Collector

October 21, 2021

4 hours ago, ZarokNion said:

I just tried to download the malwarebytes offline installer and kaspersky antivirus jumped me saying it was a virus.
here it is more detailed:
Event: A malicious object was detected.
User: DESKTOP-RHJ5VQ4\ZarokNion
User type: Active user
Application name: chrome.exe
Application path: C:\Program Files\Google\Chrome\Application.
Component: File Anti-Virus
Result description: Detected
Type: Trojan
Name: HEUR:Trojan.Win32.DllHijacker.gen
Accuracy: Partial
Threat level: High
Object type: File
Object Name: data0002.res

Object Patch:C:\Users\ZarokNion\Downloads\Unconfirmed 689164.crdownload

MD5: 80C2B6D87BE50EAA288C2981A85BA3E5
Reason: Expert analysis
Databases Release Date: Today, 10/20/2021 05:11:00 p. m.

Hah, I remember this from when I first got this! But you used chrome instead of firefox that I did and I even used sandboxie too as an extra layer! Looks like it's not an isolated issue after all since I'm not the only one who had it happened to. Anyways, it looks like Kaspersky hasn't fixed their whitelist yet or they whitelist by hash and your MD5 hash is different to mine which means they'll need to add in the new hash to their whitelist....

I don't believe I got told what was causing their scanner to pick it up as a trojan....just got told "fake positive, deal with it."

August 24, 2021

On 8/20/2021 at 12:32 AM, AdvancedSetup said:

It's not a matter of downgrade as Kaspersky keeps updating as well and being more restrictive in efforts to try to detect and prevent malware.

https://www.malwarebytes.com/antivirus

I see, but malwarebytes antimalware has always been a complementary suite to any antivirus programs. Antimalware is suppose to seek out non-viruses malware where as antivirus is suppose to seek non-malware viruses or has the definitions changed over the years? It never specified version 1 or 2 (Only 3 and 4, otherwise why stop at 3? Could have went 1.x - 4.x instead of 3.x - 4.x) of antimalware so I would presume it's safe to run the older versions of the programs alongside kaspersky....

August 19, 2021

15 hours ago, AdvancedSetup said:

Yes, at this point you probably need to decide which antivirus you want to use. Either Kaspersky or Malwarebytes as it has become rather difficult to prevent conflicts between the two programs.

I thought malwarebytes was just antimalware with no antivirus portion that antivirus programs do? so basically complements it, has malwarebytes now becoming a full blown antivirus as well as an antimalware program at the sametime? I'm guessing if I want to keep both whilst still being compatible with each other, I'll have to downgrade to version 1 or 2 of malwarebytes?

August 18, 2021

On 6/24/2021 at 2:20 PM, AdvancedSetup said:

Okay, let me get fresh, new FRST logs then @Collector

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system.
You can check here if you're not sure if your computer is 32-bit or 64-bit

Double-click to run it. When the tool opens click Yes to disclaimer.

Press the Scan button.

It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.

The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply as well.

Thank you

Hi,

Sorry for not getting back to you lot, been busy and now thoroughly going through my inbox that I haven't checked in the last two months!

Ok, so I wanted to report this:

958166209_mbamservice.exeramuse.png.8dba1d122ab197ec4a5d74b3cbf2755b.png

I got this after a few days so this issue might be caused due to some incompatibility issue between Malwarebytes and Kaspersky.

Anyways, here's the FRST file you requested:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14-08-2021
Ran by Growlithe (ATTENTION: The user is not administrator) on FIRETYPE (GIGABYTE P35V3) (18-08-2021 21:07:26)
Running from C:\Users\Growlithe\Downloads
Loaded Profiles: Growlithe
Platform: Windows 10 Pro Version 20H2 19042.1165 (X64) Language: English (United States)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Program Files\GIGABYTE\SmartManagerV3\SystemTray.exe
(Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(Adobe Inc. -> Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 2017\Acrobat\acrotray.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(Binary Fortress Software Ltd -> Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
(Binary Fortress Software Ltd -> Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookApp32.exe
(Binary Fortress Software Ltd -> Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookApp64.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\iCUE.exe
(d7xTech, Inc -> d7x Technology LLC) C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventNotification.exe
(Dolby Laboratories, Inc. -> Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Express Vpn LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPNNotificationService.exe
(GIGABYTE TECHNOLOGY CO., LTD.) [File not signed] C:\Program Files\GIGABYTE\SmartManagerV3\OSD\GBOSDV2.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Invincea, Inc. -> Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SandboxieCrypto.exe <2>
(Invincea, Inc. -> Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SandboxieDcomLaunch.exe <2>
(Invincea, Inc. -> Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SandboxieRpcSs.exe <2>
(Invincea, Inc. -> Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
(Invincea, Inc. -> Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe <2>
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avpui.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.3\ksdeui.exe
(Logitech -> Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Sysinternals - www.sysinternals.com) C:\ProcessExplorer\procexp64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SnippingTool.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox 52.9 ESR\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <20>
(Nazarenko Denys Leonidovich -> OrdinarySoft) C:\Program Files\Start Menu X\StartMenuX.exe
(Node.js Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Open Media LLC -> ) E:\[bla bla blah]\4kvideodownloader 4.17.1\crashpad_handler.exe
(Open Media LLC -> Open Media LLC) E:\[bla bla blah]\4kvideodownloader 4.17.1\4kvideodownloader.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(QFX Software Corporation -> QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe
(QFX Software Corporation -> QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Tonec Inc. -> Internet Download Manager, Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMIntegrator64.exe
(Tonec Inc. -> Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe <2>
(Valve -> Valve Corporation) B:\Steam2019\bin\cef\cef.win7x64\steamwebhelper.exe <8>
(Valve -> Valve Corporation) B:\Steam2019\steam.exe
Failed to access process -> AdobeUpdateService.exe
Failed to access process -> armsvc.exe
Failed to access process -> avp.exe
Failed to access process -> conhost.exe
Failed to access process -> conhost.exe
Failed to access process -> conhost.exe
Failed to access process -> conhost.exe
Failed to access process -> Corsair.Service.CpuIdRemote64.exe
Failed to access process -> Corsair.Service.DisplayAdapter.exe
Failed to access process -> Corsair.Service.exe
Failed to access process -> CryptoPreventMonSvc.exe
Failed to access process -> csrss.exe
Failed to access process -> csrss.exe
Failed to access process -> dasHost.exe
Failed to access process -> DisplayFusionService.exe
Failed to access process -> dllhost.exe
Failed to access process -> dwm.exe
Failed to access process -> ElevateService.exe
Failed to access process -> ETDService.exe
Failed to access process -> EvtEng.exe
Failed to access process -> expressvpnd.exe
Failed to access process -> fontdrvhost.exe
Failed to access process -> fontdrvhost.exe
Failed to access process -> GBSMV2.exe
Failed to access process -> ibtsiva.exe
Failed to access process -> igfxCUIService.exe
Failed to access process -> isa.exe
Failed to access process -> jhi_service.exe
Failed to access process -> ksde.exe
Failed to access process -> LMS.exe
Failed to access process -> lsass.exe
Failed to access process -> MBAMService.exe
Failed to access process -> nssm.exe
Failed to access process -> NVDisplay.Container.exe
Failed to access process -> NVDisplay.Container.exe
Failed to access process -> OfficeClickToRun.exe
Failed to access process -> openvpnserv.exe
Failed to access process -> PresentationFontCache.exe
Failed to access process -> PsiService_2.exe
Failed to access process -> PsiService_2.exe
Failed to access process -> RegSrvc.exe
Failed to access process -> SASCore64.exe
Failed to access process -> SbieSvc.exe
Failed to access process -> SbieSvc.exe
Failed to access process -> SearchFilterHost.exe
Failed to access process -> SearchIndexer.exe
Failed to access process -> SearchProtocolHost.exe
Failed to access process -> SecurityHealthService.exe
Failed to access process -> services.exe
Failed to access process -> SgrmBroker.exe
Failed to access process -> smss.exe
Failed to access process -> spoolsv.exe
Failed to access process -> SteamService.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> TeraCopyService.exe
Failed to access process -> unsecapp.exe
Failed to access process -> unsecapp.exe
Failed to access process -> WindscribeService.exe
Failed to access process -> wininit.exe
Failed to access process -> winlogon.exe
Failed to access process -> wlanext.exe
Failed to access process -> WmiPrvSE.exe
Failed to access process -> WmiPrvSE.exe
Failed to access process -> WmiPrvSE.exe
Failed to access process -> WUDFHost.exe
Failed to access process -> WUDFHost.exe
Failed to access process -> ZeroConfigService.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16409496 2015-11-06] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1407744 2015-11-06] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3347688 2015-06-26] (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2787264 2016-01-23] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2849872 2019-05-04] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech -> Logitech Inc.)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3312208 2019-05-04] (Open Source Developer, Dominik Reichl -> Dominik Reichl)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [KeyScrambler] => C:\Program Files (x86)\KeyScrambler\keyscrambler.exe [516240 2018-09-12] (QFX Software Corporation -> QFX Software Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [File not signed]
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2042424 2020-03-16] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [CORSAIR iCUE Software] => C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\iCUE Launcher.exe [405032 2019-04-22] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [5576512 2019-06-04] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 2017\Acrobat\Acrotray.exe [1871408 2019-05-01] (Adobe Inc. -> Adobe Systems Inc.)
HKLM-x32\...\Run: [ExpressVPNNotificationService] => C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPNNotificationServiceStarter.exe [466312 2020-06-21] (Express Vpn LLC -> ExpressVPN)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706288 2021-04-09] (Oracle America, Inc. -> Oracle Corporation)
HKLM Group Policy restriction on software: *.png.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.ws* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: extratools.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\bbv.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.js <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\MS\Def*nder.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.job <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.png.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.png.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.application <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.com <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.inx <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.pcd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.arj <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.isp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.js <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\dsadee.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.js <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\x64.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.url <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.p <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.url <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.application <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.ns <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.msp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.jse <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.p <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.ade <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.job <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: msoyasdx.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.png.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.klx <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.7 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.psc* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.msp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.isu <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.phps <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.png.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.7 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.png.vbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.bas <==== ATTENTION
HKLM Group Policy restriction on software: lsassvrtdbks.exe <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.phps <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.p <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.job <==== ATTENTION
HKLM Group Policy restriction on software: %systemdrive%\netpass.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.p <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.arj <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.cmd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.p <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.shb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.job <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.jar <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.vbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.lua <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.msc <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.url <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.scf <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.chm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.msp <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.com <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.shs <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.chm <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.7 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.url <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.msi <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.hta <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.shb <==== ATTENTION
HKLM Group Policy restriction on software: %systemdrive%\mount.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.mdb <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.inx <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.scsb <==== ATTENTION
HKLM Group Policy restriction on software: kek.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.isu <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.frm <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\dbddbccdf.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.application <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.scr <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.png.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.url <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.crt <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.png.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.psc* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.application <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.7 <==== ATTENTION
HKLM Group Policy restriction on software: *.png.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.png.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.url <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.pif <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.7 <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.paf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.p <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.pys <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.png.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.png.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.psc* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.tcls <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: vssadmin.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.jse <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.shb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.png.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.png.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.js <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.gadget <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.vb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.com <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.com <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.p <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.jse <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.p <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.jar <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.bin <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.url <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.mod <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.scsb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.paf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %systemdrive%\dcrypt.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.url <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.png.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.exe <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.job <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.adp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.7 <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.7 <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.js <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\x86.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\software.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.inf <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.png.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.job <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.adp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.url <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\processor.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.mde <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.png.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.sct <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.7 <==== ATTENTION
HKLM Group Policy restriction on software: *.png.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.p <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.arj <==== ATTENTION
HKLM Group Policy restriction on software: *.png.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.js <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.scf <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.frm <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.url <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.mod <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.p <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.job <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.png.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.pys <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.ns <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.url <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.phps <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.klx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.xml <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.chm <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.phps <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.mst <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.jar <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.p <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.sct <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.url <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.xml <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\wrmXNhWbacF.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.psc* <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\arra.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.png.application <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.p <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.com <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.msi <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.p <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.png.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.sct <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.p <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.arj <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.psc* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.frm <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.p <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\cryptohost.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.application <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.com <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.p <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.rx* <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.p <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.jar <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.p <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.adp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.ins <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.p <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.7 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.p <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.mdb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.frm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.png.7 <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.url <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.pys <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.92bs <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: PDFBewerbungsmappe.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.frm <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.com <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.arj <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.mod <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.isu <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.pls <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.application <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.scr <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.hta <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.msp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.shs <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.job <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.reg <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.rex <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.frm <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.arj <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.vbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.png.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.js <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.shb <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.p <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.chm <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.com <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.js <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.com <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.pys <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.url <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.ws* <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.isu <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.psc* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.reg <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\Pokemon\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.com <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.shs <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.jse <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.92bs <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.ins <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.ins <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: lsassw86s.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.js <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.phps <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.lua <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.msp <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.reg <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.png.paf <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.7 <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.js <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.arj <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\Ponmsiyyks.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\windrv.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.job <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.chm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.scr <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.scf <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.p <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.jse <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.p <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.application <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.shb <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.isp <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.png.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.com <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.png.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.msc <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.7 <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.7 <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.gadget <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.inf <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.inx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.p <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.png.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.application <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.url <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.phps <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.url <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.jar <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.application <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.msc <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.arj <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.chm <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.inx <==== ATTENTION
HKLM Group Policy restriction on software: scsvserv.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.png.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.p <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.arj <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %systemdrive%\*\svchost.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.p <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.msc <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.inx <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\drvpci.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.com <==== ATTENTION
HKLM Group Policy restriction on software: %systemdrive%\Mount.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.jar <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.mdb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.png.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: cipher.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.gadget <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.png.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.p <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.arj <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.bas <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*\svchost.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.p <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.com <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.vb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.shb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.p <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.p <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.job <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.png.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.mod <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.ins <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\new.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.js <==== ATTENTION
HKLM Group Policy restriction on software: 7_Sp.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.js <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.vb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.png.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.msp <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: pokemongo.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.bin <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.msh* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.scf <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\svchost.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.job <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.msi <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.js <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\uTorrent.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.bas <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.ws* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.bas <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.mod <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.com <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.com <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.scr <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.7 <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.com <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.mod <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: deleteMyProgram.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.shs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %programfiles(x86)%\*\svchost.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.7 <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.arj <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.arj <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.png.com <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.msc <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.phps <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.job <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.msc <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.js <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.png.p <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.job <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.scr <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.com <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.adp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.bin <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.url <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.48s <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.job <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.48s <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.reg <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.png.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.crt <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.png.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.chm <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.ws* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.png.msh* <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.js <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.arj <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.paf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.png.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.png.url <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.arj <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.rbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.png.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.48s <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.png.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.png.jar <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.bas <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.crt <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.7 <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.application <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.job <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.mdb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.job <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\Calipso\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.7 <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.com <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.p <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.jar <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.com <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.png.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.com <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.png.rx* <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.vbe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.url <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.png.crt <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\IKvtxoiPx.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.pcd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.png.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.vb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.png.psc* <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.png.xcs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.arj <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.klx <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.arj <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.application <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.7 <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.exe <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.p <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.msc <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\clean.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.psc* <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.7 <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.jar <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\freegaza_israeli_killers.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.bat <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.png.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.js <==== ATTENTION
HKLM Group Policy restriction on software: syskey.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.com <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.png.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.scsb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.png.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.u3p <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.psc* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.jse <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.pls <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.mdb <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.png.arj <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.com <==== ATTENTION
HKLM Group Policy restriction on software: *.png.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.isu <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.url <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.ns <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.shs <==== ATTENTION
HKLM Group Policy restriction on software: %programfiles%\*\svchost.exe <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.js <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\rkcl\ldr.exe <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.job <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.inx <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Steg\steg.exe <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\imgdesktop.exe <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.application <==== ATTENTION
HKLM Group Policy restriction on software: bcdedit.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.arj <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.tcls <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.com <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.application <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.png.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.psc* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.com <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.shb <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.mst <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.png.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.png.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.msh* <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.job <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.com <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.png.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.isu <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\windefrag.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.png.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.png.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.png.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.isu <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.crt <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.png.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: *.png.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.png.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.msp <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.shs <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.pif <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.url <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.phps <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.js <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.isu <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.48s <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.png.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.xml <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.phps <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.application <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.isp <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\RegAsm.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.paf <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: surprise.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.pcd <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.p <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\rkcl\rkcl.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.mst <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.chm <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.jar <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.p <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.7 <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.paf <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.p <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.jar <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.isu <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.psc* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.arj <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.vb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\delback.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.application <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.lua <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\IEUpdate\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.png.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.rbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.7 <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.cpl <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.png.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.png.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.p <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.bat <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.arj <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.sct <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.application <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.isp <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.7 <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.com <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.7 <==== ATTENTION
HKLM Group Policy restriction on software: *.png.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.gadget <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.com <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.job <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.arj <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.ws* <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.isu <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.url <==== ATTENTION
HKLM Group Policy restriction on software: *.png.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.application <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.png.job <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.scf <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.com <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.job <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.p <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.job <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.xcs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.p <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.chm <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.application <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.vb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.mst <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.png.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.48s <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.com <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.msc <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.url <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.klx <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.rbs <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.url <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.scr <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.frm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.jar <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.isu <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: %temp%\winpnp.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.shb <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.ns <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.ade <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.pif <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.rex <==== ATTENTION
HKLM Group Policy restriction on software: %systemdrive%\dccon.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.scf <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.pls <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.inx <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.msi <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.js <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.7 <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.xml <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.msh* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.pls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.scr <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.ws* <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.pys <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.nsf <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.arj <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.isp <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.rx* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.scr <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.jar <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.scf <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.msh* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.reg <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.bin <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.application <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.bin <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.application <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.7 <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.scsb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.js <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.bas <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.p <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.hlp <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.mde <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.lua <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.url <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.bin <==== ATTENTION
HKLM Group Policy restriction on software: %systemdrive%\Network Prosoft\* <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.js <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.pif <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.nsf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.vb <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.application <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.adp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.nsf <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.msi <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.mst <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: commerc.exe <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\random\random.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.msp <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Windows\csrss.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.isp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: magic.exe <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.pls <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\svchost.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.rex <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.arj <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.png.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.rgs <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\{213D7F33-4942-1C20-3D56=8-1A0B31CDFFF3}.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.js <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.sct <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.lnk <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.ocx <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.application <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.url <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.scf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.chm <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.inx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.xcs <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.reg <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.mod <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.job <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.tcls <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.vb <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.com <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.mdb <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.mst <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.paf <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.bin <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.adp <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.ade <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.frm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.p <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.msh* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pls <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.cpl <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.msh* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.scr <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.bat <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.arj <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.wwb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.xml <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.com <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.jar <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\rar*\*.rgs <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.com <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.hlp <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.job <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.bat <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.mdb <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.bat <==== ATTENTION
HKLM Group Policy restriction on software: %localappdata%\MS\app_roaming.exe <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.chm <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.docx.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.bas <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.pls <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.klx <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.hlp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.tcls <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.url <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.vbe <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.rgs <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.msp <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.klx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.48s <==== ATTENTION
HKLM Group Policy restriction on software: *.txt.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.gadget <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.hta <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.hta <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.vbscript <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.rar.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.cpl <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.klx <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.48s <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.pif <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.url <==== ATTENTION
HKLM Group Policy restriction on software: *.png.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.msi <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.application <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.vbs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.pcd <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.url <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.application <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.paf <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.scr <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: *.jpg.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.pls <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.chm <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.scsb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.jse <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.scsb <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.hta <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.ins <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.psc* <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.sct <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.xml <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.vbe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.com <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.hta <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.u3p <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.msp <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.bat <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.com <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.crt <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.xml <==== ATTENTION
HKLM Group Policy restriction on software: WifiHack.exe <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.isu <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ade <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.xlsx.js <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.ps1* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.msh* <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.xml <==== ATTENTION
HKLM Group Policy restriction on software: *.wav.mod <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.inf <==== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.bmp.rex <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.vb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.application <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.lua <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.92bs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.msc <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\*.zip\*.mde <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.crt <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.pys <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.shb <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.exe <==== ATTENTION
HKLM Group Policy restriction on software: *.pdf.sct <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.js <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.job <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.phps <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.cfxb <==== ATTENTION
HKLM Group Policy restriction on software: *.wmv.u3p <==== ATTENTION
HKLM Group Policy restriction on software: *.ppt.rbs <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.ins <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.92bs <==== ATTENTION
HKLM Group Policy restriction on software: *.xls.u3p <==== ATTENTION
HKLM Group Policy restriction on software: C:\Users\Public\*.pys <==== ATTENTION
HKLM Group Policy restriction on software: *.zip.psc* <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.vbs <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.cmd <==== ATTENTION
HKLM Group Policy restriction on software: *.mp4.application <==== ATTENTION
HKLM Group Policy restriction on software: *.rtf.nsf <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\7z*\*.shs <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.frm <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.gadget <==== ATTENTION
HKLM Group Policy restriction on software: *.pptx.ocx <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\Temp\wz*\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.png.adp <==== ATTENTION
HKLM Group Policy restriction on software: *.7z.chm <==== ATTENTION
HKLM Group Policy restriction on software: *.wma.url <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.isp <==== ATTENTION
HKLM Group Policy restriction on software: *.pub.arj <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ps2* <==== ATTENTION
HKLM Group Policy restriction on software: *.mp3.exe <==== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*\*.wwb <==== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ns <==== ATTENTION
HKLM Group Policy restriction on software: *.avi.com <==== ATTENTION
HKLM Group Policy restriction on software: *.divx.js <==== ATTENTION
HKLM Group Policy restriction on software: C:\WINDOWS\Temp\*.inf <==== ATTENTION
HKLM Group Policy restriction on software: *.doc.msp <==== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.url <==== ATTENTION
HKLM Group Policy restriction on software: *\u202e*.job <==== ATTENTION
HKLM Group Policy restriction on software: *.jpeg.hlp <==== ATTENTION
HKLM Group Policy restriction on software: *.gif.hta <==== ATTENTION
HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\Run: [StartMenuX] => C:\Program Files\Start Menu X\StartMenuX.exe [8962408 2019-04-24] (Nazarenko Denys Leonidovich -> OrdinarySoft)
HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [3672920 2020-02-21] (Invincea, Inc. -> Sandboxie Holdings, LLC)
HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [5708192 2021-07-17] (Tonec Inc. -> Tonec Inc.)
HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\Run: [DisplayFusion] => C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [13443008 2021-05-03] (Binary Fortress Software Ltd -> Binary Fortress Software)
HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat 2017\Acrobat\AdobeCollabSync.exe [886832 2019-05-01] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\Run: [CCXProcess] => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [648328 2020-03-09] (Adobe Inc. -> Adobe Systems Incorporated)
HKLM\...\Windows x64\Print Processors\Canon MG6200 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAU.DLL [30208 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [65096 2019-05-01] (Adobe Systems, Incorporated -> Adobe Systems Inc)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG6200 series: C:\Windows\system32\CNMLMAU.DLL [385024 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG6200 series XPS: C:\Windows\system32\CNMXLMAU.DLL [385024 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJNP Port: C:\Windows\system32\CNMN6PPM.DLL [359936 2012-06-14] (CANON INC.) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{E5931AF4-2A8F-48A5-AFC8-0E8A268358A0}] -> reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /f
HKLM\Software\Microsoft\Active Setup\Installed Components: [{E5931AF4-2A8F-48A5-AFC8-CE9B79C4B19D}] -> reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /f
IFEO\taskmgr.exe: [Debugger] "C:\PROCESSEXPLORER\PROCEXP64.EXE"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CryptoPrevent QuickAccess.lnk [2021-06-24]
ShortcutTarget: CryptoPrevent QuickAccess.lnk -> C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventNotification.exe (d7xTech, Inc -> d7x Technology LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GBOSDV3.lnk [2019-04-25]
ShortcutTarget: GBOSDV3.lnk -> C:\Program Files\GIGABYTE\SmartManagerV3\OSD\GBOSDV2.exe (GIGABYTE TECHNOLOGY CO., LTD.) [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SystemTray.lnk [2019-04-25]
ShortcutTarget: SystemTray.lnk -> C:\Program Files\GIGABYTE\SmartManagerV3\SystemTray.exe () [File not signed]
GroupPolicy: Restriction - Edge <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => 
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => 
Task: C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task 2c0cd5e3-2f58-4106-a979-1754026e1974.job => 
Task: C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task e257f42d-14fc-431e-8b04-e865d2668b23.job => 

