
MSCONFIG\Services: TapiSrv => 3
MSCONFIG\Services: TBS => 3
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\Services: TeamViewer8 => 3
MSCONFIG\Services: Themes => 2
MSCONFIG\Services: THREADORDER => 3
MSCONFIG\Services: TrkWks => 2
MSCONFIG\Services: UI0Detect => 3
MSCONFIG\Services: UmRdpService => 3
MSCONFIG\Services: Unchecky => 2
MSCONFIG\Services: upnphost => 3
MSCONFIG\Services: USBSafelyRemoveService => 2
MSCONFIG\Services: VaultSvc => 3
MSCONFIG\Services: vds => 3
MSCONFIG\Services: VSS => 3
MSCONFIG\Services: VssProvider => 2
MSCONFIG\Services: vToolbarUpdater17.1.2 => 3
MSCONFIG\Services: W3SVC => 2
MSCONFIG\Services: WAS => 3
MSCONFIG\Services: WatAdminSvc => 3
MSCONFIG\Services: wbengine => 3
MSCONFIG\Services: wcncsvc => 3
MSCONFIG\Services: WcsPlugInService => 3
MSCONFIG\Services: WdiServiceHost => 3
MSCONFIG\Services: WdiSystemHost => 3
MSCONFIG\Services: WebUpdate4 => 2
MSCONFIG\Services: Wecsvc => 3
MSCONFIG\Services: wercplsupport => 3
MSCONFIG\Services: WinDefend => 2
MSCONFIG\Services: WindscribeService => 2
MSCONFIG\Services: WinExtService => 2
MSCONFIG\Services: WinHttpAutoProxySvc => 3
MSCONFIG\Services: Winmgmt => 2
MSCONFIG\Services: WinRM => 3
MSCONFIG\Services: WiseBootAssistant => 2
MSCONFIG\Services: Wlansvc => 2
MSCONFIG\Services: wlidsvc => 2
MSCONFIG\Services: WmdmPmSN => 3
MSCONFIG\Services: WMPNetworkSvc => 2
MSCONFIG\Services: WPCSvc => 3
MSCONFIG\Services: WPDBusEnum => 3
MSCONFIG\Services: WsAppService => 2
MSCONFIG\Services: wscsvc => 2
MSCONFIG\Services: WsDrvInst => 3
MSCONFIG\Services: WSearch => 2
MSCONFIG\Services: wuauserv => 2
MSCONFIG\Services: wudfsvc => 3
MSCONFIG\Services: WwanSvc => 3
MSCONFIG\Services: WZCSVC => 2
MSCONFIG\Services: ZAMSvc => 2
MSCONFIG\Services: Zoolz 2 Service => 3
MSCONFIG\Services: {0CBD4F48-3751-475D-BE88-4F271385B672} => 2
MSCONFIG\startupfolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Windows Search.lnk => C:\WINDOWS\pss\Windows Search.lnkCommon Startup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^NETGEAR A6210 Genie.lnk => C:\Windows\pss\NETGEAR A6210 Genie.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Morgan Pierce Parker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^1 DOWNLOADS - Shortcut (2).lnk => C:\Windows\pss\1 DOWNLOADS - Shortcut (2).lnk.Startup
MSCONFIG\startupfolder: C:^Users^Morgan Pierce Parker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CandyClock.lnk => C:\Windows\pss\CandyClock.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Morgan Pierce Parker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Create Synchronicity.exe - Shortcut.lnk => C:\Windows\pss\Create Synchronicity.exe - Shortcut.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Morgan Pierce Parker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^eChat MannM.lnk => C:\Windows\pss\eChat MannM.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Morgan Pierce Parker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^eChat.exe Kevin P.lnk => C:\Windows\pss\eChat.exe Kevin P.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Morgan Pierce Parker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Efficient Calendar.lnk => C:\Windows\pss\Efficient Calendar.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Morgan Pierce Parker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Process Lasso.lnk => C:\Windows\pss\Process Lasso.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Morgan Pierce Parker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Startup - Shortcut (4).lnk => C:\Windows\pss\Startup - Shortcut (4).lnk.Startup
MSCONFIG\startupfolder: C:^Users^Morgan Pierce Parker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^ZZ AVAILABLE FILE.RTF.lnk => C:\Windows\pss\ZZ AVAILABLE FILE.RTF.lnk.Startup
MSCONFIG\startupreg: AntDM => C:\Program Files (x86)\Ant Download Manager\AntDM.exe
MSCONFIG\startupreg: antMR => C:\Program Files (x86)\Ant Download Manager\antMR.exe
MSCONFIG\startupreg: AtomicAlarmClock6 => C:\Program Files\Atomic Alarm Clock\AtomicAlarmClock.exe
MSCONFIG\startupreg: CachemanTray => C:\Program Files (x86)\Cacheman\CachemanTray.exe
MSCONFIG\startupreg: Create Synchronicity - Scheduler => R:\140 Sychronicity\Create Synchronicity.exe /scheduler
MSCONFIG\startupreg: CryptoGiveaway Bounty => "C:\Program Files\Softdeluxe\CryptoGiveaway Bounty\cgbclient.exe" --autorun
MSCONFIG\startupreg: CuteReminder => C:\Program Files (x86)\CuteReminder\CuteReminder.exe
MSCONFIG\startupreg: Dropbox => "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
MSCONFIG\startupreg: EvtMgr6 => C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
MSCONFIG\startupreg: HydraVisionDesktopManager => "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
MSCONFIG\startupreg: LogiOptions => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe /noui
MSCONFIG\startupreg: LogMeIn GUI => "C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe"
MSCONFIG\startupreg: MSC => "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
MSCONFIG\startupreg: OODITRAY.EXE => C:\Program Files\OO Software\DiskImage\ooditray.exe
MSCONFIG\startupreg: RoboForm => "C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
MSCONFIG\startupreg: StarReminder => "C:\Program Files\StarReminder\StarReminder.exe"
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
MSCONFIG\startupreg: StartCN => "C:\Program Files\AMD\CNext\CNext\cnext.exe" atlogon
MSCONFIG\startupreg: StickyPassword => C:\Program Files (x86)\Sticky Password\stpass.exe
MSCONFIG\startupreg: USB Safely Remove => C:\Program Files (x86)\USB Safely Remove\USBSafelyRemove.exe /startup
MSCONFIG\startupreg: vProt => "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
MSCONFIG\startupreg: Windscribe => "C:\Program Files (x86)\Windscribe\Windscribe.exe" -os_restart
MSCONFIG\startupreg: ZAM => "C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe" /minimized
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [TCP Query User{DF3C5BB2-9A06-4151-B474-30AD9E0BDE6D}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [UDP Query User{78F01B45-891D-4621-88D7-4F2F92F87D4F}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [{963370C0-FAF7-4689-8C13-B2A229A7D047}] => (Allow) C:\Program Files (x86)\Synology\Assistant\DSAssistant.exe
FirewallRules: [{9DB980A4-ABA8-4A98-9C7D-1093F47FB8A2}] => (Allow) C:\Program Files (x86)\Synology\Assistant\DSAssistant.exe
FirewallRules: [TCP Query User{CBA7D358-A506-46C0-BE5A-3EB3D374B984}C:\program files\ensignnew\ensign.exe] => (Allow) C:\program files\ensignnew\ensign.exe
FirewallRules: [UDP Query User{BAE3D62C-10B6-45BB-A900-C8B61D1F5445}C:\program files\ensignnew\ensign.exe] => (Allow) C:\program files\ensignnew\ensign.exe
FirewallRules: [{C4A9621F-136C-432D-BBC0-889AB4D178B2}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe
FirewallRules: [{B6A97106-17DC-4388-96FE-C2C378658D3A}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe
FirewallRules: [{C07BD5EB-4286-4D2D-B584-8D1DA1B39931}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper_32.exe
FirewallRules: [{1BB445E9-FE05-495F-A368-A3DA59EE68BC}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper_32.exe
FirewallRules: [{C33CF1CD-B135-420E-BF15-3AB7CC450C86}] => (Allow) C:\Program Files\Opera x64\opera.exe
FirewallRules: [{938C1A5B-96FF-4E7B-8F7B-D2BB3F30002B}] => (Allow) C:\Program Files\Opera x64\opera.exe
FirewallRules: [{FEAA5EE2-2AD3-4EBC-9B2A-D852CF6CFAF3}] => (Allow) C:\Program Files (x86)\gnucash\bin\gnucash.exe
FirewallRules: [{C605AE44-D777-41EC-97F3-872E93473B75}] => (Allow) C:\Program Files (x86)\gnucash\bin\gnucash.exe
FirewallRules: [{5919FF28-282B-4BC5-B2CE-674809C29F98}] => (Allow) C:\Program Files (x86)\gnucash\bin\gconfd-2.exe
FirewallRules: [{6D33FC1F-FF75-4AC6-A0DF-218CF3F3DE42}] => (Allow) C:\Program Files (x86)\gnucash\bin\gconfd-2.exe
FirewallRules: [TCP Query User{5ED49088-34E9-4840-BD82-1BEB2113E648}C:\program files (x86)\leawo\dvd creator\loadingscreen.exe] => (Allow) C:\program files (x86)\leawo\dvd creator\loadingscreen.exe
FirewallRules: [UDP Query User{665788C7-6FFD-4698-B07D-A895D59DB79A}C:\program files (x86)\leawo\dvd creator\loadingscreen.exe] => (Allow) C:\program files (x86)\leawo\dvd creator\loadingscreen.exe
FirewallRules: [TCP Query User{F3D77A24-383F-49D3-BF29-61511C7F560C}C:\program files (x86)\yestrader\trader.exe] => (Allow) C:\program files (x86)\yestrader\trader.exe
FirewallRules: [UDP Query User{53E448C3-4AE6-45B2-A120-23304A140B64}C:\program files (x86)\yestrader\trader.exe] => (Allow) C:\program files (x86)\yestrader\trader.exe
FirewallRules: [{05EDDC51-A5CD-45B2-98DA-ED841AEEF32F}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe
FirewallRules: [{043D13B6-8817-4EAF-A9A0-D94F7D0F3C26}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe
FirewallRules: [{6512F83B-0287-4EC4-AC55-38D8A03B907A}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro\Apowersoft Screen Recorder Pro.exe
FirewallRules: [{C060232A-2F45-4A4E-89B6-146C97E44186}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro\Apowersoft Screen Recorder Pro.exe
FirewallRules: [TCP Query User{A99DA7F3-E3D6-483C-860E-F9A78779A2C3}C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir000b.tmp\lmi_rescue.exe] => (Allow) C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir000b.tmp\lmi_rescue.exe
FirewallRules: [UDP Query User{32AAFE74-55BD-4347-8C61-B223BC0D57B5}C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir000b.tmp\lmi_rescue.exe] => (Allow) C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir000b.tmp\lmi_rescue.exe
FirewallRules: [TCP Query User{CEEF9D91-834A-4E98-BD2C-48D4FB5F39B7}C:\program files (x86)\desktop messenger\8876480\program\backweb-8876480.exe] => (Allow) C:\program files (x86)\desktop messenger\8876480\program\backweb-8876480.exe
FirewallRules: [UDP Query User{29613B42-C918-468F-A5B6-9870479FF241}C:\program files (x86)\desktop messenger\8876480\program\backweb-8876480.exe] => (Allow) C:\program files (x86)\desktop messenger\8876480\program\backweb-8876480.exe
FirewallRules: [{3B9A2557-DCC8-4DEE-9979-6730D01F9A96}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe
FirewallRules: [{47F82C9D-B511-4C01-A894-695D848575E5}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe
FirewallRules: [{10A016C3-9F1B-4B07-82B8-452C1CB9D898}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe
FirewallRules: [{07B74B74-EDFC-48C1-9E87-4AE951539DE8}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe
FirewallRules: [{27256D9A-28A7-42E8-849B-9E5026C29DBE}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
FirewallRules: [{9A552954-B53E-493F-919C-BECAE79A93D1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{3E0A2BE1-50F9-4FEE-95B9-51FF5522EDBA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{8590B646-77D5-4BB4-91A0-D48A96C9821C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{1D310625-87E6-4036-8FA5-75941EBF5754}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{4355C9B9-0F4C-47CA-A18F-3798FE4E2389}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII.SP1\Win32\RpcDataSrv.exe
FirewallRules: [{53F66D24-28B8-48CB-9190-E45EAB10B5DB}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII.SP1\RpcSandraSrv.exe
FirewallRules: [{82D67F21-49A6-43C2-A4AF-1D3BC8BC8BB5}] => (Allow) C:\Program Files\KooRaRoo Media\KooRaRooMedia.exe
FirewallRules: [{5DF549A9-646F-403D-8695-E71896BD243C}] => (Allow) C:\Program Files\KooRaRoo Media\KooRaRooMediaServer.exe
FirewallRules: [TCP Query User{A362A621-DE4F-4EEB-882A-8578A3EFDDCC}C:\program files\internet explorer\iexplore.exe] => (Allow) C:\program files\internet explorer\iexplore.exe
FirewallRules: [UDP Query User{98A27022-0046-423D-ABCD-9A1ADB8553AA}C:\program files\internet explorer\iexplore.exe] => (Allow) C:\program files\internet explorer\iexplore.exe
FirewallRules: [TCP Query User{F0EF7AC1-2E8B-466E-9AD5-D9F2E38FDDEB}C:\program files (x86)\1stworks\hotcommlite\bin\hotcomm.exe] => (Allow) C:\program files (x86)\1stworks\hotcommlite\bin\hotcomm.exe
FirewallRules: [UDP Query User{EE063828-93EE-4D3A-B622-0F2E29AE0881}C:\program files (x86)\1stworks\hotcommlite\bin\hotcomm.exe] => (Allow) C:\program files (x86)\1stworks\hotcommlite\bin\hotcomm.exe
FirewallRules: [TCP Query User{8FAFA6F6-4461-4223-8F4F-1BBFF9D37E2A}C:\program files (x86)\ninjatrader 7\bin\ninjatrader.exe] => (Allow) C:\program files (x86)\ninjatrader 7\bin\ninjatrader.exe
FirewallRules: [UDP Query User{333AECEF-9AB6-4C45-B401-433FC5E07BEA}C:\program files (x86)\ninjatrader 7\bin\ninjatrader.exe] => (Allow) C:\program files (x86)\ninjatrader 7\bin\ninjatrader.exe
FirewallRules: [TCP Query User{EF512B50-9337-4639-BFB8-71FEFA8006ED}C:\program files\ensignnew\ensign.exe] => (Allow) C:\program files\ensignnew\ensign.exe
FirewallRules: [UDP Query User{B801F5E2-6770-4A9C-8F8C-2C74832A2435}C:\program files\ensignnew\ensign.exe] => (Allow) C:\program files\ensignnew\ensign.exe
FirewallRules: [TCP Query User{6C6F12EB-322B-4AAA-9C4E-DBBDCD07E3C7}C:\program files (x86)\ninjatrader 7\bin\ninjatrader.exe] => (Allow) C:\program files (x86)\ninjatrader 7\bin\ninjatrader.exe
FirewallRules: [UDP Query User{FB9EA4ED-D27D-41B9-94AB-52504E5ADD16}C:\program files (x86)\ninjatrader 7\bin\ninjatrader.exe] => (Allow) C:\program files (x86)\ninjatrader 7\bin\ninjatrader.exe
FirewallRules: [TCP Query User{C55CDFFD-9F2A-492F-B2EA-4CCB35FB02CB}C:\users\morgan pierce parker\appdata\local\logmein client\logmein client.exe] => (Allow) C:\users\morgan pierce parker\appdata\local\logmein client\logmein client.exe
FirewallRules: [UDP Query User{803C4844-32AF-45E6-A4CB-277FEE62E1CE}C:\users\morgan pierce parker\appdata\local\logmein client\logmein client.exe] => (Allow) C:\users\morgan pierce parker\appdata\local\logmein client\logmein client.exe
FirewallRules: [TCP Query User{AD59ED06-7B6B-49BA-A6EC-6B52F11CE2C6}C:\program files (x86)\dolce ear training\dolce ear training.exe] => (Allow) C:\program files (x86)\dolce ear training\dolce ear training.exe
FirewallRules: [UDP Query User{A5CEAD50-7EEA-4E72-841B-48050CB3A979}C:\program files (x86)\dolce ear training\dolce ear training.exe] => (Allow) C:\program files (x86)\dolce ear training\dolce ear training.exe
FirewallRules: [{1B4F29B5-88DF-43D6-83D8-2A7152E6FA7D}] => (Allow) LPort=8317
FirewallRules: [{E5BF81B2-5945-4185-A675-104F9524627F}] => (Allow) c:\Program Files (x86)\Audials\Audials 11\Audials.exe
FirewallRules: [{604976F2-FCD2-4BCB-AD94-A93819190A3B}] => (Allow) LPort=12972
FirewallRules: [{6074022D-6F92-407B-9704-E0CEB23D36D9}] => (Allow) LPort=14714
FirewallRules: [{E7465462-6225-4C72-93DF-B7885782C593}] => (Allow) LPort=31931
FirewallRules: [TCP Query User{A9B94578-C29D-4AF2-8315-659F947CBA29}C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir0011.tmp\lmi_rescue.exe] => (Allow) C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir0011.tmp\lmi_rescue.exe
FirewallRules: [UDP Query User{1EB785CD-7F1E-40F7-B7E9-C42E8D70522B}C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir0011.tmp\lmi_rescue.exe] => (Allow) C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir0011.tmp\lmi_rescue.exe
FirewallRules: [TCP Query User{8D83CF91-0D3A-4E92-8C38-0B1F84353E57}C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir0012.tmp\lmi_rescue.exe] => (Allow) C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir0012.tmp\lmi_rescue.exe
FirewallRules: [UDP Query User{993FFE7E-E28D-4627-94F7-11E499737595}C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir0012.tmp\lmi_rescue.exe] => (Allow) C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir0012.tmp\lmi_rescue.exe
FirewallRules: [{C861C69F-4FC5-4ABA-B78B-C5C82742392D}] => (Allow) LPort=62279
FirewallRules: [{72674FA5-63F4-4137-8EDA-B256DE64104B}] => (Allow) LPort=16023
FirewallRules: [TCP Query User{07E9936D-BA9A-4F5E-8C14-D55F97362C5A}C:\program files (x86)\leawo\video converter pro\loadingscreen.exe] => (Allow) C:\program files (x86)\leawo\video converter pro\loadingscreen.exe
FirewallRules: [UDP Query User{6326CC60-28A3-4D20-9330-9648C989AA17}C:\program files (x86)\leawo\video converter pro\loadingscreen.exe] => (Allow) C:\program files (x86)\leawo\video converter pro\loadingscreen.exe
FirewallRules: [{C28E1ECF-B5AA-4250-828E-386247A11262}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{CD1B7A64-3E95-4814-93B6-20C19547B90D}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{E51A7E51-9C87-4BC9-A104-7A3D9D8FEBA3}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{4C6F5545-59FF-459A-9AC8-4BF3B952627F}] => (Allow) LPort=2869
FirewallRules: [{6641DA68-B782-44D2-A005-E302C3C28BBA}] => (Allow) LPort=1900
FirewallRules: [TCP Query User{719ECFF1-2629-4174-AB63-FA616AA82A77}C:\program files\exeone security\personalmon.exe] => (Allow) C:\program files\exeone security\personalmon.exe
FirewallRules: [UDP Query User{6A638CB9-88CB-4322-91AE-E9BBC08E44A3}C:\program files\exeone security\personalmon.exe] => (Allow) C:\program files\exeone security\personalmon.exe
FirewallRules: [{2A8B6D35-B7ED-49F9-BD3E-9E8A05C1E6DD}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{6F925CD4-75DA-4594-9220-DC5AEBBC744C}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{7193BDB3-A9FB-4016-8B19-D2B4C5795D94}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{2E6B379F-AAE6-4E24-8726-BF62D1C48F5B}C:\program files (x86)\timebell\st.exe] => (Block) C:\program files (x86)\timebell\st.exe
FirewallRules: [UDP Query User{8BA37EC0-4246-4D05-A828-20AC692D8CA5}C:\program files (x86)\timebell\st.exe] => (Block) C:\program files (x86)\timebell\st.exe
FirewallRules: [{4842A5BA-5E52-43E5-9CBA-BDEEE1EBC10C}] => (Allow) C:\Program Files (x86)\UnHackMe\Unhackme.exe
FirewallRules: [{1FA78634-3927-4747-ACD2-7421D0B83774}] => (Allow) C:\Program Files (x86)\UnHackMe\Unhackme.exe
FirewallRules: [{A528A2DB-C34B-4B86-92B8-21FEFFBFCCDB}] => (Allow) C:\Program Files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{2BB7E4F9-D687-4D29-9610-C543E44DBBA5}] => (Allow) C:\Program Files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{2285049B-36C8-493A-AD1A-A533126D7F64}] => (Allow) LPort=53168
FirewallRules: [{B331C117-8D51-4BA0-8A9C-0CBD907A3914}] => (Allow) LPort=53168
FirewallRules: [{CD7C7F64-836C-4628-A272-ABB50932E0AC}] => (Allow) LPort=53168
FirewallRules: [{91EBA87F-E955-487B-9F34-221CED68C735}] => (Allow) LPort=2869
FirewallRules: [{0A94CD40-9B68-4EBE-A32A-39BAC83B5947}] => (Allow) LPort=1900
FirewallRules: [{B7ED9FB0-5DCE-4E9A-86AF-7BAD3141BF53}] => (Allow) C:\Program Files (x86)\PlagiarismCheckerX\Plagiarism Checker X.exe
FirewallRules: [{DBBF2FFD-E792-488F-9656-9554E4480184}] => (Allow) C:\Program Files (x86)\PlagiarismCheckerX\Update.exe
FirewallRules: [TCP Query User{49BB289A-1EB2-472C-A9ED-D4DE1B4742A3}C:\windows\system32\java.exe] => (Block) C:\windows\system32\java.exe
FirewallRules: [UDP Query User{3E675710-F03E-4C6B-B567-4EA17881B067}C:\windows\system32\java.exe] => (Block) C:\windows\system32\java.exe
FirewallRules: [TCP Query User{8811A31F-26C6-46B6-89EA-4A689A41F9EA}C:\program files\onone software\perfect effects 9\perfect effects 9.exe] => (Allow) C:\program files\onone software\perfect effects 9\perfect effects 9.exe
FirewallRules: [UDP Query User{6E4A5FFD-E3AF-4C9C-ABBB-460C26390914}C:\program files\onone software\perfect effects 9\perfect effects 9.exe] => (Allow) C:\program files\onone software\perfect effects 9\perfect effects 9.exe
FirewallRules: [{4AB346DA-4462-4C9E-A6EA-AB14C30F0411}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Capture Pro\Apowersoft Screen Capture Pro.exe
FirewallRules: [{F535B4EB-4BC6-44EA-AC4C-C799C793AA2C}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Capture Pro\Apowersoft Screen Capture Pro.exe
FirewallRules: [TCP Query User{D88E17A4-52BE-4CEF-8BEC-E5145BEAB2FD}C:\program files\smartpixel\bin\smartpixel.exe] => (Allow) C:\program files\smartpixel\bin\smartpixel.exe
FirewallRules: [UDP Query User{A718DE1C-161C-4FE8-903F-E15C988D4AA7}C:\program files\smartpixel\bin\smartpixel.exe] => (Allow) C:\program files\smartpixel\bin\smartpixel.exe
FirewallRules: [{388E0BC8-87B4-4EEE-B64E-6BEEE4D842F7}] => (Allow) C:\Program Files (x86)\Hide My IP 6\HideMyIP.exe
FirewallRules: [{77B5C571-7C7D-4607-921E-60ADE8026A0A}] => (Allow) C:\Program Files (x86)\Hide My IP 6\HideMyIpSrv.exe
FirewallRules: [{587DAC7C-64D0-4F9F-BB54-EB3202A86001}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\Apowersoft Phone Manager.exe
FirewallRules: [{17F629A2-7BB0-4BBB-BDC1-34ADB3E1D724}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\Apowersoft Phone Manager.exe
FirewallRules: [{EDA824FE-F421-44B0-92D0-F1A17B056247}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\ApowersoftAndroidDaemon.exe
FirewallRules: [{72EFC2C5-4DBB-41BF-9441-3CCADFF86D2B}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\ApowersoftAndroidDaemon.exe
FirewallRules: [{856E92C8-F98C-4C3E-81F9-A722D98546F2}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{08A2FED9-4126-4322-860C-F8AA4EF550C3}] => (Allow) C:\Program Files\Aml Pages\AmlPages.exe
FirewallRules: [{88C0E130-68D5-4682-BD07-8018BE5FB028}] => (Allow) C:\Program Files\Aml Pages\AmlPages.exe
FirewallRules: [{3D9E753C-0169-4D84-BE51-74D5BABDC309}] => (Allow) c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe
FirewallRules: [{311026C1-252C-4251-932C-29CB48FFA806}] => (Allow) C:\Program Files (x86)\Softland\Backup4all 5\Backup4all.exe
FirewallRules: [{94D53FAC-012E-4086-8100-E55A3F46449E}] => (Allow) C:\Program Files (x86)\Softland\Backup4all 5\bBackup.exe
FirewallRules: [{D27DB9BC-5B48-457F-9879-C884026CFB4F}] => (Allow) C:\Program Files (x86)\Softland\Backup4all 5\bTest.exe
FirewallRules: [{96120D6E-E751-4264-AD6A-BE1FF4E06FB8}] => (Allow) C:\Program Files (x86)\Softland\Backup4all 5\bRestore.exe
FirewallRules: [{FB1E99CE-E3D6-42D4-87E5-E9AAE4A07F50}] => (Allow) C:\Program Files (x86)\Softland\Backup4all 5\bCleanup.exe
FirewallRules: [{8E2D782A-499A-41AF-88C2-4D4A48D1D4F5}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{3D6798FA-A647-4D56-A0B5-219788D9EC51}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{63AE093D-FC67-41EC-8E3B-9DBF32A1D77F}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{C161B038-EC4E-44A1-918B-C918610143C8}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{8F58B5AD-6659-474B-83D5-EB38F782C827}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\ActivePresenter.exe
FirewallRules: [{A376A29C-96FD-4DC4-8C96-8FB5E9E385AF}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\ActivePresenter.exe
FirewallRules: [{0DBCD31C-114E-4010-A3C7-B6D831EDC5C4}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\rlhtmlrenderer.exe
FirewallRules: [{98E7179E-A91B-4101-BF92-85CFDC3D6A61}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\rlhtmlrenderer.exe
FirewallRules: [{762A12BE-B750-46E0-92BB-700838B4A291}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\rlactivator.exe
FirewallRules: [{1578BF51-B2DA-4484-9742-7A46076DA0BC}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\rlactivator.exe
FirewallRules: [{E99E3DD6-0594-437F-A6EE-906517C23562}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\rlupdater.exe
FirewallRules: [{D9ECE267-9BC6-4B8F-A64C-A1DD506DDF9D}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\rlupdater.exe
FirewallRules: [{0F40D294-6E26-499D-87D3-426A869CC97B}] => (Allow) C:\Program Files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{1D525E1B-0413-43B9-9CD4-F9DC27499685}] => (Allow) C:\Program Files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{813DDE41-5A8C-4419-BEBF-22CCBB370692}] => (Allow) C:\Program Files\Aeroadmin Pro 4-1\Setup.exe
FirewallRules: [{626E2AA1-4DF0-4E2E-8FED-B10ABEECB463}] => (Allow) C:\Program Files\Aeroadmin Pro 4-1\Setup.exe
FirewallRules: [{0965B1EE-C3A5-4415-AC14-816AE4B99382}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{2536C850-8DB8-4280-9731-BE2C16BC254A}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{3365DCA9-CE73-4BB0-AE1A-9D56B5DF92D4}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{1A5222FF-037F-4149-9C07-4CFA521ABBC7}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{C93E09E8-0B8F-4FAC-B8BD-0AB8F2DD48E6}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{B3812B9F-8F3D-4848-AFA2-0D12B8F92902}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{1D2E6629-77DE-4BC9-A9E5-73C55EAF3D8A}] => (Allow) C:\Program Files (x86)\IrfanView\i_view32.exe
FirewallRules: [{97EF5680-BCF2-4E1D-9074-5A6875C19498}] => (Allow) C:\Program Files (x86)\IrfanView\i_view32.exe
FirewallRules: [{BD22CB44-26FE-411E-88A9-827BA9CCDDF2}] => (Allow) C:\Program Files (x86)\IrfanView\i_view32.exe
FirewallRules: [{FF9973E3-556F-43AF-A435-AF5E0F3434F6}] => (Allow) C:\Program Files (x86)\IrfanView\i_view32.exe
FirewallRules: [{569F4F8C-03F8-49B8-9DCE-E44A0B0B2413}] => (Allow) C:\Program Files (x86)\Readygo Screen Recorder\ReadygoScreenRecorder.exe
FirewallRules: [{FDE9A0EB-66D9-456C-A7BE-3287085FAA5D}] => (Allow) C:\Program Files (x86)\Readygo Screen Recorder\ReadygoScreenRecorder.exe
FirewallRules: [{FB9D6A30-1223-4C5E-9F2B-277CAF8EE110}] => (Allow) C:\Program Files (x86)\Readygo Screen Recorder\ReadygoScreenRecorder.exe
FirewallRules: [{86570717-B366-4DFF-890A-CCE129F176CC}] => (Allow) C:\Program Files (x86)\Readygo Screen Recorder\ReadygoScreenRecorder.exe
FirewallRules: [{738C29B3-AD95-4C8B-AA6C-F301470DDF37}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe
FirewallRules: [{842DB976-D71A-46D9-85B0-982779EB1295}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe
FirewallRules: [{4DF1C7A2-9BCD-4264-B6B6-C24E7471C671}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Activation.exe
FirewallRules: [{34763CD0-B12B-4E1A-81D9-164D9E484E80}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Activation.exe
FirewallRules: [{629A3A04-9F1C-4E44-B62C-39DE30A20706}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe
FirewallRules: [{D564E7DC-2814-4AED-AE3D-F138D3403959}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe
FirewallRules: [TCP Query User{3E0E382C-5FF2-48F6-AAD1-84D9AA1CAF95}C:\program files (x86)\ninjatrader 7\bin64\ninjatrader.exe] => (Allow) C:\program files (x86)\ninjatrader 7\bin64\ninjatrader.exe
FirewallRules: [UDP Query User{DB5C06D7-7A2F-4508-A86E-1733E72E12E7}C:\program files (x86)\ninjatrader 7\bin64\ninjatrader.exe] => (Allow) C:\program files (x86)\ninjatrader 7\bin64\ninjatrader.exe
FirewallRules: [{E4E08726-5BA7-41FE-845D-BBFE8C148E0D}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe
FirewallRules: [{ADD8D884-E39F-45DD-BC49-03138465AFA5}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe
FirewallRules: [{235A5078-7D78-49C6-A895-BEAE8E7BE489}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper_32.exe
FirewallRules: [{28C2D0F7-C1B1-4E7C-BBD0-E328A9ACBD42}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper_32.exe
FirewallRules: [{3C0291C9-520D-4B52-AD92-D92E20BE748B}] => (Allow) C:\Program Files\Opera x64\opera.exe
FirewallRules: [{80F593F7-19CC-4DC0-88FA-B1F1A31B26FC}] => (Allow) C:\Program Files\Opera x64\opera.exe
FirewallRules: [TCP Query User{10A9ADAB-0926-4A74-B129-3ECB2E4B3C7E}C:\program files (x86)\wondershare\vcu\urlreqservice.exe] => (Block) C:\program files (x86)\wondershare\vcu\urlreqservice.exe
FirewallRules: [UDP Query User{96297520-B6CB-4250-A873-471DD56BB4F2}C:\program files (x86)\wondershare\vcu\urlreqservice.exe] => (Block) C:\program files (x86)\wondershare\vcu\urlreqservice.exe
FirewallRules: [TCP Query User{24362734-C385-4EA2-8605-05C852F33A07}C:\program files (x86)\timebell\st.exe] => (Block) C:\program files (x86)\timebell\st.exe
FirewallRules: [UDP Query User{9AC0FB37-7AF1-4628-9038-88DEC13D22EC}C:\program files (x86)\timebell\st.exe] => (Block) C:\program files (x86)\timebell\st.exe
FirewallRules: [TCP Query User{2A42C393-1224-4020-974A-7ECD6B1C4911}C:\program files\itunes\itunes.exe] => (Allow) C:\program files\itunes\itunes.exe
FirewallRules: [UDP Query User{1CC1CB55-D113-403C-A57A-56100DA03500}C:\program files\itunes\itunes.exe] => (Allow) C:\program files\itunes\itunes.exe
FirewallRules: [{D56AF2D8-D37B-4B50-AD32-319DFBCB72E8}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{F1BD3AE5-86A7-498C-A394-FCC9742FEC81}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{84C6ED1A-3772-492F-897B-DA8106C072B7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{23943879-067C-4608-ACA4-0255FEF84259}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{23DA2F7B-3B30-4EA2-BC4D-F3F96F389751}] => (Allow) C:\Program Files (x86)\MAGIX\Music Maker\25\MusicMaker.exe
FirewallRules: [{4EDDFFE6-A0EC-44CA-BA3C-E139349C60D3}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{1E1866E0-4EDD-41D1-8E09-026BEC20A614}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{0D4520FC-EFD1-4B1A-9017-C1960BF34539}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe
FirewallRules: [{F58B5488-6A0A-41C2-B579-4A4F19A76AC7}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe
FirewallRules: [{660F8F74-5D49-4169-9919-B1A74FD67837}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Activation.exe
FirewallRules: [{EE631B18-011B-4340-B7D9-8032B1276980}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Activation.exe
FirewallRules: [{0DC3BF2B-4654-4EA2-9B34-7C02441BF210}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe
FirewallRules: [{8841EC07-DB0D-46F3-8288-D6B5CFF103F5}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe
FirewallRules: [{6D957F99-F9C0-4F81-BEA3-F07D8664309D}] => (Allow) C:\Program Files\Mozilla Firefox64\firefox.exe
FirewallRules: [{4AD280CC-1153-42FE-AA74-1B71E05A78A7}] => (Allow) C:\Program Files\Mozilla Firefox64\firefox.exe
FirewallRules: [TCP Query User{05C1C817-1124-433F-98F2-68D5C18CD39A}C:\program files\java\jre1.8.0_45\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\java.exe
FirewallRules: [UDP Query User{74C9DA1A-1206-4BD5-B4A4-CFD4E3B5139C}C:\program files\java\jre1.8.0_45\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\java.exe
FirewallRules: [{852FADC4-0FC7-48D4-B220-2E577F68B040}] => (Allow) C:\Program Files (x86)\Efficient Calendar\EfficientCalendar.exe
FirewallRules: [{09FD5678-3AE0-4403-9E14-B2C25775B85F}] => (Allow) C:\Program Files (x86)\Efficient Calendar\EfficientCalendar.exe
FirewallRules: [{C2CC9DE7-484A-4589-9594-B51DD1E110AA}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe
FirewallRules: [{F12F3023-657F-4F5B-BB9D-463BDE50A826}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe
FirewallRules: [{BCF7634C-51C5-429A-9E2E-036DB7F0284C}] => (Allow) C:\Program Files (x86)\AceThinker\AceThinker Music Recorder\AceThinker Music Recorder.exe
FirewallRules: [{63F51D12-B0F3-4312-9F0E-457C8D14CF99}] => (Allow) C:\Program Files (x86)\AceThinker\AceThinker Music Recorder\AceThinker Music Recorder.exe
FirewallRules: [{9F5740C6-0FAA-4E69-AB53-C8356985114E}] => (Allow) C:\Program Files (x86)\AceThinker\AceThinker Music Recorder\ApowersoftVideoHelper.dll
FirewallRules: [{68F75513-9189-4597-ABC1-256219BD5B23}] => (Allow) C:\Program Files (x86)\AceThinker\AceThinker Music Recorder\ApowersoftVideoHelper.dll
FirewallRules: [{6B8C7A6D-B34E-465E-9438-2ED87CC6D701}] => (Allow) C:\Program Files (x86)\Amolto Call Recorder for Skype\AmoltoRecorder.exe
FirewallRules: [{6533B134-586A-43ED-9566-7BA4D0A5A5CE}] => (Allow) C:\Program Files (x86)\Amolto Call Recorder for Skype\AmoltoRecorder.exe
FirewallRules: [{29F3A6D6-7434-4FD1-894D-5E4430CA4329}] => (Allow) C:\Program Files (x86)\Synology\Assistant\DSAssistant.exe
FirewallRules: [{E0C27A00-7DE4-4047-86FE-C717534A72A8}] => (Allow) C:\Program Files (x86)\Synology\Assistant\DSAssistant.exe
FirewallRules: [TCP Query User{0095CE32-C051-4BFD-A404-0763CB5EC2C2}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Allow) C:\program files (x86)\windscribe\wsappcontrol.exe
FirewallRules: [UDP Query User{FFDD9825-69DB-48A8-AD8A-676D72A87713}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Allow) C:\program files (x86)\windscribe\wsappcontrol.exe
FirewallRules: [TCP Query User{2D5434DC-7760-45AF-A583-FD3D4E3D0F08}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Block) C:\program files (x86)\windscribe\wsappcontrol.exe
FirewallRules: [UDP Query User{54C42182-25E1-4305-BB4A-0714D6BC91D5}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Block) C:\program files (x86)\windscribe\wsappcontrol.exe
FirewallRules: [{A5ACDFEC-4A2A-4D9A-87F3-45CAFBEB0650}] => (Allow) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.EXE
FirewallRules: [{32235E0A-B264-4AE6-836A-7793DBB13C52}] => (Allow) LPort=8501
FirewallRules: [{9548DD5E-F2C0-4056-964C-A900580FD0D8}] => (Allow) LPort=8501
FirewallRules: [{30D478E8-F812-4B8C-AD82-757C7A65118B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{00D7491B-59FC-43D4-92D2-D2E3F6824C5A}] => (Allow) C:\Users\Morgan Pierce Parker\AppData\Local\Chromium\Application\chrome.exe
FirewallRules: [{EFB015AB-1BC2-4F7C-8463-43394BB09853}] => (Allow) C:\Program Files\EASEUS\Todo Backup\bin\TbService.exe
FirewallRules: [{D316ABAE-871C-4FA9-B74E-DF8B68559B9F}] => (Allow) C:\Program Files\EASEUS\Todo Backup\bin\TbService.exe
FirewallRules: [{3596D369-134F-43C6-A9A1-0D91CA60A7F8}] => (Allow) C:\Program Files\EASEUS\Todo Backup\bin\TBConsoleUI.exe
FirewallRules: [{FBBD88CA-E3EE-4E26-BAAE-EDAA5D0FECBE}] => (Allow) C:\Program Files\EASEUS\Todo Backup\bin\TBConsoleUI.exe
FirewallRules: [{3730FF40-823D-4727-926C-16BBA7444F83}] => (Allow) C:\Program Files\EASEUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{73C46721-CC38-4633-A4E0-85086ADA69AA}] => (Allow) C:\Program Files\EASEUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{D8907565-485D-4BFB-BF76-F5C894FC06F0}] => (Allow) C:\Program Files\EASEUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{FA37EA12-1243-4435-8BFC-D9B88F118755}] => (Allow) C:\Program Files\EASEUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{CEB773F4-B759-4233-8777-1EA22DA8E82B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{5DFD7BEF-0784-4865-8472-D2AC604418D9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{D68C8DF7-A419-4A84-8BCC-CB5A42577289}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{B2AE8EB5-18DB-487B-8B02-851058402DC1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{3E754DED-4C84-4324-9D23-4F37ECB5F681}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{52202A84-6327-4DA2-A5AE-9EC77067AF29}] => (Allow) C:\Program Files (x86)\concept design\onlineTV 13\onlineTV.exe
FirewallRules: [{1807F0F1-6E49-4EB2-A3C2-2D745870867C}] => (Allow) C:\Program Files (x86)\concept design\onlineTV 13\onlineTV.exe
FirewallRules: [{ED9356AF-CD14-4E78-81BC-5197B6EE774C}] => (Allow) C:\Program Files\Opera\52.0.2871.30\opera.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Market Analyst 7\MarketAnalyst.exe] => Enabled:Market Analyst 7
 
==================== Restore Points =========================
 
 
==================== Faulty Device Manager Devices =============
 
Name: Microsoft Teredo Tunneling Adapter
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (03/22/2018 03:17:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Launcher.exe_Opera Internet Browser, version: 19.0.1326.56, time stamp: 0x52e8aec9
Faulting module name: launcher_lib.dll, version: 0.0.0.0, time stamp: 0x52e8aec8
Exception code: 0x80000003
Fault offset: 0x0000eb80
Faulting process id: 0x137c
Faulting application start time: 0x01d3c21264d658b7
Faulting application path: C:\Program Files (x86)\Opera\Launcher.exe
Faulting module path: C:\Program Files (x86)\Opera\19.0.1326.56\launcher_lib.dll
Report Id: a2947fb2-2e05-11e8-8760-b8ac6f1b761b
 
Error: (03/22/2018 03:17:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Launcher.exe_Opera Internet Browser, version: 19.0.1326.56, time stamp: 0x52e8aec9
Faulting module name: launcher_lib.dll, version: 0.0.0.0, time stamp: 0x52e8aec8
Exception code: 0x80000003
Fault offset: 0x0000eb80
Faulting process id: 0x15fc
Faulting application start time: 0x01d3c21262de78f6
Faulting application path: C:\Program Files (x86)\Opera\Launcher.exe
Faulting module path: C:\Program Files (x86)\Opera\19.0.1326.56\launcher_lib.dll
Report Id: a09dd876-2e05-11e8-8760-b8ac6f1b761b
 
Error: (03/22/2018 03:17:07 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Launcher.exe_Opera Internet Browser, version: 19.0.1326.56, time stamp: 0x52e8aec9
Faulting module name: launcher_lib.dll, version: 0.0.0.0, time stamp: 0x52e8aec8
Exception code: 0x80000003
Fault offset: 0x0000eb80
Faulting process id: 0x148c
Faulting application start time: 0x01d3c2125e96fb3c
Faulting application path: C:\Program Files (x86)\Opera\Launcher.exe
Faulting module path: C:\Program Files (x86)\Opera\19.0.1326.56\launcher_lib.dll
Report Id: 9c571e0e-2e05-11e8-8760-b8ac6f1b761b
 
Error: (03/22/2018 03:11:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Launcher.exe_Opera Internet Browser, version: 19.0.1326.56, time stamp: 0x52e8aec9
Faulting module name: launcher_lib.dll, version: 0.0.0.0, time stamp: 0x52e8aec8
Exception code: 0x80000003
Fault offset: 0x0000eb80
Faulting process id: 0x3194
Faulting application start time: 0x01d3c211a2166fe5
Faulting application path: C:\Program Files (x86)\Opera\Launcher.exe
Faulting module path: C:\Program Files (x86)\Opera\19.0.1326.56\launcher_lib.dll
Report Id: dfd64496-2e04-11e8-8760-b8ac6f1b761b
 
Error: (03/22/2018 03:11:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Launcher.exe_Opera Internet Browser, version: 19.0.1326.56, time stamp: 0x52e8aec9
Faulting module name: launcher_lib.dll, version: 0.0.0.0, time stamp: 0x52e8aec8
Exception code: 0x80000003
Fault offset: 0x0000eb80
Faulting process id: 0x3760
Faulting application start time: 0x01d3c2119d72ee21
Faulting application path: C:\Program Files (x86)\Opera\Launcher.exe
Faulting module path: C:\Program Files (x86)\Opera\19.0.1326.56\launcher_lib.dll
Report Id: db318a4e-2e04-11e8-8760-b8ac6f1b761b
 
Error: (03/22/2018 03:11:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Launcher.exe_Opera Internet Browser, version: 19.0.1326.56, time stamp: 0x52e8aec9
Faulting module name: launcher_lib.dll, version: 0.0.0.0, time stamp: 0x52e8aec8
Exception code: 0x80000003
Fault offset: 0x0000eb80
Faulting process id: 0x38d4
Faulting application start time: 0x01d3c211900a1dde
Faulting application path: C:\Program Files (x86)\Opera\Launcher.exe
Faulting module path: C:\Program Files (x86)\Opera\19.0.1326.56\launcher_lib.dll
Report Id: cde9d716-2e04-11e8-8760-b8ac6f1b761b
 
Error: (03/20/2018 08:45:29 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "C:\Program Files\Microsoft Office 15\root\office15\lync.exe.Manifest".Error in manifest or policy file "C:\Program Files\Microsoft Office 15\root\office15\UccApi.DLL" on line 1.
Component identity found in manifest does not match the identity of the component requested.
Reference is UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition is UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Please use sxstrace.exe for detailed diagnosis.
 
Error: (03/19/2018 03:26:41 PM) (Source: COM+) (EventID: 4691) (User: )
Description: The run-time environment was unable to initialize for transactions required to support transactional components. Make sure that MS-DTC is running. (DtcGetTransactionManagerEx(): hr = 0x8004d01b)
 
 
System errors:
=============
Error: (03/22/2018 08:02:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Windows Search service terminated unexpectedly.  It has done this 151 time(s).
 
Error: (03/22/2018 08:01:18 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Windows Search service terminated unexpectedly.  It has done this 150 time(s).
 
Error: (03/22/2018 08:00:50 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Windows Search service terminated unexpectedly.  It has done this 149 time(s).
 
Error: (03/22/2018 03:46:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Windows Search service terminated unexpectedly.  It has done this 148 time(s).
 
Error: (03/22/2018 03:45:04 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Windows Search service terminated unexpectedly.  It has done this 147 time(s).
 
Error: (03/22/2018 03:43:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Windows Search service terminated unexpectedly.  It has done this 146 time(s).
 
Error: (03/22/2018 03:27:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Windows Search service terminated unexpectedly.  It has done this 145 time(s).
 
Error: (03/22/2018 03:21:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Windows Search service terminated unexpectedly.  It has done this 144 time(s).
 
 
Windows Defender:
===================================
Date: 2018-01-29 10:10:35.190
Description: 
Windows Defender scan has been stopped before completion.
Scan ID:{14F65217-E8BB-4DDE-8043-E90D48762BBB}
Scan Type:AntiSpyware
Scan Parameters:Quick Scan
 
Date: 2018-02-23 14:30:47.443
Description: 
Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
Signatures Attempted:Current
Error Code:0x80070002
Error description:The system cannot find the file specified. 
Signature version:0.0.0.0
Engine version:0.0.0.0
 
CodeIntegrity:
===================================
 
Date: 2018-01-10 07:15:38.330
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\temp\morganp\tmp\Local Settings\Temp\{3a1bda67-2e0e-6467-aded-ce0fbabe5e17}\B302183\atikmdag.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2018-01-10 07:15:38.097
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\temp\morganp\tmp\Local Settings\Temp\{3a1bda67-2e0e-6467-aded-ce0fbabe5e17}\B302183\atikmdag.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2018-01-10 07:15:37.850
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\temp\morganp\tmp\Local Settings\Temp\{3a1bda67-2e0e-6467-aded-ce0fbabe5e17}\B302183\atikmdag.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2018-01-10 07:15:36.151
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\temp\morganp\tmp\Local Settings\Temp\{3a1bda67-2e0e-6467-aded-ce0fbabe5e17}\B302183\atikmdag.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2018-01-10 07:15:32.325
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\temp\morganp\tmp\Local Settings\Temp\{3a1bda67-2e0e-6467-aded-ce0fbabe5e17}\B302183\atikmpag.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2018-01-10 07:15:32.240
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\temp\morganp\tmp\Local Settings\Temp\{3a1bda67-2e0e-6467-aded-ce0fbabe5e17}\B302183\atikmpag.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2018-01-10 07:15:32.143
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\temp\morganp\tmp\Local Settings\Temp\{3a1bda67-2e0e-6467-aded-ce0fbabe5e17}\B302183\atikmpag.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2018-01-10 07:15:30.425
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\temp\morganp\tmp\Local Settings\Temp\{3a1bda67-2e0e-6467-aded-ce0fbabe5e17}\B302183\atikmpag.sys because the set of per-page image hashes could not be found on the system.
 
==================== Memory info =========================== 
 
Processor: Intel® Xeon® CPU X5570 @ 2.93GHz
Percentage of memory in use: 22%
Total physical RAM: 65533.58 MB
Available physical RAM: 50908.65 MB
Total Virtual: 131065.35 MB
Available Virtual: 114683.53 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:1862.78 GB) (Free:1108.29 GB) NTFS
Drive f: (100331_1208) (CDROM) (Total:0.01 GB) (Free:0 GB) CDFS
Drive h: (New Volume) (Fixed) (Total:1863.01 GB) (Free:859.75 GB) NTFS
Drive o: (O) (Network) (Total:5540.26 GB) (Free:5468.56 GB) NTFS
Drive p: (P) (Network) (Total:5540.26 GB) (Free:5221.27 GB) NTFS
Drive q: (Q) (Network) (Total:5540.26 GB) (Free:5040.56 GB) NTFS
Drive r: ® (Network) (Total:5540.26 GB) (Free:4618.79 GB) NTFS
Drive s: (S) (Network) (Total:5540.26 GB) (Free:2711.02 GB) NTFS
Drive v: () (Network) (Total:1829.35 GB) (Free:335.16 GB) 
Drive w: () (Network) (Total:1829.35 GB) (Free:595.36 GB) 
Drive x: () (Network) (Total:1829.22 GB) (Free:123.46 GB) 
Drive y: () (Network) (Total:1829.22 GB) (Free:107.31 GB) 
Drive z: () (Network) (Total:1829.22 GB) (Free:160.76 GB) 
 
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 1862.9 GB) (Disk ID: B7B6EB23)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=1862.8 GB) - (Type=07 NTFS)
 
========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: 19ED1B1B)
Partition 1: (Active) - (Size=1863 GB) - (Type=07 NTFS)
 
==================== End of Addition.txt ============================

    Advertisements

Register to Remove


#56 Satchfan

Satchfan

    SuperHelper

  • Malware Team
  • 6,813 posts
  • Interests:LFC, music, more LFC, more music

Posted 23 March 2018 - 11:04 AM

My apologies again for a late reply. I've sent you a personal message with an explanation.

 

I'll try to find time to check your log tomorrow.

Satchfan


NINA - Proud graduate of the WTT Classroom

Member of UNITE

The help you receive here is free but if you feel I have helped, you may consider making a Donation.

#57 Safe

Safe

    Authentic Member

  • Authentic Member
  • PipPip
  • 41 posts

Posted 23 March 2018 - 04:04 PM

Ok Satchfan, when you have time.  I will wait.  No worries.  BTW, I could not find any personal messages.  I went to profile and then various links there Maybe show me where to look.



#58 Tomk

Tomk

    Beguilement Monitor

  • Global Moderator
  • 20,451 posts

Posted 23 March 2018 - 09:00 PM

Hi Safe,

 

Satchfan is having to deal with some real life, family issues.  I'm going to step in and see if I can help you along.

 

There is alot of information in this topic so it's going to take me a bit to try to get up to speed.  Please bear with me and I'll get back to you.


Tomk
------------------------------------------------------------
Microsoft MVP 2010-2014
 

#59 Safe

Safe

    Authentic Member

  • Authentic Member
  • PipPip
  • 41 posts

Posted 24 March 2018 - 09:17 AM

OK, CA, I will wait to hear from you.



#60 Tomk

Tomk

    Beguilement Monitor

  • Global Moderator
  • 20,451 posts

Posted 24 March 2018 - 11:54 AM

Well... it appears that you are certainly busy.  It looks like you really like to install a variety of programs.  This carries some risk as many of those "free" program come with PUP's - Possibly Unwanted Programs.  These programs are typically not something you really wanted and use up resources, and, at worst, can be malicious.  It's your computer to use as you desire, but I'd suggest you use a little discretion when trying out new program.  I'd also suggest that if you try it and it isn't something that you actually want/need - delete it.

 

It also looks like you have been managing things by playing in MSCONFIG.  That should be used as a diagnostic tool... not for day-to-day running of your computer.  And finally, it looks like you have allowed a boatload of programs to tunnel through your fire wall...essentially bypassing it.

 

I'm going to recommend that you take some fairly drastic measures:

  • Look through your computer and delete all of the programs that you don't want/need.
  • Go back to MSCONFIG and turn things back on.  You may want to do it one at a time as I assume there is some reason you turned them off.  Identify which "things" are causing you trouble but strive to turn control back to Windows on as many items as possible.  Our goal is to try to get back to "normal startup" on the first page of MSCONFIG.  This may not be possible, but we can at least identify where the problems occur.  Remember that you will have to reboot each time after you change things.

Once you've done all of that - come back and let me know how it went, and identify where you found problems.


Tomk
------------------------------------------------------------
Microsoft MVP 2010-2014
 

Related Topics



3 user(s) are reading this topic

0 members, 3 guests, 0 anonymous users