Script ZHPFix [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://allssearch.com R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local; R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 O2 - BHO: Browse2save [64Bits] - {1C7B1729-3045-91DD-1AB7-2CA221D76352} Clé orpheline O2 - BHO: (no name) [64Bits] - {EF5F59BA-B2AB-48D8-9747-54DF806C73B8} Clé orpheline O2 - BHO: ExplorerWnd Helper [64Bits] - {10921475-03CE-4E04-90CE-E2E7EF20C814} Clé orpheline O2 - BHO: (no name) [64Bits] - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} Clé orpheline [MD5.00000000000000000000000000000000] [APT] [Game_Booster_AutoUpdate] (...) -- C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [Go for FilesUpdate] (...) -- C:\Program Files (x86)\GoforFiles\GFFUpdater.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [Razer_Game_Booster_AutoUpdate] (...) -- C:\Program Files (x86)\Razer\Razer Game Booster\AutoUpdate.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [RunAsStdUser Task] (...) -- C:\Program Files (x86)\BrightBreeze\bin\2.0.12.0\BrightBreezeSA.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{0053FC1B-435E-42B7-87FD-65685AB54E22}] (...) -- D:\T‚l‚chargements\millenaire\millenaire installeur\Millenaire Installer\Millenaire Installer.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{04F2C124-FA8B-4282-86E4-ACA01E16C951}] (...) -- F:\DOS4GW.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{13BB1A4C-AB24-42C6-A34C-43A633BB7B11}] (...) -- C:\Program Files (x86)\The Witcher\launcher.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{216F08C5-EDD4-48EC-91D2-AB10278E2667}] (...) -- D:\T‚l‚chargements\millenaire\millenaire installeur\Millenaire Installer\Millenaire Installer.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{35AE9F65-BEAA-4280-ACC1-07A624294294}] (...) -- D:\LOL\League of Legends\lol.launcher.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{3ABFBA21-0C20-472A-BCE5-83E72857525A}] (...) -- C:\Program Files (x86)\Ubisoft\Assassin's Creed\AssassinsCreed_Game.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{3E045D1B-E076-4DF4-B3AB-E3465261E641}] (...) -- D:\LOL\League of Legends\lol.launcher.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{48938B49-5D1E-4D33-8D93-FFB639AC5C87}] (...) -- F:\gta-vc.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{496B6723-2E51-448E-BB38-9146B02D3912}] (...) -- D:\torrent\Battlefield Bad Company 2\BFBC2Game.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{4BF4A6E4-4E6C-4CCD-A3B6-32D893FD0C05}] (...) -- C:\Program Files (x86)\Ubisoft\Assassin's Creed\AssassinsCreed_Game.exe (.not file.) [0] [MD5.BE653F9BE17799D4767357976036B3A4] [APT] [{516ED7AD-581D-4E6F-BA14-53C41229F00A}] (...) -- D:\torrent\nfs\Need For Speed Most Wanted\makeDesktopIcon.exe [103137] [MD5.00000000000000000000000000000000] [APT] [{54692130-3D18-4582-B112-7001063B9EAA}] (...) -- F:\gta-vc.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{578D739E-E0D2-43BF-8E68-4C6D806CCB9D}] (...) -- G:\HOSP\HOSPITAL.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{5D8E6529-CF55-4144-8B2D-FC6496093A04}] (...) -- F:\rzrsetup.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{6540AAD4-BEF7-46AF-9C47-6722F595E899}] (...) -- C:\Program Files (x86)\Ubisoft\Techland\Call of Juarez - Bound in Blood\CoJBiBGame_x86.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{68A1779F-8B37-4F7C-BED5-60E118A19D2F}] (...) -- C:\USERs\USER\Downloads\Win7Vista_64_151719 (1).exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{733CCD79-D3F0-4760-8CB5-A0C970EB2D52}] (...) -- D:\mark of the ninja\Mark of the Ninja\bin\game.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{747ADD1D-EE76-49C3-B829-502A2248E286}] (...) -- F:\DOS4GW.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{7500480C-D210-4AA6-9827-08E2C04C5070}] (...) -- D:\mark of the ninja\Mark of the Ninja\bin\game.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{77D05E99-BD08-4EF1-B9C1-10572B33332E}] (...) -- F:\DOS4GW.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{7D00385E-DA12-4381-AB70-399708A5F303}] (...) -- C:\Program Files (x86)\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{7D4063D5-51F6-4F7C-BDDF-C0CD70555654}] (...) -- D:\torrent\Battlefield Bad Company 2\BFBC2Game.exe (.not file.) [0] [MD5.BE653F9BE17799D4767357976036B3A4] [APT] [{820ED570-152D-4F89-B1DD-02502D58BCA3}] (...) -- D:\torrent\nfs\Need For Speed Most Wanted\makeDesktopIcon.exe [103137] [MD5.383BBA960053EEBF21D0300EE71FEDC4] [APT] [{834E69F0-A988-4992-AA8B-C628BE7E5B8C}] (...) -- F:\SETUP.exe [32768] [MD5.00000000000000000000000000000000] [APT] [{897B1A90-4B7B-4F06-9153-AB32ECD41E0D}] (...) -- C:\Program Files (x86)\Steam\Steam.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{8A5275D9-EC90-4DF3-838A-B367382BE692}] (...) -- C:\USERs\USER\Downloads\call_of_duty_2_demo_solo_anglais.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{95C8E7E9-75CB-417D-A0E6-6DAFB4C45634}] (...) -- D:\lol\League of Legends\lol.launcher.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{988EE139-3E5E-4455-A4AB-1F2182A147C6}] (...) -- C:\Program Files (x86)\The Witcher\launcher.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{98B0D120-18C5-4A99-910D-A6D437AC5FF7}] (...) -- C:\Program Files (x86)\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{9B4CAAE6-8903-487D-B937-02DC10F39499}] (...) -- c:\program files (x86)\mozilla firefox\firefox.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{A20B25CA-7910-43DC-B962-262556E964D6}] (...) -- C:\Program Files (x86)\Desk 365\eUninstall.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{A34ECC55-FE56-466B-A8D8-3A53EAEA70A4}] (...) -- D:\LOL\League of Legends\lol.launcher.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{A5EFBD51-85D1-447E-A271-B9AC51BD7786}] (...) -- C:\Perfect World Entertainment\Forsaken World FR\patcher.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{AAE3DBC7-28F0-4149-B9DC-FE0A86F0637E}] (...) -- C:\Program Files (x86)\Eidos\HITMAN~2\uninstall.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{ACBAFFD2-3609-4F5E-9A9C-CAD7FC178106}] (...) -- C:\USERs\USER\AppData\Local\Babylon\Setup\Setup.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{AE7E969B-34B3-48DF-A33D-FCD0B5A00AD8}] (...) -- D:\LOL\League of Legends\lol.launcher.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{B195F5F5-1F61-49AB-90FD-387EDCAA5E9A}] (...) -- C:\Program Files (x86)\Ubisoft\Assassin's Creed\AssassinsCreed_Game.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{B5095F1C-2BA5-4C1E-83C0-F5E9A5D0EF61}] (...) -- F:\DOS4GW.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{C39B2557-1A08-45FD-A9E8-73F8C318B783}] (...) -- D:\T‚l‚chargements\millenaire\millenaire installeur\Millenaire Installer\Millenaire Installer.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{D1637850-082E-41AE-B258-F92F2C9F7E16}] (...) -- D:\torrent\Battlefield Bad Company 2\BFBC2Game.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{D7DF7B60-AD80-404F-AABF-932287E1FFE6}] (...) -- F:\DOS4GW.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{DC6EBD88-7E15-452B-AFA3-2ABC60BC80B8}] (...) -- D:\LOL\League of Legends\lol.launcher.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{E65CAA30-524E-4D0C-9DB8-BA1C802F333F}] (...) -- G:\HOSP\HOSPITAL.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{EB078AE8-758F-408E-9B0A-BB6948D608B8}] (...) -- F:\gta-vc.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{F2389998-A924-40CB-A642-38E567115A06}] (...) -- C:\Program Files (x86)\KONAMI\MetalGearSolid2 Substance\bin\MGS2SSetup.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{F623BBF6-5AC9-4D92-AA81-4B0D4C76507D}] (...) -- D:\lol\League of Legends\lol.launcher.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{F8F4CE1C-F90D-45BF-94E3-8027B7BECE9C}] (...) -- C:\USERs\USER\Downloads\Win7Vista_64_151719.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{F9A584C3-904B-45E7-BCA3-A7EAF493FEEB}] (...) -- G:\HOSP\HOSPITAL.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{FDF1FEF8-C472-4D4B-AC03-5C9D4B6603FE}] (...) -- D:\T‚l‚chargements\millenaire\millenaire installeur\Millenaire Installer\Millenaire Installer.exe (.not file.) [0] [HKCU\Software\Pando Networks] [HKCU\Software\ebay Vista Gadget FR] [HKLM\Software\Wow6432Node\Pando Networks] O43 - CFD: 06/11/2011 - 13:19:44 - [] ----D C:\Program Files (x86)\IncrediMail O43 - CFD: 14/02/2012 - 20:02:34 - [] ----D C:\Program Files (x86)\Pando Networks O43 - CFD: 23/06/2014 - 16:27:21 - [] ----D C:\Program Files (x86)\sweetpacks bundle uninstaller_BlueStacks_1138898 O43 - CFD: 24/06/2014 - 19:36:41 - [] ----D C:\Program Files (x86)\uTorrent O43 - CFD: 06/11/2011 - 13:20:29 - [] ----D C:\ProgramData\IM O43 - CFD: 06/11/2011 - 13:19:44 - [] ----D C:\ProgramData\IncrediMail O43 - CFD: 24/06/2014 - 21:06:52 - [] ----D C:\ProgramData\InstallMate O43 - CFD: 08/05/2013 - 10:57:41 - [0] ----D C:\Users\USER\AppData\Roaming\BitTorrent O43 - CFD: 02/11/2012 - 15:41:36 - [] ----D C:\Users\USER\AppData\Local\CRE O43 - CFD: 18/11/2011 - 10:25:55 - [] ----D C:\Users\USER\AppData\Local\IM O44 - LFC:[MD5.1C56A66B1B6CEFF57BD64B37BF084C7B] - 25/06/2014 - 20:21:42 ----- . (...) -- C:\spyhunter.log [69] O51 - MPSK:{47f4bd6b-2e12-11e1-b408-88ae1de8d977}\AutoRun\command. (...) -- J:\KODAK_Camera_Setup_App.exe (.not file.) O51 - MPSK:{af608c8d-af1e-11e2-9688-88ae1de8d977}\AutoRun\command. (...) -- F:\setup.exe O51 - MPSK:{c60d5393-e930-11e2-acc4-88ae1de8d977}\AutoRun\command. (...) -- M:\CMADownloader.exe (.not file.) O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLinkedConnections"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 O69 - SBI: SearchScopes [HKCU] {50F96351-375F-48AC-963B-F33C331593FD} - (Yahoo) - http://fr.search.yahoo.com O69 - SBI: SearchScopes [HKCU] {934B6649-5036-4869-86C9-12D219BEA9F2} - (eBay) - http://rover.ebay.com C:\Program Files\Bohemia Interactive\ArmA\ArmA Keygen.exe O90 - PUC: "112C48061A10E464790A9077E221B205" . (.Moovida.) -- C:\Windows\Installer\{6084C211-01A1-464E-97A0-09772E122B50}\ARPPRODUCTICON.exe O90 - PUC: "BA172DB42E6685D4FA8808EFB370074C" . (.Fissa.) -- C:\Windows\Installer\{4BD271AB-66E2-4D58-AF88-80FE3B0770C4}\ARPPRODUCTICON.exe [MD5.6C3BE28073BC83FC2C0035E2EA3C548B] [WIS][29/01/2011] (.Secure Digital Services - Moovida.) -- C:\Windows\Installer\27a1bba.msi [2327552] [MD5.363B4ECD444606CF8A4D938EE599CB64] [WIS][29/01/2011] (.Secure Digital Services - Fissa.) -- C:\Windows\Installer\27a1bc0.msi [1294336] [MD5.B67811645C5A3B8E4E4B1A1DB1EE271C] [WIS][11/12/2012] (.Boxore OU. - Software Update Helper.) -- C:\Windows\Installer\8d7d5f.msi [45056] HKLM\SOFTWARE\Microsoft\Tracing\DomaIQ10_RASAPI32 HKLM\SOFTWARE\Microsoft\Tracing\DomaIQ10_RASMANCS HKLM\SOFTWARE\Microsoft\Tracing\InstTracker_RASAPI32 HKLM\SOFTWARE\Microsoft\Tracing\InstTracker_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BitTorrent_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BitTorrent_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BrightBreezeSA_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BrightBreezeSA_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\deskSvc_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\deskSvc_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ExpressFiles_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ExpressFiles_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\IminentSetup_2-KFRPtAWP-1__RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\IminentSetup_2-KFRPtAWP-1__RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Install_BubbleDock_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Install_BubbleDock_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\kujytuo_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\kujytuo_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_amonetize_14633_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_amonetize_14633_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\moovida-setup_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\moovida-setup_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\moovida_air_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\moovida_air_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\moovida_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\moovida_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\nsb1_ar_qvo6_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\nsb1_ar_qvo6_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PC Performer43885_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PC Performer43885_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\questscan188_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\questscan188_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\savings sidekick-bg_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\savings sidekick-bg_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\TornTV_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\TornTV_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrentBar_FRAutoUpdateHelper_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrentBar_FRAutoUpdateHelper_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utorrent_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utorrent_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-1764_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-1764_RASMANCS [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1C7B1729-3045-91DD-1AB7-2CA221D76352}] [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Go for FilesUpdate] [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RunAsStdUser Task] [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110011501160}] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\BA086F2D38A8E1A47912955A68B3AD24] [HKLM\Software\Classes\Installer\Features\BA172DB42E6685D4FA8808EFB370074C] [HKLM\Software\Classes\Installer\Products\BA172DB42E6685D4FA8808EFB370074C] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BA172DB42E6685D4FA8808EFB370074C] [HKLM\Software\Wow6432Node\Classes\Installer\Features\BA172DB42E6685D4FA8808EFB370074C] [HKLM\Software\Wow6432Node\Classes\Installer\Products\BA172DB42E6685D4FA8808EFB370074C] [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Dealply] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB6AF8AEEB922FA4392548F13812E50B] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\64A6E60055D801F4BB8AC269354B72B8] [HKLM\Software\Classes\Installer\Features\112C48061A10E464790A9077E221B205] [HKLM\Software\Classes\Installer\Products\112C48061A10E464790A9077E221B205] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\112C48061A10E464790A9077E221B205] [HKLM\Software\Wow6432Node\Classes\Installer\Features\112C48061A10E464790A9077E221B205] [HKLM\Software\Wow6432Node\Classes\Installer\Products\112C48061A10E464790A9077E221B205] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\464AA55239C100F32AF2D438EDDC0F47] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5652BA3D5FB98AE31B337BF0AF939856] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EB95E1AFCBABE3DB9ECCC669B99494] [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\eSafeSvc] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836] C:\Program Files (x86)\sweetpacks bundle uninstaller_BlueStacks_1138898 C:\Program Files (x86)\uTorrent C:\ProgramData\InstallMate C:\Users\USER\AppData\Roaming\BitTorrent [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified D:\torrent\nfs\Need For Speed Most Wanted\makeDesktopIcon.exe [HKCU\Software\ebay Vista Gadget FR] C:\Windows\Installer\27a1bba.msi C:\Windows\Installer\27a1bc0.msi C:\Windows\Installer\8d7d5f.msi C:\Users\USER\Downloads\cacaoweb.exe EmptyTemp EmptyPrefetch EmptyFlash EmptyCLSID FirewallRAZ ProxyFix SysRestore