Cant rid of Torch

[clark02121992]

Hello Everyone i do not know where to post this but i marked this as a malware on my own so i post this in this forum

So i managed to uninstall Torch Web browser i guess but i cant remove or change remove or set to nothing when opening magnet links on google chrome and another attached file that i included i cannot also unchecked it or set to nothing

[nasdaq]

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Please download Malwarebytes Anti-Malware from here
 

• Right-click on the MBAM icon and select Run as administrator to run the tool.
• Click Yes to accept any security warnings that may appear.
• Once the MBAM dashboard opens, on the right detail pane click on the word "Current" under the Scan Status to update the tool database.
• On the left menu pane click the Settings tab, and then select the Protection tab on the top.
• Under the Scan Options, turn on the button Scan for rootkits and Scan within archives.
• Click the Scan tab on the right detail pane, select Threat Scan and click the Start Scan button
• Note: The scan may take some time to finish, so please be patient.
• If potential threats are detected, ensure to checkmark all the listed items, and click the Quarantine Selected button.
• While still on the Scan tab, click the View Report button, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.
• The log can also be viewed by clicking the log to select it, then clicking the View Report button.
  

Please post the log for my review.

Note: If asked to restart the computer, please do so immediately.
===

Please download AdwCleaner by Xplode onto your Desktop.

• Close all open programs and internet browsers.
• Double click on AdwCleaner.exe to run the tool.
• Click the Scan button and wait for the process to complete.
• Click the LogFile button and the report will open in Notepad.
  

IMPORTANT

• If you click the Clean button all items listed in the report will be removed.
  

If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.

• Close all open programs and internet browsers.
• Double click on AdwCleaner.exe to run the tool.
• Click the Scan button and wait for the process to complete.
• Check off the element(s) you wish to keep.
• Click on the Clean button follow the prompts.
• A log file will automatically open after the scan has finished.
• Please post the content of that log file with your next answer.
• You can find the log file at C:\AdwCleanerCx.txt (x is a number).
  

===

Download the version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.

Attach the file.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach.
Click Attach this file.
Click the Add reply button.
===

Please post the logs  for my review.

Let me know what problems persists.

Wait for further instructions

[clark02121992]

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 10/9/18
Scan Time: 9:27 PM
Log File: 159d017e-cbc7-11e8-a712-5453edb958c3.json
Administrator: Yes

-Software Information-
Version: 3.5.1.2522
Components Version: 1.0.365
Update Package Version: 1.0.7267
License: Free

-System Information-
OS: Windows 8
CPU: x64
File System: NTFS
User: Serquina\Marc

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 319836
Threats Detected: 0
(No malicious items detected)
Threats Quarantined: 0
(No malicious items detected)
Time Elapsed: 46 min, 31 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 0
(No malicious items detected)

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

[clark02121992]

# -------------------------------
# Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build:    09-25-2018
# Database: 2018-10-08.2 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    10-09-2018
# Duration: 00:01:02
# OS:       Windows 8 Single Language
# Scanned:  31955
# Detected: 32

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

PUP.Optional.UCBrowser          C:\Program Files (x86)\UCBrowser
PUP.Optional.UCBrowser          C:\Windows\SysWOW64\config\systemprofile\AppData\Local\UCBrowser
PUP.Optional.UCBrowser          C:\Users\Marc\AppData\Local\UCBrowser

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

PUP.Optional.Legacy             C:\Windows\Tasks\UCBrowserUpdaterCore.job
PUP.Optional.Legacy             C:\Windows\System32\Tasks\UCBrowserUpdaterCore

***** [ Registry ] *****

PUP.Adware.Heuristic            HKLM\SOFTWARE\Classes\UCHTML.AssocFile.XHTML
PUP.Adware.Heuristic            HKLM\SOFTWARE\Classes\UCHTML.AssocFile.XHT
PUP.Adware.Heuristic            HKLM\SOFTWARE\Classes\UCHTML.AssocFile.WEBP
PUP.Adware.Heuristic            HKLM\SOFTWARE\Classes\UCHTML.AssocFile.SHTML
PUP.Adware.Heuristic            HKLM\SOFTWARE\Classes\UCHTML.AssocFile.SHTM
PUP.Adware.Heuristic            HKLM\SOFTWARE\Classes\UCHTML.AssocFile.MHT
PUP.Adware.Heuristic            HKLM\SOFTWARE\Classes\UCHTML.AssocFile.HTML
PUP.Adware.Heuristic            HKLM\SOFTWARE\Classes\UCHTML.AssocFile.HTM
PUP.Adware.Heuristic            HKLM\SOFTWARE\Classes\UCHTML.AssocFile.CRX
PUP.Adware.Heuristic            HKLM\SOFTWARE\Classes\UCHTML
PUP.Optional.Legacy             HKLM\SOFTWARE\Classes\.xhtml\OpenWithProgids|UCHTML.AssocFile.XHTML
PUP.Optional.Legacy             HKLM\SOFTWARE\Classes\.xht\OpenWithProgids|UCHTML.AssocFile.XHT
PUP.Optional.Legacy             HKLM\SOFTWARE\Classes\.webp\OpenWithProgids|UCHTML.AssocFile.WEBP
PUP.Optional.Legacy             HKLM\SOFTWARE\Classes\.shtml\OpenWithProgids|UCHTML.AssocFile.SHTML
PUP.Optional.Legacy             HKLM\SOFTWARE\Classes\.shtm\OpenWithProgids|UCHTML.AssocFile.SHTM
PUP.Optional.Legacy             HKLM\SOFTWARE\Classes\.mht\OpenWithProgids|UCHTML.AssocFile.MHT
PUP.Optional.Legacy             HKLM\SOFTWARE\Classes\.html\OpenWithProgids|UCHTML.AssocFile.HTML
PUP.Optional.Legacy             HKLM\SOFTWARE\Classes\.htm\OpenWithProgids|UCHTML.AssocFile.HTM
PUP.Optional.Legacy             HKLM\Software\Wow6432Node\Microsoft\MediaPlayer\ShimInclusionList\UCBrowser.exe
PUP.Optional.Legacy             HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\UCBrowser.exe
PUP.Optional.Legacy             HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\UCBrowser.exe
PUP.Optional.Legacy             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FE48B5D7-1E97-49A4-B6F4-995200E58F3C}
PUP.Optional.Legacy             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UCBrowserUpdaterCore
PUP.Optional.UCBrowser          HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{F3745085-011F-4A64-A400-DA560552C601}
PUP.Optional.UCBrowser          HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{72B1D74A-4F43-4EEF-9FC6-59E0D3CB0425}

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

PUP.Optional.Legacy             Ask
PUP.Optional.Legacy             AOL

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

AdwCleaner[S00].txt - [2839 octets] - [23/05/2018 10:47:52]
AdwCleaner[S01].txt - [2839 octets] - [23/05/2018 11:28:40]
AdwCleaner[C01].txt - [2631 octets] - [23/05/2018 11:29:23]
AdwCleaner[S02].txt - [1771 octets] - [23/05/2018 15:14:41]
AdwCleaner[S03].txt - [1771 octets] - [24/05/2018 06:06:07]
AdwCleaner[S04].txt - [1771 octets] - [01/06/2018 01:23:55]
AdwCleaner[S05].txt - [2175 octets] - [07/06/2018 13:05:23]
AdwCleaner[C05].txt - [2246 octets] - [07/06/2018 15:02:19]
AdwCleaner[S06].txt - [1779 octets] - [28/07/2018 19:48:09]
AdwCleaner[C06].txt - [1908 octets] - [28/07/2018 20:29:37]
AdwCleaner[S07].txt - [1862 octets] - [28/07/2018 21:45:06]
AdwCleaner[S08].txt - [4746 octets] - [08/10/2018 13:31:58]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S09].txt ##########
 

[clark02121992]

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06.10.2018
Ran by Marc (administrator) on SERQUINA (09-10-2018 22:29:46)
Running from C:\Users\Marc\Desktop
Loaded Profiles: Marc (Available Profiles: Marc & Guest)
Platform: Windows 8 Single Language (X64) Language: English (United States)
Internet Explorer Version 10 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

Failed to access process -> csrss.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files (x86)\UCBrowser\Application\UCService.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
Failed to access process -> dllhost.exe
(Reason Software Company Inc.) C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
Failed to access process -> csrss.exe
Failed to access process -> dwm.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
Failed to access process -> WmiPrvSE.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
() C:\Program Files (x86)\UCBrowser\Application\7.0.185.1002\UCAgent.exe
(AxCrypt AB) C:\Program Files\AxCrypt\AxCrypt\AxCrypt.exe
(ALCPU) C:\Users\Marc\AppData\Local\Temp\Temp2_CoreTemp64.zip\Core Temp.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Failed to access process -> WmiPrvSE.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Marc\Desktop\FRST64(2).exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-08-03] (Realtek Semiconductor)
HKLM\...\Run: [BtPreLoad] => C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-12-29] ()
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-17] (Adobe Systems Incorporated)
HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2013-04-10] (Pixart Imaging Inc)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242392 2018-08-27] (AVAST Software)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [303928 2017-07-14] (Apple Inc.)
HKLM\...\Run: [Everything] => C:\Users\Marc\AppData\Local\Temp\Temp1_Everything-1.4.1.877.x64.zip\Everything.exe [2197608 2018-05-22] () <==== ATTENTION
HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [68776 2012-08-18] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-28] (Sony Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-10-11] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-07-07] (Oracle Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [129664 2012-12-29] (Qualcomm Atheros Commnucations)
HKU\S-1-5-21-3892480582-283260505-3703768022-1002\...\Run: [MCShield Monitor] => C:\Program Files (x86)\MCShield\mcshieldrtm.exe [650816 2014-04-12] (MyCity)
HKU\S-1-5-21-3892480582-283260505-3703768022-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3199776 2018-04-03] (Valve Corporation)
HKU\S-1-5-21-3892480582-283260505-3703768022-1002\...\Run: [Yahoo Messenger Updater] => C:\Users\Marc\AppData\Roaming\Yahoo Messenger\YMUpdater\YMUpdater.exe [115656 2018-06-13] (Yahoo!, Inc.)
HKU\S-1-5-21-3892480582-283260505-3703768022-1002\...\MountPoints2: {a602ff5a-c3ae-11e7-8139-5453edb958c3} - "D:\AutoRun.exe" 
HKU\S-1-5-21-3892480582-283260505-3703768022-1002\...\MountPoints2: {a602ff94-c3ae-11e7-8139-5453edb958c3} - "D:\AutoRun.exe" 
Startup: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Document.rtf [2018-06-25] ()
GroupPolicy: Restriction ? <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{04019896-BCE5-4426-BB38-190918CF5A01}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{04019896-BCE5-4426-BB38-190918CF5A01}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{72EB4B26-9A7B-4DC8-991D-78DAA8365216}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-3892480582-283260505-3703768022-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://sony13.msn.com/
HKU\S-1-5-21-3892480582-283260505-3703768022-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://sony13.msn.com
HKU\S-1-5-21-3892480582-283260505-3703768022-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://vaio-online.sony.com/
SearchScopes: HKLM -> DefaultScope value is missing
SearchScopes: HKLM-x32 -> DefaultScope value is missing
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-09-23] (Microsoft Corporation)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-12-29] (Qualcomm Atheros Commnucations)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2018-09-23] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2018-07-23] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2018-09-23] (Microsoft Corporation)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-07-23] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-07-23] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-07-23] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-07-23] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\z9vwbn5j.default-1456659576382 [2018-10-08]
FF Homepage: Mozilla\Firefox\Profiles\z9vwbn5j.default-1456659576382 -> about:home
FF Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\z9vwbn5j.default-1456659576382\Extensions\firefox@ghostery.com.xpi [2018-10-08]
FF Extension: (Adblock Plus) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\z9vwbn5j.default-1456659576382\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-10-08]
FF Extension: (Telemetry coverage) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\z9vwbn5j.default-1456659576382\features\{075f4929-84a1-4be7-b9cd-0942856b7268}\telemetry-coverage-bug1487578@mozilla.org.xpi [2018-10-08] [Legacy]
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-08-10] (VideoLAN)
FF Plugin-x32: @java.com/DTPlugin,version=10.5.0 -> C:\Windows\SysWOW64\npDeployJava1.dll [2012-12-12] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-07-23] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-07-23] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-03] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-30] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.5.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-30] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-09-20] (Adobe Systems Inc.)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\itms.js [2017-07-05]

Chrome: 
=======
CHR DefaultProfile: Profile 1
CHR HomePage: Profile 1 -> hxxps://learningnetwork.cisco.com/thread/16414
CHR Profile: C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Guest Profile [2018-10-04]
CHR Profile: C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1 [2018-10-09]
CHR Extension: (Pop up blocker for Chrome™ - Poper Blocker) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bkkbcggnhapdmkeljlodobbkopceiche [2018-05-15]
CHR Extension: (Adblock Plus) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2018-09-19]
CHR Extension: (Google Search) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-06]
CHR Extension: (No Coin - Block miners on the web!) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gojamcfopckidlocpkbelmpjcgmbgjcl [2018-04-27]
CHR Extension: (Disconnect) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jeoacafpbcihiomhlakheieifhpjdfeo [2018-03-04]
CHR Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2018-08-23]
CHR Extension: (Save to Pocket) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2018-07-03]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-05]
CHR Extension: (Data Saver) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pfmgfdlgomnbgkofeojodiodmgpgmkac [2018-08-27]
CHR Extension: (Chrome Media Router) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-09-23]
CHR Profile: C:\Users\Marc\AppData\Local\Google\Chrome\User Data\System Profile [2018-10-04]
CHR HKLM\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - <no Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - <no Path/update_url>

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 AdobeActiveFileMonitor10.0; c:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [169624 2011-09-01] (Adobe Systems Incorporated)
S4 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-10-11] (Advanced Micro Devices, Inc.) [File not signed]
S3 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-04-03] (Apple Inc.)
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7994520 2018-08-27] (AVAST Software)
S3 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [226944 2012-12-29] (Qualcomm Atheros Commnucations) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [322464 2018-08-27] (AVAST Software)
S2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8522832 2018-09-06] (Microsoft Corporation)
S3 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [413336 2015-08-27] ()
R3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes)
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [625240 2013-09-28] (Sony Corporation)
S4 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-28] (Sony Corporation)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 UCBrowserSvc; C:\Program Files (x86)\UCBrowser\Application\UCService.exe [656784 2018-01-02] () <==== ATTENTION
R2 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [297240 2018-04-14] (Reason Software Company Inc.)
S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [413336 2015-08-27] ()
S3 uSHAREitSvc; C:\Program Files (x86)\SHAREit Technologies\SHAREit\SHAREit.Service.exe [33224 2017-09-11] (SHAREit Technologies Co.Ltd)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2012-11-08] (Sony Corporation)
S4 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1653272 2015-08-01] (Sony Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2015-07-07] (Microsoft Corporation)
S3 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-12-29] (Atheros) [File not signed]
S4 NOBU; "C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [199008 2012-06-23] (AppEx Networks Corporation)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [199712 2018-08-27] (AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [229384 2018-08-27] (AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [201320 2018-08-27] (AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [346664 2018-08-27] (AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [59568 2018-08-27] (AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [249016 2018-08-27] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [46968 2018-08-27] (AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [163392 2018-09-19] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [111864 2018-08-27] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [87904 2018-08-30] (AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1027720 2018-08-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [467320 2018-09-19] (AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [215920 2018-09-19] (AVAST Software)
S3 aswTap; C:\Windows\system32\DRIVERS\aswTap.sys [44640 2014-03-10] (The OpenVPN Project)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [381560 2018-08-27] (AVAST Software)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [91648 2012-08-21] (Advanced Micro Devices)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2012-12-29] (Qualcomm Atheros)
R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00D\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253664 2018-10-09] (Malwarebytes)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-16] (Corel Corporation)
R3 SmbDrv; C:\Windows\system32\DRIVERS\Smb_driver_AMDASF.sys [28400 2013-01-30] (Synaptics Incorporated)
R3 SOWS; C:\Windows\System32\drivers\sows.sys [24280 2012-06-11] (Sony Corporation)
R3 t_mouse.sys; C:\Windows\system32\DRIVERS\t_mouse.sys [6144 2013-04-10] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [281944 2015-07-06] (Microsoft Corporation)
R1 YSDrv; C:\Program Files (x86)\Bignox\BigNoxVM\RT\YSDrv.sys [310536 2018-07-06] (BigNox Corporation)
R3 ALSysIO; \??\C:\Users\Marc\AppData\Local\Temp\ALSysIO64.sys [X] <==== ATTENTION
S3 atillk64; \??\C:\Program Files (x86)\AMD\System Monitor\atillk64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-10-09 22:29 - 2018-10-09 22:31 - 000019250 _____ C:\Users\Marc\Desktop\FRST.txt
2018-10-09 22:29 - 2018-10-09 22:29 - 000000000 ____D C:\FRST
2018-10-09 22:28 - 2018-10-09 22:28 - 002414592 _____ (Farbar) C:\Users\Marc\Desktop\FRST64(2).exe
2018-10-09 22:27 - 2018-10-09 22:27 - 000004807 _____ C:\Users\Marc\Desktop\AdwCleaner[S09].txt
2018-10-09 22:16 - 2018-10-09 22:16 - 000001285 _____ C:\Users\Marc\Desktop\malwarebyteslog.txt
2018-10-09 21:15 - 2018-10-09 21:15 - 000253664 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-10-08 12:57 - 2018-10-09 21:47 - 000000000 ____D C:\Users\Marc\Downloads\Ant-Man And The Wasp (2018) [WEBRip] [720p] [YTS.AM]
2018-10-07 21:52 - 2018-10-07 22:12 - 000004935 _____ C:\Users\Marc\Desktop\test E.7z
2018-10-07 21:48 - 2018-10-07 21:50 - 000000000 ____D C:\Users\Marc\Desktop\test E
2018-10-07 19:02 - 2018-10-07 19:02 - 000000000 ____D C:\Users\Marc\Downloads\The.Commuter.2018.BRRip.XViD-ETRG
2018-10-05 20:58 - 2018-10-05 20:58 - 000005353 _____ C:\Users\Marc\Desktop\zeta quest-txt.axx
2018-10-05 20:50 - 2018-10-05 20:50 - 007280637 _____ C:\Users\Marc\Documents\M7309v2.0-zip.axx
2018-10-05 20:44 - 2018-10-05 20:44 - 020650805 _____ C:\Users\Marc\Documents\09_thehackernews_w_wile257_NaDnG35wI_JUYRocFxhEFA-pdf.axx
2018-10-05 20:44 - 2018-10-05 20:44 - 015749823 _____ C:\Users\Marc\Documents\46-thehackernews-w_pacb46-E8SF4NxGrhr5PR_eBwN2Gg-pdf.axx
2018-10-05 20:43 - 2018-10-05 20:43 - 023830453 _____ C:\Users\Marc\Documents\72-thehackernews-w_wile234-6wZ5Ka9H7F0fKMsAyjNKNw-pdf.axx
2018-10-05 20:43 - 2018-10-05 20:43 - 000009715 _____ C:\Users\Marc\Documents\Emblem-7z.axx
2018-10-05 20:42 - 2018-10-05 20:42 - 010929886 _____ C:\Users\Marc\Documents\Humbug-mp3.axx
2018-10-05 20:42 - 2018-10-05 20:42 - 000063413 _____ C:\Users\Marc\Documents\None (20130219 160244)-m4a.axx
2018-10-05 20:16 - 2018-10-05 20:17 - 000001247 _____ C:\Users\Marc\Desktop\clear clipboard.lnk
2018-10-03 16:49 - 2018-10-07 21:52 - 000000000 ____D C:\Users\Marc\AppData\Local\AxCrypt
2018-10-03 16:48 - 2018-10-03 16:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AxCrypt
2018-10-03 16:48 - 2018-10-03 16:48 - 000000000 ____D C:\Program Files\AxCrypt
2018-10-01 21:14 - 2018-10-01 21:14 - 000000000 ____D C:\Users\Marc\Downloads\VA - Now That's What I Call Merry Christmas (2017) Mp3 (320kbps) [Hunter]
2018-09-30 12:57 - 2018-09-30 12:57 - 000000831 _____ C:\Users\Public\Desktop\VLC media player.lnk
2018-09-30 12:57 - 2018-09-30 12:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2018-09-24 11:22 - 2018-09-27 20:40 - 000000516 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2018-09-19 13:21 - 2018-09-19 13:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-10-09 21:49 - 2018-06-10 17:45 - 000000000 ____D C:\Users\Marc\AppData\Roaming\vlc
2018-10-09 21:47 - 2018-05-23 20:56 - 000000000 ____D C:\Users\Marc\AppData\Roaming\qBittorrent
2018-10-09 21:08 - 2014-11-30 20:56 - 000002784 _____ C:\Windows\System32\Tasks\Core Temp Autostart Marc
2018-10-09 18:04 - 2018-09-02 18:26 - 000000000 ____D C:\Users\Marc\Documents\ROM
2018-10-09 17:25 - 2016-02-16 10:15 - 000000988 _____ C:\Users\Marc\.packettracer
2018-10-09 17:18 - 2018-08-18 21:37 - 000000308 _____ C:\Windows\Tasks\UCBrowserUpdaterCore.job
2018-10-08 13:47 - 2016-12-01 19:10 - 000000000 ____D C:\Users\Marc\AppData\LocalLow\Mozilla
2018-10-07 23:06 - 2018-07-06 15:48 - 000000000 ____D C:\Users\Marc\.BigNox
2018-10-07 23:06 - 2018-07-06 15:46 - 000000000 ____D C:\Users\Marc\AppData\Local\Nox
2018-10-07 22:33 - 2015-06-25 16:54 - 000000000 ____D C:\Users\Marc\.android
2018-10-07 22:32 - 2018-07-06 15:49 - 000000000 ____D C:\Users\Marc\vmlogs
2018-10-07 20:29 - 2017-09-15 17:12 - 000000000 ____D C:\Users\Marc\Cisco Packet Tracer 7.1
2018-10-07 20:24 - 2017-09-15 17:12 - 000000000 ____D C:\Users\Marc\AppData\Local\PacketTracer7
2018-10-05 22:51 - 2014-09-20 15:50 - 000000000 ____D C:\Users\Marc\Documents\ios 4.2.1 shsh blobs
2018-10-05 22:25 - 2015-06-11 12:38 - 000000000 ____D C:\Users\Marc\Documents\wpgames
2018-10-05 21:12 - 2013-03-11 13:01 - 000000000 ____D C:\Users\Marc\AppData\Local\CrashDumps
2018-10-05 21:03 - 2018-03-04 14:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2018-10-05 21:03 - 2018-03-04 14:38 - 000000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2018-10-05 20:49 - 2017-01-14 19:36 - 000000000 ____D C:\Users\Marc\Documents\IT316
2018-10-05 20:41 - 2015-05-07 17:29 - 000000000 ___RD C:\Users\Marc\Downloads\Download
2018-10-05 19:47 - 2018-05-13 14:46 - 000000000 ____D C:\Users\Marc\Downloads\Moobee
2018-10-05 18:24 - 2017-11-12 15:40 - 000004168 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2018-10-04 20:29 - 2013-02-06 22:13 - 000003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3892480582-283260505-3703768022-1002
2018-10-04 19:58 - 2018-08-18 21:37 - 000000472 _____ C:\Windows\Tasks\UCBrowserUpdater.job
2018-10-04 19:58 - 2012-07-26 15:22 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-10-04 19:57 - 2012-07-26 13:26 - 001310720 ___SH C:\Windows\system32\config\BBI
2018-10-04 19:55 - 2018-08-18 21:37 - 000003446 _____ C:\Windows\System32\Tasks\UCBrowserUpdater
2018-10-04 19:54 - 2017-12-18 18:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BDAntiRansomware
2018-10-04 14:11 - 2018-04-07 23:06 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-10-04 14:08 - 2018-04-07 23:07 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2018-10-04 13:53 - 2012-07-26 15:28 - 000848230 _____ C:\Windows\system32\PerfStringBackup.INI
2018-10-04 13:53 - 2012-07-26 13:37 - 000000000 ____D C:\Windows\Inf
2018-10-03 22:26 - 2012-07-26 16:12 - 000000000 ____D C:\Windows\system32\NDF
2018-10-03 16:48 - 2017-05-29 19:27 - 000000000 ____D C:\ProgramData\Package Cache
2018-10-01 18:05 - 2018-06-26 18:23 - 000000000 ____D C:\Users\Marc\Downloads\Dragon Ball Super - Season 4
2018-09-30 12:56 - 2017-05-24 19:55 - 000000000 ____D C:\Program Files\VideoLAN
2018-09-30 12:32 - 2018-07-31 12:22 - 1125738042 _____ C:\Users\Marc\Downloads\Railroad.Tigers.2016.720p.BRRip.1GB.MkvCage.mkv
2018-09-28 20:27 - 2018-08-31 22:26 - 000000804 _____ C:\Users\Marc\Desktop\unsaved.txt
2018-09-28 14:42 - 2018-04-27 14:54 - 000241882 ____N C:\Windows\Minidump\092818-153520-01.dmp
2018-09-28 14:42 - 2013-04-25 10:57 - 000000000 ____D C:\Windows\Minidump
2018-09-23 19:00 - 2012-07-26 16:12 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-09-23 18:56 - 2012-12-12 12:35 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-09-19 13:38 - 2014-03-10 05:54 - 000215920 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2018-09-19 13:37 - 2013-05-26 07:31 - 000163392 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2018-09-19 13:26 - 2015-04-11 10:22 - 000002224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-09-19 13:21 - 2018-05-28 07:49 - 000000000 ____D C:\Program Files\qBittorrent
2018-09-19 13:06 - 2013-05-26 07:32 - 000467320 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys

==================== Files in the root of some directories =======

2013-02-13 10:20 - 2013-02-13 10:20 - 000000036 _____ () C:\Users\Marc\AppData\Local\housecall.guid.cache
2013-02-17 10:45 - 2015-02-04 19:26 - 000007632 _____ () C:\Users\Marc\AppData\Local\resmon.resmoncfg
2016-07-29 01:23 - 2017-01-17 12:01 - 000019456 _____ () C:\Users\Marc\AppData\Local\WebpageIcons.db

Files to move or delete:
====================
C:\Users\Marc\AppData\Local\Temp\Temp1_Everything-1.4.1.877.x64.zip\Everything.exe

Some files in TEMP:
====================
2018-09-19 13:06 - 2018-09-19 13:06 - 000006656 _____ () C:\Users\Marc\AppData\Local\Temp\1xknwnhb.dll
2018-08-18 22:18 - 2018-08-18 22:18 - 001906040 _____ (Oracle Corporation) C:\Users\Marc\AppData\Local\Temp\jre-8u181-windows-au.exe
2018-08-04 13:32 - 2018-08-04 13:41 - 004264384 _____ (Don HO don.h@free.fr) C:\Users\Marc\AppData\Local\Temp\npp.7.5.8.Installer.exe
2018-08-13 20:04 - 2018-08-13 20:04 - 015301240 _____ (Microsoft Corporation) C:\Users\Marc\AppData\Local\Temp\vc_redist.x64.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-10-07 19:38

==================== End of FRST.txt ============================

[clark02121992]

Addition.txt

[nasdaq]

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Torch is part of the UCBrowser.

http://www.ucweb.com/wor/prd/prd/motorola-Torch-xz-15263.html

UC Browser (HKLM-x32\...\UCBrowser) (Version: 7.0.185.1002 - UCWeb Inc.) <==== ATTENTION

Uninstall it via the Control Panel > Program > Programs and features.
https://kb.wisc.edu/page.php?id=27423

Run the Malwarebytes and AdwCleaner and delete all remaining entries that will be found.

Run the Farbar program one more time and post a fresh FRST.TXT log.

Let me know what problem persists.

 

[clark02121992]

17 hours ago, nasdaq said:

but i am using ucbrowser at this time. as far as i know i install torch browser first back then i not using ucbrowser and not installed

 

 

[nasdaq]

Are you saying that you want to keep Ucbrowser?

[clark02121992]

Yes sir

[nasdaq]

Hi,

Sorry for this long delay.

OK, it"s your call.

Quote

cant remove or change remove or set to nothing when opening magnet links on google chrome

magnet links, is not showing in your logs.

It may be a shortcut you are using which is referencing Torch.

Run  the Farbar program and scan only for the Shortcuts.

Check the Shorcuts.txt box.

Post the log for my review.

 

[clark02121992]

Users shortcut scan result (x64) Version: 10.10.2018
Ran by Marc (15-10-2018 13:39:16)
Running from C:\Users\Marc\Desktop
Boot Mode: Normal

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\MSACCESS.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk -> C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\SC_Reader.ico (Flexera Software LLC)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk -> C:\Program Files (x86)\Adobe\Adobe Help\Adobe Help.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop Elements 10.lnk -> C:\Program Files (x86)\Adobe\Elements 10 Organizer\Photoshop Elements 10.0.exe (Adobe Systems Incorporated)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk -> C:\Windows\Installer\{52D87F32-70E4-4348-8148-C0B9F35B1314}\AppleSoftwareUpdateIco.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVE.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTE.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home.lnk -> C:\Program Files (x86)\Sony\PlayMemories Home\PMBBrowser.exe (Sony Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\MSPUB.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trend Micro Install.lnk -> C:\Program Files\Trend Micro\TM\TMInstall.exe (Sony Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UC Browser.lnk -> C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe (UCWeb Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care (Desktop).lnk -> C:\Program Files\Sony\VAIO Care\VAIOCare.exe (Sony Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Data Restore Tool.lnk -> C:\Program Files (x86)\Sony\VAIO Data Restore Tool\Restore.exe (Sony Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Gate.lnk -> C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe (Sony Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Manual.lnk -> C:\Program Files (x86)\Sony\VAIO Manual\ManualLauncher.exe (Sony Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Media Server Settings.lnk -> C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHS.exe (Sony Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Transfer.lnk -> C:\Program Files (x86)\Sony\VAIO Transfer Support\VAIOTransfer.exe (Sony Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk -> C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe (Sony Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Store.lnk -> C:\Windows\WinStore\WinStore.htm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark Legacy.lnk -> C:\Program Files (x86)\Wireshark\Wireshark-gtk.exe (The Wireshark developer community, hxxp://www.wireshark.org/)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk -> C:\Program Files (x86)\Wireshark\Wireshark.exe (The Wireshark developer community, hxxp://www.wireshark.org/)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZetaRO\ZetaRO.lnk -> C:\GAMES\Zeta\ZetaRO.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap\Uninstall WinPcap 4.1.3.lnk -> C:\Program Files (x86)\WinPcap\uninstall.exe (Riverbed Technology, Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VOWSoft iPod Software\iBackupBot for iTunes\iBackupBot for iTunes.lnk -> C:\Program Files (x86)\VOWSoft iPod Software\iBackupBot for iTunes\iBackupBot.exe (VOW Software, Ltd.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VOWSoft iPod Software\iBackupBot for iTunes\Uninstall.lnk -> C:\Program Files (x86)\VOWSoft iPod Software\iBackupBot for iTunes\uninst.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VOWSoft iPod Software\iBackupBot for iTunes\Website.lnk -> C:\Program Files (x86)\VOWSoft iPod Software\iBackupBot for iTunes\iBackupBot.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VOWSoft iPod Software\iBackupBot for iPad iPhone\iBackupBot for iPad iPhone.lnk -> C:\Program Files\VOW Software\iBackupBot for iPad iPhone\iBackupBot.exe (VOW Software, Ltd.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VOWSoft iPod Software\iBackupBot for iPad iPhone\Uninstall.lnk -> C:\Program Files\VOW Software\iBackupBot for iPad iPhone\uninst.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VOWSoft iPod Software\iBackupBot for iPad iPhone\Website.lnk -> C:\Program Files\VOW Software\iBackupBot for iPad iPhone\iBackupBot.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VirtViewer\Remote viewer.lnk -> C:\Program Files\VirtViewer v5.0-256\bin\remote-viewer.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk -> C:\Program Files\VideoLAN\VLC\Documentation.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk -> C:\Program Files\VideoLAN\VLC\NEWS.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk -> C:\Program Files\VideoLAN\VLC\VideoLAN Website.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk -> C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care\VAIO Care (Desktop).lnk -> C:\Program Files\Sony\VAIO Care\VAIOCare.exe (Sony Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unchecky\Unchecky.lnk -> C:\Program Files (x86)\Unchecky\unchecky.exe (Reason Software Company Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unchecky\Uninstall.lnk -> C:\Program Files (x86)\Unchecky\uninstall.exe (Reason Software Company Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UC Browser\UC Browser.lnk -> C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe (UCWeb Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows Easy Transfer Reports.lnk -> C:\Windows\System32\migwiz\PostMig.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows Easy Transfer.lnk -> C:\Windows\System32\migwiz\migwiz.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk -> C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SolarWinds Response Time Viewer\SolarWinds Response Time Viewer.lnk -> C:\Program Files (x86)\SolarWinds\ResponseTimeViewer\ResponseTimeViewer.exe (SolarWinds)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SHAREit\SHAREit.lnk -> C:\Program Files (x86)\SHAREit Technologies\SHAREit\SHAREit.exe (SHAREit Technologies Co.Ltd)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Securely File Shredder\Securely File Shredder.lnk -> C:\Program Files\Securely File Shredder\FileShredder.exe (Reason Software Company Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent\qBittorrent.lnk -> C:\Program Files\qBittorrent\qbittorrent.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent\Uninstall.lnk -> C:\Program Files\qBittorrent\uninst.exe (The qBittorrent project)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home\PlayMemories Home Settings Initialization Tool.lnk -> C:\Program Files (x86)\Sony\PlayMemories Home\PMBInit.exe (Sony Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home\PlayMemories Home.lnk -> C:\Program Files (x86)\Sony\PlayMemories Home\PMBBrowser.exe (Sony Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++\Notepad++.lnk -> C:\Program Files (x86)\Notepad++\notepad++.exe (Don HO don.h@free.fr)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2010 Express\Microsoft Visual Basic 2010 Express.lnk -> C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\vbexpress.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools\Office 2016 Language Preferences.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\SETLANG.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools\Skype for Business Recording Manager.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\OcPubMgr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools\Telemetry Dashboard for Office 2016.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\msotd.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools\Telemetry Log for Office 2016.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\msoev.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MCShield\MCShield Control Center.lnk -> C:\Program Files (x86)\MCShield\MCShieldCC.exe (MyCity)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MCShield\MCShield Real-Time Monitor.lnk -> C:\Program Files (x86)\MCShield\MCShieldRTM.exe (MyCity)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configure Java.lnk -> C:\Program Files\Java\jre1.8.0_181\bin\javacpl.exe (Oracle Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes\About iTunes.lnk -> C:\Program Files\iTunes\iTunes.Resources\en.lproj\About iTunes.rtf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes\iTunes.lnk -> C:\Program Files\iTunes\iTunes.exe (Apple Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GRF Editor\GRF Editor.lnk -> C:\Program Files (x86)\GRF Editor\GRF Editor.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GNS3\Dynamips Hypervisor.lnk -> C:\Program Files\GNS3\dynamips-start.cmd ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GNS3\GNS3.lnk -> C:\Program Files\GNS3\gns3.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GNS3\Loopback Manager.lnk -> C:\Program Files\GNS3\loopback-manager.cmd ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GNS3\Network device list.lnk -> C:\Program Files\GNS3\network-device-list.cmd ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GNS3\Uninstall.lnk -> C:\Program Files\GNS3\Uninstall.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GNS3\VMnet Manager.lnk -> C:\Program Files\GNS3\vmnet-manager.cmd ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GNS3\VPCS.lnk -> C:\Program Files\GNS3\vpcs-start.cmd ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GNS3\Website.lnk -> C:\Program Files\GNS3\GNS3.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileASSASSIN\FileASSASSIN.lnk -> C:\Program Files (x86)\FileASSASSIN\FileASSASSIN.exe (Malwarebytes)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileASSASSIN\Uninstall.lnk -> C:\Program Files (x86)\FileASSASSIN\uninst.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo\CrystalDiskInfo.lnk -> C:\Program Files (x86)\CrystalDiskInfo\DiskInfo32.exe (Crystal Dew World)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Packet Tracer\Cisco Packet Tracer Help.lnk -> C:\GAMES\Packet Tracer\Cisco Packet Tracer 7.1\help\default\index.htm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Packet Tracer\Cisco Packet Tracer.lnk -> C:\GAMES\Packet Tracer\Cisco Packet Tracer 7.1\bin\PacketTracer7.exe (Cisco Systems, Inc)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Packet Tracer\Qt Linguist.lnk -> C:\GAMES\Packet Tracer\Cisco Packet Tracer 7.1\bin\linguist.exe (Digia Plc and/or its subsidiary(-ies))
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Packet Tracer\Saves.lnk -> C:\GAMES\Packet Tracer\Cisco Packet Tracer 7.1\saves ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Packet Tracer\Uninstall Cisco Packet Tracer.lnk -> C:\GAMES\Packet Tracer\Cisco Packet Tracer 7.1\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AxCrypt\AxCrypt.lnk -> C:\Windows\Installer\{93BEFCCD-77A3-24E9-015B-A175869B8927}\axcrypt.ico ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software\Avast Free Antivirus.lnk -> C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (32-bit).lnk -> C:\Windows\SysWOW64\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (64-bit).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\Windowspowershell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk -> C:\Windows\System32\SoundRecorder.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Steps Recorder.lnk -> C:\Windows\System32\psr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip File Manager.lnk -> C:\Program Files\7-Zip\7zFM.exe (Igor Pavlov)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip Help.lnk -> C:\Program Files\7-Zip\7-zip.chm ()
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Libraries ()
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Help.lnk -> C:\Windows\HelpPane.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Windows.Defender.lnk -> C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)
Shortcut: C:\Users\Guest.Serquina\Links\Desktop.lnk -> C:\Users\Marc\Desktop ()
Shortcut: C:\Users\Guest.Serquina\Links\Downloads.lnk -> C:\Users\Marc\Downloads ()
Shortcut: C:\Users\Guest.Serquina\Links\RecentPlaces.lnk -> [::{22877A6D-37A1-461A-91B0-DBDA5AAEBC99}]
Shortcut: C:\Users\Guest.Serquina\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30
Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Libraries ()
Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Help.lnk -> C:\Windows\HelpPane.exe (Microsoft Corporation)
Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation)
Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Windows.Defender.lnk -> C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -> C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Libraries ()
Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()
Shortcut: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)
Shortcut: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)
Shortcut: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\Links\Desktop.lnk -> C:\Users\Marc\Desktop ()
Shortcut: C:\Users\Marc\Links\Downloads.lnk -> C:\Users\Marc\Downloads ()
Shortcut: C:\Users\Marc\Links\Music.lnk -> C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms ()
Shortcut: C:\Users\Marc\Links\RecentPlaces.lnk -> [::{22877A6D-37A1-461A-91B0-DBDA5AAEBC99}]
Shortcut: C:\Users\Marc\Downloads\Download\Tor Browser\Start Tor Browser.lnk -> C:\Users\Marc\Downloads\Download\Tor Browser\Browser\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\Marc\Documents\Trend Micro Titanium Maximum Security Install.lnk -> C:\Program Files\Trend Micro\TM\TMInstall.exe (Sony Corporation)
Shortcut: C:\Users\Marc\Desktop\Cisco Packet Tracer.lnk -> C:\Program Files\Cisco Packet Tracer 7.2\bin\PacketTracer7.exe (Cisco Systems, Inc)
Shortcut: C:\Users\Marc\Desktop\Multi-Drive.lnk -> C:\Program Files (x86)\Nox\bin\MultiPlayerManager.exe ()
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\backup.lnk -> C:\Users\Marc\AppData\Roaming\Notepad++\backup ()
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk -> C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe (Malwarebytes)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobile Applications.lnk -> C:\Users\Marc\Music\iTunes\iTunes Media\Mobile Applications ()
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Moobee.lnk -> C:\Users\Marc\Downloads\Moobee ()
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\mrt.lnk -> C:\Windows\System32\MRT.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Podcasts.lnk -> C:\Users\Marc\Music\iTunes\iTunes Media\Podcasts ()
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC media player.lnk -> C:\Program Files (x86)\VideoLAN\VLC\vlc.exe (VideoLAN)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\wnetwatcher.lnk -> C:\Users\Marc\Downloads\Download\exe\wnetwatcher.zip ()
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Libraries ()
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Help.lnk -> C:\Windows\HelpPane.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Windows.Defender.lnk -> C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Nox\Nox.lnk -> C:\Program Files (x86)\Nox\bin\Nox.exe (Duodian Technology Co. Ltd.)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Nox\Nox_unload.lnk -> C:\Program Files (x86)\Nox\bin\Nox_unload.exe (Duodian Technology Co. Ltd.)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\AMD Quick Stream.lnk -> C:\Program Files\AMD Quick Stream\AppexAcceleratorUI.exe (AppEx Networks Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\UC Browser.lnk -> C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe (UCWeb Inc.)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Wireshark Legacy.lnk -> C:\Program Files (x86)\Wireshark\Wireshark-gtk.exe (The Wireshark developer community, hxxp://www.wireshark.org/)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Wireshark.lnk -> C:\Program Files (x86)\Wireshark\Wireshark.exe (The Wireshark developer community, hxxp://www.wireshark.org/)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Cisco Packet Tracer (2).lnk -> C:\GAMES\Packet Tracer\Cisco Packet Tracer 7.1\bin\PacketTracer7.exe (Cisco Systems, Inc)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Cisco Packet Tracer.lnk -> C:\Program Files\Cisco Packet Tracer 7.2\bin\PacketTracer7.exe (Cisco Systems, Inc)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\GNS3.lnk -> C:\Program Files\GNS3\gns3.exe ()
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mp3tag.lnk -> C:\Program Files (x86)\Mp3tag\Mp3tag.exe (Florian Heidenreich)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Nox.lnk -> C:\Program Files (x86)\Nox\bin\Nox.exe (Duodian Technology Co. Ltd.)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\qbittorrent.lnk -> C:\Program Files\qBittorrent\qbittorrent.exe ()
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\SHAREit.lnk -> C:\Program Files (x86)\SHAREit Technologies\SHAREit\SHAREit.exe (SHAREit Technologies Co.Ltd)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Start Tor Browser.lnk -> C:\Users\Marc\Downloads\Download\Tor Browser\Browser\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Thor Patcher.lnk -> C:\GAMES\DarksideRO\DarksideRO.exe ()
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\UC Browser.lnk -> C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe (UCWeb Inc.)
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\ZetaRO Patcher.lnk -> C:\GAMES\Zeta\ZetaRO Patcher.exe ()
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\WoodenPlankStudios.Kattenkwaad_thmrmrbk7g9bj\App.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\ShazamEntertainmentLtd.Shazam_pqbynwjfrbcg4\App.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\NekkiGmbH.ShadowFight2forWindows_9ea1ktvsjkm1c\App.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.ZuneVideo_8wekyb3d8bbwe\Microsoft.ZuneVideo.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.ZuneMusic_8wekyb3d8bbwe\Microsoft.ZuneMusic.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.XboxLIVEGames_8wekyb3d8bbwe\Microsoft.XboxLIVEGames.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\microsoft.windowsphotos_8wekyb3d8bbwe\Microsoft.WindowsLive.ModernPhotos.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Microsoft.WindowsLive.Calendar.lnk -> [LFY1SPSOYMGm=Microsoft Corporation1SPSMԆi<D*T=Mms-resource:calendarAppTitleQ3]%ModernCalendar\CalendarSmallLogo.pngQ ModernCalendar\CalendarLogo.pngU!ModernCalendar\CalendarBadge.pngY$ModernCalendar\CalendarWideLogo.png1SPSwlE[([8װi1SPS0%G`Mms-resource:calendarAppTitle1SPSU(Ly9K-u2microsoft.windowscommunicationsapps_8wekyb3d8bbweQmicrosoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.CalendarbC:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbweEmicrosoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe] (No File)
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Microsoft.WindowsLive.Chat.lnk -> [LFkY1SPSOYMGm=Microsoft Corporation1SPSU(Ly9K-Emicrosoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbweu2microsoft.windowscommunicationsapps_8wekyb3d8bbweMmicrosoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.ChatbC:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe1SPSwlE[([8װa1SPS0%G`Ems-resource:chatAppTitle1SPSMԆi<D*TEms-resource:chatAppTitleQModernChat\messaging_small.pngEModernChat\messaging.pngQModernChat\messaging_badge.pngMModernChat\messaging_wide.png9] (No File)
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Microsoft.WindowsLive.Mail.lnk -> [LFsY1SPSOYMGm=Microsoft Corporation1SPSU(Ly9K-Emicrosoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbweu2microsoft.windowscommunicationsapps_8wekyb3d8bbweMmicrosoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.MailbC:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe1SPSwlE[([8װa1SPS0%G`Ems-resource:mailAppTitle1SPSMԆi<D*TEms-resource:mailAppTitleU!ModernMail\Res\MailSmallLogo.pngIModernMail\Res\MailLogo.pngMModernMail\Res\MailBadge.pngQ ModernMail\Res\MailWideLogo.png;] (No File)
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Microsoft.WindowsLive.People.lnk -> [LFBY1SPSOYMGm=Microsoft Corporation1SPSMԆi<D*T#]%ms-resource:///strings/peopleAppNameG&MModernPeople\PeopleSmall.pngAModernPeople\People.pngIModernPeople\PeopleWide.png1SPSwlE[([8װy1SPS0%G`]%ms-resource:///strings/peopleAppName1SPSU(Ly9K-u2microsoft.windowscommunicationsapps_8wekyb3d8bbweOmicrosoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.PeoplebC:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbweEmicrosoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe] (No File)
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.ShuffleParty_8wekyb3d8bbwe\App.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.Reader_8wekyb3d8bbwe\Microsoft.Reader.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.MusicDeals_8wekyb3d8bbwe\App.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.MonstersLoveCandy_8wekyb3d8bbwe\App.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.Camera_8wekyb3d8bbwe\Microsoft.Camera.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.BingWeather_8wekyb3d8bbwe\App.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.BingSports_8wekyb3d8bbwe\AppexSports.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.BingNews_8wekyb3d8bbwe\AppexNews.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.BingFinance_8wekyb3d8bbwe\AppexFinance.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\GAMETROOPERS.TinyTroopers_334sksj6ker18\App.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\GAMETROOPERS.Overkill3_334sksj6ker18\App.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\GAMELOFTSA.Six-Guns_0pp20fcewvvtj\App.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\GAMELOFTSA.Asphalt8Airborne_0pp20fcewvvtj\App.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Fingersoft.HillClimbRacing_r6rtpscs7gwyg\App.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\ElectronicArtsMobile.FIFA15_q5ha1ztykcgvj\FIFA.App.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Disney.51510C9CF2813_6rarf9sa4v8jt\App.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\BigDuckGamesLLC.Flow_1eenntbmr0etw\App.lnk -> Tile and icon assets
Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\BD9B8345.VAIOCare_05bme2bjq6sag\App.lnk -> Tile and icon assets
Shortcut: C:\Users\Public\Desktop\FileASSASSIN.lnk -> C:\Program Files (x86)\FileASSASSIN\FileASSASSIN.exe (Malwarebytes)
Shortcut: C:\Users\Public\Desktop\VLC media player.lnk -> C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN)

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Control Center.lnk -> C:\Program Files (x86)\Sony\VAIO Control Center\VAIO Control Center.exe (Sony Corporation) -> /VCC
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Gesture Control.lnk -> C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\VCGU.exe (Sony Corporation) -> -Setting
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player - reset preferences and cache files.lnk -> C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN) -> --reset-config --reset-plugins-cache vlc://quit
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk -> C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN) -> -Iskins
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UC Browser\Uninstall UC Browser.lnk -> C:\Program Files (x86)\UCBrowser\Application\Uninstall.exe (UCWeb Inc.) -> --uninstall --system-level
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Default Programs.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DefaultPrograms
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /7
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home\PlayMemories Home Help.lnk -> C:\Program Files (x86)\Sony\PlayMemories Home\PMBBrowser.exe (Sony Corporation) -> /Help
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools\Database Compare.lnk -> C:\Program Files (x86)\Microsoft Office\root\Client\AppVLP.exe (Microsoft Corporation) -> "C:\Program Files (x86)\Microsoft Office\Root\Office16\DCF\DATABASECOMPARE.EXE"
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools\Office Upload Center.lnk -> C:\Program Files (x86)\Microsoft Office\root\Client\AppVLP.exe (Microsoft Corporation) -> "C:\Program Files (x86)\Microsoft Office\Root\Office16\MSOUC.EXE"
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools\Spreadsheet Compare.lnk -> C:\Program Files (x86)\Microsoft Office\root\Client\AppVLP.exe (Microsoft Corporation) -> "C:\Program Files (x86)\Microsoft Office\Root\Office16\DCF\SPREADSHEETCOMPARE.EXE"
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\About Java.lnk -> C:\Program Files\Java\jre1.8.0_181\bin\javacpl.exe (Oracle Corporation) -> -tab about
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Check For Updates.lnk -> C:\Program Files\Java\jre1.8.0_181\bin\javacpl.exe (Oracle Corporation) -> -tab update
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\06 - System.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.System
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\08 - Power Options.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.PowerOptions
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\10 - Programs and Features.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.ProgramsAndFeatures
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> /e,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}
ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\VAIO Control Center.lnk -> C:\Program Files (x86)\Sony\VAIO Control Center\VAIO Control Center.exe (Sony Corporation) -> /VCC
ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager
ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\06 - System.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.System
ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\08 - Power Options.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.PowerOptions
ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\10 - Programs and Features.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.ProgramsAndFeatures
ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> /e,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}
ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0
ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}
ShortcutWithArgument: C:\Users\Marc\Downloads\Download\flush dns.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /k ipconfig /flushdns
ShortcutWithArgument: C:\Users\Marc\Downloads\Download\ping 8.8.8.8.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /k ping 8.8.8.8 -t
ShortcutWithArgument: C:\Users\Marc\Desktop\clear clipboard.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /c "echo off | clip"
ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yahoo! Inc\Yahoo Messenger.lnk -> C:\Users\Marc\AppData\Local\yahoomessenger\Update.exe (GitHub) -> --processStart "Yahoo Messenger.exe"
ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc\Discord.lnk -> C:\Users\Marc\AppData\Local\Discord\Update.exe (GitHub) -> --processStart Discord.exe
ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Discord.lnk -> C:\Users\Marc\AppData\Local\Discord\Update.exe (GitHub) -> --processStart Discord.exe
ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\flush dns.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /k ipconfig /flushdns
ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\ping 8.8.8.8.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /k ping 8.8.8.8 -t
ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /7
ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1"
ShortcutWithArgument: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager
ShortcutWithArgument: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\06 - System.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.System
ShortcutWithArgument: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\08 - Power Options.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.PowerOptions
ShortcutWithArgument: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\10 - Programs and Features.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.ProgramsAndFeatures
ShortcutWithArgument: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> /e,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}
ShortcutWithArgument: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0
ShortcutWithArgument: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap\WinPcap Web Site.url -> URL: hxxp://www.winpcap.org/
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam Support Center.url -> URL: hxxp://support.steampowered.com/
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2010 Express\Try Visual Studio 2010 Professional.url -> URL: hxxp://go.microsoft.com/fwlink/?LinkId=166206&clcid=409
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MCShield\MCShield website.url -> URL: hxxp://www.mcshield.net/
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Get Help.url -> URL: hxxp://java.com/help
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Visit Java.com.url -> URL: hxxp://java.com/
InternetURL: C:\Users\Default\Favorites\The Berliner Philharmoniker's Digital Concert Hall.url -> URL: hxxp://www.digitalconcerthall.com/?a=sonyvaio&c=true
InternetURL: C:\Users\Default\Favorites\Sony\Sony Asia Pacific.url -> URL: hxxp://www.sony-asia.com/
InternetURL: C:\Users\Default\Favorites\Sony\VAIO Online Support.url -> URL: hxxp://www.sony-asia.com/support/vaio
InternetURL: C:\Users\Default\Favorites\Sony\VAIO Online.url -> URL: hxxp://vaio-online.sony.com/
InternetURL: C:\Users\Guest.Serquina\Favorites\Bing.url -> URL: hxxp://go.microsoft.com/fwlink/p/?LinkId=255142
InternetURL: C:\Users\Guest.Serquina\Favorites\The Berliner Philharmoniker's Digital Concert Hall.url -> URL: hxxp://www.digitalconcerthall.com/?a=sonyvaio&c=true
InternetURL: C:\Users\Guest.Serquina\Favorites\Sony\Sony Asia Pacific.url -> URL: hxxp://www.sony-asia.com/
InternetURL: C:\Users\Guest.Serquina\Favorites\Sony\VAIO Online Support.url -> URL: hxxp://www.sony-asia.com/support/vaio
InternetURL: C:\Users\Guest.Serquina\Favorites\Sony\VAIO Online.url -> URL: hxxp://vaio-online.sony.com/
InternetURL: C:\Users\Marc\Music\younha_-_you_who_came_from_the_stars_ost_part.3_[www.k2nblog.com]\Younha - You Who Came From The Stars OST Part.3 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Yoon Mi Rae - The Legend Of The Blue Sea OST Part.2 - Single (iTunes) [www.k2nblog.com]\Yoon Mi Rae - The Legend Of The Blue Sea OST Part.2 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Yoon Gun - Angel Eyes OST Part.3 [www.k2nblog.com]\Yoon Gun - Angel Eyes OST Part.3 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Yook Sung Jae (BTOB) - Scholar Who Walks The Night OST Part.3 [www.k2nblog.com]\Yook Sung Jae (BTOB) - Scholar Who Walks The Night OST Part.3 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\wax_-__i_miss_you_ost_part.1__www.k2nblog.com_\Wax -  I Miss You OST Part.1 [www.k2nblog.com]\K2NBLOG.com !!! Download K-Pop, J-Pop, C-Pop & Us-Uk Music.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\TAEYEON - Moon Lovers  Scarlet Heart Ryo OST Part.5 [www.k2nblog.com]\TAEYEON - Moon Lovers  Scarlet Heart Ryo OST Part.5 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\TaeYang - Ringa Linga - Single (iTunes) [www.k2nblog.com]\TaeYang - Ringa Linga - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Sunhae Im - Moon Lovers  Scarlet Heart Ryo OST Part.9 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Sung Si Kyung - The Legend of the Blue Sea OST Part. 5 - Single (iTunes) [www.k2nblog.com]\Sung Si Kyung - The Legend of the Blue Sea OST Part. 5 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Sung Si Kyung - My Love From the Star OST Pt. 7 - Single (iTunes) [www.k2nblog.com]\Sung Si Kyung - My Love From the Star OST Pt. 7 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Soyou - Goblin OST Part 7 - Single (iTunes) [www.k2nblog.com]\Soyou - Goblin OST Part 7 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Sejeong (gugudan) - The Legend Of The Blue Sea OST Part.10 [www.k2nblog.com]\Sejeong (gugudan) - The Legend Of The Blue Sea OST Part.10 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Park Yoon Ha - The Legend of The Blue Sea OST Part. 9 [www.k2nblog.com]\Park Yoon Ha - The Legend of The Blue Sea OST Part. 9 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Min Chae - The Legend Of The Blue Sea OST Part.11 [www.k2nblog.com]\Min Chae - The Legend Of The Blue Sea OST Part.11 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\lyn_-_you_who_came_from_the_stars_ost_part.1_[www.k2nblog.com]\LYn - You Who Came From The Stars OST Part.1 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\LYn - The Legend of the Blue Sea OST Part.1 - Single (iTunes) [www.k2nblog.com]\LYn - The Legend of the Blue Sea OST Part.1 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Loco, Punch - Moon Lovers Scarlet Heart Ryo OST Part.2 [www.k2nblog.com]\Loco, Punch - Moon Lovers  Scarlet Heart Ryo OST Part.2 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Lim Do Hyuk - Moon Lovers  Scarlet Heart Ryo OST Part.13 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\LEE HI - Moon Lovers  Scarlet Heart Ryo OST Part.10 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Lasse Lindh - Goblin OST Part. 3 [www.k2nblog.com]\Lasse Lindh - Goblin OST Part. 3 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Lasse Lindh - Angel Eyes OST Special Track [www.k2nblog.com]\Lasse Lindh - Angel Eyes OST Special Track [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Lasse Lindh - Angel Eyes OST Part.1 [www.k2nblog.com]\Lasse Lindh - Angel Eyes OST Part.1 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Kim Tae Hyun (Dickpunks) - Angel Eyes OST Part.2 [www.k2nblog.com]\Kim Tae Hyun (Dickpunks) - Angel Eyes OST Part.2 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Kim Soo Hyun - You Who Came From The Stars OST Part.8 [www.k2nblog.com]\Kim Soo Hyun - You Who Came From The Stars OST Part.8 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Ken (VIXX) - The Legend of The Blue Sea OST Part.7 [www.k2nblog.com]\Ken (VIXX) - The Legend of The Blue Sea OST Part.7 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Kang Ha Neul - Angel Eyes OST Part.5 [www.k2nblog.com]\Kang Ha Neul - Angel Eyes OST Part.5 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\k.will_-_you_who_came_from_the_stars_ost_part.2_[www.k2nblog.com]\K.Will - You Who Came From The Stars OST Part.2 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\JUST - You Who Came From The Stars OST Part.5 [www.k2nblog.com]\JUST - You Who Came From The Stars OST Part.5 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Jung Yup - The Legend Of The Blue Sea OST Part.3 - Single (iTunes) [www.k2nblog.com]\Jung Yup - The Legend Of The Blue Sea OST Part.3 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Jung Joonil - Goblin OST Part. 8 [www.k2nblog.com]\Jung Joonil - Goblin OST Part. 8 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Jo Jung Hee - Angel Eyes OST Part.7 [www.k2nblog.com]\Jo Jung Hee - Angel Eyes OST Part.7 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\jessica__krystal__j-min_-_to_the_beautiful_you_ost_part.1__www.k2nblog.com_\Jessica, Krystal, J-Min - To The Beautiful You OST Part.1 [www.k2nblog.com]\K2NBLOG.com !!! Download K-Pop, J-Pop, C-Pop & Us-Uk Music.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Jang Jane - Scholar Who Walks the Night OST Part.1 [www.k2nblog.com]\Jang Jane - Scholar Who Walks the Night OST Part.1 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\I.O.I - Moonlovers Scarlet Heart Ryeo (Original Television Soundtrack), Pt. 3 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\hyolyn_-__my_love_from_the_star_pt._4_-_single_(itunes)_[www.k2nblog.com]\Hyolyn -  My Love From The Star Pt. 4 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Huh Gak - You Who Came From The Stars OST Part.6 [k2nblog.com]\Huh Gak - You Who Came From The Stars OST Part.6 [k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\hellovenus_-_wiggle_wiggle_(itunes)_[www.k2nblog.com]\HELLOVENUS - Wiggle Wiggle (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Han Soo Ji - Angel Eyes OST Part.6 [www.k2nblog.com]\Han Soo Ji - Angel Eyes OST Part.6 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Ha Hyun Woo (Guckkasten) - Legend Of The Blue Sea OST Part. 4 [www.k2nblog.com]\Ha Hyun Woo (Guckkasten) - Legend Of The Blue Sea OST Part. 4 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Eun Gaeun - Scholar Who Walks the Night OST Part.2 [www.k2nblog.com]\Eun Gaeun - Scholar Who Walks the Night OST Part.2 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Epik High - Moon Lovers Scarlet Heart Ryeo OST Part 6 [iTunes]\Epik High - Moon Lovers Scarlet Heart Ryeo OST Part 6 [iTunes]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Davichi - Moon Lovers Scarlet Heart Ryo OST Part.4 [www.k2nblog.com]\Davichi - Moon Lovers  Scarlet Heart Ryo OST Part.4 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Crush - Goblin OST Part. 4 - Single (iTunes) [www.k2nblog.com]\Crush - Goblin OST Part. 4 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Chanyeol, Punch - Goblin (Original Television Soundtrack) Pt. 1 - Single (iTunes) [www.k2nblog.com]\Chanyeol & Punch - Goblin (Original Television Soundtrack) Pt. 1 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> 
InternetURL: C:\Users\Marc\Music\BEAST - Scholar Who Walks The Night OST Part.5 [www.k2nblog.com]\BEAST - Scholar Who Walks The Night OST Part.5 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Baek Ah Yeon - Angel Eyes OST Part.4 [www.k2nblog.com]\Baek Ah Yeon - Angel Eyes OST Part.4 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Baek A Yeon - Moon Lovers Scarlet Heart Ryo OST Part.7 [www.k2nblog.com]\Baek A Yeon - Moon Lovers  Scarlet Heart Ryo OST Part.7 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\apink_-__secret_garden_[www.k2nblog.com]\APINK -  Secret Garden [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\AKMU - Moon Lovers Scarlet Heart Ryo OST Part.12 [www.k2nblog.com]\AKMU - Moon Lovers  Scarlet Heart Ryo OST Part.12 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\AKMU - Moon Lovers  Scarlet Heart Ryo OST Part.12 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Music\Ailee - Goblin OST Part. 9 [www.k2nblog.com]\Ailee - Goblin OST Part. 9 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Favorites\Bing.url -> URL: hxxp://go.microsoft.com/fwlink/p/?LinkId=255142
InternetURL: C:\Users\Marc\Favorites\The Berliner Philharmoniker's Digital Concert Hall.url -> URL: hxxp://www.digitalconcerthall.com/?a=sonyvaio&c=true
InternetURL: C:\Users\Marc\Favorites\YouTube.url -> URL: hxxp://www.youtube.com/?gl=US
InternetURL: C:\Users\Marc\Favorites\Sony\Sony Asia Pacific.url -> URL: hxxp://www.sony-asia.com/
InternetURL: C:\Users\Marc\Favorites\Sony\VAIO Online Support.url -> URL: hxxp://www.sony-asia.com/support/vaio
InternetURL: C:\Users\Marc\Favorites\Sony\VAIO Online.url -> URL: hxxp://vaio-online.sony.com/
InternetURL: C:\Users\Marc\Downloads\OST\You're Beautiful\[HULKPOP.COM][Album] Various Artists - You're Beautiful OST Part 2\[HULKPOP.COM][Album] Various Artists - You're Beautiful OST Part 2\Visit Hul Kpop.url -> URL: hxxp://www.hulkpop.com/
InternetURL: C:\Users\Marc\Downloads\OST\you who came from the stars\Various Artists - My Love From the Star (Original Television Soundtrack) (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\you who came from the stars\Kim Soo Hyun - You Who Came From The Stars OST Special [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Suzy - While You Were Sleeping OST Part.4 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Suzy - While You Were Sleeping OST Part 13 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Roy Kim - While You Were Sleeping OST Part.3 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Monogram - While You Were Sleeping OST Part.6 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Lee Jong Suk – While You Were Sleeping OST Part.12 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Lee Jong Suk - While You Were Sleeping OST Part.9 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Kim Na Young - While You Were Sleeping OST Part.8 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Jung Joon Il - While You Were Sleeping OST Part.10 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Jang Da Bin - While You Were Sleeping OST Part.11 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\HENRY - While You Were Sleeping OST Part.2 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Eddy Kim - While You Were Sleeping OST Part.1 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\DAVICHI - While You Were Sleeping OST Part.7 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\BrotherSu, SE O - While You Were Sleeping OST Part.5 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\when a man loves\[kpop-download-free.blogspot.com][Album] Various Artists - When A Man's In Love OST\[kpop-download-free.blogspot.com][Album] Various Artists - When A Man's In Love OST\Visit Kpop Download Free.url -> URL: hxxp://kpop-download-free.blogspot.com/
InternetURL: C:\Users\Marc\Downloads\OST\to the beautiful you\To The Beautiful You OST [www.k2nblog.com]\K2NBLOG.com !!! Download K-Pop, J-Pop, C-Pop & Us-Uk Music.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\to the beautiful you\Tae Yeon, Dana - To The Beautiful You OST Part. 4 - Closer\KpopExplorer.net - Download All Genre of Kpop For Free.url -> URL: hxxp://kpopexplorer.net/
InternetURL: C:\Users\Marc\Downloads\OST\to the beautiful you\Super Junior K.R.Y & Kyu Hyun & Tiffany - To The Beautiful You OST Part3 [kpopexplorer.net]\KpopExplorer.net - Download All Genre of Kpop For Free.url -> URL: hxxp://kpopexplorer.net/
InternetURL: C:\Users\Marc\Downloads\OST\to the beautiful you\Sunny, Luna, Onew - To the Beautiful You OST It s Me [www.k2nblog.com]\K2NBLOG.com !!! Download K-Pop, J-Pop, C-Pop & Us-Uk Music.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\to the beautiful you\Kyu Hyun, Tiffany, Super Junior K.R.Y - To The Beautiful You OST Part. 3 [www.k2nblog.com]\K2NBLOG.com !!! Download K-Pop, J-Pop, C-Pop & Us-Uk Music.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\The Bride of the Habaek\Yang Da Il - The Bride of Habaek 2017 OST Part.1 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\The Bride of the Habaek\Savina _ Drones - The Bride of Habaek 2017 OST Part.2 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\The Bride of the Habaek\Lucia - The Bride of Habaek 2017 OST Part.6 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\The Bride of the Habaek\Kim E-Z (Ggotjam Project) - The Bride of Habaek 2017 OST Part.4 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\The Bride of the Habaek\Kassy - The Bride of Habaek 2017 OST Part.3 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\The Bride of the Habaek\Junggigo - The Bride Of Habaek 2017 OST Part.5 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Sistar\[HULKPOP.COM][Single] SISTAR19 - Ma Boy\Visit Hul Kpop.url -> URL: hxxp://www.hulkpop.com/
InternetURL: C:\Users\Marc\Downloads\OST\Sistar\sistar19_-_gone_not_around_any_longer_[www.k2nblog.com]\SISTAR19 - Gone Not Around Any Longer [www.k2nblog.com]\K2NBLOG.com !!! Download K-Pop, J-Pop, C-Pop & Us-Uk Music.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Scholar who walks the night\Various Artists - Scholar Who Walks The Night OST [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Scarlet Heart\V.A - Moonlovers Scarlet Heart Ryeo (Original Television Soundtrack) (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\PSY\00 WWW.HULUSUK.COM.url -> URL: hxxp://hulusuk.com/
InternetURL: C:\Users\Marc\Downloads\OST\PSY\[HULKPOP.COM][Mini Album] PSY - Gangnam Style (강남스타일) [Remix Style] [iTunes]\00 WWW.HULUSUK.COM.url -> URL: hxxp://hulusuk.com/
InternetURL: C:\Users\Marc\Downloads\OST\PSY\PSY 8th 4X2=8 (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\PSY\PSY - Psy 7th Album (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Pinocchio\Zion.T - Pinocchio OST Part.6 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Pinocchio\Younha - Pinocchio OST Part.7 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Pinocchio\Various Artists - Pinocchio OST (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Pinocchio\Tiger J.K - Pinocchio OST Part.1 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Pinocchio\Roy Kim - Pinocchio OST Part.2 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Pinocchio\Park Shin Hye - Pinocchio OST Part.4 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Pinocchio\Kim Bo Kyung - Pinocchio OST Part.8 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Pinocchio\K.Will - Pinocchio OST Part.5 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Pinocchio\Every Single Day - Pinocchio OST Part.3 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\My Lovely Girl\krystal_[f(x)]_-_my_lovely_girl_ost_part.2_[www.k2nblog.com]\Krystal [f(x)] - My Lovely Girl OST Part.2 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\My Girlfriend is a Nine Tailed Fox\[hulkpop.com][Album] Various Artists - My Girlfriend is a Gumiho OST\Visit Kpop Download Free.url -> URL: hxxp://kpop-download-free.blogspot.com/
InternetURL: C:\Users\Marc\Downloads\OST\MOMOLAND\MOMOLAND - Great! - EP (iTunes Plus) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\MOMOLAND\MOMOLAND - Fun to the World - EP (iTunes Plus) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Missing you\Various Artists - Missing You OST [www.k2nblog.com]\K2NBLOG.com !!! Download K-Pop, J-Pop, C-Pop & Us-Uk Music.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Let's Fight Ghost\Various Artists - Lets Fight Ghost OST [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Let's Fight Ghost\SUMIN - Lets Fight Ghost OST Part.6 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Let's Fight Ghost\Rocoberry - Lest Fight Ghost OST Part.4 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Let's Fight Ghost\PIA - Lets Fight Ghost OST Part.2 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Let's Fight Ghost\Kim So Hyun - Let s Fight Ghost OST Part.5 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Let's Fight Ghost\Kim So Hee, Song Yu Vin - Lets Fight Ghost OST Part.3 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Legend of the blue sea\Various Artists - The Legend of the Blue Sea OST (CD 2) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\kpopexplorer.net\City Hunter\Yim Jae Bum - City Hunter OST Part.1 [kpopexplorr.net]\KpopExplorer.net - Download All Genre of Kpop For Free.url -> URL: hxxp://kpopexplorer.net/
InternetURL: C:\Users\Marc\Downloads\OST\kpopexplorer.net\City Hunter\Rainbow - City Hunter OST Part.6 [kpopexplorer.net]\KpopExplorer.net - Download All Genre of Kpop For Free.url -> URL: hxxp://kpopexplorer.net/
InternetURL: C:\Users\Marc\Downloads\OST\kpopexplorer.net\City Hunter\Park Gyu Ri (Kara) - City Hunter OST Part.5 [kpopexplorer.net]\KpopExplorer.net - Download All Genre of Kpop For Free.url -> URL: hxxp://kpopexplorer.net/
InternetURL: C:\Users\Marc\Downloads\OST\kpopexplorer.net\City Hunter\Kim Bo Kyung - City Hunter OST Part 4 [kpopexplorer.net]\KpopExplorer.net - Download All Genre of Kpop For Free.url -> URL: hxxp://kpopexplorer.net/
InternetURL: C:\Users\Marc\Downloads\OST\kpopexplorer.net\City Hunter\Jonghyun (SHINee) & Yanghwajin - City Hunter OST Part.2 [kpopexplorer.net]\KpopExplorer.net - Download All Genre of Kpop For Free.url -> URL: hxxp://kpopexplorer.net/
InternetURL: C:\Users\Marc\Downloads\OST\IU\IU - Chat-Shire (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\IU\HIGH4 & IU - Not Spring, Love, or Cherry Blossoms [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Goblin\Various Artists - Goblin The Lonely and Great God (CD 1) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Girl who see smells\V.A - Girl Who Sees Smell OST (CD 2) (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Girl who see smells\V.A - Girl Who Sees Smell OST (CD 1) (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Exo\EXO - XOXO (Kiss & Hug) [Repackage] (CD 1 iTunes) [k2nblog.com] edited\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Exo\EXO - THE WAR - The 4th Album (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Boys Over Flowers\[Album] Various Artists - Boys Over Flowers OST\Visit Kpop Download Free.url -> URL: hxxp://kpop-download-free.blogspot.com/
InternetURL: C:\Users\Marc\Downloads\OST\BLANKPINK\BLACKPINK - SQUARE UP - EP (iTunes Plus) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\BLANKPINK\BLACKPINK - Square Two - EP (iTunes) [www.k2nblog.com]\BLACKPINK - Square Two - EP (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\BLANKPINK\BLACKPINK - Square One - Single (iTunes) [www.k2nblog.com]\BLACKPINK - Square One - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\BLANKPINK\BLACKPINK - As If It's Your Last - Single (iTunes) [www.k2nblog.com]\BLACKPINK - As If It's Your Last - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Blademan\Various Artists - Iron Man OST [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/
InternetURL: C:\Users\Marc\Downloads\OST\Bigbang\BIG BANG - 4th Mini Album (Special Edition)\KpopExplorer.net - Download All Genre of Kpop For Free.url -> URL: hxxp://kpopexplorer.net/
InternetURL: C:\Users\Marc\Downloads\OST\2NE1\BigBang, 2NE1 - Lollipop [kpopexplorer.net]\KPOP Explorer •  Download Kpop Albums, Singles, OSTs.url -> URL: hxxp://kpopexplorer.net/
InternetURL: C:\Users\Marc\Downloads\OST\2NE1\2NE1 - I Love You [05.07.2012]\KPOP Explorer •  Download Kpop Albums, Singles, OSTs.url -> URL: hxxp://kpopexplorer.net/
InternetURL: C:\Users\Marc\Downloads\OST\2NE1\2NE1 - I Don't Care (Reggae Remix) [03.09.2009]\KPOP Explorer •  Download Kpop Albums, Singles, OSTs.url -> URL: hxxp://kpopexplorer.net/
InternetURL: C:\Users\Marc\Downloads\OST\2NE1\2NE1 - Follow Me [09.02.2010]\KPOP Explorer •  Download Kpop Albums, Singles, OSTs.url -> URL: hxxp://kpopexplorer.net/
InternetURL: C:\Users\Marc\Downloads\OST\2NE1\2NE1 - Fire [kpopexplorer.net]\KPOP Explorer •  Download Kpop Albums, Singles, OSTs.url -> URL: hxxp://kpopexplorer.net/

==================== End of Shortcut.txt =============================
 

[nasdaq]

Hi,

There is no Magnet link in your logs.

Can you give me the link so I can investigate.

 

[clark02121992]

which link sir?

[nasdaq]

Hi,

As listed in your first post.

[clark02121992]

its upon opening every magnet links on torrent and im using google chrome in that post

[nasdaq]

Hi,

The short answer is yes, but it's complicated. Currently, uTorrent's software is considered safe and free of dangerous malware. The primary risk of using uTorrent comes not from the software itself, but the risk of downloading dangerous or infected torrents from unknown sources.

Your Torrent may be compromised.
Remove it.
Restart the computer normally.

If you still want the application reinstall it.

[clark02121992]

Thank you for your help and effort and also my part searching some fixes on the internet you may now close this thread

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks