detected
Honorary Members-
Posts
30 -
Joined
-
Last visited
Reputation
0 NeutralRecent Profile Visitors
The recent visitors block is disabled and is not being shown to other users.
-
I used to use avast but i deleted it
-
Addition.txt FRST.txt
-
At normal mode the blank cmd does not show, but now performance settings are opening at startup
-
Tried the clean boot and the blank cmd does not show again. But now, when i open my pc i get this lol
-
I can't do this because the cmd windows closes automatically after ~7 sec
-
No improvement
-
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.1.0 (12.05.2016) Operating System: Windows 7 Ultimate x64 Ran by Flow (Administrator) on ‰¬¨ 26/02/2017 at 20:04:31,59 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ File System: 104 Successfully deleted: C:\ProgramData\cloud software ltd (Folder) Successfully deleted: C:\ProgramData\esellerate (Folder) Successfully deleted: C:\ProgramData\productdata (Folder) Successfully deleted: C:\Users\USER\AppData\Local\{0153DEB6-5B4E-4855-8694-AC012C6CCC65} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{07F27AC1-623C-4274-92F7-DF3D5F636298} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{08E8DED6-1B24-4C15-BBD9-255E1BD2B1EC} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{0F3C1A38-A086-48B1-B56C-69F9014B62D3} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{106324AD-99E5-4AE7-9D79-6E2621566C29} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{1694CD4D-F28F-4B69-921A-33218F68DCBA} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{18535D5A-125F-45F6-92D8-EA90C82F9CC2} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{19891198-E974-467E-8D32-02C864D140EF} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{1AFA1745-F272-4C92-9E1B-F1390AB8A7F0} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{1BD47122-3D15-4B21-B3CF-2A36F60D615A} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{24197974-9719-4D06-9D4F-635B91F0DA44} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{25CCC351-2654-4A3E-9DC0-3A2AD784FBE7} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{29B514D1-9FCC-4DF9-9A96-5C12FAAB719E} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{29E7B049-60A9-4934-B675-F88D0666D76D} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{2D538C6B-F5DE-461F-82E4-94F3F76B9594} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{30C470CF-7EFC-48EA-9929-36BEB2BA66FC} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{30F3D4D3-6DCF-46FB-B025-EE7BB33CD4F9} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{3354B52B-E0CA-4743-AA9E-67E043E429BE} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{3ACC86A0-9AA2-4727-A836-7E19DA6BDBE5} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{3CA02203-C77B-4E15-9AFD-14834834DD1A} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{449653B9-3AA1-4EA9-A7BB-8C633EFECDC3} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{4B68020C-44CA-4A7C-85BD-544123A8CFF0} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{4D00F049-8AC6-4B46-B29C-D385FB62ECF7} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{4E924007-385C-4C4A-9EEF-D27E67168EBD} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{55285111-83AB-4350-A089-923E4322D7DF} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{58AE2144-0455-4E81-8157-EA0311380705} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{5AB9DFB7-29A2-4677-BCFB-C800C7F51EE0} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{5BD41EFF-A43F-4FDB-9EB7-6DE2F7F10474} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{60FC8544-6CA5-4146-8D8C-251B82F6BFE1} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{610DB9EC-EF44-4B02-948D-4CC8FA2CE137} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{612A4EFE-4EDB-419F-9DF2-96A3B1348787} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{61DBB0CF-CEDA-4E96-9CC2-80B50EE57E84} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{63EC99F7-88EF-41CF-8B92-E498EAC88F3C} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{6774E67C-168C-433E-BC2D-8466E676DC30} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{755816BC-6E12-4A4F-9B15-BA015B3F4681} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{7A0BCC3D-C597-4034-A559-BF38E3193349} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{7D891ED7-4BD9-4BB0-A808-8852732A8432} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{8037FAE9-A505-4226-BE7A-4D8BA4A8C149} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{81F9FEFE-9DA0-4DAB-9B8D-FE644A9A18E2} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{85DA32F4-8853-4317-A2C7-5369EEDF37AA} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{86D416D4-E4AF-4F7A-811A-95A0607FD686} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{86FDD9CB-FF03-4F71-B021-40631BC78CA2} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{8A1DC5FB-AAF8-409C-B56F-3712DEA4A450} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{9276AB05-2423-46E5-8F5D-01EE4C3706C1} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{9C33DD91-ED7B-4B5A-B4E9-5DEA5B06BF59} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{A1EEBDEA-D8D7-44AD-B30E-D0023D80CA04} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{A33E1D30-BFF2-449F-85E4-D143742500D5} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{A3716BC2-949D-4BFE-BA55-F91F040DD584} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{A3ACE8E5-B86B-41F1-AD48-2EA66B42BDD9} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{A3D15F75-9692-4D6F-80C1-41EB841D8A21} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{A5E3093B-4EAA-44AA-90AD-4EE0937A00A3} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{A691FD18-6A34-41A6-9924-607B393417CB} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{A7AE5268-AB71-4748-8FE6-E6B6AE14C2C4} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{AF74BCF0-70DF-4269-AAD4-BE2D61116395} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{B4AF63B3-1B97-43DE-A555-844E0B714CC2} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{BB67FF25-35D9-4CAA-8FF2-AF31115FBC14} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{BEFB54B1-908F-4D22-9C2B-C0372ACFCC9F} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{BFC67AC4-1B42-4D96-B489-7A175C64DAA0} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{C13804A1-D523-4304-A25E-5645F9CE3537} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{C30B0108-B24A-4742-8164-B6FD8D50FCCF} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{CA4943FF-9935-48E6-916A-9EDFD22B6B2E} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{CC1C579A-880A-4825-A5D4-CEFDB9C83F41} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{D3057EAE-D505-471C-974F-242C3E3BCFBC} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{D33536EF-8568-4B9E-88CE-F195C42C0D23} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{D3A19020-7265-4BD7-9F82-20338E7D5FFC} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{D7C8DCDE-26C4-4FCC-9122-5D888AEF8977} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{D9BCCEF7-FFB7-463E-BEC7-283EBCC156ED} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{DA99400B-17CC-4168-9E92-3354603D0BD0} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{DDC0D971-FA3E-4C13-8A86-B53C7E87E0C6} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{DFD9C42B-DD62-48F1-AF2F-784D7A829D29} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{E23CABA0-BE0E-48F6-83B6-A7269C3FA771} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{E3E0292C-D6B9-4439-BDD7-089B28A0FAA0} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{E518AA13-7B7E-4B98-8045-34CECAC39DC5} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{E673C141-2757-4FCD-8372-D050BE6C3CA8} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{EB90D77F-EF20-4C88-9073-771B90A87C17} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{ED07F8A3-1731-4DE7-B0F4-087DFE95779B} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{EF9B8048-4BE0-41BC-AB20-5E9199C906AF} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{F6D7B8E3-904B-4607-B1F1-2C36FF4EFE0A} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{F7CB197C-A79B-43B8-90C8-C9BBC2D16060} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{F7F35F70-5FEE-4970-A69A-1420D6171C63} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\{F80CBC3D-D04A-40E5-B0E3-95FDB68D12A1} (Empty Folder) Successfully deleted: C:\Users\USER\AppData\Local\crashrpt (Folder) Successfully deleted: C:\Users\USER\AppData\Roaming\productdata (Folder) Successfully deleted: C:\windows\system32\Tasks\Driver Booster SkipUAC (Flow) (Task) Successfully deleted: C:\windows\system32\Tasks\Driver Booster SkipUAC (USER) (Task) Successfully deleted: C:\windows\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} (Task) Successfully deleted: C:\windows\system32\Tasks\update-S-1-5-21-141516546-3962441090-1545573439-1001 (Task) Successfully deleted: C:\windows\system32\Tasks\update-sys (Task) Successfully deleted: C:\windows\Tasks\update-S-1-5-21-141516546-3962441090-1545573439-1001.job (Task) Successfully deleted: C:\windows\Tasks\update-sys.job (Task) Successfully deleted: C:\windows\wininit.ini (File) Successfully deleted: C:\Users\USER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DQ8OT332 (Temporary Internet Files Folder) Successfully deleted: C:\Users\USER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TYCQXA5S (Temporary Internet Files Folder) Successfully deleted: C:\Users\USER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UJIO0KZG (Temporary Internet Files Folder) Successfully deleted: C:\Users\USER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YJFGF07J (Temporary Internet Files Folder) Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DQ8OT332 (Temporary Internet Files Folder) Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TYCQXA5S (Temporary Internet Files Folder) Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UJIO0KZG (Temporary Internet Files Folder) Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YJFGF07J (Temporary Internet Files Folder) Successfully deleted: C:\windows\SysWOW64\sho6B63.tmp (File) Successfully deleted: C:\windows\SysWOW64\sho72AF.tmp (File) Deleted the following from C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\6hm0pmhk.default\prefs.js user_pref(extensions.xpiState, {\app-profile\:{\ascsurfingprotection@iobit.com\:{\d\:\C:\\\\Users\\\\USER\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\ Registry: 2 Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\Search\\SearchAssistant (Registry Value) Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7} (Registry Key) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on ‰¬¨ 26/02/2017 at 20:09:42,94 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
# AdwCleaner v6.043 - *Logfile created 26/02/2017 *at 19:56:25 # *Updated on 27/01/2017 by Malwarebytes # *Database : 2017-02-24.1 [*Server] # *Operating System : Windows 7 Ultimate Service Pack 1 (X64) # *Username : Flow - DC-PC # *Running from : C:\Users\USER\Desktop\AdwCleaner.exe # *Mode: Clean # *Support : https://www.malwarebytes.com/support ***** [ *Services ] ***** ***** [ *Folders ] ***** ***** [ *Files ] ***** [-] *File deleted: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.cmptch.com_0.localstorage [-] *File deleted: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.cmptch.com_0.localstorage-journal [#] *File deleted: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.cmptch.com_0.localstorage [#] *File deleted: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.cmptch.com_0.localstorage-journal ***** [ DLL ] ***** ***** [ WMI ] ***** ***** [ *Shortcuts ] ***** ***** [ *Scheduled Tasks ] ***** ***** [ *Registry ] ***** [-] *Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{C69276F0-9BC1-404F-8566-FCB14D0ED4B8} ***** [ *Browsers ] ***** ************************* :: *"Tracing" keys deleted :: *Winsock settings cleared ************************* C:\AdwCleaner\AdwCleaner[C0].txt - [1407 *Bytes] - [26/02/2017 19:56:25] C:\AdwCleaner\AdwCleaner[S0].txt - [1716 *Bytes] - [26/02/2017 19:55:31] ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1555 *Bytes] ##########
-
FRST.txt Addition.txt
-
I got the same blank cmd once again
-
Thanks for your help, after restarting my pc the blank cmd does not show!
-
Fix result of Farbar Recovery Scan Tool (x64) Version: 12-02-2017 Ran by Flow (12-02-2017 23:03:28) Run:3 Running from C:\Users\USER\Desktop Loaded Profiles: Flow (Available Profiles: Flow & Administrator) Boot Mode: Normal ============================================== fixlist content: ***************** Start HKLM\...\Run: [] => [X] HKLM\...\Run: [¨¦§ Ά¦γ] => [X] ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => -> No File End ***************** HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => value not found. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\¨¦§ Ά¦γ => value not found. HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast => key removed successfully HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found. HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\GDriveSharedOverlay => key removed successfully HKCR\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => key not found. ==== End of Fixlog 23:03:28 ====
-
There is no (¨¦§ Ά¦γ) listed there. Only (Προεπιλογή) in Greek which means Default
-
Fix result of Farbar Recovery Scan Tool (x64) Version: 12-02-2017 Ran by Flow (12-02-2017 21:10:25) Run:2 Running from C:\Users\USER\Desktop Loaded Profiles: Flow (Available Profiles: Flow & Administrator) Boot Mode: Normal ============================================== fixlist content: ***************** Start Reg: reg query HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Reg: reg query HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run End ***************** ========= reg query HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ========= HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run CCleaner Monitoring REG_SZ "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR ========= End of Reg: ========= ========= reg query HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run ========= HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run (¨¦§ Ά¦γ) REG_SZ HSON REG_EXPAND_SZ %ProgramFiles%\TOSHIBA\TBS\HSON.exe RtHDVBg REG_SZ C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3 TosSENotify REG_EXPAND_SZ C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe HDMICtrlMan REG_EXPAND_SZ %ProgramFiles%\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe TosWaitSrv REG_EXPAND_SZ %ProgramFiles%\TOSHIBA\TPHM\TosWaitSrv.exe TosVolRegulator REG_SZ C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe Toshiba Registration REG_SZ C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe RtHDVCpl REG_SZ C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s ShadowPlay REG_SZ "C:\windows\system32\rundll32.exe" C:\windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart ========= End of Reg: ========= ==== End of Fixlog 21:10:25 ====
-
Caption=TOPI.EXE Command=C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STARTUP Location=HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Caption=Sidebar Command=%ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun Location=HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Caption=TOPI.EXE Command=C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STARTUP Location=HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Caption=Sidebar Command=%ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun Location=HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Caption=TOPI.EXE Command=C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STARTUP Location=HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Caption=ZenMate Command=ZenMate.bat Location=Startup Caption=CCleaner Monitoring Command="C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR Location=HKU\S-1-5-21-141516546-3962441090-1545573439-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Caption=TOPI.EXE Command=C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STARTUP Location=HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Caption= Command= Location=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Caption=HSON Command=%ProgramFiles%\TOSHIBA\TBS\HSON.exe Location=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Caption=RtHDVBg Command=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3 Location=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Caption=TosSENotify Command=C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe Location=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Caption=HDMICtrlMan Command=%ProgramFiles%\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe Location=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Caption=TosWaitSrv Command=%ProgramFiles%\TOSHIBA\TPHM\TosWaitSrv.exe Location=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Caption=TosVolRegulator Command=C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe Location=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Caption=Toshiba Registration Command=C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe Location=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Caption=RtHDVCpl Command=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s Location=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Caption=ShadowPlay Command="C:\windows\system32\rundll32.exe" C:\windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart Location=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run