Results 1 to 10 of 10

Thread: PUP:ByteFence

  1. #1
    Member
    Join Date
    Jan 2013
    Posts
    67

    Default PUP:ByteFence

    Hi there - Malwarebytes removed virus ByteFence from my machine. PLease could you check my logs to confirm removal was usuccessful.

    In addition, when I attempt to download aswMBR i receive a blue screen restart error message?

    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-07-2017
    Ran by Asus (administrator) on G751 (18-07-2017 11:36:17)
    Running from C:\Users\Asus\Downloads
    Loaded Profiles: Asus (Available Profiles: Asus)
    Platform: Windows 10 Home Version 1703 (X64) Language: English (United Kingdom)
    Internet Explorer Version 11 (Default browser: FF)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
    (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
    (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
    (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
    (Intel Corporation) C:\Windows\System32\ibtsiva.exe
    (Foolish IT LLC) C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventMonSvc.exe
    (Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
    (Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
    (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
    (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Gaming Center\vivokey.exe
    (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
    () C:\Program Files\pia_manager\pia_manager.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
    () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe
    (Microsoft Corporation) C:\Windows\System32\smartscreen.exe
    (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
    (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
    (hxxp://www.ruby-lang.org/) C:\Users\Asus\AppData\Local\Temp\ocrA7A.tmp\bin\rubyw.exe
    (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
    () C:\Program Files\pia_manager\pia_manager.exe
    (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
    (© 2015 Microsoft Corporation) C:\Users\Asus\AppData\Local\Microsoft\BingSvc\BingSvc.exe
    (www.BitComet.com) C:\Program Files\BitComet\BitComet.exe
    (www.BitComet.com) C:\Program Files\BitComet\tools\BitCometService.exe
    (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
    (hxxp://www.ruby-lang.org/) C:\Users\Asus\AppData\Local\Temp\ocr218D.tmp\bin\rubyw.exe
    () C:\Windows\SysWOW64\UMonit64.exe
    (The NWJS Community) C:\Program Files\pia_manager\pia_tray_bin\nw-win\pia_nw.exe
    (The NWJS Community) C:\Program Files\pia_manager\pia_tray_bin\nw-win\pia_nw.exe
    (The NWJS Community) C:\Program Files\pia_manager\pia_tray_bin\nw-win\pia_nw.exe
    () C:\Program Files\pia_manager\openvpn.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
    (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    (Farbar) C:\Users\Asus\Downloads\FRST64(3).exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

    ==================== Registry (Whitelisted) ====================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
    HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3348712 2015-07-22] (ELAN Microelectronics Corp.)
    HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
    HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3216032 2013-12-13] (ASUSTek Computer Inc.)
    HKLM-x32\...\Run: [ROGNB] => C:\Program Files (x86)\ASUS Gaming Mouse\hid.exe [463872 2013-05-15] ()
    HKLM-x32\...\Run: [ASUS ROG MacroKey] => C:\Program Files (x86)\ASUS\ASUS ROG MacroKey\Hid.exe [2036224 2014-07-30] (ASUS)
    HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\Cyberlink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-05] (CyberLink)
    HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [492808 2014-05-06] (CyberLink Corp.)
    HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
    HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [97512 2017-06-13] (Avira Operations GmbH & Co. KG)
    HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [918008 2017-07-12] (Avira Operations GmbH & Co. KG)
    HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
    HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
    HKLM Group Policy restriction on software: *.rar.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.lua <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.isp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.paf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.chm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.inf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.ade <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.msc <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.msc <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.shs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.ns <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.ins <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.url <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.jar <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.job <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.ins <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.chm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.jar <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %localappdata%\MS\app_roaming.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\MS\Def*nder.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.pys <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\rkcl\rkcl.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\processor.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\windrv.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.application <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.lua <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\cryptohost.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.isu <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: extratools.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\software.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.ns <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.reg <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.reg <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %systemdrive%\netpass.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.inf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.vb <==== ATTENTION
    HKLM Group Policy restriction on software: kek.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.bin <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.job <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.mde <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.vb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.js <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.js <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.48s <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.sct <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\drvpci.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.com <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.klx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.job <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.inf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\delback.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.mst <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.adp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\clean.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %programfiles%\*\svchost.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.chm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.hta <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.job <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.com <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.adp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.reg <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.js <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.scr <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.ns <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.com <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*\svchost.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.ns <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.bin <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.job <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.pys <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\windefrag.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.url <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.isp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.p <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.url <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.job <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.job <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Windows\csrss.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: vssadmin.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.inf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.mod <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.url <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.48s <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.job <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.p <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.inx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: lsassvrtdbks.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.lua <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.js <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.job <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\winpnp.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.url <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.ns <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.phps <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.ins <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.ade <==== ATTENTION
    HKLM Group Policy restriction on software: PDFBewerbungsmappe.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.pif <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.application <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\imgdesktop.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.isu <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.reg <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.application <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.url <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Steg\steg.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.mst <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: 7_Sp.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.application <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\IKvtxoiPx.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.job <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\x86.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.com <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.ins <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.js <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.msc <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.lua <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.mde <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %programfiles(x86)%\*\svchost.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.xml <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.mde <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.pys <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\bbv.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.application <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\dbddbccdf.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.lua <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.shs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: lsassw86s.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\Ponmsiyyks.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.sct <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.pys <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.xml <==== ATTENTION
    HKLM Group Policy restriction on software: cipher.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.shs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.job <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\new.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.chm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.jse <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.pys <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\RegAsm.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.application <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.sct <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.scr <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.sct <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: scsvserv.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.isu <==== ATTENTION
    HKLM Group Policy restriction on software: surprise.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.ins <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.ins <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.ns <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.shb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.job <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.p <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.inx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.js <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\arra.bat <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\dsadee.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %systemdrive%\dccon.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.shb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.jse <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.com <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.job <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.js <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.url <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.inf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.vb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.mde <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\Calipso\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\IEUpdate\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.msp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.pys <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.url <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.msi <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.pif <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.ade <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.jse <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.bat <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.jar <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %systemdrive%\mount.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.msp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.url <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %systemdrive%\*\svchost.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.hta <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.job <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.vb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.com <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.reg <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.pys <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.bas <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.msp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.js <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.url <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %systemdrive%\dcrypt.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.sct <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.msc <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.mod <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.48s <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.xml <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\uTorrent.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.bin <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.url <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %systemdrive%\Mount.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\svchost.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.application <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.shs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.application <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.pif <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.pys <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.rex <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\{213D7F33-4942-1C20-3D56=8-1A0B31CDFFF3}.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %systemdrive%\Network Prosoft\* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.scr <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.application <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: syskey.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.url <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\x64.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.mde <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: pokemongo.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\svchost.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.ade <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.isu <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\random\random.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.reg <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: magic.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.mde <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.isp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.msp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: WifiHack.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.url <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.com <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.jse <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\Pokemon\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.bat <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.xml <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.paf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: commerc.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.com <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.mod <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.inf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.url <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.reg <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.jar <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.js <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.xml <==== ATTENTION
    HKLM Group Policy restriction on software: msoyasdx.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.application <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.chm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.job <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\wrmXNhWbacF.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\freegaza_israeli_killers.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\rkcl\ldr.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.jar <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.vb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.vb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.msi <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.pif <==== ATTENTION
    HKLM Group Policy restriction on software: deleteMyProgram.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.scr <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.bas <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.msc <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.chm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.pcd <==== ATTENTION
    Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\Run: [HP ENVY 4500 series (NET)] => C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe [3487240 2014-07-21] (Hewlett-Packard Development Company, LP)
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Asus\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\Run: [BingSvc] => C:\Users\Asus\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2016-02-05] (© 2015 Microsoft Corporation)
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9803992 2017-06-13] (Piriform Ltd)
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\Run: [BitComet] => C:\Program Files\BitComet\BitComet.exe [17968248 2017-07-06] (www.BitComet.com)
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27716568 2017-05-04] (Skype Technologies S.A.)
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\RunOnce: [Application Restart #0] => C:\Program Files\pia_manager\pia_tray_bin\nw-win\pia_nw.exe [1260544 2016-09-27] (The NWJS Community)
    GroupPolicy: Restriction <==== ATTENTION

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    Tcpip\Parameters: [DhcpNameServer] 209.222.18.222 209.222.18.218
    Tcpip\..\Interfaces\{0D965674-BE72-4C00-89A6-12DABA2E3D41}: [DhcpNameServer] 209.222.18.222 209.222.18.218
    Tcpip\..\Interfaces\{393fa94b-b120-4975-b77e-232db1e7b021}: [DhcpNameServer] 194.168.4.100 194.168.8.100
    Tcpip\..\Interfaces\{c3607fea-a833-44ff-a28c-283736ab9552}: [DhcpNameServer] 209.222.18.222 209.222.18.218
    Tcpip\..\Interfaces\{fecea169-4f93-47db-a55a-fe794f631e7f}: [DhcpNameServer] 0.0.0.0

    Internet Explorer:
    ==================
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.msn.com/?pc=SK2M&ocid=SK2MDHP&osmkt=en-gb
    SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-04-06] (Oracle Corporation)
    BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-04-06] (Oracle Corporation)
    BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
    BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-02-25] (Eyeo GmbH)
    StartMenuInternet: IEXPLORE.EXE - iexplore.exe

    FireFox:
    ========
    FF DefaultProfile: ezak7yij.default-1478936043390-1500371527213
    FF ProfilePath: C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\ezak7yij.default-1478936043390-1500371527213 [2017-07-18]
    FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_26_0_0_137.dll [2017-07-11] ()
    FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-04-06] (Oracle Corporation)
    FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-04-06] (Oracle Corporation)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_137.dll [2017-07-11] ()
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
    FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-06-29] (NVIDIA Corporation)
    FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-06-29] (NVIDIA Corporation)
    FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
    FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
    FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
    FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

    Chrome:
    =======
    CHR DefaultProfile: Default
    CHR HomePage: Default -> hxxps://uk.search.yahoo.com/?type=888596&fr=yo-yhp-ch
    CHR StartupUrls: Default -> "hxxps://uk.search.yahoo.com/?type=888596&fr=yo-yhp-ch"
    CHR Profile: C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default [2017-07-18]
    CHR Extension: (Google Slides) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-16]
    CHR Extension: (Google Docs) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-16]
    CHR Extension: (Google Drive) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-17]
    CHR Extension: (YouTube) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-17]
    CHR Extension: (Adblock Plus) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-12-17]
    CHR Extension: (Google Search) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-16]
    CHR Extension: (Yahoo! Toolbar for Chrome) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\eihhgekonheiliaidomffpplfhecmkag [2015-04-15]
    CHR Extension: (Google Sheets) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-16]
    CHR Extension: (Avira Browser Safety) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-03-16]
    CHR Extension: (Google Docs Offline) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-17]
    CHR Extension: (Chrome Web Store Payments) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-12-17]
    CHR Extension: (Gmail) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-17]
    CHR Extension: (Chrome Media Router) - C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-17]
    CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
    CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

    ==================== Services (Whitelisted) ====================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1128432 2017-07-12] (Avira Operations GmbH & Co. KG)
    R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [490968 2017-07-12] (Avira Operations GmbH & Co. KG)
    R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [490968 2017-07-12] (Avira Operations GmbH & Co. KG)
    S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1524216 2017-07-12] (Avira Operations GmbH & Co. KG)
    R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [377976 2017-06-13] (Avira Operations GmbH & Co. KG)
    R3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2017-07-06] (www.BitComet.com)
    S3 CryptoPreventEmail; C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventMonSvc.exe [642712 2017-06-04] (Foolish IT LLC)
    R3 CryptoPreventFolderWatch; C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventMonSvc.exe [642712 2017-06-04] (Foolish IT LLC)
    R2 CryptoPreventMonSvc; C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventMonSvc.exe [642712 2017-06-04] (Foolish IT LLC)
    U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-09-19] (Hi-Rez Studios) [File not signed]
    R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89864 2014-12-11] (Hewlett-Packard Company)
    S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
    S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [File not signed]
    R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
    R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
    R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)
    S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
    R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
    R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [4088608 2016-09-21] (Safer-Networking Ltd.) [File not signed]
    S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [235984 2016-11-24] (Safer-Networking Ltd.) [File not signed]
    S3 ThunderboltService; C:\Program Files\Intel\Thunderbolt Software\tbtsvc.exe [1179944 2014-05-13] (Intel Corporation)
    S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
    S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-20] (Microsoft Corporation)
    R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

    ===================== Drivers (Whitelisted) ======================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R3 ATP; C:\WINDOWS\System32\drivers\AsusTP.sys [73512 2015-03-18] (ASUS Corporation)
    R0 avdevprot; C:\WINDOWS\System32\DRIVERS\avdevprot.sys [60920 2017-06-16] (Avira Operations GmbH & Co. KG)
    R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [167504 2017-06-16] (Avira Operations GmbH & Co. KG)
    R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [164824 2017-06-16] (Avira Operations GmbH & Co. KG)
    R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [44488 2017-03-02] (Avira Operations GmbH & Co. KG)
    R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [88488 2017-03-02] (Avira Operations GmbH & Co. KG)
    S3 btmhsf; C:\WINDOWS\system32\DRIVERS\btmhsf.sys [1424184 2014-04-22] (Motorola Solutions, Inc.)
    R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
    U5 GeneStor; C:\Windows\System32\Drivers\GeneStor.sys [107208 2014-01-17] (GenesysLogic)
    R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [230144 2016-11-11] (Intel Corporation)
    R0 IntelHSWPcc; C:\WINDOWS\System32\drivers\IntelPcc.sys [77992 2014-08-04] (Intel Corporation)
    R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [28912 2014-05-21] (Intel Corporation)
    R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
    R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation)
    R3 NETwNb64; C:\WINDOWS\system32\DRIVERS\Netwbw02.sys [3525896 2016-11-09] (Intel Corporation)
    R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvamwu.inf_amd64_d4715679184092a8\nvlddmkm.sys [13754936 2016-09-12] (NVIDIA Corporation)
    S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
    R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
    R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [895256 2015-07-07] (Realtek )
    S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
    S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
    S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
    S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
    R3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [63840 2015-06-06] (Intel Corporation)

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2017-07-18 11:21 - 2017-07-18 11:21 - 02435584 _____ (Farbar) C:\Users\Asus\Downloads\FRST64(3).exe
    2017-07-18 11:12 - 2017-07-18 11:12 - 05198336 _____ (AVAST Software) C:\Users\Asus\Downloads\aswMBR(1).exe
    2017-07-18 11:12 - 2017-07-18 11:12 - 00689588 _____ C:\WINDOWS\Minidump\071817-6734-01.dmp
    2017-07-18 11:08 - 2017-07-18 11:08 - 02435584 _____ (Farbar) C:\Users\Asus\Downloads\FRST64(2).exe
    2017-07-18 11:07 - 2017-07-18 11:12 - 843386635 _____ C:\WINDOWS\MEMORY.DMP
    2017-07-18 11:07 - 2017-07-18 11:12 - 00000000 ____D C:\WINDOWS\Minidump
    2017-07-18 11:07 - 2017-07-18 11:07 - 00642964 _____ C:\WINDOWS\Minidump\071817-6640-01.dmp
    2017-07-18 11:06 - 2017-07-18 11:06 - 05198336 _____ (AVAST Software) C:\Users\Asus\Downloads\aswMBR.exe
    2017-07-18 11:04 - 2017-07-18 11:23 - 00050038 _____ C:\Users\Asus\Downloads\Addition.txt
    2017-07-18 11:03 - 2017-07-18 11:36 - 00300887 _____ C:\Users\Asus\Downloads\FRST.txt
    2017-07-18 11:01 - 2017-07-18 11:01 - 02435584 _____ (Farbar) C:\Users\Asus\Downloads\FRST64(1).exe
    2017-07-18 10:59 - 2017-07-18 11:36 - 00000000 ____D C:\FRST
    2017-07-18 10:58 - 2017-07-18 10:58 - 02435584 _____ (Farbar) C:\Users\Asus\Downloads\FRST64.exe
    2017-07-18 10:57 - 2017-07-18 10:57 - 00000000 ____D C:\RegBackup
    2017-07-18 10:56 - 2017-07-18 10:56 - 05766144 _____ (Tweaking.com) C:\Users\Asus\Downloads\tweaking.com_registry_backup_setup.exe
    2017-07-18 10:56 - 2017-07-18 10:56 - 00017792 _____ C:\WINDOWS\Tweaking.com - Registry Backup Setup Log.txt
    2017-07-18 10:56 - 2017-07-18 10:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
    2017-07-18 10:56 - 2017-07-18 10:56 - 00000000 ____D C:\Program Files (x86)\Tweaking.com
    2017-07-18 10:42 - 2017-07-18 10:42 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
    2017-07-18 10:42 - 2017-07-18 10:42 - 00001124 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
    2017-07-18 10:42 - 2017-07-18 10:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
    2017-07-18 10:25 - 2017-07-18 10:26 - 00000000 ____D C:\Users\Asus\AppData\Local\chromium
    2017-07-18 10:23 - 2017-07-18 10:24 - 00000000 ____D C:\Users\Asus\AppData\Local\titenin
    2017-07-18 10:23 - 2017-07-18 10:23 - 00000258 __RSH C:\ProgramData\ntuser.pol
    2017-07-18 10:23 - 2017-07-18 10:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit)
    2017-07-12 11:59 - 2017-07-12 11:59 - 01091232 _____ (Unity Technologies ApS) C:\Users\Asus\Downloads\UnityWebPlayer(2).exe
    2017-07-12 10:12 - 2017-07-07 15:00 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll
    2017-07-12 10:12 - 2017-07-07 08:24 - 00117664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
    2017-07-12 10:12 - 2017-07-07 08:23 - 02399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
    2017-07-12 10:12 - 2017-07-07 08:21 - 32688336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsRaw.dll
    2017-07-12 10:12 - 2017-07-07 08:20 - 02021680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
    2017-07-12 10:12 - 2017-07-07 08:13 - 00554392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
    2017-07-12 10:12 - 2017-07-07 08:13 - 00336320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
    2017-07-12 10:12 - 2017-07-07 08:11 - 00094624 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
    2017-07-12 10:12 - 2017-07-07 08:10 - 01670496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
    2017-07-12 10:12 - 2017-07-07 08:10 - 00254168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
    2017-07-12 10:12 - 2017-07-07 07:57 - 00626528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
    2017-07-12 10:12 - 2017-07-07 07:57 - 00125344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
    2017-07-12 10:12 - 2017-07-07 07:40 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
    2017-07-12 10:12 - 2017-07-07 07:39 - 01839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
    2017-07-12 10:12 - 2017-07-07 07:39 - 00096128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
    2017-07-12 10:12 - 2017-07-07 07:37 - 02259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
    2017-07-12 10:12 - 2017-07-07 07:37 - 01339352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpmde.dll
    2017-07-12 10:12 - 2017-07-07 07:31 - 05820984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
    2017-07-12 10:12 - 2017-07-07 07:31 - 01518088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
    2017-07-12 10:12 - 2017-07-07 07:31 - 00129184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
    2017-07-12 10:12 - 2017-07-07 07:30 - 02165752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
    2017-07-12 10:12 - 2017-07-07 07:30 - 00949920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
    2017-07-12 10:12 - 2017-07-07 07:30 - 00750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
    2017-07-12 10:12 - 2017-07-07 07:29 - 00349600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
    2017-07-12 10:12 - 2017-07-07 07:29 - 00123520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Clipc.dll
    2017-07-12 10:12 - 2017-07-07 07:27 - 06759512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
    2017-07-12 10:12 - 2017-07-07 07:26 - 20373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
    2017-07-12 10:12 - 2017-07-07 07:26 - 01529384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
    2017-07-12 10:12 - 2017-07-07 07:26 - 01195240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
    2017-07-12 10:12 - 2017-07-07 07:26 - 00988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
    2017-07-12 10:12 - 2017-07-07 07:25 - 00035232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininitext.dll
    2017-07-12 10:12 - 2017-07-07 07:23 - 00583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
    2017-07-12 10:12 - 2017-07-07 07:22 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys
    2017-07-12 10:12 - 2017-07-07 07:20 - 23681536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
    2017-07-12 10:12 - 2017-07-07 07:20 - 08331264 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
    2017-07-12 10:12 - 2017-07-07 07:19 - 07149056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
    2017-07-12 10:12 - 2017-07-07 07:19 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
    2017-07-12 10:12 - 2017-07-07 07:18 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
    2017-07-12 10:12 - 2017-07-07 07:17 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
    2017-07-12 10:12 - 2017-07-07 07:16 - 12786176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
    2017-07-12 10:12 - 2017-07-07 07:16 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
    2017-07-12 10:12 - 2017-07-07 07:15 - 08238080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
    2017-07-12 10:12 - 2017-07-07 07:14 - 08211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
    2017-07-12 10:12 - 2017-07-07 07:14 - 03784704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
    2017-07-12 10:12 - 2017-07-07 07:14 - 02956800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
    2017-07-12 10:12 - 2017-07-07 07:14 - 01448960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
    2017-07-12 10:12 - 2017-07-07 07:14 - 00790016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
    2017-07-12 10:12 - 2017-07-07 07:13 - 13839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
    2017-07-12 10:12 - 2017-07-07 07:12 - 04730880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
    2017-07-12 10:12 - 2017-07-07 07:12 - 02199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
    2017-07-12 10:12 - 2017-07-07 07:12 - 01142272 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
    2017-07-12 10:12 - 2017-07-07 07:10 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
    2017-07-12 10:12 - 2017-07-07 07:10 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapprovp.dll
    2017-07-12 10:12 - 2017-07-07 07:09 - 20504576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
    2017-07-12 10:12 - 2017-07-07 07:09 - 00365056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
    2017-07-12 10:12 - 2017-07-07 07:08 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
    2017-07-12 10:12 - 2017-07-07 07:07 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll
    2017-07-12 10:12 - 2017-07-07 07:07 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raschap.dll
    2017-07-12 10:12 - 2017-07-07 07:06 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
    2017-07-12 10:12 - 2017-07-07 07:06 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecsExt.dll
    2017-07-12 10:12 - 2017-07-07 07:05 - 19335168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
    2017-07-12 10:12 - 2017-07-07 07:05 - 11870720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
    2017-07-12 10:12 - 2017-07-07 07:05 - 06728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
    2017-07-12 10:12 - 2017-07-07 07:05 - 05719040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
    2017-07-12 10:12 - 2017-07-07 07:05 - 00502784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
    2017-07-12 10:12 - 2017-07-07 07:05 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
    2017-07-12 10:12 - 2017-07-07 07:04 - 05961216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
    2017-07-12 10:12 - 2017-07-07 07:04 - 01248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
    2017-07-12 10:12 - 2017-07-07 07:04 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
    2017-07-12 10:12 - 2017-07-07 07:04 - 00506368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
    2017-07-12 10:12 - 2017-07-07 07:04 - 00394240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
    2017-07-12 10:12 - 2017-07-07 07:03 - 06123520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
    2017-07-12 10:12 - 2017-07-07 07:03 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
    2017-07-12 10:12 - 2017-07-07 07:03 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
    2017-07-12 10:12 - 2017-07-07 07:02 - 00952832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
    2017-07-12 10:12 - 2017-07-07 07:01 - 06287360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
    2017-07-12 10:12 - 2017-07-07 07:01 - 02859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
    2017-07-12 10:12 - 2017-07-07 07:00 - 07596544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
    2017-07-12 10:12 - 2017-07-07 07:00 - 05225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
    2017-07-12 10:12 - 2017-07-07 07:00 - 02588160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
    2017-07-12 10:12 - 2017-07-07 07:00 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
    2017-07-12 10:12 - 2017-07-07 07:00 - 01565184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
    2017-07-12 10:12 - 2017-07-07 07:00 - 01019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
    2017-07-12 10:12 - 2017-07-07 06:59 - 04417024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
    2017-07-12 10:12 - 2017-07-07 06:59 - 03656704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
    2017-07-12 10:12 - 2017-07-07 06:59 - 01494016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
    2017-07-12 10:12 - 2017-07-07 06:59 - 01355264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
    2017-07-12 10:12 - 2017-07-07 06:59 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
    2017-07-12 10:12 - 2017-07-07 06:58 - 04559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
    2017-07-12 10:12 - 2017-07-07 06:58 - 02782720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
    2017-07-12 10:12 - 2017-07-07 06:58 - 02298368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
    2017-07-12 10:12 - 2017-07-07 06:58 - 01237504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
    2017-07-12 10:12 - 2017-07-07 06:55 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
    2017-07-12 10:12 - 2017-07-07 06:55 - 00329216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
    2017-07-12 10:12 - 2017-07-07 06:53 - 01301504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
    2017-07-12 10:12 - 2017-07-07 06:53 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinfo32.exe
    2017-07-12 10:12 - 2017-06-20 07:11 - 00411992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
    2017-07-12 10:12 - 2017-06-20 07:06 - 00279968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
    2017-07-12 10:12 - 2017-06-20 07:03 - 00820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
    2017-07-12 10:12 - 2017-06-20 07:02 - 01055648 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
    2017-07-12 10:12 - 2017-06-20 06:59 - 06554928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
    2017-07-12 10:12 - 2017-06-20 06:59 - 01220072 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
    2017-07-12 10:12 - 2017-06-20 06:59 - 00467504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
    2017-07-12 10:12 - 2017-06-20 06:57 - 02681760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
    2017-07-12 10:12 - 2017-06-20 06:34 - 00192416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
    2017-07-12 10:12 - 2017-06-20 06:15 - 00455104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
    2017-07-12 10:12 - 2017-06-20 06:13 - 00787712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
    2017-07-12 10:12 - 2017-06-20 06:13 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe
    2017-07-12 10:12 - 2017-06-20 06:12 - 00293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
    2017-07-12 10:12 - 2017-06-20 06:12 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
    2017-07-12 10:12 - 2017-06-20 06:12 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
    2017-07-12 10:12 - 2017-06-20 06:11 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
    2017-07-12 10:12 - 2017-06-20 06:10 - 00722432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
    2017-07-12 10:12 - 2017-06-20 06:10 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
    2017-07-12 10:12 - 2017-06-20 06:09 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Payments.dll
    2017-07-12 10:12 - 2017-06-20 06:09 - 00406032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
    2017-07-12 10:12 - 2017-06-20 06:09 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
    2017-07-12 10:12 - 2017-06-20 06:08 - 04469840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
    2017-07-12 10:12 - 2017-06-20 06:08 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
    2017-07-12 10:12 - 2017-06-20 06:08 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
    2017-07-12 10:12 - 2017-06-20 06:08 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
    2017-07-12 10:12 - 2017-06-20 06:08 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
    2017-07-12 10:12 - 2017-06-20 06:07 - 02475136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
    2017-07-12 10:12 - 2017-06-20 06:07 - 00823296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
    2017-07-12 10:12 - 2017-06-20 06:07 - 00632832 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
    2017-07-12 10:12 - 2017-06-20 06:07 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
    2017-07-12 10:12 - 2017-06-20 06:07 - 00346016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
    2017-07-12 10:12 - 2017-06-20 06:07 - 00138656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll
    2017-07-12 10:12 - 2017-06-20 06:06 - 00942592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
    2017-07-12 10:12 - 2017-06-20 06:06 - 00754592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
    2017-07-12 10:12 - 2017-06-20 06:06 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
    2017-07-12 10:12 - 2017-06-20 06:06 - 00278944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
    2017-07-12 10:12 - 2017-06-20 06:05 - 00438096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
    2017-07-12 10:12 - 2017-06-20 06:05 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
    2017-07-12 10:12 - 2017-06-20 06:05 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
    2017-07-12 10:12 - 2017-06-20 06:05 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
    2017-07-12 10:12 - 2017-06-20 06:04 - 02330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
    2017-07-12 10:12 - 2017-06-20 06:04 - 01178528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
    2017-07-12 10:12 - 2017-06-20 06:04 - 01177600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
    2017-07-12 10:12 - 2017-06-20 06:04 - 01077496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll
    2017-07-12 10:12 - 2017-06-20 06:04 - 00181656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
    2017-07-12 10:12 - 2017-06-20 06:04 - 00049656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msasn1.dll
    2017-07-12 10:12 - 2017-06-20 06:03 - 05806048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
    2017-07-12 10:12 - 2017-06-20 06:03 - 02077184 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
    2017-07-12 10:12 - 2017-06-20 06:03 - 00864240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
    2017-07-12 10:12 - 2017-06-20 06:03 - 00443728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
    2017-07-12 10:12 - 2017-06-20 06:02 - 03377664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
    2017-07-12 10:12 - 2017-06-20 06:02 - 01121928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
    2017-07-12 10:12 - 2017-06-20 06:02 - 00354400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll
    2017-07-12 10:12 - 2017-06-20 06:01 - 04536320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
    2017-07-12 10:12 - 2017-06-20 06:01 - 00176032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll
    2017-07-12 10:12 - 2017-06-20 06:00 - 02597888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
    2017-07-12 10:12 - 2017-06-20 05:59 - 02938880 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
    2017-07-12 10:12 - 2017-06-20 05:59 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
    2017-07-12 10:12 - 2017-06-20 05:56 - 00985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
    2017-07-12 10:12 - 2017-06-20 05:49 - 00899072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfuimanager.dll
    2017-07-12 10:12 - 2017-06-20 05:49 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
    2017-07-12 10:12 - 2017-06-20 05:46 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Bluetooth.Profiles.Gatt.Interface.dll
    2017-07-12 10:12 - 2017-06-20 05:45 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.RetailInfo.dll
    2017-07-12 10:12 - 2017-06-20 05:43 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
    2017-07-12 10:12 - 2017-06-20 05:43 - 00173568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll
    2017-07-12 10:12 - 2017-06-20 05:43 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredui.dll
    2017-07-12 10:12 - 2017-06-20 05:43 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
    2017-07-12 10:12 - 2017-06-20 05:43 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
    2017-07-12 10:12 - 2017-06-20 05:43 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
    2017-07-12 10:12 - 2017-06-20 05:43 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dataclen.dll
    2017-07-12 10:12 - 2017-06-20 05:42 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certca.dll
    2017-07-12 10:12 - 2017-06-20 05:42 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Payments.dll
    2017-07-12 10:12 - 2017-06-20 05:42 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
    2017-07-12 10:12 - 2017-06-20 05:42 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
    2017-07-12 10:12 - 2017-06-20 05:42 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll
    2017-07-12 10:12 - 2017-06-20 05:42 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
    2017-07-12 10:12 - 2017-06-20 05:41 - 00734208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
    2017-07-12 10:12 - 2017-06-20 05:41 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
    2017-07-12 10:12 - 2017-06-20 05:41 - 00601088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
    2017-07-12 10:12 - 2017-06-20 05:41 - 00433152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
    2017-07-12 10:12 - 2017-06-20 05:41 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
    2017-07-12 10:12 - 2017-06-20 05:40 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
    2017-07-12 10:12 - 2017-06-20 05:40 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
    2017-07-12 10:12 - 2017-06-20 05:40 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
    2017-07-12 10:12 - 2017-06-20 05:40 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
    2017-07-12 10:12 - 2017-06-20 05:40 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edputil.dll
    2017-07-12 10:12 - 2017-06-20 05:40 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerUI.dll
    2017-07-12 10:12 - 2017-06-20 05:39 - 02814464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themeui.dll
    2017-07-12 10:12 - 2017-06-20 05:39 - 02671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
    2017-07-12 10:12 - 2017-06-20 05:39 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
    2017-07-12 10:12 - 2017-06-20 05:39 - 00646144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
    2017-07-12 10:12 - 2017-06-20 05:39 - 00471040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll
    2017-07-12 10:12 - 2017-06-20 05:39 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
    2017-07-12 10:12 - 2017-06-20 05:38 - 01451008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
    2017-07-12 10:12 - 2017-06-20 05:38 - 01285120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
    2017-07-12 10:12 - 2017-06-20 05:38 - 01171968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe
    2017-07-12 10:12 - 2017-06-20 05:38 - 00663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
    2017-07-12 10:12 - 2017-06-20 05:38 - 00648192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
    2017-07-12 10:12 - 2017-06-20 05:38 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
    2017-07-12 10:12 - 2017-06-20 05:37 - 02008576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
    2017-07-12 10:12 - 2017-06-20 05:36 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
    2017-07-12 10:12 - 2017-06-20 05:35 - 02679296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
    2017-07-12 10:12 - 2017-06-20 05:35 - 02132480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
    2017-07-12 10:12 - 2017-06-20 05:35 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
    2017-07-12 10:12 - 2017-06-20 05:34 - 04056576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
    2017-07-12 10:12 - 2017-06-20 05:34 - 02750464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
    2017-07-12 10:12 - 2017-06-20 05:34 - 02211328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
    2017-07-12 10:12 - 2017-06-20 05:34 - 01492480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
    2017-07-12 10:12 - 2017-06-20 05:34 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
    2017-07-12 10:12 - 2017-06-20 05:31 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
    2017-07-12 10:12 - 2017-06-20 05:30 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdmaud.drv
    2017-07-12 10:12 - 2017-06-20 05:30 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
    2017-07-12 10:12 - 2017-06-20 05:30 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
    2017-07-12 10:12 - 2017-06-20 05:28 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
    2017-07-12 10:11 - 2017-07-07 08:27 - 01147288 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
    2017-07-12 10:11 - 2017-07-07 08:27 - 01024928 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
    2017-07-12 10:11 - 2017-07-07 08:27 - 00965024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
    2017-07-12 10:11 - 2017-07-07 08:27 - 00821664 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
    2017-07-12 10:11 - 2017-07-07 08:27 - 00750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
    2017-07-12 10:11 - 2017-07-07 08:26 - 01065104 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
    2017-07-12 10:11 - 2017-07-07 08:25 - 00899824 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
    2017-07-12 10:11 - 2017-07-07 08:22 - 08318880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
    2017-07-12 10:11 - 2017-07-07 08:22 - 01186464 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
    2017-07-12 10:11 - 2017-07-07 08:22 - 00119384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
    2017-07-12 10:11 - 2017-07-07 08:21 - 02969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
    2017-07-12 10:11 - 2017-07-07 08:20 - 00923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
    2017-07-12 10:11 - 2017-07-07 08:20 - 00519584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
    2017-07-12 10:11 - 2017-07-07 08:20 - 00382368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
    2017-07-12 10:11 - 2017-07-07 08:17 - 01017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
    2017-07-12 10:11 - 2017-07-07 08:15 - 02444696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
    2017-07-12 10:11 - 2017-07-07 08:14 - 07325584 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
    2017-07-12 10:11 - 2017-07-07 08:14 - 05477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
    2017-07-12 10:11 - 2017-07-07 08:14 - 01760264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
    2017-07-12 10:11 - 2017-07-07 08:14 - 01171032 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
    2017-07-12 10:11 - 2017-07-07 08:13 - 00872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
    2017-07-12 10:11 - 2017-07-07 08:13 - 00147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Clipc.dll
    2017-07-12 10:11 - 2017-07-07 08:12 - 00411040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
    2017-07-12 10:11 - 2017-07-07 08:12 - 00318232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
    2017-07-12 10:11 - 2017-07-07 08:12 - 00228256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
    2017-07-12 10:11 - 2017-07-07 08:11 - 07904784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
    2017-07-12 10:11 - 2017-07-07 08:10 - 21353208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
    2017-07-12 10:11 - 2017-07-07 08:10 - 01337848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
    2017-07-12 10:11 - 2017-07-07 08:10 - 01325968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
    2017-07-12 10:11 - 2017-07-07 08:10 - 00372128 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
    2017-07-12 10:11 - 2017-07-07 08:09 - 00041376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininitext.dll
    2017-07-12 10:11 - 2017-07-07 08:07 - 01106848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
    2017-07-12 10:11 - 2017-07-07 08:07 - 00058488 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
    2017-07-12 10:11 - 2017-07-07 07:37 - 31652264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecsRaw.dll
    2017-07-12 10:11 - 2017-07-07 07:27 - 03670016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
    2017-07-12 10:11 - 2017-07-07 07:27 - 01640448 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
    2017-07-12 10:11 - 2017-07-07 07:27 - 01050624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
    2017-07-12 10:11 - 2017-07-07 07:27 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
    2017-07-12 10:11 - 2017-07-07 07:27 - 00577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll
    2017-07-12 10:11 - 2017-07-07 07:27 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
    2017-07-12 10:11 - 2017-07-07 07:27 - 00443392 _____ (Microsoft Corporation) C:\WINDOWS\system32\PerceptionSimulationExtensions.dll
    2017-07-12 10:11 - 2017-07-07 07:27 - 00360960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV2.dll
    2017-07-12 10:11 - 2017-07-07 07:26 - 17364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
    2017-07-12 10:11 - 2017-07-07 07:25 - 02199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
    2017-07-12 10:11 - 2017-07-07 07:24 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll
    2017-07-12 10:11 - 2017-07-07 07:23 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
    2017-07-12 10:11 - 2017-07-07 07:23 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
    2017-07-12 10:11 - 2017-07-07 07:23 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
    2017-07-12 10:11 - 2017-07-07 07:23 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapprovp.dll
    2017-07-12 10:11 - 2017-07-07 07:22 - 07931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
    2017-07-12 10:11 - 2017-07-07 07:22 - 00520704 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
    2017-07-12 10:11 - 2017-07-07 07:21 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncCsp.dll
    2017-07-12 10:11 - 2017-07-07 07:21 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
    2017-07-12 10:11 - 2017-07-07 07:20 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll
    2017-07-12 10:11 - 2017-07-07 07:19 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
    2017-07-12 10:11 - 2017-07-07 07:19 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
    2017-07-12 10:11 - 2017-07-07 07:19 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\raschap.dll
    2017-07-12 10:11 - 2017-07-07 07:18 - 07336448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
    2017-07-12 10:11 - 2017-07-07 07:18 - 00563712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
    2017-07-12 10:11 - 2017-07-07 07:18 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
    2017-07-12 10:11 - 2017-07-07 07:18 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsExt.dll
    2017-07-12 10:11 - 2017-07-07 07:17 - 01878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
    2017-07-12 10:11 - 2017-07-07 07:17 - 01260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
    2017-07-12 10:11 - 2017-07-07 07:17 - 00692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
    2017-07-12 10:11 - 2017-07-07 07:17 - 00536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
    2017-07-12 10:11 - 2017-07-07 07:17 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
    2017-07-12 10:11 - 2017-07-07 07:17 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
    2017-07-12 10:11 - 2017-07-07 07:16 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
    2017-07-12 10:11 - 2017-07-07 07:15 - 00922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
    2017-07-12 10:11 - 2017-07-07 07:14 - 01802240 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
    2017-07-12 10:11 - 2017-07-07 07:14 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
    2017-07-12 10:11 - 2017-07-07 07:14 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
    2017-07-12 10:11 - 2017-07-07 07:13 - 05892096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
    2017-07-12 10:11 - 2017-07-07 07:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
    2017-07-12 10:11 - 2017-07-07 07:12 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
    2017-07-12 10:11 - 2017-07-07 07:12 - 02499584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
    2017-07-12 10:11 - 2017-07-07 07:12 - 02055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
    2017-07-12 10:11 - 2017-07-07 07:12 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
    2017-07-12 10:11 - 2017-07-07 07:12 - 01420800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
    2017-07-12 10:11 - 2017-07-07 07:12 - 01305088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
    2017-07-12 10:11 - 2017-07-07 07:12 - 01293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
    2017-07-12 10:11 - 2017-07-07 07:12 - 00706560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
    2017-07-12 10:11 - 2017-07-07 07:11 - 03139584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
    2017-07-12 10:11 - 2017-07-07 07:11 - 02829824 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
    2017-07-12 10:11 - 2017-07-07 07:11 - 02649600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
    2017-07-12 10:11 - 2017-07-07 07:11 - 02177024 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
    2017-07-12 10:11 - 2017-07-07 07:11 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
    2017-07-12 10:11 - 2017-07-07 07:11 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
    2017-07-12 10:11 - 2017-07-07 07:11 - 00986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
    2017-07-12 10:11 - 2017-07-07 07:11 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
    2017-07-12 10:11 - 2017-07-07 07:10 - 05557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
    2017-07-12 10:11 - 2017-07-07 07:10 - 04707840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
    2017-07-12 10:11 - 2017-07-07 07:10 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
    2017-07-12 10:11 - 2017-07-07 07:07 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
    2017-07-12 10:11 - 2017-07-07 07:07 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
    2017-07-12 10:11 - 2017-07-07 07:06 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sensrsvc.dll
    2017-07-12 10:11 - 2017-07-07 07:05 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinfo32.exe
    2017-07-12 10:11 - 2017-07-07 07:04 - 01703424 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
    2017-07-12 10:11 - 2017-07-07 07:04 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
    2017-07-12 10:11 - 2017-07-07 07:04 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
    2017-07-12 10:11 - 2017-07-07 07:02 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
    2017-07-12 10:11 - 2017-07-01 23:52 - 00031932 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
    2017-07-12 10:11 - 2017-06-20 07:18 - 01564576 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
    2017-07-12 10:11 - 2017-06-20 07:18 - 00096672 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
    2017-07-12 10:11 - 2017-06-20 07:17 - 00629152 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
    2017-07-12 10:11 - 2017-06-20 07:17 - 00544160 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
    2017-07-12 10:11 - 2017-06-20 07:17 - 00334240 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
    2017-07-12 10:11 - 2017-06-20 07:17 - 00136096 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
    2017-07-12 10:11 - 2017-06-20 07:17 - 00034720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
    2017-07-12 10:11 - 2017-06-20 07:16 - 01214880 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
    2017-07-12 10:11 - 2017-06-20 07:16 - 00335776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
    2017-07-12 10:11 - 2017-06-20 07:15 - 00233376 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
    2017-07-12 10:11 - 2017-06-20 07:11 - 01395152 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
    2017-07-12 10:11 - 2017-06-20 07:10 - 02327456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
    2017-07-12 10:11 - 2017-06-20 07:10 - 01930320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
    2017-07-12 10:11 - 2017-06-20 07:08 - 01242528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
    2017-07-12 10:11 - 2017-06-20 07:05 - 01057832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
    2017-07-12 10:11 - 2017-06-20 07:04 - 04847424 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
    2017-07-12 10:11 - 2017-06-20 07:04 - 00472728 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
    2017-07-12 10:11 - 2017-06-20 07:03 - 00179608 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll
    2017-07-12 10:11 - 2017-06-20 07:03 - 00102312 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialUIBroker.exe
    2017-07-12 10:11 - 2017-06-20 07:02 - 02645688 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
    2017-07-12 10:11 - 2017-06-20 07:02 - 00426912 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
    2017-07-12 10:11 - 2017-06-20 07:00 - 00558920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
    2017-07-12 10:11 - 2017-06-20 07:00 - 00255904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
    2017-07-12 10:11 - 2017-06-20 07:00 - 00142752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
    2017-07-12 10:11 - 2017-06-20 06:59 - 01054280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
    2017-07-12 10:11 - 2017-06-20 06:59 - 00583304 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
    2017-07-12 10:11 - 2017-06-20 06:58 - 00833160 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
    2017-07-12 10:11 - 2017-06-20 06:58 - 00406072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
    2017-07-12 10:11 - 2017-06-20 06:58 - 00203168 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
    2017-07-12 10:11 - 2017-06-20 06:57 - 00204192 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
    2017-07-12 10:11 - 2017-06-20 06:16 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfuimanager.dll
    2017-07-12 10:11 - 2017-06-20 06:16 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll
    2017-07-12 10:11 - 2017-06-20 06:15 - 01620368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
    2017-07-12 10:11 - 2017-06-20 06:14 - 01150784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
    2017-07-12 10:11 - 2017-06-20 06:14 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
    2017-07-12 10:11 - 2017-06-20 06:13 - 00216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.Interface.dll
    2017-07-12 10:11 - 2017-06-20 06:13 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
    2017-07-12 10:11 - 2017-06-20 06:13 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFDSConMgr.dll
    2017-07-12 10:11 - 2017-06-20 06:12 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
    2017-07-12 10:11 - 2017-06-20 06:12 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.RetailInfo.dll
    2017-07-12 10:11 - 2017-06-20 06:12 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
    2017-07-12 10:11 - 2017-06-20 06:11 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
    2017-07-12 10:11 - 2017-06-20 06:10 - 00778240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
    2017-07-12 10:11 - 2017-06-20 06:10 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
    2017-07-12 10:11 - 2017-06-20 06:10 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
    2017-07-12 10:11 - 2017-06-20 06:10 - 00188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll
    2017-07-12 10:11 - 2017-06-20 06:09 - 00555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFDSConMgrSvc.dll
    2017-07-12 10:11 - 2017-06-20 06:09 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
    2017-07-12 10:11 - 2017-06-20 06:09 - 00427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
    2017-07-12 10:11 - 2017-06-20 06:09 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Narrator.exe
    2017-07-12 10:11 - 2017-06-20 06:09 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardSvr.dll
    2017-07-12 10:11 - 2017-06-20 06:09 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
    2017-07-12 10:11 - 2017-06-20 06:09 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll
    2017-07-12 10:11 - 2017-06-20 06:09 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
    2017-07-12 10:11 - 2017-06-20 06:09 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
    2017-07-12 10:11 - 2017-06-20 06:09 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dataclen.dll
    2017-07-12 10:11 - 2017-06-20 06:08 - 00791040 _____ (Microsoft Corporation) C:\WINDOWS\system32\certca.dll
    2017-07-12 10:11 - 2017-06-20 06:08 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockHostingFramework.dll
    2017-07-12 10:11 - 2017-06-20 06:08 - 00365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
    2017-07-12 10:11 - 2017-06-20 06:08 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
    2017-07-12 10:11 - 2017-06-20 06:07 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
    2017-07-12 10:11 - 2017-06-20 06:07 - 00916992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
    2017-07-12 10:11 - 2017-06-20 06:07 - 00757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
    2017-07-12 10:11 - 2017-06-20 06:07 - 00626176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
    2017-07-12 10:11 - 2017-06-20 06:07 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
    2017-07-12 10:11 - 2017-06-20 06:07 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
    2017-07-12 10:11 - 2017-06-20 06:06 - 00847872 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
    2017-07-12 10:11 - 2017-06-20 06:06 - 00455680 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
    2017-07-12 10:11 - 2017-06-20 06:06 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
    2017-07-12 10:11 - 2017-06-20 06:06 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
    2017-07-12 10:11 - 2017-06-20 06:06 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
    2017-07-12 10:11 - 2017-06-20 06:06 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
    2017-07-12 10:11 - 2017-06-20 06:06 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerUI.dll
    2017-07-12 10:11 - 2017-06-20 06:05 - 04447744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
    2017-07-12 10:11 - 2017-06-20 06:05 - 02873344 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
    2017-07-12 10:11 - 2017-06-20 06:05 - 01468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
    2017-07-12 10:11 - 2017-06-20 06:05 - 00873472 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
    2017-07-12 10:11 - 2017-06-20 06:05 - 00696320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
    2017-07-12 10:11 - 2017-06-20 06:05 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
    2017-07-12 10:11 - 2017-06-20 06:05 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
    2017-07-12 10:11 - 2017-06-20 06:05 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
    2017-07-12 10:11 - 2017-06-20 06:05 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
    2017-07-12 10:11 - 2017-06-20 06:04 - 01818624 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
    2017-07-12 10:11 - 2017-06-20 06:04 - 01425920 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
    2017-07-12 10:11 - 2017-06-20 06:04 - 00899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
    2017-07-12 10:11 - 2017-06-20 06:04 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
    2017-07-12 10:11 - 2017-06-20 06:04 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
    2017-07-12 10:11 - 2017-06-20 06:04 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
    2017-07-12 10:11 - 2017-06-20 06:03 - 01396224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
    2017-07-12 10:11 - 2017-06-20 06:02 - 03204096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
    2017-07-12 10:11 - 2017-06-20 06:02 - 02804736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
    2017-07-12 10:11 - 2017-06-20 06:02 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
    2017-07-12 10:11 - 2017-06-20 06:02 - 00681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
    2017-07-12 10:11 - 2017-06-20 06:02 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinAUG.dll
    2017-07-12 10:11 - 2017-06-20 06:01 - 04396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
    2017-07-12 10:11 - 2017-06-20 06:01 - 03803136 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
    2017-07-12 10:11 - 2017-06-20 06:01 - 03332096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
    2017-07-12 10:11 - 2017-06-20 06:01 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
    2017-07-12 10:11 - 2017-06-20 06:01 - 01076736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
    2017-07-12 10:11 - 2017-06-20 06:01 - 00809984 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
    2017-07-12 10:11 - 2017-06-20 06:01 - 00397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
    2017-07-12 10:11 - 2017-06-20 06:00 - 03057664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
    2017-07-12 10:11 - 2017-06-20 06:00 - 02171392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
    2017-07-12 10:11 - 2017-06-20 05:59 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
    2017-07-12 10:11 - 2017-06-20 05:58 - 00625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
    2017-07-12 10:11 - 2017-06-20 05:57 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
    2017-07-12 10:11 - 2017-06-20 05:57 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMPushRouterCore.dll
    2017-07-12 10:11 - 2017-06-20 05:56 - 00600064 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
    2017-07-12 10:11 - 2017-06-20 05:56 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdmaud.drv
    2017-07-12 10:11 - 2017-06-20 05:54 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll
    2017-07-12 10:11 - 2017-06-20 05:45 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
    2017-07-11 14:42 - 2017-07-11 14:42 - 00001207 _____ C:\Users\Public\Desktop\Avira Connect.lnk
    2017-06-29 12:52 - 2017-06-29 12:52 - 09598376 _____ (Piriform Ltd) C:\Users\Asus\Downloads\ccsetup531.exe
    2017-06-28 12:34 - 2017-07-18 11:13 - 00000093 _____ C:\Users\Asus\AppData\Roaming\sp_data.sys

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2017-07-18 11:34 - 2016-05-11 12:53 - 00000000 ____D C:\Users\Asus\AppData\Roaming\BitComet
    2017-07-18 11:30 - 2016-11-18 09:20 - 00000000 ____D C:\Users\Asus\AppData\LocalLow\Mozilla
    2017-07-18 11:20 - 2017-04-21 07:39 - 01213842 _____ C:\WINDOWS\system32\PerfStringBackup.INI
    2017-07-18 11:13 - 2015-07-30 07:48 - 00000000 ____D C:\ProgramData\ASUS Smart Gesture
    2017-07-18 11:12 - 2017-04-21 07:37 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
    2017-07-18 11:12 - 2017-04-21 07:26 - 00000000 ____D C:\ProgramData\NVIDIA
    2017-07-18 11:12 - 2016-09-26 10:59 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios
    2017-07-18 11:07 - 2017-04-21 07:31 - 00000000 ____D C:\Users\Asus
    2017-07-18 11:06 - 2017-04-21 07:37 - 00004144 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{31481147-3A5A-4832-888E-FFA8D7CBFAFF}
    2017-07-18 10:45 - 2017-04-21 07:25 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
    2017-07-18 10:43 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\schemas
    2017-07-18 10:43 - 2017-03-18 12:40 - 01310720 _____ C:\WINDOWS\system32\config\BBI
    2017-07-18 10:42 - 2015-06-20 06:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
    2017-07-18 10:35 - 2015-08-05 13:41 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
    2017-07-18 10:23 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
    2017-07-18 10:23 - 2017-03-18 22:01 - 00000000 ____D C:\WINDOWS\INF
    2017-07-18 10:23 - 2016-05-11 12:53 - 00000855 _____ C:\Users\Public\Desktop\BitComet.lnk
    2017-07-18 10:23 - 2013-08-22 16:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
    2017-07-18 10:03 - 2015-03-08 07:14 - 00000000 ____D C:\Users\Asus\AppData\Local\PokerStars.UK
    2017-07-18 09:19 - 2015-08-04 15:56 - 00000000 ____D C:\Users\Asus\AppData\Roaming\vlc
    2017-07-18 09:01 - 2017-03-18 22:03 - 00000000 ___HD C:\Program Files\WindowsApps
    2017-07-18 09:01 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\AppReadiness
    2017-07-17 12:00 - 2017-04-21 07:37 - 00003550 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
    2017-07-17 12:00 - 2017-04-21 07:37 - 00003540 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
    2017-07-14 08:04 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\rescache
    2017-07-13 05:51 - 2017-03-18 21:51 - 00000000 ____D C:\WINDOWS\CbsTemp
    2017-07-13 05:39 - 2015-03-03 11:53 - 00000000 __RHD C:\Users\Public\AccountPictures
    2017-07-13 00:10 - 2017-04-21 07:25 - 00391672 _____ C:\WINDOWS\system32\FNTCACHE.DAT
    2017-07-13 00:09 - 2017-03-18 22:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
    2017-07-13 00:09 - 2017-03-18 22:03 - 00000000 ___SD C:\WINDOWS\system32\F12
    2017-07-13 00:09 - 2017-03-18 22:03 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
    2017-07-13 00:09 - 2017-03-18 22:03 - 00000000 ___RD C:\Program Files\Windows Defender
    2017-07-13 00:09 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
    2017-07-13 00:09 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\system32\oobe
    2017-07-13 00:09 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\system32\migwiz
    2017-07-13 00:09 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\system32\en-GB
    2017-07-13 00:09 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\system32\appraiser
    2017-07-13 00:09 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\ShellExperiences
    2017-07-13 00:09 - 2017-03-18 22:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer
    2017-07-13 00:09 - 2017-03-18 22:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
    2017-07-13 00:09 - 2017-03-18 22:03 - 00000000 ____D C:\Program Files (x86)\Windows Defender
    2017-07-12 12:02 - 2016-05-21 09:41 - 00000000 ____D C:\Users\Asus\AppData\Local\Unity
    2017-07-12 10:13 - 2015-03-05 16:56 - 00000000 ____D C:\WINDOWS\system32\MRT
    2017-07-12 10:12 - 2015-03-05 16:56 - 135225752 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
    2017-07-12 10:08 - 2015-12-18 04:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
    2017-07-11 14:42 - 2015-03-03 09:48 - 00000000 ____D C:\ProgramData\Package Cache
    2017-07-11 12:51 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
    2017-07-11 12:51 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\system32\Macromed
    2017-07-09 11:54 - 2017-03-18 22:03 - 00000000 ____D C:\WINDOWS\system32\NDF
    2017-06-30 15:47 - 2017-03-18 22:06 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
    2017-06-30 15:47 - 2017-03-18 22:06 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
    2017-06-26 08:48 - 2015-03-06 15:34 - 00000000 __RDO C:\Users\Asus\OneDrive
    2017-06-26 08:47 - 2017-05-26 10:25 - 00000082 _____ C:\Users\Public\start.txt
    2017-06-26 08:47 - 2017-05-26 10:25 - 00000082 _____ C:\Users\Public\decrypting.txt
    2017-06-26 08:47 - 2017-05-26 10:25 - 00000082 _____ C:\ProgramData\start.txt
    2017-06-26 08:47 - 2017-05-26 10:25 - 00000082 _____ C:\ProgramData\decrypting.txt
    2017-06-23 12:04 - 2017-04-21 07:37 - 00003266 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
    2017-06-23 12:04 - 2015-07-30 05:18 - 00002402 _____ C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
    2017-06-23 12:04 - 2015-06-08 06:59 - 00000000 ____D C:\Users\Asus\AppData\Roaming\Skype

    ==================== Files in the root of some directories =======

    2017-06-28 12:34 - 2017-07-18 11:13 - 0000093 _____ () C:\Users\Asus\AppData\Roaming\sp_data.sys
    2016-01-14 13:43 - 2016-01-14 13:43 - 0000017 _____ () C:\Users\Asus\AppData\Local\resmon.resmoncfg
    2017-05-26 10:25 - 2017-06-26 08:47 - 0000082 _____ () C:\ProgramData\decrypting.txt
    2017-04-21 07:26 - 2017-04-21 07:26 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
    2017-05-26 10:25 - 2017-06-26 08:47 - 0000082 _____ () C:\ProgramData\start.txt

    Some files in TEMP:
    ====================
    2017-07-18 10:19 - 2017-07-18 10:19 - 16742904 _____ () C:\Users\Asus\AppData\Local\Temp\Bit332.tmp.exe

    ==================== Bamital & volsnap ======================

    (There is no automatic fix for files that do not pass verification.)

    C:\WINDOWS\system32\winlogon.exe => File is digitally signed
    C:\WINDOWS\system32\wininit.exe => File is digitally signed
    C:\WINDOWS\explorer.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
    C:\WINDOWS\system32\svchost.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
    C:\WINDOWS\system32\services.exe => File is digitally signed
    C:\WINDOWS\system32\User32.dll => File is digitally signed
    C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
    C:\WINDOWS\system32\userinit.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
    C:\WINDOWS\system32\rpcss.dll => File is digitally signed
    C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
    C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
    C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

    LastRegBack: 2017-07-17 10:12

    ==================== End of FRST.txt ============================

  2. #2
    Security Expert Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    3,297

    Default

    when I attempt to download aswMBR i receive a blue screen restart error message?
    Sometimes this happens and I have no good explanation, possibly your system security.

    When FRST was first run it should had also created
    Addition.txt

    Can you post this please.

    *******************************
    Also, your Java is out of date

    WARNING: Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java

    Please read this article about Java.

    I would recommend that you completely uninstall Java unless you need it to run an important software.
    In that instance I would recommend that you disable Java in your browsers until you need it for that software and then enable it. (See How to disable Java in your web browser and How to unplug Java from the browser)

    If you do need to keep Java then download JavaRa
    Run the programme and select Remove Java Runtime. Uninstall all versions of Java present
    Once done then run it again and select Update Java runtime &gt; Download and install Latest version.
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.
    Want to help others? Join the ClassRoom and learn how.

  3. #3
    Member
    Join Date
    Jan 2013
    Posts
    67

    Default

    Thanks for your reply.

    I've uninstalled Java.

    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-07-2017
    Ran by Asus (18-07-2017 11:04:02)
    Running from C:\Users\Asus\Downloads
    Windows 10 Home Version 1703 (X64) (2017-04-21 06:40:15)
    Boot Mode: Normal
    ==========================================================


    ==================== Accounts: =============================

    Administrator (S-1-5-21-4202764557-1761152932-1492796901-500 - Administrator - Disabled)
    Asus (S-1-5-21-4202764557-1761152932-1492796901-1001 - Administrator - Enabled) => C:\Users\Asus
    DefaultAccount (S-1-5-21-4202764557-1761152932-1492796901-503 - Limited - Disabled)
    Guest (S-1-5-21-4202764557-1761152932-1492796901-501 - Limited - Disabled)
    HomeGroupUser$ (S-1-5-21-4202764557-1761152932-1492796901-1003 - Limited - Enabled)

    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
    AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: Spybot - Search and Destroy (Disabled - Up to date) {A16C3F68-9280-E053-1818-342707FECF4D}
    AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    ==================== Installed Programs ======================

    (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    Adblock Plus for IE (32-bit and 64-bit) (HKLM\...\{77588F59-3C58-4675-8EEE-998E5BC33CF4}) (Version: 1.4 - Eyeo GmbH)
    Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.137 - Adobe Systems Incorporated)
    Akamai NetSession Interface (HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\Akamai) (Version: - Akamai Technologies, Inc)
    ASUS Gaming Center (HKLM-x32\...\{23C8A788-4790-4F3C-B103-0ACC7D9DC5BE}) (Version: 1.0.2 - ASUS)
    ASUS Intel Extreme Tuning Utility (HKLM-x32\...\{17933add-8de8-4586-b331-96f1070ae737}) (Version: 4.4.0.205 - Intel Corporation)
    ASUS Intel Extreme Tuning Utility (HKLM-x32\...\{64ACC44D-3538-4FF6-93B4-26334666D7E8}) (Version: 4.4.0.205 - Intel Corporation) Hidden
    ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.4.3 - ASUS)
    ASUS ROG Gaming Mouse (HKLM-x32\...\{3B9E171F-A955-4834-B877-447C0A437260}) (Version: 2.00.026 - ASUS)
    ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 2.0.5 - ASUS)
    ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 3.0.14 - ASUS)
    ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.02.0001 - ASUS)
    ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.0.1 - ASUS)
    ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0037 - ASUS)
    Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.28.28 - Avira Operations GmbH & Co. KG)
    Avira Connect (HKLM-x32\...\{661C79C2-D156-419C-81CA-D1A2523B0841}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG) Hidden
    Avira Connect (HKLM-x32\...\{dd9049b8-31d1-40bd-8c8c-97a7b087a78f}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG)
    BitComet 1.46 (HKLM-x32\...\BitComet_x64) (Version: 1.46 - CometNetwork)
    CCleaner (HKLM\...\CCleaner) (Version: 5.31 - Piriform)
    CyberLink MediaStory (HKLM-x32\...\InstallShield_{55762F9A-FCE3-45d5-817B-051218658423}) (Version: 1.0.1314 - CyberLink Corp.)
    CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.4105 - CyberLink Corp.)
    ELAN Touchpad 11.5.20.3_X64_WHQL (HKLM\...\Elantech) (Version: 11.5.20.3 - ELAN Microelectronic Corp.)
    Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.1.1 - Genesys Logic)
    Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
    HP ENVY 4500 series Basic Device Software (HKLM\...\{6915424E-704F-4F5D-9057-9C7B406B36DB}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)
    HP ENVY 4500 series Help (HKLM-x32\...\{95BECC50-22B4-4FCA-8A2E-BF77713E6D3A}) (Version: 30.0.0 - Hewlett Packard)
    HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
    HP Support Solutions Framework (HKLM-x32\...\{E35601C0-BA8E-4F32-919A-C7EF4CA81F67}) (Version: 11.51.0048 - Hewlett-Packard Company)
    HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
    Intel Collaborative Processor Performance Control (HKLM-x32\...\0E7DAF70-FB54-4B91-B192-7E771C25AEEB) (Version: 1.0.0.1016 - Intel Corporation)
    Intel(R) Chipset Device Software (HKLM-x32\...\{98f335cd-0a32-4b3f-b74c-ef9480e834f0}) (Version: 10.0.27 - Intel(R) Corporation) Hidden
    Intel(R) Driver Update Utility 2.0 (HKLM-x32\...\{59DB38EB-F864-4E10-841D-38CFBCF864B0}) (Version: 2.0.0.29 - Intel) Hidden
    Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation)
    Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 17.0.1419.2) (HKLM\...\{302600C1-6BDF-4FD1-1405-148929CC1385}) (Version: 17.0.1405.0464 - Intel Corporation)
    Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{5AE8ACA2-420B-4196-A8E0-20E8EB274E0F}) (Version: 17.1.1512.0771 - Intel Corporation)
    Intel® Driver Update Utility (HKLM-x32\...\{8409c4f7-2340-4933-a304-5d37db4fb48b}) (Version: 2.0.0.29 - Intel)
    Intel® PROSet/Wireless Software (HKLM-x32\...\{6535d76a-59fb-4935-b2c5-cd61917c4a4b}) (Version: 17.16.0 - Intel Corporation)
    Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version: - Intel Corporation)
    Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\3FD0C489-0F02-481a-A3E1-9754CD396761) (Version: - Intel Corporation)
    Java 8 Update 121 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
    Maxx Audio Installer (x64) (HKLM\...\{307032B2-6AF2-46D7-B933-62438DEB2B9A}) (Version: 2.6.6168.8 - Waves Audio Ltd.) Hidden
    Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
    Microsoft OneDrive (HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\OneDriveSetup.exe) (Version: 17.3.6917.0607 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
    Mozilla Firefox 54.0.1 (x86 en-GB) (HKLM-x32\...\Mozilla Firefox 54.0.1 (x86 en-GB)) (Version: 54.0.1 - Mozilla)
    Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 54.0.1 - Mozilla)
    NVIDIA 3D Vision Driver 368.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 368.69 - NVIDIA Corporation)
    NVIDIA Graphics Driver 368.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 368.69 - NVIDIA Corporation)
    NVIDIA HD Audio Driver 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)
    NVIDIA Miracast Virtual Audio 353.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 353.30 - NVIDIA Corporation)
    NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
    PokerStars.uk (HKLM-x32\...\PokerStars.uk) (Version: - PokerStars.uk)
    Private Internet Access Support Files (HKLM-x32\...\{7D72DAFF-DCB2-437B-BC22-4B2ABF21462B}) (Version: 1.0.0.0 - Private Internet Access)
    Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.38.115.2015 - Realtek)
    Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
    SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0280 - NVIDIA Corporation) Hidden
    SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
    Skype™ 7.36 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.36.101 - Skype Technologies S.A.)
    SpywareBlaster 5.5 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.5.0 - BrightFort LLC)
    swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
    Thunderbolt(TM) Software (HKLM\...\{BED2816F-D47A-41DA-AFCF-44E1B257C368}) (Version: 2.0.4.250 - Intel(R) Corporation)
    Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 3.5.3 - Tweaking.com)
    VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
    Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
    Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation)
    Windows Driver Package - ASUS (ATP) Mouse (01/13/2015 1.0.0.233) (HKLM\...\8335D73177E6D80E7ADC00FED2275758BD28AEFB) (Version: 01/13/2015 1.0.0.233 - ASUS)
    WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
    WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)

    ==================== Custom CLSID (Whitelisted): ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    ContextMenuHandlers01: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2014-05-06] (Cyberlink)
    ContextMenuHandlers01: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer-Networking Ltd.)
    ContextMenuHandlers01: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer-Networking Ltd.)
    ContextMenuHandlers01: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2017-07-12] (Avira Operations GmbH & Co. KG)
    ContextMenuHandlers01: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-02-04] (Alexander Roshal)
    ContextMenuHandlers01: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => -> No File
    ContextMenuHandlers02: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2014-05-06] (Cyberlink)
    ContextMenuHandlers03: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
    ContextMenuHandlers03: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamext.dll [2016-03-10] (Malwarebytes)
    ContextMenuHandlers04: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => -> No File
    ContextMenuHandlers05: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-08-01] (NVIDIA Corporation)
    ContextMenuHandlers06: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamext.dll [2016-03-10] (Malwarebytes)
    ContextMenuHandlers06: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => -> No File
    ContextMenuHandlers06: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer-Networking Ltd.)
    ContextMenuHandlers06: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer-Networking Ltd.)
    ContextMenuHandlers06: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2017-07-12] (Avira Operations GmbH & Co. KG)
    ContextMenuHandlers06: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-02-04] (Alexander Roshal)
    ContextMenuHandlers06: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => -> No File

    ==================== Scheduled Tasks (Whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    Task: {0253208C-4A01-4EFB-86ED-409A6DF0D358} - System32\Tasks\Gaming Center => C:\Program Files (x86)\ASUS\ASUS Gaming Center\vivokey.exe [2014-04-30] (ASUSTek Computer Inc.)
    Task: {053ADE22-B090-48F8-8D13-F79091668C2D} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-06-24] (Realtek Semiconductor)
    Task: {103B5C55-4882-4864-9CDB-6F2E510069E0} - System32\Tasks\UMonitor Task => C:\Windows\SysWOW64\UMonit64.exe [2014-02-26] ()
    Task: {1AE2DA4E-2543-475D-BB12-14057A906BF1} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
    Task: {2E966B5F-7C04-40BC-BABF-FD98414CA523} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
    Task: {30D43D98-B584-43C8-AA7B-5BBC50A99F9A} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-07-11] (Adobe Systems Incorporated)
    Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
    Task: {48D55967-09EC-4BEC-8D85-12AF7905A058} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-06-24] (Realtek Semiconductor)
    Task: {4D6BADFB-01A1-4A16-A883-9530D0A8BD3B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.)
    Task: {512B4BA4-49A5-4FE1-B823-D54C6ED228A7} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2015-03-18] (AsusTek)
    Task: {7B8118BE-E7AD-4C82-93A4-6A0A4B7890EC} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
    Task: {8A8A8176-95CA-44AA-83FC-453ADE3570AC} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application when hardware is detected => Thunderbolt.exe
    Task: {979AB72D-F2CE-47C7-9030-CEAB83CC9D57} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-07-12] (Microsoft Corporation)
    Task: {97E5BA15-7F7B-410D-AA72-5D5D4E93D71C} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-06-11] (ASUSTek Computer Inc.)
    Task: {991E1FB0-5057-4627-AEC8-95082F525BB3} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.)
    Task: {9D564E4F-7555-4C05-A36F-96E84FAB404F} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service on boot if driver is up => tbtsvc.exe
    Task: {9DB2E73F-242B-4A34-8C54-6E83EB214422} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2014-06-03] (ASUS)
    Task: {9E7F0333-6C60-4600-8714-DD3236C561F5} - System32\Tasks\Private Internet Access Startup => C:\Program Files\pia_manager\pia_manager.exe [2016-09-27] ()
    Task: {BF58E3AD-1EBB-4C04-A283-5C6589F4A74C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-06-13] (Piriform Ltd)
    Task: {C6CE6890-6B30-481D-84AA-B6A253709F4D} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-07-09] (ASUSTek Computer Inc.)
    Task: {C9243137-3DD8-4B41-96AB-F0B77CBEABCB} - \WPD\SqmUpload_S-1-5-21-4202764557-1761152932-1492796901-1001 -> No File <==== ATTENTION
    Task: {D1419E84-1291-4BC1-83EA-003166B48E69} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
    Task: {E1202477-C56C-4D96-89AD-D3C48E48D598} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on login if service is up => Thunderbolt.exe
    Task: {FA27B8E7-A12F-4B14-8FCE-7E3AAD6BBE31} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service when hardware is detected => sc start ThunderboltService

    (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


    ==================== Shortcuts & WMI ========================

    (The entries could be listed to be restored or removed.)


    ==================== Loaded Modules (Whitelisted) ==============

    2017-04-21 07:26 - 2016-08-01 13:54 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
    2015-03-06 12:13 - 2016-09-27 09:25 - 07711966 _____ () C:\Program Files\pia_manager\pia_manager.exe
    2017-03-18 21:58 - 2017-03-18 21:58 - 00138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
    2017-03-18 21:59 - 2017-03-20 04:43 - 01731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
    2017-07-18 09:00 - 2017-07-18 09:01 - 00074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe
    2017-07-18 09:00 - 2017-07-18 09:01 - 00203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
    2017-07-18 09:00 - 2017-07-18 09:01 - 43573248 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkyWrap.dll
    2017-07-18 09:00 - 2017-07-18 09:01 - 02435584 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\skypert.dll
    2015-03-03 09:59 - 2014-02-26 04:13 - 00053248 _____ () C:\Windows\SysWOW64\UMonit64.exe
    2015-03-06 12:13 - 2016-09-27 09:25 - 00693760 _____ () C:\Program Files\pia_manager\openvpn.exe
    2015-03-06 12:13 - 2016-09-27 09:25 - 00190317 _____ () C:\Program Files\pia_manager\liblzo2-2.dll
    2015-03-06 12:13 - 2016-09-27 09:25 - 00108441 _____ () C:\Program Files\pia_manager\libpkcs11-helper-1.dll
    2016-07-13 11:47 - 2016-09-27 09:25 - 00144896 _____ () C:\Program Files\pia_manager\pia-openvpn.dll
    2015-12-18 04:20 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
    2015-12-18 04:20 - 2014-05-13 13:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
    2015-12-18 04:20 - 2014-05-13 13:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
    2015-12-18 04:20 - 2014-05-13 13:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
    2015-12-18 04:20 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
    2014-06-03 21:01 - 2014-06-03 21:01 - 00018992 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDColorEnhance.dll
    2014-06-03 21:01 - 2014-06-03 21:01 - 00020528 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDRegammaAndGamut.dll
    2014-06-03 21:01 - 2014-06-03 21:01 - 00037936 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
    2014-06-03 21:01 - 2014-06-03 21:01 - 00117248 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
    2017-07-18 10:45 - 2017-07-18 10:45 - 00012800 _____ () C:\Users\Asus\AppData\Local\Temp\ocr7A0D.tmp\lib\ruby\1.9.1\i386-mingw32\enc\encdb.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00009728 _____ () C:\Users\Asus\AppData\Local\Temp\ocr7A0D.tmp\lib\ruby\1.9.1\i386-mingw32\enc\iso_8859_1.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00014848 _____ () C:\Users\Asus\AppData\Local\Temp\ocr7A0D.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\transdb.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00094208 _____ () C:\Users\Asus\AppData\Local\Temp\ocr7A0D.tmp\src\rgloader\rgloader193.mswin.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00009216 _____ () C:\Users\Asus\AppData\Local\Temp\ocr7A0D.tmp\lib\ruby\1.9.1\i386-mingw32\etc.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00094208 _____ () C:\Users\Asus\AppData\Local\Temp\ocr7A0D.tmp\lib\ruby\site_ruby\1.9.1\rgloader\rgloader193.mswin.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00126976 _____ () C:\Users\Asus\AppData\Local\Temp\ocr7A0D.tmp\lib\ruby\1.9.1\i386-mingw32\win32ole.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00087552 _____ () C:\Users\Asus\AppData\Local\Temp\ocr7A0D.tmp\lib\ruby\1.9.1\i386-mingw32\dl.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00016384 _____ () C:\Users\Asus\AppData\Local\Temp\ocr7A0D.tmp\lib\ruby\1.9.1\i386-mingw32\fiddle.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00127316 _____ () C:\Users\Asus\AppData\Local\Temp\ocr7A0D.tmp\bin\libffi-6.dll
    2017-07-18 10:45 - 2017-07-18 10:45 - 00008704 _____ () C:\Users\Asus\AppData\Local\Temp\ocr7A0D.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_16le.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00013312 _____ () C:\Users\Asus\AppData\Local\Temp\ocr7A0D.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\utf_16_32.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00095744 _____ () C:\Users\Asus\AppData\Local\Temp\ocr7A0D.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\single_byte.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00026624 _____ () C:\Users\Asus\AppData\Local\Temp\ocr7A0D.tmp\lib\ruby\gems\1.9.1\gems\win32-api-1.5.0-universal-mingw32\lib\win32\ruby19\win32\api.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00012800 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\enc\encdb.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00009728 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\enc\iso_8859_1.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00014848 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\transdb.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00094208 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\src\rgloader\rgloader193.mswin.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00094208 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\site_ruby\1.9.1\rgloader\rgloader193.mswin.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00118784 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\socket.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00069120 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\zlib.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00083968 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\bin\zlib1.dll
    2017-07-18 10:45 - 2017-07-18 10:45 - 00026624 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\stringio.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00275968 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\openssl.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00015360 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\digest.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00008192 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\fcntl.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00009216 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\etc.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00023552 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\json\ext\parser.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00008704 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_16be.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00008704 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_16le.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00008704 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_32be.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00008704 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_32le.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00036352 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\json\ext\generator.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00126976 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\win32ole.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00087552 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\dl.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00016384 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\fiddle.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00127316 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\bin\libffi-6.dll
    2017-07-18 10:45 - 2017-07-18 10:45 - 00013312 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\utf_16_32.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00095744 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\single_byte.so
    2017-07-18 10:45 - 2017-07-18 10:45 - 00026624 _____ () C:\Users\Asus\AppData\Local\Temp\ocrA004.tmp\lib\ruby\gems\1.9.1\gems\win32-api-1.5.0-universal-mingw32\lib\win32\ruby19\win32\api.so
    2016-07-13 11:47 - 2016-09-27 09:25 - 00939520 _____ () C:\Program Files\pia_manager\pia_tray_bin\nw-win\ffmpeg.dll
    2016-07-13 11:47 - 2016-09-27 09:25 - 03115520 _____ () C:\Program Files\pia_manager\pia_tray_bin\nw-win\node.dll
    2015-03-03 09:55 - 2013-10-23 14:44 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

    ==================== Alternate Data Streams (Whitelisted) =========

    (If an entry is included in the fixlist, only the ADS will be removed.)

    AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [125]

    ==================== Safe Mode (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


    ==================== Association (Whitelisted) ===============

    (If an entry is included in the fixlist, the registry item will be restored to default or removed.)

    HKLM\...\.scr: CryptoPreventSCR => "C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventFilterMod.CryptoPreventEXEC" "%1" /S %*

    ==================== Internet Explorer trusted/restricted ===============

    (If an entry is included in the fixlist, it will be removed from the registry.)

    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\007guard.com -> install.007guard.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\008i.com -> 008i.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\008k.com -> www.008k.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\00hq.com -> www.00hq.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\010402.com -> 010402.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\0190-dialers.com -> 0190-dialers.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\01i.info -> 01i.info
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\0411dd.com -> 0411dd.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\0511zfhl.com -> 0511zfhl.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\05p.com -> 05p.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\0632qyw.com -> 0632qyw.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\0calories.net -> 0calories.net
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\0cj.net -> 0cj.net
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\0scan.com -> www.0scan.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\1-2005-search.com -> www.1-2005-search.com

    There are 12728 more sites.


    ==================== Hosts content: ===============================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Asus\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img0.jpg
    DNS Servers: 209.222.18.222 - 209.222.18.218
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
    Windows Firewall is enabled.

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    HKLM\...\StartupApproved\Run: => "BTMTrayAgent"
    HKLM\...\StartupApproved\Run: => "ETDCtrl"
    HKLM\...\StartupApproved\Run: => "NvBackend"
    HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
    HKLM\...\StartupApproved\Run32: => "ASUSPRP"
    HKLM\...\StartupApproved\Run32: => "ROGNB"
    HKLM\...\StartupApproved\Run32: => "ASUS ROG MacroKey"
    HKLM\...\StartupApproved\Run32: => "CLMLServer_For_P2G8"
    HKLM\...\StartupApproved\Run32: => "CLVirtualDrive"
    HKLM\...\StartupApproved\Run32: => "SDTray"
    HKLM\...\StartupApproved\Run32: => "HP Software Update"
    HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\StartupApproved\Run: => "Skype"
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\StartupApproved\Run: => "Steam"
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\StartupApproved\Run: => "HP ENVY 4500 series (NET)"
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\StartupApproved\Run: => "Akamai NetSession Interface"
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\StartupApproved\Run: => "SpybotPostWindows10UpgradeReInstall"
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\StartupApproved\Run: => "OneDrive"

    ==================== FirewallRules (Whitelisted) ===============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    FirewallRules: [UDP Query User{2A56361A-4695-4D68-9C50-7DC9936E6F45}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe
    FirewallRules: [TCP Query User{B3DB93C5-95E6-422E-A754-16EBF349C79B}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe
    FirewallRules: [{A96B960A-1920-44C4-BC15-5E3DE53CD12A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    FirewallRules: [{D65BF53B-4822-4FDB-8422-089A2A92CE9D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    FirewallRules: [{CAB2CEA7-D454-43B1-9DDE-04731B421C34}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
    FirewallRules: [{8DC53E46-315A-4FD9-A2B2-FE67F763D3D3}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
    FirewallRules: [{A0E8B631-174D-44A4-B8E8-DEF7B298F1F3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
    FirewallRules: [{89447D5D-A567-4B11-A5C7-F7FEEB4097B2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
    FirewallRules: [{3EFB1019-738F-4FFF-B52C-246E563A1E10}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
    FirewallRules: [{162DB041-D635-431D-8EB1-02FC7C513A4A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
    FirewallRules: [{4A2DCE1E-84EC-4B96-B7D3-E536BB966CC5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
    FirewallRules: [{0E2D0E8C-39A3-4BDB-B158-25FFE77313D2}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
    FirewallRules: [{211B59A3-56F3-42B9-9EE9-E50BF7668F14}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
    FirewallRules: [{C6B2C93F-B29C-4C77-B11F-61D32D157778}] => (Allow) C:\Windows\system32\ftp.exe
    FirewallRules: [{1BA6D593-541F-4F63-853D-F937D3C936B5}] => (Allow) C:\Windows\system32\ftp.exe
    FirewallRules: [{04781A3E-4FF9-43F9-A9DD-FA47656089FD}] => (Allow) C:\Windows\SysWOW64\ftp.exe
    FirewallRules: [{DB75DE74-FD9E-4648-A3C2-8F5400E67759}] => (Allow) C:\Windows\SysWOW64\ftp.exe
    FirewallRules: [{E3AF2AA4-1AAC-448F-AB9E-98B81FBE7BFE}] => (Allow) C:\Users\Asus\AppData\Roaming\BitTorrent\BitTorrent.exe
    FirewallRules: [{1AAB904B-ED1C-4BBE-A85E-D142E6C9E77C}] => (Allow) C:\Users\Asus\AppData\Roaming\BitTorrent\BitTorrent.exe
    FirewallRules: [{BC425A47-A540-489C-810C-8DF8B6971C3B}] => (Allow) C:\Program Files (x86)\Intel\Extreme Tuning Utility\Client\PerfTune.exe
    FirewallRules: [{1C042886-83FD-44AA-B577-3B7EA1D9B6F3}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\DeviceSetup.exe
    FirewallRules: [{D2981FB4-887C-43BE-98FF-383214B0B1C5}] => (Allow) LPort=5357
    FirewallRules: [{26F55D82-E91E-4ABA-AA72-320E78481ADB}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\HPNetworkCommunicatorCom.exe
    FirewallRules: [{6A1F14B2-B2EB-44A8-AE81-52ECF8306BDA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    FirewallRules: [TCP Query User{38B98744-FAD6-4107-9C54-4CCF7D090CF2}C:\users\asus\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\asus\appdata\local\akamai\netsession_win.exe
    FirewallRules: [UDP Query User{A7D549FA-EEFD-4307-8C86-9EB2BC1A166E}C:\users\asus\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\asus\appdata\local\akamai\netsession_win.exe
    FirewallRules: [{1D7AFC4D-8213-4460-93F6-C08925A11816}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{2C09F787-73DF-451F-B884-A500451BE172}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{5B61BB4C-CCB1-4A09-BEEF-14FFE2F72803}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
    FirewallRules: [{DAC723B3-DA45-4FF0-9886-B9B8D95B5B05}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
    FirewallRules: [{09EEED31-E432-4F00-A90F-B93CD83D69ED}] => (Allow) C:\Program Files\BitComet\BitComet.exe
    FirewallRules: [{F4837DA0-A9C0-420B-9F3E-CF4F2CBF1E2C}] => (Allow) C:\Program Files\BitComet\BitComet.exe
    FirewallRules: [{7F315F93-98FA-4776-9BF3-1FFFB750A162}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
    FirewallRules: [{CDA1C807-42BE-4307-8C6E-6E4705952E90}] => (Allow) C:\Users\Asus\AppData\Local\Chromium\Application\chrome.exe
    StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
    StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
    StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
    StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

    ==================== Restore Points =========================

    ATTENTION: System Restore is disabled

    ==================== Faulty Device Manager Devices =============


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (07/18/2017 06:49:26 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: G751)
    Description: Package Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe+App was terminated because it took too long to suspend.

    Error: (07/18/2017 04:40:37 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: G751)
    Description: Package Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe+App was terminated because it took too long to suspend.

    Error: (07/14/2017 05:54:37 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: G751)
    Description: Package Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe+App was terminated because it took too long to suspend.

    Error: (07/13/2017 03:53:14 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: G751)
    Description: Package Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe+App was terminated because it took too long to suspend.

    Error: (07/13/2017 12:07:43 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: G751)
    Description: Activation of application microsoft.windowscommunicationsapps_8wekyb3d8bbwe!microsoft.windowslive.calendar failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.

    Error: (07/13/2017 12:07:43 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: G751)
    Description: Activation of application microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.

    Error: (07/13/2017 12:07:43 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: G751)
    Description: Activation of application Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.

    Error: (07/13/2017 12:07:43 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: G751)
    Description: Activation of application microsoft.windowscommunicationsapps_8wekyb3d8bbwe!microsoft.windowslive.calendar failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.

    Error: (07/11/2017 04:35:28 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: G751)
    Description: Package Microsoft.Windows.Photos_2017.18062.12990.0_x64__8wekyb3d8bbwe+App was terminated because it took too long to suspend.

    Error: (07/11/2017 02:48:43 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: G751)
    Description: Package Microsoft.Windows.Photos_2017.18062.12990.0_x64__8wekyb3d8bbwe+App was terminated because it took too long to suspend.


    System errors:
    =============
    Error: (07/18/2017 10:58:37 AM) (Source: DCOM) (EventID: 10010) (User: G751)
    Description: The server {DABF28BE-F6B4-4E40-8F40-C4FB26F3116C} did not register with DCOM within the required timeout.

    Error: (07/18/2017 10:52:46 AM) (Source: DCOM) (EventID: 10010) (User: G751)
    Description: The server {DABF28BE-F6B4-4E40-8F40-C4FB26F3116C} did not register with DCOM within the required timeout.

    Error: (07/18/2017 10:48:35 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
    Description: The server {784E29F4-5EBE-4279-9948-1E8FE941646D} did not register with DCOM within the required timeout.

    Error: (07/18/2017 10:45:34 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
    Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
    {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
    and APPID
    {4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
    to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

    Error: (07/18/2017 10:45:34 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
    Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
    {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
    and APPID
    {4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
    to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

    Error: (07/18/2017 10:45:34 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
    Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
    {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
    and APPID
    {4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
    to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

    Error: (07/18/2017 10:45:34 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
    Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
    {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
    and APPID
    {4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
    to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

    Error: (07/18/2017 10:44:06 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The SDWSCService service failed to start due to the following error:
    A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

    Error: (07/18/2017 10:44:05 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The CldFlt service failed to start due to the following error:
    The request is not supported.

    Error: (07/18/2017 10:32:51 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
    Description: The server {784E29F4-5EBE-4279-9948-1E8FE941646D} did not register with DCOM within the required timeout.


    CodeIntegrity:
    ===================================
    Date: 2017-07-18 11:03:40.786
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2017-07-18 11:03:40.783
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2017-07-18 11:03:40.763
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2017-07-18 11:03:40.760
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2017-07-18 10:44:07.197
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2017-07-18 10:44:07.189
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2017-07-18 10:44:06.756
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2017-07-18 10:35:59.134
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2017-07-18 10:35:59.130
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2017-07-18 10:35:59.128
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


    ==================== Memory info ===========================

    Processor: Intel(R) Core(TM) i7-4710HQ CPU @ 2.50GHz
    Percentage of memory in use: 18%
    Total physical RAM: 16333.1 MB
    Available physical RAM: 13297.36 MB
    Total Virtual: 18765.1 MB
    Available Virtual: 15459.76 MB

    ==================== Drives ================================

    Drive c: (OS) (Fixed) (Total:117.35 GB) (Free:79.66 GB) NTFS ==>[system with boot components (obtained from drive)]
    Drive d: (Data1) (Fixed) (Total:455.75 GB) (Free:333.44 GB) NTFS
    Drive e: (Data2) (Fixed) (Total:455.75 GB) (Free:443.3 GB) NTFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (Size: 119.2 GB) (Disk ID: 8FFEFB6B)

    Partition: GPT.

    ========================================================
    Disk: 1 (Size: 931.5 GB) (Disk ID: 82EB289F)

    Partition: GPT.

    ==================== End of Addition.txt ============================

  4. #4
    Security Expert Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    3,297

    Default

    Thank you for the logs

    Start FRST (Please double-click on FRST/FRST64) with Administrator privileges

    or Right click on the FRST icon and select Run as administrator
    Highlight the below information then hit the Ctrl + C keys at the same time
    or
    Right click on the highlighted text and select Copy. beginning with Start:: and finishing with End::


    Start::
    CreateRestorePoint:
    EndProcesses:
    GroupPolicy: Restriction <==== ATTENTION
    SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-04-06] (Oracle Corporation)
    BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-04-06] (Oracle Corporation)
    BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
    FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-04-06] (Oracle Corporation)
    FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-04-06] (Oracle Corporation)
    R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]
    2017-07-18 10:19 - 2017-07-18 10:19 - 16742904 _____ () C:\Users\Asus\AppData\Local\Temp\Bit332.tmp.exe
    ContextMenuHandlers01: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => -> No File
    ContextMenuHandlers03: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
    ContextMenuHandlers04: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => -> No File
    ContextMenuHandlers06: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => -> No File
    ContextMenuHandlers06: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => -> No File
    Task: {C9243137-3DD8-4B41-96AB-F0B77CBEABCB} - \WPD\SqmUpload_S-1-5-21-4202764557-1761152932-1492796901-1001 -> No File <==== ATTENTION
    AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [125]
    Emptytemp:
    End::


    Press the Fix button.
    If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
    When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.
    ~~~~~~~~~~~~~~~~~~~~`

    Malwarebytes AdwCleaner
    Download AdwCleaner from this page: https://toolslib.net/downloads/viewd.../1-adwcleaner/
    Execute it, then read the EULA and click on "I agree" if you agree it.

    Click on Scan and wait until it ends.
    NEXT
    Click on Clean, read the informative message. If you have any questions about it, please ask.
    All unrequired programs will be closed during the cleaning process, so be sure to save your work before.
    When the clean is over, the computer may reboot and shows the logfile
    Copy/Paste it in your answer.

    ~~~~~~~~~~~~~~
    Zemana AntiMalware Free

    download it from here:

    Double-click on the file named “Zemana.AntiMalware.Portable” to perform a system scan with Zemana AntiMalware Free.
    You may be presented with a User Account Control dialog asking you if you want to run this program. If this happens, you should click “Yes” to allow Zemana AntiMalware to run.

    When Zemana AntiMalware starts, click on the “Scan” button to perform a system scan.
    without changing any options, press Scan
    When Zemana has finished finished scanning it will show a screen that displays any malware that has been detected. To remove all the malicious files, click on the “Next” button.
    Zemana AntiMalware will now start to remove all the malicious programs from your computer.

    Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please restart your computer manually.
    • open Zemana AntiMalware again and locate the latest report
    • please paste the contents into your reply


    When the process is complete, you can close Zemana AntiMalware



    please post
    Fixlog.txt
    AdwCleaner.txt
    Zemana AntiMalware log
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.
    Want to help others? Join the ClassRoom and learn how.

  5. #5
    Member
    Join Date
    Jan 2013
    Posts
    67

    Default

    Hi Juliet

    Zemana AntiMalware didnt detect any malware.

    logs to follow:

    Thanks for your help.

    # AdwCleaner 7.0.0.0 - Logfile created on Thu Jul 20 09:07:37 2017
    # Updated on 2017/17/07 by Malwarebytes
    # Running on Windows 10 Home (X64)
    # Mode: clean
    # Support: https://www.malwarebytes.com/support

    ***** [ Services ] *****

    No malicious services deleted.

    ***** [ Folders ] *****

    Deleted: C:\Users\Public\Documents\Guid


    ***** [ Files ] *****

    No malicious files deleted.

    ***** [ DLL ] *****

    No malicious DLLs cleaned.

    ***** [ WMI ] *****

    No malicious WMI cleaned.

    ***** [ Shortcuts ] *****

    No malicious shortcuts cleaned.

    ***** [ Tasks ] *****

    No malicious tasks deleted.

    ***** [ Registry ] *****

    Deleted: [Key] - HKLM\SOFTWARE\Yahoo\Companion
    Deleted: [Key] - HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\Software\Yahoo\Companion
    Deleted: [Key] - HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\Software\AppDataLow\Software\Yahoo\Companion
    Deleted: [Key] - HKCU\Software\Yahoo\Companion
    Deleted: [Key] - HKCU\Software\AppDataLow\Software\Yahoo\Companion
    Deleted: [Key] - HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\Software\Yahoo\YFriendsBar
    Deleted: [Key] - HKCU\Software\Yahoo\YFriendsBar
    Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
    Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{058F0E48-61CA-4964-9FBA-1978A1BB060D}
    Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{18F33C35-8EF2-40D7-8BA4-932B0121B472}
    Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
    Deleted: [Key] - HKLM\SOFTWARE\Classes\AppID\{7375D127-3955-4654-8E7D-1949A7A9C902}
    Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{371AD4A5-1520-4AA2-A8A4-F9AD3BAC6957}
    Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{7F124846-5453-4BB8-A41D-E11481FFC9DF}
    Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{8FD65019-BF09-45DA-AD81-E95AE911F1FD}
    Deleted: [Key] - HKLM\SOFTWARE\Classes\TypeLib\{F6C2BABA-9E4C-425F-9AEC-24AB8F2B640D}
    Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
    Deleted: [Key] - HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\Software\BSD
    Deleted: [Key] - HKCU\Software\BSD


    ***** [ Firefox (and derivatives) ] *****

    No malicious Firefox entries deleted.

    ***** [ Chromium (and derivatives) ] *****

    No malicious Chromium entries deleted.

    *************************

    ::Tracing keys deleted
    ::Winsock settings cleared
    ::Additional Actions: 0



    *************************

    C:/AdwCleaner/AdwCleaner[S0].txt - [3034 B] - [2017/7/20 9:5:53]


    ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########

    Fix result of Farbar Recovery Scan Tool (x64) Version: 18-07-2017
    Ran by Asus (20-07-2017 09:58:27) Run:1
    Running from C:\Users\Asus\Downloads
    Loaded Profiles: Asus (Available Profiles: Asus)
    Boot Mode: Normal
    ==============================================

    fixlist content:
    *****************

    CreateRestorePoint:
    EndProcesses:
    GroupPolicy: Restriction <==== ATTENTION
    SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-04-06] (Oracle Corporation)
    BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-04-06] (Oracle Corporation)
    BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
    FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-04-06] (Oracle Corporation)
    FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-04-06] (Oracle Corporation)
    R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]
    2017-07-18 10:19 - 2017-07-18 10:19 - 16742904 _____ () C:\Users\Asus\AppData\Local\Temp\Bit332.tmp.exe
    ContextMenuHandlers01: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => -> No File
    ContextMenuHandlers03: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
    ContextMenuHandlers04: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => -> No File
    ContextMenuHandlers06: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => -> No File
    ContextMenuHandlers06: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => -> No File
    Task: {C9243137-3DD8-4B41-96AB-F0B77CBEABCB} - \WPD\SqmUpload_S-1-5-21-4202764557-1761152932-1492796901-1001 -> No File <==== ATTENTION
    AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [125]
    Emptytemp:

    *****************

    Error: (0) Failed to create a restore point.
    EndProcesses: => Error: No automatic fix found for this entry.
    C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
    C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
    C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
    HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
    HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} => key not found.
    HKLM\Software\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} => key removed successfully
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} => key not found.
    HKLM\Software\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9} => key removed successfully
    HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670} => key removed successfully
    HKLM\Software\Wow6432Node\Classes\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670} => key not found.
    HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.121.2 => key not found.
    "C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll" => not found.
    HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.121.2 => key not found.
    "C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll" => not found.
    ibtsiva => Unable to stop service.
    HKLM\System\CurrentControlSet\Services\ibtsiva => key removed successfully
    ibtsiva => service removed successfully
    C:\Users\Asus\AppData\Local\Temp\Bit332.tmp.exe => moved successfully
    HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 => key removed successfully
    HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} => key not found.
    HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\00avast => key removed successfully
    HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found.
    HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\PowerISO => key removed successfully
    HKLM\Software\Classes\CLSID\{967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => key not found.
    HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\PowerISO => key removed successfully
    HKLM\Software\Classes\CLSID\{967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => key not found.
    HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 => key removed successfully
    HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} => key not found.
    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C9243137-3DD8-4B41-96AB-F0B77CBEABCB} => key removed successfully
    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C9243137-3DD8-4B41-96AB-F0B77CBEABCB} => key removed successfully
    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-4202764557-1761152932-1492796901-1001 => key removed successfully
    C:\ProgramData\Temp => ":5C321E34" ADS removed successfully.

    =========== EmptyTemp: ==========

    BITS transfer queue => 7888896 B
    DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 37159544 B
    Java, Flash, Steam htmlcache => 16009661 B
    Windows/system/drivers => 72772 B
    Edge => 13207478 B
    Chrome => 131072 B
    Firefox => 47531486 B
    Opera => 0 B

    Temp, IE cache, history, cookies, recent:
    Default => 0 B
    Users => 0 B
    ProgramData => 0 B
    Public => 0 B
    systemprofile => 128 B
    systemprofile32 => 0 B
    LocalService => 417958 B
    NetworkService => 1990656 B
    Asus => 158344720 B

    RecycleBin => 0 B
    EmptyTemp: => 269.7 MB temporary data Removed.

    ================================


    The system needed a reboot.

    ==== End of Fixlog 09:59:16 ====

  6. #6
    Security Expert Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    3,297

    Default

    Please download the Malwarebytes Anti-Malware setup file to your Desktop.

    OR from this location Here

    • After the installation IS complete let it update if it asks.
    • Under SETTINGS.....APPLICATIONS leave everything at default
    • Under SETTINGS.....PROTECTION make sure AUTOMATIC QUARANTINE is on.
    • Then go to the Dashboard and click on SCAN NOW
    • When the scan is finished click on EXPORT SUMMARY......COPY TO CLIPBOARD
    • Then come back to this thread and and under REPLY TO THIS TOPIC, right click in the reply and select Paste
    • Then click on POST
    • Exit Malwarebytes


    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~`

    Emsisoft Emergency Kit

    Please download Emsisoft Emergency Kit and save it to your desktop. Double click on the EmsisoftEmergencyKit file you downloaded to extract its contents and create a shortcut on the desktop. Leave all settings as they are and click the Extract button at the bottom. A folder named EEK will be created in the root of the drive (usually c:\).
    1. After extraction please double-click on the new Start Emsisoft Emergency Kit icon on your desktop.
    2. The first time you launch it, Emsisoft Emergency Kit will recommend that you allow it to download updates. Please click Yes so that it downloads the latest database updates.
    3. When update is complete, click Malware Scan. When asked if you want the scanner to scan for Potentially Unwanted Programs, click Yes. Emsisoft Emergency Kit will start scanning.
    4. When the scan is completed click Quarantine selected objects. Note, this option is only available if malicious objects were detected during the scan.
    5. When the threats have been quarantined, click the View report button in the lower-right corner, and the scan log will be opened in Notepad.
    6. Please save the log in Notepad on your desktop and post the contents in your next reply.
    7. When you close Emsisoft Emergency Kit, it will give you an option to sign up for a newsletter. This is optional, and is not necessary for the malware removal process.


    ~~

    Please post these 2 logs when finished, also tell me what the computer is doing now.
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.
    Want to help others? Join the ClassRoom and learn how.

  7. #7
    Member
    Join Date
    Jan 2013
    Posts
    67

    Default

    My computer is running without any issues. Thanks a million for your help.

    Malwarebytes
    www.malwarebytes.com

    -Log Details-
    Scan Date: 7/20/17
    Scan Time: 12:37 PM
    Log File:
    Administrator: Yes

    -Software Information-
    Version: 3.1.2.1733
    Components Version: 1.0.139
    Update Package Version: 1.0.2404
    License: Trial

    -System Information-
    OS: Windows 10
    CPU: x64
    File System: NTFS
    User: G751\Asus

    -Scan Summary-
    Scan Type: Threat Scan
    Result: Completed
    Objects Scanned: 400338
    Threats Detected: 0
    (No malicious items detected)
    Threats Quarantined: 0
    (No malicious items detected)
    Time Elapsed: 1 min, 28 sec

    -Scan Options-
    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Disabled
    Heuristics: Enabled
    PUP: Enabled
    PUM: Enabled

    -Scan Details-
    Process: 0
    (No malicious items detected)

    Module: 0
    (No malicious items detected)

    Registry Key: 0
    (No malicious items detected)

    Registry Value: 0
    (No malicious items detected)

    Registry Data: 0
    (No malicious items detected)

    Data Stream: 0
    (No malicious items detected)

    Folder: 0
    (No malicious items detected)

    File: 0
    (No malicious items detected)

    Physical Sector: 0
    (No malicious items detected)


    (end)

    Emsisoft Emergency Kit - Version 2017.6
    Last update: 20/07/2017 12:48:57
    User account: G751\Asus
    Computer name: G751
    OS version: Windows 10x64

    Scan settings:

    Scan type: Malware Scan
    Objects: Rootkits, Memory, Traces, Files

    Detect PUPs: On
    Scan archives: Off
    Scan mail archives: Off
    ADS Scan: On
    File extension filter: Off
    Direct disk access: Off

    Scan start: 20/07/2017 12:50:05

    Scanned 87305
    Found 0

    Scan end: 20/07/2017 12:51:14
    Scan time: 0:01:09

  8. #8
    Security Expert Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    3,297

    Default

    I think your good to go.

    DelFix

    • Please download DelFix or from Here and save the file to your Desktop.
    • Double-click DelFix.exe to run the programme.
    • Place a checkmark next to the following items:
    • Activate UAC
    • Remove disinfection tools
    • Click the Run button.
    • -- This will remove the specialized tools we used to disinfect your system.
      Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete
      ).

    ********
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.
    Want to help others? Join the ClassRoom and learn how.

  9. #9
    Member
    Join Date
    Jan 2013
    Posts
    67

    Default

    That's great. Thanks so much. Have a great day.

  10. #10
    Security Expert Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    3,297

    Default

    Glad we could help.

    Since this issue appears resolved ... this Topic is closed.
    Last edited by Juliet; 2017-08-10 at 23:35.
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.
    Want to help others? Join the ClassRoom and learn how.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •