Ccleaner infection

**jmarket** · 09-22-2017, 03:57 AM

Hey Pat,

I would advise running through our prework so we can get you cleaned up

**PatL** · 09-22-2017, 05:20 AM

Hello Jmarket,
[HEADING=1]My concern was whether or not I should wipe my drive, seeing as how I was infected for that time period? Can the potential of hidden malware really be that dangerous?
Here are the logs.
aswMBR version 1.0.1.2290 Copyright(c) 2014 AVAST Software
Run date: 2017-09-21 21:25:37[/HEADING]
21:25:37.038 OS Version: Windows 6.1.7601 Service Pack 1
21:25:37.038 Number of processors: 2 586 0x170A
21:25:37.054 ComputerName: PATRICK-PC UserName: Patrick
21:26:11.078 Initialize success
21:26:15.040 AVAST engine defs: 17092104
21:26:17.801 Disk 0 (boot) \Device\Harddisk0\DR0 → \Device\Ide\IdeDeviceP0T0L0-0
21:26:17.801 Disk 0 Vendor: WDC_WD5000LPVX-08V0TT5 05.01A05 Size: 476940MB BusType: 11
21:26:17.911 Disk 0 MBR read successfully
21:26:17.911 Disk 0 MBR scan
21:26:18.238 Disk 0 Windows 7 default MBR code
21:26:18.254 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
21:26:18.269 Disk 0 default boot code
21:26:18.379 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 476838 MB offset 206848
21:26:18.441 Disk 0 scanning sectors +976771072
21:26:18.753 Disk 0 scanning C:\Windows\system32\drivers
21:26:41.638 Service scanning
21:27:35.053 Modules scanning
21:27:35.053 Disk 0 trace - called modules:
21:27:35.115 ntkrnlpa.exe CLASSPNP.SYS disk.sys ataport.SYS halmacpi.dll PCIIDEX.SYS msahci.sys
21:27:35.131 1 nt!IofCallDriver → \Device\Harddisk0\DR0[0x85eabac8]
21:27:35.146 3 CLASSPNP.SYS[8be1559e] → nt!IofCallDriver → \Device\Ide\IdeDeviceP0T0L0-0[0x859f5908]
21:27:35.864 AVAST engine scan C:\Windows
21:27:38.360 AVAST engine scan C:\Windows\system32
21:30:29.508 AVAST engine scan C:\Windows\system32\drivers
21:30:44.297 AVAST engine scan C:\Users\Patrick
21:35:31.524 AVAST engine scan C:\ProgramData
21:36:04.160 Disk 0 statistics 2932470/0/0 @ 3.52 MB/s
21:36:04.175 Scan finished successfully
21:36:12.911 Disk 0 MBR has been saved successfully to “C:\Users\Patrick\Documents\MBR.dat”
21:36:12.927 The log file has been saved successfully to “C:\Users\Patrick\Documents\aswMBR.txt”

**jmarket** · 09-22-2017, 05:21 AM

Please download the FRST 32 bit or FRST 64bit version to suit your operating system. It is important FRST is downloaded to your desktop.

If you are unsure if your operating system is 32 or 64 Bit please go HERE.

Once downloaded right click the FRST desktop icon and select “Run as administrator” from the menu"

Forums - PC Help Forum

https://pchelpforum.net/attachments/icon2-jpg.794/

PCHF Forums

If you receive any security warnings, or the User Account Control warning opens at any time whilst using FRST you can safely allow FRST to proceed.
FRST will open with two dialogue boxes, accept the disclaimer.

Forums - PC Help Forum

https://pchelpforum.net/attachments/frst-disclaimer-jpg.795/

PCHF Forums

[ol]
[li]Accept the default whitelist options,[/li][li]If the additions.txt options box is not checked please select it. [/li]
[li]Then select Scan[/li][/ol]

Forums - PC Help Forum

https://pchelpforum.net/attachments/frst-jpg.796/

PCHF Forums

Frst will take a few minutes to scan your computer, and when finished will produce two log files on your desktop, FRST.txt, and Addition.txt. They will display immediately on the desktop, but can be reopened later as a notepad file.

Forums - PC Help Forum

https://pchelpforum.net/attachments/2016-08-12_152002-jpg.797/

PCHF Forums

Please Copy and Paste the contents of these logs in your next post for review by our Security Team

**PatL** · 09-22-2017, 05:31 AM

Well every time I try and paste the FRST it freezes my firefox. Let me try uploading it.

**PatL** · 09-22-2017, 05:32 AM

It won’t let me upload, what now?

**PatL** · 09-22-2017, 05:41 AM

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 20-09-2017
Ran by Patrick (administrator) on PATRICK-PC (21-09-2017 22:03:05)
Running from C:\Users\Patrick\Downloads
Loaded Profiles: Patrick (Available Profiles: Patrick)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(SurfRight B.V.) C:\Program Files\HitmanPro.Alert\hmpalert.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Foolish IT LLC) C:\Program Files\Foolish IT\CryptoPrevent\CryptoPreventMonSvc.exe
(F-Secure Corporation) C:\Program Files\F-Secure\Freedome\Freedome\1.1\FreedomeService.exe
(COMODO) C:\Program Files\COMODO\Internet Security Essentials\isesrv.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(RaMMicHaeL) C:\Program Files\Unchecky\bin\unchecky_svc.exe
(Copyright 2017.) C:\Program Files\Zemana AntiMalware\ZAM.exe
(SurfRight B.V.) C:\Program Files\HitmanPro.Alert\hmpalert.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Copyright 2017.) C:\Program Files\Zemana AntiMalware\ZAM.exe
(VoodooSoft, LLC ) C:\Program Files\VoodooShield\VoodooShield.exe
(RaMMicHaeL) C:\Program Files\Unchecky\bin\unchecky_bg.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(Ruiware) C:\Program Files\Ruiware\WinPatrol\WinPatrol.exe
(MyCity) C:\Program Files\MCShield\MCShieldRTM.exe
(Foolish IT LLC) C:\Program Files\Foolish IT\CryptoPrevent\CryptoPreventNotification.exe
(VoodooSoft, LLC ) C:\Program Files\VoodooShield\VoodooShieldService.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
(The OpenVPN Project) C:\Program Files\F-Secure\Freedome\Freedome\1.1\openvpn.exe
(F-Secure Corporation) C:\Program Files\F-Secure\Freedome\Freedome\1.1\Freedome.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [246632 2017-09-15] (AVAST Software)
HKLM...\Run: [ZAM] => C:\Program Files\Zemana AntiMalware\ZAM.exe [15775888 2017-08-09] (Copyright 2017.)
HKLM...\Run: [VoodooShield] => C:\Program Files\VoodooShield\VoodooShield.exe [2443600 2017-05-01] (VoodooSoft, LLC )
HKLM...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1390784 2017-08-28] (COMODO)
HKLM Group Policy restriction on software: *.doc.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.isu <==== ATTENTION
HKLM Group Policy restriction on software: .pub.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.url <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.mst <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.msc <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.adp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.ws <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.png.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.bat <==== ATTENTION
HKLM Group Policy restriction on software: .7z.scr <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.msh <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.isu <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.inx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.phps <==== ATTENTION
HKLM Group Policy restriction on software: .avi.nsf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.psc <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.chm <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.url <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.scr <==== ATTENTION
HKLM Group Policy restriction on software: .avi.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.inf <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.psc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: .wma.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.jar <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.msh <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.jar <==== ATTENTION
HKLM Group Policy restriction on software: .avi.bas <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.reg <==== ATTENTION
HKLM Group Policy restriction on software: .txt.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.ws <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.png.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.inf <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.isp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.inf <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.rex <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.frm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: .rar.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.png.application <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.application <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.p <==== ATTENTION
HKLM Group Policy restriction on software: .wav.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\IE Update*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.job <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.bat <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.ocx <==== ATTENTION
HKLM Group Policy restriction on software: .zip.chm <==== ATTENTION
HKLM Group Policy restriction on software: .7z.rx <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.chm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.isp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.msh <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.ws <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.pls <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.rbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.ade <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.frm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.mst <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.shs <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.pys <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.ws <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.psc <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.xcs <==== ATTENTION
HKLM Group Policy restriction on software: .png.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.48s <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.rgs <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.application <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.ws <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.inf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.klx <==== ATTENTION
HKLM Group Policy restriction on software: .rtf.vb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.url <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.bin <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.ws <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.inx <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.shs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.isu <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.lua <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.mod <==== ATTENTION
HKLM Group Policy restriction on software: .xls.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.jse <==== ATTENTION
HKLM Group Policy restriction on software: .ppt.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.com <==== ATTENTION
HKLM Group Policy restriction on software: .pub.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.application <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.phps <==== ATTENTION
HKLM Group Policy restriction on software: .divx.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.shb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.ns <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.bin <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.sct <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.mst <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.wwb <==== ATTENTION
HKLM Group Policy restriction on software: .txt.scr <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.mde <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.application <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.vb <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.hlp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.48s <==== ATTENTION
HKLM Group Policy restriction on software: .wma.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.pys <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*\svchost.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.crt <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.bat <==== ATTENTION
HKLM Group Policy restriction on software: msoyasdx.exe <==== ATTENTION
HKLM Group Policy restriction on software: .rtf.ws <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.scr <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: .gif.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.frm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.hta <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.msp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.scsb <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.scr <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.ws <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.job <==== ATTENTION
HKLM Group Policy restriction on software: .png.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.isu <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.shs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.url <==== ATTENTION
HKLM Group Policy restriction on software: .zip.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.ins <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.isp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.url <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.chm <==== ATTENTION
HKLM Group Policy restriction on software: .wma.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.hlp <==== ATTENTION
HKLM Group Policy restriction on software: .zip.msc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\x86.exe <==== ATTENTION
HKLM Group Policy restriction on software: .avi.rx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.scsb <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.p <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.scr <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.rgs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.psc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.pys <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.48s <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.pls <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.bas <==== ATTENTION
HKLM Group Policy restriction on software: .ppt.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.vbe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.paf <==== ATTENTION
HKLM Group Policy restriction on software: .xls.jse <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.msh <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.vb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.pif <==== ATTENTION
HKLM Group Policy restriction on software: .wma.rx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.png.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.sct <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.vbs <==== ATTENTION
HKLM Group Policy restriction on software: .rar.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.adp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.scf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.sct <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.rex <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.gadget <==== ATTENTION
HKLM Group Policy restriction on software: .gif.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.msi <==== ATTENTION
HKLM Group Policy restriction on software: .divx.ins <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.psc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.com <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.hta <==== ATTENTION
HKLM Group Policy restriction on software: .xls.u3p <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\cryptohost.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: .doc.48s <==== ATTENTION
HKLM Group Policy restriction on software: .pub.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.png.xcs <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.chm <==== ATTENTION
HKLM Group Policy restriction on software: .zip.vb <==== ATTENTION
HKLM Group Policy restriction on software: .xls.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: .mp4.rx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.scf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.klx <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.bin <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.psc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.rx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.url <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.msc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.msc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.shb <==== ATTENTION
HKLM Group Policy restriction on software: .ppt.psc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: .png.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\MS\Defnder.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.sct <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.pls <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.scr <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.rx <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.scr <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\Ponmsiyyks.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.application <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.pys <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.reg <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.job <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.inf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.isp <==== ATTENTION
HKLM Group Policy restriction on software: .rar.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.bat <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.mod <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.mod <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\x64.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.klx <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\bbv.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.phps <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.bin <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.shs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.shb <==== ATTENTION
HKLM Group Policy restriction on software: .rar.rx <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.rex <==== ATTENTION
HKLM Group Policy restriction on software: .7z.msh <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.shs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.psc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.mst <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.url <==== ATTENTION
HKLM Group Policy restriction on software: .gif.ocx <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.msh <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: .png.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.url <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.wwb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.reg <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.scf <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.shb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.paf <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.shb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.48s <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.u3p <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.pif <==== ATTENTION
HKLM Group Policy restriction on software: .gif.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.application <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.nsf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\Calipso*.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.rgs <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.bas <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.psc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.rbs <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.job <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.url <==== ATTENTION
HKLM Group Policy restriction on software: .png.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.msi <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.ws <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.reg <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.p <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.ws <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.p <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.p <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.js <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.msp <==== ATTENTION
HKLM Group Policy restriction on software: .avi.ws <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.bas <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.bin <==== ATTENTION
HKLM Group Policy restriction on software: %localappdata%\MS\app_roaming.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.p <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.p <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.48s <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.jse <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.shs <==== ATTENTION
HKLM Group Policy restriction on software: .rar.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.com <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.wwb <==== ATTENTION
HKLM Group Policy restriction on software: .rar.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: .png.bas <==== ATTENTION
HKLM Group Policy restriction on software: .png.js <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.inx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.crt <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.crt <==== ATTENTION
HKLM Group Policy restriction on software: magic.exe <==== ATTENTION
HKLM Group Policy restriction on software: .rtf.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.scr <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.url <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.pif <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.png.msc <==== ATTENTION
HKLM Group Policy restriction on software: .zip.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.mde <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: .ppt.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.bas <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.pif <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: .png.92bs <==== ATTENTION
HKLM Group Policy restriction on software: .rar.gadget <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.scr <==== ATTENTION
HKLM Group Policy restriction on software: .pub.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.com <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.shs <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.url <==== ATTENTION
HKLM Group Policy restriction on software: .mp4.ws <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.ns <==== ATTENTION
HKLM Group Policy restriction on software: .wav.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.adp <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.lua <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.xcs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.isp <==== ATTENTION
HKLM Group Policy restriction on software: .doc.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.pys <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.inf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.inf <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.sct <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.bat <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.rex <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.job <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.png.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.lua <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.inx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.hta <==== ATTENTION
HKLM Group Policy restriction on software: .gif.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.pcd <==== ATTENTION
HKLM Group Policy restriction on software: .docx.psc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.ade <==== ATTENTION
HKLM Group Policy restriction on software: %systemdrive%\dccon.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.ns <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.com <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.jse <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.rgs <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.application <==== ATTENTION
HKLM Group Policy restriction on software: .pub.reg <==== ATTENTION
HKLM Group Policy restriction on software: .xls.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.rbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.url <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.hlp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.job <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.ins <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.scf <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.rex <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%{213D7F33-4942-1C20-3D56=8-1A0B31CDFFF3}.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.bas <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: .7z.msp <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.ns <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: .xls.inx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.xml <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.scr <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\wrmXNhWbacF.exe <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.92bs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.lua <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.psc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.png.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.pys <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.rbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.wwb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.scf <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.rex <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.pys <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.hta <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.hlp <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.hlp <==== ATTENTION
HKLM Group Policy restriction on software: surprise.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.msc <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.bin <==== ATTENTION
HKLM Group Policy restriction on software: .doc.rx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.jse <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.pls <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.shs <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.hta <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.job <==== ATTENTION
HKLM Group Policy restriction on software: .docx.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.shb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.inx <==== ATTENTION
HKLM Group Policy restriction on software: .wav.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.application <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.hta <==== ATTENTION
HKLM Group Policy restriction on software: .rar.ws <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.vbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.vb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.pys <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.jar <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.reg <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.p <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.isu <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\Pokemon*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.chm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.com <==== ATTENTION
HKLM Group Policy restriction on software: .zip.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.pys <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.com <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.vb <==== ATTENTION
HKLM Group Policy restriction on software: .xls.ws <==== ATTENTION
HKLM Group Policy restriction on software: .mp4.msh <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.msi <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.mde <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.shb <==== ATTENTION
HKLM Group Policy restriction on software: .txt.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.ins <==== ATTENTION
HKLM Group Policy restriction on software: %systemdrive%\Mount.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.js <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.pcd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.com <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\windrv.exe <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.ns <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.js <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.ns <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.js <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.isu <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.ns <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.msh <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.bat <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.scsb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.cpl <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.gadget <==== ATTENTION
HKLM Group Policy restriction on software: .7z.tcls <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.msh <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.scsb <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.application <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.js <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.paf <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.msh <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.mde <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.ins <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.reg <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.adp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.scr <==== ATTENTION
HKLM Group Policy restriction on software: .ppt.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.bas <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.sct <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.js <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.pys <==== ATTENTION
HKLM Group Policy restriction on software: .mp4.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.mst <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.jar <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.pys <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.sct <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.inf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.ins <==== ATTENTION
HKLM Group Policy restriction on software: commerc.exe <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.url <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.tcls <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.sct <==== ATTENTION
HKLM Group Policy restriction on software: .docx.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.job <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.cpl <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.vb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.exe <==== ATTENTION
HKLM Group Policy restriction on software: .rtf.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.p <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.bin <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.ins <==== ATTENTION
HKLM Group Policy restriction on software: .7z.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.klx <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.92bs <==== ATTENTION
HKLM Group Policy restriction on software: .txt.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.inf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.scf <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.png.ocx <==== ATTENTION
HKLM Group Policy restriction on software: .docx.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: .pub.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.rx <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\winpnp.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.vb <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.bin <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: .wma.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.rx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.92bs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.vb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.rex <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.gadget <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.klx <==== ATTENTION
HKLM Group Policy restriction on software: WifiHack.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.92bs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.scf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.com <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.paf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.mde <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.rgs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.inf <==== ATTENTION
HKLM Group Policy restriction on software: .txt.isu <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.msp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.msc <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.ws <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.js <==== ATTENTION
HKLM Group Policy restriction on software: syskey.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.png.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.png.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.png.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.mde <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.paf <==== ATTENTION
HKLM Group Policy restriction on software: .avi.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.bat <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.frm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.phps <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.gadget <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.nsf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.jse <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.ws <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.application <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: .rar.psc <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.p <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.pif <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: .rtf.psc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.isp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.vbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.pls <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.cmd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.adp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.url <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.p <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.mst <==== ATTENTION
HKLM Group Policy restriction on software: .txt.msp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.ws <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.vb <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.exe <==== ATTENTION
HKLM Group Policy restriction on software: .divx.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.rx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.js <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.pls <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.msc <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.klx <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.rgs <==== ATTENTION
HKLM Group Policy restriction on software: lsassw86s.exe <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.pys <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.jar <==== ATTENTION
HKLM Group Policy restriction on software: .txt.ocx <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.png.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.js <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.exe <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.mst <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: .docx.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.ws <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.92bs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.phps <==== ATTENTION
HKLM Group Policy restriction on software: %systemdrive%\mount.exe <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.paf <==== ATTENTION
HKLM Group Policy restriction on software: .xls.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.klx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: .avi.isu <==== ATTENTION
HKLM Group Policy restriction on software: .doc.pys <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.mod <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.pif <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.rx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.psc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.klx <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.pys <==== ATTENTION
HKLM Group Policy restriction on software: .wma.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.crt <==== ATTENTION
HKLM Group Policy restriction on software: .pub.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.exe <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.vb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.inf <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.paf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.bat <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.xml <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.mod <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\RegAsm.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.png.vbe <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.ins <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.ws <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.lua <==== ATTENTION
HKLM Group Policy restriction on software: .avi.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.js <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\processor.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.js <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: .wma.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.ws <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.pif <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\random\random.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.bin <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.png.isu <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.mst <==== ATTENTION
HKLM Group Policy restriction on software: .docx.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.application <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.js <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.rgs <==== ATTENTION
HKLM Group Policy restriction on software: .mp4.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.jar <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.vb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.xml <==== ATTENTION
HKLM Group Policy restriction on software: .zip.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.adp <==== ATTENTION
HKLM Group Policy restriction on software: .wma.rgs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.rgs <==== ATTENTION
HKLM Group Policy restriction on software: .png.ins <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.inf <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.ws <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.ade <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\windefrag.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.png.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.pys <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.ns <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.pif <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.pif <==== ATTENTION
HKLM Group Policy restriction on software: kek.exe <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.nsf <==== ATTENTION
HKLM Group Policy restriction on software: .png.ws <==== ATTENTION
HKLM Group Policy restriction on software: .ppt.paf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.isu <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.ws <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.vb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.u3p <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.msi <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.adp <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.msh <==== ATTENTION
HKLM Group Policy restriction on software: .txt.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.jse <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.shb <==== ATTENTION
HKLM Group Policy restriction on software: .png.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.rx <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.msp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.bas <==== ATTENTION
HKLM Group Policy restriction on software: .ppt.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.msh <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.frm <==== ATTENTION
HKLM Group Policy restriction on software: .ppt.lua <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.ws <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.bat <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.mst <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.rgs <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.phps <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.sct <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.jar <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.paf <==== ATTENTION
HKLM Group Policy restriction on software: .wav.ns <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.p <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: .png.psc <==== ATTENTION
HKLM Group Policy restriction on software: .wav.ws <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: .pub.com <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.isu <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.bin <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.png.com <==== ATTENTION
HKLM Group Policy restriction on software: .txt.xml <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.job <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\rkcl\rkcl.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.isp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.js <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.jar <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.job <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.job <==== ATTENTION
HKLM Group Policy restriction on software: .doc.psc <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.bat <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\freegaza_israeli_killers.exe <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\IKvtxoiPx.exe <==== ATTENTION
HKLM Group Policy restriction on software: .txt.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.p <==== ATTENTION
HKLM Group Policy restriction on software: .mp4.hta <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\arra.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: .avi.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.ws <==== ATTENTION
HKLM Group Policy restriction on software: .ppt.ws <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.phps <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.job <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.scf <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.rx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %systemdrive%\netpass.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.crt <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.mod <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.bin <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.xml <==== ATTENTION
HKLM Group Policy restriction on software: .wav.lua <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.com <==== ATTENTION
HKLM Group Policy restriction on software: .wav.scsb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.ocx <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.ins <==== ATTENTION
HKLM Group Policy restriction on software: .wav.rex <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.ws <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.xml <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.png.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.chm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.mde <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.jse <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.92bs <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.ws <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.crt <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.vb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.cmd <==== ATTENTION
HKLM Group Policy restriction on software: .rtf.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.msc <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.ade <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.ws <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.tcls <==== ATTENTION
HKLM Group Policy restriction on software: .pub.wwb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.job <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.mde <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.url <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.isp <==== ATTENTION
HKLM Group Policy restriction on software: .gif.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.crt <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.nsf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.bin <==== ATTENTION
HKLM Group Policy restriction on software: .doc.hta <==== ATTENTION
HKLM Group Policy restriction on software: .doc.ws <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: .wav.mod <==== ATTENTION
HKLM Group Policy restriction on software: vssadmin.exe <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.frm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.js <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.ins <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.92bs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.js <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.com <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.48s <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.msp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.job <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.phps <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.pls <==== ATTENTION
HKLM Group Policy restriction on software: .rar.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.msh <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.chm <==== ATTENTION
HKLM Group Policy restriction on software: .pub.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.tcls <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.isp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.shs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.shs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.inx <==== ATTENTION
HKLM Group Policy restriction on software: .mp4.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.js <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.js <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.msi <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.png.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.mde <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.p <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.rex <==== ATTENTION
HKLM Group Policy restriction on software: .xls.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: .wma.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.klx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.scr <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.pys <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.nsf <==== ATTENTION
HKLM Group Policy restriction on software: .rtf.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.xml <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.lua <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.xml <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.msp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.inx <==== ATTENTION
HKLM Group Policy restriction on software: .wav.scf <==== ATTENTION
HKLM Group Policy restriction on software: .divx.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.wwb <==== ATTENTION
HKLM Group Policy restriction on software: .wma.msh <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.wwb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.shs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.scf <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.jse <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.rx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.ade <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.bin <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.gadget <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.cpl <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.rx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.adp <==== ATTENTION
HKLM Group Policy restriction on software: .gif.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.chm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.mst <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.u3p <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.bat <==== ATTENTION
HKLM Group Policy restriction on software: .7z.cpl <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: .wav.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.js <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.msi <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.ws <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.sct <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.msp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.ocx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.mde <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.jar <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.com <==== ATTENTION
HKLM Group Policy restriction on software: .7z.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.msh <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.com <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.scf <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.reg <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\delback.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.msh <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.inx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.pif <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.sct <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.mde <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.bas <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.mst <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.shb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\new.bat <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.lua <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.msi <==== ATTENTION
HKLM Group Policy restriction on software: .wav.psc <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.pif <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.msh <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.reg <==== ATTENTION
HKLM Group Policy restriction on software: .avi.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.pif <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.scr <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.bin <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.job <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.url <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.pls <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.shs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.xml <==== ATTENTION
HKLM Group Policy restriction on software: .avi.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.msp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.com <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.mst <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.png.bin <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.u3p <==== ATTENTION
HKLM Group Policy restriction on software: .wav.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.jse <==== ATTENTION
HKLM Group Policy restriction on software: .gif.msh <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.vb <==== ATTENTION
HKLM Group Policy restriction on software: .pub.psc <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.bas <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.mst <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.scr <==== ATTENTION
HKLM Group Policy restriction on software: bcdedit.exe <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.com <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.shs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.chm <==== ATTENTION
HKLM Group Policy restriction on software: .zip.ade <==== ATTENTION
HKLM Group Policy restriction on software: .xls.jar <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.rx <==== ATTENTION
HKLM Group Policy restriction on software: .txt.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.frm <==== ATTENTION
HKLM Group Policy restriction on software: .divx.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.ws <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.msi <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.exe <==== ATTENTION
HKLM Group Policy restriction on software: .doc.msh <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.ocx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.vbs <==== ATTENTION
HKLM Group Policy restriction on software: .mp4.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.job <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.gadget <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.job <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.sct <==== ATTENTION
HKLM Group Policy restriction on software: .7z.ws <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.job <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.ws <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.url <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.pif <==== ATTENTION
HKLM Group Policy restriction on software: .doc.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.pys <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.msi <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.ns <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.crt <==== ATTENTION
HKLM Group Policy restriction on software: .rtf.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.nsf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.inx <==== ATTENTION
HKLM Group Policy restriction on software: .png.chm <==== ATTENTION
HKLM Group Policy restriction on software: .xls.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.cpl <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.adp <==== ATTENTION
HKLM Group Policy restriction on software: %systemdrive%\dcrypt.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.com <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.application <==== ATTENTION
HKLM Group Policy restriction on software: .txt.nsf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.png.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.u3p <==== ATTENTION
HKLM Group Policy restriction on software: 7_Sp.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.msi <==== ATTENTION
HKLM Group Policy restriction on software: .png.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.rx <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.scf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.psc <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.png.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.application <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.mst <==== ATTENTION
HKLM Group Policy restriction on software: .zip.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.shs <==== ATTENTION
HKLM Group Policy restriction on software: .gif.ns <==== ATTENTION
HKLM Group Policy restriction on software: .docx.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.ade <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.xml <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.isu <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.klx <==== ATTENTION
HKLM Group Policy restriction on software: .rtf.klx <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.vb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.png.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.ade <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.jse <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.cmd <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.ws <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.msc <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.vb <==== ATTENTION
HKLM Group Policy restriction on software: .png.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.shs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.p <==== ATTENTION
HKLM Group Policy restriction on software: .7z.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.lnk <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.jar <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.paf <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.msh <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.msh <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.bas <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.bin <==== ATTENTION
HKLM Group Policy restriction on software: .zip.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.isp <==== ATTENTION
HKLM Group Policy restriction on software: .ppt.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.msh <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.lua <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.msh <==== ATTENTION
HKLM Group Policy restriction on software: %systemdrive%*\svchost.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.ocx <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.msi <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: .doc.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.inx <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.xml <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.url <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.paf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.adp <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.psc <==== ATTENTION
HKLM Group Policy restriction on software: .rar.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.isp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.ade <==== ATTENTION
HKLM Group Policy restriction on software: .ppt.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.msh <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.url <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.nsf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: .pub.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.adp <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\software.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.js <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.ade <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.xml <==== ATTENTION
HKLM Group Policy restriction on software: .rtf.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.js <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.scsb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.scr <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.com <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.xml <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.jar <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.bas <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.inx <==== ATTENTION
HKLM Group Policy restriction on software: .ppt.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.psc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.reg <==== ATTENTION
HKLM Group Policy restriction on software: .mp4.adp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\dbddbccdf.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.isp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.shs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\uTorrent.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.pcd <==== ATTENTION
HKLM Group Policy restriction on software: .avi.msp <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.mod <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.phps <==== ATTENTION
HKLM Group Policy restriction on software: .rar.paf <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.msh <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.psc <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.p <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.reg <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.url <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Steg\steg.exe <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.com <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.cmd <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.48s <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.klx <==== ATTENTION
HKLM Group Policy restriction on software: .png.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.paf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.scf <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\svchost.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.js <==== ATTENTION
HKLM Group Policy restriction on software: .gif.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.lua <==== ATTENTION
HKLM Group Policy restriction on software: .zip.hlp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.inx <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.rx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.inx <==== ATTENTION
HKLM Group Policy restriction on software: .mp4.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.paf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.job <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: .divx.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.bin <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.ns <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.jse <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.js <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.inx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.hta <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.mod <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.hlp <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.pcd <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.psc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.rex <==== ATTENTION
HKLM Group Policy restriction on software: .7z.bat <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.url <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.mde <==== ATTENTION
HKLM Group Policy restriction on software: .ppt.mod <==== ATTENTION
HKLM Group Policy restriction on software: .wav.hlp <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: .divx.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.isp <==== ATTENTION
HKLM Group Policy restriction on software: .wav.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.mde <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: .xls.msi <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.psc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.mst <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.ns <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.48s <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %programfiles%*\svchost.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.pys <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.xcs <==== ATTENTION
HKLM Group Policy restriction on software: .doc.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.lua <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.tcls <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.lua <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.mde <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.reg <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.scf <==== ATTENTION
HKLM Group Policy restriction on software: .divx.psc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.sct <==== ATTENTION
HKLM Group Policy restriction on software: .divx.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.shs <==== ATTENTION
HKLM Group Policy restriction on software: .png.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.crt <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.msi <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.bat <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.scr <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.url <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.ins <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.msi <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.com <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.pys <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.isu <==== ATTENTION
HKLM Group Policy restriction on software: .xls.92bs <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.psc <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.inx <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.wwb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.com <==== ATTENTION
HKLM Group Policy restriction on software: .docx.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.mod <==== ATTENTION
HKLM Group Policy restriction on software: .avi.msi <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.psc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.pcd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.msi <==== ATTENTION
HKLM Group Policy restriction on software: .png.msh <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.ws <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: .txt.pcd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.vb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.ns <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.msi <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.paf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: .7z.jar <==== ATTENTION
HKLM Group Policy restriction on software: .xls.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.klx <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.mst <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.lnk <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.phps <==== ATTENTION
HKLM Group Policy restriction on software: .docx.ws <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.psc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.inx <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.sct <==== ATTENTION
HKLM Group Policy restriction on software: .gif.ws <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.crt <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.ns <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.ws <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.inx <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.paf <==== ATTENTION
HKLM Group Policy restriction on software: .rar.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.adp <==== ATTENTION
HKLM Group Policy restriction on software: .xls.scsb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.p <==== ATTENTION
HKLM Group Policy restriction on software: .zip.isu <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.hta <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.psc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: .pub.rex <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\drvpci.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.com <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.com <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.msp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.png.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.crt <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.crt <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.reg <==== ATTENTION
HKLM Group Policy restriction on software: .doc.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.ws <==== ATTENTION
HKLM Group Policy restriction on software: .rtf.rx <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.isu <==== ATTENTION
HKLM Group Policy restriction on software: .pub.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.frm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.ins <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.adp <==== ATTENTION
HKLM Group Policy restriction on software: .avi.psc <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.isu <==== ATTENTION
HKLM Group Policy restriction on software: .avi.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.jar <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.bin <==== ATTENTION
HKLM Group Policy restriction on software: .ppt.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.rx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: .txt.inf <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.vb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.isp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.shb <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.ns <==== ATTENTION
HKLM Group Policy restriction on software: .avi.rbs <==== ATTENTION
HKLM Group Policy restriction on software: .docx.gadget <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.isu <==== ATTENTION
HKLM Group Policy restriction on software: .ppt.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.hta <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.msi <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.png.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.bin <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.job <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.com <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.phps <==== ATTENTION
HKLM Group Policy restriction on software: .xls.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.job <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.isp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.inf <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.psc <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.msi <==== ATTENTION
HKLM Group Policy restriction on software: .txt.mdb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.msh <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.chm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.phps <==== ATTENTION
HKLM Group Policy restriction on software: .docx.msh <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.tcls <==== ATTENTION
HKLM Group Policy restriction on software: .gif.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.phps <==== ATTENTION
HKLM Group Policy restriction on software: .avi.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.p <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.hta <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.url <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.48s <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.adp <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.pys <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Windows\csrss.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.paf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.pcd <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.rx <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.crt <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.p <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.com <==== ATTENTION
HKLM Group Policy restriction on software: .xls.psc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.com <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.mod <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.ins <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.phps <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.scr <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.msc <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.inx <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.com <==== ATTENTION
HKLM Group Policy restriction on software: .txt.ws <==== ATTENTION
HKLM Group Policy restriction on software: .png.scf <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.klx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.crt <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.js <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.ade <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.isp <==== ATTENTION
HKLM Group Policy restriction on software: .divx.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.phps <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.48s <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.ns <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.u3p <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.js <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.application <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.lua <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.92bs <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.psc <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.klx <==== ATTENTION
HKLM Group Policy restriction on software: .pub.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.job <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: .docx.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.msc <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.klx <==== ATTENTION
HKLM Group Policy restriction on software: .wav.rx <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.92bs <==== ATTENTION
HKLM Group Policy restriction on software: extratools.exe <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.wwb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: .rar.msh <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.bas <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.bin <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: *.png.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.cmd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.sct <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.vb <==== ATTENTION
HKLM Group Policy restriction on software: .txt.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.msc <==== ATTENTION
HKLM Group Policy restriction on software: deleteMyProgram.bat <==== ATTENTION
HKLM Group Policy restriction on software: .png.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.scf <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.rx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.psc <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.vb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.shs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.isu <==== ATTENTION
HKLM Group Policy restriction on software: .xls.msh <==== ATTENTION
HKLM Group Policy restriction on software: .7z.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.wwb <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.com <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.js <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.js <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.hta <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.bin <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.paf <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.msp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.frm <==== ATTENTION
HKLM Group Policy restriction on software: .7z.vb <==== ATTENTION
HKLM Group Policy restriction on software: .txt.psc <==== ATTENTION
HKLM Group Policy restriction on software: .divx.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.psc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.ws <==== ATTENTION
HKLM Group Policy restriction on software: .rtf.hta <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.bin <==== ATTENTION
HKLM Group Policy restriction on software: .divx.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.msh <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.msh <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.msi <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.pls <==== ATTENTION
HKLM Group Policy restriction on software: .7z.psc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.klx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.adp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.isu <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.hta <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.isu <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.pys <==== ATTENTION
HKLM Group Policy restriction on software: .txt.msh <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.jse <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.p <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.mst <==== ATTENTION
HKLM Group Policy restriction on software: .rtf.msh <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.p <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.inf <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.p <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.msc <==== ATTENTION
HKLM Group Policy restriction on software: .txt.pys <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.pls <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.scf <==== ATTENTION
HKLM Group Policy restriction on software: .divx.msh <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.pif <==== ATTENTION
HKLM Group Policy restriction on software: .wma.psc <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.mdb <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.jar <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.application <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.msc <==== ATTENTION
HKLM Group Policy restriction on software: .avi.phps <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.js <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.u3p <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.bin <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.psc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.shs <==== ATTENTION
HKLM Group Policy restriction on software: .doc.inx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.chm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.rex <==== ATTENTION
HKLM Group Policy restriction on software: .docx.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.msc <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.inf <==== ATTENTION
HKLM Group Policy restriction on software: .xls.lua <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.p <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.klx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.msh <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.ins <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.reg <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.application <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.msi <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.ns <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.adp <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.psc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.ocx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.png.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.xml <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.scf <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.p <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.sct <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.tcls <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: .zip.psc <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: .zip.msh <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.job <==== ATTENTION
HKLM Group Policy restriction on software: .txt.rbs <==== ATTENTION
HKLM Group Policy restriction on software: .divx.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.p <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.shb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.application <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.mdb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.mod <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.bin <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\svchost.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.sct <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.isp <==== ATTENTION
HKLM Group Policy restriction on software: PDFBewerbungsmappe.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.job <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.application <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.klx <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.lnk <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.shb <==== ATTENTION
HKLM Group Policy restriction on software: .docx.bas <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.mst <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.phps <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.psc <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.psc <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.application <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.hta <==== ATTENTION
HKLM Group Policy restriction on software: .png.mde <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.scr <==== ATTENTION
HKLM Group Policy restriction on software: .doc.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.mst <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.scsb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.xml <==== ATTENTION
HKLM Group Policy restriction on software: .xls.rex <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.mde <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.scf <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.application <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.url <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.scf <==== ATTENTION
HKLM Group Policy restriction on software: .rtf.48s <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.shb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.msh <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.bas <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: .xls.48s <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.ws <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.msh <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.png.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.com <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.js <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\rkcl\ldr.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.lua <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.paf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.ins <==== ATTENTION
HKLM Group Policy restriction on software: .doc.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.shs <==== ATTENTION
HKLM Group Policy restriction on software: .txt.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: .png.inf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.vb <==== ATTENTION
HKLM Group Policy restriction on software: .docx.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.shs <==== ATTENTION
HKLM Group Policy restriction on software: .rar.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.pys <==== ATTENTION
HKLM Group Policy restriction on software: .gif.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.pls <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.com <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.ns <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.jar <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.application <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.js <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.application <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.hlp <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.inx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.p <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.isu <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.bas <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.rx <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.ins <==== ATTENTION
HKLM Group Policy restriction on software: .zip.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.lua <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.url <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.application <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.url <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.pif <==== ATTENTION
HKLM Group Policy restriction on software: .pub.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.scf <==== ATTENTION
HKLM Group Policy restriction on software: .gif.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: *.png.cpl <==== ATTENTION
HKLM Group Policy restriction on software: .docx.xml <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.rx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.js <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.shb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.isu <==== ATTENTION
HKLM Group Policy restriction on software: .zip.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.psc <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.com <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.sct <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.png.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.url <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.job <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.msp <==== ATTENTION
HKLM Group Policy restriction on software: .docx.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.sct <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.inf <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: .png.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.msh <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.klx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.rex <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.48s <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: .ppt.vb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.sct <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.msh <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.psc <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.isu <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.paf <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.hta <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.msh <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.png.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.bat <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.mdb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.48s <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.48s <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.p <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.xml <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.ins <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.exe <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.pif <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.application <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.msi <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.jse <==== ATTENTION
HKLM Group Policy restriction on software: .gif.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.msh <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.sct <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.mdb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.hlp <==== ATTENTION
HKLM Group Policy restriction on software: .png.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.sct <==== ATTENTION
HKLM Group Policy restriction on software: .txt.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.shb <==== ATTENTION
HKLM Group Policy restriction on software: .7z.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.ins <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.jse <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.p <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.frm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.png.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.png.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.xml <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.chm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.p <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.adp <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.mde <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.ade <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: .mp4.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.paf <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: .mp4.klx <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.shs <==== ATTENTION
HKLM Group Policy restriction on software: .7z.jse <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.msh <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.png.hta <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.xml <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.bas <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.url <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.vbs <==== ATTENTION
HKLM Group Policy restriction on software: .txt.hta <==== ATTENTION
HKLM Group Policy restriction on software: .rtf.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.psc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.chm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: .xls.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.sct <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.scsb <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.bin <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.jse <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.phps <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.com <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.bas <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.pys <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.com <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.bas <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.png.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.p <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.ade <==== ATTENTION
HKLM Group Policy restriction on software: .wma.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.ins <==== ATTENTION
HKLM Group Policy restriction on software: .divx.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.com <==== ATTENTION
HKLM Group Policy restriction on software: lsassvrtdbks.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.klx <==== ATTENTION
HKLM Group Policy restriction on software: .avi.rex <==== ATTENTION
HKLM Group Policy restriction on software: .mp4.psc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.bin <==== ATTENTION
HKLM Group Policy restriction on software: %systemdrive%\Network Prosoft* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.psc <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.vbs <==== ATTENTION
HKLM Group Policy restriction on software: .zip.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.vbs <==== ATTENTION
HKLM Group Policy restriction on software: .7z.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.pif <==== ATTENTION
HKLM Group Policy restriction on software: .txt.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.png.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.gadget <==== ATTENTION
HKLM Group Policy restriction on software: .gif.psc <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.xml <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.url <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.msp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.rex <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\clean.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.js <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.jar <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.isp <==== ATTENTION
HKLM Group Policy restriction on software: .avi.msh <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.ade <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.mod <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.job <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.msh <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.isu <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.rx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.adp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.exe <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.reg <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.bas <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.paf <==== ATTENTION
HKLM Group Policy restriction on software: .png.bat <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.msp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.vbs <==== ATTENTION
HKLM Group Policy restriction on software: .pub.ws <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.inf <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.lnk <==== ATTENTION
HKLM Group Policy restriction on software: .pub.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: .pub.msh <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.isp <==== ATTENTION
HKLM Group Policy restriction on software: .xls.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.mde <==== ATTENTION
HKLM Group Policy restriction on software: .avi.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: .ppt.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.gadget <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.com <==== ATTENTION
HKLM Group Policy restriction on software: *.png.job <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.xml <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.phps <==== ATTENTION
HKLM Group Policy restriction on software: .docx.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.url <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.pcd <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.48s <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.shb <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.mod <==== ATTENTION
HKLM Group Policy restriction on software: .png.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.url <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.com <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.shs <==== ATTENTION
HKLM Group Policy restriction on software: .pub.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.msh <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.inf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.job <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.hta <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.48s <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\dsadee.vbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.inf <==== ATTENTION
HKLM Group Policy restriction on software: .ppt.msh <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.isu <==== ATTENTION
HKLM Group Policy restriction on software: pokemongo.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.js <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.png.shs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.pif <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.p <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.pls <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.ade <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: .png.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.hlp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.pif <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.png.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.url <==== ATTENTION
HKLM Group Policy restriction on software: *.png.reg <==== ATTENTION
HKLM Group Policy restriction on software: .png.p <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.psc <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.mst <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.adp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.sct <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.url <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.xcs <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.url <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.bat <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.pcd <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.psc <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.48s <==== ATTENTION
HKLM Group Policy restriction on software: .wav.gadget <==== ATTENTION
HKLM Group Policy restriction on software: .wav.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.job <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.lua <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.msh <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.isp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.ins <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.js <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.scf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.gadget <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.vb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.gadget <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.exe <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.inf <==== ATTENTION
HKLM Group Policy restriction on software: .divx.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.js <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.msi <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.com <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.com <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.jse <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.reg <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.isp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.mde <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.chm <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.com <==== ATTENTION
HKLM Group Policy restriction on software: .wav.mdb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.inx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.ws <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: .gif.pif <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.msh <==== ATTENTION
HKLM Group Policy restriction on software: :$Recycle.Bin*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.ws <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.lua <==== ATTENTION
HKLM Group Policy restriction on software: .xls.msp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.hta <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.bin <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.vbe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.js <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.lua <==== ATTENTION
HKLM Group Policy restriction on software: .rar.vb <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.jse <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.mde <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: .zip.ws <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.48s <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.pif <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.rex <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.url <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.crt <==== ATTENTION
HKLM Group Policy restriction on software: .png.rbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: .divx.ws <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.psc <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.inx <==== ATTENTION
HKLM Group Policy restriction on software: .txt.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: .txt.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.lua <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.msh <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.nsf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.shb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.mde <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.vbe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.url <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.hlp <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.jse <==== ATTENTION
HKLM Group Policy restriction on software: cipher.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.chm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.ade <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.application <==== ATTENTION
HKLM Group Policy restriction on software: .zip.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.cmd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.ins <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.psc <==== ATTENTION
HKLM Group Policy restriction on software: .rar.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.paf <==== ATTENTION
HKLM Group Policy restriction on software: .zip.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.p <==== ATTENTION
HKLM Group Policy restriction on software: .txt.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.mst <==== ATTENTION
HKLM Group Policy restriction on software: .gif.bin <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.xml <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.mdb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.jar <==== ATTENTION
HKLM Group Policy restriction on software: .jpeg.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.js <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.url <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.rgs <==== ATTENTION
HKLM Group Policy restriction on software: .pdf.ws <==== ATTENTION
HKLM Group Policy restriction on software: .7z.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.48s <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.application <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.ade <==== ATTENTION
HKLM Group Policy restriction on software: .gif.wwb <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming**.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.scsb <==== ATTENTION
HKLM Group Policy restriction on software: .txt.pif <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.rx <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.bat <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.scf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.png.sct <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: .pub.chm <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: .ppt.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.ins <==== ATTENTION
HKLM Group Policy restriction on software: .wma.ws <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.p <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.msp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.p <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.jar <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.reg <==== ATTENTION
HKLM Group Policy restriction on software: .pptx.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.xml <==== ATTENTION
HKLM Group Policy restriction on software: .mp4.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.frm <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.mde <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Patrick*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: .avi.isp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.vb <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.lua <==== ATTENTION
HKLM Group Policy restriction on software: .bmp.jse <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.adp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.png.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.jar <==== ATTENTION
HKLM Group Policy restriction on software: *:$Recycle.Bin*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.bat <==== ATTENTION
HKLM Group Policy restriction on software: .avi.exe <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\imgdesktop.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\All Users*.ps1 <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.mod <==== ATTENTION
HKLM Group Policy restriction on software: .wav.msh <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.ws <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.phps <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.application <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.lnk <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.msi <==== ATTENTION
HKLM Group Policy restriction on software: .divx.rx <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.lua <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.isp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.adp <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow*.com <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.isp <==== ATTENTION
HKLM Group Policy restriction on software: .xls.reg <==== ATTENTION
HKLM Group Policy restriction on software: .doc.mde <==== ATTENTION
HKLM Group Policy restriction on software: .wmv.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.rx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.mod <==== ATTENTION
HKLM Group Policy restriction on software: .7z.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local**.pys <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.bas <==== ATTENTION
HKLM Group Policy restriction on software: .avi.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: .rtf.chm <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.adp <==== ATTENTION
HKLM Group Policy restriction on software: \u202e.inx <==== ATTENTION
HKLM Group Policy restriction on software: .gif.ps2 <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: .xlsx.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%*.rx <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.zip*.isu <==== ATTENTION
HKLM Group Policy restriction on software: .rar.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.url <==== ATTENTION
HKLM Group Policy restriction on software: .divx.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Windows\Temp*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.xml <==== ATTENTION
HKLM Group Policy restriction on software: .jpg.ws <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.phps <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local*.bat <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default User*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%**.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.tcls <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: scsvserv.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users*.hta <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public*.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.bas <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow**.chm <==== ATTENTION
HKLM Group Policy restriction on software: .mp4.pls <==== ATTENTION
HKLM Group Policy restriction on software: .mp3.isu <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Default*.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.mod <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.png.url <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.png.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.rbs <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\Run: [WinPatrol] => C:\Program Files\Ruiware\WinPatrol\winpatrol.exe [1231240 2017-01-27] (Ruiware)
HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\Run: [MCShield Monitor] => C:\Program Files\MCShield\mcshieldrtm.exe [650816 2015-06-03] (MyCity)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CryptoPrevent QuickAccess.lnk [2017-09-07]
ShortcutTarget: CryptoPrevent QuickAccess.lnk → C:\Program Files\Foolish IT\CryptoPrevent\CryptoPreventNotification.exe (Foolish IT LLC)
BootExecute: autocheck autochk *

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 198.18.11.125
Tcpip..\Interfaces{084AFF87-4C03-499A-AB4A-DA3055C45748}: [NameServer] 0.0.0.0
Tcpip..\Interfaces{084AFF87-4C03-499A-AB4A-DA3055C45748}: [DhcpNameServer] 75.75.75.75 75.75.76.76
Tcpip..\Interfaces{48AAE418-7A06-4B01-B67C-69F8C3DD738A}: [NameServer] 0.0.0.0
Tcpip..\Interfaces{e29ac6c2-7037-11de-816d-806e6f6e6963}: [NameServer] 0.0.0.0
Tcpip..\Interfaces{F8D1935D-8F20-43E6-943E-B57692889A9C}: [NameServer] 0.0.0.0
Tcpip..\Interfaces{FE7E939C-A2F8-4BBE-A42C-38E173A25D0F}: [DhcpNameServer] 198.18.11.125
[HEADING=1]Internet Explorer:[/HEADING]
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2985130882-1756615807-8858886-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\S-1-5-21-2985130882-1756615807-8858886-1000 → {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2001-06-20] (Microsoft Corporation)
[HEADING=1]FireFox:[/HEADING]
FF ProfilePath: C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\P rofiles\v7d7tla4.default-1483372895367 [2017-09-21]
FF NewTab: Mozilla\Firefox\Profiles\v7d7tla4.default-1483372895367 → about:newtab
FF Homepage: Mozilla\Firefox\Profiles\v7d7tla4.default-1483372895367 → hxxps://duckduckgo.com/
FF Extension: (Adguard AdBlocker) - C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\P rofiles\v7d7tla4.default-1483372895367\Extensions\adguardadblocker@adguard.com.xpi [2017-08-12]
FF Extension: (HTTPS Everywhere) - C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\P rofiles\v7d7tla4.default-1483372895367\Extensions\https-everywhere@eff.org.xpi [2017-09-13]
FF Extension: (Self-Destructing Cookies) - C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\P rofiles\v7d7tla4.default-1483372895367\Extensions\jid0-9XfBwUWnvPx4wWsfBWMCm4Jj69E@jetpack.xpi [2017-03-25]
FF Extension: (uBlock Origin) - C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\P rofiles\v7d7tla4.default-1483372895367\Extensions\uBlock0@raymondhill.net.xpi [2017-09-13]
FF Extension: (Video DownloadHelper) - C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\P rofiles\v7d7tla4.default-1483372895367\Extensions{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-05-09]
FF Plugin: @adobe.com/FlashPlayer → C:\Windows\system32\Macromed\Flash\NPSWF32_26_0_0_ 151.dll [2017-08-13] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 → c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.4 → C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.5.1 → C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 → C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: Adobe Reader → C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-07-31] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2017-07-31] (Adobe Systems Inc.)

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5831440 2017-09-15] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [281416 2017-09-15] (AVAST Software)
S4 Bonjour Service; C:\Program Files\Blizzard\Bonjour Service\mDNSResponder.exe [390504 2017-05-04] (Apple Inc.)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [8150344 2017-08-28] (COMODO)
R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2080448 2017-08-28] (COMODO)
S3 CryptoPreventEmail; C:\Program Files\Foolish IT\CryptoPrevent\CryptoPreventMonSvc.exe [642712 2017-06-18] (Foolish IT LLC)
R3 CryptoPreventFolderWatch; C:\Program Files\Foolish IT\CryptoPrevent\CryptoPreventMonSvc.exe [642712 2017-06-18] (Foolish IT LLC)
R2 CryptoPreventMonSvc; C:\Program Files\Foolish IT\CryptoPrevent\CryptoPreventMonSvc.exe [642712 2017-06-18] (Foolish IT LLC)
S4 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1125568 2016-04-07] (Disc Soft Ltd)
R2 Freedome Service; C:\Program Files\F-Secure\Freedome\Freedome\1.1\FreedomeService.exe [592352 2017-09-12] (F-Secure Corporation)
R2 hmpalertsvc; C:\Program Files\HitmanPro.Alert\hmpalert.exe [4853384 2017-06-27] (SurfRight B.V.)
R2 isesrv; C:\Program Files\COMODO\Internet Security Essentials\isesrv.exe [133840 2017-08-07] (COMODO)
S4 K2Service.exe; C:\Program Files\Kruptos 2 Software\Kruptos 2 Professional\K2Service.exe [103432 2016-09-26] ()
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 Unchecky; C:\Program Files\Unchecky\bin\unchecky_svc.exe [302872 2017-08-12] (RaMMicHaeL)
R2 VoodooShieldService; C:\Program Files\VoodooShield\VoodooShieldService.exe [129360 2017-05-01] (VoodooSoft, LLC )
S4 WDDriveService; C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe [315768 2016-08-05] (Western Digital Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2015-06-03] (Microsoft Corporation)
R2 ZAMSvc; C:\Program Files\Zemana AntiMalware\ZAM.exe [15775888 2017-08-09] (Copyright 2017.)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdriverx.sys [255624 2017-09-08] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidshx.sys [157416 2017-09-08] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswblogx.sys [276736 2017-09-08] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbunivx.sys [50384 2017-09-08] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [42856 2017-09-15] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [124952 2017-09-15] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [99560 2017-09-15] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [70864 2017-09-15] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [774824 2017-09-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [499048 2017-09-15] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [148800 2017-09-15] (AVAST Software)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [27504 2017-08-07] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [658704 2017-08-07] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [53344 2017-08-07] (COMODO)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [107648 2016-08-11] (Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [26168 2016-04-05] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [40504 2016-04-05] (Disc Soft Ltd)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [30616 2014-12-20] (Elaborate Bytes AG)
R1 epp; C:\EEK\bin32\epp.sys [105248 2017-08-27] (Emsisoft Ltd)
R3 fsfreedometap; C:\Windows\System32\DRIVERS\fsfreedometap.sys [30760 2017-03-30] (The OpenVPN Project)
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [17472 2015-06-03] (Glarysoft Ltd)
R1 hmpalert; C:\Windows\system32\drivers\hmpalert.sys [199016 2017-06-27] (SurfRight B.V.)
R3 hmpnet; C:\Windows\system32\drivers\hmpnet.sys [83136 2017-06-27] (SurfRight B.V.)
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [106864 2017-08-07] (COMODO)
R1 isedrv; C:\Windows\system32\drivers\isedrv.sys [40952 2017-08-07] (COMODO)
R1 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [126336 2016-03-10] (Malwarebytes)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [24448 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2017-09-21] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [53120 2016-03-10] (Malwarebytes Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-02-28] (Riverbed Technology, Inc.)
S3 qcusbser; C:\Windows\System32\DRIVERS\qcusbser.sys [232160 2015-09-02] (QUALCOMM Incorporated)
R2 secdrv; C:\Windows\system32\Drivers\secdrv.sys [11973 2015-10-20] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed]
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [23040 2016-09-02] (The OpenVPN Project)
S1 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [103544 2016-06-05] (Oracle Corporation)
R3 VSScanner; C:\Windows\System32\DRIVERS\vsscanner.sys [19016 2016-08-19] (VoodooSoft, LLC)
S3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam_prewin8.sys [20256 2017-02-12] (Western Digital Technologies)
R1 ZAM; C:\Windows\System32\drivers\zam32.sys [181496 2016-10-02] (Zemana Ltd.)
R1 ZAM_Guard; C:\Windows\System32\drivers\zamguard32.sys [181496 2016-10-02] (Zemana Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-13] (Microsoft Corporation) <==== ATTENTION (no ServiceDLL)
S3 aswVmm; ??\C:\Users\Patrick\AppData\Local\Temp\aswVmm.sys

========================== Drivers MD5 =======================

C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit
C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit
C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adp94xx.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adpahci.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adpu320.sys ==> MD5 is legit
C:\Windows\system32\drivers\afd.sys F582FC7976F1248AC5FBD6875C626B41
C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\djsvs.sys ==> MD5 is legit
C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdagp.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\amdk8.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\amdppm.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdsata.sys D320BF87125326F996D4904FE24300FC
C:\Windows\system32\DRIVERS\amdsbs.sys ==> MD5 is legit
C:\Windows\System32\drivers\amdxata.sys 46387FB17B086D16DEA267D5BE23A2F2
C:\Windows\system32\drivers\appid.sys A029C966211BC86578D6845B07D73CA4
C:\Windows\system32\DRIVERS\arc.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\arcsas.sys ==> MD5 is legit
C:\Windows\system32\drivers\aswbidsdriverx.sys FFF84DF1EB01E41C7C8831CBC2906F93
C:\Windows\system32\drivers\aswbidshx.sys E542F6D1AC7FA739D0A7237B6AB00F08
C:\Windows\system32\drivers\aswblogx.sys 12B413DB615BADFEE1B44E4378D2E527
C:\Windows\system32\drivers\aswbunivx.sys B82EA2BA3C1F77A3D291A02C8742EA1C
C:\Windows\system32\drivers\aswHwid.sys 073CF3FE2A6DEEC9C24CE1E6F7F771FF
C:\Windows\system32\drivers\aswMonFlt.sys AA27B32BE817A051B28DD8A1DE909242
C:\Windows\system32\drivers\aswRdr2.sys 45ADE8705E7FD079B60B24F1C842C129
C:\Windows\system32\drivers\aswRvrt.sys 148F27AB46804253E97539A41C312D02
C:\Windows\system32\drivers\aswSnx.sys A53E39135B144DE7949C9A87DEEEF269
C:\Windows\system32\drivers\aswSP.sys 9146D4CAE37EB8B1DFCC32937A96ECC8
C:\Windows\system32\drivers\aswStm.sys 72778CC6804BF465FE052E7CF84A88C9
C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit
C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\bxvbdx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\b57nd60x.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bcmwl6.sys EB7C2DADF52F50F69F198C14C3556DC1
C:\Windows\system32\Drivers\Beep.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bowser.sys 28AF7D4427868B7CE4C00CAB1864C7F6
C:\Windows\system32\DRIVERS\BrFiltLo.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\BrFiltUp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bridge.sys 77361D72A04F18809D0EFB6CCEB74D4B
C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\bthmodem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\circlass.sys ==> MD5 is legit
C:\Windows\System32\CLFS.sys 000B58009E5D0962C0A71D6477029A3F
C:\Windows\System32\DRIVERS\CmBatt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cmderd.sys DC8CB9C4EBE80068C787CB4BAFF90A03
C:\Windows\System32\DRIVERS\cmdguard.sys EFA20A96C3089ACF548282E275A18038
C:\Windows\System32\DRIVERS\cmdhlp.sys D36B5C631A4B095AD55B810A77B556B5
C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit
C:\Windows\System32\Drivers\cng.sys 7F7D4B16389CEF932950F6B2604D2601
C:\Windows\System32\DRIVERS\compbatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\CompositeBus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\crcdisk.sys ==> MD5 is legit
C:\Windows\system32\Drivers\CtAudDrv.sys 0F538DF1673E5216F3BAACB6911D9D0F
C:\Windows\System32\DRIVERS\CtClsFlt.sys 9A6CA307151505730DBFC91D97F01C7E
C:\Windows\System32\Drivers\dfsc.sys EA9DBD76CE9254C77BAAB4339DD4C4FB
C:\Windows\System32\DRIVERS\ssudbus.sys B8AF290680D6995D98801F70E1BAB56D
C:\Windows\System32\drivers\discache.sys ==> MD5 is legit
C:\Windows\System32\drivers\disk.sys B7B470F163002A0D0E381EE45834BF6B
C:\Windows\system32\drivers\drmkaud.sys A3F684B866A7D89AE396276CE7AFD416
C:\Windows\System32\DRIVERS\dtlitescsibus.sys 8A32FF671D452D36CC7421171B78F939
C:\Windows\System32\DRIVERS\dtliteusbbus.sys 0098B71A5D28FEAF321B4AC4549765D9
C:\Windows\System32\drivers\dxgkrnl.sys 897AE9430D037B056CF76A49CF588542
C:\Windows\system32\DRIVERS\evbdx.sys ==> MD5 is legit
C:\Windows\System32\Drivers\ElbyCDIO.sys 72753D5CC94A90F5CFC6C00ECC47163F
C:\Windows\system32\DRIVERS\elxstor.sys ==> MD5 is legit
C:\EEK\bin32\epp.sys 1A0098A9DCA241037034FD95E9A4A66B
C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit
C:\Windows\system32\Drivers\exfat.sys 53E8732CC70CC0991839DF9FC8996E4A
C:\Windows\system32\Drivers\fastfat.sys 24F422E5D7517FEBDA2324116F1A7BE6
C:\Windows\system32\DRIVERS\fdc.sys ==> MD5 is legit
C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit
C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\flpydisk.sys ==> MD5 is legitB
C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\fsfreedometap.sys 833063742BFFD1158DFB4D2298074C12
C:\Windows\system32\Drivers\Fs_Rec.sys 7DAE5EBCC80E45D3253F4923DC424D05
C:\Windows\System32\DRIVERS\fvevol.sys E306A24D9694C724FA2491278BF50FDB
C:\Windows\system32\DRIVERS\gagp30kx.sys ==> MD5 is legit
C:\Windows\System32\drivers\GUBootStartup.sys 05C11D2DA6B396F6AD8C590D32CF81D7
C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit
C:\Windows\system32\drivers\HdAudio.sys A5EF29D5315111C80A5C1ABAD14C8972
C:\Windows\system32\drivers\HDAudBus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\HidBatt.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\hidbth.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\hidir.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\hidusb.sys ==> MD5 is legit
C:\Windows\system32\drivers\hmpalert.sys 5750283C9E32D749553EBF835F53640C
C:\Windows\system32\drivers\hmpnet.sys B9D28C4715A453EF47A4ACFD4E4BA9DC
C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit
C:\Windows\System32\drivers\HTTP.sys 2F50E2780F16E00369F1311B086C3E42
C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit
C:\Windows\system32\drivers\i8042prt.sys ==> MD5 is legit
C:\Windows\system32\drivers\iaStorV.sys 5CD5F9A5444E6CDCB0AC89BD62D8B76E
C:\Windows\System32\DRIVERS\igdkmd32.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\iirsp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\inspect.sys 4E86C629E7802269A1BAA4C6A79DB5F0
C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\intelppm.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit
C:\Windows\system32\drivers\msiscsi.sys EB34CE31FABD4DC4343FD2AD16D2CAF9
C:\Windows\system32\drivers\isedrv.sys CEE8B7C169F2B7BAE212E9A1FCA081B3
C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\kbdhid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\ksecdd.sys 11A229C8E701E5C6F1C580FECAC8CB76
C:\Windows\System32\Drivers\ksecpkg.sys C717F3B5AD3531DE1FF38C3B097D495A
C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_fc.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_sas.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_sas2.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_scsi.sys ==> MD5 is legit
C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mbamchameleon.sys 22649DC583AE1F124C12FB1D39AE8B0B
C:\Windows\system32\drivers\mbam.sys A1D52DB330E18B5A7A718D31D950CA87
C:\Windows\system32\drivers\MBAMSwissArmy.sys 5023F594D5448E16F920157174C61358
C:\Windows\system32\drivers\mwac.sys 66DDF98174707CBADBCA6BBABDA1231C
C:\Windows\system32\DRIVERS\megasas.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\MegaSR.sys ==> MD5 is legit
C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
C:\Windows\System32\drivers\mountmgr.sys 9664F55623B43FD85D5642A202976AEE
C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mrxdav.sys 06AC0310138E4B2C35AF7344D18BC686
C:\Windows\System32\DRIVERS\mrxsmb.sys 0D045D242E8E1095EDBF0832F1E2B0F4
C:\Windows\System32\DRIVERS\mrxsmb10.sys 94F798F57538CAE653A6CE7B70D28639
C:\Windows\System32\DRIVERS\mrxsmb20.sys A25E0AE2EFA8CEA826A25C1A8A71ECE5
C:\Windows\System32\drivers\msahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit
C:\Windows\system32\Drivers\Msfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
C:\Windows\system32\Drivers\MsRPC.sys ==> MD5 is legit
C:\Windows\system32\drivers\mssmbios.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\MTConfig.sys ==> MD5 is legit
C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
C:\Windows\System32\drivers\ndis.sys 9804FB2E46077F2977552347DFCA7E05
C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
C:\Windows\system32\Drivers\NDProxy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbt.sys 2E226E666C6E11DC8C850071A90BE2DC
C:\Windows\system32\DRIVERS\nfrd960.sys ==> MD5 is legit
C:\Windows\System32\drivers\npf.sys 25401B0C9576C8456B3E0BBD74FF0771
C:\Windows\system32\Drivers\Npfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys C68AA651F93450ECA51A60D45A8E266C
C:\Windows\system32\Drivers\Ntfs.sys 28B64D3792D4F692E45ECB0C3F98C19B
C:\Windows\system32\Drivers\Null.sys ==> MD5 is legit
C:\Windows\system32\drivers\nvraid.sys B3E25EE28883877076E0E1FF877D02E0
C:\Windows\system32\drivers\nvstor.sys 4380E59A170D88C4F1022EFF6719A8A4
C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\parport.sys ==> MD5 is legit
C:\Windows\System32\drivers\partmgr.sys 3F34A1B4C5F6475F320C275E63AFCE9B
C:\Windows\system32\DRIVERS\parvdm.sys ==> MD5 is legit
C:\Windows\System32\drivers\pci.sys ==> MD5 is legit
C:\Windows\system32\drivers\pciide.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\pcmcia.sys ==> MD5 is legit
C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
C:\Windows\System32\drivers\peauth.sys 0C941A3F148B4228867908F98F394461
C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\processr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\qcusbser.sys C087900935B6472233EECE8A86AE9C77
C:\Windows\system32\DRIVERS\ql2300.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\ql40xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\rdpbus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpvideominiport.sys 65375DF758CA1872AB7EBBBA457FD5E6
C:\Windows\system32\Drivers\RDPWD.sys CD9214A6AE17D188D17C3CF8CB9CC693
C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
C:\Windows\system32\Drivers\secdrv.sys 72DFFA33F8ED1C847075EEE2C1E790EE
C:\Windows\system32\DRIVERS\serenum.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\serial.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sermouse.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sfloppy.sys ==> MD5 is legit
C:\Windows\system32\drivers\sisagp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\SiSRaid2.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sisraid4.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
C:\Windows\system32\Drivers\spldr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\srv.sys 7621B3601A2869DFB136F1CC4E0B03DB
C:\Windows\System32\DRIVERS\srv2.sys 7E62B0B91BE74F5A7A93BC2C07769AFB
C:\Windows\System32\DRIVERS\srvnet.sys C0CD2A68ADB4811802A2D19803E5540F
C:\Windows\System32\DRIVERS\ssudmdm.sys 1F568F98A6BBBB174965A182D17AA75D
C:\Windows\system32\DRIVERS\stexstor.sys ==> MD5 is legit
C:\Windows\system32\drivers\swenum.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\tap0901.sys F49967C396969B71C3A72537DB03A68B
C:\Windows\System32\drivers\tcpip.sys C25848DB4A86839A7EDD1077F62AD980
C:\Windows\System32\DRIVERS\tcpip.sys C25848DB4A86839A7EDD1077F62AD980
C:\Windows\System32\drivers\tcpipreg.sys A4BF8BE9D1F7D563C7868AC7B2561545
C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
C:\Windows\System32\drivers\tdtcp.sys 2C2C5AFE7EE4F620D69C23C0617651A8
C:\Windows\System32\DRIVERS\tdx.sys 8F143F86FDD8CF4F7BD25973C5983F9D
C:\Windows\system32\drivers\termdd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\tssecsrv.sys B89F89A2308E9569A1022A50F78C5506
C:\Windows\System32\drivers\tsusbflt.sys C6A5FBD4977305E1FA23E02C042DB463
C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\uagp35.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
C:\Windows\system32\drivers\umbus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\umpass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbccgp.sys 325A69967CC7B4BFB170F5636143A94A
C:\Windows\system32\drivers\usbcir.sys 2352AB5F9F8F097BF9D41D5A4718A041
C:\Windows\system32\drivers\usbehci.sys 5D57798CAE5A0DD0B8F61C52B8E7C3D1
C:\Windows\system32\drivers\usbhub.sys 3835ECC1E928042F92D7AA1963D40523
C:\Windows\system32\drivers\usbohci.sys 81E1E90305A4C7A13BADC5DFA22ABA37
C:\Windows\system32\DRIVERS\usbprint.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\USBSTOR.SYS 144DA53294922A84FFAA3D90B1453745
C:\Windows\system32\drivers\usbuhci.sys B4A1789BE90403D9549EF9DBAD37A429
C:\Windows\System32\Drivers\usbvideo.sys DE014425522610BEDCA3821BB8C0F1D5
C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys 3AA7D74157C922E0C794C2F44F3D5F21
C:\Windows\System32\Drivers\VBoxUSB.sys FE10BFADA31398EA4E4F9BE77A184255
C:\Windows\System32\DRIVERS\VClone.sys 6BEE3F8B3A08179BA475AA6043CAB30D
C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaagp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\viac7.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgrx.sys 21D83DD717E8D681364A5E44A5459717
C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\vsmraid.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vsscanner.sys EC53AE296AD313521B7C401EC156B6E9
C:\Windows\System32\DRIVERS\vwifibus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vwififlt.sys 7090D3436EEB4E7DA3373090A23448F7
C:\Windows\System32\DRIVERS\vwifimp.sys A3F04CBEA6C2A10E6CB01F8B47611882
C:\Windows\system32\DRIVERS\wacompen.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\wd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wdcsam_prewin8.sys 68F092B4491632458C6370C64DFC48DF
C:\Windows\System32\drivers\Wdf01000.sys 25944D2CC49E0A6C581D02A74B7D6645
C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\WinUsb.sys A67E5F9A400F3BD1BE3D80613B45F708
C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit
C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
C:\Windows\System32\drivers\WudfPf.sys 06E6F32C8D0A3F66D956F57B43A2E070
C:\Windows\System32\DRIVERS\WUDFRd.sys 867C301E8B790040AE9CF6486E8041DF
C:\Windows\System32\DRIVERS\yk62x86.sys B07C5B7EFDF936FF93D4F540938725BE
C:\Windows\System32\drivers\zam32.sys 06897B431C07886454E0681723DD53E6
C:\Windows\System32\drivers\zamguard32.sys 06897B431C07886454E0681723DD53E6

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Three Months Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-09-21 22:03 - 2017-09-21 22:04 - 000357546 _____ C:\Users\Patrick\Downloads\FRST.txt
2017-09-21 22:00 - 2017-09-21 22:01 - 001796096 _____ (Farbar) C:\Users\Patrick\Downloads\FRST.exe
2017-09-21 21:52 - 2017-09-21 21:52 - 000000000 ____D C:\Users\Patrick\AppData\Local\CEF
2017-09-21 21:36 - 2017-09-21 22:03 - 000000000 ____D C:\FRST
2017-09-21 21:36 - 2017-09-21 21:36 - 000001995 _____ C:\Users\Patrick\Documents\aswMBR.txt
2017-09-21 21:36 - 2017-09-21 21:36 - 000000512 _____ C:\Users\Patrick\Documents\MBR.dat
2017-09-21 21:25 - 2017-09-21 21:22 - 001796096 _____ (Farbar) C:\Users\Patrick\Desktop\FRST.exe
2017-09-21 21:25 - 2017-09-21 21:21 - 005200384 _____ (AVAST Software) C:\Users\Patrick\Desktop\aswmbr.exe
2017-09-21 19:57 - 2017-09-21 19:57 - 000337688 _____ C:\Windows\system32\FNTCACHE.DAT
2017-09-21 18:13 - 2017-09-21 18:13 - 000000000 ____D C:\Users\Patrick\AppData\Local\CrashDumps
2017-09-21 17:23 - 2017-09-21 21:26 - 000333086 _____ C:\Windows\ntbtlog.txt
2017-09-21 11:48 - 2017-09-21 11:48 - 000000000 ____D C:\ProgramData\SWCUTemp
2017-09-18 22:15 - 2017-09-21 12:38 - 000000000 ____D C:\Users\Patrick\AppData\Roaming\calibre
2017-09-17 18:02 - 2017-09-17 18:02 - 000000000 ___HD C:\Windows\PIF
2017-09-15 21:41 - 2017-09-15 21:41 - 000304816 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-09-13 19:05 - 2017-09-13 19:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2017-09-13 19:05 - 2017-09-13 19:05 - 000000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2017-09-13 19:05 - 2016-03-10 14:09 - 000053120 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2017-09-13 19:05 - 2016-03-10 14:08 - 000024448 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-09-13 08:34 - 2017-09-21 20:30 - 000000000 ____D C:\Users\Patrick\dwhelper
2017-09-12 13:31 - 2017-09-12 13:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freedome
2017-09-12 12:43 - 2017-09-12 12:43 - 000000000 ____D C:\VTRoot
2017-09-12 12:38 - 2017-09-18 18:29 - 000000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2017-09-12 12:38 - 2017-09-12 12:39 - 000000000 ____D C:\Program Files\FreeCodecPack
2017-09-12 12:06 - 2017-08-19 08:10 - 000180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2017-09-12 12:06 - 2017-08-16 08:10 - 000629760 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-09-12 12:06 - 2017-08-16 07:50 - 002403328 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-09-12 12:06 - 2017-08-15 17:25 - 000347336 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-09-12 12:06 - 2017-08-15 08:10 - 012880896 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-09-12 12:06 - 2017-08-15 08:10 - 001499648 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-09-12 12:06 - 2017-08-15 07:01 - 000416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-09-12 12:06 - 2017-08-15 07:01 - 000279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-09-12 12:06 - 2017-08-15 07:01 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-09-12 12:06 - 2017-08-15 06:58 - 013673984 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-09-12 12:06 - 2017-08-14 10:35 - 002150912 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
2017-09-12 12:06 - 2017-08-14 10:35 - 000303104 _____ (Microsoft Corporation) C:\Windows\system32\mmcbase.dll
2017-09-12 12:06 - 2017-08-14 10:35 - 000172544 _____ (Microsoft Corporation) C:\Windows\system32\cic.dll
2017-09-12 12:06 - 2017-08-14 10:35 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\mmcshext.dll
2017-09-12 12:06 - 2017-08-13 14:30 - 001401344 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe
2017-09-12 12:06 - 2017-08-13 09:54 - 020269056 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-09-12 12:06 - 2017-08-13 09:46 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-09-12 12:06 - 2017-08-13 09:45 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-09-12 12:06 - 2017-08-13 09:30 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-09-12 12:06 - 2017-08-13 09:29 - 000499200 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-09-12 12:06 - 2017-08-13 09:29 - 000341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-09-12 12:06 - 2017-08-13 09:29 - 000047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-09-12 12:06 - 2017-08-13 09:28 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-09-12 12:06 - 2017-08-13 09:24 - 002291200 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-09-12 12:06 - 2017-08-13 09:22 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-09-12 12:06 - 2017-08-13 09:21 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-09-12 12:06 - 2017-08-13 09:19 - 000476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-09-12 12:06 - 2017-08-13 09:18 - 000104960 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-09-12 12:06 - 2017-08-13 09:17 - 000663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-09-12 12:06 - 2017-08-13 09:17 - 000620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-09-12 12:06 - 2017-08-13 09:17 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-09-12 12:06 - 2017-08-13 09:10 - 000667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-09-12 12:06 - 2017-08-13 09:01 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-09-12 12:06 - 2017-08-13 09:01 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-09-12 12:06 - 2017-08-13 09:00 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-09-12 12:06 - 2017-08-13 08:57 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-09-12 12:06 - 2017-08-13 08:53 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-09-12 12:06 - 2017-08-13 08:48 - 004547072 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-09-12 12:06 - 2017-08-13 08:46 - 000230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-09-12 12:06 - 2017-08-13 08:44 - 000694784 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-09-12 12:06 - 2017-08-13 08:44 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-09-12 12:06 - 2017-08-13 08:43 - 002058752 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-09-12 12:06 - 2017-08-13 08:43 - 001155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-09-12 12:06 - 2017-08-13 08:17 - 002767872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-09-12 12:06 - 2017-08-13 08:14 - 000710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-09-12 12:06 - 2017-08-13 08:13 - 001314816 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-09-12 12:06 - 2017-08-10 23:24 - 004001000 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2017-09-12 12:06 - 2017-08-10 23:24 - 003945704 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-09-12 12:06 - 2017-08-10 23:24 - 000137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-09-12 12:06 - 2017-08-10 23:24 - 000067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-09-12 12:06 - 2017-08-10 23:21 - 001310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 001417728 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 001062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000872448 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000781824 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000554496 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000497664 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000377344 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000299008 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000294400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000271360 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000171008 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000019968 _____ (Microsoft Corporation) C:\Windows\system32\nsisvc.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\winnsi.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\nsi.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:09 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
2017-09-12 12:06 - 2017-08-10 23:03 - 000026624 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2017-09-12 12:06 - 2017-08-10 23:01 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2017-09-12 12:06 - 2017-08-10 23:00 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-09-12 12:06 - 2017-08-10 23:00 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-09-12 12:06 - 2017-08-10 23:00 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-09-12 12:06 - 2017-08-10 23:00 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-09-12 12:06 - 2017-08-10 23:00 - 000016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-09-12 12:06 - 2017-08-10 22:58 - 000271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-09-12 12:06 - 2017-08-10 22:58 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-09-12 12:06 - 2017-08-10 22:56 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-09-12 12:06 - 2017-08-10 22:56 - 000311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-09-12 12:06 - 2017-08-10 22:56 - 000226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-09-12 12:06 - 2017-08-10 22:56 - 000124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-09-12 12:06 - 2017-08-10 22:56 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-09-12 12:06 - 2017-08-10 22:56 - 000098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-09-12 12:06 - 2017-08-10 22:55 - 000188928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2017-09-12 12:06 - 2017-08-10 22:55 - 000069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-09-12 12:06 - 2017-08-10 22:55 - 000036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-09-12 12:06 - 2017-08-10 22:55 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-09-12 12:06 - 2017-08-10 22:55 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nsiproxy.sys
2017-09-12 12:06 - 2017-08-10 22:55 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-09-12 12:06 - 2017-08-10 22:55 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 22:55 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 22:55 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 22:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-09-11 16:00 - 2017-07-07 08:10 - 000973312 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
2017-09-05 23:07 - 2017-09-05 23:09 - 000000000 ____D C:\Program Files\trend micro
2017-09-05 23:06 - 2017-09-21 21:51 - 000007182 _____ C:\Windows\system32\Drivers\fvstore.dat
2017-09-04 18:26 - 2017-09-21 18:34 - 000000000 ____D C:\Users\Patrick\Documents\My Kindle Content
2017-09-03 11:36 - 2017-09-03 11:36 - 000000000 ____D C:\Program Files\PrivaZer
2017-08-27 20:34 - 2017-08-27 20:34 - 000000797 _____ C:\Users\Patrick\AppData\Roaming\Microsoft\Windows \Start Menu\Programs\Start Tor Browser.lnk
2017-08-27 20:34 - 2017-08-27 20:34 - 000000749 _____ C:\Users\Patrick\Desktop\Start Tor Browser.lnk
2017-08-27 20:33 - 2017-08-27 20:33 - 000000000 ____D C:\Users\Patrick\Desktop\Tor Browser
2017-08-27 12:34 - 2017-08-27 12:34 - 000012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe
2017-08-27 11:06 - 2017-09-03 13:20 - 000001935 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk
2017-08-27 11:06 - 2017-09-03 13:17 - 000000000 ____D C:\Program Files\Wireshark
2017-08-25 09:37 - 2017-09-09 23:30 - 000000000 ____D C:\Users\Patrick\AppData\Local\gtk-2.0
2017-08-21 18:39 - 2017-08-21 18:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiMalware
2017-08-20 12:43 - 2017-08-20 12:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wipe
2017-08-13 09:20 - 2017-09-04 18:20 - 000000000 ____D C:\PatchMyPCUpdates
2017-08-12 21:49 - 2017-07-21 07:26 - 000518144 _____ C:\Windows\system32\msjetoledb40.dll
2017-08-12 21:49 - 2017-07-21 07:26 - 000290816 _____ (Microsoft Corporation) C:\Windows\system32\msjtes40.dll
2017-08-12 21:49 - 2017-07-14 08:10 - 001549824 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-08-12 21:49 - 2017-07-14 08:10 - 001400320 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-08-12 21:49 - 2017-07-14 08:10 - 001363968 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2017-08-12 21:49 - 2017-07-08 08:19 - 000250600 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2017-08-12 21:49 - 2017-07-01 06:05 - 001311744 _____ (Microsoft Corporation) C:\Windows\system32\msjet40.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000866816 _____ (Microsoft Corporation) C:\Windows\system32\mswdat10.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000641536 _____ (Microsoft Corporation) C:\Windows\system32\mswstr10.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000616448 _____ (Microsoft Corporation) C:\Windows\system32\msrepl40.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000475648 _____ (Microsoft Corporation) C:\Windows\system32\msxbde40.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000375808 _____ (Microsoft Corporation) C:\Windows\system32\mspbde40.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000343552 _____ (Microsoft Corporation) C:\Windows\system32\msrd3x40.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000339968 _____ (Microsoft Corporation) C:\Windows\system32\msexcl40.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000310272 _____ (Microsoft Corporation) C:\Windows\system32\msrd2x40.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000240640 _____ (Microsoft Corporation) C:\Windows\system32\msltus40.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000144896 _____ (Microsoft Corporation) C:\Windows\system32\msjint40.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000083968 _____ (Microsoft Corporation) C:\Windows\system32\msjter40.dll
2017-08-12 21:49 - 2017-06-15 13:18 - 000514048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2017-08-12 21:49 - 2017-06-12 15:29 - 001227264 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2017-08-12 21:49 - 2017-06-12 15:29 - 000390144 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2017-08-12 21:49 - 2017-06-12 15:06 - 000303616 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2017-08-12 21:49 - 2017-06-09 08:17 - 001213672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-08-12 21:49 - 2017-05-29 21:39 - 001309928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-08-12 21:49 - 2017-05-29 21:39 - 000240872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2017-08-12 21:49 - 2017-05-29 21:39 - 000187624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2017-08-12 21:48 - 2017-07-29 07:50 - 000074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-08-12 21:48 - 2017-07-21 07:26 - 000409600 _____ (Microsoft Corporation) C:\Windows\system32\msexch40.dll
2017-08-12 21:48 - 2017-07-21 07:26 - 000282624 _____ (Microsoft Corporation) C:\Windows\system32\mstext40.dll
2017-08-12 21:48 - 2017-07-14 08:10 - 000666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-08-12 21:48 - 2017-07-14 08:10 - 000382976 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2017-08-12 21:48 - 2017-07-14 08:10 - 000337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-08-12 21:48 - 2017-07-14 08:10 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-08-12 21:48 - 2017-07-14 08:10 - 000104448 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-08-12 21:48 - 2017-07-14 08:10 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-08-12 21:48 - 2017-07-14 08:10 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-08-12 21:48 - 2017-07-14 08:00 - 000427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-08-12 21:48 - 2017-07-14 08:00 - 000164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-08-12 21:48 - 2017-07-14 07:59 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-08-12 21:48 - 2017-07-14 07:59 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-08-12 21:48 - 2017-07-14 07:50 - 000054272 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2017-08-12 21:48 - 2017-07-14 07:50 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2017-08-12 21:48 - 2017-07-07 08:15 - 000296680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys
2017-08-12 21:48 - 2017-07-07 08:11 - 000109568 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2017-08-12 21:48 - 2017-06-12 15:29 - 000444928 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2017-08-12 21:48 - 2017-06-12 15:28 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll
2017-08-12 21:48 - 2017-06-12 15:06 - 000157184 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
2017-08-12 21:48 - 2017-06-12 15:06 - 000103424 _____ (Microsoft Corporation) C:\Windows\system32\resmon.exe
2017-06-29 11:19 - 2017-05-20 21:06 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-06-29 11:19 - 2017-05-16 08:16 - 000730856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-06-29 11:19 - 2017-05-16 08:16 - 000218856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-06-29 11:19 - 2017-05-16 08:12 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2017-06-26 15:04 - 2017-06-30 13:46 - 001844440 ____H C:\Users\Patrick\AppData\Local\IconCache.db.backup
2017-06-24 14:53 - 2017-06-24 14:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.xlsx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.xlsm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.xlsb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.xls
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.xlk
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.x3f
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.wps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.wpd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.wb2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.txt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.srw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.srf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.sr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.rwl
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.rw2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.raw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.raf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.r3d
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.ptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.pst
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.psd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.pptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.pptm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.ppt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.pfx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.pem
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.pef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.pdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.pdd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.p7c
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.p7b
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.p12
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.orf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.odt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.ods
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.odp
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.odm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.odc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.odb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.nrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.nef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.mrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.mef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.mdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.mdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.kdc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.jpe
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.indd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.erf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.eps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.dxg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.dxf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.dwg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.docm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.dng
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.der
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.dcr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.dbf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.crw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.crt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.cr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.cer
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.cdr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.bay
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.bak
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.avi
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.arw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.ai
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.accdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Downloads\a_1d8ae7272be20abf7c04bf 4242610e6e.3fr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.xlsx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.xlsm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.xlsb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.xls
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.xlk
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.x3f
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.wps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.wpd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.wb2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.txt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.srw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.srf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.sr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.rwl
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.rw2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.raw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.raf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.r3d
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.ptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.pst
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.psd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.pptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.pptm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.ppt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.pfx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.pem
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.pef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.pdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.pdd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.p7c
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.p7b
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.p12
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.orf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.odt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.ods
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.odp
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.odm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.odc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.odb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.nrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.nef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.mrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.mef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.mdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.mdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.kdc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.jpe
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.indd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.erf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.eps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.dxg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.dxf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.dwg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.docm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.dng
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.der
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.dcr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.dbf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.crw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.crt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.cr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.cer
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.cdr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.bay
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.bak
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.avi
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.arw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.ai
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.accdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Documents\a_1d8ae7272be20abf7c04bf 4242610e6e.3fr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.xlsx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.xlsm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.xlsb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.xls
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.xlk
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.x3f
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.wps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.wpd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.wb2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.txt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.srw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.srf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.sr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.rwl
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.rw2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.raw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.raf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.r3d
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.ptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.pst
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.psd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.pptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.pptm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.ppt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.pfx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.pem
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.pef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.pdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.pdd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.p7c
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.p7b
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.p12
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.orf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.odt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.ods
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.odp
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.odm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.odc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.odb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.nrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.nef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.mrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.mef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.mdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.mdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.kdc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.jpe
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.indd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.erf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.eps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.dxg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.dxf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.dwg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.docm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.dng
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.der
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.dcr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.dbf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.crw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.crt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.cr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.cer
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.cdr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.bay
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.bak
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.avi
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.arw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.ai
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.accdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Public\Desktop\a_1d8ae7272be20abf7c04bf42 42610e6e.3fr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.xlsx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.xlsm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.xlsb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.xls
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.xlk
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.x3f
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.wps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.wpd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.wb2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.txt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.srw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.srf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.sr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.rwl
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.rw2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.raw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.raf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.r3d
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.ptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.pst
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.psd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.pptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.pptm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.ppt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.pfx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.pem
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.pef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.pdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.pdd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.p7c
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.p7b
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.p12
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.orf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.odt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.ods
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.odp
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.odm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.odc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.odb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.nrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.nef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.mrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.mef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.mdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.mdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.kdc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.jpe
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.indd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.erf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.eps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.dxg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.dxf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.dwg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.docm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.dng
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.der
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.dcr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.dbf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.crw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.crt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.cr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.cer
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.cdr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.bay
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.bak
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.avi
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.arw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.ai
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.accdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Downloads\a_1d8ae7272be20abf7c04b f4242610e6e.3fr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.xlsx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.xlsm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.xlsb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.xls
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.xlk
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.x3f
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.wps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.wpd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.wb2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.txt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.srw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.srf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.sr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.rwl
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.rw2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.raw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.raf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.r3d
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.ptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.pst
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.psd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.pptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.pptm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.ppt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.pfx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.pem
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.pef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.pdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.pdd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.p7c
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.p7b
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.p12
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.orf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.odt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.ods
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.odp
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.odm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.odc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.odb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.nrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.nef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.mrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.mef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.mdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.mdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.kdc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.jpe
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.indd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.erf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.eps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.dxg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.dxf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.dwg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.docm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.dng
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.der
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.dcr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.dbf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.crw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.crt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.cr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.cer
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.cdr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.bay
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.bak
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.avi
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.arw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.ai
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.accdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.3fr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.xlsx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.xlsm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.xlsb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.xls
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.xlk
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.x3f
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.wps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.wpd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.wb2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.txt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.srw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.srf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.sr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.rwl
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.rw2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.raw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.raf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.r3d
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.ptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.pst
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.psd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.pptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.pptm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.ppt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.pfx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.pem
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.pef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.pdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.pdd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.p7c
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.p7b
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.p12
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.orf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.odt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.ods
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.odp
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.odm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.odc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.odb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.nrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.nef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.mrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.mef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.mdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.mdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.kdc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.jpe
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.indd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.erf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.eps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.dxg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.dxf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.dwg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.docm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.dng
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.der
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.dcr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.dbf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.crw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.crt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.cr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.cer
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.cdr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.bay
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.bak
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.avi
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.arw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.ai
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.accdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Patrick\Desktop\a_1d8ae7272be20abf7c04bf4 242610e6e.3fr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.xlsx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.xlsm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.xlsb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.xls
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.xlk
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.x3f
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.wps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.wpd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.wb2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.txt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.srw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.srf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.sr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.rwl
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.rw2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.raw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.raf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.r3d
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.ptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.pst
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.psd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.pptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.pptm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.ppt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.pfx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.pem
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.pef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.pdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.pdd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.p7c
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.p7b
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.p12
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.orf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.odt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.ods
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.odp
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.odm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.odc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.odb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.nrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.nef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.mrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.mef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.mdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.mdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.kdc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.jpe
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.indd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.erf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.eps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.dxg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.dxf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.dwg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.docm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.dng
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.der
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.dcr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.dbf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.crw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.crt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.cr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.cer
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.cdr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.bay
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.bak
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.avi
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.arw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.ai
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.accdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default\Documents\a_1d8ae7272be20abf7c04b f4242610e6e.3fr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. xlsx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. xlsm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. xlsb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. xls
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. xlk
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. x3f
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. wps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. wpd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. wb2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. txt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. srw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. srf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. sr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. rwl
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. rw2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. raw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. raf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. r3d
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. ptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. pst
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. psd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. pptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. pptm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. ppt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. pfx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. pem
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. pef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. pdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. pdd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. p7c
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. p7b
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. p12
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. orf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. odt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. ods
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. odp
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. odm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. odc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. odb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. nrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. nef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. mrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. mef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. mdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. mdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. kdc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. jpe
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. indd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. erf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. eps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. dxg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. dxf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. dwg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. docm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. dng
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. der
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. dcr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. dbf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. crw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. crt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. cr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. cer
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. cdr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. bay
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. bak
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. avi
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. arw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. ai
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. accdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\Users\Default User\Documents\a_1d8ae7272be20abf7c04bf4242610e6e. 3fr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.xlsx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.xlsm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.xlsb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.xls
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.xlk
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.x3f
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.wps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.wpd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.wb2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.txt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.srw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.srf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.sr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.rwl
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.rw2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.raw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.raf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.r3d
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.ptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.pst
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.psd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.pptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.pptm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.ppt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.pfx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.pem
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.pef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.pdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.pdd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.p7c
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.p7b
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.p12
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.orf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.odt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.ods
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.odp
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.odm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.odc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.odb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.nrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.nef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.mrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.mef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.mdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.mdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.kdc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.jpe
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.indd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.erf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.eps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.dxg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.dxf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.dwg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.docm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.dng
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.der
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.dcr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.dbf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.crw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.crt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.cr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.cer
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.cdr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.bay
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.bak
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.avi
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.arw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.ai
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.accdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Documents\a_1d8ae7272be20abf7c04bf4 242610e6e.3fr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.xlsx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.xlsm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.xlsb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.xls
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.xlk
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.x3f
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.wps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.wpd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.wb2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.txt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.srw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.srf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.sr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.rwl
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.rw2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.raw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.raf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.r3d
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.ptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.pst
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.psd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.pptx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.pptm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.ppt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.pfx
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.pem
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.pef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.pdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.pdd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.p7c
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.p7b
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.p12
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.orf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.odt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.ods
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.odp
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.odm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.odc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.odb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.nrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.nef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.mrw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.mef
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.mdf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.mdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.kdc
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.jpe
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.indd
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.erf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.eps
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.dxg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.dxf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.dwg
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.docm
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.dng
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.der
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.dcr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.dbf
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.crw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.crt
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.cr2
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.cer
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.cdr
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.bay
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.bak
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.avi
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.arw
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.ai
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.accdb
2017-06-23 09:43 - 2017-06-23 09:43 - 000086686 ___SH C:\ProgramData\Desktop\a_1d8ae7272be20abf7c04bf424 2610e6e.3fr
2017-06-23 09:42 - 2017-06-23 09:42 - 000000082 _____ C:\Users\Public\start.txt
2017-06-23 09:42 - 2017-06-23 09:42 - 000000082 _____ C:\Users\Public\decrypting.txt

==================== Three Months Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-09-21 22:03 - 2016-06-08 07:29 - 000018983 _____ C:\Windows\ZAM_Guard.krnl.trace
2017-09-21 22:03 - 2015-11-16 08:56 - 000102757 _____ C:\Windows\ZAM.krnl.trace
2017-09-21 22:01 - 2016-09-10 13:09 - 000000000 ____D C:\ProgramData\VoodooShield
2017-09-21 22:01 - 2015-06-23 15:13 - 000000000 ____D C:\Windows\CryptoGuard
2017-09-21 21:57 - 2009-07-13 21:34 - 000015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-09-21 21:57 - 2009-07-13 21:34 - 000015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-09-21 21:56 - 2015-06-02 13:49 - 000921462 _____ C:\Windows\system32\PerfStringBackup.INI
2017-09-21 21:56 - 2009-07-13 19:37 - 000000000 ____D C:\Windows\inf
2017-09-21 21:51 - 2015-06-03 12:03 - 000000000 ____D C:\Users\Patrick\AppData\Roaming\WinPatrol
2017-09-21 21:49 - 2017-06-21 19:34 - 000170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-09-21 21:49 - 2015-06-03 12:04 - 000000000 ____D C:\ProgramData\MCShield
2017-09-21 21:47 - 2009-07-13 21:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-09-21 21:18 - 2015-06-03 12:24 - 000000000 ____D C:\Users\Patrick\AppData\Roaming\Mozilla
2017-09-21 20:45 - 2017-01-08 20:32 - 000000000 ____D C:\Program Files\Everything
2017-09-21 17:25 - 2016-02-14 22:30 - 000000000 ____D C:\Users\Patrick\Documents\My Games
2017-09-21 17:09 - 2015-09-18 11:33 - 000000000 ____D C:\Users\Patrick\AppData\Local\PrivaZer
2017-09-21 17:09 - 2015-06-04 10:44 - 000000000 ____D C:\Program Files\System Ninja
2017-09-21 17:04 - 2017-04-06 10:40 - 000000000 ____D C:\Users\Patrick\AppData\Local\Mozilla
2017-09-21 17:03 - 2015-06-04 10:45 - 000000000 ____D C:\Users\Patrick\AppData\Roaming\Wipe
2017-09-21 17:02 - 2017-01-08 21:38 - 000000000 ____D C:\ProgramData\TEMP
2017-09-21 17:01 - 2015-06-24 20:53 - 000000000 ____D C:\Program Files\PC Tools Registry Mechanic
2017-09-21 17:01 - 2015-06-09 10:59 - 000000000 ____D C:\Program Files\IrfanView
2017-09-21 12:44 - 2017-04-15 09:42 - 000000000 ____D C:\Users\Patrick\Documents\Calibre Library
2017-09-21 11:47 - 2015-06-23 15:12 - 000000000 ____D C:\ProgramData\HitmanPro.Alert
2017-09-20 23:10 - 2015-06-02 14:20 - 000000000 ____D C:\Users\Patrick\AppData\Roaming\vlc
2017-09-18 22:26 - 2016-08-19 13:12 - 000000000 ____D C:\Users\Patrick\Documents\Bethesda
2017-09-18 19:46 - 2015-06-07 16:55 - 000000000 ____D C:\Program Files\PeerBlock
2017-09-18 19:42 - 2016-10-10 21:59 - 000000000 ____D C:\Users\Patrick\AppData\Roaming\uTorrent
2017-09-18 19:33 - 2015-06-12 10:55 - 000000000 ____D C:\Windows\erdnt
2017-09-18 18:08 - 2009-07-13 19:04 - 000000215 _____ C:\Windows\system.ini
2017-09-18 14:42 - 2015-06-03 14:21 - 000001046 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2017-09-18 14:40 - 2015-06-03 14:21 - 000000000 ____D C:\Program Files\Glary Utilities 5
2017-09-15 21:41 - 2015-09-12 19:59 - 000774824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-09-15 21:41 - 2015-09-12 19:59 - 000499048 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-09-15 21:41 - 2015-09-12 19:59 - 000296824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2017-09-15 21:41 - 2015-09-12 19:59 - 000148800 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2017-09-15 21:41 - 2015-09-12 19:59 - 000124952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-09-15 21:41 - 2015-09-12 19:59 - 000099560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-09-15 21:41 - 2015-09-12 19:59 - 000070864 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-09-15 21:41 - 2015-09-12 19:59 - 000042856 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-09-15 21:41 - 2015-09-12 19:57 - 000000000 ____D C:\ProgramData\AVAST Software
2017-09-15 21:13 - 2015-06-02 14:19 - 000000000 ____D C:\Program Files\CCleaner
2017-09-14 06:10 - 2015-06-08 14:56 - 000000000 ____D C:\Users\Patrick\AppData\Roaming\Adobe
2017-09-14 06:10 - 2015-06-08 14:56 - 000000000 ____D C:\Users\Patrick\AppData\LocalLow\Adobe
2017-09-13 18:11 - 2015-06-23 09:07 - 000024688 _____ C:\Windows\system32\Drivers\TrueSight.sys
2017-09-13 10:05 - 2009-07-13 19:37 - 000000000 ____D C:\Windows\rescache
2017-09-13 08:34 - 2015-06-02 13:58 - 000000000 ____D C:\Users\Patrick
2017-09-09 17:17 - 2016-09-26 10:53 - 000000000 ____D C:\Users\Patrick\Documents\Kruptos2Professional
2017-09-08 08:17 - 2017-01-31 19:28 - 000276736 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswblogx.sys
2017-09-08 08:17 - 2017-01-31 19:28 - 000255624 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdriverx.sys
2017-09-08 08:17 - 2017-01-31 19:28 - 000157416 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidshx.sys
2017-09-08 08:17 - 2017-01-31 19:28 - 000050384 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbunivx.sys
2017-09-04 15:59 - 2015-06-11 19:41 - 000000000 ____D C:\EEK
2017-09-03 11:36 - 2015-09-20 09:33 - 000001839 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrivaZer.lnk
2017-08-31 17:06 - 2009-07-13 19:03 - 055050240 _____ C:\Windows\system32\config\software.rmbak
2017-08-31 17:06 - 2009-07-13 19:03 - 004980736 _____ C:\Windows\system32\config\default.rmbak
2017-08-31 14:58 - 2017-04-13 14:41 - 000000000 ____D C:\Users\Patrick\AppData\Roaming\Comodo
2017-08-31 13:58 - 2015-06-03 11:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
2017-08-31 13:57 - 2015-06-03 11:43 - 000000000 ____D C:\ProgramData\Comodo
2017-08-31 12:48 - 2016-02-07 16:45 - 000000000 ____D C:\Users\Patrick\Desktop\Games
2017-08-28 21:59 - 2016-12-28 00:20 - 000044008 _____ (COMODO) C:\Windows\system32\cmdcsr.dll
2017-08-28 21:59 - 2016-12-28 00:19 - 000731344 _____ (COMODO) C:\Windows\system32\guard32.dll
2017-08-28 21:55 - 2016-12-28 00:15 - 000363712 _____ (COMODO) C:\Windows\system32\cmdvrt32.dll
2017-08-28 14:38 - 2015-06-03 11:58 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-08-27 14:09 - 2017-06-18 12:09 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-08-27 14:09 - 2015-06-03 12:03 - 000000000 ____D C:\Program Files\WinRAR
2017-08-27 12:27 - 2016-10-06 10:32 - 000000000 ____D C:\Program Files\HitmanPro
2017-08-27 11:05 - 2017-05-20 21:17 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-08-27 11:03 - 2015-06-03 12:03 - 000000000 ____D C:\Users\Patrick\AppData\Roaming\Microsoft\Windows \Start Menu\Programs\WinRAR
2017-08-27 11:03 - 2015-06-03 12:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-08-27 11:02 - 2015-06-03 11:58 - 000001113 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-08-25 12:54 - 2015-06-03 11:59 - 000000000 ____D C:\ProgramData\Unchecky

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

ATTENTION: ==> Could not access BCD.

==================== BCD ================================
This program is blocked by group policy. For more information, contact your system administrator.

LastRegBack: 2017-09-11 19:31

==================== End of FRST.txt ============================

**PatL** · 09-22-2017, 05:43 AM

When I try and post the Addition it gives a 403 error pop up, what should I do?

**PatL** · 09-22-2017, 05:45 AM

sendspace link: https://www.sendspace.com/delete/q6o...564eba390d7052

**jmarket** · 09-22-2017, 08:12 AM

It uploaded correctly PCHF uses a new firewall so our server team is fixing any bugs that are found

Download the attached fixlist.txt file and save it to the Desktop. NOTE. It’s important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system. Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

**PatL** · 09-22-2017, 08:44 PM

When I try to post from my computers your site sends up an error 403 popup. If i can’t we ptogress…

**jmarket** · 09-22-2017, 11:14 PM

It should be fixed now

**PatL** · 09-23-2017, 02:36 AM

Here’s the fixlog https://www.sendspace.com/delete/j1m...0266bf36f441a7

**PatL** · 09-23-2017, 02:37 AM

Fresh FRST

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 20-09-2017
Ran by Patrick (administrator) on PATRICK-PC (22-09-2017 11:41:30)
Running from C:\Users\Patrick\Desktop
Loaded Profiles: Patrick (Available Profiles: Patrick)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(SurfRight B.V.) C:\Program Files\HitmanPro.Alert\hmpalert.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SurfRight B.V.) C:\Program Files\HitmanPro.Alert\hmpalert.exe
(Foolish IT LLC) C:\Program Files\Foolish IT\CryptoPrevent\CryptoPreventMonSvc.exe
(F-Secure Corporation) C:\Program Files\F-Secure\Freedome\Freedome\1.1\FreedomeService.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(COMODO) C:\Program Files\COMODO\Internet Security Essentials\isesrv.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(RaMMicHaeL) C:\Program Files\Unchecky\bin\unchecky_svc.exe
(RaMMicHaeL) C:\Program Files\Unchecky\bin\unchecky_bg.exe
(Copyright 2017.) C:\Program Files\Zemana AntiMalware\ZAM.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Copyright 2017.) C:\Program Files\Zemana AntiMalware\ZAM.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(VoodooSoft, LLC ) C:\Program Files\VoodooShield\VoodooShield.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Ruiware) C:\Program Files\Ruiware\WinPatrol\WinPatrol.exe
(MyCity) C:\Program Files\MCShield\MCShieldRTM.exe
(The OpenVPN Project) C:\Program Files\F-Secure\Freedome\Freedome\1.1\openvpn.exe
(Foolish IT LLC) C:\Program Files\Foolish IT\CryptoPrevent\CryptoPreventNotification.exe
(F-Secure Corporation) C:\Program Files\F-Secure\Freedome\Freedome\1.1\Freedome.exe
(VoodooSoft, LLC ) C:\Program Files\VoodooShield\VoodooShieldService.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [246632 2017-09-15] (AVAST Software)
HKLM...\Run: [ZAM] => C:\Program Files\Zemana AntiMalware\ZAM.exe [15775888 2017-08-09] (Copyright 2017.)
HKLM...\Run: [VoodooShield] => C:\Program Files\VoodooShield\VoodooShield.exe [2443600 2017-05-01] (VoodooSoft, LLC )
HKLM...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1390784 2017-08-28] (COMODO)
HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\Run: [WinPatrol] => C:\Program Files\Ruiware\WinPatrol\winpatrol.exe [1231240 2017-01-27] (Ruiware)
HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\Run: [MCShield Monitor] => C:\Program Files\MCShield\mcshieldrtm.exe [650816 2015-06-03] (MyCity)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CryptoPrevent QuickAccess.lnk [2017-09-07]
ShortcutTarget: CryptoPrevent QuickAccess.lnk → C:\Program Files\Foolish IT\CryptoPrevent\CryptoPreventNotification.exe (Foolish IT LLC)
BootExecute: autocheck autochk *

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 198.18.8.209
Tcpip..\Interfaces{084AFF87-4C03-499A-AB4A-DA3055C45748}: [NameServer] 0.0.0.0
Tcpip..\Interfaces{084AFF87-4C03-499A-AB4A-DA3055C45748}: [DhcpNameServer] 75.75.75.75 75.75.76.76
Tcpip..\Interfaces{48AAE418-7A06-4B01-B67C-69F8C3DD738A}: [NameServer] 0.0.0.0
Tcpip..\Interfaces{e29ac6c2-7037-11de-816d-806e6f6e6963}: [NameServer] 0.0.0.0
Tcpip..\Interfaces{F8D1935D-8F20-43E6-943E-B57692889A9C}: [NameServer] 0.0.0.0
Tcpip..\Interfaces{FE7E939C-A2F8-4BBE-A42C-38E173A25D0F}: [DhcpNameServer] 198.18.8.209
[HEADING=1]Internet Explorer:[/HEADING]
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2985130882-1756615807-8858886-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\S-1-5-21-2985130882-1756615807-8858886-1000 → {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2001-06-20] (Microsoft Corporation)
[HEADING=1]FireFox:[/HEADING]
FF ProfilePath: C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\P rofiles\v7d7tla4.default-1483372895367 [2017-09-22]
FF NewTab: Mozilla\Firefox\Profiles\v7d7tla4.default-1483372895367 → about:newtab
FF Homepage: Mozilla\Firefox\Profiles\v7d7tla4.default-1483372895367 → hxxps://duckduckgo.com/
FF Extension: (Adguard AdBlocker) - C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\P rofiles\v7d7tla4.default-1483372895367\Extensions\adguardadblocker@adguard.com.xpi [2017-08-12]
FF Extension: (HTTPS Everywhere) - C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\P rofiles\v7d7tla4.default-1483372895367\Extensions\https-everywhere@eff.org.xpi [2017-09-13]
FF Extension: (Self-Destructing Cookies) - C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\P rofiles\v7d7tla4.default-1483372895367\Extensions\jid0-9XfBwUWnvPx4wWsfBWMCm4Jj69E@jetpack.xpi [2017-03-25]
FF Extension: (uBlock Origin) - C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\P rofiles\v7d7tla4.default-1483372895367\Extensions\uBlock0@raymondhill.net.xpi [2017-09-21]
FF Extension: (Video DownloadHelper) - C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\P rofiles\v7d7tla4.default-1483372895367\Extensions{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-05-09]
FF Plugin: @adobe.com/FlashPlayer → C:\Windows\system32\Macromed\Flash\NPSWF32_26_0_0_ 151.dll [2017-08-13] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 → c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.4 → C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.5.1 → C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 → C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: Adobe Reader → C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-07-31] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2017-07-31] (Adobe Systems Inc.)

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5831440 2017-09-15] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [281416 2017-09-15] (AVAST Software)
S4 Bonjour Service; C:\Program Files\Blizzard\Bonjour Service\mDNSResponder.exe [390504 2017-05-04] (Apple Inc.)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [8150344 2017-08-28] (COMODO)
R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2080448 2017-08-28] (COMODO)
S3 CryptoPreventEmail; C:\Program Files\Foolish IT\CryptoPrevent\CryptoPreventMonSvc.exe [642712 2017-06-18] (Foolish IT LLC)
R3 CryptoPreventFolderWatch; C:\Program Files\Foolish IT\CryptoPrevent\CryptoPreventMonSvc.exe [642712 2017-06-18] (Foolish IT LLC)
R2 CryptoPreventMonSvc; C:\Program Files\Foolish IT\CryptoPrevent\CryptoPreventMonSvc.exe [642712 2017-06-18] (Foolish IT LLC)
S4 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1125568 2016-04-07] (Disc Soft Ltd)
R2 Freedome Service; C:\Program Files\F-Secure\Freedome\Freedome\1.1\FreedomeService.exe [592352 2017-09-12] (F-Secure Corporation)
R2 hmpalertsvc; C:\Program Files\HitmanPro.Alert\hmpalert.exe [4853384 2017-06-27] (SurfRight B.V.)
R2 isesrv; C:\Program Files\COMODO\Internet Security Essentials\isesrv.exe [133840 2017-08-07] (COMODO)
S4 K2Service.exe; C:\Program Files\Kruptos 2 Software\Kruptos 2 Professional\K2Service.exe [103432 2016-09-26] ()
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 Unchecky; C:\Program Files\Unchecky\bin\unchecky_svc.exe [302872 2017-08-12] (RaMMicHaeL)
R2 VoodooShieldService; C:\Program Files\VoodooShield\VoodooShieldService.exe [129360 2017-05-01] (VoodooSoft, LLC )
S4 WDDriveService; C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe [315768 2016-08-05] (Western Digital Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2015-06-03] (Microsoft Corporation)
R2 ZAMSvc; C:\Program Files\Zemana AntiMalware\ZAM.exe [15775888 2017-08-09] (Copyright 2017.)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdriverx.sys [255624 2017-09-08] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidshx.sys [157416 2017-09-08] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswblogx.sys [276736 2017-09-08] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbunivx.sys [50384 2017-09-08] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [42856 2017-09-15] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [124952 2017-09-15] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [99560 2017-09-15] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [70864 2017-09-15] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [774824 2017-09-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [499048 2017-09-15] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [148800 2017-09-15] (AVAST Software)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [27504 2017-08-07] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [658704 2017-08-07] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [53344 2017-08-07] (COMODO)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [107648 2016-08-11] (Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [26168 2016-04-05] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [40504 2016-04-05] (Disc Soft Ltd)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [30616 2014-12-20] (Elaborate Bytes AG)
R1 epp; C:\EEK\bin32\epp.sys [105248 2017-08-27] (Emsisoft Ltd)
R3 fsfreedometap; C:\Windows\System32\DRIVERS\fsfreedometap.sys [30760 2017-03-30] (The OpenVPN Project)
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [17472 2015-06-03] (Glarysoft Ltd)
R1 hmpalert; C:\Windows\system32\drivers\hmpalert.sys [199016 2017-06-27] (SurfRight B.V.)
R3 hmpnet; C:\Windows\system32\drivers\hmpnet.sys [83136 2017-06-27] (SurfRight B.V.)
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [106864 2017-08-07] (COMODO)
R1 isedrv; C:\Windows\system32\drivers\isedrv.sys [40952 2017-08-07] (COMODO)
R1 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [126336 2016-03-10] (Malwarebytes)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [24448 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2017-09-22] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [53120 2016-03-10] (Malwarebytes Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-02-28] (Riverbed Technology, Inc.)
S3 qcusbser; C:\Windows\System32\DRIVERS\qcusbser.sys [232160 2015-09-02] (QUALCOMM Incorporated)
R2 secdrv; C:\Windows\system32\Drivers\secdrv.sys [11973 2015-10-20] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed]
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [23040 2016-09-02] (The OpenVPN Project)
S1 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [103544 2016-06-05] (Oracle Corporation)
R3 VSScanner; C:\Windows\System32\DRIVERS\vsscanner.sys [19016 2016-08-19] (VoodooSoft, LLC)
S3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam_prewin8.sys [20256 2017-02-12] (Western Digital Technologies)
R1 ZAM; C:\Windows\System32\drivers\zam32.sys [181496 2016-10-02] (Zemana Ltd.)
R1 ZAM_Guard; C:\Windows\System32\drivers\zamguard32.sys [181496 2016-10-02] (Zemana Ltd.)
S3 aswVmm; ??\C:\Users\Patrick\AppData\Local\Temp\aswVmm.sys

========================== Drivers MD5 =======================

C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit
C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit
C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adp94xx.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adpahci.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adpu320.sys ==> MD5 is legit
C:\Windows\system32\drivers\afd.sys F582FC7976F1248AC5FBD6875C626B41
C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\djsvs.sys ==> MD5 is legit
C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdagp.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\amdk8.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\amdppm.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdsata.sys D320BF87125326F996D4904FE24300FC
C:\Windows\system32\DRIVERS\amdsbs.sys ==> MD5 is legit
C:\Windows\System32\drivers\amdxata.sys 46387FB17B086D16DEA267D5BE23A2F2
C:\Windows\system32\drivers\appid.sys A029C966211BC86578D6845B07D73CA4
C:\Windows\system32\DRIVERS\arc.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\arcsas.sys ==> MD5 is legit
C:\Windows\system32\drivers\aswbidsdriverx.sys FFF84DF1EB01E41C7C8831CBC2906F93
C:\Windows\system32\drivers\aswbidshx.sys E542F6D1AC7FA739D0A7237B6AB00F08
C:\Windows\system32\drivers\aswblogx.sys 12B413DB615BADFEE1B44E4378D2E527
C:\Windows\system32\drivers\aswbunivx.sys B82EA2BA3C1F77A3D291A02C8742EA1C
C:\Windows\system32\drivers\aswHwid.sys 073CF3FE2A6DEEC9C24CE1E6F7F771FF
C:\Windows\system32\drivers\aswMonFlt.sys AA27B32BE817A051B28DD8A1DE909242
C:\Windows\system32\drivers\aswRdr2.sys 45ADE8705E7FD079B60B24F1C842C129
C:\Windows\system32\drivers\aswRvrt.sys 148F27AB46804253E97539A41C312D02
C:\Windows\system32\drivers\aswSnx.sys A53E39135B144DE7949C9A87DEEEF269
C:\Windows\system32\drivers\aswSP.sys 9146D4CAE37EB8B1DFCC32937A96ECC8
C:\Windows\system32\drivers\aswStm.sys 72778CC6804BF465FE052E7CF84A88C9
C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit
C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\bxvbdx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\b57nd60x.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bcmwl6.sys EB7C2DADF52F50F69F198C14C3556DC1
C:\Windows\system32\Drivers\Beep.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bowser.sys 28AF7D4427868B7CE4C00CAB1864C7F6
C:\Windows\system32\DRIVERS\BrFiltLo.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\BrFiltUp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bridge.sys 77361D72A04F18809D0EFB6CCEB74D4B
C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\bthmodem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\circlass.sys ==> MD5 is legit
C:\Windows\System32\CLFS.sys 000B58009E5D0962C0A71D6477029A3F
C:\Windows\System32\DRIVERS\CmBatt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cmderd.sys DC8CB9C4EBE80068C787CB4BAFF90A03
C:\Windows\System32\DRIVERS\cmdguard.sys EFA20A96C3089ACF548282E275A18038
C:\Windows\System32\DRIVERS\cmdhlp.sys D36B5C631A4B095AD55B810A77B556B5
C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit
C:\Windows\System32\Drivers\cng.sys 7F7D4B16389CEF932950F6B2604D2601
C:\Windows\System32\DRIVERS\compbatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\CompositeBus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\crcdisk.sys ==> MD5 is legit
C:\Windows\system32\Drivers\CtAudDrv.sys 0F538DF1673E5216F3BAACB6911D9D0F
C:\Windows\System32\DRIVERS\CtClsFlt.sys 9A6CA307151505730DBFC91D97F01C7E
C:\Windows\System32\Drivers\dfsc.sys EA9DBD76CE9254C77BAAB4339DD4C4FB
C:\Windows\System32\DRIVERS\ssudbus.sys B8AF290680D6995D98801F70E1BAB56D
C:\Windows\System32\drivers\discache.sys ==> MD5 is legit
C:\Windows\System32\drivers\disk.sys B7B470F163002A0D0E381EE45834BF6B
C:\Windows\system32\drivers\drmkaud.sys A3F684B866A7D89AE396276CE7AFD416
C:\Windows\System32\DRIVERS\dtlitescsibus.sys 8A32FF671D452D36CC7421171B78F939
C:\Windows\System32\DRIVERS\dtliteusbbus.sys 0098B71A5D28FEAF321B4AC4549765D9
C:\Windows\System32\drivers\dxgkrnl.sys 897AE9430D037B056CF76A49CF588542
C:\Windows\system32\DRIVERS\evbdx.sys ==> MD5 is legit
C:\Windows\System32\Drivers\ElbyCDIO.sys 72753D5CC94A90F5CFC6C00ECC47163F
C:\Windows\system32\DRIVERS\elxstor.sys ==> MD5 is legit
C:\EEK\bin32\epp.sys 1A0098A9DCA241037034FD95E9A4A66B
C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit
C:\Windows\system32\Drivers\exfat.sys 53E8732CC70CC0991839DF9FC8996E4A
C:\Windows\system32\Drivers\fastfat.sys 24F422E5D7517FEBDA2324116F1A7BE6
C:\Windows\system32\DRIVERS\fdc.sys ==> MD5 is legit
C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit
C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\flpydisk.sys ==> MD5 is legitB
C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\fsfreedometap.sys 833063742BFFD1158DFB4D2298074C12
C:\Windows\system32\Drivers\Fs_Rec.sys 7DAE5EBCC80E45D3253F4923DC424D05
C:\Windows\System32\DRIVERS\fvevol.sys E306A24D9694C724FA2491278BF50FDB
C:\Windows\system32\DRIVERS\gagp30kx.sys ==> MD5 is legit
C:\Windows\System32\drivers\GUBootStartup.sys 05C11D2DA6B396F6AD8C590D32CF81D7
C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit
C:\Windows\system32\drivers\HdAudio.sys A5EF29D5315111C80A5C1ABAD14C8972
C:\Windows\system32\drivers\HDAudBus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\HidBatt.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\hidbth.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\hidir.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\hidusb.sys ==> MD5 is legit
C:\Windows\system32\drivers\hmpalert.sys 5750283C9E32D749553EBF835F53640C
C:\Windows\system32\drivers\hmpnet.sys B9D28C4715A453EF47A4ACFD4E4BA9DC
C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit
C:\Windows\System32\drivers\HTTP.sys 2F50E2780F16E00369F1311B086C3E42
C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit
C:\Windows\system32\drivers\i8042prt.sys ==> MD5 is legit
C:\Windows\system32\drivers\iaStorV.sys 5CD5F9A5444E6CDCB0AC89BD62D8B76E
C:\Windows\System32\DRIVERS\igdkmd32.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\iirsp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\inspect.sys 4E86C629E7802269A1BAA4C6A79DB5F0
C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\intelppm.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit
C:\Windows\system32\drivers\msiscsi.sys EB34CE31FABD4DC4343FD2AD16D2CAF9
C:\Windows\system32\drivers\isedrv.sys CEE8B7C169F2B7BAE212E9A1FCA081B3
C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\kbdhid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\ksecdd.sys 11A229C8E701E5C6F1C580FECAC8CB76
C:\Windows\System32\Drivers\ksecpkg.sys C717F3B5AD3531DE1FF38C3B097D495A
C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_fc.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_sas.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_sas2.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_scsi.sys ==> MD5 is legit
C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mbamchameleon.sys 22649DC583AE1F124C12FB1D39AE8B0B
C:\Windows\system32\drivers\mbam.sys A1D52DB330E18B5A7A718D31D950CA87
C:\Windows\system32\drivers\MBAMSwissArmy.sys 5023F594D5448E16F920157174C61358
C:\Windows\system32\drivers\mwac.sys 66DDF98174707CBADBCA6BBABDA1231C
C:\Windows\system32\DRIVERS\megasas.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\MegaSR.sys ==> MD5 is legit
C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
C:\Windows\System32\drivers\mountmgr.sys 9664F55623B43FD85D5642A202976AEE
C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mrxdav.sys 06AC0310138E4B2C35AF7344D18BC686
C:\Windows\System32\DRIVERS\mrxsmb.sys 0D045D242E8E1095EDBF0832F1E2B0F4
C:\Windows\System32\DRIVERS\mrxsmb10.sys 94F798F57538CAE653A6CE7B70D28639
C:\Windows\System32\DRIVERS\mrxsmb20.sys A25E0AE2EFA8CEA826A25C1A8A71ECE5
C:\Windows\System32\drivers\msahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit
C:\Windows\system32\Drivers\Msfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
C:\Windows\system32\Drivers\MsRPC.sys ==> MD5 is legit
C:\Windows\system32\drivers\mssmbios.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\MTConfig.sys ==> MD5 is legit
C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
C:\Windows\System32\drivers\ndis.sys 9804FB2E46077F2977552347DFCA7E05
C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
C:\Windows\system32\Drivers\NDProxy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbt.sys 2E226E666C6E11DC8C850071A90BE2DC
C:\Windows\system32\DRIVERS\nfrd960.sys ==> MD5 is legit
C:\Windows\System32\drivers\npf.sys 25401B0C9576C8456B3E0BBD74FF0771
C:\Windows\system32\Drivers\Npfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys C68AA651F93450ECA51A60D45A8E266C
C:\Windows\system32\Drivers\Ntfs.sys 28B64D3792D4F692E45ECB0C3F98C19B
C:\Windows\system32\Drivers\Null.sys ==> MD5 is legit
C:\Windows\system32\drivers\nvraid.sys B3E25EE28883877076E0E1FF877D02E0
C:\Windows\system32\drivers\nvstor.sys 4380E59A170D88C4F1022EFF6719A8A4
C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\parport.sys ==> MD5 is legit
C:\Windows\System32\drivers\partmgr.sys 3F34A1B4C5F6475F320C275E63AFCE9B
C:\Windows\system32\DRIVERS\parvdm.sys ==> MD5 is legit
C:\Windows\System32\drivers\pci.sys ==> MD5 is legit
C:\Windows\system32\drivers\pciide.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\pcmcia.sys ==> MD5 is legit
C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
C:\Windows\System32\drivers\peauth.sys 0C941A3F148B4228867908F98F394461
C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\processr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\qcusbser.sys C087900935B6472233EECE8A86AE9C77
C:\Windows\system32\DRIVERS\ql2300.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\ql40xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\rdpbus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpvideominiport.sys 65375DF758CA1872AB7EBBBA457FD5E6
C:\Windows\system32\Drivers\RDPWD.sys CD9214A6AE17D188D17C3CF8CB9CC693
C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
C:\Windows\system32\Drivers\secdrv.sys 72DFFA33F8ED1C847075EEE2C1E790EE
C:\Windows\system32\DRIVERS\serenum.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\serial.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sermouse.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sfloppy.sys ==> MD5 is legit
C:\Windows\system32\drivers\sisagp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\SiSRaid2.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sisraid4.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
C:\Windows\system32\Drivers\spldr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\srv.sys 7621B3601A2869DFB136F1CC4E0B03DB
C:\Windows\System32\DRIVERS\srv2.sys 7E62B0B91BE74F5A7A93BC2C07769AFB
C:\Windows\System32\DRIVERS\srvnet.sys C0CD2A68ADB4811802A2D19803E5540F
C:\Windows\System32\DRIVERS\ssudmdm.sys 1F568F98A6BBBB174965A182D17AA75D
C:\Windows\system32\DRIVERS\stexstor.sys ==> MD5 is legit
C:\Windows\system32\drivers\swenum.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\tap0901.sys F49967C396969B71C3A72537DB03A68B
C:\Windows\System32\drivers\tcpip.sys C25848DB4A86839A7EDD1077F62AD980
C:\Windows\System32\DRIVERS\tcpip.sys C25848DB4A86839A7EDD1077F62AD980
C:\Windows\System32\drivers\tcpipreg.sys A4BF8BE9D1F7D563C7868AC7B2561545
C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
C:\Windows\System32\drivers\tdtcp.sys 2C2C5AFE7EE4F620D69C23C0617651A8
C:\Windows\System32\DRIVERS\tdx.sys 8F143F86FDD8CF4F7BD25973C5983F9D
C:\Windows\system32\drivers\termdd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\tssecsrv.sys B89F89A2308E9569A1022A50F78C5506
C:\Windows\System32\drivers\tsusbflt.sys C6A5FBD4977305E1FA23E02C042DB463
C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\uagp35.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
C:\Windows\system32\drivers\umbus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\umpass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbccgp.sys 325A69967CC7B4BFB170F5636143A94A
C:\Windows\system32\drivers\usbcir.sys 2352AB5F9F8F097BF9D41D5A4718A041
C:\Windows\system32\drivers\usbehci.sys 5D57798CAE5A0DD0B8F61C52B8E7C3D1
C:\Windows\system32\drivers\usbhub.sys 3835ECC1E928042F92D7AA1963D40523
C:\Windows\system32\drivers\usbohci.sys 81E1E90305A4C7A13BADC5DFA22ABA37
C:\Windows\system32\DRIVERS\usbprint.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\USBSTOR.SYS 144DA53294922A84FFAA3D90B1453745
C:\Windows\system32\drivers\usbuhci.sys B4A1789BE90403D9549EF9DBAD37A429
C:\Windows\System32\Drivers\usbvideo.sys DE014425522610BEDCA3821BB8C0F1D5
C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys 3AA7D74157C922E0C794C2F44F3D5F21
C:\Windows\System32\Drivers\VBoxUSB.sys FE10BFADA31398EA4E4F9BE77A184255
C:\Windows\System32\DRIVERS\VClone.sys 6BEE3F8B3A08179BA475AA6043CAB30D
C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaagp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\viac7.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgrx.sys 21D83DD717E8D681364A5E44A5459717
C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\vsmraid.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vsscanner.sys EC53AE296AD313521B7C401EC156B6E9
C:\Windows\System32\DRIVERS\vwifibus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vwififlt.sys 7090D3436EEB4E7DA3373090A23448F7
C:\Windows\System32\DRIVERS\vwifimp.sys A3F04CBEA6C2A10E6CB01F8B47611882
C:\Windows\system32\DRIVERS\wacompen.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\wd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wdcsam_prewin8.sys 68F092B4491632458C6370C64DFC48DF
C:\Windows\System32\drivers\Wdf01000.sys 25944D2CC49E0A6C581D02A74B7D6645
C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\WinUsb.sys A67E5F9A400F3BD1BE3D80613B45F708
C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit
C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
C:\Windows\System32\drivers\WudfPf.sys 06E6F32C8D0A3F66D956F57B43A2E070
C:\Windows\System32\DRIVERS\WUDFRd.sys 867C301E8B790040AE9CF6486E8041DF
C:\Windows\System32\DRIVERS\yk62x86.sys B07C5B7EFDF936FF93D4F540938725BE
C:\Windows\System32\drivers\zam32.sys 06897B431C07886454E0681723DD53E6
C:\Windows\System32\drivers\zamguard32.sys 06897B431C07886454E0681723DD53E6

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Three Months Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-09-22 11:06 - 2017-09-22 11:41 - 000000608 _____ C:\Users\Patrick\Desktop\Fixlog.txt
2017-09-22 11:05 - 2017-09-22 11:05 - 000004587 _____ C:\Users\Patrick\Desktop\PFL.txt
2017-09-22 10:56 - 2017-09-22 11:28 - 000058134 _____ C:\Users\Patrick\Desktop\Shortcut.txt
2017-09-22 10:52 - 2017-09-22 11:29 - 000026445 _____ C:\Users\Patrick\Desktop\Addition.txt
2017-09-22 10:50 - 2017-09-22 11:41 - 000032610 _____ C:\Users\Patrick\Desktop\FRST.txt
2017-09-22 10:19 - 2017-09-22 10:19 - 006280869 _____ C:\Users\Patrick\Documents\9-22-17.zip
2017-09-22 10:18 - 2017-09-22 10:18 - 001796096 _____ (Farbar) C:\Users\Patrick\Desktop\FRST.exe
2017-09-22 10:17 - 2017-09-22 17:10 - 011804816 _____ C:\Users\Patrick\Downloads\Terry Brooks - [Dark Legacy of Shannara 01-3] - The Dark Legacy of Shannara Trilogy Bundle.epub
2017-09-22 10:11 - 2017-09-22 10:13 - 000000000 ____D C:\Users\Patrick\Documents\AKJ-SFS164
2017-09-22 09:31 - 2017-09-22 09:31 - 000000000 ____D C:\Users\Patrick\AppData\Local\Macromedia
2017-09-22 09:10 - 2017-09-22 09:10 - 000000000 ____D C:\ProgramData\SWCUTemp
2017-09-21 23:26 - 2017-09-21 23:27 - 011764816 _____ C:\Users\Patrick\Downloads\TBRKSdrklgcyshnnrbuncle .rar
2017-09-21 23:18 - 2017-09-21 23:23 - 000579168 _____ C:\TDSSKiller.3.1.0.15_21.09.2017_23.18.49_log.txt
2017-09-21 23:12 - 2017-09-21 23:15 - 000208224 _____ C:\TDSSKiller.3.1.0.15_21.09.2017_23.12.46_log.txt
2017-09-21 23:11 - 2017-09-21 23:11 - 004922400 _____ (AO Kaspersky Lab) C:\Users\Patrick\Downloads\tdsskiller.exe
2017-09-21 21:52 - 2017-09-21 21:52 - 000000000 ____D C:\Users\Patrick\AppData\Local\CEF
2017-09-21 21:36 - 2017-09-22 11:41 - 000000000 ____D C:\FRST
2017-09-21 18:13 - 2017-09-22 10:46 - 000000000 ____D C:\Users\Patrick\AppData\Local\CrashDumps
2017-09-18 22:15 - 2017-09-21 12:38 - 000000000 ____D C:\Users\Patrick\AppData\Roaming\calibre
2017-09-17 18:02 - 2017-09-17 18:02 - 000000000 ___HD C:\Windows\PIF
2017-09-15 21:41 - 2017-09-15 21:41 - 000304816 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-09-13 19:05 - 2017-09-13 19:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2017-09-13 19:05 - 2017-09-13 19:05 - 000000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2017-09-13 19:05 - 2016-03-10 14:09 - 000053120 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2017-09-13 19:05 - 2016-03-10 14:08 - 000024448 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-09-13 08:34 - 2017-09-22 10:10 - 000000000 ____D C:\Users\Patrick\dwhelper
2017-09-12 13:31 - 2017-09-12 13:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freedome
2017-09-12 12:43 - 2017-09-12 12:43 - 000000000 ____D C:\VTRoot
2017-09-12 12:38 - 2017-09-18 18:29 - 000000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2017-09-12 12:38 - 2017-09-12 12:39 - 000000000 ____D C:\Program Files\FreeCodecPack
2017-09-12 12:06 - 2017-08-19 08:10 - 000180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2017-09-12 12:06 - 2017-08-16 08:10 - 000629760 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-09-12 12:06 - 2017-08-16 07:50 - 002403328 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-09-12 12:06 - 2017-08-15 17:25 - 000347336 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-09-12 12:06 - 2017-08-15 08:10 - 012880896 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-09-12 12:06 - 2017-08-15 08:10 - 001499648 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-09-12 12:06 - 2017-08-15 07:01 - 000416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-09-12 12:06 - 2017-08-15 07:01 - 000279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-09-12 12:06 - 2017-08-15 07:01 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-09-12 12:06 - 2017-08-15 06:58 - 013673984 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-09-12 12:06 - 2017-08-14 10:35 - 002150912 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
2017-09-12 12:06 - 2017-08-14 10:35 - 000303104 _____ (Microsoft Corporation) C:\Windows\system32\mmcbase.dll
2017-09-12 12:06 - 2017-08-14 10:35 - 000172544 _____ (Microsoft Corporation) C:\Windows\system32\cic.dll
2017-09-12 12:06 - 2017-08-14 10:35 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\mmcshext.dll
2017-09-12 12:06 - 2017-08-13 14:30 - 001401344 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe
2017-09-12 12:06 - 2017-08-13 09:54 - 020269056 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-09-12 12:06 - 2017-08-13 09:46 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-09-12 12:06 - 2017-08-13 09:45 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-09-12 12:06 - 2017-08-13 09:30 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-09-12 12:06 - 2017-08-13 09:29 - 000499200 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-09-12 12:06 - 2017-08-13 09:29 - 000341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-09-12 12:06 - 2017-08-13 09:29 - 000047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-09-12 12:06 - 2017-08-13 09:28 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-09-12 12:06 - 2017-08-13 09:24 - 002291200 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-09-12 12:06 - 2017-08-13 09:22 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-09-12 12:06 - 2017-08-13 09:21 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-09-12 12:06 - 2017-08-13 09:19 - 000476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-09-12 12:06 - 2017-08-13 09:18 - 000104960 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-09-12 12:06 - 2017-08-13 09:17 - 000663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-09-12 12:06 - 2017-08-13 09:17 - 000620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-09-12 12:06 - 2017-08-13 09:17 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-09-12 12:06 - 2017-08-13 09:10 - 000667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-09-12 12:06 - 2017-08-13 09:01 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-09-12 12:06 - 2017-08-13 09:01 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-09-12 12:06 - 2017-08-13 09:00 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-09-12 12:06 - 2017-08-13 08:57 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-09-12 12:06 - 2017-08-13 08:53 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-09-12 12:06 - 2017-08-13 08:48 - 004547072 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-09-12 12:06 - 2017-08-13 08:46 - 000230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-09-12 12:06 - 2017-08-13 08:44 - 000694784 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-09-12 12:06 - 2017-08-13 08:44 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-09-12 12:06 - 2017-08-13 08:43 - 002058752 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-09-12 12:06 - 2017-08-13 08:43 - 001155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-09-12 12:06 - 2017-08-13 08:17 - 002767872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-09-12 12:06 - 2017-08-13 08:14 - 000710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-09-12 12:06 - 2017-08-13 08:13 - 001314816 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-09-12 12:06 - 2017-08-10 23:24 - 004001000 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2017-09-12 12:06 - 2017-08-10 23:24 - 003945704 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-09-12 12:06 - 2017-08-10 23:24 - 000137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-09-12 12:06 - 2017-08-10 23:24 - 000067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-09-12 12:06 - 2017-08-10 23:21 - 001310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 001417728 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 001062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000872448 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000781824 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000554496 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000497664 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000377344 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000299008 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000294400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000271360 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000171008 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000019968 _____ (Microsoft Corporation) C:\Windows\system32\nsisvc.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\winnsi.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\nsi.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 23:09 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
2017-09-12 12:06 - 2017-08-10 23:03 - 000026624 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2017-09-12 12:06 - 2017-08-10 23:01 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2017-09-12 12:06 - 2017-08-10 23:00 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-09-12 12:06 - 2017-08-10 23:00 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-09-12 12:06 - 2017-08-10 23:00 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-09-12 12:06 - 2017-08-10 23:00 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-09-12 12:06 - 2017-08-10 23:00 - 000016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-09-12 12:06 - 2017-08-10 22:58 - 000271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-09-12 12:06 - 2017-08-10 22:58 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-09-12 12:06 - 2017-08-10 22:56 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-09-12 12:06 - 2017-08-10 22:56 - 000311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-09-12 12:06 - 2017-08-10 22:56 - 000226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-09-12 12:06 - 2017-08-10 22:56 - 000124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-09-12 12:06 - 2017-08-10 22:56 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-09-12 12:06 - 2017-08-10 22:56 - 000098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-09-12 12:06 - 2017-08-10 22:55 - 000188928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2017-09-12 12:06 - 2017-08-10 22:55 - 000069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-09-12 12:06 - 2017-08-10 22:55 - 000036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-09-12 12:06 - 2017-08-10 22:55 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-09-12 12:06 - 2017-08-10 22:55 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nsiproxy.sys
2017-09-12 12:06 - 2017-08-10 22:55 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-09-12 12:06 - 2017-08-10 22:55 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 22:55 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 22:55 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-09-12 12:06 - 2017-08-10 22:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-09-11 16:00 - 2017-07-07 08:10 - 000973312 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
2017-09-05 23:07 - 2017-09-05 23:09 - 000000000 ____D C:\Program Files\trend micro
2017-09-05 23:06 - 2017-09-22 11:00 - 000007182 _____ C:\Windows\system32\Drivers\fvstore.dat
2017-09-04 18:26 - 2017-09-21 18:34 - 000000000 ____D C:\Users\Patrick\Documents\My Kindle Content
2017-09-03 11:36 - 2017-09-03 11:36 - 000000000 ____D C:\Program Files\PrivaZer
2017-08-27 20:34 - 2017-08-27 20:34 - 000000797 _____ C:\Users\Patrick\AppData\Roaming\Microsoft\Windows \Start Menu\Programs\Start Tor Browser.lnk
2017-08-27 20:34 - 2017-08-27 20:34 - 000000749 _____ C:\Users\Patrick\Desktop\Start Tor Browser.lnk
2017-08-27 20:33 - 2017-08-27 20:33 - 000000000 ____D C:\Users\Patrick\Desktop\Tor Browser
2017-08-27 12:34 - 2017-09-21 22:55 - 000012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe
2017-08-27 11:06 - 2017-09-03 13:20 - 000001935 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk
2017-08-27 11:06 - 2017-09-03 13:17 - 000000000 ____D C:\Program Files\Wireshark
2017-08-25 09:37 - 2017-09-09 23:30 - 000000000 ____D C:\Users\Patrick\AppData\Local\gtk-2.0
2017-08-21 18:39 - 2017-08-21 18:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiMalware
2017-08-20 12:43 - 2017-08-20 12:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wipe
2017-08-13 09:20 - 2017-09-04 18:20 - 000000000 ____D C:\PatchMyPCUpdates
2017-08-12 21:49 - 2017-07-21 07:26 - 000518144 _____ C:\Windows\system32\msjetoledb40.dll
2017-08-12 21:49 - 2017-07-21 07:26 - 000290816 _____ (Microsoft Corporation) C:\Windows\system32\msjtes40.dll
2017-08-12 21:49 - 2017-07-14 08:10 - 001549824 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-08-12 21:49 - 2017-07-14 08:10 - 001400320 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-08-12 21:49 - 2017-07-14 08:10 - 001363968 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2017-08-12 21:49 - 2017-07-08 08:19 - 000250600 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2017-08-12 21:49 - 2017-07-01 06:05 - 001311744 _____ (Microsoft Corporation) C:\Windows\system32\msjet40.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000866816 _____ (Microsoft Corporation) C:\Windows\system32\mswdat10.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000641536 _____ (Microsoft Corporation) C:\Windows\system32\mswstr10.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000616448 _____ (Microsoft Corporation) C:\Windows\system32\msrepl40.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000475648 _____ (Microsoft Corporation) C:\Windows\system32\msxbde40.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000375808 _____ (Microsoft Corporation) C:\Windows\system32\mspbde40.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000343552 _____ (Microsoft Corporation) C:\Windows\system32\msrd3x40.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000339968 _____ (Microsoft Corporation) C:\Windows\system32\msexcl40.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000310272 _____ (Microsoft Corporation) C:\Windows\system32\msrd2x40.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000240640 _____ (Microsoft Corporation) C:\Windows\system32\msltus40.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000144896 _____ (Microsoft Corporation) C:\Windows\system32\msjint40.dll
2017-08-12 21:49 - 2017-07-01 06:05 - 000083968 _____ (Microsoft Corporation) C:\Windows\system32\msjter40.dll
2017-08-12 21:49 - 2017-06-15 13:18 - 000514048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2017-08-12 21:49 - 2017-06-12 15:29 - 001227264 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2017-08-12 21:49 - 2017-06-12 15:29 - 000390144 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2017-08-12 21:49 - 2017-06-12 15:06 - 000303616 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2017-08-12 21:49 - 2017-06-09 08:17 - 001213672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-08-12 21:49 - 2017-05-29 21:39 - 001309928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-08-12 21:49 - 2017-05-29 21:39 - 000240872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2017-08-12 21:49 - 2017-05-29 21:39 - 000187624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2017-08-12 21:48 - 2017-07-29 07:50 - 000074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-08-12 21:48 - 2017-07-21 07:26 - 000409600 _____ (Microsoft Corporation) C:\Windows\system32\msexch40.dll
2017-08-12 21:48 - 2017-07-21 07:26 - 000282624 _____ (Microsoft Corporation) C:\Windows\system32\mstext40.dll
2017-08-12 21:48 - 2017-07-14 08:10 - 000666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-08-12 21:48 - 2017-07-14 08:10 - 000382976 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2017-08-12 21:48 - 2017-07-14 08:10 - 000337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-08-12 21:48 - 2017-07-14 08:10 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-08-12 21:48 - 2017-07-14 08:10 - 000104448 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-08-12 21:48 - 2017-07-14 08:10 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-08-12 21:48 - 2017-07-14 08:10 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-08-12 21:48 - 2017-07-14 08:00 - 000427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-08-12 21:48 - 2017-07-14 08:00 - 000164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-08-12 21:48 - 2017-07-14 07:59 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-08-12 21:48 - 2017-07-14 07:59 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-08-12 21:48 - 2017-07-14 07:50 - 000054272 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2017-08-12 21:48 - 2017-07-14 07:50 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2017-08-12 21:48 - 2017-07-07 08:15 - 000296680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys
2017-08-12 21:48 - 2017-07-07 08:11 - 000109568 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2017-08-12 21:48 - 2017-06-12 15:29 - 000444928 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2017-08-12 21:48 - 2017-06-12 15:28 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll
2017-08-12 21:48 - 2017-06-12 15:06 - 000157184 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
2017-08-12 21:48 - 2017-06-12 15:06 - 000103424 _____ (Microsoft Corporation) C:\Windows\system32\resmon.exe
2017-06-29 11:19 - 2017-05-20 21:06 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-06-29 11:19 - 2017-05-16 08:16 - 000730856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-06-29 11:19 - 2017-05-16 08:16 - 000218856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-06-29 11:19 - 2017-05-16 08:12 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2017-06-26 15:04 - 2017-06-30 13:46 - 001844440 ____H C:\Users\Patrick\AppData\Local\IconCache.db.backup
2017-06-24 14:53 - 2017-06-24 14:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management

==================== Three Months Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-09-22 11:41 - 2016-06-08 07:29 - 000029340 _____ C:\Windows\ZAM_Guard.krnl.trace
2017-09-22 11:41 - 2015-11-16 08:56 - 000151047 _____ C:\Windows\ZAM.krnl.trace
2017-09-22 11:41 - 2015-06-23 15:13 - 000000000 ____D C:\Windows\CryptoGuard
2017-09-22 11:29 - 2016-09-10 13:09 - 000000000 ____D C:\ProgramData\VoodooShield
2017-09-22 11:05 - 2016-02-07 16:45 - 000000000 ____D C:\Users\Patrick\Desktop\Games
2017-09-22 10:46 - 2009-07-13 19:37 - 000000000 ____D C:\Windows\inf
2017-09-22 10:37 - 2009-07-13 21:34 - 000015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-09-22 10:37 - 2009-07-13 21:34 - 000015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-09-22 10:34 - 2015-06-02 13:49 - 000921462 _____ C:\Windows\system32\PerfStringBackup.INI
2017-09-22 10:31 - 2015-06-03 12:04 - 000000000 ____D C:\ProgramData\MCShield
2017-09-22 10:30 - 2017-06-21 19:34 - 000170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-09-22 10:29 - 2009-07-13 21:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-09-22 10:15 - 2017-04-06 10:40 - 000000000 ____D C:\Users\Patrick\AppData\Local\Mozilla
2017-09-22 10:10 - 2015-06-02 14:20 - 000000000 ____D C:\Users\Patrick\AppData\Roaming\vlc
2017-09-22 09:10 - 2015-06-03 14:21 - 000000000 ____D C:\Users\Patrick\AppData\Roaming\GlarySoft
2017-09-22 09:08 - 2015-06-23 15:12 - 000000000 ____D C:\ProgramData\HitmanPro.Alert
2017-09-21 23:33 - 2016-02-14 22:30 - 000000000 ____D C:\Users\Patrick\Documents\My Games
2017-09-21 21:51 - 2015-06-03 12:03 - 000000000 ____D C:\Users\Patrick\AppData\Roaming\WinPatrol
2017-09-21 21:18 - 2015-06-03 12:24 - 000000000 ____D C:\Users\Patrick\AppData\Roaming\Mozilla
2017-09-21 20:45 - 2017-01-08 20:32 - 000000000 ____D C:\Program Files\Everything
2017-09-21 17:09 - 2015-09-18 11:33 - 000000000 ____D C:\Users\Patrick\AppData\Local\PrivaZer
2017-09-21 17:09 - 2015-06-04 10:44 - 000000000 ____D C:\Program Files\System Ninja
2017-09-21 17:03 - 2015-06-04 10:45 - 000000000 ____D C:\Users\Patrick\AppData\Roaming\Wipe
2017-09-21 17:02 - 2017-01-08 21:38 - 000000000 ____D C:\ProgramData\TEMP
2017-09-21 17:01 - 2015-06-24 20:53 - 000000000 ____D C:\Program Files\PC Tools Registry Mechanic
2017-09-21 17:01 - 2015-06-09 10:59 - 000000000 ____D C:\Program Files\IrfanView
2017-09-21 12:44 - 2017-04-15 09:42 - 000000000 ____D C:\Users\Patrick\Documents\Calibre Library
2017-09-18 22:26 - 2016-08-19 13:12 - 000000000 ____D C:\Users\Patrick\Documents\Bethesda
2017-09-18 19:46 - 2015-06-07 16:55 - 000000000 ____D C:\Program Files\PeerBlock
2017-09-18 19:42 - 2016-10-10 21:59 - 000000000 ____D C:\Users\Patrick\AppData\Roaming\uTorrent
2017-09-18 19:33 - 2015-06-12 10:55 - 000000000 ____D C:\Windows\erdnt
2017-09-18 18:08 - 2009-07-13 19:04 - 000000215 _____ C:\Windows\system.ini
2017-09-18 14:42 - 2015-06-03 14:21 - 000001046 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2017-09-18 14:40 - 2015-06-03 14:21 - 000000000 ____D C:\Program Files\Glary Utilities 5
2017-09-15 21:41 - 2015-09-12 19:59 - 000774824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-09-15 21:41 - 2015-09-12 19:59 - 000499048 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-09-15 21:41 - 2015-09-12 19:59 - 000296824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2017-09-15 21:41 - 2015-09-12 19:59 - 000148800 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2017-09-15 21:41 - 2015-09-12 19:59 - 000124952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-09-15 21:41 - 2015-09-12 19:59 - 000099560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-09-15 21:41 - 2015-09-12 19:59 - 000070864 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-09-15 21:41 - 2015-09-12 19:59 - 000042856 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-09-15 21:41 - 2015-09-12 19:57 - 000000000 ____D C:\ProgramData\AVAST Software
2017-09-15 21:13 - 2015-06-02 14:19 - 000000000 ____D C:\Program Files\CCleaner
2017-09-14 06:10 - 2015-06-08 14:56 - 000000000 ____D C:\Users\Patrick\AppData\Roaming\Adobe
2017-09-14 06:10 - 2015-06-08 14:56 - 000000000 ____D C:\Users\Patrick\AppData\LocalLow\Adobe
2017-09-13 18:11 - 2015-06-23 09:07 - 000024688 _____ C:\Windows\system32\Drivers\TrueSight.sys
2017-09-13 10:05 - 2009-07-13 19:37 - 000000000 ____D C:\Windows\rescache
2017-09-13 08:34 - 2015-06-02 13:58 - 000000000 ____D C:\Users\Patrick
2017-09-09 17:17 - 2016-09-26 10:53 - 000000000 ____D C:\Users\Patrick\Documents\Kruptos2Professional
2017-09-08 08:17 - 2017-01-31 19:28 - 000276736 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswblogx.sys
2017-09-08 08:17 - 2017-01-31 19:28 - 000255624 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdriverx.sys
2017-09-08 08:17 - 2017-01-31 19:28 - 000157416 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidshx.sys
2017-09-08 08:17 - 2017-01-31 19:28 - 000050384 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbunivx.sys
2017-09-04 15:59 - 2015-06-11 19:41 - 000000000 ____D C:\EEK
2017-09-03 11:36 - 2015-09-20 09:33 - 000001839 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrivaZer.lnk
2017-08-31 17:06 - 2009-07-13 19:03 - 055050240 _____ C:\Windows\system32\config\software.rmbak
2017-08-31 17:06 - 2009-07-13 19:03 - 004980736 _____ C:\Windows\system32\config\default.rmbak
2017-08-31 14:58 - 2017-04-13 14:41 - 000000000 ____D C:\Users\Patrick\AppData\Roaming\Comodo
2017-08-31 13:58 - 2015-06-03 11:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
2017-08-31 13:57 - 2015-06-03 11:43 - 000000000 ____D C:\ProgramData\Comodo
2017-08-28 21:59 - 2016-12-28 00:20 - 000044008 _____ (COMODO) C:\Windows\system32\cmdcsr.dll
2017-08-28 21:59 - 2016-12-28 00:19 - 000731344 _____ (COMODO) C:\Windows\system32\guard32.dll
2017-08-28 21:55 - 2016-12-28 00:15 - 000363712 _____ (COMODO) C:\Windows\system32\cmdvrt32.dll
2017-08-28 14:38 - 2015-06-03 11:58 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-08-27 14:09 - 2017-06-18 12:09 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-08-27 14:09 - 2015-06-03 12:03 - 000000000 ____D C:\Program Files\WinRAR
2017-08-27 12:27 - 2016-10-06 10:32 - 000000000 ____D C:\Program Files\HitmanPro
2017-08-27 11:05 - 2017-05-20 21:17 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-08-27 11:03 - 2015-06-03 12:03 - 000000000 ____D C:\Users\Patrick\AppData\Roaming\Microsoft\Windows \Start Menu\Programs\WinRAR
2017-08-27 11:03 - 2015-06-03 12:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-08-27 11:02 - 2015-06-03 11:58 - 000001113 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-08-25 12:54 - 2015-06-03 11:59 - 000000000 ____D C:\ProgramData\Unchecky

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

==================== BCD ================================
[HEADING=1]Windows Boot Manager[/HEADING]
identifier {bootmgr}
device partition=\Device\HarddiskVolume1
description Windows Boot Manager
locale en-US
inherit {globalsettings}
default {current}
resumeobject {433a583b-0971-11e5-a284-9c5c1998d34b}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
[HEADING=1]Windows Boot Loader[/HEADING]
identifier {current}
device partition=C:
path \Windows\system32\winload.exe
description Windows 7
locale en-US
inherit {bootloadersettings}
recoverysequence {433a583d-0971-11e5-a284-9c5c1998d34b}
recoveryenabled Yes
osdevice partition=C:
systemroot \Windows
resumeobject {433a583b-0971-11e5-a284-9c5c1998d34b}
nx OptIn
bootlog No
[HEADING=1]Windows Boot Loader[/HEADING]
identifier {433a583d-0971-11e5-a284-9c5c1998d34b}
device ramdisk=[C:]\Recovery\433a583d-0971-11e5-a284-9c5c1998d34b\Winre.wim,{433a583e-0971-11e5-a284-9c5c1998d34b}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[C:]\Recovery\433a583d-0971-11e5-a284-9c5c1998d34b\Winre.wim,{433a583e-0971-11e5-a284-9c5c1998d34b}
systemroot \windows
nx OptIn
winpe Yes
[HEADING=1]Resume from Hibernate[/HEADING]
identifier {433a583b-0971-11e5-a284-9c5c1998d34b}
device partition=C:
path \Windows\system32\winresume.exe
description Windows Resume Application
locale en-US
inherit {resumeloadersettings}
filedevice partition=C:
filepath \hiberfil.sys
pae Yes
debugoptionenabled No
[HEADING=1]Windows Memory Tester[/HEADING]
identifier {memdiag}
device partition=\Device\HarddiskVolume1
path \boot\memtest.exe
description Windows Memory Diagnostic
locale en-US
inherit {globalsettings}
badmemoryaccess Yes
[HEADING=1]EMS Settings[/HEADING]
identifier {emssettings}
bootems Yes
[HEADING=1]Debugger Settings[/HEADING]
identifier {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200
[HEADING=1]RAM Defects[/HEADING]
identifier {badmemory}
[HEADING=1]Global Settings[/HEADING]
identifier {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
[HEADING=1]Boot Loader Settings[/HEADING]
identifier {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
[HEADING=1]Hypervisor Settings[/HEADING]
identifier {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
[HEADING=1]Resume Loader Settings[/HEADING]
identifier {resumeloadersettings}
inherit {globalsettings}
[HEADING=1]Device options[/HEADING]
identifier {433a583e-0971-11e5-a284-9c5c1998d34b}
description Ramdisk Options
ramdisksdidevice partition=C:
ramdisksdipath \Recovery\433a583d-0971-11e5-a284-9c5c1998d34b\boot.sdi

LastRegBack: 2017-09-11 19:31

==================== End of FRST.txt ============================

**PatL** · 09-23-2017, 02:38 AM

[HEADING=1]Additional scan result of Farbar Recovery Scan Tool (x86) Version: 20-09-2017
Ran by Patrick (22-09-2017 11:42:59)
Running from C:\Users\Patrick\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) (2015-06-02 20:58:32)
Boot Mode: Normal[/HEADING]
==================== Accounts: =============================

Administrator (S-1-5-21-2985130882-1756615807-8858886-500 - Administrator - Disabled)
Guest (S-1-5-21-2985130882-1756615807-8858886-501 - Limited - Disabled)
Patrick (S-1-5-21-2985130882-1756615807-8858886-1000 - Administrator - Enabled) => C:\Users\Patrick

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: COMODO Advanced Protection (Enabled - Up to date) {B730BF64-C56F-6633-0EF5-9E639E46CC40}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: COMODO Firewall (Enabled) {346ADFA5-A93A-68E5-1F1A-0C241B12C186}

==================== Installed Programs ======================

(Only the adware programs with “Hidden” flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\uTorrent) (Version: 3.5.0.43804 - BitTorrent Inc.)
9-lab Removal Tool (HKLM...\9-lab Removal Tool) (Version: - )
Adobe Acrobat Reader DC (HKLM...{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 17.012.20093 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM...\Adobe Flash Player NPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Advanced Audio FX Engine (HKLM...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
Amazon Kindle (HKLM...\Amazon Kindle) (Version: 1.17.1.44183 - Amazon)
Avast Free Antivirus (HKLM...\Avast Antivirus) (Version: 17.7.2312 - AVAST Software)
Baldur’s Gate II (HKLM...\Baldur’s Gate II_is1) (Version: - GOG.com)
calibre (HKLM...{B67713B4-83B9-496D-8B26-EBC27F10D562}) (Version: 2.85.1 - Kovid Goyal)
CCleaner (HKLM...\CCleaner) (Version: 5.34 - Piriform)
CDisplay 1.8 (HKLM...\CDisplay_is1) (Version: - dvd8n)
COMODO Firewall (HKLM...{67DA4459-33A8-4E69-9C7B-FB5CBADA60AB}) (Version: 10.0.1.6294 - COMODO Security Solutions Inc.) Hidden
COMODO Firewall (HKLM...\COMODO Internet Security) (Version: 10.0.1.6294 - COMODO Security Solutions Inc.)
Compatibility Pack for the 2007 Office system (HKLM...{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CryptoPrevent (HKLM...{5C5B24E7-4694-4049-A222-CCE7D3FAC63F}_is1) (Version: 8.0.4.2 - Foolish IT LLC)
DAEMON Tools Lite (HKLM...\DAEMON Tools Lite) (Version: 10.3.0.0154 - Disc Soft Ltd)
DARK EARTH (HKLM...\DARK EARTH) (Version: - )
Dell Webcam Central (HKLM...\Dell Webcam Central) (Version: 1.40.05 - Creative Technology Ltd)
DiskCheckup v3.4 (HKLM...\DiskCheckup_is1) (Version: 3.4.1003 - PassMark Software)
EPubsoft Kindle MOBI AZW DRM Removal 9.0.5 (HKLM...{0FE2E41F-416D-46D1-98AB-970A205F897B}) (Version: 9.0.5 - EPUBSOFT)
ESET Online Scanner v3 (HKLM...\ESET Online Scanner) (Version: - )
Everything 1.3.4.686 (x86) (HKLM...\Everything) (Version: - )
Freedome (HKLM...\F-Secure Freedome) (Version: 1.20.3671.0 - F-Secure Corporation)
Glary Utilities 5.84 (HKLM...\Glary Utilities 5) (Version: 5.84.0.105 - Glarysoft Ltd)
Google Update Helper (HKLM...{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.30.3 - Google Inc.)
Grammarly (HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\GrammarlyForWindows) (Version: 1.5.29 - Grammarly)
GSmartControl (HKLM...\GSmartControl) (Version: 0.8.7 - Alexander Shaduri)
HD Tune 2.55 (HKLM...\HD Tune_is1) (Version: - EFD Software)
herdProtect Anti-Malware Scanner (HKLM...\herdProtectScan) (Version: 1.0 - Reason Company Software Inc.)
HitmanPro 3.7 (HKLM...\HitmanPro37) (Version: 3.7.18.284 - SurfRight B.V.)
HitmanPro.Alert 3 (HKLM...\HitmanPro.Alert) (Version: 3.6.7.604 - SurfRight B.V.)
HostsMan 4.5.102 (HKLM...{1A3DD1A9-7B7B-4ECA-AD2F-98466F49F62C}_is1) (Version: 4.5.102.0 - abelhadigital.com)
Internet Security Essentials (HKLM...\ComodoIse) (Version: 1.2.424651.94 - Comodo)
IrfanView 4.44 (32-bit) (HKLM...\IrfanView) (Version: 4.44 - Irfan Skiljan)
Kruptos 2 Professional (HKLM...{A3F80325-CA48-4C85-9967-767DA76CB13F}) (Version: 6.2.3 - Kruptos 2 Software) Hidden
Kruptos 2 Professional (HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\Kruptos 2 Professional 6.2.3) (Version: 6.2.3 - Kruptos 2 Software)
Live! Cam Avatar Creator (HKLM...{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}) (Version: 4.6.3009.1 - Creative Technology Ltd)
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
MCShield ::Anti-Malware Tool:: (HKLM...\MCShield) (Version: 3.0.5.28 - MyCity)
Microsoft Office PowerPoint Viewer 2007 (English) (HKLM...{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM...{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM...{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM...{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40649 (HKLM...{35b83883-40fa-423c-ae73-2aff7e1ea820}) (Version: 12.0.40649.5 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM...{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Works (HKLM...{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)
Mozilla Firefox 55.0.3 (x86 en-US) (HKLM...\Mozilla Firefox 55.0.3 (x86 en-US)) (Version: 55.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM...\MozillaMaintenanceService) (Version: 55.0.3 - Mozilla)
OpenAL (HKLM...\OpenAL) (Version: - )
OpenOffice 4.1.3 (HKLM...{EEA30AEB-8BA7-465B-85D4-098BB99733E7}) (Version: 4.13.9783 - Apache Software Foundation)
PC Tools Registry Mechanic 11.0 (HKLM...\Registry Mechanic_is1) (Version: 11.0 - PC Tools)
PeerBlock 1.2 (r693) (HKLM...{015C5B35-B678-451C-9AEE-821E8D69621C}_is1) (Version: 1.2.0.693 - PeerBlock, LLC)
Planescape Torment (HKLM...\GOGPACKPLANESCAPETORMENT_is1) (Version: 2.0.0.8 - GOG.com)
PrivaZer (HKLM...\PrivaZer) (Version: 3.0.26.0 - Goversoft LLC)
Revo Uninstaller 2.0.3 (HKLM...{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.)
RogueKiller version 12.10.4.0 (HKLM...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.10.4.0 - Adlice Software)
Speccy (HKLM...\Speccy) (Version: 1.30 - Piriform)
SpywareBlaster 5.5 (HKLM...\SpywareBlaster_is1) (Version: 5.5.0 - BrightFort LLC)
Star Wars Galactic Battlegrounds: Saga (HKLM...{10133CDD-50B9-4783-B336-8B48F3653715}) (Version: - )
STAR WARS® - Knights of the Old Republic™ (HKLM...\1207666283_is1) (Version: 2.0.0.3 - GOG.com)
System Ninja version 3.1.8 (HKLM...{6E67710E-206D-43AB-BF21-E7CD63056C55}is1) (Version: 3.1.8 - SingularLabs)
Thief GOLD (HKLM...\GOGPACKTHIEF1GOLD_is1) (Version: 2.0.0.46 - GOG.com)
Thief Gold HD Mod 1.2 (HKLM...\Thief1HD) (Version: - )
Unchecky v1.0.3 (HKLM...\Unchecky) (Version: 1.0.3 - RaMMicHaeL)
Vampire - The Masquerade Bloodlines (HKLM...{C4E2A4A7-B623-40CB-8EEA-72F577E49D56}) (Version: 1.00.0000 - Activision) Hidden
Vampire - The Masquerade Bloodlines (HKLM...\InstallShield{C4E2A4A7-B623-40CB-8EEA-72F577E49D56}) (Version: 1.00.0000 - Activision)
Visual Studio 2012 x86 Redistributables (HKLM...{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM...\VLC media player) (Version: 2.2.6 - VideoLAN)
VoodooShield version 3.59 (HKLM...{A8644328-A66F-490E-B8FA-901FF649189D}_is1) (Version: 3.59 - VoodooSoft, LLC)
WD Security (HKLM...{A2D70EE4-2462-4F04-9955-5761E3F3F47A}) (Version: 1.4.0.92 - Western Digital Technologies, Inc.) Hidden
WinPatrol (HKLM...{6A206A04-6BC1-411B-AA04-4E52EDEEADF2}) (Version: 34.11.2016.27 - Ruiware)
WinPcap 4.1.3 (HKLM...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.50 (32-bit) (HKLM...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
Wipe (HKLM...\wipe) (Version: 17.12 - PrivacyRoot.com)
Wireshark 2.4.1 32-bit (HKLM...\Wireshark) (Version: 2.4.1 - The Wireshark developer community, hxxps://www.wireshark.org)
Zemana AntiMalware (HKLM...{8F0CD7D1-42F3-4195-95CD-833578D45057}_is1) (Version: 2.74.0.150 - Zemana Ltd.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1E325CE4-366D-47C3-B726-E927D7DC1DFC} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-08-28] (COMODO)
Task: {1E5BEC4B-5F11-4E36-9818-68569DF9CC8E} - System32\Tasks\GlaryInitialize 5 => C:\Program Files\Glary Utilities 5\Initialize.exe [2017-09-15] (Glarysoft Ltd)
Task: {360E1AE3-7AA9-4120-85B2-2FE4B8B7B53B} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-09-15] (AVAST Software)
Task: {5C1A8A26-5916-4124-9CBA-B4AA3C9A2CC6} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {8158EF6C-F25B-4E3D-A2A6-333D35220EF2} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2017-08-28] (COMODO)
Task: {8C9804FC-AD49-4C3D-9C53-32A3CBFAE416} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-09-07] (Piriform Ltd)
Task: {C5AE9163-17A7-4C78-B1B9-2019F5AF466D} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-08-28] (COMODO)
Task: {CC224242-18FC-4F57-A94E-3D4CCDB5F794} - System32\Tasks\PrivaZer_SkipUAC => C:\Program Files\PrivaZer\PrivaZer.exe [2017-09-03] (Goversoft LLC)
Task: {D08439C4-B30F-43CA-A2DF-F82619DBDAC5} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2017-08-28] (COMODO)
Task: {D799A5BB-6D21-46E3-8380-CD35F19A0C93} - System32\Tasks\GU5SkipUAC => C:\Program Files\Glary Utilities 5\Integrator.exe [2017-09-15] (Glarysoft Ltd)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2016-12-28 00:14 - 2017-08-28 21:54 - 000197824 _____ () C:\Program Files\COMODO\COMODO Internet Security\cmdcomps.dll
2016-12-28 00:14 - 2017-08-28 21:54 - 000097984 _____ () C:\Program Files\COMODO\COMODO Internet Security\cavwpps.dll
2017-09-15 21:41 - 2017-09-15 21:41 - 000059040 _____ () C:\Program Files\AVAST Software\Avast\module_lifetime.dll
2017-09-15 21:41 - 2017-09-15 21:41 - 000167096 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-09-15 21:41 - 2017-09-15 21:41 - 000266504 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-09-15 21:41 - 2017-09-15 21:41 - 000244584 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-09-15 21:41 - 2017-09-15 21:41 - 000150592 _____ () C:\Program Files\AVAST Software\Avast\network_notifications.dll
2017-09-22 09:18 - 2017-09-22 09:18 - 005903840 _____ () C:\Program Files\AVAST Software\Avast\defs\17092206\algo.dll
2017-09-15 21:41 - 2017-09-15 21:41 - 000693944 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2015-09-16 17:17 - 2017-06-13 10:53 - 000131952 _____ () C:\Program Files\Zemana AntiMalware\ZAMShellExt32.dll
2017-09-15 21:41 - 2017-09-15 21:41 - 000142792 _____ () c:\Program Files\AVAST Software\Avast\vaarclient.dll
2017-09-15 21:41 - 2017-09-15 21:41 - 000241448 _____ () c:\Program Files\AVAST Software\Avast\StreamBack.dll
2017-05-18 15:51 - 2017-05-18 15:51 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-09-12 13:27 - 2017-09-12 13:27 - 000157152 _____ () C:\Program Files\F-Secure\Freedome\Freedome\1.1\lzo2.dll
2017-09-12 13:27 - 2017-09-12 13:27 - 000075232 _____ () C:\Program Files\F-Secure\Freedome\Freedome\1.1\libpkcs11-helper-1.dll
2017-09-12 13:27 - 2017-09-12 13:27 - 000698848 _____ () C:\Program Files\F-Secure\Freedome\Freedome\1.1\QtQuick\Controls\qtqu ickcontrolsplugin.dll
2017-09-12 13:27 - 2017-09-12 13:27 - 000019424 _____ () C:\Program Files\F-Secure\Freedome\Freedome\1.1\libEGL.dll
2017-09-12 13:27 - 2017-09-12 13:27 - 001610720 _____ () C:\Program Files\F-Secure\Freedome\Freedome\1.1\libGLESv2.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP

1B5B4F1 [151]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The “AlternateShell” value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Min imal\26317464.sys => “”=“Driver”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Min imal\BFE => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Min imal\BITS => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Min imal\MpsSvc => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Min imal\msiserver => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Min imal\SharedAccess => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Min imal\vss => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\26317464.sys => “”=“Driver”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\BITS => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\msiserver => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\SMR501 => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\vss => “”=“Service”

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKLM....scr: CryptoPreventSCR => “C:\Program Files\Foolish IT\CryptoPrevent\CryptoPreventFilterMod.CryptoPrev entEXEC” “%1” /S %*

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU.DEFAULT...\007guard.com → install.007guard.com
IE restricted site: HKU.DEFAULT...\008i.com → 008i.com
IE restricted site: HKU.DEFAULT...\008k.com → www.008k.com
IE restricted site: HKU.DEFAULT...\00hq.com → www.00hq.com
IE restricted site: HKU.DEFAULT...\010402.com → 010402.com
IE restricted site: HKU.DEFAULT...\032439.com → 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU.DEFAULT...\0scan.com → www.0scan.com
IE restricted site: HKU.DEFAULT...\1-2005-search.com → www.1-2005-search.com
IE restricted site: HKU.DEFAULT...\1-domains-registrations.com → www.1-domains-registrations.com
IE restricted site: HKU.DEFAULT...\1000gratisproben.com → www.1000gratisproben.com
IE restricted site: HKU.DEFAULT...\1001namen.com → www.1001namen.com
IE restricted site: HKU.DEFAULT...\100888290cs.com → mir.100888290cs.com
IE restricted site: HKU.DEFAULT...\100sexlinks.com → www.100sexlinks.com
IE restricted site: HKU.DEFAULT...\10sek.com → www.10sek.com
IE restricted site: HKU.DEFAULT...\12-26.net → user1.12-26.net
IE restricted site: HKU.DEFAULT...\12-27.net → user1.12-27.net
IE restricted site: HKU.DEFAULT...\123fporn.info → www.123fporn.info
IE restricted site: HKU.DEFAULT...\123haustiereundmehr.com → www.123haustiereundmehr.com
IE restricted site: HKU.DEFAULT...\123moviedownload.com → www.123moviedownload.com
IE restricted site: HKU.DEFAULT...\123simsen.com → www.123simsen.com

There are 7923 more sites.

IE trusted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\secunia.com → hxxps://secunia.com
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\007guard.com → install.007guard.com
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\008i.com → 008i.com
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\008k.com → www.008k.com
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\00hq.com → www.00hq.com
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\010402.com → 010402.com
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\0190-dialers.com → 0190-dialers.com
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\01i.info → 01i.info
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\02pmnzy5eo29bfk4.com → 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\032439.com → 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\0411dd.com → 0411dd.com
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\0511zfhl.com → 0511zfhl.com
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\05p.com → 05p.com
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\0632qyw.com → 0632qyw.com
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\07ic5do2myz3vzpk.com → 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\08nigbmwk43i01y6.com → 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\093qpeuqpmz6ebfa.com → 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\0calories.net → 0calories.net
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\0cj.net → 0cj.net
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\0scan.com → www.0scan.com
IE restricted site: HKU\S-1-5-21-2985130882-1756615807-8858886-1000...\1-2005-search.com → www.1-2005-search.com

There are 12738 more sites.

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-08-31 09:41 - 2017-09-22 10:29 - 000001314 _____ C:\Windows\system32\Drivers\etc\hosts

0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly
0.0.0.0 tracking.opencandy.com.s3.amazonaws.com
0.0.0.0 media.opencandy.com
0.0.0.0 cdn.opencandy.com
0.0.0.0 tracking.opencandy.com
0.0.0.0 api.opencandy.com
0.0.0.0 api.recommendedsw.com
0.0.0.0 rp.yefeneri2.com
0.0.0.0 os.yefeneri2.com
0.0.0.0 os2.yefeneri2.com
0.0.0.0 installer.betterinstaller.com
0.0.0.0 installer.filebulldog.com
0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net
0.0.0.0 inno.bisrv.com
0.0.0.0 nsis.bisrv.com
0.0.0.0 cdn.file2desktop.com
0.0.0.0 cdn.goateastcach.us
0.0.0.0 cdn.guttastatdk.us
0.0.0.0 cdn.inskinmedia.com
0.0.0.0 cdn.insta.oibundles2.com
0.0.0.0 cdn.insta.playbryte.com
0.0.0.0 cdn.llogetfastcach.us
0.0.0.0 cdn.montiera.com
0.0.0.0 cdn.msdwnld.com
0.0.0.0 cdn.mypcbackup.com
0.0.0.0 cdn.ppdownload.com
0.0.0.0 cdn.riceateastcach.us
0.0.0.0 cdn.shyapotato.us
0.0.0.0 cdn.solimba.com
0.0.0.0 cdn.tuto4pc.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2985130882-1756615807-8858886-1000\Control Panel\Desktop\Wallpaper → C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\D esktop Background.bmp
DNS Servers: 198.18.8.209
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Pol icies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
mpsdrv => Firewall Service is not running.
MpsSvc => Firewall Service is not running.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\Services: !SASCORE => 2
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: Bonjour Service => 3
MSCONFIG\Services: CG6Service => 3
MSCONFIG\Services: CmdAgent => 2
MSCONFIG\Services: cmdvirth => 3
MSCONFIG\Services: Disc Soft Lite Bus Service => 3
MSCONFIG\Services: ehSched => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: isesrv => 2
MSCONFIG\Services: K2Service.exe => 2
MSCONFIG\Services: PCToolsSSDMonitorSvc => 2
MSCONFIG\Services: SDScannerService => 3
MSCONFIG\Services: SDUpdateService => 3
MSCONFIG\Services: SDWSCService => 3
MSCONFIG\Services: Secunia PSI Agent => 3
MSCONFIG\Services: Secunia Update Agent => 3
MSCONFIG\Services: WDDriveService => 2
MSCONFIG\startupreg: Adobe ARM => “C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe”
MSCONFIG\startupreg: AvastUI.exe => “C:\Program Files\AVAST Software\Avast\AvLaunch.exe” /gui
MSCONFIG\startupreg: CCleaner Monitoring => “C:\Program Files\CCleaner\CCleaner.exe” /MONITOR
MSCONFIG\startupreg: IseUI => C:\Program Files\COMODO\Internet Security Essentials\vkise.exe
MSCONFIG\startupreg: Wipe Maintance => “C:\Program Files\Wipe\net1.exe” windowsStartup

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Restore Points =========================

13-09-2017 22:56:00 JRT Pre-Junkware Removal
21-09-2017 22:54:31 Checkpoint by HitmanPro
22-09-2017 10:20:05 Restore Point Created by FRST
Check “winmgmt” service or repair WMI.

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================
[HEADING=1]Application errors:[/HEADING]
[HEADING=1]System errors:[/HEADING]
[HEADING=1]CodeIntegrity:[/HEADING]
Date: 2017-09-22 11:45:45.199
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system.

Date: 2017-09-22 11:45:44.934
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system.

Date: 2017-09-22 11:30:52.097
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system.

Date: 2017-09-22 11:30:51.801
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system.

Date: 2017-09-22 11:19:49.296
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system.

Date: 2017-09-22 11:19:49.077
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system.

Date: 2017-09-22 10:29:15.180
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system.

Date: 2017-09-22 10:29:14.977
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system.

Date: 2017-09-22 09:08:52.745
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system.

Date: 2017-09-22 09:08:52.558
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\api-ms-win-core-synch-l1-2-0.dll because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Processor: Pentium(R) Dual-Core CPU T4300 @ 2.10GHz
Percentage of memory in use: 53%
Total physical RAM: 3544.36 MB
Available physical RAM: 1631.5 MB
Total Virtual: 7087.05 MB
Available Virtual: 4477.66 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:379.44 GB) NTFS

==================== MBR & Partition Table ==================

================================================== ======
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 864A2DB2)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Ccleaner infection

Ccleaner infection

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment