Page 1 of 2 12 LastLast
Results 1 to 10 of 11

Thread: Suspicious Files

  1. #1
    Member
    Join Date
    Jan 2013
    Posts
    73

    Default Suspicious Files

    Hi - My Anti- Virus software has detected a number of suspicious files including InstallCore.qdm. Please could you assist to ensure this malware is correctly removed? In addition when I attempt to download aswMBR Log my laptop creates an error message and autorestarts?

    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20.06.2018
    Ran by Asus (administrator) on G751 (23-06-2018 10:10:04)
    Running from C:\Users\Asus\Downloads
    Loaded Profiles: Asus (Available Profiles: Asus)
    Platform: Windows 10 Home Version 1803 17134.112 (X64) Language: English (United Kingdom)
    Internet Explorer Version 11 (Default browser: FF)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
    (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
    (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
    (Intel) C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe
    (Foolish IT LLC) C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventMonSvc.exe
    (Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
    (Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
    (Intel Corporation) C:\Windows\System32\ibtsiva.exe
    (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
    (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
    (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
    (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
    (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Gaming Center\vivokey.exe
    (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
    () C:\Program Files\pia_manager\pia_manager.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
    () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe
    (Microsoft Corporation) C:\Windows\System32\smartscreen.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
    (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
    () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\Video.UI.exe
    (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
    (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
    (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
    (Foolish IT LLC) C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventNotification.exe
    (Intel) C:\Program Files (x86)\Intel Driver and Support Assistant\DSATray.exe
    () C:\Windows\SysWOW64\UMonit64.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
    (hxxp://www.ruby-lang.org/) C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\bin\rubyw.exe
    () C:\Program Files\pia_manager\pia_manager.exe
    (hxxp://www.ruby-lang.org/) C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\bin\rubyw.exe
    (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
    (The NWJS Community) C:\Program Files\pia_manager\nwjs\pia_nw.exe
    (The NWJS Community) C:\Program Files\pia_manager\nwjs\pia_nw.exe
    (The NWJS Community) C:\Program Files\pia_manager\nwjs\pia_nw.exe
    (The NWJS Community) C:\Program Files\pia_manager\nwjs\pia_nw.exe
    (The NWJS Community) C:\Program Files\pia_manager\nwjs\pia_nw.exe
    () C:\Program Files\pia_manager\openvpn.exe
    (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    (Farbar) C:\Users\Asus\Downloads\FRST64(1).exe

    ==================== Registry (Whitelisted) ===========================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
    HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3348712 2015-07-22] (ELAN Microelectronics Corp.)
    HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [98024 2018-05-30] (Avira Operations GmbH & Co. KG)
    HKLM-x32\...\Run: [DSATray] => C:\Program Files (x86)\Intel Driver and Support Assistant\DsaTray.exe [136952 2018-05-30] (Intel)
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.mod <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\wrmXNhWbacF.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.shb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.msp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: surprise.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.paf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.48s <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.inx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: syskey.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\{213D7F33-4942-1C20-3D56=8-1A0B31CDFFF3}.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.rex <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.p <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.bin <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: lsassvrtdbks.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.48s <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.job <==== ATTENTION
    HKLM Group Policy restriction on software: 7_Sp.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.url <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\dsadee.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.shs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.com <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %systemdrive%\dccon.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.msc <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.ns <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.ins <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: commerc.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.ins <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.mod <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.application <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.lua <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.klx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %programfiles(x86)%\*\svchost.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %systemdrive%\netpass.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.rex <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.paf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.48s <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\random\random.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.jse <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\drvpci.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.adp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.inx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.js <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.mde <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.msp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.xml <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.bat <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.reg <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.adp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.rex <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.msi <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %systemdrive%\*\svchost.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.xml <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\software.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.mst <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.job <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.shs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.url <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.application <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\windrv.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.pys <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: scsvserv.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.bin <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: pokemongo.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.chm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.sct <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\cryptohost.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.ins <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.inf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.ns <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.mde <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\Pokemon\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.com <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: PDFBewerbungsmappe.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.bat <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\freegaza_israeli_killers.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.com <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\new.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.ins <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.mod <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.job <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: deleteMyProgram.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\bbv.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.job <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.msp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.shs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.com <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.shs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\MS\Def*nder.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.js <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.com <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.com <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.msp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.ins <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\RegAsm.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.job <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.js <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.shs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.rex <==== ATTENTION
    HKLM Group Policy restriction on software: kek.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.sct <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.phps <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.application <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.pys <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\clean.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.shs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.chm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.inf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.paf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.vb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.phps <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.isu <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.isp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.jar <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.jse <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.job <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.vb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.mst <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\delback.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.hta <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.shs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.application <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.lua <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.shb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.msp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\rkcl\rkcl.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.shs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.inf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.job <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %systemdrive%\mount.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.vb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.bin <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\svchost.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\svchost.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.bin <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.ins <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.ade <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\imgdesktop.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.pif <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.scr <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.com <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.inf <==== ATTENTION
    HKLM Group Policy restriction on software: magic.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.application <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.jse <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.mst <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.shs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.url <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.sct <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.msi <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.inx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.com <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.bas <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: cipher.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.com <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.p <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\IKvtxoiPx.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.bin <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.application <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*\svchost.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.reg <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.application <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.ins <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.job <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\arra.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.com <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.pys <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\Calipso\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.chm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %systemdrive%\Mount.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Windows\csrss.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: vssadmin.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.adp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.p <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.mde <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.bas <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.bin <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.bin <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.paf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.application <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.com <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.xml <==== ATTENTION
    HKLM Group Policy restriction on software: extratools.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.js <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %localappdata%\MS\app_roaming.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.mde <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.bas <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.bin <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.rex <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\winpnp.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.isp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.ins <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.shs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.jar <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.scr <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.pif <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\x86.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.reg <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: msoyasdx.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: lsassw86s.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.mod <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.msp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: WifiHack.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.com <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.url <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.ns <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\Ponmsiyyks.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %systemdrive%\dcrypt.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.js <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.ade <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.paf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.pys <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\processor.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\uTorrent.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.isu <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.msp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.com <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Steg\steg.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\IEUpdate\*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.msc <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\windefrag.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.com <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.lua <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.com <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.sct <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.sct <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.job <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %programfiles%\*\svchost.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %systemdrive%\Network Prosoft\* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.lua <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.frm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ins <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.bin <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.chm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.jse <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\dbddbccdf.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %temp%\x64.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.pls <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.url <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.ns <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.xml <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.lua <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.bat <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.msh* <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.xml <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.js <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.bas <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.job <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.inf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.url <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.com <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\rkcl\ldr.exe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.isp <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.mod <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ade <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.jse <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.vbe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.application <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.paf <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.mst <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.mod <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.bas <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.rex <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.job <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.phps <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.xml <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.url <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.lua <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.nsf <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.rex <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.lua <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.isp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.application <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.isp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.klx <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.sct <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.shb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.ins <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.scf <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.paf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.mde <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.reg <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.shs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.bat <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.isu <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.scr <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.u3p <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.jar <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.vbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.crt <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default.migrated\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.bat <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.pys <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.xcs <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.cfxb <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.adp <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.scr <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.wwb <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.bin <==== ATTENTION
    HKLM Group Policy restriction on software: *:\$Recycle.Bin\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*.bas <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.url <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.92bs <==== ATTENTION
    HKLM Group Policy restriction on software: *\u202e*.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.url <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.scf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.chm <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.ade <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z.reg <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.msi <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.tcls <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.pif <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.adp <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.application <==== ATTENTION
    HKLM Group Policy restriction on software: %appdata%\*\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.shb <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.psc* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.frm <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.msc <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.hlp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.48s <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.chm <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.ps2* <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.msp <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.application <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\*.jar <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.job <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.frm <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\*.rx* <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx.mdb <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt.jse <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.js <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.rbs <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.ws* <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\*.vb <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.ps1* <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf.scr <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.pls <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf.inf <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.application <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi.rgs <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.isp <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default User\*.gadget <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Asus\*.klx <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Public\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.url <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.cmd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\All Users\*.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma.sct <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx.url <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\*.mod <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc.mst <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4.shs <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub.scsb <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.paf <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.inx <==== ATTENTION
    HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.vbscript <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpg.ocx <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav.hta <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.hta <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip.pif <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt.ns <==== ATTENTION
    HKLM Group Policy restriction on software: *.png.crt <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif.cpl <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv.bin <==== ATTENTION
    HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.p <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp.phps <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg.pcd <==== ATTENTION
    HKLM Group Policy restriction on software: C:\Users\Default\*.ade <==== ATTENTION
    Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
    HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
    HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CryptoPrevent QuickAccess.lnk [2018-05-19]
    ShortcutTarget: CryptoPrevent QuickAccess.lnk -> C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventNotification.exe (Foolish IT LLC)

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    Tcpip\Parameters: [DhcpNameServer] 209.222.18.222 209.222.18.218
    Tcpip\..\Interfaces\{0D965674-BE72-4C00-89A6-12DABA2E3D41}: [DhcpNameServer] 209.222.18.222 209.222.18.218
    Tcpip\..\Interfaces\{157e65e7-f19b-4b65-a652-a21449e454b0}: [DhcpNameServer] 209.222.18.222 209.222.18.218
    Tcpip\..\Interfaces\{393fa94b-b120-4975-b77e-232db1e7b021}: [DhcpNameServer] 192.168.1.1 192.168.1.1
    Tcpip\..\Interfaces\{fecea169-4f93-47db-a55a-fe794f631e7f}: [DhcpNameServer] 0.0.0.0

    Internet Explorer:
    ==================
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.msn.com/?pc=SK2M&ocid=SK2MDHP&osmkt=en-gb
    SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

    FireFox:
    ========
    FF DefaultProfile: ezak7yij.default-1478936043390-1500371527213
    FF ProfilePath: C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\ezak7yij.default-1478936043390-1500371527213 [2018-06-23]
    FF Extension: (Grammarly for Firefox) - C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\ezak7yij.default-1478936043390-1500371527213\Extensions\87677a2c52b84ad3a151a4a72f5bd3c4@jetpack.xpi [2018-05-18]
    FF Extension: (English (GB) Language Pack) - C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\ezak7yij.default-1478936043390-1500371527213\Extensions\langpack-en-GB@firefox.mozilla.org.xpi [2018-05-10]
    FF Extension: (uBlock Origin) - C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\ezak7yij.default-1478936043390-1500371527213\Extensions\uBlock0@raymondhill.net.xpi [2018-06-14]
    FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_30_0_0_113.dll [2018-06-09] ()
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_113.dll [2018-06-09] ()
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
    FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN)
    FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN)
    FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN)
    FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN)
    FF Plugin-x32: @videolan.org/vlc,version=3.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN)

    Chrome:
    =======
    CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
    CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

    ==================== Services (Whitelisted) ====================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [879128 2018-06-20] (Avira Operations GmbH & Co. KG)
    R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [224472 2018-06-20] (Avira Operations GmbH & Co. KG)
    R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [224472 2018-06-20] (Avira Operations GmbH & Co. KG)
    S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1164808 2018-06-20] (Avira Operations GmbH & Co. KG)
    R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [452352 2018-05-30] (Avira Operations GmbH & Co. KG)
    S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
    S3 CryptoPreventEmail; C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventMonSvc.exe [843760 2018-04-25] (Foolish IT LLC)
    R3 CryptoPreventFolderWatch; C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventMonSvc.exe [843760 2018-04-25] (Foolish IT LLC)
    R2 CryptoPreventMonSvc; C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventMonSvc.exe [843760 2018-04-25] (Foolish IT LLC)
    R2 DSAService; C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe [23288 2018-05-30] (Intel)
    U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-09-19] (Hi-Rez Studios) [File not signed]
    R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89864 2014-12-11] (Hewlett-Packard Company)
    R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [190208 2016-11-11] (Intel Corporation)
    S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
    S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [File not signed]
    R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
    S3 Intel(R) SUR QC SAM; C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel Corporation)
    R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
    R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes)
    S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
    R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
    R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [4088608 2016-09-21] (Safer-Networking Ltd.) [File not signed]
    S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [235984 2016-11-24] (Safer-Networking Ltd.) [File not signed]
    S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
    S3 ThunderboltService; C:\Program Files\Intel\Thunderbolt Software\tbtsvc.exe [1179944 2014-05-13] (Intel Corporation)
    S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4451616 2018-04-12] (Microsoft Corporation)
    S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105344 2018-04-12] (Microsoft Corporation)
    R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000

    ===================== Drivers (Whitelisted) ======================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R3 AsusTP; C:\WINDOWS\System32\drivers\AsusTP.sys [128024 2017-03-09] (ASUS Corporation)
    R0 avdevprot; C:\WINDOWS\System32\DRIVERS\avdevprot.sys [60920 2017-06-16] (Avira Operations GmbH & Co. KG)
    R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [179376 2018-05-09] (Avira Operations GmbH & Co. KG)
    R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [169864 2018-05-09] (Avira Operations GmbH & Co. KG)
    R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [44488 2017-03-02] (Avira Operations GmbH & Co. KG)
    R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [88488 2017-03-02] (Avira Operations GmbH & Co. KG)
    S3 btmhsf; C:\WINDOWS\system32\DRIVERS\btmhsf.sys [1424184 2014-04-22] (Motorola Solutions, Inc.)
    R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
    U5 GeneStor; C:\Windows\System32\Drivers\GeneStor.sys [107208 2014-01-17] (GenesysLogic)
    R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [230144 2016-11-11] (Intel Corporation)
    R0 IntelHSWPcc; C:\WINDOWS\System32\drivers\IntelPcc.sys [77992 2014-08-04] (Intel Corporation)
    R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [28912 2014-05-21] (Intel Corporation)
    R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
    R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253664 2018-06-23] (Malwarebytes)
    R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation)
    R3 Microsoft_Bluetooth_AvrcpTransport; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.AvrcpTransport.sys [46592 2018-04-12] (Microsoft Corporation)
    R3 NETwNb64; C:\WINDOWS\system32\DRIVERS\Netwbw02.sys [3525896 2016-11-09] (Intel Corporation)
    R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvam.inf_amd64_45d4f41b93b9677a\nvlddmkm.sys [14461344 2017-06-14] (NVIDIA Corporation)
    S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
    R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
    R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [895256 2015-07-07] (Realtek )
    S3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [41512 2018-01-11] ()
    S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44616 2018-04-12] (Microsoft Corporation)
    S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [331680 2018-04-12] (Microsoft Corporation)
    S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [44032 2018-04-12] (Microsoft Corporation)
    R3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [63840 2015-06-06] (Intel Corporation)
    R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2017-07-20] (Zemana Ltd.)

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2018-06-23 10:09 - 2018-06-23 10:09 - 002412544 _____ (Farbar) C:\Users\Asus\Downloads\FRST64(1).exe
    2018-06-23 10:06 - 2018-06-23 10:06 - 005198336 _____ (AVAST Software) C:\Users\Asus\Downloads\aswMBR(2).exe
    2018-06-23 10:03 - 2018-06-23 10:04 - 005198336 _____ (AVAST Software) C:\Users\Asus\Downloads\aswMBR(1).exe
    2018-06-23 10:02 - 2018-06-23 10:07 - 000000093 _____ C:\Users\Asus\AppData\Roaming\sp_data.sys
    2018-06-23 10:01 - 2018-06-23 10:01 - 005198336 _____ (AVAST Software) C:\Users\Asus\Downloads\aswMBR.exe
    2018-06-23 09:57 - 2018-06-23 09:59 - 000062263 _____ C:\Users\Asus\Downloads\Addition.txt
    2018-06-23 09:56 - 2018-06-23 10:10 - 000297524 _____ C:\Users\Asus\Downloads\FRST.txt
    2018-06-23 09:54 - 2018-06-23 10:10 - 000000000 ____D C:\FRST
    2018-06-23 09:53 - 2018-06-23 09:53 - 002412544 _____ (Farbar) C:\Users\Asus\Downloads\FRST64.exe
    2018-06-23 09:53 - 2018-06-23 09:53 - 000000000 ____D C:\RegBackup
    2018-06-23 09:52 - 2018-06-23 09:53 - 000017981 _____ C:\WINDOWS\Tweaking.com - Registry Backup Setup Log.txt
    2018-06-23 09:52 - 2018-06-23 09:52 - 005766144 _____ (Tweaking.com) C:\Users\Asus\Downloads\tweaking.com_registry_backup_setup.exe
    2018-06-23 09:52 - 2018-06-23 09:52 - 000002314 _____ C:\Users\Public\Desktop\Tweaking.com - Registry Backup.lnk
    2018-06-23 09:52 - 2018-06-23 09:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
    2018-06-23 09:52 - 2018-06-23 09:52 - 000000000 ____D C:\Program Files (x86)\Tweaking.com
    2018-06-20 06:29 - 2018-06-20 06:29 - 053057968 _____ (London Trust Media, Inc. ) C:\Users\Asus\Downloads\pia-v81-installer-win.exe
    2018-06-19 06:04 - 2018-06-23 10:07 - 000000000 ____D C:\WINDOWS\Minidump
    2018-06-12 21:25 - 2018-06-08 20:07 - 000506184 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
    2018-06-12 21:25 - 2018-06-08 20:05 - 000094112 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
    2018-06-12 21:25 - 2018-06-08 20:02 - 004527680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
    2018-06-12 21:25 - 2018-06-08 20:02 - 001634808 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
    2018-06-12 21:25 - 2018-06-08 20:02 - 000661160 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
    2018-06-12 21:25 - 2018-06-08 20:01 - 002395056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
    2018-06-12 21:25 - 2018-06-08 20:01 - 001046944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
    2018-06-12 21:25 - 2018-06-08 19:48 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
    2018-06-12 21:25 - 2018-06-08 19:47 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
    2018-06-12 21:25 - 2018-06-08 19:46 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
    2018-06-12 21:25 - 2018-06-08 19:45 - 012712448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
    2018-06-12 21:25 - 2018-06-08 19:45 - 004392448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
    2018-06-12 21:25 - 2018-06-08 19:45 - 001560576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdt.exe
    2018-06-12 21:25 - 2018-06-08 19:45 - 000808960 _____ C:\WINDOWS\system32\MBR2GPT.EXE
    2018-06-12 21:25 - 2018-06-08 19:44 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
    2018-06-12 21:25 - 2018-06-08 19:44 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
    2018-06-12 21:25 - 2018-06-08 19:44 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
    2018-06-12 21:25 - 2018-06-08 19:44 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
    2018-06-12 21:25 - 2018-06-08 19:43 - 003640832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
    2018-06-12 21:25 - 2018-06-08 19:43 - 002922496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
    2018-06-12 21:25 - 2018-06-08 19:43 - 001719808 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
    2018-06-12 21:25 - 2018-06-08 19:43 - 001659904 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
    2018-06-12 21:25 - 2018-06-08 19:43 - 001543680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
    2018-06-12 21:25 - 2018-06-08 19:43 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
    2018-06-12 21:25 - 2018-06-08 19:43 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
    2018-06-12 21:25 - 2018-06-08 19:42 - 003999232 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
    2018-06-12 21:25 - 2018-06-08 19:42 - 003653120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
    2018-06-12 21:25 - 2018-06-08 19:42 - 002084864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
    2018-06-12 21:25 - 2018-06-08 19:42 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
    2018-06-12 21:25 - 2018-06-08 19:42 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
    2018-06-12 21:25 - 2018-06-08 19:41 - 002019840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
    2018-06-12 21:25 - 2018-06-08 19:41 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
    2018-06-12 21:25 - 2018-06-08 19:41 - 000878080 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
    2018-06-12 21:25 - 2018-06-08 19:41 - 000758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
    2018-06-12 21:25 - 2018-06-08 19:41 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
    2018-06-12 21:25 - 2018-06-08 19:41 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
    2018-06-12 21:25 - 2018-06-08 19:40 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXP.dll
    2018-06-12 21:25 - 2018-06-08 18:04 - 001454024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
    2018-06-12 21:25 - 2018-06-08 17:58 - 002206544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
    2018-06-12 21:25 - 2018-06-08 17:58 - 000917408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
    2018-06-12 21:25 - 2018-06-08 17:51 - 011903488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
    2018-06-12 21:25 - 2018-06-08 17:50 - 001508352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdt.exe
    2018-06-12 21:25 - 2018-06-08 17:48 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
    2018-06-12 21:25 - 2018-06-08 17:48 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
    2018-06-12 21:25 - 2018-06-08 17:47 - 003492864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
    2018-06-12 21:25 - 2018-06-08 17:47 - 002895872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
    2018-06-12 21:25 - 2018-06-08 17:47 - 001462784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dui70.dll
    2018-06-12 21:25 - 2018-06-08 17:47 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
    2018-06-12 21:25 - 2018-06-08 17:47 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
    2018-06-12 21:25 - 2018-06-08 17:47 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
    2018-06-12 21:25 - 2018-06-08 17:46 - 003444224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
    2018-06-12 21:25 - 2018-06-08 17:46 - 002016256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
    2018-06-12 21:25 - 2018-06-08 17:46 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
    2018-06-12 21:25 - 2018-06-08 17:45 - 002401280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
    2018-06-12 21:25 - 2018-06-08 17:06 - 000976384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
    2018-06-12 21:25 - 2018-06-08 17:05 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
    2018-06-12 21:25 - 2018-06-08 17:05 - 000944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
    2018-06-12 21:25 - 2018-06-08 15:00 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
    2018-06-12 21:25 - 2018-06-08 15:00 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
    2018-06-12 21:25 - 2018-06-08 11:38 - 005821544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
    2018-06-12 21:25 - 2018-06-08 11:37 - 002417840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
    2018-06-12 21:25 - 2018-06-08 11:35 - 001613200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
    2018-06-12 21:25 - 2018-06-08 11:35 - 000613144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
    2018-06-12 21:25 - 2018-06-08 11:34 - 001299056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
    2018-06-12 21:25 - 2018-06-08 11:34 - 000748512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
    2018-06-12 21:25 - 2018-06-08 11:31 - 007900984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
    2018-06-12 21:25 - 2018-06-08 11:31 - 003180176 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
    2018-06-12 21:25 - 2018-06-08 11:31 - 000029600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uefi.sys
    2018-06-12 21:25 - 2018-06-08 11:30 - 000705440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
    2018-06-12 21:25 - 2018-06-08 10:34 - 001140576 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
    2018-06-12 21:25 - 2018-06-08 10:34 - 000983016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
    2018-06-12 21:25 - 2018-06-08 10:33 - 001213368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
    2018-06-12 21:25 - 2018-06-08 10:33 - 001034632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
    2018-06-12 21:25 - 2018-06-08 10:33 - 000272296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
    2018-06-12 21:25 - 2018-06-08 10:33 - 000269224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
    2018-06-12 21:25 - 2018-06-08 10:31 - 001174432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
    2018-06-12 21:25 - 2018-06-08 10:31 - 001012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
    2018-06-12 21:25 - 2018-06-08 10:31 - 000226720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ucx01000.sys
    2018-06-12 21:25 - 2018-06-08 10:30 - 009148320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
    2018-06-12 21:25 - 2018-06-08 10:30 - 003296896 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
    2018-06-12 21:25 - 2018-06-08 10:30 - 001798552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
    2018-06-12 21:25 - 2018-06-08 10:30 - 001363632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
    2018-06-12 21:25 - 2018-06-08 10:30 - 001063328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
    2018-06-12 21:25 - 2018-06-08 10:30 - 001017080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
    2018-06-12 21:25 - 2018-06-08 10:30 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
    2018-06-12 21:25 - 2018-06-08 10:30 - 000722808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
    2018-06-12 21:25 - 2018-06-08 10:30 - 000709824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
    2018-06-12 21:25 - 2018-06-08 10:30 - 000567184 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
    2018-06-12 21:25 - 2018-06-08 10:30 - 000565152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
    2018-06-12 21:25 - 2018-06-08 10:30 - 000527264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
    2018-06-12 21:25 - 2018-06-08 10:30 - 000491328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
    2018-06-12 21:25 - 2018-06-08 10:30 - 000194456 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
    2018-06-12 21:25 - 2018-06-08 10:30 - 000170912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
    2018-06-12 21:25 - 2018-06-08 10:30 - 000137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
    2018-06-12 21:25 - 2018-06-08 10:30 - 000134584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 007520000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 006817384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 004970360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 004403280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 003283408 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 002836384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
    2018-06-12 21:25 - 2018-06-08 10:29 - 002753048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 002590400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
    2018-06-12 21:25 - 2018-06-08 10:29 - 002570712 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 002564984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 002546592 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 002462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 002422688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
    2018-06-12 21:25 - 2018-06-08 10:29 - 002371392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 001946328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 001934400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 001921952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
    2018-06-12 21:25 - 2018-06-08 10:29 - 001792808 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 001784584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 001611592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 001457136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
    2018-06-12 21:25 - 2018-06-08 10:29 - 001364184 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 001288816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 001258288 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
    2018-06-12 21:25 - 2018-06-08 10:29 - 001209800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 001190152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 001150416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 001148808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 001112608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 001097648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 001026976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
    2018-06-12 21:25 - 2018-06-08 10:29 - 000945568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
    2018-06-12 21:25 - 2018-06-08 10:29 - 000885880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 000792992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
    2018-06-12 21:25 - 2018-06-08 10:29 - 000678840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 000659096 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 000594128 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
    2018-06-12 21:25 - 2018-06-08 10:29 - 000416144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 000413824 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 000413088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
    2018-06-12 21:25 - 2018-06-08 10:29 - 000375712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
    2018-06-12 21:25 - 2018-06-08 10:29 - 000313592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 000266656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 000260896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 000164768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
    2018-06-12 21:25 - 2018-06-08 10:29 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 000084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageOverlayUtil.dll
    2018-06-12 21:25 - 2018-06-08 10:29 - 000057960 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel.appcore.dll
    2018-06-12 21:25 - 2018-06-08 10:13 - 025846784 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
    2018-06-12 21:25 - 2018-06-08 10:12 - 000861616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
    2018-06-12 21:25 - 2018-06-08 10:12 - 000786176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
    2018-06-12 21:25 - 2018-06-08 10:11 - 001461744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
    2018-06-12 21:25 - 2018-06-08 10:11 - 000550616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
    2018-06-12 21:25 - 2018-06-08 10:10 - 002479272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
    2018-06-12 21:25 - 2018-06-08 10:10 - 002331584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
    2018-06-12 21:25 - 2018-06-08 10:10 - 002307336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
    2018-06-12 21:25 - 2018-06-08 10:10 - 001988072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
    2018-06-12 21:25 - 2018-06-08 10:10 - 001397200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
    2018-06-12 21:25 - 2018-06-08 10:10 - 001011992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
    2018-06-12 21:25 - 2018-06-08 10:10 - 000880152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
    2018-06-12 21:25 - 2018-06-08 10:10 - 000457152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
    2018-06-12 21:25 - 2018-06-08 10:10 - 000097176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 006569960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 006527064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 004788512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 004469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 002535552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 002486992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 002242216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 001980872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 001805776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 001709720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 001620880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 001584128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 001380200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 001129648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 001077504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 001020168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 000988136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 000770160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 000607648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 000568720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 000567144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 000553248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 000356960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 000064648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LanguageOverlayUtil.dll
    2018-06-12 21:25 - 2018-06-08 10:09 - 000050208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel.appcore.dll
    2018-06-12 21:25 - 2018-06-08 10:04 - 004706816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
    2018-06-12 21:25 - 2018-06-08 10:03 - 022005760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
    2018-06-12 21:25 - 2018-06-08 10:03 - 000906752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.PhoneNumberFormatting.dll
    2018-06-12 21:25 - 2018-06-08 10:03 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
    2018-06-12 21:25 - 2018-06-08 10:03 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
    2018-06-12 21:25 - 2018-06-08 10:03 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
    2018-06-12 21:25 - 2018-06-08 10:02 - 022713856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
    2018-06-12 21:25 - 2018-06-08 10:02 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
    2018-06-12 21:25 - 2018-06-08 10:02 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpnotify.exe
    2018-06-12 21:25 - 2018-06-08 10:02 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
    2018-06-12 21:25 - 2018-06-08 10:01 - 004563456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
    2018-06-12 21:25 - 2018-06-08 10:01 - 002961408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
    2018-06-12 21:25 - 2018-06-08 10:01 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
    2018-06-12 21:25 - 2018-06-08 10:01 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
    2018-06-12 21:25 - 2018-06-08 10:01 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
    2018-06-12 21:25 - 2018-06-08 10:01 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
    2018-06-12 21:25 - 2018-06-08 10:01 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
    2018-06-12 21:25 - 2018-06-08 10:01 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
    2018-06-12 21:25 - 2018-06-08 10:01 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
    2018-06-12 21:25 - 2018-06-08 10:00 - 019404288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
    2018-06-12 21:25 - 2018-06-08 10:00 - 004372992 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
    2018-06-12 21:25 - 2018-06-08 10:00 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
    2018-06-12 21:25 - 2018-06-08 10:00 - 001285120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
    2018-06-12 21:25 - 2018-06-08 10:00 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
    2018-06-12 21:25 - 2018-06-08 10:00 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
    2018-06-12 21:25 - 2018-06-08 10:00 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
    2018-06-12 21:25 - 2018-06-08 10:00 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
    2018-06-12 21:25 - 2018-06-08 10:00 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
    2018-06-12 21:25 - 2018-06-08 09:59 - 006032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
    2018-06-12 21:25 - 2018-06-08 09:59 - 004867072 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
    2018-06-12 21:25 - 2018-06-08 09:59 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
    2018-06-12 21:25 - 2018-06-08 09:59 - 001767936 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
    2018-06-12 21:25 - 2018-06-08 09:59 - 001318400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
    2018-06-12 21:25 - 2018-06-08 09:59 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
    2018-06-12 21:25 - 2018-06-08 09:59 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
    2018-06-12 21:25 - 2018-06-08 09:59 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
    2018-06-12 21:25 - 2018-06-08 09:59 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
    2018-06-12 21:25 - 2018-06-08 09:59 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
    2018-06-12 21:25 - 2018-06-08 09:59 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
    2018-06-12 21:25 - 2018-06-08 09:58 - 007581696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
    2018-06-12 21:25 - 2018-06-08 09:58 - 003712512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
    2018-06-12 21:25 - 2018-06-08 09:58 - 001676800 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll
    2018-06-12 21:25 - 2018-06-08 09:58 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
    2018-06-12 21:25 - 2018-06-08 09:58 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
    2018-06-12 21:25 - 2018-06-08 09:58 - 000813568 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
    2018-06-12 21:25 - 2018-06-08 09:58 - 000781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
    2018-06-12 21:25 - 2018-06-08 09:58 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
    2018-06-12 21:25 - 2018-06-08 09:58 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
    2018-06-12 21:25 - 2018-06-08 09:58 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
    2018-06-12 21:25 - 2018-06-08 09:57 - 003348992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
    2018-06-12 21:25 - 2018-06-08 09:57 - 002172416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
    2018-06-12 21:25 - 2018-06-08 09:57 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
    2018-06-12 21:25 - 2018-06-08 09:57 - 001485312 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
    2018-06-12 21:25 - 2018-06-08 09:57 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
    2018-06-12 21:25 - 2018-06-08 09:57 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
    2018-06-12 21:25 - 2018-06-08 09:57 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
    2018-06-12 21:25 - 2018-06-08 09:57 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
    2018-06-12 21:25 - 2018-06-08 09:57 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 005780992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 004336128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 003293696 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 002902016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 002900480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 001550848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 001395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
    2018-06-12 21:25 - 2018-06-08 09:56 - 000871424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 000869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 000715776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 000389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
    2018-06-12 21:25 - 2018-06-08 09:55 - 003441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
    2018-06-12 21:25 - 2018-06-08 09:55 - 002248192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
    2018-06-12 21:25 - 2018-06-08 09:55 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
    2018-06-12 21:25 - 2018-06-08 09:55 - 002061824 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
    2018-06-12 21:25 - 2018-06-08 09:55 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
    2018-06-12 21:25 - 2018-06-08 09:55 - 001371648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
    2018-06-12 21:25 - 2018-06-08 09:55 - 001242112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
    2018-06-12 21:25 - 2018-06-08 09:55 - 001192448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
    2018-06-12 21:25 - 2018-06-08 09:55 - 001171968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
    2018-06-12 21:25 - 2018-06-08 09:55 - 001160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
    2018-06-12 21:25 - 2018-06-08 09:55 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
    2018-06-12 21:25 - 2018-06-08 09:55 - 001033728 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
    2018-06-12 21:25 - 2018-06-08 09:55 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
    2018-06-12 21:25 - 2018-06-08 09:55 - 000849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
    2018-06-12 21:25 - 2018-06-08 09:55 - 000778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
    2018-06-12 21:25 - 2018-06-08 09:55 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
    2018-06-12 21:25 - 2018-06-08 09:55 - 000667648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
    2018-06-12 21:25 - 2018-06-08 09:55 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
    2018-06-12 21:25 - 2018-06-08 09:55 - 000630784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
    2018-06-12 21:25 - 2018-06-08 09:55 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
    2018-06-12 21:25 - 2018-06-08 09:55 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
    2018-06-12 21:25 - 2018-06-08 09:54 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
    2018-06-12 21:25 - 2018-06-08 09:54 - 002789376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
    2018-06-12 21:25 - 2018-06-08 09:54 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
    2018-06-12 21:25 - 2018-06-08 09:54 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
    2018-06-12 21:25 - 2018-06-08 09:54 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
    2018-06-12 21:25 - 2018-06-08 09:54 - 001128448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
    2018-06-12 21:25 - 2018-06-08 09:54 - 000999936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
    2018-06-12 21:25 - 2018-06-08 09:54 - 000950272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
    2018-06-12 21:25 - 2018-06-08 09:54 - 000857088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
    2018-06-12 21:25 - 2018-06-08 09:54 - 000842240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
    2018-06-12 21:25 - 2018-06-08 09:54 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll
    2018-06-12 21:25 - 2018-06-08 09:54 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
    2018-06-12 21:25 - 2018-06-08 09:54 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
    2018-06-12 21:25 - 2018-06-08 09:54 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
    2018-06-12 21:25 - 2018-06-08 09:54 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
    2018-06-12 21:25 - 2018-06-08 09:54 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
    2018-06-12 21:25 - 2018-06-08 09:54 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
    2018-06-12 21:25 - 2018-06-08 09:54 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
    2018-06-12 21:25 - 2018-06-08 09:53 - 001675264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
    2018-06-12 21:25 - 2018-06-08 09:53 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
    2018-06-12 21:25 - 2018-06-08 09:53 - 001108992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
    2018-06-12 21:25 - 2018-06-08 09:53 - 000873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
    2018-06-12 21:25 - 2018-06-08 09:53 - 000677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
    2018-06-12 21:25 - 2018-06-08 09:53 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
    2018-06-12 21:25 - 2018-06-08 09:53 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
    2018-06-12 21:25 - 2018-06-08 09:53 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
    2018-06-12 21:25 - 2018-06-08 08:41 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim
    2018-06-12 21:25 - 2018-06-06 19:57 - 003733320 _____ C:\WINDOWS\system32\Windows.Mirage.dll
    2018-06-12 21:25 - 2018-06-06 05:20 - 002841312 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
    2018-06-12 21:25 - 2018-06-02 00:24 - 000713376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
    2018-06-12 21:25 - 2018-06-01 23:54 - 001825792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
    2018-06-12 21:25 - 2018-05-25 04:24 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
    2018-06-12 21:25 - 2018-05-20 20:45 - 000308408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
    2018-06-12 21:25 - 2018-05-20 20:43 - 021389360 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
    2018-06-12 21:25 - 2018-05-20 20:42 - 001649760 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
    2018-06-12 21:25 - 2018-05-20 20:42 - 000759192 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
    2018-06-12 21:25 - 2018-05-20 20:26 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll
    2018-06-12 21:25 - 2018-05-20 20:23 - 004070400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
    2018-06-12 21:25 - 2018-05-20 20:23 - 000947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
    2018-06-12 21:25 - 2018-05-20 20:23 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
    2018-06-12 21:25 - 2018-05-20 20:22 - 001665024 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
    2018-06-12 21:25 - 2018-05-20 20:22 - 001292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
    2018-06-12 21:25 - 2018-05-20 20:22 - 000941056 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
    2018-06-12 21:25 - 2018-05-20 20:22 - 000804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
    2018-06-12 21:25 - 2018-05-20 19:15 - 000653208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
    2018-06-12 21:25 - 2018-05-20 19:14 - 020383712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
    2018-06-12 21:25 - 2018-05-20 19:14 - 001490144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
    2018-06-12 21:25 - 2018-05-20 19:02 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll
    2018-06-12 21:25 - 2018-05-20 19:00 - 000864768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
    2018-06-12 21:25 - 2018-05-20 18:59 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
    2018-06-12 21:25 - 2018-05-20 18:59 - 000747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
    2018-06-12 21:25 - 2018-05-20 17:59 - 023862784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
    2018-06-12 21:25 - 2018-05-20 17:45 - 001271296 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll
    2018-06-12 21:25 - 2018-05-20 17:39 - 000788480 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
    2018-06-12 21:25 - 2018-05-20 17:35 - 000677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HeadTrackerStorage.dll
    2018-06-12 21:25 - 2018-05-20 17:34 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloShellRuntime.dll
    2018-06-12 21:25 - 2018-05-20 15:54 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HoloShellRuntime.dll
    2018-06-12 21:25 - 2018-05-20 13:33 - 000105368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
    2018-06-12 21:25 - 2018-05-20 12:53 - 002178136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
    2018-06-12 21:25 - 2018-05-20 12:53 - 001947808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
    2018-06-12 21:25 - 2018-05-20 12:53 - 001017088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
    2018-06-12 21:25 - 2018-05-20 12:53 - 001012408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
    2018-06-12 21:25 - 2018-05-20 12:53 - 000131232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
    2018-06-12 21:25 - 2018-05-20 12:53 - 000088472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
    2018-06-12 21:25 - 2018-05-20 12:52 - 007436632 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
    2018-06-12 21:25 - 2018-05-20 12:52 - 000735560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
    2018-06-12 21:25 - 2018-05-20 12:52 - 000347704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
    2018-06-12 21:25 - 2018-05-20 12:52 - 000130456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
    2018-06-12 21:25 - 2018-05-20 12:52 - 000089984 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll
    2018-06-12 21:25 - 2018-05-20 12:34 - 016592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
    2018-06-12 21:25 - 2018-05-20 12:34 - 000861096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
    2018-06-12 21:25 - 2018-05-20 12:33 - 001665920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
    2018-06-12 21:25 - 2018-05-20 12:33 - 000101288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll
    2018-06-12 21:25 - 2018-05-20 12:32 - 006044104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
    2018-06-12 21:25 - 2018-05-20 12:32 - 001559368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
    2018-06-12 21:25 - 2018-05-20 12:32 - 001034096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
    2018-06-12 21:25 - 2018-05-20 12:32 - 000560488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
    2018-06-12 21:25 - 2018-05-20 12:32 - 000286200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
    2018-06-12 21:25 - 2018-05-20 12:32 - 000077040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll
    2018-06-12 21:25 - 2018-05-20 12:31 - 001456640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll
    2018-06-12 21:25 - 2018-05-20 12:30 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
    2018-06-12 21:25 - 2018-05-20 12:28 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
    2018-06-12 21:25 - 2018-05-20 12:28 - 000111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppHostRegistrationVerifier.exe
    2018-06-12 21:25 - 2018-05-20 12:28 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
    2018-06-12 21:25 - 2018-05-20 12:27 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
    2018-06-12 21:25 - 2018-05-20 12:27 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll
    2018-06-12 21:25 - 2018-05-20 12:26 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
    2018-06-12 21:25 - 2018-05-20 12:26 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
    2018-06-12 21:25 - 2018-05-20 12:26 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
    2018-06-12 21:25 - 2018-05-20 12:26 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
    2018-06-12 21:25 - 2018-05-20 12:26 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe
    2018-06-12 21:25 - 2018-05-20 12:26 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
    2018-06-12 21:25 - 2018-05-20 12:26 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUser.dll
    2018-06-12 21:25 - 2018-05-20 12:26 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSHEIF.dll
    2018-06-12 21:25 - 2018-05-20 12:25 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
    2018-06-12 21:25 - 2018-05-20 12:25 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
    2018-06-12 21:25 - 2018-05-20 12:24 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
    2018-06-12 21:25 - 2018-05-20 12:24 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
    2018-06-12 21:25 - 2018-05-20 12:24 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
    2018-06-12 21:25 - 2018-05-20 12:23 - 013873152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
    2018-06-12 21:25 - 2018-05-20 12:23 - 005951488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
    2018-06-12 21:25 - 2018-05-20 12:23 - 002366976 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
    2018-06-12 21:25 - 2018-05-20 12:23 - 000933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
    2018-06-12 21:25 - 2018-05-20 12:23 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
    2018-06-12 21:25 - 2018-05-20 12:21 - 001371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
    2018-06-12 21:25 - 2018-05-20 12:21 - 001303040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
    2018-06-12 21:25 - 2018-05-20 12:21 - 001210880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
    2018-06-12 21:25 - 2018-05-20 12:21 - 000960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
    2018-06-12 21:25 - 2018-05-20 12:21 - 000783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
    2018-06-12 21:25 - 2018-05-20 12:17 - 002699776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
    2018-06-12 21:25 - 2018-05-20 12:16 - 006661120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
    2018-06-12 21:25 - 2018-05-20 12:16 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
    2018-06-12 21:25 - 2018-05-20 12:16 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ApiSetHost.AppExecutionAlias.dll
    2018-06-12 21:25 - 2018-05-20 12:16 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
    2018-06-12 21:25 - 2018-05-20 12:15 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
    2018-06-12 21:25 - 2018-05-20 12:15 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSHEIF.dll
    2018-06-12 21:25 - 2018-05-20 12:14 - 001295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
    2018-06-12 21:25 - 2018-05-20 12:14 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe
    2018-06-12 21:25 - 2018-05-20 12:13 - 004929024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
    2018-06-12 21:25 - 2018-05-20 12:13 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
    2018-06-12 21:25 - 2018-05-20 12:12 - 000992768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
    2018-06-12 21:25 - 2018-05-20 12:12 - 000860160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
    2018-06-12 21:25 - 2018-05-20 12:11 - 001036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
    2018-06-12 21:25 - 2018-05-20 12:11 - 001005568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
    2018-06-12 21:25 - 2018-05-20 09:26 - 000018716 _____ C:\WINDOWS\system32\srms-apr.dat
    2018-06-12 21:25 - 2018-05-18 18:08 - 000018716 _____ C:\WINDOWS\SysWOW64\srms-apr.dat
    2018-06-11 19:52 - 2018-06-11 19:52 - 000001191 _____ C:\Users\Public\Desktop\Avira.lnk
    2018-06-11 04:53 - 2018-06-11 04:53 - 000000000 ____D C:\Users\Asus\Downloads\Intel Components
    2018-06-11 04:52 - 2018-06-18 04:53 - 000000000 ____D C:\Program Files (x86)\Intel Driver and Support Assistant
    2018-06-11 04:52 - 2018-06-11 04:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver and Support Assistant
    2018-06-11 04:51 - 2018-06-11 04:51 - 013903328 _____ (Intel) C:\Users\Asus\Downloads\Intel Driver and Support Assistant Installer(1).exe
    2018-06-08 08:33 - 2018-06-23 10:07 - 000253664 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
    2018-06-08 08:33 - 2018-06-08 08:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
    2018-06-08 08:32 - 2018-06-09 03:08 - 000152184 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
    2018-06-06 04:36 - 2018-06-20 06:30 - 000000953 _____ C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Reinstall TAP Driver.lnk
    2018-06-06 04:36 - 2018-06-20 06:30 - 000000921 _____ C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Private Internet Access.lnk
    2018-06-06 04:36 - 2018-06-20 06:30 - 000000906 _____ C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Uninstall Private Internet Access.lnk
    2018-06-06 04:36 - 2018-06-06 04:36 - 000000000 ____D C:\Users\Asus\AppData\Local\PrivateInternetAccess
    2018-06-06 04:35 - 2018-06-06 04:35 - 053121896 _____ (London Trust Media, Inc. ) C:\Users\Asus\Downloads\pia-v80-installer-win(1).exe
    2018-06-01 09:35 - 2018-06-01 09:35 - 015838840 _____ (Piriform Ltd) C:\Users\Asus\Downloads\ccsetup543 (1).exe
    2018-05-31 08:03 - 2018-05-31 08:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit)

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2018-06-23 10:10 - 2017-07-20 10:12 - 000032775 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
    2018-06-23 10:08 - 2018-05-14 06:43 - 000004144 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{31481147-3A5A-4832-888E-FFA8D7CBFAFF}
    2018-06-23 10:08 - 2016-11-18 09:20 - 000000000 ____D C:\Users\Asus\AppData\LocalLow\Mozilla
    2018-06-23 10:07 - 2018-05-14 06:43 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
    2018-06-23 10:07 - 2018-05-14 06:34 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
    2018-06-23 10:07 - 2017-08-14 10:33 - 000000000 ____D C:\ProgramData\ASUS Smart Gesture
    2018-06-23 10:07 - 2017-04-21 07:26 - 000000000 ____D C:\ProgramData\NVIDIA
    2018-06-23 10:07 - 2016-09-26 10:59 - 000000000 ____D C:\Program Files (x86)\Hi-Rez Studios
    2018-06-23 10:06 - 2016-05-30 08:35 - 000447141 ____N C:\WINDOWS\Minidump\062318-8125-01.dmp
    2018-06-23 10:04 - 2016-05-30 08:35 - 000447269 ____N C:\WINDOWS\Minidump\062318-9046-01.dmp
    2018-06-23 10:02 - 2018-05-14 06:35 - 000000000 ____D C:\Users\Asus
    2018-06-23 10:02 - 2016-05-30 08:35 - 001185325 ____N C:\WINDOWS\Minidump\062318-8093-01.dmp
    2018-06-23 09:58 - 2016-05-11 12:53 - 000000000 ____D C:\Users\Asus\AppData\Roaming\BitComet
    2018-06-23 09:41 - 2015-03-08 07:14 - 000000000 ____D C:\Users\Asus\AppData\Local\PokerStars.UK
    2018-06-23 09:30 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
    2018-06-23 09:30 - 2015-08-04 15:56 - 000000000 ____D C:\Users\Asus\AppData\Roaming\vlc
    2018-06-23 07:24 - 2018-05-14 06:44 - 000838560 _____ C:\WINDOWS\system32\PerfStringBackup.INI
    2018-06-23 07:24 - 2018-04-12 00:36 - 000000000 ____D C:\WINDOWS\INF
    2018-06-23 07:16 - 2018-04-11 22:04 - 000786432 _____ C:\WINDOWS\system32\config\BBI
    2018-06-23 07:09 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\AppReadiness
    2018-06-23 06:50 - 2018-05-14 06:43 - 000003354 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4202764557-1761152932-1492796901-1001
    2018-06-23 06:50 - 2018-05-14 06:35 - 000002402 _____ C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
    2018-06-23 06:50 - 2015-03-06 15:34 - 000000000 ___RD C:\Users\Asus\OneDrive
    2018-06-22 12:00 - 2018-05-14 06:43 - 000003550 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
    2018-06-22 12:00 - 2018-05-14 06:43 - 000003540 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
    2018-06-22 05:26 - 2018-04-12 00:38 - 000000000 ___HD C:\Program Files\WindowsApps
    2018-06-21 09:00 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
    2018-06-20 18:29 - 2015-12-18 04:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
    2018-06-20 06:30 - 2015-03-06 12:13 - 000000000 ____D C:\Program Files\pia_manager
    2018-06-18 09:50 - 2015-03-03 10:05 - 000000000 ____D C:\ProgramData\Temp
    2018-06-18 09:49 - 2015-03-12 22:26 - 000000000 ____D C:\Program Files (x86)\SpywareBlaster
    2018-06-17 13:00 - 2018-05-14 06:43 - 000004210 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
    2018-06-14 17:45 - 2015-08-02 13:21 - 000000000 ___RD C:\Users\Asus\3D Objects
    2018-06-14 17:45 - 2015-03-03 11:53 - 000000000 __RHD C:\Users\Public\AccountPictures
    2018-06-14 17:44 - 2018-05-14 06:34 - 000406712 _____ C:\WINDOWS\system32\FNTCACHE.DAT
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\yo-NG
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\wo-SN
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ti-ET
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\rw-RW
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ig-NG
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
    2018-06-14 17:43 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
    2018-06-14 17:43 - 2018-04-12 00:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
    2018-06-14 17:43 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\TextInput
    2018-06-14 17:43 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
    2018-06-14 17:43 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
    2018-06-14 17:43 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\en-GB
    2018-06-14 17:43 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
    2018-06-14 17:43 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
    2018-06-14 17:43 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
    2018-06-14 17:43 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\setup
    2018-06-14 17:43 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\oobe
    2018-06-14 17:43 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\en-GB
    2018-06-14 17:43 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\appraiser
    2018-06-14 17:43 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\ShellExperiences
    2018-06-14 17:43 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\bcastdvr
    2018-06-14 17:43 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\Windows Photo Viewer
    2018-06-14 17:43 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
    2018-06-14 17:43 - 2018-04-11 22:04 - 000000000 ____D C:\WINDOWS\system32\Dism
    2018-06-12 21:28 - 2018-04-11 08:23 - 000000000 ____D C:\WINDOWS\system32\MpEngineStore
    2018-06-12 21:28 - 2015-03-05 16:56 - 000000000 ____D C:\WINDOWS\system32\MRT
    2018-06-12 21:27 - 2018-04-12 00:30 - 000000000 ____D C:\WINDOWS\CbsTemp
    2018-06-12 21:27 - 2017-10-11 08:40 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
    2018-06-12 21:27 - 2015-03-05 16:56 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
    2018-06-11 19:52 - 2015-03-03 09:48 - 000000000 ____D C:\ProgramData\Package Cache
    2018-06-11 05:00 - 2018-05-14 06:43 - 000003834 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
    2018-06-11 04:52 - 2018-05-14 06:43 - 000003762 _____ C:\WINDOWS\System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132
    2018-06-11 04:52 - 2018-05-14 06:43 - 000003528 _____ C:\WINDOWS\System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon
    2018-06-09 00:30 - 2018-05-14 06:43 - 000004564 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier
    2018-06-09 00:30 - 2018-05-14 06:43 - 000004386 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
    2018-06-09 00:30 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
    2018-06-09 00:30 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\Macromed
    2018-06-07 09:45 - 2017-07-18 10:42 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
    2018-06-07 09:45 - 2015-06-20 06:14 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
    2018-06-07 08:16 - 2017-07-18 10:42 - 000001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
    2018-06-06 04:36 - 2018-05-14 06:43 - 000003304 _____ C:\WINDOWS\System32\Tasks\Private Internet Access Startup
    2018-06-06 04:29 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\NDF
    2018-06-06 00:29 - 2018-04-12 00:41 - 000835056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
    2018-06-06 00:29 - 2018-04-12 00:41 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
    2018-05-31 08:03 - 2016-05-11 12:53 - 000000855 _____ C:\Users\Public\Desktop\BitComet.lnk

    ==================== Files in the root of some directories =======

    2018-06-23 10:02 - 2018-06-23 10:07 - 000000093 _____ () C:\Users\Asus\AppData\Roaming\sp_data.sys
    2016-01-14 13:43 - 2016-01-14 13:43 - 000000017 _____ () C:\Users\Asus\AppData\Local\resmon.resmoncfg

    ==================== Bamital & volsnap ======================

    (There is no automatic fix for files that do not pass verification.)

    C:\WINDOWS\system32\winlogon.exe => File is digitally signed
    C:\WINDOWS\system32\wininit.exe => File is digitally signed
    C:\WINDOWS\explorer.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
    C:\WINDOWS\system32\svchost.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
    C:\WINDOWS\system32\services.exe => File is digitally signed
    C:\WINDOWS\system32\User32.dll => File is digitally signed
    C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
    C:\WINDOWS\system32\userinit.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
    C:\WINDOWS\system32\rpcss.dll => File is digitally signed
    C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
    C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
    C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

    LastRegBack: 2018-05-14 06:34

    ==================== End of FRST.txt ============================

  2. #2
    Member
    Join Date
    Jan 2013
    Posts
    73

    Default

    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20.06.2018
    Ran by Asus (23-06-2018 10:10:38)
    Running from C:\Users\Asus\Downloads
    Windows 10 Home Version 1803 17134.112 (X64) (2018-05-14 05:43:40)
    Boot Mode: Normal
    ==========================================================


    ==================== Accounts: =============================

    Administrator (S-1-5-21-4202764557-1761152932-1492796901-500 - Administrator - Disabled)
    Asus (S-1-5-21-4202764557-1761152932-1492796901-1001 - Administrator - Enabled) => C:\Users\Asus
    DefaultAccount (S-1-5-21-4202764557-1761152932-1492796901-503 - Limited - Disabled)
    Guest (S-1-5-21-4202764557-1761152932-1492796901-501 - Limited - Disabled)
    HomeGroupUser$ (S-1-5-21-4202764557-1761152932-1492796901-1003 - Limited - Enabled)
    WDAGUtilityAccount (S-1-5-21-4202764557-1761152932-1492796901-504 - Limited - Disabled)

    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
    AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: Spybot - Search and Destroy (Disabled - Up to date) {A16C3F68-9280-E053-1818-342707FECF4D}
    AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    ==================== Installed Programs ======================

    (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    . . (HKLM\...\{657DF44E-16FB-46D9-A2E6-476E54F694D3}) (Version: 7.1 - Intel) Hidden
    . . . (HKLM-x32\...\{94EBC126-1FC8-4528-859F-591460B2E7C2}) (Version: 3.4.0.4 - Intel) Hidden
    Adobe Flash Player 30 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 30.0.0.113 - Adobe Systems Incorporated)
    ASUS Gaming Center (HKLM-x32\...\{23C8A788-4790-4F3C-B103-0ACC7D9DC5BE}) (Version: 1.0.2 - ASUS)
    ASUS Intel Extreme Tuning Utility (HKLM-x32\...\{17933add-8de8-4586-b331-96f1070ae737}) (Version: 4.4.0.205 - Intel Corporation)
    ASUS Intel Extreme Tuning Utility (HKLM-x32\...\{64ACC44D-3538-4FF6-93B4-26334666D7E8}) (Version: 4.4.0.205 - Intel Corporation) Hidden
    ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.4.3 - ASUS)
    ASUS ROG Gaming Mouse (HKLM-x32\...\{3B9E171F-A955-4834-B877-447C0A437260}) (Version: 2.00.026 - ASUS)
    ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 2.0.5 - ASUS)
    ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 4.0.18 - ASUS)
    ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.02.0001 - ASUS)
    ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.0.1 - ASUS)
    ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0037 - ASUS)
    Avira (HKLM-x32\...\{606c7b25-e58d-4e72-82dd-4a0e4e163086}) (Version: 1.2.114.16977 - Avira Operations GmbH & Co. KG)
    Avira (HKLM-x32\...\{C7FA948A-FC14-4316-92DC-23AF70C55A10}) (Version: 1.2.114.16977 - Avira Operations GmbH & Co. KG) Hidden
    Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.36.200 - Avira Operations GmbH & Co. KG)
    BitComet 1.50 (HKLM-x32\...\BitComet_x64) (Version: 1.50 - CometNetwork)
    CCleaner (HKLM\...\CCleaner) (Version: 5.43 - Piriform)
    CyberLink MediaStory (HKLM-x32\...\InstallShield_{55762F9A-FCE3-45d5-817B-051218658423}) (Version: 1.0.1314 - CyberLink Corp.)
    CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.4105 - CyberLink Corp.)
    ELAN Touchpad 11.5.20.3_X64_WHQL (HKLM\...\Elantech) (Version: 11.5.20.3 - ELAN Microelectronic Corp.)
    Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.1.1 - Genesys Logic)
    Grammarly (HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\GrammarlyForWindows) (Version: 1.5.35 - Grammarly)
    Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
    HP ENVY 4500 series Basic Device Software (HKLM\...\{6915424E-704F-4F5D-9057-9C7B406B36DB}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)
    HP ENVY 4500 series Help (HKLM-x32\...\{95BECC50-22B4-4FCA-8A2E-BF77713E6D3A}) (Version: 30.0.0 - Hewlett Packard)
    HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
    HP Support Solutions Framework (HKLM-x32\...\{E35601C0-BA8E-4F32-919A-C7EF4CA81F67}) (Version: 11.51.0048 - Hewlett-Packard Company)
    HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
    Intel Collaborative Processor Performance Control (HKLM-x32\...\0E7DAF70-FB54-4B91-B192-7E771C25AEEB) (Version: 1.0.0.1016 - Intel Corporation)
    Intel(R) Chipset Device Software (HKLM-x32\...\{98f335cd-0a32-4b3f-b74c-ef9480e834f0}) (Version: 10.0.27 - Intel(R) Corporation) Hidden
    Intel(R) Computing Improvement Program (HKLM\...\{F6B5BD59-21F0-47F8-A6C6-63BAEB1A6569}) (Version: 2.1.03720 - Intel Corporation)
    Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation)
    Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 17.0.1419.2) (HKLM\...\{302600C1-6BDF-4FD1-1405-148929CC1385}) (Version: 17.0.1405.0464 - Intel Corporation)
    Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{5AE8ACA2-420B-4196-A8E0-20E8EB274E0F}) (Version: 17.1.1512.0771 - Intel Corporation)
    Intelģ Driver & Support Assistant (HKLM-x32\...\{917c2887-4ed0-4389-9b51-616905bcf34f}) (Version: 3.4.0.4 - Intel)
    Intelģ PROSet/Wireless Software (HKLM-x32\...\{6535d76a-59fb-4935-b2c5-cd61917c4a4b}) (Version: 17.16.0 - Intel Corporation)
    Intelģ Watchdog Timer Driver (Intelģ WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version: - Intel Corporation)
    Intelģ Watchdog Timer Driver (Intelģ WDT) (HKLM-x32\...\3FD0C489-0F02-481a-A3E1-9754CD396761) (Version: - Intel Corporation)
    Malwarebytes version 3.5.1.2522 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.5.1.2522 - Malwarebytes)
    Maxx Audio Installer (x64) (HKLM\...\{307032B2-6AF2-46D7-B933-62438DEB2B9A}) (Version: 2.6.6168.8 - Waves Audio Ltd.) Hidden
    Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
    Microsoft OneDrive (HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\OneDriveSetup.exe) (Version: 18.091.0506.0007 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
    Mozilla Firefox 60.0.2 (x64 en-GB) (HKLM\...\Mozilla Firefox 60.0.2 (x64 en-GB)) (Version: 60.0.2 - Mozilla)
    Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 54.0.1 - Mozilla)
    NVIDIA Miracast Virtual Audio 353.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 353.30 - NVIDIA Corporation)
    NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
    PokerStars.uk (HKLM-x32\...\PokerStars.uk) (Version: - PokerStars.uk)
    Private Internet Access v81 (HKLM-x32\...\{148169C2-5558-4C3E-B38A-7B1813A264CA}_is1) (Version: 81 - London Trust Media, Inc.)
    Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.38.115.2015 - Realtek)
    Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
    SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0280 - NVIDIA Corporation) Hidden
    SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
    Skypeô 7.39 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.39.102 - Skype Technologies S.A.)
    swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
    Thunderbolt(TM) Software (HKLM\...\{BED2816F-D47A-41DA-AFCF-44E1B257C368}) (Version: 2.0.4.250 - Intel(R) Corporation)
    Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 3.5.3 - Tweaking.com)
    VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.3 - VideoLAN)
    Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
    WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
    WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)

    ==================== Custom CLSID (Whitelisted): ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    ContextMenuHandlers1: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2014-05-06] (Cyberlink)
    ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer-Networking Ltd.)
    ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer-Networking Ltd.)
    ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2018-06-20] (Avira Operations GmbH & Co. KG)
    ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-02-04] (Alexander Roshal)
    ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2014-05-06] (Cyberlink)
    ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-06-08] (NVIDIA Corporation)
    ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer-Networking Ltd.)
    ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer-Networking Ltd.)
    ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2018-06-20] (Avira Operations GmbH & Co. KG)
    ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-02-04] (Alexander Roshal)

    ==================== Scheduled Tasks (Whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    Task: {0253208C-4A01-4EFB-86ED-409A6DF0D358} - System32\Tasks\Gaming Center => C:\Program Files (x86)\ASUS\ASUS Gaming Center\vivokey.exe [2014-04-30] (ASUSTek Computer Inc.)
    Task: {053ADE22-B090-48F8-8D13-F79091668C2D} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-06-24] (Realtek Semiconductor)
    Task: {103B5C55-4882-4864-9CDB-6F2E510069E0} - System32\Tasks\UMonitor Task => C:\Windows\SysWOW64\UMonit64.exe [2014-02-26] ()
    Task: {30AF1D62-4F22-4B4E-9F5C-0E73882CF8F3} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-05-24] (Piriform Ltd)
    Task: {30D43D98-B584-43C8-AA7B-5BBC50A99F9A} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-06-09] (Adobe Systems Incorporated)
    Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
    Task: {3D18483D-8BA7-4D89-A2BD-29BF6684661D} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [2017-07-13] (Intel Corporation)
    Task: {48D55967-09EC-4BEC-8D85-12AF7905A058} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-06-24] (Realtek Semiconductor)
    Task: {4D6BADFB-01A1-4A16-A883-9530D0A8BD3B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.)
    Task: {4ED3224B-376A-4398-8554-5454B3537CE4} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2017-03-09] (AsusTek)
    Task: {511EA81B-BD5A-4471-91E0-9D847A433E09} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
    Task: {63EC38C3-9118-46C2-A0A1-72362A8A42FD} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
    Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] ()
    Task: {7A28F1A7-0D9D-44B1-A5AC-92C91DDA69B3} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [2017-07-13] (Intel Corporation)
    Task: {7B8118BE-E7AD-4C82-93A4-6A0A4B7890EC} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
    Task: {804951AD-D924-48BE-BCEC-C4894B6A1C61} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
    Task: {8A8A8176-95CA-44AA-83FC-453ADE3570AC} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application when hardware is detected => Thunderbolt.exe
    Task: {979AB72D-F2CE-47C7-9030-CEAB83CC9D57} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2018-06-12] (Microsoft Corporation)
    Task: {97E5BA15-7F7B-410D-AA72-5D5D4E93D71C} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-06-11] (ASUSTek Computer Inc.)
    Task: {991E1FB0-5057-4627-AEC8-95082F525BB3} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.)
    Task: {99509CB0-0BDB-4192-8456-E3F94354B733} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_30_0_0_113_Plugin.exe [2018-06-09] (Adobe Systems Incorporated)
    Task: {9D564E4F-7555-4C05-A36F-96E84FAB404F} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service on boot if driver is up => tbtsvc.exe
    Task: {9DB2E73F-242B-4A34-8C54-6E83EB214422} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2014-06-03] (ASUS)
    Task: {9E7F0333-6C60-4600-8714-DD3236C561F5} - System32\Tasks\Private Internet Access Startup => C:/Program Files/pia_manager/pia_manager.exe [2018-06-18] ()
    Task: {A1664A1B-EF7C-4698-856B-952648A10F70} - System32\Tasks\Launch BitComet => C:\Program Files\BitComet\BitComet.exe [2018-05-03] (www.BitComet.com)
    Task: {BF58E3AD-1EBB-4C04-A283-5C6589F4A74C} - \CCleanerSkipUAC -> No File <==== ATTENTION
    Task: {C6CE6890-6B30-481D-84AA-B6A253709F4D} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-07-09] (ASUSTek Computer Inc.)
    Task: {C8421AF5-F803-4594-967C-4453476E05F0} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2018-06-20] (Avira Operations GmbH & Co. KG)
    Task: {D1419E84-1291-4BC1-83EA-003166B48E69} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
    Task: {E1202477-C56C-4D96-89AD-D3C48E48D598} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on login if service is up => Thunderbolt.exe
    Task: {F02F7FED-0FD0-45F1-BB2B-B9DBAF23B3C4} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
    Task: {FA27B8E7-A12F-4B14-8FCE-7E3AAD6BBE31} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service when hardware is detected => sc start ThunderboltService

    (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


    ==================== Shortcuts & WMI ========================

    (The entries could be listed to be restored or removed.)


    ==================== Loaded Modules (Whitelisted) ==============

    2018-04-12 00:34 - 2018-04-12 00:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll
    2018-06-08 08:33 - 2018-06-09 03:08 - 002297040 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
    2015-03-06 12:13 - 2018-06-18 13:49 - 015732968 _____ () C:\Program Files\pia_manager\pia_manager.exe
    2018-04-12 00:34 - 2018-04-12 00:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll
    2018-04-12 00:34 - 2018-04-12 00:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
    2018-06-12 21:25 - 2018-06-08 09:56 - 002185216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
    2018-05-22 20:59 - 2018-05-22 20:59 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe
    2018-05-22 20:59 - 2018-05-22 20:59 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
    2018-05-22 20:59 - 2018-05-22 20:59 - 022374400 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkyWrap.dll
    2018-05-22 20:59 - 2018-05-22 20:59 - 002610176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\skypert.dll
    2018-05-22 20:59 - 2018-05-22 20:59 - 000654848 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll
    2018-06-01 20:24 - 2018-06-01 20:24 - 027118080 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\Video.UI.exe
    2018-05-26 14:45 - 2018-05-26 14:45 - 000306176 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\SharedUI.dll
    2018-05-26 14:45 - 2018-05-26 14:45 - 006748672 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\EntCommon.dll
    2017-09-26 17:46 - 2017-09-26 17:46 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
    2018-05-26 14:45 - 2018-05-26 14:45 - 009358848 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\EntPlat.dll
    2015-03-03 09:59 - 2014-02-26 04:13 - 000053248 _____ () C:\Windows\SysWOW64\UMonit64.exe
    2015-03-06 12:13 - 2018-06-18 13:49 - 000696600 _____ () C:\Program Files\pia_manager\openvpn.exe
    2015-03-06 12:13 - 2018-06-18 13:49 - 000199736 _____ () C:\Program Files\pia_manager\liblzo2-2.dll
    2015-03-06 12:13 - 2018-06-18 13:49 - 000114304 _____ () C:\Program Files\pia_manager\libpkcs11-helper-1.dll
    2016-07-13 11:47 - 2018-06-18 13:49 - 000148248 _____ () C:\Program Files\pia_manager\pia-openvpn.dll
    2015-12-18 04:20 - 2012-08-23 11:38 - 000574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
    2015-12-18 04:20 - 2014-05-13 13:04 - 000109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
    2015-12-18 04:20 - 2014-05-13 13:04 - 000416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
    2015-12-18 04:20 - 2014-05-13 13:04 - 000167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
    2015-12-18 04:20 - 2012-04-03 18:06 - 000565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
    2014-06-03 21:01 - 2014-06-03 21:01 - 000117248 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
    2014-06-03 21:01 - 2014-06-03 21:01 - 000037936 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
    2014-06-03 21:01 - 2014-06-03 21:01 - 000018992 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDColorEnhance.dll
    2014-06-03 21:01 - 2014-06-03 21:01 - 000020528 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDRegammaAndGamut.dll
    2018-06-23 10:07 - 2018-06-23 10:07 - 000521228 _____ () C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\bin\ruby_builtin_dlls\libgmp-10.dll
    2018-06-23 10:07 - 2018-06-23 10:07 - 000121524 _____ () C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\bin\ruby_builtin_dlls\libgcc_s_dw2-1.dll
    2018-06-23 10:07 - 2018-06-23 10:07 - 000023294 _____ () C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\lib\ruby\2.4.0\i386-mingw32\enc\encdb.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000025094 _____ () C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\lib\ruby\2.4.0\i386-mingw32\enc\trans\transdb.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000020138 _____ () C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\lib\ruby\2.4.0\i386-mingw32\enc\windows_1252.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000042802 _____ () C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\lib\ruby\2.4.0\i386-mingw32\stringio.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000076988 _____ () C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\lib\ruby\2.4.0\i386-mingw32\fiddle.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000034874 _____ () C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\bin\ruby_builtin_dlls\libffi-6.dll
    2018-06-23 10:07 - 2018-06-23 10:07 - 000019080 _____ () C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\lib\ruby\2.4.0\i386-mingw32\enc\utf_16le.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000024071 _____ () C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\lib\ruby\2.4.0\i386-mingw32\enc\trans\utf_16_32.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000107527 _____ () C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\lib\ruby\2.4.0\i386-mingw32\enc\trans\single_byte.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000086447 _____ () C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\src\build\windows\pia_manager\bin\rgloader\rgloader24.mingw.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000164238 _____ () C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\lib\ruby\2.4.0\i386-mingw32\socket.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000020278 _____ () C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\lib\ruby\2.4.0\i386-mingw32\io\wait.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000036004 _____ () C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\lib\ruby\2.4.0\i386-mingw32\json\ext\parser.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000043738 _____ () C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\lib\ruby\2.4.0\i386-mingw32\json\ext\generator.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000023715 _____ () C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\lib\ruby\2.4.0\i386-mingw32\etc.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000215937 _____ () C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\lib\ruby\gems\2.4.0\gems\ffi-1.9.18-x86-mingw32\lib\2.4\ffi_c.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000204591 _____ () C:\Users\Asus\AppData\Local\Temp\ocr762A.tmp\lib\ruby\2.4.0\i386-mingw32\date_core.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000521228 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\bin\ruby_builtin_dlls\libgmp-10.dll
    2018-06-23 10:07 - 2018-06-23 10:07 - 000121524 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\bin\ruby_builtin_dlls\libgcc_s_dw2-1.dll
    2018-06-23 10:07 - 2018-06-23 10:07 - 000023294 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\enc\encdb.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000025094 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\enc\trans\transdb.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000020138 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\enc\windows_1252.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000042802 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\stringio.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000076988 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\fiddle.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000034874 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\bin\ruby_builtin_dlls\libffi-6.dll
    2018-06-23 10:07 - 2018-06-23 10:07 - 000019080 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\enc\utf_16le.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000024071 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\enc\trans\utf_16_32.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000107527 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\enc\trans\single_byte.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000086447 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\src\build\windows\pia_manager\bin\rgloader\rgloader24.mingw.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000164238 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\socket.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000020278 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\io\wait.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000036004 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\json\ext\parser.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000043738 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\json\ext\generator.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000023715 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\etc.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000215937 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\gems\2.4.0\gems\ffi-1.9.18-x86-mingw32\lib\2.4\ffi_c.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000204591 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\date_core.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000096686 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\zlib.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000098626 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\bin\ruby_builtin_dlls\zlib1.dll
    2018-06-23 10:07 - 2018-06-23 10:07 - 000023870 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\enc\windows_31j.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000433264 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\openssl.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000027213 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\digest.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000018967 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\io\nonblock.so
    2018-06-23 10:07 - 2018-06-23 10:07 - 000024368 _____ () C:\Users\Asus\AppData\Local\Temp\ocrE232.tmp\lib\ruby\2.4.0\i386-mingw32\cgi\escape.so
    2018-06-06 04:36 - 2018-06-18 13:49 - 000107272 _____ () C:\Program Files\pia_manager\packet_filter.dll
    2018-06-20 06:30 - 2018-06-18 13:49 - 001287960 _____ () C:\Program Files\pia_manager\nwjs\ffmpeg.dll
    2018-06-20 06:30 - 2018-06-18 13:48 - 002232832 _____ () C:\Program Files\pia_manager\nwjs\swiftshader\libglesv2.dll
    2018-06-20 06:30 - 2018-06-18 13:48 - 000101888 _____ () C:\Program Files\pia_manager\nwjs\swiftshader\libegl.dll
    2018-06-20 06:30 - 2018-06-18 13:49 - 005968664 _____ () C:\Program Files\pia_manager\nwjs\node.dll
    2015-03-03 09:55 - 2013-10-23 14:44 - 001242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

    ==================== Alternate Data Streams (Whitelisted) =========

    (If an entry is included in the fixlist, only the ADS will be removed.)

    AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [125]

    ==================== Safe Mode (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

    ==================== Association (Whitelisted) ===============

    (If an entry is included in the fixlist, the registry item will be restored to default or removed.)

    HKLM\...\.scr: CryptoPreventSCR => "C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventFilterMod.CryptoPreventEXEC" "%1" /S %*

    ==================== Internet Explorer trusted/restricted ===============

    (If an entry is included in the fixlist, it will be removed from the registry.)

    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\007guard.com -> install.007guard.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\008i.com -> 008i.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\008k.com -> www.008k.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\00hq.com -> www.00hq.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\010402.com -> 010402.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\0190-dialers.com -> 0190-dialers.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\01i.info -> 01i.info
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\0411dd.com -> 0411dd.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\0511zfhl.com -> 0511zfhl.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\05p.com -> 05p.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\0632qyw.com -> 0632qyw.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\0calories.net -> 0calories.net
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\0cj.net -> 0cj.net
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\0scan.com -> www.0scan.com
    IE restricted site: HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\1-2005-search.com -> www.1-2005-search.com

    There are 12753 more sites.


    ==================== Hosts content: ===============================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2013-08-22 14:25 - 2013-08-22 14:25 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Asus\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img0.jpg
    DNS Servers: 209.222.18.222 - 209.222.18.218
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
    Windows Firewall is enabled.

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    HKLM\...\StartupApproved\Run: => "BTMTrayAgent"
    HKLM\...\StartupApproved\Run: => "ETDCtrl"
    HKLM\...\StartupApproved\Run: => "NvBackend"
    HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
    HKLM\...\StartupApproved\Run32: => "ASUSPRP"
    HKLM\...\StartupApproved\Run32: => "ROGNB"
    HKLM\...\StartupApproved\Run32: => "ASUS ROG MacroKey"
    HKLM\...\StartupApproved\Run32: => "CLMLServer_For_P2G8"
    HKLM\...\StartupApproved\Run32: => "CLVirtualDrive"
    HKLM\...\StartupApproved\Run32: => "SDTray"
    HKLM\...\StartupApproved\Run32: => "HP Software Update"
    HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\StartupApproved\Run: => "Skype"
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\StartupApproved\Run: => "Steam"
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\StartupApproved\Run: => "HP ENVY 4500 series (NET)"
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\StartupApproved\Run: => "Akamai NetSession Interface"
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\StartupApproved\Run: => "SpybotPostWindows10UpgradeReInstall"
    HKU\S-1-5-21-4202764557-1761152932-1492796901-1001\...\StartupApproved\Run: => "OneDrive"

    ==================== FirewallRules (Whitelisted) ===============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    FirewallRules: [UDP Query User{2A56361A-4695-4D68-9C50-7DC9936E6F45}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe
    FirewallRules: [TCP Query User{B3DB93C5-95E6-422E-A754-16EBF349C79B}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe
    FirewallRules: [{A96B960A-1920-44C4-BC15-5E3DE53CD12A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    FirewallRules: [{D65BF53B-4822-4FDB-8422-089A2A92CE9D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    FirewallRules: [{A0E8B631-174D-44A4-B8E8-DEF7B298F1F3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
    FirewallRules: [{89447D5D-A567-4B11-A5C7-F7FEEB4097B2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
    FirewallRules: [{3EFB1019-738F-4FFF-B52C-246E563A1E10}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
    FirewallRules: [{C6B2C93F-B29C-4C77-B11F-61D32D157778}] => (Allow) C:\Windows\system32\ftp.exe
    FirewallRules: [{1BA6D593-541F-4F63-853D-F937D3C936B5}] => (Allow) C:\Windows\system32\ftp.exe
    FirewallRules: [{04781A3E-4FF9-43F9-A9DD-FA47656089FD}] => (Allow) C:\Windows\SysWOW64\ftp.exe
    FirewallRules: [{DB75DE74-FD9E-4648-A3C2-8F5400E67759}] => (Allow) C:\Windows\SysWOW64\ftp.exe
    FirewallRules: [{E3AF2AA4-1AAC-448F-AB9E-98B81FBE7BFE}] => (Allow) C:\Users\Asus\AppData\Roaming\BitTorrent\BitTorrent.exe
    FirewallRules: [{1AAB904B-ED1C-4BBE-A85E-D142E6C9E77C}] => (Allow) C:\Users\Asus\AppData\Roaming\BitTorrent\BitTorrent.exe
    FirewallRules: [{BC425A47-A540-489C-810C-8DF8B6971C3B}] => (Allow) C:\Program Files (x86)\Intel\Extreme Tuning Utility\Client\PerfTune.exe
    FirewallRules: [{1C042886-83FD-44AA-B577-3B7EA1D9B6F3}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\DeviceSetup.exe
    FirewallRules: [{D2981FB4-887C-43BE-98FF-383214B0B1C5}] => (Allow) LPort=5357
    FirewallRules: [{26F55D82-E91E-4ABA-AA72-320E78481ADB}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\HPNetworkCommunicatorCom.exe
    FirewallRules: [{6A1F14B2-B2EB-44A8-AE81-52ECF8306BDA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    FirewallRules: [{09EEED31-E432-4F00-A90F-B93CD83D69ED}] => (Allow) C:\Program Files\BitComet\BitComet.exe
    FirewallRules: [{F4837DA0-A9C0-420B-9F3E-CF4F2CBF1E2C}] => (Allow) C:\Program Files\BitComet\BitComet.exe
    FirewallRules: [{7F315F93-98FA-4776-9BF3-1FFFB750A162}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
    FirewallRules: [{861264CB-1C96-4357-B61A-426F317DC5F7}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
    FirewallRules: [{9E6611D5-E90B-4143-9801-498A71C9276B}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
    StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
    StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
    StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
    StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

    ==================== Restore Points =========================

    ATTENTION: System Restore is disabled

    ==================== Faulty Device Manager Devices =============


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (06/23/2018 07:35:39 AM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: The program Microsoft.Msn.Sports.exe version 4.24.1805.9004 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

    Process ID: 228c

    Start Time: 01d40abb771126e3

    Termination Time: 4294967295

    Application Path: C:\Program Files\WindowsApps\Microsoft.BingSports_4.24.11294.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Sports.exe

    Report Id: eae783b9-ec6b-4a79-8cfe-0db46ffe177d

    Faulting package full name: Microsoft.BingSports_4.24.11294.0_x64__8wekyb3d8bbwe

    Faulting package-relative application ID: AppexSports

    Error: (06/18/2018 01:14:16 PM) (Source: COM) (EventID: 10031) (User: )
    Description: An unmarshaling policy check was performed when unmarshaling a custom marshaled object and the class {41FD88F7-F295-4D39-91AC-A85F3149A05B} was rejected

    Error: (06/18/2018 01:14:16 PM) (Source: COM) (EventID: 10031) (User: )
    Description: An unmarshaling policy check was performed when unmarshaling a custom marshaled object and the class {95CABCC9-BC57-4C12-B8DF-BA193232AA01} was rejected

    Error: (06/06/2018 04:36:14 AM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: G751)
    Description: Application or service 'openvpn' could not be shut down.

    Error: (05/30/2018 03:57:51 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: UPNP.exe, version: 1.0.8.11, time stamp: 0x4a9638a4
    Faulting module name: upnp.dll, version: 10.0.17134.1, time stamp: 0x82f29ae9
    Exception code: 0xc0000005
    Fault offset: 0x000384f4
    Faulting process ID: 0x83bc
    Faulting application start time: 0x01d3f8268ebd102c
    Faulting application path: C:\Program Files\BitComet\tools\UPNP.exe
    Faulting module path: C:\WINDOWS\system32\upnp.dll
    Report ID: 96752636-d215-43ef-99fc-98d59e845ca7
    Faulting package full name:
    Faulting package-relative application ID:

    Error: (05/30/2018 05:57:02 AM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: NvStreamService.exe, version: 7.1.2084.9592, time stamp: 0x57605a68
    Faulting module name: NvStreamService.exe, version: 7.1.2084.9592, time stamp: 0x57605a68
    Exception code: 0xc0000005
    Fault offset: 0x000000000006060d
    Faulting process ID: 0x105c
    Faulting application start time: 0x01d3f7d2a51a3992
    Faulting application path: C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
    Faulting module path: C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
    Report ID: 17539e98-ad41-45f3-af61-545bb5429c3c
    Faulting package full name:
    Faulting package-relative application ID:

    Error: (05/28/2018 09:17:00 AM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: The program Microsoft.Photos.exe version 2018.18031.15820.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

    Process ID: 13fec

    Start Time: 01d3f63dc3fb9b4e

    Termination Time: 4294967295

    Application Path: C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

    Report Id: 14f10e44-d4ed-433e-9e26-e1c9ee26a2b8

    Faulting package full name: Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe

    Faulting package-relative application ID: App

    Error: (05/28/2018 05:15:57 AM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: UPNP.exe, version: 1.0.8.11, time stamp: 0x4a9638a4
    Faulting module name: upnp.dll, version: 10.0.17134.1, time stamp: 0x82f29ae9
    Exception code: 0xc0000005
    Fault offset: 0x000384f4
    Faulting process ID: 0x14a84
    Faulting application start time: 0x01d3f63a8c48b58d
    Faulting application path: C:\Program Files\BitComet\tools\UPNP.exe
    Faulting module path: C:\WINDOWS\system32\upnp.dll
    Report ID: bb811abd-3f44-4676-9c6b-ec62c46c4aed
    Faulting package full name:
    Faulting package-relative application ID:


    System errors:
    =============
    Error: (06/23/2018 10:10:18 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
    Description: The server {784E29F4-5EBE-4279-9948-1E8FE941646D} did not register with DCOM within the required timeout.

    Error: (06/23/2018 10:07:18 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
    Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
    {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
    and APPID
    {4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
    to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

    Error: (06/23/2018 10:07:18 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
    Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
    {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
    and APPID
    {4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
    to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

    Error: (06/23/2018 10:07:02 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The SDWSCService service failed to start due to the following error:
    A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

    Error: (06/23/2018 10:07:01 AM) (Source: BugCheck) (EventID: 1001) (User: )
    Description: The computer has rebooted from a bugcheck. The bugcheck was: 0x00000050 (0xfffff6fb7dbeda10, 0x0000000000000000, 0xfffff8014a5078be, 0x000000000000000c). A dump was saved in: C:\WINDOWS\Minidump\062318-8125-01.dmp. Report Id: 73ab5592-83a8-4ced-aba0-e04fdadf6df6.

    Error: (06/23/2018 10:07:01 AM) (Source: EventLog) (EventID: 6008) (User: )
    Description: The previous system shutdown at 10:04:43 on ‎23/‎06/‎2018 was unexpected.

    Error: (06/23/2018 10:05:00 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
    Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
    {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
    and APPID
    {4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
    to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

    Error: (06/23/2018 10:05:00 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
    Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
    {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
    and APPID
    {4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
    to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.


    CodeIntegrity:
    ===================================

    Date: 2018-06-23 10:10:16.498
    Description:
    Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2018-06-23 10:10:16.496
    Description:
    Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2018-06-23 10:10:16.483
    Description:
    Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2018-06-23 10:10:16.481
    Description:
    Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2018-06-23 10:07:04.654
    Description:
    Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2018-06-23 10:07:04.651
    Description:
    Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2018-06-23 10:07:02.516
    Description:
    Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2018-06-23 10:04:46.585
    Description:
    Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    ==================== Memory info ===========================

    Processor: Intel(R) Core(TM) i7-4710HQ CPU @ 2.50GHz
    Percentage of memory in use: 19%
    Total physical RAM: 16333.1 MB
    Available physical RAM: 13211.02 MB
    Total Virtual: 17357.1 MB
    Available Virtual: 13992.34 MB

    ==================== Drives ================================

    Drive c: (OS) (Fixed) (Total:117.35 GB) (Free:74.07 GB) NTFS ==>[system with boot components (obtained from drive)]
    Drive d: (Data1) (Fixed) (Total:455.75 GB) (Free:304.69 GB) NTFS
    Drive e: (Data2) (Fixed) (Total:455.75 GB) (Free:295.57 GB) NTFS

    \\?\Volume{4c59311a-d340-4fea-92c8-bd15b1ad0d8d}\ (Recovery) (Fixed) (Total:0.88 GB) (Free:0.51 GB) NTFS
    \\?\Volume{509ef456-8956-4f61-9b0d-10629df599b9}\ () (Fixed) (Total:0.79 GB) (Free:0.32 GB) NTFS
    \\?\Volume{1c27a6c4-000e-4499-bf2a-9e4de4645b20}\ (Restore) (Fixed) (Total:20.01 GB) (Free:9.92 GB) NTFS
    \\?\Volume{b2f9285a-58e9-44be-b928-0ae4bfa60c51}\ (SYSTEM) (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (Size: 119.2 GB) (Disk ID: 8FFEFB6B)

    Partition: GPT.

    ========================================================
    Disk: 1 (Size: 931.5 GB) (Disk ID: 82EB289F)

    Partition: GPT.

    ==================== End of Addition.txt ============================

  3. #3
    Security Expert Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    3,545

    Default

    when I attempt to download aswMBR Log my laptop creates an error message and autorestarts?
    Don't worry about that. As far as I can tell it's only happening on Windows 10 machines.

    Anti- Virus software has detected a number of suspicious files including InstallCore.qdm
    Can you give me info on this?. File path or to which program it's located in?

    What I see in the logs is really not much but I can give a little insight

    Antivirus companies are going beyond detecting viruses and malware and into categories of "potentially unwanted programs" potentially unwanted application / riskware because of torrent files

    poor reputation. This application can also affect the quality of your computing experience.
    S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)

    Now, if your getting those notices from this I would understand but this is just a guess.

    ~~~~~~~~~~~~~~~

    Turn On System Restore in Windows 10

    type Control Panel in Start Search and hit Enter to open it. Click on System to open Control Panel's System applet. In the left pane, you will see System protection
    Ensure that Protection is set to ĎOní for the System drive.

    If not, select the System Drive or C Drive and press the Configure button. A box will open.
    Select Turn on system protection and click on Apply.
    Having done this, you will want to immediately create a system restore point first. Do that and check if it has been created
    To create a system restore point manually, open Control Panel and type System Restore in the search box.
    Click on Create a restore point. The System Properties box will open.
    Click on Create. The System Protection box will open and you will be asked to give it a name.
    Click on Create. The process will start and take less than a minute. Meanwhile, you will see a Creating a restore point message.
    One the process is completed, you will see a The restore point was created successfully message.
    Click on Close.

    ~~~~~~~~~~~~~~~~~`

    Highlight the entire content of the quote box below and select Copy.


    Start::
    CloseProcesses:
    CreateRestorePoint:
    SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    Task: {804951AD-D924-48BE-BCEC-C4894B6A1C61} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
    Task: {BF58E3AD-1EBB-4C04-A283-5C6589F4A74C} - \CCleanerSkipUAC -> No File <==== ATTENTION
    AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [125]
    Emptytemp:
    End::

    Start FRST (FRST64) with Administrator privileges
    Press the Fix button. FRST will process the lines copied above from the clipboard.
    When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from.

    Please copy and paste its contents in your next reply.
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    AdwCleaner - Fix Mode
    • Download AdwCleaner and move it to your Desktop
    • Right-click on AdwCleaner.exe and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
    • Accept the EULA (I accept), then click on Scan
    • Let the scan complete. Once it's done, make sure that every item listed in the different tabs is checked and click on the Clean button. This will kill all active processes
    • Once the cleaning process is complete, AdwCleaner will ask to restart your computer, do it
    • After the restart, a log will open when logging in. Please copy/paste the content of that log in your next reply

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~`

    RogueKiller
    • Download the right version of RogueKiller for your Windows version (32 or 64-bit)
    • Once done, move the executable file to your Desktop, right-click on it and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
    • Click on the Start Scan button in the right panel, which will bring you to another tab, and click on it again (this time it'll be in the bottom right corner)
    • Wait for the scan to complete
    • On completion, the results will be displayed
    • Check every single entry (threat found), and click on the Remove Selected button
    • On completion, the results will be displayed. Click on the Open Report button in the bottom left corner, followed by the Open TXT button (also in the bottom left corner)
    • This will open the report in Notepad. Copy/paste its content in your next reply


    created by Aura
    ~~~~~~~~~~~~~~~
    please post
    Fixlog.txt
    AdwCleaner clean log
    RogueKiller clean log
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.
    Want to help others? Join the ClassRoom and learn how.

  4. #4
    Member
    Join Date
    Jan 2013
    Posts
    73

    Default

    Quote Originally Posted by Juliet View Post
    Don't worry about that. As far as I can tell it's only happening on Windows 10 machines.


    Can you give me info on this?. File path or to which program it's located in?

    What I see in the logs is really not much but I can give a little insight

    Antivirus companies are going beyond detecting viruses and malware and into categories of "potentially unwanted programs" potentially unwanted application / riskware because of torrent files

    poor reputation. This application can also affect the quality of your computing experience.
    S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)

    Now, if your getting those notices from this I would understand but this is just a guess.

    ~~~~~~~~~~~~~~~

    Turn On System Restore in Windows 10

    type Control Panel in Start Search and hit Enter to open it. Click on System to open Control Panel's System applet. In the left pane, you will see System protection
    Ensure that Protection is set to ¬ĎOn¬í for the System drive.

    If not, select the System Drive or C Drive and press the Configure button. A box will open.
    Select Turn on system protection and click on Apply.
    Having done this, you will want to immediately create a system restore point first. Do that and check if it has been created
    To create a system restore point manually, open Control Panel and type System Restore in the search box.
    Click on Create a restore point. The System Properties box will open.
    Click on Create. The System Protection box will open and you will be asked to give it a name.
    Click on Create. The process will start and take less than a minute. Meanwhile, you will see a Creating a restore point message.
    One the process is completed, you will see a The restore point was created successfully message.
    Click on Close.

    ~~~~~~~~~~~~~~~~~`

    Highlight the entire content of the quote box below and select Copy.





    Start FRST (FRST64) with Administrator privileges
    Press the Fix button. FRST will process the lines copied above from the clipboard.
    When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from.

    Please copy and paste its contents in your next reply.
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    AdwCleaner - Fix Mode
    • Download AdwCleaner and move it to your Desktop
    • Right-click on AdwCleaner.exe and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
    • Accept the EULA (I accept), then click on Scan
    • Let the scan complete. Once it's done, make sure that every item listed in the different tabs is checked and click on the Clean button. This will kill all active processes
    • Once the cleaning process is complete, AdwCleaner will ask to restart your computer, do it
    • After the restart, a log will open when logging in. Please copy/paste the content of that log in your next reply

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~`

    RogueKiller
    • Download the right version of RogueKiller for your Windows version (32 or 64-bit)
    • Once done, move the executable file to your Desktop, right-click on it and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
    • Click on the Start Scan button in the right panel, which will bring you to another tab, and click on it again (this time it'll be in the bottom right corner)
    • Wait for the scan to complete
    • On completion, the results will be displayed
    • Check every single entry (threat found), and click on the Remove Selected button
    • On completion, the results will be displayed. Click on the Open Report button in the bottom left corner, followed by the Open TXT button (also in the bottom left corner)
    • This will open the report in Notepad. Copy/paste its content in your next reply


    created by Aura
    ~~~~~~~~~~~~~~~
    please post
    Fixlog.txt
    AdwCleaner clean log
    RogueKiller clean log
    # -------------------------------
    # Malwarebytes AdwCleaner 7.2.0.0
    # -------------------------------
    # Build: 06-05-2018
    # Database: 2018-06-22.2
    # Support: https://www.malwarebytes.com/support
    #
    # -------------------------------
    # Mode: Clean
    # -------------------------------
    # Start: 06-23-2018
    # Duration: 00:00:00
    # OS: Windows 10 Home
    # Cleaned: 1
    # Failed: 0


    ***** [ Services ] *****

    No malicious services cleaned.