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{09a4f245-1733-403f-b73c-e85c26c3503a}: [NameServer] 1.1.1.1,8.8.8.8
Tcpip\..\Interfaces\{09a4f245-1733-403f-b73c-e85c26c3503a}: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{2b177edf-0511-4759-bddb-c78995ca58c8}: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{76ec6cb8-ff32-406c-a6ae-01285a1f7e3e}: [DhcpNameServer] 10.17.0.1

Edge: 
=======
DownloadDir: C:\Users\Growlithe\Downloads
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> EdgeExtension_TonecIncIDMIntegrationModule_e7b5mm5d3r6v2 => C:\Program Files\WindowsApps\TonecInc.IDMIntegrationModule_6.36.5.0_neutral__e7b5mm5d3r6v2 [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge Profile: C:\Users\Growlithe\AppData\Local\Microsoft\Edge\User Data\Default [2021-08-17]
Edge Extension: (Kaspersky Protection) - C:\Users\Growlithe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm [2021-03-06]
Edge Extension: (IDM Integration Module) - C:\Users\Growlithe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\llbjbkhnmlidjebalopleeepgdfgcpec [2021-03-22]
Edge HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm]
Edge HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [llbjbkhnmlidjebalopleeepgdfgcpec] - C:\Program Files (x86)\Internet Download Manager\IDMEdgeExt.crx [2021-07-17]
Edge HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2021-07-17]

FireFox:
========
FF DefaultProfile: ylyfgl51.FF2.1
FF ProfilePath: C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1 [2021-08-18]
FF Session Restore: Mozilla\Firefox\Profiles\ylyfgl51.FF2.1 -> is enabled.
FF Extension: (Translate Now) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\@translatenow.xpi [2020-05-24]
FF Extension: (Back/Forward History Tweaks) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\backforwardhistorytweaks@vano.xpi [2019-06-19] [Legacy] [not signed]
FF Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\firefox@ghostery.com.xpi [2021-02-28]
FF Extension: (HTTPS Everywhere) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\https-everywhere@eff.org.xpi [2021-02-28]
FF Extension: (Swift Selection Search) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\jid1-KdTtiCj6wxVAFA@jetpack.xpi [2019-08-12]
FF Extension: (Privacy Badger) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\jid1-MnnxcxisBPnSXQ-eff@jetpack.xpi [2019-06-19] [UpdateUrl:hxxps://www.eff.org/files/privacy-badger-updates.json]
FF Extension: (Dark Background and Light Text) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\jid1-QoFqdK4qzUfGWQ@jetpack.xpi [2019-06-19]
FF Extension: (Enhanced Steam) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\jid1-YdiFiTEkQgInxA@jetpack.xpi [2019-06-19]
FF Extension: (Decentraleyes) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\legacy@decentraleyes.org.xpi [2019-06-19] [Legacy]
FF Extension: (IDM integration) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\mozilla_cc2@internetdownloadmanager.com [2019-07-01] [Legacy]
FF Extension: (Nimbus Screen Capture: Screenshots, Annotate) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\nimbusscreencaptureff@everhelper.me.xpi [2021-02-28]
FF Extension: (YouTube Plus) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\particle@particlecore.github.io.xpi [2019-06-19]
FF Extension: (Tab Counter) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\tab-counter@daawesomep.addons.mozilla.org.xpi [2019-06-19]
FF Extension: (Tab Session Manager) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\Tab-Session-Manager@sienori.xpi [2021-02-28]
FF Extension: (Tab Counter) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\tabcounter@morac.xpi [2019-06-19] [Legacy]
FF Extension: (uBlock Origin) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\uBlock0@raymondhill.net.xpi [2019-06-19]
FF Extension: (Augmented Steam) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\{1be309c5-3e4f-4b99-927d-bb500eb4fa88}.xpi [2020-05-24]
FF Extension: (Reverse image search using various search engines, such as Google, Bing, Yandex, Baidu and TinEye.) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\{2e5ff8c8-32fe-46d0-9fc8-6b8986621f3c}.xpi [2019-09-04]
FF Extension: (NoScript) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2019-06-19] [Legacy] [not signed]
FF Extension: (Web of Trust) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}.xpi [2021-02-28]
FF Extension: (Font Finder) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\{a658a273-612e-489e-b4f1-5344e672f4f5}.xpi [2021-02-28]
FF Extension: (Video DownloadHelper) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2020-05-24]
FF Extension: (Search Preview for Steam) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\{d400d670-e438-49e6-9788-c9ae0d37158b}.xpi [2019-06-19]
FF Extension: (Greasemonkey) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2019-06-19]
FF Extension: (YouTube Video and Audio Downloader (Dev Edt.)) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\ylyfgl51.FF2.1\Extensions\{f73df109-8fb4-453e-8373-f59e61ca4da3}.xpi [2021-02-28]
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat 2017\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2019-05-01]
FF ProfilePath: C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default [2021-08-17]
FF Session Restore: Mozilla\Firefox\Profiles\xzjq73bl.default -> is enabled.
FF Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\Extensions\firefox@ghostery.com.xpi [2021-07-22]
FF Extension: (HTTPS Everywhere) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\Extensions\https-everywhere@eff.org.xpi [2021-07-22]
FF Extension: (Privacy Badger) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2021-07-22]
FF Extension: (Dark Background and Light Text) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\Extensions\jid1-QoFqdK4qzUfGWQ@jetpack.xpi [2019-11-08]
FF Extension: (Nimbus Screen Capture: Screenshots, Annotate) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\Extensions\nimbusscreencaptureff@everhelper.me.xpi [2020-11-05]
FF Extension: (YouTube Plus) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\Extensions\particle@particlecore.github.io.xpi [2019-04-26]
FF Extension: (Tab Counter) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\Extensions\tab-counter@daawesomep.addons.mozilla.org.xpi [2020-03-17]
FF Extension: (uBlock Origin) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\Extensions\uBlock0@raymondhill.net.xpi [2021-07-30]
FF Extension: (NoScript) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2021-07-22]
FF Extension: (Search Preview for Steam) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\Extensions\{d400d670-e438-49e6-9788-c9ae0d37158b}.xpi [2019-04-26]
FF Extension: (Greasemonkey) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2019-04-26]
FF Extension: (YouTube Video and Audio Downloader (Dev Edt.)) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\Extensions\{f73df109-8fb4-453e-8373-f59e61ca4da3}.xpi [2021-07-22]
FF Extension: (No Name) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\extensions\firefox-extension@steamdb.info.xpi [not found]
FF Extension: (No Name) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\extensions\jid1-MnnxcxisBPnSXQ-eff@jetpack.xpi [not found]
FF Extension: (No Name) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\extensions\jid1-s7swGsO2vJBPMv@jetpack.xpi [not found]
FF Extension: (No Name) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\extensions\jid1-YdiFiTEkQgInxA@jetpack.xpi [not found]
FF Extension: (No Name) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\extensions\trafficlight@bitdefender.com.xpi [not found]
FF Extension: (No Name) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\extensions\wayback_machine@mozilla.org.xpi [not found]
FF Extension: (No Name) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\extensions\{1be309c5-3e4f-4b99-927d-bb500eb4fa88}.xpi [not found]
FF Extension: (No Name) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}.xpi [not found]
FF Extension: (No Name) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\extensions\@translatenow.xpi [not found]
FF Extension: (No Name) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\extensions\jid1-KdTtiCj6wxVAFA@jetpack.xpi [not found]
FF Extension: (No Name) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\extensions\{2e5ff8c8-32fe-46d0-9fc8-6b8986621f3c}.xpi [not found]
FF Extension: (No Name) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\extensions\{5716fe2b-e871-4f3f-b8fc-b116971f152a}.xpi [not found]
FF Extension: (No Name) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\extensions\{7fc8ef53-24ec-4205-87a4-1e745953bb0d}.xpi [not found]
FF Extension: (No Name) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\extensions\{a658a273-612e-489e-b4f1-5344e672f4f5}.xpi [not found]
FF Extension: (No Name) - C:\Users\Growlithe\AppData\Roaming\Mozilla\Firefox\Profiles\xzjq73bl.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [not found]
FF Extension: (No Name) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\FFExt\light_plugin_firefox\addon.xpi [not found]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 2017\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF HKLM\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\FFExt\light_plugin_firefox\addon.xpi => not found
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 2017\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\FFExt\light_plugin_firefox\addon.xpi => not found
FF HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\Firefox\Extensions: [mozilla_cc3@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi
FF Extension: (IDM Integration Module) - C:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi [2021-03-06]
FF HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-20] [Legacy]
FF HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Growlithe\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\Growlithe\AppData\Roaming\IDM\idmmzcc5 [2019-04-26] [Legacy] [not signed]
FF HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Plugin: @java.com/DTPlugin,version=11.291.2 -> C:\Program Files\Java\jre1.8.0_291\bin\dtplugin\npDeployJava1.dll [2021-05-29] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.291.2 -> C:\Program Files\Java\jre1.8.0_291\bin\plugin2\npjp2.dll [2021-05-29] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-06-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2020-03-16] (Adobe Inc. -> Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll [2013-12-02] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2016-04-13] (CANON INC.) [File not signed]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-06-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-06-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [No File]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [No File]
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 2017\Acrobat\Air\nppdf32.dll [2019-05-01] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2020-03-16] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-02] (Adobe Systems Incorporated -> Adobe Systems)
StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox 52.9 ESR\firefox.exe
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2019-04-26] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2019-04-26] <==== ATTENTION

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2021-07-17]
CHR HKLM-x32\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2021-07-17]

Opera: 
=======
OPR Profile: C:\Users\Growlithe\AppData\Roaming\Opera Software\Opera Stable [2020-06-27]
OPR DownloadDir: C:\Users\Growlithe\Downloads\OPERA
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com.au/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472 2017-01-31] (SUPERAntiSpyware.com -> SUPERAntiSpyware.com)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [820280 2020-03-16] (Adobe Inc. -> Adobe Inc.)
S3 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3117648 2019-05-04] (Adobe Inc. -> Adobe Systems, Incorporated)
S3 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2888272 2019-05-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AVP21.3; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe [184768 2021-06-03] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9142128 2021-08-05] (Microsoft Corporation -> Microsoft Corporation)
R2 CorsairService; C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.exe [50728 2019-04-22] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
S3 CryptoPreventEmail; C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventMonSvc.exe [844816 2019-01-10] (d7xTech, Inc -> d7x Technology LLC)
R3 CryptoPreventFolderWatch; C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventMonSvc.exe [844816 2019-01-10] (d7xTech, Inc -> d7x Technology LLC)
R2 CryptoPreventMonSvc; C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventMonSvc.exe [844816 2019-01-10] (d7xTech, Inc -> d7x Technology LLC)
S3 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2019-06-04] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2019-06-04] (Dropbox, Inc -> Dropbox, Inc.)
S3 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [51024 2019-06-04] (Dropbox, Inc -> Dropbox, Inc.)
R2 DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [11309520 2021-05-03] (Binary Fortress Software Ltd -> Binary Fortress Software)
R2 ElevateService; C:\Program Files\GIGABYTE\SmartManagerV3\ElevateService.exe [19456 2015-09-22] () [File not signed]
R2 ExpressVPNService; C:\Program Files (x86)\ExpressVPN\bootstrap\amd64\nssm.exe [438664 2020-06-21] (Express Vpn LLC -> ExpressVPN)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [342456 2019-04-30] (FUTUREMARK INC -> Futuremark)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed]
S3 klvssbridge64_21.3; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\x64\vssbridge64.exe [479280 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R2 KSDE5.3; C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.3\ksde.exe [447104 2021-06-05] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 lmhosts; C:\WINDOWS\System32\svchost.exe [57360 2021-06-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 lmhosts; C:\WINDOWS\SysWOW64\svchost.exe [47016 2021-06-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7391408 2021-06-06] (Malwarebytes Inc -> Malwarebytes)
R2 NlaSvc; C:\WINDOWS\System32\svchost.exe [57360 2021-06-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NlaSvc; C:\WINDOWS\SysWOW64\svchost.exe [47016 2021-06-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 nsi; C:\WINDOWS\system32\svchost.exe [57360 2021-06-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 nsi; C:\WINDOWS\SysWOW64\svchost.exe [47016 2021-06-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [73592 2021-04-21] (OpenVPN Inc. -> The OpenVPN Project)
R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
S3 QFXUpdateService; C:\Program Files (x86)\KeyScrambler\x64\QFXUpdateService.exe [87184 2018-09-12] (QFX Software Corporation -> )
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [319320 2020-02-21] (Invincea, Inc. -> Sandboxie Holdings, LLC)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5394872 2021-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [File not signed]
R2 TeraCopyService.exe; C:\Program Files\TeraCopy\TeraCopyService.exe [114384 2021-04-22] (Code Sector -> )
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WindscribeService; C:\Program Files (x86)\Windscribe\WindscribeService.exe [493232 2019-01-19] (Windscribe Limited -> Windscribe Limited)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 BlueStacksDrv; C:\Program Files\BlueStacks\BstkDrv_bgp.sys [315976 2020-10-05] (Bluestack Systems, Inc -> Bluestack System Inc.)
R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [250032 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [45984 2020-07-06] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [21920 2020-07-06] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
S3 expressvpnsplittunnel; C:\Program Files (x86)\ExpressVPN\splittunnel\expressvpnsplittunnel.sys [28440 2020-06-21] (ExprsVPN LLC -> ExpressVPN)
R3 KeyScrambler; C:\WINDOWS\System32\drivers\keyscrambler.sys [243800 2018-09-08] (QFX Software Corporation -> QFX Software Corporation)
R1 klbackupdisk; C:\WINDOWS\system32\DRIVERS\klbackupdisk.sys [110336 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [211704 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [126216 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [41656 2021-02-19] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab)
R1 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [514840 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klgse; C:\WINDOWS\System32\DRIVERS\klgse.sys [674128 2021-07-21] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 klhk; C:\WINDOWS\System32\drivers\klhk.sys [1457464 2021-07-21] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP21.3\Bases\klids.sys [273176 2021-07-28] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1042712 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klim6; C:\WINDOWS\system32\DRIVERS\klim6.sys [98040 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [112392 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [112904 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [85256 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klpnpflt; C:\WINDOWS\system32\DRIVERS\klpnpflt.sys [96008 2021-06-03] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [55592 2021-02-19] (AnchorFree Inc -> The OpenVPN Project)
R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [263888 2021-04-13] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [309104 2021-04-13] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [115744 2021-04-13] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [224880 2021-04-15] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [155912 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [327936 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [300808 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220752 2021-06-25] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-12-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-06-25] (Malwarebytes Inc -> Malwarebytes)
R1 npcap; C:\WINDOWS\system32\DRIVERS\npcap.sys [80192 2019-07-31] (Insecure.Com LLC -> Insecure.Com LLC.)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-23] (Support.com, Inc. -> SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-13] (Support.com, Inc. -> SUPERAdBlocker.com and SUPERAntiSpyware.com)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [224496 2020-02-21] (Invincea, Inc. -> Sandboxie Holdings, LLC)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2021-02-26] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R3 tapexpressvpn; C:\WINDOWS\System32\drivers\tapexpressvpn.sys [44304 2019-08-05] (ExprsVPN LLC -> The OpenVPN Project)
R3 tapwindscribe0901; C:\WINDOWS\System32\drivers\tapwindscribe0901.sys [54896 2018-07-06] (Windscribe Limited -> The OpenVPN Project)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
R3 wintun; C:\WINDOWS\System32\drivers\wintun.sys [38176 2021-02-26] (WireGuard LLC -> WireGuard LLC)
R3 cpuz148; C:\WINDOWS\temp\cpuz148\cpuz148_x64.sys <==== ATTENTION (Access Denied)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-08-18 21:07 - 2021-08-18 21:09 - 000345659 _____ C:\Users\Growlithe\Downloads\FRST.txt
2021-08-18 21:05 - 2021-08-18 21:09 - 000000000 ____D C:\FRST
2021-08-18 21:05 - 2021-08-18 21:05 - 000000000 ____D C:\Users\Growlithe\Downloads\FRST-OlderVersion
2021-08-17 13:02 - 2021-08-17 13:22 - 000000000 ____D C:\Users\Growlithe\Downloads\The Mims Beginning
2021-08-17 12:42 - 2021-08-17 12:56 - 000000000 ____D C:\Users\Growlithe\Downloads\Syndicate Plus™
2021-08-17 12:25 - 2021-08-17 12:42 - 000000000 ____D C:\Users\Growlithe\Downloads\Syndicate Wars™
2021-08-17 09:30 - 2021-08-17 12:24 - 000000000 ____D C:\Users\Growlithe\Downloads\Ultima™ Underworld I & II
2021-08-15 13:17 - 2021-08-15 13:17 - 000000000 ____D C:\Users\Growlithe\AppData\LocalLow\Dani
2021-08-15 13:12 - 2021-08-15 13:12 - 000000207 _____ C:\Users\Growlithe\Desktop\Muck.url
2021-08-15 07:16 - 2021-08-15 07:16 - 000003296 _____ C:\Users\Growlithe\Downloads\PatronLog.txt
2021-08-14 19:27 - 2021-08-14 19:28 - 000137221 _____ C:\Users\Growlithe\Downloads\steamuserimages-a.akamaihd.net1.jfif
2021-08-14 19:26 - 2021-08-14 19:26 - 000212337 _____ C:\Users\Growlithe\Downloads\steamuserimages-a.akamaihd.net.jfif
2021-08-13 17:08 - 2021-08-13 17:08 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-08-13 17:08 - 2021-08-13 17:08 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-08-13 17:08 - 2021-08-13 17:08 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-08-13 17:08 - 2021-08-13 17:08 - 000011347 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-08-13 17:07 - 2021-08-13 17:07 - 001823280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-08-13 17:07 - 2021-08-13 17:07 - 001393480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-08-13 17:07 - 2021-08-13 17:07 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2021-08-13 16:59 - 2021-08-13 16:59 - 000000000 ___HD C:\$WinREAgent
2021-08-06 22:50 - 2021-08-17 12:30 - 000000000 ____D C:\Users\Growlithe\AppData\Roaming\TeraCopy
2021-08-06 22:50 - 2021-08-06 22:50 - 000000987 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeraCopy.lnk
2021-08-06 22:50 - 2021-08-06 22:50 - 000000000 ___HD C:\Users\Growlithe\AppData\Roaming\Obsidium x64
2021-08-06 22:50 - 2021-08-06 22:50 - 000000000 ___HD C:\Users\Growlithe\.obs64
2021-08-06 22:50 - 2021-08-06 22:50 - 000000000 ____D C:\ProgramData\Code Sector
2021-08-06 22:50 - 2021-08-06 22:50 - 000000000 ____D C:\ProgramData\Caphyon
2021-08-06 22:49 - 2021-08-06 22:50 - 000000000 ____D C:\Program Files\TeraCopy
2021-08-01 14:39 - 2021-08-01 14:39 - 000000000 ____D C:\Users\Growlithe\AppData\Local\Maine
2021-07-30 09:15 - 2021-08-18 21:05 - 002300416 _____ (Farbar) C:\Users\Growlithe\Downloads\FRST64_2.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-08-18 20:59 - 2019-04-28 12:33 - 000000000 ____D C:\Users\Growlithe\AppData\Local\DisplayFusion
2021-08-18 20:19 - 2019-12-07 17:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-08-18 19:19 - 2021-06-05 11:35 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-08-18 16:00 - 2017-07-04 20:20 - 000413456 _____ C:\Users\Growlithe\Documents\%$##!!@.TXT
2021-08-18 09:01 - 2019-12-07 17:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-08-17 23:19 - 2019-04-26 20:04 - 000000000 ____D C:\Users\Growlithe\AppData\LocalLow\Mozilla
2021-08-17 23:19 - 2019-04-25 22:14 - 000000000 ____D C:\ProgramData\Mozilla
2021-08-17 13:16 - 2019-05-03 10:37 - 000002430 _____ C:\Users\Growlithe\Desktop\Firefox 86.lnk
2021-08-17 09:00 - 2019-04-26 20:04 - 000000000 ____D C:\Users\Growlithe\AppData\Roaming\Mozilla
2021-08-17 08:39 - 2021-06-05 11:46 - 000840598 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-08-17 08:39 - 2019-12-07 17:13 - 000000000 ____D C:\WINDOWS\INF
2021-08-17 08:36 - 2019-04-26 13:25 - 000000000 __SHD C:\Users\Growlithe\IntelGraphicsProfiles
2021-08-17 08:36 - 2019-04-25 21:34 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2021-08-17 08:32 - 2021-06-24 18:11 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.xlsx
2021-08-17 08:32 - 2021-06-24 18:11 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.xlsm
2021-08-17 08:32 - 2021-06-24 18:11 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.xlsb
2021-08-17 08:32 - 2021-06-24 18:11 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.xls
2021-08-17 08:32 - 2021-06-24 18:11 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.xlk
2021-08-17 08:32 - 2021-06-24 18:11 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.x3f
2021-08-17 08:32 - 2021-06-24 18:11 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.wps
2021-08-17 08:32 - 2021-06-24 18:11 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.wpd
2021-08-17 08:32 - 2021-06-24 18:11 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.wb2
2021-08-17 08:32 - 2021-06-24 18:11 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.txt
2021-08-17 08:32 - 2021-06-24 18:11 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.srw
2021-08-17 08:32 - 2021-06-24 18:11 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.srf
2021-08-17 08:32 - 2021-06-24 18:11 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.sr2
2021-08-17 08:32 - 2021-06-24 18:11 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.rwl
2021-08-17 08:32 - 2021-06-24 18:11 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.rw2
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.raw
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.raf
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.r3d
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.ptx
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.pst
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.psd
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.pptx
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.pptm
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.ppt
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.pfx
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.pem
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.pef
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.pdf
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.pdd
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.p7c
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.p7b
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.p12
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.orf
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.odt
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.ods
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.odp
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.odm
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.odc
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.odb
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.nrw
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.nef
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.mrw
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.mef
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.mdf
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.mdb
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.kdc
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.jpe
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.indd
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.erf
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.eps
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.dxg
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.dxf
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.dwg
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.docm
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.dng
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.der
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.dcr
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.dbf
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.crw
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.crt
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.cr2
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.cer
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.cdr
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.bay
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.bak
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.avi
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.arw
2021-08-17 08:32 - 2021-06-24 18:10 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.ai
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.xlsx
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.xlsm
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.xlsb
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.xls
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.xlk
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.x3f
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.wps
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.wpd
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.wb2
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.txt
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.srw
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.srf
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.sr2
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.rwl
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.rw2
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.raw
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.raf
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.r3d
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.ptx
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.pst
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.psd
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.pptx
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.pptm
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.ppt
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.pfx
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.pem
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.pef
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.pdf
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.pdd
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.p7c
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.p7b
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.p12
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.orf
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.odt
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.ods
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.odp
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.odm
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.odc
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.odb
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.nrw
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.nef
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.mrw
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.mef
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.mdf
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.mdb
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.kdc
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.jpe
2021-08-17 08:32 - 2021-06-24 18:09 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.indd
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.erf
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.eps
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.dxg
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.dxf
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.dwg
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.docm
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.dng
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.der
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.dcr
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.dbf
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.crw
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.crt
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.cr2
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.cer
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.cdr
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.bay
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.bak
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.avi
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.arw
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.ai
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.accdb
2021-08-17 08:32 - 2021-06-24 18:08 - 000086686 ___SH C:\Users\Growlithe\Documents\a_d4db05fb93920e40b3142388520031b9.3fr
2021-08-17 08:32 - 2021-06-24 18:07 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.xlsx
2021-08-17 08:32 - 2021-06-24 18:07 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.xlsm
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.xlsb
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.xls
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.xlk
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.x3f
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.wps
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.wpd
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.wb2
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.txt
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.srw
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.srf
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.sr2
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.rwl
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.rw2
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.raw
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.raf
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.r3d
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.ptx
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.pst
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.psd
2021-08-17 08:32 - 2021-06-24 18:06 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.pptx
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.pptm
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.ppt
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.pfx
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.pem
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.pef
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.pdf
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.pdd
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.p7c
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.p7b
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.p12
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.orf
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.odt
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.ods
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.odp
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.odm
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.odc
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.odb
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.nrw
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.nef
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.mrw
2021-08-17 08:32 - 2021-06-24 18:05 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.mef
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.mdf
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.mdb
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.kdc
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.jpe
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.indd
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.erf
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.eps
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.dxg
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.dxf
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.dwg
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.docm
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.dng
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.der
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.dcr
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.dbf
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.crw
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.crt
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.cr2
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.cer
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.cdr
2021-08-17 08:32 - 2021-06-24 18:04 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.bay
2021-08-17 08:32 - 2021-06-24 18:03 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.bak
2021-08-17 08:32 - 2021-06-24 18:03 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.avi
2021-08-17 08:32 - 2021-06-24 18:03 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.arw
2021-08-17 08:32 - 2021-06-24 18:03 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.ai
2021-08-17 08:32 - 2021-06-24 18:03 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.accdb
2021-08-17 08:32 - 2021-06-24 18:03 - 000086686 ___SH C:\Users\Default\Documents\a_d4db05fb93920e40b3142388520031b9.3fr
2021-08-17 08:32 - 2021-06-24 17:57 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.xlsx
2021-08-17 08:32 - 2021-06-24 17:57 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.xlsm
2021-08-17 08:32 - 2021-06-24 17:57 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.xlsb
2021-08-17 08:32 - 2021-06-24 17:57 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.xls
2021-08-17 08:32 - 2021-06-24 17:57 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.xlk
2021-08-17 08:32 - 2021-06-24 17:57 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.x3f
2021-08-17 08:32 - 2021-06-24 17:57 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.wps
2021-08-17 08:32 - 2021-06-24 17:57 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.wpd
2021-08-17 08:32 - 2021-06-24 17:57 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.wb2
2021-08-17 08:32 - 2021-06-24 17:57 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.txt
2021-08-17 08:32 - 2021-06-24 17:57 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.srw
2021-08-17 08:32 - 2021-06-24 17:57 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.srf
2021-08-17 08:32 - 2021-06-24 17:57 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.sr2
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.rwl
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.rw2
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.raw
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.raf
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.r3d
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.ptx
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.pst
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.psd
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.pptx
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.pptm
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.ppt
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.pfx
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.pem
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.pef
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.pdf
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.pdd
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.p7c
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.p7b
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.p12
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.orf
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.odt
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.ods
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.odp
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.odm
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.odc
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.odb
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.nrw
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.nef
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.mrw
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.mef
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.mdf
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.mdb
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.kdc
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.jpe
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.indd
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.erf
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.eps
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.dxg
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.dxf
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.dwg
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.docm
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.dng
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.der
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.dcr
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.dbf
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.crw
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.crt
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.cr2
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.cer
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.cdr
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.bay
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.bak
2021-08-17 08:32 - 2021-06-24 17:56 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.avi
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.arw
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.ai
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.accdb
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Public\Desktop\a_d4db05fb93920e40b3142388520031b9.3fr
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.xlsx
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.xlsm
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.xlsb
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.xls
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.xlk
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.x3f
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.wps
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.wpd
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.wb2
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.txt
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.srw
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.srf
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.sr2
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.rwl
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.rw2
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.raw
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.raf
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.r3d
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.ptx
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.pst
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.psd
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.pptx
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.pptm
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.ppt
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.pfx
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.pem
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.pef
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.pdf
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.pdd
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.p7c
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.p7b
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.p12
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.orf
2021-08-17 08:32 - 2021-06-24 17:55 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.odt
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.ods
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.odp
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.odm
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.odc
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.odb
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.nrw
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.nef
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.mrw
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.mef
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.mdf
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.mdb
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.kdc
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.jpe
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.indd
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.erf
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.eps
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.dxg
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.dxf
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.dwg
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.docm
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.dng
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.der
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.dcr
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.dbf
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.crw
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.crt
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.cr2
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.cer
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.cdr
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.bay
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.bak
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.avi
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.arw
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.ai
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.accdb
2021-08-17 08:32 - 2021-06-24 17:54 - 000086686 ___SH C:\Users\Growlithe\Desktop\a_d4db05fb93920e40b3142388520031b9.3fr
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.xlsx
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.xlsm
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.xlsb
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.xls
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.xlk
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.x3f
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.wps
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.wpd
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.wb2
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.txt
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.srw
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.srf
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.sr2
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.rwl
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.rw2
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.raw
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.raf
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.r3d
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.ptx
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.pst
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.psd
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.pptx
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.pptm
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.ppt
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.pfx
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.pem
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.pef
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.pdf
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.pdd
2021-08-17 08:32 - 2021-06-24 17:53 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.p7c
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.p7b
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.p12
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.orf
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.odt
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.ods
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.odp
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.odm
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.odc
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.odb
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.nrw
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.nef
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.mrw
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.mef
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.mdf
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.mdb
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.kdc
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.jpe
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.indd
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.erf
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.eps
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.dxg
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.dxf
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.dwg
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.docm
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.dng
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.der
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.dcr
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.dbf
2021-08-17 08:32 - 2021-06-24 17:52 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.crw
2021-08-17 08:32 - 2021-06-24 17:44 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.xlsx
2021-08-17 08:32 - 2021-06-24 17:44 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.xlsm
2021-08-17 08:32 - 2021-06-24 17:44 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.xlsb
2021-08-17 08:32 - 2021-06-24 17:44 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.xls
2021-08-17 08:32 - 2021-06-24 17:44 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.xlk
2021-08-17 08:32 - 2021-06-24 17:44 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.x3f
2021-08-17 08:32 - 2021-06-24 17:44 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.wps
2021-08-17 08:32 - 2021-06-24 17:44 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.wpd
2021-08-17 08:32 - 2021-06-24 17:44 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.wb2
2021-08-17 08:32 - 2021-06-24 17:44 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.txt
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.srw
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.srf
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.sr2
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.rwl
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.rw2
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.raw
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.raf
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.r3d
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.ptx
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.pst
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.psd
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.pptx
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.pptm
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.ppt
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.pfx
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.pem
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.pef
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.pdf
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.pdd
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.p7c
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.p7b
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.p12
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.orf
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.odt
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.ods
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.odp
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.odm
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.odc
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.odb
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.nrw
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.nef
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.mrw
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.mef
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.mdf
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.mdb
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.kdc
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.jpe
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.indd
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.erf
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.eps
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.dxg
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.dxf
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.dwg
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.docm
2021-08-17 08:32 - 2021-06-24 17:43 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.dng
2021-08-17 08:32 - 2021-06-24 17:42 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.der
2021-08-17 08:32 - 2021-06-24 17:42 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.dcr
2021-08-17 08:32 - 2021-06-24 17:42 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.dbf
2021-08-17 08:32 - 2021-06-24 17:42 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.crw
2021-08-17 08:32 - 2021-06-24 17:42 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.crt
2021-08-17 08:32 - 2021-06-24 17:42 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.cr2
2021-08-17 08:32 - 2021-06-24 17:42 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.cer
2021-08-17 08:32 - 2021-06-24 17:42 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.cdr
2021-08-17 08:32 - 2021-06-24 17:42 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.bay
2021-08-17 08:32 - 2021-06-24 17:42 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.bak
2021-08-17 08:32 - 2021-06-24 17:42 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.avi
2021-08-17 08:32 - 2021-06-24 17:42 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.arw
2021-08-17 08:32 - 2021-06-24 17:42 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.ai
2021-08-17 08:32 - 2021-06-24 17:42 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.accdb
2021-08-17 08:32 - 2021-06-24 17:42 - 000086686 ___SH C:\Users\Public\Downloads\a_d4db05fb93920e40b3142388520031b9.3fr
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.xlsx
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.xlsm
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.xlsb
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.xls
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.xlk
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.x3f
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.wps
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.wpd
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.wb2
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.txt
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.srw
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.srf
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.sr2
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.rwl
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.rw2
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.raw
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.raf
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.r3d
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.ptx
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.pst
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.psd
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.pptx
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.pptm
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.ppt
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.pfx
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.pem
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.pef
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.pdf
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.pdd
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.p7c
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.p7b
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.p12
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.orf
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.odt
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.ods
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.odp
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.odm
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.odc
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.odb
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.nrw
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.nef
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.mrw
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.mef
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.mdf
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.mdb
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.kdc
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.jpe
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.indd
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.erf
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.eps
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.dxg
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.dxf
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.dwg
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.docm
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.dng
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.der
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.dcr
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.dbf
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.crw
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.crt
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.cr2
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.cer
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.cdr
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.bay
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.bak
2021-08-17 08:32 - 2021-06-24 17:41 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.avi
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.arw
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.ai
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.accdb
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Growlithe\Downloads\a_d4db05fb93920e40b3142388520031b9.3fr
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.xlsx
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.xlsm
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.xlsb
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.xls
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.xlk
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.x3f
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.wps
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.wpd
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.wb2
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.txt
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.srw
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.srf
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.sr2
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.rwl
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.rw2
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.raw
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.raf
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.r3d
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.ptx
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.pst
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.psd
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.pptx
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.pptm
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.ppt
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.pfx
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.pem
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.pef
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.pdf
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.pdd
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.p7c
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.p7b
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.p12
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.orf
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.odt
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.ods
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.odp
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.odm
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.odc
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.odb
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.nrw
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.nef
2021-08-17 08:32 - 2021-06-24 17:40 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.mrw
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.mef
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.mdf
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.mdb
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.kdc
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.jpe
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.indd
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.erf
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.eps
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.dxg
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.dxf
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.dwg
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.docm
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.dng
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.der
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.dcr
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.dbf
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.crw
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.crt
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.cr2
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.cer
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.cdr
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.bay
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.bak
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.avi
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.arw
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.ai
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.accdb
2021-08-17 08:32 - 2021-06-24 17:39 - 000086686 ___SH C:\Users\Default\Downloads\a_d4db05fb93920e40b3142388520031b9.3fr
2021-08-17 08:32 - 2021-06-24 15:25 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.accdb
2021-08-17 08:32 - 2021-06-24 15:25 - 000086686 ___SH C:\Users\Public\Documents\a_d4db05fb93920e40b3142388520031b9.3fr
2021-08-17 08:32 - 2021-06-24 15:03 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.crt
2021-08-17 08:32 - 2021-06-24 15:03 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.cr2
2021-08-17 08:32 - 2021-06-24 15:03 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.cer
2021-08-17 08:32 - 2021-06-24 15:03 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.cdr
2021-08-17 08:32 - 2021-06-24 15:03 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.bay
2021-08-17 08:32 - 2021-06-24 15:03 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.bak
2021-08-17 08:32 - 2021-06-24 15:03 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.avi
2021-08-17 08:32 - 2021-06-24 15:03 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.arw
2021-08-17 08:32 - 2021-06-24 15:03 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.ai
2021-08-17 08:32 - 2021-06-24 15:03 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.accdb
2021-08-17 08:32 - 2021-06-24 15:03 - 000086686 ___SH C:\Users\Default\Desktop\a_d4db05fb93920e40b3142388520031b9.3fr
2021-08-17 08:31 - 2021-06-05 12:43 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-08-17 08:31 - 2021-06-05 11:35 - 005119280 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-08-17 08:31 - 2019-04-25 21:38 - 000000000 ____D C:\ProgramData\NVIDIA
2021-08-17 00:48 - 2019-12-07 17:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-08-17 00:47 - 2019-12-07 17:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-08-17 00:47 - 2019-12-07 17:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-08-17 00:47 - 2019-12-07 17:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-08-17 00:47 - 2019-12-07 17:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-08-17 00:47 - 2019-12-07 17:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-08-17 00:47 - 2019-12-07 17:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-08-17 00:47 - 2019-12-07 17:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-08-17 00:47 - 2019-12-07 17:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-08-17 00:47 - 2019-12-07 17:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-08-17 00:47 - 2019-12-07 17:03 - 000000000 ____D C:\WINDOWS\servicing
2021-08-17 00:46 - 2019-04-26 22:12 - 000000000 ____D C:\Users\Growlithe\AppData\Roaming\DMCache
2021-08-17 00:45 - 2017-03-25 18:25 - 000000000 ____D C:\Users\Growlithe\Desktop\Windows 7 disc art
2021-08-17 00:27 - 2018-03-19 20:56 - 000000000 ____D C:\Users\Growlithe\Downloads\OPERA
2021-08-16 21:08 - 2019-04-29 18:03 - 000001182 _____ C:\Users\Growlithe\Desktop\Opera Browser.lnk
2021-08-16 17:14 - 2017-03-13 20:06 - 000000000 ____D C:\Users\Growlithe\Downloads\f
2021-08-15 23:55 - 2019-12-07 17:51 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2021-08-15 17:22 - 2020-10-01 17:25 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-08-15 13:12 - 2019-04-28 12:17 - 000000000 ____D C:\Users\Growlithe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2021-08-15 11:51 - 2019-12-07 17:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-08-15 07:16 - 2019-04-30 04:53 - 000000000 ____D C:\Program Files\Microsoft Office
2021-08-14 12:03 - 2019-04-26 19:42 - 000015354 _____ C:\WINDOWS\Sandboxie.ini
2021-08-14 11:37 - 2020-08-28 02:25 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-08-14 11:37 - 2020-08-28 02:25 - 000002287 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-08-13 17:11 - 2019-12-07 17:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-08-13 16:59 - 2019-04-25 23:01 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-08-13 16:53 - 2019-04-25 23:01 - 133215968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-08-11 16:51 - 2019-04-26 13:25 - 000000000 ____D C:\Users\Growlithe\AppData\Local\Packages
2021-08-10 21:29 - 2021-06-05 11:37 - 000002406 _____ C:\Users\Growlithe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-08-10 21:29 - 2019-09-19 09:45 - 000000000 ___RD C:\Users\Growlithe\OneDrive - TAFE
2021-08-08 21:39 - 2019-10-21 22:20 - 000000000 ____D C:\Users\Growlithe\Documents\Outlook Files
2021-08-08 00:32 - 2019-04-28 16:46 - 000000600 _____ C:\Users\Growlithe\AppData\Local\PUTTY.RND
2021-08-07 22:40 - 2021-03-22 17:31 - 000000128 _____ C:\Users\Growlithe\AppData\Roaming\winscp.rnd
2021-08-06 22:50 - 2021-06-05 11:37 - 000000000 ____D C:\Users\Growlithe
2021-08-04 22:44 - 2019-04-26 14:17 - 000000000 ____D C:\Users\Growlithe\AppData\Roaming\KeePass
2021-08-01 14:39 - 2019-08-26 16:30 - 000000000 ____D C:\Users\Growlithe\AppData\Local\UnrealEngine
2021-07-30 09:25 - 2019-12-07 17:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-07-30 09:14 - 2019-04-29 09:45 - 000000000 ____D C:\Users\Growlithe\AppData\Local\CrashDumps
2021-07-24 16:39 - 2019-04-26 20:15 - 000000000 ____D C:\Users\Growlithe\AppData\Roaming\Code
2021-07-24 10:22 - 2019-04-26 22:12 - 000000000 ____D C:\Users\Growlithe\AppData\Roaming\IDM
2021-07-24 10:21 - 2019-04-26 10:54 - 000000000 ____D C:\Program Files (x86)\Internet Download Manager
2021-07-22 11:46 - 2018-02-22 16:48 - 000000000 ____D C:\Users\Growlithe\Documents\Workshit COPIED 15-7-20
2021-07-21 12:34 - 2020-04-28 21:42 - 000674128 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klgse.sys
2021-07-21 12:34 - 2019-02-18 09:19 - 001457464 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klhk.sys
2021-07-19 09:41 - 2019-05-03 13:23 - 000018973 _____ C:\WINDOWS\SysWOW64\InstallUtil.InstallLog

==================== Files in the root of some directories ========

2019-07-27 16:46 - 2021-02-26 15:30 - 000000132 _____ () C:\Users\Growlithe\AppData\Roaming\Adobe PNG Format CS6 Prefs
2019-09-27 08:19 - 2019-09-27 08:19 - 000002301 _____ () C:\Users\Growlithe\AppData\Roaming\ASSDraw3.cfg
2020-03-13 19:42 - 2020-10-15 22:48 - 000000128 _____ () C:\Users\Growlithe\AppData\Roaming\PUTTY.RND
2021-03-22 17:31 - 2021-08-07 22:40 - 000000128 _____ () C:\Users\Growlithe\AppData\Roaming\winscp.rnd
2019-05-03 22:42 - 2021-03-06 08:48 - 000001456 _____ () C:\Users\Growlithe\AppData\Local\Adobe Save for Web 13.0 Prefs
2019-05-04 10:06 - 2019-05-04 10:06 - 000000000 _____ () C:\Users\Growlithe\AppData\Local\oobelibMkey.log
2019-04-28 16:46 - 2021-08-08 00:32 - 000000600 _____ () C:\Users\Growlithe\AppData\Local\PUTTY.RND
2020-02-21 06:58 - 2020-02-21 06:58 - 000000000 _____ () C:\Users\Growlithe\AppData\Local\zenmap.exe.log

==================== FLock ==============================

2021-08-18 12:21 C:\Config.Msi
2019-12-07 17:14 C:\PerfLogs
2021-08-17 08:37 C:\WINDOWS\system32\config
2019-12-07 17:31 C:\WINDOWS\system32\Configuration
2019-12-07 17:14 C:\WINDOWS\system32\DriverState
2021-08-15 23:55 C:\WINDOWS\system32\FxsTmp
2019-12-07 17:14 C:\WINDOWS\system32\ias
2021-06-06 03:34 C:\WINDOWS\system32\MsDtc
2019-12-07 17:14 C:\WINDOWS\system32\networklist
2021-08-18 19:19 C:\WINDOWS\system32\SleepStudy
2021-08-18 21:08 C:\WINDOWS\system32\sru
2021-08-18 16:04 C:\WINDOWS\system32\Tasks
2021-06-06 03:34 C:\WINDOWS\system32\Tasks_Migrated
2021-06-21 01:21 C:\WINDOWS\system32\WDI
2021-08-15 11:51 C:\Program Files\WindowsApps
2021-06-05 12:42 C:\WINDOWS\diagerr.xml
2021-06-05 12:42 C:\WINDOWS\diagwrn.xml
2021-06-06 03:34 C:\WINDOWS\LiveKernelReports
2019-12-07 17:14 C:\WINDOWS\ModemLogs
2021-08-18 21:05 C:\WINDOWS\Prefetch
2021-06-06 03:34 C:\WINDOWS\ServiceState
2021-08-18 21:06 C:\WINDOWS\Temp
2019-12-07 17:31 C:\WINDOWS\SysWOW64\config
2019-12-07 17:31 C:\WINDOWS\SysWOW64\Configuration
2019-12-07 17:51 C:\WINDOWS\SysWOW64\FxsTmp
2019-12-07 17:14 C:\WINDOWS\SysWOW64\Msdtc
2019-12-07 17:14 C:\WINDOWS\SysWOW64\networklist
2019-12-07 17:14 C:\WINDOWS\SysWOW64\sru
2019-12-07 17:31 C:\WINDOWS\SysWOW64\Tasks
2019-12-07 17:14 C:\WINDOWS\system32\Drivers\DriverData
2019-06-16 08:01 C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2019-06-16 08:01 C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2019-04-26 09:48 C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task 2c0cd5e3-2f58-4106-a979-1754026e1974.job
2019-04-26 09:48 C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task e257f42d-14fc-431e-8b04-e865d2668b23.job
2021-06-24 21:02 C:\Users\Administrator
2021-06-24 10:54 C:\Users\Arcanine
2021-06-05 12:48 C:\ProgramData\Packages
2019-12-07 17:54 C:\ProgramData\WindowsHolographicDevices

==================== FCheck ================================

(If an entry is included in the fixlist, the file/folder will be moved.)

FCheck: C:\WINDOWS\SysWOW64\ie4uinit.exe [2019-04-26] <==== ATTENTION (zero byte File/Folder)
FCheck: C:\WINDOWS\SysWOW64\SecurityHealthSystray.exe [2019-04-26] <==== ATTENTION (zero byte File/Folder)

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)



ATTENTION: ==> Could not access BCD. The user is not administrator -> This program is blocked by group policy. For more information, contact your system administrator.

==================== End of FRST.txt ========================

And here's the addition file:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-08-2021
Ran by Growlithe (18-08-2021 21:15:31)
Running from C:\Users\Growlithe\Downloads
Windows 10 Pro Version 20H2 19042.1165 (X64) (2021-06-05 04:44:36)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-2919148645-4255438607-1692176429-500 - Administrator - Disabled) => C:\Users\Administrator
Arcanine (S-1-5-21-2919148645-4255438607-1692176429-1001 - Administrator - Enabled) => C:\Users\Arcanine
DefaultAccount (S-1-5-21-2919148645-4255438607-1692176429-503 - Limited - Disabled)
Growlithe (S-1-5-21-2919148645-4255438607-1692176429-1002 - Limited - Enabled) => C:\Users\Growlithe
Guest (S-1-5-21-2919148645-4255438607-1692176429-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-2919148645-4255438607-1692176429-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Kaspersky Internet Security (Enabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23}
AV: Kaspersky Internet Security (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}
AS: Kaspersky Internet Security (Enabled - Up to date) {B1D2E896-6D96-7460-F17A-838B9D00DD65}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {774D7037-0984-41B0-3A87-5E88E680AD58}
FW: Kaspersky Internet Security (Enabled) {32888857-01C3-7AB6-E095-11CC1854D0A3}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat 2017 (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0E1108756300}) (Version: 17.011.30143 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 5.1.0.407 - Adobe Systems Incorporated)
Adobe Media Encoder 2020 (HKLM-x32\...\AME_14_0_4) (Version: 14.0.4 - Adobe Inc.)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Premiere Pro 2020 (HKLM-x32\...\PPRO_14_0_4) (Version: 14.0.4 - Adobe Inc.)
Advanced Date Time Calculator 11.0 (HKLM-x32\...\Advanced Date Time Calculator_is1) (Version:  - TriSun Software Limited)
BiglyBT (HKLM\...\0112-2557-8304-7048) (Version: 2.7.0.2 - Bigly Software)
BiglyBT (HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\0112-2557-8304-7048) (Version: 2.1.0.0 - Bigly Software)
Bitvise SSH Client - FlowSshNet (x64) (HKLM\...\{76CE9B71-2879-4FFE-8F87-6ADE7DA2B570}) (Version: 8.46.0.0 - Bitvise Limited) Hidden
Bitvise SSH Client - FlowSshNet (x86) (HKLM-x32\...\{FB61BB8B-E6E4-4797-9115-61E5634AFFA9}) (Version: 8.46.0.0 - Bitvise Limited) Hidden
Bitvise SSH Client 8.46 (remove only) (HKLM-x32\...\BvSshClient) (Version: 8.46 - Bitvise Limited)
BlueStacks App Player (HKLM\...\BlueStacks) (Version: 4.250.0.1070 - BlueStack Systems, Inc.)
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: 4.7.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version:  - )
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.1 - Canon Inc.)
Canon MG6200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG6200_series) (Version:  - Canon Inc.)
Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.62 - Piriform)
Corel Painter 2019 - Content (HKLM\...\{0CB44D25-ABCD-4BAB-88BA-C10225F5B26F}) (Version: 19.1 - Corel Corporation) Hidden
Corel Painter 2019 - Core (HKLM\...\{739ABD60-E7F7-4F66-93C8-963C3F10197D}) (Version: 19.1 - Corel Corporation) Hidden
Corel Painter 2019 - Corex64 (HKLM\...\{E57822FE-D66B-42F6-8972-51A682D5DB3B}) (Version: 19.1 - Corel Corporation) Hidden
Corel Painter 2019 - CT (HKLM\...\{81C4E913-F4B6-46DD-8040-F2495C7E40E7}) (Version: 19.1 - Corel Corporation) Hidden
Corel Painter 2019 - DE (HKLM\...\{4957A80C-D042-45D2-BF80-810DD81A3897}) (Version: 19.1 - Corel Corporation) Hidden
Corel Painter 2019 - EN (HKLM\...\{175ED696-0A15-44A3-9BDA-9A27AD768A32}) (Version: 19.1 - Corel Corporation) Hidden
Corel Painter 2019 - FR (HKLM\...\{7DF9949B-8BA1-4E68-9C66-3CC8E485204C}) (Version: 19.1 - Corel Corporation) Hidden
Corel Painter 2019 - IPM (HKLM\...\{EA1947B4-46DA-4484-A9DC-15EB2C5A47FB}) (Version: 19.1 - Corel Corporation) Hidden
Corel Painter 2019 - IPM Content (HKLM\...\{D2A529CF-50BB-4509-AB41-8075967BC641}) (Version: 19.1 - Corel Corporation) Hidden
Corel Painter 2019 - JP (HKLM\...\{F909CEAE-27D9-46CD-B14D-E32CA6FC84A6}) (Version: 19.1 - Corel Corporation) Hidden
Corel Painter 2019 - Setup Files (HKLM\...\{A7744212-7E8F-44FE-A3FF-068001C911E1}) (Version: 19.1 - Corel Corporation) Hidden
Corel Painter 2019 (HKLM\...\_{A7744212-7E8F-44FE-A3FF-068001C911E1}) (Version: 19.1.0.487 - Corel Corporation)
Corel Painter Thumbnail Previewer (HKLM\...\{50139369-99B2-496A-8726-D3DC5D6D4235}) (Version: 18.0 - Corel Corporation)
Corel Update Manager (HKLM\...\{6E7D6853-E0C5-48D9-B5BB-97CD0B0A4DE2}) (Version: 2.14.626 - Corel corporation) Hidden
CORSAIR iCUE Software (HKLM-x32\...\{E50CD42B-C944-4006-94DB-7A533DD3A0F1}) (Version: 3.15.101 - Corsair)
CryptoPrevent (HKLM-x32\...\{5C5B24E7-4694-4049-A222-CCE7D3FAC63F}_is1) (Version: 19.01.09.0 - Foolish IT LLC)
CrystalDiskMark 6.0.2 Shizuku Edition (HKLM\...\CrystalDiskMark6_is1) (Version: 6.0.2 - Crystal Dew World)
Deponia Doomsday (HKLM-x32\...\1439969610_is1) (Version: 1.2.0267 - GOG.com)
DisplayFusion 9.8 (HKLM-x32\...\B076073A-5527-4f4f-B46B-B10692277DA2_is1) (Version: 9.8.0.0 - Binary Fortress Software)
Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.6.3.1 - Dolby Laboratories Inc)
Drax (HKLM-x32\...\{86BCB839-18FE-4A1E-B24B-7884ACFBF701}) (Version: 1.6.5 - Drax)
Dropbox (HKLM-x32\...\Dropbox) (Version: 74.4.115 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.191.1 - Dropbox, Inc.) Hidden
ELAN Touchpad 15.14.0.4_X64_WHQL (HKLM\...\Elantech) (Version: 15.14.0.4 - ELAN Microelectronic Corp.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Exact Audio Copy 1.5 (HKLM-x32\...\Exact Audio Copy) (Version: 1.5 - Andre Wiethoff)
ExpressVPN (HKLM-x32\...\{E5B9C3E5-889C-4F22-A959-F4B8466DB833}) (Version: 7.10.4.2 - ExpressVPN) Hidden
ExpressVPN (HKLM-x32\...\{f59f9b98-5ed2-423d-b990-b0200d6860ce}) (Version: 7.10.4.2 - ExpressVPN)
FileZilla Client 3.52.0.5 (HKLM-x32\...\FileZilla Client) (Version: 3.52.0.5 - Tim Kosse)
FontForge version 01-08-2019 (HKLM-x32\...\{56748B9C-19AE-4689-B8C5-5A45AE0A993A}_is1) (Version: 01-08-2019 - FontForgeBuilds)
FRAFS AVI Info version 0.2.2.2 (HKLM-x32\...\{3DC088C4-41EB-4CEF-9B45-940555A818D3}_is1) (Version: 0.2.2.2 - raffriff42)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Futuremark SystemInfo (HKLM-x32\...\{E192B91F-DD48-42A0-8ECF-03EC75A3780F}) (Version: 5.18.705.0 - Futuremark)
Greenshot 1.2.10.6 (HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\Greenshot_is1) (Version: 1.2.10.6 - Greenshot)
HLSW v1.4.0.2 (HKLM-x32\...\HLSW_is1) (Version:  - Stripf Software)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{AF8A5E6C-7485-47FB-9FE4-CF3B43FDB178}) (Version: 18.0.156 - Intel Corporation)
Intel(R) Chipset Device Software (HKLM-x32\...\{c7f54569-0018-439c-809a-48046a4d4ebc}) (Version: 10.1.1.9 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1153 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4531 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{DC5673D2-228D-45BC-B9BB-9610CE67DFC0}) (Version: 17.1.1524.1353 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{d9e230c1-06bb-4b78-a9f1-c1ddce14e6fc}) (Version: 18.11.0 - Intel Corporation)
Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: 6.39.2 - Tonec Inc.)
Java 8 Update 291 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180291F0}) (Version: 8.0.2910.10 - Oracle Corporation)
Kaspersky Internet Security (HKLM-x32\...\{4FC79BE9-AD63-46C0-9626-E4F6BCE6A976}) (Version: 21.3.10.391 - Kaspersky) Hidden
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{4FC79BE9-AD63-46C0-9626-E4F6BCE6A976}) (Version: 21.3.10.391 - Kaspersky)
Kaspersky VPN (HKLM-x32\...\{FF2A12B8-AEB7-48C0-95C8-E2E3D67DFCB2}) (Version: 21.3.10.391 - Kaspersky) Hidden
Kaspersky VPN (HKLM-x32\...\InstallWIX_{FF2A12B8-AEB7-48C0-95C8-E2E3D67DFCB2}) (Version: 21.3.10.391 - Kaspersky)
KeepAliveHD 1.6.2 beta (HKLM-x32\...\{8623BFAD-9E79-4188-9EB4-9740CEDD3B44}_is1) (Version:  - Megabit d.o.o.)
KeePass Password Safe 2.42.1 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.42.1 - Dominik Reichl)
KeyScrambler (HKLM-x32\...\KeyScrambler) (Version: 3.12.0.1 - QFX Software Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
LittleWeeb 0.4.0 (HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\a2811f47-98f1-5045-9fd5-cff284ddef08) (Version: 0.4.0 - LittleWeeb Dev Team)
Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)
Malwarebytes version 4.4.0.117 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.4.0.117 - Malwarebytes)
MediaInfo 19.09 (HKLM\...\MediaInfo) (Version: 19.09 - MediaArea.net)
Microsoft 365 Apps for enterprise - en-us (HKLM\...\O365ProPlusRetail - en-us) (Version: 16.0.14228.20250 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 92.0.902.73 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 92.0.902.73 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\OneDriveSetup.exe) (Version: 21.139.0711.0001 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\Teams) (Version: 1.2.00.34161 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{852D8FE5-BC66-4061-B1C4-CADF51E5B27D}) (Version: 2.82.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Preview Redistributable (x64) - 12.0.20617 (HKLM-x32\...\{448652c1-f5f3-4230-98c6-68c10c88b1fb}) (Version: 12.0.20617.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29334 (HKLM-x32\...\{a9cfe9c7-e54f-46cd-9c5c-542ff8e3e8c4}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32\...\{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft Visual Studio Code (HKLM\...\{EA457B21-F73E-494C-ACAB-524FDE069978}_is1) (Version: 1.40.1 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox 52.9.0 ESR (x64 en-US) (HKLM\...\Mozilla Firefox 52.9.0 ESR (x64 en-US)) (Version: 52.9.0 - Mozilla)
Mozilla Firefox 86.0 (x64 en-US) (HKLM\...\Mozilla Firefox 86.0 (x64 en-US)) (Version: 86.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 86.0 - Mozilla)
MPC-HC 1.7.13 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.13 - MPC-HC Team)
Nmap 7.80 (HKLM-x32\...\Nmap) (Version: 7.80 - Nmap Project)
Npcap 0.9982 (HKLM-x32\...\NpcapInst) (Version: 0.9982 - Nmap Project)
NVIDIA PhysX (HKLM-x32\...\{DEA314C4-0929-4250-BC92-98E4C105F28D}) (Version: 9.10.0129 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14228.20250 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14228.20250 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
OpenVPN 2.5.2-I601 amd64 (HKLM\...\{E5931AF4-2A8F-48A5-AFC8-0E8A268358A0}) (Version: 2.5.021 - OpenVPN, Inc.)
Opera Stable 62.0.3331.116 (HKLM-x32\...\Opera 62.0.3331.116) (Version: 62.0.3331.116 - Opera Software)
Paradox Launcher v2 (HKLM\...\{66DA3501-823A-4F07-A20D-C64495A59DC8}) (Version: 2.1.0 - Paradox Interactive)
PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden
Quick BMS GUI version 2.0 (HKLM-x32\...\{2F5E62E5-0DEF-4D82-B351-3161671DC24E}_is1) (Version: 2.0 - michalss)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10143.21278 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.1.505.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7654 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 4.1.5 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 4.1.5 - VS Revo Group, Ltd.)
Sandboxie 5.33.3 (64-bit) (HKLM\...\Sandboxie) (Version: 5.33.3 - Sandboxie Holdings, LLC)
SilverFast 8.8.0r16 (64bit) (HKLM-x32\...\SilverFast 8 x64) (Version: 8.8.0r16 - LaserSoft Imaging AG)
Smart Manager V3 Ver 5.2.9 (HKLM\...\Smart Manager V3) (Version: Ver 5.2.9 - GIGABYTE)
SpywareBlaster 6.0 (HKLM-x32\...\SpywareBlaster_is1) (Version: 6.0.0 - BrightFort LLC)
Start Menu X version 6.32 (HKLM\...\{3E494002-985C-4908-B72C-5B4DD15BE090}_is1) (Version: 6.32 - OrdinarySoft)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 8.0.1038 - SUPERAntiSpyware.com)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.2.0.34161 - Microsoft Corporation)
TeraCopy (HKLM\...\{952ED35A-74C3-4204-8F01-986D8711B41D}) (Version: 3.8.5 - Code Sector)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.22a - Ghisler Software GmbH)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
Windscribe (HKLM-x32\...\{fa690e90-ddb0-4f0c-b3f1-136c084e5fc7}_is1) (Version: 1.83 Build 20 - Windscribe Limited)
WinRAR 5.71 beta 2 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.71.2 - win.rar GmbH)
WinSCP 5.17.10 (HKLM-x32\...\winscp3_is1) (Version: 5.17.10 - Martin Prikryl)

Packages:
=========
Adobe Notification Client -> C:\Program Files\WindowsApps\AdobeNotificationClient_1.0.1.22_x86__enpm4xejd91yc [0000-00-00] (Adobe Systems Incorporated)
Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_3.1.0.0_neutral__6e5tt8cgb93ep [0000-00-00] (Canon Inc.)
Forza Horizon 3 -> C:\Program Files\WindowsApps\Microsoft.OpusPG_1.0.125.2_x64__8wekyb3d8bbwe [0000-00-00] (Microsoft Studios)
Forza Hub -> C:\Program Files\WindowsApps\Microsoft.Lucille_1.0.4.0_x64__8wekyb3d8bbwe [0000-00-00] (Microsoft Studios)
IDM Integration Module -> C:\Program Files\WindowsApps\TonecInc.IDMIntegrationModule_6.38.19.0_neutral__e7b5mm5d3r6v2 [0000-00-00] (Tonec FZE)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.10.7290.0_x64__8wekyb3d8bbwe [0000-00-00] (Microsoft Studios) [MS Ad]
Minecraft for Windows 10 -> C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_1.17.1101.0_x64__8wekyb3d8bbwe [0000-00-00] (Microsoft Studios)
Photos Add-on -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [0000-00-00] (Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002_Classes\CLSID\{04271989-C4D2-CDE5-9567-63DE40E82660} -> [OneDrive - TAFE] => C:\Users\Growlithe\OneDrive - TAFE [2019-09-19 09:45]
CustomCLSID: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-406F96145FBA} -> [Creative Cloud Files] => C:\Users\Growlithe\Creative Cloud Files [2019-05-02 23:01]
CustomCLSID: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Growlithe\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.19317.2\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002_Classes\CLSID\{869C14C8-1830-491F-B575-5F9AB40D2B42}\InprocServer32 -> C:\Program Files\MediaInfo\MediaInfo_InfoTip.dll (MediaArea.net -> MediaArea.net)
CustomCLSID: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\Growlithe\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.19317.2\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\Growlithe\Dropbox [2019-06-03 23:38]
ShellIconOverlayIdentifiers: [			IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2021-03-03] (Tonec Inc. -> Tonec FZE)
ShellIconOverlayIdentifiers: [   AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 2017\Acrobat Elements\ContextMenuShim64.dll [2017-04-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [Kaspersky Anti-Virus 21.3] -> {37303E08-14C9-4FC3-B1D9-7993682A4691} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\x64\shellex.dll [2021-03-15] (Kaspersky Lab JSC -> AO Kaspersky Lab)
ContextMenuHandlers1: [TeraCopy] -> {2386CB87-96FF-473D-A009-957E3BFE6F88} => C:\Program Files\TeraCopy\Context.dll [2021-04-22] (Code Sector -> Code Sector)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-18] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-18] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [Kaspersky Anti-Virus 21.3] -> {37303E08-14C9-4FC3-B1D9-7993682A4691} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\x64\shellex.dll [2021-03-15] (Kaspersky Lab JSC -> AO Kaspersky Lab)
ContextMenuHandlers2: [TeraCopy] -> {2386CB87-96FF-473D-A009-957E3BFE6F88} => C:\Program Files\TeraCopy\Context.dll [2021-04-22] (Code Sector -> Code Sector)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4: [Kaspersky Anti-Virus 21.3] -> {37303E08-14C9-4FC3-B1D9-7993682A4691} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\x64\shellex.dll [2021-03-15] (Kaspersky Lab JSC -> AO Kaspersky Lab)
ContextMenuHandlers4: [TeraCopy] -> {2386CB87-96FF-473D-A009-957E3BFE6F88} => C:\Program Files\TeraCopy\Context.dll [2021-04-22] (Code Sector -> Code Sector)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-30] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-11-01] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-05-02] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 2017\Acrobat Elements\ContextMenuShim64.dll [2017-04-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers6: [Kaspersky Anti-Virus 21.3] -> {37303E08-14C9-4FC3-B1D9-7993682A4691} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\x64\shellex.dll [2021-03-15] (Kaspersky Lab JSC -> AO Kaspersky Lab)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2019-03-29] (VS Revo Group Ltd. -> VS Revo Group)
ContextMenuHandlers6: [TeraCopy] -> {2386CB87-96FF-473D-A009-957E3BFE6F88} => C:\Program Files\TeraCopy\Context.dll [2021-04-22] (Code Sector -> Code Sector)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-18] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-18] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\system32\frapsv64.dll [105984 2015-09-05] (Beepa P/L) [File not signed]
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\SysWOW64\frapsvid.dll [94208 2015-09-05] (Beepa P/L) [File not signed]

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2019-01-28 20:29 - 2019-01-28 20:29 - 000015872 _____ () [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\libEGL.DLL
2019-01-28 20:28 - 2019-01-28 20:28 - 002786816 _____ () [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\libGLESv2.dll
2019-04-22 19:49 - 2019-04-22 19:49 - 000204800 _____ () [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\quazip.dll
2019-04-22 19:44 - 2019-04-22 19:44 - 000098816 _____ () [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\zlib.dll
2015-09-22 19:48 - 2015-09-22 19:48 - 000009728 _____ () [File not signed] C:\Program Files\GIGABYTE\SmartManagerV3\OSD\IsMetroUI.dll
2015-09-22 19:45 - 2015-09-22 19:45 - 000530432 _____ () [File not signed] C:\Program Files\GIGABYTE\SmartManagerV3\OSD\Skin\OSD_Skin.dll
2021-06-07 02:29 - 2021-07-19 09:40 - 007644160 _____ (Chilkat Software, Inc.) [File not signed] [File is in use] C:\WINDOWS\Microsoft.Net\assembly\GAC_32\ChilkatDotNet4\v4.0_9.5.0.61__eb5fc1fc52ef09bd\ChilkatDotNet4.dll
2015-09-22 19:48 - 2015-09-22 19:48 - 000034816 _____ (GIGABYTE TECHNOLOGY CO., LTD.) [File not signed] C:\Program Files\GIGABYTE\SmartManagerV3\OSD\WMIDLL.dll
2021-06-05 11:38 - 2021-06-05 11:38 - 001654784 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\WinSxS\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_8448b2bd328df189\MFC80U.DLL
2021-06-05 11:38 - 2021-06-05 11:38 - 000047104 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\WinSxS\amd64_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_bc20f59b0bdd1acd\MFC80ENU.DLL
2019-04-18 16:20 - 2019-04-18 16:20 - 001299456 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\LIBEAY32.dll
2019-04-18 16:20 - 2019-04-18 16:20 - 000281600 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\ssleay32.dll
2019-01-28 20:35 - 2019-01-28 20:35 - 000025600 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\imageformats\qgif.dll
2019-01-29 07:21 - 2019-01-29 07:21 - 000034816 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\imageformats\qicns.dll
2019-01-28 20:35 - 2019-01-28 20:35 - 000025600 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\imageformats\qico.dll
2019-01-28 20:36 - 2019-01-28 20:36 - 000364032 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\imageformats\qjpeg.dll
2019-01-29 07:21 - 2019-01-29 07:21 - 000021504 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\imageformats\qsvg.dll
2019-01-29 07:20 - 2019-01-29 07:20 - 000019968 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\imageformats\qtga.dll
2019-01-29 07:21 - 2019-01-29 07:21 - 000331776 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\imageformats\qtiff.dll
2019-01-29 07:20 - 2019-01-29 07:20 - 000019456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\imageformats\qwbmp.dll
2019-01-29 07:21 - 2019-01-29 07:21 - 000414208 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\imageformats\qwebp.dll
2019-01-28 20:37 - 2019-01-28 20:37 - 001192960 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\platforms\qwindows.dll
2019-01-28 20:30 - 2019-01-28 20:30 - 000024576 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Qt5Concurrent.dll
2019-04-22 20:19 - 2019-04-22 20:19 - 005087232 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Qt5Core.dll
2019-01-28 20:32 - 2019-01-28 20:32 - 005341184 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Qt5Gui.dll
2019-01-29 07:50 - 2019-01-29 07:50 - 000576512 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Qt5Multimedia.dll
2019-01-28 20:31 - 2019-01-28 20:31 - 001043456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Qt5Network.dll
2019-01-29 07:42 - 2019-01-29 07:42 - 003360768 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Qt5Qml.dll
2019-01-29 07:37 - 2019-01-29 07:37 - 003175936 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Qt5Quick.dll
2019-01-29 07:55 - 2019-01-29 07:55 - 000142336 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Qt5QuickControls2.dll
2019-01-29 07:54 - 2019-01-29 07:54 - 000848384 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Qt5QuickTemplates2.dll
2019-01-29 07:50 - 2019-01-29 07:50 - 000326656 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Qt5Scxml.dll
2019-01-28 20:30 - 2019-01-28 20:30 - 000156672 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Qt5Sql.dll
2019-01-29 07:21 - 2019-01-29 07:21 - 000264704 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Qt5Svg.dll
2019-01-28 20:34 - 2019-01-28 20:34 - 004529152 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Qt5Widgets.dll
2019-01-29 08:04 - 2019-01-29 08:04 - 000444416 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Qt5WinExtras.dll
2019-01-28 20:30 - 2019-01-28 20:30 - 000147456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Qt5Xml.dll
2019-01-29 07:49 - 2019-01-29 07:49 - 000045568 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll
2019-01-29 07:48 - 2019-01-29 07:48 - 000056320 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\QtGraphicalEffects\qtgraphicaleffectsplugin.dll
2019-01-29 07:40 - 2019-01-29 07:40 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\QtQuick.2\qtquick2plugin.dll
2019-01-29 08:00 - 2019-01-29 08:00 - 000447488 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\QtQuick\Controls.2\qtquickcontrols2plugin.dll
2019-01-29 07:56 - 2019-01-29 07:56 - 000271360 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\QtQuick\Controls\qtquickcontrolsplugin.dll
2019-01-29 07:41 - 2019-01-29 07:41 - 000072192 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\QtQuick\Layouts\qquicklayoutsplugin.dll
2019-01-29 07:55 - 2019-01-29 07:55 - 000260608 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\QtQuick\Templates.2\qtquicktemplates2plugin.dll
2019-01-29 07:41 - 2019-01-29 07:41 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\QtQuick\Window.2\windowplugin.dll
2019-01-28 20:36 - 2019-01-28 20:36 - 000122880 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\styles\qwindowsvistastyle.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 [136]

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKLM\...\.scr: CryptoPreventSCR => "C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventFilterMod.CryptoPreventEXEC" "%1" /S %*

==================== Internet Explorer (Whitelisted) ==========

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2020-12-13] (Tonec Inc. -> Internet Download Manager, Tonec Inc.)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2021-06-05] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_291\bin\ssv.dll [2021-05-29] (Oracle America, Inc. -> Oracle Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\2017\x64\AcroIEFavStub.dll [2017-04-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_291\bin\jp2ssv.dll [2021-05-29] (Oracle America, Inc. -> Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\2017\x64\AcroIEFavStub.dll [2017-04-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2020-12-13] (Tonec Inc. -> Internet Download Manager, Tonec Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-06-05] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\2017\AcroIEFavStub.dll [2017-04-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\2017\AcroIEFavStub.dll [2017-04-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\2017\x64\AcroIEFavStub.dll [2017-04-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\2017\AcroIEFavStub.dll [2017-04-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-07-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-07-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-07-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-07-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-07-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-07-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-07-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-07-30] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\...\1001movie.com -> 1001movie.com

There are 6091 more sites.


==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2021-08-17 00:28 - 2021-08-17 00:28 - 000000790 _____ C:\WINDOWS\system32\drivers\etc\hosts
5.34.180.135
27.6.168.151
31.163.166.129
54.38.53.94
62.102.148.158
78.97.123.232
80.246.94.30
82.151.125.121
82.151.125.253
84.53.216.148
88.226.31.121
94.46.223.20
95.84.27.34
103.231.91.59
103.70.136.10
111.92.80.59
115.56.67.36
115.99.31.145
115.99.31.145
116.68.99.102
116.68.110.93
116.74.93.194
116.75.69.175
116.75.67.40
117.213.45.105
128.31.0.34
131.188.40.189
131.188.40.189
139.31.0.39
154.35.175.225

2019-09-09 16:45 - 2019-09-09 17:12 - 000000436 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%INTEL_DEV_REDIST%redist\intel64_win\compiler;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files\Microsoft VS Code\bin;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\Bitvise SSH Client
HKU\S-1-5-21-2919148645-4255438607-1692176429-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Growlithe\AppData\Local\DisplayFusion\Wallpaper_1.png
DNS Servers: 1.1.1.1 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

Network Binding:
=============
Local Area Connection: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 
Ethernet 2: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 
Ethernet 4: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 
Ethernet 3: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 
Ethernet 5: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 
OpenVPN Wintun: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 
Wi-Fi: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 
Ethernet: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
HKLM\...\StartupApproved\Run32: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run32: => "Dropbox"
HKLM\...\StartupApproved\Run32: => "IJNetworkScannerSelectorEX"
HKLM\...\StartupApproved\Run32: => "PowerDVD18Agent"
HKLM\...\StartupApproved\Run32: => "SwitchBoard"
HKLM\...\StartupApproved\Run32: => "GrpConv"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{3D731566-CDC1-43F5-A924-4833F03EBA12}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9B502652-0E8E-4CFA-BFDE-67A6B0D97105}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{DB2AE435-5F1C-4DCD-8FFE-5A8F14B0843F}] => (Allow) B:\Steam2019\steamapps\common\State of Decay\StateOfDecay.exe () [File not signed]
FirewallRules: [{FBBEA889-D7E7-4AD9-9A77-6115D29423A0}] => (Allow) B:\Steam2019\steamapps\common\State of Decay\StateOfDecay.exe () [File not signed]
FirewallRules: [{10C1C6EE-5739-42B9-B73E-B34CB1894DB6}] => (Allow) B:\Steam2019\steamapps\common\Raiders of the Broken Planet\bin\Spacelords.exe (Mercury Steam Entertainment) [File not signed]
FirewallRules: [{02801D16-EDDA-4412-8C2C-E68ADC5C27E2}] => (Allow) B:\Steam2019\steamapps\common\Raiders of the Broken Planet\bin\Spacelords.exe (Mercury Steam Entertainment) [File not signed]
FirewallRules: [{054AA8B5-E86F-49B3-96CF-4AE8D7AEB550}] => (Allow) BiglyBT.exe => No File
FirewallRules: [{DC549BC3-0271-41A7-9166-AF8B3FA5D0BE}] => (Allow) B:\Steam2019\steamapps\common\Crusader Kings III\launcher\dowser.exe => No File
FirewallRules: [{A67C4EEC-AD9D-4B88-A7B4-3A59750B289F}] => (Allow) B:\Steam2019\steamapps\common\Crusader Kings III\launcher\dowser.exe => No File
FirewallRules: [{A8CCCFFE-A6D7-4988-BACF-E3C9CFB8F804}] => (Allow) B:\Steam2019\steamapps\common\Dawn of Fantasy\Editor.exe () [File not signed]
FirewallRules: [{4CC93380-3A2A-4151-9846-258383F41036}] => (Allow) B:\Steam2019\steamapps\common\Dawn of Fantasy\Editor.exe () [File not signed]
FirewallRules: [{8F6C17D0-DAD4-4CCF-99BB-FAA19213EBEE}] => (Allow) B:\Steam2019\steamapps\common\Dawn of Fantasy\dof_options.exe () [File not signed]
FirewallRules: [{42A77FCA-498C-4633-843A-5257B58370F4}] => (Allow) B:\Steam2019\steamapps\common\Dawn of Fantasy\dof_options.exe () [File not signed]
FirewallRules: [{AEF48066-8DC5-4947-AA22-271752004C50}] => (Allow) B:\Steam2019\steamapps\common\Dawn of Fantasy\Dof.exe () [File not signed]
FirewallRules: [{92A4B559-81BB-457E-9AEF-A5252B3935B4}] => (Allow) B:\Steam2019\steamapps\common\Dawn of Fantasy\Dof.exe () [File not signed]
FirewallRules: [{D5FD7800-E7F2-495D-8B6A-D21FCD0AD441}] => (Allow) B:\Steam2019\steamapps\common\TotallyAccurateBattlegrounds\TABG_Launcher.exe (Int3 Software AB -> Int3 Software AB)
FirewallRules: [{6E440748-38EE-4F56-B16D-71045A7448FF}] => (Allow) B:\Steam2019\steamapps\common\TotallyAccurateBattlegrounds\TABG_Launcher.exe (Int3 Software AB -> Int3 Software AB)
FirewallRules: [{BBDC3965-94B6-454A-A8B4-04E2EB1357FF}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
FirewallRules: [{A0E4779B-43AE-4737-B21B-E622F4797AA0}] => (Allow) B:\Steam2019\steamapps\common\Transformice\Transformice.exe () [File not signed]
FirewallRules: [{D084E306-9E70-4AE2-84B0-9526E97BF92D}] => (Allow) B:\Steam2019\steamapps\common\Transformice\Transformice.exe () [File not signed]
FirewallRules: [{3C459772-3D03-42EE-8062-A31ECC82E464}] => (Allow) B:\Steam2019\steamapps\common\Guns of Icarus Online\workshop\Workshop.exe () [File not signed]
FirewallRules: [{CE490A3D-C31E-47D1-BCA5-EE76771E7170}] => (Allow) B:\Steam2019\steamapps\common\Guns of Icarus Online\workshop\Workshop.exe () [File not signed]
FirewallRules: [{2DDAA90E-30DF-4892-976E-B8927F470C57}] => (Allow) B:\Steam2019\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe => No File
FirewallRules: [{9012E72E-6644-4D29-B736-AABBA73E0450}] => (Allow) B:\Steam2019\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe => No File
FirewallRules: [{E32F921F-7361-41BD-948D-6ADA88F9F38C}] => (Allow) B:\Steam2019\steamapps\common\Helltaker\Helltaker.exe () [File not signed]
FirewallRules: [{961E86A8-4E14-4F57-94BD-EFFC919047B1}] => (Allow) B:\Steam2019\steamapps\common\Helltaker\Helltaker.exe () [File not signed]
FirewallRules: [{7468BE95-DFFE-4B4B-B882-99C2AE60B10B}] => (Allow) B:\Steam2019\steamapps\common\The Deed\Game.exe () [File not signed]
FirewallRules: [{E43797FD-FC6D-4DD7-B6F8-3ED6D2726505}] => (Allow) B:\Steam2019\steamapps\common\The Deed\Game.exe () [File not signed]
FirewallRules: [{F61D1D08-B23F-40DF-B1A7-760E8DCBB75A}] => (Allow) B:\Steam2019\steamapps\common\Deiland\Deiland.exe () [File not signed]
FirewallRules: [{E8009EAD-45DD-4DC6-8125-378BCEEEB606}] => (Allow) B:\Steam2019\steamapps\common\Deiland\Deiland.exe () [File not signed]
FirewallRules: [{95E59B45-1DB2-4EE5-B688-88D82B65FC29}] => (Allow) B:\Steam2019\steamapps\common\Acceleration of SUGURI 2\aos2.exe () [File not signed]
FirewallRules: [{A658562F-0726-4935-BDE7-D34480403B57}] => (Allow) B:\Steam2019\steamapps\common\Acceleration of SUGURI 2\aos2.exe () [File not signed]
FirewallRules: [{67102322-A562-4B59-A4F3-DD3732790F22}] => (Allow) B:\Steam2019\steamapps\common\200 Mixed Juice!\200MJ.exe () [File not signed]
FirewallRules: [{209F114E-695D-4B56-88B7-B1C3B3D93BEB}] => (Allow) B:\Steam2019\steamapps\common\200 Mixed Juice!\200MJ.exe () [File not signed]
FirewallRules: [{8FC231D7-BC0B-4691-986B-211ADCB48E9E}] => (Allow) B:\Steam2019\steamapps\common\100 Orange Juice\100orange.exe () [File not signed]
FirewallRules: [{D96F2D19-42A4-4A1C-B2CC-FA3F3131A299}] => (Allow) B:\Steam2019\steamapps\common\100 Orange Juice\100orange.exe () [File not signed]
FirewallRules: [{2787A3CF-7F6D-43E7-A095-A6BF26B63DCD}] => (Allow) B:\Steam2019\steamapps\common\Zombie_Driver_HD\bin\ZombieDriverHD.exe () [File not signed]
FirewallRules: [{83B9005E-4984-4244-992D-A3FAA18C2EEF}] => (Allow) B:\Steam2019\steamapps\common\Zombie_Driver_HD\bin\ZombieDriverHD.exe () [File not signed]
FirewallRules: [{15F854C0-645D-41BD-B0AD-C394C25D4CBA}] => (Allow) B:\Steam2019\steamapps\common\Warzone 2100\bin\warzone2100.exe (Warzone 2100 Project) [File not signed]
FirewallRules: [{4A786F61-55BD-4D28-8C21-953586F40E4E}] => (Allow) B:\Steam2019\steamapps\common\Warzone 2100\bin\warzone2100.exe (Warzone 2100 Project) [File not signed]
FirewallRules: [{691F5C99-1338-47C4-8AA2-5540D85D3192}] => (Allow) B:\Steam2019\steamapps\common\Starpoint Gemini 2\StarpointGemini2.exe () [File not signed]
FirewallRules: [{2A5FB037-A5D6-4C4B-A921-8E9CD26D327E}] => (Allow) B:\Steam2019\steamapps\common\Starpoint Gemini 2\StarpointGemini2.exe () [File not signed]
FirewallRules: [{9C366FC3-C9D0-46A9-B962-3BDB870CB161}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{05653F53-56FA-4276-B9ED-717995CBCB7B}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FE15C402-B0B3-4287-ABFA-DBBE63E6DA32}] => (Allow) B:\Steam2019\steamapps\common\Yet Another Zombie Defense\YetAnotherZombieDefense.exe (Awesome Games Studio) [File not signed]
FirewallRules: [{162890C5-7E04-4910-A9AE-C963964FA7A7}] => (Allow) B:\Steam2019\steamapps\common\Yet Another Zombie Defense\YetAnotherZombieDefense.exe (Awesome Games Studio) [File not signed]
FirewallRules: [{0F3E5C18-CA42-4A06-97C9-BA12860CD249}] => (Allow) B:\Steam2019\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{AA68A6DB-2F4F-4211-8D0B-59EE414C0F90}] => (Allow) B:\Steam2019\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{3987D158-A871-435A-A9C4-B18B23971909}] => (Allow) B:\Steam2019\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{35248B21-69FB-4314-AC75-8A873EDAAACF}] => (Allow) B:\Steam2019\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{E498E3D4-518C-48DA-B9AD-4877B6498FB6}] => (Allow) B:\Steam2019\steamapps\common\TheRedSolstice\bin\Game.exe (Ironward) [File not signed]
FirewallRules: [{CA53C686-2224-4654-B313-9BD688D690EE}] => (Allow) B:\Steam2019\steamapps\common\TheRedSolstice\bin\Game.exe (Ironward) [File not signed]
FirewallRules: [{FC97F3EF-4F99-49B6-AAF8-4F0590E5E7E2}] => (Allow) B:\Steam2019\steamapps\common\Orwell\Orwell.exe () [File not signed]
FirewallRules: [{76561CB7-7847-40EC-80CA-EBDABEAE558C}] => (Allow) B:\Steam2019\steamapps\common\Orwell\Orwell.exe () [File not signed]
FirewallRules: [{FFAF8A4F-D4D8-485C-B0FA-DDF388C9BAD7}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{D2BAB015-D8FC-429C-B533-1863F0DB99DE}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{8B2808D5-35A3-41EF-934C-7C321E3CC342}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{8727AA09-C99E-4A98-BD7E-FF8C572C13DA}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{CA86FAD7-617C-415D-952D-E49A4DC3BEF3}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{1A0A0A95-586B-4E63-816B-96CEC70E18F6}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{94166F15-96BB-45E7-88B2-E823A68D2A00}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{48E61D84-6C58-40F7-9A71-BEB8B7C1CE01}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{18012F77-5B6D-4ACA-8941-48193BA46FC1}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{53EF0FE4-AFC4-4F2E-8EB9-19A298A9F8C7}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{6AA4DD6C-CD76-44B7-B920-628519957291}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{E5F42FEE-45A2-46EC-9845-56DFC373579B}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{B514ABCB-8A65-4E5A-AEE8-7298C33D3535}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{C6D02E0F-C597-4E77-AFD7-B5133FAF1E5E}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{3A02F2DB-362A-40D1-81C2-D0830281CFD9}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{FF1262CC-5D47-4567-AD34-EF342F5441D8}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{DBA423C2-8A16-46CB-99BC-BD581ACE65FC}] => (Allow) B:\Steam2019\steamapps\common\Prismata\Prismata.exe () [File not signed]
FirewallRules: [{BEC3C2ED-DC13-48CF-AA2B-0C678EE68D12}] => (Allow) B:\Steam2019\steamapps\common\Prismata\Prismata.exe () [File not signed]
FirewallRules: [{962052C4-476B-4E81-8E6A-96D02571B294}] => (Allow) B:\Steam2019\steamapps\common\Eador. Masters of the Broken World\launcher.exe () [File not signed]
FirewallRules: [{1B751BAD-C091-4679-8BD1-B57CDD01A122}] => (Allow) B:\Steam2019\steamapps\common\Eador. Masters of the Broken World\launcher.exe () [File not signed]
FirewallRules: [{A7A29B62-C445-42AF-9CFD-396755A3EB8E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{93D69DA5-35E1-4665-9E0B-8CF2AB0D3723}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{1BB0EFD7-B7A3-4B99-A3B3-CF743741DE9B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.104.197.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{12FC005D-45DC-40C9-823E-0FB858541785}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.104.197.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{48F7143A-7D5A-4EE6-8D4B-AB497482DD6C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.104.197.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F24DF88E-86E2-4F81-B017-47BB0782225F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.104.197.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D848AD39-36F5-4700-B299-FE68209BFE12}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.104.197.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{385FE5C4-E5E3-4E38-A6CD-03E666882BAF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.104.197.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8A6823F6-C47E-430E-8927-38D7307B87A1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.104.197.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{C19682C8-6C75-41E9-9693-476BE67BB403}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.104.197.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3FAA55BB-47F2-4B81-A799-CFCFCF8B14C2}] => (Allow) B:\Steam2019\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{C67DB700-F7D5-43E3-B46C-8821108A74D2}] => (Allow) B:\Steam2019\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{B7E1201A-7A00-418C-8E3B-3BE0EBA2A62E}] => (Allow) B:\Steam2019\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{EE89CA4F-717C-4CCE-B8DE-F8E1A503686E}] => (Allow) B:\Steam2019\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{AA7097C4-0246-43A9-98E8-83DB0F1F71F7}] => (Allow) B:\Steam2019\steamapps\common\DisplayFusion\DisplayFusionLauncher.exe (Binary Fortress Software Ltd -> Binary Fortress Software)
FirewallRules: [{B81B7893-9161-40F5-85C2-C3D8FB7790A1}] => (Allow) B:\Steam2019\steamapps\common\DisplayFusion\DisplayFusionLauncher.exe (Binary Fortress Software Ltd -> Binary Fortress Software)
FirewallRules: [{5B8668CC-D1AF-40F2-A740-A8A8640529C7}] => (Allow) C:\Program Files\Mozilla Firefox 52.9 ESR\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{028B86B9-4F07-4542-9532-354D44EAB4F4}] => (Allow) C:\Program Files\Mozilla Firefox 52.9 ESR\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{ECBC8EF0-43C8-4869-8F00-7C814C117091}] => (Allow) B:\Steam2019\steamapps\common\KillingFloor\System\KillingFloor.exe () [File not signed]
FirewallRules: [{D48519C7-AEC0-4E26-94CA-3CBA99E7039E}] => (Allow) B:\Steam2019\steamapps\common\KillingFloor\System\KillingFloor.exe () [File not signed]
FirewallRules: [{26469541-C431-4D1E-8208-843F4784D534}] => (Allow) B:\Steam2019\steamapps\common\Crusader Kings II\CK2game.exe (Paradox Interactive AB (publ) -> Paradox Interactive)
FirewallRules: [{45550666-813F-4153-8192-4EB9F089BB3F}] => (Allow) B:\Steam2019\steamapps\common\Crusader Kings II\CK2game.exe (Paradox Interactive AB (publ) -> Paradox Interactive)
FirewallRules: [{71559867-38E6-4D4D-8D27-A4F971FA1C20}] => (Allow) B:\Steam2019\steamapps\common\Company of Heroes 2\RelicCoH2.exe (RELIC ENTERTAINMENT, INC. -> Relic Entertainment Inc.)
FirewallRules: [{95C2662A-5EF5-484D-AB26-004C657D7775}] => (Allow) B:\Steam2019\steamapps\common\Company of Heroes 2\RelicCoH2.exe (RELIC ENTERTAINMENT, INC. -> Relic Entertainment Inc.)
FirewallRules: [{44403452-1E53-4F3A-923E-D8A1DD29007E}] => (Allow) B:\Steam2019\steamapps\common\TotallyAccurateBattlegrounds\TotallyAccurateBattlegrounds.exe () [File not signed]
FirewallRules: [{E9B0272E-737A-49A0-ABD2-1F4EA5CD676D}] => (Allow) B:\Steam2019\steamapps\common\TotallyAccurateBattlegrounds\TotallyAccurateBattlegrounds.exe () [File not signed]
FirewallRules: [{7564957C-A5A9-413D-AE8B-0C029C072CAC}] => (Allow) B:\Steam2019\steamapps\common\Neptunia Rebirth1\NeptuniaReBirth1.exe () [File not signed]
FirewallRules: [{9C311C15-EE4E-4E1F-97D2-D0016F4881BA}] => (Allow) B:\Steam2019\steamapps\common\Neptunia Rebirth1\NeptuniaReBirth1.exe () [File not signed]
FirewallRules: [{ADF3AC26-1BC4-41CA-BE54-8ABA5BC8EBEA}] => (Allow) B:\Steam2019\steamapps\common\Neptunia Rebirth2\NeptuniaReBirth2.exe () [File not signed]
FirewallRules: [{F676D5BB-C233-4FF5-AE8A-248633A0C660}] => (Allow) B:\Steam2019\steamapps\common\Neptunia Rebirth2\NeptuniaReBirth2.exe () [File not signed]
FirewallRules: [{2F47227C-C9B5-4CB0-818D-20BB70695968}] => (Allow) B:\Steam2019\steamapps\common\Hyperdimension Neptunia Re;Birth3\NeptuniaReBirth3.exe () [File not signed]
FirewallRules: [{3B2CD6FB-639E-407E-8E87-BDD779FAB358}] => (Allow) B:\Steam2019\steamapps\common\Hyperdimension Neptunia Re;Birth3\NeptuniaReBirth3.exe () [File not signed]
FirewallRules: [{E8720377-8CF3-4C1F-BACF-8FF5E78992D3}] => (Allow) B:\Steam2019\steamapps\common\Warhammer End Times Vermintide\launcher\Launcher.exe (Fatshark AB -> Fatshark AB)
FirewallRules: [{B87B9477-BC20-490A-80E0-1F9633A9F602}] => (Allow) B:\Steam2019\steamapps\common\Warhammer End Times Vermintide\launcher\Launcher.exe (Fatshark AB -> Fatshark AB)
FirewallRules: [{0053D136-FF70-4328-B201-FC115E9E9DA3}] => (Allow) B:\Steam2019\steamapps\common\Warhammer End Times Vermintide\binaries\vermintide.exe (Fatshark AB -> Fatshark AB)
FirewallRules: [{C6D8F279-0D2D-44F6-8C6B-FAC8C5BABB66}] => (Allow) B:\Steam2019\steamapps\common\Warhammer End Times Vermintide\binaries\vermintide.exe (Fatshark AB -> Fatshark AB)
FirewallRules: [{234B9D59-CF49-4031-9F8D-384D41458A87}] => (Allow) B:\Steam2019\steamapps\common\Planetary Annihilation Titans\bin_x64\PA.exe (Planetary Annihilation Inc -> Planetary Annihilation Inc)
FirewallRules: [{1C580156-61FA-4CE4-9D15-58ED6102AD99}] => (Allow) B:\Steam2019\steamapps\common\Planetary Annihilation Titans\bin_x64\PA.exe (Planetary Annihilation Inc -> Planetary Annihilation Inc)
FirewallRules: [{CE4E0B6A-C304-4138-B738-B0E3931EC460}] => (Allow) B:\Steam2019\steamapps\common\Guns of Icarus Online\GunsOfIcarusOnline.exe () [File not signed]
FirewallRules: [{B4EAE4C0-6B30-493C-8F3B-5BB7D8367E62}] => (Allow) B:\Steam2019\steamapps\common\Guns of Icarus Online\GunsOfIcarusOnline.exe () [File not signed]
FirewallRules: [{2A82CBBE-5E56-41A4-A8F0-6C091FC543DB}] => (Allow) B:\Steam2019\steamapps\common\Cyberdimension Neptunia 4 Goddesses Online\CyberdimensionNeptunia4GoddessesOnline.exe () [File not signed]
FirewallRules: [{7B07BC92-988F-4D68-B961-2D5D65D72EF0}] => (Allow) B:\Steam2019\steamapps\common\Cyberdimension Neptunia 4 Goddesses Online\CyberdimensionNeptunia4GoddessesOnline.exe () [File not signed]
FirewallRules: [{D39DC0C1-9EF9-4F16-8BAA-B691A59675D2}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{8DA9F40D-48D2-48DB-8CC0-B0D7923358ED}] => (Allow) B:\Steam2019\steamapps\common\Monaco\MONACO.exe () [File not signed]
FirewallRules: [{F4370FA1-3FD8-42DE-AEF6-1E6E1E7E02AA}] => (Allow) B:\Steam2019\steamapps\common\Monaco\MONACO.exe () [File not signed]
FirewallRules: [{841AAF5A-EF05-40EC-BB69-31B2BF672C26}] => (Allow) C:\Program Files\Opera\60.0.3255.151\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{87AADF7B-A3A8-4BD9-A369-96F7F48D66D9}] => (Allow) B:\Steam2019\steamapps\common\Evolvation\Evolvation.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{68CDCF75-11BB-4645-881B-A23CA0681AB9}] => (Allow) B:\Steam2019\steamapps\common\Evolvation\Evolvation.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{FAAF3D34-285F-4094-AEA1-26788DB825A7}] => (Allow) B:\Steam2019\steamapps\common\3DMark\3DMarkLauncher.exe (FUTUREMARK INC -> Futuremark)
FirewallRules: [{1C3E0312-781B-44E1-868E-4CA4535FD868}] => (Allow) B:\Steam2019\steamapps\common\3DMark\3DMarkLauncher.exe (FUTUREMARK INC -> Futuremark)
FirewallRules: [{A2A44E50-4D29-4623-B860-E45B5DAA118E}] => (Allow) B:\Steam2019\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe (Codemasters Software Company Limited) [File not signed]
FirewallRules: [{B3320780-73BF-4124-B765-712527B43A9A}] => (Allow) B:\Steam2019\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe (Codemasters Software Company Limited) [File not signed]
FirewallRules: [{1D822F41-7904-4C0D-93FB-3A1C5F2ECA5C}] => (Allow) B:\Steam2019\steamapps\common\Game Guru\GameGuru.exe (The Game Creators) [File not signed]
FirewallRules: [{D40EF956-AFD8-4AC7-9FE6-EE805CA573E6}] => (Allow) B:\Steam2019\steamapps\common\Game Guru\GameGuru.exe (The Game Creators) [File not signed]
FirewallRules: [{7EAD465D-91D1-4DE8-A097-B2DCA687C625}] => (Allow) B:\Steam2019\steamapps\common\KHOLAT\Kholat.exe () [File not signed]
FirewallRules: [{8CC71E21-74DD-4357-AD87-06DFF976A41E}] => (Allow) B:\Steam2019\steamapps\common\KHOLAT\Kholat.exe () [File not signed]
FirewallRules: [{4B10BF72-CCC9-4CB1-986F-CE86ED1FCBF6}] => (Allow) B:\Steam2019\steamapps\common\Braveland\braveland.exe () [File not signed]
FirewallRules: [{470FEB9A-F4EA-41EC-A39E-6185E2C0A7F0}] => (Allow) B:\Steam2019\steamapps\common\Braveland\braveland.exe () [File not signed]
FirewallRules: [{F361CA49-8843-4F52-B834-08B92DD43E69}] => (Allow) C:\Program Files\Opera\62.0.3331.116\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{A1FA9E9E-E1F9-483B-846B-51882BD3A6F7}] => (Allow) B:\Steam2019\steamapps\common\Sins of a Solar Empire Rebellion\StardockLauncher.exe (STARDOCK SYSTEMS, INC. -> Stardock Corporation)
FirewallRules: [{86EB080E-E206-4C1B-81BC-5B3D15783B4B}] => (Allow) B:\Steam2019\steamapps\common\Sins of a Solar Empire Rebellion\StardockLauncher.exe (STARDOCK SYSTEMS, INC. -> Stardock Corporation)
FirewallRules: [{F601C115-6DE8-45D8-BFDB-60353C9AB5B4}] => (Allow) B:\Steam2019\steamapps\common\Jotun\Jotun.exe () [File not signed]
FirewallRules: [{088483B7-627D-499B-9375-7CBE209AE652}] => (Allow) B:\Steam2019\steamapps\common\Jotun\Jotun.exe () [File not signed]
FirewallRules: [{BAA2FFC6-9FF2-45A0-8790-BF0095D66BD6}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{26392D05-554A-488A-A167-06F97DD50C91}] => (Allow) B:\Steam2019\steamapps\common\3DMark\bin\x86\3DMark.exe (FUTUREMARK INC -> )
FirewallRules: [{F3340BE7-6252-45B2-BEED-EBBE6193E629}] => (Allow) B:\Steam2019\steamapps\common\3DMark\bin\x86\3DMark.exe (FUTUREMARK INC -> )
FirewallRules: [{7ABB0B49-2727-4720-9EB0-19D7919EB101}] => (Allow) B:\Steam2019\steamapps\common\3DMark\bin\x64\3DMark.exe (FUTUREMARK INC -> )
FirewallRules: [{F4CF09F2-2D46-4EEE-8CD8-AB0836B2B4F7}] => (Allow) B:\Steam2019\steamapps\common\3DMark\bin\x64\3DMark.exe (FUTUREMARK INC -> )
FirewallRules: [{24E80271-0F9F-4233-BFF1-4B7FA9D46E87}] => (Allow) B:\Steam2019\steamapps\common\killingfloor2\Binaries\Win64\KFEditor.exe (Tripwire Interactive, LLC.) [File not signed]
FirewallRules: [{E10A4058-ED89-467D-B35C-267CFDEB6A2D}] => (Allow) B:\Steam2019\steamapps\common\killingfloor2\Binaries\Win64\KFEditor.exe (Tripwire Interactive, LLC.) [File not signed]
FirewallRules: [{6BEF8C8F-F099-42A2-AB9B-81C7CDB6C430}] => (Allow) B:\Steam2019\steamapps\common\killingfloor2\Binaries\SDKFrontend.exe (Epic Games, Inc. and Tripwire Interactive) [File not signed]
FirewallRules: [{7518664A-4731-4856-BCA8-964158E454EF}] => (Allow) B:\Steam2019\steamapps\common\killingfloor2\Binaries\SDKFrontend.exe (Epic Games, Inc. and Tripwire Interactive) [File not signed]
FirewallRules: [{E4A25BAB-5F9C-4F8D-97DC-8EC01A47B89F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{F608715D-63D6-4000-8A3F-5A7CA1DAC2CC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{B088D371-5C82-42D5-B4DE-3CF4429130E4}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{D328CE90-FE1B-4C44-97C2-4E376A773E34}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{ABD119BD-BEC2-4CD8-B2F4-35531DD35DB3}] => (Allow) B:\Steam2019\steamapps\common\Starbound\win64\starbound.exe (Chucklefish LTD) [File not signed]
FirewallRules: [{A11F8771-9BC9-4981-AD00-E71A801DA4BA}] => (Allow) B:\Steam2019\steamapps\common\Starbound\win64\starbound.exe (Chucklefish LTD) [File not signed]
FirewallRules: [{DCBA7FBF-5501-42BE-A236-81ED648D65B7}] => (Allow) B:\Steam2019\steamapps\common\Starbound\win64\starbound_server.exe () [File not signed]
FirewallRules: [{E17B19FA-CF8B-4773-B705-23274AA1CF71}] => (Allow) B:\Steam2019\steamapps\common\Starbound\win64\starbound_server.exe () [File not signed]
FirewallRules: [{1A01A81F-DA5A-439D-8B65-699D4F8680B8}] => (Allow) B:\Steam2019\steamapps\common\Starbound\win64\mod_uploader.exe () [File not signed]
FirewallRules: [{C3C4D3DA-8387-45B4-A8F8-63D905A0E411}] => (Allow) B:\Steam2019\steamapps\common\Starbound\win64\mod_uploader.exe () [File not signed]
FirewallRules: [{B7C00980-7A17-4ECA-A58D-AFFF131940BB}] => (Allow) B:\Steam2019\steamapps\common\Starbound\win32\starbound.exe (Chucklefish LTD) [File not signed]
FirewallRules: [{44F7BFB7-411E-4117-9693-E13EAE6E50AC}] => (Allow) B:\Steam2019\steamapps\common\Starbound\win32\starbound.exe (Chucklefish LTD) [File not signed]
FirewallRules: [{7593D606-4E9D-4936-856C-FAEFA9499A22}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.165.643.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{ED2322F9-76AE-449C-AB2E-F45E37D75542}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.165.643.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{FD57F990-43A8-48DF-A00D-C22ABDE92D8F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.165.643.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{7E5A909C-DA78-4B0A-9EA9-D5970969CAEC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.165.643.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{DB359E3F-5705-41CE-B8AD-ED4297CC5581}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.165.643.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{6275E551-EE09-48C4-ADA6-E79CCBD16420}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.165.643.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{0F67FEEB-EA83-4DDE-BE0C-85A30B7D3520}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.165.643.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{86B91E59-A1B0-4321-840F-2794290FF625}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.165.643.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2D5B0769-4E8A-46D9-8C2C-91340C3004C1}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\92.0.902.73\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{621DE410-9DF3-4347-A614-C5FBFF4056B8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{2663573E-53F6-42A9-B751-6AB7733927D0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{A9B24422-0C57-41B9-87ED-D667A6C3B4BA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{E0972C78-9923-48FD-B757-28339F6A595A}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8925ACB9-E185-4E23-9B13-FB155EC5A384}] => (Allow) B:\Steam2019\steamapps\common\Muck\Muck.exe () [File not signed]
FirewallRules: [{E8B10438-A63A-46FF-897B-8D427D2A1A86}] => (Allow) B:\Steam2019\steamapps\common\Muck\Muck.exe () [File not signed]

==================== Restore Points =========================

ATTENTION: System Restore is disabled (Total:3724.87 GB) (Free:2529.82 GB) (68%)
Check "VSS" service


==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (08/18/2021 09:07:00 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program explorer.exe version 10.0.19041.1151 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 284c

Start Time: 01d792ffde9f761b

Termination Time: 49434

Application Path: C:\Windows\explorer.exe

Report Id: 233f1e26-f1ae-4c3a-8478-a76afc9e28a8

Faulting package full name: 

Faulting package-relative application ID: 

Hang type: Unknown

Error: (08/18/2021 07:38:16 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program mpc-hc64.exe version 1.7.13.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 36cc

Start Time: 01d7941e0ffe2c7b

Termination Time: 58

Application Path: C:\Program Files\MPC-HC\mpc-hc64.exe

Report Id: 2ba25ac0-9f92-43f7-b2d4-858d02fd9b21

Faulting package full name: 

Faulting package-relative application ID: 

Hang type: Unknown

Error: (08/18/2021 09:01:19 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (08/17/2021 11:19:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: launcher.exe_Opera Internet Browser, version: 62.0.3331.116, time stamp: 0x5d490950
Faulting module name: launcher.exe, version: 62.0.3331.116, time stamp: 0x5d490950
Exception code: 0x80000003
Fault offset: 0x000000000005ed30
Faulting process id: 0x39f0
Faulting application start time: 0x01d7937b556374f8
Faulting application path: C:\Program Files\Opera\launcher.exe
Faulting module path: C:\Program Files\Opera\launcher.exe
Report Id: 0833d57a-1ec7-484e-aee7-4c25ff966a6a
Faulting package full name: 
Faulting package-relative application ID:

Error: (08/17/2021 08:36:56 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: launcher.exe_Opera Internet Browser, version: 62.0.3331.116, time stamp: 0x5d490950
Faulting module name: launcher.exe, version: 62.0.3331.116, time stamp: 0x5d490950
Exception code: 0x80000003
Fault offset: 0x000000000005ed30
Faulting process id: 0x3c30
Faulting application start time: 0x01d792fff829dd27
Faulting application path: C:\Program Files\Opera\launcher.exe
Faulting module path: C:\Program Files\Opera\launcher.exe
Report Id: f23b697c-8f44-4c30-89b4-f972c0341005
Faulting package full name: 
Faulting package-relative application ID:

Error: (08/17/2021 08:34:56 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (08/16/2021 11:19:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: launcher.exe_Opera Internet Browser, version: 62.0.3331.116, time stamp: 0x5d490950
Faulting module name: launcher.exe, version: 62.0.3331.116, time stamp: 0x5d490950
Exception code: 0x80000003
Fault offset: 0x000000000005ed30
Faulting process id: 0x3784
Faulting application start time: 0x01d792b22b3faabd
Faulting application path: C:\Program Files\Opera\launcher.exe
Faulting module path: C:\Program Files\Opera\launcher.exe
Report Id: afe54e6c-d4ce-447f-a036-920cea64a2d1
Faulting package full name: 
Faulting package-relative application ID:

Error: (08/16/2021 09:07:57 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: FIRETYPE)
Description: Skipping: Eap method DLL path validation failed. Error: typeId=43, authorId=9, vendorId=0, vendorType=0


System errors:
=============
Error: (08/17/2021 07:14:22 PM) (Source: DCOM) (EventID: 10010) (User: FIRETYPE)
Description: The server microsoft.windowscommunicationsapps_16005.14326.20090.0_x64__8wekyb3d8bbwe!microsoft.windowslive.calendar.AppXwkn9j84yh1kvnt49k5r8h6y1ecsv09hs.mca did not register with DCOM within the required timeout.

Error: (08/17/2021 08:31:40 AM) (Source: volmgr) (EventID: 46) (User: )
Description: Crash dump initialization failed!

Error: (08/16/2021 09:15:13 PM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16392) (User: NT AUTHORITY)
Description: The BITS service failed to start.  Error 2147942405.

Error: (08/16/2021 10:55:05 AM) (Source: DCOM) (EventID: 10010) (User: FIRETYPE)
Description: The server microsoft.windowscommunicationsapps_16005.14326.20090.0_x64__8wekyb3d8bbwe!microsoft.windowslive.calendar.AppXwkn9j84yh1kvnt49k5r8h6y1ecsv09hs.mca did not register with DCOM within the required timeout.

Error: (08/14/2021 03:13:48 PM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16392) (User: NT AUTHORITY)
Description: The BITS service failed to start.  Error 2147942405.

Error: (08/14/2021 03:13:28 PM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16392) (User: NT AUTHORITY)
Description: The BITS service failed to start.  Error 2147942405.

Error: (08/14/2021 03:13:07 PM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16392) (User: NT AUTHORITY)
Description: The BITS service failed to start.  Error 2147942405.

Error: (08/14/2021 03:12:47 PM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16392) (User: NT AUTHORITY)
Description: The BITS service failed to start.  Error 2147942405.


CodeIntegrity:
===============
Date: 2021-08-18 12:08:35
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\x64\antimalware_provider.dll that did not meet the Windows signing level requirements.

Date: 2021-08-18 08:59:01
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\x64\antimalware_provider.dll that did not meet the Windows signing level requirements.


==================== Memory info =========================== 

BIOS: American Megatrends Inc. P35V3.FD12 08/07/2018
Motherboard: GIGABYTE P35V3
Processor: Intel(R) Core(TM) i7-4710HQ CPU @ 2.50GHz
Percentage of memory in use: 64%
Total physical RAM: 16302.4 MB
Available physical RAM: 5863.43 MB
Total Virtual: 16302.4 MB
Available Virtual: 4468.2 MB

==================== Drives ================================

Drive b: (Game Drive) (Fixed) (Total:1863.01 GB) (Free:1205.52 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive c: (Win10x64Pro) (Fixed) (Total:3724.87 GB) (Free:2529.82 GB) NTFS
Drive e: (ZL 20029605) (Fixed) (Total:931.51 GB) (Free:188.58 GB) NTFS

\\?\Volume{02cc87b0-5393-48b1-a6ba-4447a3a6cab1}\ (Recovery) (Fixed) (Total:0.49 GB) (Free:0.47 GB) NTFS
\\?\Volume{c04519fd-6d17-439a-b462-2d3437bd09ad}\ () (Fixed) (Total:0.56 GB) (Free:0.08 GB) NTFS
\\?\Volume{19c90425-7676-4e87-91be-f9622e7a31e2}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==================== End of Addition.txt =======================

June 24, 2021

Oh, it got moved here. Sorry, haven't logged in a while. Ok so it got back down again for a good while but then suddenly went back up again after some time, check this screenshot out and it's overtaken firefox, which is usually my memory hogger on the machine, over!

As for that support tool, nothing's happening when I run it...

June 21, 2021

On 1/28/2018 at 4:07 AM, nikhils said:

We're sorry you had issues with our program today. We've addressed the issue and here's what you need to do to fix it.

*** How to resolve / verify you have the fixed update package ***

Update package version 1.0.3803 or higher contains the fix

To resolve, simply reboot your machine. In some cases, a second or even third reboot may be needed.

To verify you have this update, go to Settings -> About -> Update package version: 1.0.3803

To learn more about what happened, please go here:

If you continued or new issues, please start a new thread and we'll happily look into that for you.

I thought you said this was fixed, what's this:

? - had to restart the program, that's why the sudden drop...

And in case you're wondering what version I'm running:

garbled.png.6884d8ca92fa849d29468e79d2d27612.png

March 22, 2021

On 3/9/2021 at 1:07 AM, Porthos said:

Actually it is a Windows 8 and 10 feature.

Oh...

OK, so to update you lot on what happened to my scenario, it looks like the guy decided to take his problem to the seller and they fixed it up for him instead, presumably under warranty. I was actually ready to stick in my windows 10 bootable flash drive to install windows and drivers but nope; very anticlimactic.....oh well.... Thanks for all the guidance and wasting your precious time on me I guess. 🤙

March 8, 2021

22 hours ago, kevinf80 said:

As your friend previously had Windows 10 activated on this PC skip the steps which ask for a product key during the installation process, select the option "I am Reinstalling Windows 10 on this PC", activation will not be an issue, the PC should have a digital entitlement stored on the Microsoft Activation Servers

OOooohhhh the information is stored on the Microsoft Activation Servers (MAS).....not on the computer's BIOS/EUFI (but if that's the case, how come it's not stored here too? I mean the License key at least...?) ....which means I guess it would still remember the computer being activated prior to reinstallation unless there's an expiry date in which you have to keep reactivating periodically to ensure the information stored is correct, up to date and valid for the computer! Well that would make sense then. Why didn't you guys tell me this sooner?!

In that case I guess I *don't* have to tell them to visit that EDsys Computers place out and grab the key or tell them to rebuy a new windows 10 license for $200 or so when it can be done for free by using its old license key which is apparently stored with Microsoft. I haven't visited them in a while yet so hopefully they haven't bought and opened that windows 10 package...because then you can't return it....as that's what I last told them when I left there a day ago....it was either that or somehow get back in contact with the seller (EDsys Computers?) and ask them for the key....

But if the information is store on the MAS, how do you explain reinstalling windows XP, VISTA, 7, 8, 8.1 require reentering the cd key to activate when it *obviously* is already stored on the MAS? Unless this feature is only applicable to windows 10?

In case it goes sideways and he doesn't *have* the digital entitlement store on the MAS(for whatever reasons), what do? Just need some contingency plans in case this happens....

22 hours ago, Porthos said:

Here is a very detailed guide to clean install Windows. https://www.tenforums.com/tutorials/1950-clean-install-windows-10-a.html

Just be aware of the following.

I would use option one in this guide to create your install USB.

https://www.tenforums.com/tutorials/2376-create-bootable-usb-flash-drive-install-windows-10-a.html

Thanks, will follow this when I come over his house tomorrow....and see if a no license key activation install works due to "digital entitlement"....

10 hours ago, AdvancedSetup said:

Regardless of which account type you choose make sure you don't use any personal information in creating local accounts or Microsoft Cloud accounts. Personally I always choose and want a local account, but again the choice is yours.

Well....it would technically be he's choice since it's his computer and not mine....I'm just fixing it up....if he wants to name his local account or his Microsoft account (Unless his already got one i which case he could jsut simply sign in into that) using his real name, then so be it....else I can just name it whatever he wants or whatever I want if he can't think of one or doesn't mind....

10 hours ago, AdvancedSetup said:

Much easier to disconnect the network during the install than to create a bogus email account and go back and remove it just so you can create a local account. I find that extremely annoying and almost unethical of Microsoft to do that in an effort to force users into creating and using a Cloud account.

I don't even think the computer is connected by an ethernet cable....probably using the addon wireless adaptor, usb or pcie since the Q87M-E doesn't come with any onboard WiFi capabilities, at least according to Asus' product page.... I didn't check but that's what he tells me how he connects to the net with the computer. So I guess I could just simply pull that out or start it without it connected/attached....probably will need to find drivers for it too (hopefully it's got the brand and model engraved somewhere on the card or usb) unless windows 10 has default generic drivers that would work out of the box for it....

March 7, 2021

Found the board: Looks like the prebuilt is almost 8 years old(or at leas the board is, going by the BIOS release time stamps) and originally for windows 7 or windows 8 with windows 10 drivers coming later........

1 hour ago, Porthos said:

Sorry to intrude.

Since the computer already has Windows 10 on it, all you need to do is install Windows and choose skip key and choose home and after install and it will auto activate no matter even if it was upgraded from 7 or not when it gets online.

Suggesting also to not connect to any internet until Windows actually finishes and is open to the desktop no matter what MS prompts for before then so you do not have to create a MS account to finish the install.

It's all good.

How does it activate if the key isn't installed in the BIOS or UEFI since neither the powershell command nor the cmd command works to pull the key out, and if I remember right this is where windows 10 uses to pre-activate windows on(On prebuilts like laptops and other prebuilt desktops/towers) since the keys no longer come on boxes or COA stickers that you stick onto the machines?

...unless the powershell and cmd commands I used on the machine was reading off the F8 startup repair's operating system specs....which of course probably wont have that information..............................which means those commands will only work if the machine was booted into safe mode or in normal mode whilst running those commands....hhhhmmmmmmmmmmmm..............but none of that matters now because I can't even boot normally or get into safe mode anyways.....

March 7, 2021

1 hour ago, Collector said:
System Manufacturer: EDsys Computers

System Model: EDCTI7C1
Host Name:                 MININT-QRL8O33

Hmmm, could have them ring or rock up to these guys and find out.....looks like the computer was prebuilt by these guys.... Host name and model should be enough to get them started on if they still remember building that specific system and still have records on it....

March 7, 2021

Quote

key right into the computer's UEFI firmware

...which the powershell and command prompt line should pull out but it pulls nothing because it's not installed in the BIOS or the UEFI firmware.....

Relevant quote from linked site:

Quote

Retrieve Windows 10 key from UEFI or BIOS

If you have one of the generic keys, you can still find the original product key, but only if you have a device that stores the license information in the UEFI or BIOS firmware.

So what happens if you don't even have the old key?

Quote

The only caveat about this command is that it retrieves the original license. If you upgraded the device or change the product key, you won’t find the new license, just the old key.

Quote above specifically states that it *will* retrieve the old key....but there is no old key....so what's going on here? Was this a windows 7/8 to windows 10 upgrade? Or the seller used one of the generic keys, which of course doesn't show via the commands since it's supposed to show the old key, which in this case, doesn't exist?

March 7, 2021

55 minutes ago, kevinf80 said:
Ooops, missed that. I guess the only way forward is to recover important data with Ubuntu or similar then go for a fresh install... The product key is stored so not needed..

https://answers.microsoft.com/en-us/windows/forum/windows_10-windows_install-winpc/how-to-recover-your-windows-product-key/8687ef5d-4d32-41fc-9310-158f8e5f02e3

This is the current version from FRST log:
Windows 10 Home Version 2004 19041.450 (X64) Language: English (United States)

Oh, so it's a home edition....hmm.

Yeah I already used the powershell command and the command prompt command and both showed nothing if you also missed that part out.... And the registry method wont work as that requires you to be booted into the windows installation you're trying to grab the key off and you can't boot into safe mode either, remember....? Unless you can run vbs script from cmd window by pointing to where you saved the file instead of double clicking on it as guided by the procedure(Similar to how we ran FRST)?

March 7, 2021

1 hour ago, kevinf80 said:

Or possibly take the hard drive out and hook up to another PC, maybe shift the contents of My Documents, Videos, Pictures, Music etc...

Even if you shifted the folders and files over to make space, the registry backup doesn't exist so you can't restore the old registry through its backup since it doesn't even exist in the first place!

March 7, 2021

ok, I found the commnds to find out your license key from a computer via cmd, supposedly:

CMD:
systeminfo - to find what version windows 10 it is
wmic path softwarelicensingservice get OA3xOriginalProductKey

Powershell:
powershell “(Get-WmiObject -query ‘select * from SoftwareLicensingService’).OA3xOriginalProductKey”

Bot of which came nill:

ERROR:
Description = Not found

And the systeminfo just shows:

Host Name:                 MININT-QRL8O33
OS Name:                   Microsoft
OS Version:                10.0.19041 N/A Build 19041
OS Manufacturer:           Microsoft Corporation
OS Configuration:          Standalone Workstation
OS Build Type:             Multiprocessor Free
Registered Owner:          N/A
Registered Organization:   N/A
Product ID:                N/A
Original Install Date:     12/31/1969, 4:00:00 PM
System Boot Time:          3/7/2021, 4:23:09 PM
System Manufacturer:       EDsys Computers
System Model:              EDCTI7C1
System Type:               x64-based PC
Processor(s):              1 Processor(s) Installed.
                           [01]: Intel64 Family 6 Model 60 Stepping 3 GenuineIntel ~3601 Mhz
BIOS Version:              American Megatrends Inc. 1601, 10/27/2015
Windows Directory:         X:\windows
System Directory:          X:\windows\system32
Boot Device:               N/A
System Locale:             en-us;English (United States)
Input Locale:              en-us;English (United States)
Time Zone:                 (UTC-08:00) Pacific Time (US & Canada)
Total Physical Memory:     16,290 MB
Available Physical Memory: 15,322 MB
Virtual Memory: Max Size:  16,290 MB
Virtual Memory: Available: 15,342 MB
Virtual Memory: In Use:    948 MB
Page File Location(s):     N/A
Domain:                    WORKGROUP
Logon Server:              N/A
Hotfix(s):                 2 Hotfix(s) Installed.
                           [01]: KB4557964
                           [02]: KB4560366
Network Card(s):           N/A
Hyper-V Requirements:      VM Monitor Mode Extensions: Yes
                           Virtualization Enabled In Firmware: Yes
                           Second Level Address Translation: Yes
                           Data Execution Prevention Available: Yes

...supposed to tell me what windows version it is....is it the home edition or pro or some other??? Shame I can't just use speccy....as that's gui only....oh well, probably doesn't matter since I cant get the key out of the system.

March 7, 2021

I'm going to take a wild stab here and predict the cause: So the guy had his drive full with zero space to spare, when he last go to shutdown when the computer was booting up fine, windows tried to save some settings into the registry but couldn't because the drive was all full with zero bytes to spare so half arsed it and then shutted down anyways. The next time he goes and turns it back on, the F8 startup repair comes up showing him windows wont load. That is because windows failed to saved correctly and only saved partially on last shut down.

March 7, 2021

Ok, went over to his house and followed the guide and failed at step 9:

His OS drive is completely filled! ZERO bytes left of his 250GB SSD! Requires at least 400MB because that's how big the config folder is.

And there's no registry backup on when moving onto step 10:

The folder is completely empty!

And then here's me trying to grab their install key:

Looks like GUI programs(or at least this key finder in particular which is the latest copy) can't start from commandline like your FRST program can.... So I would need to find one that can start from a CLI environment....

Hmmmm.....

March 7, 2021

10 hours ago, kevinf80 said:

Hiya Collector,

Have a read at the following link, apparently all may not yet be lost....

https://pureinfotech.com/restore-registry-backup-windows-10/

Thanks,

Kevin...

HI Kevin,

Oooohhhhh I see....the F8 options I was thinking of *is* the advanced setup options that got loaded up when windows couldn't start! Been used to seeing the black and white text with white highlight on the older operating system's F8 advanced options.... Will give this a try when i come over today, thanks. I'll use Kaspersky Rescue disc OS and scan the drives too afterwards just for curiosity sake unless I'm just wasting time on that since that probably won't fix a broken registry even if it does find the culprit virus/malware in one or more files....

I'm guessing you don't have the answers to the two below questions since you've dodged them on your last reply?

12 hours ago, Collector said:

Could we find out why and or how this happened or not possible?

12 hours ago, Collector said:

Also, this wouldn't be a warranty repair would it, assuming he still has warranty and was supposed to go through the guy who sold him and not through me to fix it?

Thanks,

Collector

March 6, 2021

5 hours ago, kevinf80 said:
Hiya Collector,

I assume you will have seen the following quote in the FRST log?
ATTENTION: Could not load system hive.
ERROR: The configuration registry database is corrupt.
That indicates registry damage, there are no restore points or backup identified in the log. The best way forward is to refresh windows, full instructions at the following link...

https://www.tenforums.com/tutorials/4090-refresh-windows-10-a.html

Let me know the outcome.

Regards,

Kevin..

HI Kevin, thanks for replying!

Yeah, but I wanted to see what you make of it or whether or not you've noticed it too...

Well we found out the reason why windows and even safe mode don't load, factory reset doesn't work, startup repair can't fix it and uninstalling stuff doesn't work...the registry tat is required access here is borked.... Could we find out why and or how this happened or not possible? Just so I got something to say the next time I come over tomorrow. I'm going to take a wild guesses and it could be one of these three things - virus/malware wrecked havok on the system and then finally destroyed registry directly; dying drive that corrupted the registry when it tried to save some settings from its last shutdown a few months back; a program that wrote to the registry in some ways but either screwed up and then corrupted the whole registry table(im guessing a registry cleaner, defragger or some software installation), or a windows update borked it...

Otherwise I guess I download a universal windows 10 ISO from microsoft, use rufus to convert it onto my flash drive and wait for him to get the license key from whoever sold him the computer and then fresh install windows...or.... I think there might be a way to grab the license key of the computer *without* needing to enquire about it from the seller.... I used keyfinder which works looking up the keys from the registry(unless the registry is so destroyed that it cant even read the key code off there?) so that could come in handy when reinstalling windows without needing to fork over money for a new copy of windows 10 or waiting for that seller to reply back with the key code.... I'll just use the same method you showed me to start keyfinder in command prompt via startup repair! ...that's of course assuming the registry is still readable, at least the parts that store the windows 10 license key info....

Also, this wouldn't be a warranty repair would it, assuming he still has warranty and was supposed to go through the guy who sold him and not through me to fix it?

March 6, 2021

On 3/5/2021 at 1:44 AM, gonzo said:

There are a lot of scanners out there. Some catch everything (real or imagined), and some catch nothing. As an employee of a company who could be seen as a competitor, its best not to comment on specific scanners. There are some I trust more than others, and that's as far as I go in that direction. If you are using a version of Firefox that is that old, you're asking for trouble.

You can't comment even as an individual rather than as an employee?

Yeah well....the addons I use doesn't work on the newer firefox version since they changed the gecko engine to quantum and touted (if I remember) that the old addons will work if ported to use the quantum engine; well some did and some didn't....the ones that didnt was because they require something that is now restricted or limited in the quantum version so it's impossible to port over....and the others, well the author have abandoned them....

March 6, 2021

On 3/5/2021 at 3:05 AM, kevinf80 said:

Hiya Collector and welcome to Malwarebytes,

If you have a USB stick 4GB or over maybe we can get a log from FRST and see what is happening with this PC..

Please download Farbar Recovery Scan Tool from here:

http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

save it to a USB flash drive. Ensure to get the correct version for your system, 32 bit or 64 bit

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Plug the flash drive into the infected PC.

If you are using Windows 8 or 10 consult How to use the Windows 8 or 10 System Recovery Environment Command Prompt Here: http://www.howtogeek.com/126016/three-ways-to-access-the-windows-8-boot-options-menu/ to enter System Recovery Command prompt.

Select Command Prompt

In the command window type in notepad and press Enter.

The notepad opens. Under File menu select Open.

Select "Computer" and find your flash drive letter and close the notepad.

In the command window type e:\frst64 or e:\frst depending on your version. Press Enter Note: Replace letter e with the drive letter of your flash drive.

The tool will start to run.

When the tool opens click Yes to disclaimer.

Press Scan button.

It will make a log (frst.txt) on the flash drive. Please copy and paste it to your reply.

Thanks,

Kevin..

Found time to go over his house and check this out, thanks.

He seems very eager to get this fixed so he can play games again! hahahaha....We'll see....

Hm mm, yes that seems to work! Nice work!

Found the srttrail file - it was in a hidden folder and just opened it with notepad and then saved the file again onto my flash drive; here's the contents:

Startup Repair diagnosis and repair log
---------------------------
Last successful boot time: ‎1/‎13/‎2021 12:41:56 PM (GMT)
Number of repair attempts: 46

Session details
---------------------------
System Disk = \Device\Harddisk0
Windows directory = C:\WINDOWS
AutoChk Run = 0
Number of root causes = 1

Test Performed: 
---------------------------
Name: Check for updates
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Test Performed: 
---------------------------
Name: System disk test
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Test Performed: 
---------------------------
Name: Disk failure diagnosis
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Test Performed: 
---------------------------
Name: Disk metadata test
Result: Completed successfully. Error code =  0x0
Time taken = 110 ms

Test Performed: 
---------------------------
Name: Disk metadata test
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Test Performed: 
---------------------------
Name: Target OS test
Result: Completed successfully. Error code =  0x0
Time taken = 15 ms

Test Performed: 
---------------------------
Name: Volume content check
Result: Completed successfully. Error code =  0x0
Time taken = 63 ms

Test Performed: 
---------------------------
Name: Boot manager diagnosis
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Test Performed: 
---------------------------
Name: System boot log diagnosis
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Test Performed: 
---------------------------
Name: Event log diagnosis
Result: Completed successfully. Error code =  0x0
Time taken = 31 ms

Test Performed: 
---------------------------
Name: Internal state check
Result: Completed successfully. Error code =  0x0
Time taken = 16 ms

Root cause found: 
---------------------------
Startup Repair has tried several times but still cannot determine the cause of the problem.

---------------------------
---------------------------
Session details
---------------------------
System Disk = \Device\Harddisk0
Windows directory = C:\WINDOWS
AutoChk Run = 0
Number of root causes = 0

Test Performed: 
---------------------------
Name: Check for updates
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Test Performed: 
---------------------------
Name: System disk test
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Test Performed: 
---------------------------
Name: Disk failure diagnosis
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Test Performed: 
---------------------------
Name: Disk metadata test
Result: Completed successfully. Error code =  0x0
Time taken = 46 ms

Test Performed: 
---------------------------
Name: Disk metadata test
Result: Completed successfully. Error code =  0x0
Time taken = 16 ms

Test Performed: 
---------------------------
Name: Target OS test
Result: Completed successfully. Error code =  0x0
Time taken = 16 ms

Test Performed: 
---------------------------
Name: Volume content check
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Test Performed: 
---------------------------
Name: Boot manager diagnosis
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Test Performed: 
---------------------------
Name: System boot log diagnosis
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Test Performed: 
---------------------------
Name: Event log diagnosis
Result: Completed successfully. Error code =  0x0
Time taken = 15 ms

Test Performed: 
---------------------------
Name: Internal state check
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Test Performed: 
---------------------------
Name: Check for installed LCU
Result: Completed successfully. Error code =  0x3f1
Time taken = 43344 ms

---------------------------
---------------------------
Session details
---------------------------
System Disk = \Device\Harddisk0
Windows directory = C:\WINDOWS
AutoChk Run = 0
Number of root causes = 1

Test Performed: 
---------------------------
Name: Check for updates
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Test Performed: 
---------------------------
Name: System disk test
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Test Performed: 
---------------------------
Name: Disk failure diagnosis
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Test Performed: 
---------------------------
Name: Disk metadata test
Result: Completed successfully. Error code =  0x0
Time taken = 109 ms

Test Performed: 
---------------------------
Name: Disk metadata test
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Test Performed: 
---------------------------
Name: Target OS test
Result: Completed successfully. Error code =  0x0
Time taken = 16 ms

Test Performed: 
---------------------------
Name: Volume content check
Result: Completed successfully. Error code =  0x0
Time taken = 63 ms

Test Performed: 
---------------------------
Name: Boot manager diagnosis
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Test Performed: 
---------------------------
Name: System boot log diagnosis
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Test Performed: 
---------------------------
Name: Event log diagnosis
Result: Completed successfully. Error code =  0x0
Time taken = 31 ms

Test Performed: 
---------------------------
Name: Internal state check
Result: Completed successfully. Error code =  0x0
Time taken = 0 ms

Root cause found: 
---------------------------
Startup Repair has tried several times but still cannot determine the cause of the problem.

---------------------------
---------------------------

Apparently startup repair couldn't find the cause....very helpful...🙄

Below is the FRST log:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-02-2021
Ran by SYSTEM on MININT-21T5SKC (06-03-2021 15:01:07)
Running from f:\
Platform: Windows 10 Home Version 2004 19041.450 (X64) Language: English (United States) -> English (United States)
Boot Mode: Recovery
ATTENTION: Could not load system hive.
ERROR: The configuration registry database is corrupt.


==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15642744 2016-03-30] (Logitech Inc -> Logitech Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8838400 2016-06-06] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKU\Epic gaming pc\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3424032 2020-10-28] (Valve -> Valve Corporation)
HKU\Epic gaming pc\...\Run: [Discord] => C:\Users\Epic gaming pc\AppData\Local\Discord\app-0.0.307\Discord.exe [91023672 2020-08-03] (Discord Inc. -> Discord Inc.)
HKU\Epic gaming pc\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [33131408 2020-11-27] (Epic Games Inc. -> Epic Games, Inc.)
HKU\Epic gaming pc\...\Run: [LGHUB] => C:\Program Files\LGHUB\lghub.exe [104586376 2020-11-21] (Logitech Inc -> Logitech, Inc.)
HKU\Epic gaming pc\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3514096 2020-10-19] (Razer USA Ltd. -> Razer Inc.)
HKU\Epic gaming pc\...\Run: [Voicemod] => C:\Program Files\Voicemod Desktop\VoicemodDesktop.exe [4901872 2020-11-16] (Voicemod Sociedad Limitada -> Voicemod)
HKU\Epic gaming pc\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Epic gaming pc\AppData\Local\Microsoft\Teams\Update.exe [2452664 2020-11-23] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{89820200-ECBD-11cf-8B85-00AA005B4340}] -> shell32.dll [2019-12-06] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\...\Winlogon\GPExtensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}] -> scecli.dll [2019-12-06] (Microsoft Windows -> Microsoft Corporation)

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {12DF3F8A-9612-48CA-AE38-2818FA70CA73} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\Windows\System32\WinBioPlugIns\FaceFodUninstaller.exe [503296 2019-12-07] ()
Task: {1BD4A42D-FEE3-4006-8397-F96A6E8F6559} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1CE9EA33-8149-40CE-9619-CF9F6978FA6E} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144736 2020-11-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {293BD56C-2407-4F1D-A474-86DAF20E82BF} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {364019F5-CF82-45AC-8263-9C5F4D6FF933} - System32\Tasks\Minecarft Education Weekly Updater => C:\Program Files (x86)\Microsoft Studios\Minecraft Education Edition\MinecraftEducationUpdater.exe [5813248 2020-10-30] (Microsoft Studios)
Task: {3CD8CD36-501E-4D7A-9951-2963BC50521B} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {419F23F8-F25F-4C1C-A767-E65D0F2C8770} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5153176 2020-11-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {42E80294-7BF4-4BDF-9138-A35A26E19FC8} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646456 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4BA74A18-1F1D-4D36-A0CC-3EE1DDF78552} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [850928 2020-03-18] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {4FA3C503-ED52-4DA4-B6A5-6F2FA1B609CF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {55678448-ABC2-43E4-B758-9534DABD5DC0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {613CECC3-3D54-487C-8C07-086E7EE2FB11} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22939528 2020-11-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {6E5ACF52-BF79-49B7-A751-490525DA672D} - System32\Tasks\Agent Activation Runtime\S-1-5-21-2321976039-913698147-3516484712-1001 => C:\WINDOWS\System32\AgentActivationRuntimeStarter.exe [13312 2020-06-26] ()
Task: {96C51837-3ABC-4E5F-9ED3-F583B6EF1BBE} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3293168 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {9E7FC2F7-1253-4D16-9B8C-D953C3EDE097} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2321976039-913698147-3516484712-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task: {AB05B368-13F7-468A-9B30-E553C06B5449} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask => C:\Windows\SysWOW64\BthUdTask.exe [38400 2019-12-07] (Microsoft Corporation)
Task: {C1A2D561-1EC3-4DA4-A5C0-6606C009241D} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C4C7DCA8-6045-4439-82EF-EBAE178D2E90} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [850928 2020-03-18] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {C5413418-4677-474A-BA61-CA085108A816} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144736 2020-11-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {CD59E414-971C-4453-AA09-4762F17FC433} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22939528 2020-11-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {CFE6C865-2C9C-42E5-A37B-F48E68CA992C} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D7098F5B-A3F8-413F-8AD0-4706782A5A28} - System32\Tasks\Minecraft Education Edition Automatic Updater => C:\Program Files (x86)\Microsoft Studios\Minecraft Education Edition\MinecraftEducationUpdater.exe [5813248 2020-10-30] (Microsoft Studios)
Task: {DE929C29-B7F2-4982-8E06-7E9632E42F2A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E4972418-E4B1-42E6-9F81-1B5E0A1A1F32} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F9F4A0C1-7BDE-4E8C-90D2-D4CBAB9B566B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5153176 2020-11-06] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (All) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-03-06 15:00 - 2021-03-06 15:01 - 000000000 ____D C:\FRST
2021-03-04 19:23 - 2021-03-04 19:23 - 000000000 ___HD C:\$SysReset
2021-02-23 08:50 - 2021-02-23 08:50 - 000000000 ____D C:\Windows\System32\config\backup

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)


==================== KnownDLLs (Whitelisted) =========================


==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\dnsapi.dll => MD5 is legit
C:\Windows\SysWOW64\dnsapi.dll => MD5 is legit
C:\Windows\System32\dllhost.exe => MD5 is legit
C:\Windows\SysWOW64\dllhost.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Association (Whitelisted) =============


==================== Restore Points  =========================


==================== Memory info =========================== 

Percentage of memory in use: 6%
Total physical RAM: 16290.36 MB
Available physical RAM: 15157.85 MB
Total Virtual: 16290.36 MB
Available Virtual: 15218.49 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:232.25 GB) (Free:0 GB) NTFS
Drive d: (New Volume) (Fixed) (Total:465.75 GB) (Free:242.74 GB) NTFS
Drive e: (Recovery) (Fixed) (Total:0.52 GB) (Free:0.08 GB) NTFS
Drive f: (KRD) (Removable) (Total:120.19 GB) (Free:119.57 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.5 GB) (Free:0.49 GB) NTFS

\\?\Volume{f414b9f4-03a2-4ba8-a5e3-74adee5490bd}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 232.9 GB) (Disk ID: B0C3DC58)

Partition: GPT.

==========================================================
Disk: 1 (Protective MBR) (Size: 465.8 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 2 (Size: 120.2 GB) (Disk ID: 1FF226CF)
Partition 1: (Active) - (Size=120.2 GB) - (Type=0C)
==================== End of FRST.txt ========================

March 4, 2021

oh yeah, I forgot to mention that safemode fails to load as well, or at least the safe mode equivalent that's selected from the repair startup menu. I remember needing to mash F8 just before windows 10 is loading but after BIOS has loaded, to get into safemode without going through startup repair, or it's the same one?

March 4, 2021

So I got called in to come over to someone's house as they didn't know how to fix their computer and apparently I was the guy to call if anything went wrong since I have a better idea of what's going on or so they touted....I tend not to advertise myself as such because I know there are people out there wwwwwwaaaaaaaaaaaayyyyyyyyyy smart than me and would look pretty dumb if I suddenly boast and gloat about that I was the best problem solver or PC technician there is in the world!

I booted up their PC and they say they can't get load into desktop and sure enough the screen loads up and shows the startup repair window and they have no idea how to fix or pass this. I've never had this issue thrown at me before so this would be my first time experiencing such. So me putting on my problem solving hat on went to diagnose the issue...

Auto repair fails and shows me a log file that *might* tell me why:
There is no system restore points so I can't restore back and use this method
I can't uninstall any updates or program features as it just says it fails to do so
I can't even reset back to factory settings as that also fails with no further explanation
The command prompt works though but I don't know any command lines to fix it through this method
Computer can shutdown and restart fine
Can't seem to be able to get into BIOS even after mashing the F2 and DEL buttons really fast as it boots up (maybe because he is using a wireless keyboard which doesn't get registered as a keyboard until windows loads - in this case the startup repair screen?)

So he tells me a little bit more of the history of this PC and says that before this happened, none of the apps would run which is why he hasn't been using it and then after a long break from it or forgot about it, turned it back on and then the computer wouldn't load into desktop anymore. He has no clue when he last updated windows or if he has(I specifically asked this because I know a known person whose windows 10 computer got bricked after a windows update that failed to install AND failed to revert back the changes resulting a complete reinstallation of windows to fix). He tells me this is he's gaming PC and doesn't really have any important files that he wants to keep, since they're all just games and can just redownload them. He also tells me this is a custom build done a few months back from some backyard dealership.... I should have asked if the guy who sold you this custom build getup give you anything else or if it was just box, keyboard, mouse and monitor? But I didn't and now that I think about it I should have, because I did ask whether or not he was given the windows 10 disc or install USB storage drive.....but he did not, so I am assuming this is an OEM licensed....or overseas... His PC does not have a disc drive but has USB ports.

From all that information, I gave him three possible solutions:

The quick and easy method - since he doesn't really care about the data he's got on his PC, I can wipe clean the computer and do a fresh reinstallation of windows 10, skipping any and all further diagnostic steps and giving him back a working gaming PC he can now play games with. Only catch is I don't have a spare valid windows 10 key....but I think I can just run it without a key but you'll just get an annoying watermark at the bottom right corner of the screen right? Or is that windows 7 only? Well anyways, his parents are more than welcome buying a copy of windows 10 from some local store to use the key or and installation media to activate windows with so I'm cool either way. Or save the money and nag the guy who built the PC for him for the key since that was not given outside the computer....
Get the guy who sold him the PC to fix it for him - should have at least come with some sort of warranty right? It's only a few months and does this not come under warranty repair?
I come back with a USB stick(I usually do with a disc since all my computers have internal disc drives, but since I don't have an external USB disc drive and his computer doesn't have a disc drive....and of course assume the computer he has can be booted off a USB device but without access to the BIOS I cannot tell whether this is true or not or whether if it's configurable...) with a flavour of a linux(maybe a rescue disc converted to USB bootable (I'll probably use Rufus...) or puppy) kernel(just in case it was a virus or malware that took the whole computer down and windows viruses dont run on linux kernel unless they also have code to run on linux kernels too in which case I'm screwed....but I read that nothing runs on linux, even viruses and malware designed for it unless you explicit run it by typing the file in terminal or double clicking it on desktop gui so I should be safe?) and open the SrtTrail.txt file to find out what's going on and then do some further diagnostics...

So, what do you think of my flowchart? Have I done right by PC tech support gods on here at least in terms of information gathering and some kind of methodological way of diagnosing my way or way of!? Hahaha...😁 Anyways, just wanted a second opinion on this see what you peeps think I should do...

March 4, 2021

through some unpatched exploit that is, that is most likely patched in the newer version of firefox

AH yes...the antispam mechanism....waiting one minute per post......and with no edit button to bypass this wait....

March 4, 2021

Maybe could be I am using firefox 52.9 esr which is way out of date and somehow got a man in the middle attack that slisptreamed some malware as the file is slowly streamed over the net and downloaded....?

March 4, 2021

Hmmm....interesting.....had it download via sandboxed firefox and that's when kaspersky deleted the file. On the other computer, same firefox version but unsandboxied and kaspersky blocked the download (or tried to...but then promptly deleted the file once he file was fully downloaded). Using direct link with IDM, Kaspersky doesn't seem to mind.....🤔 Very peculiar....

Ok, so what's your comment on that Jiangmin scanner that seems to have picked up the same thing as Kaspersky?

Events

Profiles

Forums

Posts posted by Collector

Retrieve Windows 10 key from UEFI or BIOS

Important Information