71 replies to this topic

[Safe]

Howdy,

 

Yes, I live in Sarasota Florida USA. but, until two years ago I lived in New York City USA.  BTW, the Rouge Killer is running now as I said in last post.

Edited by Safe, 10 March 2018 - 09:38 AM.

[Satchfan]

Thanks for the info.

 

Some of the entries in the RogueKiller result were not selected and therefore didn’t get fixed:
 

¤¤¤ Registry : 25 ¤¤¤
[PUP.Gen0] (X64) HKEY_CLASSES_ROOT\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96} (C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe) -> Not selected
[PUP.ByteFence|PUP.Gen1] (X86) HKEY_LOCAL_MACHINE\Software\ByteFence -> Not selected
[PUP.Gen1] (X86) HKEY_LOCAL_MACHINE\Software\SuperEasy Software -> Not selected
[PUP.Gen0] (X86) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\AutorunsDisabled | {25A3A431-30BB-47C8-AD6A-E1063801134F} :   -> Not selected
[PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0  -> Not selected
[PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0  -> Not selected
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowControlPanel : 2  -> Not selected
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowDownloads : 2  -> Not selected
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyDocs : 2  -> Not selected
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 2  -> Not selected
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyMusic : 2  -> Not selected
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyPics : 2  -> Not selected
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowUser : 2  -> Not selected
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowVideos : 2  -> Not selected
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowControlPanel : 2  -> Not selected
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowDownloads : 2  -> Not selected
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyDocs : 2  -> Not selected
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 2  -> Not selected
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyMusic : 2  -> Not selected
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyPics : 2  -> Not selected
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowUser : 2  -> Not selected
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowVideos : 2  -> Not selected

¤¤¤ Tasks : 1 ¤¤¤
[PUP.Gen0] %WINDIR%\Tasks\FreeFixer background scan.job -- C:\Program Files\FreeFixer\freefixer.exe (-bgscan) -> Not selected

¤¤¤ Web browsers : 3 ¤¤¤
[PUM.HomePage][Firefox:Config] dzygi7op.default : user_pref("browser.startup.homepage", "moz-extension://e7d6542d-2267-4cbe-bd03-54fcd30695a4/newtab/newtab.html"); -> Not selected
[PUM.NewTab][Firefox:Config] dzygi7op.default : user_pref("browser.newtab.url", "http://services.fres.....B57D4599}&i=");-> Not selected
[PUM.SearchEngine][Firefox:Config] dzygi7op.default : user_pref("browser.search.selectedEngine", "Yahoo!"); -> Not selected

 

RogueKiller

• when the scan is finished make sure that all the ones I mentioned above are checked apart from these::
  

  
  [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{047E6F90-FFFB-43B3-8B31-820B734306B1} | NameServer : 167.206.254.1,167.206.254.2 ([United States][-])
  [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{047E6F90-FFFB-43B3-8B31-820B734306B1} | NameServer : 167.206.254.1,167.206.254.2 ([United States][-])
  [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters\Interfaces\{047E6F90-FFFB-43B3-8B31-820B734306B1} | NameServer : 167.206.254.1,167.206.254.2 ([United States][

 

• then, press the Remove Selected button and please post the log it produces.

 

Pease then run it again and send the new log

================================================

Also, some of the AdwCleaner results were not cleaned:

Run AdwCleaner

• run AdwCleaner by clicking on Scan
• when it has finished, leave everything that was found checked, (ticked), then click on Clean
• if it asks to reboot, allow the reboot
• on reboot a log will be produced; please attach the content of the log to your next reply.

Logs to include with next post:

RKfixlog.txt
New RK log
AdwCleaner log

Thanks

Satchfan

 

[Satchfan]

Have to go out for a while now but will reply later.

 

Satchfan

[Safe]

RougeKiller is running; based on past times, it will prolly run for another 5 hours.  

Adware is queued up to run but will close all processes if I say press OK, so I will hold off on that till Rogue Killer ends.

BUT, I am remembering what you said about rebooting and loosing what has already been done.

So, when Rough Killer ends, what should be the protocol?

I know the first thing is send you the log of RK.

But, after that, what?

Do more with RK or press OK on Adware?

[Safe]

ok, THE rOUGE kILLER TOO ABOUT 5 HOURS AND HERE IS THE LOG - i SELECTED ALL EXCEPT FOR THE 3 tcpip ENTRIES THAT YOU SINGLED OUT:  rouge Killer is still loaded; I will leave it that way until I hear from you.  

But, now, I have Adware loaded from before waiting for me to press OK to continue.

 

RogueKiller V12.12.7.0 (x64) [Mar  5 2018] (Free) by Adlice Software

mail : http://www.adlice.com/contact/

Feedback : https://forum.adlice.com

Website : http://www.adlice.co...ad/roguekiller/

Blog : http://www.adlice.com

 

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version

Started in : Normal mode

User : Morgan Pierce Parker [Administrator]

Started from : C:\Program Files\RogueKiller\RogueKiller64.exe

Mode : Delete -- Date : 03/10/2018 09:50:07 (Duration : 05:18:04)

Switches : -refid

 

¤¤¤ Processes : 0 ¤¤¤

 

¤¤¤ Registry : 25 ¤¤¤

[PUP.Gen0] (X64) HKEY_CLASSES_ROOT\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96} (C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe) -> Deleted

[PUP.ByteFence|PUP.Gen1] (X86) HKEY_LOCAL_MACHINE\Software\ByteFence -> Deleted

[PUP.Gen1] (X86) HKEY_LOCAL_MACHINE\Software\SuperEasy Software -> Deleted

[PUP.Gen0] (X86) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\AutorunsDisabled | {25A3A431-30BB-47C8-AD6A-E1063801134F} :   -> Deleted

[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{047E6F90-FFFB-43B3-8B31-820B734306B1} | NameServer : 167.206.254.1,167.206.254.2 ([United States][-])  -> Not selected

[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{047E6F90-FFFB-43B3-8B31-820B734306B1} | NameServer : 167.206.254.1,167.206.254.2 ([United States][-])  -> Not selected

[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters\Interfaces\{047E6F90-FFFB-43B3-8B31-820B734306B1} | NameServer : 167.206.254.1,167.206.254.2 ([United States][-])  -> Not selected

[PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0  -> Replaced (2)

[PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0  -> Replaced (2)

[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowControlPanel : 2  -> Replaced (1)

[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowDownloads : 2  -> Replaced (1)

[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyDocs : 2  -> Replaced (1)

[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 2  -> Replaced (1)

[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyMusic : 2  -> Replaced (1)

[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyPics : 2  -> Replaced (1)

[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowUser : 2  -> Replaced (1)

[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowVideos : 2  -> Replaced (1)

[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowControlPanel : 2  -> Replaced (1)

[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowDownloads : 2  -> Replaced (1)

[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyDocs : 2  -> Replaced (1)

[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 2  -> Replaced (1)

[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyMusic : 2  -> Replaced (1)

[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyPics : 2  -> Replaced (1)

[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowUser : 2  -> Replaced (1)

[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowVideos : 2  -> Replaced (1)

 

¤¤¤ Tasks : 1 ¤¤¤

[PUP.Gen0] %WINDIR%\Tasks\FreeFixer background scan.job -- C:\Program Files\FreeFixer\freefixer.exe (-bgscan) -> Deleted

 

¤¤¤ Files : 0 ¤¤¤

 

¤¤¤ WMI : 0 ¤¤¤

 

¤¤¤ Hosts File : 0 ¤¤¤

 

¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤

 

¤¤¤ Web browsers : 3 ¤¤¤

[PUM.HomePage][Firefox:Config] dzygi7op.default : user_pref("browser.startup.homepage", "moz-extension://e7d6542d-2267-4cbe-bd03-54fcd30695a4/newtab/newtab.html"); -> Replaced (about:home)

[PUM.NewTab][Firefox:Config] dzygi7op.default : user_pref("browser.newtab.url", "http://services.fres...B57D4599}&i=");-> Deleted

[PUM.SearchEngine][Firefox:Config] dzygi7op.default : user_pref("browser.search.selectedEngine", "Yahoo!"); -> Deleted

 

¤¤¤ MBR Check : ¤¤¤

+++++ PhysicalDrive0: Dell VIRTUAL DISK SCSI Disk Device +++++

--- User ---

[MBR] 42e5f4e1f2a9d8f137f4314f0b92632b

[BSP] eb3cfbfdff15e23126ca45bfd9d213e2 : Windows Vista/7/8|VT.Unknown MBR Code

Partition table:

0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]

1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 1907483 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]

User = LL1 ... OK

Error reading LL2 MBR! ([1] Incorrect function. )

 

+++++ PhysicalDrive1: Hitachi HDS723020BLA642 ATA Device +++++

--- User ---

[MBR] 591e1740a76691c7e98fd4b3e493c9a8

[BSP] 79e83e18c17ba36a6edec33244e75a95 : Windows Vista/7/8|VT.Unknown MBR Code

Partition table:

0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 1907727 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]

User = LL1 ... OK

User = LL2 ... OK

[Safe]

Here are RogueKiller 2018 03 10 ALL BUT 3 TCPIP APOSTED TO SATCHANFAN SATURDAY 15-30

RogueKiller V12.12.7.0 (x64) [Mar  5 2018] (Free) by Adlice Software

mail : http://www.adlice.com/contact/

Feedback : https://forum.adlice.com

Website : http://www.adlice.co...ad/roguekiller/

Blog : http://www.adlice.com

 

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version

Started in : Normal mode

User : Morgan Pierce Parker [Administrator]

Started from : C:\Program Files\RogueKiller\RogueKiller64.exe

Mode : Delete -- Date : 03/10/2018 09:50:07 (Duration : 05:18:04)

Switches : -refid

 

¤¤¤ Processes : 0 ¤¤¤

 

¤¤¤ Registry : 25 ¤¤¤

[PUP.Gen0] (X64) HKEY_CLASSES_ROOT\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96} (C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe) -> Deleted

[PUP.ByteFence|PUP.Gen1] (X86) HKEY_LOCAL_MACHINE\Software\ByteFence -> Deleted

[PUP.Gen1] (X86) HKEY_LOCAL_MACHINE\Software\SuperEasy Software -> Deleted

[PUP.Gen0] (X86) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\AutorunsDisabled | {25A3A431-30BB-47C8-AD6A-E1063801134F} :   -> Deleted

[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{047E6F90-FFFB-43B3-8B31-820B734306B1} | NameServer : 167.206.254.1,167.206.254.2 ([United States][-])  -> Not selected

[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{047E6F90-FFFB-43B3-8B31-820B734306B1} | NameServer : 167.206.254.1,167.206.254.2 ([United States][-])  -> Not selected

[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters\Interfaces\{047E6F90-FFFB-43B3-8B31-820B734306B1} | NameServer : 167.206.254.1,167.206.254.2 ([United States][-])  -> Not selected

[PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0  -> Replaced (2)

[PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0  -> Replaced (2)

[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowControlPanel : 2  -> Replaced (1)

[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowDownloads : 2  -> Replaced (1)

[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyDocs : 2  -> Replaced (1)

[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 2  -> Replaced (1)

[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyMusic : 2  -> Replaced (1)

[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyPics : 2  -> Replaced (1)

[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowUser : 2  -> Replaced (1)

[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowVideos : 2  -> Replaced (1)

[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowControlPanel : 2  -> Replaced (1)

[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowDownloads : 2  -> Replaced (1)

[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyDocs : 2  -> Replaced (1)

[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 2  -> Replaced (1)

[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyMusic : 2  -> Replaced (1)

[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyPics : 2  -> Replaced (1)

[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowUser : 2  -> Replaced (1)

[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowVideos : 2  -> Replaced (1)

 

¤¤¤ Tasks : 1 ¤¤¤

[PUP.Gen0] %WINDIR%\Tasks\FreeFixer background scan.job -- C:\Program Files\FreeFixer\freefixer.exe (-bgscan) -> Deleted

 

¤¤¤ Files : 0 ¤¤¤

 

¤¤¤ WMI : 0 ¤¤¤

 

¤¤¤ Hosts File : 0 ¤¤¤

 

¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤

 

¤¤¤ Web browsers : 3 ¤¤¤

[PUM.HomePage][Firefox:Config] dzygi7op.default : user_pref("browser.startup.homepage", "moz-extension://e7d6542d-2267-4cbe-bd03-54fcd30695a4/newtab/newtab.html"); -> Replaced (about:home)

[PUM.NewTab][Firefox:Config] dzygi7op.default : user_pref("browser.newtab.url", "http://services.fres...B57D4599}&i=");-> Deleted

[PUM.SearchEngine][Firefox:Config] dzygi7op.default : user_pref("browser.search.selectedEngine", "Yahoo!"); -> Deleted

 

¤¤¤ MBR Check : ¤¤¤

+++++ PhysicalDrive0: Dell VIRTUAL DISK SCSI Disk Device +++++

--- User ---

[MBR] 42e5f4e1f2a9d8f137f4314f0b92632b

[BSP] eb3cfbfdff15e23126ca45bfd9d213e2 : Windows Vista/7/8|VT.Unknown MBR Code

Partition table:

0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]

1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 1907483 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]

User = LL1 ... OK

Error reading LL2 MBR! ([1] Incorrect function. )

 

+++++ PhysicalDrive1: Hitachi HDS723020BLA642 ATA Device +++++

--- User ---

[MBR] 591e1740a76691c7e98fd4b3e493c9a8

[BSP] 79e83e18c17ba36a6edec33244e75a95 : Windows Vista/7/8|VT.Unknown MBR Code

Partition table:

0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 1907727 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]

User = LL1 ... OK

User = LL2 ... OK

[Safe]

And, after that post, I clicked OK on the Adware program - then it asked for a reboot and after reboot, here is the log:

# AdwCleaner 7.0.8.0 - Logfile created on Sat Mar 10 20:59:32 2018

# Updated on 2018/08/02 by Malwarebytes 

# Running on Windows 7 Ultimate (X64)

# Mode: clean

# Support: https://www.malwarebytes.com/support

 

***** [ Services ] *****

 

No malicious services deleted.

 

***** [ Folders ] *****

 

No malicious folders deleted.

 

***** [ Files ] *****

 

No malicious files deleted.

 

***** [ DLL ] *****

 

No malicious DLLs cleaned.

 

***** [ WMI ] *****

 

No malicious WMI cleaned.

 

***** [ Shortcuts ] *****

 

No malicious shortcuts cleaned.

 

***** [ Tasks ] *****

 

No malicious tasks deleted.

 

***** [ Registry ] *****

 

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{3A3310BE-83DD-4E80-AC51-997CA2BA1080}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{3CC2E0D5-193C-4192-B8BA-C0B2C19C6B87}

Deleted: [Key] - HKLM\SOFTWARE\CLASSES\INTERFACE\{DCC049B0-CA04-4E58-B4C8-CE62AC6F5096}

Deleted: [Key] - HKLM\SOFTWARE\CLASSES\INTERFACE\{6855F0CE-00B1-483F-8633-33B650EE4310}

Deleted: [Key] - HKLM\SOFTWARE\SuperEasy Software

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{0BBF19A5-BE50-4E06-A340-6777A505E490}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{22511E2E-7970-414E-BC7C-28D16C4AF54D}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{23C5311E-016D-4999-BCB1-499898429D6C}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{2C4B6DB8-6413-403B-A038-16A352CFE8B9}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{46803190-228D-470E-90FE-F5E0CEA9C4F2}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{5180FE16-2E09-497B-9C8B-5A6F029ECECB}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{542FA950-C57A-4E17-B3E1-D935DFE15DEE}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{5B035F86-41B5-40F1-AAAD-3D219F30244E}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{6365AC7B-9920-4D8B-AF5D-3BDFEAC340A8}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{6A934270-717F-4BC3-BA59-BC9BED47A8D2}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{74C012C4-00FB-4F04-9AFB-4AD5449D2018}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{79B13431-CCAC-4097-8889-D0289E5E924F}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{869E753F-BD0D-4832-8131-94FEEE058AE3}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{8C8D5C57-3CAD-4CF9-BCAD-F873678DA883}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{981334CB-7B8B-431F-B86D-67B7426B125B}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{A4F6E1B3-469E-46EF-A936-FBA9D5EFD2B9}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{C1C2FC43-F042-4F17-AEDB-C5ABF3B42E4B}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{C97AF157-6A27-4F57-9D47-E2D3E4761B77}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{F7EC6286-297C-4981-9DCC-FD7F57BC24C9}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{8233093C-178B-484B-979E-3C6B5B147DBC}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{1147DC83-6208-4dca-8E88-DD45BAAB3043}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{11CB4723-D5A1-4a55-8D1D-5C2679D54CF5}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{1E57256D-9F39-4267-AB39-D7813D644C5A}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{31371420-098D-4C0E-A11E-EBEC2305DD01}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{3A06AA27-D94B-48C2-BB55-9FD0FF2120E3}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{46140CE4-76FE-440E-AE88-4C2272BC05C7}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{6E40017D-FB6A-4804-BDE4-3BB09F1719C1}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{9F9C4C5C-2BA8-4E00-A697-9F710BB1026B}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{C60CCE95-6AF9-4E74-B66B-3212D19F1D2F}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{D40A62D1-8FC0-4F03-90C4-0DE03BE73A41}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{DDCED22E-D018-471D-9A5C-A4EA2F21133D}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{E1A2D448-6334-45ec-8800-6D7F71DC87FC}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{F9A10D86-182A-4946-869B-70C3D109D14D}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{FBE30D66-39A2-4b72-8B43-6D4C335A6F34}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{11D5E9EA-3117-4389-8E58-742F0975C980}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{12D3E096-0FDF-42CC-8F44-04944F9C1648}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{22389F39-2CF4-47C4-B8B2-273BB16BF70C}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{23E3CEB3-D63A-433E-A5D0-4DB1C501B915}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{26A3152F-CF87-4C5B-8093-4D4B9EC084EB}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{2723E96B-905F-4C64-8999-D868A08E6370}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{29E3319C-4B3C-479F-8692-BDD2CA30BEDD}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{2FCB4E7E-E5C7-4D07-BB2C-78DF2DA867AD}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{367BD1CD-74A3-451F-B1A4-6A2DE4129A2D}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{3D592FCB-FEFD-43A6-9A4F-BDE2D4607D07}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{49F018EE-F362-4B5B-8EC8-BCF9246ABF21}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{63B73044-FC1A-4FE1-991B-FDBD4CDAA868}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{67E5E37C-E6B8-4782-877D-E9437C4CD982}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{686D40BC-FA43-4317-8474-E634E6B487F2}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{7207E52B-821E-4C05-A8D6-2965B2BE77CF}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{863FCF5D-DC39-4DA9-AF32-CB0025990EEE}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{A310B105-FB7D-4497-A7E8-E046462B012F}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{B09E015A-4D4E-4F8D-A436-95E19140947D}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{B1E712C4-03AA-495F-B0F5-0F057E126E2A}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{D13DC65C-C77B-4986-9078-DEA3D34C71BB}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{DF522774-8CA0-4B15-A93A-5F61AB95DA1C}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{F56ACA29-1C99-40F1-AC64-2E44C4F6BC71}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{F5CC67F7-F6BA-44E3-98EC-EA17D17E6479}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{3C16E079-E4C7-493C-BE9F-E0F2BB0B7430}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{6EB4349D-4333-442F-ACA4-4C72AF28B6ED}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{7DB8B625-DBF0-4491-B544-5A06F7B17BB4}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{9DE77B51-89F6-468E-9402-16050382E950}

Deleted: [Key] - HKLM\SOFTWARE\ByteFence

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}

Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}

 

 

***** [ Firefox (and derivatives) ] *****

 

Plugin deleted: InfoBird Pro - www.infobirdpro.com

 

 

***** [ Chromium (and derivatives) ] *****

 

No malicious Chromium entries deleted.

 

*************************

 

::Tracing keys deleted

::Winsock settings cleared

::Additional Actions: 0

 

 

 

*************************

 

C:/AdwCleaner/AdwCleaner[S0].txt - [40784 B] - [2018/3/8 14:44:18]

C:/AdwCleaner/AdwCleaner[S1] posted to Satchfan Saturday AM.txt - [9906 B] - [2018/3/10 14:38:1]

C:/AdwCleaner/AdwCleaner[S1].txt - [9906 B] - [2018/3/10 4:10:18]

 

 

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########

[Satchfan]

You are doing well and we're getting there.

 

Run Malwarebytes Anti-Malware

Please download Malwarebytes Anti-Malware to your desktop.

• double-click mbam-setup-2.0.0.1000.exe and follow the prompts to install the program
• at the end, be sure a checkmark is placed next to the following
  • Launch Malwarebytes Anti-Malware
  • a 14 day trial of the Premium features is pre-selected: deselect this if you don’t want it, (it won’t diminish the scanning and removal capabilities of the program).
• click Finish.
• on the Dashboard, click Update Now
• after the update completes, click the Scan Now' button.
• if an update is available, clicking the Update Now button will update it
• a Threat Scan will begin.
• when the scan is complete, if malware has been detected, click Apply Actions to allow MBAM to clean what was found
• when the prompt to restart the computer appears, click Yes.
• after the restart once you are back at your desktop, open MBAM once more
• click on the “History” tab, the “Application Logs”
• double-click on the scan log which shows the date and time of the scan just performed.
• click Copy to Clipboard
• please paste the contents of the clipboard into your reply.

===================================================

Run Farbar Recovery Scan Tool

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• press Scan button
• it will produce a log called Frst.txt in the same directory the tool is run from
• please copy and paste log back here.
• the first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the Frst.txt into your reply.

Logs to include with next post:

Mbam log
Frst.txt
Addition.txt

Thanks

Satchfan

 

[Safe]

Ok, Satchfan, I got the MalWare Bytes program and did the update and machine rebooted.

But, after that the machine was almost unusable. For about 30 minutes I had noidea what was going on or running.  Could not get to Task Manager, Windows explorer would not move.  Finally, after  many attempts to get the TM going suddenly I could see it.  In the taskbar I saw that MB was running but could not open the interface or even take the close option.

 

This condition was very similar to about a week ago when someone (Boggin?) told me to run MB.  Machine froze and I could not control it to get tomour or move any windows.  MB program gives me the creeps.  Totall takes my machine away from my control for almost 2 hours.

 

Finally I use the TM to end the MB program and MB service.  then my machine was acting "normal" again.  I looked for a MB log but could not find one.

 

I installed and am running the FarBar tool and will follow you instructions on that.

 

OK as I was typing this.  the FarBar program ended with two logs:

 

LOG ONE FRST.TXT

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10.03.2018

Ran by Morgan Pierce Parker (administrator) on M764-140-DQ64G3 (10-03-2018 22:55:26)

Running from S:\1 DOWNLOADS

Loaded Profiles: Morgan Pierce Parker (Available Profiles: Transition & ASPNET & Harriet Parker Mann & Morgan Pierce Parker & Pee Wee & Pierce Potye & _ocster_1clk_backup_ & NewAdmin & Administrator & DefaultAppPool)

Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Opera)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe

(QILING Tech Co., Ltd.) C:\Program Files\QILING\Disk Master\DmAgent.exe

(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files\EASEUS\Todo Backup\bin\Agent.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE

(Microsoft) C:\Program Files\Softland\novaPDF 9\Server\novapdfs.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

() C:\Program Files\EASEUS\Todo Backup\bin\TodoBackupService.exe

(Ascora GmbH) C:\Program Files (x86)\StartupStar\StartupStar.exe

(Irfan Skiljan) C:\Program Files (x86)\IrfanView\i_view32.exe

(AnVir Software) C:\Program Files (x86)\AnVir Task Manager Pro\AnVir.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\vds.exe

(AnVir Software) C:\Program Files (x86)\AnVir Task Manager Pro\anvir64.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera_crashreporter.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Microsoft Corporation) C:\Windows\System32\taskmgr.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

() C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(Opera Software) C:\Program Files\Opera\51.0.2830.55\opera.exe

(Farbar) \\Frame0\s\1 DOWNLOADS\FRST64.exe

 

==================== Registry (Whitelisted) ===========================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)

Winlogon\Notify\dimsntfy: C:\Windows\system32\dimsntfy.dll [2007-02-18] (Microsoft Corporation)

Winlogon\Notify\EFS: C:\Windows\system32\sclgntfy.dll [2007-02-18] (Microsoft Corporation)

Winlogon\Notify\ScCertProp: C:\Windows\system32\wlnotify.dll [2007-02-18] (Microsoft Corporation)

Winlogon\Notify\Schedule: C:\Windows\system32\wlnotify.dll [2007-02-18] (Microsoft Corporation)

Winlogon\Notify\sclgntfy: C:\Windows\system32\sclgntfy.dll [2007-02-18] (Microsoft Corporation)

Winlogon\Notify\SensLogn: C:\Windows\system32\WlNotify.dll [2007-02-18] (Microsoft Corporation)

Winlogon\Notify\wlballoon: C:\Windows\system32\wlnotify.dll [2007-02-18] (Microsoft Corporation)

HKLM\...\Policies\Explorer: [MemCheckBoxInRunDlg] 1

HKLM\...\Command Processor:  <==== ATTENTION

HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1

HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Policies\Explorer: [NoInternetOpenWith] 1

HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Policies\Explorer: [NoResolveSearch] 1

HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Policies\Explorer: [MaxRecentDocs] 0

HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\MountPoints2: K - K:\LaunchU3.exe -a

HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\MountPoints2: {c98fb593-cdf5-11e2-a792-0013729935b6} - I:\LaunchU3.exe -a

HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Solar_System_Mars_3D.scr

AppInit_DLLs-x32: prio32.dll => No File

SecurityProviders: credssp.dll, digest.dll

SSODL: EldosMountNotificator-cbfs5 - {DAA49CA1-B4BD-4873-A191-1ACD70F262D9} - C:\Windows\system32\cbfsMntNtf5.dll (EldoS Corporation)

SSODL-x32: EldosMountNotificator-cbfs5 - {DAA49CA1-B4BD-4873-A191-1ACD70F262D9} - C:\Windows\SysWOW64\cbfsMntNtf5.dll (EldoS Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Disabled [2016-09-02] ()

Startup: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Ensign Software (3).lnk [2014-04-03]

ShortcutTarget: Ensign Software (3).lnk -> C:\Ensign10\Ensign.exe (No File)

Startup: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Ensign Windows.lnk [2014-04-03]

ShortcutTarget: Ensign Windows.lnk -> C:\Program Files\ENSIGNNEW\Ensign.exe (Ensign Software, Inc.)

Startup: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0 105 Desktop - Shortcut [2016-09-02] ()

Startup: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1 DOWNLOADS - Shortcut [2016-09-02] ()

Startup: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\140 - Shortcut [2016-09-02] ()

Startup: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Z OLD HOLDS [2017-12-24] ()

Startup: C:\Users\Transition\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AnVir Task Manager Pro.lnk [2012-05-09]

ShortcutTarget: AnVir Task Manager Pro.lnk -> C:\Program Files (x86)\AnVir Task Manager Pro\AnVir.exe (AnVir Software)

BootExecute: Partizan

GroupPolicy\User: Restriction <==== ATTENTION

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{047E6F90-FFFB-43B3-8B31-820B734306B1}: [NameServer] 167.206.254.1,167.206.254.2

Tcpip\..\Interfaces\{42B00B05-B9F7-45D5-B008-21E7076BEE9B}: [NameServer] 167.206.13.180,167.206.13.181

Tcpip\..\Interfaces\{50B23566-AD4D-44F4-A1E4-3CD5FF34029E}: [DhcpNameServer] 192.168.1.1

 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\Software\Microsoft\Internet Explorer\Main,Start Page = 

SearchScopes: HKLM -> DefaultScope value is missing

SearchScopes: HKLM -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 

SearchScopes: HKLM-x32 -> {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://start.iminent.com/?appId=005B1665-E7FD-4829-8597-10FF3B8C62E8&ref=toolbox&q={searchTerms}

SearchScopes: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006 -> DefaultScope {E8307B89-5F41-4591-83AE-91CC210327DF} URL = hxxp://search.findwide.com/serp?guid={8923D673-FC0B-4784-9C22-AB23B57D4599}&action=default_search&k={searchTerms}

SearchScopes: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 

SearchScopes: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006 -> {150CD86F-F345-4925-B538-D590171152BD} URL = hxxps://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}

SearchScopes: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006 -> {328FEF41-100D-49A0-8141-3AEBB2938E95} URL = 

SearchScopes: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006 -> {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = 

SearchScopes: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006 -> {E1F3DBF3-86C1-4F92-9543-FA4EB6E85BCE} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=11147

SearchScopes: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006 -> {E8307B89-5F41-4591-83AE-91CC210327DF} URL = hxxp://search.findwide.com/serp?guid={8923D673-FC0B-4784-9C22-AB23B57D4599}&action=default_search&k={searchTerms}

BHO: Bitdefender Wallet  -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> No File

BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> c:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2015-09-16] (RealDownloader)

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2017-09-05] (Microsoft Corporation)

BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2015-08-24] (Siber Systems Inc.)

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-07-02] (Oracle Corporation)

BHO: Ant Download Manager BHO -> {8ABC6AE5-74BD-4c73-BB34-44526792D2AE} -> C:\Program Files (x86)\Ant Download Manager\antIE\antIE64.dll [2017-11-27] (AntGROUP)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)

BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-25] (Logitech, Inc.)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2017-09-05] (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2017-09-05] (Microsoft Corporation)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-02] (Oracle Corporation)

BHO-x32: Wondershare YouTube Downloader -> {133232D2-DAE3-4B6F-AAC2-17CD87495682} -> C:\Program Files (x86)\Wondershare\AllMyTube\SVRIEPlugin.dll [2012-03-06] (Wondershare Software Co., Ltd.)

BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> No File

BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> c:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2015-09-16] (RealDownloader)

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2017-08-15] (Microsoft Corporation)

BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> c:\Program Files (x86)\PDF Architect\PDFIEHelper.dll [2013-04-08] (pdfforge GmbH)

BHO-x32: Wondershare Player 1.6.0 -> {43D9786F-A485-683B-9B5B-ACC97ABC17FC} -> C:\ProgramData\Wondershare\Player\WSBrowserAppMgr.dll [2013-09-28] (Wondershare)

BHO-x32: Wondershare Video Converter Ultimate 7.1.0 -> {451C804F-C205-4F03-B48E-537EC94937BF} -> C:\ProgramData\Wondershare\Video Converter Ultimate\WSBrowserAppMgr.dll [2015-08-13] (Wondershare)

BHO-x32: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2015-08-24] (Siber Systems Inc.)

BHO-x32: Ant Download Manager BHO -> {8ABC6AE5-74BD-4c73-BB34-44526792D2AE} -> C:\Program Files (x86)\Ant Download Manager\antIE\antIE.dll [2017-11-27] (AntGROUP)

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)

BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2015-08-25] (Logitech, Inc.)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2017-09-05] (Microsoft Corporation)

BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2017-09-05] (Microsoft Corporation)

Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2015-08-24] (Siber Systems Inc.)

Toolbar: HKLM - FindWide Toolbar - {451A990E-9779-4537-83CC-BF342196DDB0} -  No File

Toolbar: HKLM - Steganos Password Manager Toolbar - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} - C:\Program Files (x86)\Steganos Privacy Suite 15\SPMIEToolbar64.dll [2014-07-29] (Steganos Software GmbH)

Toolbar: HKLM - Bitdefender Wallet  - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -  No File

Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2015-08-24] (Siber Systems Inc.)

Toolbar: HKLM-x32 - CaptureSaver - {5148AB7D-8868-4490-B6DA-F98368488582} - C:\Program Files (x86)\CaptureSaver\CaptureSaverIE.dll [2011-06-20] (www.capturesaver.com)

Toolbar: HKLM-x32 - FindWide Toolbar - {451A990E-9779-4537-83CC-BF342196DDB0} -  No File

Toolbar: HKLM-x32 - Steganos Password Manager Toolbar - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} - C:\Program Files (x86)\Steganos Privacy Suite 15\SPMIEToolbar.dll [2014-08-04] (Steganos Software GmbH)

Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -  No File

Toolbar: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006 -> &Address - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\explorerframe.dll [2017-05-10] (Microsoft Corporation)

Toolbar: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006 -> &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\shell32.dll [2017-05-10] (Microsoft Corporation)

Toolbar: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2015-08-24] (Siber Systems Inc.)

Toolbar: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006 -> FindWide Toolbar - {451A990E-9779-4537-83CC-BF342196DDB0} -  No File

Toolbar: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006 -> Bitdefender Wallet  - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -  No File

DPF: HKLM-x32 {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} hxxp://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1340673899312

DPF: HKLM-x32 {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1343353673750

DPF: HKLM-x32 {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1253383444393

DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab

DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} hxxps://akamaicdn.webex.com/client/WBXclient-T28L10NSP11-16469/event/ieatgpc1.cab

DPF: HKLM-x32 {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} hxxps://secure.logmein.com//activex/ractrl.cab?lmi=1100

Handler: AnVirDisabled - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll [2017-12-04] (Belarc, Inc.)

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2017-07-18] (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-07-18] (Skype Technologies)

Handler: WSIEChrome - {6D02ED5F-FD0D-4C4C -  No File

Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  No File

 

FireFox:

========

FF ProfilePath: C:\Users\Morgan Pierce Parker\AppData\Roaming\Netscape\Navigator\Profiles\j0juhuu6.default [2013-12-19]

FF Extension: (DOM Inspector) - C:\Program Files (x86)\Netscape\Navigator 9\extensions\inspector@mozilla.org [2016-09-02] [Legacy] [not signed]

FF Extension: (Netscape 9 Migrator) - C:\Program Files (x86)\Netscape\Navigator 9\extensions\netscape9migrator@flock.com [2016-09-02] [Legacy] [not signed]

FF ProfilePath: C:\Users\Morgan Pierce Parker\AppData\Roaming\Mozilla\Firefox\Profiles\dzygi7op.default [2018-03-10]

FF user.js: detected! => C:\Users\Morgan Pierce Parker\AppData\Roaming\Mozilla\Firefox\Profiles\dzygi7op.default\user.js [2014-12-03]

FF NewTabOverride: Mozilla\Firefox\Profiles\dzygi7op.default -> Enabled: @Converter

FF Extension: (Grammarly for Firefox) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Mozilla\Firefox\Profiles\dzygi7op.default\Extensions\87677a2c52b84ad3a151a4a72f5bd3c4@jetpack.xpi [2018-02-28]

FF Extension: (Converter) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Mozilla\Firefox\Profiles\dzygi7op.default\Extensions\@Converter.xpi [2018-02-10]

FF Extension: (Define Ext) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Mozilla\Firefox\Profiles\dzygi7op.default\Extensions\zgvstddqqjlabihif@opvrjrelhkc.org [2013-09-09] [Legacy] [not signed]

FF Extension: (Fast Discountz) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Mozilla\Firefox\Profiles\dzygi7op.default\Extensions\{2a4808f0-e451-4d0b-982a-bb0f44d3354d} [2013-09-18] [Legacy] [not signed]

FF Extension: (VideoGet FireFox extension) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Mozilla\Firefox\Profiles\dzygi7op.default\Extensions\{85E85FF9-E50C-42DE-8A3D-61485FD6C8DB}.xpi [2013-05-01] [Legacy] [not signed]

FF Extension: (OkayFreedom) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Mozilla\Firefox\Profiles\dzygi7op.default\Extensions\{DB981CCA-088E-4731-A4A2-2FE218703C0E}.xpi [2016-09-01]

FF Extension: (Skype) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-04-29] [Legacy]

FF HKLM-x32\...\Firefox\Extensions: [{9193F654-D886-4fef-8894-A97EF6623104}] - C:\Program Files (x86)\Wondershare\AllMyTube\SVRFirefoxExt

FF Extension: (Wondershare YouTube Downloader) - C:\Program Files (x86)\Wondershare\AllMyTube\SVRFirefoxExt [2016-09-02] [Legacy] [not signed]

FF HKLM-x32\...\Firefox\Extensions: [Player@Wondershare.com] - C:\ProgramData\Wondershare\Player\Player@Wondershare.com

FF Extension: (Wondershare Player) - C:\ProgramData\Wondershare\Player\Player@Wondershare.com [2016-09-02] [Legacy] [not signed]

FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files (x86)\Steganos Privacy Suite 15\spmplugin3

FF Extension: (Steganos Password Manager) - C:\Program Files (x86)\Steganos Privacy Suite 15\spmplugin3 [2016-09-02] [Legacy] [not signed]

FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi

FF Extension: (RoboForm Toolbar) - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi [2015-08-24] [Legacy] [not signed]

FF HKLM-x32\...\Firefox\Extensions: [WSVCU@Wondershare.com] - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com

FF Extension: (Wondershare Video Converter Ultimate) - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com [2016-09-02] [Legacy] [not signed]

FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - c:\Program Files (x86)\PDF Architect\FFPDFArchitectExt

FF Extension: (PDF Architect Converter For Firefox) - c:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2016-09-02] [Legacy] [not signed]

FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt

FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2018-02-23] [Legacy] [not signed]

FF HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Firefox\Extensions: [{54affe52-8223-453b-be1e-2fe2e250045c}] - C:\Users\Morgan Pierce Parker\AppData\Roaming\Lamantine\Sticky Password\spAutofill

FF Extension: (Sticky Password Autofill Engine) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Lamantine\Sticky Password\spAutofill [2015-08-13] [Legacy] [not signed]

FF HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Firefox\Extensions: [CaptureSaver@goldgingko.com] - C:\Program Files (x86)\CaptureSaver\Firefox

FF Extension: (CaptureSaver) - C:\Program Files (x86)\CaptureSaver\Firefox [2016-09-02] [Legacy] [not signed]

FF HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi

FF HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Firefox\Extensions: [antff@antdownloadmanager.com] - C:\Program Files (x86)\Ant Download Manager\antFF\antFF2.xpi

FF Extension: (antFF2) - C:\Program Files (x86)\Ant Download Manager\antFF\antFF2.xpi [2017-11-30]

FF HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Firefox\Extensions: [{6EBED4D8-13D9-4270-8D44-B57DDB7A787C}] - C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.15.4.6607\BVDFirefoxExt

FF Extension: (Allavsoft Video Downloader Firefox Extension) - C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.15.4.6607\BVDFirefoxExt [2018-02-23] [Legacy]

FF HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\SeaMonkey\Extensions: [antgroup@antdownloadmanager.com] - C:\Program Files (x86)\Ant Download Manager\antFF\antFF.xpi

FF Extension: (AntFF) - C:\Program Files (x86)\Ant Download Manager\antFF\antFF.xpi [2016-12-19] [Legacy]

FF HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\SeaMonkey\Extensions: [antff.popup.helper@antdownloadmanager.com] - C:\Program Files (x86)\Ant Download Manager\antFF\antff.popup.helper.xpi

FF Extension: (antFF Popup Helper for Mozilla) - C:\Program Files (x86)\Ant Download Manager\antFF\antff.popup.helper.xpi [2017-08-03]

FF HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Waterfox\Extensions: [antgroup@antdownloadmanager.com] - C:\Program Files (x86)\Ant Download Manager\antFF\antFF.xpi

FF HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Waterfox\Extensions: [antff.popup.helper@antdownloadmanager.com] - C:\Program Files (x86)\Ant Download Manager\antFF\antff.popup.helper.xpi

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_137.dll [2017-07-19] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)

FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2017-05-20] (Tracker Software Products (Canada) Ltd.)

FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-07-02] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-02] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-22] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-22] (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_137.dll [2017-07-19] ()

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2013-08-28] (DivX, LLC)

FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2017-05-20] (Tracker Software Products (Canada) Ltd.)

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2012-02-23] (Foxit Corporation)

FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll [2011-05-10] (Sun Microsystems, Inc.)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-12] (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-08-03] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=18.1.0.1236 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2015-09-21] (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.1.13 -> C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-01-17] (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.1.13 -> C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-01-17] (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpplugin;version=18.1.0.1236 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2015-09-21] (RealTimes)

FF Plugin-x32: @siber.com/RoboForm -> C:\Program Files (x86)\Siber Systems\AI RoboForm\chrome\plugin\np-rf-plugin.dll [2015-08-24] (Siber Systems Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=1.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.2 -> C:\Program Files (x86)\VideoLAN\VLC-2-0-2\npvlc.dll [2012-06-27] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

FF Plugin-x32: yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1 -> C:\Program Files (x86)\Yahoo!\Common\npyaxmpb.dll [2006-08-16] (Yahoo! Inc.)

FF Plugin HKU\S-1-5-21-2396228472-3482715812-2186985281-1006: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2017-05-20] (Tracker Software Products (Canada) Ltd.)

FF Plugin HKU\S-1-5-21-2396228472-3482715812-2186985281-1006: @stickypassword.com/Sticky Password -> C:\Program Files (x86)\Sticky Password\npspAutofill.dll [2015-06-08] (Lamantine Software a.s.)

FF Plugin HKU\S-1-5-21-2396228472-3482715812-2186985281-1006: @zoom.us/ZoomVideoPlugin -> C:\Users\Morgan Pierce Parker\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2016-09-08] (Zoom Video Communications, Inc.)

FF Plugin HKU\S-1-5-21-2396228472-3482715812-2186985281-1006: tdameritrade.com/thinkorswim -> C:\Program Files\thinkorswim2\npthinkorswim.dll [2018-03-05] (TD Ameritrade)

FF Plugin HKU\S-1-5-21-2396228472-3482715812-2186985281-1006: tdameritrade.com/tossc -> C:\Program Files\thinkorswim2\nptossc.dll [2018-03-05] (TD Ameritrade)

StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox64\firefox.exe

 

Chrome: 

=======

CHR Profile: C:\Users\Morgan Pierce Parker\AppData\Local\Google\Chrome\User Data\Default [2018-03-09]

CHR Extension: (Wondershare Player) - C:\Users\Morgan Pierce Parker\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkdegagmpemadclljncealhmmkojfoam [2016-08-30]

CHR Extension: (DLHelper) - C:\Users\Morgan Pierce Parker\AppData\Local\Google\Chrome\User Data\Default\Extensions\dalgiebmfcjackkbjfbfmlnflbdfbekj [2018-02-23]

CHR Extension: (Allavsoft video downloader converter) - C:\Users\Morgan Pierce Parker\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhancbnhabhandieicagelcddkdfgoif [2018-02-23]

CHR Extension: (Bitdefender Wallet) - C:\Users\Morgan Pierce Parker\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabcmochhfpldjekobfaaggijgohadih [2016-08-30]

CHR Extension: (No Name) - C:\Users\Morgan Pierce Parker\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjkpcnacdgdlpfejlgflolpaigoicibh [2016-09-02]

CHR Extension: (Skype) - C:\Users\Morgan Pierce Parker\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2018-02-23]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Morgan Pierce Parker\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-02-23]

CHR Extension: (Chrome Media Router) - C:\Users\Morgan Pierce Parker\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-02-23]

CHR HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dalgiebmfcjackkbjfbfmlnflbdfbekj] - C:\Program Files (x86)\Ant Download Manager\antCH\antCH.crx [2017-12-16]

CHR HKLM-x32\...\Chrome\Extension: [bkdegagmpemadclljncealhmmkojfoam] - C:\ProgramData\Wondershare\Player\Player@Wondershare.com.crx [2014-07-24]

CHR HKLM-x32\...\Chrome\Extension: [dhancbnhabhandieicagelcddkdfgoif] - C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.15.4.6607\BVDChromeExt.crx [2018-02-23]

CHR HKLM-x32\...\Chrome\Extension: [ehhlaekjfiiojlddgndcnefflngfmhen] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [fabcmochhfpldjekobfaaggijgohadih] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [nbljechdpodpbchbmjcoamidppmpnmlc] - hxxps://clients2.google.com/service/update2/crx

 

Opera: 

=======

OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\acghaimmohdiildbgkbcjfmkdgglpofi [2017-09-06]

OPR Extension: (AdBlock) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\aobdicepooefnbaeokijohmhjlleamfj [2016-09-02]

OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\baefahljeadgnnicbeiekpcfnecbbell [2016-09-02]

OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\bbkekonodcdmedgffkkbgmnnekbainbg [2018-03-09]

OPR Extension: (Turn Off the Lights) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\ccbdoklfbpcifppcfahmmpmbkfdjjccm [2017-08-21]

OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\cfbekbndggmbdkfhjandenfihkdkndil [2016-09-02]

OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\cnbpedcoekjafichoehopgaaldogogch [2016-12-16]

OPR Extension: (HTTPS Everywhere) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\edaplhobcmdaneconioghljnnopmkhgm [2018-02-27]

OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\eeokceolphhfjdfcibaiiopmekmcbedp [2017-03-19]

OPR Extension: (QR Code Generator) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\ehcgjadobjgpoblppedbeogpgkjeiham [2016-09-02]

OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\eiinejdcihhdbdbipfapahmjndejdpjb [2016-09-02]

OPR Extension: (PDF Viewer) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\encfpfilknmenlmjemepncnlbbjlabkc [2016-09-02]

OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\fbjpiaeohiikdienjkfpbdmooefgliac [2016-09-02]

OPR Extension: (Stop Reclame) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\fcnodchihpbcjiofidkkeaioejgpijkl [2017-08-10]

OPR Extension: (HD Video Downloader) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\gacckcgfmoapndlfjdjiffiblljijhep [2016-09-02]

OPR Extension: (Search in YouTube) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\gclmonidkokknfccffpefiplnbepbgfm [2016-09-02]

OPR Extension: (V7 Stash) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\gjcfmfokccpieoonenflmcacfbdhbdck [2016-09-06]

OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\hciohocinlhbdkbjldffomiadmnhjnoj [2016-09-02]

OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\hedlhkdmdlcjhiblbmfggdiaeekblnoi [2016-09-02]

OPR Extension: (Netcraft Extension) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\hhhfihlmbcifeafjbbjfkclpofddkalf [2017-12-23]

OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\iacaccplnfbooopaakeckhpjipnkdmeb [2016-09-02]

OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\iikighlpichfheooodpapakdheilalcj [2016-09-02]

OPR Extension: (No-Script Suite Lite) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\ipiopppcaojnchgoepoemlbdccogeije [2017-02-02]

OPR Extension: (QR Codematic) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\jaddaopkajokblichanfjehmgahbnaek [2017-06-22]

OPR Extension: (Disable HTML5 Autoplay) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\jbinbhipioellbajhbkjlpioadehpfdj [2016-09-02]

OPR Extension: (YouTube Downloader) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\kclijeogghhkmenkommbnjobhnndpfba [2016-09-02]

OPR Extension: (Price Rocket) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\lfhckbkckplhenjjfjmnbehmgdgklklp [2016-09-02]

OPR Extension: (Speed-Up Browsing) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\lklibmbcgphmjobehnffhmioggnljmcl [2018-02-10]

OPR Extension: (YouWatch) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\lolpdhiocgjpmamiogamfejeakmnlehj [2016-09-05]

OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\lpbhfckilgccpclafjiapbcelgpfmjfa [2016-09-02]

OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\maeombkgfpjdnjkhohbjachnnmpbipol [2017-02-20]

OPR Extension: (Clearly) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\mallmmeebeojpflmiolfchfcgbjflklc [2016-09-02]

OPR Extension: (Similar image search) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\mboaembapglkclamgifhbdhbiojoichj [2016-09-02]

OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\mgblffipaipjkemfkjpmdmfedljnifen [2018-01-30]

OPR Extension: (Amazon Assistant for Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\mmmbddcnnndpbdflpccgcknaaabgldak [2017-10-31]

OPR Extension: (Hover Preview) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\ncmainmpfbkbofiidnfgoocbhljigiko [2017-05-25]

OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\neacgcjokggofibnbfapeaejhclmpple [2016-09-02]

OPR Extension: (c̲o̲t̲t̲o̲n̲Tracks) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\nhcmfmnggfnjnlpkpmlbmnbmjgjeeoig [2016-09-02]

OPR Extension: (Magic Actions for YouTube™) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\nlffnljnicbkfhnlomjhjlebndachaka [2016-10-04]

OPR Extension: (WebM Inline Player) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\nmjjonagmhdjhlphocidlpcgclkgadcg [2016-09-02]

OPR Extension: (eBay Extension for Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\nonelnbmpmjifbnoclpchjakhkeolcbh [2016-09-02]

OPR Extension: (SaveFrom.net helper) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\npdpplbicnmpoigidfdjadamgfkilaak [2018-02-10]

OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\objncbokngchniifnaijjjilieiahogg [2016-09-02]

OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\okedekoialagmggelklgigdidkfljanc [2016-09-02]

OPR Extension: (Youtube - Most Popular) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\oldapoiohefbnmggejjodihigclfhnka [2017-06-22]

OPR Extension: (Spot - Date Clipper for Google Calendar™) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phaddhclhomejoackbdbhabbbfgilhof [2016-09-02]

OPR Extension: (FastestTube - YouTube Video Downloader) - C:\Users\Morgan Pierce Parker\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag [2016-09-02]

OPR Extension: (RoboForm) - C:\Program Files (x86)\Siber Systems\AI RoboForm\Opera [2016-09-02]

StartMenuInternet: (HKLM) Opera - C:\Program Files\Opera x64\Opera.exe

StartMenuInternet: (HKLM) Opera.exe - C:\Program Files\Opera Next x64\Opera.exe

StartMenuInternet: (HKLM) OperaNext - C:\program files\opera next x64\Opera.exe

 

==================== Services (Whitelisted) ====================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

S4 ABBYY.Licensing.BCR.Windows.2.0; C:\Program Files (x86)\ABBYY Business Card Reader 2.0\NetworkLicenseServer.exe [821048 2013-06-04] (ABBYY InfoPoisk LLC)

S4 ABBYY.Licensing.PDFTransformer.Classic.4.0; C:\Program Files (x86)\ABBYY PDF Transformer+\NetworkLicenseServer.exe [961744 2014-09-09] (ABBYY Production LLC)

R3 AeLookupSvc; C:\Windows\SysWOW64\aelupsvc.dll [26624 2007-02-18] (Microsoft Corporation) [File not signed]

S4 AHDDC2; C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Service.exe [1518504 2012-07-30] ()

S4 Alerter; C:\Windows\system32\alrsvc.dll [29696 2007-02-18] (Microsoft Corporation) [File not signed]

S4 ALG; C:\Windows\SysWOW64\alg.exe [45056 2007-02-18] (Microsoft Corporation) [File not signed]

S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-04-03] (Apple Inc.)

S4 ASFAgent; C:\Program Files (x86)\Intel\ASF Agent\ASFAgent.exe [118784 2004-02-08] (Intel Corporation) [File not signed]

S4 ASFIPmon; C:\Program Files (x86)\Broadcom\ASFIPMon\AsfIpMon.exe [61440 2005-10-18] (Broadcom Corporation) [File not signed]

S4 AtomicAlarmClock; C:\Program Files\Atomic Alarm Clock\timeserv.exe [2007040 2013-04-24] () [File not signed]

R2 AudioEndpointBuilder; C:\Windows\SysWOW64\Audiosrv.dll [41472 2007-02-18] (Microsoft Corporation) [File not signed]

R2 AudioSrv; C:\Windows\SysWOW64\Audiosrv.dll [41472 2007-02-18] (Microsoft Corporation) [File not signed]

S4 Backup4all5Srv; C:\Program Files (x86)\Softland\Backup4all 5\bService.exe [4686360 2015-08-04] (Softland)

S4 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [122736 2017-08-11] (AOMEI Tech Co., Ltd.)

R3 Browser; C:\Windows\SysWOW64\browser.dll [78336 2012-06-29] (Microsoft Corporation) [File not signed]

S4 BstHdAndroidSvc; c:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2014-05-01] (BlueStack Systems, Inc.)

S4 BstHdLogRotatorSvc; c:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2014-05-01] (BlueStack Systems, Inc.)

S4 BstHdUpdaterSvc; c:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [774928 2014-05-01] (BlueStack Systems, Inc.)

S4 CachemanService; C:\Program Files (x86)\Cacheman\CachemanServ.exe [238152 2013-05-14] (Outertech)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3058416 2017-09-05] (Microsoft Corporation)

S3 ClipSrv; C:\Windows\system32\clipsrv.exe [49664 2007-02-18] (Microsoft Corporation) [File not signed]

S3 ClipSrv; C:\Windows\SysWOW64\clipsrv.exe [32256 2007-02-18] (Microsoft Corporation) [File not signed]

S4 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [246256 2010-05-25] (CyberLink)

S4 CloudBerry Drive Service; C:\Program Files\CloudBerryLab\CloudBerry Drive\CloudBerryDriveService.exe [315688 2015-07-24] (CloudBerry Lab)

S4 Crypkey License; C:\Windows\system32\crypserv.exe [122880 2008-05-07] (CrypKey (Canada) Ltd.) [File not signed]

S4 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-08-12] (Dropbox, Inc.)

S4 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-08-12] (Dropbox, Inc.)

S4 DbxSvc; C:\Windows\system32\DbxSvc.exe [51024 2018-02-26] (Dropbox, Inc.)

S4 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [208792 2017-12-14] (Dell Inc.)

S4 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [3294608 2017-12-14] (Dell Inc.)

S4 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [217488 2017-12-14] (Dell Inc.)

S4 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\DfSdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany) [File not signed]

S3 dmadmin; C:\Windows\System32\dmadmin.exe [399872 2007-02-18] (Microsoft Corporation) [File not signed]

R2 DmAgent; C:\Program Files\QILING\Disk Master\DmAgent.exe [67384 2018-02-05] (QILING Tech Co., Ltd.)

S2 dmserver; C:\Windows\System32\dmserver.dll [37376 2007-02-18] (Microsoft Corporation) [File not signed]

R2 Dnscache; C:\Windows\SysWOW64\dnsrslvr.dll [45568 2011-03-03] (Microsoft Corporation) [File not signed]

R2 EaseUS Agent; C:\Program Files\EASEUS\Todo Backup\bin\Agent.exe [40080 2017-08-30] (CHENGDU YIWO Tech Development Co., Ltd)

S4 ERSvc; C:\Windows\System32\ersvc.dll [31744 2007-02-18] (Microsoft Corporation) [File not signed]

S4 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed]

S4 FileMarkerApplyIconService; C:\Program Files (x86)\FileMarker.NET\FileMarkerService.exe [717576 2013-11-01] (ArcticLine Software)

S4 FileReplicatorService; C:\Program Files (x86)\FileReplicatorService\File Replicator Service.exe [28160 2011-10-26] (Chris Butterfield Software Solutions, LLC) [File not signed]

S4 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]

S4 FLService; C:\Program Files (x86)\idoo\File Encryption\FLService.exe [107008 2011-06-09] () [File not signed]

S4 fsproflt2; C:\Windows\SysWOW64\fsproflt2.exe [69408 2014-10-06] (FSPro Labs)

S4 GenieTimelineService; C:\Program Files\Genie9\Genie Timeline\GenieTimelineService.exe [662104 2012-09-16] (Genie9)

S4 GFIBckFAtt; C:\Program Files (x86)\GFI\GFI BackUp Freeware\GFIFInst.exe [1011056 2012-01-12] (GFI Software Ltd.)

S4 GFIBckFSched; C:\Program Files (x86)\GFI\GFI BackUp Freeware\GFIFSched.exe [2664816 2012-01-12] (GFI Software Ltd.)

S4 GoToAssist; C:\Program Files (x86)\Citrix\GoToAssist Corporate\1205\G2AC_Service.exe [309712 2017-04-06] (Citrix Systems, Inc.)

S4 HideMyIpSRV; C:\Program Files (x86)\Hide My IP 6\HideMyIpSRV.exe [4341760 2015-04-26] (Hide My IP) [File not signed]

S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]

S3 ImapiService; C:\WINDOWS\system32\imapi.exe [265728 2007-02-18] (Microsoft Corporation) [File not signed]

S4 imdsksvc; C:\Windows\system32\imdsksvc.exe [21568 2012-10-02] (Olof Lagerkvist)

S4 InterBaseGuardian; C:\Program Files\Borland\InterBase\bin\ibguard.exe [32768 2001-11-29] (Borland Software Corporation) [File not signed]

S4 InterBaseServer; C:\Program Files\Borland\InterBase\bin\ibserver.exe [1769472 2001-11-29] (Borland Software Corporation) [File not signed]

S4 InterServer; C:\Program Files\Borland\InterBase\InterClient\bin\interserver.exe [114176 2001-11-29] (InterBase) [File not signed]

S4 JavaQuickStarterService; C:\Program Files\Java\jre6\bin\jqs.exe [153376 2011-05-10] (Sun Microsystems, Inc.)

S4 JetDrive WindowsClosingService; C:\WINDOWS\SysWOW64\WindowsClosingService.exe [9216 2011-03-12] () [File not signed]

S4 KooRaRooMediaServer; C:\Program Files\KooRaRoo Media\KooRaRooMediaServer.exe [6472760 2014-01-17] (Programming Sunrise)

S4 Leawo_service; C:\Program Files (x86)\Common Files\Appkeys\yytool64.exe [1232880 2014-05-04] ()

S4 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-04-22] (Hewlett-Packard Company) [File not signed]

R2 lmhosts; C:\Windows\SysWOW64\lmhsvc.dll [19968 2007-02-18] (Microsoft Corporation) [File not signed]

S4 MaxSyncUpService; C:\Program Files (x86)\MaxSyncUp\msusvc.exe [1701280 2012-08-07] (@MAX Software) [File not signed]

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6440736 2018-03-03] (Malwarebytes)

S4 MegaMonitorSrv; C:\Program Files (x86)\Dell SAS RAID Storage Manager\MegaMonitor\mrmonitor.exe [434176 2007-07-18] () [File not signed]

S4 Messenger; C:\Windows\System32\msgsvc.dll [57344 2007-02-18] (Microsoft Corporation) [File not signed]

S4 MSMFramework; C:\Program Files (x86)\Dell SAS RAID Storage Manager\Framework\VivaldiFramework.exe [53248 2006-11-29] () [File not signed]

S3 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe [7520337 2002-12-17] (Microsoft Corporation) [File not signed]

S3 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [66112 2002-12-17] (Microsoft Corporation) [File not signed]

S4 NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [774144 2007-01-15] (Nero AG) [File not signed]

S3 NetDDE; C:\Windows\system32\netdde.exe [160768 2007-02-18] (Microsoft Corporation) [File not signed]

S3 NetDDE; C:\Windows\SysWOW64\netdde.exe [110080 2007-02-18] (Microsoft Corporation) [File not signed]

S3 NetDDEdsdm; C:\Windows\system32\netdde.exe [160768 2007-02-18] (Microsoft Corporation) [File not signed]

S3 NetDDEdsdm; C:\Windows\SysWOW64\netdde.exe [110080 2007-02-18] (Microsoft Corporation) [File not signed]

S4 NetgearSwitchUSB; C:\Program Files (x86)\NETGEAR\A6210\NetgearSwitchUSB.exe [192232 2015-09-17] ()

R3 Netman; C:\Windows\SysWOW64\netman.dll [263680 2007-02-18] (Microsoft Corporation) [File not signed]

S4 NetSvc; C:\Program Files (x86)\Intel\PROSetWired\NCS\Sync\NetSvc.exe [143360 2003-12-17] (Intel® Corporation) [File not signed]

S4 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-03-12] (Nero AG)

R2 NovaPdf9Server; C:\Program Files\Softland\novaPDF 9\Server\novapdfs.exe [52616 2018-02-19] (Microsoft)

S4 OkayFreedom VPN Starter Service; C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe [347680 2016-05-09] (Steganos Software GmbH)

S4 OO DiskImage; C:\Program Files\OO Software\DiskImage\oodiag.exe [8160032 2018-02-09] (O&O Software GmbH)

S4 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [14848 2011-12-15] () [File not signed]

S4 osagent; C:\Program Files\Borland\VBroker\\bin\osagent.exe [193536 1998-03-12] () [File not signed]

S4 PAExec; C:\Windows\PAExec.exe [189112 2017-12-03] (Power Admin LLC)

S4 PDF Architect Helper Service; c:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)

S4 PDF Architect Service; c:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)

S4 PlaysService; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [32528 2016-05-31] (Plays.tv, LLC)

R3 PolicyAgent; C:\Windows\SysWOW64\ipsecsvc.dll [188928 2007-02-18] (Microsoft Corporation) [File not signed]

S4 Printer Control; C:\WINDOWS\system32\PrintCtrl.exe [78848 2010-05-07] (ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM) [File not signed]

S4 prio_svc; C:\Program Files\Prio\prio_svc.exe [12656 2012-11-08] ()

S4 PuranDefrag; C:\Windows\system32\PuranDefragS.exe [292736 2013-08-15] (Puran Software) [File not signed]

S3 RasAuto; C:\Windows\SysWOW64\rasauto.dll [91648 2007-02-18] (Microsoft Corporation) [File not signed]

S3 RasMan; C:\Windows\SysWOW64\rasmans.dll [181760 2007-02-18] (Microsoft Corporation) [File not signed]

S4 RDSessMgr; C:\WINDOWS\system32\sessmgr.exe [212480 2007-02-18] (Microsoft Corporation) [File not signed]

S4 reaConverter_service; C:\Program Files (x86)\reaConverter 7 Standard\rc_service.exe [2129408 2015-07-20] () [File not signed]

S4 RealPlayerUpdateSvc; c:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [33088 2015-09-16] ()

S4 RealTimes Desktop Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1103656 2015-09-21] (RealNetworks, Inc.)

S4 RemoteRegistry; C:\Windows\SysWOW64\regsvc.dll [69120 2007-02-18] (Microsoft Corporation) [File not signed]

S4 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254552 2012-08-08] ()

S4 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-08-25] ()

S4 RioMSC; C:\WINDOWS\SysWOW64\RioMSC.exe [282624 2004-08-26] (Digital Networks North America, Inc.) [File not signed]

S3 RpcLocator; C:\Windows\SysWOW64\locator.exe [71680 2007-02-18] (Microsoft Corporation) [File not signed]

S4 SandraDataSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII.SP1\Win32\RpcDataSrv.exe [213176 2007-12-12] (SiSoftware)

S4 SandraTheSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII.SP1\RpcSandraSrv.exe [1619136 2007-12-12] (SiSoftware)

R2 Schedule; C:\Windows\SysWOW64\schedsvc.dll [202240 2007-02-18] (Microsoft Corporation) [File not signed]

S2 SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [240512 2009-05-19] (Microsoft Corporation)

S3 seclogon; C:\Windows\SysWOW64\seclogon.dll [18432 2007-02-18] (Microsoft Corporation) [File not signed]

S4 Seed4.Me Service; C:\Program Files\Seed4.Me VPN\bin\Seed4.Me_service.exe [3911504 2017-04-21] (Seed4.Me)

S3 SharedAccess; C:\Windows\SysWOW64\ipnathlp.dll [343552 2007-02-18] (Microsoft Corporation) [File not signed]

S3 spupdsvc; C:\WINDOWS\system32\spupdsvc.exe [28704 2009-01-07] (Microsoft Corporation)

S3 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE [311872 2002-12-17] (Microsoft Corporation) [File not signed]

S2 srservice; C:\WINDOWS\system32\srsvc.dll [231424 2007-02-18] (Microsoft Corporation) [File not signed]

S4 SSDPSRV; C:\Windows\SysWOW64\ssdpsrv.dll [72192 2007-02-18] (Microsoft Corporation) [File not signed]

S3 stisvc; C:\Windows\SysWOW64\wiaservc.dll [348160 2007-02-18] (Microsoft Corporation) [File not signed]

S4 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [41432 2017-12-22] (Dell Inc.)

S4 svcChoiceMail; C:\Program Files y\DigiPortal Software\ChoiceMail\\CMServer.exe [4308992 2009-10-19] (DigiPortal Software, Inc.) [File not signed]

S4 svcCMPreApproval; C:\Program Files y\DigiPortal Software\ChoiceMail\\CMPreapproval.exe [1688576 2009-10-19] (DigiPortal Software, Inc) [File not signed]

S4 SW Administration Service; C:\Program Files (x86)\SXR Software\StatWin\ExecStat.exe [321288 2011-05-16] (SXR Software)

S4 SynoDrService; C:\Program Files (x86)\Synology Data Replicator  3\SynoDrServicex64.exe [381312 2012-06-28] () [File not signed]

S3 SysmonLog; C:\Windows\system32\smlogsvc.exe [133120 2007-02-18] (Microsoft Corporation) [File not signed]

S3 SysmonLog; C:\Windows\SysWOW64\smlogsvc.exe [96256 2007-02-18] (Microsoft Corporation) [File not signed]

S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7757552 2017-12-19] (TeamViewer GmbH)

R2 TrkWks; C:\Windows\SysWOW64\trkwks.dll [86528 2007-02-18] (Microsoft Corporation) [File not signed]

S4 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [294168 2018-02-27] (Reason Software Company Inc.)

S4 UPS; C:\Windows\System32\ups.exe [34816 2007-02-18] (Microsoft Corporation) [File not signed]

S4 UPS; C:\Windows\SysWOW64\ups.exe [16896 2007-02-18] (Microsoft Corporation) [File not signed]

S4 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [245760 2011-02-18] () [File not signed]

S4 USBSafelyRemoveService; C:\Program Files (x86)\USB Safely Remove\USBSRService.exe [1523000 2014-08-18] (Crystal Rich Ltd)

S4 W32Time; C:\Windows\SysWOW64\w32time.dll [227328 2007-02-18] (Microsoft Corporation) [File not signed]

S4 WebUpdate4; C:\Windows\SysWOW64\WebUpdateSvc4.exe [412776 2013-11-25] (Data Perceptions / PowerProgrammer)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

S4 WinExtService; C:\Program Files (x86)\TSS\WinExt\WinExt Service.exe [29184 2017-07-14] (TriSun Software) [File not signed]

S4 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580144 2015-08-06] (WiseCleaner.com) [File not signed]

S3 WmdmPmSN; C:\WINDOWS\SysWOW64\mspmsnsv.dll [25088 2007-02-18] (Microsoft Corporation) [File not signed]

S2 WMPNetworkSvc; C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe [913408 2006-10-18] (Microsoft Corporation) [File not signed]

S4 WsAppService; C:\Program Files (x86)\Wondershare\WAF\WsAppService.exe [356352 2015-09-23] (Wondershare) [File not signed]

S4 WsDrvInst; C:\Program Files (x86)\Wondershare\MirrorGo\DriverInstall.exe [103736 2015-10-10] (Wondershare)

R2 wuauserv; C:\Windows\SysWOW64\wuaueng.dll [1933848 2012-06-02] (Microsoft Corporation)

S2 WZCSVC; C:\Windows\System32\wzcsvc.dll [659968 2007-02-18] (Microsoft Corporation) [File not signed]

S2 WZCSVC; C:\Windows\SysWOW64\wzcsvc.dll [489472 2007-02-18] (Microsoft Corporation) [File not signed]

S4 ZAMSvc; C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [15775888 2017-08-09] (Copyright 2017.)

S4 Zoolz 2 Service; C:\Program Files\Genie9\Zoolz2\ZoolzService.exe [450064 2013-03-18] (Genie9)

S4 {0CBD4F48-3751-475D-BE88-4F271385B672}; C:\Program Files\Shadow Defender\Service.exe [74936 2015-07-27] (SHADOWDEFENDER.COM)

S4 ocster_1clk_backup; "c:\Program Files\Ocster 1-Click Backup\bin\backupService-ox1c.exe" "--controlFolder=c:\ProgramData\Ocster 1-Click Backup\control" "--id=ocster_1clk_backup" daemon

R2 VssProvider; C:\Windows\system32\dllhost.exe /Processid:{645E0355-F501-48F6-A44D-6A15A35F0D66}

 

===================== Drivers (Whitelisted) ======================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

S3 61883; C:\Windows\System32\DRIVERS\61883.sys [60288 2009-07-13] (Microsoft Corporation)

R3 A6210; C:\Windows\System32\DRIVERS\A6210.sys [2258608 2017-02-10] (MediaTek Inc.)

R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [51120 2016-12-23] ()

R2 ammntdrv; C:\Windows\system32\ammntdrv.sys [171952 2016-12-23] ()

S3 ampa; C:\Windows\system32\ampa.sys [38320 2016-12-25] ()

S3 ampa; C:\Windows\SysWOW64\ampa.sys [38320 2016-12-25] ()

R2 amwrtdrv; C:\Windows\system32\amwrtdrv.sys [38320 2016-12-23] ()

R1 AntiLog32; C:\Windows\system32\drivers\AntiLog64.sys [49752 2014-11-26] (Zemana Ltd.)

S3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [150440 2015-04-28] (SlySoft, Inc.)

S3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [150440 2015-04-28] (SlySoft, Inc.)

S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare)

S4 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [46368 2013-11-12] (AVG Technologies)

S3 awealloc; C:\Windows\system32\drivers\awealloc.sys [19520 2012-10-02] (Olof Lagerkvist)

R2 BASFND; C:\Program Files\Broadcom\BACS\BASFND.sys [15200 2007-06-20] (Broadcom Corporation) [File not signed]

S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2015-01-09] (BitDefender SRL)

R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [17088 2014-01-05] (Glarysoft Ltd)

R2 BstHdDrv; c:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [123152 2014-05-01] (BlueStack Systems)

U5 BTHPORT; C:\Windows\System32\Drivers\BTHPORT.sys [320512 2008-05-21] (Microsoft Corporation) [File not signed]

R1 cbfs5; C:\Windows\system32\drivers\cbfs5.sys [422080 2015-04-24] (EldoS Corporation)

R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [41608 2017-12-14] (Dell Inc.)

R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [41208 2017-12-14] (Dell Computer Corporation)

S3 DigiartyVirtualCDBus; C:\Windows\System32\drivers\DigiartyVirtualCDBus.sys [276256 2018-02-25] (Digiarty Software, Inc.)

R0 diskbckp; C:\Windows\System32\drivers\diskbckp.sys [45368 2018-02-05] (QILING Tech Co., Ltd.)

R0 diskpt; C:\Windows\System32\drivers\diskpt.sys [403128 2015-07-27] (SHADOWDEFENDER.COM)

S3 DrvSnSht; C:\Program Files (x86)\R-Drive Image\DrvSnSht64.sys [132432 2010-06-01] (R-TT Inc.)

S3 dvdfab; C:\Windows\System32\drivers\dvdfab.sys [79232 2011-08-15] (Fengtao Software Inc.)

R1 ElbyCDIO; C:\Windows\SysWOW64\Drivers\ElbyCDIO.sys [24232 2009-02-17] (Elaborate Bytes AG)

S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [18528 2014-11-18] () [File not signed]

S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [15968 2014-11-18] () [File not signed]

R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [76200 2018-01-18] ()

R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [53240 2016-12-06] ()

S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9800 2013-03-07] () [File not signed]

S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [9160 2013-03-07] () [File not signed]

R0 FSProFilter2; C:\Windows\System32\Drivers\FSPFltd2.sys [57648 2011-06-03] (FSPro Labs)

R1 GSVDRIVE; C:\Windows\System32\DRIVERS\GSVDRIVE.sys [30816 2013-02-22] (GiliSoft International LLC.)

S3 GUMHFilters; C:\Program Files (x86)\Glarysoft\Malware Hunter\Native\winxp_x64\GUMHFilter.sys [37688 2016-11-04] (GlarySoft Ltd)

R1 GUSBootStartup; C:\Windows\System32\drivers\GUSBootStartup.sys [20160 2017-02-16] (Glarysoft Ltd)

R0 hotcore3; C:\Windows\System32\DRIVERS\hotcore3.sys [34056 2013-12-16] (Paragon Software Group)

S3 imdisk; C:\Windows\system32\drivers\imdisk.sys [55360 2012-10-02] (Olof Lagerkvist)

R2 inpoutx64; C:\Windows\System32\Drivers\inpoutx64.sys [15008 2017-05-16] (Highresolution Enterprises [www.highrez.co.uk])

R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)

R3 ISpeakVA; C:\Windows\System32\drivers\wav_mixer.sys [35592 2014-05-09] ()

R3 leawo_vad; C:\Windows\System32\drivers\leawo_vad.sys [33048 2013-05-21] (Shenzhen Moyea Software)

S4 LMIRfsClientNP; no ImagePath

R2 MacriumImageGuardianDriver; C:\Windows\system32\Drivers\mrigflt.sys [50408 2017-10-04] (Windows ® Win 7 DDK provider)

R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [193248 2018-03-10] (Malwarebytes)

R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [109800 2018-03-10] (Malwarebytes)

R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [45960 2018-03-10] (Malwarebytes)

R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253664 2018-03-10] (Malwarebytes)

R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [92280 2018-03-10] (Malwarebytes)

R3 mcdevice; C:\Windows\System32\DRIVERS\mcdevice.sys [334400 2011-05-19] (ShiningMorning Inc.)

S3 MDA_NTDRV; C:\Windows\system32\MDA_NTDRV.sys [21208 2013-02-25] ()

R0 mrcbt; C:\Windows\System32\drivers\mrcbt.sys [73928 2017-10-04] (Windows ® Win 7 DDK provider)

R1 NetworkX; C:\Windows\system32\ckldrv.sys [28664 2008-03-17] ()

R2 npf; C:\Windows\System32\drivers\npf.sys [47632 2010-01-26] (CACE Technologies, Inc.)

R0 oodisr; C:\Windows\System32\DRIVERS\oodisr.sys [116888 2018-02-09] (O&O Software GmbH)

R0 oodisrh; C:\Windows\System32\DRIVERS\oodisrh.sys [41112 2018-02-09] (O&O Software GmbH)

R0 oodivd; C:\Windows\System32\DRIVERS\oodivd.sys [265080 2018-02-09] (O&O Software GmbH)

R0 oodivdh; C:\Windows\System32\DRIVERS\oodivdh.sys [51576 2018-02-09] (O&O Software GmbH)

U0 Partizan; C:\Windows\SysWOW64\drivers\Partizan.sys [40304 2015-06-18] (Greatis Software)

R3 PCWinSoft; C:\Windows\System32\DRIVERS\scrcamhrdrv_x64.sys [241800 2012-10-11] (Windows ® Server 2003 DDK provider)

S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19640 2014-04-02] ()

S3 pwdspio; C:\Windows\system32\pwdspio.sys [12480 2014-04-02] ()

S3 R-ImageDisk; C:\Program Files (x86)\R-Drive Image\R-ImageDisk64.sys [213584 2014-10-10] (R-TT Inc.)

R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [24744 2014-04-28] (Audials AG)

S3 rzc5309za; C:\Windows\system32\drivers\zinstall_z77\rzc5309za.sys [236096 2012-10-02] (rzc5309za Foundation)

S3 rzc6660za; C:\Windows\system32\drivers\zinstall_z77\rzc6660za.sys [245672 2015-05-18] (rzc6660za Foundation)

R1 SLEE_18_DRIVER; C:\Windows\Sleen1864.sys [109144 2014-07-29] (Softwareentwicklung Remus - ArchiCrypt - )

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381608 2015-12-22] (Duplex Secure Ltd.)

R1 StarPortLite; C:\Windows\System32\DRIVERS\StarPortLite.sys [120704 2013-02-04] (StarWind Software)

R3 tapwindscribe0901; C:\Windows\System32\DRIVERS\tapwindscribe0901.sys [45560 2017-09-13] (The OpenVPN Project)

U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [28272 2018-03-09] ()

R1 UimBus; C:\Windows\System32\DRIVERS\UimBus.sys [102664 2013-12-16] ()

R1 Uim_DEVIM; C:\Windows\System32\DRIVERS\uim_devim.sys [25992 2013-12-16] ()

R1 Uim_IM; C:\Windows\System32\DRIVERS\uim_im.sys [700680 2013-12-16] ()

S1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390224 2012-10-31] (Paragon)

R3 VASDeviceDrm; C:\Windows\System32\drivers\vasdDev.sys [1454896 2012-03-19] (ShiningMorning Inc.)

R3 vDisk; C:\Windows\System32\DRIVERS\vDisk.sys [256312 2018-02-05] (QILING Tech Co., Ltd.)

R3 vpnpbus; C:\Windows\System32\DRIVERS\vpnpbus.sys [18624 2015-04-24] (EldoS Corporation)

R3 vrvd5; C:\Windows\System32\DRIVERS\vrvd5.sys [13344 2017-06-11] (Rsupport Corporation)

R2 WinisoCDBus; C:\Windows\System32\drivers\WinisoCDBus.sys [204032 2013-06-06] (WinISO.com)

S3 WiseHDInfo; C:\Windows\WiseHDInfo64.dll [14800 2015-09-28] (wisecleaner.com) [File not signed]

R1 ZAM; C:\Windows\System32\drivers\zam64.sys [203680 2017-11-23] (Zemana Ltd.)

R1 ZAM_Guard; C:\Windows\System32\drivers\zamguard64.sys [203680 2017-11-23] (Zemana Ltd.)

S3 b06bdrv; \SystemRoot\system32\drivers\bxvbda.sys [X]

S3 EUBAKUP0; \??\C:\Windows\system32\drivers\EUBAKUP0.sys [X]

S3 EUBKMON0; \??\C:\Windows\system32\drivers\EUBKMON0.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]

 

==================== NetSvcs (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

 

==================== One Month Created files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2018-03-10 22:54 - 2018-03-10 22:55 - 000000000 ____D C:\FRST

2018-03-10 19:41 - 2018-03-10 22:51 - 000045960 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys

2018-03-10 19:36 - 2018-03-10 22:51 - 000109800 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys

2018-03-10 19:35 - 2018-03-10 19:35 - 000001882 _____ C:\Users\Public\Desktop\Malwarebytes.lnk

2018-03-10 19:35 - 2018-03-10 19:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes

2018-03-10 19:35 - 2018-03-10 19:35 - 000000000 ____D C:\ProgramData\Malwarebytes

2018-03-10 15:11 - 2018-03-10 15:11 - 000002142 _____ C:\Users\Morgan Pierce Parker\Desktop\SharpDevelop 5.1.lnk

2018-03-10 15:09 - 2018-03-10 15:09 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\NuGet

2018-03-10 15:09 - 2018-03-10 15:09 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\ICSharpCode

2018-03-10 15:04 - 2018-03-10 15:04 - 000002142 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharpDevelop 5.1.lnk

2018-03-10 15:04 - 2018-03-10 15:04 - 000002130 _____ C:\Users\Public\Desktop\SharpDevelop 5.1.lnk

2018-03-10 15:04 - 2018-03-10 15:04 - 000000000 ____D C:\Program Files (x86)\SharpDevelop

2018-03-09 13:21 - 2018-03-09 13:21 - 000028272 _____ C:\Windows\system32\Drivers\TrueSight.sys

2018-03-09 13:19 - 2018-03-09 13:19 - 000000871 _____ C:\Users\Public\Desktop\RogueKiller.lnk

2018-03-09 13:19 - 2018-03-09 13:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller

2018-03-09 13:19 - 2018-03-09 13:19 - 000000000 ____D C:\Program Files\RogueKiller

2018-03-09 09:52 - 2018-03-09 09:52 - 000003406 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2396228472-3482715812-2186985281-1006

2018-03-09 08:49 - 2018-03-09 08:49 - 000018988 _____ C:\Users\Morgan Pierce Parker\Documents\Rkill 2018 03 07.txt

2018-03-08 14:12 - 2018-03-08 14:12 - 000000318 ____H C:\Windows\Tasks\User_Feed_Synchronization-{1B73630D-E1E9-42D4-AC78-4AD6896403D9}.job

2018-03-07 22:08 - 2018-03-09 08:51 - 000012494 _____ C:\Users\Morgan Pierce Parker\Desktop\Rkill.txt

2018-03-07 16:51 - 2018-03-07 16:51 - 000059713 _____ C:\Windows\SysWOW64\stub.json

2018-03-06 10:43 - 2018-03-06 10:43 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\SoftOrbits

2018-03-06 10:32 - 2018-03-06 10:32 - 000001145 _____ C:\Users\Morgan Pierce Parker\Desktop\Video Watermark Maker.lnk

2018-03-06 10:32 - 2018-03-06 10:32 - 000000000 ____D C:\Windows\SysWOW64\LibAV

2018-03-06 10:32 - 2015-08-09 00:29 - 001790976 _____ () C:\Windows\SysWOW64\AVEditLibOcx.ocx

2018-03-03 21:55 - 2018-03-03 21:55 - 000004096 ___SH C:\{64CC589E-2BFF-4C2A-9C02-4F3D6033C731}.CBM

2018-03-03 20:08 - 2018-03-03 20:08 - 000477696 ___SH C:\EUMONBMP.SYS

2018-03-03 20:08 - 2018-03-03 20:08 - 000000000 ____D C:\Windows\system32\config\regsave

2018-03-03 20:07 - 2018-03-03 20:07 - 000000000 ____D C:\easeus_tb_cloud

2018-03-03 20:02 - 2018-03-03 20:02 - 000002345 _____ C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromium.lnk

2018-03-03 20:02 - 2018-03-03 20:02 - 000002337 _____ C:\Users\Morgan Pierce Parker\Desktop\Chromium.lnk

2018-03-03 20:02 - 2018-03-03 20:02 - 000000000 ____D C:\ProgramData\SystemAcCrux

2018-03-03 16:00 - 2018-03-03 16:00 - 000001925 _____ C:\Users\Public\Desktop\EaseUS Todo Backup Free 10.6.lnk

2018-03-03 16:00 - 2018-03-03 16:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Todo Backup 10.6

2018-03-03 14:56 - 2018-03-03 14:51 - 000000997 _____ C:\Users\Morgan Pierce Parker\Desktop\Disk Master Professional.lnk

2018-03-03 14:51 - 2018-03-03 14:51 - 000000979 _____ C:\Users\Public\Desktop\Disk Master Professional.lnk

2018-03-03 14:51 - 2018-03-03 14:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Disk Master Professional

2018-03-03 14:51 - 2018-02-05 22:06 - 000256312 _____ (QILING Tech Co., Ltd.) C:\Windows\system32\Drivers\vDisk.sys

2018-03-03 14:51 - 2018-02-05 22:06 - 000045368 _____ (QILING Tech Co., Ltd.) C:\Windows\system32\Drivers\diskbckp.sys

2018-03-02 17:29 - 2018-03-02 17:29 - 000000825 _____ C:\Users\Morgan Pierce Parker\Desktop\Morgan Pierce Parker my-dvd-iso - Shortcut.lnk

2018-03-02 15:39 - 2018-03-10 19:41 - 000253664 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys

2018-03-02 15:39 - 2018-03-10 19:36 - 000193248 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys

2018-03-01 20:51 - 2018-03-01 20:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inpaint 7

2018-03-01 20:51 - 2018-03-01 20:51 - 000000000 ____D C:\Program Files\Inpaint7

2018-03-01 11:46 - 2018-03-01 11:46 - 000003271 _____ C:\Users\Morgan Pierce Parker\Desktop\ELDIM - EDIDViewer.lnk

2018-03-01 09:49 - 2018-03-10 22:51 - 000092280 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys

2018-03-01 09:49 - 2018-03-01 09:49 - 000000000 ____D C:\Program Files\Malwarebytes

2018-03-01 09:49 - 2018-01-18 08:03 - 000076200 _____ C:\Windows\system32\Drivers\mbae64.sys

2018-02-28 20:12 - 2018-02-28 20:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox

2018-02-28 16:58 - 2018-02-28 17:01 - 000000000 ____D C:\Users\Morgan Pierce Parker\Desktop\miscel images dups - but ken delete interesting

2018-02-28 08:34 - 2016-05-11 10:55 - 000001951 _____ C:\Users\Morgan Pierce Parker\Desktop\thinkorswim.lnk

2018-02-28 03:14 - 2018-02-28 06:51 - 000000000 ____D C:\Users\Morgan Pierce Parker\Documents\WR-Permissions Backup-2018_02_28-03_14_files

2018-02-28 02:33 - 2018-02-28 02:33 - 000003796 _____ C:\Windows\System32\Tasks\Dell SupportAssistAgent AutoUpdate

2018-02-26 14:56 - 2018-02-26 14:56 - 000001119 _____ C:\Users\Public\Desktop\AOMEI PE Builder 2.0.lnk

2018-02-26 14:56 - 2018-02-26 14:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI PE Builder 2.0

2018-02-26 14:51 - 2018-02-26 14:56 - 000000000 ____D C:\Program Files (x86)\AOMEI PE Builder 2.0

2018-02-26 14:48 - 2018-02-26 14:51 - 000001175 _____ C:\Users\Morgan Pierce Parker\Desktop\Kerish Doctor.lnk

2018-02-26 10:30 - 2018-02-26 10:30 - 000000826 _____ C:\Users\Morgan Pierce Parker\Desktop\Aml Pages.lnk

2018-02-26 06:24 - 2018-02-26 06:24 - 000051024 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe

2018-02-26 06:24 - 2018-02-26 06:24 - 000045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys

2018-02-26 06:24 - 2018-02-26 06:24 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys

2018-02-26 06:24 - 2018-02-26 06:24 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys

2018-02-25 14:53 - 2018-02-25 14:53 - 000001650 _____ C:\Users\Morgan Pierce Parker\Desktop\DVD_ISO - Shortcut (2).lnk

2018-02-25 14:49 - 2018-02-25 14:49 - 000000509 _____ C:\Local Disk © - Shortcut.lnk

2018-02-24 10:16 - 2018-02-24 10:16 - 000003608 _____ C:\Windows\System32\Tasks\doPDF 9 Update

2018-02-24 10:16 - 2018-02-24 10:16 - 000003588 _____ C:\Windows\System32\Tasks\doPDF 9 Telemetry

2018-02-24 10:15 - 2018-02-24 10:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\doPDF 9

2018-02-24 09:39 - 2018-02-01 09:30 - 000001204 _____ C:\Users\Morgan Pierce Parker\Desktop\Youtube Downloader HD (4).lnk

2018-02-23 14:51 - 2018-02-23 14:42 - 000002563 _____ C:\Users\Morgan Pierce Parker\Desktop\O&O DiskImage.lnk

2018-02-23 14:42 - 2018-02-23 14:42 - 000002539 _____ C:\Users\Public\Desktop\O&O DiskImage.lnk

2018-02-23 14:42 - 2018-02-23 14:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\O&O Software

2018-02-23 11:49 - 2018-02-28 07:54 - 000018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys

2018-02-23 11:01 - 2018-02-23 11:49 - 000000000 ____D C:\Program Files\Common Files\LogiShrd

2018-02-23 10:50 - 2018-02-23 10:52 - 000001175 _____ C:\Users\Morgan Pierce Parker\Desktop\Kerish Doctor 2018.lnk

2018-02-23 10:46 - 2018-02-23 10:42 - 000001383 _____ C:\Users\Morgan Pierce Parker\Desktop\Allavsoft.lnk

2018-02-23 10:43 - 2018-02-23 10:45 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\Allavsoft

2018-02-23 10:43 - 2018-02-23 10:43 - 000000000 ____D C:\Users\Morgan Pierce Parker\Documents\Allavsoft

2018-02-23 10:42 - 2018-02-23 10:42 - 000001341 _____ C:\Users\Public\Desktop\Allavsoft.lnk

2018-02-23 10:42 - 2018-02-23 10:42 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Allavsoft

2018-02-23 10:42 - 2018-02-23 10:42 - 000000000 ____D C:\Program Files (x86)\Allavsoft

2018-02-23 10:32 - 2018-02-23 11:01 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\Logishrd

2018-02-22 16:15 - 2018-02-28 08:33 - 000000000 ____D C:\Program Files\thinkorswim

2018-02-22 10:29 - 2018-02-22 10:29 - 000000819 _____ C:\Users\Users - Shortcut.lnk

2018-02-20 11:42 - 2018-02-20 11:42 - 000001344 _____ C:\Users\Morgan Pierce Parker\Desktop\autorunsc64.exe - Shortcut.lnk

2018-02-20 11:42 - 2018-02-20 11:42 - 000001339 _____ C:\Users\Morgan Pierce Parker\Desktop\Autoruns64.exe - Shortcut.lnk

2018-02-20 11:41 - 2018-02-20 11:42 - 000000000 ____D C:\Program Files\Autoruns

2018-02-19 14:49 - 2018-02-19 14:49 - 000018944 _____ (Softland) C:\Windows\system32\novamn9.dll

2018-02-19 14:49 - 2018-02-19 14:49 - 000015872 _____ (Softland) C:\Windows\system32\novami9.dll

2018-02-17 04:48 - 2018-02-17 04:48 - 000000000 ____D C:\Program Files\OO Software

2018-02-17 04:45 - 2018-02-17 04:48 - 000000000 ____D C:\ProgramData\OO Software

2018-02-16 23:02 - 2018-02-16 23:03 - 000000680 _____ C:\Users\Morgan Pierce Parker\Desktop\New Text Document.txt

2018-02-16 14:46 - 2018-02-16 14:46 - 000000000 ____D C:\Temp3

2018-02-16 09:35 - 2018-02-01 09:30 - 000001204 _____ C:\Users\Morgan Pierce Parker\Desktop\Youtube Downloader HD (3).lnk

2018-02-15 05:17 - 2018-02-15 05:17 - 000000000 ____D C:\Users\Morgan Pierce Parker\Documents\4Videosoft Studio

2018-02-14 16:59 - 2018-02-14 16:59 - 000001568 _____ C:\Users\Public\Desktop\4Videosoft iOS Transfer.lnk

2018-02-14 16:59 - 2018-02-14 16:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\4Videosoft

2018-02-14 16:58 - 2018-02-14 16:58 - 000000000 ____D C:\ProgramData\4Videosoft Studio

2018-02-14 16:58 - 2018-02-14 16:58 - 000000000 ____D C:\Program Files (x86)\4Videosoft Studio

2018-02-14 16:38 - 2018-03-10 19:40 - 000000246 _____ C:\Windows\SysWOW64\PARTIZLO.EXE

2018-02-13 18:53 - 2018-02-01 09:30 - 000001204 _____ C:\Users\Morgan Pierce Parker\Desktop\Youtube Downloader HD (2).lnk

2018-02-13 18:49 - 2018-02-13 18:49 - 130067560 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe

2018-02-13 09:49 - 2018-02-13 09:46 - 000001072 _____ C:\Users\Morgan Pierce Parker\Desktop\SyvirSen.LNK

2018-02-13 09:22 - 2018-02-13 10:14 - 000000000 ____D C:\Program Files (x86)\SyvirSen

2018-02-13 09:22 - 2018-02-13 09:46 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SyvirSen

2018-02-13 09:21 - 2018-02-13 09:21 - 000274432 ____N (Syvir) C:\Windows\Setup1.exe

2018-02-13 09:21 - 2018-02-13 09:21 - 000073216 _____ (Microsoft Corporation) C:\Windows\ST6UNST.EXE

2018-02-11 14:38 - 2018-02-11 14:38 - 000002939 _____ C:\Users\Morgan Pierce Parker\Desktop\db - Shortcut.lnk

2018-02-10 17:57 - 2018-02-10 17:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2018-02-10 11:43 - 2018-02-10 11:45 - 000003484 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask

2018-02-10 11:43 - 2018-02-10 11:43 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\LocalLow\PCDr

2018-02-10 11:41 - 2018-02-14 16:41 - 000000000 ____D C:\ProgramData\PCDr

2018-02-10 11:41 - 2018-02-10 11:42 - 000002085 _____ C:\Users\Public\Desktop\SupportAssist.lnk

2018-02-10 11:41 - 2018-02-10 11:41 - 000000000 ____D C:\ProgramData\PC-Doctor for Windows

2018-02-10 11:41 - 2018-02-10 11:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell

2018-02-10 11:41 - 2018-02-10 11:41 - 000000000 ____D C:\Program Files\Dell Support Center

2018-02-10 11:35 - 2018-02-10 11:36 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\PCDr

2018-02-10 11:34 - 2018-02-10 11:34 - 000000000 ____D C:\ProgramData\SupportAssist

2018-02-10 11:34 - 2018-02-10 11:34 - 000000000 ____D C:\ProgramData\Dell Inc

2018-02-09 05:46 - 2018-02-09 05:46 - 000116888 _____ (O&O Software GmbH) C:\Windows\system32\Drivers\oodisr.sys

2018-02-09 05:46 - 2018-02-09 05:46 - 000041112 _____ (O&O Software GmbH) C:\Windows\system32\Drivers\oodisrh.sys

 

==================== One Month Modified files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2018-03-10 22:59 - 2017-11-23 10:52 - 000080168 _____ C:\Windows\ZAM.krnl.trace

2018-03-10 22:58 - 2017-11-23 10:52 - 000035742 _____ C:\Windows\ZAM_Guard.krnl.trace

2018-03-10 22:51 - 2014-03-03 08:37 - 000000624 _____ C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-2396228472-3482715812-2186985281-1006.job

2018-03-10 22:43 - 2017-05-16 17:40 - 000000404 _____ C:\Windows\Tasks\WpsUpdateTask_Morgan Pierce Parker.job

2018-03-10 22:22 - 2015-07-21 13:24 - 000000720 _____ C:\Windows\Tasks\G2MUploadTask-S-1-5-21-2396228472-3482715812-2186985281-1006.job

2018-03-10 22:12 - 2017-08-12 18:58 - 000000936 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job

2018-03-10 19:51 - 2009-07-13 23:45 - 000035552 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2018-03-10 19:51 - 2009-07-13 23:45 - 000035552 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2018-03-10 19:44 - 2009-07-14 00:13 - 000887860 _____ C:\Windows\system32\PerfStringBackup.INI

2018-03-10 19:44 - 2009-07-13 22:20 - 000000000 ____D C:\Windows\inf

2018-03-10 19:41 - 2009-07-13 22:20 - 000000000 ____D C:\Windows\registration

2018-03-10 19:40 - 2014-12-02 08:07 - 000000294 _____ C:\Windows\Tasks\StartupStar Firewall.job

2018-03-10 19:40 - 2009-07-14 00:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT

2018-03-10 19:38 - 2017-10-03 11:22 - 000065536 _____ C:\Windows\system32\spu_storage.bin

2018-03-10 19:38 - 2016-05-07 08:16 - 000000892 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job

2018-03-10 19:37 - 2013-06-10 22:34 - 000000000 ____D C:\Users\Morgan Pierce Parker

2018-03-10 18:38 - 2012-01-16 10:45 - 000000000 ____D C:\Windows\SysWOW64\Macromed

2018-03-10 16:10 - 2017-08-12 13:19 - 000000000 ____D C:\AdwCleaner

2018-03-10 14:37 - 2016-09-27 08:23 - 000000000 ____D C:\Users\Morgan Pierce Parker\Documents\Tabbles

2018-03-10 14:22 - 2013-09-08 09:40 - 000000000 ____D C:\Users\Morgan Pierce Parker\Documents\My Kindle Content

2018-03-10 09:40 - 2014-05-17 23:50 - 000000000 ____D C:\ComIntRepair

2018-03-10 09:40 - 2014-03-21 10:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Hard Disk Manager™ 14 Professional

2018-03-10 09:26 - 2012-02-17 11:11 - 000000808 _____ C:\Windows\WORDPAD.INI

2018-03-09 13:20 - 2017-06-15 13:33 - 000000000 ____D C:\Users\Morgan Pierce Parker\Documents\NinjaTrader Backup

2018-03-09 13:20 - 2016-08-30 18:56 - 000000000 ____D C:\ProgramData\RogueKiller

2018-03-09 12:40 - 2015-07-21 13:24 - 000003794 _____ C:\Windows\System32\Tasks\G2MUploadTask-S-1-5-21-2396228472-3482715812-2186985281-1006

2018-03-09 12:40 - 2014-03-03 08:37 - 000003698 _____ C:\Windows\System32\Tasks\G2MUpdateTask-S-1-5-21-2396228472-3482715812-2186985281-1006

2018-03-09 10:58 - 2017-08-27 13:51 - 000000000 ____D C:\Program Files\Opera

2018-03-09 09:56 - 2015-08-16 17:25 - 000003852 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1396296037

2018-03-09 09:56 - 2014-03-31 15:00 - 000000000 ____D C:\Program Files (x86)\Opera20

2018-03-09 09:09 - 2016-09-02 19:52 - 000000000 ____D C:\Program Files (x86)\iolo

2018-03-09 08:53 - 2017-08-08 08:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip

2018-03-09 08:53 - 2017-08-08 08:01 - 000000000 ____D C:\ProgramData\WinZip

2018-03-07 22:08 - 2009-07-14 00:08 - 000032614 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2018-03-07 14:11 - 2016-05-11 10:55 - 000000000 ____D C:\Program Files\thinkorswim2

2018-03-07 14:11 - 2014-02-09 16:16 - 000000000 ____D C:\Users\Morgan Pierce Parker\.thinkorswim

2018-03-06 10:33 - 2013-07-24 09:36 - 000000000 ____D C:\Program Files (x86)\Video Watermark Maker

2018-03-06 10:32 - 2017-06-29 07:44 - 000000452 _____ C:\Users\Morgan Pierce Parker\Desktop\My Software Deals.url

2018-03-06 10:32 - 2013-07-24 09:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Watermark Maker

2018-03-03 15:51 - 2012-01-18 16:17 - 000000000 ____D C:\Program Files\EASEUS

2018-03-03 14:52 - 2015-09-10 09:44 - 000000000 ____D C:\ProgramData\Disk Master

2018-03-03 14:16 - 2016-11-26 08:42 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\LocalLow\Mozilla

2018-03-03 11:03 - 2012-01-18 16:06 - 000000000 ____D C:\Program Files\tradertechniques

2018-03-02 13:28 - 2010-11-21 02:16 - 000000000 ____D C:\Windows\CSC

2018-03-02 13:28 - 2009-07-13 23:45 - 000819520 _____ C:\Windows\system32\FNTCACHE.DAT

2018-03-01 12:05 - 2009-07-13 21:34 - 000001151 _____ C:\Windows\win.ini

2018-03-01 11:47 - 2013-06-10 22:31 - 000887860 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2018-03-01 09:22 - 2017-08-26 13:49 - 000000000 ____D C:\Program Files (x86)\AOMEI Backupper

2018-03-01 09:22 - 2015-04-28 21:30 - 000000082 _____ C:\Windows\SysWOW64\winsevr.dat

2018-03-01 09:22 - 2013-03-17 12:56 - 000005970 _____ C:\Windows\system32\Drivers\etc\hosts_bak_144

2018-02-28 20:14 - 2017-08-12 18:57 - 000000000 ____D C:\Program Files (x86)\Dropbox

2018-02-28 19:18 - 2014-05-18 04:43 - 000000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2018-02-28 14:24 - 2014-08-03 08:50 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\Wise Care 365

2018-02-28 14:22 - 2016-05-30 23:01 - 000000000 ____D C:\140 Sychronicity

2018-02-28 08:36 - 2017-06-12 14:14 - 000000000 ___RD C:\Users\Morgan Pierce Parker\Desktop\MASTER DESKTOP

2018-02-28 08:12 - 2012-02-16 14:05 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\vlc

2018-02-27 19:55 - 2017-09-26 10:30 - 000000000 ____D C:\ProgramData\scre..tion_2c2536e5112611c9_0006.0003_35e631e4ee1ef81a

2018-02-27 19:48 - 2017-06-14 14:31 - 000002176 _____ C:\Users\Morgan Pierce Parker\Desktop\Tweaking.com - Windows Repair.lnk

2018-02-27 16:19 - 2012-06-05 12:18 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aml Pages

2018-02-27 16:19 - 2012-01-30 18:31 - 000000000 ____D C:\Program Files (x86)\TeamViewer

2018-02-27 13:47 - 2015-04-28 21:30 - 000000000 ____D C:\ProgramData\AomeiBR

2018-02-27 01:42 - 2016-09-02 20:30 - 000002231 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2018-02-26 15:22 - 2015-12-23 17:42 - 000000000 ____D C:\Users\Morgan Pierce Parker\Desktop\140 ADDITIONAL DESKTOP SHORTCUTS

2018-02-26 15:22 - 2015-09-21 15:04 - 000000000 ___RD C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE

2018-02-26 10:56 - 2017-12-16 00:57 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\AntDM

2018-02-26 10:30 - 2014-10-06 16:31 - 000000826 _____ C:\Users\Transition\Desktop\Aml Pages.lnk

2018-02-26 10:30 - 2014-10-06 16:31 - 000000826 _____ C:\Users\Pierce Potye\Desktop\Aml Pages.lnk

2018-02-26 10:30 - 2014-10-06 16:31 - 000000826 _____ C:\Users\Pee Wee\Desktop\Aml Pages.lnk

2018-02-26 10:30 - 2014-10-06 16:31 - 000000826 _____ C:\Users\NewAdmin\Desktop\Aml Pages.lnk

2018-02-26 10:30 - 2014-10-06 16:31 - 000000826 _____ C:\Users\Harriet Parker Mann\Desktop\Aml Pages.lnk

2018-02-26 10:30 - 2014-10-06 16:31 - 000000826 _____ C:\Users\ASPNET\Desktop\Aml Pages.lnk

2018-02-26 10:30 - 2014-10-06 16:31 - 000000826 _____ C:\Users\Administrator\Desktop\Aml Pages.lnk

2018-02-26 10:30 - 2014-10-06 16:31 - 000000826 _____ C:\Users\_ocster_1clk_backup_\Desktop\Aml Pages.lnk

2018-02-26 10:30 - 2012-06-05 12:18 - 000000850 _____ C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Aml Pages.lnk

2018-02-26 10:27 - 2012-01-18 18:22 - 000000000 ____D C:\Program Files\Aml Pages

2018-02-25 14:47 - 2012-03-29 16:33 - 000276256 _____ (Digiarty Software, Inc.) C:\Windows\system32\Drivers\DigiartyVirtualCDBus.sys

2018-02-24 10:21 - 2016-08-16 09:14 - 000000000 ____D C:\Users\Morgan Pierce Parker\Documents\ReadygoScreenRecorder

2018-02-24 10:16 - 2012-01-23 17:57 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\Softland

2018-02-24 10:15 - 2012-01-23 17:57 - 000000000 ____D C:\ProgramData\Softland

2018-02-24 10:12 - 2012-01-18 18:40 - 000000000 ____D C:\Program Files\Softland

2018-02-24 10:10 - 2013-11-19 11:02 - 000000000 ____D C:\ProgramData\Package Cache

2018-02-24 10:10 - 2012-01-31 09:23 - 000000000 ____D C:\Program Files (x86)\Softland

2018-02-23 12:06 - 2015-12-15 11:44 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\MyPhoneExplorer

2018-02-23 12:06 - 2014-03-25 13:31 - 000000000 ____D C:\ProgramData\LogSaver

2018-02-23 12:06 - 2013-07-14 15:23 - 000000000 ____D C:\Program Files\Puran Defrag

2018-02-23 12:06 - 2012-09-28 09:48 - 000000000 ____D C:\Users\Transition\AppData\Roaming\ProcessLasso

2018-02-23 12:06 - 2012-02-23 17:23 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\TeraCopy

2018-02-23 12:06 - 2012-01-30 18:32 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\TeamViewer

2018-02-23 12:06 - 2012-01-22 15:36 - 000000000 ____D C:\ProgramData\launcher

2018-02-23 12:06 - 2012-01-22 15:36 - 000000000 ____D C:\ProgramData\explauncher

2018-02-23 12:03 - 2014-09-18 17:15 - 000000000 ____D C:\Users\Morgan Pierce Parker\Documents\DVDFab Media Player

2018-02-23 12:03 - 2014-06-03 15:39 - 000000000 ____D C:\Users\Morgan Pierce Parker\Documents\My CamStudio Temp Files

2018-02-23 12:03 - 2012-04-05 13:17 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\dvdcss

2018-02-23 12:02 - 2016-01-03 09:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Lasso

2018-02-23 12:02 - 2012-01-18 18:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Studio 10

2018-02-23 12:02 - 2012-01-18 18:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ensign Software

2018-02-23 11:51 - 2012-01-18 18:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech

2018-02-23 11:51 - 2012-01-17 09:34 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2018-02-23 11:50 - 2014-04-18 07:19 - 000000000 ____D C:\ProgramData\LogiShrd

2018-02-23 11:46 - 2012-01-18 16:02 - 000000000 ____D C:\Program Files\Logitech

2018-02-23 11:00 - 2014-04-18 07:18 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\Logitech

2018-02-23 10:59 - 2017-05-15 19:00 - 000000000 ____D C:\Program Files (x86)\Kerish Doctor

2018-02-22 16:15 - 2012-01-18 18:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\thinkorswim

2018-02-22 07:26 - 2017-07-08 21:31 - 000000000 ____D C:\Program Files (x86)\GoToMeeting

2018-02-21 19:07 - 2013-05-01 10:05 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2018-02-20 09:45 - 2013-03-18 12:25 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\Skype

2018-02-19 12:14 - 2012-01-18 16:24 - 000000000 ____D C:\Program Files\Mozilla Firefox

2018-02-19 12:06 - 2017-06-10 09:09 - 000000000 ____D C:\Program Files\Mozilla Firefox64

2018-02-19 12:01 - 2017-09-04 11:55 - 000001086 _____ C:\Users\Public\Desktop\BurnAware Premium.lnk

2018-02-19 12:01 - 2015-12-29 21:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BurnAware Premium

2018-02-19 12:01 - 2015-12-29 21:03 - 000000000 ____D C:\Program Files (x86)\BurnAware Premium

2018-02-17 09:23 - 2012-11-29 20:41 - 000000000 ____D C:\Windows\System32\Tasks\NCH Swift Sound

2018-02-15 06:24 - 2017-11-13 09:55 - 000000000 ____D C:\AMD DOWNLOAD

2018-02-14 09:59 - 2014-11-24 09:41 - 000000000 ____D C:\Program Files (x86)\CintaNotes

2018-02-13 21:19 - 2013-07-14 09:01 - 000000000 ____D C:\Windows\system32\MRT

2018-02-13 18:57 - 2018-02-01 09:30 - 000000000 ____D C:\Users\Morgan Pierce Parker\AppData\Roaming\Youtube Downloader HD

2018-02-13 18:46 - 2013-06-11 13:33 - 130067560 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

2018-02-12 11:03 - 2013-03-28 16:16 - 000000000 ____D C:\ProgramData\TEMP

2018-02-10 17:58 - 2013-03-25 10:51 - 000000000 ____D C:\ProgramData\Skype

2018-02-10 17:57 - 2014-12-10 17:43 - 000000000 ___RD C:\Program Files (x86)\Skype

2018-02-10 12:43 - 2012-01-18 15:56 - 000000000 ____D C:\Program Files\Dell

2018-02-10 12:06 - 2012-02-12 08:59 - 000000000 ____D C:\temp

2018-02-09 16:39 - 2015-08-03 10:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013

2018-02-09 05:46 - 2017-09-15 22:46 - 000265080 _____ (O&O Software GmbH) C:\Windows\system32\Drivers\oodivd.sys

2018-02-09 05:46 - 2017-09-15 22:46 - 000051576 _____ (O&O Software GmbH) C:\Windows\system32\Drivers\oodivdh.sys

2018-02-08 11:23 - 2014-05-22 15:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScissors

2018-02-08 11:23 - 2014-05-22 15:07 - 000000000 ____D C:\Program Files\PhotoScissors

 

==================== Files in the root of some directories =======

 

2014-03-24 15:15 - 2014-04-22 10:34 - 000006292 _____ () C:\ProgramData\takesys.dat

2004-01-13 08:51 - 2004-01-13 08:51 - 000000566 _____ () C:\Program Files\095 eSignal.lnk

2006-02-12 15:09 - 2006-02-12 15:09 - 000012382 _____ () C:\Program Files\123-modifiedx.dat

2005-08-19 16:33 - 2012-01-18 18:05 - 000000478 _____ () C:\Program Files\AmiBroker (2).lnk

2005-10-29 10:18 - 2012-01-18 18:05 - 000000478 _____ () C:\Program Files\AmiBroker (3).lnk

2005-04-12 10:35 - 2012-01-18 18:05 - 000000478 _____ () C:\Program Files\AmiBroker.lnk

2003-09-10 19:39 - 2012-01-18 15:55 - 000000587 _____ () C:\Program Files\Creative.lnk

2005-11-10 11:45 - 2012-01-18 18:11 - 000000489 _____ () C:\Program Files\ENSIGN.lnk

2003-10-24 19:43 - 2005-09-15 13:48 - 000021952 _____ () C:\Program Files\folder.htt

2008-12-27 18:04 - 2012-01-18 18:40 - 000000513 _____ () C:\Program Files\Microsoft Office2000 install here.lnk

2006-09-23 08:42 - 2006-09-23 08:42 - 001412179 _____ () C:\Program Files\NAttache COPY BEFORE 9-23-06.zip

2008-10-02 06:12 - 2008-10-01 11:05 - 000024576 _____ () C:\Program Files\Peter Chat 9-30-08 Agreement basicsv2.doc

2004-04-08 16:51 - 2004-04-08 16:51 - 000000216 _____ () C:\Program Files\PTKC_INSTALL.LOG

2011-11-28 18:36 - 2011-11-28 18:36 - 000000008 _____ () C:\Program Files\SysResources Managersys112.dat

2006-02-12 21:48 - 2006-02-12 21:48 - 000013590 _____ () C:\Program Files\testc 123 HA WHILTE CANDLES.dat

2006-02-12 21:47 - 2006-02-12 21:47 - 000013590 _____ () C:\Program Files\testc.dat

2016-11-12 08:05 - 2016-07-20 12:26 - 000000999 _____ () C:\Program Files\zz available.rtf - Shortcut.lnk

2016-11-12 08:05 - 2016-05-24 18:38 - 000001287 _____ () C:\Program Files\ZZ WIDE WORD DOCUMENT BLANK - Shortcut (2).lnk

2016-11-12 08:05 - 2016-07-02 07:00 - 000002111 _____ () C:\Program Files\ZZO available observations.rtf - Shortcut.lnk

2016-11-12 08:05 - 2016-07-02 07:00 - 000002102 _____ () C:\Program Files\ZZP AVAILABLE FILE POETRY.rtf - Shortcut.lnk

2016-11-12 08:05 - 2016-05-24 18:38 - 000001290 _____ () C:\Program Files\ZZZ DOC AVAILABLE - Shortcut (2).lnk

2016-11-12 08:05 - 2016-05-24 18:37 - 000001211 _____ () C:\Program Files\ZZZ DOC WIDE AVAILABLE - Shortcut.lnk

2005-11-19 15:43 - 2012-01-18 10:03 - 000000596 _____ () C:\Program Files (x86)\BROWSER - Set Default Browser.lnk

2013-09-09 14:14 - 2013-11-12 10:29 - 000003745 _____ () C:\Program Files (x86)\Mozilla Firefoxsafeguard-secure-search.xml

2011-04-12 18:16 - 2011-04-12 18:16 - 000000008 _____ () C:\Program Files (x86)\SysResources Managersys111.dat

2006-03-31 20:35 - 2006-03-31 20:35 - 000000004 _____ () C:\Program Files\Common Files\Cvtaqlog.dat

2015-08-28 07:59 - 2015-08-27 15:48 - 000444283 _____ () C:\Program Files\Common Files\WinPcapNmap.exe

2011-01-12 01:00 - 2011-01-12 01:00 - 000146944 _____ () C:\Program Files (x86)\Common Files\dsfFLACDecoder.dll

2011-01-12 01:00 - 2011-01-12 01:00 - 000221184 _____ () C:\Program Files (x86)\Common Files\dsfFLACEncoder.dll

2011-01-12 01:00 - 2011-01-12 01:00 - 000204800 _____ () C:\Program Files (x86)\Common Files\dsfNativeFLACSource.dll

2012-05-11 13:16 - 2012-05-11 13:16 - 000171520 _____ () C:\Program Files (x86)\Common Files\dsfOggDemux2.dll

2011-01-12 01:00 - 2011-01-12 01:00 - 000240128 _____ () C:\Program Files (x86)\Common Files\dsfVorbisDecoder.dll

2009-07-11 22:08 - 2009-07-11 22:08 - 000001860 _____ () C:\Program Files (x86)\Common Files\Microsoft.VC90.CRT.manifest

2011-04-18 21:51 - 2011-04-18 21:51 - 000569680 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\MSVCP90.dll

2011-04-18 21:51 - 2011-04-18 21:51 - 000653136 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\MSVCR90.dll

2010-12-16 20:39 - 2010-12-16 20:39 - 000412672 _____ (Google) C:\Program Files (x86)\Common Files\vp8decoder.dll

2010-12-16 20:39 - 2010-12-16 20:39 - 000701440 _____ (Google) C:\Program Files (x86)\Common Files\vp8encoder.dll

2010-12-16 20:39 - 2010-12-16 20:39 - 000302592 _____ (Google) C:\Program Files (x86)\Common Files\webmmux.dll

2010-12-16 20:39 - 2010-12-16 20:39 - 000292352 _____ (Google) C:\Program Files (x86)\Common Files\webmsplit.dll

2011-01-12 01:00 - 2011-01-12 01:00 - 000030208 _____ () C:\Program Files (x86)\Common Files\wmpinfo.dll

2014-11-18 18:07 - 2015-09-02 09:26 - 000000261 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\1119HOTK.dat

2012-10-31 14:28 - 2015-11-22 10:18 - 000000344 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\15a05a1824a8793fae296ac6f79b78023a0c9d3c

2013-09-02 08:15 - 2013-09-02 08:15 - 000001929 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\Ashampoo Gadge It event.log

2013-04-10 16:58 - 2013-11-14 15:30 - 000000000 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\AVSDVDPlayer.m3u

2012-12-05 12:12 - 2015-12-30 11:51 - 000001004 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\burnaware.ini

2012-03-05 15:11 - 2015-11-22 10:18 - 000000332 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\c1972b1a7030edbaa8a0231998d2d434906484f2

2014-06-03 15:48 - 2014-11-15 08:18 - 000000095 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\Camdata.ini

2014-06-03 15:48 - 2014-11-15 08:18 - 000000408 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\CamLayout.ini

2014-06-03 15:48 - 2014-11-15 08:18 - 000000408 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\CamShapes.ini

2014-06-03 15:48 - 2014-11-15 08:18 - 000004543 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\CamStudio.cfg

2014-11-14 18:04 - 2014-11-14 18:12 - 000000098 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\CamStudio.Producer.command

2014-11-14 18:07 - 2014-11-14 18:14 - 000000000 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\CamStudio.Producer.Data.ini

2014-11-14 18:07 - 2014-11-14 18:14 - 000001206 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\CamStudio.Producer.ini

2016-12-22 11:05 - 2016-12-22 11:05 - 000000040 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\cdr.ini

2017-07-10 14:34 - 2017-07-10 14:35 - 000000703 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\codec.dll

2017-02-21 18:49 - 2017-02-21 18:49 - 000029516 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\Comma Separated Values.ADR

2012-05-05 16:11 - 2012-07-06 16:24 - 000000227 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\default.rss

2012-05-06 14:54 - 2012-05-06 14:54 - 000000000 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\downloads.m3u

2017-01-01 19:53 - 2017-01-01 19:55 - 000000110 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\IP.dat

2014-06-23 16:36 - 2014-06-23 16:37 - 000002058 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\moyea_dia.log

2015-06-18 13:21 - 2015-06-18 13:21 - 000000000 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\mru.ini

2013-07-14 13:07 - 2008-07-07 13:22 - 000000014 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\options.ini

2013-07-14 13:07 - 2012-07-07 13:04 - 000000003 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\options_pdfcombine.ini

2013-07-14 13:07 - 2013-02-23 12:15 - 000000003 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\options_pdfrotator.ini

2017-10-26 19:20 - 2017-05-04 13:05 - 000000002 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\paclan.ini

2017-10-26 19:20 - 2017-10-26 19:21 - 000000008 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\pacsound.dll

2016-11-01 09:06 - 2016-11-01 09:07 - 000000703 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\pcsound.dll

2015-03-10 13:25 - 2015-09-04 07:49 - 000000010 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\pdfdrawcodec.dll

2015-08-13 08:04 - 2015-08-13 08:05 - 000000008 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\pecodec.dll

2013-07-14 13:07 - 2013-06-09 09:38 - 000000053 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\setting.ini

2013-07-14 13:07 - 2013-06-08 13:43 - 000000030 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\setup.ini

2013-07-14 13:07 - 2013-06-09 09:30 - 000000043 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\setup_pdfcombine.ini

2013-07-14 13:07 - 2013-06-09 10:34 - 000000043 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\setup_pdfrotator.ini

2016-09-27 16:22 - 2016-09-27 16:22 - 000000011 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\tabbles_hwnd_main

2016-09-27 16:22 - 2016-09-27 16:22 - 000000009 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\tabbles_hwnd_quick_link

2014-06-03 15:26 - 2014-06-03 15:26 - 000000096 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\version2.xml

2013-07-30 10:20 - 2013-09-23 23:20 - 000000112 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\WB.CFG

2013-09-10 23:13 - 2013-09-10 23:13 - 000000005 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\WBPU-Q5-TTL.DAT

2013-06-24 05:47 - 2013-09-23 23:20 - 000000005 _____ () C:\Users\Morgan Pierce Parker\AppData\Roaming\WBPU-TTL.DAT

2018-01-31 08:55 - 2018-01-31 08:55 - 000000120 ___SH () C:\Users\Morgan Pierce Parker\AppData\Local\00000104

2016-08-05 15:51 - 2016-08-05 15:51 - 000000120 ___SH () C:\Users\Morgan Pierce Parker\AppData\Local\00000114

2015-09-28 13:53 - 2015-09-28 13:53 - 000000184 _____ () C:\Users\Morgan Pierce Parker\AppData\Local\atidt64.dll

2014-03-24 15:15 - 2014-04-22 10:34 - 000006292 _____ () C:\Users\Morgan Pierce Parker\AppData\Local\dat51_.dat

2014-03-24 15:14 - 2014-03-24 15:14 - 000006292 _____ () C:\Users\Morgan Pierce Parker\AppData\Local\dat6_.xml

2013-06-26 13:19 - 2015-11-14 09:56 - 000080384 _____ () C:\Users\Morgan Pierce Parker\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2014-03-31 10:25 - 2013-03-18 17:45 - 001122304 _____ (The OpenSSL Project, http://www.openssl.org/)C:\Users\Morgan Pierce Parker\AppData\Local\libeay32.dll

2015-04-01 10:42 - 2015-04-01 10:42 - 000000466 _____ () C:\Users\Morgan Pierce Parker\AppData\Local\LMIR0012.tmp.bat

2015-04-01 10:42 - 2015-04-01 10:42 - 000000391 _____ () C:\Users\Morgan Pierce Parker\AppData\Local\LMIR0012.tmp_r.bat

2014-03-31 10:25 - 2014-04-01 06:44 - 000205626 _____ () C:\Users\Morgan Pierce Parker\AppData\Local\log.txt

2014-03-31 10:25 - 2011-06-11 00:58 - 000421200 _____ (Microsoft Corporation) C:\Users\Morgan Pierce Parker\AppData\Local\msvcp100.dll

2014-03-31 10:25 - 2011-06-11 00:58 - 000773968 _____ (Microsoft Corporation) C:\Users\Morgan Pierce Parker\AppData\Local\msvcr100.dll

2013-07-07 14:15 - 2013-07-07 14:15 - 000007630 _____ () C:\Users\Morgan Pierce Parker\AppData\Local\Resmon.ResmonCfg

2014-03-31 10:25 - 2013-03-18 17:45 - 000274432 _____ (The OpenSSL Project, http://www.openssl.org/)C:\Users\Morgan Pierce Parker\AppData\Local\ssleay32.dll

2014-07-15 14:35 - 2014-07-15 14:35 - 000000009 _____ () C:\Users\Morgan Pierce Parker\AppData\Local\trial.txt

2014-03-31 10:25 - 2014-07-10 08:31 - 000130578 _____ () C:\Users\Morgan Pierce Parker\AppData\Local\viewer.txt

2015-05-08 18:50 - 2016-06-21 08:25 - 000017408 _____ () C:\Users\Morgan Pierce Parker\AppData\Local\WebpageIcons.db

2015-02-07 10:20 - 2015-02-07 10:21 - 000000416 _____ () C:\Users\Morgan Pierce Parker\AppData\Local\winconf.pxt

2013-05-28 02:05 - 2013-05-28 02:05 - 000000000 _____ () C:\Users\Morgan Pierce Parker\AppData\Local\{299B4C55-90B0-4B00-A42D-6008EE8C9E7E}

2013-06-26 17:24 - 2017-05-28 15:56 - 000000005 _____ () C:\Users\Morgan Pierce Parker\AppData\Local\{C916D440-D489-4A79-B306-5FDC1E7932C0}.list

2013-06-19 06:06 - 2013-06-19 06:06 - 000000008 __RSH () C:\Users\Morgan Pierce Parker\AppData\Local\ℤ™☠

 

==================== Bamital & volsnap ======================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

 

 

ATTENTION: ==> Could not access BCD. 

 

LastRegBack: 2018-03-09 16:15

 

==================== End of FRST.txt ============================

 

 

LOG 2  ADDITION.TXT:

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10.03.2018

Ran by Morgan Pierce Parker (10-03-2018 23:00:43)

Running from S:\1 DOWNLOADS

Windows 7 Ultimate Service Pack 1 (X64) (2013-06-11 16:03:35)

Boot Mode: Normal

==========================================================

 

 

==================== Accounts: =============================

 

Administrator (S-1-5-21-2396228472-3482715812-2186985281-500 - Administrator - Enabled) => C:\Users\Administrator

ASPNET (S-1-5-21-2396228472-3482715812-2186985281-1003 - Limited - Enabled) => C:\Users\ASPNET

Guest (S-1-5-21-2396228472-3482715812-2186985281-501 - Limited - Disabled)

Harriet Parker Mann (S-1-5-21-2396228472-3482715812-2186985281-1004 - Administrator - Enabled) => C:\Users\Harriet Parker Mann

HelpAssistant (S-1-5-21-2396228472-3482715812-2186985281-1005 - Limited - Enabled)

Morgan Pierce Parker (S-1-5-21-2396228472-3482715812-2186985281-1006 - Administrator - Enabled) => C:\Users\Morgan Pierce Parker

morganp (S-1-5-21-2396228472-3482715812-2186985281-1024 - Administrator - Enabled)

NewAdmin (S-1-5-21-2396228472-3482715812-2186985281-1021 - Administrator - Enabled) => C:\Users\NewAdmin

Pee Wee (S-1-5-21-2396228472-3482715812-2186985281-1007 - Administrator - Enabled) => C:\Users\Pee Wee

Pierce Potye (S-1-5-21-2396228472-3482715812-2186985281-1008 - Administrator - Enabled) => C:\Users\Pierce Potye

SIMLIVEEXC001 (S-1-5-21-2396228472-3482715812-2186985281-1009 - Limited - Enabled)

SUPPORT_388945a0 (S-1-5-21-2396228472-3482715812-2186985281-1010 - Limited - Enabled)

Transition (S-1-5-21-2396228472-3482715812-2186985281-1000 - Administrator - Enabled) => C:\Users\Transition

TTADMXXX001 (S-1-5-21-2396228472-3482715812-2186985281-1011 - Limited - Enabled)

TTADMXXXMGR (S-1-5-21-2396228472-3482715812-2186985281-1012 - Limited - Enabled)

TTSIMSAM001 (S-1-5-21-2396228472-3482715812-2186985281-1013 - Limited - Enabled)

TTSIMSIM001 (S-1-5-21-2396228472-3482715812-2186985281-1014 - Limited - Enabled)

TTSIMSIM002 (S-1-5-21-2396228472-3482715812-2186985281-1015 - Limited - Enabled)

_ocster_1clk_backup_ (S-1-5-21-2396228472-3482715812-2186985281-1018 - Administrator - Enabled) => C:\Users\_ocster_1clk_backup_

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}

AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 

==================== Installed Programs ======================

 

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

"Nero SoundTrax Help (HKLM-x32\...\{B96C2601-52F5-4D5D-816A-63469EA311EF}) (Version: 4.0.15.0 - Nero AG) Hidden

@MAX SyncUp 2.9 (HKLM\...\{68EF9E48-C970-4124-BBC1-85C8ADD59109}_is1) (Version:  - @MAX Software)

µTorrent (HKLM-x32\...\uTorrent) (Version: 3.3.0.29625 - BitTorrent Inc.)

100% Free Chess 6.54 (HKLM-x32\...\FreeChess_is1) (Version: 6.54 - DreamQuest)

100% Free Chess 7.42 (HKLM-x32\...\FreeChess) (Version: 7.42 - DreamQuest)

1-abc.net File Renamer (Remove only) (HKLM-x32\...\1-abc.net File Renamer) (Version:  - )

1-abc.net File Washer (HKLM-x32\...\1-abc.net File Washer) (Version:  - 1-abc.net Software Development and Distribution)

1-abc.net Synchronizer (HKLM-x32\...\1-abc.net Synchronizer) (Version:  - 1-abc.net Software Development and Distribution)

1AVCapture version 1.9.4.20 (HKLM-x32\...\{8EB278E8-7FDA-4ED9-A429-C87A76F95087}_is1) (Version: 1.9.4.20 - PCWinSoft Systems)

1AVCenter version 2.2.7.21 (HKLM-x32\...\{C3208FCF-EAF5-43EE-972B-812DEA54FC72}_is1) (Version: 2.2.7.21 - PCWinSoft Systems Informatica Ltda)

1AVShare registered to GiveAwayOfTheDay version 1.7.8.82 (HKLM-x32\...\{645C273A-98F6-441A-9DD9-3147F97FA659}_is1) (Version: 1.7.8.82 - PCWinSoft Software)

1AVStreamer version 1.9.8.70 (HKLM-x32\...\{17DF20F4-4FA3-4BEC-868A-DEDF0178341E}_is1) (Version: 1.9.8.70 - PCWinSoft Software)

25 Clips (HKLM-x32\...\25 Clips) (Version:  - )

2Tware Mount Disk Image 2012 version 5.0 (HKLM-x32\...\{619C3277-E30C-4A4B-B8A6-C344CC91886D}_is1) (Version: 5.0 - 2TWare, Inc.)

3.0.3.711 (HKLM-x32\...\{6E0B9419-A8D9-402F-BC56-1A10EA5677C1}_is1) (Version:  - )

3.5.0 (HKLM-x32\...\{AE117F4B-840D-448B-A843-C0AE9F5EE50C}_is1) (Version: 3.5.0 - Arduino Software)

3D Youtube Downloader (x64) (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\3D Youtube Downloader (x64)) (Version: 1.16.1 - 3DYD Soft)

3StepIcon version 1.0.0 (HKLM-x32\...\{44F8E787-21B1-4EED-83A7-37C6998D6F6D}_is1) (Version: 1.0.0 - )

3StepPDF version 1.2.0 (HKLM-x32\...\{B98D2852-0E2D-4936-BEF4-E999682EC618}_is1) (Version: 1.2.0 - )

4K Stogram 1.9 (HKLM-x32\...\4K Stogram_is1) (Version: 1.9.6.974 - Open Media LLC)

4Media Burner Studio (HKLM-x32\...\4Media Burner Studio) (Version: 1.0.64.0827 - 4Media)

4Media Photo Slideshow Maker (HKLM-x32\...\4Media Photo Slideshow Maker) (Version: 1.0.2.0214 - 4Media)

4Media Ringtone Maker (HKLM-x32\...\4Media Ringtone Maker) (Version: 2.0.4.0908 - 4Media)

4shared Desktop (HKLM-x32\...\4shared Desktop) (Version:  - )

4shared.com Toolbar (HKLM-x32\...\4shared.com Toolbar) (Version: 6.3.3.3 - ) <==== ATTENTION

4Videosoft iOS Transfer 8.2.58 (HKLM-x32\...\{E8C3E38D-FE43-4a26-8B93-886E4F2C4710}_is1) (Version: 8.2.58 - 4Videosoft Studio)

5 Icons Income 1.0 (HKLM-x32\...\5 Icons Income_is1) (Version:  - TriSun Software Inc.)

5KPlayer 2.1 (HKLM-x32\...\5KPlayer_is1) (Version:  - DearMob, Inc.)

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )

7-Zip 9.21 (HKLM-x32\...\{23170F69-40C1-2701-0921-000001000000}) (Version: 9.21.00.0 - Igor Pavlov)

A4DeskPro v7.10 (Standard Edition) (HKLM-x32\...\a4deskpro_webunion_is1) (Version:  - WebUnion Media Ltd.)

ABBYY Business Card Reader 2.0 (HKLM-x32\...\{BC200000-0001-0000-0000-074957833700}) (Version: 2.0.178 - ABBYY)

ABBYY FineReader 5.0 Sprint (HKLM-x32\...\{D1696920-9794-4BBC-8A30-7A88763DE5A2}) (Version: 5.0.0.3347 - ABBYY Software House)

ABBYY FineReader 6.0 (HKLM-x32\...\{AF600F7B-67A7-48D9-BA3B-0FF97F35F970}) (Version: 6.0.759.29410 - ABBYY Software House)

ABBYY PDF Transformer+ (HKLM\...\{FA400000-0001-6400-0000-074957833700}) (Version: 4.1.283 - ABBYY Production LLC)

ABC Birthday Reminder version 2.6 (HKLM-x32\...\ABC Birthday Reminder_is1) (Version: 2.6 - OrgBusiness Software)

AbiWord 2.6.4 (HKLM-x32\...\AbiWord2) (Version: 2.6.4 - AbiSource Developers)

AbstractCurves (HKLM\...\AbstractCurves AbstractCurves 1) (Version: 1.179 - AbstractCurves Software)

AbstractCurves x64 (HKLM\...\AbstractCurves AbstractCurves x64 1) (Version: 1.190 - AbstractCurves Software)

abylon WLAN-LIVE-SCANNER 2017.1 (Privatversion) (HKLM\...\abylonprotectionmanagerwlan-live-scanner_is1) (Version: 2017.1 - abylonsoft)

AC3Filter (remove only) (HKLM-x32\...\AC3Filter) (Version:  - )

AC3Filter 2.6.0b (HKLM-x32\...\AC3Filter_is1) (Version: 2.6.0b - Alexander Vigovsky)

AceThinker Music Recorder V1.0.0 (HKLM-x32\...\{398bc5b8-5f7a-4a3a-bd02-dbc809070f0c}_is1) (Version: 1.0.0 - ACETHINKER LIMITED)

AcroPano Photo Stitcher, Panorama software (HKLM-x32\...\{E44C57E8-2E0B-418A-AAC1-043EF2065EB7}) (Version:  - )

ActionOutline Lite 3.4 (Free) (HKLM-x32\...\ActionOutline_is1) (Version: 3.4 - Green Parrots Software)

ActivePresenter (HKLM-x32\...\{A2A40277-D807-4754-95A3-2F294C2C51D3}_is1) (Version: 5.5.3 - Atomi Systems, Inc.)

AD Unlocker Pro (HKLM-x32\...\{A2AE0CA9-CF24-49F8-9978-1FB5D5220CAE}) (Version: 1.0.0 - Harry Davies Pro Software)

Adobe Acrobat 3.01 (HKLM-x32\...\Adobe Acrobat 3.01) (Version:  - )

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)

Adobe Flash Player 22 ActiveX (HKLM-x32\...\{392DC543-3818-4DCA-B95E-C587D83E1C20}) (Version: 22.0.0.209 - Adobe Systems Incorporated)

Adobe Flash Player 24 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)

Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.137 - Adobe Systems Incorporated)

Adobe Shockwave Player (HKLM-x32\...\Adobe Shockwave Player) (Version: 10.1.4.20 - Adobe Systems, Inc.)

Adobe® Photoshop® Album Starter Edition 3.0 (HKLM-x32\...\{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}) (Version: 3.00.000 - Adobe Systems, Inc.)

Advanced Date Time Calculator 4.0 (HKLM-x32\...\Advanced Date Time Calculator_is1) (Version:  - TriSun Software Inc.)

Advanced Uninstaller PRO - Version 11 (HKLM-x32\...\AU11_is1) (Version: 11 - Innovative Solutions)

Advanced ZIP Password Recovery (remove only) (HKLM-x32\...\Advanced ZIP Password Recovery) (Version:  - )

Advertising Center (HKLM-x32\...\{9F3523F8-DAD7-AE52-6DA7-45CDDDF33726}) (Version: 0.0.0.1 - Nero AG) Hidden

AgataSoft HotKey Manger (HKLM-x32\...\AgataSoft HotKey Manger_is1) (Version:  - AgataSoft)

AgataSoft PingMaster Pro (HKLM-x32\...\AgataSoft PingMaster Pro_is1) (Version:  - AgataSoft)

Aidfile recovery software version 3.6.5.8 (HKLM-x32\...\{456B239A-C1E0-4178-810E-8E8F09B06877}_is1) (Version: 3.6.5.8 - Mitusoft, Inc.)

Aimersoft PDF Converter Pro (Build 3.1.1) (HKLM-x32\...\{C28729BF-059E-4A2B-BCD6-08CD91FE06E1}_is1) (Version: 3.1.1 - Aimersoft Software)

Aimersoft Video Editor(Build 3.5.0) (HKLM-x32\...\Aimersoft Video Editor_is1) (Version:  - Aimersoft Software)

Ainishare Audio Recorder 1.5.0 (HKLM-x32\...\{30AB2FCD-FBF2-4bed-3333-13E6A1468621}_is1) (Version: 1.5.0 - Ainishare International LLC.)

Airy (HKLM-x32\...\Airy 1.0_is1) (Version: 1.0.30 - ELTIMA Software)

Aiseesoft 3D Converter 6.3.18 (HKLM-x32\...\{DBAFFECB-8062-4f19-9EFD-B7B53E922806}_is1) (Version:  - )

Aiseesoft Audio Converter 6.3.20 (HKLM-x32\...\{4061F26E-B6D6-443c-994B-01194541A2D7}_is1) (Version: 6.3.20 - Aiseesoft Studio)

Aiseesoft BD to MKV Copy 6.1.6 (HKLM-x32\...\{6755EE06-A0B2-47b7-89B9-D59C0141F37D}_is1) (Version: 6.1.6 - Aiseesoft Studio)

Aiseesoft Blu-ray Copy 7.0.18 (HKLM-x32\...\{A24AAF6D-3EDB-43da-89BE-1A95D5CFA672}_is1) (Version: 7.0.18 - Aiseesoft Studio)

Aiseesoft Blu-ray Creator 1.0.8 (HKLM-x32\...\{451CE7DE-6225-466f-A1FF-A60835F87DB5}_is1) (Version: 1.0.8 - Aiseesoft Studio)

Aiseesoft Blu-ray Player 6.2.70 (HKLM-x32\...\{3E1A13C3-E458-4995-BEA6-4B9BE279D502}_is1) (Version: 6.2.70 - Aiseesoft Studio)

Aiseesoft Blu-ray Ripper 6.3.62 (HKLM-x32\...\{D1B455C8-C170-44fe-8A90-31263B5153C2}_is1) (Version: 6.3.62 - Aiseesoft Studio)

Aiseesoft Blu-ray to MKV Ripper 6.3.22 (HKLM-x32\...\{3AB9A475-E02F-4219-99E2-381057E3F7CF}_is1) (Version:  - )

Aiseesoft DVD Copy 5.0.12 (HKLM-x32\...\{4F23DE27-8262-4c5a-9D7E-223FF16D9968}_is1) (Version:  - )

Aiseesoft DVD Creator 5.1.20 (HKLM-x32\...\{094BCE17-69CE-45ce-A131-F674CE996B3F}_is1) (Version:  - )

Aiseesoft DVD Ripper 6.2.26 (HKLM-x32\...\{D6BAD6AB-D3D9-46ad-B2C4-5A969006CE48}_is1) (Version:  - )

Aiseesoft DVD Ripper Platinum 7.1.8 (HKLM-x32\...\{40B5E57A-1D03-482c-88C5-233C3090AAB6}_is1) (Version: 7.1.8 - Aiseesoft Studio)

Aiseesoft HD Video Converter 6.3.68 (HKLM-x32\...\{3039577D-975E-42fc-89FC-2F1FF42F3FCA}_is1) (Version: 6.3.68 - Aiseesoft Studio)

Aiseesoft iPhone to Computer Transfer Ultimate 5.1.10 (HKLM-x32\...\Aiseesoft iPhone to Computer Transfer Ultimate_is1) (Version:  - )

Aiseesoft iPhone Transfer 7.0.30 (HKLM-x32\...\{ED0F3D85-995D-4605-88C5-226644C25DF1}_is1) (Version: 7.0.30 - Aiseesoft Studio)

Aiseesoft iPhone Transfer Platinum 6.1.22 (HKLM-x32\...\{7C2E211D-4B90-4bc6-BF40-E71A20BF8BE0}_is1) (Version:  - )

Aiseesoft Media Converter Ultimate 6.3.58 (HKLM-x32\...\{5FA3097C-03C5-492e-ACF0-9924A56985C2}_is1) (Version: 6.3.58 - Aiseesoft Studio)

Aiseesoft MXF Converter 6.3.32 (HKLM-x32\...\{BCBB05D5-AE8A-4ea6-9C57-C4854AF338F3}_is1) (Version: 6.3.32 - Aiseesoft Studio)

Aiseesoft PDF to Word Converter 3.2.6 (HKLM-x32\...\{3CF515C0-55D9-4591-824F-1934352AC10E}_is1) (Version: 3.2.6 - Aiseesoft Studio)

Aiseesoft Screen Recorder 1.0.8 (HKLM-x32\...\{DD85E531-C84E-4247-B7A3-5F0C22D276DB}_is1) (Version: 1.0.8 - Aiseesoft Studio)

Aiseesoft Total Media Converter 5.2.30 (HKLM-x32\...\Aiseesoft Total Media Converter_is1) (Version:  - )

Aiseesoft Total Media Converter Platinum 6.3.28 (HKLM-x32\...\{240E8FDB-BF8B-4bc3-963B-B28B7528BEBD}_is1) (Version: 6.3.28 - Aiseesoft Studio)

Aiseesoft Total Video Converter 7.1.22 (HKLM-x32\...\{E09CEBAA-4435-4404-8D82-4C029F6391E4}_is1) (Version: 7.1.22 - Aiseesoft Studio)

Aiseesoft Total Video Converter Platinum 7.1.8 (HKLM-x32\...\{3661F243-518C-4d05-8BDF-7B10CC22689F}_is1) (Version: 7.1.8 - Aiseesoft Studio)

Aiseesoft Video Converter Ultimate 9.0.8 (HKLM-x32\...\{BD446D04-7426-4a27-9B0B-33B0C386F71B}_is1) (Version: 9.0.8 - Aiseesoft Studio)

Aiseesoft Video Enhancer 1.0.32 (HKLM-x32\...\{0F8A1CB4-7F19-4fe9-A724-5F3DE1CB4513}_is1) (Version: 1.0.32 - Aiseesoft Studio)

Akamai NetSession Interface (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Akamai) (Version:  - Akamai Technologies, Inc)

AKS Text Replacer 1.5 (HKLM-x32\...\AKS Text Replacer_is1) (Version:  - AKS-Labs)

Alfa eBooks Manager (HKLM-x32\...\{E10F7227-310A-4686-B57D-D672D07BEDC9}) (Version: 7.0.01 - Alfa.NetSoft)

All My Books 3.9 [GOTD] (HKLM-x32\...\{3A9FE5C3-799E-4E41-AF4E-943F9BC4C4BD}_is1) (Version: 3.9 - Bolide Software)

All My Movies (HKLM-x32\...\{DEE77D4F-249F-46DF-8176-4BC4822D68AD}_is1) (Version: 7.9 - Bolide Software)

All PDF Converter (HKLM-x32\...\{10E189EE-0691-4FA2-8078-B59F09D4A444}) (Version: 2.4.2 - PDF Converters)

Allavsoft 3.15.4.6607 (HKLM-x32\...\{6EBED4D8-13D9-4270-8D44-B57DDB7A787C}_is1) (Version:  - Allavsoft Corporation)

ALLCapture 3.0 (HKLM-x32\...\{32E50C3F-46FB-4827-9BC3-0429860F5288}_is1) (Version:  - balesio AG)

AllMedia Grabber (HKLM-x32\...\AllMedia Grabber5.1) (Version: 5.1 - Fotis)

AllMedia Grabber (HKLM-x32\...\AllMedia Grabber6.2) (Version: 6.2 - OptWin Software)

AllMyNotes Organizer (HKLM-x32\...\AllMyNotes Organizer) (Version: 2.85 - Vladonai Software)

AllMySongs Database (HKLM-x32\...\AllMySongs Database1.5) (Version: 1.5 - Fotis)

AllMySongs Database (HKLM-x32\...\AllMySongs Database2.2) (Version: 2.2 - OptWin Software)

AllMySongs Database (HKLM-x32\...\AllMySongs Database2.5) (Version: 2.5 - OptWin Software)

AllWebMenus PRO 5.3.908 (HKLM\...\{1E3CA1C4-1E90-401B-8CC0-911DF018D8D8}) (Version: 5.3.908 - Likno Software)

Almeza MultiSet Professional 7.9.4 (HKLM-x32\...\Almeza MultiSet Professional_is1) (Version:  - Almeza Company)

AlomWare Actions (HKLM-x32\...\AlomWare Actions AlomWare_is1) (Version: 1.34 - AlomWare)

AlterCam (HKLM-x32\...\{358AF097-92D1-4750-80E1-F71904AC8CE2}_is1) (Version: 1.5 - Bolide® Software)

Amacsoft PDF to Excel Converter (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Amacsoft PDF to Excel Converter) (Version: 2.1.6 - Amacsoft)

Amazon Kindle (HKLM-x32\...\Amazon Kindle) (Version:  - Amazon)

Amazon Kindle (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Amazon Kindle) (Version: 1.16.0.44025 - Amazon)

Amazon Music (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Amazon Amazon Music) (Version: 3.2.0.591 - Amazon Services LLC)

AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.8 - Advanced Micro Devices, Inc.)

Aml Pages 9.82 (GOTD) (HKLM-x32\...\Aml Pages) (Version: 9.82 (GOTD) - G&G Software, Mazov Gosha aka Carc)

Amolto Call Recorder Premium for Skype (HKLM-x32\...\{AE32F725-4623-43E4-8F6D-D237F06BA723}) (Version: 3.7.1.0 - Amolto)

ANALOG projects 3 (64-Bit) (HKLM\...\ANALOG_PROJECTS_3_2_38D54FE3_is1) (Version: 3.21 - Franzis Verlag GmbH)

Aneesoft Flash Gallery Classic (HKLM-x32\...\{714549D0-C470-4757-B10C-FB932F3C98D0}}_is1) (Version:  - Aneesoft Corporation)

Aneesoft Video Converter Pro 3.6.0.0 (HKLM-x32\...\{00CB84A4-25AC-489D-A91C-D7DBC545E5B4}}_is1) (Version:  - Aneesoft Co., Ltd.)

Animated Screensaver Maker (HKLM-x32\...\Animated Screensaver Maker) (Version: 3.2.5 - DesktopPaints.com)

Animated Wallpaper Maker (HKLM-x32\...\Animated Wallpaper Maker) (Version: 4.2.4 - DesktopPaints.com)

Ann Video Converter 4.5.0 (HKLM-x32\...\{30AB2FCD-FBF2-4bed-4444-13E6A1468621}_is1) (Version: 4.5.0 - AnnVideo International LLC.)

Ant Download Manager version 1.7.0.promo.GiveawayOfTheDay.com (HKLM-x32\...\{754CB6A3-3FE2-40DA-9FE5-2864909BD1CC}_is1) (Version: 1.7.0.promo.GiveawayOfTheDay.com - AntGROUP, Inc.)

Antenna (HKLM-x32\...\Antenna) (Version: 6.4.0.900 - by Stormdance)

AntiLogger (HKLM-x32\...\{014534FF-1D46-4A77-9B48-29EFD145995B}) (Version: 1.9.3.527 - Zemana Ltd.) Hidden

AntiLogger (HKLM-x32\...\AntiLogger) (Version:  - Zemana Ltd.)

AntiPhotoSpy 2012 (HKLM-x32\...\{F5593F5B-B3A9-40CB-BB69-8190675F8DD9}_is1) (Version: 1.4 - Abelssoft)

Anti-Twin (Installation 2/23/2017) (HKLM-x32\...\Anti-Twin 2017-02-23 17.16.39) (Version:  - Joerg Rosenthal, Germany)

AnVir Task Manager (HKLM-x32\...\AnVir Task Manager) (Version:  - AnVir Software)

AnVir Task Manager Pro (HKLM-x32\...\AnVir Task Manager Pro) (Version:  - AnVir Software)

AnvSoft Photo Slideshow Maker Professional 5.56 (HKLM-x32\...\AnvSoft Photo Slideshow Maker Professional) (Version: 5.56 - AnvSoft, Inc.)

AnyDVD (HKLM-x32\...\AnyDVD) (Version: 7.6.2.0 - SlySoft)

AnyMP4 DVD Toolkit 6.0.38 (HKLM-x32\...\{0B656B87-BF80-4239-85B5-C6E673158C9E}_is1) (Version:  - )

AnyMP4 Video Converter Platinum 6.1.38 (HKLM-x32\...\{3E48324E-4843-4818-834D-C5219B51248E}_is1) (Version: 6.1.38 - AnyMP4 Studio)

AnyPic Image Converter 1.0.1 (HKLM-x32\...\{2FCFFE64-B076-4C21-874E-1C8ADEE8B378}_is1) (Version:  - AnyPic Soft)

Aoao Video to GIF Converter (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\AoaoVideotoGIF) (Version:  - AoaoPhoto Digital Studio. All Rights Reserved.)

Aoao Watermark 8.7 (HKLM-x32\...\Aoao Watermark) (Version: 8.7 - AoaoPhoto Digital Studio.)

AOMEI Backupper Professional (HKLM-x32\...\{A83692F5-3E9B-4E95-9E7E-B5DF5536CE9D}_is1) (Version:  - AOMEI Technology Co., Ltd.)

AOMEI Partition Assistant Pro Edition 6.1 (HKLM-x32\...\{02F850ED-FD0E-4ED1-BE0B-5498165BF300}_is1) (Version:  - AOMEI Technology Co., Ltd.)

AOMEI PE Builder 2.0 (HKLM-x32\...\{A83692F5-3E9B-4E95-9E7E-B5DF5566909D}_is1) (Version:  - AOMEI Technology Co., Ltd.)

A-PDF Number Pro (HKLM-x32\...\A-PDF Number Pro_is1) (Version:  - A-PDF Solution)

A-PDF Scan Paper (HKLM-x32\...\A-PDF Scan Paper_is1) (Version:  - A-PDF Solution)

Apex All in One PDF Tools 2.4.8.2 (HKLM\...\Apex All in One PDF Tools_is1) (Version: 2.4.8.2 - apexsofts.com)

Apex Text to Speech 2.3.8.2 (HKLM\...\Apex Text to Speech_is1) (Version: 2.3.8.2 - apexsofts.com)

Apiary Fund MetaTrader (HKLM-x32\...\{C95C9FD7-FE1C-4A5D-9BE3-AC2AE78735D9}) (Version: 2.1.5 - Apiary Investment Fund) Hidden

Apiary Fund MetaTrader (HKLM-x32\...\Apiary Fund MetaTrader 2.1.5) (Version: 2.1.5 - Apiary Investment Fund)

Aplus Combo PDF Tools 2.0.1.5 (HKLM\...\Aplus Combo PDF Tools_is1) (Version: 2.0.1.5 - Aplus Software)

Aplus Text to Speech 2.0.1.5 (HKLM-x32\...\Aplus Text to Speech 2.0.1.5) (Version:  - )

ApowerMirror V1.2.0 (HKLM-x32\...\{a9482532-9c34-478c-80c3-85bdccbb981f}_is1) (Version: 1.2.0 - APOWERSOFT LIMITED)

Apowersoft Phone Manager version 2.4.5 (HKLM-x32\...\{4A00E3C4-2D0F-4AE7-9F2A-74870BE09EF8}_is1) (Version: 2.4.5 - APOWERSOFT LIMITED)

Apowersoft Screen Capture Pro V1.1.3 (HKLM-x32\...\{eaee5526-f8bd-4d74-a24c-50e5b5f36521}_is1) (Version: 1.1.3 - APOWERSOFT LIMITED)

Apowersoft Screen Recorder Pro V1.1.9 (HKLM-x32\...\{BADAA284-1D15-4EBB-B1E5-7C86603CDBBB}_is1) (Version: 1.1.9 - Apowersoft)

Apple Application Support (32-bit) (HKLM-x32\...\{E92BB800-BCC5-4C25-8102-AC2C3B7C7C1E}) (Version: 5.5 - Apple Inc.)

Apple Application Support (64-bit) (HKLM\...\{9C912B1E-06DD-43EF-BB2B-45CB2C88BAAE}) (Version: 5.5 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{0A596141-97D5-45FA-9281-98DFAF48D579}) (Version: 10.3.2.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

AquaSoft DiaShow 7 Premium (HKLM-x32\...\{9FFC4C2D-374D-482B-AA58-67282CE23695}) (Version: 7.8.01 - AquaSoft) Hidden

AquaSoft DiaShow 7 Premium (HKLM-x32\...\AquaSoft DiaShow 7 Premium) (Version: 7.8.01 - AquaSoft)

ArcSoft Perfect365 (HKLM-x32\...\{5B5E949E-3924-45E3-9229-84E8270BED68}) (Version: 1.8.0.3 - ArcSoft, Inc.)

Ares 3.1.6.3040 (HKLM-x32\...\{C9FF844C-02F5-4221-8AD4-0BD823533C6E}_is1) (Version: 3.1.6.3040 - Ares)

Art Plus Calendar Designer PRO 2.0.2 (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Art Plus Calendar Designer) (Version: 2.0.2.208 - Art Plus Marketing & Publishing)

Artensoft Photo Collage Maker (HKLM\...\Artensoft Photo Collage Maker_is1) (Version: 1.4 - Artensoft)

Artensoft Photo Mosaic Wizard (HKLM\...\Artensoft Photo Mosaic Wizard_is1) (Version: 1.8 - Artensoft)

Artensoft Tilt Shift Generator (HKLM\...\Artensoft Tilt Shift Generator_is1) (Version: 1.2 - Artensoft)

ArtScope (HKLM-x32\...\{4F5803ED-3227-48A3-84FD-7B8A3795C2FE}) (Version: 1.98.353 - HelpSoft)

Ashampoo 3D CAD Architecture 5 v.5.0.0 (HKLM\...\{35D15FAA-42DC-4814-A02D-F03B72C3CBB6}_is1) (Version: 5.0.0 - Ashampoo GmbH & Co. KG)

Ashampoo Burning Studio 15 v.15.0.4 (HKLM-x32\...\{91B33C97-5B38-0A92-D04A-A0F26F3F87D4}_is1) (Version: 15.0.4 - Ashampoo GmbH & Co. KG)

Ashampoo Burning Studio 2012 v.10.0.15 (HKLM-x32\...\Ashampoo Burning Studio 2012_is1) (Version: 10.0.15 - Ashampoo GmbH & Co. KG)

Ashampoo Burning Studio 2013 v.11.0.5 (HKLM-x32\...\{91B33C97-0FBA-74AE-E802-D782F5C8AA89}_is1) (Version: 11.0.5 - Ashampoo GmbH & Co. KG)

Ashampoo Burning Studio 2014 v.12.0.5 (HKLM-x32\...\{91B33C97-280F-B76D-E27B-E712D7041B76}_is1) (Version: 12.0.5 - Ashampoo GmbH & Co. KG)

Ashampoo Burning Studio Elements 10.0.9 (HKLM-x32\...\Ashampoo Burning Studio Elements_is1) (Version: 3.1.1 - Ashampoo GmbH & Co. KG)

Ashampoo Gadge It v.1.0.1 (HKLM-x32\...\{91B33C97-5A0B-2CB7-3038-22701B2F2CED}_is1) (Version: 1.0.1 - Ashampoo GmbH & Co. KG)

Ashampoo GetBack Photo v.1.0.1 (HKLM-x32\...\{C92AB6F1-2490-D7C3-A45D-23F3C33ECFA5}_is1) (Version: 1.0.1 - Ashampoo GmbH & Co. KG)

Ashampoo HDD Control 1.12 (HKLM-x32\...\Ashampoo HDD Control_is1) (Version: 3.1.1 - Ashampoo GmbH & Co. KG)

Ashampoo HDD Control 2 v.2.1.0 (HKLM-x32\...\{4209F371-A431-385E-2D7E-ACDA5DA3BA0B}_is1) (Version: 2.1.0 - Ashampoo GmbH & Co. KG)

Ashampoo Home Designer Pro 2 v.2.0.0 (HKLM-x32\...\{1C65E4A9-E199-4E8A-9DB7-0F2057DF546D}_is1) (Version: 2.0.0 - Creative Amadeo GmbH)

Ashampoo Movie Studio 2013 v.1.0.4 (HKLM-x32\...\{91B33C97-EB09-F0A4-36AC-3895F9F93DD1}_is1) (Version: 1.0.4 - Ashampoo GmbH & Co. KG)

Ashampoo Music Studio 2013 v.4.0.7 (HKLM-x32\...\{91B33C97-0D61-2DA9-07F6-0EF54C520FE3}_is1) (Version: 4.0.7 - Ashampoo GmbH & Co. KG)

Ashampoo Music Studio 4 v.4.1.2 (HKLM-x32\...\{91B33C97-7650-0EB0-B6C7-DDBA2932B7B4}_is1) (Version: 4.1.2 - Ashampoo GmbH & Co. KG)

Ashampoo Music Studio 5 v.5.0.7 (HKLM-x32\...\{91B33C97-5BBE-576E-893B-711D4D8298ED}_is1) (Version: 5.0.7 - Ashampoo GmbH & Co. KG)

Ashampoo Photo Card v.1.0.0 (HKLM-x32\...\{C92AB6F1-EC2E-85C8-C6D7-5BB8C2F89C7F}_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG)

Ashampoo Photo Commander 11 v.11.1.7 (HKLM-x32\...\{C92AB6F1-0F9C-8526-5DF1-0A2FD0FB33D9}_is1) (Version: 11.1.7 - Ashampoo GmbH & Co. KG)

Ashampoo Photo Commander 9 v.9.4.3 (HKLM-x32\...\{C92AB6F1-6A1B-F954-7C68-B44BA8E357A4}_is1) (Version: 9.4.3 - Ashampoo GmbH & Co. KG)

Ashampoo Photo Converter 2 v.2.0.0 (HKLM-x32\...\{C92AB6F1-5566-A904-B32C-720C3BA1A819}_is1) (Version: 2.0.0 - Ashampoo GmbH & Co. KG)

Ashampoo Photo Converter v.1.0.1 (HKLM-x32\...\{C92AB6F1-BE98-C332-924C-9C25746AA5F2}_is1) (Version: 1.0.1 - Ashampoo GmbH & Co. KG)

Ashampoo Photo Optimizer 3 v.3.13 (HKLM-x32\...\Ashampoo Photo Optimizer 3_is1) (Version: 3.1.3 - Ashampoo Technology GmbH & Co. KG)

Ashampoo Photo Optimizer 4 v.4.0.3 (HKLM-x32\...\{91B33C97-37F7-77B5-78CD-6F9A9ADD6BAA}_is1) (Version: 4.0.3 - Ashampoo GmbH & Co. KG)

Ashampoo Photo Optimizer 5 v.5.7.0 (HKLM-x32\...\{91B33C97-9E02-D93E-656C-D2D81585F29B}_is1) (Version: 5.7.0 - Ashampoo GmbH & Co. KG)

Ashampoo Slideshow Studio 2013 v.1.0.2 (HKLM-x32\...\{91B33C97-34D2-9841-084D-BE4849F6A38F}_is1) (Version: 1.0.2 - Ashampoo GmbH & Co. KG)

Ashampoo Slideshow Studio 2015 v.1.0.0 (HKLM-x32\...\{91B33C97-4A6F-D11F-A387-040BB4E1094E}_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG)

Ashampoo Snap 4 v.4.3.1 (HKLM-x32\...\Ashampoo Snap 4_is1) (Version: 4.3.1 - Ashampoo GmbH & Co. KG)

Ashampoo Snap 5 v.5.1.2 (HKLM-x32\...\Ashampoo Snap 5_is1) (Version: 5.1.2 - Ashampoo GmbH & Co. KG)

Ashampoo Snap 7 v.7.0.10 (HKLM-x32\...\{C92AB6F1-9C93-0F51-ED50-15ABBCBDD142}_is1) (Version: 7.0.10 - Ashampoo GmbH & Co. KG)

Ashampoo Video Styler 2013 v.1.0.1 (HKLM-x32\...\{91B33C97-8914-D2D4-EB40-39C1714271FF}_is1) (Version: 1.0.1 - Ashampoo GmbH & Co. KG)

Ashampoo WinOptimizer 2012 v.8.1.4 (HKLM-x32\...\Ashampoo WinOptimizer 2012_is1) (Version: 8.1.4 - Ashampoo GmbH & Co. KG)

Asterisk Password Decryptor (HKLM-x32\...\{7AB6C326-A486-4CBE-A799-7A55CEEEFF2C}) (Version: 2.92.84 - KRyLack Software)

Atlantis Word Processor (HKLM-x32\...\Atlantis Word Processor) (Version:  - )

Atomic Alarm Clock 6.12 (HKLM\...\Atomic Alarm Clock_is1) (Version:  - Drive Software Company)

aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 2.9.1347 - DsNET Corp)

Auction Sentry Deluxe (HKLM-x32\...\{01979CA0-B550-47D0-AD16-553B2C3FCF97}) (Version: 3.0.3 - Auction Sentry)

Audacity 1.2.6 (HKLM-x32\...\Audacity_is1) (Version:  - )

Audials (HKLM-x32\...\{6A388B01-D414-429D-A917-B27BEC991A85}) (Version: 11.0.53800.0 - Audials AG)

Audials (HKLM-x32\...\{F2C88A2D-1A41-4493-89E4-067F30F58D43}) (Version: 8.0.43807.700 - RapidSolution Software AG)

Audials TV (HKLM-x32\...\{4044436C-3A01-4ECA-8FC9-AC8F3F838EDC}) (Version: 1.3.10803.300 - RapidSolution Software AG)

Audio Catalog 4.4 (HKLM-x32\...\Audio Catalog_is1) (Version:  - Digital Action, Inc.)

Audio Control (HKLM-x32\...\{D3373741-9581-4335-8AA8-E0770ECB77D4}) (Version: 4 - MBBSoftware)

Audio Record Wizard (HKLM-x32\...\Audio Record Wizard) (Version: 7.12 - NowSmart)

Audio Recorder 1.5 (HKLM-x32\...\{6873814C-1E89-4ADC-A0D6-CEEE306A6416}_is1) (Version:  - MediaVigor Software)

Audio Speed Changer Pro 1.5 (HKLM-x32\...\Audio Speed Changer Pro) (Version: 1.5 - SuperUtils.com Software)

Audiobook Downloader Pro 1.3 (HKLM-x32\...\Audiobook Downloader Pro) (Version: 1.3 - SuperUtils.com Software)

Audiodope 0.24 (HKLM-x32\...\Audiodope_is1) (Version:  - Audiodope Team)

Aurora Blu-ray Media Player (HKLM-x32\...\Aurora Blu-ray Media Player) (Version: 2.12.8.1277 - Aurora Software Inc.)

Auslogics Duplicate File Finder (HKLM-x32\...\{6845255F-15CC-4DD1-94D5-D38F370118B3}_is1) (Version: version 2.2 - Auslogics Software Pty Ltd)

Auto Data Backup Manager v2.0 (HKLM-x32\...\Auto Data Backup Manager v2.0) (Version:  - AlgoLogic)

Auto Mail Sender Birthday Edition 3.1 (HKLM-x32\...\Auto Mail Sender Birthday Edition_is1) (Version:  - TriSun Software Inc.)

Auto Screenshot Maker 3.0 (HKLM-x32\...\{6C9A0BF3-CE9C-4830-A26F-46AE774352C6}_is1) (Version:  - AutoScreenshotMaker)

AutoQ3D CAD 5.12 (HKLM-x32\...\AutoQ3D CAD_is1) (Version:  - AutoQ3D Team)

Autorun Organizer version 1.25 (HKLM-x32\...\Autorun Organizer_is1) (Version: 1.25 - ChemTable Software)

AV Audio & Sound Recorder (HKLM-x32\...\AV Audio & Sound Recorder) (Version: 2.0.3 - AVSoft Corp. (VN))

AV Audio Converter (HKLM-x32\...\AV Audio Converter) (Version: 2.0.3 - AVSoft Corp. (VN))

AV Audio Editor (HKLM-x32\...\AV Audio Editor) (Version: 2.0.3 - AVSoft Corp. (VN))

AV Audio Morpher (HKLM-x32\...\AV Audio Morpher) (Version: 6.0.3 - AVSoft Corp. (VN))

AV CD Grabber (HKLM-x32\...\AV CD Grabber) (Version: 2.0.3 - AVSoft Corp. (VN))

AV Media Player Morpher (HKLM-x32\...\AV Media Player Morpher) (Version: 6.0.19 - AVSoft Corp. (VN))

AV Media Uploader (HKLM-x32\...\AV Media Uploader) (Version: 1.0.16 - AVSoft Corp. (VN))

AV Music Morpher (HKLM-x32\...\AV Music Morpher) (Version:  - )

AV Music Morpher Gold (HKLM-x32\...\AV Music Morpher Gold) (Version:  - )

AV Tube (HKLM-x32\...\AV Tube) (Version: 1.0.20 - AVSoft Corp. (VN))

AV Video Morpher (HKLM-x32\...\AV Video Morpher) (Version: 3.0.53 - AVSOFT Corporation)

AV VoizGame 6.0 (HKLM-x32\...\AV VoizGame 6.0) (Version: 6.0.39 - Avnex Ltd.)

AV WebCam Morpher 2.0 (HKLM-x32\...\AV WebCam Morpher 2.0) (Version: 2.0.44 - Avnex Ltd.)

AVG 2012 (HKLM-x32\...\{8398852A-7B61-4808-8F58-D0A40D1B2CB6}) (Version: 12.0.2109 - AVG Technologies) Hidden

AVG 2012 (HKLM-x32\...\{E171F5DA-6F17-472D-A223-92468142C5E8}) (Version: 12.0.1901 - AVG Technologies) Hidden

Avidemux 2.5 (HKLM-x32\...\Avidemux 2.5) (Version: 2.5.4.6714 - )

AviSynth 2.5 (HKLM-x32\...\AviSynth) (Version:  - )

AVS Audio Converter 7.2 (HKLM-x32\...\AVS Audio Converter_is1) (Version: 7.2.2.529 - Online Media Technologies Ltd.)

AVS Audio Editor 7.2 (HKLM-x32\...\AVS Audio Editor_is1) (Version: 7.2.2.488 - Online Media Technologies Ltd.)

AVS Audio Recorder version 4.0 (HKLM-x32\...\AVS Audio Recorder_is1) (Version:  - Online Media Technologies Ltd.)

AVS Cover Editor 2.0.1.3 (HKLM-x32\...\AVSCoverEditor2_is1) (Version:  - Online Media Technologies Ltd.)

AVS Disc Creator version 4.1 (HKLM-x32\...\AVS Disc Creator_is1) (Version:  - Online Media Technologies Ltd.)

AVS DVD Player version 2.4 (HKLM-x32\...\AVS DVD Player_is1) (Version:  - Online Media Technologies Ltd.)

AVS Update Manager 1.0 (HKLM-x32\...\AVS Update Manager_is1) (Version:  - Online Media Technologies Ltd.)

AVS Video Converter 6 (HKLM-x32\...\AVS4YOU Video Converter 6_is1) (Version:  - Online Media Technologies Ltd.)

AVS Video Converter 8 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version:  - Online Media Technologies Ltd.)

AVS Video Editor 6.5 (HKLM-x32\...\AVS Video Editor_is1) (Version: 6.5.1.246 - Online Media Technologies Ltd.)

AVS4YOU Software Navigator 1.4 (HKLM-x32\...\AVS4YOU Software Navigator_is1) (Version:  - Online Media Technologies Ltd.)

AVStoDVD 2.4.2 (HKLM-x32\...\AVStoDVD) (Version: 2.4.2 - MrC)

AweEraserEraser Trial 2.0 (HKLM-x32\...\AweEraser Trial 2.0_is1) (Version:  - Magoshare)

Backup4all 5 (HKLM-x32\...\{B6F36B7D-96C2-4860-9C44-0EF80B247379}) (Version: 5.4.813 - Softland) Hidden

Backup4all 5.4 (HKLM-x32\...\{b18024ae-1a64-48d6-9056-812a9b9cb0fc}) (Version: 5.4.813.0 - Softland)

Backup4all Professional 4 (HKLM-x32\...\{D4B5DC75-8065-42A0-BCA9-C104FEA32439}) (Version: 4.6.261 - Softland)

Backupery for Wordpress version 5.2.86 (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\AF127A0C-93EF-4601-A74E-2614734627A1_is1) (Version: 5.2.86 - Backupery)

BackupSF version 2.7 (HKLM-x32\...\{FED16A43-758E-4D08-A5FD-6DEEBB8B19CC}_is1) (Version: 2.7 - EasySector)

Bamboo File Sync and Backup 3.0.9 (HKLM-x32\...\Bamboo File Sync and Backup_is1) (Version:  - Haxar Limited)

Bandicut (HKLM-x32\...\Bandicut) (Version: 2.8.1.353 - Bandicam.com)

Bass Audio Decoder (remove only) (HKLM-x32\...\Bass Audio Decoder) (Version:  - )

Batch Image Enhancer 5.6 (HKLM-x32\...\Batch Image Enhancer) (Version: 5.6 - BinaryMark)

Batch Photo Watermarker 3.5 (HKLM-x32\...\Batch Photo Watermarker_is1) (Version:  - EasySector)

Batch Picture Protector 6.6 (HKLM-x32\...\Batch Picture Protector_is1) (Version: 6.6 - SoftOrbits)

Batch Picture Resizer 6.2 (HKLM-x32\...\Batch Picture Resizer_is1) (Version: 6.2 - SoftOrbits)

Batch Rename .EXE version 2.0.0.6 (HKLM\...\{2DAC69AC-93C7-4B26-B37E-C5727C1FA1EC}_is1) (Version: 2.0.0.6 - SoftTech InterCorp)

Batch Word Replace 5.6 (HKLM-x32\...\Batch Word Replace) (Version: 5.6 - BinaryMark)

Batch Word to PDF Converter 2016 (HKLM-x32\...\{A33B5CEE-AF9C-4116-98DF-337A7C05CA99}_is1) (Version:  - Batchwork Software)

BatchInpaint 2.0 (HKLM-x32\...\{BA413735-865A-4BF5-AAD2-B4D2998ED019}}_is1) (Version:  - teorex)

BatchInpaint 2.2 (HKLM\...\{BA413735-865A-4BF5-AAD2-B4D2998ED019}}_is1) (Version:  - teorex)

Beauty Guide 2.2.6 (HKLM\...\Beauty Guide_is1) (Version: 2.2.6 - Tint Guide)

Beauty Pilot Free 2.5.2 (HKLM\...\Beauty Pilot Free_is1) (Version: 2.5.2 - Two Pilots)

Belarc Advisor 8.6 (HKLM-x32\...\Belarc Advisor) (Version: 8.6.0.0 - Belarc Inc.)

BetterMemo version 1.1 (HKLM-x32\...\BetterMemo_is1) (Version: 1.1 - BetterMemo Solutions Inc.)

Beyond Share 2.1.8.68 (HKLM-x32\...\Beyond Share_is1) (Version:  - Fevosoft)

Bigasoft Total Video Converter 3.5.18.4353 (HKLM-x32\...\{a72ce741-1f32-4d79-bffb-a714375c678d}_is1) (Version:  - Bigasoft Corporation)

Black Bird System Info (HKLM-x32\...\Black Bird System Info) (Version: 1.0.0.0 - Black Bird Cleaner)

BLACK WHITE projects 3 elements (64-Bit) (HKLM\...\SILVER_PROJECTS_3_2_28B15F1D_is1) (Version: 3.34 - Franzis Verlag GmbH)

Blitz FlashCards (GOTD Version) (remove only) (HKLM-x32\...\Blitz FlashCards (GOTD Version)) (Version:  - )

BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.8.9.3088 - BlueStack Systems, Inc.)

BlueStacks Notification Center (HKLM-x32\...\{4C02AFA8-074D-44FE-B0E1-A73D4AA65390}) (Version: 0.8.9.3088 - BlueStack Systems, Inc.)

Boilsoft Video Joiner 6.57 (HKLM-x32\...\{FD39EF4B-0B5C-4B33-8D57-2EE865A80EB1}_is1) (Version:  - Boilsoft, Inc.)

Boilsoft Video Splitter 6.34 (HKLM-x32\...\{24549038-9956-4EE5-976D-4419AAEA7DD5}_is1) (Version:  - Boilsoft, Inc.)

Bolide Movie Creator (HKLM-x32\...\{CBC12489-0C5F-4290-B497-57D8C74F12D9}_is1) (Version: 3.0 - Bolide Software)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Bookmark Docs 2.1 (HKLM-x32\...\{41F16763-45B1-4A4B-A0E4-DE35E1A23C19}_is1) (Version:  - BookmarkSoft)

Booknizer 5.1 (HKLM-x32\...\Booknizer_is1) (Version:  - Booknizer.com)

Boot Media Builder for Paragon Hard Disk Manager™ 14 Professional (HKLM-x32\...\{F75021D1-0615-53CD-89B5-84EBF785DCB3}) (Version: 1.00.0000 - Paragon Software)

Borland Delphi 6 (HKLM-x32\...\{B7886D87-ADA4-46A0-8A8D-02AB16B9F95A}) (Version: 6.0 - Borland Software Corporation)

Borland Delphi 7 (HKLM-x32\...\{72263053-50D1-4598-9502-51ED64E54C51}) (Version: 7.0 - Borland Software Corporation)

Boxoft Photo Slideshow Builder 1.6 (HKLM-x32\...\Boxoft Photo Slideshow Builder_is1) (Version:  - Boxoft Solution)

Boxoft Screen Tutorial Creator (HKLM-x32\...\Boxoft Screen Tutorial Creator_is1) (Version:  - A-PDF Solution)

Bracket Trader 06.1208a1 (HKLM-x32\...\Bracket Trader_is1) (Version:  - Bracket Trader Software)

Brain Builder (HKLM-x32\...\Brain Builder) (Version:  - )

Brightness Guide 2.4.2 (HKLM\...\Brightness Guide_is1) (Version: 2.4.2 - Tint Guide)

Broadcom ASF Management Applications (HKLM-x32\...\{071B9AFA-EBE8-4ABF-8F4A-9F92612F517E}) (Version: 8.17.03 - Broadcom)

Broadcom Gigabit Integrated Controller (HKLM\...\{FC57FC53-104C-415C-98D7-B05E659461A9}) (Version: 10.50.03 - Broadcom Corporation)

Broadcom Management Programs (HKLM\...\{177D1318-3E4B-4A7C-A300-AC4E21BE090B}) (Version: 10.20.03 - Broadcom Corporation)

BSR Screen Recorder 5 (HKLM-x32\...\BSRScreenRecorder5) (Version:  - )

BurnAware Home 5.5 GOTD (HKLM-x32\...\BurnAware Home_is1) (Version:  - Burnaware Technologies)

BurnAware Premium 11.0 GAOTD (HKLM-x32\...\BurnAware Premium_is1) (Version:  - Burnaware)

Burnova 1.2.6 (HKLM-x32\...\{1545EC4A-2820-4F0E-8F6E-07D16F34F477}_is1) (Version: 1.2.6 - Aiseesoft Studio)

Business Card Maker 9.0 (HKLM-x32\...\{89F6B580-50CC-4E66-8621-298364BD9010}_is1) (Version: 9.0 - AMS Software)

BusinessCards MX (HKLM-x32\...\{0D5B5ED2-3E38-4585-B1F3-64B2A9EA95D6}_is1) (Version: 4.73 - MOJOSOFT)

BYclouder Data Recovery Pro (HKLM-x32\...\BYclouder Data Recovery Pro) (Version: 6.8.0.0 - BYclouder Corporation)

ByteScout Spreadsheet Tools 2.0.0.100 (HKLM\...\ByteScout Spreadsheet Tools_is1) (Version:  - ByteScout Inc.)

Cacheman (HKLM-x32\...\Cacheman) (Version: 7.90 - Outertech)

calibre (HKLM-x32\...\{1E376DEC-875A-4F53-9149-168582A0E274}) (Version: 2.71.0 - Kovid Goyal)

Camera Capture Monitor 9.03 (HKLM-x32\...\{5B998657-47FF-4F22-802D-71C4C82B06BE}_is1) (Version:  - Dobest Software Studio)

CamStudio (HKLM-x32\...\CamStudio) (Version:  - )

CamStudio 2.7.2 (HKLM\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7.2 - CamStudio Open Source)

CamStudio OSS Desktop Recorder (HKLM-x32\...\{FD9C31B6-F572-414D-81E3-89368C97A125}_is1) (Version: 2.6 Beta r294 - CamStudio Open Source Dev Team)

CamStudio version 2.7 (HKLM-x32\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7 - CamStudio Open Source)

Camtasia Studio 4 (HKLM-x32\...\{1C6D9FD0-8BE2-4226-8D9F-4929CBC1C396}) (Version: 4.0.1 - TechSmith Corporation)

Camtasia Studio 7 (HKLM-x32\...\{C0E8FE43-C35B-451D-B35F-D4BD056D70E7}) (Version: 7.1.1 - TechSmith Corporation)

Camtasia Studio 8 (HKLM-x32\...\{B9691991-64D3-435B-8A83-69CC21016936}) (Version: 8.4.0.1699 - TechSmith Corporation)

Candy Clock (HKLM-x32\...\Candy Clock) (Version:  - )

CaptureSaver V4.3.0 (HKLM-x32\...\CaptureSaver_is1) (Version:  - www.CaptureSaver.com)

Cardiris 3.5 (HKLM-x32\...\{2605D3D2-AE1C-429A-8A2F-2E6440EC0AB2}) (Version: 3.05.001 - I.R.I.S.) Hidden

Cardiris 3.5 (HKLM-x32\...\InstallShield_{2605D3D2-AE1C-429A-8A2F-2E6440EC0AB2}) (Version: 3.05.001 - I.R.I.S.)

Catalyst Control Center Next Localization BR (HKLM\...\{0FB3752E-254C-260C-A582-3C797F1CD6D6}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization BR (HKLM\...\{37112DCB-17E0-6685-6CDF-FA073AF80E5D}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CHS (HKLM\...\{2ED1A7E1-78EA-634A-93FB-382F064E6302}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CHS (HKLM\...\{B671B799-D617-4210-4493-00AAE85FC9AD}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CHT (HKLM\...\{17A5E9C0-CAD3-EE1D-7C59-F024CA733A36}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CHT (HKLM\...\{21FC9401-9B30-4B26-15FF-7F10ED02C381}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization CS (HKLM\...\{B61FE697-92BD-91BE-F1FC-BD7DEEAA7CAC}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization DA (HKLM\...\{6345478C-2E72-80EC-9E35-7D923C3B6176}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization DA (HKLM\...\{B7C25298-739B-AB31-A749-CF523BA1797E}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization DE (HKLM\...\{4ACBF068-4B45-CB7C-D10E-40A32DE21F89}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization DE (HKLM\...\{AEBE688E-5084-4BBA-4D70-2F9A82D43414}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization EL (HKLM\...\{0B5398E6-8C9D-A248-1463-45D86D8B6143}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization EL (HKLM\...\{27F711D0-FABF-CBDA-DD19-44BB8258C537}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization ES (HKLM\...\{1A106344-06FC-BEF1-0F47-4A4E5A355A78}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization ES (HKLM\...\{AED48362-C723-9805-78AB-D5B446232E51}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization FI (HKLM\...\{3FBD959F-357C-D3F8-49AD-23616B68EB72}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization FI (HKLM\...\{F8CB4C60-1B25-B45A-139D-69830920CF5C}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization FR (HKLM\...\{08347657-938B-E873-796F-F3BCA8975FDA}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization FR (HKLM\...\{1C442265-C485-A502-584D-927D2214D535}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization HU (HKLM\...\{129E6C37-86E7-DCE3-12F7-8A47E1F239DD}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization HU (HKLM\...\{6D3A22FF-DD4C-B17D-4042-FEE38FA5E0BC}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization IT (HKLM\...\{A4BBB652-1AF1-E896-67CE-2DD1BA1A8171}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization IT (HKLM\...\{E76C1041-A288-A716-768A-E2AB8E6555EE}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization JA (HKLM\...\{B96257A7-E824-A431-CCBA-20969185B735}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization JA (HKLM\...\{EDC68ACC-EB6A-C08C-FCD3-A8927E05EB17}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization KO (HKLM\...\{2C3CB667-297D-86EA-60ED-5DBFD7299C3F}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization KO (HKLM\...\{F398C4C4-523A-6B69-8014-00E881DCB0B1}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization NL (HKLM\...\{741B6703-B20F-67C9-3914-B7CDECD7267D}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization NL (HKLM\...\{E19E1115-7380-EF31-2F27-4BEEF4724B56}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization NO (HKLM\...\{51FA4B5F-A747-F4B8-B309-60FD9A760126}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization NO (HKLM\...\{CF6EA231-7E9B-40EA-154B-4B8B1AF83783}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization PL (HKLM\...\{51AADEB6-331F-10AC-7437-80FD97085C2B}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization PL (HKLM\...\{85D2E4DA-8228-5DD2-90AE-8C109ED78456}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization RU (HKLM\...\{58CD51DF-8BB5-2A0C-A20E-CF08A23E8B24}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization RU (HKLM\...\{FFCCD869-9F53-8574-FE74-48B452776213}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization SV (HKLM\...\{8AFEDEB0-4B10-01DE-748A-801A99639FC8}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization SV (HKLM\...\{EB4ECE91-CB71-6E85-273F-AA27B306F53E}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization TH (HKLM\...\{449C722B-8EFE-6046-068B-37C3877340C7}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization TH (HKLM\...\{8ED6BC6E-6C98-4D08-D4C0-2652356C3699}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization TR (HKLM\...\{238E396D-5070-9C60-526F-09642BAABFC6}) (Version: 2017.1201.1734.31588 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Next Localization TR (HKLM\...\{C899B952-D3A7-CACB-275F-119DC0809EB8}) (Version: 2017.1012.2157.37690 - Advanced Micro Devices, Inc.) Hidden

CCleaner (HKLM\...\CCleaner) (Version: 5.21 - Piriform)

CCScore (HKLM-x32\...\{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}) (Version: 6.02.1001.0001 - EASTMAN KODAK Company) Hidden

CD Audio Reader Filter (remove only) (HKLM-x32\...\CD Audio Reader Filter) (Version:  - )

CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.0.3717 - CDBurnerXP)

CDRWIN 8 (HKLM-x32\...\{23D4A873-14FF-474E-0001-6529DDC11226}) (Version: 8.0.11.0121 - Engelmann Media GmbH)

Centra Client (HKLM-x32\...\CentraClient) (Version:  - )

CHM Editor (HKLM-x32\...\CHM Editor) (Version: 3.0.2 - )

ChoiceMail 2010 (HKLM-x32\...\ChoiceMail 2010) (Version: 4.2 - DigiPortal Software Inc)

Chromium (HKLM-x32\...\{574ABF8A-07CA-6E0A-B64A-1E8A66CACD0A}) (Version:  - )

Chrysanth Diary [Starter] (HKLM-x32\...\AC970D9B-E5C8-44D8-910B-D763DDF6D32A_is1) (Version: 5.0 - Chrysanth Software Sdn. Bhd.)

Cinch Audio Recorder version 2.0.1 (HKLM-x32\...\{F145F781-A266-4A33-8F34-65561BF29B25}_is1) (Version: 2.0.1 - Cinch Solutions)

Cinch PDF Converter version 1.0.1 (HKLM-x32\...\{A891E76E-086E-41DC-BD0F-DA2D5BA12BD3}_is1) (Version: 1.0.1 - Cinch Solutions)

CinemaHD 4 Free (HKLM-x32\...\{A2FA92C7-DEEE-4508-8BC3-F0A85B5FADA8}) (Version: 4.0.5533.27174 - Engelmann Media GmbH) Hidden

CinemaHD 4 Free (HKLM-x32\...\{d6fdf5fc-8c5f-48c0-a314-83b565e1dc97}) (Version: 4.0.5533.27229 - Engelmann Media GmbH)

Cisco WebEx Meetings (HKLM-x32\...\ActiveTouchMeetingClient) (Version:  - Cisco WebEx LLC)

Cleanse Uninstaller Pro 10.0  (HKLM-x32\...\Cleanse Uninstaller Pro 10.0) (Version:  - Zards software)

Cleanse Uninstaller Pro 8.0  (HKLM-x32\...\Cleanse Uninstaller Pro 8.0) (Version:  - Zards software)

CleverPrint (HKLM-x32\...\CleverPrint_is1) (Version: 3.00 - Abelssoft GmbH)

Clipà.Vu Clipboard for Windows Desktop (HKLM-x32\...\{63c6bc38-b169-4261-bd37-eca78ad5f7c8}) (Version: 4.1.1558 - Jan Zeman)

Clipà.Vu Clipboard for Windows Desktop (HKLM-x32\...\{B1F748A1-5BA6-4B6F-91FB-1556DC362CD3}) (Version: 4.1.1558 - Jan Zeman) Hidden

ClipboardCC 5.2.0.0 (HKLM-x32\...\{A7CED170-295C-4238-8683-9CEE34F3CCE5}_is1) (Version:  - Albert Sadykov)

Clipdiary 3.65 (HKLM-x32\...\Clipdiary) (Version: 3.65 - Tiushkov Nikolay)

Clone Terminator (HKLM-x32\...\Clone Terminator_is1) (Version:  - )

CloneCD (HKLM-x32\...\CloneCD) (Version:  - SlySoft)

CloudBerry Drive 2.0.1 (HKLM\...\CloudBerry Drive) (Version: 2.0.1 - CloudBerryLab)

ClPhpEd(remove only) (HKLM-x32\...\ClPhpEd) (Version:  - )

Colasoft Capsa 7 Professional (HKLM-x32\...\Colasoft Capsa 7 Professional_is1) (Version: 7.5 - Colasoft)

CollageIt 1.9.5 (HKLM-x32\...\{D9757258-30B2-496E-86F2-84920C5858E1}_is1) (Version: 1.9.5 - PearlMountain Technology Co., Ltd)

COLOR projects professional (64-Bit) (HKLM\...\COLOR_PROJECTS_1_3_C935FDA1_is1) (Version: 1.14 - Franzis Verlag GmbH)

Commander (HKLM-x32\...\Commander) (Version:  - )

Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6514.5001 - Microsoft Corporation)

ComPresto (HKLM-x32\...\ComPresto) (Version:  - )

CookBook+Calendar version 2.5 (HKLM-x32\...\CookBook+Calendar_is1) (Version: 2.5 - Binary House Software)

Cool Record Edit Pro v8.8.3 (HKLM-x32\...\Cool Record Edit Pro_is1) (Version:  - Copyright© 2005-2014 CoolMedia, Inc.)

Cool Timer Deluxe 1.0.7 (HKLM-x32\...\Cool Timer Deluxe_is1) (Version:  - Harmony Hollow Software)

Coolmuster Android Assistant (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Coolmuster Android Assistant) (Version: 3.1.0.1 - Coolmuster)

Coolmuster iPad iPhone iPod to Computer Transfer (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Coolmuster iPad iPhone iPod to Computer Transfer) (Version: 2.2.39 - Coolmuster)

Copy Contents (SharewareOnSale) version 2.0 (HKLM-x32\...\{DA02CCC9-3964-4B2D-B1D1-7E236F6A8D07}_is1) (Version: 2.0 - Chris Gingerich)

C-Organizer Pro v 4.0.5 (HKLM-x32\...\C-Organizer Professional_is1) (Version:  - CSoftLab)

Cosmetic Guide 2.2.7 (HKLM\...\Cosmetic Guide_is1) (Version: 2.2.7 - Tint Guide)

CPUID ROG CPU-Z 1.57.1 (HKLM-x32\...\CPUID ROG CPU-Z_is1) (Version: 1.57.1 - CPUID, Inc.)

Crave World Clock 1.4 (HKLM-x32\...\Crave World Clock_is1) (Version:  - Reflection Software Solutions Pvt. Ltd.)

CrazyTalk v7.32 Standard (HKLM-x32\...\{27C4EA98-84A3-4CDF-A436-F984A0283357}) (Version: 7.32.3114.1 - Reallusion Inc.)

Creative Element Power Tools (HKLM-x32\...\Creative Element Power Tools) (Version: 2.8.885 - Creative Element)

CryptoGiveaway Bounty (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\{D1E32054-6F8F-42D3-9D95-4713E2C74A4F}}_is1) (Version: 1.0.0.246 - Softdeluxe)

Crystal.NET Setup (HKLM-x32\...\{B579B35B-4DF9-4DE4-A203-DB6C66B8296C}) (Version: 1.0.0 - Nirvana)

CSE HTML Validator Professional v16.05 (HKLM-x32\...\CSEHTMLVALIDATOR160_is1) (Version: 16.5.0.0 - AI Internet Solutions LLC)

Cute Reminder Standard Edition 2.6 (HKLM-x32\...\Cute Reminder Standard Edition_is1) (Version: 2.6.317 - CuteReminder Labs)

CutePDF Professional 3.6 (Evaluation) (HKLM-x32\...\CutePDF Professional (Evaluation)_is1) (Version:  - Acro Software Inc.)

CutePDF Writer 2.8 (HKLM\...\CutePDF Writer Installation) (Version:  - )

CutePDF Writer 2.8 (HKLM-x32\...\CutePDF Writer Installation) (Version:  - )

Cute-Timer V2.3.1 (HKLM-x32\...\{DB3D8937-44C9-4EED-BCED-2D1E65F84010}_is1) (Version: 2.3.1 - iWiiBoard Tech)

CutOut 4.0 (HKLM\...\CutOut 4_is1) (Version: 4.0 - Franzis.de)

CyberLink AudioDirector 6 (HKLM-x32\...\{4CB7DDA7-1134-4BA5-841C-3D64C5A0DAA7}) (Version: 6.0.7123.0 - CyberLink Corp.)

CyberLink Blu-ray Disc Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.3226 - CyberLink Corp.)

 

 

I have to break this log at this point and put the rest of this log in the next post as it make this post too long.

Edited by Safe, 10 March 2018 - 10:22 PM.

[Safe]

LOG CONTINUATION:

 

CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1916 - CyberLink Corp.)

CyberLink LG Burning Tool (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.2.4009 - CyberLink Corp.)

CyberLink MediaShow (HKLM-x32\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 4.1.3402 - CyberLink Corp.)

CyberLink PhotoDirector 5 (HKLM\...\{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.6312.0 - CyberLink Corp.) Hidden

CyberLink PhotoDirector 5 (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.6312.0 - CyberLink Corp.)

CyberLink PowerBackup (HKLM-x32\...\{ADD5DB49-72CF-11D8-9D75-000129760D75}) (Version: 2.5.6023 - CyberLink Corp.)

CyberLink PowerDirector 11 (HKLM-x32\...\InstallShield_{551F492A-01B0-4DC4-866F-875EC4EDC0A8}) (Version: 11.0.0.2329 - CyberLink Corp.)

CyberLink PowerDirector 12 (HKLM\...\{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.3617.0 - CyberLink Corp.) Hidden

CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.3617.0 - CyberLink Corp.)

CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.2925.52 - CyberLink Corp.)

CyberLink PowerProducer (HKLM-x32\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.2.2512 - CyberLink Corp.)

CyberLink YouCam 5 (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.4628.0 - CyberLink Corp.)

D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden

Daily To-Do List 4.0203 (HKLM-x32\...\Daily To-Do List_is1) (Version: 4.0203 - Jiri Novotny, Dextronet)

DAK Wave MP3 Editor PRO v3.6b (HKLM-x32\...\{1C02D187-9256-4B08-92D1-82922DBE4D52}) (Version: 3.6.1 - DAK - developed by Code-it Software, Inc.)

Daminion 3.0.0.994 (HKLM-x32\...\{EFD0A11E-2F0B-40A9-A4BA-DD63C779E4D5}_is1) (Version: 3.0.0.994 - Daminion Software)

Date Time Counter 6.0 (HKLM-x32\...\Date Time Counter_is1) (Version:  - TriSun Software Limited)

DBFX Trading Station (HKLM-x32\...\DBFX Trading Station) (Version:  - )

DBGallery (HKLM-x32\...\{00A4F00D-D363-4B99-8786-155F62AD4271}) (Version: 4.3 - GRR Systems)

DC-Bass Source 1.3.0 (HKLM-x32\...\DC-Bass Source) (Version:  - )

DCoder Image Source (remove only) (HKLM-x32\...\DCoder Image Source) (Version:  - )

Defraggler (HKLM\...\Defraggler) (Version: 2.15 - Piriform)

Dell Driver Download Manager (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\bd4d3a0508d364f5) (Version: 3.0.0.0 - Dell Inc)

Dell Resource CD (HKLM-x32\...\{FCD9CD52-7222-4672-94A0-A722BA702FD0}) (Version: 1.00.0000 - Dell Inc.)

Dell SAS RAID Storage Manager (HKLM-x32\...\{09A02B7A-45A5-4E24-9AF3-14B8A86E18CA}) (Version: 2.16.0000 - LSI Corp.) Hidden

Dell SAS RAID Storage Manager v2.16-00 (HKLM-x32\...\InstallShield_{09A02B7A-45A5-4E24-9AF3-14B8A86E18CA}) (Version: 2.16.0000 - LSI Corp.)

Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 2.0.6875.668 - Dell)

Dell SupportAssistAgent (HKLM\...\{8D7B279C-A661-465C-9658-F62FBD6A6B91}) (Version: 2.1.3.5 - Dell)

DesignBox version 1.06.02 (HKLM-x32\...\{4E84R4BC-F3G3-4H97-A0DF-C38DR5D0N93D}_is1) (Version: 1.06.02 - Aurora3D Software)

DeskRule LITE edition 1.4.0.2 (HKLM-x32\...\DeskRule LITE edition) (Version: 1.4.0.2 - zabkat)

Desktop (search) rules 1.2.1.0 (HKLM\...\Desktop (search) rules) (Version: 1.2.1.0 - zabkat)

Desktop Restore (HKLM\...\{15D07D6F-E4CC-41D9-88A3-94115E5E5A10}) (Version: 1.6.3 - JOConnell)

Dia (remove only) (HKLM-x32\...\Dia) (Version:  - )

diashapes (HKLM-x32\...\diashapes) (Version: 0.2.2 - Steffen Macke)

DigiBand version 1.6 (HKLM-x32\...\{BA3A4E83-7935-4939-A6FF-435423A416A9}_is1) (Version: 1.6 - AthTek Software)

Digital Physiognomy (remove only) (HKLM-x32\...\Digital Physiognomy) (Version:  - )

Dimo Videomate version 3.6.1 (HKLM-x32\...\299AF5A5-0809-4CE0-8FD5-1E6EFD27E518_is1) (Version: 3.6.1 - DimoSoft, Inc.)

Direct Show Ogg Vorbis Filter (remove only) (HKLM-x32\...\OggDS) (Version:  - )

DirectVobSub (remove only) (HKLM-x32\...\DirectVobSub) (Version:  - )

DirectVobSub 2.40.4209 (HKLM-x32\...\vsfilter_is1) (Version: 2.40.4209 - MPC-HC Team)

DirectX for Managed Code Update (Summer 2004) (HKLM-x32\...\{E9E34215-82EF-4909-BE2F-F581F0DC9062}) (Version: 9.02.2904 - Microsoft) Hidden

DiscAPI (Studio 10) (HKLM-x32\...\{A77F3C2D-50CC-4A29-A1FB-1E018BE4DCA2}) (Version: 3.00.0033 - Pinnacle Systems) Hidden

Disk Master Professional version 4.3.7 (HKLM\...\{8213CE5C-49D8-45CC-98C1-7355D18995C5}_is1) (Version: 4.3.7 - QILING Tech Co., Ltd.)

Disk Sorter Pro 8.8.12 (HKLM-x32\...\Disk Sorter Pro) (Version: 8.8.12 - Flexense Computing Systems Ltd.)

DiskBoss Pro 2.0.16 (HKLM-x32\...\DiskBoss Pro) (Version: 2.0.16 - Flexense Computing Systems Ltd.)

DiskFerret (HKLM\...\DiskFerret) (Version: 2.2.0.2 - Swooft Software, LLC)

DivX Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.8 - DivX, LLC)

DocLock (HKLM-x32\...\DocLock) (Version: 1.0.1.278 - Large Software)

DocuCan (HKLM\...\DocuCan) (Version: 1.6.0 - Marsep KCD)

DolbyFiles (HKLM-x32\...\{56BE5CC9-95E6-4128-ABEA-968414CA9C80}) (Version: 2.0 - Nero AG) Hidden

Dolce Ear Training v1.9.6 (HKLM-x32\...\Dolce Ear Training_is1) (Version:  - Fast Rabbit Software, LLC)

doPDF (HKLM\...\{84D0B3C2-9B4A-45A8-BC74-40402110BCC2}) (Version: 9.1.232 - Softland) Hidden

doPDF 9 (HKLM-x32\...\{6c42fbe7-5b71-4a8e-9da1-a59317dffa9a}) (Version: 9.1.232 - Softland)

doPDF 9 add-in for Microsoft Office (x64) (HKLM\...\{CA14C18F-8F65-4258-A1CF-ECFB17891B59}) (Version: 9.1.232 - Softland)

doPDF 9 add-in for Microsoft Office (x86) (HKLM-x32\...\{93476622-206D-4957-B751-1B9E7E5A9324}) (Version: 9.1.232 - Softland)

doPDF 9 Printer Driver (HKLM\...\{D3EF3B42-1314-43EE-86A8-0E33964335EC}) (Version: 9.1.232 - Softland)

Doronix Math ToolBox version 1.0.3 (HKLM-x32\...\{3DE28B26-A895-4936-ACD0-A91D4CF31A6C}_is1) (Version: 1.0.3 - Doronix)

DoubleSafety (HKLM-x32\...\DoubleSafety) (Version: 4.5 - Power Labs)

DP Animation Maker (HKLM-x32\...\DP Animation Maker) (Version: 2.2.5 - DesktopPaints.com)

Driver Magician 3.71 (HKLM-x32\...\Driver Magician_is1) (Version:  - GoldSolution Software, Inc.)

Driver Restore (HKLM-x32\...\{273130E8-117C-4237-A0FA-83EBBF11E051}) (Version: 8.1 - Driver Restore)

Dropbox (HKLM-x32\...\Dropbox) (Version: 44.4.58 - Dropbox, Inc.)

Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.65.1 - Dropbox, Inc.) Hidden

DScaler 5 Mpeg Decoders (HKLM-x32\...\DScaler 5 Mpeg Decoders_is1) (Version:  - )

Dup Scout Pro 10.4.16 (HKLM-x32\...\Dup Scout Pro) (Version: 10.4.16 - Flexense Computing Systems Ltd.)

Duplicate Cleaner 2.1b (HKLM-x32\...\Duplicate Cleaner) (Version: 2.1b - DigitalVolcano)

Duplicate Cleaner Pro 3.0.9 (HKLM-x32\...\Duplicate Cleaner Pro) (Version: 3.0.9 - DigitalVolcano)

Duplicate File Finder Plus 4.0 (HKLM-x32\...\Duplicate File Finder Plus_is1) (Version:  - TriSun Software Inc.)

Duplicate Photo Finder Plus 7.0 (HKLM-x32\...\Duplicate Photo Finder Plus_is1) (Version:  - TriSun Software Limited)

DVD Chief (HKLM-x32\...\{25AB95D1-1FBF-4C00-8507-21BD65D9941F}_is1) (Version: 2.10.367 - Adit Software)

DVD Flick 1.3.0.7 (HKLM-x32\...\DVD Flick_is1) (Version: 1.3.0.7 - Dennis Meuwissen)

DVDCutter Stream and MpCDWav Converter Std v5.03 (HKLM-x32\...\DVDCutter Stream and MpCDWav Converter Std) (Version:  - )

DVDFab 9.2.0.9 (13/08/2015) (HKLM-x32\...\DVDFab 9_is1) (Version:  - Fengtao Software Inc.)

DVDFab Media Player 1.0.1.5 (27/07/2012) (HKLM-x32\...\DVDFab Media Player_is1) (Version:  - Fengtao Software Inc.)

DVDFab Media Player 2 (HKLM-x32\...\DVDFab Media Player 2_is1) (Version: 2.4.3.7 - Fengtao Software Inc.)

DVDFab Passkey 8.2.4.7 (18/08/2015) (HKLM-x32\...\DVDFab Passkey 8_is1) (Version:  - Fengtao Software Inc.)

DVDFab Platinum 3.1.5.0 (HKLM-x32\...\DVDFab Platinum_is1) (Version:  - )

DVDXCopy Xpress 3.0.2 (HKLM-x32\...\DVDXCopyXpress) (Version:  - )

DxO ViewPoint (HKLM\...\{A0A7372A-C28E-48BE-B88C-3C3C3EEFC2EA}) (Version: 1.2.14.0 - DxO Labs)

Ear Training Play It By Ear HN (HKLM-x32\...\Ear Training Play It By Ear HN) (Version:  - )

Earth Alerts (HKLM-x32\...\{FB774FC6-AE2F-4AE5-9C02-D4D1BE6648E5}) (Version: 12.1.50 - South Wind Technologies)

EASEUS Data Recovery Wizard 5.0.1 (HKLM-x32\...\EASEUS Data Recovery Wizard 5.0.1_is1) (Version:  - EASEUS)

EaseUS EverySync 2.1 (HKLM-x32\...\EaseUS EverySync_is1) (Version:  - EaseUS)

EaseUS Partition Master 10.0 Trial Edition (HKLM-x32\...\EaseUS Partition Master Trial Edition_is1) (Version:  - EaseUS)

EaseUS Todo Backup Free 10.6 (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 10.6 - CHENGDU YIWO Tech Development Co., Ltd)

EASEUS Todo Backup Professional 2.5 (HKLM-x32\...\EASEUS Todo Backup Professional 2.5_is1) (Version: 2.5.0.1 - CHENGDU YIWO Tech Development Co., Ltd)

EaseUS Todo PCTrans 8.0 (HKLM-x32\...\EaseUS Todo PCTrans_is1) (Version:  - EaseUS)

Eassos System Restore 2.0.1 (HKLM\...\{37E567C7-EB03-4349-B068-1FD0A2CD55FE}_is1) (Version:  - Eassos Co., Ltd.)

Easy Archive Recovery (HKLM-x32\...\Easy Archive Recovery) (Version: 2.0 - MunSoft)

Easy audio mixer 2.3.1 (HKLM-x32\...\EasyAudioMixer2_is1) (Version: 2.3.1 - G.F. Software)

Easy Clone Detective (HKLM-x32\...\Easy Clone Detective1.4) (Version: 1.4 - Refero Group)

Easy Digital Photo Recovery (HKLM-x32\...\Easy Digital Photo Recovery) (Version: 3.0 - MunSoft)

Easy Drive Data Recovery (HKLM-x32\...\Easy Drive Data Recovery) (Version: 3.0 - MunSoft)

Easy Flyer Creator 2.0 (HKLM-x32\...\{F6591A9D-A7EF-4FDF-8440-F42C725E37F4}) (Version: 2.0.0 - Peridot Technologies)

Easy Flyer Creator 3.0 (HKLM-x32\...\{B07CB2BA-819B-41C5-BBE0-484A4C23972E}) (Version: 3.0.0 - Peridot Technologies)

Easy Macro Recorder 4.9 (HKLM-x32\...\Easy Macro Recorder_is1) (Version:  - GoldSolution Software, Inc.)

Easy Mail Recovery (HKLM-x32\...\Easy Mail Recovery) (Version: 2.0 - MunSoft)

Easy Office Recovery (HKLM-x32\...\Easy Office Recovery) (Version: 2.0 - MunSoft)

Easy Photo Denoise 2.0 (HKLM-x32\...\Easy Photo Denoise_is1) (Version: 2.0 - SoftOrbits)

Easy Photo Unblur 1.0 (HKLM-x32\...\Easy Photo Unblur_is1) (Version: 1.0 - SoftOrbits)

Easy Watermark Studio (HKLM-x32\...\Easy Watermark Studio3.1) (Version: 3.1 - Refero Group)

Easy Watermark Studio versie 3.5 (HKLM-x32\...\{5EC71BC9-52DB-417C-807F-19E6381863E8}_is1) (Version: 3.5 - Refero Group SRL)

Easy Work Time Calculator 4.1 (HKLM-x32\...\Easy Work Time Calculator_is1) (Version:  - TriSun Software Inc.)

EasyTune version 1.2.3 (HKLM-x32\...\{F015AA47-5058-47F7-A877-7F864BEC3E1A}_is1) (Version: 1.2.3 - Sly Software Solutions)

eChat (HKLM-x32\...\eChat) (Version: Ensign eChat - Ensign Software, Inc.)

Efficient Calendar 5.22 (HKLM-x32\...\Efficient Calendar_is1) (Version:  - Efficient Software)

ELDIM - EDIDViewer (HKLM-x32\...\{EDB18C3D-C6A8-41EB-962B-FC535C9FD8F2}) (Version: 4.0.0 - ELDIM)

Eleven version 5.0.0.14 (HKLM-x32\...\{12ED4488-46CB-4ACD-80B5-40D07B42FA04}_is1) (Version: 5.0.0.14 - Elevenapp)

Emsa Advanced Port Blocker v 1.0 (HKLM-x32\...\Emsa Advanced Port Blocker_is1) (Version:  - Emsai Industrial)

eMule (HKLM-x32\...\eMule) (Version:  - )

eMule Plus 1.2e (HKLM-x32\...\eMule Plus_is1) (Version:  - eMule Plus Team)

Epubor Ultimate (HKLM-x32\...\Epubor Ultimate) (Version: 3.0.9.1031 - Epubor Inc.)

Epubor Ultimate version 1.50.5.4 (HKLM-x32\...\{AD88DF59-7FD3-4A41-9F52-EC673AB80378}_is1) (Version: 1.50.5.4 - Epubor)

eReg (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden

eSpeakEdit version 1.46.02 (HKLM-x32\...\eSpeakEdit_is1) (Version:  - )

ESSBrwr (HKLM-x32\...\{643EAE81-920C-4931-9F0B-4B343B225CA6}) (Version: 6.02.0001.0001 - EASTMAN KODAK Company) Hidden

ESSCDBK (HKLM-x32\...\{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}) (Version: 6.02.0001.0001 - EASTMAN KODAK Company) Hidden

ESScore (HKLM-x32\...\{9D8FEE90-0377-49A9-AEFB-525BDE549BA4}) (Version: 6.02.1002.0001 - EASTMAN KODAK Company) Hidden

ESSgui (HKLM-x32\...\{91517631-A9F3-4B7C-B482-43E0068FD55A}) (Version: 6.02.1002.0001 - EASTMAN KODAK Company) Hidden

ESSini (HKLM-x32\...\{8E92D746-CD9F-4B90-9668-42B74C14F765}) (Version: 6.02.1001.0001 - EASTMAN KODAK Company) Hidden

ESSPCD (HKLM-x32\...\{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}) (Version: 6.02.1001.0001 - EASTMAN KODAK Company) Hidden

ESSPDock (HKLM-x32\...\{FCDB1C92-03C6-4C76-8625-371224256091}) (Version: 6.02.0001.0002 - EASTMAN KODAK Company) Hidden

ESSSONIC (HKLM-x32\...\{073F22CE-9A5B-4A40-A604-C7270AC6BF34}) (Version: 6.2.0001.0001 - EASTMAN KODAK Company) Hidden

ESSTOOLS (HKLM-x32\...\{8A502E38-29C9-49FA-BCFA-D727CA062589}) (Version: 5.00.0000.0004 - EASTMAN KODAK Company) Hidden

essvatgt (HKLM-x32\...\{2D03B6F8-DF36-4980-B7B6-5B93D5BA3A8F}) (Version: 6.02.1001.0001 - EASTMAN KODAK Company) Hidden

EverDesk Google Edition (HKLM-x32\...\{7C0CB7FD-BC33-4979-9B18-8089831C2513}) (Version: 5.1.1 - EverEZ Systems Limited) Hidden

EverDesk Google Edition (HKLM-x32\...\EverDesk Google Edition) (Version: 5.1.1 - EverEZ Systems Limited)

Evernote v. 4.5.10 (HKLM-x32\...\{EF7E46B8-1FB7-11E2-B6B3-984BE15F174E}) (Version: 4.5.10.7472 - Evernote Corp.)

Everything 1.2.1.371 (HKLM-x32\...\Everything) (Version:  - )

Excel RTD Add-in (HKLM-x32\...\{82005880-27D3-4848-AA67-82A5D8C28200}) (Version: 1.0.0 - Sti)

ExifCleaner 1.5 (HKLM-x32\...\ExifCleaner) (Version: 1.5 - SuperUtils.com Software)

EximiousSoft Banner Maker V5.45 (HKLM-x32\...\EximiousSoft Banner Maker_is1) (Version:  - EximiousSoft)

Express Burn Disc Burning Software (HKLM-x32\...\ExpressBurn) (Version:  - NCH Software)

Express Scribe (HKLM-x32\...\Scribe) (Version:  - NCH Software)

Exsate DV Capture Live (HKLM-x32\...\Exsate DV Capture Live_is1) (Version: 1.1 - Exsate Software)

Extreme Thumbnail Generator 1.19.2 (HKLM-x32\...\Extreme Thumbnail Generator_is1) (Version: 1.19.2 - Extreme Internet Software)

EZBurner registered to GiveAwayOfTheDay version 1.0.1.41 (HKLM-x32\...\{9F09B18A-CCC5-4597-B295-540C759C70B7}_is1) (Version: 1.0.1.41 - PCWinSoft Software)

EzGenerator 4.0 (HKLM-x32\...\EzGenerator) (Version: 4.0 - Image-line)

EZTalks 2.1.0.0 (HKLM-x32\...\{4DE4DFB5-1D3D-4639-853C-928AA5C6191C}_is1) (Version:  - CUMeeting Inc.)

Fantapper Player (HKLM-x32\...\{CDACD4C9-F984-409A-9D26-DF77E003FD89}) (Version: 2.0.3 - Brand Affinity Technologies)

Fantapper Updater (HKLM-x32\...\{603C0DC4-665E-4CC9-8ED1-7FE1F03AB943}) (Version: 2.0.1 - Brand Affinity Technologies)

Fantastic Flame Screensaver (HKLM-x32\...\Fantastic Flame Screensaver) (Version:  - Laconic Software)

Fast Resize 1.0.2 (HKLM\...\{C5310B36-626E-470B-B7B3-DF1D03D81638}_is1) (Version: 1.0.2 - Picture Instruments)

Fast Site Inspector (HKLM\...\{CA9344D7-33D3-46E6-BE5F-1AD229CE5B3B}) (Version: 3.0.700 - WebTweakTools.com)

Fast Spell Checker (HKLM\...\{F0AC1918-447F-473B-863B-812F25E37885}) (Version: 3.0.700 - WebTweakTools.com)

Fast VD 3.0.0.10 (HKLM-x32\...\9ED08AFF-E977-47db-8923-2499D74C97C5_Fast VD_is1) (Version: 3.0.0.10 - FastPcTools)

FastPaste 2.63 (HKLM-x32\...\FastPaste_is1) (Version:  - Dextronet)

FBM PDF Converter (HKLM-x32\...\FBM PDF Converter_is1) (Version:  - flip-book-maker.com Solution)

ffdshow v1.3.4533 [2014-09-29] (HKLM-x32\...\ffdshow_is1) (Version: 1.3.4533.0 - )

FFMPEG Core Files (remove only) (HKLM-x32\...\FFMPEG Core Files) (Version:  - )

File Replicator Service (HKLM-x32\...\{8AAF07BD-3D8D-4747-B491-7800372766A9}) (Version: 1.0.0 - Chris Butterfield Software Solutions, LLC)

FileMarker.NET Pro (GAOTD Edition) (HKLM\...\{A5A0E0B5-578C-43CE-B201-1C01A0388DA9}_is1) (Version: 1.0 - ArcticLine Software)

FileSearchy Pro (HKLM-x32\...\FileSearchy Pro) (Version: 1.3 - Midlinesoft)

FileStream FrameShop (HKLM-x32\...\FileStream FrameShop) (Version: 2.1 - FileStream, Inc.)

FileStream Take-1 Recorder (HKLM-x32\...\FileStream Take-1 Recorder) (Version: 2.0 - FileStream, Inc.)

FileStream Turbo Browser (HKLM-x32\...\FileStream Turbo Browser) (Version: 11.6 - FileStream, Inc.)

FileStream Web Boomerang (HKLM-x32\...\FileStream Web Boomerang) (Version: 3.0 - FileStream, Inc.)

FileWing Pro (HKLM-x32\...\FileWing Pro_is1) (Version: 2.3 - Abelssoft)

FileZilla Client 3.3.4.1 (HKLM-x32\...\FileZilla Client) (Version: 3.3.4.1 - )

Fimat PreferredTrade, a Product of Fimat USA, LLC (HKLM-x32\...\{AA93E93A-4C25-481D-91F1-749AAE29503F}) (Version: 6.3.0.8 - Fimat PreferredTrade, a Division of Fimat USA, LLC)

Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)

Firetip (HKLM-x32\...\Firetip) (Version: 4.1.0.0 - )

First Draft 3.5 (HKLM-x32\...\First Draft_is1) (Version:  - Just Outsourcing)

Fix Genius  (HKLM-x32\...\Fix Genius) (Version:  - Tenorshare, Inc.)

FLAC To MP3 V4.0.4 (HKLM-x32\...\FLAC To MP3_is1) (Version:  - FLAC To MP3, Inc.)

Flame Painter 3 (HKLM\...\Flame Painter 3_is1) (Version: 3.2.0 - Escape Motions, s.r.o)

Flash Movie Player 1.5 (HKLM-x32\...\Flash Movie Player) (Version: 1.5 - Eolsoft)

Flash Video Capture 4.2.0 build 4557 (HKLM-x32\...\Flash Video Capture_is1) (Version:  - FlashVideoCapture.com)

Flashpaste 6.0 (HKLM-x32\...\Flashpaste) (Version: 6.0 - Softvoile)

FLDraw Floor Plan Software 3.30 (HKLM-x32\...\{5FEB5FE4-883A-4339-9C11-BBE76A2A6D80}) (Version: 3.30 - FLDraw)

Flip Image (HKLM-x32\...\Flip Image_is1) (Version:  - Flipbuilder Solution)

Flip PowerPoint Professional (HKLM-x32\...\Flip PowerPoint Professional_is1) (Version:  - FlipBuilder Solution)

FlipBook Maker  3.6.3 (HKLM-x32\...\FlipBook Maker_is1) (Version: 3.6.3 - Kvisoft Co,. Ltd)

Flipbook Maker4.3.4 (HKLM\...\Kvisoft Flipbook Maker_is1) (Version: 4.3.4 - kvisoft.com)

Flock (2.6.2) (HKLM-x32\...\Flock (2.6.2)) (Version: 2.6.2 (en-US) - Flock)

Floor Plan Maker 7.9 (HKLM-x32\...\Floor Plan Maker_is1) (Version:  - EdrawSoft)

FlowHeater® 4.0.8.2 (64 Bit) (HKLM\...\{54435955-D757-4663-93A6-063143D44AD9}_is1) (Version:  - FlowHeater GmbH)

Fly DVD Copier V4.3 (HKLM-x32\...\Fly DVD Copier_is1) (Version:  - Magic DVD Software, Inc.)

focus booster (HKLM-x32\...\{06ED8674-1191-5DF4-88E9-5732C927ADF7}) (Version: 1.2 - The Memphis Agency) Hidden

focus booster (HKLM-x32\...\com.focusboosterapp.focusbooster.8E5F79C899747AD22E21DB62AA496926DA6BBC64.1) (Version: 1.2 - The Memphis Agency)

Focus Photoeditor 6.3.9.8 SE (HKLM-x32\...\Focus Photoeditor_is1) (Version:  - NWS Centurybyte)

Focusky (HKLM-x32\...\Focusky_is1) (Version:  - Focusky Solution)

Focusky 2.12.1 (HKLM-x32\...\focuskyen_is1) (Version: 2.12.1 - Focusky Solution)

Folder Marker Home (GAOTD Edition) (HKLM\...\Folder Marker Home (GAOTD Edition)_is1) (Version: 4.2 - ArcticLine Software)

Folder Marker Home v 3.1 GAOTD Edition (HKLM-x32\...\Folder Marker_is1) (Version: 3.1 - ArcticLine Software)

Folder Marker Home v 3.2 GAOTD Edition (HKLM\...\Folder Marker_is1) (Version: 3.2 - ArcticLine Software)

Folder Size & Analyze Professional (HKLM-x32\...\{BB7DECBC-52E2-4890-A727-3CCABF986BD1}) (Version: 5.20 - SagaxSoft, Inc.)

FolderClone Standard Edition v2.1.1 (HKLM-x32\...\FolderClone Standard Edition_is1) (Version:  - )

FolderIco 4.0 (HKLM\...\{22C37D82-6137-40BF-8625-7A846ED65F3A}_is1) (Version:  - teorex)

FolderMatch v3.7.3 (HKLM-x32\...\FolderMatch_is1) (Version:  - )

FolderViewer (HKLM-x32\...\FolderViewer) (Version: 5.1 - MatirSoft)

FORTE 5 - Basic Edition (HKLM-x32\...\FORTE 5 Basic) (Version: 5 - FORTE)

Fotor 2.0.2 (HKLM-x32\...\Fotor) (Version: 2.0.2 - Everimaging Co., Ltd.)

Foxit Creator (HKLM-x32\...\Foxit Creator) (Version: 3,0,2,0506 - Foxit Corporation)

Foxit Reader (HKLM-x32\...\Foxit Reader) (Version: 4.3.0.1110 - Foxit Corporation)

Foxit Reader Packages (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Foxit Reader Packages) (Version:  - ) <==== ATTENTION

Free Duplicate Remover 0.5 (HKLM-x32\...\Free Duplicate Remover) (Version:  - )

Free Easy Burner V 5.1 (HKLM-x32\...\Free Easy Burner_is1) (Version: 5.1.0.0 - Koyote soft)

Free File Viewer 2014 (HKLM-x32\...\FreeFileViewer_is1) (Version: 2014.2.16.0 - Bitberry Software) <==== ATTENTION

Free Sound Recorder 2010 v9.2.1 (HKLM-x32\...\Free Sound Recorder_is1) (Version:  - Copyright© 2005-2010 FreeSoundRecorder Technologies, Inc.)

FreeFileSync 5.7 (HKLM-x32\...\FreeFileSync) (Version: 5.7 - ZenJu)

FreeFixer (HKLM-x32\...\FreeFixer1.14) (Version: 1.14 - Kephyr)

Freemore Audio Video Suite 3.5.2 (HKLM-x32\...\Freemore Audio Video Suite_is1) (Version:  - FreeMoreSoft, Inc.)

FYZip 1.00 (HKLM-x32\...\FYZip) (Version: 1.00 - TightRope Interactive)

Gabest MPEG Splitter (remove only) (HKLM-x32\...\Gabest MPEG Splitter) (Version:  - )

Game Booster (HKLM-x32\...\Game Booster_is1) (Version: 2.3.0.0 - IObit)

Genie Timeline (HKLM-x32\...\Genie Timeline) (Version: 3.0 - Genie9)

GFI BackUp Freeware (HKLM-x32\...\GFI BackUp Freeware) (Version: 4.0 - GFI Software Ltd.)

GiliSoft Audio Recorder Free 5.3.0 (HKLM-x32\...\{C3570380-9D39-4A03-F42F-6E263462D92C}_is1) (Version: 5.3.0 - GiliSoft International LLC.)

GiliSoft Screen Recorder 6.1.0 (HKLM-x32\...\{2F9CCB8C-8584-45CF-B916-E8C98F6497A4}_is1) (Version: 6.1.0 - GiliSoft International LLC.)

GiliSoft Video Editor 7.1.0 (HKLM-x32\...\{3908B421-EF03-4389-A38C-DBAF6252E312}_is1) (Version: 7.1.0 - GiliSoft International LLC.)

Glary Utilities PRO 4.4 (HKLM-x32\...\Glary Utilities 4) (Version: 4.4.0.86 - Glarysoft Ltd)

GnuCash 2.4.10 (HKLM-x32\...\GnuCash_is1) (Version:  - GnuCash Development Team)

Goal Genie (HKLM-x32\...\{EC8BC76F-E305-4F90-9FC7-37FA7BF2CDD2}) (Version: 01.01.0006.0000 - Software Nuggets, Inc.)

GoldenSection Notes (HKLM-x32\...\GoldenSection Notes) (Version: 4.4 (Build 1900) - )

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 64.0.3282.186 - Google Inc.)

Google Earth (HKLM-x32\...\{1E04F83B-2AB9-4301-9EF7-E86307F79C72}) (Version: 4.2.205.5730 - Google)

Google Earth Pro (HKLM-x32\...\{FA1BBF34-E994-4310-95D7-BE93092B8E61}) (Version: 7.3.1.4507 - Google)

Google Gears (HKLM-x32\...\{2FA41EBB-3F5A-35C3-85D6-51EC72A11FBD}) (Version: 0.5.3600 - Google)

Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden

Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.115 - Google Inc.) Hidden

GooPatient (HKLM-x32\...\{2513C88B-51D2-4413-ACE8-C9B324C25AB2}) (Version: 3.1.01 - Alfa.NetSoft)

GOTD Promotion version. version 3.8.0 (HKLM-x32\...\GOTD Promotion version._is1) (Version: 3.8.0 - Bytesignals)

GoTo Opener (HKLM-x32\...\{8B2D47CC-1558-4939-B27F-41E30530072A}) (Version: 1.0.467 - LogMeIn, Inc.)

GoToAssist Corporate (HKLM-x32\...\GoToAssist) (Version: 11.8.0.1205 - Citrix Systems, Inc.)

GoToMeeting 8.22.0.8473 (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\GoToMeeting) (Version: 8.22.0.8473 - LogMeIn, Inc.)

GPL Ghostscript 8.71 (HKLM-x32\...\GPL Ghostscript 8.71) (Version:  - )

GPS Location Remover For Photos version 1.2.0 (HKLM-x32\...\{511DB2D7-CD4B-4E89-94E8-AD09049A4AD5}_is1) (Version: 1.2.0 - EaseYou Software)

G-Recorder (remove only) (HKLM-x32\...\G-Recorder) (Version: 2.2.5 - G-Recorder)

GTD Timer (HKLM-x32\...\{37C88389-8B5F-4F45-8963-9E091D2EF3D3}) (Version: 2012.6.7.115 - ProductivityScientific.com)

GuitarTab Maestro (HKLM-x32\...\GuitarTab Maestro_is1) (Version:  - )

Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version:  - )

Hamster Free EbookConverter (HKLM-x32\...\{441AC599-200D-4E04-B274-C6B7B50C281D}_is1) (Version: 1.0.0.13 - HamsterSoft)

HashOnClick (HKLM\...\HashOnClick_is1) (Version:  - 2BrightSparks)

HD Video Converter Factory Pro (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\HDVideoConverterFactoryPro) (Version:  - WonderFox Soft, Inc. All Rights Reserved.)

HD Video Converter Factory Pro 9.1 (HKLM-x32\...\HD Video Converter Factory Pro) (Version: 9.1 - WonderFox Soft, Inc.)

HDR projects 2 (64-Bit) (HKLM\...\HDR_PROJECTS_2_2_3BF7CE82_is1) (Version: 2.26 - Franzis Verlag GmbH)

HDR projects 3 professional (64-Bit) (HKLM\...\HDR_PROJECTS_3_3_3BF7CE82_is1) (Version: 3.34 - Franzis Verlag GmbH)

Heimdal Agent (HKLM-x32\...\{55E41A62-DB4D-4E16-9BDA-C1BBDFC4E7EA}) (Version: 2.2.161 - Heimdal Security)

HHD Software Hex Editor Neo 5.13 (HKLM\...\{8EB85C0E-DE7D-4A53-BD66-708B8F2C80B0}) (Version: 5.13.1.4770 - HHD Software, Ltd.)

Hi Slider (HKLM-x32\...\Hi Slider_is1) (Version:  - HiSlider Solution)

Hide My IP 6 (HKLM-x32\...\HIDEMYIP_is1) (Version:  - My Privacy Tools, Inc)

HippoEDIT 1.60.10 (HKLM-x32\...\HippoEDIT) (Version: 1.60.10 - HippoEDIT.com)

HitFactor 4.3.0 (HKLM-x32\...\HitFactor 4.3.0) (Version: 4.3.0.0 - BelaDaddy Software)

HitFilm 2 Express (HKLM\...\{5D249E93-D4B4-44EE-AA07-865093316560}) (Version: 2.0.3010.30403 - FXhome)

HitFilm 3 Express (HKLM\...\{AFD4EBF8-F2E9-47C8-BE6D-049A0E0CEC01}) (Version: 3.1.4724.15452 - FXhome)

Home Multimedia Library (HKLM-x32\...\{27DA72CA-0D3B-45A9-B9B3-A4A456BFE14E}) (Version: 2.1 - Sprintbit Software)

Honeycam (HKLM\...\Honeycam) (Version: 1.02 - Bandisoft.com)

Hot Alarm Clock 2.0.2.0 (HKLM-x32\...\{672C1EE5-D13F-4EDB-A8CA-26711696C040}_is1) (Version: 2.0 - Comfort Software Group)

hotComm Lite® (HKLM-x32\...\hotComm Lite®) (Version: 7.50.070x - 1stWorks Corporation)

HP Memories Disc (HKLM-x32\...\{B376402D-58EA-45EA-BD50-DD924EB67A70}) (Version: 1.0.4.805 - Hewlett-Packard Company)

HP Photo and Imaging 2.3 - Scanjet 4600 Series (HKLM-x32\...\{3E270C95-8327-4C2F-A8E1-902CC2604A20}) (Version: 2.3.0000 - {&Tahoma8}Hewlett-Packard)

HyperCam 3 (HKLM-x32\...\HyperCam 3) (Version: 3.2.1107.20 - Solveig Multimedia)

IBM Lotus Symphony (HKLM-x32\...\{294f69aa-9abb-4211-ace2-cb18379c2742}) (Version: 3.0.10289 - IBM)

iCare Card Recovery Pro 2.0 (HKLM-x32\...\iCare Card Recovery Pro_is1) (Version:  - iCare Software)

iCare Format Recovery 4.6.3.3 (HKLM-x32\...\iCare Format Recovery_is1) (Version:  - iCare Software)

Icecream Ebook Reader version 4.24 (HKLM-x32\...\{B8C30F0F-1F23-49E1-A3ED-44DE17660EE2}_is1) (Version: 4.24 - Icecream Apps)

Icecream PDF Converter version 2.34 (HKLM-x32\...\{6811A286-E9F4-4035-9738-7721C087E500}_is1) (Version: 2.34 - Icecream Apps)

Icecream PDF Split and Merge version 2.03 (HKLM-x32\...\{95DC4DB4-99FB-4FB2-ADBD-97F194EDEB4D}_is1) (Version: 2.03 - Icecream Apps)

Icecream Slideshow Maker version 2.67 (HKLM-x32\...\{3674ADB5-6374-4EBA-BB46-7C6EFB266661}_is1) (Version: 2.67 - Icecream Apps)

iClone v5.51 Standard (HKLM-x32\...\{E8EB9130-8C34-4DCE-A6C4-B1C5A399F616}) (Version: 5.51.3507.1 - Reallusion Inc.)

iClone v6.54 Standard (HKLM-x32\...\{9FDDEF0B-4D60-4A36-981B-269C787DB23E}) (Version: 6.54.4306.1 - Reallusion Inc.)

icomancer 1.3.3.103 (HKLM-x32\...\{4304ADDC-824B-4888-A6E7-F8E48D7FDBBD}_is1) (Version: 1.3.3.103 - lavasoftworks.com)

IconLover (HKLM-x32\...\IconLover) (Version: 5.34 - Aha-Soft)

iDailyDiary 3.91 (HKLM-x32\...\iDailyDiary_is1) (Version:  - Splinterware Software Solutions)

Ideal DVD Copy V4.1.2 (HKLM-x32\...\Ideal DVD Copy_is1) (Version:  - Ideal DVD Software, Inc.)

IdolSoundLab 6.2.4 (HKLM-x32\...\IdolSoundLab 6.2.4) (Version: 6.2.4.1 - Beladaddy Software)

idoo File Encryption Pro 5.3 (HKLM-x32\...\{30AB2FCD-FBF2-4bed-AC6A-13E6A1468621}_is1) (Version: 5.3 - idoo Software Co.,Ltd.)

idoo Secure Disc Creator 3.0 (HKLM-x32\...\{30AB2FCD-FBF2-4bed-1111-13E6A1418621}_is1) (Version: 3.0 - idoo International LLC.)

idoo Video Editor Pro 1.4.0 (HKLM-x32\...\{3908B421-EF03-3489-A38C-DBAF6252E312}_is1) (Version: 1.4.0 - idoo International LLC.)

iGetting Audio  (HKLM-x32\...\iGetting Audio) (Version:  - Tenorshare, Inc.)

iiCreator v5.80 (Standard Version GOTD Edition) (HKLM-x32\...\interactiveimagecreator_webunion_is1) (Version:  - WebUnion Media Ltd.)

Image Assistant (HKLM-x32\...\{317A50BC-06BE-472D-BDCE-A802AA944B62}_is1) (Version:  - Extralabs Software)

Image Cartoonizer Premium version 1.4.0 (HKLM-x32\...\{5ED0A232-CB60-4112-AEC7-582135B45F23}_is1) (Version: 1.4.0 - Cartoonize.net)

Image Merger .EXE version 2.0.0.8 (HKLM\...\{1976B99F-FC9B-47C2-9AD2-B8E8537B2173}_is1) (Version: 2.0.0.8 - SoftTech InterCorp)

Image Resize Guide 1.4.1 (HKLM\...\Image Resize Guide_is1) (Version: 1.4.1 - Tint Guide)

ImageMagick 6.8.0-8 Q16 (2012-12-01) (HKLM-x32\...\ImageMagick 6.8.0 Q16_is1) (Version: 6.8.0 - ImageMagick Studio LLC)

Images Generator version 09.79 (HKLM-x32\...\{8450B3F1-64AC-4E45-99ED-7E4A5E0AA7FF}_is1) (Version: 09.79 - Panasoft)

ImagXpress (HKLM-x32\...\{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}) (Version: 7.0.74.0 - Nero AG) Hidden

ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.5.0 - LIGHTNING UK!)

IM-Magic Partition Resizer Professional 2013 (HKLM-x32\...\IM-Magic Partition Resizer Professional) (Version: 2013 - IM Magic Inc.)

iMyfone D-Back 3.6.5.0 (HKLM-x32\...\{5032269A-E8F7-4748-BA16-C7EFC96DDD97}_is1) (Version: 3.6.5.0 - Shenzhen iMyfone Technology Co., Ltd.)

iMyFone TunesMate 2.1.0.12 (HKLM-x32\...\{C117E587-8C43-4B82-84AB-3A29902C52E0}_is1) (Version: 2.1.0.12 - Shenzhen iMyFone Technology Co., Ltd.)

Incomedia WebSite X5 v10 - Home (HKLM-x32\...\{22B260EE-79AD-4F4C-9E06-349E8F1D958C}_is1) (Version: 10.1.4.45 - Incomedia s.r.l.)

Incomedia WebSite X5 v11 - Home (HKLM-x32\...\{C5743DB8-7BDF-47D3-8D41-0BBD487B48A1}_is1) (Version: 11.0.6.27 - Incomedia s.r.l.)

Incomedia WebSite X5 v13 - Start (HKLM\...\{5565A488-E1C8-4DFC-AEB7-1919D6A41DAF}_is1) (Version: 13.1.4.13 - Incomedia s.r.l.)

Incomedia WebSite X5 v14 - Start (HKLM\...\{9D29720A-FFD5-43E6-98CA-E8DAAF4E1AB7}_is1) (Version: 14.0.4.3 - Incomedia s.r.l.)

Info Center 1.0.0.5 (HKLM-x32\...\Info Center_is1) (Version: 1.0.0.5 - PC Pitstop LLC)

Inpaint 4.7 (HKLM-x32\...\{2AEDC172-479F-47AE-8A48-A0524D4AED5B}_is1) (Version:  - Teorex)

Inpaint 6.0 (HKLM\...\{2AEDC172-479F-47AE-8A48-A0524D4AED5B}_is1) (Version:  - Teorex)

Inpaint 7.1 (HKLM\...\{5808866F-D115-46B2-8123-BB6801968101}_is1) (Version:  - Teorex)

InspirationLibrary (HKLM-x32\...\{CE28932A-98B7-4382-A3A2-712864A54B8F}_is1) (Version: 2.06 - Beenokle)

Installer (HKLM-x32\...\{504346FD-9491-4D9D-83C9-593CE32E8C5D}) (Version: 1.205.5189.27981 - SharkIndicators) Hidden

InstallIQ Updater (HKLM-x32\...\{5EFA68C8-CFFD-407F-8B17-7D7C61D2F93A}) (Version: 1.1.2.0 - W3i, LLC)

InstantPhotoSketch Pro 2.1 (HKLM-x32\...\{2CEC6A7A-3366-4CE0-B8FD-540434ED3702}_is1) (Version:  - CPSSoftware)

Intel ® Pro Alerting Agent (HKLM-x32\...\{C3BAE6D2-0FAD-4C32-8138-8A226460C864}) (Version: 4.2.5 - Intel ® Corporation)

Intel® PROSet for Wired Connections (HKLM-x32\...\{17334AAF-C9E7-483B-9F45-E3FCAF07FFA7}) (Version: 8.00.5000 - Dell)

Interactive Image Creator (HKLM-x32\...\{9D3B7659-1C80-4DC8-9D09-91750E60D495}) (Version: 3.50 - FLDraw)

InterBase 6.5 (HKLM-x32\...\InterBase) (Version:  - )

iPixSoft Flash Slideshow Creator (4.0.0.1) (HKLM-x32\...\iPixSoft Flash Slideshow Creator_is1) (Version: 4.0.0.1 - iPixSoft)

iPixSoft SWF to Video Converter (2.2.1.0) (HKLM-x32\...\iPixSoft SWF to Video Converter_is1) (Version: 2.2.1.0 - iPixSoft)

iPixSoft Video Slideshow Maker (3.4.1.0) (HKLM-x32\...\iPixSoft Video Slideshow Maker_is1) (Version: 3.4.1.0 - iPixSoft)

IP-MAC Scanner 2.0.5 (HKLM-x32\...\{44365BFB-F35A-45B0-AECA-6DFA06717118}_is1) (Version:  - XimuSoft, Inc.)

IQFeed Client 4.2.1.4 (HKLM-x32\...\IQFeed Client) (Version: 4.2.1.4 - DTN)

iResizer 2.2 (HKLM-x32\...\{FD071DBA-2994-4350-93BB-EC245D0D3C74}_is1) (Version:  - teorex)

iResizer 3.0 (HKLM\...\{FD071DBA-2994-4350-93BB-EC245D0D3C74}_is1) (Version:  - teorex)

IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version:  - )

Iris - Software for eye protection (HKLM-x32\...\IrisTech Iris) (Version: "0.6.9" - "IrisTech")

Iris mini - Software for eye protection (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\IrisTech Iris mini) (Version: "0.3.7" - "IrisTech")

iSkysoft DVD Creator(Build 3.0.0) (HKLM-x32\...\iSkysoft DVD Creator_is1) (Version:  - Wondershare Software)

iSkysoft Video Editor(Build 4.1.2) (HKLM-x32\...\iSkysoft Video Editor_is1) (Version:  - iSkysoft Software)

iSpring Converter 6 (HKLM\...\{1D3D8759-7CF3-4034-87A8-0682004A808C}) (Version: 6.1.0 - iSpring Solutions Inc.)

iSpring Presenter 5 (HKLM-x32\...\{19FDEED8-3016-4862-A430-AB2B41D5C322}) (Version: 5.6.1 - iSpring Solutions Inc.)

iStonsoft iPhone Backup Extractor (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\iStonsoft iPhone Backup Extractor) (Version: 2.1.32 - iStonsoft)

iToon version 1.1.2 (HKLM-x32\...\{3CEFEA4A-CC8C-4C31-830A-36AB1D4AC901}_is1) (Version: 1.1.2 - itoon.net)

Jarte 4.3 (HKLM-x32\...\Jarte_is1) (Version: 4.3 - Carolina Road Software L.L.C.)

Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)

Java™ 6 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216025FF}) (Version: 6.0.250 - Oracle)

Java™ SE Development Kit 7 Update 2 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170020}) (Version: 1.7.0.20 - Oracle)

JavaFX 2.0.2 (64-bit) (HKLM\...\{1111706F-666A-4037-7777-202648764D10}) (Version: 2.0.2 - Oracle Corporation)

JavaFX 2.0.2 SDK (64-bit) (HKLM\...\{2222706F-666A-4037-7777-202648764D10}) (Version: 2.0.2 - Oracle Corporation)

JDownloader 0.9 (HKLM-x32\...\1489-3350-5074-6281) (Version: 0.9 - AppWork GmbH)

Jet Screenshot v 3.1 (HKLM-x32\...\Jet Screenshot_is1) (Version: 3.1 - ArcticLine Software)

JetDrive (HKLM-x32\...\JetDrive_is1) (Version: 5.63 - Abelssoft)

Jihosoft Phone Transfer version 2.2.9 (HKLM-x32\...\{116B8806-B959-4600-8591-35E60440BD3D}_is1) (Version: 2.2.9 - HONGKONG JIHO CO., LIMITED)

join.me (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\JoinMe) (Version: 1.14.0.138 - LogMeIn, Inc.)

JPG To PDF 2.2.1 (HKLM-x32\...\JPG To PDF_is1) (Version:  - JPG To PDF Developer Team)

JPG2PDF 2.2.1 (HKLM-x32\...\JPG2PDF_is1) (Version:  - JPG2PDF Developer Team)

Kahlown (HKLM-x32\...\{D3CB90C2-BEC1-4D15-8E05-11623357861B}) (Version: 2.6 - LeSoftRejion)

KB Piano 2.5.1 GOTD (HKLM-x32\...\KB Piano_is1) (Version:  - )

KC Softwares AudioGrail (HKLM-x32\...\KC Softwares AudioGrail_is1) (Version: 7.5.0.195 - KC Softwares)

KC Softwares AVIToolbox (HKLM-x32\...\KC Softwares AVIToolbox_is1) (Version: 2.5.2.54 - KC Softwares)

KC Softwares dot11Expert (HKLM-x32\...\KC Softwares dot11Expert_is1) (Version: 1.2.1.7 - KC Softwares)

KC Softwares K-ML (HKLM-x32\...\KC Softwares K-ML_is1) (Version:  - KC Softwares)

KC Softwares PhotoToFilm (HKLM-x32\...\KC Softwares PhotoToFilm_is1) (Version: 3.3.0.82 - KC Softwares)

Kerish Doctor 2018 (HKLM-x32\...\{EF70A54F-E09E-4570-8F21-C7674CDDB5B6}_is1) (Version: 4.65 - Kerish Products)

Kestrel GX (HKLM-x32\...\{B1219669-DCFF-43E1-A218-2506673C3C6D}_is1) (Version: 1.3.1 - Cerieus)

kgcbase (HKLM-x32\...\{F22C222C-3CE2-4A4B-A83F-AF4681371ABE}) (Version: 5.03.0000.0004 - EASTMAN KODAK Company) Hidden

Kindle Auto eBook Converter 0.4.50 (HKLM-x32\...\Kindle Auto eBook Converter) (Version: 0.4.50 - The Messenger)

Kindle DRM Removal (HKLM-x32\...\KindleDRMRemoval) (Version: 1.2.1 - eBook Converter)

Kingo ROOT version 1.2.3.2051 (HKLM-x32\...\{AE7675D6-0B31-494F-ABFA-822E1A0FDF17}_is1) (Version: 1.2.3.2051 - Kingosoft Technology Ltd.)

Kingsoft Presentation  (8.1.0.3019) (HKLM-x32\...\Kingsoft Presentation) (Version: 8.1.0.3019 - Kingsoft Corp.)

Kingsoft Writer  (8.1.0.3019) (HKLM-x32\...\Kingsoft Writer) (Version: 8.1.0.3019 - Kingsoft Corp.)

K-Lite Codec Pack 10.2.0 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.2.0 - )

Kodak EasyShare software (HKLM-x32\...\{D32470A1-B10C-4059-BA53-CF0486F68EBC}) (Version:  - Eastman Kodak Company)

KooRaRoo Media (HKLM\...\{C46CC07F-400F-4AEE-918A-52BA1C69244C}_is1) (Version: 2.3.0.0 - Programming Sunrise)

Kotobee Author version 1.3.4 (HKLM-x32\...\{11FC9C17-17FF-4F2B-9D5A-4DE097629F21}}_is1) (Version: 1.3.4 - Vijua, Inc.)

Kryptel Standard Edition (HKLM-x32\...\{081617FD-3462-4906-B3C9-50F5CB887169}) (Version: 7.11 - Inv Softworks)

KSU (HKLM-x32\...\{B997C2A0-4383-41BF-B76E-9B8B7ECFB267}) (Version: 632.62.0004.0001 - EASTMAN KODAK Company) Hidden

Kvisoft Flash Video Gallery 1.5.6 (HKLM-x32\...\Kvisoft Flash Video Gallery_is1) (Version: 1.5.6 - kvisoft, Inc.)

LADSPA_plugins-win-0.4.15 (HKLM-x32\...\LADSPA_plugins-win_is1) (Version:  - Audacity Team)

Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )

LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )

LangoMax Adult Advantage (HKLM-x32\...\{18562567-BC92-9861-00B8-90B8F5545EA8}) (Version: 1 - PLL Media, Inc) Hidden

LangoMax Adult Advantage (HKLM-x32\...\AdultAdvantage) (Version: Adult Advantage - PLL Media, Inc)

Launchy 2.5 (HKLM-x32\...\Launchy_21344213_is1) (Version:  - Code Jelly)

LAV Filters 0.65 (HKLM-x32\...\lavfilters_is1) (Version: 0.65 - Hendrik Leppkes)

Lazesoft Data Recovery version 3.2 Professional Edition (HKLM-x32\...\LS-815EE836-7F81-47A9-8C3F-123C58F89CAE_is1) (Version: 3.2 - Lazesoft)

Lazesoft Recovery Suite version 4.1 Professional Edition (HKLM-x32\...\LS-32CB12D5-CC47-4BC8-BC97-0613CDCB0406_is1) (Version: 4.1 - Lazesoft)

LeaderTask 8.2.2.1 (HKLM-x32\...\LeaderTask_is1) (Version:  - Organizer LeaderTask LLC)

Leawo Blu-ray Copy version  7.3.0.3 (HKLM-x32\...\{9B97E64D-B46A-4453-8AC5-664F7D2729AA}_is1) (Version: 7.3.0.3 - Leawo Software)

Leawo Blu-ray Creator version  7.3.0.3 (HKLM-x32\...\{F73E2159-E3DA-4B2F-BFE7-63D57141F5D0}_is1) (Version: 7.3.0.3 - Leawo Software)

Leawo Blu-ray Player (HKLM-x32\...\{CF7F52BF-DEE0-44CD-A7E1-AADD5CCECCDD}_is1) (Version: 1.5.0.0 - leawo Software)

Leawo Blu-ray Video Converter version  7.0.2.1 (HKLM-x32\...\{68AC7535-85AE-4903-A6C8-25BAD4847334}_is1) (Version: 7.0.2.1 - Leawo Software)

Leawo DVD Creator version  5.2.0.0 (HKLM-x32\...\{29312768-5795-483C-805A-7D01B8FC7C0E}_is1) (Version: 5.2.0.0 - Leawo Software Co., Ltd.)

Leawo DVD to MP4 Converter version  4.3.0.0 (HKLM-x32\...\{E583A6F3-8F2F-4644-97FF-748F83A58D68}_is1) (Version: 4.3.0.0 - Leawo Software Co., Ltd.)

Leawo iTransfer version  1.9.0.0 (HKLM-x32\...\{93337CC5-9BC4-4FB0-B82E-38EC63E149F3}_is1) (Version: 1.9.0.0 - Leawo Software)

Leawo Music Recorder version  1.1.0.0 (HKLM-x32\...\{FAF11D3B-7633-402B-BAFA-4BCAAE030F20}_is1) (Version: 1.1.0.0 - Leawo Software)

Leawo PowerPoint to DVD Pro version 4.6.4.0 (HKLM-x32\...\{1FAD9CDD-BEE6-4240-BE2C-A47A2573F29D}_is1) (Version: 4.6.4.0 - Leawo Software)

Leawo PowerPoint to Video Pro version 2.6.0.68 (HKLM-x32\...\{5D5CB188-F9B1-4103-B2AD-07FB33068377}_is1) (Version: 2.6.0.68 - Leawo Software)

Leawo Prof. Media version  7.5.0.0 (HKLM-x32\...\{A5F041A4-812A-47C2-AD53-8893A81019FB}_is1) (Version: 7.5.0.0 - Leawo Software)

Leawo TunesCopy version  1.0.0.0 (HKLM-x32\...\{6B9F4449-3F1B-45C2-B099-5D59DA4AA01A}_is1) (Version: 1.0.0.0 - Leawo Software)

Leawo Video Accelerator Version: 4.1.0.0 (HKLM-x32\...\{6D217AEE-2D67-4486-A73D-106C726BCDF1}_is1) (Version:  - )

Leawo Video Converter Pro version  6.2.0.0 (HKLM-x32\...\{2A533488-2D72-4367-AC73-9FCE91C2910E}_is1) (Version: 6.2.0.0 - Leawo Software Co.,Ltd.)

Leawo Video Converter version  5.3.0.0 (HKLM-x32\...\{331ED3CF-3A1B-467C-9A62-899E2D3B20C4}_is1) (Version: 5.3.0.0 - Leawo Software Co.,Ltd.)

Lernout & Hauspie TruVoice American English TTS Engine (HKLM-x32\...\tv_enua) (Version:  - )

Light Developer v7.1, build 12452 (HKLM-x32\...\Light Developer_is1) (Version:  - Stepok Image Lab.)

Lighten PDF to Word Converter version 3.2.0 (HKLM-x32\...\{3C21CE5E-8702-422A-A44F-E08F9219E3C1}_is1) (Version: 3.2.0 - Lighten Software Limited)

LightScribe System Software (HKLM-x32\...\{A8F1CA85-C713-4B1F-B3B4-B2B7A6824146}) (Version: 1.18.14.1 - LightScribe)

Liquid Story Binder XE version 4.93 (HKLM-x32\...\{FF0CA85F-BB7D-475C-9836-BAF48AE712FD}_is1) (Version: 4.93 - Black Obelisk Software)

Loaris Trojan Remover 1.3.7.0 (HKLM\...\{29988DC6-9C4A-49B2-AC86-5C380B29ADB9}_is1) (Version:  - Loaris, Inc.)

Logitech Options (HKLM\...\LogiOptions) (Version: 6.72.344 - Logitech)

Logitech Resource Center (HKLM-x32\...\Logitech Resource Center) (Version:  - )

Logitech SetPoint 6.22 (HKLM-x32\...\sp6) (Version: 6.22.24 - Logitech)

Logitech SetPoint 6.67 (HKLM\...\sp6) (Version: 6.67.83 - Logitech)

LogMeIn (HKLM-x32\...\{53E10F4E-B361-45D7-8DBD-A6BF073236F0}) (Version: 4.1.3430 - LogMeIn, Inc.)

LogMeIn (HKLM-x32\...\{5C5778DB-3E5A-499D-865D-740E67D1F165}) (Version: 4.1.2600 - LogMeIn, Inc.)

LogoMaker 3.1 (HKLM-x32\...\LogoMaker_is1) (Version:  - Studio V5)

Longo Blu-ray Copy V2.4.1 (HKLM-x32\...\Longo Blu-ray Copy_is1) (Version:  - Longo DVD Software, Inc.)

Longo DVD Copy V4.00 (HKLM-x32\...\Longo DVD Copy_is1) (Version:  - Longo DVD Soft, Inc.)

Longo DVD Ripper2.0.1 (HKLM-x32\...\Longo DVD Ripper_is1) (Version:  - Longo DVD Software, Inc.)

Mac Blu-ray Player (HKLM-x32\...\Mac Blu-ray Player) (Version: 2.10.3.1608 - Macgo Inc.)

MadVR (remove only) (HKLM-x32\...\MadVR) (Version:  - )

Magic Collage (HKLM-x32\...\{54E6E975-E089-4575-BD33-64DC10022D46}) (Version: 2.3 - PixelApp Studio)

Magic ISO Maker v5.5 (build 0281) (HKLM-x32\...\Magic ISO Maker v5.5 (build 0281)) (Version:  - )

Magic Landscape Filter (HKLM-x32\...\{88EDDC73-6EB3-4FC6-AD52-71C8F34B86ED}) (Version: 1.1 - PixelApp Studio)

Magic Skin Filter (HKLM-x32\...\{236DA83A-BFFF-4FDF-A380-5A3CEFE427F9}) (Version: 1.1 - PixelApp Studio)

MagicCamera 8.9 (HKLM-x32\...\{70376A8D-C6E7-4A61-9E30-42AD268CD45D}_is1) (Version: 8.9 - ShiningMorning)

magicJack (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\magicJack) (Version: 4.1.7574.5297 - magicJack L.P.)

MagicScore (HKLM-x32\...\MagicScore_is1) (Version:  - )

MagicScore OneTouch Composer (HKLM-x32\...\MagicScore OneTouch Composer_is1) (Version:  - )

MAGIX Connector (HKLM-x32\...\MAGIX_connector_is1) (Version: 2.5.1.55 - simplitec GmbH)

MAGIX Content and Soundpools (HKLM-x32\...\MAGIX_GlobalContent) (Version: 1.0.0.0 - MAGIX Software GmbH)

MAGIX Fastcut (HKLM\...\{8AD7AD4F-0B1F-4FA2-90AE-CB10C21056F1}) (Version: 2.0.1.145 - MAGIX Software GmbH) Hidden

MAGIX Fastcut (HKLM\...\MX.{8AD7AD4F-0B1F-4FA2-90AE-CB10C21056F1}) (Version: 2.0.1.145 - MAGIX Software GmbH)

MAGIX Photo Manager 12 (HKLM\...\{C9E4CB14-BF4F-4F76-B2CF-E3D993469513}) (Version: 10.0.0.271 - MAGIX AG) Hidden

MAGIX Photo Manager 12 (HKLM-x32\...\MX.{C9E4CB14-BF4F-4F76-B2CF-E3D993469513}) (Version: 10.0.0.271 - MAGIX AG)

MAGIX Soundpool Music Maker - Feel good (HKLM\...\{EAC67138-ADA4-47E4-B2BF-A69B986B10AE}) (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden

MailWasherPro (HKLM-x32\...\{3F914D52-8A29-4E37-9BF7-7FD7A303D0D5}) (Version: 7.5 - Firetrust)

MakeUp Guide 1.4.2 (HKLM\...\MakeUp Guide_is1) (Version: 1.4.2 - Tint Guide)

MakeUp Pilot Free 4.5.2 (HKLM\...\MakeUp Pilot Free_is1) (Version: 4.5.2 - Two Pilots)

Malware Hunter 1.28.0.48 (HKLM-x32\...\Malware Hunter) (Version: 1.28.0.48 - Glarysoft Ltd)

Malwarebytes version 3.4.4.2398 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.4.4.2398 - Malwarebytes)

Managed DirectX (0900) (HKLM-x32\...\{7F34A21F-2DEB-4598-BB19-611D6BD24271}) (Version: 4.09.00.0900 - Microsoft) Hidden

Maple Professional (HKLM-x32\...\{C34BCD5E-5898-4572-93B7-C143F5A9F527}_is1) (Version: 8.31 - Crystal Office Systems)

Market Analyst 7 (HKLM-x32\...\Market Analyst 7) (Version: 7 - Market Analyst International)

Mask Surf (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Mask Surf) (Version: 3.7 - )

Mask Surf Everything (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Mask Surf Everything) (Version: 2.3 - )

Maxtor Quick Start (HKLM-x32\...\{1C875160-7E87-45C6-85C5-4FE2A840A3B8}) (Version: 1.02.0122 - Maxtor) Hidden

Maxtor Quick Start (HKLM-x32\...\InstallShield_{1C875160-7E87-45C6-85C5-4FE2A840A3B8}) (Version: 1.02.0122 - Maxtor)

MD5Check 3.0 (HKLM-x32\...\MD5Check_is1) (Version:  - )

MEDIA Revolution (HKLM-x32\...\MEDIA Revolution_is1) (Version: Aktuelle Version - IN MEDIA KG)

MediaBase (GOTD) (remove only) (HKLM-x32\...\MediaBase (GOTD)) (Version:  - )

mediAvatar DVD Converter (HKLM-x32\...\mediAvatar DVD Converter) (Version: 6.0.12.0919 - mediAvatar)

mediAvatar Photo to Flash (HKLM-x32\...\mediAvatar Photo to Flash) (Version: 1.0.1.0224 - mediAvatar)

mediAvatar Video to DVD Converter (HKLM-x32\...\mediAvatar Video to DVD Converter) (Version: 6.2.1.0301 - mediAvatar)

Melomania (HKLM-x32\...\Melomania) (Version: 1.8.9.3 - Able Apples)

Menu Templates - Starter Kit (HKLM-x32\...\{C99C89A3-119A-45E6-B26E-DD5643CAA0C5}) (Version: 9.0.4.0 - Nero AG) Hidden

MetaProducts DeskTool (HKLM-x32\...\DeskTool) (Version:  - )

Metaproducts Picture Downloader (HKLM-x32\...\Metaproducts Picture Downloader) (Version:  - )

Micro DVD Player (HKLM-x32\...\Micro DVD Player) (Version:  - )

Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)

Microsoft AntiXSS v4.2.1 (HKLM-x32\...\{F7D011B7-EF6B-4FCF-9571-44D60282329A}) (Version: 4.2.1 - Microsoft Corporation)

Microsoft Application Compatibility Toolkit 5.6 (HKLM-x32\...\{0F5AEBB0-43F3-4571-ACE7-A7942E8AA179}) (Version: 5.6.7324.0 - Microsoft Corporation)

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Outlook Connector (HKLM-x32\...\{95120000-0122-0409-0000-0000000FF1CE}) (Version: 12.0.6423.1000 - Microsoft Corporation)

Microsoft Office Professional Edition 2003 (HKLM-x32\...\{91110409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)

Microsoft Office Professional Plus 2013 - en-us (HKLM\...\ProPlusRetail - en-us) (Version: 15.0.4981.1001 - Microsoft Corporation)

Microsoft Office Sounds (HKLM-x32\...\{10CE1EA2-12E9-11D3-825E-00C04F6843FE}) (Version: 1.0.0.0 - Microsoft Corp)

Microsoft OneDrive (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\OneDriveSetup.exe) (Version: 17.3.7294.0108 - Microsoft Corporation)

Microsoft Outlook Personal Folders Backup (HKLM-x32\...\{C63E7C60-25EB-11D3-8EDA-00A0C911E8E5}) (Version: 1.10.0.0 - Microsoft Corporation)

Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0409-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Reader (HKLM-x32\...\{B6F7DBE7-2FE2-458F-A738-B10832746036}) (Version:  - )

Microsoft Save as PDF Add-in for 2007 Microsoft Office programs (HKLM-x32\...\{90120000-00B0-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)

Microsoft SQL Server 2005 (HKLM-x32\...\Microsoft SQL Server 2005) (Version:  - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{E75776B2-EAE5-42F9-A800-0A10763DEDF0}) (Version: 11.0.2318.0 - Microsoft Corporation)

Microsoft SQL Server 2014 Express LocalDB  (HKLM\...\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 Design Tools ENU (HKLM-x32\...\{2E5C075E-11AB-4BDD-918C-7B9A68953FF8}) (Version: 3.5.5386.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{A14F2EA1-93E5-4AEB-8395-F2BCC8FE1CCC}) (Version: 3.5.8085.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{2C254FCE-43EF-4DE9-B7D8-60579B3325E3}) (Version: 3.5.8085.0 - Microsoft Corporation)

Microsoft SQL Server Desktop Engine (HKLM-x32\...\{E09B48B5-E141-427A-AB0C-D3605127224A}) (Version: 8.00.761 - Microsoft Corporation)

Microsoft SQL Server Native Client (HKLM-x32\...\{7670D32F-DAE6-4E49-8C8B-B3F08B5B1686}) (Version: 9.00.5000.00 - Microsoft Corporation)

Microsoft SQL Server Setup Support Files (English) (HKLM-x32\...\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.5000.00 - Microsoft Corporation)

Microsoft SQL Server VSS Writer (HKLM-x32\...\{E9F44C98-B8B6-480F-AF7B-E42A0A46F4E3}) (Version: 9.00.3042.00 - Microsoft Corporation)

Microsoft Text-to-Speech Engine 4.0 (English) (HKLM-x32\...\MSTTS) (Version:  - )

Microsoft Visual C# 2008 Express Edition - ENU (HKLM-x32\...\Microsoft Visual C# 2008 Express Edition - ENU) (Version:  - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{4fd02573-5f12-4ae4-8027-c63f8e1115af}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24123 (HKLM-x32\...\{2cbcedbb-f38c-48a3-a3e1-6c6fd821a7f4}) (Version: 14.0.24123.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24123 (HKLM-x32\...\{206898cc-4b41-4d98-ac28-9f9ae57f91fe}) (Version: 14.0.24123.0 - Microsoft Corporation)

Microsoft Visual C++ Run Time  Lib Setup (HKLM-x32\...\{AAF4238F-7C29-451D-9925-C753271A5728}) (Version: 1.0.0 - Microsoft)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework (HKLM-x32\...\{B4C0A315-07FB-39F9-85CD-8CE20C019350}) (Version: 3.5.21022 - Microsoft)

Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32 (HKLM-x32\...\{07FCBED5-94C3-4F94-B9D3-360FA27C7B06}) (Version: 6.1.5288.17011 - Microsoft Corporation)

Microsoft_VC100_CRT_x64 (HKLM\...\{17106CA8-E65A-4D02-95BE-79AF8C698935}) (Version: 1.0.0 - Microsoft)

Microsys Launcher (HKLM\...\560CEE382FE04EEE8EE428712CD776BE_is1) (Version: 2.1.0 - Micro-Sys ApS)

MicroTrends Squawk Box (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\488a5e15e6cf4819) (Version: 2.0.1.7 - MicroTrends)

Mindomo 8.0.20 (HKLM\...\68388fc2-5a22-11e6-a23f-0cc47a024924) (Version: 8.0.20 - Expert Software Applications srl)

MiniTool Partition Wizard Professional Edition 8.1.1 (HKLM-x32\...\{2991A446-D356-44EC-930A-42E8B02A67C0}_is1) (Version:  - MiniTool Solution Ltd.)

MiniTool Partition Wizard Professional Edition 9.0 (HKLM-x32\...\{69237D97-3063-450F-AE49-2357B191EA5D}_is1) (Version:  - MiniTool Solution Ltd.)

MKVtoolnix 4.9.1 (HKLM-x32\...\MKVtoolnix) (Version: 4.9.1 - Moritz Bunkus)

MobiKin Doctor for Android (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\MobiKin Doctor for Android) (Version: 1.1.0.18 - MobiKin)

MobiKin Doctor for iOS (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\MobiKin Doctor for iOS) (Version: 1.0.0.1 - MobiKin)

Mobile Video 2.0 (HKLM-x32\...\{8CB5AFA8-B19F-4656-0001-F2B05D5BB04E}) (Version: 2.11.0713 - Engelmann Media GmbH)

Mobipocket Reader 6.2 (HKLM-x32\...\{342126E1-173C-4585-BFBE-3EBDD20E3E9E}) (Version: 6.2.608 - Mobipocket.com)

ModelMaker 6.20 (HKLM-x32\...\ModelMaker 6.20) (Version:  - )

Modiac Blu-ray Ripper (HKLM-x32\...\Modiac Blu-ray Ripper) (Version: 1.0.0.4077 - Modiac Inc.)

Modiac DVD Ripper (HKLM-x32\...\Modiac DVD Ripper) (Version: 1.7.0.4077 - Modiac Inc.)

Modiac Video Converter (HKLM-x32\...\Modiac Video Converter) (Version: 2.5.0.4078 - Modiac Inc.)

Moo Calendar 1.0.2.131 (HKLM\...\Moo Calendar_is1) (Version:  - Moo Calendar Team)

Mosaico (HKLM-x32\...\Mosaico) (Version: 1.3.0P - Soulid Studio)

Mosaico version 1.4 (HKLM-x32\...\{2C954515-1DA8-4A2F-8EC8-6C31A4952E3C}_is1) (Version: 1.4 - Soulid Studio)

mov Audio Extractor 9.1.5 (HKLM-x32\...\mov Audio Extractor_is1) (Version:  - CoolMedia Co.,Ltd.)

Movavi Photo Editor 2 (HKLM-x32\...\Movavi Photo Editor 2) (Version: 2.1.0 - Movavi) <==== ATTENTION

Movie Maker (HKLM-x32\...\{38F03569-A636-4CF3-BDDE-032C8C251304}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Movie Templates - Starter Kit (HKLM-x32\...\{BCD82AB5-670D-4242-90FA-1F97103C16CD}) (Version: 9.0.4.0 - Nero AG) Hidden

MovieJack (HKLM-x32\...\{02ED828A-ED95-499D-BF08-B26053D9CF8D}) (Version: 4.0.6444.34216 - Engelmann Media GmbH) Hidden

MOVIEJACK free (HKLM-x32\...\{36c30694-fb11-43ef-8fff-d26924d944e1}) (Version: 4.0.6444.34364 - Engelmann Media GmbH)

Mozilla Firefox 53.0.3 (x86 en-US) (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Mozilla Firefox 53.0.3 (x86 en-US)) (Version: 53.0.3 - Mozilla)

Mozilla Firefox 58.0.2 (x64 en-US) (HKLM\...\Mozilla Firefox 58.0.2 (x64 en-US)) (Version: 58.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 58.0.1 - Mozilla)

MP3 Cutter 1.1.1 (HKLM-x32\...\MP3 Cutter_is1) (Version:  - MP3Cutter.org)

MP3 Tag Express 6.8.5 (HKLM-x32\...\MP3 Tag Express 6.8.5) (Version:  - George Taylor - ISD)

MP3 Tag Express V6 (HKLM-x32\...\{0A393685-A856-49D3-84D3-5D2BCFC9BED5}) (Version: 6.0.0 - George Taylor)

MP3 Toolkit 1.1 (HKLM-x32\...\MP3 Toolkit_is1) (Version:  - MP3Toolkit.com)

Mp3tag v2.49b (HKLM-x32\...\Mp3tag) (Version: v2.49b - Florian Heidenreich)

MP4 To MP3 Converter V3.0.4 (HKLM-x32\...\MP4 To MP3 Converter_is1) (Version:  - hxxp://www.MP4ToMP3Converter.net)

MSDN Library for Microsoft Visual Studio 2008 Express Editions (HKLM-x32\...\{DF38F332-2AC3-37FF-9FDC-8C4C80E531FB}) (Version: 9.0.21022 - Microsoft Corporation) Hidden

MSDN Library for Microsoft Visual Studio 2008 Express Editions (HKLM-x32\...\MSDN Library for Microsoft Visual Studio 2008 Express Editions) (Version:  - Microsoft Corporation)

MSXML 4.0 SP2 (KB927978) (HKLM-x32\...\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}) (Version: 4.20.9841.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB936181) (HKLM-x32\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

MSXML 6 Service Pack 2 (KB2721693) (HKLM\...\{2511745F-5778-45C5-A6BF-C5F0969F02C0}) (Version: 6.20.2012.0 - Microsoft Corporation)

MT Data Entry Assistant (HKLM-x32\...\{02D5EE1A-7F74-4D1D-8466-69094DBA2518}) (Version: 2.0 - Office Mini Tools)

Multi Image Optimizer Pro version 1.0.5.737 (HKLM-x32\...\{86E8ED83-A71F-46C1-9035-F7E16A22B882}_is1) (Version: 1.0.5.737 - Pepisgo Inc.) <==== ATTENTION

Multi Media US Toolbar (HKLM-x32\...\Multi Media US Toolbar) (Version:  - )

MultiCollector (HKLM-x32\...\MultiCollector) (Version:  - )

MultiView Inpaint 1.2 (HKLM\...\{8188F7D9-812D-417D-B502-BE0D34ABFD81}_is1) (Version:  - Teorex)

MunSoft Data Recovery Suite (HKLM-x32\...\MunSoft Data Recovery Suite) (Version: 2.0 - MunSoft)

Music Maker (HKLM\...\{D5FF45D3-3AE3-4490-85DE-04D059606382}) (Version: 25.0.0.23 - MAGIX Software GmbH) Hidden

Music Maker (HKLM-x32\...\MX.{D5FF45D3-3AE3-4490-85DE-04D059606382}) (Version: 25.0.0.23 - MAGIX Software GmbH)

MusicExtractor (HKLM-x32\...\MusicExtractor_is1) (Version: 1.0 - Abelssoft)

MUSICMATCH Jukebox (HKLM-x32\...\MUSICMATCH Jukebox) (Version:  - )

My Audio Cutter 1.2 (HKLM-x32\...\My Audio Cutter_is1) (Version:  - )

My Autoplay 12 Lite F (HKLM-x32\...\My Autoplay_is1) (Version:  - Arafasoft, Inc.)

MyDraw 2.0.0 (HKLM-x32\...\{3F3EE940-69C2-42D0-AA46-033D4CA1F51D}_is1) (Version: 2.0.0 - Nevron Software)

MyFormatConverter (HKLM-x32\...\{4aacb3a2-f7f1-4dbc-ae72-9d21552ac858}) (Version: 10.0.6109.25552 - Engelmann Distribution UG)

MyFormatConverter (HKLM-x32\...\{A249A3E5-DD4C-4F2C-AC2B-CCE9090DACDC}) (Version: 10.0.6109.25379 - Engelmann Distribution UG) Hidden

MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.7 - F.J. Wechselberger)

MySlideShow 3.5.6 (HKLM-x32\...\MySlideShow3_is1) (Version: 3.5.6 - Anix Software)

MyTube 6 (HKLM-x32\...\{02C15B8C-26BE-479C-0001-7E31094C1376}) (Version: 6.0.14.115 - S.A.D.)

MZ Cheque Print (HKLM-x32\...\{5DDA634C-8D62-42E8-A615-CA16BAAFC13A}) (Version: 1.0.0.1311 - MSTech (Modern Software Technology))

NaturalReaderFree (HKLM-x32\...\{262EFBD9-A907-490F-81F4-561FDD3A8C5C}) (Version: 1.00.0000 - Naturalsoft limited)

NeoDownloader 2.8.1 (GiveAwayOfTheDay Version) (HKLM-x32\...\{E76CDDCE-EFC0-4FE5-9972-9489CE49AA55}_is1) (Version: 2.8.1 - Neowise Software)

neoDVDstandard4 (HKLM-x32\...\{D1AD7439-FBCA-4345-A780-2A5617EBA9DE}) (Version: 4.0.0 - MedioStream)

NeoPaint 4.7c (HKLM-x32\...\{50206644-C226-498D-8273-9F5F300807E2}_is1) (Version: 4.7c - NeoSoft Corp.)

Nero 7 (HKLM-x32\...\{06024F70-15BC-4447-B53A-F1A7BBA21033}) (Version: 7.02.6387 - Nero AG)

Nero 9 (HKLM-x32\...\{b7dc4df1-aba8-4439-86d1-e080892e0f66}) (Version:  - Nero AG)

netbrdg (HKLM-x32\...\{4537EA4B-F603-4181-89FB-2953FC695AB1}) (Version: 6.02.1002.0001 - EASTMAN KODAK Company) Hidden

NETGEAR A6210 Genie (HKLM-x32\...\{24352157-CF75-4215-A0B5-3AF01F78CB0A}) (Version: 36.0.0.0 - NETGEAR) Hidden

NETGEAR A6210 Genie (HKLM-x32\...\InstallShield_{24352157-CF75-4215-A0B5-3AF01F78CB0A}) (Version: 36.0.0.0 - NETGEAR)

Netscape Navigator (9.0.0.6) (HKLM-x32\...\Netscape Navigator (9.0.0.6)) (Version: 9.0.0.6 (en-US) - Netscape)

Netumo Desktop (HKLM-x32\...\{08067B4D-A769-436D-B1DF-B045FF24E349}) (Version: 1.00.0005 - AIRO Software)

Network Recording Player (HKLM-x32\...\{830C1687-F55F-45C1-AD2B-405824DC65DB}) (Version: 2.3.1700 - Cisco WebEx LLC)

News Publisher 1.0 (HKLM-x32\...\{F512A66C-EE26-47DF-B1BA-9BC753AB7DD4}_is1) (Version: 1.0 - Soft Solutions)

NewzScape v1.2.0 (HKLM-x32\...\NewzScape_is1) (Version:  - )

NewzToolz-EZ v2.0.3 (HKLM-x32\...\NewzToolz-EZ_is1) (Version:  - )

NinjaTrader 7 (HKLM-x32\...\{94A2EF87-0F5B-4DC8-98DE-FD569674C05F}) (Version: 7.0.1037 - NinjaTrader)

NinjaTrader 8 (HKLM-x32\...\{6F0768CA-F6F4-4763-ABFB-BDCBDBAB06BD}) (Version: 8.0.8.0 - NinjaTrader, LLC)

Notebook 2.0 (HKLM-x32\...\Notebook_is1) (Version:  - Johannes Wallroth)

NotePro (HKLM-x32\...\{8B89A2F8-DB3D-445E-8689-104D20D36896}_is1) (Version: 4.31 - Crystal Office Systems)

Notifier (HKLM-x32\...\{0008546E-DF6E-4CC1-AFD0-2CB8E16C95A2}) (Version: 6.02.0001.0001 - EASTMAN KODAK Company) Hidden

novaPDF Lite Desktop 7.6 printer (HKLM\...\novaPDF Lite Desktop 7 printer_is1) (Version:  - Softland)

Nuclear Coffee - My Music Collection (HKLM-x32\...\My Music Collection_is1) (Version: 1.0.2.34 - Nuclear Coffee)

Nuclear Coffee - VideoGet (HKLM-x32\...\VideoGet_is1) (Version: 2012 - Nuclear Coffee)

O&O DiskImage Professional (HKLM\...\{811CD98A-197E-4918-8D85-1F42F88C43C2}) (Version: 11.3.182 - O&O Software GmbH)

Ocster 1-Click Backup (HKLM\...\Ocster 1-Click Backup) (Version: 1.10 - Ocster GmbH & Co. KG)

ODF Add-in for Microsoft Office (HKLM-x32\...\{2BC21CD2-8053-406A-80F6-9AB61717B49D}) (Version: 4.0.5309.0 - OpenXML/ODF Translator Team)

Odin U Disk Encrypt Creator 5.4.1 (HKLM-x32\...\Odin U Disk Encrypt Creator_is1) (Version:  - Odin Share Company)

Odin Video Converter 5.4.2 (HKLM-x32\...\Odin Video Converter_is1) (Version:  - Odin Share Company.)

Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.4981.1001 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.4981.1001 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-0409-0000-0000000FF1CE}) (Version: 15.0.4981.1001 - Microsoft Corporation) Hidden

Office Animation Runtime (HKLM-x32\...\{AEEB3643-71DE-414d-9E3F-1159177FE211}) (Version: 11.0.5510.0 - Microsoft Corporation)

Office Regenerator (HKLM-x32\...\{EDA176C4-5302-4BA2-9490-304C2D29E18B}) (Version: 20.11.0003 - Abstradrome)

OfotoXMI (HKLM-x32\...\{B162D0A6-9A1D-4B7C-91A5-88FB48113C45}) (Version: 6.02.0001.0001 - EASTMAN KODAK Company) Hidden

OkayFreedom (HKLM-x32\...\{3F3FB10C-7175-4D38-9335-3488B89C12AF}) (Version: 1.7.2 - Steganos Software GmbH)

oMega Commander 2.3.14.4267 (HKLM\...\{19A00CE2-FDE9-41AD-8CAA-E7BF2E3EAEDE}_is1) (Version:  - Pylonos.com LLC)

ONEKEY PDF Convert to Word version 3.0 (HKLM-x32\...\{C6C05D6E-B19C-4537-9F4D-09A636D05D3B}_is1) (Version: 3.0 - EasyAppSoft)

OpdiTracker (HKLM-x32\...\{3716C0FF-CB5C-4EF3-A944-11F02A7830F3}) (Version: 2.21.1085 - Opdicom)

OpenAL (HKLM-x32\...\OpenAL) (Version:  - )

OpenOffice 4.0.0 (HKLM-x32\...\{55E61709-D7D4-43C0-B45D-BFAF5C09A02D}) (Version: 4.00.9702 - Apache Software Foundation)

OpenSource AVI Splitter (remove only) (HKLM-x32\...\OpenSource AVI Splitter) (Version:  - )

OpenSource DTS/AC3/DD+ Source Filter (remove only) (HKLM-x32\...\OpenSource DTS/AC3/DD+ Source Filter) (Version:  - )

OpenSource Flash Video Splitter 1.0.0.5 (HKLM-x32\...\OpenSource Flash Video Splitter) (Version: 1.0.0.5 - )

OpenVPN 2.2.2 (HKLM-x32\...\OpenVPN) (Version: 2.2.2 - )

Opera 12.11 (HKLM\...\Opera 12.11.1661_1) (Version: 12.11.1661 - Opera Software ASA)

Opera 12.18 (HKLM\...\Opera 12.18.1873) (Version: 12.18.1873 - Opera Software ASA)

Opera Stable 18.0.1284.63 (HKLM-x32\...\Opera 18.0.1284.63) (Version: 18.0.1284.63 - Opera Software ASA)

Opera Stable 19.0.1326.56 (HKLM-x32\...\Opera 19.0.1326.56) (Version: 19.0.1326.56 - Opera Software ASA)

Opera Stable 51.0.2830.55 (HKLM-x32\...\Opera 51.0.2830.55) (Version: 51.0.2830.55 - Opera Software)

Opera Stable 51.0.2830.55 (HKLM-x32\...\Opera 51.0.2830.551) (Version: 51.0.2830.55 - Opera Software)

OrgScheduler version 6.6 (HKLM-x32\...\OrgScheduler_is1) (Version: 6.6 - OrgBusiness Software)

Page Builder V2.2 (HKLM-x32\...\{1F00B5F9-D652-4F86-95F5-E98962440900}_is1) (Version:  - CellSoftNet)

PageFlip PDF to Flash Converter (HKLM-x32\...\PageFlip PDF to Flash Converter_is1) (Version:  - PageFlipPDF Solution)

PaintSupreme (HKLM-x32\...\PaintSupreme 1.1) (Version: 1.1 - BrainDistrict GmbH)

PaperPort (HKLM-x32\...\{DF4C31CF-0EED-4680-873F-F6AD64E21B46}) (Version: 9.02.0818 - ScanSoft, Inc.)

Paradise Mountain Animated Wallpaper version 1.0 (HKLM-x32\...\Paradise Mountain Animated Wallpaper_is1) (Version:  - )

Paragon Backup & Recovery™ 10 Home Special Edition (HKLM-x32\...\{CD79CE4F-A5E5-11DF-AD00-005056C00008}) (Version: 90.00.0003 - Paragon Software)

Paragon Backup and Recovery™ 14 Home (HKLM\...\{485DF5E7-8379-4BFA-BAE1-9B8DBFE0D6B4}) (Version: 90.00.0003 - Paragon Software)

Paragon Disk Wiper™ 11 Personal Special Edition (HKLM-x32\...\{7E7F1A4F-781C-11DE-9EB8-005056C00008}) (Version: 90.00.0003 - Paragon Software)

Paragon Drive Copy™ 11 Professional Special Edition (English) (HKLM-x32\...\{24371D30-7CFF-11DE-B053-005056C00008}) (Version: 90.00.0003 - Paragon Software)

Paragon HFS+ for Windows™ 9.0 Special Edition (HKLM-x32\...\{456534C0-51E7-11DF-B336-005056C00008}) (Version: 1.00 - Paragon Software)

Paragon Migrate OS to SSD™ Special Edition (HKLM-x32\...\{D4378A80-C713-11DF-9399-005056C00008}) (Version: 90.00.0003 - Paragon Software)

Paragon Virtualization Manager™ 14 Compact (HKLM-x32\...\{BF50CF00-7CE6-11DE-A06C-005056C00008}) (Version: 90.00.0003 - Paragon Software)

ParkControl (HKLM-x32\...\ParkControl) (Version: 1.2.5.6 - Bitsum)

Particle 9 version 9 (HKLM-x32\...\{04932CAE-9C52-4986-BA2D-E26BA31FA77E}_is1) (Version: 9 - Daniel Ritchie)

Password Recovery Bundle 2014 (HKLM-x32\...\Password Recovery Bundle 2014_is1) (Version:  - Top Password Software, Inc.)

Pavtube Blu-ray Ripper Ver 4.1.3.4090 (HKLM-x32\...\{3CE715EB-457A-4C92-A907-0895AC264F75}_is1) (Version:  - )

PC Matic 1.1.0.41 (HKLM-x32\...\PC Matic_is1) (Version: 1.1.0.41 - PC Pitstop LLC)

PC WorkBreak 1.13 (HKLM-x32\...\PC WorkBreak_is1) (Version:  - TriSun Software Inc.)

PCmover Professional (HKLM-x32\...\{71AA2137-C3F3-45C6-A408-81697FE5A3B8}) (Version: 6.00.620.0 - Laplink Software, Inc.)

PDF Anti-Copy V2.0.3 (HKLM-x32\...\PDF Anti-Copy_is1) (Version:  - hxxps://PDFAntiCopy.com)

PDF Architect (HKLM-x32\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH)

PDF Combine 1.2 (HKLM-x32\...\PDF Combine_is1) (Version:  - PDF Combine)

PDF Composer (HKLM-x32\...\{0A660D90-BC82-4D25-BD19-5B86C8789904}) (Version: 1.2.0 - Impressions Future Media)

PDF Compressor 3.1.2 (HKLM-x32\...\PDFCompressor_is1) (Version:  - PDF Compressor)

PDF Eraser V1.4 (HKLM-x32\...\PDF Eraser_is1) (Version:  - hxxp://www.PDFEraser.net)

PDF Files Text Extractor v1.0.6 (HKLM-x32\...\PDF Files Text Extractor v1.0.6) (Version:  - AlgoLogic India)

PDF Impress 2014 (HKLM\...\{9E603249-BA86-4C15-A53B-BD7F92A1B99A}) (Version: 31.06.115 - BinaryNow, Inc.)

PDF Logo Remover 1.0 (HKLM-x32\...\PDF Logo Remover_is1) (Version: 1.0 - SoftOrbits)

PDF OCR 4.3.3 (HKLM-x32\...\{3D122AF9-1E02-4035-8003-334D378C1B62}_is1) (Version:  - PDF OCR)

PDF Pro 10 (HKLM-x32\...\{FC279721-37A6-4777-AFD8-7A56681EBA14}) (Version: 10.8.0000 - PDF Pro Software)

PDF Protection Remover (HKLM-x32\...\{6A1AEF96-769E-414E-B4EB-ED82AA51BA0B}) (Version: 7.0 - PDFArea Software)

PDF Protector Splitter and Merger Pro (HKLM-x32\...\PDF Protector Splitter and Merger Pro) (Version:  - AlgoLogic)

PDF Rotator 1.0.2 (HKLM-x32\...\PDF Rotator_is1) (Version:  - PDF Rotator)

PDF To Excel Converter V3.0 (HKLM-x32\...\PDF To Excel Converter_is1) (Version:  - hxxp://www.PDFExcelConverter.com)

PDF to JPG 3.6 (HKLM-x32\...\PDF to JPG_is1) (Version:  - PDF Helper)

PDF To JPG Converter 2.0.2 (HKLM-x32\...\PDF To JPG Converter_is1) (Version:  - PDF To JPG Converter)

PDF to Text 3.3 (HKLM-x32\...\PDF to Text_is1) (Version:  - PDF Helper)

PDF To Word Converter 3.70 (HKLM-x32\...\{BC58612B-71F0-4354-8A3F-54751AF9B19F}}_is1) (Version:  - AdeptPDF Studio)

PDF To Word Converter V3.0.3 (HKLM-x32\...\PDF To Word Converter_is1) (Version:  - hxxp://www.PDFWordConverter.net)

PDF to X 7.0 (HKLM-x32\...\PDF to X_is1) (Version:  - TriSun Software Limited)

PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.2 - pdfforge)

PDFPasswordRemover 1.6.2 (HKLM-x32\...\PDFPasswordRemover_is1) (Version:  - PDFPasswordRemover)

PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.322.4 - Tracker Software Products Ltd)

PDFZilla V3.0.6 (HKLM-x32\...\PDFZilla_is1) (Version:  - PDFZilla, Inc.)

Perfect Hotkey version 1.32 (HKLM-x32\...\{4D9D70B0-31B9-4D04-A7E8-F6BA16FE51EC}_is1) (Version: 1.32 - YL Computing)

PerformanceTest v7.0 (HKLM-x32\...\PerformanceTest 7_is1) (Version: 7.0 - Passmark Software)

Personal Monitor 2014 (HKLM\...\{EF660923-D284-4F7A-A080-9D3E94814F71}_is1) (Version:  - Exeone)

Perspective Pilot Free 3.4.0 (HKLM\...\Perspective Pilot Free_is1) (Version: 3.4.0 - Two Pilots)

Pet Eye Fix Guide 2.2.4 (HKLM\...\Pet Eye Fix Guide_is1) (Version: 2.2.4 - Tint Guide)

Photo Background Remover 1.1 (HKLM-x32\...\Photo Background Remover_is1) (Version: 1.1 - SoftOrbits)

Photo BUZZER (64-Bit) (HKLM\...\EMOTION_PROJECTS_1_2_CDF5610E_is1) (Version: 1.14 - Franzis Verlag GmbH)

Photo Calendar Creator version 7.0 (HKLM-x32\...\{D03F6C43-F73C-44F7-AF54-1626BE90B410}_is1) (Version: 7.0 - AMS Software)

Photo Collage Maker 4.1.2 (HKLM-x32\...\{5BC0748C-22F5-4358-80F2-2CB990CC2917}_is1) (Version: 4.1.2 - PearlMountain Technology Co., Ltd)

Photo Naming Assistant (HKLM-x32\...\{E07ADFF1-AC73-45F5-B0CD-6D6351E04CEB}) (Version: 1.02.0001 - Bobolink Software)

Photo Stamp Remover 7.3 (HKLM-x32\...\Photo Stamp Remover_is1) (Version: 7.3 - SoftOrbits)

Photo to FlipBook (HKLM-x32\...\Photo to FlipBook_is1) (Version:  - Flippagemaker Solution)

Photo to Sketch Converter 2.0 (HKLM-x32\...\Photo to Sketch Converter_is1) (Version: 2.0 - SoftOrbits)

Photo Toolbox for Windows version 1.12.3.1 (HKLM\...\{A61AE368-B88C-414C-9118-503EECFC3AC8}_is1) (Version: 1.12.3.1 - LifeSniffer, Inc.)

PhotoMagic 1.0.0.0 (HKLM-x32\...\PhotoMagic_is1) (Version:  - )

Photomizer Retro (HKLM-x32\...\{41B5224D-7853-4EA5-0001-C8949A33B608}) (Version: 2.0.13.308 - Engelmann Media GmbH)

Photomizer Scan 2 (HKLM-x32\...\{CCE60D92-F3EC-4EF7-0001-C8949A33B608}) (Version: 2.0.13.704 - Engelmann Media GmbH)

Photopus 1.1 (HKLM-x32\...\Photopus_is1) (Version:  - )

PhotoScissors 4.0 (HKLM\...\{664FCCAE-8187-4EC5-B191-758C040C999C}_is1) (Version:  - teorex)

PhotoShow Deluxe 3 (HKLM-x32\...\PhotoShow Deluxe 3) (Version: 3.0 - Simple Star, Inc.)

PhotoStitcher 1.2 (HKLM-x32\...\{299EB32D-0525-4482-A8B5-1F30725AB6F1}_is1) (Version:  - Teorex)

PhotoStitcher 1.5 (HKLM\...\{299EB32D-0525-4482-A8B5-1F30725AB6F1}_is1) (Version:  - Teorex)

Phototheca 2.8.0.1972 (HKLM-x32\...\{B685A488-2894-465F-95C0-AE287DF86447}_is1) (Version: 2.8.0.1972 - Lunarship Software)

Photoupz 1.63 (HKLM-x32\...\Photoupz) (Version: 1.63 - EvenPixel Ltd)

PhraseExpander 4.1.0.0 (HKLM-x32\...\PhraseExpander_is1) (Version:  - Nagarsoft)

PicaJet FX 2.6.5.696 (HKLM-x32\...\PicaJet FX_is1) (Version: PicaJet FX 2.6.5.696 - PicaJet.Com)

Picture Collage Maker 4.1.2 (HKLM-x32\...\{D53599B0-AA76-4CC6-B9EF-CC2F27B56F24}_is1) (Version: 4.1.2 - PearlMountain Technology Co., Ltd)

Picture Collage Maker Pro 4.1.3 (HKLM-x32\...\{6D308A90-6C14-4A02-9B04-CB0EF17894A9}_is1) (Version: 4.1.3 - PearlMountain Technology Co., Ltd)

Picture Cutout Guide 3.2.10 (HKLM\...\Picture Cutout Guide_is1) (Version: 3.2.10 - Tint Guide)

Pinnacle Hollywood FX for Studio (HKLM-x32\...\Hollywood FX for Studio) (Version:  - )

Pixelplan - Flow Architect Studio 3D (HKLM-x32\...\Flow Architect Studio 3D) (Version:  - )

Pixillion Image Converter (HKLM-x32\...\Pixillion) (Version:  - NCH Software)

Pixo (HKLM-x32\...\{FAAEB46F-6BEE-409B-8983-264C21B9C415}) (Version: 3.5.6 - Bendigo Design)

Plagiarism Checker X (HKLM-x32\...\{B23E0CBF-D5F6-4682-99A0-A32C6FD93B5B}) (Version: 5.0.0 - Plagiarism Checker X, LLC) Hidden

Plagiarism Checker X (HKLM-x32\...\Plagiarism Checker X 5.0.0) (Version: 5.0.0 - Plagiarism Checker X, LLC)

PlayClaw 4 (HKLM-x32\...\PlayClaw 4_is1) (Version: 4 - )

PlaysTV (HKLM-x32\...\PlaysTV) (Version: 1.11.1-r113407-release - Plays.tv, LLC)

PomodoroApp 2.2 (HKLM-x32\...\PomodoroApp_is1) (Version: 2.2 - PomodoroApp)

Power Time Tracker version 1.0.0 (HKLM-x32\...\{44DCFA45-F2E0-4B95-9377-5E226E02B58A}_is1) (Version: 1.0.0 - George Taylor)

PowerCHM 7.4 (HKLM-x32\...\PowerCHM_is1) (Version: 7.4 - Dawningsoft)

PowerCmd 2.2 (HKLM-x32\...\PowerCmd_is1) (Version: AppVerName - PowerCmd)

PowerKey (HKLM-x32\...\PowerKey) (Version: 2.11.0.3 - Elcor Software)

Presentation Assistant V2.4.3 (HKLM-x32\...\Presentation Assistant_is1) (Version:  - www.presentation-assistant.com)

Presentation Marker V2.2.5 (HKLM-x32\...\Presentation Marker_is1) (Version:  - www.presentation-assistant.com)

Presentation Screen Master V1.1.6 (HKLM-x32\...\Presentation Screen Master_is1) (Version:  - www.presentation-assistant.com)

PresentationTube Recorder 3.0 (HKLM-x32\...\{91F8441B-E7A7-4513-9D7C-080B643D2FD6}_is1) (Version: 3.0 - PresentationTube)

PrintableCal (HKLM-x32\...\{0F6AE757-F680-4DD3-8449-7ED9A6AE3363}) (Version: 1.6.4 - VueSoft LLC) Hidden

PrintableCal (HKLM-x32\...\{a5584919-fd52-49b5-859d-6c27583c7579}) (Version: 1.6.4 - VueSoft LLC)

Prio (HKLM\...\Prio) (Version: 2.0.0.2960 - )

Privacy Eraser (HKLM\...\{CB5AC03C-B8AD-980F-998E-51969A6DFC9F}_is1) (Version: 3.5.4.1132 - Cybertron Software Co., Ltd.)

Process Lasso (HKLM-x32\...\ProcessLasso) (Version: 9.0.0.426 - Bitsum)

Process Tamer 2.11.01 (HKLM-x32\...\Process Tamer_is1) (Version:  - )

proDAD ProDRENALIN 1.0 (64bit) (HKLM\...\proDAD-ProDRENALIN-1.0) (Version: 1.0.72.1 - proDAD GmbH)

Project Dogwaffle Howler version 8.2 (HKLM-x32\...\{0DA77807-8CC9-4026-A318-64B863E34BAA}_is1) (Version: 8.2 - Daniel Ritchie)

ProphecyMaster v1.1 (HKLM-x32\...\ProphecyMaster_is1) (Version: 1.1 - Luxand, Inc.)

Protected Folder (HKLM-x32\...\Protected Folder_is1) (Version:  - IObit)

PT Photo Editor 2.1.2 (HKLM\...\{5C65692A-A64B-4B54-8E1E-429A56979DB0}_is1) (Version: 2.1.2 - PHOTO-TOOLBOX.COM)

Puran Defrag 7.7 (HKLM\...\Puran Defrag_is1) (Version:  - Puran Software)

Quick Video Cutter  (HKLM-x32\...\Quick Video Cutter) (Version:  - Adoreshare, Inc.)

QuickTime for Windows (32-bit) (HKLM-x32\...\QuickTime32) (Version:  - )

QuizCreator (HKLM-x32\...\Wondershare QuizCreator (Build 4.5.1)_is1) (Version:  - Wondershare Software)

QuoteTracker (HKLM-x32\...\QuoteTracker_is1) (Version:  - T2 API Technologies, LLC)

RadioZilla 1.0 (HKLM-x32\...\{27957F25-AEA5-4639-8943-698199B18CBF}_is1) (Version:  - teorex)

Rankaware version 1.4 (HKLM-x32\...\{A2C8C41A-94C0-43C6-A8B2-5E3D9D7FA5E5}_is1) (Version: 1.4 - SharpNight Co,Ltd.)

RAPID (Studio 10) (HKLM-x32\...\{EEECE229-49F6-4851-A73A-99B058221F8C}) (Version: 3.00.0014 - Pinnacle Systems) Hidden

Raptr (HKLM-x32\...\Raptr) (Version: 5.2.6-r115593-release - Raptr, Inc)

RationalPlan Single (HKLM-x32\...\RationalPlan Single) (Version: 4.11.11 - Stand By Soft Ltd)

R-Drive Image 6.0 (HKLM-x32\...\R-Drive Image 6.0NSIS) (Version: 6.0.6007 - R-Tools Technology Inc.)

reaConverter 7 Standard (HKLM-x32\...\{659727C6-7267-4076-803B-351A467F6CAF}_is1) (Version: 7.1.51.0 - reaConverter LLC)

ReadPlease 2003/ReadPlease PLUS 2003 (HKLM-x32\...\ReadPlease 2003_is1) (Version: 2003.1.10 - ReadPlease Corporation)

Readygo Screen Recorder (HKLM\...\Readygo Screen Recorder) (Version: 1.0.0.8 - ReadygoSoft)

Real Chess (HKLM-x32\...\RealChess_is1) (Version: 1.0 - Media Contact LLC)

RealA2V 1.0 (HKLM-x32\...\{1ABF3A36-C233-4A1D-9C2D-22CFC3803D72}_is1) (Version: 1.0 - RealA2v)

RealDownloader (HKLM-x32\...\{13743594-F75E-491E-9EFF-203C8F8DF705}) (Version: 18.1.4.144 - RealNetworks) Hidden

RealDownloader (HKLM-x32\...\{f05bfa4b-0c78-4a3e-aa74-8c220b4a7782}) (Version: 18.1.4.144 - RealNetworks) Hidden

RealDownloader (HKLM-x32\...\{FB20AA56-F683-463A-8812-90A3507E96F9}) (Version: 18.1.0.1233 - RealNetworks, Inc.) Hidden

RealNetworks - Microsoft Visual C++ 2008 Runtime (HKLM-x32\...\{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}) (Version: 9.0 - RealNetworks, Inc) Hidden

RealNetworks - Microsoft Visual C++ 2010 Runtime (HKLM\...\{21E47F47-C9A7-4454-BA48-388327B0EA00}) (Version: 10.0 - RealNetworks, Inc) Hidden

RealNetworks - Microsoft Visual C++ 2010 Runtime (HKLM-x32\...\{AAECF7BA-E83B-4A10-87EA-DE0B333F8734}) (Version: 10.0 - RealNetworks, Inc) Hidden

RealUpgrade 1.1 (HKLM-x32\...\{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}) (Version: 1.1.0 - RealNetworks, Inc.) Hidden

RealWorld Cursor Editor (HKLM-x32\...\{25A344BB-378D-4E51-9A39-780755012B2D}) (Version: 13.1.0 - RealWorld Graphics)

RecordMax Burning Studio 6.0.1 (HKLM-x32\...\RecordMax Burning Studio_is1) (Version:  - NITBits Co., Ltd.)

Recover Passwords (HKLM-x32\...\Recover Passwords_is1) (Version: 1.0.0.19 - Recover Passwords)

Reg Organizer version 5.46 (HKLM-x32\...\Reg Organizer 5_is1) (Version: 5.46 - ChemTable Software)

Reminder Commander 4.04 (HKLM-x32\...\Reminder Commander_is1) (Version:  - Abaiko Software)

Remove Logo Now! 1.2 (HKLM-x32\...\Remove Logo Now!_is1) (Version: 1.2 - SoftOrbits)

Retouch Pilot Free 3.5.3 (HKLM\...\Retouch Pilot Free_is1) (Version: 3.5.3 - Two Pilots)

Revo Uninstaller Pro 2.5.9 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 2.5.9 - VS Revo Group, Ltd.)

RidNacs 2.0.3 (HKLM-x32\...\RidNacs_is1) (Version:  - Stephan Plath)

RightNote 3.4.1.2 (HKLM-x32\...\RightNote_is1) (Version:  - BauerApps)

Rio Internet Update (HKLM-x32\...\{493F2531-C2E5-4B73-8B11-66E9CFDA9AFA}) (Version: 2.90 - Rio Audio)

Rio Music Manager (HKLM-x32\...\{282EF7E3-AE54-48AE-A11D-27F512F23AB3}) (Version: 2.90 - Rio Audio)

RoboFolder 1.2.0.72 (HKLM-x32\...\RoboFolder_is1) (Version: RoboFolder 1.2.0.72 - PicaJet.Com)

RoboForm 7-9-15-8 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-9-15-8 - Siber Systems)

RoboTask (HKLM-x32\...\{BC45995A-7451-430C-9779-5FF455E710D9}_is1) (Version: 4.4 - NeoWise Software)

RogueKiller version 12.12.7.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.12.7.0 - Adlice Software)

RonyaSoft CD DVD Label Maker 3.01 (HKLM-x32\...\RonyaSoft CD DVD Label Maker) (Version: 3.01 - RonyaSoft)

RonyaSoft Poster Designer (Poster Forge) 2.02 (HKLM-x32\...\RonyaSoft Poster Designer (Poster Forge)) (Version: 2.02 - RonyaSoft)

RonyaSoft Poster Designer 2.03 (HKLM-x32\...\RonyaSoft Poster Designer) (Version: 2.03 - RonyaSoft)

Roxio DLA (HKLM\...\{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}) (Version: 5.2.0 - Roxio)

Roxio Express Labeler (HKLM-x32\...\{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}) (Version: 2.1.0 - Roxio)

Roxio RecordNow Audio (HKLM-x32\...\{AB708C9B-97C8-4AC9-899B-DBF226AC9382}) (Version: 2.0.4 - Roxio)

Roxio RecordNow Copy (HKLM-x32\...\{B12665F4-4E93-4AB4-B7FC-37053B524629}) (Version: 2.0.4 - Roxio)

Roxio RecordNow Data (HKLM-x32\...\{075473F5-846A-448B-BCB3-104AA1760205}) (Version: 2.0.4 - Roxio)

RSS Wizard (HKLM-x32\...\{B342ACAF-2A8A-4CF0-87FE-7E130A9B1197}_is1) (Version:  - Extralabs Software)

Safari (HKLM-x32\...\{F2AF3E5D-9697-485C-A5AC-E2B9468C446A}) (Version: 5.34.52.7 - Apple Inc.)

Scadarlia version 1.1.2 (HKLM-x32\...\{AAC7A336-EC23-4829-865A-EAE041171023}_is1) (Version: 1.1.2 - Kalidor WEB, Ltd.)

Scan2Encrypt 2 (HKLM-x32\...\{07092199-993B-4D17-B72F-532B59C1658F}) (Version: 21.14.13 - BinaryNow, Inc.)

Scanitto Pro (HKLM-x32\...\{FC9FED7B-11C5-4BAA-AAF0-395AD111EE92}_is1) (Version: 2.8.17.201 - Masters ITC Software)

ScanMyReg 2.2 (HKLM-x32\...\{FC274982-5AAD-4C20-848D-A9D60D18D757}_is1) (Version:  - YL Computing, Inc)

ScanPapyrus (HKLM-x32\...\{D243A198-99BB-42A0-828E-98AE3F01D215}_is1) (Version: 15.7 - BlackParrot Software)

ScanSoft OmniPage 15.0 (HKLM-x32\...\{0B7DDCD3-D6D8-4366-A6D8-9B6495A2925E}) (Version: 15.00.0001 - ScanSoft, Inc.)

Screen Capturer Recorder uninstall (HKLM-x32\...\Screen Capturer Recorder_is1) (Version:  - )

Screen Recording Suite V2.4.8 (HKLM-x32\...\{EB9F3F92-4857-4121-AA6F-1C424AC6C266}_is1) (Version: 2.4.8 - Apowersoft)

ScreenBackTracker registered to GiveAwayOfTheDay version 1.0.1.91 (HKLM-x32\...\{D62C8411-1C35-44EA-A45D-01A32EEC724C}_is1) (Version: 1.0.1.91 - PCWinSoft Software)

ScreenCamera registered to GiveAwayOfTheDay version 3.1.1.41 (HKLM-x32\...\{D47A18EF-38BC-4951-A344-9800D3BF4D53}_is1) (Version: 3.1.1.41 - PCWinSoft Software)

ScreenStep Maker (HKLM-x32\...\ScreenStep Maker_is1) (Version:  - PDF-To-Flash-Converter Solution)

Sendspace Wizard (HKLM-x32\...\{1636273D-F29B-4E1F-8E83-2DD0536C3C3A}) (Version: 1.6.3.0 - sendspace.com)

Session Planner Pro GOTD Edition (HKLM-x32\...\{538D2196-D0B4-5B32-409C-4716F9BCE1A8}) (Version: 1.00.15 - Limitless OU) Hidden

Session Planner Pro GOTD Edition (HKLM-x32\...\com.limitlessprojects.sessionplannerprogotd) (Version: 1.00.15 - Limitless OU)

SFR (HKLM-x32\...\{DB02F716-6275-42E9-B8D2-83BA2BF5100B}) (Version: 6.02.0001.0001 - Eastman Kodak Company) Hidden

SGsoft WordPad Version 1.0.1 (HKLM-x32\...\SGsoft WordPad_is1) (Version:  - SGsoft Canada)

Shadow Defender (HKLM\...\{93A07A0D-454E-43d1-86A9-5DE9C5F4411A}) (Version: 1.4.0.589 - ShadowDefender.com)

SharewareOnSale Notifier (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\SharewareOnSale Notifier) (Version: 20 - SharewareOnSale)

SharkIndicators BloodHound (HKLM-x32\...\Installer 1.205.5189.27981) (Version: 1.205.5189.27981 - SharkIndicators)

SharpDevelop 5.1 (HKLM-x32\...\{0C19BC81-7C9B-443F-8AEA-B89DC30EDCE4}) (Version: 5.1.5216 - ic#code)

SHASTA (HKLM-x32\...\{605A4E39-613C-4A12-B56F-DEFBE6757237}) (Version: 6.02.0001.0001 - EASTMAN KODAK Company) Hidden

Silver Key Standard Edition (HKLM-x32\...\{081617FD-3462-4906-B3C9-50F5CB88716A}) (Version: 4.3 - Inv Softworks)

SILVER projects premium (64-Bit) (HKLM\...\SILVER_PROJECTS_1_2_28B15F1D_is1) (Version: 1.14 - Franzis Verlag GmbH)

Simple Photo Editor 1.3 (HKLM-x32\...\Simple Photo Editor_is1) (Version: 1.3 - SoftOrbits)

Simply Good Pictures 2 (HKLM-x32\...\{DD2FEA6F-5AC2-46B2-0001-C2A0C077FD2C}) (Version: 2.0.12.1210 - Engelmann Media GmbH)

Simply Good Pictures 3 Free (HKLM-x32\...\{21e0f7f8-3db3-4ba3-b2d2-bb08738679a4}) (Version: 3.0.5256.28661 - Engelmann Media GmbH)

Simply Good Pictures 3 Free (HKLM-x32\...\{F65EBED8-6A2A-43FA-B0AC-B70E4DEF10F5}) (Version: 3.0.5256.28637 - Engelmann Media GmbH) Hidden

Simply Good Pictures 4 Free (HKLM\...\{02CDA37C-E26A-4301-B4FD-0647086EFFFC}) (Version: 4.0.5956.22030 - Engelmann Media GmbH) Hidden

Simply Good Pictures 4 Free (HKLM-x32\...\{41beccfc-71a7-4aba-8a48-3329bb75b549}) (Version: 4.0.5956.22106 - Engelmann Media GmbH)

SimplyGoodPictures (HKLM-x32\...\{29205904-A7A8-4545-0001-697935602C90}) (Version: 1.0.12.426 - Engelmann Media GmbH)

Simpo PDF to PowerPoint (HKLM-x32\...\Simpo PDF to PowerPoint_is1) (Version:  - Simpo Technologies)

SiSoftware Sandra Lite XII.SP1 (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2096}_is1) (Version: 13.12.2008.1 - SiSoftware)

Site Visualizer Professional 1.5.10 (HKLM-x32\...\Site Visualizer Professional_is1) (Version: 1.5.10 - Elphsoft)

SIW Pro Edition (GOTD) (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2015.01.08 - Topala Software Solutions)

Sketch Drawer 5.1 (HKLM-x32\...\Sketch Drawer_is1) (Version: 5.1 - SoftOrbits)

SKIN0001 (HKLM-x32\...\{FDF9943A-3D5C-46B3-9679-586BD237DDEE}) (Version: 6.02.1001.0001 - EASTMAN KODAK Company) Hidden

SKINXSDK (HKLM-x32\...\{F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}) (Version: 6.02.1001.0001 - EASTMAN KODAK Company) Hidden

Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)

Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.104 - Skype Technologies S.A.)

Smart CD Catalog Pro 3.08 (HKLM-x32\...\Smart CD Catalog Professional_is1) (Version:  - Abaiko Software)

Smart Diary Suite 4 (HKLM-x32\...\{4E0B21EE-F414-412A-B916-19CBDEA5EF64}_is1) (Version:  - Programming Sunrise)

SmartAudioEditor v6.0.1 (HKLM-x32\...\Smart Audio Editor_is1) (Version:  - SmartAudio Soft Co., Ltd.)

SmartPixel (HKLM-x32\...\SmartPixel) (Version: 3.2.0.0 - Beyond Magic Limited)

SmartRead (HKLM-x32\...\{B342025C-B2F7-4ADC-8F8B-1FFC45DB67CD}) (Version: 0.80.08.0331 - SmartySoft Studio)

SmartSHOW 2.15 (HKLM-x32\...\{400EBE76-B6D2-4977-B4C9-18BB60112654}_is1) (Version:  - AMS Software)

SmartSleep 3.62 (HKLM-x32\...\SmartSleep_is1) (Version:  - Dextronet)

SmartSound Quicktracks Plugin (HKLM-x32\...\{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}) (Version: 3.0.2.7 - SmartSound Software Inc) Hidden

SmartSound Quicktracks Plugin (HKLM-x32\...\InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}) (Version: 3.0.2.7 - SmartSound Software Inc)

Smarty Uninstaller Pro (HKLM-x32\...\{C20A5184-E994-4CF4-A388-30236A94AD41}_is1) (Version: 3.0.1 - WINner Tweak Software)

SnowFox Photo Collage Maker 1.1.0.0 (HKLM-x32\...\SnowFox Photo Collage Maker_is1) (Version:  - )

SnowFox Total Video Converter 2.8.1.1 (HKLM-x32\...\SnowFox Total Video Converter_is1) (Version:  - )

Soft Organizer version 3.51 (HKLM-x32\...\Soft Organizer_is1) (Version: 3.51 - ChemTable Software)

Softdiv PDF to Image Converter 1.1 (HKLM-x32\...\Softdiv PDF to Image Converter_is1) (Version:  - )

SoftMaker Office Standard 2012 (HKLM-x32\...\{8EBB8452-274B-465D-8324-00B0832FBB02}) (Version: 12.0.3513 - SoftMaker Software GmbH)

SoftOrbits Flash Drive Recovery 2.0 (HKLM-x32\...\SoftOrbits Flash Drive Recovery_is1) (Version: 2.0 - SoftOrbits)

SoftOrbits Photo Editor 3.2 (HKLM-x32\...\SoftOrbits Photo Editor_is1) (Version: 3.2 - SoftOrbits)

SoftOrbits Photo Retoucher 2.0 (HKLM-x32\...\SoftOrbits Photo Retoucher_is1) (Version: 2.0 - SoftOrbits)

SoftSkin Photo Makeup 2.3 (HKLM-x32\...\SoftSkin Photo Makeup_is1) (Version: 2.3 - SoftOrbits)

Solar System - Earth 3D Screensaver v1.9.05 (HKLM-x32\...\Solar System - Earth 3D Screensaver_is1) (Version:  - Rixane Interactive)

Solar System - Mars 3D Screensaver v1.7.02 (HKLM-x32\...\Solar System - Mars 3D Screensaver_is1) (Version:  - Rixane Interactive)

SolveigMM Video Splitter Home Edition (HKLM-x32\...\SolveigMM Video Splitter Home Edition 4.0.1502.19) (Version: 4.0.1502.19 - Solveig Multimedia)

 

Song Surgeon Trainer 1.0.0.5 (HKLM-x32\...\{03853A8E-10F5-517D-1010-4D69C7C5VD1Z}_is1) (Version:  - Todd, Michael & James, Inc.)

Sonic Foundry ACID 4.0e (HKLM-x32\...\{9B7DE025-A6AF-446B-86BE-3BD9604B498A}) (Version: 4.0.408 - Sonic Foundry)

Sonic Update Manager (HKLM-x32\...\{30465B6C-B53F-49A1-9EBA-A3F187AD502E}) (Version: 3.0.0 - Sonic Solutions)

Sony Sound Forge 7.0 (HKLM-x32\...\{0712667C-A171-49AE-A098-4ACDA28625F8}) (Version: 7.0.214 - Sony)

Sothink Flash Menu (HKLM-x32\...\{06620764-D772-496C-B75E-28C06CB8F89D}_is1) (Version: 1.2 - SourceTec Software Co., LTD)

Sothink Logo Maker Special (HKLM-x32\...\{E97A8C79-C035-4964-9DF5-B7B6D243A18C}_is1) (Version: 3.5 - SourceTec Software Co., LTD)

Sothink SWF Catcher Special (HKLM-x32\...\{7FA2E0C1-0B07-4829-87BE-CB371165162D}_is1) (Version: 2.6 - SourceTec Software Co., LTD)

Sound Editor Deluxe v6.0.1 (HKLM-x32\...\Sound Editor Deluxe_is1) (Version:  - SEDSoftwareeluxe Development Inc.)

Sound Editor Pro v7.5.1 (HKLM-x32\...\Sound Editor Pro_is1) (Version:  - NCMediaSoft Co., Ltd.)

SoundFrost (HKLM-x32\...\SoundFrost_is1) (Version: 3.8.2.0 - SoundFrost Company)

SoundTrax (HKLM-x32\...\{3097B151-1F61-4211-A4CC-D70127B226AE}) (Version: 4.0.18.0 - Nero AG) Hidden

Spartan (HKLM-x32\...\Spartan) (Version:  - ) <==== ATTENTION

Speakonia (HKLM-x32\...\Speakonia_is1) (Version: 1.0.3.5 - CFS-Technologies)

Speccy (HKLM\...\Speccy) (Version: 1.31 - Piriform)

Speed MP3 Downloader (HKLM-x32\...\SpeedMP3Downloader) (Version: 2.2.5.6 - )

SpringPublisher (HKLM-x32\...\{39AD1D17-7D06-499E-BC78-F54D4DB93D22}) (Version: 2.5.5 - SpringPublisher Team)

Stanza (HKLM-x32\...\Stanza) (Version:  - )

StarBurn Version 14.1 (Build 0x20130128) (HKLM-x32\...\StarBurn_is1) (Version: 14.1 - StarBurn Software)

StarReminder, SharewareOnSale.com Special Edition (HKLM-x32\...\StarReminder_is1) (Version: 4.22.06 (Build:14 May 2017) - StarMessage Software)

Start Menu 10 version 5.55 (HKLM\...\{19E4D194-A672-4564-94EC-65C5A725026D}_is1) (Version: 5.55 - OrdinarySoft)

Start Menu X version 4.01 (HKLM-x32\...\{3E494002-985C-4908-B72C-5B4DD15BE090}_is1) (Version: 4.01 - OrdinarySoft)

Start Menu X version 5.46 (HKLM\...\{3E494002-985C-4908-B72C-5B4DD15BE090}_is1) (Version: 5.46 - OrdinarySoft)

STARTUP COP!LOT (HKLM-x32\...\STARTUP COP!LOT_is1) (Version: 3.01 - STARTUP COP!LOT)

StartupStar (HKLM-x32\...\{C8A6121E-BE35-418D-91EF-A9536DA70B36}_is1) (Version: 6.3 - Abelssoft)

staticcr (HKLM-x32\...\{8943CE61-53BD-475E-90E1-A580869E98A2}) (Version: 5.03.0000.0001 - EASTMAN KODAK Company) Hidden

StatWin (HKLM-x32\...\StatWin Professional_is1) (Version: 8.4 - SXR Software)

Steganos Privacy Suite 15 (HKLM-x32\...\{704C8372-B1C3-4A76-AA5C-B91021B1DCFA}) (Version: 15.2.4 - Steganos Software GmbH)

Stellar Phoenix CD DVD Data Recovery (HKLM-x32\...\Stellar Phoenix CD DVD Data Recovery_is1) (Version: 4.1.0.0 - Stellar Information Systems Ltd)

SterJo Portable Firewall PRO (HKLM-x32\...\{1C29833F-E9F1-4A71-B1DC-7E4D143E5477}_is1) (Version: 2.8 - SterJo Software)

Sticky Password 8.0.4.34 (HKLM-x32\...\Sticky Password_is1) (Version: 8.0 - Lamantine Software)

Streaming Audio Recorder V3.3.1 (HKLM-x32\...\{B6D9D06B-4B4D-4B41-B963-C056B627F704}_is1) (Version: 3.3.1 - Apowersoft)

StudyX version 5.5 (HKLM-x32\...\StudyX_is1) (Version: 5.5 - Jeff Computers)

StudyX version 5.9.5 (HKLM\...\StudyX_is1) (Version: 5.9.5 - Jeff Computers)

Style Windows (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\f00f1920b400237f) (Version: 2.2.0.4 - Hunter in the Woods)

SuperEasy Photo Booster v.1.1.3056 (HKLM-x32\...\{039BC111-1600-6CEF-A8E5-198B376ED64D}_is1) (Version: 1.1.3056 - SuperEasy Software GmbH & Co. KG)

SuperEasy Video Booster v.1.1.3056 (HKLM-x32\...\{039BC111-ED4E-CCDF-634D-AF330C24ACB8}_is1) (Version: 1.1.3056 - SuperEasy Software GmbH & Co. KG)

SuperEasy Video Converter 2 v.2.1.3063 (HKLM-x32\...\{039BC111-5D42-BD22-5D57-C7073E40209A}_is1) (Version: 2.1.3063 - SuperEasy Software GmbH & Co. KG)

SuperEZ Wave Editor Pro v12.2.6 (HKLM-x32\...\SuperEZ Wave Editor Pro_is1) (Version:  - SuperEZMedia Development Inc.)

SuperEZ Wave Editor v12.2.1 (HKLM-x32\...\SuperEZ Wave Editor_is1) (Version:  - SuperEZMedia Development Inc.)

SWF & FLV Player 3.0 (build 3.0.33.5106) (HKLM-x32\...\SWF & FLV Player_is1) (Version: 3.0.33.5106 - Eltima Software)

SWF Opener (HKLM-x32\...\SWF Opener) (Version:  - )

Switch Sound File Converter (HKLM-x32\...\Switch) (Version:  - NCH Software)

SyncBackSE (HKLM-x32\...\SyncBackSE_is1) (Version: 6.4.3.8 - 2BrightSparks)

Synei System Utilities (HKLM-x32\...\{BFDC3B26-7DB0-43D3-BC84-7E9649C157EA}_is1) (Version: 2.10 - Synei)

Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version:  - )

Synology Data Replicator  3 (HKLM-x32\...\{8E310838-457C-4269-B177-3EFB300CBDDC}) (Version: 1.0.0.0 - Synology Inc.)

SysResources Manager (HKLM-x32\...\SysResources Manager11.1) (Version: 11.1 - Fotis)

System Scheduler 4.23 (HKLM-x32\...\Windows Scheduler_is1) (Version:  - Splinterware Software Solutions)

SyvirSen (HKLM-x32\...\ST6UNST #1) (Version:  - )

Tabbles (HKLM-x32\...\{1d37f30f-bc3c-44db-aafd-c8d9a3e349ba}) (Version: 4.0.10 - Yellow Blue Soft)

Tabbles (HKLM-x32\...\{577160A2-B171-48D9-9445-BD179CDC9392}) (Version: 4.0.10 - Yellow Blue Soft) Hidden

TagJet 2.1 (HKLM-x32\...\TagJet) (Version:  - )

TagTuner 2.0 (HKLM-x32\...\TagTuner_is1) (Version:  - TagTuner.com)

Talking Clipboard 2.9.1.0 (HKLM-x32\...\Talking Clipboard) (Version: 2.9.1.0 - Talking Clipboard, Inc.)

Task Coach 1.3.36 (HKLM-x32\...\Task Coach_is1) (Version:  - Frank Niessink, Jerome Laheurte, and Aaron Wolf)

TaskmgrPro V1.4.5 (HKLM\...\TaskmgrPro_is1) (Version:  - GoldGingko Software)

TDMore DVD Copy 1.0.1.1 (20/03/2015) (HKLM-x32\...\TDMore DVD Copy_is1) (Version:  - TDMore Technology Limited)

TDMore Free DVD Copy 1.0.1.1 (19/03/2015) (HKLM-x32\...\TDMore Free DVD Copy_is1) (Version:  - TDMore Technology Limited)

TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.90968 - TeamViewer)

Teleport Pro (HKLM-x32\...\Teleport Pro) (Version: 1.72 - Tennyson Maxwell Information Systems, Inc.)

Text Paster v1.8 (Giveaway of the Day) (HKLM-x32\...\Text Paster_is1) (Version: 1.8.0.160 - ATNSOFT)

The Archivist (HKLM-x32\...\{0001BB5B-D46E-4F6F-875C-B4DF1E3ACA4A}_is1) (Version: 4.3 - WiseOwlTech)

The Cleaner 2012 (HKLM-x32\...\The Cleaner_is1) (Version:  - MooSoft Development LLC)

TheBrain 8 (HKLM-x32\...\1190-3857-8766-9166) (Version: 8.0.1.7 - TheBrain Technologies)

thinkorswim (HKLM\...\9968-4488-2169-7623) (Version: desktop - thinkorswim, Inc)

thinkorswim (HKLM\...\9968-4488-2169-7623-1) (Version: desktop - thinkorswim, Inc)

This version is for only GOTD Promotion. version 2.4.0 (HKLM-x32\...\This version is for only GOTD Promotion._is1) (Version: 2.4.0 - Dajia Chu)

Throttle (HKLM-x32\...\Throttle_is1) (Version: 8.8.31.2015 - PGWARE LLC)

ThunderSoft Flash Gallery Creator (1.0.2.2) (HKLM-x32\...\ThunderSoft Flash Gallery Creator_is1) (Version:  - )

ThunderSoft Flash to Video Converter (1.1.5.1) (HKLM-x32\...\ThunderSoft Flash to Video Converter_is1) (Version:  - )

ThunderSoft Slideshow Factory (3.5.1.0) (HKLM-x32\...\ThunderSoft Slideshow Factory_is1) (Version: 3.5.1.0 - ThunderSoft)

ThunderSoft Video to GIF Converter (1.4.3.0) (HKLM-x32\...\ThunderSoft Video to GIF Converter_is1) (Version: 1.4.3.0 - ThunderSoft)

TIDAL (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\TIDAL) (Version: 2.1.14 - TIDAL Music AS)

Tidy Start Menu (HKLM-x32\...\Tidy Start Menu) (Version:  - )

TightProjector 2.1.3 (HKLM-x32\...\TightProjector_is1) (Version: 2.1.3 - TightProjector software)

TightVNC 1.3.9 (HKLM-x32\...\TightVNC_is1) (Version: 1.3.9 - TightVNC Group)

TimeBell (HKLM-x32\...\TimeBell) (Version:  - )

Tipard Blu-ray Converter 6.3.60 (HKLM-x32\...\{8B944923-1082-4830-85FC-D1430A63801C}_is1) (Version: 6.3.60 - Tipard Studio)

Tipard Blu-ray to MP4 Ripper 7.2.6 (HKLM-x32\...\{18009670-D50D-49e9-9098-F82FD2CFF915}_is1) (Version: 7.2.6 - Tipard Studio)

Tipard DVD Cloner 6 6.2.18 (HKLM-x32\...\{20835774-7DDC-4f70-90A3-36BD31E556C1}_is1) (Version: 6.2.18 - Tipard Studio)

Tipard DVD Ripper 6.1.20 (HKLM-x32\...\{CB31166F-62E4-4172-8186-16E539B1096B}_is1) (Version:  - )

Tipard DVD Ripper Platinum 6.2.20 (HKLM-x32\...\{C145A9AD-BD43-4255-B5F9-2803289C2F96}_is1) (Version: 6.2.20 - Tipard Studio)

Tipard DVD to MP4 Converter 7.1.52 (HKLM-x32\...\{C782478F-CEF3-4a53-9078-92DB75C1665B}_is1) (Version: 7.1.52 - Tipard Studio)

Tipard Mod Converter 6.1.16 (HKLM-x32\...\Tipard Mod Converter_is1) (Version:  - )

Tipard MP4 Video Converter 7.1.50 (HKLM-x32\...\{318CBD5F-D20F-463d-A1DB-CD040AE1E645}_is1) (Version: 7.1.50 - Tipard Studio)

Tipard Video Converter 6.1.18 (HKLM-x32\...\{4843A9B1-335C-4a13-8CFC-9B986AEBE1E2}_is1) (Version:  - )

Tipard Video Converter Platinum 6.2.16 (HKLM-x32\...\{F4A43B47-0518-4a39-B377-15DC62076AC0}_is1) (Version: 6.2.16 - Tipard Studio)

Tipard Video Enhancer 9.2.12 (HKLM-x32\...\{718FB78B-3AAF-46d6-B2E6-F9FB07B51A7D}_is1) (Version: 9.2.12 - Tipard Studio)

TNR Utilities version 1.0.0 (HKLM-x32\...\{DC3E4435-0D12-4D95-AB39-B7C77253AA05}_is1) (Version: 1.0.0 - TNR Technologies)

tooltips (HKLM-x32\...\{E79987F0-0E34-42CC-B8FF-6C860AEEB26A}) (Version: 6.02.0001.0001 - EASTMAN KODAK Company) Hidden

Top Any Video Converter version 3.2 (HKLM-x32\...\Top Any Video Converter_is1) (Version: 3.2 - Top Studio)

Torrent Episode Downloader (HKLM-x32\...\Torrent Episode Downloader 0.9715) (Version: 0.9715 - Roel and Joost)

Total Uninstall 5.10.1 (HKLM-x32\...\Total Uninstall 5_is1) (Version: 5.10.1 - Gavrila Martau)

Total Uninstall 6.2.0 (HKLM\...\Total Uninstall 6_is1) (Version: 6.2.0 - Gavrila Martau)

TotalAudioConverter (HKLM-x32\...\Total Audio Converter_is1) (Version:  - Softplicity, Inc.)

TotalImageConverter (HKLM-x32\...\Total Image Converter_is1) (Version: 2.5 - Softplicity, Inc.)

TransActAT (HKLM-x32\...\BB29F88B-A742-4E2C-B0F3-FFEC11E1BA06) (Version: 5.6.7.10 - TransAct Futures LLC)

Tree Notes 2.53 (HKLM-x32\...\Tree Notes_is1) (Version: 2.53 - Jiri Novotny, Dextronet)

TreePad Lite 4.3 (HKLM-x32\...\TreePadLite4) (Version:  - )

TreePad PLUS 7.5.3 (HKLM-x32\...\TreePadPLUS) (Version:  - )

TreeSize Free V3.3.2 (HKLM-x32\...\TreeSize Free_is1) (Version: 3.3.2 - JAM Software)

True Launch Bar (Giveaway of the Day) (HKLM-x32\...\{FC712CA0-A945-11d4-A594-956F6349FC18}) (Version: 5.2.0.0 - Tordex)

True Time Tracker (HKLM-x32\...\{1A414CE4-CE57-4718-A4E0-B2C33DC4D620}_is1) (Version:  - ExtraSpy Software)

TuneFab M4V Converter for PC version 1.0.1 (HKLM-x32\...\{1841EDEA-A666-499E-BC56-649C8AE7F7B4}_is1) (Version: 1.0.1 - TuneFab, Inc.)

TuneMobie Apple Music Converter version 2.2.7 (HKLM-x32\...\{750b5483-82c0-40cd-8ee5-71f5e7ec171c}_is1) (Version: 2.2.7 - TuneMobie, Inc.)

TunesKit for Windows 2.8.5.115 (HKLM-x32\...\TunesKit for Windows_is1) (Version:  - TunesKit, Inc.)

TuneUpMedic (HKLM-x32\...\TuneUpMedic) (Version:  - TuneUpMedic)

Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 1.6.0 - Tweaking.com)

Tweaking.com - Windows Repair (All in One) (HKLM-x32\...\Tweaking.com - Windows Repair (All in One)) (Version: 2.1.0 - Tweaking.com) <==== ATTENTION

Tweaking.com - Windows Repair (HKLM-x32\...\Tweaking.com - Windows Repair) (Version: 4.0.14 - Tweaking.com)

Tweeten (HKLM\...\{35BC7F0D-DCF9-46CB-B547-020D3A6D8837}_is1) (Version: 3.2.0 - Tweeten, Inc.)

TwistedBrush Pro Studio (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\TwistedBrush Pro Studio) (Version:  - )

tZirr (HKLM-x32\...\{F1A23BC3-83CC-41E7-8CD9-E67B8238639B}) (Version: 1.0.0 - Nascor Technologies Private Limited)

UAC Trust Shortcut 1.0 (HKLM\...\{4C4A1499-1381-4174-9DB5-F6DE9249D23E}) (Version: 1.0.1 - ITknowledge24.com)

UBitMenu UK (HKLM-x32\...\{C8748FFB-1713-4e95-B3DF-4F1622D96F93}_is1) (Version: 01.04 - UBit Schweiz AG)

UK's Kalender 2.4.3 (HKLM-x32\...\UK's Kalender_is1) (Version:  - Ulrich Krebs)

Ultima Steganography 1.6 (HKLM-x32\...\Ultima Steganography_is1) (Version:  - )

Ultra Resizer (HKLM-x32\...\Ultra Resizer) (Version:  - )

UltraISO Premium V9.53 (HKLM-x32\...\UltraISO_is1) (Version:  - )

uMark 3 (HKLM-x32\...\{8D54F874-E16C-4785-84E9-36209269FBB3}) (Version: 3.12 - Uconomix)

UmmyVideoDownloader 1.4.0.3 (HKLM-x32\...\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1) (Version:  - ) <==== ATTENTION

Unchecky v1.1 (HKLM-x32\...\Unchecky) (Version: 1.1 - Reason Software Company Inc.)

UnHackMe 7.76 release (HKLM-x32\...\UnHackMe_is1) (Version:  - Greatis Software, LLC.)

UnHackMe GE 9.50 release (HKLM-x32\...\UnHackMe Giveaway Edition_is1) (Version:  - Greatis Software, LLC.)

Unknown File Handler (HKLM-x32\...\UFH_is1) (Version: 2015.12.29.0 - File.org)

Unlimited Filters 1.2.2 (HKLM\...\{8B775809-D58C-4351-ACBF-4ED5231514FA}_is1) (Version: 1.2.2 - Picture Instruments)

UpdateMyDrivers (HKLM-x32\...\{CD104A82-D92A-484B-90F9-4CA044315DEC}) (Version: 7.0.0.169 - SmartTweak Software) Hidden

UpdateService (HKLM-x32\...\{E3AE96D6-E196-45B4-AF62-2B41998B9E37}) (Version: 1.0.0 - RealNetworks, Inc.) Hidden

uRex DVD Ripper Platinum (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\uRexDVDRipperPlatinum) (Version:  - uRexsoft, Inc. All Rights Reserved.)

uRex Video Converter Platinum (HKLM-x32\...\uRexVideoConverter) (Version:  - uRexsoft, Inc. All Rights Reserved.)

uRex Videomark Platinum (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\uRexWatermarkPlatinum) (Version:  - uRexSoft, Inc. All Rights Reserved.)

USB Safely Remove 5.2 (HKLM-x32\...\USB Safely Remove_is1) (Version:  - SafelyRemove.com)

USB-Ethernet Adapter Device (HKLM\...\USB-Ethernet Adapter Device) (Version:  - )

VC80CRTRedist - 8.0.50727.6195 (HKLM-x32\...\{933B4015-4618-4716-A828-5289FC03165F}) (Version: 1.2.0 - DivX, Inc) Hidden

VDownloader 4.1.1463 (HKLM\...\{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1) (Version:  - Vitzo Limited)

Ventrilo Client (HKLM-x32\...\{789289CA-F73A-4A16-A331-54D498CE069F}) (Version: 3.0.1 - Flagship Industries, Inc.)

Ventrilo Client for Windows x64 (HKLM\...\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}) (Version: 3.0.8.0 - Flagship Industries, Inc.)

Verbose Text to Speech (HKLM-x32\...\Verbose) (Version:  - NCH Software)

Vibosoft PDF Password Remover (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\Vibosoft PDF Password Remover) (Version: 2.1.10 - Vibosoft)

Video Booth (HKLM-x32\...\VideoBooth) (Version: 2.3.2.6 - )

Video Downloader (HKLM-x32\...\{8B6202FD-3790-4DD4-B343-51736F7FF4E5}) (Version: 1.2.0 - RealNetworks) Hidden

Video Magic Ultimate 6.1.1.0 (HKLM-x32\...\Video Magic Ultimate_is1) (Version:  - BlazeVideo)

Video Rotator V1.0.9 (HKLM-x32\...\{EC0FD3E2-A241-4D37-BF16-7815EC1E7A29}_is1) (Version:  - VideoRotator.com)

Video to Exe Converter registered to GiveAwayOfTheDay version 1.0.0.31 (HKLM-x32\...\{86695B09-B0BC-4504-BCF6-4CA943C4EEFE}_is1) (Version: 1.0.0.31 - PCWinSoft Software)

Video to GIF 5.3 (HKLM-x32\...\Video to GIF) (Version: 5.3 - AoaoPhoto Digital Studio.)

Video to Picture (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\VideoToPicture) (Version:  - Watermark Software. All Rights Reserved.)

Video to Picture version 5.0 (HKLM-x32\...\{3CE42A9D-F659-4FF0-87EB-A14699AB2D1C}_is1) (Version: 5.0 - watermark-software.com)

Video Watermark Maker 1.4 (HKLM-x32\...\Video Watermark Maker_is1) (Version: 1.4 - SoftOrbits)

Video Watermark Pro (HKLM-x32\...\VideoWatermarkPro) (Version:  - WonderFox Soft, Inc. All Rights Reserved.)

Video Watermark Pro (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\VideoWatermarkPro) (Version:  - WonderFox Soft, Inc. All Rights Reserved.)

VideoCompressor (HKLM-x32\...\VideoCompressor_is1) (Version: 1.1 - Abelssoft)

VideoFlick 1.0 (HKLM-x32\...\{878E1DB1-0C8F-4ffb-8C51-A2B10368F433}_is1) (Version:  - VideoFlick)

Virtual Audio Streaming 4.0 (HKLM-x32\...\{B9FDEDF1-DD77-42BD-B2BD-ABCB30655C73}_is1) (Version: 4.0 - ShiningMorning Inc.)

Virtual Magnifying Glass v3.4 (HKLM-x32\...\Virtual Magnifying Glass_is1) (Version:  - )

VirtualDub (remove only) (HKLM-x32\...\VirtualDub) (Version:  - )

Visual MP3 CD Burner 1.3 (HKLM-x32\...\Visual MP3 CD Burner_is1) (Version:  - iProgram Development)

Visual Search Pony version 7.52 (HKLM-x32\...\{58C526E3-2BAE-4933-86D0-938F547756D7}_is1) (Version: 7.52 - Visual Search Pony)

Vita Concert Grand LE (HKLM\...\{C3535B11-DF83-4FF8-923F-76835630825E}) (Version: 2.4.0.95 - MAGIX Software GmbH) Hidden

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)

VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)

Vole Edutainment (HKLM-x32\...\{600C936B-7684-42F0-9FBF-04726F3D45E2}) (Version: 3.58.7041 - Sanwhole)

Vole Magic Note (HKLM-x32\...\{925B61EB-DB5A-482E-9620-F1B67BC88393}) (Version: 3.58.7041 - Sanwhole)

Vole Media CHM (HKLM-x32\...\{023ACD35-5046-418A-9C75-7D83BEA34AC3}) (Version: 3.11.40108 - Sanwhole)

Vole Windows Expedition (HKLM-x32\...\{10A7315E-3376-48F3-A681-8DE609CB47E2}) (Version: 3.58.7052 - Sanwhole)

VPRINTOL (HKLM-x32\...\{999D43F4-9709-4887-9B1A-83EBB15A8370}) (Version: 6.02.0001.0001 - EASTMAN KODAK Company) Hidden

VSDC Free Video Editor version 5.7.7.702 (HKLM-x32\...\VSDC Free Video Editor_is1) (Version: 5.7.7.702 - Flash-Integro LLC)

VST Bridge 1.1 (HKLM-x32\...\VST Bridge_is1) (Version:  - )

VueMinder Calendar Pro (HKLM-x32\...\{7D5EB2C9-D207-44DE-9AAA-A3DB8D91067D}) (Version: 8.0.1100 - VueSoft)

VueScan x64 (HKLM\...\VueScan x64) (Version:  - )

Vulkan Run Time Libraries 1.0.17.0 (HKLM\...\VulkanRT1.0.17.0) (Version: 1.0.17.0 - LunarG, Inc.) Hidden

Vulkan Run Time Libraries 1.0.54.0 (HKLM\...\VulkanRT1.0.54.0) (Version: 1.0.54.0 - LunarG, Inc.) Hidden

Vulkan Run Time Libraries 1.0.54.0 (HKLM\...\VulkanRT1.0.54.0-2) (Version: 1.0.54.0 - LunarG, Inc.) Hidden

Vulkan Run Time Libraries 1.0.54.0 (HKLM\...\VulkanRT1.0.54.0-3) (Version: 1.0.54.0 - LunarG, Inc.) Hidden

Vulkan Run Time Libraries 1.0.54.0 (HKLM\...\VulkanRT1.0.54.0-4) (Version: 1.0.54.0 - LunarG, Inc.) Hidden

VX Search Pro 3.4.38 (HKLM-x32\...\VX Search Pro) (Version: 3.4.38 - Flexense Computing Systems Ltd.)

Watermark Express (HKLM-x32\...\{FFE95BC0-A436-453A-9889-8BBD41EEEABC}) (Version: 1.0 - PixelApp Studio)

Watermark Software (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\WatermarkSoftware) (Version:  - Watermark Software. All Rights Reserved.)

Watermark Software 8.0 (HKLM-x32\...\Watermark Software) (Version: 8.0 - watermark-software.com)

WaveMax Sound Editor 5.0.1 (HKLM-x32\...\WaveMax Sound Editor_is1) (Version:  - NITBits Co., Ltd.)

WavePad Sound Editor (HKLM-x32\...\WavePad) (Version:  - NCH Software)

WD Diagnostics (HKLM-x32\...\{0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B}) (Version: 1.07.0000 - Western Digital Technologies)

Web Scraper V1.8 (HKLM-x32\...\Web Scraper V1.8) (Version:  - )

WebAnimator Go version 2.3.7 (HKLM-x32\...\{71002165-A4E7-4526-ACFC-D4720A342781}_is1) (Version: 2.3.7 - soft-evolution GmbH & Co. KG)

Web-Based Email Tools (HKLM-x32\...\{C5CFF65B-1E1E-489E-86E2-C2A3AF4C88D9}) (Version: 1.0.15 - Starfield)

WebFldrs XP (HKLM-x32\...\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}) (Version: 9.50.7523 - Microsoft Corporation) Hidden

WebM Project Directshow Filters (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\webmdshow) (Version: 1.0.4.1 - WebM Project)

WhoCrashed 5.54 (HKLM\...\WhoCrashed_is1) (Version:  - Resplendence Software Projects Sp.)

WinCatalog 2014 (HKLM-x32\...\{94145C48-3CDB-42FA-A8F4-8DAD34A564C5}_is1) (Version: 11 - WinCatalog.com)

WinDjView 1.0.3 (HKLM-x32\...\WinDjView) (Version: 1.0.3 - Andrew Zhezherun)

Windows 7 Upgrade Advisor (HKLM-x32\...\{AB05F2C8-F608-403b-95E1-FD8ADFACD31E}) (Version: 2.0.5000.0 - Microsoft Corporation)

Windows Automated Installation Kit (HKLM\...\{31E8F586-4EF7-4500-844D-BA8756474FF1}) (Version: 2.0.0.0 - Microsoft Corporation)

Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140744 - Microsoft Corporation)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

Windows Media Format 11 runtime (HKLM\...\Windows Media Format Runtime) (Version:  - )

Windows Media Player 11 (HKLM\...\Windows Media Player) (Version:  - )

Windows Resource Kit Tools - SubInAcl.exe (HKLM-x32\...\{D3EE034D-5B92-4A55-AA02-2E6D0A6A96EE}) (Version: 5.2.3790.1164 - Microsoft Corporation)

Windscribe (HKLM-x32\...\{fa690e90-ddb0-4f0c-b3f1-136c084e5fc7}_is1) (Version: 1.80 Build 33 - Windscribe Limited)

Windsor Direct 4.00 (HKLM-x32\...\{3E5CBADD-2E51-47C1-BBE2-B802DB6DA56A}) (Version: 4.00 - MetaQuotes Software Corp.)

WinExt 2.1 (HKLM-x32\...\WinExt_is1) (Version:  - TriSun Software Limited)

WinISO (HKLM-x32\...\WinISO) (Version: 6.3.0.4905 - WinISO Computing Inc.)

WinOrganizer (HKLM-x32\...\WinOrganizer) (Version: 4.4 (Build 1900) - )

WinPcap 4.1.1 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.1753 - CACE Technologies)

WinPDFEditor V3 (HKLM-x32\...\WinPDFEditor_is1) (Version:  - hxxp://www.WinPDFEditor.com)

WinRAR 4.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version:  - )

WinSettings (HKLM-x32\...\WinSettings) (Version: 8.1 - FileStream, Inc.)

WinToHDD version 2.5 (HKLM\...\WinToHDD_is1) (Version: 2.5 - Hasleo Software.)

WinUtilities Professional Edition 11.45 (HKLM-x32\...\{FC274982-5AAD-4C20-848D-4424A5043009}_is1) (Version: 11.45 - YL Computing, Inc)

WinX Blu-ray Decrypter 3.0.0 (HKLM-x32\...\WinX Blu-ray Decrypter_is1) (Version:  - Digiarty)

WinX DVD Copy Pro 3.6.5 (HKLM\...\WinX DVD Copy Pro_is1) (Version:  - Digiarty Software,Inc.)

WinX DVD Ripper Platinum 8.7.0 (HKLM-x32\...\WinX DVD Ripper Platinum_is1) (Version:  - Digiarty Software, Inc.)

WinX DVD Ripper Platinum Streamer Edition 6.8.2 (HKLM-x32\...\WinX DVD Ripper Platinum Streamer Edition_is1) (Version:  - Digiarty Software, Inc.)

WinX HD Video Converter Deluxe 5.6.0 (HKLM-x32\...\WinX HD Video Converter Deluxe_is1) (Version:  - Digiarty Software, Inc.)

WinX MediaTrans (HKLM-x32\...\WinX MediaTrans) (Version: 3.8 - Digiarty Software, Inc.)

WIRELESS (HKLM-x32\...\{F9593CFB-D836-49BC-BFF1-0E669A411D9F}) (Version: 6.02.0001.0001 - EASTMAN KODAK Company) Hidden

Wise Care 365 3.86 (HKLM-x32\...\Wise Care 365_is1) (Version: 3.86 - WiseCleaner.com, Inc.)

Wise Care 365 version 2.16 (HKLM-x32\...\{E864A1C8-EEE1-47D0-A7F8-00CC86D26D5E}_is1) (Version: 2.16 - WiseCleaner.com, Inc.)

Wise PC Engineer 6.3.3 (HKLM-x32\...\Wise PC Engineer_is1) (Version:  - ZhiQing Soft, Inc.)

Wise Video Converter 1.31 (HKLM-x32\...\Wise Video Converter_is1) (Version: 1.31 - WiseCleaner.com, Inc.)

WonderFox DVD Ripper (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\WonderFoxDVDRipper) (Version:  - WonderFox Soft, Inc. All Rights Reserved.)

WonderFox DVD Ripper Pro 9.7 (HKLM-x32\...\WonderFox DVD Ripper Pro) (Version: 9.7 - WonderFox Soft, Inc.)

WonderFox DVD Video Converter (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\WonderFoxDVDVideoConverter) (Version:  - WonderFox Soft, Inc. All Rights Reserved.)

WonderFox DVD Video Converter version 7.5 (HKLM-x32\...\{278D58D4-2B08-4ABF-957C-F0A2F8A1FBB7}_is1) (Version: 7.5 - WonderFox Soft, Inc)

WonderFox Video Watermark (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\WonderFoxVideoWatermark) (Version:  - WonderFox Soft, Inc. All Rights Reserved.)

Wondershare AllMyTube(Build 2.2.0.6) (HKLM-x32\...\Wondershare AllMyTube_is1) (Version: 2.2.0.6 - Wondershare Software Co.,Ltd.)

Wondershare DVD Creator(Build 2.6.5) (HKLM-x32\...\Wondershare DVD Creator_is1) (Version:  - Wondershare)

Wondershare DVD Slideshow Builder Deluxe(Build 6.1.14.0) (HKLM-x32\...\Wondershare DVD Slideshow Builder Deluxe_is1) (Version: 6.1.14.0 - WonderShare Software Co.,Ltd.)

Wondershare DVD Slideshow Builder Standard(Build 6.1.11.67) (HKLM-x32\...\Wondershare DVD Slideshow Builder Standard_is1) (Version: 6.1.11.67 - WonderShare Software Co.,Ltd.)

Wondershare Filmora(Build 6.0.3) (HKLM-x32\...\Wondershare Filmora_is1) (Version:  - Wondershare Software)

Wondershare Flash Gallery Factory Deluxe 5.2.1.15 (HKLM-x32\...\Wondershare Flash Gallery Factory Deluxe_is1) (Version: 5.2.1.15 - Wondershare Software Co.,Ltd.)

Wondershare MirrorGo(Version 1.3.1) (HKLM-x32\...\{EE843B49-D9BC-4A9E-A8A7-B9F14C0381C7}_is1) (Version: 1.3.1 - Wondershare)

Wondershare PDF Converter (Build 4.0.1) (HKLM-x32\...\{E16C056F-CA75-4D7C-AE79-5813DE0F03F1}_is1) (Version: 4.0.1 - Wondershare Software)

Wondershare PDF Converter (Build 4.0.5) (HKLM-x32\...\{A888A8D1-ACCB-4EBE-AAA8-903D2B8FB6A4}_is1) (Version: 4.0.5 - Wondershare Software)

Wondershare Photo Collage Studio 4.2.16.5 (HKLM-x32\...\Wondershare Photo Collage Studio GOTD Edition_is1) (Version: 4.2.16.5 - Wondershare Software Co.,Ltd.)

Wondershare Photo Recovery (build 3.0.1) (HKLM-x32\...\Wondershare Photo Recovery_is1) (Version:  - Wondershare Software Co., Ltd.)

Wondershare Player(Build 1.6.0) (HKLM-x32\...\Wondershare Player_is1) (Version: 1.6.0.3 - Wondershare)

Wondershare Video Converter Ultimate(Build 8.4.0.0) (HKLM-x32\...\Wondershare Video Converter Ultimate_is1) (Version: 8.4.0.0 - Wondershare Software)

Wondershare Video Studio Express(Build 1.2.0.5) (HKLM-x32\...\Wondershare Video Studio Express_is1) (Version:  - Wondershare Software)

Word to FlippingBook (HKLM-x32\...\Word to FlippingBook_is1) (Version:  - FlippingBook Solution)

WowTron PDF Page Organizer 1.1.1 (HKLM-x32\...\WowTron PDF Page Organizer 1.1.1) (Version: 1.1.1 - WowTron Software Co. Ltd.)

WowTron PDF Restriction Remover (HKLM-x32\...\{7D68F994-CCD6-4C09-8127-E3E1A0333DA0}) (Version: 1.1.1 - WowTron Software Co. Ltd.)

Xara Photo & Graphic Designer 9 (HKLM\...\{8F248F78-37CD-4909-935B-986A455A48FF}) (Version: 9.2.7.30974 - Xara Group Ltd) Hidden

Xara Photo & Graphic Designer 9 (HKLM-x32\...\MX.{8F248F78-37CD-4909-935B-986A455A48FF}) (Version: 9.2.7.30974 - Xara Group Ltd)

Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)

X-Lite 2.0 release 1103m (HKLM-x32\...\X-Lite_is1) (Version:  - Xten Networks, Inc.)

XML Paper Specification Shared Components Pack 1.0 (HKLM\...\XpsEPSC) (Version:  - Microsoft Corporation) Hidden

XUS Desktop 1.1.21 (HKLM-x32\...\XUS Desktop GOTD Edition_is1) (Version: 1.1.21 - EDesksoft)

Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)

XYplorer 15.90 (HKLM-x32\...\XYplorer) (Version: 15.90 - Donald Lessau)

Yahoo! Messenger (HKLM-x32\...\Yahoo! Messenger) (Version:  - )

Your Uninstaller! 7 (HKLM-x32\...\YU2010_is1) (Version: 7.4.2011.12 - URSoft, Inc.)

YouTube Downloader 2 (HKLM-x32\...\{F23AC816-C189-493E-B077-6126E8D065B0}_is1) (Version:  - MediaVigor Software)

Youtube Downloader HD v. 2.9.9.30 (HKLM-x32\...\Youtube Downloader HD_is1) (Version:  - YoutubeDownloaderHD.com)

YouTube Downloader Suite V3.1.7 (HKLM-x32\...\{3FF2F54D-FA3A-406F-9F9E-6CDD95B9A1A9}_is1) (Version: 3.1.7 - Apowersoft)

Youtube Music Downloader 7.9 (HKLM-x32\...\{00AA23A3-F4F7-4805-AA6B-4C2A74F3AB2B}_is1) (Version: 7.9 - YoutubeMusicDownloader.us LLC.)

YouTube to MP3 High Quality Downloader V4.0.2 (HKLM-x32\...\YouTube to MP3 High Quality Downloader_is1) (Version:  - YouTube to MP3 High Quality Downloader)

YouTubeGet 5.9.1 (HKLM-x32\...\YouTubeGet_is1) (Version:  - YouTubeGet Developer Team)

Youtuber (HKLM-x32\...\Youtuber) (Version:  - )

YoWindow (HKLM-x32\...\yowindow) (Version: 3 - RepkaSoft)

Zebra-Media Surveillance System version 1.3 (HKLM-x32\...\Zebra-Media Surveillance System_is1) (Version: 1.3 - Zebra-Media Software)

Zemana AntiMalware (HKLM-x32\...\{8F0CD7D1-42F3-4195-95CD-833578D45057}_is1) (Version: 2.74.0.150 - Zemana Ltd.)

ZenWriter (HKLM-x32\...\{52B1B817-B6FF-410D-878E-0119372986FA}_is1) (Version: 1.04 - Beenokle)

Zoner Photo Studio 13 (HKLM-x32\...\ZonerPhotoStudio13_EN_is1) (Version: 13.0.1.7 - ZONER software)

Zoner Photo Studio 14 (HKLM\...\ZonerPhotoStudio14_EN_is1) (Version: 14.0.1.7 - ZONER software)

Zoner Photo Studio 15 (HKLM\...\ZonerPhotoStudio15_EN_is1) (Version: 15.0.1.7 - ZONER software)

Zoner Photo Studio 16 (HKLM\...\ZonerPhotoStudio16_EN_is1) (Version:  - ZONER software)

Zoolz2 (HKLM-x32\...\Zoolz2) (Version: 2.0 - Genie9)

Zoom (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\ZoomUMX) (Version: 3.5 - Zoom Video Communications, Inc.)

Zoom Player (remove only) (HKLM-x32\...\ZoomPlayer) (Version: 10.0.0 - Inmatrix LTD)

ZoomInfo Contact Contributor (HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\ZoomInfo Contact Contributor) (Version: 45 - )

Zortam Mp3 Media Studio 19.25 (HKLM-x32\...\Zortam Mp3 Media Studio_is1) (Version:  - Zortam)

ZTreeWin (remove only) (HKLM-x32\...\ZTreeWin) (Version:  - )

 

THIS LOG CONTINUED ON NEXT POST

[Safe]

CONTINUATION OF LOG FROM LAST POST:

 

==================== Custom CLSID (Whitelisted): ==========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{0990CC1E-EC15-3ABE-A951-D1823826B652}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{0A4BC6CB-0BC9-3231-BF8B-C6745E4DD9F6}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{0CFC6643-69E9-34B9-9C05-5D15FFD2F5B7}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{11056249-C369-49CA-B0E8-326B5C32AD3C}\InprocServer32 -> C:\Program Files (x86)\Kryptel\Shx64.dll (Inv Softworks LLC)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{11056249-C369-49CA-B0E8-326B5C32AD3D}\InprocServer32 -> C:\Program Files (x86)\Silver Key\SkShx64.dll (Inv Softworks LLC)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{11056249-F58F-4AC8-9FBF-75990E973B6C}\InprocServer32 -> C:\Program Files (x86)\Kryptel\Shx64.dll (Inv Softworks LLC)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{11056249-F58F-4AC8-9FBF-75990E973B6D}\InprocServer32 -> C:\Program Files (x86)\Silver Key\SkShx64.dll (Inv Softworks LLC)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{11056249-F7FB-49E6-9BBD-434D74005CF5}\InprocServer32 -> C:\Program Files (x86)\Kryptel\Shx64.dll (Inv Softworks LLC)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{119CE57E-9F65-3ECD-9652-3A899D5256E5}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{158D5911-C43F-35CC-A33E-DC1A8021CCEF}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{1EF21503-5C5C-31D5-B4D0-68D09A9409F8}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{216D7037-9377-33ED-B0BE-1145DCAE4994}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{21FE1E76-CAC8-36C9-B249-9064D8E54609}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{221DCCA9-34FE-3860-8212-DE2121A29363}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{29F29067-19FE-3764-81EE-3AC96CA5BBB8}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{2F22A817-D89A-35EA-A001-7766C522675C}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{355B1AF8-B95A-3C54-B828-2D434BC7F519}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{3E896C32-F77C-3EFB-985E-1A6FC02268BA}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{455FD43F-0E1A-3362-9162-29A90EB67D48}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{4DBA0474-0CE7-39DD-9B19-212CBCBFE58C}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{50C65189-1B04-33FC-AB83-C8E0858980C6}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{54C70910-461F-32A3-AD7B-2DFC9B6FDE9C}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{58911049-20B5-3139-93EA-B681338508BB}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{65F66485-FAE7-34DF-9460-55CD501458D7}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{66E5A3F9-5A62-3289-9769-B204F4A4C4FB}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{6B53B0C7-2A36-3CB2-A22A-8098A4855794}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{6D0B5247-C8F3-3842-AF56-815E0352FEDA}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{6E4B0BF7-28BA-3E63-B5A7-B44FC1B8C076}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{744D9F12-DACE-3AEE-94C1-9591F969D1D3}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{758DBEE5-7971-3F6A-9F5A-7695A19A1FBC}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{7EF1427C-1576-3893-A135-DC830E8230AE}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{816D683E-A76F-3FF9-AF71-F1B35A86BEDD}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{83303EB4-01FE-364A-8179-6CF6D1EF9205}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{834341DC-D59D-34B7-BD4C-584BAF5F5BE5}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Program Files (x86)\GoToMeeting\7759\G2MOutlookAddin64.dll (LogMeIn, Inc.)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{8A5DDD94-1929-3D01-B927-70610EA75B46}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{8D6A5693-C203-3C49-BCBB-455A7EE5ED09}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{95222FCC-5F15-3903-9DAC-BE6A0B6C7780}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{9560CA87-37D3-43DF-A35D-8627811E4A7B}\InprocServer32 -> C:\Windows\system32\kernel32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{9708FDC5-23D7-3CAC-9067-E0B75B6230BB}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{9C3D8CC3-9922-312C-AEB1-409381274F48}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{A0749CAE-E21E-3B8C-BFD9-C2D1C038E75A}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{A07A3F5B-5DDA-33F4-9B9F-2093CEE95A18}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{A80A2214-E3BD-3C37-A26B-5018F65AEA21}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{B06674B1-D948-302A-B5B7-D38BFDEEFB17}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{B07265AB-1DE6-3F2E-9FAF-691D3F4110C6}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{B4C6A1D8-AFD6-3A80-B1BD-E966C74EA3AB}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{C07417BF-A849-31A4-A152-43A5FCBA869B}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{C1142845-1C0C-3875-8114-28DE6950E3F6}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{C12323F9-0989-328D-BD35-C8FE40702BFE}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{C2002A98-34DD-35BB-9634-FA06BA8B5306}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{C43B9BAA-1385-EC72-3B7A-6445C04B012F}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{D2053133-FB5D-4F1F-B0D0-A625EE6B567E}\InprocServer32 -> C:\Users\Morgan Pierce Parker\AppData\Roaming\Nascor Technologies Private Limited\tZirr\bin\adxloader64.dll ()

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{D455D299-3ACF-3655-AD54-A3AD903C3913}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{D5839061-0ACC-35AC-9EAB-C82F4245194C}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{D821E61E-1ED2-3DF7-A3C0-71BD317D68EE}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{D8C0798E-6FEC-36E6-8A78-E788228303AB}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{DA60723F-7F5D-30C7-865E-E641031F82D2}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{DA662925-1ACA-32E4-BADA-B855AC88E17E}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{DF23F430-4697-30A7-8F3E-4CDFE4DA99EF}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{E090BCF4-70E1-39D0-B47F-56664178D51D}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{E1AF2E7D-C3C1-39FD-AE9F-E99ED9910F30}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{E28E3C0A-C722-319E-AAF0-04D09AA67171}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{E46B220D-0BDB-39E5-8E02-087D13E037B5}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{E6915B6E-8846-3F35-839F-BD7C8DC794FB}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{E8471C78-164B-3243-92A8-C05DD7ECA47D}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{EC510A1C-FBF4-3D2C-BF59-860A0237A3C6}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{FB6D33D8-28E7-3BC8-A138-732A404586A9}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{FBD254B1-E2DF-EEE7-0EBC-A361A4423FF8}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006_Classes\CLSID\{FCBFAE27-3333-3591-A9DC-582AAD558395}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

ShellIconOverlayIdentifiers: [   ""TabblesOverlayHandler] -> {87dba6b9-6669-340d-94ee-97e0039cda8f} => C:\Windows\system32\mscoree.dll [2010-11-20] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [EldosIconOverlay-cbfs5] -> {3C99CEFA-E695-48B5-9754-73A6C502EF3D} => C:\Windows\system32\cbfsMntNtf5.dll [2015-04-24] (EldoS Corporation)

ShellIconOverlayIdentifiers: [OODIIcon] -> {14A94384-BBED-47ed-86C0-6BF63FD892D0} => C:\Program Files\OO Software\DiskImage\oodishi.dll [2018-02-09] (O&O Software GmbH)

ShellIconOverlayIdentifiers: [__SafeBox1] -> {152C96EB-288E-4EDC-B7C6-D21F8250ADF3} =>  -> No File

ShellIconOverlayIdentifiers: [__SafeBox2] -> {342DAA0B-D796-460D-8566-901E08A1CCAD} =>  -> No File

ShellIconOverlayIdentifiers: [__SafeBox3] -> {57595DAE-1AE1-4D97-A49E-67CBB53B52DF} =>  -> No File

ShellIconOverlayIdentifiers: [__SafeBox4] -> {33816773-98AE-4723-ADE0-EBE54C8B5A67} =>  -> No File

ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [EldosIconOverlay-cbfs5] -> {3C99CEFA-E695-48B5-9754-73A6C502EF3D} => C:\Windows\system32\cbfsMntNtf5.dll [2015-04-24] (EldoS Corporation)

ContextMenuHandlers1: [2.0 Zemana AntiMalware] -> {6ABB1C11-E261-4CEA-BBB5-3836225689DD} => C:\Program Files (x86)\Zemana AntiMalware\ZAMShellExt64.dll [2017-11-23] ()

ContextMenuHandlers1-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => c:\Program Files (x86)\7-Zip\7-zip.dll [2011-04-11] (Igor Pavlov)

ContextMenuHandlers1-x32: [AweFileSyncShlMenu] -> {ABE7BF64-6790-4873-8704-606E622B3E8D} => C:\Program Files (x86)\Magoshare\AweEraser\AweExtMenux64.dll [2017-11-12] (Magoshare)

ContextMenuHandlers1-x32: [BDFVCtxMenuExt] -> {9E96C1F5-0EFA-4348-9460-15D6802C70AA} =>  -> No File

ContextMenuHandlers1-x32: [BytescoutSpreadsheetTools] -> {9EAE3807-3C24-4245-AF42-44AEF31CF21D} => C:\Program Files\ByteScout Spreadsheet Tools\Bytescout.SpreadsheetTools.ShellExt.dll [2017-12-07] (Bytescout Software)

ContextMenuHandlers1-x32-x32: [ComPresto.ContextMenu] -> {9785BFAA-1BAA-444A-818B-DDBC81F8E87F} => C:\Program Files\Vazari\ComPresto\CmprSL.dll [2004-01-10] (Vazari Software)

ContextMenuHandlers1-x32-x32-x32: [Cover Designer] -> {73FCA462-9BD5-4065-A73F-A8E5F6904EF7} => C:\Program Files (x86)\Nero\Nero 9\Nero 9\Nero CoverDesigner\CoverEdExtension.dll [2008-09-19] (Nero AG)

ContextMenuHandlers1-x32-x32-x32: [DefenderContextMenuExt] -> {5EE8E9E6-2853-4D28-B2DE-6529EDA0A294} => C:\Program Files\Shadow Defender\ShellExt.dll [2015-07-27] (SHADOWDEFENDER.COM)

ContextMenuHandlers1-x32-x32-x32: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ContextMenuHandlers1-x32-x32-x32: [EUFileSyncShlMenu] -> {9BE7BF64-6790-4873-8704-606E622B3E8C} => C:\Program Files (x86)\EaseUS\EaseUS EverySync\bin\EUSyncExtMenux64.dll [2015-02-05] (CHENGDU Yiwo Tech Development Co., Ltd.)

ContextMenuHandlers1-x32-x32-x32: [File Marker] -> {B70B7A24-5180-4092-B3BA-6266F914C053} => C:\Program Files (x86)\FileMarker.NET\FileMarkerShlExt64.dll [2017-05-17] (ArcticLine Software)

ContextMenuHandlers1-x32-x32-x32-x32: [FYZip] -> {D28EDC94-5193-4CA3-ABA5-4556E661F07D} => C:\Program Files (x86)\FYZip\FYzip.dll [2011-02-25] (TightRope Interactive)

ContextMenuHandlers1-x32-x32-x32-x32-x32: [Gili FileLock Pro] -> {58264032-9730-4ab3-BEA2-A6CE3EEF6080} => C:\Program Files (x86)\idoo\File Encryption\GiliFileshell.dll [2011-12-13] ()

ContextMenuHandlers1-x32-x32-x32-x32-x32: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 4\x64\ContextHandler.dll [2014-01-06] (Glarysoft Ltd)

ContextMenuHandlers1-x32-x32-x32-x32-x32: [Glarysoft MalwareHunter] -> {EA847F47-97F1-4D78-AB99-C63CA1C327F0} => C:\Program Files (x86)\Glarysoft\Malware Hunter\x64\MHContextHandlerx64.dll [2016-06-23] (Glarysoft Ltd)

ContextMenuHandlers1-x32-x32-x32-x32-x32-x32: [HippoEDIT] -> {B22D427A-8423-4ccb-83E9-58ED62868763} => C:\Program Files (x86)\HippoEDIT\ShellReg.dll [2015-01-26] (HippoEDIT.com)

ContextMenuHandlers1-x32-x32-x32-x32-x32-x32: [ISOWINDOWMENU] -> {3A05F453-60CA-4311-9DA3-FE348CB76056} => C:\Program Files\Digiarty\WinX_DVD_Copy_Pro\IsoWindowMenu64.dll [2013-11-19] (TODO: <Company name>)

ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32: [MagicISO] -> {DB85C504-C730-49DD-BEC1-7B39C6103B7A} => C:\Program Files (x86)\MagicISO\misosh.dll [2008-05-22] (MagicISO, Inc.)

ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32: [MyPhoneExplorer] -> {A372C6DF-7A85-41B1-B3B0-D1E24073DCBF} => C:\Program Files (x86)\MyPhoneExplorer\DLL\ShellMgr.dll [2010-03-30] (F.J. Wechselberger)

ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [PCFiles] -> {1d102f1a-463b-41cc-a26e-56ff48f9850a} => C:\Windows\system32\mscoree.dll [2010-11-20] (Microsoft Corporation)

ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [PDFArchitectExtension] -> {DBDB3433-0E01-40CE-A026-D9F54FAC3CA9} => c:\Program Files (x86)\PDF Architect\ContextMenuExt.dll [2013-04-08] (pdfforge GmbH)

ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [Picajet Organizer] -> {C916D440-D489-4A79-B306-5FDC1E7932C0} => C:\Program Files (x86)\PicaJet\PJExt.dll [2013-01-16] ()

ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [ReaConverter7_std] -> {0C83C06D-41F5-4666-B1C2-0923EA75EB10} => C:\Program Files (x86)\reaConverter 7 Standard\newcontext64.dll [2015-06-19] ()

ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [ShellMenuObj] -> {3f6e99b1-5620-11e0-8b43-005056c00008} => C:\Program Files\Common Files\SoftTech InterCorp\Extension\stshellextension64.dll [2012-10-30] (SoftTech InterCorp)

ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files\EASEUS\Todo Backup\bin\x64\ImageSh.dll [2017-09-04] (CHENGDU YIWO Tech Development Co.,Ltd)

ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [TabblesContextMenu] -> {6fd80da4-7ae1-3d7b-b1f9-a566df137f0f} => C:\Windows\system32\mscoree.dll [2010-11-20] (Microsoft Corporation)

ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [TurboBrowser] -> {CDDF1652-9770-4381-8A4B-B935CA4467C5} => C:\Program Files (x86)\FileStream\Turbo Browser\tbext.dll [2012-02-09] (FileStream, Inc.®)

ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [VDownloader] -> {911ef3a1-1010-4fd4-8556-2310201d6e46} => C:\Windows\system32\mscoree.dll [2010-11-20] (Microsoft Corporation)

ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [WondershareVideoConverterFileOpreation] -> {FEB746CA-95C2-485F-B386-C30D4E56D22E} => C:\Windows\SysWOW64\WSCM64.dll [2015-02-27] ()

ContextMenuHandlers1-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32-x32: [Zeon.ShellExt] -> {B8E8494C-9300-48AC-BD8E-EDED185E5A04} =>  -> No File

ContextMenuHandlers2: [.TagTuner] -> {08073B06-A465-413A-BC71-085CEE78EB6D} => C:\Program Files (x86)\TagTuner\TagTuner64.dll [2011-11-28] ()

ContextMenuHandlers2: [DefenderContextMenuExt] -> {5EE8E9E6-2853-4D28-B2DE-6529EDA0A294} => C:\Program Files\Shadow Defender\ShellExt.dll [2015-07-27] (SHADOWDEFENDER.COM)

ContextMenuHandlers2: [Genie-Soft Timeline Backup Context Menu Extension] -> {D821600B-0B5D-4D7E-B1CC-034C652E8288} => C:\Program Files\Genie9\Genie Timeline\GSTimelineContextMenu.gtl [2012-09-10] (Genie9)

ContextMenuHandlers2: [Genie9 Zoolz Context Menu Extension] -> {88DE42CC-760E-4BF4-B305-0B0B9374A7E3} => C:\Program Files\Genie9\Zoolz2\ZoolzContextMenu.dll [2013-01-15] (Genie9)

ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 4\x64\ContextHandler.dll [2014-01-06] (Glarysoft Ltd)

ContextMenuHandlers2: [Glarysoft MalwareHunter] -> {EA847F47-97F1-4D78-AB99-C63CA1C327F0} => C:\Program Files (x86)\Glarysoft\Malware Hunter\x64\MHContextHandlerx64.dll [2016-06-23] (Glarysoft Ltd)

ContextMenuHandlers2: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2012-01-16] (Florian Heidenreich)

ContextMenuHandlers2-x32: [OODIDismount] -> {BF5F9978-5B95-4F2E-BB19-5D95234187EE} => C:\Program Files\OO Software\DiskImage\oodishd.dll [2018-02-09] (O&O Software GmbH)

ContextMenuHandlers2-x32-x32: [Picajet Organizer] -> {C916D440-D489-4A79-B306-5FDC1E7932C0} => C:\Program Files (x86)\PicaJet\PJExt.dll [2013-01-16] ()

ContextMenuHandlers2-x32-x32: [PuranDefrag] -> {E23C9C4A-0F55-40e2-A47F-93DCB54DF04D} => C:\Windows\system32\PuranDefrag.dll [2013-08-15] (Puran Software)

ContextMenuHandlers2-x32-x32: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files\EASEUS\Todo Backup\bin\x64\ImageSh.dll [2017-09-04] (CHENGDU YIWO Tech Development Co.,Ltd)

ContextMenuHandlers2-x32-x32: [SteganosShellExtension] -> {FAE0A3E0-3010-41BA-9DDC-A631394F047F} => C:\Program Files (x86)\Steganos Privacy Suite 15\ShellExtension.dll [2014-07-29] ()

ContextMenuHandlers2-x32-x32: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2009-10-22] (EZB Systems, Inc.)

ContextMenuHandlers2-x32-x32-x32: [~Bamboo] -> {53EF4C11-2947-445E-BDBD-7B077BB38CCA} => C:\Program Files (x86)\Bamboo File Sync and Backup\BambooSH.dll [2011-02-26] (Haxar Limited)

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-03-03] (Malwarebytes)

ContextMenuHandlers3: [SteganosShellExtension] -> {FAE0A3E0-3010-41BA-9DDC-A631394F047F} => C:\Program Files (x86)\Steganos Privacy Suite 15\ShellExtension.dll [2014-07-29] ()

ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => c:\program files (x86)\real\realplayer\RPDS\Bin64\rpcontextmenu.dll [2015-09-21] (RealNetworks, Inc.)

ContextMenuHandlers4-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => c:\Program Files (x86)\7-Zip\7-zip.dll [2011-04-11] (Igor Pavlov)

ContextMenuHandlers4-x32: [AweFileSyncShlMenu] -> {ABE7BF64-6790-4873-8704-606E622B3E8D} => C:\Program Files (x86)\Magoshare\AweEraser\AweExtMenux64.dll [2017-11-12] (Magoshare)

ContextMenuHandlers4-x32: [BDFVCtxMenuExt] -> {9E96C1F5-0EFA-4348-9460-15D6802C70AA} =>  -> No File

ContextMenuHandlers4-x32: [DefenderContextMenuExt] -> {5EE8E9E6-2853-4D28-B2DE-6529EDA0A294} => C:\Program Files\Shadow Defender\ShellExt.dll [2015-07-27] (SHADOWDEFENDER.COM)

ContextMenuHandlers4-x32: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ContextMenuHandlers4-x32: [EUFileSyncShlMenu] -> {9BE7BF64-6790-4873-8704-606E622B3E8C} => C:\Program Files (x86)\EaseUS\EaseUS EverySync\bin\EUSyncExtMenux64.dll [2015-02-05] (CHENGDU Yiwo Tech Development Co., Ltd.)

ContextMenuHandlers4-x32-x32: [FYZip] -> {D28EDC94-5193-4CA3-ABA5-4556E661F07D} => C:\Program Files (x86)\FYZip\FYzip.dll [2011-02-25] (TightRope Interactive)

ContextMenuHandlers4-x32-x32-x32: [MagicISO] -> {DB85C504-C730-49DD-BEC1-7B39C6103B7A} => C:\Program Files (x86)\MagicISO\misosh.dll [2008-05-22] (MagicISO, Inc.)

ContextMenuHandlers4-x32-x32-x32: [ReaConverter7_std] -> {0C83C06D-41F5-4666-B1C2-0923EA75EB10} => C:\Program Files (x86)\reaConverter 7 Standard\newcontext64.dll [2015-06-19] ()

ContextMenuHandlers4-x32-x32-x32: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files\EASEUS\Todo Backup\bin\x64\ImageSh.dll [2017-09-04] (CHENGDU YIWO Tech Development Co.,Ltd)

ContextMenuHandlers4-x32-x32-x32: [TabblesContextMenu] -> {6fd80da4-7ae1-3d7b-b1f9-a566df137f0f} => C:\Windows\system32\mscoree.dll [2010-11-20] (Microsoft Corporation)

ContextMenuHandlers4-x32-x32-x32-x32: [TurboBrowser] -> {CDDF1652-9770-4381-8A4B-B935CA4467C5} => C:\Program Files (x86)\FileStream\Turbo Browser\tbext.dll [2012-02-09] (FileStream, Inc.®)

ContextMenuHandlers4-x32-x32-x32-x32: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2009-10-22] (EZB Systems, Inc.)

ContextMenuHandlers4-x32-x32-x32-x32: [ZPShellExt] -> {ABE00001-0123-ABED-1248-0248ADFA1909} => C:\Program Files (x86)\Zoom Player\zpshlext64.dll [2008-08-05] ()

ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2017-12-01] (Advanced Micro Devices, Inc.)

ContextMenuHandlers5: [AweFileSyncShlMenu] -> {ABE7BF64-6790-4873-8704-606E622B3E8D} => C:\Program Files (x86)\Magoshare\AweEraser\AweExtMenux64.dll [2017-11-12] (Magoshare)

ContextMenuHandlers5: [BDFVCtxMenuExt] -> {9E96C1F5-0EFA-4348-9460-15D6802C70AA} =>  -> No File

ContextMenuHandlers5: [DeskMenu] -> {7E74422F-2393-11D4-98E0-444553540000} => C:\Program Files (x86)\Desktop Restore\dkticnsr.dll [2010-11-12] (Jamie O'Connell)

ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-02-26] (Dropbox, Inc.)

ContextMenuHandlers5: [EUFileSyncShlMenu] -> {9BE7BF64-6790-4873-8704-606E622B3E8C} => C:\Program Files (x86)\EaseUS\EaseUS EverySync\bin\EUSyncExtMenux64.dll [2015-02-05] (CHENGDU Yiwo Tech Development Co., Ltd.)

ContextMenuHandlers5: [SafeBoxContext] -> {0244E652-07EF-43C2-8AAD-ABA3CF40DF16} =>  -> No File

ContextMenuHandlers6: [2.0 Zemana AntiMalware] -> {6ABB1C11-E261-4CEA-BBB5-3836225689DD} => C:\Program Files (x86)\Zemana AntiMalware\ZAMShellExt64.dll [2017-11-23] ()

ContextMenuHandlers6: [AweFileSyncShlMenu] -> {ABE7BF64-6790-4873-8704-606E622B3E8D} => C:\Program Files (x86)\Magoshare\AweEraser\AweExtMenux64.dll [2017-11-12] (Magoshare)

ContextMenuHandlers6: [BDFVCtxMenuExt] -> {9E96C1F5-0EFA-4348-9460-15D6802C70AA} =>  -> No File

ContextMenuHandlers6-x32: [ComPresto.ContextMenu] -> {9785BFAA-1BAA-444A-818B-DDBC81F8E87F} => C:\Program Files\Vazari\ComPresto\CmprSL.dll [2004-01-10] (Vazari Software)

ContextMenuHandlers6-x32: [EUFileSyncShlMenu] -> {9BE7BF64-6790-4873-8704-606E622B3E8C} => C:\Program Files (x86)\EaseUS\EaseUS EverySync\bin\EUSyncExtMenux64.dll [2015-02-05] (CHENGDU Yiwo Tech Development Co., Ltd.)

ContextMenuHandlers6-x32: [FMMenuExt] -> {47C91696-894C-46A1-B196-2C7CA1952F45} => C:\Program Files (x86)\Folder Marker\ShellExt64.dll [2013-08-21] (ArcticLine Software)

ContextMenuHandlers6-x32: [Folderico] -> {CC0C45C5-EFDE-4B8A-A8B0-9ED733D9E6AC} => C:\Program Files\FolderIco\FolderIco.dll [2015-08-30] (TeoreX)

ContextMenuHandlers6-x32-x32: [Gili FileLock Pro] -> {58264032-9730-4ab3-BEA2-A6CE3EEF6080} => C:\Program Files (x86)\idoo\File Encryption\GiliFileshell.dll [2011-12-13] ()

ContextMenuHandlers6-x32-x32: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 4\x64\ContextHandler.dll [2014-01-06] (Glarysoft Ltd)

ContextMenuHandlers6-x32-x32: [Glarysoft MalwareHunter] -> {EA847F47-97F1-4D78-AB99-C63CA1C327F0} => C:\Program Files (x86)\Glarysoft\Malware Hunter\x64\MHContextHandlerx64.dll [2016-06-23] (Glarysoft Ltd)

ContextMenuHandlers6-x32-x32-x32: [MagicISO] -> {DB85C504-C730-49DD-BEC1-7B39C6103B7A} => C:\Program Files (x86)\MagicISO\misosh.dll [2008-05-22] (MagicISO, Inc.)

ContextMenuHandlers6-x32-x32-x32: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-03-03] (Malwarebytes)

ContextMenuHandlers6-x32-x32-x32-x32: [PCFolder] -> {0d450ada-c3f4-41eb-9803-ca1540fe8d1d} => C:\Windows\system32\mscoree.dll [2010-11-20] (Microsoft Corporation)

ContextMenuHandlers6-x32-x32-x32-x32-x32: [Picajet Organizer] -> {C916D440-D489-4A79-B306-5FDC1E7932C0} => C:\Program Files (x86)\PicaJet\PJExt.dll [2013-01-16] ()

ContextMenuHandlers6-x32-x32-x32-x32-x32: [ReaConverter7_std] -> {0C83C06D-41F5-4666-B1C2-0923EA75EB10} => C:\Program Files (x86)\reaConverter 7 Standard\newcontext64.dll [2015-06-19] ()

ContextMenuHandlers6-x32-x32-x32-x32-x32: [ShellMenuObj] -> {3f6e99b1-5620-11e0-8b43-005056c00008} => C:\Program Files\Common Files\SoftTech InterCorp\Extension\stshellextension64.dll [2012-10-30] (SoftTech InterCorp)

ContextMenuHandlers6-x32-x32-x32-x32-x32-x32: [TurboBrowser] -> {CDDF1652-9770-4381-8A4B-B935CA4467C5} => C:\Program Files (x86)\FileStream\Turbo Browser\tbext.dll [2012-02-09] (FileStream, Inc.®)

ContextMenuHandlers6-x32-x32-x32-x32-x32-x32: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2009-10-22] (EZB Systems, Inc.)

 

==================== Scheduled Tasks (Whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

Task: {110BE13F-D012-433D-8F5B-69FF7D4174A3} - \Auslogics\BoostSpeed\Start BoostSpeed оn Morgan Pierce Parker logon -> No File <==== ATTENTION

Task: {1ADB9F71-E95D-4856-B625-03420D4B2500} - System32\Tasks\{644D6AE8-CCC1-4142-B677-3D3ECA63900F} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Foxit Software\Foxit Reader\Uninstall.exe"

Task: {1DA47348-F686-445C-9125-4C8B85ED8111} - System32\Tasks\UAC pass\Kindle => C:\Program Files (x86)\Amazon\Kindle\Kindle.exe [2016-04-25] (Amazon.com)

Task: {20FB3618-2F5B-4FEA-B94A-67E2AFB7D62C} - System32\Tasks\MasterSeeker.UACBypass.873de2543bb272ce30b0c639a8cba518 => C:\Program Files\MASTERSEEKER\MasterSeeker.exe [2014-09-26] (DxCK)

Task: {23694C52-C4F7-45A7-A161-A39F66EBA52F} - System32\Tasks\GoogleUpdateTaskMachineUA1cb747391241274 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-17] (Google Inc.)

Task: {2777D579-3588-4E83-A28E-D487FC68A5FB} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\Dell\SupportAssist\sessionchecker.exe [2017-09-14] (PC-Doctor, Inc.)

Task: {2AD18346-FA07-4450-866A-B7D0D09F8ED8} - System32\Tasks\{7C2188BF-E704-4A29-A903-B2E31CA30305} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\ENSIGNNEW\eChat\eChatsALL\CIO\eChat 2014 09 22 latest 2015 05 11 setupechat (1).exe" -d "C:\Program Files\ENSIGNNEW\eChat\eChatsALL\CIO"

Task: {2DB75400-90C2-479C-B6A2-2EC111B4F95D} - System32\Tasks\{571CB34F-56DB-43D0-A8CD-99C1A22D167C} => C:\Windows\system32\pcalua.exe -a "F:\3- User Guide\Setup.exe" -d "F:\3- User Guide"

Task: {2E4C7563-5760-4F13-B9D1-FFBFBB3BC474} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2396228472-3482715812-2186985281-1006 => c:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2015-09-16] (RealNetworks, Inc.)

Task: {3209DD18-6AC4-4F13-8F2F-CF2C6EFF9514} - System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 => C:\Program Files\Bitdefender\Bitdefender 2015\bdproductdata.exe

Task: {32D8C650-FC17-46E6-B4E9-C8F8FE250713} - System32\Tasks\Driver Restore-RTMUpdater => c:\Program Files (x86)\Driver Restore\Driver Restore\DriverRestore.exe [2013-09-19] (PC Drivers Headquarters)

Task: {34F9AFAF-5684-4C2A-955D-8E74A2ED8F0E} - System32\Tasks\EW Overnigh run => C:\Program Files\ENSIGNNEW\Ensign.exe [2016-04-12] (Ensign Software, Inc.)

Task: {394A74D7-21CC-4DAD-B483-DC453B448763} - System32\Tasks\EW DD Run => C:\Program Files\ENSIGNNEW\Ensign.exe [2016-04-12] (Ensign Software, Inc.)

Task: {4C9156C1-39E7-4C9D-BDEE-CAF33AA31B01} - System32\Tasks\UAC pass\i_view32 - IrfanView 4.23 => C:\Program Files (x86)\IrfanView\i_view32.exe [2012-01-17] (Irfan Skiljan)

Task: {5688B95E-C238-4216-A164-4129D394D56C} - System32\Tasks\doPDF 9 Update => C:\Program Files\Softland\novaPDF 9\Driver\UpdateApplication.exe [2018-02-19] ()

Task: {5856763E-FA06-40AA-8B2B-5F4AAB8684BF} - System32\Tasks\Paragon Archive name arc_150414111230859 => C:\Program Files\Paragon Software\Backup and Recovery 14 Home\program\scripts.exe [2013-12-16] (Paragon Software Group)

Task: {5A671D5B-FDB8-4D57-B190-395FF791EE63} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-03-14] (Microsoft Corporation)

Task: {63982C73-36D8-4D62-81C7-E7946138CD62} - System32\Tasks\Paragon Archive name arc_270314214029964 => C:\Program Files\Paragon Software\Backup and Recovery 14 Home\program\scripts.exe [2013-12-16] (Paragon Software Group)

Task: {655CDFD6-2773-49FF-9FB9-87D2A4DFA5EC} - System32\Tasks\Irfanview => \Program [Argument = Files (x86)\IrfanView\i_view32.exe]

Task: {67236088-E99D-4BD1-8502-0F76352A6757} - \ParetoLogic Registration3 -> No File <==== ATTENTION

Task: {68A5C451-4BAE-471F-B3AF-F32DFE83407D} - System32\Tasks\Paragon Archive name diff_280314115126006 => C:\Program Files\Paragon Software\Backup and Recovery 14 Home\program\scripts.exe [2013-12-16] (Paragon Software Group)

Task: {691B8C89-D2CD-45EF-91A3-984643639550} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-08-12] (Dropbox, Inc.)

Task: {6C03D774-FE36-456B-B6B3-0E1C22DB8466} - System32\Tasks\Amazon Music Helper => C:\Users\Morgan Pierce Parker\AppData\Local\Amazon Music\Amazon Music Helper.exe [2014-07-22] ()

Task: {73292911-1023-4E6B-B3F5-C25B3C2A19E1} - System32\Tasks\{43C2D9A5-4018-4FB4-9291-5D3CA329AAA0} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Foxit Software\Foxit Reader\Uninstall.exe"

Task: {736E4D0D-9D2A-4E9F-A208-10B0E78AFBE8} - System32\Tasks\RealDownloader Update Check => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [2016-07-05] ()

Task: {77234F49-B92B-4045-B0DE-D1F497030DC7} - System32\Tasks\{CAEE7B87-0724-4206-B147-A95BB5CC7641} => C:\Windows\system32\pcalua.exe -a H:\SETUP.EXE -d H:\ -c /AUTORUN

Task: {7E05A883-6D8A-4AA4-B46E-AEEE74E43EBD} - System32\Tasks\Microsoft\Windows\PLA\System Overview => C:\Windows\system32\rundll32.exe C:\Windows\system32\pla.dll,PlaHost "System Overview" "$(Arg0)"

Task: {7E292A1A-D251-45CF-8BA1-4347627DA7EC} - System32\Tasks\FileSearchyPro_SkipUAC => C:\Program Files (x86)\FileSearchy Pro\FileSearchyPro.exe [2014-09-27] ()

Task: {885EE158-2619-4CD2-9770-A23AEDB9136C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-07-19] (Adobe Systems Incorporated)

Task: {88A9EF09-423D-4DE8-9EB4-5796A72C17B6} - System32\Tasks\{034BED0F-92BB-462E-8017-95F1CBD727B3} => C:\Windows\system32\pcalua.exe -a C:\temp\morganp\tmp\LOCALS~1\Temp\fox6E64.exe -d "C:\Program Files (x86)\Foxit Software\Foxit Reader" <==== ATTENTION

Task: {891CB682-728B-481A-A5CE-14F6E51F73CE} - System32\Tasks\UAC pass\i_view32 => C:\Program Files (x86)\IrfanView\i_view32.exe [2012-01-17] (Irfan Skiljan)

Task: {8CB2ACD7-8DF8-4767-A8A4-3F5018274D34} - System32\Tasks\Cybertron\Privacy Eraser\SkipUAC_Morgan Pierce Parker => C:\Program Files\Cybertron\Privacy Eraser\PrivacyEraser.exe [2015-02-25] (Cybertron Software, Co., Ltd.)

Task: {8FD2AE7F-F946-4B6F-8DE8-B8CFC95B36FF} - System32\Tasks\G2MUpdateTask-S-1-5-21-2396228472-3482715812-2186985281-1006 => C:\Users\Morgan Pierce Parker\AppData\Local\GoToMeeting\8473\g2mupdate.exe [2018-03-09] (LogMeIn, Inc.)

Task: {9032B0DA-EC8C-445E-A810-BC91FACA4B88} - System32\Tasks\Driver Restore-RTMRules => c:\Program Files (x86)\Driver Restore\Driver Restore\DriverRestore.exe [2013-09-19] (PC Drivers Headquarters)

Task: {91D3FC3D-3C10-4473-AB03-4D763AC6BF9F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-09-05] (Microsoft Corporation)

Task: {A0C6EA20-610C-4BF0-B974-1B1D5F16A967} - System32\Tasks\AnVir Task Manager => C:\Program Files (x86)\AnVir Task Manager Pro\AnVir.exe [2013-01-25] (AnVir Software)

Task: {A32FBB8E-8C80-41D3-BE8A-0D8CAB0D4FEB} - System32\Tasks\WpsUpdateTask_Morgan Pierce Parker => C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\wpsupdate.exe [2011-10-29] (Zhuhai Kingsoft Office-software Co.,Ltd)

Task: {A36B8F51-691A-4464-AED7-5D00D2DB6F8C} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_24_0_0_194_pepper.exe [2017-02-13] (Adobe Systems Incorporated)

Task: {A46A6403-1CB7-4D5C-B538-BDF6F387C0E2} - System32\Tasks\G2MUploadTask-S-1-5-21-2396228472-3482715812-2186985281-1006 => C:\Users\Morgan Pierce Parker\AppData\Local\GoToMeeting\8473\g2mupload.exe [2018-03-09] (LogMeIn, Inc.)

Task: {A52F37D5-1B3C-4B96-8EE5-FD26A2C2B0A1} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssist.exe [2017-12-22] (Dell Inc.)

Task: {A7A536B1-FAC4-4470-A8B2-3F469543D385} - System32\Tasks\Opera scheduled Autoupdate 1396296037 => C:\Program Files (x86)\Opera20\launcher.exe [2018-03-08] (Opera Software)

Task: {A83663BF-8DC3-4C61-AD29-14970D6CAD83} - System32\Tasks\{DD5420CB-6055-4B95-8475-C7343A458F58} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\ENSIGNNEW\eChat\eChatsALL\KevinP\setupechat.exe" -d "C:\Program Files\ENSIGNNEW\eChat\eChatsALL\KevinP"

Task: {AF3FAA29-55D5-45F2-A9B8-F0AA1FBDB359} - System32\Tasks\Driver Restore-RTMScan => c:\Program Files (x86)\Driver Restore\Driver Restore\DriverRestore.exe [2013-09-19] (PC Drivers Headquarters)

Task: {B180BD86-7AF1-4E1C-85B9-C03A93BF17EF} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfig

Task: {B180BD86-7AF1-4E1C-85B9-C03A93BF17EF} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2015-09-30] (Microsoft Corporation)

Task: {B56F623E-5355-4935-9C81-6C7804CF4958} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfig

Task: {B56F623E-5355-4935-9C81-6C7804CF4958} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(2): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshContent

Task: {B56F623E-5355-4935-9C81-6C7804CF4958} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(3): C:\Windows\system32\GWX\GWXDetector.exe [2015-09-30] (Microsoft Corporation)

Task: {B819F3A7-E824-460D-9463-5854FBD96BBC} - System32\Tasks\Driver Restore-RTMScanRunOnce => c:\Program Files (x86)\Driver Restore\Driver Restore\DriverRestore.exe [2013-09-19] (PC Drivers Headquarters)

Task: {B8482C0F-8B5E-43F2-8B2F-CFDB077C625F} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2015-08-24] (Siber Systems)

Task: {C5B37759-383E-417E-8436-CAE86D4EEF8E} - System32\Tasks\{EBD50BF9-4116-4634-802B-F21EB79D001C} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Foxit Software\Foxit Reader\Uninstall.exe"

Task: {D99243F3-4E5B-4F86-B02D-E46B417A301D} - System32\Tasks\{D2D1BFED-22C5-406C-B2E1-951998B456D8} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Smarty Uninstaller\SmartyUninstaller.exe" -d "C:\Program Files (x86)\Smarty Uninstaller"

Task: {DA30C641-C98A-4627-9C71-11D9511F49A4} - System32\Tasks\{D438FE00-0333-4CDC-AB6A-613919B2BC24} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\Aeroadmin Pro 4-1\Setup.exe" -d "C:\Program Files\Aeroadmin Pro 4-1"

Task: {DA5C848D-EC7F-4AB2-BFB0-888C51712D7F} - System32\Tasks\{45D5C5C4-3F1F-43A1-9BAB-FD52B000815E} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Foxit Software\Foxit Reader\Uninstall.exe"

Task: {DC3FF28E-D005-4856-8BB7-377B136F23E8} - System32\Tasks\{5908758A-2A8E-45E0-B049-6CED936831F2} => C:\Windows\system32\pcalua.exe -a "C:\Users\Morgan Pierce Parker\Downloads\vcredist_x64.exe" -d "C:\Users\Morgan Pierce Parker\Desktop"

Task: {E5FC7E2A-1635-4F51-B56E-AD78C3865E72} - System32\Tasks\UAC pass\VideoGet => C:\Program Files (x86)\Nuclear Coffee\VideoGet\VideoGet.exe [2012-07-24] (Nuclear Coffee Software)

Task: {E8833C63-722F-44FA-B230-75D6E695543B} - System32\Tasks\Open URL by RoboForm => C:\Windows\system32\rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMKJNMKJPMLMNMKMHMCNOMMMLJLJCNLMKMOJJJCNNJKMPMLMCNLJLJGMJJLMKJLMHMMMJMOJMMJNJICMIMCNGMCNOMKMFMOMOMCNPMCNGMJMPMPMFMJMCNOMCNIMJMPMOMCNNMJNPICMPMFMLJAJLIPMNMFMJMIMOMJNHICMIJAJLILJOMJNBJCMCLAJNIIJOJBJPNPKGJKJNIMJKJPNPKOJNIEJKJNIJN (the data entry has 73 more characters).

Task: {EA4E748B-D4D1-44AA-9707-D64545DEA062} - System32\Tasks\doPDF 9 Telemetry => C:\Program Files\Softland\novaPDF 9\Driver\GoogleAnalytics.exe [2018-02-19] ()

Task: {EA8FCF35-5BC8-4701-8819-642DDB0BB2FC} - System32\Tasks\GMHSkipUAC => C:\Program Files (x86)\Glarysoft\Malware Hunter\MalwareHunter.exe [2017-01-19] (Glarysoft Ltd)

Task: {ED0ECB85-5A04-4389-9010-959FA53F7719} - System32\Tasks\{DE11C23D-F00C-4043-B1F2-9B72E61E0AB4} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\ENSIGNNEW\eChat\eChatsALL\CIACIA\ECHAT 2015 11 04 .exe" -d "C:\Program Files\ENSIGNNEW\eChat\eChatsALL\CIACIA"

Task: {F023F227-A3F8-4CAE-893E-CFBF4FC4C81D} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\MpCmdRun.exe

Task: {F09A23A2-DC9D-4333-A7DC-67A6D0DDBC83} - System32\Tasks\StartupStar Firewall => C:\Program Files (x86)\StartupStar\StartupStar.exe [2014-10-09] (Ascora GmbH)

Task: {F31A8AB1-5DBC-408C-A348-555C6892BA0A} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfigAndContent

Task: {F31A8AB1-5DBC-408C-A348-555C6892BA0A} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2015-09-30] (Microsoft Corporation)

Task: {F37D087F-84FC-4D7E-AD24-A01BD10B673E} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2396228472-3482715812-2186985281-1006 => c:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2015-09-16] (RealNetworks, Inc.)

Task: {F79A53DC-26AF-4F19-84AF-20D3EB081C7D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-03-14] (Microsoft Corporation)

Task: {FED57421-BF81-4786-A43E-C23BF4B5ED03} - \AdvancedDriverUpdater_UPDATES -> No File <==== ATTENTION

Task: {FF26A1C0-CAB7-4883-A072-DC0478D449D1} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-09-05] (Microsoft Corporation)

 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

 

Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_24_0_0_194_pepper.exe

Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

Task: C:\Windows\Tasks\expressburnDowngrade.job => C:\Program Files\NCH Swift Sound\ExpressBurn\expressburn.exe

Task: C:\Windows\Tasks\expressburnShakeIcon.job => C:\Program Files\NCH Swift Sound\ExpressBurn\expressburn.exe

Task: C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-2396228472-3482715812-2186985281-1006.job => C:\Users\Morgan Pierce Parker\AppData\Local\GoToMeeting\8473\g2mupdate.exe

Task: C:\Windows\Tasks\G2MUploadTask-S-1-5-21-2396228472-3482715812-2186985281-1006.job => C:\Users\Morgan Pierce Parker\AppData\Local\GoToMeeting\8473\g2mupload.exe

Task: C:\Windows\Tasks\Paragon Archive name arc_150414111230859.job => C:\Program Files\Paragon Software\Backup and Recovery 14 Home\program\scripts.exe--rebootonconfirm -Wno --alternate --graph --multiple C:/Program Files/Paragon Software/Backup and Recovery 14 Home/scripts/scr_150414111554003.psl

Task: C:\Windows\Tasks\Paragon Archive name arc_270314214029964.job => C:\Program Files\Paragon Software\Backup and Recovery 14 Home\program\scripts.exe--rebootonconfirm -Wno --alternate --graph --multiple C:/Program Files/Paragon Software/Backup and Recovery 14 Home/scripts/scr_270314214212771.psl

Task: C:\Windows\Tasks\Paragon Archive name diff_280314115126006.job => C:\Program Files\Paragon Software\Backup and Recovery 14 Home\program\scripts.exe--rebootonconfirm -Wno --alternate --graph --multiple C:/Program Files/Paragon Software/Backup and Recovery 14 Home/scripts/scr_280314115746051.psl

Task: C:\Windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2083756155-906728473-3928301053-500.job => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe

Task: C:\Windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2083756155-906728473-3928301053-500.job => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe

Task: C:\Windows\Tasks\StartupStar Firewall.job => C:\Program Files (x86)\StartupStar\StartupStar.exe

Task: C:\Windows\Tasks\switchDowngrade.job => C:\Program Files\NCH Swift Sound\Switch\switch.exe

Task: C:\Windows\Tasks\switchShakeIcon.job => C:\Program Files\NCH Swift Sound\Switch\switch.exe

Task: C:\Windows\Tasks\User_Feed_Synchronization-{1B73630D-E1E9-42D4-AC78-4AD6896403D9}.job => C:\Windows\system32\msfeedssync.exe

Task: C:\Windows\Tasks\WpsUpdateTask_Morgan Pierce Parker.job => C:\Program Files (x86)\Kingsoft\Kingsoft Writer\office6\wpsupdate.exe

Task: C:\Windows\Tasks\WpsUpdateTask_TEST.job => C:\Program Files (x86)\Kingsoft\Kingsoft Presentation\office6\wpsupdate.exe

 

==================== Shortcuts & WMI ========================

 

(The entries could be listed to be restored or removed.)

 

 

Shortcut: C:\Users\Morgan Pierce Parker\Favorites\Fotor for desktop.lnk -> hxxp://www.fotor.com/desktop/index.htm

Shortcut: C:\Users\Morgan Pierce Parker\Desktop\ALL MISCELANEOUS FOLDERS - Copy\0 DESKTOP SHORTCUTS - ALL - Copy\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()

Shortcut: C:\Users\Morgan Pierce Parker\Desktop\ALL MISCELANEOUS FOLDERS - Copy\0 DESKTOP SHORTCUTS - ALL\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()

Shortcut: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\ALL MISCELANEOUS FOLDERS - Copy\0 DESKTOP SHORTCUTS - ALL - Copy\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()

Shortcut: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\ALL MISCELANEOUS FOLDERS - Copy\0 DESKTOP SHORTCUTS - ALL\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()

Shortcut: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\ALL MISCELANEOUS FOLDERS\0 DESKTOP SHORTCUTS - ALL - Copy\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()

Shortcut: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\ALL MISCELANEOUS FOLDERS\0 DESKTOP SHORTCUTS - ALL\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()

Shortcut: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\140 Desktop Shortcuts - Copy\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()

Shortcut: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\140 Desktop Shortcuts\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()

Shortcut: C:\Users\Morgan Pierce Parker\Desktop\140 ADDITIONAL DESKTOP SHORTCUTS\140 Desktop Shortcuts - Copy\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()

Shortcut: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ELDIM\EDIDViewer\Uninstall EDIDViewer.lnk -> C:\Program Files (x86)\ELDIM\ELDIM - EDIDViewer\Uninstall.bat ()

Shortcut: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Network Shortcuts\My Web Sites on MSN\target.lnk -> hxxp://www.msnusers.co

Shortcut: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\krut.bat.lnk -> C:\Program Files\krut V093 Windows Package\krut.bat ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apiary Fund MetaTrader.lnk -> C:\Apiary Fund MetaTrader\MetaTrader.bat ()

 

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\SHORTCUTS DUPLICATOS - Copy\TradeMiner 3.0 Forex.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/forex/tm3-forex.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\1cf9d141-2a8b9d94"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\SHORTCUTS DUPLICATOS - Copy\TradeMiner 3.0 Futures.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/futures/tm3-futures.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\4450f449-5bb16e56"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\SHORTCUTS DUPLICATOS - Copy\TradeMiner 3.0 Stocks.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/stocks/tm3-stocks.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\3875a387-2f089438"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\SHORTCUTS DUPLICATOS\TradeMiner 3.0 Forex.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/forex/tm3-forex.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\1cf9d141-2a8b9d94"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\SHORTCUTS DUPLICATOS\TradeMiner 3.0 Futures.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/futures/tm3-futures.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\4450f449-5bb16e56"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\SHORTCUTS DUPLICATOS\TradeMiner 3.0 Stocks.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/stocks/tm3-stocks.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\3875a387-2f089438"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\140 Desktop Shortcuts - Copy\TradeMiner 3.5 Forex.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/forex/tm3-forex.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\1cf9d141-52a7e7b8"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\140 Desktop Shortcuts - Copy\TradeMiner 3.5 Futures.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/futures/tm3-futures.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\4450f449-7413297e"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\140 Desktop Shortcuts - Copy\TradeMiner 3.5 Stocks.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/stocks/tm3-stocks.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\3875a387-5d73517c"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\140 Desktop Shortcuts\TradeMiner 3.5 Forex.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/forex/tm3-forex.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\1cf9d141-52a7e7b8"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\140 Desktop Shortcuts\TradeMiner 3.5 Futures.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/futures/tm3-futures.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\4450f449-7413297e"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 DESKTOP HIDDEN FOR MOVE\140 Desktop Shortcuts\TradeMiner 3.5 Stocks.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/stocks/tm3-stocks.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\3875a387-5d73517c"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 ADDITIONAL DESKTOP SHORTCUTS\140 Desktop Shortcuts - Copy\TradeMiner 3.5 Forex.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/forex/tm3-forex.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\1cf9d141-52a7e7b8"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 ADDITIONAL DESKTOP SHORTCUTS\140 Desktop Shortcuts - Copy\TradeMiner 3.5 Futures.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/futures/tm3-futures.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\4450f449-7413297e"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\Desktop\140 ADDITIONAL DESKTOP SHORTCUTS\140 Desktop Shortcuts - Copy\TradeMiner 3.5 Stocks.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/stocks/tm3-stocks.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\3875a387-5d73517c"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gecko Software\TradeMiner 3.0 Forex.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/forex/tm3-forex.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\1cf9d141-2a8b9d94"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gecko Software\TradeMiner 3.0 Futures.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/futures/tm3-futures.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\4450f449-5bb16e56"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gecko Software\TradeMiner 3.0 Stocks.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/stocks/tm3-stocks.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\3875a387-2f089438"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gecko Software\TradeMiner 3.5 Forex.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/forex/tm3-forex.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\1cf9d141-52a7e7b8"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gecko Software\TradeMiner 3.5 Futures.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/futures/tm3-futures.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\4450f449-7413297e"

ShortcutWithArgument: C:\Users\Morgan Pierce Parker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gecko Software\TradeMiner 3.5 Stocks.lnk -> C:\Windows\SysWOW64\javaws.exe (Sun Microsystems, Inc.) -> -localfile -J-Djnlp.application.href=hxxp://download.geckosoftware.com/trademiner/3.0/stocks/tm3-stocks.jnlp "C:\Users\Morgan Pierce Parker\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\3875a387-5d73517c"

 

==================== Loaded Modules (Whitelisted) ==============

 

2015-07-31 13:13 - 2013-09-06 16:25 - 000122888 _____ () C:\Windows\System32\KVPrinterMon.dll

2015-08-03 10:37 - 2017-01-17 03:25 - 000117440 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll

2018-02-19 14:56 - 2018-02-19 14:56 - 000143104 _____ () C:\Program Files\Softland\novaPDF 9\Server\AgileDotNetRT64.dll

2018-03-03 15:50 - 2017-08-30 12:29 - 000260752 _____ () C:\Program Files\EASEUS\Todo Backup\bin\TodoBackupService.exe

2013-03-21 12:21 - 2012-04-24 04:29 - 000045568 _____ () C:\Program Files\Genie9\Genie Timeline\GSLogging.gtl

2013-03-21 12:21 - 2012-09-10 09:29 - 000488960 _____ () C:\Program Files\Genie9\Genie Timeline\GSIndexDB.gtl

2013-03-21 12:21 - 2012-02-02 04:16 - 000740864 _____ () C:\Program Files\Genie9\Genie Timeline\sqlite3.gtl

2013-03-21 12:21 - 2012-04-24 04:29 - 000011264 _____ () C:\Program Files\Genie9\Genie Timeline\RWLock.gtl

2013-03-21 12:21 - 2012-09-10 09:29 - 000205824 _____ () C:\Program Files\Genie9\Genie Timeline\Settings.gtl

2013-03-21 12:21 - 2012-04-24 04:29 - 000089600 _____ () C:\Program Files\Genie9\Genie Timeline\GSEncryption.gtl

2013-03-21 12:21 - 2012-09-10 09:29 - 000708608 _____ () C:\Program Files\Genie9\Genie Timeline\GSBackupManager.gtl

2013-03-21 12:21 - 2012-09-10 09:29 - 000343552 _____ () C:\Program Files\Genie9\Genie Timeline\GSWatcher4.gtl

2013-03-21 12:21 - 2012-09-10 09:29 - 000332800 _____ () C:\Program Files\Genie9\Genie Timeline\OnlineHandler.gtl

2013-03-21 12:21 - 2012-09-10 09:29 - 000054784 _____ () C:\Program Files\Genie9\Genie Timeline\GSLogManager.gtl

2013-03-21 12:21 - 2012-09-10 09:29 - 000087040 _____ () C:\Program Files\Genie9\Genie Timeline\QueueManager.gtl

2013-03-21 12:21 - 2012-02-02 04:16 - 000010752 _____ () C:\Program Files\Genie9\Genie Timeline\VSSEngine_Proxy.gtl

2013-03-21 12:21 - 2012-04-24 04:29 - 000058368 _____ () C:\Program Files\Genie9\Genie Timeline\GSLibrariesManager.gtl

2014-07-29 09:25 - 2014-07-29 09:25 - 000220672 _____ () C:\Program Files (x86)\Steganos Privacy Suite 15\ShellExtension.dll

2015-09-05 09:43 - 2015-02-27 13:38 - 000721263 _____ () C:\Windows\SysWOW64\WSCM64.dll

2015-06-22 08:49 - 2015-06-19 09:18 - 001787392 _____ () C:\Program Files (x86)\reaConverter 7 Standard\newcontext64.dll

2018-03-03 15:51 - 2017-08-30 12:27 - 000024208 _____ () C:\Program Files\EASEUS\Todo Backup\bin\x64\fsclog.dll

2017-11-23 10:52 - 2017-11-23 10:52 - 000155504 _____ () C:\Program Files (x86)\Zemana AntiMalware\ZAMShellExt64.dll

2018-03-09 10:57 - 2018-03-09 10:57 - 097173592 _____ () C:\Program Files\Opera\51.0.2830.55\opera_browser.dll

2014-11-14 18:45 - 2014-08-05 23:24 - 000070144 _____ () C:\Program Files (x86)\Screen Capturer Recorder\screen-capture-recorder-x64.dll

2018-03-09 10:57 - 2018-03-09 10:56 - 004438104 _____ () C:\Program Files\Opera\51.0.2830.55\libglesv2.dll

2018-03-09 10:57 - 2018-03-09 10:56 - 000100440 _____ () C:\Program Files\Opera\51.0.2830.55\libegl.dll

2018-03-01 09:49 - 2018-03-01 10:31 - 002488608 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll

2018-03-01 09:49 - 2018-02-05 14:44 - 002299168 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll

2016-07-05 17:18 - 2016-07-05 17:18 - 000714992 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe

2011-05-04 21:18 - 2017-02-21 17:19 - 000083136 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CodeLog.dll

2011-05-04 21:19 - 2016-03-07 18:08 - 001291264 _____ () C:\Program Files\EASEUS\Todo Backup\bin\libxml2.dll

2011-05-04 21:19 - 2004-10-05 03:08 - 000055808 _____ () C:\Program Files\EASEUS\Todo Backup\bin\zlib1.dll

2018-03-03 15:49 - 2016-12-06 02:43 - 000019648 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CompressFile.dll

2018-03-03 15:50 - 2016-12-06 02:44 - 000090816 _____ () C:\Program Files\EASEUS\Todo Backup\bin\TBGetRemoteNetInfo.dll

2018-03-03 15:49 - 2016-12-06 02:43 - 000024768 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CmcTbProxy.dll

2018-03-03 15:49 - 2016-12-06 02:43 - 000188608 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CMCPipeCenter.dll

2018-03-03 15:49 - 2017-08-30 12:25 - 000183440 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CMCAdapt.dll

2018-03-03 15:49 - 2016-12-06 02:43 - 000163520 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CMCAdapt_RTTO.dll

2018-03-03 15:50 - 2017-08-30 12:27 - 000055952 _____ () C:\Program Files\EASEUS\Todo Backup\bin\TBInfo.dll

2018-03-03 15:49 - 2016-12-06 02:43 - 000018112 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CMCNetTokenProxy.dll

2018-03-03 15:49 - 2017-08-30 12:25 - 000061072 _____ () C:\Program Files\EASEUS\Todo Backup\bin\ActivationOnline.dll

2018-03-03 15:50 - 2017-09-04 17:39 - 000699024 _____ () C:\Program Files\EASEUS\Todo Backup\bin\EuActiveOnline.dll

2018-03-03 15:49 - 2017-08-30 12:26 - 000487568 _____ () C:\Program Files\EASEUS\Todo Backup\bin\EULicenseDLL.DLL

2018-03-03 15:49 - 2017-08-30 12:26 - 000021648 _____ () C:\Program Files\EASEUS\Todo Backup\bin\fsclog.dll

2011-05-04 21:19 - 2017-08-30 12:26 - 000085648 _____ () C:\Program Files\EASEUS\Todo Backup\bin\logsys.dll

2018-03-03 15:49 - 2017-08-30 12:26 - 000032912 _____ () C:\Program Files\EASEUS\Todo Backup\bin\DiskSearchImg.dll

2011-05-04 21:19 - 2017-08-30 12:26 - 000070800 _____ () C:\Program Files\EASEUS\Todo Backup\bin\MountImg.dll

2011-05-04 21:19 - 2017-08-30 12:26 - 000160400 _____ () C:\Program Files\EASEUS\Todo Backup\bin\ImgFile.dll

2011-05-04 21:18 - 2017-08-30 12:26 - 000296592 _____ () C:\Program Files\EASEUS\Todo Backup\bin\DsImgFile.dll

2011-05-04 21:18 - 2016-12-06 02:43 - 000078528 _____ () C:\Program Files\EASEUS\Todo Backup\bin\FatLib.dll

2018-03-03 15:50 - 2017-08-30 12:26 - 000305808 _____ () C:\Program Files\EASEUS\Todo Backup\bin\NTFSUtil.dll

2011-05-04 21:19 - 2016-12-06 02:44 - 000210112 _____ () C:\Program Files\EASEUS\Todo Backup\bin\NTFSLib.dll

2011-05-04 21:18 - 2016-12-06 02:43 - 000026304 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CallbackOperator.dll

2011-05-04 21:18 - 2016-12-06 02:43 - 000074432 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CheckImg.dll

2011-05-04 21:19 - 2016-12-06 02:44 - 000142016 _____ () C:\Program Files\EASEUS\Todo Backup\bin\vhdvmdk.dll

2011-05-04 21:18 - 2017-09-11 14:28 - 000085136 _____ () C:\Program Files\EASEUS\Todo Backup\bin\BootDriver.dll

2018-03-03 15:49 - 2017-08-30 12:26 - 000844944 _____ () C:\Program Files\EASEUS\Todo Backup\bin\ExImage.dll

2018-03-03 15:49 - 2016-12-06 02:43 - 000195776 _____ () C:\Program Files\EASEUS\Todo Backup\bin\EmailBackupSize.dll

2018-03-03 15:49 - 2016-12-06 02:43 - 000414400 _____ () C:\Program Files\EASEUS\Todo Backup\bin\AndroidImage.dll

2011-05-04 21:18 - 2017-08-30 12:26 - 000162448 _____ () C:\Program Files\EASEUS\Todo Backup\bin\EnumDisk.dll

2011-05-04 21:18 - 2016-12-06 02:43 - 000029376 _____ () C:\Program Files\EASEUS\Todo Backup\bin\DeviceAdapter.dll

2018-03-03 15:49 - 2016-12-06 02:44 - 000114368 _____ () C:\Program Files\EASEUS\Todo Backup\bin\FileStorage.dll

2011-05-04 21:18 - 2016-12-06 02:44 - 000026816 _____ () C:\Program Files\EASEUS\Todo Backup\bin\GetDriverInfo.dll

2011-05-04 21:18 - 2016-12-06 02:43 - 000022720 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CorrectMbr.dll

2018-03-03 15:49 - 2017-08-30 12:26 - 000034448 _____ () C:\Program Files\EASEUS\Todo Backup\bin\EnumTapeDevice.dll

2018-03-03 15:50 - 2016-12-06 02:44 - 000054464 _____ () C:\Program Files\EASEUS\Todo Backup\bin\TbTapeBrowse.dll

2011-05-04 21:19 - 2016-12-06 02:44 - 000066240 _____ () C:\Program Files\EASEUS\Todo Backup\bin\RegLib.dll

2018-03-03 15:49 - 2017-08-30 12:25 - 000026768 _____ () C:\Program Files\EASEUS\Todo Backup\bin\AccountManager.dll

2018-03-03 15:50 - 2017-08-30 12:26 - 000072848 _____ () C:\Program Files\EASEUS\Todo Backup\bin\NasOperator.dll

2018-03-03 15:49 - 2016-12-06 02:43 - 000221376 _____ () C:\Program Files\EASEUS\Todo Backup\bin\EmailBrowser.dll

2018-03-03 15:49 - 2016-12-06 02:43 - 000079040 _____ () C:\Program Files\EASEUS\Todo Backup\bin\CloudOperator.dll

2018-03-03 15:49 - 2017-08-30 12:25 - 000021648 _____ () C:\Program Files\EASEUS\Todo Backup\bin\ActiveOnline.dll

2018-03-03 15:50 - 2016-12-06 02:44 - 000138432 _____ () C:\Program Files\EASEUS\Todo Backup\bin\VMConfig.dll

2018-03-03 15:49 - 2016-12-06 02:43 - 000021696 _____ () C:\Program Files\EASEUS\Todo Backup\bin\AndroidDeviceManager.dll

2018-03-03 15:50 - 2017-08-30 12:27 - 000074896 _____ () C:\Program Files\EASEUS\Todo Backup\bin\SqlExBrowser.dll

2018-03-03 15:50 - 2017-08-30 12:27 - 000585872 _____ () C:\Program Files\EASEUS\Todo Backup\bin\SqlSMOCPlusPlus.dll

2011-05-04 21:19 - 2016-12-06 02:44 - 000045248 _____ () C:\Program Files\EASEUS\Todo Backup\bin\TbDataSwap.dll

2018-03-03 15:51 - 2017-09-04 17:39 - 000603792 _____ () C:\Program Files\EASEUS\Todo Backup\bin\uexper.dll

2018-03-03 15:50 - 2016-12-06 02:44 - 000210112 _____ () C:\Program Files\EASEUS\Todo Backup\bin\SmartBackup.dll

2016-07-05 17:13 - 2016-07-05 17:13 - 001382048 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\cpprest100_1_2.dll

2015-09-21 09:59 - 2015-09-21 09:59 - 000653096 _____ () c:\program files (x86)\real\realplayer\RPDS\Lib\r1api.dll

 

==================== Alternate Data Streams (Whitelisted) =========

 

(If an entry is included in the fixlist, only the ADS will be removed.)

 

AlternateDataStreams: C:\TransActATSetup 2015 07 18.exe:BDU [0]

AlternateDataStreams: C:\Windows\system.ini:c1_encryption_d [14]

AlternateDataStreams: C:\Windows\win.ini:c1_encryption_d [14]

AlternateDataStreams: C:\ProgramData\Nalpeiron:user.ns1 [5]

AlternateDataStreams: C:\ProgramData\Nalpeiron:user.ns2 [5]

AlternateDataStreams: C:\ProgramData\Nalpeiron:user.ns3 [4]

AlternateDataStreams: C:\ProgramData\Nalpeiron:user.ns4 [5]

AlternateDataStreams: C:\ProgramData\TEMP:373E1720 [118]

AlternateDataStreams: C:\ProgramData\TEMP:55DB0DDA [180]

AlternateDataStreams: C:\ProgramData\TEMP:5704AA2B [150]

AlternateDataStreams: C:\ProgramData\TEMP:85551434 [442]

AlternateDataStreams: C:\ProgramData\TEMP:9341E0C6 [131]

AlternateDataStreams: C:\ProgramData\TEMP:9F3C1A6B [468]

AlternateDataStreams: C:\ProgramData\TEMP:C5549CEC [412]

AlternateDataStreams: C:\ProgramData\TEMP:ED98798B [197]

AlternateDataStreams: C:\ProgramData\TEMP:EEDA5B17 [294]

AlternateDataStreams: C:\Users\Morgan Pierce Parker\Desktop\dll failure DVDChief.exe:{4C8E01B9-9DBC0591-1A263F88-3DB4076F} [146]

 

==================== Safe Mode (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppXSvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Backup4all5Srv => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BFE => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\camsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ClipSvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dps => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\fsproflt2 => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\lfsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MpsSvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP_TDI => ""="Driver Group"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Schedule => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\semgrsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SharedAccess => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\shellhwdetection => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TokenBroker => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TweakingRemoveSafeBoot => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vss => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WSService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{0CBD4F48-3751-475D-BE88-4F271385B672} => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AeroadminService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppXSvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Backup4all5Srv => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BITS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\camsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ClipSvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dps => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\fsproflt2 => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\GoToAssist => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\HideMyIpSRV => ""="service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\lfsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\msiserver => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SamSs => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Schedule => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\semgrsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\shellhwdetection => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv2 => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srvnet => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TokenBroker => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TweakingRemoveSafeBoot => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vss => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WiredTools => ""="service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WSService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{0CBD4F48-3751-475D-BE88-4F271385B672} => ""="Service"

 

==================== Association (Whitelisted) ===============

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

 

 

==================== Internet Explorer trusted/restricted ===============

 

(If an entry is included in the fixlist, it will be removed from the registry.)

 

IE trusted site: HKU\.DEFAULT\...\dell.com -> dell.com

IE trusted site: HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\...\com -> hxxp://*.Wondershare.com

 

==================== Hosts content: ===============================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2013-03-17 12:56 - 2018-03-01 12:06 - 000000855 _____ C:\Windows\system32\Drivers\etc\hosts

 

127.0.0.1       localhost

 

==================== Other Areas ============================

 

(Currently there is no automatic fix for this section.)

 

HKU\S-1-5-21-2396228472-3482715812-2186985281-1006\Control Panel\Desktop\\Wallpaper -> 

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)

Windows Firewall is enabled.

 

==================== MSCONFIG/TASK MANAGER disabled items ==

 

MSCONFIG\Services: ABBYY.Licensing.BCR.Windows.2.0 => 2

MSCONFIG\Services: ABBYY.Licensing.PDFTransformer.Classic.4.0 => 3

MSCONFIG\Services: AcronisAgent => 2

MSCONFIG\Services: AcrSch2Svc => 2

MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3

MSCONFIG\Services: AeLookupSvc => 3

MSCONFIG\Services: AHDDC2 => 2

MSCONFIG\Services: AMD External Events Utility => 2

MSCONFIG\Services: AppHostSvc => 2

MSCONFIG\Services: Apple Mobile Device => 2

MSCONFIG\Services: Apple Mobile Device Service => 2

MSCONFIG\Services: AppMgmt => 3

MSCONFIG\Services: ARSM => 2

MSCONFIG\Services: aspnet_state => 3

MSCONFIG\Services: AtomicAlarmClock => 2

MSCONFIG\Services: AudioEndpointBuilder => 2

MSCONFIG\Services: AudioSrv => 2

MSCONFIG\Services: AxInstSV => 3

MSCONFIG\Services: Backup4all5Srv => 2

MSCONFIG\Services: Backupper Service => 2

MSCONFIG\Services: BDESVC => 3

MSCONFIG\Services: BFE => 2

MSCONFIG\Services: Bonjour Service => 2

MSCONFIG\Services: Browser => 3

MSCONFIG\Services: BstHdAndroidSvc => 3

MSCONFIG\Services: BstHdLogRotatorSvc => 3

MSCONFIG\Services: BstHdUpdaterSvc => 3

MSCONFIG\Services: bthserv => 3

MSCONFIG\Services: CachemanService => 2

MSCONFIG\Services: CertPropSvc => 3

MSCONFIG\Services: ClickToRunSvc => 2

MSCONFIG\Services: ClipSrv => 3

MSCONFIG\Services: CloudBerry Drive Service => 3

MSCONFIG\Services: clr_optimization_v2.0.50727_32 => 3

MSCONFIG\Services: clr_optimization_v2.0.50727_64 => 3

MSCONFIG\Services: clr_optimization_v4.0.30319_32 => 2

MSCONFIG\Services: clr_optimization_v4.0.30319_64 => 2

MSCONFIG\Services: COMSysApp => 3

MSCONFIG\Services: Crypkey License => 2

MSCONFIG\Services: CryptSvc => 3

MSCONFIG\Services: dbupdate => 2

MSCONFIG\Services: dbupdatem => 3

MSCONFIG\Services: DbxSvc => 2

MSCONFIG\Services: DDVCollectorSvcApi => 2

MSCONFIG\Services: DDVDataCollector => 2

MSCONFIG\Services: DDVRulesProcessor => 2

MSCONFIG\Services: DfSdkS => 3

MSCONFIG\Services: Dhcp => 2

MSCONFIG\Services: dmadmin => 3

MSCONFIG\Services: dmserver => 2

MSCONFIG\Services: Dnscache => 2

MSCONFIG\Services: dot3svc => 3

MSCONFIG\Services: EapHost => 3

MSCONFIG\Services: EaseUS Agent => 3

MSCONFIG\Services: EFS => 3

MSCONFIG\Services: ehRecvr => 2

MSCONFIG\Services: ehSched => 2

MSCONFIG\Services: eventlog => 2

MSCONFIG\Services: EventSystem => 2

MSCONFIG\Services: Fabs => 2

MSCONFIG\Services: fdPHost => 3

MSCONFIG\Services: FDResPub => 2

MSCONFIG\Services: FileMarkerApplyIconService => 2

MSCONFIG\Services: FileReplicatorService => 3

MSCONFIG\Services: FirebirdServerMAGIXInstance => 3

MSCONFIG\Services: FontCache => 2

MSCONFIG\Services: FontCache3.0.0.0 => 3

MSCONFIG\Services: FrAgent => 2

MSCONFIG\Services: fsproflt2 => 2

MSCONFIG\Services: GenieTimelineService => 3

MSCONFIG\Services: GoToAssist => 3

MSCONFIG\Services: gpsvc => 2

MSCONFIG\Services: Guard Agent => 2

MSCONFIG\Services: gupdate => 2

MSCONFIG\Services: gupdatem => 3

MSCONFIG\Services: HDDSvc => 3

MSCONFIG\Services: HideMyIpSRV => 2

MSCONFIG\Services: hidserv => 3

MSCONFIG\Services: hkmsvc => 3

MSCONFIG\Services: HomeGroupListener => 3

MSCONFIG\Services: HomeGroupProvider => 3

MSCONFIG\Services: IDriverT => 3

MSCONFIG\Services: IEEtwCollectorService => 3

MSCONFIG\Services: IKEEXT => 2

MSCONFIG\Services: ImapiService => 3

MSCONFIG\Services: imdsksvc => 3

MSCONFIG\Services: IPBusEnum => 3

MSCONFIG\Services: iphlpsvc => 3

MSCONFIG\Services: KeyIso => 3

MSCONFIG\Services: KooRaRooMediaServer => 3

MSCONFIG\Services: KtmRm => 3

MSCONFIG\Services: LanmanServer => 2

MSCONFIG\Services: LanmanWorkstation => 2

MSCONFIG\Services: LBTServ => 3

MSCONFIG\Services: Leawo_service => 2

MSCONFIG\Services: lltdsvc => 3

MSCONFIG\Services: lmhosts => 2

MSCONFIG\Services: LMIGuardianSvc => 2

MSCONFIG\Services: LMIMaint => 2

MSCONFIG\Services: LogMeIn => 2

MSCONFIG\Services: Mcx2Svc => 3

MSCONFIG\Services: MDM => 2

MSCONFIG\Services: MMCSS => 2

MSCONFIG\Services: MMS => 2

MSCONFIG\Services: MozillaMaintenance => 3

MSCONFIG\Services: MpsSvc => 2

MSCONFIG\Services: MSiSCSI => 3

MSCONFIG\Services: msiserver => 3

MSCONFIG\Services: MSSQLSERVER => 3

MSCONFIG\Services: MSSQLServerADHelper => 3

MSCONFIG\Services: napagent => 3

MSCONFIG\Services: NetDDE => 3

MSCONFIG\Services: NetDDEdsdm => 3

MSCONFIG\Services: NetgearSwitchUSB => 2

MSCONFIG\Services: Netlogon => 3

MSCONFIG\Services: Netman => 3

MSCONFIG\Services: NetMsmqActivator => 2

MSCONFIG\Services: NetPipeActivator => 2

MSCONFIG\Services: netprofm => 3

MSCONFIG\Services: NetTcpActivator => 2

MSCONFIG\Services: NlaSvc => 2

MSCONFIG\Services: NovaPdf9Server => 2

MSCONFIG\Services: nsi => 2

MSCONFIG\Services: nvsvc => 2

MSCONFIG\Services: ocster_1clk_backup => 3

MSCONFIG\Services: OkayFreedom VPN Starter Service => 3

MSCONFIG\Services: OO DiskImage => 2

MSCONFIG\Services: ose => 3

MSCONFIG\Services: osppsvc => 3

MSCONFIG\Services: p2pimsvc => 3

MSCONFIG\Services: p2psvc => 3

MSCONFIG\Services: PAExec => 3

MSCONFIG\Services: PcaSvc => 2

MSCONFIG\Services: PDF Architect Helper Service => 2

MSCONFIG\Services: PDF Architect Service => 2

MSCONFIG\Services: PeerDistSvc => 3

MSCONFIG\Services: pla => 3

MSCONFIG\Services: PlaysService => 2

MSCONFIG\Services: PNRPAutoReg => 3

MSCONFIG\Services: PNRPsvc => 3

MSCONFIG\Services: PolicyAgent => 3

MSCONFIG\Services: Power => 2

MSCONFIG\Services: prio_svc => 2

MSCONFIG\Services: ProtectedStorage => 3

MSCONFIG\Services: QWAVE => 3

MSCONFIG\Services: RasAuto => 3

MSCONFIG\Services: RasMan => 3

MSCONFIG\Services: reaConverter_service => 2

MSCONFIG\Services: RealPlayerUpdateSvc => 2

MSCONFIG\Services: RealTimes Desktop Service => 2

MSCONFIG\Services: RichVideo => 3

MSCONFIG\Services: RichVideo64 => 2

MSCONFIG\Services: RpcEptMapper => 2

MSCONFIG\Services: RpcLocator => 3

MSCONFIG\Services: SamSs => 2

MSCONFIG\Services: Schedule => 2

MSCONFIG\Services: SDRSVC => 3

MSCONFIG\Services: SeaPort => 2

MSCONFIG\Services: seclogon => 3

MSCONFIG\Services: Seed4.Me Service => 2

MSCONFIG\Services: SENS => 2

MSCONFIG\Services: SharedAccess => 3

MSCONFIG\Services: ShellHWDetection => 2

MSCONFIG\Services: SkypeUpdate => 2

MSCONFIG\Services: SNMPTRAP => 3

MSCONFIG\Services: Spooler => 2

MSCONFIG\Services: sppuinotify => 3

MSCONFIG\Services: spupdsvc => 3

MSCONFIG\Services: SQLSERVERAGENT => 3

MSCONFIG\Services: SQLWriter => 2

MSCONFIG\Services: srservice => 2

MSCONFIG\Services: SstpSvc => 3

MSCONFIG\Services: stisvc => 3

MSCONFIG\Services: SupportAssistAgent => 2

MSCONFIG\Services: swprv => 3

MSCONFIG\Services: SysMain => 2

MSCONFIG\Services: SysmonLog => 3

MSCONFIG\Services: TapiSrv => 3

MSCONFIG\Services: TBS => 3

MSCONFIG\Services: TeamViewer => 2

MSCONFIG\Services: TeamViewer8 => 3

MSCONFIG\Services: Themes => 2

MSCONFIG\Services: THREADORDER => 3

MSCONFIG\Services: TrkWks => 2

MSCONFIG\Services: UI0Detect => 3

MSCONFIG\Services: UmRdpService => 3

MSCONFIG\Services: Unchecky => 2

MSCONFIG\Services: upnphost => 3

MSCONFIG\Services: USBSafelyRemoveService => 2

MSCONFIG\Services: VaultSvc => 3

MSCONFIG\Services: vds => 3

MSCONFIG\Services: VSS => 3

MSCONFIG\Services: VssProvider => 2

MSCONFIG\Services: vToolbarUpdater17.1.2 => 3

MSCONFIG\Services: W3SVC => 2

MSCONFIG\Services: WAS => 3

MSCONFIG\Services: WatAdminSvc => 3

MSCONFIG\Services: wbengine => 3

MSCONFIG\Services: wcncsvc => 3

MSCONFIG\Services: WcsPlugInService => 3

MSCONFIG\Services: WdiServiceHost => 3

MSCONFIG\Services: WdiSystemHost => 3

MSCONFIG\Services: WebUpdate4 => 2

MSCONFIG\Services: Wecsvc => 3

MSCONFIG\Services: wercplsupport => 3

MSCONFIG\Services: WinDefend => 2

MSCONFIG\Services: WindscribeService => 2

MSCONFIG\Services: WinExtService => 2

MSCONFIG\Services: WinHttpAutoProxySvc => 3

MSCONFIG\Services: Winmgmt => 2

MSCONFIG\Services: WinRM => 3

MSCONFIG\Services: WiseBootAssistant => 2

MSCONFIG\Services: Wlansvc => 2

MSCONFIG\Services: wlidsvc => 2

MSCONFIG\Services: WmdmPmSN => 3

MSCONFIG\Services: WMPNetworkSvc => 2

MSCONFIG\Services: WPCSvc => 3

MSCONFIG\Services: WPDBusEnum => 3

MSCONFIG\Services: WsAppService => 2

MSCONFIG\Services: wscsvc => 2

MSCONFIG\Services: WsDrvInst => 3

MSCONFIG\Services: WSearch => 2

MSCONFIG\Services: wuauserv => 2

MSCONFIG\Services: wudfsvc => 3

MSCONFIG\Services: WwanSvc => 3

MSCONFIG\Services: WZCSVC => 2

MSCONFIG\Services: ZAMSvc => 2

MSCONFIG\Services: Zoolz 2 Service => 3

MSCONFIG\Services: {0CBD4F48-3751-475D-BE88-4F271385B672} => 2

MSCONFIG\startupfolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Windows Search.lnk => C:\WINDOWS\pss\Windows Search.lnkCommon Startup

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^NETGEAR A6210 Genie.lnk => C:\Windows\pss\NETGEAR A6210 Genie.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Morgan Pierce Parker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^1 DOWNLOADS - Shortcut (2).lnk => C:\Windows\pss\1 DOWNLOADS - Shortcut (2).lnk.Startup

MSCONFIG\startupfolder: C:^Users^Morgan Pierce Parker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CandyClock.lnk => C:\Windows\pss\CandyClock.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Morgan Pierce Parker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Create Synchronicity.exe - Shortcut.lnk => C:\Windows\pss\Create Synchronicity.exe - Shortcut.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Morgan Pierce Parker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^eChat MannM.lnk => C:\Windows\pss\eChat MannM.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Morgan Pierce Parker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^eChat.exe Kevin P.lnk => C:\Windows\pss\eChat.exe Kevin P.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Morgan Pierce Parker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Efficient Calendar.lnk => C:\Windows\pss\Efficient Calendar.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Morgan Pierce Parker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Process Lasso.lnk => C:\Windows\pss\Process Lasso.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Morgan Pierce Parker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Startup - Shortcut (4).lnk => C:\Windows\pss\Startup - Shortcut (4).lnk.Startup

MSCONFIG\startupfolder: C:^Users^Morgan Pierce Parker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^ZZ AVAILABLE FILE.RTF.lnk => C:\Windows\pss\ZZ AVAILABLE FILE.RTF.lnk.Startup

MSCONFIG\startupreg: AntDM => C:\Program Files (x86)\Ant Download Manager\AntDM.exe

MSCONFIG\startupreg: antMR => C:\Program Files (x86)\Ant Download Manager\antMR.exe

MSCONFIG\startupreg: AtomicAlarmClock6 => C:\Program Files\Atomic Alarm Clock\AtomicAlarmClock.exe

MSCONFIG\startupreg: CachemanTray => C:\Program Files (x86)\Cacheman\CachemanTray.exe

MSCONFIG\startupreg: Create Synchronicity - Scheduler => R:\140 Sychronicity\Create Synchronicity.exe /scheduler

MSCONFIG\startupreg: CryptoGiveaway Bounty => "C:\Program Files\Softdeluxe\CryptoGiveaway Bounty\cgbclient.exe" --autorun

MSCONFIG\startupreg: CuteReminder => C:\Program Files (x86)\CuteReminder\CuteReminder.exe

MSCONFIG\startupreg: Dropbox => "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup

MSCONFIG\startupreg: EvtMgr6 => C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming

MSCONFIG\startupreg: HydraVisionDesktopManager => "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"

MSCONFIG\startupreg: LogiOptions => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe /noui

MSCONFIG\startupreg: LogMeIn GUI => "C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe"

MSCONFIG\startupreg: MSC => "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

MSCONFIG\startupreg: OODITRAY.EXE => C:\Program Files\OO Software\DiskImage\ooditray.exe

MSCONFIG\startupreg: RoboForm => "C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"

MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

MSCONFIG\startupreg: StarReminder => "C:\Program Files\StarReminder\StarReminder.exe"

MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun

MSCONFIG\startupreg: StartCN => "C:\Program Files\AMD\CNext\CNext\cnext.exe" atlogon

MSCONFIG\startupreg: StickyPassword => C:\Program Files (x86)\Sticky Password\stpass.exe

MSCONFIG\startupreg: USB Safely Remove => C:\Program Files (x86)\USB Safely Remove\USBSafelyRemove.exe /startup

MSCONFIG\startupreg: vProt => "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"

MSCONFIG\startupreg: Windscribe => "C:\Program Files (x86)\Windscribe\Windscribe.exe" -os_restart

MSCONFIG\startupreg: ZAM => "C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe" /minimized

 

==================== FirewallRules (Whitelisted) ===============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

FirewallRules: [TCP Query User{DF3C5BB2-9A06-4151-B474-30AD9E0BDE6D}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe

FirewallRules: [UDP Query User{78F01B45-891D-4621-88D7-4F2F92F87D4F}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe

FirewallRules: [{963370C0-FAF7-4689-8C13-B2A229A7D047}] => (Allow) C:\Program Files (x86)\Synology\Assistant\DSAssistant.exe

FirewallRules: [{9DB980A4-ABA8-4A98-9C7D-1093F47FB8A2}] => (Allow) C:\Program Files (x86)\Synology\Assistant\DSAssistant.exe

FirewallRules: [TCP Query User{CBA7D358-A506-46C0-BE5A-3EB3D374B984}C:\program files\ensignnew\ensign.exe] => (Allow) C:\program files\ensignnew\ensign.exe

FirewallRules: [UDP Query User{BAE3D62C-10B6-45BB-A900-C8B61D1F5445}C:\program files\ensignnew\ensign.exe] => (Allow) C:\program files\ensignnew\ensign.exe

FirewallRules: [{C4A9621F-136C-432D-BBC0-889AB4D178B2}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe

FirewallRules: [{B6A97106-17DC-4388-96FE-C2C378658D3A}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe

FirewallRules: [{C07BD5EB-4286-4D2D-B584-8D1DA1B39931}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper_32.exe

FirewallRules: [{1BB445E9-FE05-495F-A368-A3DA59EE68BC}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper_32.exe

FirewallRules: [{C33CF1CD-B135-420E-BF15-3AB7CC450C86}] => (Allow) C:\Program Files\Opera x64\opera.exe

FirewallRules: [{938C1A5B-96FF-4E7B-8F7B-D2BB3F30002B}] => (Allow) C:\Program Files\Opera x64\opera.exe

FirewallRules: [{1EDBF2E5-73A6-4BF3-97DB-12CD8FA5ECC8}] => (Allow) C:\Program Files\uTorrent\uTorrent.exe

FirewallRules: [{D5F1A0C4-E002-4890-A838-6F5203A5B351}] => (Allow) C:\Program Files\uTorrent\uTorrent.exe

FirewallRules: [{FEAA5EE2-2AD3-4EBC-9B2A-D852CF6CFAF3}] => (Allow) C:\Program Files (x86)\gnucash\bin\gnucash.exe

FirewallRules: [{C605AE44-D777-41EC-97F3-872E93473B75}] => (Allow) C:\Program Files (x86)\gnucash\bin\gnucash.exe

FirewallRules: [{5919FF28-282B-4BC5-B2CE-674809C29F98}] => (Allow) C:\Program Files (x86)\gnucash\bin\gconfd-2.exe

FirewallRules: [{6D33FC1F-FF75-4AC6-A0DF-218CF3F3DE42}] => (Allow) C:\Program Files (x86)\gnucash\bin\gconfd-2.exe

FirewallRules: [TCP Query User{5ED49088-34E9-4840-BD82-1BEB2113E648}C:\program files (x86)\leawo\dvd creator\loadingscreen.exe] => (Allow) C:\program files (x86)\leawo\dvd creator\loadingscreen.exe

FirewallRules: [UDP Query User{665788C7-6FFD-4698-B07D-A895D59DB79A}C:\program files (x86)\leawo\dvd creator\loadingscreen.exe] => (Allow) C:\program files (x86)\leawo\dvd creator\loadingscreen.exe

FirewallRules: [TCP Query User{F3D77A24-383F-49D3-BF29-61511C7F560C}C:\program files (x86)\yestrader\trader.exe] => (Allow) C:\program files (x86)\yestrader\trader.exe

FirewallRules: [UDP Query User{53E448C3-4AE6-45B2-A120-23304A140B64}C:\program files (x86)\yestrader\trader.exe] => (Allow) C:\program files (x86)\yestrader\trader.exe

FirewallRules: [{05EDDC51-A5CD-45B2-98DA-ED841AEEF32F}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe

FirewallRules: [{043D13B6-8817-4EAF-A9A0-D94F7D0F3C26}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe

FirewallRules: [{6512F83B-0287-4EC4-AC55-38D8A03B907A}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro\Apowersoft Screen Recorder Pro.exe

FirewallRules: [{C060232A-2F45-4A4E-89B6-146C97E44186}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro\Apowersoft Screen Recorder Pro.exe

FirewallRules: [TCP Query User{A99DA7F3-E3D6-483C-860E-F9A78779A2C3}C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir000b.tmp\lmi_rescue.exe] => (Allow) C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir000b.tmp\lmi_rescue.exe

FirewallRules: [UDP Query User{32AAFE74-55BD-4347-8C61-B223BC0D57B5}C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir000b.tmp\lmi_rescue.exe] => (Allow) C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir000b.tmp\lmi_rescue.exe

FirewallRules: [TCP Query User{CEEF9D91-834A-4E98-BD2C-48D4FB5F39B7}C:\program files (x86)\desktop messenger\8876480\program\backweb-8876480.exe] => (Allow) C:\program files (x86)\desktop messenger\8876480\program\backweb-8876480.exe

FirewallRules: [UDP Query User{29613B42-C918-468F-A5B6-9870479FF241}C:\program files (x86)\desktop messenger\8876480\program\backweb-8876480.exe] => (Allow) C:\program files (x86)\desktop messenger\8876480\program\backweb-8876480.exe

FirewallRules: [{3B9A2557-DCC8-4DEE-9979-6730D01F9A96}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe

FirewallRules: [{47F82C9D-B511-4C01-A894-695D848575E5}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe

FirewallRules: [{10A016C3-9F1B-4B07-82B8-452C1CB9D898}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe

FirewallRules: [{07B74B74-EDFC-48C1-9E87-4AE951539DE8}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe

FirewallRules: [{27256D9A-28A7-42E8-849B-9E5026C29DBE}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe

FirewallRules: [{9A552954-B53E-493F-919C-BECAE79A93D1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{3E0A2BE1-50F9-4FEE-95B9-51FF5522EDBA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{8590B646-77D5-4BB4-91A0-D48A96C9821C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{1D310625-87E6-4036-8FA5-75941EBF5754}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{4355C9B9-0F4C-47CA-A18F-3798FE4E2389}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII.SP1\Win32\RpcDataSrv.exe

FirewallRules: [{53F66D24-28B8-48CB-9190-E45EAB10B5DB}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII.SP1\RpcSandraSrv.exe

FirewallRules: [{82D67F21-49A6-43C2-A4AF-1D3BC8BC8BB5}] => (Allow) C:\Program Files\KooRaRoo Media\KooRaRooMedia.exe

FirewallRules: [{5DF549A9-646F-403D-8695-E71896BD243C}] => (Allow) C:\Program Files\KooRaRoo Media\KooRaRooMediaServer.exe

FirewallRules: [TCP Query User{A362A621-DE4F-4EEB-882A-8578A3EFDDCC}C:\program files\internet explorer\iexplore.exe] => (Allow) C:\program files\internet explorer\iexplore.exe

FirewallRules: [UDP Query User{98A27022-0046-423D-ABCD-9A1ADB8553AA}C:\program files\internet explorer\iexplore.exe] => (Allow) C:\program files\internet explorer\iexplore.exe

FirewallRules: [TCP Query User{F0EF7AC1-2E8B-466E-9AD5-D9F2E38FDDEB}C:\program files (x86)\1stworks\hotcommlite\bin\hotcomm.exe] => (Allow) C:\program files (x86)\1stworks\hotcommlite\bin\hotcomm.exe

FirewallRules: [UDP Query User{EE063828-93EE-4D3A-B622-0F2E29AE0881}C:\program files (x86)\1stworks\hotcommlite\bin\hotcomm.exe] => (Allow) C:\program files (x86)\1stworks\hotcommlite\bin\hotcomm.exe

FirewallRules: [TCP Query User{8FAFA6F6-4461-4223-8F4F-1BBFF9D37E2A}C:\program files (x86)\ninjatrader 7\bin\ninjatrader.exe] => (Allow) C:\program files (x86)\ninjatrader 7\bin\ninjatrader.exe

FirewallRules: [UDP Query User{333AECEF-9AB6-4C45-B401-433FC5E07BEA}C:\program files (x86)\ninjatrader 7\bin\ninjatrader.exe] => (Allow) C:\program files (x86)\ninjatrader 7\bin\ninjatrader.exe

FirewallRules: [TCP Query User{EF512B50-9337-4639-BFB8-71FEFA8006ED}C:\program files\ensignnew\ensign.exe] => (Allow) C:\program files\ensignnew\ensign.exe

FirewallRules: [UDP Query User{B801F5E2-6770-4A9C-8F8C-2C74832A2435}C:\program files\ensignnew\ensign.exe] => (Allow) C:\program files\ensignnew\ensign.exe

FirewallRules: [TCP Query User{6C6F12EB-322B-4AAA-9C4E-DBBDCD07E3C7}C:\program files (x86)\ninjatrader 7\bin\ninjatrader.exe] => (Allow) C:\program files (x86)\ninjatrader 7\bin\ninjatrader.exe

FirewallRules: [UDP Query User{FB9EA4ED-D27D-41B9-94AB-52504E5ADD16}C:\program files (x86)\ninjatrader 7\bin\ninjatrader.exe] => (Allow) C:\program files (x86)\ninjatrader 7\bin\ninjatrader.exe

FirewallRules: [TCP Query User{C55CDFFD-9F2A-492F-B2EA-4CCB35FB02CB}C:\users\morgan pierce parker\appdata\local\logmein client\logmein client.exe] => (Allow) C:\users\morgan pierce parker\appdata\local\logmein client\logmein client.exe

FirewallRules: [UDP Query User{803C4844-32AF-45E6-A4CB-277FEE62E1CE}C:\users\morgan pierce parker\appdata\local\logmein client\logmein client.exe] => (Allow) C:\users\morgan pierce parker\appdata\local\logmein client\logmein client.exe

FirewallRules: [TCP Query User{AD59ED06-7B6B-49BA-A6EC-6B52F11CE2C6}C:\program files (x86)\dolce ear training\dolce ear training.exe] => (Allow) C:\program files (x86)\dolce ear training\dolce ear training.exe

FirewallRules: [UDP Query User{A5CEAD50-7EEA-4E72-841B-48050CB3A979}C:\program files (x86)\dolce ear training\dolce ear training.exe] => (Allow) C:\program files (x86)\dolce ear training\dolce ear training.exe

FirewallRules: [{1B4F29B5-88DF-43D6-83D8-2A7152E6FA7D}] => (Allow) LPort=8317

FirewallRules: [{E5BF81B2-5945-4185-A675-104F9524627F}] => (Allow) c:\Program Files (x86)\Audials\Audials 11\Audials.exe

FirewallRules: [{604976F2-FCD2-4BCB-AD94-A93819190A3B}] => (Allow) LPort=12972

FirewallRules: [{6074022D-6F92-407B-9704-E0CEB23D36D9}] => (Allow) LPort=14714

FirewallRules: [{E7465462-6225-4C72-93DF-B7885782C593}] => (Allow) LPort=31931

FirewallRules: [TCP Query User{A9B94578-C29D-4AF2-8315-659F947CBA29}C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir0011.tmp\lmi_rescue.exe] => (Allow) C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir0011.tmp\lmi_rescue.exe

FirewallRules: [UDP Query User{1EB785CD-7F1E-40F7-B7E9-C42E8D70522B}C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir0011.tmp\lmi_rescue.exe] => (Allow) C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir0011.tmp\lmi_rescue.exe

FirewallRules: [TCP Query User{8D83CF91-0D3A-4E92-8C38-0B1F84353E57}C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir0012.tmp\lmi_rescue.exe] => (Allow) C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir0012.tmp\lmi_rescue.exe

FirewallRules: [UDP Query User{993FFE7E-E28D-4627-94F7-11E499737595}C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir0012.tmp\lmi_rescue.exe] => (Allow) C:\users\morgan pierce parker\appdata\local\logmein rescue applet\lmir0012.tmp\lmi_rescue.exe

FirewallRules: [{C861C69F-4FC5-4ABA-B78B-C5C82742392D}] => (Allow) LPort=62279

FirewallRules: [{72674FA5-63F4-4137-8EDA-B256DE64104B}] => (Allow) LPort=16023

FirewallRules: [TCP Query User{07E9936D-BA9A-4F5E-8C14-D55F97362C5A}C:\program files (x86)\leawo\video converter pro\loadingscreen.exe] => (Allow) C:\program files (x86)\leawo\video converter pro\loadingscreen.exe

FirewallRules: [UDP Query User{6326CC60-28A3-4D20-9330-9648C989AA17}C:\program files (x86)\leawo\video converter pro\loadingscreen.exe] => (Allow) C:\program files (x86)\leawo\video converter pro\loadingscreen.exe

FirewallRules: [{C28E1ECF-B5AA-4250-828E-386247A11262}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe

FirewallRules: [{CD1B7A64-3E95-4814-93B6-20C19547B90D}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe

FirewallRules: [{E51A7E51-9C87-4BC9-A104-7A3D9D8FEBA3}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{4C6F5545-59FF-459A-9AC8-4BF3B952627F}] => (Allow) LPort=2869

FirewallRules: [{6641DA68-B782-44D2-A005-E302C3C28BBA}] => (Allow) LPort=1900

FirewallRules: [TCP Query User{719ECFF1-2629-4174-AB63-FA616AA82A77}C:\program files\exeone security\personalmon.exe] => (Allow) C:\program files\exeone security\personalmon.exe

FirewallRules: [UDP Query User{6A638CB9-88CB-4322-91AE-E9BBC08E44A3}C:\program files\exeone security\personalmon.exe] => (Allow) C:\program files\exeone security\personalmon.exe

FirewallRules: [{2A8B6D35-B7ED-49F9-BD3E-9E8A05C1E6DD}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe

FirewallRules: [{6F925CD4-75DA-4594-9220-DC5AEBBC744C}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe

FirewallRules: [{7193BDB3-A9FB-4016-8B19-D2B4C5795D94}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [TCP Query User{2E6B379F-AAE6-4E24-8726-BF62D1C48F5B}C:\program files (x86)\timebell\st.exe] => (Block) C:\program files (x86)\timebell\st.exe

FirewallRules: [UDP Query User{8BA37EC0-4246-4D05-A828-20AC692D8CA5}C:\program files (x86)\timebell\st.exe] => (Block) C:\program files (x86)\timebell\st.exe

FirewallRules: [{4842A5BA-5E52-43E5-9CBA-BDEEE1EBC10C}] => (Allow) C:\Program Files (x86)\UnHackMe\Unhackme.exe

FirewallRules: [{1FA78634-3927-4747-ACD2-7421D0B83774}] => (Allow) C:\Program Files (x86)\UnHackMe\Unhackme.exe

FirewallRules: [{A528A2DB-C34B-4B86-92B8-21FEFFBFCCDB}] => (Allow) C:\Program Files (x86)\mozilla firefox\firefox.exe

FirewallRules: [{2BB7E4F9-D687-4D29-9610-C543E44DBBA5}] => (Allow) C:\Program Files (x86)\mozilla firefox\firefox.exe

FirewallRules: [{2285049B-36C8-493A-AD1A-A533126D7F64}] => (Allow) LPort=53168

FirewallRules: [{B331C117-8D51-4BA0-8A9C-0CBD907A3914}] => (Allow) LPort=53168

FirewallRules: [{CD7C7F64-836C-4628-A272-ABB50932E0AC}] => (Allow) LPort=53168

FirewallRules: [{91EBA87F-E955-487B-9F34-221CED68C735}] => (Allow) LPort=2869

FirewallRules: [{0A94CD40-9B68-4EBE-A32A-39BAC83B5947}] => (Allow) LPort=1900

FirewallRules: [{B7ED9FB0-5DCE-4E9A-86AF-7BAD3141BF53}] => (Allow) C:\Program Files (x86)\PlagiarismCheckerX\Plagiarism Checker X.exe

FirewallRules: [{DBBF2FFD-E792-488F-9656-9554E4480184}] => (Allow) C:\Program Files (x86)\PlagiarismCheckerX\Update.exe

FirewallRules: [TCP Query User{49BB289A-1EB2-472C-A9ED-D4DE1B4742A3}C:\windows\system32\java.exe] => (Block) C:\windows\system32\java.exe

FirewallRules: [UDP Query User{3E675710-F03E-4C6B-B567-4EA17881B067}C:\windows\system32\java.exe] => (Block) C:\windows\system32\java.exe

FirewallRules: [TCP Query User{8811A31F-26C6-46B6-89EA-4A689A41F9EA}C:\program files\onone software\perfect effects 9\perfect effects 9.exe] => (Allow) C:\program files\onone software\perfect effects 9\perfect effects 9.exe

FirewallRules: [UDP Query User{6E4A5FFD-E3AF-4C9C-ABBB-460C26390914}C:\program files\onone software\perfect effects 9\perfect effects 9.exe] => (Allow) C:\program files\onone software\perfect effects 9\perfect effects 9.exe

FirewallRules: [{4AB346DA-4462-4C9E-A6EA-AB14C30F0411}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Capture Pro\Apowersoft Screen Capture Pro.exe

FirewallRules: [{F535B4EB-4BC6-44EA-AC4C-C799C793AA2C}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Capture Pro\Apowersoft Screen Capture Pro.exe

FirewallRules: [TCP Query User{D88E17A4-52BE-4CEF-8BEC-E5145BEAB2FD}C:\program files\smartpixel\bin\smartpixel.exe] => (Allow) C:\program files\smartpixel\bin\smartpixel.exe

FirewallRules: [UDP Query User{A718DE1C-161C-4FE8-903F-E15C988D4AA7}C:\program files\smartpixel\bin\smartpixel.exe] => (Allow) C:\program files\smartpixel\bin\smartpixel.exe

FirewallRules: [{388E0BC8-87B4-4EEE-B64E-6BEEE4D842F7}] => (Allow) C:\Program Files (x86)\Hide My IP 6\HideMyIP.exe

FirewallRules: [{77B5C571-7C7D-4607-921E-60ADE8026A0A}] => (Allow) C:\Program Files (x86)\Hide My IP 6\HideMyIpSrv.exe

FirewallRules: [{587DAC7C-64D0-4F9F-BB54-EB3202A86001}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\Apowersoft Phone Manager.exe

FirewallRules: [{17F629A2-7BB0-4BBB-BDC1-34ADB3E1D724}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\Apowersoft Phone Manager.exe

FirewallRules: [{EDA824FE-F421-44B0-92D0-F1A17B056247}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\ApowersoftAndroidDaemon.exe

FirewallRules: [{72EFC2C5-4DBB-41BF-9441-3CCADFF86D2B}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\ApowersoftAndroidDaemon.exe

FirewallRules: [{856E92C8-F98C-4C3E-81F9-A722D98546F2}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe

FirewallRules: [{08A2FED9-4126-4322-860C-F8AA4EF550C3}] => (Allow) C:\Program Files\Aml Pages\AmlPages.exe

FirewallRules: [{88C0E130-68D5-4682-BD07-8018BE5FB028}] => (Allow) C:\Program Files\Aml Pages\AmlPages.exe

FirewallRules: [{3D9E753C-0169-4D84-BE51-74D5BABDC309}] => (Allow) c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe

FirewallRules: [{311026C1-252C-4251-932C-29CB48FFA806}] => (Allow) C:\Program Files (x86)\Softland\Backup4all 5\Backup4all.exe

FirewallRules: [{94D53FAC-012E-4086-8100-E55A3F46449E}] => (Allow) C:\Program Files (x86)\Softland\Backup4all 5\bBackup.exe

FirewallRules: [{D27DB9BC-5B48-457F-9879-C884026CFB4F}] => (Allow) C:\Program Files (x86)\Softland\Backup4all 5\bTest.exe

FirewallRules: [{96120D6E-E751-4264-AD6A-BE1FF4E06FB8}] => (Allow) C:\Program Files (x86)\Softland\Backup4all 5\bRestore.exe

FirewallRules: [{FB1E99CE-E3D6-42D4-87E5-E9AAE4A07F50}] => (Allow) C:\Program Files (x86)\Softland\Backup4all 5\bCleanup.exe

FirewallRules: [{8E2D782A-499A-41AF-88C2-4D4A48D1D4F5}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe

FirewallRules: [{3D6798FA-A647-4D56-A0B5-219788D9EC51}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe

FirewallRules: [{63AE093D-FC67-41EC-8E3B-9DBF32A1D77F}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe

FirewallRules: [{C161B038-EC4E-44A1-918B-C918610143C8}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe

FirewallRules: [{8F58B5AD-6659-474B-83D5-EB38F782C827}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\ActivePresenter.exe

FirewallRules: [{A376A29C-96FD-4DC4-8C96-8FB5E9E385AF}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\ActivePresenter.exe

FirewallRules: [{0DBCD31C-114E-4010-A3C7-B6D831EDC5C4}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\rlhtmlrenderer.exe

FirewallRules: [{98E7179E-A91B-4101-BF92-85CFDC3D6A61}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\rlhtmlrenderer.exe

FirewallRules: [{762A12BE-B750-46E0-92BB-700838B4A291}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\rlactivator.exe

FirewallRules: [{1578BF51-B2DA-4484-9742-7A46076DA0BC}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\rlactivator.exe

FirewallRules: [{E99E3DD6-0594-437F-A6EE-906517C23562}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\rlupdater.exe

FirewallRules: [{D9ECE267-9BC6-4B8F-A64C-A1DD506DDF9D}] => (Allow) C:\Program Files (x86)\ATOMI\ActivePresenter\rlupdater.exe

FirewallRules: [{0F40D294-6E26-499D-87D3-426A869CC97B}] => (Allow) C:\Program Files (x86)\mozilla firefox\firefox.exe

FirewallRules: [{1D525E1B-0413-43B9-9CD4-F9DC27499685}] => (Allow) C:\Program Files (x86)\mozilla firefox\firefox.exe

FirewallRules: [{813DDE41-5A8C-4419-BEBF-22CCBB370692}] => (Allow) C:\Program Files\Aeroadmin Pro 4-1\Setup.exe

FirewallRules: [{626E2AA1-4DF0-4E2E-8FED-B10ABEECB463}] => (Allow) C:\Program Files\Aeroadmin Pro 4-1\Setup.exe

FirewallRules: [{0965B1EE-C3A5-4415-AC14-816AE4B99382}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe

FirewallRules: [{2536C850-8DB8-4280-9731-BE2C16BC254A}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe

FirewallRules: [{3365DCA9-CE73-4BB0-AE1A-9D56B5DF92D4}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe

FirewallRules: [{1A5222FF-037F-4149-9C07-4CFA521ABBC7}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe

FirewallRules: [{C93E09E8-0B8F-4FAC-B8BD-0AB8F2DD48E6}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe

FirewallRules: [{B3812B9F-8F3D-4848-AFA2-0D12B8F92902}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe

FirewallRules: [{1D2E6629-77DE-4BC9-A9E5-73C55EAF3D8A}] => (Allow) C:\Program Files (x86)\IrfanView\i_view32.exe

FirewallRules: [{97EF5680-BCF2-4E1D-9074-5A6875C19498}] => (Allow) C:\Program Files (x86)\IrfanView\i_view32.exe

FirewallRules: [{BD22CB44-26FE-411E-88A9-827BA9CCDDF2}] => (Allow) C:\Program Files (x86)\IrfanView\i_view32.exe

FirewallRules: [{FF9973E3-556F-43AF-A435-AF5E0F3434F6}] => (Allow) C:\Program Files (x86)\IrfanView\i_view32.exe

FirewallRules: [{569F4F8C-03F8-49B8-9DCE-E44A0B0B2413}] => (Allow) C:\Program Files (x86)\Readygo Screen Recorder\ReadygoScreenRecorder.exe

FirewallRules: [{FDE9A0EB-66D9-456C-A7BE-3287085FAA5D}] => (Allow) C:\Program Files (x86)\Readygo Screen Recorder\ReadygoScreenRecorder.exe

FirewallRules: [{FB9D6A30-1223-4C5E-9F2B-277CAF8EE110}] => (Allow) C:\Program Files (x86)\Readygo Screen Recorder\ReadygoScreenRecorder.exe

FirewallRules: [{86570717-B366-4DFF-890A-CCE129F176CC}] => (Allow) C:\Program Files (x86)\Readygo Screen Recorder\ReadygoScreenRecorder.exe

FirewallRules: [{738C29B3-AD95-4C8B-AA6C-F301470DDF37}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [{842DB976-D71A-46D9-85B0-982779EB1295}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [{4DF1C7A2-9BCD-4264-B6B6-C24E7471C671}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Activation.exe

FirewallRules: [{34763CD0-B12B-4E1A-81D9-164D9E484E80}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Activation.exe

FirewallRules: [{629A3A04-9F1C-4E44-B62C-39DE30A20706}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [{D564E7DC-2814-4AED-AE3D-F138D3403959}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [TCP Query User{3E0E382C-5FF2-48F6-AAD1-84D9AA1CAF95}C:\program files (x86)\ninjatrader 7\bin64\ninjatrader.exe] => (Allow) C:\program files (x86)\ninjatrader 7\bin64\ninjatrader.exe

FirewallRules: [UDP Query User{DB5C06D7-7A2F-4508-A86E-1733E72E12E7}C:\program files (x86)\ninjatrader 7\bin64\ninjatrader.exe] => (Allow) C:\program files (x86)\ninjatrader 7\bin64\ninjatrader.exe

FirewallRules: [{E4E08726-5BA7-41FE-845D-BBFE8C148E0D}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe

FirewallRules: [{ADD8D884-E39F-45DD-BC49-03138465AFA5}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe

FirewallRules: [{235A5078-7D78-49C6-A895-BEAE8E7BE489}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper_32.exe

FirewallRules: [{28C2D0F7-C1B1-4E7C-BBD0-E328A9ACBD42}] => (Allow) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper_32.exe

FirewallRules: [{3C0291C9-520D-4B52-AD92-D92E20BE748B}] => (Allow) C:\Program Files\Opera x64\opera.exe

FirewallRules: [{80F593F7-19CC-4DC0-88FA-B1F1A31B26FC}] => (Allow) C:\Program Files\Opera x64\opera.exe

FirewallRules: [TCP Query User{10A9ADAB-0926-4A74-B129-3ECB2E4B3C7E}C:\program files (x86)\wondershare\vcu\urlreqservice.exe] => (Block) C:\program files (x86)\wondershare\vcu\urlreqservice.exe

FirewallRules: [UDP Query User{96297520-B6CB-4250-A873-471DD56BB4F2}C:\program files (x86)\wondershare\vcu\urlreqservice.exe] => (Block) C:\program files (x86)\wondershare\vcu\urlreqservice.exe

FirewallRules: [TCP Query User{24362734-C385-4EA2-8605-05C852F33A07}C:\program files (x86)\timebell\st.exe] => (Block) C:\program files (x86)\timebell\st.exe

FirewallRules: [UDP Query User{9AC0FB37-7AF1-4628-9038-88DEC13D22EC}C:\program files (x86)\timebell\st.exe] => (Block) C:\program files (x86)\timebell\st.exe

FirewallRules: [TCP Query User{2A42C393-1224-4020-974A-7ECD6B1C4911}C:\program files\itunes\itunes.exe] => (Allow) C:\program files\itunes\itunes.exe

FirewallRules: [UDP Query User{1CC1CB55-D113-403C-A57A-56100DA03500}C:\program files\itunes\itunes.exe] => (Allow) C:\program files\itunes\itunes.exe

FirewallRules: [{D56AF2D8-D37B-4B50-AD32-319DFBCB72E8}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{F1BD3AE5-86A7-498C-A394-FCC9742FEC81}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{84C6ED1A-3772-492F-897B-DA8106C072B7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{23943879-067C-4608-ACA4-0255FEF84259}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{23DA2F7B-3B30-4EA2-BC4D-F3F96F389751}] => (Allow) C:\Program Files (x86)\MAGIX\Music Maker\25\MusicMaker.exe

FirewallRules: [{D6F44539-C825-4240-B9A3-051C9AD3D842}] => (Allow) C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe

FirewallRules: [{4EDDFFE6-A0EC-44CA-BA3C-E139349C60D3}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{1E1866E0-4EDD-41D1-8E09-026BEC20A614}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{0D4520FC-EFD1-4B1A-9017-C1960BF34539}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [{F58B5488-6A0A-41C2-B579-4A4F19A76AC7}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [{660F8F74-5D49-4169-9919-B1A74FD67837}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Activation.exe

FirewallRules: [{EE631B18-011B-4340-B7D9-8032B1276980}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Activation.exe

FirewallRules: [{0DC3BF2B-4654-4EA2-9B34-7C02441BF210}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [{8841EC07-DB0D-46F3-8288-D6B5CFF103F5}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [{6D957F99-F9C0-4F81-BEA3-F07D8664309D}] => (Allow) C:\Program Files\Mozilla Firefox64\firefox.exe

FirewallRules: [{4AD280CC-1153-42FE-AA74-1B71E05A78A7}] => (Allow) C:\Program Files\Mozilla Firefox64\firefox.exe

FirewallRules: [TCP Query User{05C1C817-1124-433F-98F2-68D5C18CD39A}C:\program files\java\jre1.8.0_45\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\java.exe

FirewallRules: [UDP Query User{74C9DA1A-1206-4BD5-B4A4-CFD4E3B5139C}C:\program files\java\jre1.8.0_45\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\java.exe

FirewallRules: [{852FADC4-0FC7-48D4-B220-2E577F68B040}] => (Allow) C:\Program Files (x86)\Efficient Calendar\EfficientCalendar.exe

FirewallRules: [{09FD5678-3AE0-4403-9E14-B2C25775B85F}] => (Allow) C:\Program Files (x86)\Efficient Calendar\EfficientCalendar.exe

FirewallRules: [{C2CC9DE7-484A-4589-9594-B51DD1E110AA}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe

FirewallRules: [{F12F3023-657F-4F5B-BB9D-463BDE50A826}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe

FirewallRules: [{BCF7634C-51C5-429A-9E2E-036DB7F0284C}] => (Allow) C:\Program Files (x86)\AceThinker\AceThinker Music Recorder\AceThinker Music Recorder.exe

FirewallRules: [{63F51D12-B0F3-4312-9F0E-457C8D14CF99}] => (Allow) C:\Program Files (x86)\AceThinker\AceThinker Music Recorder\AceThinker Music Recorder.exe

FirewallRules: [{9F5740C6-0FAA-4E69-AB53-C8356985114E}] => (Allow) C:\Program Files (x86)\AceThinker\AceThinker Music Recorder\ApowersoftVideoHelper.dll

FirewallRules: [{68F75513-9189-4597-ABC1-256219BD5B23}] => (Allow) C:\Program Files (x86)\AceThinker\AceThinker Music Recorder\ApowersoftVideoHelper.dll

FirewallRules: [{6B8C7A6D-B34E-465E-9438-2ED87CC6D701}] => (Allow) C:\Program Files (x86)\Amolto Call Recorder for Skype\AmoltoRecorder.exe

FirewallRules: [{6533B134-586A-43ED-9566-7BA4D0A5A5CE}] => (Allow) C:\Program Files (x86)\Amolto Call Recorder for Skype\AmoltoRecorder.exe

FirewallRules: [{29F3A6D6-7434-4FD1-894D-5E4430CA4329}] => (Allow) C:\Program Files (x86)\Synology\Assistant\DSAssistant.exe

FirewallRules: [{E0C27A00-7DE4-4047-86FE-C717534A72A8}] => (Allow) C:\Program Files (x86)\Synology\Assistant\DSAssistant.exe

FirewallRules: [TCP Query User{0095CE32-C051-4BFD-A404-0763CB5EC2C2}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Allow) C:\program files (x86)\windscribe\wsappcontrol.exe

FirewallRules: [UDP Query User{FFDD9825-69DB-48A8-AD8A-676D72A87713}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Allow) C:\program files (x86)\windscribe\wsappcontrol.exe

FirewallRules: [TCP Query User{2D5434DC-7760-45AF-A583-FD3D4E3D0F08}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Block) C:\program files (x86)\windscribe\wsappcontrol.exe

FirewallRules: [UDP Query User{54C42182-25E1-4305-BB4A-0714D6BC91D5}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Block) C:\program files (x86)\windscribe\wsappcontrol.exe

FirewallRules: [{ED3149CC-E7B6-4F15-B92A-33D73577D147}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{55BE92CF-DED6-436F-BE91-2EB57980313D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{254D13CF-0094-4223-81F3-2D2AD5C8F2C7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{2B79D6D5-05A3-40F8-A311-55AD28836AC1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{A5ACDFEC-4A2A-4D9A-87F3-45CAFBEB0650}] => (Allow) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.EXE

FirewallRules: [{32235E0A-B264-4AE6-836A-7793DBB13C52}] => (Allow) LPort=8501

FirewallRules: [{9548DD5E-F2C0-4056-964C-A900580FD0D8}] => (Allow) LPort=8501

FirewallRules: [{30D478E8-F812-4B8C-AD82-757C7A65118B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{3F3E5FD9-0EE7-4A7A-8A90-8802A0A19763}] => (Allow) C:\Program Files\Opera\51.0.2830.40_0\opera.exe

FirewallRules: [{6C20D859-8D93-4E31-9B57-1F608ED0C983}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

FirewallRules: [{F20C1990-3AE1-462A-83C6-5F7350C981DB}] => (Allow) C:\Program Files (x86)\Opera20\51.0.2830.40\opera.exe

FirewallRules: [{00D7491B-59FC-43D4-92D2-D2E3F6824C5A}] => (Allow) C:\Users\Morgan Pierce Parker\AppData\Local\Chromium\Application\chrome.exe

FirewallRules: [{EFB015AB-1BC2-4F7C-8463-43394BB09853}] => (Allow) C:\Program Files\EASEUS\Todo Backup\bin\TbService.exe

FirewallRules: [{D316ABAE-871C-4FA9-B74E-DF8B68559B9F}] => (Allow) C:\Program Files\EASEUS\Todo Backup\bin\TbService.exe

FirewallRules: [{3596D369-134F-43C6-A9A1-0D91CA60A7F8}] => (Allow) C:\Program Files\EASEUS\Todo Backup\bin\TBConsoleUI.exe

FirewallRules: [{FBBD88CA-E3EE-4E26-BAAE-EDAA5D0FECBE}] => (Allow) C:\Program Files\EASEUS\Todo Backup\bin\TBConsoleUI.exe

FirewallRules: [{3730FF40-823D-4727-926C-16BBA7444F83}] => (Allow) C:\Program Files\EASEUS\Todo Backup\bin\TodoBackupService.exe

FirewallRules: [{73C46721-CC38-4633-A4E0-85086ADA69AA}] => (Allow) C:\Program Files\EASEUS\Todo Backup\bin\TodoBackupService.exe

FirewallRules: [{D8907565-485D-4BFB-BF76-F5C894FC06F0}] => (Allow) C:\Program Files\EASEUS\Todo Backup\bin\TodoBackupService.exe

FirewallRules: [{FA37EA12-1243-4435-8BFC-D9B88F118755}] => (Allow) C:\Program Files\EASEUS\Todo Backup\bin\TodoBackupService.exe

FirewallRules: [{6CFB6116-5E5F-4B8A-9C2F-FC03C4A0EBFC}] => (Allow) C:\Program Files (x86)\Opera20\51.0.2830.55\opera.exe

FirewallRules: [{1AC80557-7402-4A5A-96FD-DCF4FC10C35F}] => (Allow) C:\Program Files\Opera\51.0.2830.55\opera.exe

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Market Analyst 7\MarketAnalyst.exe] => Enabled:Market Analyst 7

 

==================== Restore Points =========================

 

 

==================== Faulty Device Manager Devices =============

 

Name: Microsoft Teredo Tunneling Adapter

Description: Microsoft Teredo Tunneling Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

 

 

==================== Event log errors: =========================

 

 

Application errors:

==================

Error: (03/10/2018 08:28:54 PM) (Source: System Restore) (EventID: 8193) (User: )

Description: Failed to create restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint; Error = 0x80070422).

 

Error: (03/10/2018 07:41:50 PM) (Source: COM+) (EventID: 4691) (User: )

Description: The run-time environment was unable to initialize for transactions required to support transactional components. Make sure that MS-DTC is running. (DtcGetTransactionManagerEx(): hr = 0x8004d01b)

 

Error: (03/10/2018 07:41:44 PM) (Source: WinMgmt) (EventID: 24) (User: )

Description: Event provider NcsWmiEventProv attempted to register query "SELECT * FROM IANet_802dot3VlanEvent" whose target class "IANet_802dot3VlanEvent" in //./root/CIMV2 namespace does not exist. The query will be ignored.

 

Error: (03/10/2018 07:41:44 PM) (Source: WinMgmt) (EventID: 24) (User: )

Description: Event provider NcsWmiEventProv attempted to register query "SELECT * FROM IANet_802dot3TeamEvent" whose target class "IANet_802dot3TeamEvent" in //./root/CIMV2 namespace does not exist. The query will be ignored.

 

Error: (03/10/2018 07:41:44 PM) (Source: WinMgmt) (EventID: 24) (User: )

Description: Event provider NcsWmiEventProv attempted to register query "SELECT * FROM IANet_802dot3AdapterEvent" whose target class "IANet_802dot3AdapterEvent" in //./root/CIMV2 namespace does not exist. The query will be ignored.

 

Error: (03/10/2018 07:40:25 PM) (Source: SRService) (EventID: 104) (User: )

Description: Event-ID 104

 

Error: (03/10/2018 04:03:59 PM) (Source: WinMgmt) (EventID: 24) (User: )

Description: Event provider NcsWmiEventProv attempted to register query "SELECT * FROM IANet_802dot3VlanEvent" whose target class "IANet_802dot3VlanEvent" in //./root/CIMV2 namespace does not exist. The query will be ignored.

 

Error: (03/10/2018 04:03:59 PM) (Source: WinMgmt) (EventID: 24) (User: )

Description: Event provider NcsWmiEventProv attempted to register query "SELECT * FROM IANet_802dot3TeamEvent" whose target class "IANet_802dot3TeamEvent" in //./root/CIMV2 namespace does not exist. The query will be ignored.

 

 

System errors:

=============

Error: (03/10/2018 11:03:16 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Windows Search service terminated unexpectedly.  It has done this 8 time(s).

 

Error: (03/10/2018 11:03:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Windows Search service terminated unexpectedly.  It has done this 7 time(s).

 

Error: (03/10/2018 11:02:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Windows Search service terminated unexpectedly.  It has done this 6 time(s).

 

Error: (03/10/2018 11:02:47 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Windows Search service terminated unexpectedly.  It has done this 5 time(s).

 

Error: (03/10/2018 10:52:24 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: The server {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} did not register with DCOM within the required timeout.

 

Error: (03/10/2018 10:51:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Windows Search service terminated unexpectedly.  It has done this 4 time(s).

 

Error: (03/10/2018 10:49:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Malwarebytes Service service terminated unexpectedly.  It has done this 2 time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service.

 

Error: (03/10/2018 10:49:17 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Malwarebytes Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service.

 

 

Windows Defender:

===================================

Date: 2018-01-29 10:10:35.190

Description: 

Windows Defender scan has been stopped before completion.

Scan ID:{14F65217-E8BB-4DDE-8043-E90D48762BBB}

Scan Type:AntiSpyware

Scan Parameters:Quick Scan

 

Date: 2018-02-23 14:30:47.443

Description: 

Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.

Signatures Attempted:Current

Error Code:0x80070002

Error description:The system cannot find the file specified. 

Signature version:0.0.0.0

Engine version:0.0.0.0

 

CodeIntegrity:

===================================

 

Date: 2018-01-10 07:15:38.330

Description: 

Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\temp\morganp\tmp\Local Settings\Temp\{3a1bda67-2e0e-6467-aded-ce0fbabe5e17}\B302183\atikmdag.sys because the set of per-page image hashes could not be found on the system.

 

Date: 2018-01-10 07:15:38.097

Description: 

Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\temp\morganp\tmp\Local Settings\Temp\{3a1bda67-2e0e-6467-aded-ce0fbabe5e17}\B302183\atikmdag.sys because the set of per-page image hashes could not be found on the system.

 

Date: 2018-01-10 07:15:37.850

Description: 

Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\temp\morganp\tmp\Local Settings\Temp\{3a1bda67-2e0e-6467-aded-ce0fbabe5e17}\B302183\atikmdag.sys because the set of per-page image hashes could not be found on the system.

 

Date: 2018-01-10 07:15:36.151

Description: 

Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\temp\morganp\tmp\Local Settings\Temp\{3a1bda67-2e0e-6467-aded-ce0fbabe5e17}\B302183\atikmdag.sys because the set of per-page image hashes could not be found on the system.

 

Date: 2018-01-10 07:15:32.325

Description: 

Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\temp\morganp\tmp\Local Settings\Temp\{3a1bda67-2e0e-6467-aded-ce0fbabe5e17}\B302183\atikmpag.sys because the set of per-page image hashes could not be found on the system.

 

Date: 2018-01-10 07:15:32.240

Description: 

Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\temp\morganp\tmp\Local Settings\Temp\{3a1bda67-2e0e-6467-aded-ce0fbabe5e17}\B302183\atikmpag.sys because the set of per-page image hashes could not be found on the system.

 

Date: 2018-01-10 07:15:32.143

Description: 

Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\temp\morganp\tmp\Local Settings\Temp\{3a1bda67-2e0e-6467-aded-ce0fbabe5e17}\B302183\atikmpag.sys because the set of per-page image hashes could not be found on the system.

 

Date: 2018-01-10 07:15:30.425

Description: 

Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\temp\morganp\tmp\Local Settings\Temp\{3a1bda67-2e0e-6467-aded-ce0fbabe5e17}\B302183\atikmpag.sys because the set of per-page image hashes could not be found on the system.

 

==================== Memory info =========================== 

 

Processor: Intel® Xeon® CPU X5570 @ 2.93GHz

Percentage of memory in use: 13%

Total physical RAM: 65533.58 MB

Available physical RAM: 56682.2 MB

Total Virtual: 131065.35 MB

Available Virtual: 121273.7 MB

 

==================== Drives ================================

 

Drive c: () (Fixed) (Total:1862.78 GB) (Free:1094.65 GB) NTFS

Drive f: (100331_1208) (CDROM) (Total:0.01 GB) (Free:0 GB) CDFS

Drive h: (New Volume) (Fixed) (Total:1863.01 GB) (Free:859.75 GB) NTFS

Drive r: ® (Network) (Total:5540.26 GB) (Free:4619.98 GB) NTFS

Drive s: (S) (Network) (Total:5540.26 GB) (Free:2642.12 GB) NTFS

Drive z: () (Network) (Total:1829.22 GB) (Free:160.76 GB) 

 

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (MBR Code: Windows 7/8/10) (Size: 1862.9 GB) (Disk ID: B7B6EB23)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=1862.8 GB) - (Type=07 NTFS)

 

========================================================

Disk: 1 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: 19ED1B1B)

Partition 1: (Active) - (Size=1863 GB) - (Type=07 NTFS)

 

==================== End of Addition.txt ============================

 

So, Satchfan, now over to you.  Hope this helps.  I will wait to hear from you.  

 

BTW, Thanks VERY MUCH for all your help!

[Satchfan]

You're welcome.

 

Won't be in touch immediately as that is a very long log and I also have things to do today but will get back as soon as I can.

 

BTW, you ran all of those perfectly and things are slowly getting sorted.

[Safe]

K, thanks again.  Have a god day.

[Satchfan]

Another delay.

 

There are some entries in your logs that have been flagged as 'bad' and I've asked the author of FRST why they have been flagged so will need to await a reply. Hopefully won't be too long.

[Safe]

Just came back to machine and noticed that Malware Bytes is again active in the tray and monitoring websites.  Machine seems normal; weirdness gone so I cam not doing anything but waiting to hear from you.

 

About 5 hours later, I came back to the machine.  I had one one program running and it was not doing anything; normal this program never causes any problems. I tried to open Windows Explorer and got "Server Error" dialog box.  Was not from any program.  I could not open any folders on local or NAS drives.  Nothing without getting this error.   (This was on 2018 03 10 around 20:00.  FWIW.

 

I felt I had to reboot so I did and then machine normal again.  BTW, after re-boot, MalwareBytes was not running in the task bar tray ---- actually not running at all.

 

Hi Satchafan!  It is now Thursday March 15th at 9:30 AM.  I have been using this machine with no incidents (no MWB) for about 5 days,  FYI.  Waiting for instructions when you have time. 

Edited by Safe, 15 March 2018 - 07:37 AM.