PC keeps freezing when playing games

Collapse
X
Collapse
 
  • Page of 3
  • Time
  • Show
Clear All
new posts
Previous 1 2 3 template Next
  • Fexerrum
    PCHF Member
    • Jun 2019
    • 13
    #1

    PC keeps freezing when playing games

    My computer keeps permanently freezing when playing games, at seemingly random times, and I have to manually power off the PC. Itโ€™s been happening since a few weeks, and I still havenโ€™t figured it out why.
    Things I tried already:
    [ul]
    [li]Updating drivers (cpu, bios, gpu, sound, lan)[/li][li]Checking temperatures (all fine)[/li][li]Checking event viewer (found nothing before the time of freeze)[/li][/ul]
    Do you have any idea on how to fix it? Thanks for the help in advance.
    Tags: None
    • Malnutrition
      PCHF Moderator
      • Jul 2016
      • 7041
      #2
      Step 1:

      Security Check Scan.

      [ul]
      [li]Download Security Check to your desktop.[/li][li]Right click it run as administrator.[/li][li]When the program completes, the tool will automatically open a log file.[/li][li]Please post that log here in your next post.[/li][/ul]

      Step 2:

      Adware Cleaner Scan.

      Please download AdwCleaner by Xplode onto your desktop.

      [ul]
      [li]Close all open programs and internet browsers.[/li][li]Right Click on adwcleaner.exe and run as admin to run the tool.[/li][li]Click on Scan button.[/li][li]When the scan has finished click on Clean button.[/li][li]Your computer will be rebooted automatically. A text file will open after the restart.[/li][li]Please post the contents of that logfile with your next reply.[/li][li]You can find the logfile at C:\AdwCleaner[S1].txt as well.[/li][/ul]

      Step 3:

      HijackThis.

      1- Please click HERE to download HijackThis.
      2- Run the program.
      3- Click on the Main Menu button if not already there.
      4- Select Do a system scan and save a logfile.
      5- Copy paste the log here.


      Step 4:

      Please download MINITOOLBOX and run it.

      Checkmark following boxes:

      Flush DNS
      Reset FF proxy Settings
      Reset Ie Proxy Settings
      Report IE Proxy Settings
      Report FF Proxy Settings
      List content of Hosts
      List IP configuration
      List Winsock Entries
      List last 10 Event Viewer log
      List Installed Programs
      List Users, Partitions and Memory size
      List Devices (problems only)

      Click Go post the result.

        Comment

        • Fexerrum
          PCHF Member
          • Jun 2019
          • 13
          #3
          Okay, I was thinking about it and looked a bit further, it might actually not be a scam site, you just make it really look like one (with typical redflags)
          I apologize for my last comment, I canโ€™t edit it, you can remove it. Iโ€™ll post the logs later.
          By the way, my antivirus recognized your version of Security Check as a trojan, I had no trouble when I downloaded another version.

            Comment

            • Malnutrition
              PCHF Moderator
              • Jul 2016
              • 7041
              #4
              Originally posted by Fexerrum
              my antivirus recognized your version of Security Check as a trojan,
              I assure you that it is not a virus. Please just disable your antivirus to run it. You can look through my post, I am not here to add malware to peoples machines I remove it.

              Previous post redacted.

                Comment

                • Fexerrum
                  PCHF Member
                  • Jun 2019
                  • 13
                  #5
                  Iโ€™m using Hungarian language on Windows, I hope thatโ€™s not a problem. If it is, tell me, and Iโ€™ll set it to English and run these again.

                  SysCheck:

                  SecurityCheck by glax24 & Severnyj v.1.4.0.53 [27.10.17]
                  WebSite: www.safezone.cc
                  DateLog: 16.06.2019 16:11:49
                  Path starting: C:\Users\User\AppData\Local\Temp\SecurityCheck\Sec urityCheck.exe
                  Log directory: C:\SecurityCheck
                  IsAdmin: True
                  User: User
                  VersionXML: 6.56is-15.06.2019

                  Windows 10(6.3.17134) (x64) Professional Release: 1803 Lang: 040E
                  Installation date OS: 26.05.2018 05:21:13
                  LicenseStatus: Windows(R), Professional edition Volume activation will expire : 23342 minutes
                  LicenseStatus: Office 16, Office16ProPlusVL_KMS_Client edition Volume activation will expire : 23342 minutes
                  Boot Mode: Normal
                  Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.EXE
                  SystemDrive: C: FS: [NTFS] Capacity: [111.3 Gb] Used: [102.5 Gb] Free: [8.8 Gb]
                  ------------------------------- [ Windows ] -------------------------------
                  Internet Explorer 11.829.17134.0
                  User Account Control enabled
                  The elevation prompt for administrators disabled
                  ^It is recommended to enable (default): Win+R typing UserAccountControlSettings and Enter[1]
                  Biztonsรกgi kรถzpont (wscsvc) - The service is running
                  Tรกvoli beรกllรญtรกsjegyzรฉk (RemoteRegistry) - The service has stopped
                  SSDP keresล‘ (SSDPSRV) - The service is running
                  Tรกvoli asztali szolgรกltatรกsok (TermService) - The service has stopped
                  Rendszerfelรผgyeleti webszolgรกltatรกsok (WinRM) - The service has stopped
                  ------------------------------ [ MS Office ] ------------------------------
                  Microsoft Office 2016 x86 v.16.0.4266.1001
                  ---------------------------- [ Antivirus_WMI ] ----------------------------
                  Windows Defender (enabled and up to date)
                  --------------------------- [ FirewallWindows ] ---------------------------
                  Windows Defender tลฑzfal (mpssvc) - The service is running
                  --------------------------- [ AntiSpyware_WMI ] ---------------------------
                  Windows Defender (enabled and up to date)
                  ---------------------- [ AntiVirusFirewallInstall ] -----------------------
                  Bitdefender Agent v.1.0.1
                  --------------------------- [ OtherUtilities ] ----------------------------
                  Git version 2.16.2 v.2.16.2 Warning! Download Update
                  NVIDIA GeForce Experience 3.19.0.94 v.3.19.0.94
                  TeamViewer 13 v.13.2.26558 Warning! Download Update
                  VLC media player v.3.0.1 Warning! Download Update
                  TeamViewer 13 (TeamViewer) - The service is running
                  -------------------------------- [ Arch ] ---------------------------------
                  7-Zip 18.00 beta (x64) v.18.00 beta Warning! This software is no longer supported. Uninstall old version, download and install new one.
                  WinRAR 5.70 (64-bit) v.5.70.0 Warning! Download Update
                  7-Zip 18.01 (x64 edition) v.18.01.00.0 Warning! Download Update
                  Uninstall old version and install new one.
                  --------------------------------- [ IM ] ----------------------------------
                  Discord v.0.0.305
                  --------------------------------- [ P2P ] ---------------------------------
                  ยตTorrent v.3.5.5.45271 Warning! P2P-client.
                  -------------------------------- [ Java ] ---------------------------------
                  Javaโ„ข SE Development Kit 11.0.1 (64-bit) v.11.0.1.0
                  Java 8 Update 161 v.8.0.1610.12 Warning! Download Update
                  Uninstall old version and install new one (jre-8u211-windows-i586.exe).
                  Java 7 Update 21 v.7.0.210 Warning! This software is no longer supported. Please uninstall it and use Java SE 8 (jre-8u211-windows-i586.exe).
                  --------------------------- [ AdobeProduction ] ---------------------------
                  Adobe Acrobat Reader DC - Hungarian v.19.010.20098 Warning! Download Update
                  ^Please run Acrobat Reader DC and go Help - Check for updatesโ€ฆ[2]
                  ------------------------------- [ Browser ] -------------------------------
                  Google Chrome v.74.0.3729.169 Warning! Download Update
                  ------------------ [ AntivirusFirewallProcessServices ] -------------------
                  ProductAgentService (ProductAgentService) - The service is running
                  C:\Program Files\Bitdefender Agent\ProductAgentService.exe v.23.0.8.130
                  C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1905.4-0\MsMpEng.exe v.4.18.1905.4
                  C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1905.4-0\NisSrv.exe v.4.18.1905.4
                  C:\Program Files\Windows Defender\MSASCuiL.exe v.4.13.17134.1
                  Windows Defender vรญruskeresล‘ szolgรกltatรกs (WinDefend) - The service is running
                  A Windows Defender vรญruskeresล‘ hรกlรณzatvizsgรกlรณ szolgรกltatรกsa (WdNisSvc) - The service is running
                  ----------------------------- [ End of Log ] ------------------------------

                  MINITB:

                  MiniToolBox by Farbar Version: 17-06-2016
                  Ran by User (administrator) on 16-06-2019 at 16:22:26
                  Running from โ€œC:\Users\User\Downloadsโ€
                  Microsoft Windows 10 Pro (X64)
                  Model: To Be Filled By O.E.M. Manufacturer: To Be Filled By O.E.M.
                  Boot Mode: Normal

                  ========================= Flush DNS: ===================================

                  Windows IP Configuration

                  Successfully flushed the DNS Resolver Cache.

                  ========================= IE Proxy Settings: ==============================

                  Proxy is not enabled.
                  No Proxy Server is set.

                  โ€œReset IE Proxy Settingsโ€: IE Proxy Settings were reset.
                  ========================= Hosts content: =================================
                  0.0.0.0 91.206.200.221
                  0.0.0.0 bidtraffic.ru
                  0.0.0.0 bir3yka.narod2.ru
                  0.0.0.0 enet.vn.ua
                  0.0.0.0 rax.ru
                  0.0.0.0 yandex.ru
                  0.0.0.0 ukraine.com.ua
                  ========================= IP Configuration: ================================

                  LogMeIn Hamachi Virtual Ethernet Adapter = Hamachi (Connected)
                  Realtek PCIe GbE Family Controller = Ethernet 3 (Connected)
                  TAP-Windows Adapter V9 = Ethernet 2 (Media disconnected)
                  [HEADING=1]----------------------------------[/HEADING]
                  [HEADING=1]IPv4 Configuration[/HEADING]
                  [HEADING=1]----------------------------------[/HEADING]
                  pushd interface ipv4

                  reset
                  set global icmpredirects=enabled
                  add route prefix=0.0.0.0/0 interface=โ€œHamachiโ€ nexthop=25.0.0.1 publish=Yes
                  set interface interface=โ€œEthernet (kernel-hibakeresโ€น)โ€ forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
                  set interface interface=โ€œEthernet 2โ€ forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
                  set interface interface=โ€œEthernetโ€ forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
                  set interface interface=โ€œEthernet 3โ€ forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
                  set interface interface=โ€œHamachiโ€ forwarding=enabled advertise=enabled metric=9000 nud=enabled ignoredefaultroutes=disabled
                  set subinterface interface= subinterface=ethernet_32770 mtu=1404

                  popd
                  [HEADING=1]End of IPv4 configuration[/HEADING]
                  Windows IP Configuration

                  Host Name . . . . . . . . . . . . : DESKTOP-NQ7JARN
                  Primary Dns Suffix . . . . . . . :
                  Node Type . . . . . . . . . . . . : Hybrid
                  IP Routing Enabled. . . . . . . . : No
                  WINS Proxy Enabled. . . . . . . . : No
                  DNS Suffix Search List. . . . . . : home

                  Ethernet adapter Hamachi:

                  Connection-specific DNS Suffix . :
                  Description . . . . . . . . . . . : LogMeIn Hamachi Virtual Ethernet Adapter
                  Physical Address. . . . . . . . . : 7A-79-19-33-54-25
                  DHCP Enabled. . . . . . . . . . . : Yes
                  Autoconfiguration Enabled . . . . : Yes
                  IPv6 Address. . . . . . . . . . . : 2620:9b::1933:5425(Preferred)
                  Link-local IPv6 Address . . . . . : fe80::357f:666f:dd65:f812%8(Preferred)
                  Default Gateway . . . . . . . . . : 2620:9b::1900:1
                  25.0.0.1
                  DHCPv6 IAID . . . . . . . . . . . : 117592306
                  DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-21-FA-76-A2-F0-79-59-63-F1-AA
                  DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
                  fec0:0:0:ffff::2%1
                  fec0:0:0:ffff::3%1
                  NetBIOS over Tcpip. . . . . . . . : Enabled

                  Ethernet adapter Ethernet 2:

                  Media State . . . . . . . . . . . : Media disconnected
                  Connection-specific DNS Suffix . :
                  Description . . . . . . . . . . . : TAP-Windows Adapter V9
                  Physical Address. . . . . . . . . : 00-FF-00-BB-3D-5D
                  DHCP Enabled. . . . . . . . . . . : Yes
                  Autoconfiguration Enabled . . . . : Yes

                  Ethernet adapter Ethernet 3:

                  Connection-specific DNS Suffix . : home
                  Description . . . . . . . . . . . : Realtek PCIe GbE Family Controller #2
                  Physical Address. . . . . . . . . : 70-85-C2-8E-79-91
                  DHCP Enabled. . . . . . . . . . . : Yes
                  Autoconfiguration Enabled . . . . : Yes
                  Link-local IPv6 Address . . . . . : fe80::509c:5f16:ec33:e390%17(Preferred)
                  IPv4 Address. . . . . . . . . . . : 192.168.0.206(Preferred)
                  Subnet Mask . . . . . . . . . . . : 255.255.255.0
                  Lease Obtained. . . . . . . . . . : 2019. jลnius 16., vas rnap 16:18:59
                  Lease Expires . . . . . . . . . . : 2019. jลnius 16., vas rnap 17:18:59
                  Default Gateway . . . . . . . . . : 192.168.0.1
                  DHCP Server . . . . . . . . . . . : 192.168.0.1
                  DHCPv6 IAID . . . . . . . . . . . : 577799618
                  DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-21-FA-76-A2-F0-79-59-63-F1-AA
                  DNS Servers . . . . . . . . . . . : 213.46.246.53
                  213.46.246.54
                  NetBIOS over Tcpip. . . . . . . . : Enabled
                  Server: hu-bud02a-dns03.chello.hu
                  Address: 213.46.246.53

                  Name: google.com
                  Addresses: 2a00:1450:400d:803::200e
                  216.58.214.238

                  Pinging google.com [172.217.20.14] with 32 bytes of data:
                  Reply from 172.217.20.14: bytes=32 time=12ms TTL=55
                  Reply from 172.217.20.14: bytes=32 time=13ms TTL=55

                  Ping statistics for 172.217.20.14:
                  Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
                  Approximate round trip times in milli-seconds:
                  Minimum = 12ms, Maximum = 13ms, Average = 12ms
                  Server: hu-bud02a-dns03.chello.hu
                  Address: 213.46.246.53

                  Name: yahoo.com
                  Addresses: 2001:4998:44:41d::4
                  2001:4998:c:1023::4
                  2001:4998:c:1023::5
                  2001:4998:58:1836::10
                  2001:4998:58:1836::11
                  2001:4998:44:41d::3
                  72.30.35.10
                  98.138.219.231
                  98.137.246.7
                  98.138.219.232
                  72.30.35.9
                  98.137.246.8

                  Pinging yahoo.com [72.30.35.10] with 32 bytes of data:
                  Reply from 72.30.35.10: bytes=32 time=129ms TTL=50
                  Reply from 72.30.35.10: bytes=32 time=127ms TTL=50

                  Ping statistics for 72.30.35.10:
                  Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
                  Approximate round trip times in milli-seconds:
                  Minimum = 127ms, Maximum = 129ms, Average = 128ms

                  Pinging 127.0.0.1 with 32 bytes of data:
                  Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
                  Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
                  [HEADING=1]Ping statistics for 127.0.0.1:
                  Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
                  Approximate round trip times in milli-seconds:
                  Minimum = 0ms, Maximum = 0ms, Average = 0ms[/HEADING]
                  [HEADING=1]Interface List
                  8โ€ฆ7a 79 19 33 54 25 โ€ฆLogMeIn Hamachi Virtual Ethernet Adapter
                  2โ€ฆ00 ff 00 bb 3d 5d โ€ฆTAP-Windows Adapter V9
                  17โ€ฆ70 85 c2 8e 79 91 โ€ฆRealtek PCIe GbE Family Controller #2
                  1โ€ฆSoftware Loopback Interface 1[/HEADING]
                  [HEADING=1]IPv4 Route Table[/HEADING]
                  [HEADING=1]Active Routes:
                  Network Destination Netmask Gateway Interface Metric
                  0.0.0.0 0.0.0.0 25.0.0.1 8 9256
                  0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.206 25
                  127.0.0.0 255.0.0.0 On-link 127.0.0.1 331
                  127.0.0.1 255.255.255.255 On-link 127.0.0.1 331
                  127.255.255.255 255.255.255.255 On-link 127.0.0.1 331
                  192.168.0.0 255.255.255.0 On-link 192.168.0.206 281
                  192.168.0.206 255.255.255.255 On-link 192.168.0.206 281
                  192.168.0.255 255.255.255.255 On-link 192.168.0.206 281
                  224.0.0.0 240.0.0.0 On-link 127.0.0.1 331
                  224.0.0.0 240.0.0.0 On-link 8 9256
                  224.0.0.0 240.0.0.0 On-link 192.168.0.206 281
                  255.255.255.255 255.255.255.255 On-link 127.0.0.1 331
                  255.255.255.255 255.255.255.255 On-link 8 9256
                  255.255.255.255 255.255.255.255 On-link 192.168.0.206 281[/HEADING]
                  [HEADING=1]Persistent Routes:
                  Network Address Netmask Gateway Address Metric
                  0.0.0.0 0.0.0.0 25.0.0.1 Default[/HEADING]
                  [HEADING=1]IPv6 Route Table[/HEADING]
                  [HEADING=1]Active Routes:
                  If Metric Network Destination Gateway
                  8 9015 ::/0 2620:9b::1900:1
                  1 331 ::1/128 On-link
                  8 271 2620:9b::/64 On-link
                  8 271 2620:9b::/96 On-link
                  8 271 2620:9b::1933:5425/128 On-link
                  8 271 fe80::/64 On-link
                  17 281 fe80::/64 On-link
                  8 271 fe80::357f:666f:dd65:f812/128
                  On-link
                  17 281 fe80::509c:5f16:ec33:e390/128
                  On-link
                  1 331 ff00::/8 On-link
                  8 271 ff00::/8 On-link
                  17 281 ff00::/8 On-link[/HEADING]
                  [HEADING=1]Persistent Routes:
                  If Metric Network Destination Gateway
                  0 4294967295 2620:9b::/96 On-link
                  0 9000 ::/0 2620:9b::1900:1[/HEADING]
                  ========================= Winsock entries =====================================

                  Catalog5 01 C:\WINDOWS\SysWOW64\napinsp.dll [54784] (Microsoft Corporation)
                  Catalog5 02 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656] (Microsoft Corporation)
                  Catalog5 03 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656] (Microsoft Corporation)
                  Catalog5 04 C:\WINDOWS\SysWOW64\NLAapi.dll [64000] (Microsoft Corporation)
                  Catalog5 05 C:\WINDOWS\SysWOW64\mswsock.dll [341920] (Microsoft Corporation)
                  Catalog5 06 C:\WINDOWS\SysWOW64\winrnr.dll [24064] (Microsoft Corporation)
                  Catalog9 01 C:\WINDOWS\SysWOW64\mswsock.dll [341920] (Microsoft Corporation)
                  Catalog9 02 C:\WINDOWS\SysWOW64\mswsock.dll [341920] (Microsoft Corporation)
                  Catalog9 03 C:\WINDOWS\SysWOW64\mswsock.dll [341920] (Microsoft Corporation)
                  Catalog9 04 C:\WINDOWS\SysWOW64\mswsock.dll [341920] (Microsoft Corporation)
                  Catalog9 05 C:\WINDOWS\SysWOW64\mswsock.dll [341920] (Microsoft Corporation)
                  Catalog9 06 C:\WINDOWS\SysWOW64\mswsock.dll [341920] (Microsoft Corporation)
                  Catalog9 07 C:\WINDOWS\SysWOW64\mswsock.dll [341920] (Microsoft Corporation)
                  Catalog9 08 C:\WINDOWS\SysWOW64\mswsock.dll [341920] (Microsoft Corporation)
                  Catalog9 09 C:\WINDOWS\SysWOW64\mswsock.dll [341920] (Microsoft Corporation)
                  Catalog9 10 C:\WINDOWS\SysWOW64\mswsock.dll [341920] (Microsoft Corporation)
                  Catalog9 11 C:\WINDOWS\SysWOW64\mswsock.dll [341920] (Microsoft Corporation)
                  Catalog9 12 C:\WINDOWS\SysWOW64\mswsock.dll [341920] (Microsoft Corporation)
                  Catalog9 13 C:\WINDOWS\SysWOW64\mswsock.dll [341920] (Microsoft Corporation)
                  x64-Catalog5 01 C:\Windows\System32\napinsp.dll [67072] (Microsoft Corporation)
                  x64-Catalog5 02 C:\Windows\System32\pnrpnsp.dll [84992] (Microsoft Corporation)
                  x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [84992] (Microsoft Corporation)
                  x64-Catalog5 04 C:\Windows\System32\NLAapi.dll [80896] (Microsoft Corporation)
                  x64-Catalog5 05 C:\Windows\System32\mswsock.dll [401968] (Microsoft Corporation)
                  x64-Catalog5 06 C:\Windows\System32\winrnr.dll [31232] (Microsoft Corporation)
                  x64-Catalog9 01 C:\Windows\System32\mswsock.dll [401968] (Microsoft Corporation)
                  x64-Catalog9 02 C:\Windows\System32\mswsock.dll [401968] (Microsoft Corporation)
                  x64-Catalog9 03 C:\Windows\System32\mswsock.dll [401968] (Microsoft Corporation)
                  x64-Catalog9 04 C:\Windows\System32\mswsock.dll [401968] (Microsoft Corporation)
                  x64-Catalog9 05 C:\Windows\System32\mswsock.dll [401968] (Microsoft Corporation)
                  x64-Catalog9 06 C:\Windows\System32\mswsock.dll [401968] (Microsoft Corporation)
                  x64-Catalog9 07 C:\Windows\System32\mswsock.dll [401968] (Microsoft Corporation)
                  x64-Catalog9 08 C:\Windows\System32\mswsock.dll [401968] (Microsoft Corporation)
                  x64-Catalog9 09 C:\Windows\System32\mswsock.dll [401968] (Microsoft Corporation)
                  x64-Catalog9 10 C:\Windows\System32\mswsock.dll [401968] (Microsoft Corporation)
                  x64-Catalog9 11 C:\Windows\System32\mswsock.dll [401968] (Microsoft Corporation)
                  x64-Catalog9 12 C:\Windows\System32\mswsock.dll [401968] (Microsoft Corporation)
                  x64-Catalog9 13 C:\Windows\System32\mswsock.dll [401968] (Microsoft Corporation)

                  ========================= Event log errors: ===============================
                  [HEADING=1]Application errors:[/HEADING]
                  Error: (06/16/2019 04:20:26 PM) (Source: Software Protection Platform Service) (User: )
                  Description: A licencaktivรกlรกs (slui.exe) a kรถvetkezล‘ hibakรณddal leรกllt:
                  hr=0xC004F074
                  Parancssori argumentumok:
                  RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=Net workAvailable

                  Error: (06/16/2019 04:20:12 PM) (Source: Application Error) (User: )
                  Description: A hibรกt okozรณ alkalmazรกs neve: AI Suite II.exe, verziรณ: 2.0.0.0, idล‘bรฉlyeg: 0x00000000
                  A hibรกt okozรณ modul neve: KERNELBASE.dll, verziรณ: 10.0.17134.799, idล‘bรฉlyeg: 0x0117c7be
                  Kivรฉtelkรณd: 0x0eedfade
                  Hiba pozรญciรณja: 0x00112c92
                  A hibรกt okozรณ folyamat azonosรญtรณja: 0x2c8c
                  A hibรกt okozรณ alkalmazรกs indรญtรกsรกnak idล‘pontja: 0xAI Suite II.exe0
                  A hibรกt okozรณ alkalmazรกs elรฉrรฉsi รบtja: AI Suite II.exe1
                  A hibรกt okozรณ modul elรฉrรฉsi รบtja: AI Suite II.exe2
                  Jelentรฉs azonosรญtรณja: AI Suite II.exe3
                  A hibรกt okozรณ csomag teljes neve: AI Suite II.exe4
                  A hibรกt okozรณ csomag relatรญv alkalmazรกsazonosรญtรณja: AI Suite II.exe5

                  Error: (06/16/2019 04:19:42 PM) (Source: Application Error) (User: )
                  Description: A hibรกt okozรณ alkalmazรกs neve: TurboVHelp.exe, verziรณ: 1.0.1.36, idล‘bรฉlyeg: 0x00000000
                  A hibรกt okozรณ modul neve: KERNELBASE.dll, verziรณ: 10.0.17134.799, idล‘bรฉlyeg: 0x0117c7be
                  Kivรฉtelkรณd: 0x0eedfade
                  Hiba pozรญciรณja: 0x00112c92
                  A hibรกt okozรณ folyamat azonosรญtรณja: 0x2448
                  A hibรกt okozรณ alkalmazรกs indรญtรกsรกnak idล‘pontja: 0xTurboVHelp.exe0
                  A hibรกt okozรณ alkalmazรกs elรฉrรฉsi รบtja: TurboVHelp.exe1
                  A hibรกt okozรณ modul elรฉrรฉsi รบtja: TurboVHelp.exe2
                  Jelentรฉs azonosรญtรณja: TurboVHelp.exe3
                  A hibรกt okozรณ csomag teljes neve: TurboVHelp.exe4
                  A hibรกt okozรณ csomag relatรญv alkalmazรกsazonosรญtรณja: TurboVHelp.exe5

                  Error: (06/16/2019 04:19:19 PM) (Source: Software Protection Platform Service) (User: )
                  Description: A licencaktivรกlรกs (slui.exe) a kรถvetkezล‘ hibakรณddal leรกllt:
                  hr=0xC004F074
                  Parancssori argumentumok:
                  RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=Use rLogon;SessionId=1

                  Error: (06/16/2019 04:19:18 PM) (Source: Software Protection Platform Service) (User: )
                  Description: A licencaktivรกlรกs (slui.exe) a kรถvetkezล‘ hibakรณddal leรกllt:
                  hr=0xC004F074
                  Parancssori argumentumok:
                  RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=Net workAvailable

                  Error: (06/16/2019 03:47:46 PM) (Source: Application Error) (User: )
                  Description: A hibรกt okozรณ alkalmazรกs neve: AI Suite II.exe, verziรณ: 2.0.0.0, idล‘bรฉlyeg: 0x00000000
                  A hibรกt okozรณ modul neve: KERNELBASE.dll, verziรณ: 10.0.17134.799, idล‘bรฉlyeg: 0x0117c7be
                  Kivรฉtelkรณd: 0x0eedfade
                  Hiba pozรญciรณja: 0x00112c92
                  A hibรกt okozรณ folyamat azonosรญtรณja: 0x26c8
                  A hibรกt okozรณ alkalmazรกs indรญtรกsรกnak idล‘pontja: 0xAI Suite II.exe0
                  A hibรกt okozรณ alkalmazรกs elรฉrรฉsi รบtja: AI Suite II.exe1
                  A hibรกt okozรณ modul elรฉrรฉsi รบtja: AI Suite II.exe2
                  Jelentรฉs azonosรญtรณja: AI Suite II.exe3
                  A hibรกt okozรณ csomag teljes neve: AI Suite II.exe4
                  A hibรกt okozรณ csomag relatรญv alkalmazรกsazonosรญtรณja: AI Suite II.exe5

                  Error: (06/16/2019 03:47:16 PM) (Source: Application Error) (User: )
                  Description: A hibรกt okozรณ alkalmazรกs neve: TurboVHelp.exe, verziรณ: 1.0.1.36, idล‘bรฉlyeg: 0x00000000
                  A hibรกt okozรณ modul neve: KERNELBASE.dll, verziรณ: 10.0.17134.799, idล‘bรฉlyeg: 0x0117c7be
                  Kivรฉtelkรณd: 0x0eedfade
                  Hiba pozรญciรณja: 0x00112c92
                  A hibรกt okozรณ folyamat azonosรญtรณja: 0x1fb8
                  A hibรกt okozรณ alkalmazรกs indรญtรกsรกnak idล‘pontja: 0xTurboVHelp.exe0
                  A hibรกt okozรณ alkalmazรกs elรฉrรฉsi รบtja: TurboVHelp.exe1
                  A hibรกt okozรณ modul elรฉrรฉsi รบtja: TurboVHelp.exe2
                  Jelentรฉs azonosรญtรณja: TurboVHelp.exe3
                  A hibรกt okozรณ csomag teljes neve: TurboVHelp.exe4
                  A hibรกt okozรณ csomag relatรญv alkalmazรกsazonosรญtรณja: TurboVHelp.exe5

                  Error: (06/16/2019 03:46:54 PM) (Source: Software Protection Platform Service) (User: )
                  Description: A licencaktivรกlรกs (slui.exe) a kรถvetkezล‘ hibakรณddal leรกllt:
                  hr=0xC004F074
                  Parancssori argumentumok:
                  RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=Use rLogon;SessionId=1

                  Error: (06/16/2019 03:41:22 PM) (Source: Software Protection Platform Service) (User: )
                  Description: A licencaktivรกlรกs (slui.exe) a kรถvetkezล‘ hibakรณddal leรกllt:
                  hr=0x8007139F
                  Parancssori argumentumok:
                  RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=Net workAvailable

                  Error: (06/16/2019 03:40:14 PM) (Source: Software Protection Platform Service) (User: )
                  Description: A licencaktivรกlรกs (slui.exe) a kรถvetkezล‘ hibakรณddal leรกllt:
                  hr=0x8007139F
                  Parancssori argumentumok:
                  RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=Net workAvailable
                  [HEADING=1]System errors:[/HEADING]
                  Error: (06/16/2019 04:21:34 PM) (Source: Service Control Manager) (User: )
                  Description: A szolgรกltatรกs (ASUS Com Service) a kรถvetkezล‘ hiba kรถvetkeztรฉben leรกllt:
                  %%1053 = A szolgรกltatรกs nem vรกlaszolt megfelelล‘ idล‘ben az indรญtรกsi vagy vezรฉrlรฉsi kรฉrรฉsre.

                  Error: (06/16/2019 04:21:34 PM) (Source: Service Control Manager) (User: )
                  Description: Letelt egy idล‘korlรกt (30000 ms) a(z) ASUS Com Service szolgรกltatรกs kapcsolรณdรกsรกra valรณ vรกrakozรกs kรถzben.

                  Error: (06/16/2019 04:20:12 PM) (Source: DCOM) (User: DESKTOP-NQ7JARN)
                  Description: 1053asComSvcNem รฉrhetล‘ el{BC50CF2A-E12C-4F18-90CE-714CC8600CEE}

                  Error: (06/16/2019 04:20:12 PM) (Source: Service Control Manager) (User: )
                  Description: A szolgรกltatรกs (ASUS Com Service) a kรถvetkezล‘ hiba kรถvetkeztรฉben leรกllt:
                  %%1053 = A szolgรกltatรกs nem vรกlaszolt megfelelล‘ idล‘ben az indรญtรกsi vagy vezรฉrlรฉsi kรฉrรฉsre.

                  Error: (06/16/2019 04:20:12 PM) (Source: Service Control Manager) (User: )
                  Description: Letelt egy idล‘korlรกt (30000 ms) a(z) ASUS Com Service szolgรกltatรกs kapcsolรณdรกsรกra valรณ vรกrakozรกs kรถzben.

                  Error: (06/16/2019 04:19:42 PM) (Source: DCOM) (User: DESKTOP-NQ7JARN)
                  Description: 1053asComSvcNem รฉrhetล‘ el{BC50CF2A-E12C-4F18-90CE-714CC8600CEE}

                  Error: (06/16/2019 04:19:42 PM) (Source: Service Control Manager) (User: )
                  Description: A szolgรกltatรกs (ASUS Com Service) a kรถvetkezล‘ hiba kรถvetkeztรฉben leรกllt:
                  %%1053 = A szolgรกltatรกs nem vรกlaszolt megfelelล‘ idล‘ben az indรญtรกsi vagy vezรฉrlรฉsi kรฉrรฉsre.

                  Error: (06/16/2019 04:19:42 PM) (Source: Service Control Manager) (User: )
                  Description: Letelt egy idล‘korlรกt (30000 ms) a(z) ASUS Com Service szolgรกltatรกs kapcsolรณdรกsรกra valรณ vรกrakozรกs kรถzben.

                  Error: (06/16/2019 04:19:31 PM) (Source: DCOM) (User: NT AUTHORITY)
                  Description: alkalmazรกsspecifikusHelyiIndรญtรกsWindows.SecurityCe nter.WscBrokerManagerNem รฉrhetล‘ elNT AUTHORITYSYSTEMS-1-5-18LocalHost (helyi รกllomรกs, LRPC hasznรกlatรกval)Nem รฉrhetล‘ elNem รฉrhetล‘ el

                  Error: (06/16/2019 04:19:31 PM) (Source: DCOM) (User: NT AUTHORITY)
                  Description: alkalmazรกsspecifikusHelyiIndรญtรกsWindows.SecurityCe nter.WscDataProtectionNem รฉrhetล‘ elNT AUTHORITYSYSTEMS-1-5-18LocalHost (helyi รกllomรกs, LRPC hasznรกlatรกval)Nem รฉrhetล‘ elNem รฉrhetล‘ el
                  [HEADING=1]Microsoft Office Sessions:[/HEADING]
                  Error: (06/16/2019 04:20:26 PM) (Source: Software Protection Platform Service)(User: )
                  Description: hr=0xC004F074RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=Net workAvailable

                  Error: (06/16/2019 04:20:12 PM) (Source: Application Error)(User: )
                  Description: AI Suite II.exe2.0.0.000000000KERNELBASE.dll10.0.17134.7990 117c7be0eedfade00112c922c8c01d5244e7c5b2128C:\Prog ram Files (x86)\ASUS\AI Suite II\AI Suite II.exeC:\WINDOWS\System32\KERNELBASE.dll66d9a8a8-3728-4a4a-b222-3eb0a9eb15f8

                  Error: (06/16/2019 04:19:42 PM) (Source: Application Error)(User: )
                  Description: TurboVHelp.exe1.0.1.3600000000KERNELBASE.dll10.0.1 7134.7990117c7be0eedfade00112c92244801d5244e77eed5 30C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exeC:\WINDOWS\System32\KERNELBASE.d ll8b550a69-70ff-4daf-a174-a38bc71454fb

                  Error: (06/16/2019 04:19:19 PM) (Source: Software Protection Platform Service)(User: )
                  Description: hr=0xC004F074RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=Use rLogon;SessionId=1

                  Error: (06/16/2019 04:19:18 PM) (Source: Software Protection Platform Service)(User: )
                  Description: hr=0xC004F074RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=Net workAvailable

                  Error: (06/16/2019 03:47:46 PM) (Source: Application Error)(User: )
                  Description: AI Suite II.exe2.0.0.000000000KERNELBASE.dll10.0.17134.7990 117c7be0eedfade00112c9226c801d52449f365a502C:\Prog ram Files (x86)\ASUS\AI Suite II\AI Suite II.exeC:\WINDOWS\System32\KERNELBASE.dllb369fd46-0800-4e70-862a-bd6c490ae697

                  Error: (06/16/2019 03:47:16 PM) (Source: Application Error)(User: )
                  Description: TurboVHelp.exe1.0.1.3600000000KERNELBASE.dll10.0.1 7134.7990117c7be0eedfade00112c921fb801d52449f013bc b4C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exeC:\WINDOWS\System32\KERNELBASE.d ll29953f01-8ae8-4ece-b601-6bdb3fcaa7f0

                  Error: (06/16/2019 03:46:54 PM) (Source: Software Protection Platform Service)(User: )
                  Description: hr=0xC004F074RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=Use rLogon;SessionId=1

                  Error: (06/16/2019 03:41:22 PM) (Source: Software Protection Platform Service)(User: )
                  Description: hr=0x8007139FRuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=Net workAvailable

                  Error: (06/16/2019 03:40:14 PM) (Source: Software Protection Platform Service)(User: )
                  Description: hr=0x8007139FRuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=Net workAvailable
                  [HEADING=1]CodeIntegrity Errors:[/HEADING]
                  Date: 2018-08-14 16:19:20.546
                  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Overwolf\0.117.1.43\OWExpl orer.dll that did not meet the Microsoft signing level requirements.

                  Date: 2018-08-14 16:19:20.541
                  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Overwolf\0.117.1.43\OWExpl orer.dll that did not meet the Microsoft signing level requirements.

                  Date: 2018-08-14 16:19:20.536
                  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Overwolf\0.117.1.43\OWExpl orer.dll that did not meet the Microsoft signing level requirements.

                  Date: 2018-08-14 16:19:20.531
                  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Overwolf\0.117.1.43\OWExpl orer.dll that did not meet the Microsoft signing level requirements.

                  Date: 2018-08-14 16:19:19.848
                  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Overwolf\0.117.1.43\OWExpl orer.dll that did not meet the Microsoft signing level requirements.

                  Date: 2018-08-14 16:19:19.833
                  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Overwolf\0.117.1.43\OWExpl orer.dll that did not meet the Microsoft signing level requirements.

                  Date: 2018-08-14 16:19:19.827
                  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Overwolf\0.117.1.43\OWExpl orer.dll that did not meet the Microsoft signing level requirements.

                  Date: 2018-08-14 16:19:17.819
                  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Overwolf\0.117.1.43\OWExpl orer.dll that did not meet the Microsoft signing level requirements.

                  Date: 2018-08-14 16:19:17.814
                  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Overwolf\0.117.1.43\OWExpl orer.dll that did not meet the Microsoft signing level requirements.

                  Date: 2018-08-14 16:19:17.809
                  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Overwolf\0.117.1.43\OWExpl orer.dll that did not meet the Microsoft signing level requirements.

                  =========================== Installed Programs ============================

                  ยตTorrent (HKCU...\uTorrent) (Version: 3.5.5.45271 - BitTorrent Inc.)
                  4K Textures DLC (HKLM-x32...\1286889002_is1) (Version: 0.9.24.3.432 - GOG.com)
                  7.b - A jรกtรฉk DEMร“ (HKCU...\7.b - A jรกtรฉk DEMร“) (Version: - )
                  7-Zip 18.00 beta (x64) (HKLM...\7-Zip) (Version: 18.00 beta - Igor Pavlov)
                  7-Zip 18.01 (x64 edition) (HKLM...{23170F69-40C1-2702-1801-000001000000}) (Version: 18.01.00.0 - Igor Pavlov)
                  Adobe Acrobat Reader DC - Hungarian (HKLM-x32...{AC76BA86-7AD7-1038-7B44-AC0F074E4100}) (Version: 19.010.20098 - Adobe Systems Incorporated)
                  Adobe Photoshop CC 2018 (HKLM-x32...\PHSP_19_1_5) (Version: 19.1.5 - Adobe Systems Incorporated)
                  AI Suite II (HKLM-x32...{34D3688E-A737-44C5-9E2A-FF73618728E1}) (Version: 2.04.01 - ASUSTeK Computer Inc.)
                  AMD Ryzen Master (HKLM...\AMD Ryzen Master) (Version: 1.5.2.0869 - Advanced Micro Devices, Inc.)
                  AMD Software (HKLM...\AMD Catalyst Install Manager) (Version: 17.12 - Advanced Micro Devices, Inc.)
                  Android Studio (HKLM...\Android Studio) (Version: 1.0 - Google Inc.)
                  Artifact (HKLM...\Steam App 583950) (Version: - Valve)
                  Asmedia ASM106x SATA Host Controller Driver (HKLM-x32...{DF6C3726-7E53-4772-9763-E9F147769F51}) (Version: 3.1.6.0000 - Asmedia Technology)
                  Asmedia USB Host Controller Driver (HKLM-x32...{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.35.1 - Asmedia Technology)
                  Balanced (HKLM-x32...{EFD0705E-598B-46D4-8D5B-4539431764B8}) (Version: 2.02.0000 - Cรฉgnรฉv) Hidden
                  Battle.net (HKLM-x32...\Battle.net) (Version: - Blizzard Entertainment)
                  Bitdefender Agent (HKLM...\Bitdefender Agent) (Version: 1.0.1 - Bitdefender)
                  BYOND (HKLM-x32...\BYOND) (Version: 512.1466 - BYOND)
                  calibre (HKLM-x32...{71640766-157F-4DE8-B45F-69B76B0F5FCE}) (Version: 3.31.0 - Kovid Goyal)
                  CCleaner (HKLM...\CCleaner) (Version: 5.51 - Piriform)
                  Core Temp 1.11 (HKLM...{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.11 - ALCPU)
                  CPUID CPU-Z 1.85 (HKLM...\CPUID CPU-Z_is1) (Version: 1.85 - CPUID, Inc.)
                  Crusader Kings II (HKLM...\Steam App 203770) (Version: - Paradox Development Studio)
                  Crypt of the NecroDancer (HKLM...\Steam App 247080) (Version: - Brace Yourself Games)
                  DAEMON Tools Lite (HKLM...\DAEMON Tools Lite) (Version: 10.5.0.0221 - Disc Soft Ltd)
                  Dauntless (HKLM...{03AFDFA7-7A23-41B1-AAC2-3898591127D3}) (Version: 1.00.0000 - Phoenix Labs)
                  Dead by Daylight (HKLM...\Steam App 381210) (Version: - Behaviour Digital Inc.)
                  Discord (HKCU...\Discord) (Version: 0.0.305 - Discord Inc.)
                  DisplayDriverAnalyzer (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 398.36 - NVIDIA Corporation) Hidden
                  Epic Games Launcher (HKLM-x32...{93BFE5DF-776E-436F-8693-DF1F72C0E3C1}) (Version: 1.1.151.0 - Epic Games, Inc.)
                  Epic Games Launcher Prerequisites (x64) (HKLM...{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
                  Far.Cry.Primal.REPACK-KaOs Uninstaller v3.0 (HKLM-x32...\Far.Cry.Primal.REPACK-KaOs_is1) (Version: 3.0 - KaOsKrew)
                  Game Summary (HKCU...\Overwolf_nafihghfcpikebhfhdhljejkcifgbdah dhngepfb) (Version: 123.0.11 - Overwolf app)
                  Git version 2.16.2 (HKLM...\Git_is1) (Version: 2.16.2 - The Git Development Community)
                  GOG Galaxy (HKLM-x32...{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com)
                  Google Chrome (HKLM-x32...\Google Chrome) (Version: 74.0.3729.169 - Google Inc.)
                  Google Update Helper (HKLM-x32...{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden
                  GoTo Opener (HKLM-x32...{1F803452-798F-49FB-A5DD-9F527F7017E4}) (Version: 1.0.473 - LogMeIn, Inc.)
                  GoToAssist Expert 4.4.0.1599 (HKCU...\GoToAssist Remote Support Expert) (Version: 4.4.0.1599 - LogMeIn, Inc.)
                  Guild Wars 2 (HKLM...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.)
                  Gwent (HKLM-x32...\1971477531_is1) (Version: 0.9.24.3.432 - GOG.com)
                  Hard Disk Sentinel (HKLM-x32...\Hard Disk Sentinel_is1) (Version: 5.40 - Janos Mathe)
                  HearthArena Companion (HKCU...\Overwolf_eldaohcjmecjpkpdhhoiolhhaeapcldp pbdgbnbc) (Version: 1.5.0.1 - Overwolf app)
                  Hearthstone (HKLM-x32...\Hearthstone) (Version: - Blizzard Entertainment)
                  Hearthstone Deck Tracker (HKCU...\HearthstoneDeckTracker) (Version: 1.8.7 - HearthSim)
                  Heroes of the Storm (HKLM-x32...\Heroes of the Storm) (Version: - Blizzard Entertainment)
                  HiPatch (HKLM-x32...{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 6.0.3.0 - Hi-Rez Studios)
                  Hi-Rez Studios Authenticate and Update Service (HKLM-x32...{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
                  Into the Breach (HKLM...\Steam App 590380) (Version: - Subset Games)
                  Jatek (HKCU...\Jatek) (Version: - )
                  Java 7 Update 21 (HKLM-x32...{26A24AE4-039D-4CA4-87B4-2F83217021FF}) (Version: 7.0.210 - Oracle)
                  Java 8 Update 161 (HKLM-x32...{26A24AE4-039D-4CA4-87B4-2F32180161F0}) (Version: 8.0.1610.12 - Oracle Corporation)
                  Javaโ„ข SE Development Kit 11.0.1 (64-bit) (HKLM...{F4039C0F-E4C1-5905-9E7D-DDA8EDE365BC}) (Version: 11.0.1.0 - Oracle Corporation)
                  Kingdom Come Deliverance (HKLM-x32...\Kingdom Come Deliverance_is1) (Version: - )
                  Kingdom Come: Deliverance (HKLM...\Steam App 379430) (Version: - Warhorse Studios)
                  Launcher Prerequisites (x64) (HKLM-x32...{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
                  LogMeIn Hamachi (HKLM-x32...{ECC0FA07-863E-44BC-8B1D-DA22F96E5FB7}) (Version: 2.2.0.633 - LogMeIn, Inc.) Hidden
                  LogMeIn Hamachi (HKLM-x32...\LogMeIn Hamachi) (Version: 2.2.0.633 - LogMeIn, Inc.)
                  Microsoft Mouse and Keyboard Center (HKLM...\Microsoft Mouse and Keyboard Center) (Version: 11.1.137.0 - Microsoft Corporation)
                  Microsoft Office Professional Plus 2016 (HKLM-x32...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
                  Microsoft Visual C++ 2005 Redistributable (HKLM-x32...{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
                  Microsoft Visual C++ 2005 Redistributable (x64) (HKLM...{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
                  Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM...{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
                  Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32...{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
                  Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32...{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
                  Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM...{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
                  Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32...{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
                  Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32...{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
                  Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32...{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
                  Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32...{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
                  Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32...{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
                  Microsoft Visual C++ 2017 Redistributable (x64) - 14.12.25810 (HKLM-x32...{e2ee15e2-a480-4bc5-bfb7-e9803d1d9823}) (Version: 14.12.25810.0 - Microsoft Corporation)
                  Microsoft Visual C++ 2017 Redistributable (x86) - 14.12.25810 (HKLM-x32...{56e11d69-7cc9-40a5-a4f9-8f6190c4d84d}) (Version: 14.12.25810.0 - Microsoft Corporation)
                  Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32...{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
                  MORDHAU (HKLM...\Steam App 629760) (Version: - Triternion)
                  MSI Afterburner 4.5.0 (HKLM-x32...\Afterburner) (Version: 4.5.0 - MSI Co., LTD)
                  MTG Arena (HKLM-x32...{D084B94B-3A8E-45B1-BDA7-39E1DA980687}) (Version: 0.1.1205.0 - Wizards of the Coast) Hidden
                  MTG Arena (HKLM-x32...\MTG Arena 0.1.1205.0) (Version: 0.1.1205.0 - Wizards of the Coast)
                  NetBeans IDE 8.2 (HKLM-x32...\nbi-nb-base-8.2.0.0.201609300101) (Version: 8.2 - NetBeans.org)
                  Nexus Mod Manager (HKLM...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.65.2 - Black Tree Gaming)
                  NVAPI Monitor plugin for NvContainer (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.15 - NVIDIA Corporation) Hidden
                  NVIDIA GeForce Experience 3.19.0.94 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.19.0.94 - NVIDIA Corporation)
                  NVIDIA Grafikus illesztล‘program 430.86 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 430.86 - NVIDIA Corporation)
                  NVIDIA HD audio-illesztล‘program 1.3.38.16 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.16 - NVIDIA Corporation)
                  NVIDIA PhysX rendszerszoftver 9.19.0218 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
                  OEM Application Profile (HKLM-x32...{7F5DCD33-1039-C3B2-9538-B645B65BBA63}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
                  Opera Mobile Emulator (HKLM-x32...{1826D0CA-F479-4430-9EFE-86E8E783505B}_is1) (Version: - Opera Software ASA)
                  Origin (HKLM-x32...\Origin) (Version: 10.5.34.21025 - Electronic Arts, Inc.)
                  osu! (HKLM-x32...{1481750f-8de4-48a2-beaf-269a2ce0790c}) (Version: latest - ppy Pty Ltd)
                  Overwolf (HKLM-x32...\Overwolf) (Version: 0.126.0.11 - Overwolf Ltd.)
                  Realm Royale PTS (HKLM-x32...{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF703}) (Version: 0.1.173.0 - Hi-Rez Studios)
                  Realtek Ethernet Controller Driver (HKLM-x32...{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.31.828.2018 - Realtek)
                  Realtek High Definition Audio Driver (HKLM-x32...{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8619 - Realtek Semiconductor Corp.)
                  RivaTuner Statistics Server 7.1.0 (HKLM-x32...\RTSS) (Version: 7.1.0 - Unwinder)
                  SFK Standalone 13.9 (HKLM-x32...{60101460-B0B7-4B50-9600-81CF9CAE33A8}_is1) (Version: 13.9 - [SFK]Dielo)
                  Simple Port Tester (HKLM-x32...\Simple Port Tester3.0.0) (Version: 3.0.0 - PcWinTech.com)
                  Standalone Flash Player 1.2 (HKLM-x32...{A3B31D43-75F4-4CF4-8330-6DE62C3540FA}_is1) (Version: - StandaloneFlashPlayer.com)
                  Survivors Viy (HKCU...\Survivors Viy) (Version: - )
                  SWF File Player (HKLM-x32...{6A86F611-906C-422D-B34A-103662CBC195}_is1) (Version: - swffileplayer.com)
                  TAP-Windows 9.9.2 (HKLM...\TAP-Windows) (Version: 9.9.2 - )
                  TeamViewer 13 (HKLM-x32...\TeamViewer) (Version: 13.2.26558 - TeamViewer)
                  TechPowerUp GPU-Z (HKLM-x32...\TechPowerUp GPU-Z) (Version: - TechPowerUp)
                  The Elder Scrolls Online (HKLM-x32...\The Elder Scrolls Online) (Version: 2.6.3.0 - Zenimax Online Studios)
                  The Elder Scrolls V: Skyrim Special Edition (HKLM...\Steam App 489830) (Version: - Bethesda Game Studios)
                  Unigine Valley Benchmark version 1.0 (HKLM-x32...\Unigine Valley Benchmark_is1) (Version: 1.0 - Unigine Corp.)
                  Update for Skype for Business 2016 (KB4032255) 32-Bit Edition (HKLM-x32...{90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{699F991D-0635-4A44-9776-AEE20C6087DC}) (Version: - Microsoft)
                  Update for Skype for Business 2016 (KB4032255) 32-Bit Edition (HKLM-x32...{90160000-002A-0000-1000-0000000FF1CE}Office16.PROPLUS{699F991D-0635-4A44-9776-AEE20C6087DC}) (Version: - Microsoft)
                  Update for Skype for Business 2016 (KB4032255) 32-Bit Edition (HKLM-x32...{90160000-012B-040E-0000-0000000FF1CE}Office16.PROPLUS{699F991D-0635-4A44-9776-AEE20C6087DC}) (Version: - Microsoft)
                  Update for Windows 10 for x64-based Systems (KB4023057) (HKLM...{C3ACFCEA-240F-4DCC-A0C3-DD55FEE6C3C2}) (Version: 2.58.0.0 - Microsoft Corporation)
                  Uplay (HKLM-x32...\Uplay) (Version: 83.0 - Ubisoft)
                  VBCABLE, The Virtual Audio Cable (HKLM...\VB:VBCABLE {87459874-1236-4469}) (Version: - VB-Audio Software)
                  VLC media player (HKLM-x32...\VLC media player) (Version: 3.0.1 - VideoLAN)
                  VPN Unlimited 5.0 (HKLM-x32...{DC24521E-872B-41AF-93EA-FE477902D6FB}_is1) (Version: 5.0 - KeepSolid Inc.)
                  Warhammer: Vermintide 2 (HKLM...\Steam App 552500) (Version: - Fatshark)
                  WinRAR 5.70 (64-bit) (HKLM...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
                  World of Warcraft (HKLM-x32...\World of Warcraft) (Version: - Blizzard Entertainment)

                  ========================= Devices: ================================

                  ========================= Memory info: ===================================

                  Percentage of memory in use: 36%
                  Total physical RAM: 8123.74 MB
                  Available physical RAM: 5128.09 MB
                  Total Virtual: 13243.74 MB
                  Available Virtual: 8776.07 MB

                  ========================= Partitions: =====================================

                  1 Drive c: () (Fixed) (Total:111.25 GB) (Free:8.97 GB) NTFS
                  2 Drive d: (Rendszer szรกmรกra fenntartott) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
                  3 Drive f: () (Fixed) (Total:637.98 GB) (Free:105.28 GB) NTFS
                  4 Drive g: () (Fixed) (Total:292.97 GB) (Free:278.72 GB) NTFS
                  5 Drive k: (ADATA UFD) (Removable) (Total:7.21 GB) (Free:7.2 GB) FAT32

                  ========================= Users: ========================================

                  \DESKTOP-NQ7JARN felhaszn lห˜i fiห˜kjai

                  Alapโ€šrtelmezett fiห˜k Peti Rendszergazda
                  User Vendโ€šg WDAGUtilityAccount
                  A parancs sikeresen vโ€šgrehajtva.

                  **** End of log ****
                  1. /B โ†ฉ๏ธŽ
                  2. /B โ†ฉ๏ธŽ

                    Comment

                    • Malnutrition
                      PCHF Moderator
                      • Jul 2016
                      • 7041
                      #6
                      Just run Adware cleaner and Hijack this. My laptop is about to die, I have my friend bringing me my power cord soon. You could look over this guide which should basically tune up your machine cause I wont be online till my cord gets here.

                      Forums - PC Help Forum
                      https://pchelpforum.net/resources/how-to-speed-up-your-internet-connection.121/
                      PCHF Forums

                        Comment

                        • Fexerrum
                          PCHF Member
                          • Jun 2019
                          • 13
                          #7
                          Oops, I somehow managed to not include them. Sorry, here they are:

                          AdwCleaner:
                          [HEADING=1]-------------------------------[/HEADING]
                          [HEADING=1]Malwarebytes AdwCleaner 7.3.0.0[/HEADING]
                          [HEADING=1]-------------------------------[/HEADING]
                          [HEADING=1]Build: 04-04-2019[/HEADING]
                          [HEADING=1]Database: 2019-05-27.1 (Cloud)[/HEADING]
                          [HEADING=1]Support: https://www.malwarebytes.com/support[/HEADING]
                          [HEADING=1]-------------------------------[/HEADING]
                          [HEADING=1]Mode: Clean[/HEADING]
                          [HEADING=1]-------------------------------[/HEADING]
                          [HEADING=1]Start: 06-16-2019[/HEADING]
                          [HEADING=1]Duration: 00:00:00[/HEADING]
                          [HEADING=1]OS: Windows 10 Pro[/HEADING]
                          [HEADING=1]Cleaned: 1[/HEADING]
                          [HEADING=1]Failed: 0[/HEADING]
                          ***** [ Services ] *****

                          No malicious services cleaned.

                          ***** [ Folders ] *****

                          Deleted C:\Users\User\Desktop\serv

                          ***** [ Files ] *****

                          No malicious files cleaned.

                          ***** [ DLL ] *****

                          No malicious DLLs cleaned.

                          ***** [ WMI ] *****

                          No malicious WMI cleaned.

                          ***** [ Shortcuts ] *****

                          No malicious shortcuts cleaned.

                          ***** [ Tasks ] *****

                          No malicious tasks cleaned.

                          ***** [ Registry ] *****

                          No malicious registry entries cleaned.

                          ***** [ Chromium (and derivatives) ] *****

                          No malicious Chromium entries cleaned.

                          ***** [ Chromium URLs ] *****

                          No malicious Chromium URLs cleaned.

                          ***** [ Firefox (and derivatives) ] *****

                          No malicious Firefox entries cleaned.

                          ***** [ Firefox URLs ] *****

                          No malicious Firefox URLs cleaned.

                          [+] Delete Tracing Keys
                          [+] Reset Winsock

                          AdwCleaner[S00].txt - [1280 octets] - [16/06/2019 16:17:59]

                          ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

                          HijackThis:

                          Logfile of HiJackThis Fork by Alex Dragokas v.2.9.0.19

                          Platform: x64 Windows 10 (Pro), 10.0.17134.829 (ReleaseId: 1803), Service Pack: 0
                          Time: 16.06.2019 - 16:21 (UTC+02:00)
                          Language: OS: Hungarian (0x40E). Display: Hungarian (0x40E). Non-Unicode: Hungarian (0x40E)
                          Elevated: Yes
                          Ran by: User (group: Administrator) on DESKTOP-NQ7JARN, FirstRun: yes

                          Chrome: 74.0.3729.169
                          Edge: 11.0.17134.799
                          Internet Explorer: 11.0.17134.1
                          Default: โ€œC:\Program Files (x86)\Google\Chrome\Application\chrome.exeโ€ โ€“ โ€œ%1โ€ (Google Chrome)

                          Boot mode: Normal

                          Running processes:
                          Number | Path
                          1 C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
                          1 C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
                          1 C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AsDLNAServerReal.exe
                          1 C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiFi GO! Server.exe
                          1 C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiFile\WiFileTransfer.exe
                          1 C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
                          1 C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe
                          1 C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
                          1 C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlServi ce.exe
                          1 C:\Program Files (x86)\ASUS\AsusFanControlService\1.02.00\AsusFanCo ntrolService.exe
                          1 C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
                          1 C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
                          1 C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
                          1 C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
                          18 C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
                          1 C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler.e xe
                          1 C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler64 .exe
                          1 C:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe
                          1 C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
                          1 C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
                          1 C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
                          1 C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
                          1 C:\Program Files (x86)\VPN Unlimited\vpn-unlimited-daemon.exe
                          1 C:\Program Files\Bitdefender Agent\ProductAgentService.exe
                          1 C:\Program Files\CCleaner\CCleaner64.exe
                          2 C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Containe r.exe
                          2 C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
                          1 C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
                          1 C:\Program Files\WinRAR\WinRAR.exe
                          1 C:\Program Files\Windows Defender\MSASCuiL.exe
                          1 C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.46.60.0_x6 4__kzf8qxf38zg5c\SkypeApp.exe
                          1 C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.46.60.0_x6 4__kzf8qxf38zg5c\SkypeBackgroundHost.exe
                          1 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1905.4-0\MsMpEng.exe
                          1 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1905.4-0\NisSrv.exe
                          1 C:\Users\User\Desktop\HiJackThis\HiJackThis.exe
                          2 C:\Windows\System32\RtkAudUService64.exe
                          4 C:\Windows\System32\RuntimeBroker.exe
                          1 C:\Windows\System32\SearchIndexer.exe
                          2 C:\Windows\System32\SearchProtocolHost.exe
                          1 C:\Windows\System32\SecurityHealthService.exe
                          2 C:\Windows\System32\WUDFHost.exe
                          1 C:\Windows\System32\audiodg.exe
                          1 C:\Windows\System32\conhost.exe
                          2 C:\Windows\System32\csrss.exe
                          1 C:\Windows\System32\ctfmon.exe
                          1 C:\Windows\System32\dasHost.exe
                          1 C:\Windows\System32\dwm.exe
                          2 C:\Windows\System32\fontdrvhost.exe
                          1 C:\Windows\System32\lsass.exe
                          1 C:\Windows\System32\notepad.exe
                          1 C:\Windows\System32\rundll32.exe
                          1 C:\Windows\System32\services.exe
                          1 C:\Windows\System32\sihost.exe
                          1 C:\Windows\System32\smartscreen.exe
                          1 C:\Windows\System32\smss.exe
                          1 C:\Windows\System32\spoolsv.exe
                          66 C:\Windows\System32\svchost.exe
                          1 C:\Windows\System32\taskhostw.exe
                          1 C:\Windows\System32\wbem\WmiApSrv.exe
                          2 C:\Windows\System32\wbem\WmiPrvSE.exe
                          1 C:\Windows\System32\wbem\unsecapp.exe
                          1 C:\Windows\System32\wininit.exe
                          1 C:\Windows\System32\winlogon.exe
                          1 C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw 5n1h2txyewy\SearchUI.exe
                          1 C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2t xyewy\ShellExperienceHost.exe
                          1 C:\Windows\explorer.exe
                          1 F:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

                          O1 - Hosts: 0.0.0.0 91.206.200.221
                          O1 - Hosts: 0.0.0.0 bidtraffic.ru
                          O1 - Hosts: 0.0.0.0 bir3yka.narod2.ru
                          O1 - Hosts: 0.0.0.0 enet.vn.ua
                          O1 - Hosts: 0.0.0.0 rax.ru
                          O1 - Hosts: 0.0.0.0 yandex.ru
                          O1 - Hosts: 0.0.0.0 ukraine.com.ua
                          O2-32 - HKLM..\BHO: Javaโ„ข Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll
                          O2-32 - HKLM..\BHO: Javaโ„ข Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll
                          O4 - HKCU..\Run: [CCleaner Smart Cleaning] = C:\Program Files\CCleaner\CCleaner64.exe /MONITOR
                          O4 - HKCU..\Run: [DAEMON Tools Lite Automount] = C:\Program Files\DAEMON Tools Lite\DTAgent.exe -autorun (file missing)
                          O4 - HKCU..\Run: [Discord] = C:\Users\User\AppData\Local\Discord\app-0.0.305\Discord.exe
                          O4 - HKCU..\Run: [GoToAssist Remote Support Expert] = C:\Users\User\AppData\Local\GoToAssist Remote Support Expert\1599\g2ax_start.exe โ€œ/Trigger RunAtLogonโ€
                          O4 - HKCU..\Run: [Overwolf] = F:\Overwolf\OverwolfLauncher.exe -overwolfsilent
                          O4 - HKCU..\Run: [VPN Unlimited] = C:\Program Files (x86)\VPN Unlimited\vpn-unlimited-launcher.exe
                          O4 - HKCU..\Run: [uTorrent] = C:\Users\User\AppData\Roaming\uTorrent\uTorrent.ex e /MINIMIZED
                          O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] = C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.e xe
                          O4 - HKLM..\Run: [AdobeGCInvoker-1.0] = C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe
                          O4 - HKLM..\Run: [RtkAudUService] = C:\WINDOWS\System32\RtkAudUService64.exe -background
                          O4 - HKU\S-1-5-19..\RunOnce: [WAB Migrate] = C:\Program Files\Windows Mail\wab.exe /Upgrade
                          O4 - HKU\S-1-5-20..\RunOnce: [WAB Migrate] = C:\Program Files\Windows Mail\wab.exe /Upgrade
                          O4-32 - HKLM..\Run: [ASUS WiFi GO! FileTransfer Execute] = C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiFile\WiFileTransfer.exe
                          O4-32 - HKLM..\Run: [LogMeIn Hamachi Ui] = C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe --auto-start
                          O4-32 - HKLM..\Run: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
                          O5 - HKCU\Control Panel\donโ€™t load: [RTSnMg64.cpl] (file missing)
                          O9-32 - Button: HKLM..{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}: OneNote โ€“ c&satolt feljegyzรฉsek - (no file)
                          O9-32 - Tools menu item: HKLM..{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}: OneNote โ€“ c&satolt feljegyzรฉsek - (no file)
                          O17 - DHCP DNS 1: 213.46.246.53
                          O17 - DHCP DNS 2: 213.46.246.54
                          O21 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive1: (no name) - {BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
                          O21 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive2: (no name) - {5AB7172C-9C11-405C-8DD5-AF20F3606282} - (no file)
                          O21 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive3: (no name) - {A78ED123-AB77-406B-9962-2A5D9D2F7F30} - (no file)
                          O21 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive4: (no name) - {F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
                          O21 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive5: (no name) - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
                          O21 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive6: (no name) - {9AA2F32D-362A-42D9-9328-24A483E2CCC3} - (no file)
                          O21 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive7: (no name) - {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} - (no file)
                          O21 - HKLM..\ShellIconOverlayIdentifiers\00asw: (no name) - {472083B0-C522-11CF-8763-00608CC02F24} - (no file)
                          O21-32 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive1: (no name) - {BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
                          O21-32 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive2: (no name) - {5AB7172C-9C11-405C-8DD5-AF20F3606282} - (no file)
                          O21-32 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive3: (no name) - {A78ED123-AB77-406B-9962-2A5D9D2F7F30} - (no file)
                          O21-32 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive4: (no name) - {F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
                          O21-32 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive5: (no name) - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
                          O21-32 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive6: (no name) - {9AA2F32D-362A-42D9-9328-24A483E2CCC3} - (no file)
                          O21-32 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive7: (no name) - {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} - (no file)
                          O22 - Task (.job): (disabled) (Not scheduled) CreateExplorerShellUnelevatedTask.job - C:\WINDOWS\explorer.exe /NOUACCHECK
                          O23 - Service R2: ASUS Com Service - (asComSvc) - C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
                          O23 - Service R2: ASUS HM Com Service - (asHmComSvc) - C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
                          O23 - Service R2: ASUS System Control Service - (AsSysCtrlService) - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlServi ce.exe
                          O23 - Service R2: Adobe Acrobat Update Service - (AdobeARMservice) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
                          O23 - Service R2: Adobe Genuine Monitor Service - (AGMService) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
                          O23 - Service R2: Adobe Genuine Software Integrity Service - (AGSService) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
                          O23 - Service R2: AsusFanControlService - C:\Program Files (x86)\ASUS\AsusFanControlService\1.02.00\AsusFanCo ntrolService.exe
                          O23 - Service R2: Hi-Rez Studios Authenticate and Update Service - (HiPatchService) - F:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
                          O23 - Service R2: LMIGuardianSvc - C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
                          O23 - Service R2: LogMeIn Hamachi Tunneling Engine - (Hamachi2Svc) - C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe -s
                          O23 - Service R2: NVIDIA Display Container LS - (NVDisplay.ContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Containe r.exe -s NVDisplay.ContainerLocalSystem -f โ€œC:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSys tem.logโ€ -l 3 -d โ€œC:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSyste mโ€ -r -p 30000
                          O23 - Service R2: NVIDIA LocalSystem Container - (NvContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -s NvContainerLocalSystem -f โ€œC:\ProgramData\NVIDIA\NvContainerLocalSystem.logโ€ -l 3 -d โ€œC:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystemโ€ -r -p 30000 -st โ€œC:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dl lโ€
                          O23 - Service R2: NVIDIA Telemetry Container - (NvTelemetryContainer) - C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe -s NvTelemetryContainer -f โ€œC:\ProgramData\NVIDIA\NvTelemetryContainer.logโ€ -l 3 -d โ€œC:\Program Files\NVIDIA Corporation\NvTelemetry\pluginsโ€ -r
                          O23 - Service R2: ProductAgentService - C:\Program Files\Bitdefender Agent\ProductAgentService.exe
                          O23 - Service R2: Realtek Audio Universal Service - (RtkAudioUniversalService) - C:\WINDOWS\System32\RtkAudUService64.exe
                          O23 - Service R2: TeamViewer 13 - (TeamViewer) - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
                          O23 - Service R2: VPN Unlimited Service - (VPNUnlimitedService) - C:\Program Files (x86)\VPN Unlimited\vpn-unlimited-daemon.exe
                          O23 - Service S2: Google frissรญtรฉs Szolgรกltatรกs (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc
                          O23 - Service S2: ICEsound Service - (ICEsoundService) - C:\WINDOWS\system32\ICEsoundService64.exe (file missing)
                          O23 - Service S2: Origin Web Helper Service - C:\Program Files (x86)\Origin\OriginWebHelperService.exe (file missing)
                          O23 - Service S2: Windows Remediation Service - (sedsvc) - C:\Program Files\rempl\sedsvc.exe
                          O23 - Service S3: BattlEye Service - (BEService) - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
                          O23 - Service S3: Disc Soft Lite Bus Service - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
                          O23 - Service S3: EasyAntiCheat - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
                          O23 - Service S3: GalaxyClientService - F:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe
                          O23 - Service S3: GalaxyCommunication - C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommun ication.exe
                          O23 - Service S3: Google Chrome Elevation Service - (GoogleChromeElevationService) - C:\Program Files (x86)\Google\Chrome\Application\74.0.3729.169\elev ation_service.exe
                          O23 - Service S3: Google frissรญtรฉs Szolgรกltatรกs (gupdatem) - (gupdatem) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc
                          O23 - Service S3: NVIDIA NetworkService Container - (NvContainerNetworkService) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -s NvContainerNetworkService -f โ€œC:\ProgramData\NVIDIA\NvContainerNetworkService.l ogโ€ -l 3 -d โ€œC:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkServiceโ€ -r -p 30000 -st โ€œC:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dl lโ€
                          O23 - Service S3: Origin Client Service - C:\Program Files (x86)\Origin\OriginClientService.exe (file missing)
                          O23 - Service S3: Overwolf Updater Windows SCM - (OverwolfUpdater) - F:\Overwolf\OverwolfUpdater.exe /RunningFrom SCM
                          O23 - Service S3: Steam Client Service - C:\Program Files (x86)\Common Files\Steam\SteamService.exe /RunAsService

                          โ€“
                          End of file - Time spent: 20,8 sec. - 27952 bytes, CRC32: FFFFFFFF. Sign: ๅธไฌ‰

                            Comment

                            • Malnutrition
                              PCHF Moderator
                              • Jul 2016
                              • 7041
                              #8
                              I see a few things that need to be taken care of, but my laptop is dead and the power cord wonโ€™t be here for a couple hours. Not much I can do from my phone. Iโ€™d suggest just going through the internet guide I posted until I get my power cord and prepare you a proper reply. But judging by what I see I am fairly certain I can help your issue.

                                Comment

                                • Malnutrition
                                  PCHF Moderator
                                  • Jul 2016
                                  • 7041
                                  #9
                                  Clean up temp files and reduce startup load with CCleaner.

                                  Note: This tool will clean your browsing history as well.

                                  [ul]
                                  [li]Download CCleaner from here.[/li][li]After install Click Options.[/li][li]Go to monitoring.[/li][li]Uncheck All Monitoring items.[/li][li]Go to advanced โ€“ Click close program after cleaning.[/li][li]Go to settings โ€“ click run ccleaner when the computer starts.[/li][li]Now that you have ccleaner installed and set-up:[/li][li]Open the program.[/li][li]Go to Tools[/li][li]Go to Startup[/li][li]Now double click each item. To Disable.[/li][li]Leave only your antivirus enabled.[/li][li]Then disable All items in your scheduled task as well.[/li][li]Unless they are related to windows defender.Or your antivirus.[/li][li]Reboot the machine.[/li][/ul]

                                  The site is in French so the download button is the same as the picture below..

                                  [IMG alt=โ€œ4848โ€]https://pchelpforum.net/attachments/...0841-png.4848/

                                  ZHP Diag Scan Click here to download.
                                  1. Right Click Run as Admin.
                                  2. Click the Options button.

                                  Click on Check All
                                  Then Click Validate
                                  Then click close.

                                  Forums - PC Help Forum
                                  https://pchelpforum.net/attachments/upload_2017-4-26_17-16-39-png.2074/
                                  PCHF Forums


                                  2. Click the Scanner button.

                                  Forums - PC Help Forum
                                  https://pchelpforum.net/attachments/upload_2017-2-23_3-32-26-png.1647/
                                  PCHF Forums


                                  When complete please push the report button.
                                  A notepad will openโ€ฆ copy and paste the report in your next reply.[/IMG]

                                    Comment

                                    • Fexerrum
                                      PCHF Member
                                      • Jun 2019
                                      • 13
                                      #10
                                      ~ ZHPDiag v2019.6.15.85 By Nicolas Coolman (2019/06/15)
                                      ~ Run by User (Administrator) (2019/06/17 00:19:42)
                                      ~ Web: https://www.nicolascoolman.com
                                      ~ Blog: https://nicolascoolman.eu/
                                      ~ Facebook: ZHP
                                      ~ Certificate ZHPDiag: Legal
                                      ~ State version: Version OK
                                      ~ Mode: Scan
                                      ~ Report: C:\Users\User\Desktop\ZHPDiag.txt
                                      ~ Report: C:\Users\User\AppData\Roaming\ZHP\ZHPDiag.txt
                                      ~ UAC: Activate
                                      ~ System startup: Normal (Normal boot)
                                      Windows 10 Pro, 64-bit (Build 17134) =>.Microsoft Corporation

                                      โ€”\ Internet Browsers (3) - 0s
                                      ~ GCIE: Google Chrome v74.0.3729.169
                                      ~ MSIE: Microsoft Edge v40
                                      ~ MSIE: Internet Explorer v11.829.17134.0

                                      โ€”\ Windows Product Information (3) - 3s
                                      ~ Windows Server License Manager Script : OK
                                      ~ Licence Script File Gรฉnรฉration : OK
                                      Windows Automatic Updates : OK

                                      โ€”\ System protection software (2) - 1s
                                      Windows Defender W10 (Activate) (Protection)
                                      Bitdefender Agent v1.0.1 (Protection)

                                      โ€”\ Surveillance software (1) - 1s
                                      ~ Adobe Acrobat Reader DC - Hungarian (Surveillance)

                                      โ€”\ System optimization software (1) - 1s
                                      ~ CCleaner v5.51 (Optimisation)

                                      โ€”\ Sharing software PeerToPeer (1) - 1s
                                      ~ ยตTorrent v3.5.5.45271 (P2P)

                                      โ€”\ Informations on the system (6) - 0s
                                      ~ Operating System: AMD64 Family 23 Model 1 Stepping 1, AuthenticAMD
                                      ~ Operating System: 64-bit
                                      ~ Boot mode: Normal (Normal boot)
                                      Total RAM: 8318.708 MB (61% free) : OK =>.RAM Value
                                      System Restore: Activรฉ (Enable)
                                      System drive C: has 6 GB (5%) free of 113 GB : ATTENTION =>Warning Disk Space

                                      โ€”\ Connection to the system mode (3) - 0s
                                      ~ Computer Name: DESKTOP-NQ7JARN
                                      ~ User Name: User
                                      ~ Logged in as Administrator

                                      โ€”\ Enumeration of the disk units (5) - 0s
                                      ~ Drive C: has 6 GB free of 113 GB (System)
                                      ~ Drive D: has 0 GB free of 0 GB
                                      ~ Drive F: has 107 GB free of 653 GB
                                      ~ Drive G: has 285 GB free of 299 GB
                                      ~ Drive K: has 7 GB free of 7 GB

                                      โ€”\ State of the Windows Security Center (7) - 0s
                                      [HKLM\Software\WOW6432Node\Microsoft\Windows\Curren tVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
                                      [HKLM\Software\WOW6432Node\Microsoft\Windows\Curren tVersion\policies\system] EnableLUA: OK
                                      [HKLM\Software\WOW6432Node\Microsoft\Windows\Curren tVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
                                      [HKLM\Software\WOW6432Node\Microsoft\Windows\Curren tVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
                                      [HKLM\Software\WOW6432Node\Microsoft\Windows\Curren tVersion\Explorer\Associations] Application: OK
                                      [HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
                                      [HKLM64\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

                                      โ€”\ Search Generic System Files (24) - 1s
                                      [MD5.C8FB56B60458B09C1CAEBD4DAF1AC8BB] - 14/03/2019 - (.Microsoft Corporation - Windows Intรฉzล‘.) โ€“ C:\WINDOWS\Explorer.exe [3933296] =>.Microsoft Windowsยฎ
                                      [MD5.73C519F050C20580F8A62C849D49215A] - 12/04/2018 - (.Microsoft Corporation - Windows gazdafolyamat (Rundll32).) โ€“ C:\WINDOWS\System32\rundll32.exe [69632] =>.Microsoft Corporation
                                      [MD5.A58B0CB069DA7840B935872ADCD7F0C2] - 12/04/2018 - (.Microsoft Corporation - Windows-indรญtรณalkalmazรกs.) โ€“ C:\WINDOWS\System32\Wininit.exe [366792] =>.Microsoft Corporation
                                      [MD5.8DA81943DAA4CE6BD1DE91F56BE72EE7] - 17/05/2019 - (.Microsoft Corporation - Internet Extensions for Win32.) โ€“ C:\WINDOWS\System32\wininet.dll [4937216] =>.Microsoft Corporation
                                      [MD5.749CA1F1B638E4E4A8A1F0990377012F] - 08/09/2018 - (.Microsoft Corporation - Windows bejelentkeztetล‘ alkalmazรกs.) โ€“ C:\WINDOWS\System32\Winlogon.exe [677888] =>.Microsoft Corporation
                                      [MD5.7A377800FF15426B7D89768A8727CFEF] - 12/04/2018 - (.Microsoft Corporation - Szoftverlicencelรฉsi kรณdtรกr.) โ€“ C:\WINDOWS\System32\sppcomapi.dll [415232] =>.Microsoft Corporation
                                      [MD5.86FE93AFDD8B2BCD389E30839A652181] - 09/11/2018 - (.Microsoft Corporation - DNS-รผgyfรฉl API DLL-je.) โ€“ C:\WINDOWS\System32\dnsapi.dll [766704] =>.Microsoft Windowsยฎ
                                      [MD5.B668D6FD24465E11155B47808553DA61] - 09/11/2018 - (.Microsoft Corporation - DNS-รผgyfรฉl API DLL-je.) โ€“ C:\WINDOWS\Syswow64\dnsapi.dll [573504] =>.Microsoft Windowsยฎ
                                      [MD5.7FCE169D96CE4AA1009A459661EAE109] - 06/03/2019 - (.Microsoft Corporation - Kiegรฉszรญtล‘ funkciรณk illesztล‘programja a Win.) โ€“ C:\WINDOWS\System32\drivers\AFD.sys [626488] =>.Microsoft Corporation
                                      [MD5.90AB4ED8EBD72A1C096A40CC35404B91] - 12/04/2018 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) โ€“ C:\WINDOWS\System32\drivers\atapi.sys [28568] =>.Microsoft Corporation
                                      [MD5.54821BC6FD2D26ECC3081109AF1AEAD5] - 06/03/2019 - (.Microsoft Corporation - CD-ROM File System Driver.) โ€“ C:\WINDOWS\System32\drivers\Cdfs.sys [93696] =>.Microsoft Corporation
                                      [MD5.6834DBBA2A1DBA5B9B6360D0B9A3CBB5] - 15/06/2018 - (.Microsoft Corporation - SCSI CD-ROM Driver.) โ€“ C:\WINDOWS\System32\drivers\Cdrom.sys [159744] =>.Microsoft Corporation
                                      [MD5.8A1C10410FDA4287A76EC5A64371E221] - 15/06/2018 - (.Microsoft Corporation - DFS Namespace Client Driver.) โ€“ C:\WINDOWS\System32\drivers\DfsC.sys [141312] =>.Microsoft Corporation
                                      [MD5.DED74127C7A2266715C0B8EA2EE75214] - 12/04/2018 - (.Microsoft Corporation - High Definition Audio Bus Driver.) โ€“ C:\WINDOWS\System32\drivers\HDAudBus.sys [86016] =>.Microsoft Corporation
                                      [MD5.DA179667B8CEC22E4ECBBF4210DC0E35] - 12/04/2018 - (.Microsoft Corporation - i8082-port illesztล‘programja.) โ€“ C:\WINDOWS\System32\drivers\i8042prt.sys [105984] =>.Microsoft Corporation
                                      [MD5.7408B83959A4B8271EF67FD06A6B366B] - 12/04/2018 - (.Microsoft Corporation - IP Network Address Translator.) โ€“ C:\WINDOWS\System32\drivers\IpNat.sys [214528] =>.Microsoft Corporation
                                      [MD5.6C321DB795F5EF5FF870737177825FC9] - 20/09/2018 - (.Microsoft Corporation - Windows NT SMB Minirdr.) โ€“ C:\WINDOWS\System32\drivers\MRxSmb.sys [500536] =>.Microsoft Corporation
                                      [MD5.EDA5D5221622818816FC006097CC5A18] - 02/04/2019 - (.Microsoft Corporation - MBT Transport driver.) โ€“ C:\WINDOWS\System32\drivers\netBT.sys [310272] =>.Microsoft Corporation
                                      [MD5.D1EC917BA8861AE9DB655232422146F8] - 14/03/2019 - (.Microsoft Corporation - NT fรกjlrendszer-illesztล‘.) โ€“ C:\WINDOWS\System32\drivers\ntfs.sys [2421048] =>.Microsoft Corporation
                                      [MD5.13B175715A4391E4E5D2AB2EBC8CDBB5] - 12/04/2018 - (.Microsoft Corporation - Pรกrhuzamos port illesztล‘programja.) โ€“ C:\WINDOWS\System32\drivers\Parport.sys [98816] =>.Microsoft Corporation
                                      [MD5.775ED7E51B58CF9EB415A1DBA540DACF] - 12/04/2018 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) โ€“ C:\WINDOWS\System32\drivers\Rasl2tp.sys [106496] =>.Microsoft Corporation
                                      [MD5.172A40D2A354F328F08264543E9D57A6] - 14/03/2019 - (.Microsoft Corporation - Microsoft RDP Device redirector.) โ€“ C:\WINDOWS\System32\drivers\rdpdr.sys [182784] =>.Microsoft Corporation
                                      [MD5.16071C42E21CE3378FA449322FB9AB1D] - 12/04/2018 - (.Microsoft Corporation - TDI Translation Driver.) โ€“ C:\WINDOWS\System32\drivers\tdx.sys [121248] =>.Microsoft Corporation
                                      [MD5.F0EE4E6028CCA58BEA9A04E7BEAB7DB4] - 12/04/2018 - (.Microsoft Corporation - Kรถtet รกrnyรฉkmรกsolatรกnak illesztล‘programja.) โ€“ C:\WINDOWS\System32\drivers\volsnap.sys [398240] =>.Microsoft Corporation

                                      โ€”\ No disabled Windows Services (77) - 3s
                                      O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporatedยฎ
                                      O23 - Service: Adobe Genuine Monitor Service (AGMService) . (.Adobe Systems, Incorporated - Adobe Genuine Software Service.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe =>.Adobe Inc.ยฎ
                                      O23 - Service: Adobe Genuine Software Integrity Service (AGSService) . (.Adobe Systems, Incorporated - Adobe Genuine Software Integrity Service.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe =>.Adobe Inc.ยฎ
                                      O23 - Service: ASUS Com Service (asComSvc) . (โ€ฆ) - C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe =>.ASUSTeK Computer Inc.ยฎ
                                      O23 - Service: ASUS HM Com Service (asHmComSvc) . (.ASUSTeK Computer Inc. - .) - C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe =>.ASUSTeK Computer Inc.ยฎ
                                      O23 - Service: ASUS System Control Service (AsSysCtrlService) . (โ€ฆ) - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlServi ce.exe =>.ASUSTeK
                                      O23 - Service: AsusFanControlService (AsusFanControlService) . (.ASUSTeK Computer Inc. - ASUS Motherboard Fan Control Service.) - C:\Program Files (x86)\ASUS\AsusFanControlService\1.02.00\AsusFanCo ntrolService.exe =>.ASUSTek Computer Inc.
                                      O23 - Service: C:\WINDOWS\System32\AudioEndpointBuilder.dll (AudioEndpointBuilder) . (.Microsoft Corporation - Windows-hangvรฉgpontรฉpรญtล‘.) - C:\WINDOWS\System32\AudioEndpointBuilder.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\audiosrv.dll (Audiosrv) . (.Microsoft Corporation - Windows audioszolgรกltatรกs.) - C:\WINDOWS\System32\Audiosrv.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\bfe.dll (BFE) . (.Microsoft Corporation - Alap szลฑrล‘program.) - C:\WINDOWS\System32\bfe.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\qmgr.dll (BITS) . (.Microsoft Corporation - Hรกttรฉrben futรณ intelligens รกtviteli szolgรกl.) - C:\WINDOWS\System32\qmgr.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\system32\bisrv.dll (BrokerInfrastructure) . (.Microsoft Corporation - Hรกttรฉrfeladatok infrastruktรบra-szolgรกltatรกs.) - C:\WINDOWS\System32\bisrv.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\cdpusersvc.dll (CDPUserSvc) . (.Microsoft Corporation - Microsoft(R) CDP โ€“ felhasznรกlรณi รถsszetevล‘k.) - C:\WINDOWS\System32\CDPUserSvc.dll =>.Microsoft Corporation
                                      O23 - Service: Csatlakoztatott eszkรถzรถk platformja (CDP) felhasznรกlรณi szol (CDPUserSvc_5c598) . (.Microsoft Corporation - Windows-szolgรกltatรกsok gazdafolyamata.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisherยฎ
                                      O23 - Service: C:\Windows\System32\coremessaging.dll (CoreMessagingRegistrar) . (.Microsoft Corporation - Microsoft CoreMessaging Dll.) - C:\Windows\System32\coremessaging.dll =>.Microsoft Windowsยฎ
                                      O23 - Service: C:\WINDOWS\System32\cryptsvc.dll (CryptSvc) . (.Microsoft Corporation - Kriptogrรกfiai szolgรกltatรกsok.) - C:\WINDOWS\System32\cryptsvc.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\das.dll (DeviceAssociationService) . (.Microsoft Corporation - Eszkรถztรกrsรญtรกsi szolgรกltatรกs.) - C:\WINDOWS\System32\das.dll =>.Microsoft Corporation
                                      O23 - Service: C:\Windows\System32\dhcpcore.dll (Dhcp) . (.Microsoft Corporation - DHCP-รผgyfรฉlszolgรกltatรกs.) - C:\Windows\System32\dhcpcore.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\diagtrack.dll (DiagTrack) . (.Microsoft Corporation - Microsoft Windows diagnosztikai nyomkรถvetรฉs.) - C:\WINDOWS\System32\diagtrack.dll =>.Microsoft Corporation
                                      O23 - Service: C:\Windows\System32\dnsapi.dll (Dnscache) . (.Microsoft Corporation - DNS-gyosรญtรณtรกrazรกs feloldรกsi szolgรกltatรกsa.) - C:\WINDOWS\System32\dnsrslvr.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\dosvc.dll (DoSvc) . (.Microsoft Corporation - Windows-szolgรกltatรกsok gazdafolyamata.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisherยฎ
                                      O23 - Service: C:\WINDOWS\System32\dusmsvc.dll (DusmSvc) . (.Microsoft Corporation - Adatforgalom-szolgรกltatรกs.) - C:\WINDOWS\System32\dusmsvc.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\wevtsvc.dll (EventLog) . (.Microsoft Corporation - Windows-szolgรกltatรกsok gazdafolyamata.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisherยฎ
                                      O23 - Service: @comres.dll,-2450 (EventSystem) . (.Microsoft Corporation - COM+.) - C:\Windows\System32\es.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\FntCache.dll (FontCache) . (.Microsoft Corporation - Windows betลฑtรญpus-gyorsรญtรณtรกr szolgรกltatรกs.) - C:\WINDOWS\System32\FntCache.dll =>.Microsoft Corporation
                                      O23 - Service: @gpapi.dll,-112 (gpsvc) . (.Microsoft Corporation - Csoporthรกzirend รผgyfรฉl.) - C:\WINDOWS\System32\gpsvc.dll =>.Microsoft Corporation
                                      O23 - Service: Google frissรญtรฉs Szolgรกltatรกs (gupdate) (gupdate) . (.Google Inc. - Google telepรญtล‘.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Incยฎ
                                      O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) . (.LogMeIn Inc. - Hamachi Client Tunneling Engine.) - C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe =>.LogMeIn, Inc.ยฎ
                                      O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) . (.Hi-Rez Studios - HiPatchService.) - F:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe =>.Hi-Rez Studios
                                      O23 - Service: ICEsound Service (ICEsoundService) . (โ€ฆ) - C:\WINDOWS\system32\ICEsoundService64.exe (.not file.)
                                      O23 - Service: C:\WINDOWS\System32\ikeext.dll (IKEEXT) . (.Microsoft Corporation - IKE bล‘vรญtmรฉny.) - C:\WINDOWS\System32\ikeext.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\iphlpsvc.dll (iphlpsvc) . (.Microsoft Corporation - IPv4-hรกlรณzatokon IPv6-kapcsolรณdรกsi lehetล‘sรฉ.) - C:\WINDOWS\System32\iphlpsvc.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\srvsvc.dll (LanmanServer) . (.Microsoft Corporation - Kiszolgรกlรณ szolgรกltatรกs DLL-je.) - C:\WINDOWS\System32\srvsvc.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\wkssvc.dll (LanmanWorkstation) . (.Microsoft Corporation - Munkaรกllomรกs szolgรกltatรกs DLL-je.) - C:\WINDOWS\System32\wkssvc.dll =>.Microsoft Corporation
                                      O23 - Service: LMIGuardianSvc (LMIGuardianSvc) . (.LogMeIn, Inc. - LMIGuardianSvc.) - C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe =>.LogMeIn, Inc.ยฎ
                                      O23 - Service: C:\WINDOWS\system32\lsm.dll (LSM) . (.Microsoft Corporation - Helyi munkamenet-kezelล‘ szolgรกltatรกs.) - C:\WINDOWS\System32\lsm.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\moshost.dll (MapsBroker) . (.Microsoft Corporation - Letรถltรถtt tรฉrkรฉpek kezelรฉse.) - C:\WINDOWS\System32\moshost.dll =>.Microsoft Corporation
                                      O23 - Service: C:\Windows\System32\FirewallAPI.dll (mpssvc) . (.Microsoft Corporation - Microsoft vรฉdelmi szolgรกltatรกs.) - C:\WINDOWS\System32\mpssvc.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\nlasvc.dll (NlaSvc) . (.Microsoft Corporation - 2. hรกlรณzati helyfigyelรฉs.) - C:\WINDOWS\System32\nlasvc.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\nsisvc.dll (nsi) . (.Microsoft Corporation - Hรกlรณzatitรกrolรณ-adapter RPC-kiszolgรกlรณ.) - C:\WINDOWS\System32\nsisvc.dll =>.Microsoft Corporation
                                      O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) . (.NVIDIA Corporation - NVIDIA Container.) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe =>.NVIDIA Corporationยฎ
                                      O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) . (.NVIDIA Corporation - NVIDIA Container.) - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Containe r.exe =>.NVIDIA Corporationยฎ
                                      O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) . (.NVIDIA Corporation - NVIDIA Container.) - C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe =>.NVIDIA Corporationยฎ
                                      O23 - Service: C:\WINDOWS\System32\APHostRes.dll (OneSyncSvc) . (.Microsoft Corporation - Accounts Host Service.) - C:\WINDOWS\System32\APHostService.dll =>.Microsoft Corporation
                                      O23 - Service: รllomรกs szinkronizรกlรกsa_5c598 (OneSyncSvc_5c598) . (.Microsoft Corporation - Windows-szolgรกltatรกsok gazdafolyamata.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisherยฎ
                                      O23 - Service: Origin Web Helper Service (Origin Web Helper Service) . (โ€ฆ) - C:\Program Files (x86)\Origin\OriginWebHelperService.exe (.not file.)
                                      O23 - Service: C:\WINDOWS\System32\umpo.dll (Power) . (.Microsoft Corporation - Felhasznรกlรณi mรณdรบ energiagazdรกlkodรกsi szolg.) - C:\WINDOWS\System32\umpo.dll =>.Microsoft Corporation
                                      O23 - Service: ProductAgentService (ProductAgentService) . (.Bitdefender - Bitdefender Agent.) - C:\Program Files\Bitdefender Agent\ProductAgentService.exe =>.Bitdefender SRLยฎ
                                      O23 - Service: C:\WINDOWS\System32\profsvc.dll (ProfSvc) . (.Microsoft Corporation - ProfSvc.) - C:\WINDOWS\System32\profsvc.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\rasmans.dll (RasMan) . (.Microsoft Corporation - Tรกvelรฉrรฉsi csatlakozรกskezelล‘.) - C:\WINDOWS\System32\rasmans.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\system32\RpcEpMap.dll (RpcEptMapper) . (.Microsoft Corporation - RPC vรฉgpontlekรฉpezล‘.) - C:\WINDOWS\System32\RpcEpMap.dll =>.Microsoft Corporation
                                      O23 - Service: @combase.dll,-5010 (RpcSs) . (.Microsoft Corporation - Distributed COM Services.) - C:\WINDOWS\System32\rpcss.dll =>.Microsoft Corporation
                                      O23 - Service: Realtek Audio Universal Service (RtkAudioUniversalService) . (.Realtek Semiconductor - Realtek HD Audio Universal Service.) - C:\WINDOWS\System32\RtkAudUService64.exe =>.Realtek Semiconductor
                                      O23 - Service: C:\WINDOWS\System32\schedsvc.dll (Schedule) . (.Microsoft Corporation - Feladatรผtemezล‘ szolgรกltatรกs.) - C:\WINDOWS\System32\schedsvc.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\SecurityHealthAgent.dll (SecurityHealthService) . (.Microsoft Corporation - Windows Security Health Service.) - C:\WINDOWS\System32\SecurityHealthService.exe =>.Microsoft Corporation
                                      O23 - Service: Windows Remediation Service (sedsvc) . (.Microsoft Corporation - sedsvc.) - C:\Program Files\rempl\sedsvc.exe =>.Microsoft Windowsยฎ
                                      O23 - Service: C:\WINDOWS\System32\Sens.dll (SENS) . (.Microsoft Corporation - Rendszeresemรฉny-jelzล‘ szolgรกltatรกs (SENS).) - C:\WINDOWS\System32\sens.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\SgrmBroker.exe,-100 (SgrmBroker) . (.Microsoft Corporation - Rendszerล‘r futรกsidejลฑ figyelรฉsszervezล‘je sz.) - C:\WINDOWS\System32\SgrmBroker.exe =>.Microsoft Corporation
                                      O23 - Service: C:\Windows\System32\shsvcs.dll (ShellHWDetection) . (.Microsoft Corporation - Windows felรผlet szolgรกltatรกsi DLL-je.) - C:\Windows\System32\shsvcs.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\spoolsv.exe,-1 (Spooler) . (.Microsoft Corporation - Vรกrรณlista-alrendszer kezelล‘alkalmazรกsa.) - C:\WINDOWS\System32\spoolsv.exe =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\sppsvc.exe,-101 (sppsvc) . (.Microsoft Corporation - Microsoft Szoftvervรฉdelmi platform szolgรกlt.) - C:\WINDOWS\System32\sppsvc.exe =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\wiaservc.dll (stisvc) . (.Microsoft Corporation - รllรณkรฉpeszkรถzรถk szolgรกltatรกs.) - C:\WINDOWS\System32\wiaservc.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\sysmain.dll (SysMain) . (.Microsoft Corporation - Elล‘tรถltรฉsi szolgรกltatรกs.) - C:\WINDOWS\System32\sysmain.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\system32\SystemEventsBrokerServer.dll (SystemEventsBroker) . (.Microsoft Corporation - Rendszeresemรฉny-szervezล‘.) - C:\WINDOWS\System32\SystemEventsBrokerServer.dll =>.Microsoft Corporation
                                      O23 - Service: TeamViewer 13 (TeamViewer) . (.TeamViewer GmbH - TeamViewer 13.) - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe =>.TeamViewer GmbHยฎ
                                      O23 - Service: C:\WINDOWS\System32\themeservice.dll (Themes) . (.Microsoft Corporation - Windows felรผleti tรฉma szolgรกltatรกsi DLL-je.) - C:\WINDOWS\System32\themeservice.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\usermgr.dll (UserManager) . (.Microsoft Corporation - Felhasznรกlรณkezelล‘.) - C:\WINDOWS\System32\usermgr.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\usocore.dll (UsoSvc) . (.Microsoft Corporation - Munkamenet-vezรฉnylล‘ alapprogram frissรญtรฉse.) - C:\WINDOWS\System32\usocore.dll =>.Microsoft Corporation
                                      O23 - Service: VPN Unlimited Service (VPNUnlimitedService) . (.KeepSolid Inc. - VPN Unlimited Service.) - C:\Program Files (x86)\VPN Unlimited\vpn-unlimited-daemon.exe =>.KeepSolid Inc.ยฎ
                                      O23 - Service: C:\WINDOWS\System32\wcmsvc.dll (Wcmsvc) . (.Microsoft Corporation - A Windows csatlakozรกskezelล‘ szolgรกltatรกs DL.) - C:\WINDOWS\System32\wcmsvc.dll =>.Microsoft Corporation
                                      O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) . (.Microsoft Corporation - Antimalware Service Executable.) - C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1905.4-0\MsMpEng.exe =>.Microsoft Windows Publisherยฎ
                                      O23 - Service: C:\WINDOWS\System32\wbem\wmisvc.dll (Winmgmt) . (.Microsoft Corporation - WMI.) - C:\WINDOWS\System32\wbem\WMIsvc.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\wpnservice.dll (WpnService) . (.Microsoft Corporation - A Windows lekรผldรฉses รฉrtesรญtรฉseit kezelล‘ re.) - C:\WINDOWS\System32\WpnService.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\WpnUserService.dll (WpnUserService) . (.Microsoft Corporation - A Windows lekรผldรฉses รฉrtesรญtรฉseit kezelล‘ fe.) - C:\WINDOWS\System32\WpnUserService.dll =>.Microsoft Corporation
                                      O23 - Service: A Windows lekรผldรฉses รฉrtesรญtรฉseit kezelล‘ felhasznรกlรณi szolg (WpnUserService_5c598) . (.Microsoft Corporation - Windows-szolgรกltatรกsok gazdafolyamata.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisherยฎ
                                      O23 - Service: C:\WINDOWS\System32\wscsvc.dll (wscsvc) . (.Microsoft Corporation - A Windows Biztonsรกgi kรถzpont szolgรกltatรกsa.) - C:\WINDOWS\System32\wscsvc.dll =>.Microsoft Corporation
                                      O23 - Service: C:\WINDOWS\System32\SearchIndexer.exe,-103 (WSearch) . (.Microsoft Corporation - A Microsoft Windows Search szolgรกltatรกs ind.) - C:\Windows\System32\SearchIndexer.exe =>.Microsoft Corporation

                                      โ€”\ Services not Microsoft (SR=Run, SS=Stop) (107) - 7s
                                      SR - Boot [12/04/2018] [ 107416] (3ware) . (.LSI.) - C:\WINDOWS\System32\drivers\3ware.sys =>.Microsoft Windowsยฎ
                                      SR - Auto [16/12/2018] [ 83984] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporatedยฎ
                                      SR - Boot [12/04/2018] [ 1135520] (ADP80XX) . (.PMC-Sierra.) - C:\WINDOWS\System32\drivers\ADP80XX.SYS =>.Microsoft Windowsยฎ
                                      SR - Auto [04/05/2019] [ 3117648] Adobe Genuine Monitor Service (AGMService) . (.Adobe Systems, Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe =>.Adobe Inc.ยฎ
                                      SR - Auto [04/05/2019] [ 2888272] Adobe Genuine Software Integrity Service (AGSService) . (.Adobe Systems, Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe =>.Adobe Inc.ยฎ
                                      SR - Demand [28/01/2013] [ 14848] AiChargerPlus (AiChargerPlus) . (.ASUSTek Computer Inc..) - C:\Windows\SysWOW64\drivers\AiChargerPlus.sys =>.ASUSTeK Computer Inc.ยฎ
                                      SR - Demand [16/06/2019] [ 46384] ALSysIO (ALSysIO) . (.Arthur Liberman.) - C:\Users\User\AppData\Local\Temp\ALSysIO64.sys =>.ALCPU (Arthur Liberman)ยฎ
                                      SR - Demand [25/04/2018] [ 34664] AMD GPIO Client Driver (amdgpio2) . (.Advanced Micro Devices, Inc.) - C:\WINDOWS\System32\drivers\amdgpio2.sys =>.Advanced Micro Devices Inc.ยฎ
                                      SR - Demand [25/04/2018] [ 33120] AMD GPIO Client Driver (amdgpio3) . (.Advanced Micro Devices, Inc.) - C:\WINDOWS\System32\drivers\amdgpio3.sys =>.AMD PMP-PE CB Code Signer v20160415ยฎ
                                      SR - Demand [12/06/2017] [ 101232] AMD Kernel Mode CSP Service (amdkmcsp) . (.Advanced Micro Devices, Inc..) - C:\WINDOWS\System32\DRIVERS\amdkmcsp.sys =>.Advanced Micro Devices Inc.ยฎ
                                      SR - Demand [26/04/2018] [ 31592] AMD PCI (AMDPCIDev) . (.Advanced Micro Devices.) - C:\WINDOWS\System32\drivers\AMDPCIDev.sys =>.Advanced Micro Devices Inc.ยฎ
                                      SR - Auto [25/10/2018] [ 71152] AMDRyzenMasterDriverV13 (AMDRyzenMasterDriverV13) . (.Advanced Micro Devices.) - C:\Program Files\AMD\RyzenMaster\bin\AMDRyzenMasterDriver.sys =>.Advanced Micro Devices Inc.ยฎ
                                      SR - Boot [12/04/2018] [ 83360] (amdsata) . (.Advanced Micro Devices.) - C:\WINDOWS\System32\drivers\amdsata.sys =>.Microsoft Windowsยฎ
                                      SR - Boot [12/04/2018] [ 259480] (amdsbs) . (.AMD Technologies Inc..) - C:\WINDOWS\System32\drivers\amdsbs.sys =>.Microsoft Windowsยฎ
                                      SR - Boot [12/04/2018] [ 27032] (amdxata) . (.Advanced Micro Devices.) - C:\WINDOWS\System32\drivers\amdxata.sys =>.Microsoft Windowsยฎ
                                      SR - Boot [12/04/2018] [ 132000] Adaptec SAS/SATA-II RAID S (arcsas) . (.PMC-Sierra, Inc..) - C:\WINDOWS\System32\drivers\arcsas.sys =>.Microsoft Windowsยฎ
                                      SR - Auto [13/03/2014] [ 920736] ASUS Com Service (asComSvc) . (โ€ฆ) - C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe =>.ASUSTeK Computer Inc.ยฎ
                                      SR - Auto [13/03/2014] [ 951936] ASUS HM Com Service (asHmComSvc) . (.ASUSTeK Computer Inc..) - C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe =>.ASUSTeK Computer Inc.ยฎ
                                      SR - System [08/05/2015] [ 15232] AsIO (AsIO) . (โ€ฆ) - C:\Windows\SysWOW64\drivers\AsIO.sys =>.ASUSTeK Computer Inc.ยฎ
                                      SR - Demand [14/04/2016] [ 150272] ASMedia USB3.1 Hub (asmthub3) . (.ASMedia Technology Inc.) - C:\WINDOWS\System32\drivers\asmthub3.sys =>.ASMedia Technology Inc.ยฎ
                                      SR - Demand [14/04/2016] [ 453880] ASMedia XHCI Servi (asmtxhci) . (.ASMedia Technology Inc.) - C:\WINDOWS\System32\drivers\asmtxhci.sys =>.ASMedia Technology Inc.ยฎ
                                      SR - Boot [17/06/2015] [ 88936] (asstahci64) . (.Asmedia Technology.) - C:\WINDOWS\System32\drivers\asstahci64.sys =>.ASMedia Technology Inc.ยฎ
                                      SR - Auto [24/04/2014] [ 1360016] ASUS System Control Service (AsSysCtrlService) . (โ€ฆ) - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlServi ce.exe =>.ASUSTeK
                                      SR - System [15/01/2013] [ 14464] AsUpIO (AsUpIO) . (โ€ฆ) - C:\Windows\SysWOW64\drivers\AsUpIO.sys =>.ASUSTeK Computer Inc.ยฎ
                                      SR - Auto [13/03/2014] [ 1632256] AsusFanControlService (AsusFanControlService) . (.ASUSTeK Computer Inc..) - C:\Program Files (x86)\ASUS\AsusFanControlService\1.02.00\AsusFanCo ntrolService.exe =>.ASUSTek Computer Inc.
                                      SR - Demand [20/09/2011] [ 46152] ASUSFILTER (ASUSFILTER) . (.MCCI Corporation.) - C:\Windows\SysWOW64\drivers\ASUSFILTER.sys =>.MCCI Corporationยฎ
                                      SR - Boot [12/04/2018] [ 533912] QLogic Network Adapter VBD (b06bdrv) . (.QLogic Corporation.) - C:\WINDOWS\System32\drivers\bxvbda.sys =>.Microsoft Windowsยฎ
                                      SR - Demand [12/04/2018] [ 9728] bcmfn2 Service (bcmfn2) . (โ€ฆ) - C:\WINDOWS\System32\drivers\bcmfn2.sys =>.Broadcom Corporation
                                      SS - Demand [08/02/2019] [ 8403672] BattlEye Service (BEService) . (โ€ฆ) - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe =>.BattlEye Innovations e.K.ยฎ
                                      SR - Boot [12/04/2018] [ 321432] (cht4iscsi) . (.Chelsio Communications.) - C:\WINDOWS\System32\drivers\cht4sx64.sys =>.Microsoft Windowsยฎ
                                      SR - Demand [12/04/2018] [ 1836952] Chelsio Virtual Bus Driver (cht4vbd) . (.Chelsio Communications.) - C:\WINDOWS\System32\drivers\cht4vx64.sys =>.Microsoft Windowsยฎ
                                      SR - Demand [18/05/2017] [ 131984] SAMSUNG Mobile USB Com (dg_ssudbus) . (.Samsung Electronics Co., Ltd..) - C:\WINDOWS\System32\DRIVERS\ssudbus.sys =>.Samsung Electronics Co., Ltd.ยฎ
                                      SS - Demand [21/11/2016] [ 1472704] Disc Soft Lite Bus Service (Disc Soft Lite Bus Service) . (.Disc Soft Ltd.) - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe =>.Disc Soft Ltdยฎ
                                      SR - Demand [16/02/2018] [ 30264] DAEMON Tools Lite Virt (dtlitescsibus) . (.Disc Soft Ltd.) - C:\WINDOWS\System32\drivers\dtlitescsibus.sys =>.Disc Soft Ltdยฎ
                                      SR - Demand [16/02/2018] [ 47672] DAEMON Tools Lite Virtu (dtliteusbbus) . (.Disc Soft Ltd.) - C:\WINDOWS\System32\drivers\dtliteusbbus.sys =>.Disc Soft Ltdยฎ
                                      SS - Demand [09/12/2018] [ 781440] EasyAntiCheat (EasyAntiCheat) . (.EasyAntiCheat Ltd.) - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe =>.EasyAntiCheat Oyยฎ
                                      SR - Boot [12/04/2018] [ 3419032] QLogic 10 Gigabit Ethernet Ada (ebdrv) . (.QLogic Corporation.) - C:\WINDOWS\System32\drivers\evbda.sys =>.Microsoft Windowsยฎ
                                      SS - Demand [05/02/2018] [ 662600] GalaxyClientService (GalaxyClientService) . (.GOG.com.) - F:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe =>.GOG Sp. z o.o.ยฎ
                                      SS - Demand [13/06/2018] [ 8174664] GalaxyCommunication (GalaxyCommunication) . (.GOG.com.) - C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommun ication.exe =>.GOG Sp. z o.o.ยฎ
                                      SS - Demand [21/05/2019] [ 1267696] Google Chrome Elevation Service (GoogleChromeElevationService) . (.Google Inc..) - C:\Program Files (x86)\Google\Chrome\Application\74.0.3729.169\elev ation_service.exe =>.Google LLCยฎ
                                      SR - Auto [11/02/2018] [ 153168] Google frissรญtรฉs Szolgรกltatรกs (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Incยฎ
                                      SS - Demand [11/02/2018] [ 153168] Google frissรญtรฉs Szolgรกltatรกs (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Incยฎ
                                      SR - Demand [29/06/2017] [ 45680] LogMeIn Hamachi Virtu (Hamachi) . (.LogMeIn Inc..) - C:\WINDOWS\System32\drivers\Hamdrv.sys =>.Microsoft Windows Hardware Compatibility Publisherยฎ
                                      SR - Auto [02/04/2019] [ 3361736] LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) . (.LogMeIn Inc..) - C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe =>.LogMeIn, Inc.ยฎ
                                      SR - Demand [17/04/2016] [ 25288] USB Mouse Rate Adjuster Lower Filter by SweetLow (hidusbf) . (.SweetLow.) - C:\WINDOWS\System32\DRIVERS\hidusbf.sys =>.Jeshua Starr Scullyยฎ
                                      SR - Auto [11/06/2018] [ 9728] Hi-Rez Studios Authenticate and Update Service (HiPatchService) . (.Hi-Rez Studios.) - F:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe =>.Hi-Rez Studios
                                      SR - Boot [12/04/2018] [ 64408] (HpSAMD) . (.Hewlett-Packard Company.) - C:\WINDOWS\System32\drivers\HpSAMD.sys =>.Microsoft Windowsยฎ
                                      SR - System [16/06/2019] [ 66336] HWiNFO Kernel Driver (HWiNFO) . (.REALiXโ„ข.) - C:\WINDOWS\system32\drivers\HWiNFO64A.SYS =>.Martin Malik - REALiXยฎ
                                      SR - Demand [12/04/2018] [ 36864] Intel Serial IO GPIO Controlle (iagpio) . (.Intel(R) Corporation.) - C:\WINDOWS\System32\drivers\iagpio.sys =>.Intel(R) Corporation
                                      SR - Demand [12/04/2018] [ 91648] Intel(R) Serial IO I2C Host Cont (iai2c) . (.Intel(R) Corporation.) - C:\WINDOWS\System32\drivers\iai2c.sys =>.Intel(R) Corporation
                                      SR - Demand [12/04/2018] [ 79360] Intel(R) S (iaLPSS2i_GPIO2) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys =>.Intel Corporation
                                      SR - Demand [12/04/2018] [ 88576] In (iaLPSS2i_GPIO2_BXT_P) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.s ys =>.Intel Corporation
                                      SR - Demand [12/04/2018] [ 171520] Intel(R) Seria (iaLPSS2i_I2C) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys =>.Intel Corporation
                                      SR - Demand [12/04/2018] [ 174592] Intel( (iaLPSS2i_I2C_BXT_P) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys =>.Intel Corporation
                                      SR - Demand [12/04/2018] [ 38128] Intel(R) Serial IO (iaLPSSi_GPIO) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys =>.Intel Corporation - Client Components Groupยฎ
                                      SR - Demand [12/04/2018] [ 113152] Intel(R) Serial IO I (iaLPSSi_I2C) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys =>.Intel Corporation
                                      SR - Boot [12/04/2018] [ 885144] Intel Chipset SATA RAI (iaStorAVC) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaStorAVC.sys =>.Microsoft Windowsยฎ
                                      SR - Boot [12/04/2018] [ 412064] Intel RAID Controller Wi (iaStorV) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaStorV.sys =>.Microsoft Windowsยฎ
                                      SR - Demand [12/04/2018] [ 526232] Mellanox InfiniBand Bus/A (ibbus) . (.Mellanox.) - C:\WINDOWS\System32\drivers\ibbus.sys =>.Microsoft Windowsยฎ
                                      SR - Auto [00/00/0000] [ 0] ICEsound Service (ICEsoundService) . (โ€ฆ) - C:\WINDOWS\system32\ICEsoundService64.exe (.not file.)
                                      SR - Demand [16/01/2019] [ 6554416] Service for Realtek HD Audio (WDM) (IntcAzAudAddService) . (.Realtek Semiconductor Corp..) - C:\WINDOWS\System32\drivers\RTKVHD64.sys =>.Realtek Semiconductor Corp.ยฎ
                                      SR - Boot [12/04/2018] [ 145816] (ItSas35i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\ItSas35i.sys =>.Microsoft Windowsยฎ
                                      SR - Auto [27/05/2016] [ 419248] LMIGuardianSvc (LMIGuardianSvc) . (.LogMeIn, Inc..) - C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe =>.LogMeIn, Inc.ยฎ
                                      SR - Boot [12/04/2018] [ 108952] (LSI_SAS) . (.LSI Corporation.) - C:\WINDOWS\System32\drivers\lsi_sas.sys =>.Microsoft Windowsยฎ
                                      SR - Boot [12/04/2018] [ 124312] (LSI_SAS2i) . (.LSI Corporation.) - C:\WINDOWS\System32\drivers\lsi_sas2i.sys =>.Microsoft Windowsยฎ
                                      SR - Boot [12/04/2018] [ 128408] (LSI_SAS3i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\lsi_sas3i.sys =>.Microsoft Windowsยฎ
                                      SR - Boot [12/04/2018] [ 82848] (LSI_SSS) . (.LSI Corporation.) - C:\WINDOWS\System32\drivers\lsi_sss.sys =>.Microsoft Windowsยฎ
                                      SR - Boot [12/04/2018] [ 59800] (megasas) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\megasas.sys =>.Microsoft Windowsยฎ
                                      SR - Boot [12/04/2018] [ 75160] (megasas2i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\MegaSas2i.sys =>.Microsoft Windowsยฎ
                                      SR - Boot [12/04/2018] [ 82328] (megasas35i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\megasas35i.sys =>.Microsoft Windowsยฎ
                                      SR - Boot [12/04/2018] [ 575896] (megasr) . (.LSI Corporation, Inc..) - C:\WINDOWS\System32\drivers\megasr.sys =>.Microsoft Windowsยฎ
                                      SR - Demand [12/04/2018] [ 842648] Mellanox ConnectX Bus E (mlx4_bus) . (.Mellanox.) - C:\WINDOWS\System32\drivers\mlx4_bus.sys =>.Microsoft Windowsยฎ
                                      SR - Boot [12/04/2018] [ 63904] (mvumis) . (.Marvell Semiconductor, Inc..) - C:\WINDOWS\System32\drivers\mvumis.sys =>.Microsoft Windowsยฎ
                                      SR - Demand [12/04/2018] [ 108952] NetworkDirect Service (ndfltr) . (.Mellanox.) - C:\WINDOWS\System32\drivers\ndfltr.sys =>.Microsoft Windowsยฎ
                                      SR - System [21/02/2013] [ 32840] WinpkFilter LightWeight Filter (ndisrd) . (.NT Kernel Resources.) - C:\WINDOWS\System32\DRIVERS\ndisrd.sys =>.Realtek Semiconductor Corpยฎ
                                      SR - Auto [27/02/2019] [ 782136] NVIDIA LocalSystem Container (NvContainerLocalSystem) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe =>.NVIDIA Corporationยฎ
                                      SS - Demand [27/02/2019] [ 782136] NVIDIA NetworkService Container (NvContainerNetworkService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe =>.NVIDIA Corporationยฎ
                                      SR - Auto [22/05/2019] [ 782136] NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Containe r.exe =>.NVIDIA Corporationยฎ
                                      SR - Demand [23/05/2019] [ 228608] Service for NVIDIA High Definiti (NVHDA) . (.NVIDIA Corporation.) - C:\WINDOWS\System32\drivers\nvhda64v.sys =>.NVIDIA Corporationยฎ
                                      SR - Demand [23/05/2019] [21836032] (nvlddmkm) . (.NVIDIA Corporation.) - C:\Windows\System32\DriverStore\FileRepository\nv_ dispi.inf_amd64_b49751b9038af669\nvlddmkm.sys =>.NVIDIA Corporationยฎ
                                      SR - Boot [12/04/2018] [ 150424] (nvraid) . (.NVIDIA Corporation.) - C:\WINDOWS\System32\drivers\nvraid.sys =>.Microsoft Windowsยฎ
                                      SR - Boot [12/04/2018] [ 166304] (nvstor) . (.NVIDIA Corporation.) - C:\WINDOWS\System32\drivers\nvstor.sys =>.Microsoft Windowsยฎ
                                      SR - Demand [10/05/2019] [ 30336] NVIDIA KMS (NvStreamKms) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys =>.NVIDIA Corporationยฎ
                                      SR - Auto [22/05/2019] [ 782136] NVIDIA Telemetry Container (NvTelemetryContainer) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe =>.NVIDIA Corporationยฎ
                                      SR - Demand [17/04/2019] [ 69840] NVIDIA Virtual Au (nvvad_WaveExtensible) . (.NVIDIA Corporation.) - C:\WINDOWS\System32\drivers\nvvad64v.sys =>.NVIDIA Corporationยฎ
                                      SR - Demand [17/04/2019] [ 75600] NVVHCI Enumerator Service (nvvhci) . (.NVIDIA Corporation.) - C:\WINDOWS\System32\drivers\nvvhci.sys =>.NVIDIA Corporationยฎ
                                      SS - Demand [00/00/0000] [ 0] Origin Client Service (Origin Client Service) . (โ€ฆ) - C:\Program Files (x86)\Origin\OriginClientService.exe (.not file.)
                                      SR - Auto [00/00/0000] [ 0] Origin Web Helper Service (Origin Web Helper Service) . (โ€ฆ) - C:\Program Files (x86)\Origin\OriginWebHelperService.exe (.not file.)
                                      SS - Demand [06/03/2019] [ 2436936] Overwolf Updater Windows SCM (OverwolfUpdater) . (.Overwolf LTD.) - F:\Overwolf\OverwolfUpdater.exe =>.Overwolf Ltdยฎ
                                      SR - Boot [12/04/2018] [ 58776] (percsas2i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\percsas2i.sys =>.Microsoft Windowsยฎ
                                      SR - Boot [12/04/2018] [ 61848] (percsas3i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\percsas3i.sys =>.Microsoft Windowsยฎ
                                      SR - Auto [15/11/2018] [ 1293936] ProductAgentService (ProductAgentService) . (.Bitdefender.) - C:\Program Files\Bitdefender Agent\ProductAgentService.exe =>.Bitdefender SRLยฎ
                                      SR - Demand [23/10/2018] [ 1131024] Realtek RT640 NT Driver (rt640x64) . (.Realtek.) - C:\WINDOWS\System32\drivers\rt640x64.sys =>.Realtek Semiconductor Corp.ยฎ
                                      SR - Auto [16/01/2019] [ 857376] Realtek Audio Universal Service (RtkAudioUniversalService) . (.Realtek Semiconductor.) - C:\WINDOWS\System32\RtkAudUService64.exe =>.Realtek Semiconductor Corp.ยฎ
                                      SR - Boot [12/04/2018] [ 44952] (SiSRaid2) . (.Silicon Integrated Systems Corp..) - C:\WINDOWS\System32\drivers\SiSRaid2.sys =>.Microsoft Windowsยฎ
                                      SR - Boot [12/04/2018] [ 81816] (SiSRaid4) . (.Silicon Integrated Systems.) - C:\WINDOWS\System32\drivers\sisraid4.sys =>.Microsoft Windowsยฎ
                                      SR - Demand [18/05/2017] [ 166288] SAMSUNG Mobile USB Modem Dr (ssudmdm) . (.Samsung Electronics Co., Ltd..) - C:\WINDOWS\System32\DRIVERS\ssudmdm.sys =>.Samsung Electronics Co., Ltd.ยฎ
                                      SS - Demand [15/06/2019] [ 1695008] Steam Client Service (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe =>.Valveยฎ
                                      SR - Boot [12/04/2018] [ 31128] (stexstor) . (.Promise Technology, Inc..) - C:\WINDOWS\System32\drivers\stexstor.sys =>.Microsoft Windowsยฎ
                                      SR - Demand [22/08/2013] [ 40664] TAP-Windows Adapter V9 (tap0901) . (.The OpenVPN Project.) - C:\WINDOWS\System32\drivers\tap0901.sys =>.OpenVPN Technologies, Inc.ยฎ
                                      SR - Auto [10/09/2018] [11644656] TeamViewer 13 (TeamViewer) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe =>.TeamViewer GmbHยฎ
                                      SR - Demand [02/09/2014] [ 41192] @oem20.inf,%DeviceName% (WDM);VB-Audio Virtual Cable (WDM) (VBAudioVACMME) . (โ€ฆ) - C:\WINDOWS\System32\DRIVERS\vbaudio_cable64_win7.s ys =>.Vincent Burelยฎ
                                      SR - Auto [15/10/2018] [ 57200] VPN Unlimited Service (VPNUnlimitedService) . (.KeepSolid Inc..) - C:\Program Files (x86)\VPN Unlimited\vpn-unlimited-daemon.exe =>.KeepSolid Inc.ยฎ
                                      SR - Boot [12/04/2018] [ 166808] (vsmraid) . (.VIA Technologies Inc.,Ltd.) - C:\WINDOWS\System32\drivers\vsmraid.sys =>.Microsoft Windowsยฎ
                                      SR - Boot [12/04/2018] [ 305560] VIA StorX Storage RAID Co (VSTXRAID) . (.VIA Corporation.) - C:\WINDOWS\System32\drivers\vstxraid.sys =>.Microsoft Windowsยฎ
                                      SR - Demand [12/04/2018] [ 32152] WinMad Service (WinMad) . (.Mellanox.) - C:\WINDOWS\System32\drivers\winmad.sys =>.Microsoft Windowsยฎ
                                      SR - Demand [12/04/2018] [ 64920] WinVerbs Service (WinVerbs) . (.Mellanox.) - C:\WINDOWS\System32\drivers\winverbs.sys =>.Microsoft Windowsยฎ

                                      โ€”\ Task Planned Automatically (Register) (52) - 8s
                                      O38 - TASK: {01EAF71B-0E3D-4D11-8B10-7DC3C36602B2} [64Bits][\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}] - (.NVIDIA Corporation - NVIDIA GeForce Experience.) โ€“ C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3787304] =>.NVIDIA Corporation
                                      O38 - TASK: {0CA78772-5AE4-4342-9E76-0C0F2B1289D8} [64Bits][\Adobe Acrobat Update Task] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) โ€“ C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1195544] =>.Adobe Systems Incorporated
                                      O38 - TASK: {0D5672EC-9D43-4441-AF48-80551A92FBE3} [64Bits][\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}] - (.NVIDIA Corporation - NVIDIA driver profile updater.) โ€“ C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [899056] =>.NVIDIA Corporation
                                      O38 - TASK: {21F6A008-A25D-4174-B59A-ADFC364062A8} [64Bits][\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}] - (.NVIDIA Corporation - NVIDIA crash and telemetry reporter.) โ€“ C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1130296] =>.NVIDIA Corporation
                                      O38 - TASK: {2428FB2C-EB25-4BA3-8E91-1FE7248A90B5} [64Bits][\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}] - (.NVIDIA Corporation - NVIDIA driver profile updater.) โ€“ C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [899056] =>.NVIDIA Corporation
                                      O38 - TASK: {263A7F38-8416-4B42-959F-3812DB85982E} [64Bits][\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}] - (.NVIDIA Corporation - NVIDIA Container.) โ€“ C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [782136] =>.NVIDIA Corporation
                                      O38 - TASK: {3A8E09B4-B7C8-4A42-8A34-D0CD403CFE96} [64Bits][\HardDiskSentinel\Hard Disk Sentinel_User] - (.H.D.S. Hungary - Hard Disk Sentinel.) โ€“ C:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe [5360720] =>.H.D.S. Hungary
                                      O38 - TASK: {42F39166-5E2A-4880-8B59-9DFB9971D903} [64Bits][\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}] - (.NVIDIA Corporation - NVIDIA crash and telemetry reporter.) โ€“ C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1130296] =>.NVIDIA Corporation
                                      O38 - TASK: {4B0FE847-3096-456B-8E36-1ACBDF4B6EF3} [64Bits][\GoogleUpdateTaskMachineUA] - (.Google Inc. - Google telepรญtล‘.) โ€“ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168] =>.Google Inc.
                                      O38 - TASK: {52543B00-094F-42F5-BAE5-3D4DEFFBA956} [64Bits][\AMDAutoUpdate] - (.DESKTOP-NQ7JARN\User - AMD AutoUpdate.) โ€“ C:\Program Files\AMD\AutoUpdate\AMDAutoUpdate.exe [661240]
                                      O38 - TASK: {596BE6FD-9766-47FD-98FB-BAF9949F07E6} [64Bits][\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}] - (.NVIDIA Corporation - NVIDIA crash and telemetry reporter.) โ€“ C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1130296] =>.NVIDIA Corporation
                                      O38 - TASK: {5FF73AE9-01FE-4CF7-BB5A-8004F51862E0} [64Bits][\AdobeGCInvoker-1.0-DESKTOP-NQ7JARN-Peti] - (.Adobe Systems, Incorporated - Adobe GC Invoker Utility.) โ€“ C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2849872] =>.Adobe Systems, Incorporated
                                      O38 - TASK: {71FC3378-352E-4E7C-A320-82CD6CFBB5BE} [64Bits][\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}] - (.NVIDIA Corporation - NVIDIA Container.) โ€“ C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [782136] =>.NVIDIA Corporation
                                      O38 - TASK: {7813DBD2-9FB1-4388-8A72-4DB7DD5E4A1A} [64Bits][\CCleanerSkipUAC] - (.Piriform Software Ltd - CCleaner.) โ€“ C:\Program Files\CCleaner\CCleaner.exe [14636224] =>.Piriform Software Ltd
                                      O38 - TASK: {92293D49-7DF5-4C36-A9BF-AEB39885979C} [64Bits][\ASUS\ASUS Network iControl Help Execute] - (.ASUSTeK Computer Inc. - NetSvcHelpEntry.) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetSvcHelpEntry.exe [328504] =>.ASUSTek Computer Inc.
                                      O38 - TASK: {9CF46E32-E487-4119-B261-3C3F4F728209} [64Bits][\Avast Software\Overseer] - (.AVAST Software - Avast Overseer.) โ€“ C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2281944] =>.AVAST Software
                                      O38 - TASK: {ACE16E21-C4E3-44D8-A78C-B834AC609F6B} [64Bits][\CCleaner Update] - (.Piriform Software Ltd - CCleaner emergency updater.) โ€“ C:\Program Files\CCleaner\CCUpdate.exe [619416] =>.Piriform Software Ltd
                                      O38 - TASK: {B7A57538-3814-4B3E-ABA3-212CBB7EF237} [64Bits][\GoogleUpdateTaskMachineCore] - (.Google Inc. - Google telepรญtล‘.) โ€“ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168] =>.Google Inc.
                                      O38 - TASK: {BC6FDED6-F91C-404E-B8AB-9349ED7BDFDD} [64Bits][\ASUS\ASUS AI Suite II Execute] - (.ASUSTeK Computer Inc. - ASUS Routine Controller.) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2935424] =>.ASUSTek Computer Inc.
                                      O38 - TASK: {BDA80DE6-F2EE-42B9-A494-00D66CC18799} [64Bits][\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864] - (.Bitdefender - Bitdefender Agent WatchDog.) โ€“ C:\Program Files\Bitdefender Agent\WatchDog.exe [462288] =>.BitDefender
                                      O38 - TASK: {BF5635D2-D9D2-4978-9B4E-B557BCD3C328} [64Bits][\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}] - (.NVIDIA Corporation - NVIDIA crash and telemetry reporter.) โ€“ C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1130296] =>.NVIDIA Corporation
                                      O38 - TASK: {CED98321-169F-4F2D-BCDD-8E7B5A3F5A90} [64Bits][\Overwolf Updater Task] - (.Overwolf LTD - OverwolfUpdater.) โ€“ F:\Overwolf\OverwolfUpdater.exe [2436936] =>.Overwolf LTD
                                      O38 - TASK: {CFAF9499-212C-46CA-AE53-85DC9AB96297} [64Bits][\AdobeGCInvoker-1.0-DESKTOP-NQ7JARN-User] - (.Adobe Systems, Incorporated - Adobe GC Invoker Utility.) โ€“ C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2849872] =>.Adobe Systems, Incorporated
                                      O38 - TASK: {D4FED0F9-3D9D-422E-81A5-E4EFD9B6C1CC} [64Bits][\ASUS\USB 3.0 Boost Service] - (.ASUSTeK - U3Checker MFC Application.) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr.exe [90112] =>.ASUSTeK
                                      O38 - TASK: {E493C977-BAEE-4F5E-AFCD-1D450B0DCECA} [64Bits][\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}] - (.NVIDIA Corporation - NVIDIA nodejs launcher.) โ€“ C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [648504] =>.NVIDIA Corporation
                                      O38 - TASK: {E687249C-0724-4B0D-97FA-5C9BC38C5690} [64Bits][\ASUS\ASUS WiFi GO! Server Execute] - (.ASUSTeK Computer Inc. - ASUS WiFi GO! Server.) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiFi GO! Server.exe [967480] =>.ASUSTek Computer Inc.
                                      C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - (.NVIDIA Corporation.) โ€“ C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe =>.NVIDIA Corporation
                                      C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task - (.Adobe Systems Incorporated.) โ€“ C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
                                      C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B 2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - (.NVIDIA Corporation.) โ€“ C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe =>.NVIDIA Corporation
                                      C:\WINDOWS\System32\Tasks\NvTmRep_CrashReport1_{B2 FE1952-0186-46C3-BAEC-A80AA35AC5B8} - (.NVIDIA Corporation.) โ€“ C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe =>.NVIDIA Corporation
                                      C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - (.NVIDIA Corporation.) โ€“ C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe =>.NVIDIA Corporation
                                      C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily _{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - (.NVIDIA Corporation.) โ€“ C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [-d โ€˜C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheckโ€™ -l 3 -f C:\ProgramData\NVIDIA\NvContain] =>.NVIDIA Corporation
                                      C:\WINDOWS\System32\Tasks\HardDiskSentinel\Hard Disk Sentinel_User - (.H.D.S. Hungary.) โ€“ C:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe [/AUTORUN] =>.H.D.S. Hungary
                                      C:\WINDOWS\System32\Tasks\NvTmRep_CrashReport3_{B2 FE1952-0186-46C3-BAEC-A80AA35AC5B8} - (.NVIDIA Corporation.) โ€“ C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe =>.NVIDIA Corporation
                                      C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineU A - (.Google Inc..) โ€“ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [/ua ./ua] =>.Google Inc.
                                      C:\WINDOWS\System32\Tasks\AMDAutoUpdate - (.DESKTOP-NQ7JARN\User.) โ€“ C:\Program Files\AMD\AutoUpdate\AMDAutoUpdate.exe
                                      C:\WINDOWS\System32\Tasks\NvTmRep_CrashReport4_{B2 FE1952-0186-46C3-BAEC-A80AA35AC5B8} - (.NVIDIA Corporation.) โ€“ C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe =>.NVIDIA Corporation
                                      C:\WINDOWS\System32\Tasks\AdobeGCInvoker-1.0-DESKTOP-NQ7JARN-Peti - (.Adobe Systems, Incorporated.) โ€“ C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe =>.Adobe Systems, Incorporated
                                      C:\WINDOWS\System32\Tasks\NvBatteryBoostCheckOnLog on_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - (.NVIDIA Corporation.) โ€“ C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [-d โ€˜C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheckโ€™ -l 3 -f C:\ProgramData\NVIDIA] =>.NVIDIA Corporation
                                      C:\WINDOWS\System32\Tasks\CCleanerSkipUAC - (.Piriform Software Ltd.) โ€“ C:\Program Files\CCleaner\CCleaner.exe [$(Arg0)] =>.Piriform Software Ltd
                                      C:\WINDOWS\System32\Tasks\ASUS\ASUS Network iControl Help Execute - (.ASUSTeK Computer Inc..) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetSvcHelpEntry.exe [-delay] =>.ASUSTek Computer Inc.
                                      C:\WINDOWS\System32\Tasks\Avast Software\Overseer - (.AVAST Software.) โ€“ C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [/from_scheduler:1] =>.AVAST Software
                                      C:\WINDOWS\System32\Tasks\CCleaner Update - (.Piriform Software Ltd.) โ€“ C:\Program Files\CCleaner\CCUpdate.exe =>.Piriform Software Ltd
                                      C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineC ore - (.Google Inc..) โ€“ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [/c] =>.Google Inc.
                                      C:\WINDOWS\System32\Tasks\ASUS\ASUS AI Suite II Execute - (.ASUSTeK Computer Inc..) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [-open] =>.ASUSTek Computer Inc.
                                      C:\WINDOWS\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 - (.Bitdefender.) โ€“ C:\Program Files\Bitdefender Agent\WatchDog.exe [repair] =>.BitDefender
                                      C:\WINDOWS\System32\Tasks\NvTmRep_CrashReport2_{B2 FE1952-0186-46C3-BAEC-A80AA35AC5B8} - (.NVIDIA Corporation.) โ€“ C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe =>.NVIDIA Corporation
                                      C:\WINDOWS\System32\Tasks\Overwolf Updater Task - (.Overwolf LTD.) โ€“ F:\Overwolf\OverwolfUpdater.exe [/RunningFrom Schedule./RunningFrom] =>.Overwolf LTD
                                      C:\WINDOWS\System32\Tasks\AdobeGCInvoker-1.0-DESKTOP-NQ7JARN-User - (.Adobe Systems, Incorporated.) โ€“ C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [-mode=scheduled] =>.Adobe Systems, Incorporated
                                      C:\WINDOWS\System32\Tasks\ASUS\USB 3.0 Boost Service - (.ASUSTeK.) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr.exe =>.ASUSTeK
                                      C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - (.NVIDIA Corporation.) โ€“ C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [โ€“launcher=TaskScheduler] =>.NVIDIA Corporation
                                      C:\WINDOWS\System32\Tasks\ASUS\ASUS WiFi GO! Server Execute - (.ASUSTeK Computer Inc..) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiFi GO! Server.exe =>.ASUSTek Computer Inc.

                                      โ€”\ Auto loading programs from Registry and folders (29) - 3s
                                      O4 - HKLM..\Run: [SecurityHealth] . (.Microsoft Corporation - Windows Defender notification icon.) โ€“ C:\Program Files\Windows Defender\MSASCuiL.exe =>.Microsoft Windowsยฎ
                                      O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) โ€“ C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.e xe =>.Adobe Systems Incorporatedยฎ
                                      O4 - HKLM..\Run: [AdobeGCInvoker-1.0] . (.Adobe Systems, Incorporated - Adobe GC Invoker Utility.) โ€“ C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe =>.Adobe Inc.ยฎ
                                      O4 - HKLM..\Run: [RtkAudUService] . (.Realtek Semiconductor - Realtek HD Audio Universal Service.) โ€“ C:\WINDOWS\System32\RtkAudUService64.exe =>.Realtek Semiconductor
                                      O4 - HKCU..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) โ€“ C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Windowsยฎ
                                      O4 - HKCU..\Run: [uTorrent] . (.BitTorrent Inc. - ยตTorrent.) โ€“ C:\Users\User\AppData\Roaming\uTorrent\uTorrent.ex e =>.BitTorrent Incยฎ
                                      O4 - HKCU..\Run: [DAEMON Tools Lite Automount] . (. - .) โ€“ C:\Program Files\DAEMON Tools Lite\DTAgent.exe (.Not File.) =>.SUP.Orphan
                                      O4 - HKCU..\Run: [GoToAssist Remote Support Expert] . (.LogMeIn, Inc. - GoToAssist.) โ€“ C:\Users\User\AppData\Local\GoToAssist Remote Support Expert\1599\g2ax_start.exe =>.LogMeIn, Inc.ยฎ
                                      O4 - HKCU..\Run: [Overwolf] . (.Overwolf Ltd. - Overwolf Launcher.) โ€“ F:\Overwolf\OverwolfLauncher.exe =>.Overwolf Ltdยฎ
                                      O4 - HKCU..\Run: [VPN Unlimited] . (.KeepSolid Inc. - VPN Unlimited Launcher.) โ€“ C:\Program Files (x86)\VPN Unlimited\vpn-unlimited-launcher.exe =>.KeepSolid Inc.ยฎ
                                      O4 - HKCU..\Run: [CCleaner Smart Cleaning] . (.Piriform Software Ltd - CCleaner.) โ€“ C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Software Ltdยฎ
                                      O4 - HKCU..\Run: [Discord] . (.Discord Inc. - Discord.) โ€“ C:\Users\User\AppData\Local\Discord\app-0.0.305\Discord.exe =>.Discord Inc.ยฎ
                                      O4 - HKUS\S-1-5-19..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) โ€“ C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Windowsยฎ
                                      O4 - HKUS\S-1-5-20..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) โ€“ C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Windowsยฎ
                                      O4 - HKUS\S-1-5-19..\RunOnce: [WAB Migrate] . (.Microsoft Corporation - Windows Contacts.) โ€“ C:\Program Files\Windows Mail\wab.exe =>.Microsoft Corporation
                                      O4 - HKUS\S-1-5-20..\RunOnce: [WAB Migrate] . (.Microsoft Corporation - Windows Contacts.) โ€“ C:\Program Files\Windows Mail\wab.exe =>.Microsoft Corporation
                                      O4 - HKLM..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) โ€“ C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.ยฎ
                                      O4 - HKLM..\Wow6432Node\Run: [ASUS WiFi GO! FileTransfer Execute] . (.ASUSTeK Computer Inc. - WiFil GO! File Transfer.) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiFile\WiFileTransfer.exe =>.ASUSTeK Computer Inc.ยฎ
                                      O4 - HKLM..\Wow6432Node\Run: [LogMeIn Hamachi Ui] . (.LogMeIn Inc. - Hamachi Client Application.) โ€“ C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe =>.LogMeIn, Inc.ยฎ
                                      O4 - HKUS\S-1-5-19..\StartupApproved\Run: [OneDriveSetup] . (. - .) โ€“ 0x020000000000000000000000 =>.SUP.Orphan
                                      O4 - HKUS\S-1-5-20..\StartupApproved\Run: [OneDriveSetup] . (. - .) โ€“ 0x020000000000000000000000 =>.SUP.Orphan
                                      O4 - HKUS\S-1-5-21-1620667201-3233266275-4011120631-1001..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) โ€“ C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Windowsยฎ
                                      O4 - HKUS\S-1-5-21-1620667201-3233266275-4011120631-1001..\Run: [uTorrent] . (.BitTorrent Inc. - ยตTorrent.) โ€“ C:\Users\User\AppData\Roaming\uTorrent\uTorrent.ex e =>.BitTorrent Incยฎ
                                      O4 - HKUS\S-1-5-21-1620667201-3233266275-4011120631-1001..\Run: [DAEMON Tools Lite Automount] . (. - .) โ€“ C:\Program Files\DAEMON Tools Lite\DTAgent.exe (.Not File.) =>.SUP.Orphan
                                      O4 - HKUS\S-1-5-21-1620667201-3233266275-4011120631-1001..\Run: [GoToAssist Remote Support Expert] . (.LogMeIn, Inc. - GoToAssist.) โ€“ C:\Users\User\AppData\Local\GoToAssist Remote Support Expert\1599\g2ax_start.exe =>.LogMeIn, Inc.ยฎ
                                      O4 - HKUS\S-1-5-21-1620667201-3233266275-4011120631-1001..\Run: [Overwolf] . (.Overwolf Ltd. - Overwolf Launcher.) โ€“ F:\Overwolf\OverwolfLauncher.exe =>.Overwolf Ltdยฎ
                                      O4 - HKUS\S-1-5-21-1620667201-3233266275-4011120631-1001..\Run: [VPN Unlimited] . (.KeepSolid Inc. - VPN Unlimited Launcher.) โ€“ C:\Program Files (x86)\VPN Unlimited\vpn-unlimited-launcher.exe =>.KeepSolid Inc.ยฎ
                                      O4 - HKUS\S-1-5-21-1620667201-3233266275-4011120631-1001..\Run: [CCleaner Smart Cleaning] . (.Piriform Software Ltd - CCleaner.) โ€“ C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Software Ltdยฎ
                                      O4 - HKUS\S-1-5-21-1620667201-3233266275-4011120631-1001..\Run: [Discord] . (.Discord Inc. - Discord.) โ€“ C:\Users\User\AppData\Local\Discord\app-0.0.305\Discord.exe =>.Discord Inc.ยฎ

                                      โ€”\ Process running (55) - 10s
                                      [MD5.08F828CB2228CDF555A39ABBE32AC232] - (.NVIDIA Corporation - NVIDIA Container.) โ€“ C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Containe r.exe [782136] [PID.1740] =>.NVIDIA Corporationยฎ
                                      [MD5.08F828CB2228CDF555A39ABBE32AC232] - (.NVIDIA Corporation - NVIDIA Container.) โ€“ C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Containe r.exe [782136] [PID.2052] =>.NVIDIA Corporationยฎ
                                      [MD5.0466B91EE5767A769E9F8EDB8EF94DDB] - (.ASUSTeK Computer Inc. - .) โ€“ C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936] [PID.3416] =>.ASUSTeK Computer Inc.ยฎ
                                      [MD5.10A58DA77AE2073D1BAF4F13630EA516] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) โ€“ C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [83984] [PID.3436] =>.Adobe Systems, Incorporatedยฎ
                                      [MD5.36834987B7E4BEFD1E57562FABC983AC] - (.KeepSolid Inc. - VPN Unlimited Service.) โ€“ C:\Program Files (x86)\VPN Unlimited\vpn-unlimited-daemon.exe [57200] [PID.3504] =>.KeepSolid Inc.ยฎ
                                      [MD5.0554F3B69D39D175DD110D765C11347A] - (.LogMeIn, Inc. - LMIGuardianSvc.) โ€“ C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248] [PID.3540] =>.LogMeIn, Inc.ยฎ
                                      [MD5.37F7DD839A711B5706B1264F4D8D4BDC] - (โ€ฆ) โ€“ C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlServi ce.exe [1360016] [PID.3592] =>.ASUSTeK
                                      [MD5.69D091591FB5EE555E221552D7A7F3AA] - (.Realtek Semiconductor - Realtek HD Audio Universal Service.) โ€“ C:\WINDOWS\System32\RtkAudUService64.exe [857376] [PID.3604] =>.Realtek Semiconductor
                                      [MD5.FEB2ED40421C54040BC11380272CADDC] - (.ASUSTeK Computer Inc. - ASUS Motherboard Fan Control Service.) โ€“ C:\Program Files (x86)\ASUS\AsusFanControlService\1.02.00\AsusFanCo ntrolService.exe [1632256] [PID.3612] =>.ASUSTek Computer Inc.
                                      [MD5.E8FFA4ABF3BF3C283A88F0D0E48F572B] - (.NVIDIA Corporation - NVIDIA Container.) โ€“ C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [782136] [PID.3644] =>.NVIDIA Corporationยฎ
                                      [MD5.E8FFA4ABF3BF3C283A88F0D0E48F572B] - (.NVIDIA Corporation - NVIDIA Container.) โ€“ C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [782136] [PID.3708] =>.NVIDIA Corporationยฎ
                                      [MD5.C8A03715DBE271AA23295ECD1E240359] - (.Bitdefender - Bitdefender Agent.) โ€“ C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1293936] [PID.3720] =>.Bitdefender SRLยฎ
                                      [MD5.B0A3D79E55A64E5F4C39DD58540ED4CC] - (.Adobe Systems, Incorporated - Adobe Genuine Software Service.) โ€“ C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3117648] [PID.3732] =>.Adobe Inc.ยฎ
                                      [MD5.6469B092F0B640E2E96605A421CF61BE] - (.Adobe Systems, Incorporated - Adobe Genuine Software Integrity Service.) โ€“ C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2888272] [PID.3756] =>.Adobe Inc.ยฎ
                                      [MD5.2A456AFE195E6878EEC5E193EA383B15] - (.Hi-Rez Studios - HiPatchService.) โ€“ F:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728] [PID.3776] =>.Hi-Rez Studios
                                      [MD5.18314F3FD0E47F0969F384780F9B6F80] - (.TeamViewer GmbH - TeamViewer 13.) โ€“ C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [11644656] [PID.3928] =>.TeamViewer GmbHยฎ
                                      [MD5.CCBC802D45A5DFA02CDB24083EDAC0D8] - (.LogMeIn Inc. - Hamachi Client Tunneling Engine.) โ€“ C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3361736] [PID.4272] =>.LogMeIn, Inc.ยฎ
                                      [MD5.E8FFA4ABF3BF3C283A88F0D0E48F572B] - (.NVIDIA Corporation - NVIDIA Container.) โ€“ C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [782136] [PID.6828] =>.NVIDIA Corporationยฎ
                                      [MD5.8C9231025FAF86B78906B6C847531FFB] - (.ASUSTeK Computer Inc. - ASUS Routine Controller.) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2935424] [PID.7068] =>.ASUSTeK Computer Inc.ยฎ
                                      [MD5.A79CADC179E647C7690980F24F6DF0DA] - (.ASUSTeK Computer Inc. - ASUS WiFi GO! Server.) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiFi GO! Server.exe [967480] [PID.6552] =>.ASUSTeK Computer Inc.ยฎ
                                      [MD5.D2E6F65D801CFD062D7AF9DAB16BF984] - (.H.D.S. Hungary - Hard Disk Sentinel.) โ€“ C:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe [5360720] [PID.7200] =>.Janos Matheยฎ
                                      [MD5.0A2F4748A6E162C9129865285ABDD363] - (โ€ฆ) โ€“ C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.46.60.0_x6 4__kzf8qxf38zg5c\SkypeBackgroundHost.exe [182272] [PID.8636] =>.Microsoft Corporation
                                      [MD5.77FE6201A5C48B3516503B7BDBB521C1] - (.Node.js - NVIDIA Web Helper Service.) โ€“ C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe [29784376] [PID.7020] =>.NVIDIA Corporationยฎ
                                      [MD5.A2D8BEF0CCA959E4BEB16DE982E3771C] - (.Google LLC - Google Crash Handler.) โ€“ C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler.e xe [294184] [PID.9424] =>.Google Incยฎ
                                      [MD5.30C7CBCED8E3689E30299CABAD4B9AC7] - (.Google LLC - Google Crash Handler.) โ€“ C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler64 .exe [373032] [PID.9468] =>.Google Incยฎ
                                      [MD5.EC1562C59581C35B13DE537E27161A5D] - (.ASUSTeK Computer Inc. - USB 3.0 Boost Service.) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe [426296] [PID.10348] =>.ASUSTeK Computer Inc.ยฎ
                                      [MD5.69D091591FB5EE555E221552D7A7F3AA] - (.Realtek Semiconductor - Realtek HD Audio Universal Service.) โ€“ C:\Windows\System32\RtkAudUService64.exe [857376] [PID.7828] =>.Realtek Semiconductor
                                      [MD5.1886DA4ADB90A186E52674FC3A8AFE98] - (.ASUSTeK Computer Inc. - AlertHelper.) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe [1112704] [PID.11148] =>.ASUSTeK Computer Inc.ยฎ
                                      [MD5.491811B91833F097B90FE14F48834BEC] - (.Piriform Software Ltd - CCleaner.) โ€“ C:\Program Files\CCleaner\CCleaner64.exe [19589208] [PID.12272] =>.Piriform Software Ltdยฎ
                                      [MD5.2C8D607BF6C02FA761EEF97D5F321D70] - (.Oracle Corporation - Java Update Scheduler.) โ€“ C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288] [PID.12848] =>.Oracle America, Inc.ยฎ
                                      [MD5.98556881C1F1703FDDD05470ABA15DD0] - (.ASUSTeK Computer Inc. - WiFil GO! File Transfer.) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiFile\WiFileTransfer.exe [1391416] [PID.12416] =>.ASUSTeK Computer Inc.ยฎ
                                      [MD5.08D4DDD892BD1DAEAC1DB4EA4F3A21E4] - (.ASUSTeK Computer Inc. - ASUS DLNA Player.) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AsDLNAServerReal.exe [696632] [PID.14208] =>.ASUSTeK Computer Inc.ยฎ
                                      [MD5.5FF31491FADBE56B752EBE635FBDF296] - (.Oracle Corporation - Java Update Checker.) โ€“ C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe [928280] [PID.13184] =>.Oracle America, Inc.ยฎ
                                      [MD5.F9DFBDD2BA602AE341FE5C61FF7585B4] - (.Google Inc. - Google Chrome.) โ€“ C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1723888] [PID.8780] =>.Google LLCยฎ
                                      [MD5.F9DFBDD2BA602AE341FE5C61FF7585B4] - (.Google Inc. - Google Chrome.) โ€“ C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1723888] [PID.4484] =>.Google LLCยฎ
                                      [MD5.F9DFBDD2BA602AE341FE5C61FF7585B4] - (.Google Inc. - Google Chrome.) โ€“ C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1723888] [PID.8312] =>.Google LLCยฎ
                                      [MD5.F9DFBDD2BA602AE341FE5C61FF7585B4] - (.Google Inc. - Google Chrome.) โ€“ C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1723888] [PID.11092] =>.Google LLCยฎ
                                      [MD5.F9DFBDD2BA602AE341FE5C61FF7585B4] - (.Google Inc. - Google Chrome.) โ€“ C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1723888] [PID.12640] =>.Google LLCยฎ
                                      [MD5.F9DFBDD2BA602AE341FE5C61FF7585B4] - (.Google Inc. - Google Chrome.) โ€“ C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1723888] [PID.10932] =>.Google LLCยฎ
                                      [MD5.F9DFBDD2BA602AE341FE5C61FF7585B4] - (.Google Inc. - Google Chrome.) โ€“ C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1723888] [PID.8520] =>.Google LLCยฎ
                                      [MD5.2CF8B819CA91F5DE1D0ABE1ED02EAAFF] - (.ALCPU - CPU temperature and system information util.) โ€“ C:\Program Files\Core Temp\Core Temp.exe [999000] [PID.13540] =>.ALCPUยฎ
                                      [MD5.7C4209A6671F5DA429DB3F32EB093237] - (.Valve Corporation - Steam Client Bootstrapper.) โ€“ F:\Program Files (x86)\Steam\Steam.exe [3148576] [PID.12004] =>.Valveยฎ
                                      [MD5.B1E59D0D195ABFC1F429F67DD3123F24] - (.Valve Corporation - Steam Client WebHelper.) โ€“ F:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe [5385504] [PID.9396] =>.Valveยฎ
                                      [MD5.B1E59D0D195ABFC1F429F67DD3123F24] - (.Valve Corporation - Steam Client WebHelper.) โ€“ F:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe [5385504] [PID.9600] =>.Valveยฎ
                                      [MD5.B1E59D0D195ABFC1F429F67DD3123F24] - (.Valve Corporation - Steam Client WebHelper.) โ€“ F:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe [5385504] [PID.4224] =>.Valveยฎ
                                      [MD5.B1E59D0D195ABFC1F429F67DD3123F24] - (.Valve Corporation - Steam Client WebHelper.) โ€“ F:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe [5385504] [PID.2716] =>.Valveยฎ
                                      [MD5.B1E59D0D195ABFC1F429F67DD3123F24] - (.Valve Corporation - Steam Client WebHelper.) โ€“ F:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe [5385504] [PID.6808] =>.Valveยฎ
                                      [MD5.F9DFBDD2BA602AE341FE5C61FF7585B4] - (.Google Inc. - Google Chrome.) โ€“ C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1723888] [PID.6040] =>.Google LLCยฎ
                                      [MD5.F9DFBDD2BA602AE341FE5C61FF7585B4] - (.Google Inc. - Google Chrome.) โ€“ C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1723888] [PID.14304] =>.Google LLCยฎ
                                      [MD5.07D4E15325BF16490A6AAB7DE9849FE4] - (.REALiX - HWiNFO64.) โ€“ C:\Program Files\HWiNFO64\HWiNFO64.EXE [4320288] [PID.9332] =>.Martin Malik - REALiXยฎ
                                      [MD5.F9DFBDD2BA602AE341FE5C61FF7585B4] - (.Google Inc. - Google Chrome.) โ€“ C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1723888] [PID.8288] =>.Google LLCยฎ
                                      [MD5.F9DFBDD2BA602AE341FE5C61FF7585B4] - (.Google Inc. - Google Chrome.) โ€“ C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1723888] [PID.1528] =>.Google LLCยฎ
                                      [MD5.4967F0990578B3F64854C6E98B987ACC] - (.Nicolas Coolman - ZHPDiag.) โ€“ C:\Users\User\AppData\Roaming\ZHP\ZHPDiag3.exe [3039616] [PID.3704] =>.Nicolas Coolman
                                      [MD5.A2700A281BF7D3AC7D7CD60DF728FB84] - (.Epic Games, Inc. - BootstrapPackagedGame.) โ€“ C:\Users\User\Downloads\รšj mappa\Radiant.exe [518144] [PID.6280] =>.Epic Games, Inc.
                                      [MD5.35CC1EF9CC6F7F31157730D5033D3B3C] - (.DerelictHelmsman - Radiant.) โ€“ C:\Users\User\Downloads\รšj mappa\Radiant\Binaries\Win64\Radiant-Win64-Shipping.exe [50291712] [PID.10572]

                                      โ€”\ Google Chrome, Start,Search,Extensions (15) - 1s
                                      G2 - GCE: Preference [User][User Data\Default\Extensions] [ajopnjidmegmdimjlfnijceegpefgped] BetterTTV =>.nightdev.com
                                      G2 - GCE: Preference [User][User Data\Default\Extensions] [aohghmighlieiainnegkcijnfilokake] =>.Google Inc. {Docs}
                                      G2 - GCE: Preference [User][User Data\Default\Extensions] [apdfllckaahabafndbhieahigkjlhalf] http://drive.google.com/ =>.Google Inc. {Drive}
                                      G2 - GCE: Preference [User][User Data\Default\Extensions] [blpcfgokakmgnkcojhhkbfbldkacnbeo] http://www.youtube.com =>.Youtube {Youtube}
                                      G2 - GCE: Preference [User][User Data\Default\Extensions] [efaidnbmnnnibpcajpcglclefindmkaj] =>.Adobe Inc. {Acrobat}
                                      G2 - GCE: Preference [User][User Data\Default\Extensions] [fadndhdgpmmaapbmfcknlfgcflmmmieb] FrankerFaceZ =>.frankerfacez
                                      G2 - GCE: Preference [User][User Data\Default\Extensions] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] =>.Google Inc. {Docs hors connexion}
                                      G2 - GCE: Preference [User][User Data\Default\Extensions] [gighmmpiobklfepjocnamgkkbiglidom] Toggle Pause/Resume on all sites =>.Wladimir Palant {AdBlock}
                                      G2 - GCE: Preference [User][User Data\Default\Extensions] [nmmhkkegccagdldgiimedpiccmgmieda] =>.Google Inc. {Wallet}
                                      G2 - GCE: Preference [User][User Data\Default\Extensions] [pjkljhegncpnkpknbcohdijeoejaedia] http://mail.google.com/ =>.Google Inc. {Gmail}
                                      G2 - GCE: Preference [User][User Data\Default\Extensions] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>.Google Inc.
                                      G2 - GCE: Preference [User][User Data\Default\Local Extension Settings] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] =>.Google Inc. {Docs hors connexion}
                                      G2 - GCE: Preference [User][User Data\Default\Local Extension Settings] [gighmmpiobklfepjocnamgkkbiglidom] =>.Wladimir Palant {AdBlock}
                                      G2 - GCE: Preference [User][User Data\Default\Managed Extension Settings] [gighmmpiobklfepjocnamgkkbiglidom] =>.Wladimir Palant {AdBlock}
                                      G2 - GCE: Preference [User][User Data\Default\Sync Extension Settings] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] =>.Google Inc. {Chrome Media Router}

                                      โ€”\ Internet Explorer Extensions, Start, Search (15) - 0s
                                      R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
                                      R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
                                      R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
                                      R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
                                      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
                                      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
                                      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
                                      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
                                      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
                                      R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
                                      R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
                                      R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
                                      R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
                                      R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
                                      R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internetbรถngรฉszล‘.) (11.00.17134.829 (WinBuild.160101.0800)) โ€“ C:\Windows\System32\ieframe.dll =>.Microsoft Corporation

                                      โ€”\ INTERNET EXPLORER, trusted site and sensitive site (1) - 0s
                                      ~ Microsoft Internet Explorer Restricted Site(s) Domains: 0(Good) / 0(Bad)

                                      โ€”\ Internet Explorer, Proxy Management (3) - 0s
                                      R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyEnable = 0 =>.Default.Value
                                      R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Int ernet Settings,MigrateProxy = 1 =>.Default.Value
                                      R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Para meters\Internet\ManualProxies =>.Microsoft

                                      โ€”\ Line Analysis, IniFiles, Auto loading programs (3) - 0s
                                      F2 - REG:system.ini: UserInit=
                                      F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
                                      F2 - REG:system.ini: VMApplet=

                                      โ€”\ Hosts file redirection (1) - 0s
                                      ~ Le fichier hรดte est sain (The hosts file is clean) (28)

                                      โ€”\ Browser Helper Object (BHO) (2) - 0s
                                      O2 - BHO: Skype for Business Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Skype for Business.) โ€“ C:\Program Files\Microsoft Office\Office16\OCHelper.dll =>.Microsoft Corporationยฎ
                                      O2 - BHO: Microsoft OneDrive for Business Browser Helper [64Bits] - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} . (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) โ€“ C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL =>.Microsoft Corporationยฎ

                                      โ€”\ Global shortcuts Startup (161) - 14s
                                      O4 - GS\Desktop [Alapรฉrtelmezett fiรณk]: Discord.lnk . (.GitHub - Update.) C:\Users\User\AppData\Local\Discord\Update.exe --processStart Discord.exe =>.Discord Inc.ยฎ
                                      O4 - GS\Desktop [Alapรฉrtelmezett fiรณk]: Hard Disk Sentinel.lnk . (.H.D.S. Hungary - Hard Disk Sentinel.) C:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe =>.Janos Matheยฎ
                                      O4 - GS\Desktop [Alapรฉrtelmezett fiรณk]: HDSentinel parancsikonja.lnk . (.H.D.S. Hungary - Hard Disk Sentinel Engine.) F:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe =>.H.D.S. Hungary
                                      O4 - GS\Desktop [Alapรฉrtelmezett fiรณk]: Hearthstone Deck Tracker.lnk . (.HearthSim - Hearthstone Deck Tracker.) C:\Users\User\AppData\Local\HearthstoneDeckTracker \HearthstoneDeckTracker.exe =>.HearthSim, LLCยฎ
                                      O4 - GS\Desktop [Alapรฉrtelmezett fiรณk]: osu!.lnk . (.ppy - osu!.) C:\Users\User\AppData\Local\osu!\osu!.exe =>.Dean Herbertยฎ
                                      O4 - GS\Desktop [Alapรฉrtelmezett fiรณk]: Steam.lnk . (.Valve Corporation - Steam Client Bootstrapper.) F:\Program Files (x86)\Steam\Steam.exe =>.Valveยฎ
                                      O4 - GS\Desktop [Alapรฉrtelmezett fiรณk]: Uplay.lnk . (.Ubisoft - Uplay launcher.) F:\Ubisoft Game Launcher\Uplay.exe =>.Ubisoft Entertainment Sweden ABยฎ
                                      O4 - GS\Desktop [Alapรฉrtelmezett fiรณk]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\User\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
                                      O4 - GS\Desktop [Alapรฉrtelmezett fiรณk]: ยตTorrent.lnk . (.BitTorrent Inc. - ยตTorrent.) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.ex e =>.BitTorrent Incยฎ
                                      O4 - GS\Quicklaunch [Alapรฉrtelmezett fiรณk]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\sendTo [Alapรฉrtelmezett fiรณk]: Bluetooth-alapรบ fรกjlรกtvitel.LNK . (.Microsoft Corporation - Fรกjlok รกtvitele eszkรถzรถk รฉs sz.) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
                                      O4 - GS\sendTo [Alapรฉrtelmezett fiรณk]: Fax cรญmzettje.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
                                      O4 - GS\sendTo [Alapรฉrtelmezett fiรณk]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
                                      O4 - GS\sendTo [Alapรฉrtelmezett fiรณk]: TeamViewer.lnk . (.TeamViewer GmbH - TeamViewer 13.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe --sendto =>.TeamViewer GmbHยฎ
                                      O4 - GS\TaskBar [Alapรฉrtelmezett fiรณk]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\Programs [Alapรฉrtelmezett fiรณk]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\Programs [Alapรฉrtelmezett fiรณk]: GoToAssist Expert.lnk . (.LogMeIn, Inc. - GoToAssist.) C:\Users\User\AppData\Local\GoToAssist Remote Support Expert\1599\g2ax_start.exe โ€˜/Action Defaultโ€™ โ€˜/Trigger Shortcutโ€™ =>.LogMeIn, Inc.ยฎ
                                      O4 - GS\Programs [Alapรฉrtelmezett fiรณk]: OneDrive.lnk . (โ€ฆ) C:\Users\User\AppData\Local\Microsoft\OneDrive\One Drive.exe
                                      O4 - GS\Programs [Alapรฉrtelmezett fiรณk]: osu!.lnk . (.ppy - osu!.) C:\Users\User\AppData\Local\osu!\osu!.exe =>.Dean Herbertยฎ
                                      O4 - GS\Desktop [Peti]: Discord.lnk . (.GitHub - Update.) C:\Users\User\AppData\Local\Discord\Update.exe --processStart Discord.exe =>.Discord Inc.ยฎ
                                      O4 - GS\Desktop [Peti]: Hard Disk Sentinel.lnk . (.H.D.S. Hungary - Hard Disk Sentinel.) C:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe =>.Janos Matheยฎ
                                      O4 - GS\Desktop [Peti]: HDSentinel parancsikonja.lnk . (.H.D.S. Hungary - Hard Disk Sentinel Engine.) F:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe =>.H.D.S. Hungary
                                      O4 - GS\Desktop [Peti]: Hearthstone Deck Tracker.lnk . (.HearthSim - Hearthstone Deck Tracker.) C:\Users\User\AppData\Local\HearthstoneDeckTracker \HearthstoneDeckTracker.exe =>.HearthSim, LLCยฎ
                                      O4 - GS\Desktop [Peti]: osu!.lnk . (.ppy - osu!.) C:\Users\User\AppData\Local\osu!\osu!.exe =>.Dean Herbertยฎ
                                      O4 - GS\Desktop [Peti]: Steam.lnk . (.Valve Corporation - Steam Client Bootstrapper.) F:\Program Files (x86)\Steam\Steam.exe =>.Valveยฎ
                                      O4 - GS\Desktop [Peti]: Uplay.lnk . (.Ubisoft - Uplay launcher.) F:\Ubisoft Game Launcher\Uplay.exe =>.Ubisoft Entertainment Sweden ABยฎ
                                      O4 - GS\Desktop [Peti]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\User\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
                                      O4 - GS\Desktop [Peti]: ยตTorrent.lnk . (.BitTorrent Inc. - ยตTorrent.) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.ex e =>.BitTorrent Incยฎ
                                      O4 - GS\Quicklaunch [Peti]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\sendTo [Peti]: Bluetooth-alapรบ fรกjlรกtvitel.LNK . (.Microsoft Corporation - Fรกjlok รกtvitele eszkรถzรถk รฉs sz.) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
                                      O4 - GS\sendTo [Peti]: Fax cรญmzettje.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
                                      O4 - GS\sendTo [Peti]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
                                      O4 - GS\sendTo [Peti]: TeamViewer.lnk . (.TeamViewer GmbH - TeamViewer 13.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe --sendto =>.TeamViewer GmbHยฎ
                                      O4 - GS\TaskBar [Peti]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\Programs [Peti]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\Programs [Peti]: GoToAssist Expert.lnk . (.LogMeIn, Inc. - GoToAssist.) C:\Users\User\AppData\Local\GoToAssist Remote Support Expert\1599\g2ax_start.exe โ€˜/Action Defaultโ€™ โ€˜/Trigger Shortcutโ€™ =>.LogMeIn, Inc.ยฎ
                                      O4 - GS\Programs [Peti]: OneDrive.lnk . (โ€ฆ) C:\Users\User\AppData\Local\Microsoft\OneDrive\One Drive.exe
                                      O4 - GS\Programs [Peti]: osu!.lnk . (.ppy - osu!.) C:\Users\User\AppData\Local\osu!\osu!.exe =>.Dean Herbertยฎ
                                      O4 - GS\Desktop [Rendszergazda]: Discord.lnk . (.GitHub - Update.) C:\Users\User\AppData\Local\Discord\Update.exe --processStart Discord.exe =>.Discord Inc.ยฎ
                                      O4 - GS\Desktop [Rendszergazda]: Hard Disk Sentinel.lnk . (.H.D.S. Hungary - Hard Disk Sentinel.) C:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe =>.Janos Matheยฎ
                                      O4 - GS\Desktop [Rendszergazda]: HDSentinel parancsikonja.lnk . (.H.D.S. Hungary - Hard Disk Sentinel Engine.) F:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe =>.H.D.S. Hungary
                                      O4 - GS\Desktop [Rendszergazda]: Hearthstone Deck Tracker.lnk . (.HearthSim - Hearthstone Deck Tracker.) C:\Users\User\AppData\Local\HearthstoneDeckTracker \HearthstoneDeckTracker.exe =>.HearthSim, LLCยฎ
                                      O4 - GS\Desktop [Rendszergazda]: osu!.lnk . (.ppy - osu!.) C:\Users\User\AppData\Local\osu!\osu!.exe =>.Dean Herbertยฎ
                                      O4 - GS\Desktop [Rendszergazda]: Steam.lnk . (.Valve Corporation - Steam Client Bootstrapper.) F:\Program Files (x86)\Steam\Steam.exe =>.Valveยฎ
                                      O4 - GS\Desktop [Rendszergazda]: Uplay.lnk . (.Ubisoft - Uplay launcher.) F:\Ubisoft Game Launcher\Uplay.exe =>.Ubisoft Entertainment Sweden ABยฎ
                                      O4 - GS\Desktop [Rendszergazda]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\User\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
                                      O4 - GS\Desktop [Rendszergazda]: ยตTorrent.lnk . (.BitTorrent Inc. - ยตTorrent.) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.ex e =>.BitTorrent Incยฎ
                                      O4 - GS\Quicklaunch [Rendszergazda]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\sendTo [Rendszergazda]: Bluetooth-alapรบ fรกjlรกtvitel.LNK . (.Microsoft Corporation - Fรกjlok รกtvitele eszkรถzรถk รฉs sz.) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
                                      O4 - GS\sendTo [Rendszergazda]: Fax cรญmzettje.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
                                      O4 - GS\sendTo [Rendszergazda]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
                                      O4 - GS\sendTo [Rendszergazda]: TeamViewer.lnk . (.TeamViewer GmbH - TeamViewer 13.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe --sendto =>.TeamViewer GmbHยฎ
                                      O4 - GS\TaskBar [Rendszergazda]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\Programs [Rendszergazda]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\Programs [Rendszergazda]: GoToAssist Expert.lnk . (.LogMeIn, Inc. - GoToAssist.) C:\Users\User\AppData\Local\GoToAssist Remote Support Expert\1599\g2ax_start.exe โ€˜/Action Defaultโ€™ โ€˜/Trigger Shortcutโ€™ =>.LogMeIn, Inc.ยฎ
                                      O4 - GS\Programs [Rendszergazda]: OneDrive.lnk . (โ€ฆ) C:\Users\User\AppData\Local\Microsoft\OneDrive\One Drive.exe
                                      O4 - GS\Programs [Rendszergazda]: osu!.lnk . (.ppy - osu!.) C:\Users\User\AppData\Local\osu!\osu!.exe =>.Dean Herbertยฎ
                                      O4 - GS\Desktop [User]: Discord.lnk . (.GitHub - Update.) C:\Users\User\AppData\Local\Discord\Update.exe --processStart Discord.exe =>.Discord Inc.ยฎ
                                      O4 - GS\Desktop [User]: Hard Disk Sentinel.lnk . (.H.D.S. Hungary - Hard Disk Sentinel.) C:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe =>.Janos Matheยฎ
                                      O4 - GS\Desktop [User]: HDSentinel parancsikonja.lnk . (.H.D.S. Hungary - Hard Disk Sentinel Engine.) F:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe =>.H.D.S. Hungary
                                      O4 - GS\Desktop [User]: Hearthstone Deck Tracker.lnk . (.HearthSim - Hearthstone Deck Tracker.) C:\Users\User\AppData\Local\HearthstoneDeckTracker \HearthstoneDeckTracker.exe =>.HearthSim, LLCยฎ
                                      O4 - GS\Desktop [User]: osu!.lnk . (.ppy - osu!.) C:\Users\User\AppData\Local\osu!\osu!.exe =>.Dean Herbertยฎ
                                      O4 - GS\Desktop [User]: Steam.lnk . (.Valve Corporation - Steam Client Bootstrapper.) F:\Program Files (x86)\Steam\Steam.exe =>.Valveยฎ
                                      O4 - GS\Desktop [User]: Uplay.lnk . (.Ubisoft - Uplay launcher.) F:\Ubisoft Game Launcher\Uplay.exe =>.Ubisoft Entertainment Sweden ABยฎ
                                      O4 - GS\Desktop [User]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\User\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
                                      O4 - GS\Desktop [User]: ยตTorrent.lnk . (.BitTorrent Inc. - ยตTorrent.) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.ex e =>.BitTorrent Incยฎ
                                      O4 - GS\Quicklaunch [User]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\sendTo [User]: Bluetooth-alapรบ fรกjlรกtvitel.LNK . (.Microsoft Corporation - Fรกjlok รกtvitele eszkรถzรถk รฉs sz.) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
                                      O4 - GS\sendTo [User]: Fax cรญmzettje.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
                                      O4 - GS\sendTo [User]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
                                      O4 - GS\sendTo [User]: TeamViewer.lnk . (.TeamViewer GmbH - TeamViewer 13.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe --sendto =>.TeamViewer GmbHยฎ
                                      O4 - GS\TaskBar [User]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\Programs [User]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\Programs [User]: GoToAssist Expert.lnk . (.LogMeIn, Inc. - GoToAssist.) C:\Users\User\AppData\Local\GoToAssist Remote Support Expert\1599\g2ax_start.exe โ€˜/Action Defaultโ€™ โ€˜/Trigger Shortcutโ€™ =>.LogMeIn, Inc.ยฎ
                                      O4 - GS\Programs [User]: OneDrive.lnk . (โ€ฆ) C:\Users\User\AppData\Local\Microsoft\OneDrive\One Drive.exe
                                      O4 - GS\Programs [User]: osu!.lnk . (.ppy - osu!.) C:\Users\User\AppData\Local\osu!\osu!.exe =>.Dean Herbertยฎ
                                      O4 - GS\Desktop [Vendรฉg]: Discord.lnk . (.GitHub - Update.) C:\Users\User\AppData\Local\Discord\Update.exe --processStart Discord.exe =>.Discord Inc.ยฎ
                                      O4 - GS\Desktop [Vendรฉg]: Hard Disk Sentinel.lnk . (.H.D.S. Hungary - Hard Disk Sentinel.) C:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe =>.Janos Matheยฎ
                                      O4 - GS\Desktop [Vendรฉg]: HDSentinel parancsikonja.lnk . (.H.D.S. Hungary - Hard Disk Sentinel Engine.) F:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe =>.H.D.S. Hungary
                                      O4 - GS\Desktop [Vendรฉg]: Hearthstone Deck Tracker.lnk . (.HearthSim - Hearthstone Deck Tracker.) C:\Users\User\AppData\Local\HearthstoneDeckTracker \HearthstoneDeckTracker.exe =>.HearthSim, LLCยฎ
                                      O4 - GS\Desktop [Vendรฉg]: osu!.lnk . (.ppy - osu!.) C:\Users\User\AppData\Local\osu!\osu!.exe =>.Dean Herbertยฎ
                                      O4 - GS\Desktop [Vendรฉg]: Steam.lnk . (.Valve Corporation - Steam Client Bootstrapper.) F:\Program Files (x86)\Steam\Steam.exe =>.Valveยฎ
                                      O4 - GS\Desktop [Vendรฉg]: Uplay.lnk . (.Ubisoft - Uplay launcher.) F:\Ubisoft Game Launcher\Uplay.exe =>.Ubisoft Entertainment Sweden ABยฎ
                                      O4 - GS\Desktop [Vendรฉg]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\User\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
                                      O4 - GS\Desktop [Vendรฉg]: ยตTorrent.lnk . (.BitTorrent Inc. - ยตTorrent.) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.ex e =>.BitTorrent Incยฎ
                                      O4 - GS\Quicklaunch [Vendรฉg]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\sendTo [Vendรฉg]: Bluetooth-alapรบ fรกjlรกtvitel.LNK . (.Microsoft Corporation - Fรกjlok รกtvitele eszkรถzรถk รฉs sz.) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
                                      O4 - GS\sendTo [Vendรฉg]: Fax cรญmzettje.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
                                      O4 - GS\sendTo [Vendรฉg]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
                                      O4 - GS\sendTo [Vendรฉg]: TeamViewer.lnk . (.TeamViewer GmbH - TeamViewer 13.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe --sendto =>.TeamViewer GmbHยฎ
                                      O4 - GS\TaskBar [Vendรฉg]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\Programs [Vendรฉg]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\Programs [Vendรฉg]: GoToAssist Expert.lnk . (.LogMeIn, Inc. - GoToAssist.) C:\Users\User\AppData\Local\GoToAssist Remote Support Expert\1599\g2ax_start.exe โ€˜/Action Defaultโ€™ โ€˜/Trigger Shortcutโ€™ =>.LogMeIn, Inc.ยฎ
                                      O4 - GS\Programs [Vendรฉg]: OneDrive.lnk . (โ€ฆ) C:\Users\User\AppData\Local\Microsoft\OneDrive\One Drive.exe
                                      O4 - GS\Programs [Vendรฉg]: osu!.lnk . (.ppy - osu!.) C:\Users\User\AppData\Local\osu!\osu!.exe =>.Dean Herbertยฎ
                                      O4 - GS\Desktop [WDAGUtilityAccount]: Discord.lnk . (.GitHub - Update.) C:\Users\User\AppData\Local\Discord\Update.exe --processStart Discord.exe =>.Discord Inc.ยฎ
                                      O4 - GS\Desktop [WDAGUtilityAccount]: Hard Disk Sentinel.lnk . (.H.D.S. Hungary - Hard Disk Sentinel.) C:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe =>.Janos Matheยฎ
                                      O4 - GS\Desktop [WDAGUtilityAccount]: HDSentinel parancsikonja.lnk . (.H.D.S. Hungary - Hard Disk Sentinel Engine.) F:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe =>.H.D.S. Hungary
                                      O4 - GS\Desktop [WDAGUtilityAccount]: Hearthstone Deck Tracker.lnk . (.HearthSim - Hearthstone Deck Tracker.) C:\Users\User\AppData\Local\HearthstoneDeckTracker \HearthstoneDeckTracker.exe =>.HearthSim, LLCยฎ
                                      O4 - GS\Desktop [WDAGUtilityAccount]: osu!.lnk . (.ppy - osu!.) C:\Users\User\AppData\Local\osu!\osu!.exe =>.Dean Herbertยฎ
                                      O4 - GS\Desktop [WDAGUtilityAccount]: Steam.lnk . (.Valve Corporation - Steam Client Bootstrapper.) F:\Program Files (x86)\Steam\Steam.exe =>.Valveยฎ
                                      O4 - GS\Desktop [WDAGUtilityAccount]: Uplay.lnk . (.Ubisoft - Uplay launcher.) F:\Ubisoft Game Launcher\Uplay.exe =>.Ubisoft Entertainment Sweden ABยฎ
                                      O4 - GS\Desktop [WDAGUtilityAccount]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\User\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
                                      O4 - GS\Desktop [WDAGUtilityAccount]: ยตTorrent.lnk . (.BitTorrent Inc. - ยตTorrent.) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.ex e =>.BitTorrent Incยฎ
                                      O4 - GS\Quicklaunch [WDAGUtilityAccount]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\sendTo [WDAGUtilityAccount]: Bluetooth-alapรบ fรกjlรกtvitel.LNK . (.Microsoft Corporation - Fรกjlok รกtvitele eszkรถzรถk รฉs sz.) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
                                      O4 - GS\sendTo [WDAGUtilityAccount]: Fax cรญmzettje.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
                                      O4 - GS\sendTo [WDAGUtilityAccount]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
                                      O4 - GS\sendTo [WDAGUtilityAccount]: TeamViewer.lnk . (.TeamViewer GmbH - TeamViewer 13.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe --sendto =>.TeamViewer GmbHยฎ
                                      O4 - GS\TaskBar [WDAGUtilityAccount]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\Programs [WDAGUtilityAccount]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\Programs [WDAGUtilityAccount]: GoToAssist Expert.lnk . (.LogMeIn, Inc. - GoToAssist.) C:\Users\User\AppData\Local\GoToAssist Remote Support Expert\1599\g2ax_start.exe โ€˜/Action Defaultโ€™ โ€˜/Trigger Shortcutโ€™ =>.LogMeIn, Inc.ยฎ
                                      O4 - GS\Programs [WDAGUtilityAccount]: OneDrive.lnk . (โ€ฆ) C:\Users\User\AppData\Local\Microsoft\OneDrive\One Drive.exe
                                      O4 - GS\Programs [WDAGUtilityAccount]: osu!.lnk . (.ppy - osu!.) C:\Users\User\AppData\Local\osu!\osu!.exe =>.Dean Herbertยฎ
                                      O4 - GS\CommonDesktop [Public]: Acrobat Reader DC.lnk . (.Adobe Systems Incorporated - Adobe Acrobat Reader DC.) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe =>.Adobe Systems, Incorporatedยฎ
                                      O4 - GS\CommonDesktop [Public]: AMD Ryzen Master.lnk . (.Advanced Micro Devices, Inc. - .) C:\Program Files (x86)\AMD\RyzenMaster\bin\AMD Ryzen Master.exe =>.Advanced Micro Devices, Inc.
                                      O4 - GS\CommonDesktop [Public]: Battle.net.lnk . (.Blizzard Entertainment - Blizzard Battle.net App Launcher.) F:\Program Files (x86)\Battle.net\Battle.net Launcher.exe =>.Blizzard Entertainment, Inc.ยฎ
                                      O4 - GS\CommonDesktop [Public]: BYOND.lnk . (โ€ฆ) C:\Program Files (x86)\BYOND\bin\byond.exe
                                      O4 - GS\CommonDesktop [Public]: calibre - E-book management.lnk . (โ€ฆ) C:\Program Files (x86)\Calibre2\calibre.exe
                                      O4 - GS\CommonDesktop [Public]: CCleaner.lnk . (.Piriform Software Ltd - CCleaner.) C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Software Ltdยฎ
                                      O4 - GS\CommonDesktop [Public]: CPUID CPU-Z.lnk . (.CPUID - CPU-Z Application.) C:\Program Files\CPUID\CPU-Z\cpuz.exe =>.CPUIDยฎ
                                      O4 - GS\CommonDesktop [Public]: DAEMON Tools Lite.lnk . (โ€ฆ) C:\Program Files\DAEMON Tools Lite\DTLauncher.exe
                                      O4 - GS\CommonDesktop [Public]: GOG Galaxy.lnk . (.GOG.com - GOG Galaxy.) C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe =>.GOG Sp. z o.o.ยฎ
                                      O4 - GS\CommonDesktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\CommonDesktop [Public]: Hearthstone.lnk . (.Blizzard Entertainment - Hearthstone Beta Launcher.) F:\Program Files (x86)\Hearthstone\Hearthstone Beta Launcher.exe =>.Blizzard Entertainment, Inc.ยฎ
                                      O4 - GS\CommonDesktop [Public]: MTG Arena.lnk . (.Wizards of the Coast - MtgaLauncher.) F:\Program Files (x86)\MTGA\MtgaLauncher.exe =>.Wizards of the Coast, LLCยฎ
                                      O4 - GS\CommonDesktop [Public]: NetBeans IDE 8.2.lnk . (โ€ฆ) C:\Program Files (x86)\NetBeans 8.2\bin\netbeans64.exe
                                      O4 - GS\CommonDesktop [Public]: Origin.lnk . (โ€ฆ) C:\Program Files (x86)\Origin\Origin.exe
                                      O4 - GS\CommonDesktop [Public]: TeamViewer 13.lnk . (.TeamViewer GmbH - TeamViewer 13.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe =>.TeamViewer GmbHยฎ
                                      O4 - GS\CommonDesktop [Public]: Valley Benchmark 1.0.lnk . (โ€ฆ) C:\Program Files (x86)\Unigine\Valley Benchmark 1.0\valley.bat
                                      O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player.) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe =>.VideoLANยฎ
                                      O4 - GS\CommonDesktop [Public]: VPN Unlimited.lnk . (.KeepSolid Inc. - VPN Unlimited.) C:\Program Files (x86)\VPN Unlimited\vpn-unlimited.exe =>.KeepSolid Inc.ยฎ
                                      O4 - GS\Programs [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\Programs [Public]: GoToAssist Expert.lnk . (.LogMeIn, Inc. - GoToAssist.) C:\Users\User\AppData\Local\GoToAssist Remote Support Expert\1599\g2ax_start.exe โ€˜/Action Defaultโ€™ โ€˜/Trigger Shortcutโ€™ =>.LogMeIn, Inc.ยฎ
                                      O4 - GS\Programs [Public]: OneDrive.lnk . (โ€ฆ) C:\Users\User\AppData\Local\Microsoft\OneDrive\One Drive.exe
                                      O4 - GS\Programs [Public]: osu!.lnk . (.ppy - osu!.) C:\Users\User\AppData\Local\osu!\osu!.exe =>.Dean Herbertยฎ
                                      O4 - GS\Accessories [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\internet explorer\iexplore.exe =>.Microsoft Corporationยฎ
                                      O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Jegyzettรถmb.) C:\WINDOWS\system32\notepad.exe =>.Microsoft Corporation
                                      O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation
                                      O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\WINDOWS\system32\mspaint.exe =>.Microsoft Corporation
                                      O4 - GS\Accessories [Public]: Quick Assist.lnk . (.Microsoft Corporation - Quick Assist.) C:\WINDOWS\system32\quickassist.exe =>.Microsoft Corporation
                                      O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Tรกvoli asztali kapcsolat.) C:\WINDOWS\system32\mstsc.exe =>.Microsoft Corporation
                                      O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Kรฉpmetszล‘.) C:\WINDOWS\system32\SnippingTool.exe =>.Microsoft Corporation
                                      O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - Problรฉmarรถgzรญtล‘.) C:\WINDOWS\system32\psr.exe =>.Microsoft Corporation
                                      O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe =>.Microsoft Corporation
                                      O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
                                      O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Windows Wordpad alkalmazรกs.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
                                      O4 - GS\Accessories [Public]: XPS Viewer.lnk . (.Microsoft Corporation - XPS-megjelenรญtล‘.) C:\WINDOWS\system32\xpsrchvw.exe =>.Microsoft Corporation
                                      O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Karaktertรกbla.) C:\WINDOWS\system32\charmap.exe =>.Microsoft Corporation
                                      O4 - GS\ProgramsCommon [Public]: Access 2016.lnk . (โ€ฆ) C:\WINDOWS\Installer{90160000-0011-0000-0000-0000000FF1CE}\accicons.exe =>.Microsoft Corporationยฎ
                                      O4 - GS\ProgramsCommon [Public]: Acrobat Reader DC.lnk . (.Flexera Software LLC - InstallShield.) C:\WINDOWS\Installer{AC76BA86-7AD7-1038-7B44-AC0F074E4100}\SC_Reader.ico =>.Flexera Software LLC
                                      O4 - GS\ProgramsCommon [Public]: Adobe Photoshop CC 2018.lnk . (โ€ฆ) C:\Program Files\Adobe\Adobe Photoshop CC 2018\Photoshop.exe
                                      O4 - GS\ProgramsCommon [Public]: Epic Games Launcher.lnk . (โ€ฆ) F:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLaun cher.exe
                                      O4 - GS\ProgramsCommon [Public]: Excel 2016.lnk . (โ€ฆ) C:\WINDOWS\Installer{90160000-0011-0000-0000-0000000FF1CE}\xlicons.exe =>.Microsoft Corporationยฎ
                                      O4 - GS\ProgramsCommon [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O4 - GS\ProgramsCommon [Public]: Immersive Control Panel.lnk . (.Microsoft Corporation - Windows Control Panel.) C:\WINDOWS\System32\Control.exe =>.Microsoft Corporation
                                      O4 - GS\ProgramsCommon [Public]: Microsoft Mouse and Keyboard Center.lnk . (.Microsoft - Customize your Microsoft Mouse.) C:\Program Files (x86)\Microsoft Mouse and Keyboard Center\MouseKeyboardCenter.exe =>.Microsoft
                                      O4 - GS\ProgramsCommon [Public]: PowerPoint 2016.lnk . (โ€ฆ) C:\WINDOWS\Installer{90160000-0011-0000-0000-0000000FF1CE}\pptico.exe =>.Microsoft Corporationยฎ
                                      O4 - GS\ProgramsCommon [Public]: TeamViewer 13.lnk . (.TeamViewer GmbH - TeamViewer 13.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe =>.TeamViewer GmbHยฎ
                                      O4 - GS\ProgramsCommon [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
                                      O4 - GS\ProgramsCommon [Public]: Word 2016.lnk . (โ€ฆ) C:\WINDOWS\Installer{90160000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporationยฎ

                                      โ€”\ Lop.com/Domain Hijackers (4) - 0s
                                      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.46.246.53 213.46.246.54
                                      O17 - HKLM\System\CCS\Services\Tcpip..{00bb3d5d-f1da-476b-8570-facd849b2390}: DhcpNameServer = 10.204.0.1 =>.Private IP (10.0.0.0 - 10.255.255.255) =>.Private IP
                                      O17 - HKLM\System\CCS\Services\Tcpip..{7fecf443-9dfb-4504-8f47-48c2f6b47226}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
                                      O17 - HKLM\System\CCS\Services\Tcpip..{f063f868-fcfc-44c6-a43b-fc38f86e1b9a}: DhcpNameServer = 213.46.246.53 213.46.246.54

                                      โ€”\ Extra protocols (23) - 1s
                                      O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) โ€“ C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
                                      O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) โ€“ C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
                                      O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - ActiveX-vezรฉrlล‘ streaming videรณhoz.) โ€“ C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation
                                      O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) โ€“ C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
                                      O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) โ€“ C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
                                      O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) โ€“ C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
                                      O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) โ€“ C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
                                      O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoftยฎ InfoTech Storage System Library.) โ€“ C:\Windows\System32\itss.dll =>.Microsoft Corporation
                                      O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) โ€“ C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
                                      O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) โ€“ C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
                                      O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) โ€“ C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
                                      O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) โ€“ C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation
                                      O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) โ€“ C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
                                      O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoftยฎ InfoTech Storage System Library.) โ€“ C:\Windows\System32\itss.dll =>.Microsoft Corporation
                                      O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) โ€“ C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
                                      O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) โ€“ C:\Windows\System32\tbauth.dll =>.Microsoft Corporation
                                      O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - ActiveX-vezรฉrlล‘ streaming videรณhoz.) โ€“ C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation
                                      O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) โ€“ C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
                                      O18 - Handler: windows.tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) โ€“ C:\Windows\System32\tbauth.dll =>.Microsoft Corporation
                                      O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) โ€“ C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
                                      O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) โ€“ C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
                                      O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) โ€“ C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
                                      O18 - Filter: text/xml [64Bits] - {807583E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) โ€“ C:\Program Files\Common Files\Microsoft Shared\OFFICE16\MSOXMLMF.DLL =>.Microsoft Corporationยฎ

                                      โ€”\ AppInit_DLLs Registry value Autorun (1) - 0s
                                      O20 - Winlogon : UserInit . (.Microsoft Corporation - Userinit bejelentkeztetล‘ alkalmazรกs.) - C:\Windows\system32\userinit.exe =>.Microsoft Corporation

                                      โ€”\ List of key exploring StartupApproved (28) - 0s
                                      [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:GalaxyClient =>.GOG.com
                                      [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:uTorrent
                                      [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]AEMON Tools Lite Automount =>.Disc Soft Ltd
                                      [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]iscord =>.Discord Inc.
                                      [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:GoToAssist Remote Support Expert
                                      [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:OneDriveSetup =>.Microsoft Corporation
                                      [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:Overwolf
                                      [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:VPN Unlimited
                                      [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:CCleaner Smart Cleaning =>.Piriform Ltd
                                      [HKEY_USERS\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:GalaxyClient =>.GOG.com
                                      [HKEY_USERS\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:uTorrent
                                      [HKEY_USERS\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]AEMON Tools Lite Automount =>.Disc Soft Ltd
                                      [HKEY_USERS\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]iscord =>.Discord Inc.
                                      [HKEY_USERS\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:GoToAssist Remote Support Expert
                                      [HKEY_USERS\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:OneDriveSetup =>.Microsoft Corporation
                                      [HKEY_USERS\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:Overwolf
                                      [HKEY_USERS\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:VPN Unlimited
                                      [HKEY_USERS\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:CCleaner Smart Cleaning =>.Piriform Ltd
                                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:SecurityHealth =>.Microsoft Corporation
                                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:AvastUI.exe =>.Avast Software s.r.o
                                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:RtHDVBg_DTS
                                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:RTHDVCPL =>.Realtek Semiconductor Corp.
                                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:AdobeAAMUpdater-1.0 =>.Adobe Inc.
                                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run]:AdobeGCInvoker-1.0
                                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run32]:LogMeIn Hamachi Ui =>.LogMeIn Entreprise
                                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run32]:SunJavaUpdateSched =>.Oracle
                                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run32]:ASUS WiFi GO! FileTransfer Execute
                                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\StartupApproved\Run32]:AvastUI.exe =>.Avast Software s.r.o

                                      โ€”\ ASIC (ActiveSetup Installed Components) (5) - 1s
                                      O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) โ€“ C:\Windows\System32\wmpdxm.dll =>.Microsoft Corporation
                                      O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Microsoft Windows Media Player telepรญtล‘ seg.) โ€“ C:\Windows\System32\unregmp2.exe =>.Microsoft Corporation
                                      O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - IE felhasznรกlรณkรฉnti inicializรกciรณs eszkรถz.) โ€“ C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
                                      O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) โ€“ C:\Windows\System32\mscories.dll =>.Microsoft Corporationยฎ
                                      O40 - ASIC: Google Chrome [64Bits] - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome Installer.) โ€“ C:\Program Files (x86)\Google\Chrome\Application\74.0.3729.169\Inst aller\chrmstp.exe =>.Google LLCยฎ

                                      โ€”\ Software installed (277) - 31s
                                      =>.Microsoft
                                      O42 - Logiciel: ยตTorrent - (.BitTorrent Inc..) [HKCU][64Bits] โ€“ uTorrent =>.BitTorrent Incยฎ
                                      O42 - Logiciel: 4K Textures DLC - (.GOG.com.) [HKLM][64Bits] โ€“ 1286889002_is1 =>.GOG Sp. z o.o.ยฎ
                                      O42 - Logiciel: 7.b - A jรกtรฉk DEMร“ - (..) [HKCU][64Bits] โ€“ 7.b - A jรกtรฉk DEMร“
                                      O42 - Logiciel: 7-Zip 18.00 beta (x64) - (.Igor Pavlov.) [HKLM][64Bits] โ€“ 7-Zip =>.Igor Pavlov
                                      O42 - Logiciel: 7-Zip 18.01 (x64 edition) - (.Igor Pavlov.) [HKLM][64Bits] โ€“ {23170F69-40C1-2702-1801-000001000000} =>.Igor Pavlov
                                      O42 - Logiciel: Adobe Acrobat Reader DC - Hungarian - (.Adobe Systems Incorporated.) [HKLM][64Bits] โ€“ {AC76BA86-7AD7-1038-7B44-AC0F074E4100} =>.Adobe Systems Incorporated
                                      O42 - Logiciel: Adobe Photoshop CC 2018 - (.Adobe Systems Incorporated.) [HKLM][64Bits] โ€“ PHSP_19_1_5 =>.Adobe Systems Incorporatedยฎ
                                      O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] โ€“ {AC76BA86-0804-1033-1959-001824311644} =>.Adobe Systems Incorporated (Hidden)
                                      O42 - Logiciel: AI Suite II - (.ASUSTeK Computer Inc..) [HKLM][64Bits] โ€“ {34D3688E-A737-44C5-9E2A-FF73618728E1} =>.ASUSTeK Computer Inc.ยฎ
                                      O42 - Logiciel: AMD Ryzen Master - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] โ€“ {5A1CE077-7111-4C7D-A5C5-E210D4B68AD8} =>.Advanced Micro Devices, Inc. (Hidden)
                                      O42 - Logiciel: AMD Ryzen Master - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] โ€“ AMD Ryzen Master =>.Advanced Micro Devices Inc.ยฎ
                                      O42 - Logiciel: AMD Software - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] โ€“ AMD Catalyst Install Manager =>.Advanced Micro Devices, Inc.ยฎ
                                      O42 - Logiciel: Android Studio - (.Google Inc..) [HKLM][64Bits] โ€“ Android Studio =>.Google Inc.
                                      O42 - Logiciel: Artifact - (.Valve.) [HKLM][64Bits] โ€“ Steam App 583950 =>.Valveยฎ
                                      O42 - Logiciel: Asmedia ASM106x SATA Host Controller Driver - (.Asmedia Technology.) [HKLM][64Bits] โ€“ {DF6C3726-7E53-4772-9763-E9F147769F51} =>.Asmedia Technology
                                      O42 - Logiciel: Asmedia USB Host Controller Driver - (.Asmedia Technology.) [HKLM][64Bits] โ€“ {E4FB0B39-C991-4EE7-95DD-1A1A7857D33D} =>.Asmedia Technology
                                      O42 - Logiciel: Balanced - (.Cรฉgnรฉv.) [HKLM][64Bits] โ€“ {EFD0705E-598B-46D4-8D5B-4539431764B8} (Hidden)
                                      O42 - Logiciel: Battle.net - (.Blizzard Entertainment.) [HKLM][64Bits] โ€“ Battle.net =>.Blizzard Entertainment, Inc.ยฎ
                                      O42 - Logiciel: Bitdefender Agent - (.Bitdefender.) [HKLM][64Bits] โ€“ Bitdefender Agent =>.Bitdefender SRLยฎ
                                      O42 - Logiciel: BYOND - (.BYOND.) [HKLM][64Bits] โ€“ BYOND =>.BYOND
                                      O42 - Logiciel: calibre - (.Kovid Goyal.) [HKLM][64Bits] โ€“ {71640766-157F-4DE8-B45F-69B76B0F5FCE} =>.Kovid Goyal
                                      O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] โ€“ CCleaner =>.Piriform Software Ltdยฎ
                                      O42 - Logiciel: Core Temp 1.11 - (.ALCPU.) [HKLM][64Bits] โ€“ {086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1 =>.Alcpu
                                      O42 - Logiciel: CPUID CPU-Z 1.85 - (.CPUID, Inc..) [HKLM][64Bits] โ€“ CPUID CPU-Z_is1 =>.CPUID, Inc.
                                      O42 - Logiciel: Crusader Kings II - (.Paradox Development Studio.) [HKLM][64Bits] โ€“ Steam App 203770 =>.Valveยฎ
                                      O42 - Logiciel: Crypt of the NecroDancer - (.Brace Yourself Games.) [HKLM][64Bits] โ€“ Steam App 247080 =>.Valveยฎ
                                      O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM][64Bits] โ€“ DAEMON Tools Lite =>.Disc Soft Ltd
                                      O42 - Logiciel: Dauntless - (.Phoenix Labs.) [HKLM][64Bits] โ€“ {03AFDFA7-7A23-41B1-AAC2-3898591127D3} =>.Phoenix Labs
                                      O42 - Logiciel: Dead by Daylight - (.Behaviour Digital Inc..) [HKLM][64Bits] โ€“ Steam App 381210 =>.Valveยฎ
                                      O42 - Logiciel: Definition Update for Microsoft Office 2016 (KB3115407) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{63E25EBC-99BA-45E7-A0D6-F69D2A55FFDD} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Discord - (.Discord Inc..) [HKCU][64Bits] โ€“ Discord =>.Discord Inc.ยฎ
                                      O42 - Logiciel: DisplayDriverAnalyzer - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: Epic Games Launcher - (.Epic Games, Inc..) [HKLM][64Bits] โ€“ {93BFE5DF-776E-436F-8693-DF1F72C0E3C1} =>.Epic Games, Inc.
                                      O42 - Logiciel: Epic Games Launcher Prerequisites (x64) - (.Epic Games, Inc..) [HKLM][64Bits] โ€“ {66C5838F-B854-4A55-89E6-A6138747A4DF} =>.Epic Games, Inc. (Hidden)
                                      O42 - Logiciel: Far.Cry.Primal.REPACK-KaOs Uninstaller v3.0 - (.KaOsKrew.) [HKLM][64Bits] โ€“ Far.Cry.Primal.REPACK-KaOs_is1 =>.KaOsKrew
                                      O42 - Logiciel: Game Summary - (.Overwolf app.) [HKCU][64Bits] โ€“ Overwolf_nafihghfcpikebhfhdhljejkcifgbdahdhngepfb =>.Overwolf Ltdยฎ
                                      O42 - Logiciel: Git version 2.16.2 - (.The Git Development Community.) [HKLM][64Bits] โ€“ Git_is1 =>.Johannes Schindelinยฎ
                                      O42 - Logiciel: GOG Galaxy - (.GOG.com.) [HKLM][64Bits] โ€“ {7258BA11-600C-430E-A759-27E2C691A335}_is1 =>.GOG Sp. z o.o.ยฎ
                                      O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] โ€“ Google Chrome =>.Google LLCยฎ
                                      O42 - Logiciel: Google Update Helper - (.Google LLC.) [HKLM][64Bits] โ€“ {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google LLC (Hidden)
                                      O42 - Logiciel: GoTo Opener - (.LogMeIn, Inc..) [HKLM][64Bits] โ€“ {1F803452-798F-49FB-A5DD-9F527F7017E4} =>.LogMeIn, Inc.
                                      O42 - Logiciel: GoToAssist Expert 4.4.0.1599 - (.LogMeIn, Inc..) [HKCU][64Bits] โ€“ GoToAssist Remote Support Expert =>.LogMeIn, Inc.ยฎ
                                      O42 - Logiciel: Guild Wars 2 - (.NCsoft Corporation, Ltd..) [HKLM][64Bits] โ€“ Guild Wars 2 =>.NCsoft Corporation, Ltd.
                                      O42 - Logiciel: Gwent - (.GOG.com.) [HKLM][64Bits] โ€“ 1971477531_is1 =>.GOG Sp. z o.o.ยฎ
                                      O42 - Logiciel: Hard Disk Sentinel - (.Janos Mathe.) [HKLM][64Bits] โ€“ Hard Disk Sentinel_is1 =>.Janos Matheยฎ
                                      O42 - Logiciel: HearthArena Companion - (.Overwolf app.) [HKCU][64Bits] โ€“ Overwolf_eldaohcjmecjpkpdhhoiolhhaeapcldppbdgbnbc =>.Overwolf Ltdยฎ
                                      O42 - Logiciel: Hearthstone - (.Blizzard Entertainment.) [HKLM][64Bits] โ€“ Hearthstone =>.Blizzard Entertainment, Inc.ยฎ
                                      O42 - Logiciel: Hearthstone Deck Tracker - (.HearthSim.) [HKCU][64Bits] โ€“ HearthstoneDeckTracker =>.HearthSim, LLCยฎ
                                      O42 - Logiciel: Heroes of the Storm - (.Blizzard Entertainment.) [HKLM][64Bits] โ€“ Heroes of the Storm =>.Blizzard Entertainment, Inc.ยฎ
                                      O42 - Logiciel: HiPatch - (.Hi-Rez Studios.) [HKLM][64Bits] โ€“ {3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000} =>.Hi-Rez Studios, Inc.ยฎ
                                      O42 - Logiciel: Hi-Rez Studios Authenticate and Update Service - (.Hi-Rez Studios.) [HKLM][64Bits] โ€“ {3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC} =>.Hi-Rez Studios, Inc.ยฎ
                                      O42 - Logiciel: Honey Select - (..) [HKLM][64Bits] โ€“ Honey Select_is1
                                      O42 - Logiciel: HWiNFO64 Version 6.06 - (.Martin Malรญk - REALiX.) [HKLM][64Bits] โ€“ HWiNFO64_is1 =>.Martin Malรญk - REALiX
                                      O42 - Logiciel: Into the Breach - (.Subset Games.) [HKLM][64Bits] โ€“ Steam App 590380 =>.Valveยฎ
                                      O42 - Logiciel: Jatek - (..) [HKCU][64Bits] โ€“ Jatek
                                      O42 - Logiciel: Java 7 Update 21 - (.Oracle.) [HKLM][64Bits] โ€“ {26A24AE4-039D-4CA4-87B4-2F83217021FF} =>.Oracle
                                      O42 - Logiciel: Java 8 Update 161 - (.Oracle Corporation.) [HKLM][64Bits] โ€“ {26A24AE4-039D-4CA4-87B4-2F32180161F0} =>.Oracle Corporation
                                      O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] โ€“ {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation (Hidden)
                                      O42 - Logiciel: Javaโ„ข SE Development Kit 11.0.1 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] โ€“ {F4039C0F-E4C1-5905-9E7D-DDA8EDE365BC} =>.Oracle Corporation
                                      O42 - Logiciel: Kingdom Come Deliverance - (..) [HKLM][64Bits] โ€“ Kingdom Come Deliverance_is1
                                      O42 - Logiciel: Kingdom Come: Deliverance - (.Warhorse Studios.) [HKLM][64Bits] โ€“ Steam App 379430 =>.Valveยฎ
                                      O42 - Logiciel: Launcher Prerequisites (x64) - (.Epic Games, Inc..) [HKLM][64Bits] โ€“ {c6c5a357-c7ca-4a5f-9789-3bb1af579253} =>.Epic Games Inc.ยฎ (Hidden)
                                      O42 - Logiciel: LogMeIn Hamachi - (.LogMeIn, Inc..) [HKLM][64Bits] โ€“ {ECC0FA07-863E-44BC-8B1D-DA22F96E5FB7} =>.LogMeIn, Inc. (Hidden)
                                      O42 - Logiciel: LogMeIn Hamachi - (.LogMeIn, Inc..) [HKLM][64Bits] โ€“ LogMeIn Hamachi =>.LogMeIn, Inc.
                                      O42 - Logiciel: Microsoft Access MUI (Hungarian) 2016 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-0015-040E-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft DCF MUI (Hungarian) 2016 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-0090-040E-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Excel MUI (Hungarian) 2016 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-0016-040E-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Groove MUI (Hungarian) 2016 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-00BA-040E-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft InfoPath MUI (Hungarian) 2016 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-0044-040E-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Mouse and Keyboard Center - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {76396B67-5C94-4708-90BF-E90070CA5740} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Mouse and Keyboard Center - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ Microsoft Mouse and Keyboard Center =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Microsoft Office 64-bit Components 2016 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-002A-0000-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Office Korrekturhilfen 2016 โ€“ Deutsch - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-001F-0407-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Office Nyelvi ellenล‘rzล‘ eszkรถzรถk 2016 โ€“ magyar - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-001F-040E-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Office OSM MUI (Hungarian) 2016 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-00E1-040E-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Office OSM UX MUI (Hungarian) 2016 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-00E2-040E-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Office Professional Plus 2016 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Office Professional Plus 2016 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ Office16.PROPLUS =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Microsoft Office Proofing (Hungarian) 2016 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-002C-040E-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Office Proofing Tools 2016 - English - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-001F-0409-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Office Shared 64-bit MUI (Hungarian) 2016 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-002A-040E-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Office Shared MUI (Hungarian) 2016 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-006E-040E-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft OneNote MUI (Hungarian) 2016 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-00A1-040E-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Outlook MUI (Hungarian) 2016 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-001A-040E-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft PowerPoint MUI (Hungarian) 2016 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-0018-040E-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Publisher MUI (Hungarian) 2016 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-0019-040E-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Skype for Business MUI (Hungarian) 2016 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-012B-040E-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {7299052b-02a4-4627-81f2-1818da5d550d} =>.Microsoft Corporation
                                      O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable (x64) - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {071c9b48-7c32-4621-a0ac-3f809523288f} =>.Microsoft Corporation
                                      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4} =>.Microsoft Corporation
                                      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {9A25302D-30C0-39D9-BD6F-21E6EC160475} =>.Microsoft Corporation
                                      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {9BE518E6-ECC6-35A9-88E4-87755C07200F} =>.Microsoft Corporation
                                      O42 - Logiciel: Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {1D8E6291-B0D5-35EC-8441-6616F567A0F7} =>.Microsoft Corporation
                                      O42 - Logiciel: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5} =>.Microsoft Corporation
                                      O42 - Logiciel: Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {ca67548a-5ebe-413a-b50c-4b9ceb6d66c6} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {33d1fd90-4274-48a1-9bc1-97e33d9c2d6f} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {37B8F9C7-03FB-3253-8781-2517C99D7C00} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {B175520C-86A2-35A7-8619-86DC379688B9} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {BD95A8CD-1D9F-35AD-981A-3E7925026EBB} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {050d4fc8-5d48-4b8f-8972-47c82c46020f} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {f65db027-aff3-4070-886a-0d87064aabb1} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {929FBD26-9020-399B-9A7A-751D61F0B942} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {A749D8E6-B613-3BE3-8F5F-045C84EBA29B} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {13A4EE12-23EA-3371-91EE-EFB36DDFFF3E} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Visual C++ 2017 Redistributable (x64) - 14.12.25810 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {e2ee15e2-a480-4bc5-bfb7-e9803d1d9823} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Microsoft Visual C++ 2017 Redistributable (x86) - 14.12.25810 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {56e11d69-7cc9-40a5-a4f9-8f6190c4d84d} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Microsoft Visual C++ 2017 x64 Additional Runtime - 14.12.25810 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {2CD849A7-86A1-34A6-B8F9-D72F5B21A9AE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Visual C++ 2017 x64 Minimum Runtime - 14.12.25810 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {C99E2ADC-0347-336E-A603-F1992B09D582} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Visual C++ 2017 x86 Additional Runtime - 14.12.25810 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {7FED75A1-600C-394B-8376-712E2A8861F2} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.12.25810 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {828952EB-5572-3666-8CA9-000B6CE79350} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft Word MUI (Hungarian) 2016 - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {90160000-001B-040E-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
                                      O42 - Logiciel: Microsoft XNA Framework Redistributable 4.0 Refresh - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F} =>.Microsoft Corporation
                                      O42 - Logiciel: MORDHAU - (.Triternion.) [HKLM][64Bits] โ€“ Steam App 629760 =>.Valveยฎ
                                      O42 - Logiciel: MSI Afterburner 4.5.0 - (.MSI Co., LTD.) [HKLM][64Bits] โ€“ Afterburner =>.MSI Co., LTD
                                      O42 - Logiciel: MTG Arena - (.Wizards of the Coast.) [HKLM][64Bits] โ€“ {D084B94B-3A8E-45B1-BDA7-39E1DA980687} =>.Wizards of the Coast (Hidden)
                                      O42 - Logiciel: MTG Arena - (.Wizards of the Coast.) [HKLM][64Bits] โ€“ MTG Arena 0.1.1205.0 =>.Wizards of the Coast
                                      O42 - Logiciel: NetBeans IDE 8.2 - (.NetBeans.org.) [HKLM][64Bits] โ€“ nbi-nb-base-8.2.0.0.201609300101 =>.NetBeans.org
                                      O42 - Logiciel: Nexus Mod Manager - (.Black Tree Gaming.) [HKLM][64Bits] โ€“ 6af12c54-643b-4752-87d0-8335503010de_is1 =>.Black Tree Gaming Limitedยฎ
                                      O42 - Logiciel: NVAPI Monitor plugin for NvContainer - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA ABHub - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvAbHub =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA Ansel - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA Backend - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvBackend =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA Container - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA Display Container - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayContainer =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA Display Container LS - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayContainerLS =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA Display Session Container - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplaySessionContainer =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA Display Watchdog Plugin - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayPluginWatchdog =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA frissรญtรฉsek 37.0.0.0 - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA GeForce Experience 3.19.0.94 - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience =>.NVIDIA Corporation
                                      O42 - Logiciel: NVIDIA Grafikus illesztล‘program 430.86 - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver =>.NVIDIA Corporation
                                      O42 - Logiciel: NVIDIA HD audio-illesztล‘program 1.3.38.16 - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver =>.NVIDIA Corporation
                                      O42 - Logiciel: NVIDIA Install Application - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA LocalSystem Container - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.LocalSystem =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA Message Bus for NvContainer - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.MessageBus =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA NetworkService Container - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NetworkService =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA NodeJS - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA Optimus Update 37.0.0.0 - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA PhysX rendszerszoftver 9.19.0218 - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX =>.NVIDIA Corporation
                                      O42 - Logiciel: NVIDIA Session Container - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.Session =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA ShadowPlay 3.19.0.94 - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: Nvidia Share - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_OSC =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA SHIELD Streaming - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA SHIELD Wireless Controller Driver - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA Telemetry Client - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA Telemetry Container - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetryContainer =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA TelemetryApi helper for NvContainer - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.ContainerTelemetryApiHel per =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA Update Core - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA User Container - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.User =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA Vezรฉrlล‘pult 430.86 - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA Virtual Audio 4.13.0.0 - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA Virtual Host Controller - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvvHci =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: NVIDIA Watchdog Plugin for NvContainer - (.NVIDIA Corporation.) [HKLM][64Bits] โ€“ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvPlugin.Watchdog =>.NVIDIA Corporation (Hidden)
                                      O42 - Logiciel: OEM Application Profile - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] โ€“ {7F5DCD33-1039-C3B2-9538-B645B65BBA63} =>.Advanced Micro Devices, Inc.
                                      O42 - Logiciel: Opera Mobile Emulator - (.Opera Software ASA.) [HKLM][64Bits] โ€“ {1826D0CA-F479-4430-9EFE-86E8E783505B}_is1 =>.Opera Software ASA
                                      O42 - Logiciel: Origin - (.Electronic Arts, Inc..) [HKLM][64Bits] โ€“ Origin =>.Electronic Arts, Inc.
                                      O42 - Logiciel: osu! - (.ppy Pty Ltd.) [HKLM][64Bits] โ€“ {1481750f-8de4-48a2-beaf-269a2ce0790c} =>.Dean Herbertยฎ
                                      O42 - Logiciel: Overwolf - (.Overwolf Ltd..) [HKLM][64Bits] โ€“ Overwolf =>.Overwolf Ltdยฎ
                                      O42 - Logiciel: Realm Royale PTS - (.Hi-Rez Studios.) [HKLM][64Bits] โ€“ {3C87E0FF-BC0A-4F5E-951B-68DC3F8DF703} =>.Hi-Rez Studios, Inc.ยฎ
                                      O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] โ€“ {8833FFB6-5B0C-4764-81AA-06DFEED9A476} =>.Realtek Semiconductor Corp.ยฎ
                                      O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] โ€“ {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp.ยฎ
                                      O42 - Logiciel: RivaTuner Statistics Server 7.1.0 - (.Unwinder.) [HKLM][64Bits] โ€“ RTSS =>.Unwinder
                                      O42 - Logiciel: Security Update for Microsoft Access 2016 (KB4018338) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{68E7092C-1BA8-4CB7-B432-E16937BE2008} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Access 2016 (KB4018338) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0015-040E-0000-0000000FF1CE}Office16.PROPLUS{68E7092C-1BA8-4CB7-B432-E16937BE2008} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Excel 2016 (KB4092460) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{4EDB5A36-31E9-4F22-BA07-BB65D99B9FCE} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Excel 2016 (KB4092460) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0016-040E-0000-0000000FF1CE}Office16.PROPLUS{4EDB5A36-31E9-4F22-BA07-BB65D99B9FCE} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Excel 2016 (KB4092460) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0018-040E-0000-0000000FF1CE}Office16.PROPLUS{4EDB5A36-31E9-4F22-BA07-BB65D99B9FCE} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Excel 2016 (KB4092460) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-001B-040E-0000-0000000FF1CE}Office16.PROPLUS{4EDB5A36-31E9-4F22-BA07-BB65D99B9FCE} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Office 2016 (KB2920727) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{ADA643B8-91E7-42FD-8339-3FDC73A3ABE4} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Office 2016 (KB3085538) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{57F91827-505E-4313-A3DF-EE6BD0B41A26} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Office 2016 (KB3085538) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-002A-0000-1000-0000000FF1CE}Office16.PROPLUS{57F91827-505E-4313-A3DF-EE6BD0B41A26} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Office 2016 (KB3114690) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{0431DE35-1781-4633-B69D-D547BB412C65} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Office 2016 (KB3115135) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{A1C294FC-0810-45DC-9198-835DE1FEE8EB} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Office 2016 (KB3213551) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{EE3EE85E-5775-4931-8033-39507E587EB9} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Office 2016 (KB3213551) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-006E-040E-0000-0000000FF1CE}Office16.PROPLUS{EE3EE85E-5775-4931-8033-39507E587EB9} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Office 2016 (KB4011143) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{854CA56C-0A52-403C-AC0E-E8571C753773} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Office 2016 (KB4011574) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{3DA49786-67D8-4AF8-99C8-3FB85422706B} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Office 2016 (KB4011574) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-006E-040E-0000-0000000FF1CE}Office16.PROPLUS{3DA49786-67D8-4AF8-99C8-3FB85422706B} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Office 2016 (KB4011628) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{FEAEF823-C391-460E-BA1A-E395217D5FC1} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Office 2016 (KB4022172) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{DCB15A3A-EB74-4172-B603-AC35A788BB7D} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Office 2016 (KB4022176) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{2899A276-2580-4D03-B981-4F7187CCE052} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Office 2016 (KB4022176) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-006E-040E-0000-0000000FF1CE}Office16.PROPLUS{2899A276-2580-4D03-B981-4F7187CCE052} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Office 2016 (KB4022177) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{0746E405-30D4-417E-9452-84B638C71EC7} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Word 2016 (KB4092447) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{1EA65725-8790-4C02-941B-4B59AE2D9FC6} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Word 2016 (KB4092447) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-001A-040E-0000-0000000FF1CE}Office16.PROPLUS{1EA65725-8790-4C02-941B-4B59AE2D9FC6} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Word 2016 (KB4092447) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-001B-040E-0000-0000000FF1CE}Office16.PROPLUS{1EA65725-8790-4C02-941B-4B59AE2D9FC6} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Security Update for Microsoft Word 2016 (KB4092447) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-012B-040E-0000-0000000FF1CE}Office16.PROPLUS{1EA65725-8790-4C02-941B-4B59AE2D9FC6} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: SFK Standalone 13.9 - (.[SFK]Dielo.) [HKLM][64Bits] โ€“ {60101460-B0B7-4B50-9600-81CF9CAE33A8}_is1
                                      O42 - Logiciel: Simple Port Tester - (.PcWinTech.com.) [HKLM][64Bits] โ€“ Simple Port Tester3.0.0 =>.PcWinTech.com
                                      O42 - Logiciel: Standalone Flash Player 1.2 - (.StandaloneFlashPlayer.com.) [HKLM][64Bits] โ€“ {A3B31D43-75F4-4CF4-8330-6DE62C3540FA}_is1
                                      O42 - Logiciel: Survivors Viy - (..) [HKCU][64Bits] โ€“ Survivors Viy
                                      O42 - Logiciel: SWF File Player - (.swffileplayer.com.) [HKLM][64Bits] โ€“ {6A86F611-906C-422D-B34A-103662CBC195}_is1 =>.swffileplayer.com
                                      O42 - Logiciel: TAP-Windows 9.9.2 - (.OpenVPN Technologie.) [HKLM][64Bits] โ€“ TAP-Windows =>.OpenVPN Technologie
                                      O42 - Logiciel: TeamViewer 13 - (.TeamViewer.) [HKLM][64Bits] โ€“ TeamViewer =>.TeamViewer GmbHยฎ
                                      O42 - Logiciel: TechPowerUp GPU-Z - (.TechPowerUp.) [HKLM][64Bits] โ€“ TechPowerUp GPU-Z =>.TechPowerUp
                                      O42 - Logiciel: The Elder Scrolls Online - (.Zenimax Online Studios.) [HKLM][64Bits] โ€“ The Elder Scrolls Online =>.Zenimax Online Studios
                                      O42 - Logiciel: The Elder Scrolls V: Skyrim Special Edition - (.Bethesda Game Studios.) [HKLM][64Bits] โ€“ Steam App 489830 =>.Valveยฎ
                                      O42 - Logiciel: Unigine Valley Benchmark version 1.0 - (.Unigine Corp..) [HKLM][64Bits] โ€“ Unigine Valley Benchmark_is1 =>.Unigine Corp.
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB2910954) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{96EFDD2E-6496-4E0C-9EA2-034AF087211A} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB2920678) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{659F8DC4-0FD7-4C3C-9011-19B9FB400154} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB2920684) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{FA8D0376-1138-4DE0-81B4-AE2106D5ED4D} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB2920684) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-002A-0000-1000-0000000FF1CE}Office16.PROPLUS{FA8D0376-1138-4DE0-81B4-AE2106D5ED4D} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB2920712) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{0471C03C-B563-4F44-83E9-4D9AF243E1D3} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB2920720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{1471A699-A87C-454C-B227-00B48E5BA75B} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB2920724) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{B5FD5FBF-150F-4BD7-A2D2-F015D1069FC5} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB3114853) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{0651B677-85E1-4CD8-AE47-5AD7BD8B57F5} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB3114903) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{B557BEA1-7AB8-4CA4-B9EB-7011EB0EEB4B} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB3115081) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{093F65D6-3F74-4E83-87EC-F423D90A8037} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB3115276) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{FEAC1D0D-7908-457B-A000-ED3E6CCBD7A8} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB3118262) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{3BA490D9-062E-4F6A-BEAF-8F052D1353F9} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB3118263) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{26C2A3F8-CDE2-4AEC-9821-91BC7BACAD72} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB3118264) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{BEDCC8A6-C1B2-4BE8-AE25-9D658C01D7B2} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB3141457) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{6117A69A-0707-4013-84AE-1741506319E9} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB3141457) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-002A-0000-1000-0000000FF1CE}Office16.PROPLUS{6117A69A-0707-4013-84AE-1741506319E9} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB3178662) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{2454A1C1-D869-49CB-B3E4-F3105B307E90} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB3178662) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-001F-0407-0000-0000000FF1CE}Office16.PROPLUS{2454A1C1-D869-49CB-B3E4-F3105B307E90} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB3178662) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-001F-0409-0000-0000000FF1CE}Office16.PROPLUS{2454A1C1-D869-49CB-B3E4-F3105B307E90} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB3178662) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-001F-040E-0000-0000000FF1CE}Office16.PROPLUS{2454A1C1-D869-49CB-B3E4-F3105B307E90} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB3178666) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{E1849F24-F29F-4AAA-AAFE-7469BD68F24F} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB3191864) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{56348998-4800-4C95-A671-F3F654E44FB9} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB3191929) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{A07FCC06-F05F-4072-8DCD-123EC4CE45A4} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB3203479) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{C024B37B-9060-4A16-AF8C-DD05553C4D38} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB3213650) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{435911D8-F21C-43AB-873B-83351C5F68C0} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB3213650) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-002A-0000-1000-0000000FF1CE}Office16.PROPLUS{435911D8-F21C-43AB-873B-83351C5F68C0} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4011035) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{863D8900-6BE5-4E0D-8711-AB97431E579D} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4011218) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{ACB9CBFF-B321-4811-AC8F-31B5A2993F51} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4011218) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0016-040E-0000-0000000FF1CE}Office16.PROPLUS{ACB9CBFF-B321-4811-AC8F-31B5A2993F51} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4011225) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{CDC7136D-F6B1-4CDD-B4B6-BF05AA41C126} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4011259) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{A664A3EC-D7BF-4FED-808B-4A6C749A731C} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4011569) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{D1F0354B-9F63-423F-A17E-86E0A341032C} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4011634) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{DC92C858-FE17-4371-8934-E6989005DCB9} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4011634) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-002A-0000-1000-0000000FF1CE}Office16.PROPLUS{DC92C858-FE17-4371-8934-E6989005DCB9} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4011670) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{D54DA5D1-1F85-47BD-BA3D-DB69B98763B9} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4011670) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-002A-0000-1000-0000000FF1CE}Office16.PROPLUS{D54DA5D1-1F85-47BD-BA3D-DB69B98763B9} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4018371) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{42DCAB2B-3727-47BB-A820-3203BE6CA8B1} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4018371) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-002A-0000-1000-0000000FF1CE}Office16.PROPLUS{42DCAB2B-3727-47BB-A820-3203BE6CA8B1} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4022133) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{A51C4C22-5174-4C67-B37A-18066F57A371} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4022133) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-002A-0000-1000-0000000FF1CE}Office16.PROPLUS{A51C4C22-5174-4C67-B37A-18066F57A371} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4022193) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{D28C9F0B-8F57-4FAD-9587-07B50F2F18E6} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4022215) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{D20E3ABA-5512-46D9-8E70-8FD8798FA990} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4022215) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-002A-0000-1000-0000000FF1CE}Office16.PROPLUS{D20E3ABA-5512-46D9-8E70-8FD8798FA990} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4022223) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{ECF75206-C6D1-4391-8E20-8004776CF836} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4022223) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-006E-040E-0000-0000000FF1CE}Office16.PROPLUS{ECF75206-C6D1-4391-8E20-8004776CF836} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4032237) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{5070C4E9-BE06-49EE-93E6-8092F952337A} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4032237) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-002A-0000-1000-0000000FF1CE}Office16.PROPLUS{5070C4E9-BE06-49EE-93E6-8092F952337A} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4092449) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{74FBDE59-528E-4B74-90DB-151C874D8030} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4092461) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{E4EAF575-B008-47D0-A7B9-7FC76D6344BC} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Office 2016 (KB4092461) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-006E-040E-0000-0000000FF1CE}Office16.PROPLUS{E4EAF575-B008-47D0-A7B9-7FC76D6344BC} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft OneDrive for Business (KB4022219) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{CC525E12-08E1-41AD-9638-02A079D48DF9} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft OneDrive for Business (KB4022219) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-002A-0000-1000-0000000FF1CE}Office16.PROPLUS{CC525E12-08E1-41AD-9638-02A079D48DF9} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft OneDrive for Business (KB4022219) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-002A-040E-1000-0000000FF1CE}Office16.PROPLUS{CC525E12-08E1-41AD-9638-02A079D48DF9} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft OneDrive for Business (KB4022219) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-00BA-040E-0000-0000000FF1CE}Office16.PROPLUS{CC525E12-08E1-41AD-9638-02A079D48DF9} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft OneNote 2016 (KB4022216) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{2829E789-C052-443D-BF9E-4A4332D64D35} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft OneNote 2016 (KB4022216) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-002A-0000-1000-0000000FF1CE}Office16.PROPLUS{2829E789-C052-443D-BF9E-4A4332D64D35} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft OneNote 2016 (KB4022216) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-00A1-040E-0000-0000000FF1CE}Office16.PROPLUS{2829E789-C052-443D-BF9E-4A4332D64D35} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Outlook 2016 (KB4092462) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{FA318F09-87D3-49DA-8233-7DCE08C60B9A} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Outlook 2016 (KB4092462) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-001A-040E-0000-0000000FF1CE}Office16.PROPLUS{FA318F09-87D3-49DA-8233-7DCE08C60B9A} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft PowerPoint 2016 (KB4092446) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{CD9DA537-01DD-4C5A-8654-F23C955C21F7} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft PowerPoint 2016 (KB4092446) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0018-040E-0000-0000000FF1CE}Office16.PROPLUS{CD9DA537-01DD-4C5A-8654-F23C955C21F7} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Project 2016 (KB4032238) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{E98D9D03-2718-4191-8880-74AC11E7F73F} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Project 2016 (KB4032238) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-002A-0000-1000-0000000FF1CE}Office16.PROPLUS{E98D9D03-2718-4191-8880-74AC11E7F73F} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Publisher 2016 (KB3178696) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{CA2AD4B6-133E-4F44-960D-B178C3054F7C} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Publisher 2016 (KB3178696) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0019-040E-0000-0000000FF1CE}Office16.PROPLUS{CA2AD4B6-133E-4F44-960D-B178C3054F7C} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Microsoft Visio 2016 (KB4018325) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{0B7E7619-A6EC-49BD-B3C7-4DAA0C7FD7EF} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Skype for Business 2016 (KB4032255) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-0011-0000-0000-0000000FF1CE}Office16.PROPLUS{699F991D-0635-4A44-9776-AEE20C6087DC} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Skype for Business 2016 (KB4032255) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-002A-0000-1000-0000000FF1CE}Office16.PROPLUS{699F991D-0635-4A44-9776-AEE20C6087DC} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Skype for Business 2016 (KB4032255) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] โ€“ {90160000-012B-040E-0000-0000000FF1CE}Office16.PROPLUS{699F991D-0635-4A44-9776-AEE20C6087DC} =>.Microsoft Corporationยฎ
                                      O42 - Logiciel: Update for Windows 10 for x64-based Systems (KB4023057) - (.Microsoft Corporation.) [HKLM][64Bits] โ€“ {C3ACFCEA-240F-4DCC-A0C3-DD55FEE6C3C2} =>.Microsoft Corporation
                                      O42 - Logiciel: Uplay - (.Ubisoft.) [HKLM][64Bits] โ€“ Uplay =>.Ubisoft Entertainment Sweden ABยฎ
                                      O42 - Logiciel: VBCABLE, The Virtual Audio Cable - (.VB-Audio Software.) [HKLM][64Bits] โ€“ VB:VBCABLE {87459874-1236-4469} =>.Vincent Burelยฎ
                                      O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] โ€“ VLC media player =>.VideoLAN
                                      O42 - Logiciel: VPN Unlimited 5.0 - (.KeepSolid Inc..) [HKLM][64Bits] โ€“ {DC24521E-872B-41AF-93EA-FE477902D6FB}_is1 =>.KeepSolid Inc.ยฎ
                                      O42 - Logiciel: Warhammer: Vermintide 2 - (.Fatshark.) [HKLM][64Bits] โ€“ Steam App 552500 =>.Valveยฎ
                                      O42 - Logiciel: WinRAR 5.70 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] โ€“ WinRAR archiver =>.win.rar GmbHยฎ
                                      O42 - Logiciel: World of Warcraft - (.Blizzard Entertainment.) [HKLM][64Bits] โ€“ World of Warcraft =>.Blizzard Entertainment, Inc.ยฎ

                                      โ€”\ HKCU & HKLM Software Keys (261) - 31s
                                      HKLM\SOFTWARE\7-Zip =>.Igor Pavlov
                                      HKLM\SOFTWARE\Adobe =>.Adobe
                                      HKLM\SOFTWARE\AGEIA Technologies =>.AGEIA Technologies
                                      HKLM\SOFTWARE\AMD =>.AMD
                                      HKLM\SOFTWARE\Android Studio =>.Android Studio
                                      HKLM\SOFTWARE\Apple Inc. =>.Apple Inc.
                                      HKLM\SOFTWARE\ArenaNet =>.ArenaNet
                                      HKLM\SOFTWARE\ATI Technologies =>.ATI Technologies
                                      HKLM\SOFTWARE\AVAST Software =>.AVAST Software
                                      HKLM\SOFTWARE\Bitdefender Agent =>.Bitdefender
                                      HKLM\SOFTWARE\CPUID =>.CPUID Inc
                                      HKLM\SOFTWARE\Disc Soft =>.Disc Soft
                                      HKLM\SOFTWARE\Dolby =>.Dolby
                                      HKLM\SOFTWARE\DTS =>.Creative Technology
                                      HKLM\SOFTWARE\Fortemedia =>.Lugert Europe
                                      HKLM\SOFTWARE\GitForWindows
                                      HKLM\SOFTWARE\Google =>.Google
                                      HKLM\SOFTWARE\ICEpower =>.ICEpower
                                      HKLM\SOFTWARE\INextUUID =>.Hewlett-Packard
                                      HKLM\SOFTWARE\Intel =>.Intel
                                      HKLM\SOFTWARE\IPS =>.EgisTec
                                      HKLM\SOFTWARE\JavaSoft =>.JavaSoft
                                      HKLM\SOFTWARE\Khronos =>.Khronos
                                      HKLM\SOFTWARE\Knowles =>.Knowles Electronics
                                      HKLM\SOFTWARE\LogMeIn, Inc. =>.LogMeIn Entreprise
                                      HKLM\SOFTWARE\Macromedia =>.Macromedia
                                      HKLM\SOFTWARE\MCCI =>.MCCI
                                      HKLM\SOFTWARE\Nahimic =>.Nahimic
                                      HKLM\SOFTWARE\Nuance =>.Nuance
                                      HKLM\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
                                      HKLM\SOFTWARE\ODBC =>.DB Connectivity Solutions
                                      HKLM\SOFTWARE\OEM =>.OEM
                                      HKLM\SOFTWARE\Partner =>.Google Inc.
                                      HKLM\SOFTWARE\Piriform =>.Piriform
                                      HKLM\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
                                      HKLM\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
                                      HKLM\SOFTWARE\RTLSetup =>.Realtek Semiconductor Corp.
                                      HKLM\SOFTWARE\SonicFocus =>.Sonic Focus
                                      HKLM\SOFTWARE\SoundResearch =>.Sound Research
                                      HKLM\SOFTWARE\SRS Labs =>.SRS Labs
                                      HKLM\SOFTWARE\TAP-Windows =>.OpenVPN Technologie
                                      HKLM\SOFTWARE\TrendMicro =>.TrendMicro
                                      HKLM\SOFTWARE\VB-Audio =>.Sony Corporation
                                      HKLM\SOFTWARE\WinRAR =>.WinRAR
                                      HKLM\SOFTWARE\WOW6432Node =>.Microsoft Corporation
                                      HKLM\SOFTWARE\Yamaha APO =>.Yamaha Corp.
                                      HKLM\SOFTWARE\WOW6432Node\Adobe =>.Adobe
                                      HKLM\SOFTWARE\WOW6432Node\AGEIA Technologies =>.AGEIA Technologies
                                      HKLM\SOFTWARE\WOW6432Node\AMD =>.AMD
                                      HKLM\SOFTWARE\WOW6432Node\Apple Inc. =>.Apple Inc.
                                      HKLM\SOFTWARE\WOW6432Node\ASUS =>.ASUS
                                      HKLM\SOFTWARE\WOW6432Node\ATI =>.ATI
                                      HKLM\SOFTWARE\WOW6432Node\ATI Technologies =>.ATI Technologies
                                      HKLM\SOFTWARE\WOW6432Node\AVAST Software =>.AVAST Software
                                      HKLM\SOFTWARE\WOW6432Node\bethesda softworks =>.Bethesda Softworks
                                      HKLM\SOFTWARE\WOW6432Node\Bitdefender Agent =>.Bitdefender
                                      HKLM\SOFTWARE\WOW6432Node\Blizzard Entertainment =>.Blizzard Entertainment
                                      HKLM\SOFTWARE\WOW6432Node\calibre =>.Kovid Goyal
                                      HKLM\SOFTWARE\WOW6432Node\Caphyon =>.Caphyon
                                      HKLM\SOFTWARE\WOW6432Node\Dantom
                                      HKLM\SOFTWARE\WOW6432Node\EA Games =>.EA Games
                                      HKLM\SOFTWARE\WOW6432Node\EasyAntiCheat =>.EasyAntiCheat
                                      HKLM\SOFTWARE\WOW6432Node\Electronic Arts =>.Electronic Arts
                                      HKLM\SOFTWARE\WOW6432Node\Epic Games =>.Epic Games
                                      HKLM\SOFTWARE\WOW6432Node\EpicGames =>.Epic Games
                                      HKLM\SOFTWARE\WOW6432Node\GOG.com =>.GOG.com
                                      HKLM\SOFTWARE\WOW6432Node\Google =>.Google
                                      HKLM\SOFTWARE\WOW6432Node\HD Sentinel =>.HD Sentinel
                                      HKLM\SOFTWARE\WOW6432Node\Hi-Rez Studios =>.Hi-Rez Studios
                                      HKLM\SOFTWARE\WOW6432Node\HiRez Studios =>.Hirez Studios
                                      HKLM\SOFTWARE\WOW6432Node\IM Providers =>.IM Providers
                                      HKLM\SOFTWARE\WOW6432Node\Intel =>.Intel
                                      HKLM\SOFTWARE\WOW6432Node\JavaSoft =>.JavaSoft
                                      HKLM\SOFTWARE\WOW6432Node\JreMetrics =>.JreMetrics
                                      HKLM\SOFTWARE\WOW6432Node\Khronos =>.Khronos
                                      HKLM\SOFTWARE\WOW6432Node\LogMeIn Hamachi =>.LogMeIn Entreprise
                                      HKLM\SOFTWARE\WOW6432Node\Macromedia =>.Macromedia
                                      HKLM\SOFTWARE\WOW6432Node\MozillaPlugins =>.MozillaPlugins
                                      HKLM\SOFTWARE\WOW6432Node\MSI =>.MSI
                                      HKLM\SOFTWARE\WOW6432Node\Nuance =>.Nuance
                                      HKLM\SOFTWARE\WOW6432Node\NVIDIA Corporation =>.nVidia Corporation
                                      HKLM\SOFTWARE\WOW6432Node\ODBC =>.DB Connectivity Solutions
                                      HKLM\SOFTWARE\WOW6432Node\Oracle =>.Oracle
                                      HKLM\SOFTWARE\WOW6432Node\Origin =>.Electronic Arts, Inc.
                                      HKLM\SOFTWARE\WOW6432Node\Origin Games =>.Electronic Arts, Inc.
                                      HKLM\SOFTWARE\WOW6432Node\Overwolf =>.Overwolf
                                      HKLM\SOFTWARE\WOW6432Node\Realtek =>.Realtek Semiconductor Corp.
                                      HKLM\SOFTWARE\WOW6432Node\Realtek Semiconductor Corp. =>.Realtek Semiconductor Corp.
                                      HKLM\SOFTWARE\WOW6432Node\Respawn =>.Respawn Entertainment
                                      HKLM\SOFTWARE\WOW6432Node\SRS Labs =>.SRS Labs
                                      HKLM\SOFTWARE\WOW6432Node\TeamViewer =>.TeamViewer GmbH
                                      HKLM\SOFTWARE\WOW6432Node\TrendMicro =>.TrendMicro
                                      HKLM\SOFTWARE\WOW6432Node\TVInstallTemp =>.TeamViewer GmbH
                                      HKLM\SOFTWARE\WOW6432Node\Ubisoft =>.Ubisoft
                                      HKLM\SOFTWARE\WOW6432Node\Unwinder =>.Unwinder
                                      HKLM\SOFTWARE\WOW6432Node\Valve =>.Valve
                                      HKLM\SOFTWARE\WOW6432Node\VideoLAN =>.VideoLan Team
                                      HKLM\SOFTWARE\WOW6432Node\Wizards of the Coast =>.Wizards of the Coast
                                      HKLM\SOFTWARE\WOW6432Node\Wow6432Node =>.Microsoft Corporation
                                      HKLM\SOFTWARE\WOW6432Node\Zenimax_Online =>.ZeniMax Online Studios
                                      HKLM\SOFTWARE\WOW6432Node\RegisteredApplications =>.Microsoft Corporation
                                      HKCU\SOFTWARE\7-Zip =>.Igor Pavlov
                                      HKCU\SOFTWARE\Adobe =>.Adobe
                                      HKCU\SOFTWARE\Adriaan de Jongh
                                      HKCU\SOFTWARE\AMD =>.AMD
                                      HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation
                                      HKCU\SOFTWARE\Aski =>.Aski
                                      HKCU\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o
                                      HKCU\SOFTWARE\AWIND =>.Legitimate
                                      HKCU\SOFTWARE\Berserk Games =>.Berserk Games
                                      HKCU\SOFTWARE\BetaDwarf ApS
                                      HKCU\SOFTWARE\BitTorrent =>.BitTorrent (P2P)
                                      HKCU\SOFTWARE\Blacklight Interactive =>.Blacklight Interactive
                                      HKCU\SOFTWARE\Blizzard Entertainment =>.Blizzard Entertainment
                                      HKCU\SOFTWARE\Browser Cleanup =>.Avast Software s.r.o
                                      HKCU\SOFTWARE\Brozeks&CO
                                      HKCU\SOFTWARE\BugSplat =>.Bugsplat Game
                                      HKCU\SOFTWARE\calibre =>.Kovid Goyal
                                      HKCU\SOFTWARE\CDProjektRED =>.CD Projekt
                                      HKCU\SOFTWARE\Chromium =>.Chromium
                                      HKCU\SOFTWARE\Dantom
                                      HKCU\SOFTWARE\Digital Extremes =>.Digital Extremes
                                      HKCU\SOFTWARE\Dire Wolf Digital =>.Dire Wolf Digital
                                      HKCU\SOFTWARE\Disc Soft =>.Disc Soft
                                      HKCU\SOFTWARE\Discord =>.Discord
                                      HKCU\SOFTWARE\Dodge Roll =>.Dodge Roll
                                      HKCU\SOFTWARE\Electronic Arts =>.Electronic Arts
                                      HKCU\SOFTWARE\Epic Games =>.Epic Games
                                      HKCU\SOFTWARE\FinalWire =>.FinalWire
                                      HKCU\SOFTWARE\GOG.com =>.GOG.com
                                      HKCU\SOFTWARE\Google =>.Google
                                      HKCU\SOFTWARE\HEX Entertainment =>.HEX Entertainment
                                      HKCU\SOFTWARE\Hoplon Infotainment
                                      HKCU\SOFTWARE\Hopoo Games, LLC =>.Hopoo Games, LLC
                                      HKCU\SOFTWARE\HWiNFO64
                                      HKCU\SOFTWARE\illusion =>.Illusion
                                      HKCU\SOFTWARE\Imagination Technologies =>.Imagination Technologies
                                      HKCU\SOFTWARE\Intel Corporation =>.Intel Corporation
                                      HKCU\SOFTWARE\JavaSoft =>.JavaSoft
                                      HKCU\SOFTWARE\KeepSolid Inc. =>.KeepSolid Inc.
                                      HKCU\SOFTWARE\KING Art GmbH
                                      HKCU\SOFTWARE\Landfall Games =>.Landfall Games
                                      HKCU\SOFTWARE\League of Geeks
                                      HKCU\SOFTWARE\LogMeInInc =>.LogMeIn Entreprise
                                      HKCU\SOFTWARE\LOK Team
                                      HKCU\SOFTWARE\MozillaPlugins =>.MozillaPlugins
                                      HKCU\SOFTWARE\MSI =>.MSI
                                      HKCU\SOFTWARE\Netscape =>.Netscape
                                      HKCU\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
                                      HKCU\SOFTWARE\Obsidian Entertainment =>.Obsidian Entertainment
                                      HKCU\SOFTWARE\ODBC =>.DB Connectivity Solutions
                                      HKCU\SOFTWARE\osu! =>.Osu! Games
                                      HKCU\SOFTWARE\Overwolf =>.Overwolf
                                      HKCU\SOFTWARE\Phoenix Labs =>.Phoenix Labs
                                      HKCU\SOFTWARE\Piriform =>.Piriform
                                      HKCU\SOFTWARE\QtProject =>.QtProject
                                      HKCU\SOFTWARE\Realmforge Studios GmbH =>.Realmforge Studios GmbH
                                      HKCU\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
                                      HKCU\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
                                      HKCU\SOFTWARE\SFKTeam
                                      HKCU\SOFTWARE\SureAI
                                      HKCU\SOFTWARE\Team17SoftwareLTD =>.Team17SoftwareLTD
                                      HKCU\SOFTWARE\TeamViewer =>.TeamViewer GmbH
                                      HKCU\SOFTWARE\techPowerUp =>.TechPowerUp
                                      HKCU\SOFTWARE\Texel Raptor
                                      HKCU\SOFTWARE\The Creative Assembly =>.The Creative Assembly
                                      HKCU\SOFTWARE\The Fun Pimps =>.The Fun Pimps
                                      HKCU\SOFTWARE\Ubisoft =>.Ubisoft
                                      HKCU\SOFTWARE\Unity =>.Unity
                                      HKCU\SOFTWARE\Unwinder =>.Unwinder
                                      HKCU\SOFTWARE\Valve =>.Valve
                                      HKCU\SOFTWARE\VB and VBA Program Settings =>.Microsoft Corporation
                                      HKCU\SOFTWARE\WinRAR =>.WinRAR
                                      HKCU\SOFTWARE\WinRAR SFX =>.RarLab
                                      HKCU\SOFTWARE\Wizards Of The Coast =>.Wizards of the Coast
                                      HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation
                                      HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
                                      HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation
                                      HKCU\SOFTWARE\AppDataLow\Software\Stunlock Studios =>.Stunlock Studios
                                      HKCU\SOFTWARE\AppDataLow\Software\Unity =>.Unity
                                      HKU.DEFAULT\SOFTWARE\Browser Cleanup =>.Avast Software s.r.o
                                      HKU.DEFAULT\SOFTWARE\Nahimic =>.Nahimic
                                      HKU.DEFAULT\SOFTWARE\Netscape =>.Netscape
                                      HKU.DEFAULT\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
                                      HKU.DEFAULT\SOFTWARE\Piriform =>.Piriform
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\7-Zip =>.Igor Pavlov
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Adobe =>.Adobe
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Adriaan de Jongh
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\AMD =>.AMD
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\AppDataLow =>.Microsoft Corporation
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Aski =>.Aski
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\AWIND =>.Legitimate
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Berserk Games =>.Berserk Games
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\BetaDwarf ApS
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\BitTorrent =>.BitTorrent (P2P)
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Blacklight Interactive =>.Blacklight Interactive
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Blizzard Entertainment =>.Blizzard Entertainment
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Browser Cleanup =>.Avast Software s.r.o
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Brozeks&CO
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\BugSplat =>.Bugsplat Game
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\calibre =>.Kovid Goyal
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\CDProjektRED =>.CD Projekt
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Chromium =>.Chromium
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Dantom
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Digital Extremes =>.Digital Extremes
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Dire Wolf Digital =>.Dire Wolf Digital
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Disc Soft =>.Disc Soft
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Discord =>.Discord
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Dodge Roll =>.Dodge Roll
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Electronic Arts =>.Electronic Arts
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Epic Games =>.Epic Games
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\FinalWire =>.FinalWire
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\GOG.com =>.GOG.com
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Google =>.Google
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\HEX Entertainment =>.HEX Entertainment
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Hoplon Infotainment
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Hopoo Games, LLC =>.Hopoo Games, LLC
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\HWiNFO64
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\illusion =>.Illusion
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Imagination Technologies =>.Imagination Technologies
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Intel Corporation =>.Intel Corporation
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\JavaSoft =>.JavaSoft
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\KeepSolid Inc. =>.KeepSolid Inc.
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\KING Art GmbH
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Landfall Games =>.Landfall Games
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\League of Geeks
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\LogMeInInc =>.LogMeIn Entreprise
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\LOK Team
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\MozillaPlugins =>.MozillaPlugins
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\MSI =>.MSI
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Netscape =>.Netscape
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Obsidian Entertainment =>.Obsidian Entertainment
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\ODBC =>.DB Connectivity Solutions
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\osu! =>.Osu! Games
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Overwolf =>.Overwolf
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Phoenix Labs =>.Phoenix Labs
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Piriform =>.Piriform
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\QtProject =>.QtProject
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Realmforge Studios GmbH =>.Realmforge Studios GmbH
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\SFKTeam
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\SureAI
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Team17SoftwareLTD =>.Team17SoftwareLTD
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\TeamViewer =>.TeamViewer GmbH
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\techPowerUp =>.TechPowerUp
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Texel Raptor
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\The Creative Assembly =>.The Creative Assembly
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\The Fun Pimps =>.The Fun Pimps
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Ubisoft =>.Ubisoft
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Unity =>.Unity
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Unwinder =>.Unwinder
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Valve =>.Valve
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\VB and VBA Program Settings =>.Microsoft Corporation
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\WinRAR =>.WinRAR
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\WinRAR SFX =>.RarLab
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Wizards Of The Coast =>.Wizards of the Coast
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Wow6432Node =>.Microsoft Corporation
                                      HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\ZHP =>.Nicolas Coolman

                                      โ€”\ Contents of the Common Files folders (379) - 12s
                                      O43 - CFD: 09/03/2018 - D โ€“ C:\Program Files\7-Zip =>.Igor Pavlov
                                      O43 - CFD: 03/01/2019 - D โ€“ C:\Program Files\AMD =>.Advanced Micro Devices Inc.ยฎ
                                      O43 - CFD: 24/01/2018 - D โ€“ C:\Program Files\ASUS =>.MCCI Corporationยฎ
                                      O43 - CFD: 11/01/2019 - D โ€“ C:\Program Files\Bitdefender Agent =>.Bitdefender
                                      O43 - CFD: 09/02/2019 - D โ€“ C:\Program Files\CCleaner =>.Piriform Ltd
                                      O43 - CFD: 11/02/2019 - D โ€“ C:\Program Files\Common Files =>.Microsoft Corporation
                                      O43 - CFD: 07/05/2018 - D โ€“ C:\Program Files\Core Temp =>.Legitimate
                                      O43 - CFD: 03/01/2019 - D โ€“ C:\Program Files\CPUID =>.CPUID Inc
                                      O43 - CFD: 22/10/2018 - D โ€“ C:\Program Files\DAEMON Tools Lite =>.DAEMON Tools
                                      O43 - CFD: 16/06/2019 - D โ€“ C:\Program Files\HWiNFO64 =>.Martin Malik - REALiXยฎ
                                      O43 - CFD: 14/06/2019 - D โ€“ C:\Program Files\internet explorer =>.Microsoft Corporation
                                      O43 - CFD: 08/12/2018 - D โ€“ C:\Program Files\Java =>.Oracle
                                      O43 - CFD: 12/02/2019 - D โ€“ C:\Program Files\Microsoft Mouse and Keyboard Center =>.Microsoft Corporation
                                      O43 - CFD: 03/11/2018 - D โ€“ C:\Program Files\Microsoft Office =>.Microsoft Corporation
                                      O43 - CFD: 26/05/2018 - D โ€“ C:\Program Files\MSBuild =>.Microsoft Corporation
                                      O43 - CFD: 23/03/2019 - D โ€“ C:\Program Files\Nexus Mod Manager =>.Winstep Software Technologies
                                      O43 - CFD: 15/06/2019 - D โ€“ C:\Program Files\NVIDIA Corporation =>.nVidia Corporation
                                      O43 - CFD: 26/05/2018 - D โ€“ C:\Program Files\Reference Assemblies =>.Microsoft Corporation
                                      O43 - CFD: 18/05/2019 - D โ€“ C:\Program Files\rempl =>.Microsoft Corporation
                                      O43 - CFD: 14/08/2018 - D โ€“ C:\Program Files\TAP-Windows =>.OpenVPN Technologie
                                      O43 - CFD: 24/01/2018 - [0] HD โ€“ C:\Program Files\Uninstall Information =>.Microsoft Corporation
                                      O43 - CFD: 20/06/2018 - D โ€“ C:\Program Files\VB =>.Vincent Burelยฎ
                                      O43 - CFD: 12/04/2019 - RD โ€“ C:\Program Files\Windows Defender =>.Microsoft Corporation
                                      O43 - CFD: 12/04/2019 - D โ€“ C:\Program Files\Windows Defender Advanced Threat Protection =>.Microsoft Corporation
                                      O43 - CFD: 12/04/2018 - D โ€“ C:\Program Files\Windows Mail =>.Microsoft Corporation
                                      O43 - CFD: 20/10/2018 - D โ€“ C:\Program Files\Windows Media Player =>.Microsoft Corporation
                                      O43 - CFD: 12/04/2018 - D โ€“ C:\Program Files\Windows Multimedia Platform =>.Microsoft Corporation
                                      O43 - CFD: 26/05/2018 - D โ€“ C:\Program Files\windows nt =>.Microsoft Corporation
                                      O43 - CFD: 14/06/2018 - D โ€“ C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation
                                      O43 - CFD: 12/04/2018 - D โ€“ C:\Program Files\Windows Portable Devices =>.Microsoft Corporation
                                      O43 - CFD: 12/04/2018 - D โ€“ C:\Program Files\Windows Security =>.Microsoft Corporation
                                      O43 - CFD: 12/04/2018 - SHD โ€“ C:\Program Files\Windows Sidebar =>.Microsoft Corporation
                                      O43 - CFD: 15/06/2019 - HD โ€“ C:\Program Files\WindowsApps =>.Microsoft Corporation
                                      O43 - CFD: 12/04/2018 - D โ€“ C:\Program Files\WindowsPowerShell =>.Microsoft Corporation
                                      O43 - CFD: 02/03/2019 - D โ€“ C:\Program Files\WinRAR =>.win.rar GmbHยฎ
                                      O43 - CFD: 02/08/2018 - D โ€“ C:\Program Files (x86)\Adobe =>.Adobe Systems, Incorporatedยฎ
                                      O43 - CFD: 03/01/2019 - D โ€“ C:\Program Files (x86)\AMD =>.AMD
                                      O43 - CFD: 24/01/2018 - D โ€“ C:\Program Files (x86)\ASM104xUSB3 =>.ASMedia Technology Inc
                                      O43 - CFD: 24/01/2018 - D โ€“ C:\Program Files (x86)\ASM106xSATA =>.ASMedia Technology Inc
                                      O43 - CFD: 24/01/2018 - D โ€“ C:\Program Files (x86)\ASUS =>.ASUSTeK Computer Inc.ยฎ
                                      O43 - CFD: 01/04/2019 - D โ€“ C:\Program Files (x86)\BYOND =>.BYOND
                                      O43 - CFD: 15/09/2018 - D โ€“ C:\Program Files (x86)\Calibre2 =>.Kovid Goyal
                                      O43 - CFD: 03/11/2018 - D โ€“ C:\Program Files (x86)\Common Files =>.Microsoft Corporation
                                      O43 - CFD: 10/03/2018 - D โ€“ C:\Program Files (x86)\EasyAntiCheat =>.EasyAntiCheat
                                      O43 - CFD: 08/10/2018 - D โ€“ C:\Program Files (x86)\GOG Galaxy =>.GOG Sp. z o.o.ยฎ
                                      O43 - CFD: 11/02/2018 - D โ€“ C:\Program Files (x86)\Google =>.Google Incยฎ
                                      O43 - CFD: 04/03/2018 - D โ€“ C:\Program Files (x86)\GPU-Z =>.TechPowerUp LLCยฎ
                                      O43 - CFD: 15/06/2019 - D โ€“ C:\Program Files (x86)\Hard Disk Sentinel =>.H.D.S. Hungary
                                      O43 - CFD: 15/06/2019 - HD โ€“ C:\Program Files (x86)\InstallShield Installation Information =>.InstallShield
                                      O43 - CFD: 14/06/2019 - D โ€“ C:\Program Files (x86)\Internet Explorer =>.Microsoft Corporation
                                      O43 - CFD: 24/01/2018 - D โ€“ C:\Program Files (x86)\Java =>.Oracle
                                      O43 - CFD: 04/04/2019 - D โ€“ C:\Program Files (x86)\LogMeIn Hamachi =>.LogMeIn Entreprise
                                      O43 - CFD: 03/11/2018 - D โ€“ C:\Program Files (x86)\Microsoft Analysis Services =>.Microsoft Corporation
                                      O43 - CFD: 03/11/2018 - D โ€“ C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation
                                      O43 - CFD: 03/11/2018 - D โ€“ C:\Program Files (x86)\Microsoft SQL Server =>.Microsoft Corporation
                                      O43 - CFD: 02/08/2018 - D โ€“ C:\Program Files (x86)\Microsoft XNA =>.Microsoft Corporation
                                      O43 - CFD: 03/11/2018 - D โ€“ C:\Program Files (x86)\Microsoft.NET =>.Microsoft Corporation
                                      O43 - CFD: 26/05/2018 - D โ€“ C:\Program Files (x86)\MSBuild =>.Microsoft Corporation
                                      O43 - CFD: 07/05/2018 - [0] D โ€“ C:\Program Files (x86)\MSI =>.MSI
                                      O43 - CFD: 26/05/2018 - D โ€“ C:\Program Files (x86)\MSI Afterburner =>.Micro-Star International Co
                                      O43 - CFD: 15/06/2019 - D โ€“ C:\Program Files (x86)\NVIDIA Corporation =>.nVidia Corporation
                                      O43 - CFD: 11/11/2018 - D โ€“ C:\Program Files (x86)\Opera Mobile Emulator
                                      O43 - CFD: 25/02/2019 - [0] D โ€“ C:\Program Files (x86)\Origin Games =>.Electronic Arts, Inc.
                                      O43 - CFD: 15/06/2019 - D โ€“ C:\Program Files (x86)\Realtek =>.Realtek
                                      O43 - CFD: 26/05/2018 - D โ€“ C:\Program Files (x86)\Reference Assemblies =>.Microsoft Corporation
                                      O43 - CFD: 03/01/2019 - D โ€“ C:\Program Files (x86)\RivaTuner Statistics Server =>.RivaTuner
                                      O43 - CFD: 12/07/2018 - D โ€“ C:\Program Files (x86)\Simple Port Tester
                                      O43 - CFD: 03/12/2018 - D โ€“ C:\Program Files (x86)\Standalone Flash Player =>.Adobe Systems Incorporatedยฎ
                                      O43 - CFD: 18/05/2018 - D โ€“ C:\Program Files (x86)\Steam Library
                                      O43 - CFD: 01/08/2018 - D โ€“ C:\Program Files (x86)\SWF File Player
                                      O43 - CFD: 16/06/2019 - D โ€“ C:\Program Files (x86)\TeamViewer =>.TeamViewer GmbH
                                      O43 - CFD: 15/06/2019 - [0] HD โ€“ C:\Program Files (x86)\Temp =>.Microsoft Corporation
                                      O43 - CFD: 26/05/2018 - [0] HD โ€“ C:\Program Files (x86)\Uninstall Information =>.Microsoft Corporation
                                      O43 - CFD: 24/01/2018 - D โ€“ C:\Program Files (x86)\VideoLAN =>.VideoLan Team
                                      O43 - CFD: 20/10/2018 - D โ€“ C:\Program Files (x86)\VPN Unlimited
                                      O43 - CFD: 04/07/2018 - D โ€“ C:\Program Files (x86)\VulkanRT =>.LunarG, Inc
                                      O43 - CFD: 14/03/2019 - D โ€“ C:\Program Files (x86)\Windows Defender =>.Microsoft Corporation
                                      O43 - CFD: 12/04/2018 - D โ€“ C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
                                      O43 - CFD: 20/10/2018 - D โ€“ C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
                                      O43 - CFD: 12/04/2018 - D โ€“ C:\Program Files (x86)\Windows Multimedia Platform =>.Microsoft Corporation
                                      O43 - CFD: 12/04/2018 - D โ€“ C:\Program Files (x86)\windows nt =>.Microsoft Corporation
                                      O43 - CFD: 14/06/2018 - D โ€“ C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation
                                      O43 - CFD: 12/04/2018 - D โ€“ C:\Program Files (x86)\Windows Portable Devices =>.Microsoft Corporation
                                      O43 - CFD: 12/04/2018 - SHD โ€“ C:\Program Files (x86)\Windows Sidebar =>.Microsoft Corporation
                                      O43 - CFD: 12/04/2018 - D โ€“ C:\Program Files (x86)\WindowsPowerShell =>.Microsoft Corporation
                                      O43 - CFD: 16/02/2018 - HD โ€“ C:\Program Files (x86)\Zero G Registry =>.Flexera
                                      O43 - CFD: 26/05/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip =>.Igor Pavlov
                                      O43 - CFD: 12/04/2018 - RD โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
                                      O43 - CFD: 14/06/2019 - RD โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
                                      O43 - CFD: 14/03/2019 - RD โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
                                      O43 - CFD: 03/01/2019 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Ryzen Master
                                      O43 - CFD: 10/11/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android Studio =>.Google Inc.
                                      O43 - CFD: 26/05/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS =>.ASUS
                                      O43 - CFD: 20/06/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net =>.Games Software
                                      O43 - CFD: 15/09/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management =>.Kovid Goyal
                                      O43 - CFD: 12/01/2019 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner =>.Piriform Ltd
                                      O43 - CFD: 26/05/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Core Temp =>.Legitimate
                                      O43 - CFD: 03/01/2019 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID =>.CPUID Inc
                                      O43 - CFD: 26/05/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite =>.DAEMON Tools
                                      O43 - CFD: 26/05/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git =>.Global Information Technology
                                      O43 - CFD: 26/05/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com =>.GOG.com
                                      O43 - CFD: 07/07/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guild Wars 2 =>.NCsoft Corporation, Ltd.
                                      O43 - CFD: 02/07/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gwent [GOG.com]
                                      O43 - CFD: 14/06/2019 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hard Disk Sentinel =>.H.D.S. Hungary
                                      O43 - CFD: 24/06/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone =>.Blizzard Entertainment
                                      O43 - CFD: 26/07/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of the Storm =>.Games Software
                                      O43 - CFD: 26/05/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios =>.Hi-Rez Studios
                                      O43 - CFD: 16/06/2019 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64
                                      O43 - CFD: 08/12/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java =>.Oracle
                                      O43 - CFD: 08/12/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit =>.Oracle
                                      O43 - CFD: 04/04/2019 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi =>.LogMeIn Entreprise
                                      O43 - CFD: 12/04/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
                                      O43 - CFD: 03/11/2018 - RD โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-eszkรถzรถk =>.Microsoft Corporation
                                      O43 - CFD: 22/02/2019 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MTG Arena
                                      O43 - CFD: 08/12/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetBeans =>.NetBeans.org
                                      O43 - CFD: 23/03/2019 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager =>.Winstep Software Technologies
                                      O43 - CFD: 02/01/2019 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation =>.nVidia Corporation
                                      O43 - CFD: 11/11/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera Mobile Emulator
                                      O43 - CFD: 08/02/2019 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin =>.Electronic Arts, Inc.
                                      O43 - CFD: 11/07/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Phoenix Labs =>.Phoenix Labs
                                      O43 - CFD: 13/07/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SFK Standalone Patch
                                      O43 - CFD: 03/12/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Standalone Flash Player
                                      O43 - CFD: 12/04/2018 - RD โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp =>.Microsoft Corporation
                                      O43 - CFD: 01/08/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SWF File Player
                                      O43 - CFD: 12/04/2018 - RD โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
                                      O43 - CFD: 26/05/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN =>.VideoLan Team
                                      O43 - CFD: 20/10/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VPN Unlimited
                                      O43 - CFD: 01/03/2019 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
                                      O43 - CFD: 09/07/2018 - D โ€“ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft =>.Blizzard Entertainment
                                      O43 - CFD: 28/01/2018 - D โ€“ C:\ProgramData.mono =>.Legitimate
                                      O43 - CFD: 02/08/2018 - D โ€“ C:\ProgramData\Adobe =>.Adobe
                                      O43 - CFD: 02/02/2019 - D โ€“ C:\ProgramData\AMD AutoUpdate
                                      O43 - CFD: 26/05/2018 - [0] SHD โ€“ C:\ProgramData\Application Data =>.Microsoft Corporation
                                      O43 - CFD: 24/01/2018 - D โ€“ C:\ProgramData\ASUS =>.ASUS
                                      O43 - CFD: 24/01/2018 - D โ€“ C:\ProgramData\ASUS OC Profiles
                                      O43 - CFD: 24/01/2018 - D โ€“ C:\ProgramData\ASUS PowerControl Profiles
                                      O43 - CFD: 24/01/2018 - [0] SHD โ€“ C:\ProgramData\Asztal
                                      O43 - CFD: 10/04/2019 - D โ€“ C:\ProgramData\AVAST Software =>.AVAST Software
                                      O43 - CFD: 20/06/2018 - D โ€“ C:\ProgramData\Battle.net =>.Games Software
                                      O43 - CFD: 07/07/2018 - D โ€“ C:\ProgramData\Bitdefender Agent =>.Bitdefender
                                      O43 - CFD: 26/07/2018 - D โ€“ C:\ProgramData\Blizzard Entertainment =>.Blizzard Entertainment
                                      O43 - CFD: 16/02/2018 - D โ€“ C:\ProgramData\DAEMON Tools Lite =>.DAEMON Tools
                                      O43 - CFD: 24/01/2018 - [0] SHD โ€“ C:\ProgramData\Dokumentumok
                                      O43 - CFD: 17/02/2018 - D โ€“ C:\ProgramData\Elder Scrolls Online
                                      O43 - CFD: 14/06/2018 - D โ€“ C:\ProgramData\Electronic Arts =>.Electronic Arts
                                      O43 - CFD: 20/05/2018 - D โ€“ C:\ProgramData\Epic =>.Epic
                                      O43 - CFD: 03/03/2018 - D โ€“ C:\ProgramData\Git =>.Global Information Technology
                                      O43 - CFD: 02/03/2018 - D โ€“ C:\ProgramData\GOG.com =>.GOG.com
                                      O43 - CFD: 14/04/2018 - D โ€“ C:\ProgramData\Hi-Rez Studios =>.Hi-Rez Studios
                                      O43 - CFD: 17/02/2018 - D โ€“ C:\ProgramData\LogMeIn =>.LogMeIn
                                      O43 - CFD: 14/06/2019 - SD โ€“ C:\ProgramData\Microsoft =>.Microsoft Corporation
                                      O43 - CFD: 03/11/2018 - D โ€“ C:\ProgramData\Microsoft Help =>.Microsoft Corporation
                                      O43 - CFD: 26/05/2018 - D โ€“ C:\ProgramData\Microsoft OneDrive =>.Microsoft Corporation
                                      O43 - CFD: 16/06/2019 - D โ€“ C:\ProgramData\NVIDIA =>.nVidia Corporation
                                      O43 - CFD: 15/06/2019 - D โ€“ C:\ProgramData\NVIDIA Corporation =>.nVidia Corporation
                                      O43 - CFD: 24/01/2018 - D โ€“ C:\ProgramData\Oracle =>.Oracle
                                      O43 - CFD: 28/02/2019 - D โ€“ C:\ProgramData\Origin =>.Electronic Arts, Inc.
                                      O43 - CFD: 25/06/2018 - D โ€“ C:\ProgramData\Overwolf =>.Overwolf
                                      O43 - CFD: 02/08/2018 - D โ€“ C:\ProgramData\Package Cache =>.Microsoft Corporation
                                      O43 - CFD: 08/02/2019 - D โ€“ C:\ProgramData\Packages =>.Microsoft Corporation
                                      O43 - CFD: 16/06/2019 - D โ€“ C:\ProgramData\regid.1991-06.com.microsoft =>.Microsoft Corporation
                                      O43 - CFD: 24/01/2018 - [0] SHD โ€“ C:\ProgramData\Sablonok
                                      O43 - CFD: 12/04/2018 - [0] D โ€“ C:\ProgramData\SoftwareDistribution =>.Microsoft Corporation
                                      O43 - CFD: 26/05/2018 - [0] SHD โ€“ C:\ProgramData\Start Menu =>.Microsoft Corporation
                                      O43 - CFD: 13/07/2018 - D โ€“ C:\ProgramData\Tunngle =>.Tunngle.net
                                      O43 - CFD: 26/05/2018 - D โ€“ C:\ProgramData\USOPrivate =>.Microsoft Corporation
                                      O43 - CFD: 26/05/2018 - D โ€“ C:\ProgramData\USOShared =>.Microsoft Corporation
                                      O43 - CFD: 12/04/2018 - D โ€“ C:\ProgramData\WindowsHolographicDevices =>.Microsoft Corporation
                                      O43 - CFD: 13/07/2018 - D โ€“ C:\ProgramData\X360CE =>.Microsoft Corporation
                                      O43 - CFD: 13/07/2018 - D โ€“ C:\ProgramData\Xfire
                                      O43 - CFD: 02/08/2018 - D โ€“ C:\Program Files (x86)\Common Files\Adobe =>.Adobe
                                      O43 - CFD: 09/03/2019 - D โ€“ C:\Program Files (x86)\Common Files\BattlEye =>.BattlEye
                                      O43 - CFD: 03/11/2018 - D โ€“ C:\Program Files (x86)\Common Files\DESIGNER =>.Designer
                                      O43 - CFD: 24/01/2018 - D โ€“ C:\Program Files (x86)\Common Files\InstallShield =>.InstallShield
                                      O43 - CFD: 24/01/2018 - D โ€“ C:\Program Files (x86)\Common Files\Java =>.Oracle
                                      O43 - CFD: 03/11/2018 - D โ€“ C:\Program Files (x86)\Common Files\microsoft shared =>.Microsoft Corporation
                                      O43 - CFD: 16/03/2019 - D โ€“ C:\Program Files (x86)\Common Files\Overwolf =>.Overwolf
                                      O43 - CFD: 12/04/2018 - D โ€“ C:\Program Files (x86)\Common Files\Services =>.Microsoft Corporation
                                      O43 - CFD: 15/06/2019 - D โ€“ C:\Program Files (x86)\Common Files\Steam =>.Steam Games
                                      O43 - CFD: 03/11/2018 - D โ€“ C:\Program Files (x86)\Common Files\system =>.Microsoft Corporation
                                      O43 - CFD: 11/02/2018 - DC โ€“ C:\Users\User\AppData\Roaming.MesterMC.hu
                                      O43 - CFD: 29/10/2018 - DC โ€“ C:\Users\User\AppData\Roaming.minecraft =>.Microsoft Corporation
                                      O43 - CFD: 28/09/2018 - DC โ€“ C:\Users\User\AppData\Roaming.mono =>.Legitimate
                                      O43 - CFD: 24/06/2018 - DC โ€“ C:\Users\User\AppData\Roaming\7DaysToDie =>.Games Software
                                      O43 - CFD: 02/08/2018 - DC โ€“ C:\Users\User\AppData\Roaming\Adobe =>.Adobe
                                      O43 - CFD: 02/08/2018 - DC โ€“ C:\Users\User\AppData\Roaming\Anwinity
                                      O43 - CFD: 29/09/2018 - DC โ€“ C:\Users\User\AppData\Roaming\Battle.net =>.Games Software
                                      O43 - CFD: 02/07/2018 - DC โ€“ C:\Users\User\AppData\Roaming\Battlerite
                                      O43 - CFD: 15/09/2018 - DC โ€“ C:\Users\User\AppData\Roaming\calibre =>.Kovid Goyal
                                      O43 - CFD: 12/01/2019 - DC โ€“ C:\Users\User\AppData\Roaming\DAEMON Tools Lite =>.DAEMON Tools
                                      O43 - CFD: 16/06/2019 - DC โ€“ C:\Users\User\AppData\Roaming\discord =>.GitHub
                                      O43 - CFD: 28/04/2018 - DC โ€“ C:\Users\User\AppData\Roaming\dvdcss =>.VideoLan Team
                                      O43 - CFD: 07/05/2018 - [0] DC โ€“ C:\Users\User\AppData\Roaming\Easeware =>.Easeware
                                      O43 - CFD: 01/06/2019 - DC โ€“ C:\Users\User\AppData\Roaming\EasyAntiCheat =>.EasyAntiCheat
                                      O43 - CFD: 10/03/2018 - DC โ€“ C:\Users\User\AppData\Roaming\Fatshark =>.Fatshark
                                      O43 - CFD: 07/05/2018 - DC โ€“ C:\Users\User\AppData\Roaming\FiraxisLive =>.Firaxis
                                      O43 - CFD: 01/02/2019 - DC โ€“ C:\Users\User\AppData\Roaming\GameSparks =>.Ignite Realtime
                                      O43 - CFD: 10/11/2018 - [0] DC โ€“ C:\Users\User\AppData\Roaming\Google =>.Google
                                      O43 - CFD: 07/07/2018 - DC โ€“ C:\Users\User\AppData\Roaming\Guild Wars 2 =>.NCsoft Corporation, Ltd.
                                      O43 - CFD: 14/06/2019 - DC โ€“ C:\Users\User\AppData\Roaming\Hard Disk Sentinel =>.H.D.S. Hungary
                                      O43 - CFD: 23/04/2019 - DC โ€“ C:\Users\User\AppData\Roaming\HearthstoneDeckTrack er =>.GitHub
                                      O43 - CFD: 17/02/2018 - DC โ€“ C:\Users\User\AppData\Roaming\java =>.Oracle
                                      O43 - CFD: 08/10/2018 - DC โ€“ C:\Users\User\AppData\Roaming\Kalypso Media =>.Kalypso Media
                                      O43 - CFD: 21/09/2018 - DC โ€“ C:\Users\User\AppData\Roaming\LucasArts =>.LucasArts
                                      O43 - CFD: 01/08/2018 - DC โ€“ C:\Users\User\AppData\Roaming\Macromedia =>.Macromedia
                                      O43 - CFD: 28/12/2018 - SDC โ€“ C:\Users\User\AppData\Roaming\Microsoft =>.Microsoft Corporation
                                      O43 - CFD: 07/05/2018 - DC โ€“ C:\Users\User\AppData\Roaming\ModLauncherWPF =>.Games Software
                                      O43 - CFD: 23/02/2018 - DC โ€“ C:\Users\User\AppData\Roaming\MTGArena
                                      O43 - CFD: 08/12/2018 - DC โ€“ C:\Users\User\AppData\Roaming\NetBeans =>.NetBeans.org
                                      O43 - CFD: 12/05/2018 - DC โ€“ C:\Users\User\AppData\Roaming\NVIDIA =>.nVidia Corporation
                                      O43 - CFD: 27/02/2019 - DC โ€“ C:\Users\User\AppData\Roaming\Origin =>.Electronic Arts, Inc.
                                      O43 - CFD: 18/05/2019 - DC โ€“ C:\Users\User\AppData\Roaming\RenPy =>.RenPy Games
                                      O43 - CFD: 02/08/2018 - DC โ€“ C:\Users\User\AppData\Roaming\Rogue Legacy
                                      O43 - CFD: 28/02/2019 - DC โ€“ C:\Users\User\AppData\Roaming\Strive
                                      O43 - CFD: 24/01/2018 - DC โ€“ C:\Users\User\AppData\Roaming\Sun =>.Oracle
                                      O43 - CFD: 12/01/2019 - DC โ€“ C:\Users\User\AppData\Roaming\TeamViewer =>.TeamViewer GmbH
                                      O43 - CFD: 22/10/2018 - DC โ€“ C:\Users\User\AppData\Roaming\The Creative Assembly =>.The Creative Assembly
                                      O43 - CFD: 16/06/2019 - DC โ€“ C:\Users\User\AppData\Roaming\uTorrent
                                      O43 - CFD: 20/04/2019 - DC โ€“ C:\Users\User\AppData\Roaming\vlc =>.VideoLan Team
                                      O43 - CFD: 06/05/2018 - DC โ€“ C:\Users\User\AppData\Roaming\WinRAR =>.WinRAR
                                      O43 - CFD: 13/07/2018 - DC โ€“ C:\Users\User\AppData\Roaming\Xfire
                                      O43 - CFD: 17/06/2019 - DC โ€“ C:\Users\User\AppData\Roaming\ZHP =>.Nicolas Coolman
                                      O43 - CFD: 14/04/2018 - DC โ€“ C:\Users\User\AppData\Local\7.b - A jฤ‚ห‡tฤ‚ยฉk DEMฤ‚โ€œ
                                      O43 - CFD: 24/08/2018 - DC โ€“ C:\Users\User\AppData\Local\Adobe =>.Adobe
                                      O43 - CFD: 26/05/2018 - [0] SHD โ€“ C:\Users\User\AppData\Local\Application Data =>.Microsoft Corporation
                                      O43 - CFD: 11/07/2018 - DC โ€“ C:\Users\User\AppData\Local\Archon
                                      O43 - CFD: 16/06/2019 - DC โ€“ C:\Users\User\AppData\Local\Battle.net =>.Games Software
                                      O43 - CFD: 17/11/2018 - DC โ€“ C:\Users\User\AppData\Local\BattlEye =>.BattlEye
                                      O43 - CFD: 14/06/2019 - DC โ€“ C:\Users\User\AppData\Local\BitTorrentHelper
                                      O43 - CFD: 23/03/2019 - DC โ€“ C:\Users\User\AppData\Local\Black_Tree_Gaming =>.Black Tree Gaming Ltd
                                      O43 - CFD: 30/04/2019 - DC โ€“ C:\Users\User\AppData\Local\Blizzard =>.Blizzard
                                      O43 - CFD: 30/04/2019 - DC โ€“ C:\Users\User\AppData\Local\Blizzard Entertainment =>.Blizzard Entertainment
                                      O43 - CFD: 15/09/2018 - [0] DC โ€“ C:\Users\User\AppData\Local\calibre-cache =>.Kovid Goyal
                                      O43 - CFD: 28/01/2018 - DC โ€“ C:\Users\User\AppData\Local\CEF =>.CEF
                                      O43 - CFD: 12/01/2019 - DC โ€“ C:\Users\User\AppData\Local\Comms =>.Microsoft Corporation
                                      O43 - CFD: 14/06/2018 - DC โ€“ C:\Users\User\AppData\Local\ConnectedDevicesPlatfo rm =>.Microsoft Corporation
                                      O43 - CFD: 16/06/2019 - DC โ€“ C:\Users\User\AppData\Local\CrashDumps =>.Microsoft Corporation
                                      O43 - CFD: 07/05/2018 - DC โ€“ C:\Users\User\AppData\Local\CrashReportClient
                                      O43 - CFD: 15/06/2019 - DC โ€“ C:\Users\User\AppData\Local\D3DSCache =>.Legitimate
                                      O43 - CFD: 24/01/2018 - [0] DC โ€“ C:\Users\User\AppData\Local\DBG =>.DBG
                                      O43 - CFD: 24/12/2018 - DC โ€“ C:\Users\User\AppData\Local\DeadByDaylight =>.Games Software
                                      O43 - CFD: 10/05/2019 - [0] DC โ€“ C:\Users\User\AppData\Local\Diagnostics =>.Microsoft Corporation
                                      O43 - CFD: 15/06/2019 - DC โ€“ C:\Users\User\AppData\Local\Discord =>.GitHub
                                      O43 - CFD: 16/02/2018 - DC โ€“ C:\Users\User\AppData\Local\Disc_Soft_Ltd =>.Disc Soft Ltd
                                      O43 - CFD: 12/01/2019 - [0] DC โ€“ C:\Users\User\AppData\Local\Downloaded Installations =>.Microsoft Corporation
                                      O43 - CFD: 24/06/2018 - DC โ€“ C:\Users\User\AppData\Local\DunDefLauncher
                                      O43 - CFD: 30/04/2019 - [0] DC โ€“ C:\Users\User\AppData\Local\ElevatedDiagnostics =>.Microsoft Corporation
                                      O43 - CFD: 16/03/2019 - DC โ€“ C:\Users\User\AppData\Local\enderal
                                      O43 - CFD: 10/03/2019 - DC โ€“ C:\Users\User\AppData\Local\FallenDoll
                                      O43 - CFD: 28/12/2018 - DC โ€“ C:\Users\User\AppData\Local\Foxhole
                                      O43 - CFD: 02/03/2018 - DC โ€“ C:\Users\User\AppData\Local\GOG.com =>.GOG.com
                                      O43 - CFD: 11/02/2018 - DC โ€“ C:\Users\User\AppData\Local\Google =>.Google
                                      O43 - CFD: 04/03/2018 - DC โ€“ C:\Users\User\AppData\Local\GoTo Opener
                                      O43 - CFD: 19/05/2018 - DC โ€“ C:\Users\User\AppData\Local\GoToAssist Remote Support Expert
                                      O43 - CFD: 21/04/2019 - DC โ€“ C:\Users\User\AppData\Local\HearthSim =>.HearthSim
                                      O43 - CFD: 20/04/2019 - DC โ€“ C:\Users\User\AppData\Local\HearthstoneDeckTracker =>.GitHub
                                      O43 - CFD: 26/05/2018 - [0] SHD โ€“ C:\Users\User\AppData\Local\History =>.Microsoft Corporation
                                      O43 - CFD: 01/06/2019 - DC โ€“ C:\Users\User\AppData\Local\HoneyselectItemResolve r
                                      O43 - CFD: 14/04/2018 - DC โ€“ C:\Users\User\AppData\Local\Jatek
                                      O43 - CFD: 14/08/2018 - DC โ€“ C:\Users\User\AppData\Local\KeepSolid Inc
                                      O43 - CFD: 17/02/2018 - DC โ€“ C:\Users\User\AppData\Local\LogMeIn =>.LogMeIn
                                      O43 - CFD: 16/06/2019 - DC โ€“ C:\Users\User\AppData\Local\LogMeIn Hamachi =>.LogMeIn Entreprise
                                      O43 - CFD: 19/05/2018 - DC โ€“ C:\Users\User\AppData\Local\LogMeInInc =>.LogMeIn Entreprise
                                      O43 - CFD: 13/04/2018 - DC โ€“ C:\Users\User\AppData\Local\MaelstromV2
                                      O43 - CFD: 14/06/2019 - DC โ€“ C:\Users\User\AppData\Local\Microsoft =>.Microsoft Corporation
                                      O43 - CFD: 03/11/2018 - [0] DC โ€“ C:\Users\User\AppData\Local\Microsoft Help =>.Microsoft Corporation
                                      O43 - CFD: 24/01/2018 - DC โ€“ C:\Users\User\AppData\Local\MicrosoftEdge =>.Microsoft Corporation
                                      O43 - CFD: 01/05/2019 - DC โ€“ C:\Users\User\AppData\Local\Mordhau
                                      O43 - CFD: 08/12/2018 - DC โ€“ C:\Users\User\AppData\Local\NetBeans =>.NetBeans.org
                                      O43 - CFD: 18/05/2019 - DC โ€“ C:\Users\User\AppData\Local\ninetyss
                                      O43 - CFD: 15/06/2019 - DC โ€“ C:\Users\User\AppData\Local\NVIDIA =>.nVidia Corporation
                                      O43 - CFD: 20/10/2018 - DC โ€“ C:\Users\User\AppData\Local\NVIDIA Corporation =>.nVidia Corporation
                                      O43 - CFD: 11/11/2018 - DC โ€“ C:\Users\User\AppData\Local\Opera =>.Opera Software
                                      O43 - CFD: 08/02/2019 - DC โ€“ C:\Users\User\AppData\Local\Origin =>.Electronic Arts, Inc.
                                      O43 - CFD: 05/08/2018 - DC โ€“ C:\Users\User\AppData\Local\osu! =>.osu! Game
                                      O43 - CFD: 13/01/2019 - DC โ€“ C:\Users\User\AppData\Local\Overwolf =>.Overwolf
                                      O43 - CFD: 15/06/2019 - DC โ€“ C:\Users\User\AppData\Local\Packages =>.Microsoft Corporation
                                      O43 - CFD: 28/01/2018 - [0] DC โ€“ C:\Users\User\AppData\Local\PeerDistRepub =>.Microsoft Corporation
                                      O43 - CFD: 15/06/2019 - DC โ€“ C:\Users\User\AppData\Local\PlaceholderTileLogoFol der =>.Microsoft Corporation
                                      O43 - CFD: 03/02/2018 - DC โ€“ C:\Users\User\AppData\Local\Programs =>.Microsoft Corporation
                                      O43 - CFD: 26/05/2018 - DC โ€“ C:\Users\User\AppData\Local\Publishers =>.Microsoft Corporation
                                      O43 - CFD: 07/05/2018 - DC โ€“ C:\Users\User\AppData\Local\RadeonInstaller
                                      O43 - CFD: 17/06/2019 - DC โ€“ C:\Users\User\AppData\Local\Radiant
                                      O43 - CFD: 13/07/2018 - DC โ€“ C:\Users\User\AppData\Local\SFK_Team_Inc
                                      O43 - CFD: 16/03/2019 - [0] DC โ€“ C:\Users\User\AppData\Local\Skyrim =>.Skyrim Games
                                      O43 - CFD: 23/03/2019 - DC โ€“ C:\Users\User\AppData\Local\Skyrim Special Edition =>.Nogenious Skyrim Game
                                      O43 - CFD: 15/06/2019 - DC โ€“ C:\Users\User\AppData\Local\SquirrelTemp =>.Squirrels
                                      O43 - CFD: 28/01/2018 - DC โ€“ C:\Users\User\AppData\Local\Steam =>.Steam Games
                                      O43 - CFD: 17/06/2019 - DC โ€“ C:\Users\User\AppData\Local\Temp =>.Microsoft Corporation
                                      O43 - CFD: 26/05/2018 - [0] SHD โ€“ C:\Users\User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
                                      O43 - CFD: 08/09/2018 - DC โ€“ C:\Users\User\AppData\Local\THQ =>.THQ
                                      O43 - CFD: 09/03/2019 - DC โ€“ C:\Users\User\AppData\Local\Ubisoft Game Launcher =>.Ubisoft
                                      O43 - CFD: 17/06/2019 - DC โ€“ C:\Users\User\AppData\Local\UnrealEngine =>.Unreal Software
                                      O43 - CFD: 20/05/2018 - DC โ€“ C:\Users\User\AppData\Local\UnrealEngineLauncher =>.Unreal Software
                                      O43 - CFD: 26/07/2018 - DC โ€“ C:\Users\User\AppData\Local\Victory =>.Legitimate
                                      O43 - CFD: 04/07/2018 - DC โ€“ C:\Users\User\AppData\Local\VirtualStore =>.Microsoft Corporation
                                      O43 - CFD: 11/03/2018 - DC โ€“ C:\Users\User\AppData\Local\Warframe =>.Digital Extremes
                                      O43 - CFD: 11/02/2018 - DC โ€“ C:\Users\User\AppData\Local\WitchIt
                                      O43 - CFD: 17/06/2019 - DC โ€“ C:\Users\User\AppData\Local\ZHP =>.Nicolas Coolman
                                      O43 - CFD: 03/02/2018 - [0] DC โ€“ C:\Users\User\AppData\Local\Programs\Common =>.Microsoft Corporation
                                      O43 - CFD: 02/08/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\Adobe =>.Adobe
                                      O43 - CFD: 28/01/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\Adriaan de Jongh
                                      O43 - CFD: 26/06/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\Berserk Games
                                      O43 - CFD: 01/06/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\BetaDwarf ApS
                                      O43 - CFD: 29/07/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\Blacklight Interactive
                                      O43 - CFD: 20/06/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\Blizzard Entertainment =>.Blizzard Entertainment
                                      O43 - CFD: 19/05/2019 - DC โ€“ C:\Users\User\AppData\LocalLow\Brozeks&CO
                                      O43 - CFD: 02/03/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\CDProjektRED
                                      O43 - CFD: 13/07/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\Dire Wolf Digital
                                      O43 - CFD: 26/06/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\Dodge Roll
                                      O43 - CFD: 05/04/2019 - DC โ€“ C:\Users\User\AppData\LocalLow\Hopoo Games, LLC =>.Hopoo Games, LLC
                                      O43 - CFD: 08/06/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\Landfall Games
                                      O43 - CFD: 24/06/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\League of Geeks
                                      O43 - CFD: 18/05/2019 - DC โ€“ C:\Users\User\AppData\LocalLow\LOK Team
                                      O43 - CFD: 08/04/2018 - SDC โ€“ C:\Users\User\AppData\LocalLow\Microsoft =>.Microsoft Corporation
                                      O43 - CFD: 21/05/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\noio
                                      O43 - CFD: 08/04/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\Obsidian Entertainment =>.Obsidian Entertainment
                                      O43 - CFD: 08/12/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\Oracle =>.Oracle
                                      O43 - CFD: 08/10/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\Realmforge Studios GmbH
                                      O43 - CFD: 24/01/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\Sun =>.Oracle
                                      O43 - CFD: 08/04/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\Temp =>.Microsoft Corporation
                                      O43 - CFD: 27/12/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\Texel Raptor
                                      O43 - CFD: 27/05/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\Unity =>.Unity
                                      O43 - CFD: 16/06/2019 - [0] DC โ€“ C:\Users\User\AppData\LocalLow\uTorrent
                                      O43 - CFD: 23/02/2018 - DC โ€“ C:\Users\User\AppData\LocalLow\Wizards Of The Coast =>.Wizards of the Coast
                                      O43 - CFD: 16/06/2019 - DC โ€“ C:\Users\User\Desktop\HiJackThis =>.Trend Micro
                                      O43 - CFD: 01/09/2018 - DC โ€“ C:\Users\User\Desktop\hs
                                      O43 - CFD: 09/10/2018 - DC โ€“ C:\Users\User\Desktop\k
                                      O43 - CFD: 02/08/2018 - DC โ€“ C:\Users\User\Desktop\kartya
                                      O43 - CFD: 31/05/2019 - DC โ€“ C:\Users\User\Desktop\lul
                                      O43 - CFD: 03/03/2018 - DC โ€“ C:\Users\User\Desktop\mc
                                      O43 - CFD: 03/03/2018 - DC โ€“ C:\Users\User\Desktop\mc2
                                      O43 - CFD: 16/06/2019 - DC โ€“ C:\Users\User\Desktop\OpenHardwareMonitor
                                      O43 - CFD: 19/02/2019 - DC โ€“ C:\Users\User\Desktop\Realtek_Audio(v8619) =>.Realtek Semiconductor Corp.
                                      O43 - CFD: 28/01/2018 - DC โ€“ C:\Users\User\Desktop\Saves
                                      O43 - CFD: 07/04/2018 - DC โ€“ C:\Users\User\Desktop\server
                                      O43 - CFD: 07/04/2018 - DC โ€“ C:\Users\User\Desktop\server mรกsolata
                                      O43 - CFD: 06/05/2018 - DC โ€“ C:\Users\User\Desktop\server mรกsolata (2)
                                      O43 - CFD: 18/06/2018 - DC โ€“ C:\Users\User\Desktop\server mรกsolata (3)
                                      O43 - CFD: 28/01/2018 - DC โ€“ C:\Users\User\Desktop\soundboard
                                      O43 - CFD: 04/03/2018 - DC โ€“ C:\Users\User\Desktop\world
                                      O43 - CFD: 12/01/2019 - DC โ€“ C:\Users\User\Desktop\รšj mappa
                                      O43 - CFD: 23/03/2019 - DC โ€“ C:\Users\User\Desktop\รšj mappa (2)
                                      O43 - CFD: 15/06/2019 - DC โ€“ C:\Users\User\Desktop\รšj mappa (3)
                                      O43 - CFD: 12/04/2018 - RDC โ€“ C:\Users\User\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Accessibility =>.Microsoft Corporation
                                      O43 - CFD: 26/05/2018 - RDC โ€“ C:\Users\User\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Accessories =>.Microsoft Corporation
                                      O43 - CFD: 14/06/2019 - RDC โ€“ C:\Users\User\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Administrative Tools =>.Administrative Tools
                                      O43 - CFD: 15/06/2019 - DC โ€“ C:\Users\User\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Discord Inc =>.Discord Inc
                                      O43 - CFD: 20/04/2019 - DC โ€“ C:\Users\User\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\HearthSim =>.HearthSim
                                      O43 - CFD: 12/04/2018 - DC โ€“ C:\Users\User\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Maintenance =>.Microsoft Corporation
                                      O43 - CFD: 26/05/2018 - DC โ€“ C:\Users\User\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\MSI Afterburner =>.Micro-Star International Co
                                      O43 - CFD: 25/06/2018 - DC โ€“ C:\Users\User\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Overwolf =>.Overwolf
                                      O43 - CFD: 26/05/2018 - DC โ€“ C:\Users\User\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\RivaTuner Statistics Server =>.RivaTuner
                                      O43 - CFD: 12/07/2018 - DC โ€“ C:\Users\User\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Simple Port Tester
                                      O43 - CFD: 14/06/2019 - RDC โ€“ C:\Users\User\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup =>.Microsoft Corporation
                                      O43 - CFD: 27/06/2018 - DC โ€“ C:\Users\User\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Survivors Viy
                                      O43 - CFD: 12/04/2018 - RDC โ€“ C:\Users\User\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\System Tools =>.Microsoft Corporation
                                      O43 - CFD: 26/05/2018 - DC โ€“ C:\Users\User\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\The Elder Scrolls Online
                                      O43 - CFD: 13/07/2018 - DC โ€“ C:\Users\User\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Ubisoft =>.Ubisoft
                                      O43 - CFD: 12/04/2018 - RDC โ€“ C:\Users\User\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Windows PowerShell =>.Microsoft Corporation
                                      O43 - CFD: 01/03/2019 - DC โ€“ C:\Users\User\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\WinRAR =>.WinRAR
                                      O43 - CFD: 26/05/2018 - [0] SHD โ€“ C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation
                                      O43 - CFD: 26/05/2018 - [0] SHD โ€“ C:\Users\Default\AppData\Local\History =>.Microsoft Corporation
                                      O43 - CFD: 04/04/2019 - D โ€“ C:\Users\Default\AppData\Local\LogMeIn Hamachi =>.LogMeIn Entreprise
                                      O43 - CFD: 12/04/2018 - D โ€“ C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation
                                      O43 - CFD: 12/04/2018 - [0] D โ€“ C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation
                                      O43 - CFD: 26/05/2018 - [0] SHD โ€“ C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
                                      O43 - CFD: 26/05/2018 - [0] SHD โ€“ C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation
                                      O43 - CFD: 26/05/2018 - [0] SHD โ€“ C:\Users\Default User\AppData\Local\History =>.Microsoft Corporation
                                      O43 - CFD: 04/04/2019 - D โ€“ C:\Users\Default User\AppData\Local\LogMeIn Hamachi =>.LogMeIn Entreprise
                                      O43 - CFD: 12/04/2018 - D โ€“ C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation
                                      O43 - CFD: 12/04/2018 - [0] D โ€“ C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation
                                      O43 - CFD: 26/05/2018 - [0] SHD โ€“ C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
                                      O43 - CFD: 18/11/2018 - D โ€“ C:\WINDOWS\System32\Config\systemprofile\AppData\L ocal\CrashDumps =>.Microsoft Corporation
                                      O43 - CFD: 18/11/2018 - [0] D โ€“ C:\WINDOWS\System32\Config\systemprofile\AppData\L ocal\DBG =>.DBG
                                      O43 - CFD: 26/05/2018 - D โ€“ C:\WINDOWS\System32\Config\systemprofile\AppData\L ocal\Microsoft =>.Microsoft Corporation
                                      O43 - CFD: 04/07/2018 - [0] โ€“ C:\WINDOWS\System32\Config\systemprofile\AppData\L ocal\Overwolf =>.Overwolf
                                      O43 - CFD: 01/06/2018 - [0] D โ€“ C:\WINDOWS\System32\Config\systemprofile\AppData\L ocal\PeerDistRepub =>.Microsoft Corporation
                                      O43 - CFD: 22/08/2018 - D โ€“ C:\WINDOWS\System32\Config\systemprofile\AppData\R oaming\Microsoft =>.Microsoft Corporation

                                      โ€”\ ShellIconOverlayIdentifiers (SIOI) (5) - 0s
                                      O106 - SIOI: [ SkyDrivePro1 (ErrorConflict)] - {8BA85C75-763B-4103-94EB-9470F12FE0F7}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) โ€“ C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL =>.Microsoft Corporationยฎ
                                      O106 - SIOI: [ SkyDrivePro2 (SyncInProgress)] - {CD55129A-B1A1-438E-A425-CEBC7DC684EE}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) โ€“ C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL =>.Microsoft Corporationยฎ
                                      O106 - SIOI: [ SkyDrivePro3 (InSync)] - {E768CD3B-BDDC-436D-9C13-E1B39CA257B1}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) โ€“ C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL =>.Microsoft Corporationยฎ
                                      O106 - SIOI: [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - Windows emelt szintลฑ tรกrolรณ felรผletbล‘vรญtmรฉn.) โ€“ C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation
                                      O106 - SIOI: [Offline Files] - {4E77131D-3629-431c-9818-C5679DC83E81}. (.Microsoft Corporation - Client Side Caching UI.) โ€“ C:\WINDOWS\System32\cscui.dll =>.Microsoft Corporation

                                      โ€”\ Search Context Menu Handlers (SCMH) (35) - 2s
                                      O108 - CMH1: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Igor Pavlov - 7-Zip Shell Extension.) โ€“ C:\Program Files\7-Zip\7-zip.dll =>.Igor Pavlov
                                      O108 - CMH1: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - A Microsoft Security Client felรผletbล‘vรญtmรฉn.) โ€“ C:\Program Files\Windows Defender\shellext.dll =>.Microsoft Windowsยฎ
                                      O108 - CMH1: ModernSharing [64Bits] - {e2bf9676-5f8f-435c-97eb-11607a5bedf7} . (.Microsoft Corporation - Felรผletbล‘vรญtmรฉnyek megosztรกshoz.) โ€“ C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
                                      O108 - CMH1: Open With [64Bits] - {09799AFB-AD67-11d1-ABCD-00C04FC30936} . (.Microsoft Corporation - Windows felรผlet - kรถzรถs DLL.) โ€“ C:\Windows\System32\shell32.dll =>.Microsoft Windowsยฎ
                                      O108 - CMH1: Open With EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - Windows felรผlet - kรถzรถs DLL.) โ€“ C:\Windows\System32\shell32.dll =>.Microsoft Windowsยฎ
                                      O108 - CMH1: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Felรผletbล‘vรญtmรฉnyek megosztรกshoz.) โ€“ C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
                                      O108 - CMH1: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) โ€“ C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbHยฎ
                                      O108 - CMH1: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
                                      O108 - CMH1: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Microsoft (C) Munkahelyi mappรกk felรผletbล‘vรญ.) โ€“ C:\Windows\System32\WorkfoldersShell.dll =>.Microsoft Corporation
                                      O108 - CMH2: NvAppShExt [64Bits] - {A929C4CE-FD36-4270-B4F5-34ECAC5BD63C} . (.NVIDIA Corporation - NVIDIA Shell Extensions.) โ€“ C:\WINDOWS\system32\nv3dappshext.dll =>.NVIDIA Corporation
                                      O108 - CMH2: OpenContainingFolderMenu [64Bits] - {37ea3a21-7493-4208-a011-7f9ea79ce9f5} . (.Microsoft Corporation - Windows felรผlet - kรถzรถs DLL.) โ€“ C:\Windows\System32\shell32.dll =>.Microsoft Windowsยฎ
                                      O108 - CMH2: OpenGLShExt [64Bits] - {E97DEC16-A50D-49bb-AE24-CF682282E08D} . (.NVIDIA Corporation - NVIDIA Shell Extensions.) โ€“ C:\WINDOWS\system32\nv3dappshext.dll =>.NVIDIA Corporation
                                      O108 - CMH2: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) โ€“ C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbHยฎ
                                      O108 - CMH2: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
                                      O108 - CMH3: CopyAsPathMenu [64Bits] - {f3d06e7c-1e45-4a26-847e-f9fcdee59be0} . (.Microsoft Corporation - Windows felรผlet - kรถzรถs DLL.) โ€“ C:\Windows\System32\shell32.dll =>.Microsoft Windowsยฎ
                                      O108 - CMH3: SendTo [64Bits] - {7BA4C740-9E81-11CF-99D3-00AA004AE837} . (.Microsoft Corporation - Windows felรผlet - kรถzรถs DLL.) โ€“ C:\Windows\System32\shell32.dll =>.Microsoft Windowsยฎ
                                      O108 - CMH4: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Igor Pavlov - 7-Zip Shell Extension.) โ€“ C:\Program Files\7-Zip\7-zip.dll =>.Igor Pavlov
                                      O108 - CMH4: EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - Windows felรผlet - kรถzรถs DLL.) โ€“ C:\Windows\System32\shell32.dll =>.Microsoft Windowsยฎ
                                      O108 - CMH4: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - A Microsoft Security Client felรผletbล‘vรญtmรฉn.) โ€“ C:\Program Files\Windows Defender\shellext.dll =>.Microsoft Windowsยฎ
                                      O108 - CMH4: Offline Files [64Bits] - {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} . (.Microsoft Corporation - Client Side Caching UI.) โ€“ C:\WINDOWS\System32\cscui.dll =>.Microsoft Corporation
                                      O108 - CMH4: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Felรผletbล‘vรญtmรฉnyek megosztรกshoz.) โ€“ C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
                                      O108 - CMH4: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Microsoft (C) Munkahelyi mappรกk felรผletbล‘vรญ.) โ€“ C:\Windows\System32\WorkfoldersShell.dll =>.Microsoft Corporation
                                      O108 - CMH5: New [64Bits] - {D969A300-E7FF-11d0-A93B-00A0C90F2719} . (.Microsoft Corporation - Windows felรผlet - kรถzรถs DLL.) โ€“ C:\Windows\System32\shell32.dll =>.Microsoft Windowsยฎ
                                      O108 - CMH5: NvCplDesktopContext [64Bits] - {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} . (.NVIDIA Corporation - NVIDIA Display Shell Extension.) โ€“ C:\WINDOWS\System32\nvshext.dll =>.NVIDIA Corporation
                                      O108 - CMH5: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Felรผletbล‘vรญtmรฉnyek megosztรกshoz.) โ€“ C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
                                      O108 - CMH5: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Microsoft (C) Munkahelyi mappรกk felรผletbล‘vรญ.) โ€“ C:\Windows\System32\WorkfoldersShell.dll =>.Microsoft Corporation
                                      O108 - CMH6: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Igor Pavlov - 7-Zip Shell Extension.) โ€“ C:\Program Files\7-Zip\7-zip.dll =>.Igor Pavlov
                                      O108 - CMH6: Library Location [64Bits] - {3dad6c5d-2167-4cae-9914-f99e41c12cfa} . (.Microsoft Corporation - Windows felรผlet - kรถzรถs DLL.) โ€“ C:\Windows\System32\shell32.dll =>.Microsoft Windowsยฎ
                                      O108 - CMH6: Offline Files [64Bits] - {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} . (.Microsoft Corporation - Client Side Caching UI.) โ€“ C:\WINDOWS\System32\cscui.dll =>.Microsoft Corporation
                                      O108 - CMH6: PintoStartScreen [64Bits] - {470C0EBD-5D73-4d58-9CED-E91E22E23282} . (.Microsoft Corporation - Alkalmazรกsfeloldรณ.) โ€“ C:\Windows\System32\appresolver.dll =>.Microsoft Windowsยฎ
                                      O108 - CMH6: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) โ€“ C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbHยฎ
                                      O108 - CMH6: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
                                      O108 - CMH7: EnhancedStorageShell [64Bits] - {2854F705-3548-414C-A113-93E27C808C85} . (.Microsoft Corporation - Windows emelt szintลฑ tรกrolรณ felรผletbล‘vรญtmรฉn.) โ€“ C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation
                                      O108 - CMH7: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - A Microsoft Security Client felรผletbล‘vรญtmรฉn.) โ€“ C:\Program Files\Windows Defender\shellext.dll =>.Microsoft Windowsยฎ
                                      O108 - CMH7: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Felรผletbล‘vรญtmรฉnyek megosztรกshoz.) โ€“ C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation

                                      โ€”\ Image File Execution Options (11) - 0s
                                      O50 - IFEO:C:\WINDOWS\System32\ie4uinit.exe - (.Microsoft Corporation - IE felhasznรกlรณkรฉnti inicializรกciรณs eszkรถz.) [MitigationOptions\256] =>.Microsoft Corporation
                                      O50 - IFEO:C:\Windows\System32\ieUnatt.exe - (.Microsoft Corporation - IE 7.0 felรผgyelet nรฉlkรผli telepรญtล‘ segรฉdpro.) [MitigationOptions\256] =>.Microsoft Corporation
                                      O50 - IFEO:C:\WINDOWS\System32\MRT.exe - (.Microsoft Corporation - Microsoft Windows kรกrtevล‘-eltรกvolรญtรณ eszkรถz.) [CFGOptions\1] =>.Microsoft Corporation
                                      O50 - IFEO:C:\Windows\System32\msfeedssync.exe - (.Microsoft Corporation - Microsoft Feeds Synchronization.) [MitigationOptions\256] =>.Microsoft Corporation
                                      O50 - IFEO:C:\Windows\System32\mshta.exe - (.Microsoft Corporation - Microsoft (R) HTML-alkalmazรกsgazda.) [MitigationOptions\256] =>.Microsoft Corporation
                                      O50 - IFEO:C:\Windows\System32\PresentationHost.exe - (.Microsoft Corporation - Windows Presentation Foundation gazdarendsz.) [MitigationOptions\1118481] =>.Microsoft Corporation
                                      O50 - IFEO:C:\WINDOWS\System32\PrintIsolationHost.exe - (.Microsoft Corporation - PrintIsolationHost.) [MitigationOptions\2097152] =>.Microsoft Corporation
                                      O50 - IFEO:C:\WINDOWS\System32\runtimebroker.exe - (.Microsoft Corporation - Runtime Broker.) [MitigationOptions\4294967296] =>.Microsoft Corporation
                                      O50 - IFEO:C:\WINDOWS\System32\spoolsv.exe - (.Microsoft Corporation - Vรกrรณlista-alrendszer kezelล‘alkalmazรกsa.) [MitigationOptions\2097152] =>.Microsoft Corporation
                                      O50 - IFEO:C:\Windows\System32\svchost.exe - (.Microsoft Corporation - Windows-szolgรกltatรกsok gazdafolyamata.) [MinimumStackCommitInBytes\32768] =>.Microsoft Windows Publisherยฎ
                                      O50 - IFEO:C:\Windows\System32\svchost.exe - (.Microsoft Corporation - Windows-szolgรกltatรกsok gazdafolyamata.) [MitigationAuditOptions\17660905521152] =>.Microsoft Windows Publisherยฎ

                                      โ€”\ System Drivers List (421) - 8s
                                      O58 - SDL:2018/04/12 01:33:48 A . (.Microsoft Corporation - 1394 OpenHCI Driver.) โ€“ C:\WINDOWS\System32\drivers\1394ohci.sys [237568] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:48 A . (.LSI - LSI 3ware SCSI Storport Driver.) โ€“ C:\WINDOWS\System32\drivers\3ware.sys [107416] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - ACPI illesztล‘program NT-hez.) โ€“ C:\WINDOWS\System32\drivers\acpi.sys [654232] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (.Microsoft Corporation - ACPI Devices Driver.) โ€“ C:\WINDOWS\System32\drivers\AcpiDev.sys [20480] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:54 A . (.Microsoft Corporation - ACPIEx Driver.) โ€“ C:\WINDOWS\System32\drivers\acpiex.sys [127904] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - ACPI Processor Aggregator Device Driver.) โ€“ C:\WINDOWS\System32\drivers\acpipagr.sys [12800] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:48 A . (.Microsoft Corporation - ACPI Power Metering Driver.) โ€“ C:\WINDOWS\System32\drivers\acpipmi.sys [14848] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - ACPI Wake Alarm.) โ€“ C:\WINDOWS\System32\drivers\acpitime.sys [13824] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:48 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) โ€“ C:\WINDOWS\System32\drivers\adp80xx.sys [1135520] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/03/06 11:02:57 A . (.Microsoft Corporation - Kiegรฉszรญtล‘ funkciรณk illesztล‘programja a Win.) โ€“ C:\WINDOWS\System32\drivers\afd.sys [626488] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:32 A . (.Microsoft Corporation - AF_UNIX socket provider.) โ€“ C:\WINDOWS\System32\drivers\afunix.sys [39424] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:33 A . (.Microsoft Corporation - RAS Agile VPN Miniport hรญvรกskezelล‘je.) โ€“ C:\WINDOWS\System32\drivers\agilevpn.sys [108032] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:28 A . (.Microsoft Corporation - Application Compatibility Cache.) โ€“ C:\WINDOWS\System32\drivers\ahcache.sys [254464] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/25 20:17:30 A . (.Advanced Micro Devices, Inc - AMD GPIO Controller Driver.) โ€“ C:\WINDOWS\System32\drivers\amdgpio2.sys [34664] =>.Advanced Micro Devices Inc.ยฎ
                                      O58 - SDL:2018/04/25 20:25:30 A . (.Advanced Micro Devices, Inc - AMD GPIO Driver.) โ€“ C:\WINDOWS\System32\drivers\amdgpio3.sys [33120] =>.AMD PMP-PE CB Code Signer v20160415ยฎ
                                      O58 - SDL:2019/05/03 07:53:43 A . (.Microsoft Corporation - Processor Device Driver.) โ€“ C:\WINDOWS\System32\drivers\amdk8.sys [186880] =>.Microsoft Corporation
                                      O58 - SDL:2017/06/12 06:07:16 A . (.Advanced Micro Devices, Inc. - amdkmcsp sys.) โ€“ C:\WINDOWS\System32\drivers\amdkmcsp.sys [101232] =>.Advanced Micro Devices Inc.ยฎ
                                      O58 - SDL:2018/04/26 00:51:24 A . (.Advanced Micro Devices - AMD PCI Device driver.) โ€“ C:\WINDOWS\System32\drivers\AMDPCIDev.sys [31592] =>.Advanced Micro Devices Inc.ยฎ
                                      O58 - SDL:2019/05/03 07:53:40 A . (.Microsoft Corporation - Processor Device Driver.) โ€“ C:\WINDOWS\System32\drivers\amdppm.sys [184320] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/25 20:24:14 A . (.Advanced Micro Devices, Inc. - amdpsp sys.) โ€“ C:\WINDOWS\System32\drivers\amdpsp.sys [145792] =>.Advanced Micro Devices, Inc.ยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) โ€“ C:\WINDOWS\System32\drivers\amdsata.sys [83360] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) โ€“ C:\WINDOWS\System32\drivers\amdsbs.sys [259480] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (.Advanced Micro Devices - Storage Filter Driver.) โ€“ C:\WINDOWS\System32\drivers\amdxata.sys [27032] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/02/16 10:04:06 A . (.Microsoft Corporation - AppID Driver.) โ€“ C:\WINDOWS\System32\drivers\appid.sys [193032] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:19 A . (.Microsoft Corporation - Applocker Filter.) โ€“ C:\WINDOWS\System32\drivers\applockerfltr.sys [18432] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 18:27:59 A . (.Microsoft Corporation - Microsoft Application Virtualization Stream.) โ€“ C:\WINDOWS\System32\drivers\AppVStrm.sys [127384] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/03/14 16:52:54 A . (.Microsoft Corporation - Microsoft Application Virtualization VE Man.) โ€“ C:\WINDOWS\System32\drivers\AppvVemgr.sys [164664] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 18:27:59 A . (.Microsoft Corporation - Microsoft Application Virtualization VFS Fi.) โ€“ C:\WINDOWS\System32\drivers\AppvVfs.sys [143768] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) โ€“ C:\WINDOWS\System32\drivers\arcsas.sys [132000] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2016/04/14 15:44:16 A . (.ASMedia Technology Inc - ASMedia USB3 Hub Driver.) โ€“ C:\WINDOWS\System32\drivers\asmthub3.sys [150272] =>.ASMedia Technology Inc.ยฎ
                                      O58 - SDL:2016/04/14 15:44:18 A . (.ASMedia Technology Inc - ASMedia xHCI Host Controller Driver.) โ€“ C:\WINDOWS\System32\drivers\asmtxhci.sys [453880] =>.ASMedia Technology Inc.ยฎ
                                      O58 - SDL:2015/06/17 12:36:26 A . (.Asmedia Technology - Asmedia 106x SATA Host Controller Driver.) โ€“ C:\WINDOWS\System32\drivers\asstahci64.sys [88936] =>.ASMedia Technology Inc.ยฎ
                                      O58 - SDL:2018/04/12 01:34:34 A . (.Microsoft Corporation - MS Remote Access serial network driver.) โ€“ C:\WINDOWS\System32\drivers\asyncmac.sys [28672] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - ATAPI IDE Miniport Driver.) โ€“ C:\WINDOWS\System32\drivers\atapi.sys [28568] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - ATAPI Driver Extension.) โ€“ C:\WINDOWS\System32\drivers\ataport.sys [194976] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:40 A . (.Microsoft Corporation - BAM Kernel Driver.) โ€“ C:\WINDOWS\System32\drivers\bam.sys [60320] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Microsoft Basic Display Driver.) โ€“ C:\WINDOWS\System32\drivers\BasicDisplay.sys [63488] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Microsoft Basic Render Driver.) โ€“ C:\WINDOWS\System32\drivers\BasicRender.sys [34816] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Battery Class Driver.) โ€“ C:\WINDOWS\System32\drivers\battc.sys [39840] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (. - BCM Function 2 Device Driver.) โ€“ C:\WINDOWS\System32\drivers\bcmfn2.sys [9728] =>.Broadcom Corporation
                                      O58 - SDL:2018/04/12 01:34:36 A . (.Microsoft Corporation - BEEP Driver.) โ€“ C:\WINDOWS\System32\drivers\beep.sys [10240] =>.Microsoft Corporation
                                      O58 - SDL:2019/01/09 07:42:08 A . (.Microsoft Corporation - Windows Bind Filter Driver.) โ€“ C:\WINDOWS\System32\drivers\bindflt.sys [92704] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/08/31 09:26:21 A . (.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) โ€“ C:\WINDOWS\System32\drivers\bowser.sys [101888] =>.Microsoft Corporation
                                      O58 - SDL:2019/03/06 17:17:33 A . (.Microsoft Corporation - MAC Bridge Driver.) โ€“ C:\WINDOWS\System32\drivers\bridge.sys [116736] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:51 A . (.Microsoft Corporation - Microsoft Bluetooth Audio Multiprofile Mana.) โ€“ C:\WINDOWS\System32\drivers\BtaMPM.sys [33792] =>.Microsoft Corporation
                                      O58 - SDL:2018/11/09 04:21:11 A . (.Microsoft Corporation - Bluetooth Hands-Free Audio and Call Control.) โ€“ C:\WINDOWS\System32\drivers\bthhfenum.sys [112128] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:45 A . (.Microsoft Corporation - Bluetooth Communications Driver.) โ€“ C:\WINDOWS\System32\drivers\bthmodem.sys [67072] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - VHD BTT Filter Driver.) โ€“ C:\WINDOWS\System32\drivers\bttflt.sys [38304] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - Button Converter Driver.) โ€“ C:\WINDOWS\System32\drivers\buttonconverter.sys [39936] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:48 A . (.QLogic Corporation - QLogic Gigabit Ethernet VBD.) โ€“ C:\WINDOWS\System32\drivers\bxvbda.sys [533912] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:45 A . (.Microsoft Corporation - Charge Arbiration Driver.) โ€“ C:\WINDOWS\System32\drivers\CAD.sys [60320] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (.Microsoft Corporation - CapImg HID Driver.) โ€“ C:\WINDOWS\System32\drivers\capimg.sys [123392] =>.Microsoft Corporation
                                      O58 - SDL:2019/03/06 10:25:59 A . (.Microsoft Corporation - CD-ROM File System Driver.) โ€“ C:\WINDOWS\System32\drivers\cdfs.sys [93696] =>.Microsoft Corporation
                                      O58 - SDL:2018/06/15 06:36:47 A . (.Microsoft Corporation - SCSI CD-ROM Driver.) โ€“ C:\WINDOWS\System32\drivers\cdrom.sys [159744] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:12 A . (.Microsoft Corporation - Event Aggregation Kernel Mode Library.) โ€“ C:\WINDOWS\System32\drivers\CEA.sys [78752] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Chelsio Communications - Chelsio iSCSI Crash Dump Driver.) โ€“ C:\WINDOWS\System32\drivers\cht4dx64.sys [143768] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Chelsio Communications - Chelsio iSCSI VMiniport Driver.) โ€“ C:\WINDOWS\System32\drivers\cht4sx64.sys [321432] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Chelsio Communications - VF library for Chelsio ยฎ T5/T6 Chipset.) โ€“ C:\WINDOWS\System32\drivers\cht4vfx.sys [29184] =>.Chelsio Communications
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Chelsio Communications - Virtual Bus Driver for Chelsio ยฎ T5/T6 Chip.) โ€“ C:\WINDOWS\System32\drivers\cht4vx64.sys [1836952] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:45 A . (.Microsoft Corporation - Consumer IR Class Driver for eHome.) โ€“ C:\WINDOWS\System32\drivers\circlass.sys [49152] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:22 A . (.Microsoft Corporation - SCSI Class System Dll.) โ€“ C:\WINDOWS\System32\drivers\Classpnp.sys [413600] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/03/14 09:55:51 A . (.Microsoft Corporation - Cloud Files Mini Filter Driver.) โ€“ C:\WINDOWS\System32\drivers\cldflt.sys [414720] =>.Microsoft Corporation
                                      O58 - SDL:2019/06/07 07:57:00 A . (.Microsoft Corporation - Common Log File System Driver.) โ€“ C:\WINDOWS\System32\drivers\clfs.sys [383504] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/12/08 10:05:09 A . (.Microsoft Corporation - CLIP Service.) โ€“ C:\WINDOWS\System32\drivers\ClipSp.sys [1018880] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Control Method Battery Driver.) โ€“ C:\WINDOWS\System32\drivers\CmBatt.sys [32256] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:54 A . (.Microsoft Corporation - Kernel Configuration Manager Initial Config.) โ€“ C:\WINDOWS\System32\drivers\cmimcext.sys [28576] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/06/07 07:57:38 A . (.Microsoft Corporation - Kernel Cryptography, Next Generation.) โ€“ C:\WINDOWS\System32\drivers\cng.sys [709728] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:14 A . (.Microsoft Corporation - CNG Hardware Assist algorithm provider.) โ€“ C:\WINDOWS\System32\drivers\cnghwassist.sys [39328] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:12 A . (.Microsoft Corporation - Console Driver.) โ€“ C:\WINDOWS\System32\drivers\condrv.sys [55200] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/05/26 08:04:09 A . (.Microsoft Corporation - Crash Dump Driver.) โ€“ C:\WINDOWS\System32\drivers\crashdmp.sys [88472] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/08/03 10:21:44 A . (.Microsoft Corporation - Windows Client Side Caching Driver.) โ€“ C:\WINDOWS\System32\drivers\csc.sys [561152] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:40 A . (.Microsoft Corporation - DAM Kernel Driver.) โ€“ C:\WINDOWS\System32\drivers\dam.sys [91544] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:51 A . (.Microsoft Corporation - Xbox Device Authentication Driver.) โ€“ C:\WINDOWS\System32\drivers\devauthe.sys [45568] =>.Microsoft Corporation
                                      O58 - SDL:2018/06/15 06:42:01 A . (.Microsoft Corporation - DFS Namespace Client Driver.) โ€“ C:\WINDOWS\System32\drivers\dfsc.sys [141312] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - PnP Disk Driver.) โ€“ C:\WINDOWS\System32\drivers\disk.sys [94112] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:23 A . (.Microsoft Corporation - Crash Dump Disk Driver.) โ€“ C:\WINDOWS\System32\drivers\Diskdump.sys [39328] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:24 A . (.Microsoft Corporation - Boot Over USB Dump Driver.) โ€“ C:\WINDOWS\System32\drivers\Dmpusbstor.sys [15360] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Dinamikus memรณria.) โ€“ C:\WINDOWS\System32\drivers\dmvsc.sys [47104] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:46 A . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) โ€“ C:\WINDOWS\System32\drivers\drmk.sys [98304] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:46 A . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) โ€“ C:\WINDOWS\System32\drivers\drmkaud.sys [16232] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/02/16 13:07:03 A . (.Disc Soft Ltd - DAEMON Tools Lite Virtual SCSI Bus Driver.) โ€“ C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264] =>.Disc Soft Ltdยฎ
                                      O58 - SDL:2018/02/16 13:07:10 A . (.Disc Soft Ltd - DAEMON Tools Lite Virtual USB Bus Driver.) โ€“ C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672] =>.Disc Soft Ltdยฎ
                                      O58 - SDL:2018/04/12 01:34:20 A . (.Microsoft Corporation - ATAPI Dump Driver.) โ€“ C:\WINDOWS\System32\drivers\Dumpata.sys [36256] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:35:21 A . (.Microsoft Corporation - Bitlocker Drive Encryption Crashdump Filter.) โ€“ C:\WINDOWS\System32\drivers\dumpfve.sys [91664] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - SD Crashdump Port Driver.) โ€“ C:\WINDOWS\System32\drivers\dumpsd.sys [188832] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:12 A . (.Microsoft Corporation - SD Host Controller Crashdump Port Driver.) โ€“ C:\WINDOWS\System32\drivers\dumpsdport.sys [32256] =>.Microsoft Corporation
                                      O58 - SDL:2018/09/08 05:32:05 A . (.Microsoft Corporation - Storport Dump Driver.) โ€“ C:\WINDOWS\System32\drivers\Dumpstorport.sys [25600] =>.Microsoft Corporation
                                      O58 - SDL:2019/06/07 07:57:05 A . (.Microsoft Corporation - DirectX Graphics Kernel.) โ€“ C:\WINDOWS\System32\drivers\dxgkrnl.sys [2811192] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/06/07 07:57:01 A . (.Microsoft Corporation - DirectX Graphics MMS.) โ€“ C:\WINDOWS\System32\drivers\dxgmms1.sys [412984] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/06/07 07:57:05 A . (.Microsoft Corporation - DirectX Graphics MMS.) โ€“ C:\WINDOWS\System32\drivers\dxgmms2.sys [792888] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/07/01 15:28:58 A . (.EasyAntiCheat Oy - EasyAntiCheat Driver.) โ€“ C:\WINDOWS\System32\drivers\EasyAntiCheat.sys [860872] =>.EasyAntiCheat Oyยฎ
                                      O58 - SDL:2018/04/12 01:34:25 A . (.Microsoft Corporation - Enhanced Storage Class driver for IEEE 1667.) โ€“ C:\WINDOWS\System32\drivers\EhStorClass.sys [88472] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:45 A . (.Microsoft Corporation - Microsoft driver for storage devices suppor.) โ€“ C:\WINDOWS\System32\drivers\EhStorTcgDrv.sys [118680] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Error Device Driver.) โ€“ C:\WINDOWS\System32\drivers\errdev.sys [13824] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:48 A . (.QLogic Corporation - QLogic 10 GigE VBD.) โ€“ C:\WINDOWS\System32\drivers\evbda.sys [3419032] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/03/06 10:32:08 A . (.Microsoft Corporation - Microsoft Extended FAT File System.) โ€“ C:\WINDOWS\System32\drivers\exfat.sys [358912] =>.Microsoft Corporation
                                      O58 - SDL:2019/03/06 11:07:49 A . (.Microsoft Corporation - Fast FAT File System Driver.) โ€“ C:\WINDOWS\System32\drivers\fastfat.sys [376120] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Floppy Disk Controller Driver.) โ€“ C:\WINDOWS\System32\drivers\fdc.sys [32768] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:54 A . (.Microsoft Corporation - Windows sandboxing and encryption filter.) โ€“ C:\WINDOWS\System32\drivers\filecrypt.sys [55808] =>.Microsoft Corporation
                                      O58 - SDL:2018/12/08 10:05:47 A . (.Microsoft Corporation - FileInfo Filter Driver.) โ€“ C:\WINDOWS\System32\drivers\fileinfo.sys [86016] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:20 A . (.Microsoft Corporation - File Trace Filter Driver.) โ€“ C:\WINDOWS\System32\drivers\filetrace.sys [36352] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Floppy Driver.) โ€“ C:\WINDOWS\System32\drivers\flpydisk.sys [26624] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:22 A . (.Microsoft Corporation - Microsoft fรกljrendszerszลฑrล‘-kezelล‘.) โ€“ C:\WINDOWS\System32\drivers\fltMgr.sys [402848] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:54 A . (.Microsoft Corporation - File System Dependency Manager Mini Filter.) โ€“ C:\WINDOWS\System32\drivers\fsdepends.sys [62872] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:22 A . (.Microsoft Corporation - File System Recognizer Driver.) โ€“ C:\WINDOWS\System32\drivers\fs_rec.sys [34208] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/11/09 04:48:37 A . (.Microsoft Corporation - BitLocker Drive Encryption Driver.) โ€“ C:\WINDOWS\System32\drivers\fvevol.sys [745472] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/02/06 05:00:04 A . (.Microsoft Corporation - FWP/IPsec Kernel-Mode API.) โ€“ C:\WINDOWS\System32\drivers\FWPKCLNT.SYS [466960] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:51 A . (.Microsoft Corporation - Generic USB Function Class Driver.) โ€“ C:\WINDOWS\System32\drivers\genericusbfn.sys [20992] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:04 A . (.Microsoft Corporation - GPU Energy Kernel Driver.) โ€“ C:\WINDOWS\System32\drivers\gpuenergydrv.sys [8192] =>.Microsoft Corporation
                                      O58 - SDL:2017/06/29 13:24:50 A . (.LogMeIn Inc. - LogMeIn Hamachi Virtual Miniport Driver.) โ€“ C:\WINDOWS\System32\drivers\Hamdrv.sys [45680] =>.Microsoft Windows Hardware Compatibility Publisherยฎ
                                      O58 - SDL:2018/04/12 01:33:45 A . (.Microsoft Corporation - High Definition Audio Bus Driver.) โ€“ C:\WINDOWS\System32\drivers\hdaudbus.sys [86016] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:45 A . (.Microsoft Corporation - High Definition Audio Function Driver.) โ€“ C:\WINDOWS\System32\drivers\HdAudio.sys [436736] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Hid Battery Driver.) โ€“ C:\WINDOWS\System32\drivers\hidbatt.sys [38304] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/09/08 05:30:51 A . (.Microsoft Corporation - Bluetooth miniport illesztล‘program HID-eszk.) โ€“ C:\WINDOWS\System32\drivers\hidbth.sys [115200] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - HID-osztรกlytรกr.) โ€“ C:\WINDOWS\System32\drivers\hidclass.sys [173568] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - I2C HID Miniport Driver.) โ€“ C:\WINDOWS\System32\drivers\hidi2c.sys [54272] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - HID Button over Interrupt Driver.) โ€“ C:\WINDOWS\System32\drivers\hidinterrupt.sys [50592] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:45 A . (.Microsoft Corporation - Infrared Miniport Driver for Input Devices.) โ€“ C:\WINDOWS\System32\drivers\hidir.sys [47104] =>.Microsoft Corporation
                                      O58 - SDL:2019/03/06 10:33:02 A . (.Microsoft Corporation - Hid Parsing Library.) โ€“ C:\WINDOWS\System32\drivers\hidparse.sys [46080] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - USB Miniport Driver for Input Devices.) โ€“ C:\WINDOWS\System32\drivers\hidusb.sys [42496] =>.Microsoft Corporation
                                      O58 - SDL:2016/04/17 05:28:40 A . (.SweetLow - USB Mouse Rate Adjuster Lower Filter.) โ€“ C:\WINDOWS\System32\drivers\hidusbf.sys [25288] =>.Jeshua Starr Scullyยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) โ€“ C:\WINDOWS\System32\drivers\HpSAMD.sys [64408] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/02/16 10:01:36 A . (.Microsoft Corporation - HTTP-protokollverem.) โ€“ C:\WINDOWS\System32\drivers\http.sys [1028920] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Hyper-V Crashdump.) โ€“ C:\WINDOWS\System32\drivers\hvcrash.sys [33184] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/06/07 07:58:50 A . (.Microsoft Corporation - Hypervisor Boot Driver.) โ€“ C:\WINDOWS\System32\drivers\hvservice.sys [76304] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/05/26 08:04:04 A . (.Microsoft Corporation - Microsoft Hyper-V Socket Provider.) โ€“ C:\WINDOWS\System32\drivers\hvsocket.sys [130456] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/06/16 19:59:54 A . (.REALiXโ„ข - HWiNFO AMD64 Kernel Driver.) โ€“ C:\WINDOWS\System32\drivers\HWiNFO64A.SYS [66336] =>.Martin Malik - REALiXยฎ
                                      O58 - SDL:2018/04/12 01:34:20 A . (.Microsoft Corporation - Hardware Policy Driver.) โ€“ C:\WINDOWS\System32\drivers\hwpolicy.sys [29592] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Microsoft VMBus Synthetic Keyboard Driver.) โ€“ C:\WINDOWS\System32\drivers\hyperkbd.sys [16896] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Microsoft VMBus Video Device Miniport Drive.) โ€“ C:\WINDOWS\System32\drivers\HyperVideo.sys [28672] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - i8082-port illesztล‘programja.) โ€“ C:\WINDOWS\System32\drivers\i8042prt.sys [105984] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:45 A . (.Intel(R) Corporation - Intel(R) Serial IO GPIO Controller Driver.) โ€“ C:\WINDOWS\System32\drivers\iagpio.sys [36864] =>.Intel(R) Corporation
                                      O58 - SDL:2018/04/12 01:33:45 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) โ€“ C:\WINDOWS\System32\drivers\iai2c.sys [91648] =>.Intel(R) Corporation
                                      O58 - SDL:2018/04/12 01:33:45 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) โ€“ C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [79360] =>.Intel Corporation
                                      O58 - SDL:2018/04/12 01:33:45 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) โ€“ C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.s ys [88576] =>.Intel Corporation
                                      O58 - SDL:2018/04/12 01:33:45 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) โ€“ C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [171520] =>.Intel Corporation
                                      O58 - SDL:2018/04/12 01:33:45 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) โ€“ C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [174592] =>.Intel Corporation
                                      O58 - SDL:2018/04/12 01:33:48 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) โ€“ C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128] =>.Intel Corporation - Client Components Groupยฎ
                                      O58 - SDL:2018/04/12 01:33:45 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) โ€“ C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [113152] =>.Intel Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) โ€“ C:\WINDOWS\System32\drivers\iaStorAVC.sys [885144] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) โ€“ C:\WINDOWS\System32\drivers\iaStorV.sys [412064] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Mellanox - InfiniBand Fabric Bus Driver.) โ€“ C:\WINDOWS\System32\drivers\ibbus.sys [526232] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:14 A . (.Microsoft Corporation - Indirect displays kernel-mode filter driver.) โ€“ C:\WINDOWS\System32\drivers\IndirectKmd.sys [38912] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Intel PCI IDE Driver.) โ€“ C:\WINDOWS\System32\drivers\intelide.sys [19360] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/05/03 08:43:05 A . (.Microsoft Corporation - Intel Power Engine Plugin.) โ€“ C:\WINDOWS\System32\drivers\intelpep.sys [177128] =>.Microsoft Windows Hardware Abstraction Layer Publisherยฎ
                                      O58 - SDL:2019/05/03 07:53:45 A . (.Microsoft Corporation - Processor Device Driver.) โ€“ C:\WINDOWS\System32\drivers\intelppm.sys [204800] =>.Microsoft Corporation
                                      O58 - SDL:2018/12/08 10:04:38 A . (.Microsoft Corporation - รtviteli sebessรฉget szabรกlyozรณ szลฑrล‘.) โ€“ C:\WINDOWS\System32\drivers\iorate.sys [58168] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:33 A . (.Microsoft Corporation - IP FILTER DRIVER.) โ€“ C:\WINDOWS\System32\drivers\ipfltdrv.sys [85504] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - WMI IPMI illesztล‘.) โ€“ C:\WINDOWS\System32\drivers\IPMIDrv.sys [92064] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:14 A . (.Microsoft Corporation - IP Network Address Translator.) โ€“ C:\WINDOWS\System32\drivers\ipnat.sys [214528] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:54 A . (.Microsoft Corporation - IPT Driver.) โ€“ C:\WINDOWS\System32\drivers\ipt.sys [32256] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:43 A . (.Microsoft Corporation - IRDA Protocol Driver.) โ€“ C:\WINDOWS\System32\drivers\irda.sys [119808] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:41 A . (.Microsoft Corporation - Infra-Red Bus Enumerator.) โ€“ C:\WINDOWS\System32\drivers\irenum.sys [19968] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - PNP ISA busz illesztล‘je.) โ€“ C:\WINDOWS\System32\drivers\isapnp.sys [22944] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (.Avago Technologies - Avago SAS Gen3.5 Driver (StorPort).) โ€“ C:\WINDOWS\System32\drivers\ItSas35i.sys [145816] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - Billentyลฑzetosztรกly illesztล‘programja.) โ€“ C:\WINDOWS\System32\drivers\kbdclass.sys [63904] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - HID-billentyลฑzetszลฑrล‘ illesztล‘programja.) โ€“ C:\WINDOWS\System32\drivers\kbdhid.sys [40448] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - Microsoft Kernel Debugger Network Miniport.) โ€“ C:\WINDOWS\System32\drivers\kdnic.sys [23040] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:43 A . (.Microsoft Corporation - Network Power Dependency Broker.) โ€“ C:\WINDOWS\System32\drivers\KNetPwrDepBroker.sys [13824] =>.Microsoft Corporation
                                      O58 - SDL:2018/08/31 05:13:19 A . (.Microsoft Corporation - Kernel CSA Library.) โ€“ C:\WINDOWS\System32\drivers\ks.sys [402432] =>.Microsoft Corporation
                                      O58 - SDL:2018/10/21 09:45:46 A . (.Microsoft Corporation - Kernel Security Support Provider Interface.) โ€“ C:\WINDOWS\System32\drivers\ksecdd.sys [139792] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/06/07 07:57:36 A . (.Microsoft Corporation - Kernel Security Support Provider Interface.) โ€“ C:\WINDOWS\System32\drivers\ksecpkg.sys [170296] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:26 A . (.Microsoft Corporation - Kernel Streaming WOW Thunk Service.) โ€“ C:\WINDOWS\System32\drivers\ksthunk.sys [27136] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:24 A . (.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) โ€“ C:\WINDOWS\System32\drivers\lltdio.sys [65024] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/14 14:33:15 A . (โ€ฆ) โ€“ C:\WINDOWS\System32\drivers\lpsport.sys [61304] =>.AVG Technologies CZ, s.r.o.ยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) โ€“ C:\WINDOWS\System32\drivers\lsi_sas.sys [108952] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) โ€“ C:\WINDOWS\System32\drivers\lsi_sas2i.sys [124312] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) โ€“ C:\WINDOWS\System32\drivers\lsi_sas3i.sys [128408] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) โ€“ C:\WINDOWS\System32\drivers\lsi_sss.sys [82848] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/04/02 14:10:18 A . (.Microsoft Corporation - LUA fรกjlvirtualizรกciรณs szลฑrล‘ illesztล‘progra.) โ€“ C:\WINDOWS\System32\drivers\luafv.sys [130048] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - MA-USB Host Controller Driver.) โ€“ C:\WINDOWS\System32\drivers\mausbhost.sys [505240] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - MA-USB IP Driver.) โ€“ C:\WINDOWS\System32\drivers\mausbip.sys [56736] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:36 A . (.Microsoft Corporation - Medium changer class driver.) โ€“ C:\WINDOWS\System32\drivers\mcd.sys [23552] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:48 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) โ€“ C:\WINDOWS\System32\drivers\megasas.sys [59800] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) โ€“ C:\WINDOWS\System32\drivers\MegaSas2i.sys [75160] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) โ€“ C:\WINDOWS\System32\drivers\megasas35i.sys [82328] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) โ€“ C:\WINDOWS\System32\drivers\megasr.sys [575896] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Mellanox - MLX4 Bus Driver.) โ€“ C:\WINDOWS\System32\drivers\mlx4_bus.sys [842648] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/12/08 09:36:56 A . (.Microsoft Corporation - MMCSS Driver.) โ€“ C:\WINDOWS\System32\drivers\mmcss.sys [43008] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:38 A . (.Microsoft Corporation - Modem eszkรถzillesztล‘.) โ€“ C:\WINDOWS\System32\drivers\modem.sys [42496] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:47 A . (.Microsoft Corporation - Monitor Driver.) โ€“ C:\WINDOWS\System32\drivers\monitor.sys [44544] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - Mouse Class illesztล‘program.) โ€“ C:\WINDOWS\System32\drivers\mouclass.sys [56728] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - HID Mouse Filter illesztล‘program.) โ€“ C:\WINDOWS\System32\drivers\mouhid.sys [33280] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:22 A . (.Microsoft Corporation - Csatlakozรกsipont-kezelล‘.) โ€“ C:\WINDOWS\System32\drivers\mountmgr.sys [104352] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/08/31 05:15:02 A . (.Microsoft Corporation - Microsoft Protection Service Driver.) โ€“ C:\WINDOWS\System32\drivers\mpsdrv.sys [75776] =>.Microsoft Corporation
                                      O58 - SDL:2018/06/08 20:47:25 A . (.Microsoft Corporation - Windows NT WebDav Minirdr.) โ€“ C:\WINDOWS\System32\drivers\mrxdav.sys [144384] =>.Microsoft Corporation
                                      O58 - SDL:2018/09/20 06:10:31 A . (.Microsoft Corporation - Windows NT SMB Minirdr.) โ€“ C:\WINDOWS\System32\drivers\mrxsmb.sys [500536] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/01/09 07:40:07 A . (.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) โ€“ C:\WINDOWS\System32\drivers\mrxsmb20.sys [226104] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/03/06 10:26:00 A . (.Microsoft Corporation - Mailslot driver.) โ€“ C:\WINDOWS\System32\drivers\msfs.sys [31232] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:12 A . (.Microsoft Corporation - GPIO Class Extension Driver.) โ€“ C:\WINDOWS\System32\drivers\msgpioclx.sys [169368] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - GPIO Button Driver.) โ€“ C:\WINDOWS\System32\drivers\msgpiowin32.sys [50592] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:14 A . (.Microsoft Corporation - Pass-through HID to KMDF Filter Driver.) โ€“ C:\WINDOWS\System32\drivers\mshidkmdf.sys [8704] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:14 A . (.Microsoft Corporation - HID-UMDF felรผleti รกteresztล‘ illesztล‘.) โ€“ C:\WINDOWS\System32\drivers\mshidumdf.sys [11776] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:14 A . (.Microsoft Corporation - Hardware Notification Class Extension Drive.) โ€“ C:\WINDOWS\System32\drivers\mshwnclx.sys [27136] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - ISA Driver.) โ€“ C:\WINDOWS\System32\drivers\msisadrv.sys [18848] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/05/17 14:40:56 A . (.Microsoft Corporation - Microsoft iSCSI Initiator Driver.) โ€“ C:\WINDOWS\System32\drivers\msiscsi.sys [280888] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/06/08 11:03:14 A . (.Microsoft Corporation - MS KS Server.) โ€“ C:\WINDOWS\System32\drivers\mskssrv.sys [32256] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:32 A . (.Microsoft Corporation - Microsoft LLDP protokollillesztล‘.) โ€“ C:\WINDOWS\System32\drivers\mslldp.sys [84480] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:25 A . (.Microsoft Corporation - MS Proxy Clock.) โ€“ C:\WINDOWS\System32\drivers\mspclock.sys [10752] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:25 A . (.Microsoft Corporation - MS Proxy Quality Manager.) โ€“ C:\WINDOWS\System32\drivers\mspqm.sys [10752] =>.Microsoft Corporation
                                      O58 - SDL:2019/03/06 11:03:40 A . (.Microsoft Corporation - Kernel Remote Procedure Call Provider.) โ€“ C:\WINDOWS\System32\drivers\msrpc.sys [375608] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/05/03 14:14:31 A . (.Microsoft Corporation - A Microsoft Security Events รถsszetevล‘ fรกjlr.) โ€“ C:\WINDOWS\System32\drivers\mssecflt.sys [304144] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - System Management BIOS Driver.) โ€“ C:\WINDOWS\System32\drivers\mssmbios.sys [40864] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:25 A . (.Microsoft Corporation - WDM Tee/Communication Transform Filter.) โ€“ C:\WINDOWS\System32\drivers\mstee.sys [12800] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:48 A . (.Microsoft Corporation - Microsoft tรถbbรฉrintรฉses HID - illesztล‘progr.) โ€“ C:\WINDOWS\System32\drivers\MTConfig.sys [16896] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:24 A . (.Microsoft Corporation - Tรถbbszรถrรถs UNC-szolgรกltatรณ eszkรถzillesztล‘je.) โ€“ C:\WINDOWS\System32\drivers\mup.sys [124832] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) โ€“ C:\WINDOWS\System32\drivers\mvumis.sys [63904] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Mellanox - NetworkDirect Support Filter Driver.) โ€“ C:\WINDOWS\System32\drivers\ndfltr.sys [108952] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/02/16 10:01:39 A . (.Microsoft Corporation - NDIS (Network Driver Interface Specificatio.) โ€“ C:\WINDOWS\System32\drivers\ndis.sys [1285424] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:38 A . (.Microsoft Corporation - Microsoft NDIS Packet Capture Filter Driver.) โ€“ C:\WINDOWS\System32\drivers\ndiscap.sys [53760] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:32 A . (.Microsoft Corporation - Microsoft Network Adapter Multiplexor.) โ€“ C:\WINDOWS\System32\drivers\NdisImPlatform.sys [128512] =>.Microsoft Corporation
                                      O58 - SDL:2013/02/21 05:40:38 A . (.NT Kernel Resources - NDISRD helper driver.) โ€“ C:\WINDOWS\System32\drivers\ndisrd.sys [32840] =>.Realtek Semiconductor Corpยฎ
                                      O58 - SDL:2018/04/12 01:34:33 A . (.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) โ€“ C:\WINDOWS\System32\drivers\ndistapi.sys [27136] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:22 A . (.Microsoft Corporation - NDIS felhasznรกlรณi mรณdรบ I/O illesztล‘program.) โ€“ C:\WINDOWS\System32\drivers\ndisuio.sys [65024] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:32 A . (.Microsoft Corporation - Microsoft virtuรกlis hรกlรณzati adapterek szรกm.) โ€“ C:\WINDOWS\System32\drivers\NdisVirtualBus.sys [20992] =>.Microsoft Corporation
                                      O58 - SDL:2018/11/09 04:20:41 A . (.Microsoft Corporation - MS PPP Framing Driver (Strong Encryption).) โ€“ C:\WINDOWS\System32\drivers\ndiswan.sys [193536] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:33 A . (.Microsoft Corporation - NDIS Proxy.) โ€“ C:\WINDOWS\System32\drivers\ndproxy.sys [63488] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:04 A . (.Microsoft Corporation - Windows Network Data Usage Monitoring Drive.) โ€“ C:\WINDOWS\System32\drivers\Ndu.sys [128000] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:22 A . (.Microsoft Corporation - Network Adapter Class Extension for WDF.) โ€“ C:\WINDOWS\System32\drivers\NetAdapterCx.sys [175104] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:32 A . (.Microsoft Corporation - NetBIOS interface driver.) โ€“ C:\WINDOWS\System32\drivers\netbios.sys [58264] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/04/02 09:48:15 A . (.Microsoft Corporation - MBT Transport driver.) โ€“ C:\WINDOWS\System32\drivers\netbt.sys [310272] =>.Microsoft Corporation
                                      O58 - SDL:2018/11/09 04:47:32 A . (.Microsoft Corporation - Network I/O Subsystem.) โ€“ C:\WINDOWS\System32\drivers\netio.sys [537912] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Virtuรกlis NDIS-miniport.) โ€“ C:\WINDOWS\System32\drivers\netvsc.sys [197632] =>.Microsoft Corporation
                                      O58 - SDL:2019/03/06 10:26:00 A . (.Microsoft Corporation - NPFS Driver.) โ€“ C:\WINDOWS\System32\drivers\npfs.sys [73216] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - Named pipe service triggers.) โ€“ C:\WINDOWS\System32\drivers\npsvctrig.sys [26112] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:22 A . (.Microsoft Corporation - NSI Proxy.) โ€“ C:\WINDOWS\System32\drivers\nsiproxy.sys [44544] =>.Microsoft Corporation
                                      O58 - SDL:2019/03/14 10:26:19 A . (.Microsoft Corporation - NT fรกjlrendszer-illesztล‘.) โ€“ C:\WINDOWS\System32\drivers\ntfs.sys [2421048] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:28 A . (.Microsoft Corporation - NTOS extension host driver.) โ€“ C:\WINDOWS\System32\drivers\ntosext.sys [19872] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:22 A . (.Microsoft Corporation - NULL Driver.) โ€“ C:\WINDOWS\System32\drivers\null.sys [7168] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - NVDIMM device driver.) โ€“ C:\WINDOWS\System32\drivers\nvdimm.sys [104448] =>.Microsoft Corporation
                                      O58 - SDL:2019/05/23 16:13:20 A . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) โ€“ C:\WINDOWS\System32\drivers\nvhda64v.sys [228608] =>.NVIDIA Corporationยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (.NVIDIA Corporation - NVIDIAยฎ nForceโ„ข RAID Driver.) โ€“ C:\WINDOWS\System32\drivers\nvraid.sys [150424] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (.NVIDIA Corporation - NVIDIAยฎ nForceโ„ข Sata Performance Driver.) โ€“ C:\WINDOWS\System32\drivers\nvstor.sys [166304] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/04/17 09:42:48 A . (.NVIDIA Corporation - NVIDIA Virtual Audio Driver.) โ€“ C:\WINDOWS\System32\drivers\nvvad64v.sys [69840] =>.NVIDIA Corporationยฎ
                                      O58 - SDL:2019/04/17 06:44:20 A . (.NVIDIA Corporation - Virtual USB Host Controller driver.) โ€“ C:\WINDOWS\System32\drivers\nvvhci.sys [75600] =>.NVIDIA Corporationยฎ
                                      O58 - SDL:2019/03/14 09:55:23 A . (.Microsoft Corporation - NativeWiFi miniport-illesztล‘program.) โ€“ C:\WINDOWS\System32\drivers\nwifi.sys [528896] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:12 A . (.Microsoft Corporation - QoS csomagรผtemezล‘.) โ€“ C:\WINDOWS\System32\drivers\pacer.sys [152984] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Pรกrhuzamos port illesztล‘programja.) โ€“ C:\WINDOWS\System32\drivers\parport.sys [98816] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:20 A . (.Microsoft Corporation - Partition driver.) โ€“ C:\WINDOWS\System32\drivers\partmgr.sys [166816] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/03/14 10:56:59 A . (.Microsoft Corporation - NT - Plug and Play PCI-enumerรกlรณ.) โ€“ C:\WINDOWS\System32\drivers\pci.sys [375096] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Generic PCI IDE Bus Driver.) โ€“ C:\WINDOWS\System32\drivers\pciide.sys [16288] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - PCI IDE Bus Driver Extension.) โ€“ C:\WINDOWS\System32\drivers\pciidex.sys [53656] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:45 A . (.Microsoft Corporation - PCMCIA illesztล‘program.) โ€“ C:\WINDOWS\System32\drivers\pcmcia.sys [120216] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:22 A . (.Microsoft Corporation - Performance Counters for Windows Driver.) โ€“ C:\WINDOWS\System32\drivers\pcw.sys [53152] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:54 A . (.Microsoft Corporation - Power Dependency Coordinator Driver.) โ€“ C:\WINDOWS\System32\drivers\pdc.sys [140192] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:43 A . (.Microsoft Corporation - Protected Environment Authentication and Au.) โ€“ C:\WINDOWS\System32\drivers\PEAuth.sys [726528] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) โ€“ C:\WINDOWS\System32\drivers\percsas2i.sys [58776] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) โ€“ C:\WINDOWS\System32\drivers\percsas3i.sys [61848] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Persistent memory driver.) โ€“ C:\WINDOWS\System32\drivers\pmem.sys [105984] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:48 A . (.Microsoft Corporation - Plug and Play memรณria-illesztล‘program.) โ€“ C:\WINDOWS\System32\drivers\pnpmem.sys [16896] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:46 A . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport.) โ€“ C:\WINDOWS\System32\drivers\portcls.sys [379392] =>.Microsoft Corporation
                                      O58 - SDL:2019/05/03 07:53:40 A . (.Microsoft Corporation - Processor Device Driver.) โ€“ C:\WINDOWS\System32\drivers\processr.sys [181760] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:32 A . (.Microsoft Corporation - Microsoft Quality Windows Audio Video Exper.) โ€“ C:\WINDOWS\System32\drivers\qwavedrv.sys [49152] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:54 A . (.Microsoft Corporation - RAM Disk Driver.) โ€“ C:\WINDOWS\System32\drivers\ramdisk.sys [39840] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:33 A . (.Microsoft Corporation - RAS Automatic Connection Driver.) โ€“ C:\WINDOWS\System32\drivers\rasacd.sys [17408] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:34 A . (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) โ€“ C:\WINDOWS\System32\drivers\rasl2tp.sys [106496] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:33 A . (.Microsoft Corporation - RAS PPPoE mini-port/call-manager driver.) โ€“ C:\WINDOWS\System32\drivers\raspppoe.sys [82944] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:34 A . (.Microsoft Corporation - Peer-to-Peer Tunneling Protocol.) โ€“ C:\WINDOWS\System32\drivers\raspptp.sys [97280] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:34 A . (.Microsoft Corporation - RAS SSTP Miniport Call Manager.) โ€“ C:\WINDOWS\System32\drivers\rassstp.sys [78848] =>.Microsoft Corporation
                                      O58 - SDL:2019/02/16 10:02:57 A . (.Microsoft Corporation - รtirรกnyรญtott illesztล‘program pufferelรฉsi al.) โ€“ C:\WINDOWS\System32\drivers\rdbss.sys [432952] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 18:27:59 A . (.Microsoft Corporation - Microsoft RDP Bus Device driver.) โ€“ C:\WINDOWS\System32\drivers\rdpbus.sys [27136] =>.Microsoft Corporation
                                      O58 - SDL:2019/03/14 16:33:42 A . (.Microsoft Corporation - Microsoft RDP Device redirector.) โ€“ C:\WINDOWS\System32\drivers\rdpdr.sys [182784] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 18:28:01 A . (.Microsoft Corporation - Microsoft RDP Video Miniport driver.) โ€“ C:\WINDOWS\System32\drivers\rdpvideominiport.sys [30616] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:43 A . (.Microsoft Corporation - ReadyBoost Driver.) โ€“ C:\WINDOWS\System32\drivers\rdyboost.sys [284064] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/03/06 11:03:04 A . (.Microsoft Corporation - NT ReFS FS-illesztล‘program.) โ€“ C:\WINDOWS\System32\drivers\refs.sys [1921848] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/03/06 11:04:46 A . (.Microsoft Corporation - NT ReFS FS-illesztล‘program.) โ€“ C:\WINDOWS\System32\drivers\refsv1.sys [945464] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Microsoft RemoteFX VM Transport.) โ€“ C:\WINDOWS\System32\drivers\RfxVmt.sys [43008] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:48 A . (.Microsoft Corporation - ResourceHub Proxy Driver.) โ€“ C:\WINDOWS\System32\drivers\rhproxy.sys [104448] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:29 A . (.Microsoft Corporation - Reliable Multicast Transport.) โ€“ C:\WINDOWS\System32\drivers\rmcast.sys [150016] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:36 A . (.Microsoft Corporation - Remote NDIS Miniport.) โ€“ C:\WINDOWS\System32\drivers\RNDISMP.sys [35328] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:38 A . (.Microsoft Corporation - Legacy Non-Pnp Modem Device Driver.) โ€“ C:\WINDOWS\System32\drivers\rootmdm.sys [13312] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:24 A . (.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) โ€“ C:\WINDOWS\System32\drivers\rspndr.sys [81920] =>.Microsoft Corporation
                                      O58 - SDL:2018/10/23 14:24:24 A . (.Realtek - Realtek 8125/8136/8168/8169 NDIS 6.40 64-bi.) โ€“ C:\WINDOWS\System32\drivers\rt640x64.sys [1131024] =>.Realtek Semiconductor Corp.ยฎ
                                      O58 - SDL:2018/04/12 01:33:53 RA . (.Realtek - Realtek PCIe GBE Family Controller Flight.) โ€“ C:\WINDOWS\System32\drivers\rteth.sys [65536] =>.Realtek
                                      O58 - SDL:2019/01/16 19:18:32 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) โ€“ C:\WINDOWS\System32\drivers\RTKVHD64.sys [6554416] =>.Realtek Semiconductor Corp.ยฎ
                                      O58 - SDL:2018/04/12 01:33:48 A . (.Microsoft Corporation - SBP-2 Protocol Driver.) โ€“ C:\WINDOWS\System32\drivers\sbp2port.sys [109984] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:37 A . (.Microsoft Corporation - Microsoft intelligenskรกrtya-olvasรณ szลฑrล‘ill.) โ€“ C:\WINDOWS\System32\drivers\scfilter.sys [43008] =>.Microsoft Corporation
                                      O58 - SDL:2018/08/03 05:47:12 A . (.Microsoft Corporation - Tรกrolรณosztรกly memรณriabuszรกnak illesztล‘je.) โ€“ C:\WINDOWS\System32\drivers\scmbus.sys [128920] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:36 A . (.Microsoft Corporation - SCSI Port Driver.) โ€“ C:\WINDOWS\System32\drivers\scsiport.sys [176032] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - SecureDigital busz illesztล‘programja.) โ€“ C:\WINDOWS\System32\drivers\sdbus.sys [287128] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - SDF Reflector.) โ€“ C:\WINDOWS\System32\drivers\SDFRd.sys [33176] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:54 A . (.Microsoft Corporation - SD Host Controller Port Driver.) โ€“ C:\WINDOWS\System32\drivers\sdport.sys [97696] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - SD tรกrolรกsi osztรกly illesztล‘programja.) โ€“ C:\WINDOWS\System32\drivers\sdstor.sys [97176] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:14 A . (.Microsoft Corporation - Serial Class Extension.) โ€“ C:\WINDOWS\System32\drivers\SerCx.sys [75680] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:14 A . (.Microsoft Corporation - Serial Class Extension V2.) โ€“ C:\WINDOWS\System32\drivers\SerCx2.sys [154528] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Serial Port Enumerator.) โ€“ C:\WINDOWS\System32\drivers\serenum.sys [25088] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Soroseszkรถzillesztล‘.) โ€“ C:\WINDOWS\System32\drivers\serial.sys [84992] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - Soros egรฉr szลฑrล‘-illesztล‘programja.) โ€“ C:\WINDOWS\System32\drivers\sermouse.sys [28160] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - SCSI Floppy Driver.) โ€“ C:\WINDOWS\System32\drivers\sfloppy.sys [17920] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:04 A . (.Microsoft Corporation - System Guard Runtime Monitor Agent Driver.) โ€“ C:\WINDOWS\System32\drivers\SgrmAgent.sys [63896] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) โ€“ C:\WINDOWS\System32\drivers\sisraid2.sys [44952] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) โ€“ C:\WINDOWS\System32\drivers\sisraid4.sys [81816] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:20 A . (.Microsoft Corporation - Sleep Study Helper.) โ€“ C:\WINDOWS\System32\drivers\SleepStudyHelper.sys [34208] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 18:28:06 A . (.Microsoft Corporation - SMB Network Direct Driver.) โ€“ C:\WINDOWS\System32\drivers\smbdirect.sys [152064] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:36 A . (.Microsoft Corporation - Smart Card Driver Library.) โ€“ C:\WINDOWS\System32\drivers\smclib.sys [21504] =>.Microsoft Corporation
                                      O58 - SDL:2019/03/14 10:26:13 A . (.Microsoft Corporation - Storage Spaces Dump Driver.) โ€“ C:\WINDOWS\System32\drivers\spacedump.sys [175416] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/03/14 10:57:04 A . (.Microsoft Corporation - Storage Spaces Driver.) โ€“ C:\WINDOWS\System32\drivers\spaceport.sys [611640] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 18:28:03 A . (.Microsoft Corporation - Holographic Spatial Graph Filter.) โ€“ C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [57752] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:12 A . (.Microsoft Corporation - SPB Class Extension.) โ€“ C:\WINDOWS\System32\drivers\SpbCx.sys [82328] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/03/06 10:29:14 A . (.Microsoft Corporation - Smb 2.0 kiszolgรกlรณ illesztล‘programja.) โ€“ C:\WINDOWS\System32\drivers\srv2.sys [736256] =>.Microsoft Corporation
                                      O58 - SDL:2019/03/06 10:31:57 A . (.Microsoft Corporation - Server Network driver.) โ€“ C:\WINDOWS\System32\drivers\srvnet.sys [266752] =>.Microsoft Corporation
                                      O58 - SDL:2017/05/18 22:17:28 A . (.Samsung Electronics Co., Ltd. - SAMSUNG USB Composite Device Driver.) โ€“ C:\WINDOWS\System32\drivers\ssudbus.sys [131984] =>.Samsung Electronics Co., Ltd.ยฎ
                                      O58 - SDL:2017/05/18 22:17:30 A . (.Samsung Electronics Co., Ltd. - SAMSUNG Android Modem Device Driver.) โ€“ C:\WINDOWS\System32\drivers\ssudmdm.sys [166288] =>.Samsung Electronics Co., Ltd.ยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) โ€“ C:\WINDOWS\System32\drivers\stexstor.sys [31128] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - MS AHCI Storport Miniport Driver.) โ€“ C:\WINDOWS\System32\drivers\storahci.sys [156056] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/05/17 09:07:32 A . (.Microsoft Corporation - Microsoft NVM Express Storport Miniport Dri.) โ€“ C:\WINDOWS\System32\drivers\stornvme.sys [105272] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/10/21 09:46:20 A . (.Microsoft Corporation - Microsoft Storage Port Driver.) โ€“ C:\WINDOWS\System32\drivers\storport.sys [560136] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/03/14 16:33:58 A . (.Microsoft Corporation - Tรกrolรกsi szolgรกltatรกsminล‘sรฉgi szลฑrล‘.) โ€“ C:\WINDOWS\System32\drivers\storqosflt.sys [82432] =>.Microsoft Corporation
                                      O58 - SDL:2018/06/15 09:10:52 A . (.Microsoft Corporation - MS UFS Storport Miniport Driver.) โ€“ C:\WINDOWS\System32\drivers\storufs.sys [48544] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Storage VSC Driver.) โ€“ C:\WINDOWS\System32\drivers\storvsc.sys [40352] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:36 A . (.Microsoft Corporation - WDM CODEC Class Device Driver 2.0.) โ€“ C:\WINDOWS\System32\drivers\stream.sys [75264] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Microsoft RemoteFX Synth3D videovirtualizรกl.) โ€“ C:\WINDOWS\System32\drivers\Synth3dVsc.sys [64512] =>.Microsoft Corporation
                                      O58 - SDL:2013/08/22 14:40:24 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) โ€“ C:\WINDOWS\System32\drivers\tap0901.sys [40664] =>.OpenVPN Technologies, Inc.ยฎ
                                      O58 - SDL:2018/04/12 01:34:36 A . (.Microsoft Corporation - SCSI Tape Class Driver.) โ€“ C:\WINDOWS\System32\drivers\tape.sys [31232] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:14 A . (.Microsoft Corporation - Export driver for kernel mode TPM API.) โ€“ C:\WINDOWS\System32\drivers\tbs.sys [27544] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/06/07 07:57:12 A . (.Microsoft Corporation - TCP/IP-illesztล‘program.) โ€“ C:\WINDOWS\System32\drivers\tcpip.sys [2719032] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:32 A . (.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) โ€“ C:\WINDOWS\System32\drivers\tcpipreg.sys [51712] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:22 A . (.Microsoft Corporation - TDI Wrapper.) โ€“ C:\WINDOWS\System32\drivers\tdi.sys [40352] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:22 A . (.Microsoft Corporation - TDI Translation Driver.) โ€“ C:\WINDOWS\System32\drivers\tdx.sys [121248] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 18:28:07 A . (.Microsoft Corporation - Terminal Server Input Driver.) โ€“ C:\WINDOWS\System32\drivers\terminpt.sys [37280] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/01/01 09:12:20 A . (.Microsoft Corporation - Kernel Transaction Manager Driver.) โ€“ C:\WINDOWS\System32\drivers\tm.sys [128824] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/08/09 06:55:01 A . (.Microsoft Corporation - TPM-eszkรถzillesztล‘.) โ€“ C:\WINDOWS\System32\drivers\tpm.sys [230304] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:54 A . (.Microsoft Corporation - Remote Desktop USB Hub Filter Driver.) โ€“ C:\WINDOWS\System32\drivers\TsUsbFlt.sys [63488] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Remote Desktop Generic USB Driver.) โ€“ C:\WINDOWS\System32\drivers\TsUsbGD.sys [35328] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 18:27:58 A . (.Microsoft Corporation - Remote Desktop USB Hub.) โ€“ C:\WINDOWS\System32\drivers\tsusbhub.sys [126464] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:32 A . (.Microsoft Corporation - Microsoft alagรบtkapcsolat illesztล‘programja.) โ€“ C:\WINDOWS\System32\drivers\tunnel.sys [119296] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Microsoft Uasp Driver.) โ€“ C:\WINDOWS\System32\drivers\uaspstor.sys [79776] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:14 A . (.Microsoft Corporation - USB Connector Manager KMDF Class Extension.) โ€“ C:\WINDOWS\System32\drivers\UcmCx.sys [128512] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:14 A . (.Microsoft Corporation - UCM-TCPCI KMDF Class Extension.) โ€“ C:\WINDOWS\System32\drivers\UcmTcpciCx.sys [152576] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - USB Connector Manager UCSI Client.) โ€“ C:\WINDOWS\System32\drivers\UcmUcsi.sys [57856] =>.Microsoft Corporation
                                      O58 - SDL:2018/08/03 05:40:48 A . (.Microsoft Corporation - USB Controller Extension.) โ€“ C:\WINDOWS\System32\drivers\Ucx01000.sys [228136] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:54 A . (.Microsoft Corporation - โ€˜udecx.DRIVERโ€™.) โ€“ C:\WINDOWS\System32\drivers\Udecx.sys [45056] =>.Microsoft Corporation
                                      O58 - SDL:2019/03/06 10:31:31 A . (.Microsoft Corporation - UDF File System Driver.) โ€“ C:\WINDOWS\System32\drivers\udfs.sys [324608] =>.Microsoft Corporation
                                      O58 - SDL:2018/06/08 12:31:08 A . (.Microsoft Corporation - UEFI Driver for NT.) โ€“ C:\WINDOWS\System32\drivers\uefi.sys [29600] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 18:28:04 A . (.Microsoft Corporation - Microsoft User Experience Virtualization Ag.) โ€“ C:\WINDOWS\System32\drivers\UevAgentDriver.sys [40344] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:14 A . (.Microsoft Corporation - USB Function Driver Class Extension.) โ€“ C:\WINDOWS\System32\drivers\ufx01000.sys [282008] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:51 A . (.Microsoft Corporation - UFX Chipidea Client Driver.) โ€“ C:\WINDOWS\System32\drivers\UfxChipidea.sys [98200] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:51 A . (.Microsoft Corporation - UFX Synopsys Client Driver.) โ€“ C:\WINDOWS\System32\drivers\ufxsynopsys.sys [144288] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - User-Mode Bus Enumerator.) โ€“ C:\WINDOWS\System32\drivers\umbus.sys [56832] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:51 A . (.Microsoft Corporation - Generic pass-through driver.) โ€“ C:\WINDOWS\System32\drivers\umpass.sys [14336] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:51 A . (.Microsoft Corporation - USB Role-Switch Driver for Chipidea Core.) โ€“ C:\WINDOWS\System32\drivers\urschipidea.sys [29088] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:14 A . (.Microsoft Corporation - USB Role-Switch Class Extension.) โ€“ C:\WINDOWS\System32\drivers\urscx01000.sys [67992] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:51 A . (.Microsoft Corporation - USB Role-Switch Driver for Synopsys Core.) โ€“ C:\WINDOWS\System32\drivers\urssynopsys.sys [28064] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:34 A . (.Microsoft Corporation - Remote NDIS USB Driver.) โ€“ C:\WINDOWS\System32\drivers\usb8023.sys [22016] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:40 A . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) โ€“ C:\WINDOWS\System32\drivers\USBCAMD2.sys [37376] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - USB Common Class Generic Parent Driver.) โ€“ C:\WINDOWS\System32\drivers\usbccgp.sys [168864] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:46 A . (.Microsoft Corporation - USB Consumer IR Driver for eHome.) โ€“ C:\WINDOWS\System32\drivers\usbcir.sys [102912] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - Universal Serial Bus Driver.) โ€“ C:\WINDOWS\System32\drivers\usbd.sys [32152] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - EHCI eUSB Miniport Driver.) โ€“ C:\WINDOWS\System32\drivers\usbehci.sys [95648] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - Default Hub Driver for USB.) โ€“ C:\WINDOWS\System32\drivers\usbhub.sys [514464] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/11/09 04:49:37 A . (.Microsoft Corporation - USB3 HUB Driver.) โ€“ C:\WINDOWS\System32\drivers\USBHUB3.SYS [565048] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - OHCI USB Miniport Driver.) โ€“ C:\WINDOWS\System32\drivers\usbohci.sys [30208] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:14 A . (โ€ฆ) โ€“ C:\WINDOWS\System32\drivers\UsbPmApi.sys [39936] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - USB 1.1 & 2.0 portillesztล‘program.) โ€“ C:\WINDOWS\System32\drivers\usbport.sys [412576] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:47 A . (.Microsoft Corporation - USB Printer driver.) โ€“ C:\WINDOWS\System32\drivers\usbprint.sys [27136] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - USB Serial Driver.) โ€“ C:\WINDOWS\System32\drivers\usbser.sys [72192] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - USB-hรกttรฉrtรกrolรณ osztรกlyรบ illesztล‘program.) โ€“ C:\WINDOWS\System32\drivers\USBSTOR.SYS [131488] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - UHCI USB Miniport Driver.) โ€“ C:\WINDOWS\System32\drivers\usbuhci.sys [35328] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - USB XHCI Driver.) โ€“ C:\WINDOWS\System32\drivers\USBXHCI.SYS [434592] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2014/09/02 18:01:16 A . (. - VB Virtual Audio Device.) โ€“ C:\WINDOWS\System32\drivers\vbaudio_cable64_win7.s ys [41192] =>.Vincent Burelยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Virtual Drive Root Enumerator.) โ€“ C:\WINDOWS\System32\drivers\vdrvroot.sys [56224] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:20 A . (.Microsoft Corporation - Illesztล‘program-ellenล‘rzล‘ bล‘vรญtmรฉny.) โ€“ C:\WINDOWS\System32\drivers\VerifierExt.sys [217496] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/06/07 08:07:38 A . (.Microsoft Corporation - VHD Miniport Driver.) โ€“ C:\WINDOWS\System32\drivers\vhdmp.sys [707384] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/10/21 09:19:52 A . (.Microsoft Corporation - Virtuรกlis HID-keretrendszer (VHF) illesztล‘p.) โ€“ C:\WINDOWS\System32\drivers\vhf.sys [36352] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:23 A . (.Microsoft Corporation - Video Port Driver.) โ€“ C:\WINDOWS\System32\drivers\videoprt.sys [44544] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:54 A . (.Microsoft Corporation - Hyper-V VMBus KMCL.) โ€“ C:\WINDOWS\System32\drivers\vmbkmcl.sys [81824] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:08 A . (.Microsoft Corporation - Hyper-V VMBus Root KMCL.) โ€“ C:\WINDOWS\System32\drivers\vmbkmclr.sys [82432] =>.Microsoft Corporation
                                      O58 - SDL:2018/08/03 05:39:49 A . (.Microsoft Corporation - Microsoft Hyper-V virtuรกlisgรฉp-busz gyermek.) โ€“ C:\WINDOWS\System32\drivers\vmbus.sys [114080] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Microsoft VMBus HID Miniport.) โ€“ C:\WINDOWS\System32\drivers\VMBusHID.sys [25088] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Virtual Machine Generation Counter.) โ€“ C:\WINDOWS\System32\drivers\vmgencounter.sys [13312] =>.Microsoft Corporation
                                      O58 - SDL:2018/08/03 05:17:05 A . (.Microsoft Corporation - Virtual Machine Guest Infrastructure Driver.) โ€“ C:\WINDOWS\System32\drivers\vmgid.sys [10240] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Microsoft S3 Emulated Device Cap Driver.) โ€“ C:\WINDOWS\System32\drivers\vms3cap.sys [9216] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Virtual Storage Filter Driver.) โ€“ C:\WINDOWS\System32\drivers\vmstorfl.sys [47520] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/06/15 09:03:31 A . (.Microsoft Corporation - Kรถtetkezelล‘ illesztล‘.) โ€“ C:\WINDOWS\System32\drivers\volmgr.sys [83360] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:24 A . (.Microsoft Corporation - Kรถtetkezelล‘ bล‘vรญtmรฉny illesztล‘programja.) โ€“ C:\WINDOWS\System32\drivers\volmgrx.sys [373144] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:39 A . (.Microsoft Corporation - Kรถtet รกrnyรฉkmรกsolatรกnak illesztล‘programja.) โ€“ C:\WINDOWS\System32\drivers\volsnap.sys [398240] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Volume driver.) โ€“ C:\WINDOWS\System32\drivers\volume.sys [16288] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/08/03 05:39:58 A . (.Microsoft Corporation - Virtual PCI Bus.) โ€“ C:\WINDOWS\System32\drivers\vpci.sys [75160] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) โ€“ C:\WINDOWS\System32\drivers\vsmraid.sys [166808] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) โ€“ C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305560] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:43 A . (.Microsoft Corporation - Virtual Wireless Bus Driver.) โ€“ C:\WINDOWS\System32\drivers\vwifibus.sys [27136] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:43 A . (.Microsoft Corporation - Virtual WiFi Filter Driver.) โ€“ C:\WINDOWS\System32\drivers\vwififlt.sys [76288] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:43 A . (.Microsoft Corporation - Virtual WiFi Miniport Driver.) โ€“ C:\WINDOWS\System32\drivers\vwifimp.sys [44544] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:48 A . (.Microsoft Corporation - Wacom soros csatlakozรกsรบ digitรกlis toll รฉs.) โ€“ C:\WINDOWS\System32\drivers\wacompen.sys [30720] =>.Microsoft Corporation
                                      O58 - SDL:2019/01/01 08:48:03 A . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) โ€“ C:\WINDOWS\System32\drivers\wanarp.sys [81920] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:08 A . (.Microsoft Corporation - Watchdog Driver.) โ€“ C:\WINDOWS\System32\drivers\watchdog.sys [56320] =>.Microsoft Corporation
                                      O58 - SDL:2019/03/14 10:28:15 A . (.Microsoft Corporation - Windows Container Isolation FS Filter Drive.) โ€“ C:\WINDOWS\System32\drivers\wcifs.sys [152072] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/12/08 09:38:30 A . (.Microsoft Corporation - Windows Container Name Virtualization FS Fi.) โ€“ C:\WINDOWS\System32\drivers\wcnfs.sys [83456] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:58 A . (.Microsoft Corporation - Microsoft antimalware boot driver.) โ€“ C:\WINDOWS\System32\drivers\WdBoot.sys [44616] =>.Microsoft Windows Early Launch Anti-malware Publisherยฎ
                                      O58 - SDL:2018/04/12 01:34:22 A . (.Microsoft Corporation - Rendszermag mรณdรบ illesztล‘program-keretrends.) โ€“ C:\WINDOWS\System32\drivers\Wdf01000.sys [924856] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:58 A . (.Microsoft Corporation - Microsoft antimalware file system filter dr.) โ€“ C:\WINDOWS\System32\drivers\WdFilter.sys [331680] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:22 A . (.Microsoft Corporation - Kernel Mode Driver Framework Loader.) โ€“ C:\WINDOWS\System32\drivers\WdfLdr.sys [61624] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/05/17 07:33:34 A . (.Microsoft Corporation - WDI Driver Framework Driver.) โ€“ C:\WINDOWS\System32\drivers\WdiWiFi.sys [787968] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:15 A . (.Microsoft Corporation - WDM Companion Filter.) โ€“ C:\WINDOWS\System32\drivers\WdmCompanionFilter.sys [21408] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:58 A . (.Microsoft Corporation - Windows Defender Network Stream Filter.) โ€“ C:\WINDOWS\System32\drivers\WdNisDrv.sys [44032] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:23 A . (.Microsoft Corporation - Windows Error Reporting Kernel Driver.) โ€“ C:\WINDOWS\System32\drivers\werkernel.sys [45984] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/05/03 08:32:10 A . (.Microsoft Corporation - WFP NDIS 6.30 Lightweight Filter Driver.) โ€“ C:\WINDOWS\System32\drivers\wfplwfs.sys [164664] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:20 A . (.Microsoft Corporation - Wim file system Driver.) โ€“ C:\WINDOWS\System32\drivers\wimmount.sys [35744] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/06/15 07:08:14 A . (.Microsoft Corporation - Windows Trusted Runtime Interface Driver.) โ€“ C:\WINDOWS\System32\drivers\WindowsTrustedRT.sys [72768] =>.Microsoft Windows Hardware Abstraction Layer Publisherยฎ
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - Windows Trusted Runtime Service Proxy Drive.) โ€“ C:\WINDOWS\System32\drivers\WindowsTrustedRTProxy. sys [18472] =>.Microsoft Windows Hardware Abstraction Layer Publisherยฎ
                                      O58 - SDL:2018/08/03 05:39:49 A . (.Microsoft Corporation - Windows Hypervisor Interface Driver.) โ€“ C:\WINDOWS\System32\drivers\winhv.sys [31648] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/08/03 05:15:43 A . (.Microsoft Corporation - Windows Hypervisor Root Interface Driver.) โ€“ C:\WINDOWS\System32\drivers\winhvr.sys [68096] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Mellanox - Kernel WinMad.) โ€“ C:\WINDOWS\System32\drivers\winmad.sys [32152] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2019/05/17 07:36:02 A . (.Microsoft Corporation - Windows NAT-illesztล‘program.) โ€“ C:\WINDOWS\System32\drivers\winnat.sys [228864] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - Windows WinUSB Class Driver.) โ€“ C:\WINDOWS\System32\drivers\winusb.sys [92672] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Mellanox - Kernel WinVerbs.) โ€“ C:\WINDOWS\System32\drivers\winverbs.sys [64920] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:49 A . (.Microsoft Corporation - Windows Management Interface for ACPI.) โ€“ C:\WINDOWS\System32\drivers\wmiacpi.sys [18432] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:22 A . (.Microsoft Corporation - WMILIB WMI support library Dll.) โ€“ C:\WINDOWS\System32\drivers\wmilib.sys [20384] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:20 A . (.Microsoft Corporation - Windows รกtfedรฉsi szลฑrล‘.) โ€“ C:\WINDOWS\System32\drivers\wof.sys [209816] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:33:58 A . (.Microsoft Corporation - Windows Portable Device Upper Class Filter.) โ€“ C:\WINDOWS\System32\drivers\WpdUpFltr.sys [30112] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:22 A . (.Microsoft Corporation - WPP Trace Recorder.) โ€“ C:\WINDOWS\System32\drivers\WppRecorder.sys [33184] =>.Microsoft Windowsยฎ
                                      O58 - SDL:2018/04/12 01:34:39 A . (.Microsoft Corporation - Winsock2 IFS rรฉteg.) โ€“ C:\WINDOWS\System32\drivers\ws2ifsl.sys [23040] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:28 A . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) โ€“ C:\WINDOWS\System32\drivers\WUDFPf.sys [125440] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:28 A . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) โ€“ C:\WINDOWS\System32\drivers\WUDFRd.sys [264192] =>.Microsoft Corporation
                                      O58 - SDL:2018/06/15 06:44:07 A . (.Microsoft Corporation - Game Input Protocol Driver.) โ€“ C:\WINDOWS\System32\drivers\xboxgip.sys [295424] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:33:52 A . (.Microsoft Corporation - XINPUT filter driver for HID.) โ€“ C:\WINDOWS\System32\drivers\xinputhid.sys [46592] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:12 A . (.Microsoft Corporation - Full/Desktop Multi-User Win32 Driver.) โ€“ C:\WINDOWS\System32\win32k.sys [482304] =>.Microsoft Corporation
                                      O58 - SDL:2019/06/07 07:18:06 A . (.Microsoft Corporation - Alap Win32k kernel-illesztล‘program.) โ€“ C:\WINDOWS\System32\win32kbase.sys [2166784] =>.Microsoft Corporation
                                      O58 - SDL:2019/06/07 12:42:14 A . (.Microsoft Corporation - Full/Desktop Win32k Kernel Driver.) โ€“ C:\WINDOWS\System32\win32kfull.sys [3613696] =>.Microsoft Corporation
                                      O58 - SDL:2018/04/12 01:34:48 A . (.Microsoft Corporation - Full/Desktop Multi-User Win32 Driver.) โ€“ C:\WINDOWS\SysWOW64\win32k.sys [315904] =>.Microsoft Corporation
                                      O58 - SDL:2019/06/07 12:04:52 A . (.Microsoft Corporation - Full/Desktop Win32k Kernel Driver.) โ€“ C:\WINDOWS\SysWOW64\win32kfull.sys [2881536] =>.Microsoft Corporation

                                      โ€”\ Last modified or created user files (6) - 32s
                                      O61 - LFC: 2019/06/14 21:34:31 AC . (..) โ€“ C:\Users\User\AppData\Roaming\Hard Disk Sentinel\hds_control_add.vbs [1888]
                                      O61 - LFC: 2019/06/14 21:34:31 AC . (..) โ€“ C:\Users\User\AppData\Roaming\Hard Disk Sentinel\hds_control_check.vbs [522]
                                      O61 - LFC: 2019/06/14 21:34:31 AC . (..) โ€“ C:\Users\User\AppData\Roaming\Hard Disk Sentinel\hds_control_remove.vbs [446]
                                      O61 - LFC: 2019/06/16 16:11:20 A . (.glax24 (safezone.cc).) โ€“ C:\Users\User\Downloads\SecurityCheck (1).exe [528638]
                                      O61 - LFC: 2019/06/16 16:11:39 A . (.glax24 (safezone.cc).) โ€“ C:\Users\User\Downloads\SecurityCheck (2).exe [528638]
                                      O61 - LFC: 2019/06/16 15:02:18 A . (..) โ€“ C:\Users\User\Downloads\SecurityCheck.exe [852798]

                                      โ€”\ File Associations Shell Spawning (10) - 0s
                                      O67 - Shell Spawning: <.bat> [HKLM..\open\Command] (โ€ฆ) โ€“ โ€˜%1โ€™ %* =>.Default.Value
                                      O67 - Shell Spawning: <.cpl> [HKLM..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) โ€“ C:\Windows\System32\control.exe =>.Microsoft Corporation
                                      O67 - Shell Spawning: <.cmd> [HKLM..\open\Command] (โ€ฆ) โ€“ โ€˜%1โ€™ %* =>.Default.Value
                                      O67 - Shell Spawning: <.com> [HKLM..\open\Command] (โ€ฆ) โ€“ โ€˜%1โ€™ %* =>.Default.Value
                                      O67 - Shell Spawning: <.evt> [HKLM..\open\Command] (.Microsoft Corporation - Esemรฉnynaplรณ beรฉpรผlล‘ moduljรกnak indรญtรณja.) โ€“ C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation
                                      O67 - Shell Spawning: <.exe> [HKLM..\open\Command] (โ€ฆ) โ€“ โ€˜%1โ€™ %* =>.Default.Value
                                      O67 - Shell Spawning: <.html> [HKLM..\open\Command] (.Microsoft Corporation - Internet Explorer.) โ€“ C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporationยฎ
                                      O67 - Shell Spawning: <.js> [HKLM..\open\Command] (โ€ฆ) โ€“ C:\Windows\System32\WScript.exe โ€˜%1โ€™ %* =>.Default.Value
                                      O67 - Shell Spawning: <.reg> [HKLM..\open\Command] (.Microsoft Corporation - Beรกllรญtรกsszerkesztล‘.) โ€“ C:\Windows\regedit.exe =>.Microsoft Corporation
                                      O67 - Shell Spawning: <.scr> [HKLM..\open\Command] (โ€ฆ) โ€“ โ€˜%1โ€™ /S =>.Default.Value

                                      โ€”\ Start Menu Internet (8) - 0s
                                      O68 - StartMenuInternet: [64Bits][HKLM..\Shell\open\Command] (.Google Inc. - Google Chrome.) โ€“ C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O68 - StartMenuInternet: [64Bits][HKLM..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) โ€“ C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporationยฎ
                                      O68 - StartMenuInternet: [64Bits][HKLM..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) โ€“ C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
                                      O68 - StartMenuInternet: [64Bits][HKLM..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE felhasznรกlรณkรฉnti inicializรกciรณs eszkรถz.) โ€“ C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
                                      O68 - StartMenuInternet: [64Bits][HKLM..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) โ€“ C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
                                      O68 - StartMenuInternet: [64Bits][HKLM..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE felhasznรกlรณkรฉnti inicializรกciรณs eszkรถz.) โ€“ C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
                                      O68 - StartMenuInternet: [64Bits][HKLM..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) โ€“ C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
                                      O68 - StartMenuInternet: [64Bits][HKLM..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE felhasznรกlรณkรฉnti inicializรกciรณs eszkรถz.) โ€“ C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation

                                      โ€”\ Search Browser Infection (2) - 0s
                                      O69 - SBI: SearchScopes [HKCU] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ =>.Bing.com
                                      O69 - SBI: SearchScopes [HKLM] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com

                                      โ€”\ Search Svchost Services (49) - 2s
                                      O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Microsoft intelligens kรกrtya tanรบsรญtvรกny-te.) โ€“ C:\WINDOWS\System32\certprop.dll [188928] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Microsoft intelligens kรกrtya tanรบsรญtvรกny-te.) โ€“ C:\Windows\System32\certprop.dll [188928] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - Kiszolgรกlรณ szolgรกltatรกs DLL-je.) โ€“ C:\Windows\System32\srvsvc.dll [276992] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Csoporthรกzirend รผgyfรฉl.) โ€“ C:\Windows\System32\gpsvc.dll [1271808] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - IKE bล‘vรญtmรฉny.) โ€“ C:\Windows\System32\IKEEXT.DLL [990720] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - IPv4-hรกlรณzatokon IPv6-kapcsolรณdรกsi lehetล‘sรฉ.) โ€“ C:\Windows\System32\iphlpsvc.dll [786432] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - Mรกsodlagos bejelentkezรฉsi szolgรกltatรกs DLL-.) โ€“ C:\Windows\System32\seclogon.dll [30720] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - iSCSI-felderรญtรฉsi szolgรกltatรกs.) โ€“ C:\Windows\System32\iscsiexe.dll [150528] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Microsoft EAPHost szolgรกltatรกs.) โ€“ C:\Windows\System32\eapsvc.dll [109568] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Feladatรผtemezล‘ szolgรกltatรกs.) โ€“ C:\Windows\System32\schedsvc.dll [889344] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) โ€“ C:\Windows\System32\wbem\WMIsvc.dll [224256] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) โ€“ C:\Windows\System32\profsvc.dll [397312] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Tรกvoli asztal beรกllรญtรกsa szolgรกltatรกs.) โ€“ C:\Windows\System32\SessEnv.dll [397312] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Problรฉmajelentรฉsek รฉs megoldรกsok.) โ€“ C:\Windows\System32\wercplsupport.dll [119808] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: InstallService (InstallService) . (.Microsoft Corporation - InstallService.) โ€“ C:\Windows\System32\InstallService.dll [1487360] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: LxpSvc (LxpSvc) . (.Microsoft Corporation - Biztosรญtja a honosรญtott Windows-erล‘forrรกsok.) โ€“ C:\Windows\System32\LanguageOverlayServer.dll [199680] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: shpamsvc (shpamsvc) . (.Microsoft Corporation - SharedPC.AccountManager.) โ€“ C:\Windows\System32\Windows.SharedPC.AccountManage r.dll [195584] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: PushToInstall (PushToInstall) . (.Microsoft Corporation - PushToInstall.) โ€“ C:\Windows\System32\PushToInstall.dll [262144] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) โ€“ C:\Windows\System32\XblGameSave.dll [1308672] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Microsoft hรกlรณzati csatlakozรกsi segรฉdszolgรก.) โ€“ C:\Windows\System32\NcaSvc.dll [167936] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - A Windows felรผgyeleti szolgรกltatรกsรกnak DLL-.) โ€“ C:\Windows\System32\Windows.Internal.Management.dl l [827392] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) โ€“ C:\Windows\System32\XblAuthManager.dll [1115648] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - BDE szolgรกltatรกs.) โ€“ C:\Windows\System32\bdesvc.dll [402944] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: NaturalAuthentication (NaturalAuthentication) . (.Microsoft Corporation - Termรฉszetes hitelesรญtรฉs szolgรกltatรกs.) โ€“ C:\Windows\System32\NaturalAuth.dll [824832] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Hรกlรณzat beรกllรญtรกsa szolgรกltatรกs.) โ€“ C:\Windows\System32\NetSetupSvc.dll [335360] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Microsoftยฎ-fiรณk szolgรกltatรกs.) โ€“ C:\Windows\System32\wlidsvc.dll [2247680] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Eszkรถztelepรญtรฉs-kezelล‘.) โ€“ C:\Windows\System32\DeviceSetupManager.dll [235520] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - Felhasznรกlรณkezelล‘.) โ€“ C:\Windows\System32\usermgr.dll [1027584] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Windows felรผleti tรฉma szolgรกltatรกsi DLL-je.) โ€“ C:\Windows\System32\themeservice.dll [69632] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: XboxGipSvc (XboxGipSvc) . (.Microsoft Corporation - Xbox Gip Management Service.) โ€“ C:\Windows\System32\XboxGipSvc.dll [58880] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Alkalmazรกsinformรกciรณs szolgรกltatรกs.) โ€“ C:\Windows\System32\appinfo.dll [166912] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: TokenBroker (TokenBroker) . (.Microsoft Corporation - Jogkivonat-szervezล‘.) โ€“ C:\Windows\System32\TokenBroker.dll [1395200] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Fรถldrajzi Hely Szolgรกltatรกs.) โ€“ C:\Windows\System32\lfsvc.dll [44544] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: Irmon (Irmon) . (.Microsoft Corporation - Infravรถrรถs figyelล‘.) โ€“ C:\Windows\System32\irmon.dll [24576] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Tรกvelรฉrรฉsi automatikushรญvรกs-kezelล‘.) โ€“ C:\Windows\System32\rasauto.dll [104960] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Tรกvelรฉrรฉsi csatlakozรกskezelล‘.) โ€“ C:\Windows\System32\rasmans.dll [935936] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dinamikus kapcsolatkezelล‘.) โ€“ C:\Windows\System32\mprdim.dll [497664] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Rendszeresemรฉny-jelzล‘ szolgรกltatรกs (SENS).) โ€“ C:\Windows\System32\Sens.dll [73216] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT - segรญtล‘ รถsszetevล‘k.) โ€“ C:\Windows\System32\ipnathlp.dll [604672] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoftยฎ Windowsโ„ข telefonos kiszolgรกlรณ.) โ€“ C:\Windows\System32\tapisrv.dll [308224] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) โ€“ C:\Windows\System32\wuaueng.dll [2912256] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Hรกttรฉrben futรณ intelligens รกtviteli szolgรกl.) โ€“ C:\Windows\System32\qmgr.dll [1374208] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Windows felรผlet szolgรกltatรกsi DLL-je.) โ€“ C:\Windows\System32\shsvcs.dll [613376] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) โ€“ C:\Windows\System32\dmwappushsvc.dll [57856] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: wisvc (wisvc) . (.Microsoft Corporation - Elล‘zetesek beรกllรญtรกsai.) โ€“ C:\Windows\System32\flightsettings.dll [858112] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: WpnService (WpnService) . (.Microsoft Corporation - A Windows lekรผldรฉses รฉrtesรญtรฉseit kezelล‘ re.) โ€“ C:\Windows\System32\WpnService.dll [280576] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) โ€“ C:\Windows\System32\XboxNetApiSvc.dll [1148928] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Munkamenet-vezรฉnylล‘ alapprogram frissรญtรฉse.) โ€“ C:\Windows\System32\usocore.dll [1383424] =>.Microsoft Corporation
                                      O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Szoftvertelepรญtรฉsi szolgรกltatรกs.) โ€“ C:\Windows\System32\appmgmts.dll [197120] =>.Microsoft Corporation

                                      โ€”\ Firewall Active Exception List (201) - 17s
                                      O87 - FAEL: โ€˜{9EB2155D-6E3B-4293-B6DD-77E39BD2FD48}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ C:\Program Files (x86)\Steam Library\steamapps\common\Starbound\win32\starbound .exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{D43162C9-FA1D-468C-8B28-62A6ED4437BA}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ C:\Program Files (x86)\Steam Library\steamapps\common\Starbound\win32\starbound .exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{FF9360F5-363E-4CF1-9461-7F9FD21184E5}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ C:\Program Files (x86)\Steam Library\steamapps\common\Starbound\win64\mod_uploa der.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{C0509DE4-5BEB-407C-B649-A85A822B61CF}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ C:\Program Files (x86)\Steam Library\steamapps\common\Starbound\win64\mod_uploa der.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{81938333-9B8B-46AC-A77F-4926BA349778}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ C:\Program Files (x86)\Steam Library\steamapps\common\Starbound\win64\starbound _server.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{47A9D0BF-76FA-4BE2-82A1-0DF4F0EA23A1}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ C:\Program Files (x86)\Steam Library\steamapps\common\Starbound\win64\starbound _server.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{805614FA-A72E-48B2-A639-B40CE2C46CE6}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ C:\Program Files (x86)\Steam Library\steamapps\common\Starbound\win64\starbound .exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{7B09032F-9A5D-4290-A281-E2655EB84388}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ C:\Program Files (x86)\Steam Library\steamapps\common\Starbound\win64\starbound .exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{18F9DC0F-EAC0-4D81-80FF-6B5FB16131E7}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Into the Breach\Breach.exe =>.Steam Games
                                      O87 - FAEL: โ€˜{55C14514-705F-45B1-8675-9BB4F8679402}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Into the Breach\Breach.exe =>.Steam Games
                                      O87 - FAEL: โ€˜{C1793764-ADCE-4369-8457-69ABF80AACF6}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Paladins\Binaries\Win 32\HirezBridge.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{D9526592-E4EE-4D11-9FF2-2776D3DA2E58}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Paladins\Binaries\Win 32\HirezBridge.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{73271507-055D-4CAA-A204-5DFB662A44A2}โ€™ [In-None-P17-TRUE] .(.Fatshark AB - Launcher for โ€˜Warhammer: Vermintide 2โ€™.) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Warhammer Vermintide 2\launcher\Launcher.exe =>.Fatshark ABยฎ
                                      O87 - FAEL: โ€˜{B3BCE073-63C6-44E7-959A-25370AEBFAC0}โ€™ [In-None-P6-TRUE] .(.Fatshark AB - Launcher for โ€˜Warhammer: Vermintide 2โ€™.) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Warhammer Vermintide 2\launcher\Launcher.exe =>.Fatshark ABยฎ
                                      O87 - FAEL: โ€˜{E6141CAB-52F9-4553-B928-A8BBAF6D6F2A}โ€™ [In-None-P6-TRUE] .(.Oracle Corporation - Javaโ„ข Platform SE binary.) โ€“ C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe =>.Oracle America, Inc.ยฎ
                                      O87 - FAEL: โ€˜{EE9C38B5-F49C-4776-844B-B839FAEE5E16}โ€™ [In-None-P17-TRUE] .(.Oracle Corporation - Javaโ„ข Platform SE binary.) โ€“ C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe =>.Oracle America, Inc.ยฎ
                                      O87 - FAEL: โ€˜UDP Query User{5EC5590F-2E2E-4F10-B2B5-623A4A879DC3}C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exeโ€™ [In-None-P17-TRUE] .(.Oracle Corporation - Javaโ„ข Platform SE binary.) โ€“ C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe =>.Oracle America, Inc.ยฎ
                                      O87 - FAEL: โ€˜TCP Query User{82820061-833D-40E7-AE86-6F49FE530924}C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exeโ€™ [In-None-P6-TRUE] .(.Oracle Corporation - Javaโ„ข Platform SE binary.) โ€“ C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe =>.Oracle America, Inc.ยฎ
                                      O87 - FAEL: โ€˜{787DAE2E-DDBE-4ED1-8611-72EB20F7C737}โ€™ [Out-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Remote CrashSender.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{37D6ACD3-2ECE-48BB-B644-B36817BF7273}โ€™ [Out-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launch er.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{C763B20C-3F1F-4CE9-8A55-9B70D9C5EA98}โ€™ [Out-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64 .exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{87B3A043-8C6E-4DA9-8102-F629E290B95F}โ€™ [Out-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{B33E57DE-2E6B-4B76-B4A3-9F3C2DD6E2C0}โ€™ [Out-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64 .exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{97275293-5EAC-44A3-8B66-0FB5EE22C03A}โ€™ [Out-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{9C421669-AC83-4D05-8895-99A348919A2E}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Remote CrashSender.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{62B9434A-8EE6-44D2-AD14-6B41B67E02E9}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launch er.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{2093907D-D450-46B7-AA69-89AD0258A0DD}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64 .exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{7EFE35B7-A571-4B70-AC4A-950442AFDA0C}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{6D47FBC2-F0C3-4477-8E51-194D49283382}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64 .exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{114FD507-5457-44ED-9484-9A97F1126831}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜UDP Query User{1B9BE9A6-AED4-4745-84F2-1C40A30123E3}F:\program files (x86)\kingdom come deliverance\bin\win64\kingdomcome.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\kingdom come deliverance\bin\win64\kingdomcome.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜TCP Query User{2947F63C-DC72-428B-98FA-C85BF9E04CD5}F:\program files (x86)\kingdom come deliverance\bin\win64\kingdomcome.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\kingdom come deliverance\bin\win64\kingdomcome.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜{DB8F39FB-E656-4002-A414-73ED53148822}โ€™ [In-None-P17-TRUE] .(.BitTorrent Inc. - ยตTorrent.) โ€“ C:\Users\User\AppData\Roaming\uTorrent\uTorrent.ex e =>.BitTorrent Incยฎ
                                      O87 - FAEL: โ€˜{BDB39E42-64A9-4306-B169-D9C6060BDE6B}โ€™ [In-None-P6-TRUE] .(.BitTorrent Inc. - ยตTorrent.) โ€“ C:\Users\User\AppData\Roaming\uTorrent\uTorrent.ex e =>.BitTorrent Incยฎ
                                      O87 - FAEL: โ€˜{44C10BA1-D95E-446A-8908-4025B96ACB07}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Tabletop Simulator\Tabletop Simulator.exe =>.Steam Games
                                      O87 - FAEL: โ€˜{483D5ECF-880F-4517-A997-E5816E202F66}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Tabletop Simulator\Tabletop Simulator.exe =>.Steam Games
                                      O87 - FAEL: โ€˜UDP Query User{5EBB07AA-5CE2-4E63-A0B8-D4EB6CF0EC74}F:\program files (x86)\steam\steamapps\common\dayofinfamy\dayofinfa my_x64.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\dayofinfamy\dayofinfa my_x64.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜TCP Query User{E2868BEC-E9F8-4147-B06D-46DB7C0C0266}F:\program files (x86)\steam\steamapps\common\dayofinfamy\dayofinfa my_x64.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\dayofinfamy\dayofinfa my_x64.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{1781EB3B-A46D-4497-8FA8-94D23F8DB91B}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\SlayTheSpire\SlayTheS pire.exe =>.Steam Games
                                      O87 - FAEL: โ€˜{2FF3FA40-E287-4F3A-9C41-286E844869BC}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\SlayTheSpire\SlayTheS pire.exe =>.Steam Games
                                      O87 - FAEL: โ€˜{5F79E6AD-9D6B-4503-9A33-F9D804995062}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜{211674AD-B9FD-4C4B-A32A-256C600DF03F}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜{6CBCBE8B-A2E1-4E6D-993A-9E31E28B4B8A}โ€™ [In-None-P17-TRUE] .(.Valve Corporation - Steam Client Bootstrapper.) โ€“ F:\Program Files (x86)\Steam\Steam.exe =>.Valveยฎ
                                      O87 - FAEL: โ€˜{F5EEC3AF-5C63-4561-8210-A6065997BCED}โ€™ [In-None-P6-TRUE] .(.Valve Corporation - Steam Client Bootstrapper.) โ€“ F:\Program Files (x86)\Steam\Steam.exe =>.Valveยฎ
                                      O87 - FAEL: โ€˜{4EBE3839-C026-4568-ADDD-5241CF4CB312}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\Steam\bin\cef\cef.win7\steamwebhelper. exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜{DE125C3F-0D9A-4569-B3DB-B21CD342E568}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\Steam\bin\cef\cef.win7\steamwebhelper. exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜{D94DAC10-D70C-44DE-A5D2-F3EBC6B7DE13}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\Steam\Steam.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜{5D710A87-3756-4549-A646-E6F3BB139C68}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\Steam\Steam.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜{FF16A8AC-BD81-44F8-8326-928B7CB3CC15}โ€™ [In-None-P17-TRUE] .(.ASUSTeK Computer Inc. - AI Suite II.) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe =>.ASUSTeK Computer Inc.ยฎ
                                      O87 - FAEL: โ€˜{3F001A8C-887B-495D-9213-CA4A9769694F}โ€™ [In-None-P6-TRUE] .(.ASUSTeK Computer Inc. - AI Suite II.) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe =>.ASUSTeK Computer Inc.ยฎ
                                      O87 - FAEL: โ€˜{51785286-9251-4B7C-942E-7DB392131971}โ€™ [In-None-P6-TRUE] .(.NVIDIA Corporation - NVIDIA Container.) โ€“ C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe =>.NVIDIA Corporationยฎ
                                      O87 - FAEL: โ€˜{7EE65A0A-A319-4F7F-8C1A-AC4AEF52512B}โ€™ [In-None-P17-TRUE] .(.NVIDIA Corporation - NVIDIA Container.) โ€“ C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe =>.NVIDIA Corporationยฎ
                                      O87 - FAEL: โ€˜{B1DCA9AC-013F-47F5-9C78-FBE4A75145F7}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\WitchIt\WitchIt\Binar ies\Win64\PropWitchHuntModule-Win64-Shipping.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{BB103188-CDF3-4D37-88E3-67D10B03EC41}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\WitchIt\WitchIt\Binar ies\Win64\PropWitchHuntModule-Win64-Shipping.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{78C3DB68-7EC7-4900-A45E-0194341B3BA2}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Starbound\win64\starb ound.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{A18295EE-AA04-4EC5-9AC6-3CD701EDF4C2}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Starbound\win64\starb ound.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{AC59FE4C-1582-46D2-AD9E-BE62CA298FF6}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Starbound\win64\starb ound_server.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{01E9D2F5-E53A-4356-BBE8-70CF1EC97A5E}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Starbound\win64\starb ound_server.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{8ED3538B-2B8C-4220-9206-A3107B3B2E47}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Starbound\win64\mod_u ploader.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{7219A9AC-22EE-4F54-B967-9282ACFDCD01}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Starbound\win64\mod_u ploader.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{3496B576-7895-445C-991C-EC2C037CF813}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Starbound\win32\starb ound.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{9D6C403F-D2FE-44E4-B91F-18E109887383}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Starbound\win32\starb ound.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{E9BB30CB-3EEF-4356-8C54-87C5B6C2A950}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\DarkestDungeon_window s\Darkest.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{B9408A47-9249-4293-BDBA-F20B0EDBD36F}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\DarkestDungeon_window s\Darkest.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{0B314D11-C32C-43E4-B149-FE38EFD980AF}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ C:\Program Files (x86)\Steam Library\steamapps\common\Warhammer Vermintide 2\launcher\Launcher.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{24650F17-712D-45EE-950F-27F6F17BDD31}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ C:\Program Files (x86)\Steam Library\steamapps\common\Warhammer Vermintide 2\launcher\Launcher.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{C4967524-5154-4897-BCC7-9ED5D8829A64}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\DarkestDungeon_window s\Darkest.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{32E6940E-B93E-454C-BD2F-477998C8A67E}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\DarkestDungeon_window s\Darkest.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{7639A943-01CD-4E79-9DE6-CE4C0EACF925}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ C:\Program Files (x86)\Steam Library\steamapps\common\Crypt of the NecroDancer\NecroDancer.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{9C96D8BD-8DE3-4CD6-8213-4B3F6B913A7C}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ C:\Program Files (x86)\Steam Library\steamapps\common\Crypt of the NecroDancer\NecroDancer.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜TCP Query User{9123E899-57CD-468C-B022-BF7168CC6C60}F:\program files (x86)\hearthstone\hearthstone.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\hearthstone\hearthstone.exe =>.Blizzard Entertainment, Inc.ยฎ
                                      O87 - FAEL: โ€˜UDP Query User{C7B03122-D63D-44B2-B54F-3F7A8F535921}F:\program files (x86)\hearthstone\hearthstone.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\hearthstone\hearthstone.exe =>.Blizzard Entertainment, Inc.ยฎ
                                      O87 - FAEL: โ€˜{1121F6B2-C244-429B-9C6E-F7EA758943EB}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\hearthstone\hearthstone.exe =>.Blizzard Entertainment, Inc.ยฎ
                                      O87 - FAEL: โ€˜{58AB977D-D9A2-42DE-B2BC-A232DE756B72}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\hearthstone\hearthstone.exe =>.Blizzard Entertainment, Inc.ยฎ
                                      O87 - FAEL: โ€˜TCP Query User{B48D18AF-196F-4E7F-8863-401D21365D69}F:\program files (x86)\steam\steamapps\common\paladins\binaries\win 64\paladins.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\paladins\binaries\win 64\paladins.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜UDP Query User{998FB094-3775-4664-BEF2-9E736DF1EA5F}F:\program files (x86)\steam\steamapps\common\paladins\binaries\win 64\paladins.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\paladins\binaries\win 64\paladins.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜TCP Query User{2D6E08AD-DC97-44E3-B419-09C243B02D18}F:\program files (x86)\steam\steamapps\common\realm royale\binaries\win64\realm.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\realm royale\binaries\win64\realm.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜UDP Query User{84ACFE52-5098-4014-BD0C-ECE78A1786C2}F:\program files (x86)\steam\steamapps\common\realm royale\binaries\win64\realm.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\realm royale\binaries\win64\realm.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜TCP Query User{85607BAD-86FA-4255-A750-2F3EB3C3F0C6}F:\program files (x86)\gog galaxy\games\gwent\gwent.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\gog galaxy\games\gwent\gwent.exe =>.GOG.com
                                      O87 - FAEL: โ€˜UDP Query User{E360E0C5-4844-405E-BCA6-B5AB67166BD4}F:\program files (x86)\gog galaxy\games\gwent\gwent.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\gog galaxy\games\gwent\gwent.exe =>.GOG.com
                                      O87 - FAEL: โ€˜{5EE7A351-E522-4212-8C11-1C65D6964187}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\gog galaxy\games\gwent\gwent.exe =>.GOG.com
                                      O87 - FAEL: โ€˜{CDDC5F7D-A703-4428-B1AE-59718806DDA8}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\gog galaxy\games\gwent\gwent.exe =>.GOG.com
                                      O87 - FAEL: โ€˜TCP Query User{B44553E0-11E0-4521-A5E7-098F96E794E1}C:\users\user\desktop\project.zomboid .v40.6\projectzomboid64.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ C:\users\user\desktop\project.zomboid.v40.6\projec tzomboid64.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜UDP Query User{780ABFB9-E3DA-4706-85AC-5E43D5E71AE1}C:\users\user\desktop\project.zomboid .v40.6\projectzomboid64.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ C:\users\user\desktop\project.zomboid.v40.6\projec tzomboid64.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜{1720C218-517F-4B4D-9B84-ED8637C8A1FB}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ C:\users\user\desktop\project.zomboid.v40.6\projec tzomboid64.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜{7E6602F1-6F50-46EC-BF4F-F2C3E3FFE655}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ C:\users\user\desktop\project.zomboid.v40.6\projec tzomboid64.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜TCP Query User{4EB5ADE8-1A0A-4CB5-9D0D-569C30B8D344}C:\users\user\desktop\project.zomboid .v40.6\jre64\bin\java.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ C:\users\user\desktop\project.zomboid.v40.6\jre64\ bin\java.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜UDP Query User{F7A4D549-B726-4EB5-BE87-409C620032E5}C:\users\user\desktop\project.zomboid .v40.6\jre64\bin\java.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ C:\users\user\desktop\project.zomboid.v40.6\jre64\ bin\java.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜{32FE615E-6219-47B5-B550-0EF341011BE1}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ C:\users\user\desktop\project.zomboid.v40.6\jre64\ bin\java.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜{C0667F0C-0C4D-4C77-83F3-368CA7E930E8}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ C:\users\user\desktop\project.zomboid.v40.6\jre64\ bin\java.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜{CAD7B2D4-0A9D-4C5C-961E-5CBED2FD5DFD}โ€™ [In-None-P6-TRUE] .(.PcWinTech.com - Simple Port Tester By PcWinTech.com.) โ€“ C:\Program Files (x86)\Simple Port Tester\spt.exe =>.PcWinTech.com
                                      O87 - FAEL: โ€˜{D32142D2-9405-44D2-83D7-296615BBB8B5}โ€™ [Out-None-P6-TRUE] .(.PcWinTech.com - Simple Port Tester By PcWinTech.com.) โ€“ C:\Program Files (x86)\Simple Port Tester\spt.exe =>.PcWinTech.com
                                      O87 - FAEL: โ€˜{0E66D7EB-849B-42BA-8ED1-C5FB776B0E85}โ€™ [In-None-P6-TRUE] .(.KeepSolid Inc. - VPN Unlimited.) โ€“ C:\Program Files (x86)\VPN Unlimited\vpn-unlimited.exe =>.KeepSolid Inc.ยฎ
                                      O87 - FAEL: โ€˜{9F23A6F2-9C68-400B-B36E-5F933BB8E3DC}โ€™ [In-None-P17-TRUE] .(.KeepSolid Inc. - VPN Unlimited.) โ€“ C:\Program Files (x86)\VPN Unlimited\vpn-unlimited.exe =>.KeepSolid Inc.ยฎ
                                      O87 - FAEL: โ€˜{67C3369F-EA56-4566-94CE-C4675A3DBEBE}โ€™ [In-None-P6-TRUE] .(.The OpenVPN Project - OpenVPN Daemon.) โ€“ C:\Program Files (x86)\VPN Unlimited\openvpn.exe =>.The OpenVPN Project
                                      O87 - FAEL: โ€˜{6D479402-9EDB-4C5A-A311-37EFC14A390E}โ€™ [In-None-P17-TRUE] .(.The OpenVPN Project - OpenVPN Daemon.) โ€“ C:\Program Files (x86)\VPN Unlimited\openvpn.exe =>.The OpenVPN Project
                                      O87 - FAEL: โ€˜{64E875AE-9AE2-45BE-A1D6-7BC6840C3D5C}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\PUBG\TslGame\Binaries \Win64\TslGame_BE.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{78EED7C5-8C33-4798-BB5B-2F8722206AB0}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\PUBG\TslGame\Binaries \Win64\TslGame_BE.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜TCP Query User{28260DC5-957E-4FFB-A912-2EEFBEDA1401}F:\program files (x86)\steam\steamapps\common\realm royale\binaries\win64\realm.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\realm royale\binaries\win64\realm.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜UDP Query User{6AB43FA8-9E99-4EB6-80BD-D52E940835B4}F:\program files (x86)\steam\steamapps\common\realm royale\binaries\win64\realm.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\realm royale\binaries\win64\realm.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{EAC6AB26-3B0A-48EE-8C1E-E377FD57C03F}โ€™ [In-None-P6-TRUE] .(.Valve Corporation - Steam Client WebHelper.) โ€“ F:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe =>.Valveยฎ
                                      O87 - FAEL: โ€˜{8C8BED44-CEDD-45A0-BCFA-C6F52C77E34D}โ€™ [In-None-P17-TRUE] .(.Valve Corporation - Steam Client WebHelper.) โ€“ F:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe =>.Valveยฎ
                                      O87 - FAEL: โ€˜TCP Query User{F07F973E-0723-46ED-AF9A-383594BEB4FD}F:\program files (x86)\mtga\mtga.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\mtga\mtga.exe =>.Wizards of the Coast, LLCยฎ
                                      O87 - FAEL: โ€˜UDP Query User{0EA0529E-8185-4353-A4FD-37FB6FD34177}F:\program files (x86)\mtga\mtga.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\mtga\mtga.exe =>.Wizards of the Coast, LLCยฎ
                                      O87 - FAEL: โ€˜{0A5E3EA5-3348-4EFB-9D23-53C03C2427C0}โ€™ [In-None-P6-TRUE] .(.Team17 Software Ltd - Worms Armageddon 3.7.2.2.) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Worms Armageddon\WA.exe =>.Team17 Software Ltd
                                      O87 - FAEL: โ€˜{0ED45DEF-381F-41BA-9948-7059B57B42AE}โ€™ [In-None-P17-TRUE] .(.Team17 Software Ltd - Worms Armageddon 3.7.2.2.) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Worms Armageddon\WA.exe =>.Team17 Software Ltd
                                      O87 - FAEL: โ€˜TCP Query User{F6CADF63-15D5-442F-B688-90B43F4A33F5}C:\overwatch\overwatch.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ C:\overwatch\overwatch.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜UDP Query User{35D41080-F185-45EC-B749-B1B2331D0B69}C:\overwatch\overwatch.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ C:\overwatch\overwatch.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜{CB78CEE6-92A8-4C3E-8EED-7DD1873C8A11}โ€™ [In-None-P6-TRUE] .(.KeepSolid Inc. - VPN Unlimited.) โ€“ C:\Program Files (x86)\VPN Unlimited\vpn-unlimited.exe =>.KeepSolid Inc.ยฎ
                                      O87 - FAEL: โ€˜{4961383C-7D51-439D-8658-50965B799F6A}โ€™ [In-None-P17-TRUE] .(.KeepSolid Inc. - VPN Unlimited.) โ€“ C:\Program Files (x86)\VPN Unlimited\vpn-unlimited.exe =>.KeepSolid Inc.ยฎ
                                      O87 - FAEL: โ€˜{0DC62A6E-C61D-454E-9139-B3C1C3F5950B}โ€™ [In-None-P6-TRUE] .(.The OpenVPN Project - OpenVPN Daemon.) โ€“ C:\Program Files (x86)\VPN Unlimited\openvpn.exe =>.The OpenVPN Project
                                      O87 - FAEL: โ€˜{DBD019ED-E926-4EBD-8F17-F07EACA60527}โ€™ [In-None-P17-TRUE] .(.The OpenVPN Project - OpenVPN Daemon.) โ€“ C:\Program Files (x86)\VPN Unlimited\openvpn.exe =>.The OpenVPN Project
                                      O87 - FAEL: โ€˜TCP Query User{3C6F7B5C-B50E-4E1A-8297-4D3170489D3E}F:\program files (x86)\steam\steamapps\common\minion masters\minionmasters.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\minion masters\minionmasters.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜UDP Query User{08292F0A-C6DB-4C48-AE38-894BFF61F6C7}F:\program files (x86)\steam\steamapps\common\minion masters\minionmasters.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\minion masters\minionmasters.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{62B42E54-14D2-4AA4-B90B-F57ECB2B5F4C}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Starbound\win64\starb ound.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{2114A5C0-3B51-4454-BEB5-F359726D2B54}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Starbound\win64\starb ound.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{FC7BB142-CDD6-4B7C-BA1F-362337EFABA4}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Starbound\win64\starb ound_server.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{8E48AB42-1E2D-4B74-9ED8-B2AB1F893124}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Starbound\win64\starb ound_server.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{7835FEB7-CA7B-444B-9E6A-70C652DAA75F}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Starbound\win64\mod_u ploader.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{CFC040AA-586A-4B94-9D8B-1B6F8DD042BD}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Starbound\win64\mod_u ploader.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{DA842AE2-638A-4ABB-A6B9-A535444690D7}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Starbound\win32\starb ound.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{DB8F656F-4AE4-4A83-878A-E2FD7DB71730}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Starbound\win32\starb ound.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{487A33AB-734A-4AC6-85DC-D4BBB6AB3799}โ€™ [In-None-P17-TRUE] .(.KeepSolid Inc. - VPN Unlimited.) โ€“ C:\Program Files (x86)\VPN Unlimited\vpn-unlimited.exe =>.KeepSolid Inc.ยฎ
                                      O87 - FAEL: โ€˜{66450C57-043F-4129-9FA6-6E2D360ABF47}โ€™ [Out-None-P17-TRUE] .(.KeepSolid Inc. - VPN Unlimited.) โ€“ C:\Program Files (x86)\VPN Unlimited\vpn-unlimited.exe =>.KeepSolid Inc.ยฎ
                                      O87 - FAEL: โ€˜TCP Query User{237F8B1D-E947-470F-8D02-A60171F53A13}F:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜UDP Query User{C7A1993B-6CDF-4D52-A631-F7E625B9F7B4}F:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{EC6FE916-EBE1-480B-8715-AE1E68509409}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Total War WARHAMMER\launcher\launcher.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{CD49829C-58BB-4503-B0A6-46E46B7C7CCC}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Total War WARHAMMER\launcher\launcher.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜TCP Query User{D3E12A7E-47CE-4402-89BB-17EB84E8CEB4}C:\program files (x86)\steam library\steamapps\common\total war warhammer\warhammer.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ C:\program files (x86)\steam library\steamapps\common\total war warhammer\warhammer.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜UDP Query User{2E2403F5-F60C-4C9C-9566-A525B16263E3}C:\program files (x86)\steam library\steamapps\common\total war warhammer\warhammer.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ C:\program files (x86)\steam library\steamapps\common\total war warhammer\warhammer.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{0CC9FD94-C2C8-4CCD-854C-2EF4BA4A462A}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ C:\Program Files (x86)\Steam Library\steamapps\common\Total War WARHAMMER\launcher\launcher.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{594D779F-69C6-40F1-B35D-C2A25FDB9361}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ C:\Program Files (x86)\Steam Library\steamapps\common\Total War WARHAMMER\launcher\launcher.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{03FF55D8-5321-4E0D-9C61-BE6172E462ED}โ€™ [In-None-P6-TRUE] .(.TeamViewer GmbH - TeamViewer 13.) โ€“ C:\Program Files (x86)\TeamViewer\TeamViewer.exe =>.TeamViewer GmbHยฎ
                                      O87 - FAEL: โ€˜{BAE463D8-FF40-4565-B784-18BA9C5503C4}โ€™ [In-None-P17-TRUE] .(.TeamViewer GmbH - TeamViewer 13.) โ€“ C:\Program Files (x86)\TeamViewer\TeamViewer.exe =>.TeamViewer GmbHยฎ
                                      O87 - FAEL: โ€˜{9AE21120-5D22-4066-9D13-5B0CB4509188}โ€™ [In-None-P6-TRUE] .(.TeamViewer GmbH - TeamViewer 13.) โ€“ C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe =>.TeamViewer GmbHยฎ
                                      O87 - FAEL: โ€˜{7A24BFAD-929E-4FA3-BCB1-55800CFC3AB9}โ€™ [In-None-P17-TRUE] .(.TeamViewer GmbH - TeamViewer 13.) โ€“ C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe =>.TeamViewer GmbHยฎ
                                      O87 - FAEL: โ€˜TCP Query User{C6C973FE-0932-481D-8543-F5F866367337}C:\program files (x86)\steam library\steamapps\common\total war warhammer ii\warhammer2.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ C:\program files (x86)\steam library\steamapps\common\total war warhammer ii\warhammer2.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜UDP Query User{6049E5B8-E738-4674-B6F1-0E1E90314D27}C:\program files (x86)\steam library\steamapps\common\total war warhammer ii\warhammer2.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ C:\program files (x86)\steam library\steamapps\common\total war warhammer ii\warhammer2.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜TCP Query User{8AD01148-3D6D-40BE-9427-486C3F9DB511}C:\programdata\oracle\java\javapath_t arget_594984\java.exeโ€™ [In-None-P6-TRUE] .(.Oracle Corporation - Javaโ„ข Platform SE binary.) โ€“ C:\programdata\oracle\java\javapath_target_594984\ java.exe =>.Oracle America, Inc.ยฎ
                                      O87 - FAEL: โ€˜UDP Query User{4B6A8653-2A79-4062-A24E-3811A572ABBE}C:\programdata\oracle\java\javapath_t arget_594984\java.exeโ€™ [In-None-P17-TRUE] .(.Oracle Corporation - Javaโ„ข Platform SE binary.) โ€“ C:\programdata\oracle\java\javapath_target_594984\ java.exe =>.Oracle America, Inc.ยฎ
                                      O87 - FAEL: โ€˜TCP Query User{4CFCDACA-E6C3-4DB7-A8C9-8F1A3FF4790B}F:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydayli ght-win64-shipping.exeโ€™ [In-None-P6-TRUE] .(.Epic Games, Inc. - DeadByDaylight.) โ€“ F:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydayli ght-win64-shipping.exe =>.Epic Games, Inc.
                                      O87 - FAEL: โ€˜UDP Query User{5BBF19CD-85B0-4C4E-AF27-F9753D9DBD9A}F:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydayli ght-win64-shipping.exeโ€™ [In-None-P17-TRUE] .(.Epic Games, Inc. - DeadByDaylight.) โ€“ F:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydayli ght-win64-shipping.exe =>.Epic Games, Inc.
                                      O87 - FAEL: โ€˜TCP Query User{CD3E5266-9E5C-4A88-AE2E-1090878815E4}F:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries \win64\tslgame.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries \win64\tslgame.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜UDP Query User{4CD48A6D-B0B6-483F-9468-0A8B54791C74}F:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries \win64\tslgame.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries \win64\tslgame.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜TCP Query User{5A10B298-A979-4229-A283-E94EFF5DC3F1}F:\program files (x86)\steam\steamapps\common\paladins\binaries\win 64\paladins.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\paladins\binaries\win 64\paladins.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜UDP Query User{05B439A9-BC12-4CEC-B5EE-A0341EDA6BB6}F:\program files (x86)\steam\steamapps\common\paladins\binaries\win 64\paladins.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\paladins\binaries\win 64\paladins.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜TCP Query User{091BFB6F-820B-4880-B45D-D92EA71ABB50}F:\overwatch\overwatch.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\overwatch\overwatch.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜UDP Query User{36C5B862-80B1-46BA-ADFB-DCD568DA125F}F:\overwatch\overwatch.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\overwatch\overwatch.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜{5B0749D6-A590-4A66-9B4B-05B2861930F3}โ€™ [In-None-P6-TRUE] .(.EasyAntiCheat Ltd - EasyAntiCheat Launcher.) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Dead by Daylight\DeadByDaylight.exe =>.EasyAntiCheat Oyยฎ
                                      O87 - FAEL: โ€˜{805F69D6-A68F-4526-9013-8CC44FFC7B43}โ€™ [In-None-P17-TRUE] .(.EasyAntiCheat Ltd - EasyAntiCheat Launcher.) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Dead by Daylight\DeadByDaylight.exe =>.EasyAntiCheat Oyยฎ
                                      O87 - FAEL: โ€˜TCP Query User{4A08F815-D63A-48DD-BC6E-335813C6F219}C:\program files\android\android studio\jre\bin\java.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ C:\program files\android\android studio\jre\bin\java.exe (.not file.) =>.Apache Inc.
                                      O87 - FAEL: โ€˜UDP Query User{19CB4119-BEBF-4E23-AE46-F165E9CEF14B}C:\program files\android\android studio\jre\bin\java.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ C:\program files\android\android studio\jre\bin\java.exe (.not file.) =>.Apache Inc.
                                      O87 - FAEL: โ€˜{C4747569-921D-41ED-8A9F-76431FFBBDD9}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Crypt of the NecroDancer\NecroDancer.exe =>.Brace Yourself Games (Transcendsense Technologies Inc)ยฎ
                                      O87 - FAEL: โ€˜{5E419E3A-C3E2-4D31-9FBA-F0C6677E0E87}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Crypt of the NecroDancer\NecroDancer.exe =>.Brace Yourself Games (Transcendsense Technologies Inc)ยฎ
                                      O87 - FAEL: โ€˜{EA4FC1D2-FE68-49E9-B2B4-16999A12A03D}โ€™ [In-None-P6-TRUE] .(.Valve Software - Artifact.) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Artifact\game\bin\win 64\dcg.exe =>.Valveยฎ
                                      O87 - FAEL: โ€˜{DD2DA01C-8E3D-4EAD-8A99-2F6FB95058B0}โ€™ [In-None-P17-TRUE] .(.Valve Software - Artifact.) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Artifact\game\bin\win 64\dcg.exe =>.Valveยฎ
                                      O87 - FAEL: โ€˜TCP Query User{863B9531-B2D7-4704-9624-7AE34EFBB708}F:\program files (x86)\steam\steamapps\common\foxhole\war\binaries\ win64\war-win64-shipping.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\foxhole\war\binaries\ win64\war-win64-shipping.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜UDP Query User{4E79A885-A7C5-4FF8-B373-D4B50F54B808}F:\program files (x86)\steam\steamapps\common\foxhole\war\binaries\ win64\war-win64-shipping.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\foxhole\war\binaries\ win64\war-win64-shipping.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{53F55F50-92E7-4D20-8FE5-4D83BD41215D}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\KingdomComeDeliveranc e\Bin\Win64\KingdomCome.exe =>.Warhorse Studios sro
                                      O87 - FAEL: โ€˜{9A53C875-4DBD-48AC-A53A-A70904186D94}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\KingdomComeDeliveranc e\Bin\Win64\KingdomCome.exe =>.Warhorse Studios sro
                                      O87 - FAEL: โ€˜TCP Query User{8AD3C4B7-3103-40E6-A316-93D631627E5D}F:\program files (x86)\steam\steamapps\common\total war warhammer ii\warhammer2.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\total war warhammer ii\warhammer2.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜UDP Query User{57DDA10F-8B08-4FE1-80FB-FC2E530FE3AF}F:\program files (x86)\steam\steamapps\common\total war warhammer ii\warhammer2.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\total war warhammer ii\warhammer2.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{D39A9D3D-B34E-439E-8CDD-E07C50753EB0}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Total War WARHAMMER II\launcher\launcher.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{7B191639-6125-47B0-92F4-E501ECE4D285}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Total War WARHAMMER II\launcher\launcher.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{368D80A0-420F-4418-938D-F60D368A4245}โ€™ [In-None-P6-TRUE] .(.Piriform Software Ltd - CCleaner emergency updater.) โ€“ C:\Program Files\CCleaner\CCUpdate.exe =>.Piriform Software Ltdยฎ
                                      O87 - FAEL: โ€˜{A214F61D-25B0-4987-BE83-56D9CCFA595E}โ€™ [In-None-P17-TRUE] .(.Piriform Software Ltd - CCleaner emergency updater.) โ€“ C:\Program Files\CCleaner\CCUpdate.exe =>.Piriform Software Ltdยฎ
                                      O87 - FAEL: โ€˜{E3CC47A5-FA45-4B53-AD6E-F487E2B67464}โ€™ [In-None-P6-TRUE] .(.Paradox Interactive - CK2.) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Crusader Kings II\CK2game.exe =>.Paradox Interactive
                                      O87 - FAEL: โ€˜{B753BE27-BF2D-4206-B290-F8F962029BA5}โ€™ [In-None-P17-TRUE] .(.Paradox Interactive - CK2.) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Crusader Kings II\CK2game.exe =>.Paradox Interactive
                                      O87 - FAEL: โ€˜{9CDE819C-0B1C-4EF2-8518-B790FF82CF41}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ C:\Program Files (x86)\Steam Library\steamapps\common\Total War WARHAMMER II\launcher\launcher.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{97BF55C0-0222-490E-8334-F622E84F35F2}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ C:\Program Files (x86)\Steam Library\steamapps\common\Total War WARHAMMER II\launcher\launcher.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜TCP Query User{85588907-780D-4E95-9676-BF82F6BA9228}F:\program files (x86)\steam\steamapps\common\for honor\forhonor.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\for honor\forhonor.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜UDP Query User{6FAFD5C8-5C00-4B70-A3B1-0D1EE7818E8A}F:\program files (x86)\steam\steamapps\common\for honor\forhonor.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\program files (x86)\steam\steamapps\common\for honor\forhonor.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜TCP Query User{42A47044-0B9E-4D03-BEE5-9D94A5EABF74}F:\apex\apex\r5apex.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\apex\apex\r5apex.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜UDP Query User{576BB589-3AA3-4652-9E05-61003A590564}F:\apex\apex\r5apex.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\apex\apex\r5apex.exe (.not file.) =>.SUP.Orphan
                                      O87 - FAEL: โ€˜{A3078D32-80C5-4487-A4E9-0FEAA745219C}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\WitchIt\WitchIt\Binar ies\Win64\PropWitchHuntModule-Win64-Shipping.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{824D5042-80DB-432C-B3C6-36410DD5392B}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\WitchIt\WitchIt\Binar ies\Win64\PropWitchHuntModule-Win64-Shipping.exe (.not file.) =>.Steam Games
                                      O87 - FAEL: โ€˜{2D7BBEFA-B22D-4E9F-86FF-DF53362BF177}โ€™ [In-None-P6-TRUE] .(.Bethesda Softworks - The Elder Scrolls V: Skyrim Special Edition.) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Skyrim Special Edition\SkyrimSELauncher.exe =>.Bethesda Softworks
                                      O87 - FAEL: โ€˜{88356294-4AB3-4BEE-B0BD-62158D348CCD}โ€™ [In-None-P17-TRUE] .(.Bethesda Softworks - The Elder Scrolls V: Skyrim Special Edition.) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\Skyrim Special Edition\SkyrimSELauncher.exe =>.Bethesda Softworks
                                      O87 - FAEL: โ€˜TCP Query User{C2121589-B452-42CE-A38F-1D93EB7549B2}C:\program files (x86)\byond\bin\byond.exeโ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ C:\program files (x86)\byond\bin\byond.exe
                                      O87 - FAEL: โ€˜UDP Query User{5E28657D-72CB-452D-BA00-7708811D1739}C:\program files (x86)\byond\bin\byond.exeโ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ C:\program files (x86)\byond\bin\byond.exe
                                      O87 - FAEL: โ€˜{01D9A3EC-C0C4-4525-9F87-1C8577422907}โ€™ [In-None-P6-TRUE] .(.Epic Games, Inc. - UE4Game.) โ€“ C:\Program Files (x86)\Steam Library\steamapps\common\Mordhau\Mordhau.exe =>.Epic Games, Inc.
                                      O87 - FAEL: โ€˜{C1E413D1-97C9-4475-AA77-4DCB72DA6C6E}โ€™ [In-None-P17-TRUE] .(.Epic Games, Inc. - UE4Game.) โ€“ C:\Program Files (x86)\Steam Library\steamapps\common\Mordhau\Mordhau.exe =>.Epic Games, Inc.
                                      O87 - FAEL: โ€˜{29B9C732-2F4D-4655-9ADB-60018EF91155}โ€™ [In-None-P17-TRUE] .(.Google Inc. - Google Chrome.) โ€“ C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google LLCยฎ
                                      O87 - FAEL: โ€˜{AF6C101F-BDFC-45BE-9FEF-A2D72EF654BC}โ€™ [In-None-P6-TRUE] .(.Oracle Corporation - Javaโ„ข Platform SE binary.) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\SlayTheSpire\jre\bin\ javaw.exe =>.Oracle America, Inc.ยฎ
                                      O87 - FAEL: โ€˜{FE12C7B1-5885-4E40-A25B-398BC3B5ABC8}โ€™ [In-None-P17-TRUE] .(.Oracle Corporation - Javaโ„ข Platform SE binary.) โ€“ F:\Program Files (x86)\Steam\SteamApps\common\SlayTheSpire\jre\bin\ javaw.exe =>.Oracle America, Inc.ยฎ
                                      O87 - FAEL: โ€˜{63B7B8FD-25E6-4882-A37E-C9CA976AC58E}โ€™ [In-None-P6-TRUE] .(.Spotify Ltd - Spotify.) โ€“ C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.109.383 .0_x86__zpdnekdrzrea0\Spotify.exe =>.Spotify ABยฎ
                                      O87 - FAEL: โ€˜{0885FC69-22AE-471B-964E-484E0E7B7E67}โ€™ [In-None-P6-TRUE] .(.Spotify Ltd - Spotify.) โ€“ C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.109.383 .0_x86__zpdnekdrzrea0\Spotify.exe =>.Spotify ABยฎ
                                      O87 - FAEL: โ€˜{BFACF32D-60A6-4686-894F-0650F976A426}โ€™ [In-None-P6-TRUE] .(.Spotify Ltd - Spotify.) โ€“ C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.109.383 .0_x86__zpdnekdrzrea0\Spotify.exe =>.Spotify ABยฎ
                                      O87 - FAEL: โ€˜{9197DE3E-8F57-458D-86B8-31F0160BE1D3}โ€™ [In-None-P17-TRUE] .(.Spotify Ltd - Spotify.) โ€“ C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.109.383 .0_x86__zpdnekdrzrea0\Spotify.exe =>.Spotify ABยฎ
                                      O87 - FAEL: โ€˜{1060E321-D44A-40F6-81E1-2717497CFF53}โ€™ [In-None-P17-TRUE] .(.Spotify Ltd - Spotify.) โ€“ C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.109.383 .0_x86__zpdnekdrzrea0\Spotify.exe =>.Spotify ABยฎ
                                      O87 - FAEL: โ€˜{8486E5BA-E745-40CC-8B3F-C0911AC6BF65}โ€™ [In-None-P6-TRUE] .(.Spotify Ltd - Spotify.) โ€“ C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.109.383 .0_x86__zpdnekdrzrea0\Spotify.exe =>.Spotify ABยฎ
                                      O87 - FAEL: โ€˜{1F58720D-8E4A-448E-8EEE-D0712BD21058}โ€™ [Out-None-P6-TRUE] .(.Spotify Ltd - Spotify.) โ€“ C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.109.383 .0_x86__zpdnekdrzrea0\Spotify.exe =>.Spotify ABยฎ
                                      O87 - FAEL: โ€˜{902D6643-E69D-4827-A9D5-9599D5C8EA6F}โ€™ [Out-None-P17-TRUE] .(.Spotify Ltd - Spotify.) โ€“ C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.109.383 .0_x86__zpdnekdrzrea0\Spotify.exe =>.Spotify ABยฎ
                                      O87 - FAEL: โ€˜{6623EB50-CB1D-412F-8646-A9EC77B09A2A}โ€™ [In-None-P17-TRUE] .(.NVIDIA Corporation - NVIDIA Container.) โ€“ C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe =>.NVIDIA Corporationยฎ
                                      O87 - FAEL: โ€˜{C2C5D1E7-1D42-4906-9ABF-021DC48153D2}โ€™ [In-None-P17-TRUE] .(.NVIDIA Corporation - NVIDIA Container.) โ€“ C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe =>.NVIDIA Corporationยฎ
                                      O87 - FAEL: โ€˜{36CDCA9A-0A6C-4A76-B502-78E28A54803A}โ€™ [In-None-P6-TRUE] .(.NVIDIA Corporation - NVIDIA Streamer Server Component.) โ€“ C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe =>.NVIDIA Corporationยฎ
                                      O87 - FAEL: โ€˜{97F45F33-D2B6-442A-A958-84E4622968C2}โ€™ [In-None-P17-TRUE] .(.NVIDIA Corporation - NVIDIA Streamer Server Component.) โ€“ C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe =>.NVIDIA Corporationยฎ
                                      O87 - FAEL: โ€˜{163AF06F-7A52-461A-B6B5-E0F8ADEDACD1}โ€™ [In-None-P6-TRUE] .(.ASUSTeK Computer Inc. - ASUS WiFi GO! Server.) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiFi GO! Server.exe =>.ASUSTeK Computer Inc.ยฎ
                                      O87 - FAEL: โ€˜{0882CECE-EF05-4C63-B049-F40254712A1C}โ€™ [In-None-P17-TRUE] .(.ASUSTeK Computer Inc. - ASUS WiFi GO! Server.) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiFi GO! Server.exe =>.ASUSTeK Computer Inc.ยฎ
                                      O87 - FAEL: โ€˜{E813655F-3502-47AE-B8B8-ECB9358E6AA7}โ€™ [In-None-P6-TRUE] .(โ€ฆ) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\ASUSDMS.exe =>.ASUSTeK Computer Inc.ยฎ
                                      O87 - FAEL: โ€˜{0464CD74-E8E5-47D6-8E26-EF0760224295}โ€™ [In-None-P17-TRUE] .(โ€ฆ) โ€“ C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\ASUSDMS.exe =>.ASUSTeK Computer Inc.ยฎ

                                      โ€”\ Product Upgrade Codes (65) - 1s
                                      O90 - PUC: โ€˜000061090900E0400000000000F01FECโ€™ [HKLM] . (.Microsoft DCF MUI (Hungarian) 2016.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜00006109110000000000000000F01FECโ€™ [HKLM] . (.Microsoft Office Professional Plus 2016.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜000061091A00E0400000000000F01FECโ€™ [HKLM] . (.Microsoft OneNote MUI (Hungarian) 2016.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜000061091E00E0400000000000F01FECโ€™ [HKLM] . (.Microsoft Office OSM MUI (Hungarian) 2016.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜000061092E00E0400000000000F01FECโ€™ [HKLM] . (.Microsoft Office OSM UX MUI (Hungarian) 2016.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜000061094400E0400000000000F01FECโ€™ [HKLM] . (.Microsoft InfoPath MUI (Hungarian) 2016.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜000061095100E0400000000000F01FECโ€™ [HKLM] . (.Microsoft Access MUI (Hungarian) 2016.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜000061096100E0400000000000F01FECโ€™ [HKLM] . (.Microsoft Excel MUI (Hungarian) 2016.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜000061098100E0400000000000F01FECโ€™ [HKLM] . (.Microsoft PowerPoint MUI (Hungarian) 2016.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜000061099100E0400000000000F01FECโ€™ [HKLM] . (.Microsoft Publisher MUI (Hungarian) 2016.) =>.bl.org
                                      O90 - PUC: โ€˜00006109A100E0400000000000F01FECโ€™ [HKLM] . (.Microsoft Outlook MUI (Hungarian) 2016.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜00006109A20000000100000000F01FECโ€™ [HKLM] . (.Microsoft Office 64-bit Components 2016.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜00006109A200E0400100000000F01FECโ€™ [HKLM] . (.Microsoft Office Shared 64-bit MUI (Hungarian) 2016.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜00006109AB00E0400000000000F01FECโ€™ [HKLM] . (.Microsoft Groove MUI (Hungarian) 2016.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜00006109B100E0400000000000F01FECโ€™ [HKLM] . (.Microsoft Word MUI (Hungarian) 2016.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜00006109B210E0400000000000F01FECโ€™ [HKLM] . (.Microsoft Skype for Business MUI (Hungarian) 2016.) =>.Skype Technologies
                                      O90 - PUC: โ€˜00006109C200E0400000000000F01FECโ€™ [HKLM] . (.Microsoft Office Proofing (Hungarian) 2016.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜00006109E600E0400000000000F01FECโ€™ [HKLM] . (.Microsoft Office Shared MUI (Hungarian) 2016.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜00006109F10070400000000000F01FECโ€™ [HKLM] . (.Microsoft Office Korrekturhilfen 2016 โ€“ Deutsch.) โ€“ C:\WINDOWS\Installer{90160000-001F-0407-0000-0000000FF1CE}\misc.exe,6 =>.Microsoft Corporation
                                      O90 - PUC: โ€˜00006109F10090400000000000F01FECโ€™ [HKLM] . (.Microsoft Office Proofing Tools 2016 - English.) โ€“ C:\WINDOWS\Installer{90160000-001F-0409-0000-0000000FF1CE}\misc.exe,6 =>.Microsoft Corporation
                                      O90 - PUC: โ€˜00006109F100E0400000000000F01FECโ€™ [HKLM] . (.Microsoft Office Nyelvi ellenล‘rzล‘ eszkรถzรถk 2016 โ€“ magyar.) โ€“ C:\WINDOWS\Installer{90160000-001F-040E-0000-0000000FF1CE}\misc.exe,6 =>.Microsoft Corporation
                                      O90 - PUC: โ€˜1926E8D15D0BCE53481466615F760A7Fโ€™ [HKLM] . (.Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219.) =>.bl.org
                                      O90 - PUC: โ€˜1A57DEF7C006B493386717E2A288162Fโ€™ [HKLM] . (.Microsoft Visual C++ 2017 x86 Additional Runtime - 14.12.25810.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜1D5E3C0FEDA1E123187686FED06E995Aโ€™ [HKLM] . (.Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219.) =>.bl.org
                                      O90 - PUC: โ€˜21EE4A31AE32173319EEFE3BD6FDFFE3โ€™ [HKLM] . (.Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜22BEFC8F7E2A1793E9ADB411DEFE1C58โ€™ [HKLM] . (.Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜4EA42A62D9304AC4784BF2238110160Fโ€™ [HKLM] . (.Java 8 Update 161.) โ€“ C:\Program Files (x86)\Java\jre1.8.0_161\bin\javaws.exe =>.Sun Microsystems
                                      O90 - PUC: โ€˜4EA42A62D9304AC4784BF238120712FFโ€™ [HKLM] . (.Java 7 Update 21.) =>.Sun Microsystems
                                      O90 - PUC: โ€˜6273C6FD35E7277479369E1F7467F915โ€™ [HKLM] . (.Asmedia ASM106x SATA Host Controller Driver.) โ€“ C:\Windows\Installer{DF6C3726-7E53-4772-9763-E9F147769F51}\ARPPRODUCTICON.exe =>.ASMedia Technology Inc
                                      O90 - PUC: โ€˜62DBF9290209B993A9A757D1160F9B24โ€™ [HKLM] . (.Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜66704617F7518ED44BF5967BB6F0F5ECโ€™ [HKLM] . (.calibre.) โ€“ C:\WINDOWS\Installer{71640766-157F-4DE8-B45F-69B76B0F5FCE}\main_icon =>.Kovid Goyal
                                      O90 - PUC: โ€˜67D6ECF5CD5FBA732B8B22BAC8DE1B4Dโ€™ [HKLM] . (.Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161.) =>.bl.org
                                      O90 - PUC: โ€˜68AB67CA408033019195008142136144โ€™ [HKLM] . (.Adobe Refresh Manager.) โ€“ C:\WINDOWS\Installer{AC76BA86-0804-1033-1959-001824311644}\ARPPRODUCTICON.exe =>.Western Digital Technologies
                                      O90 - PUC: โ€˜68AB67CA7DA78301B744CAF070E41400โ€™ [HKLM] . (.Adobe Acrobat Reader DC - Hungarian.) โ€“ C:\Windows\Installer{AC76BA86-7AD7-1038-7B44-AC0F074E4100}\SC_Reader.ico =>.Adobe Inc.
                                      O90 - PUC: โ€˜6E815EB96CCE9A53884E7857C57002F0โ€™ [HKLM] . (.Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161.) =>.bl.org
                                      O90 - PUC: โ€˜6E8D947A316B3EB3F8F540C548BE2AB9โ€™ [HKLM] . (.Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜70AF0CCEE368CB44B8D1AD229FE6F57Bโ€™ [HKLM] . (.LogMeIn Hamachi.) =>.LogMeIn Entreprise
                                      O90 - PUC: โ€˜76B6936749C5807409FB9E0007AC7504โ€™ [HKLM] . (.Microsoft Mouse and Keyboard Center.) โ€“ C:\WINDOWS\Installer{76396B67-5C94-4708-90BF-E90070CA5740}\DeviceCenter.ico =>.Microsoft Corporation
                                      O90 - PUC: โ€˜770EC1A51117D7C45A5C2E014D6BA88Dโ€™ [HKLM] . (.AMD Ryzen Master.) โ€“ C:\WINDOWS\Installer{5A1CE077-7111-4C7D-A5C5-E210D4B68AD8}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
                                      O90 - PUC: โ€˜7A948DC21A686A438B9F7DF2B5129AEAโ€™ [HKLM] . (.Microsoft Visual C++ 2017 x64 Additional Runtime - 14.12.25810.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜7AFDFA3032A71B14AA2C83899511723Dโ€™ [HKLM] . (.Dauntless.) โ€“ C:\WINDOWS\Installer{03AFDFA7-7A23-41B1-AAC2-3898591127D3}\ARPPRODUCTICON.exe
                                      O90 - PUC: โ€˜7C9F8B73BF303523781852719CD9C700โ€™ [HKLM] . (.Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜84b9c17023c712640acaf308593282f8โ€™ [HKLM] . (.Microsoft Visual C++ 2005 Redistributable (x64).) =>.bl.org
                                      O90 - PUC: โ€˜93B0BF4E199C7EE459DDA1A187753DD3โ€™ [HKLM] . (.Asmedia USB Host Controller Driver.) โ€“ C:\Windows\Installer{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}\ARPPRODUCTICON.exe =>.ASMedia Technology Inc
                                      O90 - PUC: โ€˜96F071321C0420728110000010000000โ€™ [HKLM] . (.7-Zip 18.01 (x64 edition).) =>.Igor Pavlov
                                      O90 - PUC: โ€˜A089CE062ADB6BC44A720BA745894BACโ€™ [HKLM] . (.Google Update Helper.) =>.Google Inc.
                                      O90 - PUC: โ€˜AECFCA3CF042CCD40A3CDD55EF6E3C2Cโ€™ [HKLM] . (.Update for Windows 10 for x64-based Systems (KB4023057).) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜b25099274a207264182f8181add555d0โ€™ [HKLM] . (.Microsoft Visual C++ 2005 Redistributable.) =>.bl.org
                                      O90 - PUC: โ€˜B49B480DE8A31B54DB7A931EAD896078โ€™ [HKLM] . (.MTG Arena.) โ€“ C:\WINDOWS\Installer{D084B94B-3A8E-45B1-BDA7-39E1DA980687}\Icon_1.exe
                                      O90 - PUC: โ€˜BE25982827556663C89A00B0C67E3905โ€™ [HKLM] . (.Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.12.25810.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜C025571B2A687A53689168CD7369889Bโ€™ [HKLM] . (.Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜C3AEB2FCAE628F23AAB933F1E743AB79โ€™ [HKLM] . (.Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜CDA2E99C7430E6336A301F99B2905D28โ€™ [HKLM] . (.Microsoft Visual C++ 2017 x64 Minimum Runtime - 14.12.25810.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜D20352A90C039D93DBF6126ECE614057โ€™ [HKLM] . (.Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17.) =>.bl.org
                                      O90 - PUC: โ€˜DC8A59DBF9D1DA5389A1E3975220E6BBโ€™ [HKLM] . (.Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030.) =>.Microsoft Corporation
                                      O90 - PUC: โ€˜E5070DFEB8954D64D8B554933471468Bโ€™ [HKLM] . (.Balanced.) โ€“ C:\WINDOWS\Installer{EFD0705E-598B-46D4-8D5B-4539431764B8}\ARPPRODUCTICON.exe =>.Adobe Inc.
                                      O90 - PUC: โ€˜EDE8C96D5CBBB634E8E05C6A3D11FCF4โ€™ [HKLM] . (.Microsoft XNA Framework Redistributable 4.0 Refresh.) โ€“ C:\WINDOWS\Installer{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}\ProductIcon =>.bl.org
                                      O90 - PUC: โ€˜F0C9304F1C4E5095E9D7DD8ADE3E56CBโ€™ [HKLM] . (.Javaโ„ข SE Development Kit 11.0.1 (64-bit).) โ€“ C:\Program Files\Java\jdk-11.0.1\bin\java.exe =>.Sun Microsystems
                                      O90 - PUC: โ€˜F60730A4A66673047777F5728467D401โ€™ [HKLM] . (.Java Auto Updater.) =>.Sun Microsystems
                                      O90 - PUC: โ€˜F8385C66458B55A4986E6A3178744AFDโ€™ [HKLM] . (.Epic Games Launcher Prerequisites (x64).) โ€“ C:\Windows\Installer{66C5838F-B854-4A55-89E6-A6138747A4DF}\UnrealEngineLauncher.ico =>.Legitimate
                                      O90 - PUC: โ€˜FD5EFB39E677F6346839FDF1270C3E1Cโ€™ [HKLM] . (.Epic Games Launcher.) โ€“ C:\Windows\Installer{93BFE5DF-776E-436F-8693-DF1F72C0E3C1}\Installer.ico =>.Epic Games
                                      O90 - PUC: โ€˜254308F1F897BF945ADDF925F707714Eโ€™ [HKCU] . (.GoTo Opener.) โ€“ %APPDATA%\Microsoft\Installer{1F803452-798F-49FB-A5DD-9F527F7017E4}\icon.ico =>.LogMeIn Entreprise
                                      O90 - PUC: โ€˜33DCD5F793012B3C59836B546BB5AB36โ€™ [HKCU] . (.OEM Application Profile.) โ€“ %APPDATA%\Microsoft\Installer{7F5DCD33-1039-C3B2-9538-B645B65BBA63}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
                                      O90 - PUC: โ€˜254308F1F897BF945ADDF925F707714Eโ€™ [HKU] . (.GoTo Opener.) โ€“ %APPDATA%\Microsoft\Installer{1F803452-798F-49FB-A5DD-9F527F7017E4}\icon.ico =>.LogMeIn Entreprise
                                      O90 - PUC: โ€˜33DCD5F793012B3C59836B546BB5AB36โ€™ [HKU] . (.OEM Application Profile.) โ€“ %APPDATA%\Microsoft\Installer{7F5DCD33-1039-C3B2-9538-B645B65BBA63}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc

                                      โ€”\ Windows Installer Scan (37) - 50s
                                      [MD5.0F2AE29610864A8487889E1EEA69C07A] [WIS][2018/12/08 00:22:08] (.Oracle Corporation - Javaโ„ข SE Development Kit 11.0.1 (64-bit).) โ€“ C:\WINDOWS\Installer\12fad9c.msi [157143040] =>.Oracle Corporation
                                      [MD5.39C3132D0E66CB358719ABE4725919E0] [WIS][2018/01/24 19:32:27] (.Oracle - Java SE Runtime Environment 7.0.) โ€“ C:\WINDOWS\Installer\1338aa.msi [887296] =>.Oracle
                                      [MD5.BF592B056BDB8105559F2A80389ABA0B] [WIS][2019/04/03 12:52:00] (.Wizards of the Coast - MTG Arena.) โ€“ C:\WINDOWS\Installer\13bb40c.msi [3976192] =>.Wizards of the Coast
                                      [MD5.F52386501B26231F5E99F363298C57D4] [WIS][2018/03/04 20:01:20] (.LogMeIn, Inc. - GoTo Opener 1.0.0.473.) โ€“ C:\WINDOWS\Installer\1954980.msi [118784] =>.LogMeIn, Inc.
                                      [MD5.17F74E5251853FC0F8D3CE5AE28AD9DA] [WIS][2019/01/03 16:32:12] (.Advanced Micro Devices, Inc. - AMD Ryzen Master.) โ€“ C:\WINDOWS\Installer\1bf451.msi [52445696] =>.Advanced Micro Devices, Inc.
                                      [MD5.94E752CF7EB9999AAD359AC251914DEE] [WIS][2019/04/04 05:32:02] (.LogMeIn, Inc. - LogMeIn Hamachi Installer.) โ€“ C:\WINDOWS\Installer\22231.msi [9142272] =>.LogMeIn, Inc.
                                      [MD5.259A0C643C4BDECE6D01908F759F0178] [WIS][2018/07/11 13:04:52] (.Phoenix Labs - Dauntless.) โ€“ C:\WINDOWS\Installer\241388e3.msi [60349952] =>.Phoenix Labs
                                      [MD5.202B7EC9D41CDA7ECC9A5DB38301AB9F] [WIS][2019/05/15 16:12:27] (.Google LLC - Google Update Helper.) โ€“ C:\WINDOWS\Installer\83f6b.msi [40960] =>.Google LLC
                                      [MD5.37A0C7A58DACB06F2074A4593B9750C7] [WIS][2018/01/24 19:21:04] (.Oracle Corporation - Java SE Runtime Environment 8 Update 161.) โ€“ C:\WINDOWS\Installer\8ccc2.msi [61681664] =>.Oracle Corporation
                                      [MD5.1CE69AAB7A515676FA76AD9072411664] [WIS][2018/01/24 19:20:54] (.Oracle Corporation - Java Auto Updater.) โ€“ C:\WINDOWS\Installer\8ccc6.msi [765952] =>.Oracle Corporation
                                      [MD5.CA0294C7B4650B1D6F8BFA146FE95D44] [WIS][2015/03/17 10:41:48] (.Adobe Systems Incorporated.) โ€“ C:\WINDOWS\Installer\8cd4b.msi [2801664] =>.Adobe Systems Incorporated
                                      [MD5.1AFC4C8781D64BC6A800C37C1BF3B6F9] [WIS][2018/03/09 22:47:05] (.Igor Pavlov - 7-Zip (x64 edition) Package.) โ€“ C:\WINDOWS\Installer\8dfee9.msi [1709056] =>.Igor Pavlov
                                      [MD5.A5D5B4055E0879974B4F30CD2E13C657] [WIS][2016/08/18 22:51:54] (.Advanced Micro Devices, Inc. - OEM Application Profile.) โ€“ C:\WINDOWS\Installer\9627e.msi [1081856] =>.Advanced Micro Devices, Inc.
                                      [MD5.EC92033C38C276EA431E5DB2D8A0B5D4] [WIS][2017/04/12 17:07:07] (.Advanced Micro Devices, Inc. - Balanced.) โ€“ C:\WINDOWS\Installer\96286.msi [1553408] =>.Advanced Micro Devices, Inc.
                                      [MD5.DAEF9610629678DE57C4567339F6E52C] [WIS][2019/02/12 11:53:11] (.Adobe Systems Incorporated - Adobe ARM Installer.) โ€“ C:\WINDOWS\Installer\b9e7b.msi [889856] =>.Adobe Systems Incorporated
                                      [MD5.7C89755C18F46136D533B33B8D8E7F70] [WIS][2018/09/15 11:05:04] (.Kovid Goyal - calibre Installer.) โ€“ C:\WINDOWS\Installer\c52761.msi [64929792] =>.Kovid Goyal
                                      [MD5.2F1A04407A93F20F4FD8E05F01D2FF0E] [WIS][2018/05/20 10:29:02] (.Epic Games, Inc. - Epic Games Launcher.) โ€“ C:\WINDOWS\Installer\da5a04.msi [32362496] =>.Epic Games, Inc.
                                      [MD5.7873ACD3BFA53B19469E6AB5606C80FE] [WIS][2015/11/19 10:56:58] (.Epic Games, Inc. - Epic Games Launcher Prerequisites (x64).) โ€“ C:\WINDOWS\Installer\da5a0b.msi [11919360] =>.Epic Games, Inc.
                                      [MD5.A534C16ED3BDCF504274CAE4DB6BA450] [WIS][2018/01/24 19:28:09] (.Asmedia Technology - Asmedia ASM106x SATA Host Controller Driver.) โ€“ C:\WINDOWS\Installer\f6452.msi [3401216] =>.Asmedia Technology
                                      [MD5.C12143F513895064B9B74CAD35CDCA7B] [WIS][2018/01/24 19:28:43] (.Asmedia Technology - Asmedia USB Host Controller Driver.) โ€“ C:\WINDOWS\Installer\f6458.msi [6802780] =>.Asmedia Technology
                                      [MD5.87BDB58F9E5B4EFC3B72EB9AD83EDE24] [WIS][2018/11/13 06:24:12] (.Adobe Systems, Incorporated.) โ€“ C:\WINDOWS\Installer\1050b.msp [3485696] =>.Adobe Systems, Incorporated
                                      [MD5.E05CA6506E1D5ECE25152018D3FF00CE] [WIS][2018/05/12 08:05:37] (.Adobe Systems, Incorporated.) โ€“ C:\WINDOWS\Installer\1c1c5137.msp [7094272] =>.Adobe Systems, Incorporated
                                      [MD5.A9095FC652E0273E10F1D9481C59067D] [WIS][2018/02/23 15:25:19] (.Adobe Systems, Incorporated.) โ€“ C:\WINDOWS\Installer\1f687a27.msp [1343488] =>.Adobe Systems, Incorporated
                                      [MD5.2F159BBD3479AEB0C168488067503723] [WIS][2018/07/09 07:47:48] (.Adobe Systems, Incorporated.) โ€“ C:\WINDOWS\Installer\2413896b.msp [27000832] =>.Adobe Systems, Incorporated
                                      [MD5.0F461CA2CD45767BC8254CD491025B19] [WIS][2015/10/02 23:19:07] (. - Customization Patch.) โ€“ C:\WINDOWS\Installer\26391a57.msp [1859584]
                                      [MD5.158DB85A7E9649803519367B8E1A7CD7] [WIS][2019/02/11 08:36:53] (.Adobe Systems, Incorporated.) โ€“ C:\WINDOWS\Installer\323bf.msp [8757248] =>.Adobe Systems, Incorporated
                                      [MD5.B02CDF597655C7CAD392D0404975E9AB] [WIS][2018/10/01 11:41:46] (.Adobe Systems, Incorporated.) โ€“ C:\WINDOWS\Installer\37bf7.msp [194531328] =>.Adobe Systems, Incorporated
                                      [MD5.FC195281214C157DAC91C0B02FA35554] [WIS][2018/12/10 08:52:51] (.Adobe Systems, Incorporated.) โ€“ C:\WINDOWS\Installer\41983.msp [44044288] =>.Adobe Systems, Incorporated
                                      [MD5.894F8CA42DB45DFDB94D579984B5B89A] [WIS][2018/09/18 10:10:59] (.Adobe Systems, Incorporated.) โ€“ C:\WINDOWS\Installer\621e4.msp [4706304] =>.Adobe Systems, Incorporated
                                      [MD5.E7BD518BB2F9A3A86C8AD97881120EBB] [WIS][2018/10/08 13:11:44] (.Adobe Systems, Incorporated.) โ€“ C:\WINDOWS\Installer\7b28faf.msp [2174976] =>.Adobe Systems, Incorporated
                                      [MD5.D65FA317AC2DF76CBE3F765A60BD8809] [WIS][2018/08/13 08:19:45] (.Adobe Systems, Incorporated.) โ€“ C:\WINDOWS\Installer\8887397.msp [1441792] =>.Adobe Systems, Incorporated
                                      [MD5.AD68D39EDFB11EFC6F9808DD3B80680A] [WIS][2017/11/05 00:36:53] (.Adobe Systems, Incorporated.) โ€“ C:\WINDOWS\Installer\8cd4c.msp [102899712] =>.SUP.Obsolete.Adobe
                                      [MD5.26712DE883E87BB94D42E4EEA32B7E9E] [WIS][2019/02/20 14:28:20] (.Adobe Systems, Incorporated.) โ€“ C:\WINDOWS\Installer\8f032.msp [1986560] =>.Adobe Systems, Incorporated
                                      [MD5.A58EAEAA86B7D4FA1891CA2EEDDCA3DD] [WIS][2018/02/12 16:26:08] (.Adobe Systems, Incorporated.) โ€“ C:\WINDOWS\Installer\ac9a088.msp [103362560] =>.Adobe Systems, Incorporated
                                      [MD5.3617A09ABC822D955214EBE86A991CF3] [WIS][2017/11/29 12:42:28] (.Adobe Systems, Incorporated.) โ€“ C:\WINDOWS\Installer\c0276.msp [1355776] =>.SUP.Obsolete.Adobe
                                      [MD5.7DF2196737D027C989EEE176078B4E7F] [WIS][2018/10/22 15:33:19] (.Adobe Systems, Incorporated.) โ€“ C:\WINDOWS\Installer\c623189.msp [2584576] =>.Adobe Systems, Incorporated
                                      [MD5.79254CC5CD24307A97C66DE7D7AD4B08] [WIS][2019/01/03 11:17:04] (.Adobe Systems, Incorporated.) โ€“ C:\WINDOWS\Installer\dbf96.msp [1720320] =>.Adobe Systems, Incorporated

                                      โ€”\ FEATURE CONTROLE. (875) - 4s
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ACTIVEX_REPUR POSEDETECTION]:PresentationHost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:HelpPane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]revhost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:wmplayer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:VSTOInstaller.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:OSE.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:Setup.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:ODeploy.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:Oarpmany.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:OSPPREARM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:LICLUA.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:FLTLDR.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:MSOSQM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:MSOICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:CMigrate.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]rotocolhandler.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:CSISYNCCLIENT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:CLVIEW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:NAMECONTROLSERVER.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]W20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]WTRIG20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:MSOHTMED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:MSOXMLED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:msotd.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:msoev.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:MSOSYNC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:MSOUC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:OLicenseHeartbeat.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:FIRSTRUN.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:SETLANG.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:GRAPH.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:MSQRY32.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:SmartTagInstall.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:SQLDumper.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:EXCEL.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:XLICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:Microsoft.Mashup.Container.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:excelcnv.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:POWERPNT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:PPTICO.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:misc.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:MSOSREC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:ORGCHART.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:PDFREFLOW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:WINWORD.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:WORDICON.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:ACCICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:MSACCESS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEM ENT]:Common.DBConnection.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:explorer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:iexplore.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:infopath.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:wmplayer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_INPUT_P ROMPTS]:HelpPane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_INPUT_P ROMPTS]revhost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG]:HelpPane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG]:PresentationHost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJ ECT]:HelpPane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJ ECT]:PresentationHost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCR IPT]:HelpPane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCR IPT]:PresentationHost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULA TION]:HelpPane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULA TION]revhost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULA TION]:ProductAgentUI.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULA TION]:hamachi-2-ui.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_LEGAC Y_COMPRESSION]:PresentationHost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PR OTOCOL]:explorer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PR OTOCOL]:iexplore.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PR OTOCOL]:SAPfewgsrv.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PR OTOCOL]:SAPGUI.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PR OTOCOL]:SAPGuiIT.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PR OTOCOL]:SAPLgPad.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PR OTOCOL]:SAPLOGON.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PR OTOCOL]:Scale_for_R3.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PR OTOCOL]:wmplayer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_SQM_U PLOAD_FOR_APP]:ieuser.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_SQM_U PLOAD_FOR_APP]:iexplore.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNE T_PROTOCOL]:HelpPane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNE T_PROTOCOL]:PresentationHost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_UNICO DE_HANDLE_CLOSING_CALLBACK]:YahooMusicEngine.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DOCUMENT_COMP ATIBLE_MODE]:HelpPane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT _PASTE_URLACTION_IF_PROMPT]:devenv.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT _PASTE_URLACTION_IF_PROMPT]:dexplore.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT _PASTE_URLACTION_IF_PROMPT]:helppane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT _PASTE_URLACTION_IF_PROMPT]:PresentationHost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FEEDS]:msfeedssync.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FORCE_ADDR_AN D_STATUS]:PresentationHost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FORCE_ADDR_AN D_STATUS]revhost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:HelpPane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:wmplayer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:VSTOInstaller.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:OSE.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:Setup.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:ODeploy.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:Oarpmany.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:OSPPREARM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:LICLUA.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:FLTLDR.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:MSOSQM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:MSOICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:CMigrate.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]rotocolhandler.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:CSISYNCCLIENT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:CLVIEW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:NAMECONTROLSERVER.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]W20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]WTRIG20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:MSOHTMED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:MSOXMLED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:msotd.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:msoev.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:MSOSYNC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:MSOUC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:OLicenseHeartbeat.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:FIRSTRUN.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:SETLANG.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:GRAPH.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:MSQRY32.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:SmartTagInstall.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:SQLDumper.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:EXCEL.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:XLICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:Microsoft.Mashup.Container.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:excelcnv.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:POWERPNT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:PPTICO.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:misc.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:MSOSREC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:ORGCHART.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:PDFREFLOW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:WINWORD.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:WORDICON.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:ACCICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:MSACCESS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:Common.DBConnection.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME _PASSWORD_DISABLE]:Common.DBConnection64.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IGNORE_XML_PR OLOG]:msiexec.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_A RT]:cs.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_A RT]:waol.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_A RT]:wm.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INTERNET_SHEL L_FOLDERS]:iexplore.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DISPPA RAMS]:helppane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DLCONT ROL_BEHAVIORS]:wlmail.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:explorer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:HelpPane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:iexplore.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:PresentationHost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]revhost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:wmplayer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:VSTOInstaller.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:OSE.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:Setup.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:ODeploy.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:Oarpmany.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:OSPPREARM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:LICLUA.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:FLTLDR.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:MSOSQM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:MSOICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:CMigrate.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]rotocolhandler.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:CSISYNCCLIENT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:CLVIEW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:NAMECONTROLSERVER.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]W20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]WTRIG20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:MSOHTMED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:MSOXMLED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:msotd.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:msoev.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:MSOSYNC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:MSOUC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:OLicenseHeartbeat.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:FIRSTRUN.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:SETLANG.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:GRAPH.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:MSQRY32.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:SmartTagInstall.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:SQLDumper.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:EXCEL.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:XLICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:Microsoft.Mashup.Container.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:excelcnv.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:POWERPNT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:PPTICO.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:misc.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:MSOSREC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:ORGCHART.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:PDFREFLOW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:WINWORD.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_ LOCKDOWN]:WORDICON.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTION SPER1_0SERVER]:explorer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTION SPERSERVER]:explorer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:explorer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:HelpPane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:iexplore.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]revhost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:wmplayer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:VSTOInstaller.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:OSE.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:Setup.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:ODeploy.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:Oarpmany.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:OSPPREARM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:LICLUA.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:FLTLDR.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSOSQM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSOICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:CMigrate.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]rotocolhandler.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:CSISYNCCLIENT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:CLVIEW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:NAMECONTROLSERVER.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]W20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]WTRIG20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSOHTMED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSOXMLED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:msotd.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:msoev.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSOSYNC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSOUC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:OLicenseHeartbeat.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:FIRSTRUN.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:SETLANG.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:GRAPH.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSQRY32.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:SmartTagInstall.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:SQLDumper.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:EXCEL.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:XLICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:Microsoft.Mashup.Container.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:excelcnv.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:POWERPNT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:PPTICO.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:misc.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSOSREC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:ORGCHART.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:PDFREFLOW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:WINWORD.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:WORDICON.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:ACCICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:explorer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:iexplore.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:wmplayer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:VSTOInstaller.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:OSE.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:Setup.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:ODeploy.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:Oarpmany.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:OSPPREARM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:LICLUA.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:FLTLDR.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSOSQM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSOICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:CMigrate.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]rotocolhandler.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:CSISYNCCLIENT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:CLVIEW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:NAMECONTROLSERVER.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]W20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]WTRIG20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSOHTMED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSOXMLED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:msotd.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:msoev.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSOSYNC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSOUC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:OLicenseHeartbeat.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:FIRSTRUN.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:SETLANG.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:GRAPH.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSQRY32.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:SmartTagInstall.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:SQLDumper.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:EXCEL.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:XLICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:Microsoft.Mashup.Container.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:excelcnv.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:POWERPNT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:PPTICO.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:misc.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSOSREC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:ORGCHART.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:PDFREFLOW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:WINWORD.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:WORDICON.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:ACCICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSACCESS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:Common.DBConnection.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLO AD_IEFRAME]:mshta.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLO AD_IEFRAME]utlook.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLO AD_IEFRAME]:sidebar.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:explorer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:iexplore.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:wmplayer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:VSTOInstaller.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:OSE.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:Setup.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:ODeploy.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:Oarpmany.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:OSPPREARM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:LICLUA.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:FLTLDR.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:MSOSQM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:MSOICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:CMigrate.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]rotocolhandler.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:CSISYNCCLIENT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:CLVIEW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:NAMECONTROLSERVER.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]W20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]WTRIG20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:MSOHTMED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:MSOXMLED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:msotd.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:msoev.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:MSOSYNC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:MSOUC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:OLicenseHeartbeat.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:FIRSTRUN.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:SETLANG.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:GRAPH.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:MSQRY32.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:SmartTagInstall.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:SQLDumper.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:EXCEL.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:XLICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:Microsoft.Mashup.Container.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:excelcnv.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:POWERPNT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:PPTICO.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:misc.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:MSOSREC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:ORGCHART.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:PDFREFLOW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:WINWORD.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:WORDICON.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:ACCICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:MSACCESS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHIN G]:Common.DBConnection.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:explorer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:iexplore.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:wmplayer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:VSTOInstaller.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:OSE.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:Setup.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:ODeploy.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:Oarpmany.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:OSPPREARM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:LICLUA.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:FLTLDR.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:MSOSQM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:MSOICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:CMigrate.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]rotocolhandler.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:CSISYNCCLIENT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:CLVIEW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:NAMECONTROLSERVER.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]W20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]WTRIG20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:MSOHTMED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:MSOXMLED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:msotd.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:msoev.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:MSOSYNC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:MSOUC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:OLicenseHeartbeat.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:FIRSTRUN.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:SETLANG.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:GRAPH.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:MSQRY32.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:SmartTagInstall.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:SQLDumper.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:EXCEL.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:XLICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:Microsoft.Mashup.Container.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:excelcnv.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:POWERPNT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:PPTICO.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:misc.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:MSOSREC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:ORGCHART.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:PDFREFLOW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:WINWORD.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:WORDICON.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:ACCICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:MSACCESS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCK DOWN]:Common.DBConnection.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RELEASE_CALLB ACK_ON_STOP_BINDING]:communicator.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOU T_PROTOCOL_IE7]:HelpPane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOU T_PROTOCOL_IE7]:PresentationHost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOU T_PROTOCOL_IE7]revhost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:HelpPane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]revhost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:wmplayer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:VSTOInstaller.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:OSE.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:Setup.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:ODeploy.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:Oarpmany.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:OSPPREARM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:LICLUA.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:FLTLDR.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:MSOSQM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:MSOICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:CMigrate.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]rotocolhandler.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:CSISYNCCLIENT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:CLVIEW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:NAMECONTROLSERVER.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]W20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]WTRIG20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:MSOHTMED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:MSOXMLED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:msotd.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:msoev.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:MSOSYNC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:MSOUC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:OLicenseHeartbeat.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:FIRSTRUN.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:SETLANG.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:GRAPH.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:MSQRY32.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:SmartTagInstall.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:SQLDumper.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:EXCEL.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:XLICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:Microsoft.Mashup.Container.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:excelcnv.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:POWERPNT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:PPTICO.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:misc.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:MSOSREC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:ORGCHART.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:PDFREFLOW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:WINWORD.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:WORDICON.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:ACCICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:MSACCESS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTI VEXINSTALL]:Common.DBConnection.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:msimn.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]revhost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:winmail.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:wmplayer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:VSTOInstaller.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:OSE.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:Setup.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:ODeploy.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:Oarpmany.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:OSPPREARM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:LICLUA.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:FLTLDR.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:MSOSQM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:MSOICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:CMigrate.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]rotocolhandler.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:CSISYNCCLIENT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:CLVIEW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:NAMECONTROLSERVER.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]W20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]WTRIG20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:MSOHTMED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:MSOXMLED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:msotd.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:msoev.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:MSOSYNC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:MSOUC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:OLicenseHeartbeat.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:FIRSTRUN.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:SETLANG.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:GRAPH.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:MSQRY32.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:SmartTagInstall.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:SQLDumper.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:EXCEL.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:XLICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:Microsoft.Mashup.Container.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:excelcnv.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:POWERPNT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:PPTICO.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:misc.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:MSOSREC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:ORGCHART.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:PDFREFLOW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:WINWORD.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:WORDICON.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:ACCICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILE DOWNLOAD]:MSACCESS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_OBJE CT_DATA_ATTRIBUTE]:PresentationHost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_ TO_LMZ]:HelpPane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_ TO_LMZ]:PresentationHost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_ TO_LMZ]revhost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:explorer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:HelpPane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:iexplore.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:wmplayer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:VSTOInstaller.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:OSE.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:Setup.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:ODeploy.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:Oarpmany.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:OSPPREARM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:LICLUA.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:FLTLDR.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:MSOSQM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:MSOICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:CMigrate.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]rotocolhandler.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:CSISYNCCLIENT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:CLVIEW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:NAMECONTROLSERVER.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]W20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]WTRIG20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:MSOHTMED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:MSOXMLED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:msotd.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:msoev.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:MSOSYNC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:MSOUC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:OLicenseHeartbeat.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:FIRSTRUN.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:SETLANG.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:GRAPH.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:MSQRY32.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:SmartTagInstall.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:SQLDumper.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:XLICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:Microsoft.Mashup.Container.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:excelcnv.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:PPTICO.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:misc.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:MSOSREC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:ORGCHART.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:PDFREFLOW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:WORDICON.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:ACCICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:MSACCESS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:Common.DBConnection.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:Common.DBConnection64.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOB JECT]:Common.ShowHelp.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]revhost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:wmplayer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:VSTOInstaller.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:OSE.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:Setup.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:ODeploy.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:Oarpmany.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:OSPPREARM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:LICLUA.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:FLTLDR.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSOSQM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSOICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:CMigrate.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]rotocolhandler.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:CSISYNCCLIENT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:CLVIEW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:NAMECONTROLSERVER.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]W20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]WTRIG20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSOHTMED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSOXMLED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:msotd.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:msoev.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSOSYNC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSOUC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:OLicenseHeartbeat.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:FIRSTRUN.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:SETLANG.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:GRAPH.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSQRY32.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:SmartTagInstall.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:SQLDumper.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:EXCEL.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:XLICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:Microsoft.Mashup.Container.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:excelcnv.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:POWERPNT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:PPTICO.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:misc.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSOSREC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:ORGCHART.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:PDFREFLOW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:WINWORD.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:WORDICON.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:ACCICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSACCESS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:Common.DBConnection.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:Common.DBConnection64.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHIM_MSHELP_C OMBINE]:HelpPane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHIM_MSHELP_C OMBINE]revhost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHOW_APP_PROT OCOL_WARN_DIALOG]:PresentationHost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SSLUX]:PresentationHost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_L OCKDOWN]:msimn.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_L OCKDOWN]utlook.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_L OCKDOWN]:winmail.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:HelpPane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:wmplayer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:VSTOInstaller.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:OSE.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:Setup.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:ODeploy.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:Oarpmany.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:OSPPREARM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:LICLUA.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:FLTLDR.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:MSOSQM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:MSOICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:CMigrate.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]rotocolhandler.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:CSISYNCCLIENT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:CLVIEW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:NAMECONTROLSERVER.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]W20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]WTRIG20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:MSOHTMED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:MSOXMLED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:msotd.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:msoev.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:MSOSYNC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:MSOUC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:OLicenseHeartbeat.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:FIRSTRUN.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:SETLANG.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:GRAPH.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:MSQRY32.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:SmartTagInstall.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:SQLDumper.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:EXCEL.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:XLICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:Microsoft.Mashup.Container.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:excelcnv.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:POWERPNT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:PPTICO.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:misc.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:MSOSREC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:ORGCHART.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:PDFREFLOW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:WINWORD.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:WORDICON.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:ACCICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:MSACCESS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:Common.DBConnection.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILE CHECK]:Common.DBConnection64.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDS ELECTCONTROL]:excel.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDS ELECTCONTROL]:infopath.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDS ELECTCONTROL]owerpnt.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDS ELECTCONTROL]:winword.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:HelpPane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]revhost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:wmplayer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:VSTOInstaller.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:OSE.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:Setup.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:ODeploy.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:Oarpmany.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:OSPPREARM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:LICLUA.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:FLTLDR.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:MSOSQM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:MSOICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:CMigrate.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]rotocolhandler.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:CSISYNCCLIENT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:NAMECONTROLSERVER.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]W20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]WTRIG20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:MSOHTMED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:MSOXMLED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:msotd.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:msoev.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:MSOSYNC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:MSOUC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:OLicenseHeartbeat.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:FIRSTRUN.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:SETLANG.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:GRAPH.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:MSQRY32.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:SmartTagInstall.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:SQLDumper.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:EXCEL.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:XLICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:Microsoft.Mashup.Container.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:excelcnv.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:POWERPNT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:PPTICO.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:misc.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:MSOSREC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:ORGCHART.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:PDFREFLOW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:WINWORD.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:WORDICON.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:ACCICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:MSACCESS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:Common.DBConnection.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVI GATE_URL]:Common.DBConnection64.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VIEWLINKEDWEB OC_IS_UNSAFE]:HelpPane.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_MOVESIZ ECHILD]:msn.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:explorer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:iexplore.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:wmplayer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:VSTOInstaller.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:OSE.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:Setup.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:ODeploy.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:Oarpmany.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:OSPPREARM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:LICLUA.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:FLTLDR.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:MSOSQM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:MSOICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:CMigrate.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]rotocolhandler.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:CSISYNCCLIENT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:CLVIEW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:NAMECONTROLSERVER.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]W20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]WTRIG20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:MSOHTMED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:MSOXMLED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:msotd.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:msoev.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:MSOSYNC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:MSOUC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:OLicenseHeartbeat.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:FIRSTRUN.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:SETLANG.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:GRAPH.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:MSQRY32.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:SmartTagInstall.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:SQLDumper.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:EXCEL.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:XLICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:Microsoft.Mashup.Container.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:excelcnv.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:POWERPNT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:PPTICO.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:misc.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:MSOSREC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:ORGCHART.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:PDFREFLOW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:WINWORD.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:WORDICON.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:ACCICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:MSACCESS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMA NAGEMENT]:Common.DBConnection.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:explorer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:iexplore.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:wmplayer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:VSTOInstaller.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:OSE.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:Setup.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:ODeploy.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:Oarpmany.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:OSPPREARM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:LICLUA.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:FLTLDR.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:MSOSQM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:MSOICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:CMigrate.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]rotocolhandler.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:CSISYNCCLIENT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:CLVIEW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:NAMECONTROLSERVER.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]W20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]WTRIG20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:MSOHTMED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:MSOXMLED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:msotd.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:msoev.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:MSOSYNC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:MSOUC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:OLicenseHeartbeat.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:FIRSTRUN.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:SETLANG.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:GRAPH.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:MSQRY32.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:SmartTagInstall.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:SQLDumper.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:EXCEL.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:XLICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:Microsoft.Mashup.Container.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:excelcnv.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:POWERPNT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:PPTICO.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:misc.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:MSOSREC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:ORGCHART.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:PDFREFLOW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:WINWORD.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:WORDICON.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:ACCICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:MSACCESS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRI CTIONS]:Common.DBConnection.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XSSFILTER]:iexplore.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XSSFILTER]revhost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:explorer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:iexplore.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:PresentationHost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]revhost.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:wmplayer.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:VSTOInstaller.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:OSE.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:Setup.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:ODeploy.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:Oarpmany.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:OSPPREARM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:LICLUA.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:FLTLDR.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:MSOSQM.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:MSOICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:CMigrate.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]rotocolhandler.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:CSISYNCCLIENT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:CLVIEW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:NAMECONTROLSERVER.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]W20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]WTRIG20.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:MSOHTMED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:MSOXMLED.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:msotd.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:msoev.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:MSOSYNC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:MSOUC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:OLicenseHeartbeat.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:FIRSTRUN.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:SETLANG.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:GRAPH.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:MSQRY32.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:SmartTagInstall.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:SQLDumper.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:EXCEL.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:XLICONS.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:Microsoft.Mashup.Container.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:excelcnv.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:POWERPNT.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:PPTICO.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:misc.exe =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:MSOSREC.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:ORGCHART.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:PDFREFLOW.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:WINWORD.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:WORDICON.EXE =>.Legitimate
                                      [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATIO N]:ACCICONS.EXE =>.Legitimate

                                      โ€”\ Additional Scan (O88) (271) - 6s
                                      HKLM\Software\Classes*\ShellEx\ContextMenuHandlers \WinRAR32 =>.SUP.Orphan
                                      HKLM\Software\Classes\lnkfile\shellex\ContextMenuH andlers\WinRAR32 =>.SUP.Orphan
                                      HKLM\Software\Classes\Folder\ShellEx\ContextMenuHa ndlers\WinRAR32 =>.SUP.Orphan
                                      C:\WINDOWS\Installer\8cd4c.msp =>.SUP.Obsolete.Adobe
                                      C:\WINDOWS\Installer\c0276.msp =>.SUP.Obsolete.Adobe
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\000 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\018 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\126 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\127 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\128 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\129 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\130 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\131 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\132 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\133 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\134 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\135 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\136 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\137 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\138 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\139 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\140 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\141 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\142 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\143 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\144 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\145 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\146 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\147 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\148 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\149 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\150 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\151 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\152 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\153 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\154 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\155 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\156 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\157 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\158 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\159 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\160 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\161 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\162 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\163 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\164 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\165 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\166 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\167 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\168 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\169 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\170 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\171 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\172 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\173 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\174 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\175 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\176 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\177 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\178 =>.SUP.Temporary.Chrome
                                      C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\179 =>.SUP.Temporary.Chrome
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Microsoft\OneDrive\17 .3.6816.0313\FileSyncConfig.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Packages\Microsoft.Mi crosoftEdge_8wekyb3d8bbwe\TempState\Downloads\Chro meSetup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Microsoft\OneDrive\Up date\OneDriveSetup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Microsoft\OneDrive\17 .3.7131.1115\FileSyncConfig.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Google\Chrome\Applica tion\chrome.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\JavaSetup8u161.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\7z1800-x64.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\readerdc_hu_xa_cra_instal l.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Realtek_Audio_V7848_20160 617\AsusSetup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\vlc-2.2.8-win32.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\ASMEDIA_Win7_81_10-Ver3160\setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Asmedia_USB3_V116351\setu p.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\Matrix_1.03.04\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Microsoft\OneDrive\17 .3.7131.1115\OneDriveSetup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\Ai Charger+\AppSetup\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\AsusUpdate\AppSetup\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\AsusUpdate\AppSetup\AsUpIo\AsUpIoIns.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\DIGI+ Power Control\AppSetup\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\EPU\AppSetup\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\FanXpert\AppSetup\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\MyLogo\AppSetup\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\MyLogo\AppSetup\AsUpIo\AsUpIoIns.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\Network iControl\AppSetup\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\Probe_II\AppSetup\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\Remote GO!\AppSetup\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\System Information\AppSetup\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\TurboV EVO\AppSetup\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\USB 3.0 Boost\AppSetup\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\USB 3.0 Boost\AppSetup\USBDriver\setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\USB 3.0 Boost\AppSetup\UASDriver\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\USB BIOS Flashback\AppSetup\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AISuite_II_V20401_M5A97_E VO_R2_XPVistaWin7-8-81-10\USB BIOS Flashback\AppSetup\AsUpIo\AsUpIoIns.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\InstallShield Installation Information{E6931688-DA2B-4E16-8539-3D323D69C677}\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\InstallShield Installation Information{F178DD09-E45A-4C29-979A-1EEAEFC35A5F}\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\InstallShield Installation Information{BEE4C824-BEA3-454F-BC9B-A22BFA52E458}\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\InstallShield Installation Information{5153DBF7-58C5-4C3F-A648-6EA91089F851}\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\InstallShield Installation Information{36AC4397-6287-4075-A4FB-66A0D81F0A87}\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\aida64extreme595\aida64.e xe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Unigine_Heaven-4.0.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\RealTemp_370\RealTemp.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\RealTemp_370\RealTempGT.e xe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Core-Temp-setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Peti\AppData\Local\Temp\GUM39DA.tmp\Goog leUpdateSetup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Google\Chrome\Applica tion\63.0.3239.132\Installer\setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\uTorrent.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\390.77-desktop-win10-64bit-international-whql.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\DTLite1050-0221.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\DAEMON Tools Lite\DTAgent.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Install_ESO.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\DAEMON Tools Lite\DTLauncher.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\MTGAInstaller.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\UserBenchMark.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\setup_galaxy_1.2.37.7.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Git-2.16.2-64-bit.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\GPU-Z.2.8.0.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\avast_free_antivirus_setu p_online.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\AVAST Software\Avast\AvastUI.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\ProgramData\NVIDIA Corporation\Downloader\9ea5f785c6c51bd4074453f93cd 9d725\GeForce_Experience_Update_v3.13.1.30_Officia l_8540CC.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\GPU-Z.2.8.0 (1).exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstview.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Unigine_Heaven-4.0 (1).exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Unigine_Valley-1.0.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Temp\190a6581-f7f5-46cc-9c7a-24badcc2e780\setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\winrar-x64-550hu.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Temp\d7fa6de1-daeb-41dc-a7af-7a4afc75b031\setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\cpu-z_1.85-en.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\DriverEasy_Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\radeon-software-adrenalin-18.4.1-minimalsetup-180426_web.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\Easeware\DriverEasy\unins000.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\MSI\Live Update\unins000.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\UserBenchMark (1).exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\TeamViewer_Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Far.Cry.Primal.REPACK-KaOs\Install.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\ProgramData\NVIDIA Corporation\Downloader\641ce1481194bca086021343e4e aeca8\GeForce_Experience_Update_v3.14.0.139_Offici al_F5B5E1.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\UserBenchMark (2).exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\prime95.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\InstallRealmPTS.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\OriginThinSetup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Temp\7zS88254F36\Gene ricSetup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Hearthstone-Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\osu!install.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Temp\7zS474E597D\Gene ricSetup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Discord\Update1.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Temp\7zS8CEE1E6F\Gene ricSetup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Temp\7zS07C12D5A\Gene ricSetup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Temp\7zSCF6B8385\Gene ricSetup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\7 Days To Die Alpha 16.4 HUN\7 Days To Die Alpha 16.4 HUN.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\Common Files\Overwolf\0.116.2.23\OverwolfHelper.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\Common Files\Overwolf\0.116.2.23\OverwolfHelper64.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.83.318. 0_x86__zpdnekdrzrea0\SpotifyMigrator.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.83.318. 0_x86__zpdnekdrzrea0\SpotifyWebHelper.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.83.318. 0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\InstallEnglishVer.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\Survivors Viy\Viy new One English Multiplayer 2.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\HDT-Installer.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.84.344. 0_x86__zpdnekdrzrea0\SpotifyWebHelper.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.84.344. 0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\setup_gwent_1.2.44.30_en-US.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Temp\05b3b87f-172e-4bb6-94b9-ac868b3ff80b\setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\bitdefender_online.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Gw2Setup-64.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Temp\RarSFX1\bddeploy .exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\DauntlessSetup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Desktop\Project.Zomboid.v40.6\Proje ctZomboid64.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\simple_port_tester_setup. exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\left4dead2\SFK Standalone 10.1.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\left4dead2\left4dead2.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\left4dead2\L4D2Launcher\SFK Server Launcher.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\left4dead2\L4D2Launcher\SFK Avatar Installer\SFK Avatar Installer.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.85.257. 0_x86__zpdnekdrzrea0\SpotifyWebHelper.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.85.257. 0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.85.259. 0_x86__zpdnekdrzrea0\SpotifyWebHelper.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.85.259. 0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.86.337. 0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\MTGA\MtgaLauncher.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\Adobe\Adobe Photoshop CC 2018\Photoshop.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.87.491. 0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\VPN_Unlimited_v4.24.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.88.353. 0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.89.313. 0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.90.268. 0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Temp\VPN Unlimited\vpn_unlimited_4.25.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.91.183. 0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Temp\VPN Unlimited\vpn_unlimited_5.0.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Overwatch\Overwatch Launcher.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\ProgramData\NVIDIA Corporation\Downloader\PostProcessing\GFE\7b79447f 02e83b50c6a1719c740616a7\setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.92.390. 0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.92.390. 0_x86__zpdnekdrzrea0\SpotifyMigrator.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Desktop\titan-launcher.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\PokerStarsInstallEU.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\PokerStars.EU\PokerStarsUninstall.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Microsoft.Office.2016.Pro fessional.Plus.32bit.VL.Hun.2018.September-fatebringer\setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\android-studio-ide-181.5056338-windows.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Memu-Setup-5.6.2.1.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Microvirt\MEmu\MEmuConsole.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\Android\Android Studio\bin\studio64.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Opera_Mobile_Emulator_12. 1_Windows.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.93.244. 0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayService.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\MouseKeyboardCenter_64bit _ENG_10.4.0.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\MouseKeyboardCenter_64bit _ENG_10.4.0 (1).exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Desktop\รšj mappa (2)\DRIVER\Setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Desktop\รšj mappa (2)\DRIVER\sx64.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.94.262. 0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\standaloneflashplayer_set up.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.94.262. 0_x86__zpdnekdrzrea0\Spotify.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\netbeans-8.2-javase-windows.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\jdk-11.0.1_windows-x64_bin.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\NetBeans 8.2\bin\netbeans64.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.95.289. 0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.96.181. 0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AMD-Ryzen-Master.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\AMD-Ryzen-Master-UI.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\hwmonitor_1.38.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\CPUID\HWMonitor\HWMonitor.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.96.181. 0_x86__zpdnekdrzrea0\Spotify.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\Common FilesEAInstaller\Battlefield 1\Cleanup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\CPUID\HWMonitor\unins000.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Temp\RarSFX0\agent_la uncher.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Ubisoft Game Launcher\Uplay.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\ccsetup551.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\SimBro Ver. 2.7\simbro.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.99.250. 0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Ubisoft Game Launcher\UplayService.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Honey Select [FitGirl Repack]\setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Honey Select EMF Patch 0.4.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\ApexLegendsInstaller.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Heaven Benchmark 4.0\unins000.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\PTrainer_2.03-win\Princess Trainer GE.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Witch_Trainer_1.02-win\Witch Trainer.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\Origin\Origin.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.99.250. 0_x86__zpdnekdrzrea0\SpotifyMigrator.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.100.237 .0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.100.237 .0_x86__zpdnekdrzrea0\SpotifyMigrator.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Microvirt\MEmu\uninstall\uninstall.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\UplayInstaller.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Innocent_Witches-0.2F-pc\Innocent Witches.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\strive\Strive.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Harem_Hotel-v0.6.1-pc\Harem_Hotel-v0.6.1-pc\Harem_Hotel.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\GoodnightKiss-1.01-pc\GoodnightKiss.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\ShapingHerFuture-0.11.01-pc\ShapingHerFuture.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.101.348 .0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\HS_0.1_win_lin\HS.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.101.348 .0_x86__zpdnekdrzrea0\SpotifyMigrator.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\ProgramData\NVIDIA Corporation\Downloader\PostProcessing\GFE\7b69c859 4affa73d0f6357d0d998abcf\setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\ProgramData\NVIDIA Corporation\Downloader\PostProcessing\GFE\daa4fab9 73e53fae3db151e3f11c3c7e\setup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.103.259 .0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\AppData\Local\Discord\app-0.0.301\Discord.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.103.259 .0_x86__zpdnekdrzrea0\SpotifyMigrator.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Shelter en\Shelter.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.104.197 .0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\AVAST Software\Avast\setup\instup.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.104.197 .0_x86__zpdnekdrzrea0\SpotifyMigrator.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.105.152 .0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\RE226841\Game\EZ.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.105.152 .0_x86__zpdnekdrzrea0\SpotifyMigrator.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.106.113 .0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\x64\ninetyss.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\LOK Rebirth 0.7b [Win64]\LOK Rebirth.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Kingdom_of_Deception-pc\Kingdom of Deception.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\The Ninja **** Legend - Ajisai\Game.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\Holy Road PC 18+\Holy Road.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\User\Downloads\The_Magus_Lab_v.0.25A.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.107.137 66.0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.108.439 .0_x86__zpdnekdrzrea0\SpotifyMigrator.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.108.439 .0_x86__zpdnekdrzrea0\SpotifyStartupTask.exe =>.SUP.Orphan.Compatibility
                                      [HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\Common Files\EAInstaller\Apex\Cleanup.exe =>.SUP.Orphan.Compatibility

                                      โ€”\ Summary of the elements found (5) - 0s
                                      Zone Anti-Malware - ZAM =>.SUP.Orphan
                                      Zone Anti-Malware - ZAM =>BitTorrent (P2P)
                                      Zone Anti-Malware - ZAM =>.SUP.Obsolete.Adobe
                                      Zone Anti-Malware - ZAM =>.SUP.Temporary.Chrome
                                      Zone Anti-Malware - ZAM =>.SUP.Orphan.Compatibility

                                      ~ Unselected Options:
                                      ~ End of the scan, 12158 items in 04mn44s (3666)(0)

                                        Comment

                                        • Malnutrition
                                          PCHF Moderator
                                          • Jul 2016
                                          • 7041
                                          #11
                                          [COLOR=rgb(184, 49, 47)]Adware Removal Tool Scan.

                                          Download Adware removal tool to your desktop, right click the icon and select Run as Administrator.

                                          [MEDIA=imgur]LOr0Gd7[/MEDIA]

                                          Hit Ok.

                                          [MEDIA=imgur]sYFsqHx[/MEDIA]

                                          Hit next make sure to leave all items checked, for removal.

                                          [MEDIA=imgur]8NcZjGc[/MEDIA]

                                          The Program will close all open programs to complete the removal, so save any work and hit OK. Then hit OK after the removal process is complete, thenOK again to finish up. Post log generated by tool.

                                          [COLOR=rgb(184, 49, 47)]Hijack This Fix.

                                          Start HijackThis , Right Click Run as Admin.
                                          Close all other open programs prior to running this tool!!
                                          Click System Scan Only.
                                          Then check mark the items listed below.

                                          O1 - Hosts: 0.0.0.0 91.206.200.221
                                          O1 - Hosts: 0.0.0.0 bidtraffic.ru
                                          O1 - Hosts: 0.0.0.0 bir3yka.narod2.ru
                                          O1 - Hosts: 0.0.0.0 enet.vn.ua
                                          O1 - Hosts: 0.0.0.0 rax.ru
                                          O1 - Hosts: 0.0.0.0 yandex.ru
                                          O1 - Hosts: 0.0.0.0 ukraine.com.ua
                                          O4 - HKCU..\Run: [CCleaner Smart Cleaning] = C:\Program Files\CCleaner\CCleaner64.exe /MONITOR
                                          O4 - HKCU..\Run: [DAEMON Tools Lite Automount] = C:\Program Files\DAEMON Tools Lite\DTAgent.exe -autorun (file missing)
                                          O4 - HKCU..\Run: [uTorrent] = C:\Users\User\AppData\Roaming\uTorrent\uTorrent.ex e /MINIMIZED
                                          O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] = C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.e xe
                                          O4 - HKU\S-1-5-19..\RunOnce: [WAB Migrate] = C:\Program Files\Windows Mail\wab.exe /Upgrade
                                          O4 - HKU\S-1-5-20..\RunOnce: [WAB Migrate] = C:\Program Files\Windows Mail\wab.exe /Upgrade
                                          O4-32 - HKLM..\Run: [LogMeIn Hamachi Ui] = C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe --auto-start
                                          O4-32 - HKLM..\Run: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
                                          O5 - HKCU\Control Panel\donโ€™t load: [RTSnMg64.cpl] (file missing)
                                          O9-32 - Button: HKLM..{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}: OneNote โ€“ c&satolt feljegyzรฉsek - (no file)
                                          O9-32 - Tools menu item: HKLM..{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}: OneNote โ€“ c&satolt feljegyzรฉsek - (no file)
                                          O21 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive1: (no name) - {BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
                                          O21 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive2: (no name) - {5AB7172C-9C11-405C-8DD5-AF20F3606282} - (no file)
                                          O21 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive3: (no name) - {A78ED123-AB77-406B-9962-2A5D9D2F7F30} - (no file)
                                          O21 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive4: (no name) - {F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
                                          O21 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive5: (no name) - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
                                          O21 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive6: (no name) - {9AA2F32D-362A-42D9-9328-24A483E2CCC3} - (no file)
                                          O21 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive7: (no name) - {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} - (no file)
                                          O21 - HKLM..\ShellIconOverlayIdentifiers\00asw: (no name) - {472083B0-C522-11CF-8763-00608CC02F24} - (no file)
                                          O21-32 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive1: (no name) - {BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
                                          O21-32 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive2: (no name) - {5AB7172C-9C11-405C-8DD5-AF20F3606282} - (no file)
                                          O21-32 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive3: (no name) - {A78ED123-AB77-406B-9962-2A5D9D2F7F30} - (no file)
                                          O21-32 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive4: (no name) - {F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
                                          O21-32 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive5: (no name) - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
                                          O21-32 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive6: (no name) - {9AA2F32D-362A-42D9-9328-24A483E2CCC3} - (no file)
                                          O21-32 - HKLM..\ShellIconOverlayIdentifiers\ OneDrive7: (no name) - {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} - (no file)
                                          O23 - Service S2: ICEsound Service - (ICEsoundService) - C:\WINDOWS\system32\ICEsoundService64.exe (file missing)
                                          O23 - Service S2: Origin Web Helper Service - C:\Program Files (x86)\Origin\OriginWebHelperService.exe (file missing)
                                          O23 - Service S3: Origin Client Service - C:\Program Files (x86)\Origin\OriginClientService.exe (file missing)

                                          Now click on fix checked.
                                          After the fix is complete, then reboot your machine.

                                          Temp File Cleaner.

                                          [ul]
                                          [li] Note: This program may very well reboot your machine. Save any work prior to running.[/li][li]Clean up your temp files with TFC.exe[/li][li]Save it to your desktop.[/li][li]Right click run as admin.[/li][/ul][/COLOR][/COLOR]

                                            Comment

                                            • Malnutrition
                                              PCHF Moderator
                                              • Jul 2016
                                              • 7041
                                              #12
                                              1 Drive c: () (Fixed) (Total:111.25 GB) (Free:8.97 GB) NTFS
                                              You only have eight percent free space.
                                              Iโ€™d suggest you free up some space.
                                              In order for windows to function correctly it needs 15 percent free space.
                                              Here is a guide I wrote for another site, it explains very much so how to clean up a HDD.

                                              You have any idea what this file is?

                                              C:\Users\User\AppData\Local\7.b - A jฤ‚ห‡tฤ‚ยฉk DEMฤ‚โ€œ

                                                Comment

                                                • Malnutrition
                                                  PCHF Moderator
                                                  • Jul 2016
                                                  • 7041
                                                  #13
                                                  Click on Download Windows 10 Disable Most Of Ads It should give you a zip file, which you will need to right click on and Extract All, Extract then right click on the .reg and MERGE. Then reboot.

                                                  ZHP Diag Fix.

                                                  ZHP Fix

                                                  [MEDIA=imgur]4bd9Ugb[/MEDIA]

                                                  [ul]
                                                  [li]Disable your antivirus prior to this fix![/li][li]Download ZHP-Fix from here.[/li][li]UnZip it to your desktop โ€“ Tool Here if neededโ€ฆ 7-Zip[/li][li]Install it.[/li][li]Click Suivant 5 Times.[/li][li]Then Installer.[/li][li]Then Terminer.[/li][li]Then right clcick the ZHP Fix icon Run as admin.[/li][li]Copy the entire content of the code box below, the next step will grab it from your clipboard.[/li][li]Then click on import.[/li][li]Then click GO.[/li][li]If you see any Prompts like the one below, select Oui. = Yes in French.[/li][li]https://pchelpforum.net/attachments/upload_2017-5-24_21-17-40-png.2248/[/li]

                                                  [li]Allow completion.[/li][li]A log file will appear on your desktop.[/li][li]Post it here in your next reply.[/li][/ul]
                                                  Code:
                                                  Script Zhpfix
O23 - Service: C:\WINDOWS\System32\diagtrack.dll (DiagTrack) . (.Microsoft Corporation - Microsoft Windows diagnosztikai nyomkรถvetรฉs.) - C:\WINDOWS\System32\diagtrack.dll =>.Microsoft Corporation
O23 - Service: ICEsound Service (ICEsoundService) . (...) - C:\WINDOWS\system32\ICEsoundService64.exe (.not file.)
O23 - Service: Origin Web Helper Service (Origin Web Helper Service) . (...) - C:\Program Files (x86)\Origin\OriginWebHelperService.exe (.not file.)
SR - Auto [00/00/0000] [ 0] ICEsound Service (ICEsoundService) . (...) - C:\WINDOWS\system32\ICEsoundService64.exe (.not file.)
SS - Demand [00/00/0000] [ 0] Origin Client Service (Origin Client Service) . (...) - C:\Program Files (x86)\Origin\OriginClientService.exe (.not file.)
SR - Auto [00/00/0000] [ 0] Origin Web Helper Service (Origin Web Helper Service) . (...) - C:\Program Files (x86)\Origin\OriginWebHelperService.exe (.not file.)
O38 - TASK: {ACE16E21-C4E3-44D8-A78C-B834AC609F6B} [64Bits][\CCleaner Update] - (.Piriform Software Ltd - CCleaner emergency updater.) -- C:\Program Files\CCleaner\CCUpdate.exe [619416] =>.Piriform Software Ltd
O4 - HKUS\S-1-5-19\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000 =>.SUP.Orphan
O4 - HKUS\S-1-5-20\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000 =>.SUP.Orphan
C:\WINDOWS\System32\diagtrack.dll
C:\ProgramData\AVAST Software =>.AVAST Software
C:\WINDOWS\System32\drivers\lpsport.sys
C:\Windows\System32\dmwappushsvc.dll
O4 - HKUS\S-1-5-21-1620667201-3233266275-4011120631-1001\..\Run: [CCleaner Smart Cleaning] . (.Piriform Software Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Software Ltdยฎ
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:CCleaner Smart Cleaning =>.Piriform Ltd
[HKEY_USERS\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:CCleaner Smart Cleaning =>.Piriform Ltd
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastUI.exe =>.Avast Software s.r.o
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:AvastUI.exe =>.Avast Software s.r.o
O42 - Logiciel: Java 7 Update 21 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217021FF} =>.Oracle
HKLM\SOFTWARE\AVAST Software =>.AVAST Software
HKLM\SOFTWARE\WOW6432Node\AVAST Software =>.AVAST Software
HKCU\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o
HKCU\SOFTWARE\Browser Cleanup =>.Avast Software s.r.o
HKCU\SOFTWARE\Chromium =>.Chromium
HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o
HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Browser Cleanup =>.Avast Software s.r.o
HKU\S-1-5-21-1620667201-3233266275-4011120631-1001\SOFTWARE\Chromium =>.Chromium
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
C:\WINDOWS\Installer\8cd4c.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\c0276.msp =>.SUP.Obsolete.Adobe
EmptyPrefetch
Emptytemp
EmptyClsid

                                                    Comment

                                                    • Fexerrum
                                                      PCHF Member
                                                      • Jun 2019
                                                      • 13
                                                      #14
                                                      I freed up some space.
                                                      Yes, I do, itโ€™s a small game, nothing special.
                                                      Also, I posted on another forum as well, and the problem seems to be either PSU or heat related, do I really have to keep downloading these programs? I donโ€™t think itโ€™s software related.

                                                        Comment

                                                        • Malnutrition
                                                          PCHF Moderator
                                                          • Jul 2016
                                                          • 7041
                                                          #15
                                                          When you have completed the above steps, reboot your machine and get me an autoruns log, we will then disable some things from loading when windows loads, that will free up some ram for you.

                                                          Download Autoruns and Autorunsc Unzip it to your desktop and then double click autoruns.exe
                                                          After the scan is finished then click on File>>>>>>>>>>>Save
                                                          The default name will be autoruns.arn make sure to save it as Autoruns.txt under the file type option.
                                                          in other words make sure it is a .txt file instead of .arn Attach the text in your next reply.

                                                            Comment

                                                            Previous 1 2 3 template Next
                                                            Working...

                                                              We process personal data about users of our site, through the use of cookies and other technologies, to deliver our services, personalize advertising, and to analyze site activity. We may share certain information about our users with our advertising and analytics partners. For additional details, refer to our Privacy Policy.

                                                              By clicking "I AGREE" below, you agree to our Privacy Policy and our personal data processing and cookie practices as described therein. You also acknowledge that this forum may be hosted outside your country and you consent to the collection, storage, and processing of your data in the country where this forum is hosted.

                                                              I Agree