    ***** [ Folders ] *****

    Deleted C:\extensions

    ***** [ Files ] *****

    No malicious files cleaned.

    ***** [ DLL ] *****

    No malicious DLLs cleaned.

    ***** [ WMI ] *****

    No malicious WMI cleaned.

    ***** [ Shortcuts ] *****

    No malicious shortcuts cleaned.

    ***** [ Tasks ] *****

    No malicious tasks cleaned.

    ***** [ Registry ] *****

    No malicious registry entries cleaned.

    ***** [ Chromium (and derivatives) ] *****

    No malicious Chromium entries cleaned.

    ***** [ Chromium URLs ] *****

    No malicious Chromium URLs cleaned.

    ***** [ Firefox (and derivatives) ] *****

    No malicious Firefox entries cleaned.

    ***** [ Firefox URLs ] *****

    No malicious Firefox URLs cleaned.


    *************************

    [+] Delete Tracing Keys
    [+] Reset Winsock

    *************************

    AdwCleaner[S00].txt - [1260 octets] - [23/06/2018 16:39:34]

    ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

    RogueKiller V12.12.23.0 (x64) [Jun 18 2018] (Free) by Adlice Software
    mail : http://www.adlice.com/contact/
    Feedback : https://forum.adlice.com
    Website : http://www.adlice.com/download/roguekiller/
    Blog : http://www.adlice.com

    Operating System : Windows 10 (10.0.17134) 64 bits version
    Started in : Normal mode
    User : Asus [Administrator]
    Started from : C:\Users\Asus\Downloads\RogueKiller_portable64.exe
    Mode : Delete -- Date : 06/23/2018 16:45:12 (Duration : 00:26:07)

    ¤¤¤ Processes : 0 ¤¤¤

    ¤¤¤ Registry : 3 ¤¤¤
    [PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-4202764557-1761152932-1492796901-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://asus13.msn.com/?pc=ASJB -> Replaced (http://www.microsoft.com/isapi/redir...r=6&ar=msnhome)
    [PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-4202764557-1761152932-1492796901-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://asus13.msn.com/?pc=ASJB -> Replaced (http://www.microsoft.com/isapi/redir...r=6&ar=msnhome)
    [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{fecea169-4f93-47db-a55a-fe794f631e7f} | DhcpNameServer : 0.0.0.0 ([]) -> Replaced ()

    ¤¤¤ Tasks : 0 ¤¤¤

    ¤¤¤ Files : 0 ¤¤¤

    ¤¤¤ WMI : 0 ¤¤¤

    ¤¤¤ Hosts File : 0 ¤¤¤

    ¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤

    ¤¤¤ Web browsers : 0 ¤¤¤

    ¤¤¤ MBR Check : ¤¤¤
    +++++ PhysicalDrive0: SanDisk SD6SB1M128G1002 +++++
    --- User ---
    [MBR] 392b88070d961b35d8b88cc46f3ec377
    [BSP] f7c4128bd907a81537f69e80ed5777fa : Empty|VT.Unknown MBR Code
    Partition table:
    0 - [MAN-MOUNT] EFI system partition | Offset (sectors): 2048 | Size: 100 MB
    1 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 206848 | Size: 900 MB
    2 - [MAN-MOUNT] Microsoft reserved partition | Offset (sectors): 2050048 | Size: 128 MB
    3 - Basic data partition | Offset (sectors): 2312192 | Size: 120162 MB
    4 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 248406016 | Size: 812 MB
    User = LL1 ... OK
    User = LL2 ... OK

    +++++ PhysicalDrive1: HGST HTS721010A9E630 +++++
    --- User ---
    [MBR] d4ca03f28db5812db40e550a3998d9c1
    [BSP] 0ae9cfd4b6381e13032f0565da58171f : Empty|VT.Unknown MBR Code
    Partition table:
    0 - Basic data partition | Offset (sectors): 2048 | Size: 466688 MB
    1 - Basic data partition | Offset (sectors): 955779072 | Size: 466690 MB
    2 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 1911560192 | Size: 20490 MB
    User = LL1 ... OK
    User = LL2 ... OK

  5. #5
    Member
    Join Date
    Jan 2013
    Posts
    73

    Default

    Hi Juliet - Apologies I lost the first part of my reply. Yes PUPs were located in BitTorrent upgrade. Thanks for the fix - FRST logs to follw:

    Fix result of Farbar Recovery Scan Tool (x64) Version: 20.06.2018
    Ran by Asus (23-06-2018 16:26:48) Run:1
    Running from C:\Users\Asus\Downloads
    Loaded Profiles: Asus (Available Profiles: Asus)
    Boot Mode: Normal
    ==============================================

    fixlist content:
    *****************
    CloseProcesses:
    CreateRestorePoint:
    SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    Task: {804951AD-D924-48BE-BCEC-C4894B6A1C61} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
    Task: {BF58E3AD-1EBB-4C04-A283-5C6589F4A74C} - \CCleanerSkipUAC -> No File <==== ATTENTION
    AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [125]
    Emptytemp:

    *****************

    Processes closed successfully.
    Restore point was successfully created.
    HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
    HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{804951AD-D924-48BE-BCEC-C4894B6A1C61}" => removed successfully
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{804951AD-D924-48BE-BCEC-C4894B6A1C61}" => removed successfully
    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager => not found
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BF58E3AD-1EBB-4C04-A283-5C6589F4A74C}" => removed successfully
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BF58E3AD-1EBB-4C04-A283-5C6589F4A74C}" => removed successfully
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerSkipUAC" => removed successfully
    C:\ProgramData\Temp => ":5C321E34" ADS removed successfully

    =========== EmptyTemp: ==========

    BITS transfer queue => 8675328 B
    DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 24398178 B
    Java, Flash, Steam htmlcache => 1102 B
    Windows/system/drivers => 665010 B
    Edge => 16886 B
    Chrome => 0 B
    Firefox => 59215149 B
    Opera => 0 B

    Temp, IE cache, history, cookies, recent:
    Default => 0 B
    Users => 0 B
    ProgramData => 0 B
    Public => 0 B
    systemprofile => 0 B
    systemprofile32 => 0 B
    LocalService => 17330 B
    LocalService => 0 B
    NetworkService => 0 B
    NetworkService => 0 B
    Asus => 239180671 B

    RecycleBin => 0 B
    EmptyTemp: => 316.8 MB temporary data Removed.

    ================================


    The system needed a reboot.

    ==== End of Fixlog 16:27:35 ====

  6. #6
    Security Expert Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    3,545

    Default

    I advise you avoid P2P file sharing programs, they are a security risk which can make your computer susceptible to malware

    Let's check for remnants

    Please download the Malwarebytes Anti-Malware setup file to your Desktop.

    OR from this location Here
    • Open mbam-setup.x.x.xxxx.exe (x represents the version #) and follow the prompts to install the programme.
    • Windows Vista, Windows 7 , 8, 8.1 and 10 : Right click and select "Run as Administrator"
    • After the installation IS complete let it update if it asks.
    • Under SETTINGS.....APPLICATIONS leave everything at default
    • Under SETTINGS.....PROTECTION make sure AUTOMATIC QUARANTINE is on.
    • Then go to the Dashboard and click on SCAN NOW
    • If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
      Upon completion of the scan (or after the reboot), click the Reports tab.
      Double-click the Scan Log.
      At the bottom click Export and choose Text file.

      Save the file to your desktop and include its content in your next reply.

      You can access the logs by going in the "Reports" tab, clicking on the latest "Scan" entry (the one with detections), then clicking on the "Export" button in the bottom-left corner and select "Copy to clipboard". After that, all you have to do is paste it here
    • Then click on POST
    • Exit Malwarebytes

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~`

    Emsisoft Emergency Kit - Fix Mode
    Follow the instructions below to run a scan using the Emsisoft Emergency Kit.
    • Download the Emsisoft Emergency Kit and execute it. From there, click on the Install button to extract the program in the EEK folder;
    • Once the extraction is complete, the EEK folder will open. Right-click on start emergency kit scanner.exe and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users);
    • EEK will suggest that you run an online update before using the program. Click on Yes to launch it.
    • After the update, click on Malware Scan under 2. Scan and accept to let EEK detect PUPs (click on Yes).
    • Once the scan is complete, make sure that every item in the list is checked, and click on the Quarantine selected button;
    • If it asks you for a reboot to delete some items, click on Ok to reboot automatically;
    • After the restart, open EEK again (in the C:\EEK folder);
    • This time, click on Logs;
    • From there, go under the Quarantine Log tab, and click on the Export button;
    • Save the log on your desktop, then open it, and copy/paste its content in your next reply;

    Please post these 2 logs when finished.

    Also, tell me how the computer is now.
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.
    Want to help others? Join the ClassRoom and learn how.

  7. #7
    Member
    Join Date
    Jan 2013
    Posts
    73

    Default

    Quote Originally Posted by Juliet View Post
    I advise you avoid P2P file sharing programs, they are a security risk which can make your computer susceptible to malware

    Let's check for remnants

    Please download the Malwarebytes Anti-Malware setup file to your Desktop.

    OR from this location Here
    • Open mbam-setup.x.x.xxxx.exe (x represents the version #) and follow the prompts to install the programme.
    • Windows Vista, Windows 7 , 8, 8.1 and 10 : Right click and select "Run as Administrator"
    • After the installation IS complete let it update if it asks.
    • Under SETTINGS.....APPLICATIONS leave everything at default
    • Under SETTINGS.....PROTECTION make sure AUTOMATIC QUARANTINE is on.
    • Then go to the Dashboard and click on SCAN NOW
    • If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
      Upon completion of the scan (or after the reboot), click the Reports tab.
      Double-click the Scan Log.
      At the bottom click Export and choose Text file.

      Save the file to your desktop and include its content in your next reply.

      You can access the logs by going in the "Reports" tab, clicking on the latest "Scan" entry (the one with detections), then clicking on the "Export" button in the bottom-left corner and select "Copy to clipboard". After that, all you have to do is paste it here
    • Then click on POST
    • Exit Malwarebytes

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~`

    Emsisoft Emergency Kit - Fix Mode
    Follow the instructions below to run a scan using the Emsisoft Emergency Kit.
    • Download the Emsisoft Emergency Kit and execute it. From there, click on the Install button to extract the program in the EEK folder;
    • Once the extraction is complete, the EEK folder will open. Right-click on start emergency kit scanner.exe and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users);
    • EEK will suggest that you run an online update before using the program. Click on Yes to launch it.
    • After the update, click on Malware Scan under 2. Scan and accept to let EEK detect PUPs (click on Yes).
    • Once the scan is complete, make sure that every item in the list is checked, and click on the Quarantine selected button;
    • If it asks you for a reboot to delete some items, click on Ok to reboot automatically;
    • After the restart, open EEK again (in the C:\EEK folder);
    • This time, click on Logs;
    • From there, go under the Quarantine Log tab, and click on the Export button;
    • Save the log on your desktop, then open it, and copy/paste its content in your next reply;

    Please post these 2 logs when finished.

    Also, tell me how the computer is now.
    Thank you Juliet my computer is running without any problem. Both MBAM and Emsisoft didn't detect any further issues

    Emsisoft Emergency Kit - Version 2018.4
    Last update: 24/06/2018 04:34:26
    User account: G751\Asus
    Computer name: G751
    OS version: Windows 10x64

    Scan settings:

    Scan type: Malware Scan
    Objects: Rootkits, Memory, Traces, Files

    Detect PUPs: On
    Scan archives: Off
    Scan mail archives: Off
    ADS Scan: On
    File extension filter: Off
    Direct disk access: Off

    Scan start: 24/06/2018 04:47:10

    Scanned 90955
    Found 0

    Scan end: 24/06/2018 04:48:03
    Scan time: 0:00:53

  8. #8
    Security Expert Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    3,545

    Default

    I think we can bring this to a close.

    • Please download DelFix or from Here and save the file to your Desktop.
    • Double-click DelFix.exe to run the programme.
    • Place a checkmark next to the following items:
    • Activate UAC
    • Remove disinfection tools
    • Click the Run button.
    • -- This will remove the specialized tools we used to disinfect your system.
      Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete
      ).

    ************************************
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.
    Want to help others? Join the ClassRoom and learn how.

  9. #9
    Member
    Join Date
    Jan 2013
    Posts
    73

    Default

    Quote Originally Posted by Juliet View Post
    I think we can bring this to a close.

    • Please download DelFix or from Here and save the file to your Desktop.
    • Double-click DelFix.exe to run the programme.
    • Place a checkmark next to the following items:
    • Activate UAC
    • Remove disinfection tools
    • Click the Run button.
    • -- This will remove the specialized tools we used to disinfect your system.
      Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete
      ).

    ************************************
    Hi Juliet....Avira anti virus wont allow me to download this final program

  10. #10
    Security Expert Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    3,545

    Default

    Let's see if we can temporarily disable it

    navigate to the system tray on the bottom right hand corner and look for an open white umbrella on red background.

    right click it-> untick the option AntiVir Guard enable.
    You should now see a closed, white umbrella on a red background

    Try the download again, afterwards re-enable Avira
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.
    Want to help others? Join the ClassRoom and learn how.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •