Farbar Recovery Scan Tool (x64) Version: 08-01-2020 Exécuté par Benjamin (10-01-2020 14:52:44) Exécuté depuis C:\Users\Benjamin\Desktop Mode d'amorçage: Normal ================== Chercher Fichiers: "searchall: Avast" ============= Fichier: ======== C:\Windows\WinSxS\Manifests\amd64_avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_5b87bb4915fad71f.cat [2020-01-07 00:03][2020-01-07 00:03] 000008761 _____ () 2B5CEB2B36C05A25CBC1C214D51A9A27 [Le fichier est signé numériquement] C:\Windows\WinSxS\Manifests\amd64_avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_5b87bb4915fad71f.manifest [2020-01-07 00:03][2020-01-07 00:03] 000023612 ____N () 489FC2367B23F9D395AE9EA98C314F68 [Fichier non signé] C:\Windows\WinSxS\Manifests\amd64_avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_6067bd3b12cf0652.cat [2020-01-07 00:03][2020-01-07 00:03] 000008761 _____ () E054F36DD82342DA4BC525791E120CE5 [Le fichier est signé numériquement] C:\Windows\WinSxS\Manifests\amd64_avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_6067bd3b12cf0652.manifest [2020-01-07 00:03][2020-01-07 00:03] 000001231 ____N () F90B15D80727F34B8CD739271E149031 [Fichier non signé] C:\Windows\WinSxS\Manifests\amd64_policy.14.0.avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_4e76363ccee8be59.cat [2020-01-07 00:03][2020-01-07 00:03] 000008761 _____ () 95608C0F7592B55845118E134F9F3033 [Le fichier est signé numériquement] C:\Windows\WinSxS\Manifests\amd64_policy.14.0.avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_4e76363ccee8be59.manifest [2020-01-07 00:03][2020-01-07 00:03] 000000754 ____N () B6E8974DD57BB1CAE2072FD9C442C85A [Fichier non signé] C:\Windows\WinSxS\Manifests\amd64_policy.14.0.avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_5356382ecbbced8c.cat [2020-01-07 00:03][2020-01-07 00:03] 000008761 _____ () 03172D8C553458479E288D4CD8D36C32 [Le fichier est signé numériquement] C:\Windows\WinSxS\Manifests\amd64_policy.14.0.avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_5356382ecbbced8c.manifest [2020-01-07 00:03][2020-01-07 00:03] 000000754 ____N () F9CEB610F29572754ABB4F56CD6C8DD0 [Fichier non signé] C:\Windows\WinSxS\Manifests\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_a334f2202a770025.cat [2020-01-07 00:03][2020-01-07 00:03] 000008761 _____ () B5FFD616B62A98B00488826351C81E7F [Le fichier est signé numériquement] C:\Windows\WinSxS\Manifests\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_a334f2202a770025.manifest [2020-01-07 00:03][2020-01-07 00:03] 000023610 ____N () B7F3EA0392C99A6F01C0EF18F7848234 [Fichier non signé] C:\Windows\WinSxS\Manifests\x86_avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_a814f412274b2f58.cat [2020-01-07 00:03][2020-01-07 00:03] 000008761 _____ () 3724AC984FCFB8EEC93325C907498F3D [Le fichier est signé numériquement] C:\Windows\WinSxS\Manifests\x86_avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_a814f412274b2f58.manifest [2020-01-07 00:03][2020-01-07 00:03] 000001227 ____N () 04E4CC2AC81999F0A6E292A724EE991E [Fichier non signé] C:\Windows\WinSxS\Manifests\x86_policy.14.0.avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_96236d13e364e75f.cat [2020-01-07 00:03][2020-01-07 00:03] 000008761 _____ () 81A0D0AB06E26D0A892AC6FDE5F97612 [Le fichier est signé numériquement] C:\Windows\WinSxS\Manifests\x86_policy.14.0.avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_96236d13e364e75f.manifest [2020-01-07 00:03][2020-01-07 00:03] 000000750 ____N () 6E31805DA2FACE7BCD0C372CEBAC7F3F [Fichier non signé] C:\Windows\WinSxS\Manifests\x86_policy.14.0.avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_9b036f05e0391692.cat [2020-01-07 00:03][2020-01-07 00:03] 000008761 _____ () B3E83DD33BFE2E56CCBF56DEBCB0979A [Le fichier est signé numériquement] C:\Windows\WinSxS\Manifests\x86_policy.14.0.avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_9b036f05e0391692.manifest [2020-01-07 00:03][2020-01-07 00:03] 000000750 ____N () 15CFCEE337FB7BFBDA6CE16398816B53 [Fichier non signé] C:\Windows\Prefetch\AVASTCLEAR.EXE-D9BE24A6.pf [2020-01-07 17:02][2020-01-09 17:09] 000065220 _____ () 0328FEC7A9321B171597F9D0EF82EF1C [Fichier non signé] C:\Windows\Prefetch\AVASTUI.EXE-19622E35.pf [2020-01-07 00:04][2020-01-09 17:40] 000076230 _____ () D8FA93FE192B719F0A2C7B4CC66731ED [Fichier non signé] C:\Windows\Prefetch\AVAST_FREE_ANTIVIRUS_SETUP_ON-01205AD0.pf [2020-01-08 15:39][2020-01-08 15:39] 000024753 _____ () 1C3D083759F0D934190F176762843182 [Fichier non signé] C:\Windows\Prefetch\AVAST_FREE_ANTIVIRUS_SETUP_ON-55C37A48.pf [2020-01-09 17:05][2020-01-09 17:05] 000011384 _____ () FDEBB63E2A570D29AAEEB245E6FCE65A [Fichier non signé] C:\Windows\Prefetch\AVAST_FREE_ANTIVIRUS_SETUP_ON-57E79BD0.pf [2020-01-07 00:03][2020-01-09 17:20] 000025204 _____ () FA1C5A6AAA9C71B8885234A9E99B12A5 [Fichier non signé] C:\Windows\Prefetch\AVAST_FREE_ANTIVIRUS_SETUP_ON-80FA11CF.pf [2020-01-09 17:06][2020-01-09 17:06] 000011061 _____ () 94E020F5C03A9E90FF84AFCDDB9F7DA0 [Fichier non signé] C:\Windows\Prefetch\AVAST_FREE_ANTIVIRUS_SETUP_ON-91C6394C.pf [2020-01-09 17:20][2020-01-09 17:20] 000023607 _____ () 9F3275B91F86AE0A8515698102A382AD [Fichier non signé] C:\Windows\Prefetch\AVAST_FREE_ANTIVIRUS_SETUP_ON-AFC9D2E9.pf [2020-01-07 00:03][2020-01-07 00:03] 000024876 _____ () 879F72F8FA2F8D9D15C16AE6ED25211B [Fichier non signé] C:\Users\Benjamin\Desktop\Capture d’écran AVAST Software.jpg [2020-01-09 18:39][2020-01-09 18:39] 000455142 _____ () 00482D19496492AB70438B1297F11683 [Fichier non signé] C:\Users\Benjamin\AppData\Roaming\Mozilla\Firefox\Profiles\b0t0c98q.default\extensions\sp@avast.com.xpi [2020-01-07 12:06][2020-01-09 17:20] 003331183 _____ () F5F36E64AD942C97274FBDC5EE02076D [Fichier non signé] C:\Users\Benjamin\AppData\Roaming\Mozilla\Firefox\Profiles\b0t0c98q.default\extensions\wrc@avast.com.xpi [2020-01-07 00:05][2020-01-09 17:52] 000795051 _____ () 04DBC56F865008059B29AB9F8E6A0ED1 [Fichier non signé] C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Recent\Capture d’écran AVAST Software.lnk [2020-01-09 18:39][2020-01-09 18:54] 000000748 _____ () 7E1B09F0FC19C133ED3CD4B758E1A83A [Fichier non signé] C:\Users\Benjamin\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\AppIconCache\100\avast! Antivirus [2020-01-07 00:04][2020-01-07 00:04] 000037014 _____ () 3212927E3EDF091342487F5EBB045245 [Fichier non signé] C:\ProgramData\AVAST Software\Subscriptions\license.avastlic [2020-01-07 00:03][2020-01-09 17:20] 000001466 _____ () 4069B875449ED70723082A93F22A2CE4 [Fichier non signé] C:\ProgramData\AVAST Software\Avast\avast5.ini [2020-01-09 17:20][2020-01-10 13:58] 000015796 _____ () 12363DE19ED91D237780097215275B57 [Fichier non signé] C:\ProgramData\AVAST Software\Avast\opm\avastmsg_state.ini [2020-01-09 17:22][2020-01-10 14:50] 000000002 _____ () F3B25701FE362EC84616A93A45CE9998 [Le fichier est signé numériquement] C:\ProgramData\AVAST Software\Avast\log\AvastSvc.log [2020-01-09 17:31][2020-01-10 14:52] 000587887 _____ () B7D8135313E5B1576A82418907F41DE2 [Fichier non signé] C:\ProgramData\AVAST Software\Avast\log\AvastUI.log [2020-01-09 17:31][2020-01-10 03:46] 000174386 _____ () 10F4B67E3D8C951AFE1EF0E94CA64C3A [Fichier non signé] C:\Program Files\WindowsApps\64343GTDocStudio.OfficeDocOpener_3.2.13.0_x86__3h5nez1g3qt2c\share\config\soffice.cfg\cui\ui\javastartparametersdialog.ui [2019-11-18 17:12][2019-11-18 17:12] 000013451 _____ () C99C3CF5A563338757A91B83EF9371F0 [Fichier non signé] C:\Program Files\AVAST Software\Avast\AvastNM.exe [2020-01-09 17:20][2020-01-09 17:20] 000741256 _____ () 0FEC8A13270602AD45DDADCA4A5278CF [Le fichier est signé numériquement] C:\Program Files\AVAST Software\Avast\AvastNM.json [2020-01-09 17:20][2020-01-09 17:20] 000000577 _____ () 11A24DD50131F97577156C20F4D32ECC [Fichier non signé] C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2020-01-09 17:20][2020-01-09 17:20] 000996880 _____ (AVAST Software) B1C084B1BA61B4ED3B1F5C27F5F3AB9C [Le fichier est signé numériquement] C:\Program Files\AVAST Software\Avast\AvastUI.exe [2020-01-09 17:20][2020-01-09 17:21] 012144016 _____ (AVAST Software) 85CF30A1AE0819F3021F08E971FFB23C [Le fichier est signé numériquement] C:\Program Files\AVAST Software\Avast\AvastUI.exe.157866059409301 [2020-01-10 13:49][2020-01-10 13:49] 012128648 _____ (AVAST Software) F691D67A07DECB156B7456DF43D46DD8 [Le fichier est signé numériquement] C:\Program Files\AVAST Software\Avast\AvastUI.exe.sum [2020-01-09 17:21][2020-01-09 17:21] 000000077 _____ () C50104464E5C8F3FD9E47C840EB22696 [Fichier non signé] C:\Program Files\AVAST Software\Avast\AvastUI.exe.sum.157866059409301 [2020-01-10 13:49][2020-01-10 13:49] 000000077 _____ () 58AB66E291A859E0D5711176164761A6 [Fichier non signé] C:\Program Files\AVAST Software\Avast\WebRep\FF\wrc@avast.com.xpi [2020-01-09 17:20][2020-01-09 17:20] 000789048 _____ () 72F7EBB68166E86CBDB80B0528464938 [Fichier non signé] C:\Program Files\AVAST Software\Avast\setup\redist\data\policy.14.0.avast.vc140.mfc\x86\Policy.14.0.Avast.VC140.MFC.cat [2020-01-09 17:20][2020-01-09 17:20] 000008761 ____C () B3E83DD33BFE2E56CCBF56DEBCB0979A [Le fichier est signé numériquement] C:\Program Files\AVAST Software\Avast\setup\redist\data\policy.14.0.avast.vc140.mfc\x86\Policy.14.0.Avast.VC140.MFC.manifest [2020-01-09 17:20][2020-01-09 17:20] 000000750 ____C () 15CFCEE337FB7BFBDA6CE16398816B53 [Fichier non signé] C:\Program Files\AVAST Software\Avast\setup\redist\data\policy.14.0.avast.vc140.mfc\amd64\Policy.14.0.Avast.VC140.MFC.cat [2020-01-09 17:20][2020-01-09 17:20] 000008761 ____C () 03172D8C553458479E288D4CD8D36C32 [Le fichier est signé numériquement] C:\Program Files\AVAST Software\Avast\setup\redist\data\policy.14.0.avast.vc140.mfc\amd64\Policy.14.0.Avast.VC140.MFC.manifest [2020-01-09 17:20][2020-01-09 17:20] 000000754 ____C () F9CEB610F29572754ABB4F56CD6C8DD0 [Fichier non signé] C:\Program Files\AVAST Software\Avast\setup\redist\data\policy.14.0.avast.vc140.crt\x86\Policy.14.0.Avast.VC140.CRT.cat [2020-01-09 17:20][2020-01-09 17:20] 000008761 ____C () 81A0D0AB06E26D0A892AC6FDE5F97612 [Le fichier est signé numériquement] C:\Program Files\AVAST Software\Avast\setup\redist\data\policy.14.0.avast.vc140.crt\x86\Policy.14.0.Avast.VC140.CRT.manifest [2020-01-09 17:20][2020-01-09 17:20] 000000750 ____C () 6E31805DA2FACE7BCD0C372CEBAC7F3F [Fichier non signé] C:\Program Files\AVAST Software\Avast\setup\redist\data\policy.14.0.avast.vc140.crt\amd64\Policy.14.0.Avast.VC140.CRT.cat [2020-01-09 17:20][2020-01-09 17:20] 000008761 ____C () 95608C0F7592B55845118E134F9F3033 [Le fichier est signé numériquement] C:\Program Files\AVAST Software\Avast\setup\redist\data\policy.14.0.avast.vc140.crt\amd64\Policy.14.0.Avast.VC140.CRT.manifest [2020-01-09 17:20][2020-01-09 17:20] 000000754 ____C () B6E8974DD57BB1CAE2072FD9C442C85A [Fichier non signé] C:\Program Files\AVAST Software\Avast\setup\redist\data\avast.vc140.mfc\x86\Avast.VC140.MFC.cat [2020-01-09 17:20][2020-01-09 17:20] 000008761 ____C () 3724AC984FCFB8EEC93325C907498F3D [Le fichier est signé numériquement] C:\Program Files\AVAST Software\Avast\setup\redist\data\avast.vc140.mfc\x86\Avast.VC140.MFC.manifest [2020-01-09 17:20][2020-01-09 17:20] 000001227 ____C () 04E4CC2AC81999F0A6E292A724EE991E [Fichier non signé] C:\Program Files\AVAST Software\Avast\setup\redist\data\avast.vc140.mfc\amd64\Avast.VC140.MFC.cat [2020-01-09 17:20][2020-01-09 17:20] 000008761 ____C () E054F36DD82342DA4BC525791E120CE5 [Le fichier est signé numériquement] C:\Program Files\AVAST Software\Avast\setup\redist\data\avast.vc140.mfc\amd64\Avast.VC140.MFC.manifest [2020-01-09 17:20][2020-01-09 17:20] 000001231 ____C () F90B15D80727F34B8CD739271E149031 [Fichier non signé] C:\Program Files\AVAST Software\Avast\setup\redist\data\avast.vc140.crt\x86\Avast.VC140.CRT.cat [2020-01-09 17:20][2020-01-09 17:20] 000008761 ____C () B5FFD616B62A98B00488826351C81E7F [Le fichier est signé numériquement] C:\Program Files\AVAST Software\Avast\setup\redist\data\avast.vc140.crt\x86\Avast.VC140.CRT.manifest [2020-01-09 17:20][2020-01-09 17:20] 000023610 ____C () B7F3EA0392C99A6F01C0EF18F7848234 [Fichier non signé] C:\Program Files\AVAST Software\Avast\setup\redist\data\avast.vc140.crt\amd64\Avast.VC140.CRT.cat [2020-01-09 17:20][2020-01-09 17:20] 000008761 ____C () 2B5CEB2B36C05A25CBC1C214D51A9A27 [Le fichier est signé numériquement] C:\Program Files\AVAST Software\Avast\setup\redist\data\avast.vc140.crt\amd64\Avast.VC140.CRT.manifest [2020-01-09 17:20][2020-01-09 17:20] 000023612 ____C () 489FC2367B23F9D395AE9EA98C314F68 [Fichier non signé] C:\Program Files\AVAST Software\Avast\SafePrice\FF\sp@avast.com.xpi [2020-01-09 17:20][2020-01-09 17:20] 003331183 _____ () F5F36E64AD942C97274FBDC5EE02076D [Fichier non signé] C:\Program Files\AVAST Software\Avast\RescueDisk\AvastPE2.exe [2020-01-09 17:20][2020-01-09 17:20] 001036168 _____ (AVAST Software) 56C8D12BC9AD0F4522BE31268C454535 [Le fichier est signé numériquement] dossier: ======== 2020-01-07 00:03 - 2020-01-07 00:03 _____ C:\Windows\WinSxS\amd64_avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_5b87bb4915fad71f 2020-01-07 00:03 - 2020-01-07 00:03 _____ C:\Windows\WinSxS\amd64_avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_6067bd3b12cf0652 2020-01-07 00:03 - 2020-01-07 00:03 _____ C:\Windows\WinSxS\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_a334f2202a770025 2020-01-07 00:03 - 2020-01-07 00:03 _____ C:\Windows\WinSxS\x86_avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_a814f412274b2f58 2020-01-07 00:04 - 2020-01-10 13:58 _____ C:\Windows\Temp\avast_ash2 2020-01-07 00:04 - 2020-01-10 14:52 _____ C:\Windows\Temp\_avast_ 2020-01-07 00:05 - 2020-01-07 00:05 _____ C:\Windows\Temp\avast_ash2\Avast Antivirus 2020-01-07 00:05 - 2020-01-07 00:05 _____ C:\Windows\Temp\avast_ash2\Avast Antivirus with BCU 2020-01-07 00:04 - 2020-01-07 00:04 _____ C:\Windows\System32\Tasks\Avast Software 2020-01-09 17:30 - 2020-01-09 17:30 _____ C:\Users\Benjamin\AppData\Roaming\AVAST Software 2020-01-09 17:30 - 2020-01-09 17:31 _____ C:\Users\Benjamin\AppData\Roaming\AVAST Software\Avast 2020-01-07 00:03 - 2020-01-07 00:03 _____ C:\Users\Benjamin\AppData\Local\Temp\_avast_ 2020-01-07 00:03 - 2020-01-09 17:20 _____ C:\ProgramData\AVAST Software 2020-01-09 17:20 - 2020-01-10 14:52 _____ C:\ProgramData\AVAST Software\Avast 2020-01-09 17:20 - 2020-01-09 17:20 _____ C:\ProgramData\AVAST Software\Persistent Data\Avast 2020-01-09 17:20 - 2020-01-09 17:20 _____ C:\Program Files\AVAST Software 2020-01-09 17:20 - 2020-01-09 17:20 _____ C:\Program Files\Common Files\AVAST Software 2020-01-09 17:20 - 2020-01-10 14:24 _____ C:\Program Files\AVAST Software\Avast 2020-01-09 17:20 - 2020-01-09 17:20 ____C C:\Program Files\AVAST Software\Avast\setup\redist\data\avast.vc140.crt 2020-01-09 17:20 - 2020-01-09 17:20 ____C C:\Program Files\AVAST Software\Avast\setup\redist\data\avast.vc140.mfc 2020-01-09 17:20 - 2020-01-09 17:20 ____C C:\Program Files\AVAST Software\Avast\setup\redist\data\policy.14.0.avast.vc140.crt 2020-01-09 17:20 - 2020-01-09 17:20 ____C C:\Program Files\AVAST Software\Avast\setup\redist\data\policy.14.0.avast.vc140.mfc Registre: ======== [HKEY_LOCAL_MACHINE\SOFTWARE\AVAST Software] [HKEY_LOCAL_MACHINE\SOFTWARE\AVAST Software\Avast] [HKEY_LOCAL_MACHINE\SOFTWARE\AVAST Software\Avast] "SetupLog"="C:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Update.log" [HKEY_LOCAL_MACHINE\SOFTWARE\AVAST Software\Avast] "ProgramFolder"="C:\Program Files\AVAST Software\Avast" [HKEY_LOCAL_MACHINE\SOFTWARE\AVAST Software\Avast] "SetupFolder"="C:\Program Files\AVAST Software\Avast\setup" [HKEY_LOCAL_MACHINE\SOFTWARE\AVAST Software\Avast] "DataFolder"="C:\ProgramData\AVAST Software\Avast" [HKEY_LOCAL_MACHINE\SOFTWARE\AVAST Software\Avast] "LicenseFile"="C:\ProgramData\AVAST Software\Subscriptions\license.avastlic" [HKEY_LOCAL_MACHINE\SOFTWARE\AVAST Software\Avast\Wsc] "IWscAVStatus4"="Avast Antivirus" [HKEY_LOCAL_MACHINE\SOFTWARE\AVAST Software\Avast\Wsc] "IWscASStatus"="Avast Antivirus" [HKEY_LOCAL_MACHINE\SOFTWARE\AVAST Software\Products] "AvastAntivirus"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\avast] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AvastPersistentStorage] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3C5422B3-D1E2-449E-A736-809C934C2F80}] ""="Avast IExtensionValidation implementation" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3C5422B3-D1E2-449E-A736-809C934C2F80}\InprocServer32] ""="C:\Program Files\AVAST Software\Avast\aswAMSI.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] ""="avast" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32] ""="C:\Program Files\AVAST Software\Avast\ashShell.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32] "ReleaseName"="C:\Program Files\AVAST Software\Avast\ashShell.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\InprocServer32] ""="C:\Program Files\AVAST Software\Avast\asOutExt.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\ProgID] ""="Avast.AsOutExt.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B342E21B-AD7E-4568-AE3F-D0D844537A7A}\VersionIndependentProgID] ""="Avast.AsOutExt" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FB904E4E-D2C7-4C8D-8492-B620BB9896B1}] ""="Avast IAntimalwareProvider implementation" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FB904E4E-D2C7-4C8D-8492-B620BB9896B1}\InprocServer32] ""="C:\Program Files\AVAST Software\Avast\aswAMSI.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.avast.nativeproxy] [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.avast.nativeproxy] ""="C:\Program Files\AVAST Software\Avast\AvastNM.json" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\Avast.AsOutExt] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\Avast.AsOutExt] "FriendlyName"="Avast Add-in" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\Avast.AsOutExt] "Description"="Avast Outlook Add-in" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}] "DISPLAYNAME"="Avast Antivirus" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}] "PRODUCTEXE"="C:\Program Files\AVAST Software\Avast\wsc_proxy.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}] "REPORTINGEXE"="C:\Program Files\AVAST Software\Avast\wsc_proxy.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Avast Mail Scanner Trusted] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Avast SSL Scanner Cache] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run] "AvastUI.exe"="0x03000000AC1DB94A60C7D501" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AvastUI.exe"=""C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] "{472083B0-C522-11CF-8763-00608CC02F24}"="avast" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_avast.vc140.crt_fcc99ee6193ebbca_none_020285fe6d6e0580] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_avast.vc140.mfc_fcc99ee6193ebbca_none_018be6966dc83925] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_policy.14.0.avast.vc140.crt_fcc99ee6193ebbca_none_ef17e13d91c55d96] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_policy.14.0.avast.vc140.mfc_fcc99ee6193ebbca_none_eea141d5921f913b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_avast.vc140.crt_fcc99ee6193ebbca_none_49afbcd581ea2e86] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_avast.vc140.mfc_fcc99ee6193ebbca_none_49391d6d8244622b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_policy.14.0.avast.vc140.crt_fcc99ee6193ebbca_none_36c51814a641869c] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_policy.14.0.avast.vc140.mfc_fcc99ee6193ebbca_none_364e78aca69bba41] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\AvastSvc.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\AvastSvc.exe] "DumpFolder"="C:\ProgramData\AVAST Software\Avast\log" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\AvastUI.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\AvastUI.exe] "DumpFolder"="C:\ProgramData\AVAST Software\Avast\log" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2FB5DD35-945A-4C3F-8E19-C257606DB939}] "Path"="\Avast Emergency Update" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2FB5DD35-945A-4C3F-8E19-C257606DB939}] "Author"="Avast Emergency Update" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2FB5DD35-945A-4C3F-8E19-C257606DB939}] "URI"="\Avast Emergency Update" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6C450CA7-075D-4ECC-AD2A-FCF2ECF6C98B}] "Path"="\Avast Software\Overseer" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6C450CA7-075D-4ECC-AD2A-FCF2ECF6C98B}] "Author"="Avast Software" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6C450CA7-075D-4ECC-AD2A-FCF2ECF6C98B}] "Description"="Avast Overseer is a support application that fixes common technical issues with Avast products." [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6C450CA7-075D-4ECC-AD2A-FCF2ECF6C98B}] "URI"="\Avast Software\Overseer" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Avast Emergency Update] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Avast Software] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings] "TargetingAttributes"="{ "Version": 75, "SchemaVersion": 1, "PartA": [ "App", "AppVer", "AttrDataVer" ], "Default": [ "DeviceFamily", "f:FlightRing", "t:OSVersionFull" ], "PartB": { "CDM": [ "ChassisTypeId", "r:CurrentBranch", "DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "c:InstallLanguage", "c:IsDomainJoined", "t:IsTestLab", "OEMModel", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:ProcessorIdentifier", "c:TelemetryLevel", "t:IsMsftOwned", "t:WCOSProductId", "c:OSUILocale" ], "CORTANA_GATEKEEPER": [ "r:CurrentBranch", "f:FlightRing", "f:IsRetailOS" ], "CORTANAUWP": [ "c:OSUILocale", "t:OSVersionFull", "v:CortanaAppVer" ], "CORTANAUWPTEST": [ "+CORTANAUWP", "v:CortanaAppVerTest" ], "CTAC": [ "+FSS" ], "DDC": [ "+WU_STORE", "+_WU_PTI" ], "DXDB": [ "DeviceFamily", "f:FlightRing", "r:IsHybridOrXGpu", "t:OSVersionFull" ], "EDGE_SERVICEUI": [ "t:LocalDeviceID", "t:LocalUserID" ], "FCON": [ "+CDM" ], "FSS": [ "r:PreviewBuildsManagerEnabled", "f:BranchReadinessLevelRaw", "u:BranchReadinessLevelSource", "r:BuildFID", "t:DeviceFamily", "DeviceId", "c:EnablePreviewBuilds", "f:FlightingPolicyValue", "f:IsRetailOS", "f:ManagePreviewBuilds", "OSVersionFull", "t:WCOSProductId", "r:SmartActiveHoursState", "r:ActiveHoursStart", "r:ActiveHoursEnd" ], "MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [ "t:OSVersionFull", "t:IsTestLab", "f:FlightRing" ], "MITIGATION": [ "t:DeviceFamily", "f:FlightRing", "c:FlightIds", "c:IsDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "t:IsTestLab", "IsVM", "OEMModel", "c:OSEdition", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "t:SMode", "f:IsFlightingEnabled", "c:FirmwareVersion", "c:TelemetryLevel" ], "MLMOD": [ "ChassisTypeId", "t:DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "f:IsRetailOS", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale" ], "MTP": [ "+_WU_OS_CORE" ], "MUSE": [ "+_WU_FB", "ChassisTypeId", "deviceClass", "deviceId", "c:FlightIds", "locale", "ms", "os", "osVer", "ring", "sampleId", "sku", "r:DaysSince19H1FUOffer", "u:DisableDualScan", "u:UpdateServiceUrl", "c:CommercialId" ], "NOISYHAMMER": [ "+WU_OS" ], "SEDIMENTPACK": [ "+WU_OS" ], "SETUP360": [ "t:OSSkuId", "f:FlightRing" ], "STORAGEGROVELER": [ "a:Free", "c:TelemetryLevel", "f:FlightRing", "f:IsFlightingEnabled", "IsVM", "t:OSVersionFull" ], "UTC": [ "+UTC_STATIC", "osVer", "locale", "ring", "f:PilotRing", "f:IsRetailOS", "ms", "expId", "t:SMode" ], "UTC_STATIC": [ "os", "deviceId", "sampleId", "deviceClass", "sku", "OEMModel", "OEMName_Uncleaned", "c:PrimaryDiskType", "c:ProcessorModel", "c:TotalPhysicalRAM" ], "WAASASSESSMENT": [ "+WU_OS" ], "WOSC": [ "t:DeviceFamily", "f:FlightRing", "f:IsFlightingEnabled", "t:IsMsftOwned", "t:LocalDeviceID", "t:OSSkuId", "c:OSUILocale", "t:OSVersionFull", "c:TelemetryLevel", "r:IsHybridOrXGpu" ], "WPSHIFT": [ "+MTP" ], "WU": [ "+WU_OS", "r:DUInternal" ], "_WU_AV": [ "r:AvastReg", "r:AvastBlackScreen", "v:AvastVer", "r:AvgReg", "v:AvgVer", "r:EsetReg", "v:EsetVer", "r:KasperskyReg", "v:KasperskyVer", "v:SymantecVer", "r:TencentReg", "r:TencentType" ], "_WU_COMMON": [ "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "r:DriverPartnerRing", "r:FlightContent", "f:FlightingBranchName", "f:FlightRing", "HoloLens", "c:InstallationType", "c:InstallLanguage", "f:IsFlightingEnabled", "r:IsFlightingEnabled", "c:MobileOperatorCommercialized", "OEMModel", "OEMName_Uncleaned", "r:OemPartnerRing", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:OSUILocale", "c:ProcessorManufacturer", "r:ReleaseType", "v:SkypeRoomSystem", "t:SMode", "c:TelemetryLevel", "r:WindowsMixedReality", "v:WuClientVer", "p:DucPublisherId", "p:DucDeviceModelId", "p:DucOemPartnerRing", "p:DucCustomPackageId" ], "_WU_FB": [ "u:BranchReadinessLevel", "u:DeferQualityUpdatePeriodInDays", "u:DeferFeatureUpdatePeriodInDays", "r:PausedFeatureStatus", "r:PausedQualityStatus" ], "WU_OS": [ "+_WU_OS_CORE", "+_WU_FB" ], "_WU_OS_CORE": [ "+_WU_COMMON", "+_WU_AV", "r:AhnLabKeyboard", "a:Bios", "r:BlockFeatureUpdates", "c:CommercialId", "a:DataVer_RS5", "r:DisconnectedStandby", "r:DchuNvidiaGrfxExists", "r:DchuNvidiaGrfxVen", "r:DchuIntelGrfxExists", "r:DchuIntelGrfxVen", "r:DchuAmdGrfxExists", "r:DchuAmdGrfxVen", "c:FirmwareVersion", "a:Free", "a:GStatus_RS3", "a:GStatus_RS4", "a:GStatus_RS5", "r:HidOverGattReg", "r:InstallDate", "c:IsDeviceRetailDemo", "c:IsPortableOperatingSystem", "IsVM", "c:OEMModelBaseBoard", "r:OobeSeeker", "r:OSRollbackBuild", "r:OSRollbackCount", "r:OSRollbackDate", "PhoneTargetingName", "r:PonchAllow", "r:PonchBlock", "c:ProcessorIdentifier", "r:RecoveredFromBuild", "r:RecoveredOnDate", "r:Steam", "v:TobiiVer", "v:TrendMicroVer", "r:UninstallActive", "l:UpdateManagementGroup", "a:UpgEx_RS3", "a:UpgEx_RS4", "a:UpgEx_RS5", "a:Version_RS5", "r:DisableWUfBOfferBlock", "a:UpgEx_19H1", "a:SdbVer_19H1", "a:GStatus_19H1", "a:GStatus_19H1Setup", "a:TimestampEpochString_19H1Setup", "a:GenTelRunTimestamp_19H1", "a:DataExpDateEpoch_19H1", "r:EnableWUfBUpgradeGates", "r:GStatusBlockIDs_All", "TimestampDelta_19H1Subtract19H1Setup", "DataExpDateDelta_19H1Subtract19H1Setup", "a:DataExpDateEpoch_19H1Setup", "a:TimestampEpochString_19H1", "r:IsContainerMgrInstalled", "r:IsWDAGEnabled", "r:MTPTargetingInfo", "r:EKB19H2InstallCount", "r:EKB19H2UnInstallCount", "r:EKB19H2InstallTimeEpoch", "r:EKB19H2UnInstallTimeEpoch", "r:BlockEdgeWithChromiumUpdate", "r:IsWDATPEnabled", "r:IsAutopilotRegistered", "r:EdgeWithChromiumInstallVersion", "r:EdgeWithChromiumInstallFailureCount", "r:IsEdgeWithChromiumInstalled" ], "_WU_PTI": [ "c:FrontFacingCameraResolution", "c:RearFacingCameraResolution", "c:TotalPhysicalRAM", "c:NFCProximity", "c:Magnetometer", "c:Gyroscope", "c:D3DMaxFeatureLevel", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical" ], "WU_STORE": [ "+_WU_COMMON", "r:AppChannels", "r:AppRMIDs", "u:BranchReadinessLevel" ] }, "Required": [ "App", "AppVer", "AttrDataVer" ], "Aliases": { "ChassisTypeId": "c:ChassisType", "DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup", "deviceClass": "t:DeviceFamily", "deviceId": "t:LocalDeviceID", "DeviceId": "t:LocalDeviceID", "expId": "c:FlightIds", "FlightRing": "f:FlightRing", "IsVM": "a:ISVM", "locale": "c:OSUILocale", "ms": "t:IsMsftOwned", "OEMModel": "c:OEMModelNumber", "OEMName_Uncleaned": "c:OEMManufacturerName", "osVer": "t:OSVersionFull", "OSVersionFull": "t:OSVersionFull", "PhoneTargetingName": "c:OEMModelName", "ring": "f:FlightRing", "sampleId": "t:PopVal", "sku": "t:OSSkuId", "TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup" }, "Fallback": { "r:AvastBlackScreen": "r:AvgBlackScreen", "a:Bios": "a:Bios_RS3", "a:Bios_RS3": "a:Bios_RS4", "a:Bios_RS4": "a:Bios_RS5", "r:BlockFeatureUpdates": "r:BlockWUUpgrades", "r:BlockWUUpgrades": "r:BlockWUUpgradesWow", "r:BuildFID": "r:BuildFID_WCOS", "r:BuildFID_WCOS": "r:BuildFID_WCOS2", "r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2", "r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending", "r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2", "r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending", "r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2", "r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending", "r:DriverPartnerRing": "r:OSDataDriverPartnerRing", "r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow", "r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow", "f:FlightingBranchName": "c:FlightingBranchName", "a:Free": "a:Free_RS3", "a:Free_RS3": "a:Free_RS4", "a:Free_RS4": "a:Free_RS5", "HoloLens": "r:WindowsMixedReality", "r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow", "a:ISVM": "a:ISVM_RS3", "a:ISVM_RS3": "a:ISVM_RS4", "a:ISVM_RS4": "a:ISVM_RS5", "c:OEMModelBaseBoard": "r:OEMModelBaseBoard", "r:PonchAllow": "r:PonchAllowKey", "r:PonchAllowKey": "r:PonchAllowWow", "r:PonchAllowWow": "r:PonchAllowWowKey", "v:SymantecVer": "v:SymantecVer64", "v:TobiiVer": "v:TobiiVerx86", "v:TobiiVerx86": "v:TobiiVer1x86" }, "Transform": { "IsDomainJoined": { "Ignore": [ "0" ] }, "IsHybridOrXGpu": { "Ignore": [ "0" ] }, "IsMsftOwned": { "Ignore": [ "0" ] }, "IsPortableOperatingSystem": { "Ignore": [ "0" ] }, "IsTestLab": { "Ignore": [ "0" ] }, "IsVM": { "Ignore": [ "0" ] }, "OEMModel": { "SubLength": 100 }, "OEMName_Uncleaned": { "SubLength": 100 }, "PausedFeatureStatus": { "Ignore": [ "0" ] }, "PausedQualityStatus": { "Ignore": [ "0" ] }, "SMode": { "Ignore": [ "0" ] } }, "Registry": { "ActiveHoursEnd": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursEnd", "RegValueType": "REG_DWORD" }, "ActiveHoursStart": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursStart", "RegValueType": "REG_DWORD" }, "AhnLabKeyboard": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt", "ValueName": "NbTpMsExist" }, "AppChannels": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ChannelId", "EncodingType": "Json" }, "AppRMIDs": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ReleaseManagementId", "EncodingType": "Json" }, "AvastBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "Win10-1803" }, "AvastReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "QualityCompat" }, "AvgBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "Win10-1803" }, "AvgReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "QualityCompat" }, "BlockEdgeWithChromiumUpdate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "DoNotUpdateToEdgeWithChromium", "RegValueType": "REG_DWORD" }, "BlockFeatureUpdates": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade", "ValueName": "BlockFeatureUpdates", "RegValueType": "REG_DWORD" }, "BlockWUUpgrades": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BlockWUUpgradesWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BuildFID": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS2": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "CurrentBranch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "BuildBranch", "RegValueType": "REG_SZ" }, "DaysSince19H1FUOffer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin", "ValueName": "DaysSinceLastOffer", "RegValueType": "REG_QWORD" }, "DchuAmdGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdap", "ValueName": "DriverDelete" }, "DchuAmdGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdap", "IfExists": true }, "DchuAmdGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdap", "ValueName": "DCHUVen" }, "DchuAmdGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdap\\Parameters", "ValueName": "DCHUVen" }, "DchuIntelGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DriverDelete" }, "DchuIntelGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "IfExists": true }, "DchuIntelGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DCHUVen" }, "DchuIntelGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DriverDelete" }, "DchuNvidiaGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "IfExists": true }, "DchuNvidiaGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters", "ValueName": "DCHUVen" }, "DefaultUserRegion": { "HKey": "HKEY_USERS", "FullPath": ".DEFAULT\\Control Panel\\International\\Geo", "ValueName": "Nation", "RegValueType": "REG_SZ" }, "DisableWUfBOfferBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "DisableWUfBOfferBlock", "RegValueType": "REG_DWORD" }, "DisconnectedStandby": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power", "ValueName": "EnforceDisconnectedStandby", "RegValueType": "REG_DWORD" }, "DriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "DUInternal": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "DynamicUpdateInternalTest", "RegValueType": "REG_DWORD" }, "EdgeWithChromiumInstallFailureCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallFailureCountWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EdgeWithChromiumInstallVersionWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EKB19H2InstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Count" }, "EKB19H2InstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Timestamp" }, "EKB19H2UnInstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Count" }, "EKB19H2UnInstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Timestamp" }, "EnableWUfBUpgradeGates": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0", "ValueName": "DataRequireGatedScanForFeatureUpdates", "RegValueType": "REG_DWORD" }, "EsetReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters", "ValueName": "WindowsCompatibilityLevel", "RegValueType": "REG_DWORD" }, "FlightContent": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "ContentType", "RegValueType": "REG_SZ" }, "GStatusBlockIDs_All": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX", "ValueName": "SdbEntries", "RegValueType": "REG_SZ" }, "HidOverGattReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll", "ValueName": "Source", "RegValueType": "REG_SZ" }, "InstallDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "InstallDate", "RegValueType": "REG_DWORD" }, "IsAutopilotRegistered": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache", "ValueName": "ProfileAvailable", "RegValueType": "REG_DWORD" }, "IsFlightingEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "IsBuildFlightingEnabled", "RegValueType": "REG_DWORD" }, "IsContainerMgrInstalled": { "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService", "IfExists": true }, "IsEdgeWithChromiumInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsEdgeWithChromiumInstalledWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsHybridOrXGpu": { "FullPath": "SOFTWARE\\Microsoft\\DirectX", "ValueName": "HybridDeviceApplicableForDxDbGpuPreferences" }, "IsWDAGEnabled": { "FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics", "IfExists": true }, "IsWDATPEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status", "ValueName": "OnboardingState" }, "KasperskyReg": { "FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters", "ValueName": "UseVtHardware" }, "MTPTargetingInfo": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\MTPTargetingInfo", "ValueName": "TargetRing" }, "OEMModelBaseBoard": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "BaseBoardProduct", "RegValueType": "REG_SZ" }, "OemPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OobeSeeker": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates", "ValueName": "OOBEUpdateStarted" }, "OSDataDriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OSRollbackBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "BuildString", "RegValueType": "REG_SZ" }, "OSRollbackCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "Count", "RegValueType": "REG_DWORD" }, "OSRollbackDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "PausedFeatureStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedFeatureStatus" }, "PausedQualityStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedQualityStatus" }, "PonchAllow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc", "RegValueType": "REG_DWORD" }, "PonchAllowKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchAllowWow": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc" }, "PonchAllowWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9", "RegValueType": "REG_DWORD" }, "PreviewBuildsManagerEnabled": { "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager", "ValueName": "ArePreviewBuildsAllowed" }, "RecoveredFromBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "LastBuild", "RegValueType": "REG_DWORD" }, "RecoveredOnDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "ReleaseType": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo", "ValueName": "ReleaseType", "RegValueType": "REG_SZ" }, "SmartActiveHoursState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SmartActiveHoursState", "RegValueType": "REG_DWORD" }, "Steam": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Classes\\Steam", "ValueName": "", "RegValueType": "REG_SZ" }, "TencentReg": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "LoadStartTime" }, "TencentType": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "Type" }, "UninstallActive": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "System\\Setup", "ValueName": "UninstallActive", "RegValueType": "REG_DWORD" }, "WindowsMixedReality": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors", "ValueName": "WdfMajorVersion", "RegValueType": "REG_DWORD" } }, "FileInfo": { "AvastVer": { "Path": "\\system32\\Drivers\\aswVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "AvgVer": { "Path": "\\system32\\Drivers\\avgVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "CortanaAppVer": { "Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVerTest": { "Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "EsetVer": { "Path": "\\drivers\\ehdrv.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "KasperskyVer": { "Path": "\\system32\\Drivers\\klhk.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "SkypeRoomSystem": { "Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml", "IfExists": true }, "SymantecVer": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "SymantecVer64": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "TobiiVer": { "Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TobiiVer1x86": { "Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TobiiVerx86": { "Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TrendMicroVer": { "Path": "\\drivers\\TMUMH.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "WuClientVer": { "Path": "\\system32\\wuaueng.dll", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" } }, "Licensing": { "UpdateManagementGroup": { "Name": "UpdatePolicy-UpdateManagementGroup" } }, "Policy": { "DucCustomPackageId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId" }, "DucDeviceModelId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId" }, "DucOemPartnerRing": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing" }, "DucPublisherId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId" } }, "UpdatePolicy": { "BranchReadinessLevel": { "PolicyEnum": 5, "Enterprise": true }, "BranchReadinessLevelSource": { "PolicyEnum": 5, "Enterprise": true, "UseSource": true }, "DeferFeatureUpdatePeriodInDays": { "PolicyEnum": 9, "Enterprise": true }, "DeferQualityUpdatePeriodInDays": { "PolicyEnum": 7, "Enterprise": true }, "DisableDualScan": { "PolicyEnum": 42, "Enterprise": true }, "UpdateServiceUrl": { "PolicyEnum": 12 } } }" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings] "TargetingAttributesVerified"="{ "Version": 75, "SchemaVersion": 1, "PartA": [ "App", "AppVer", "AttrDataVer" ], "Default": [ "DeviceFamily", "f:FlightRing", "t:OSVersionFull" ], "PartB": { "CDM": [ "ChassisTypeId", "r:CurrentBranch", "DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "c:InstallLanguage", "c:IsDomainJoined", "t:IsTestLab", "OEMModel", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:ProcessorIdentifier", "c:TelemetryLevel", "t:IsMsftOwned", "t:WCOSProductId", "c:OSUILocale" ], "CORTANA_GATEKEEPER": [ "r:CurrentBranch", "f:FlightRing", "f:IsRetailOS" ], "CORTANAUWP": [ "c:OSUILocale", "t:OSVersionFull", "v:CortanaAppVer" ], "CORTANAUWPTEST": [ "+CORTANAUWP", "v:CortanaAppVerTest" ], "CTAC": [ "+FSS" ], "DDC": [ "+WU_STORE", "+_WU_PTI" ], "DXDB": [ "DeviceFamily", "f:FlightRing", "r:IsHybridOrXGpu", "t:OSVersionFull" ], "EDGE_SERVICEUI": [ "t:LocalDeviceID", "t:LocalUserID" ], "FCON": [ "+CDM" ], "FSS": [ "r:PreviewBuildsManagerEnabled", "f:BranchReadinessLevelRaw", "u:BranchReadinessLevelSource", "r:BuildFID", "t:DeviceFamily", "DeviceId", "c:EnablePreviewBuilds", "f:FlightingPolicyValue", "f:IsRetailOS", "f:ManagePreviewBuilds", "OSVersionFull", "t:WCOSProductId", "r:SmartActiveHoursState", "r:ActiveHoursStart", "r:ActiveHoursEnd" ], "MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [ "t:OSVersionFull", "t:IsTestLab", "f:FlightRing" ], "MITIGATION": [ "t:DeviceFamily", "f:FlightRing", "c:FlightIds", "c:IsDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "t:IsTestLab", "IsVM", "OEMModel", "c:OSEdition", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "t:SMode", "f:IsFlightingEnabled", "c:FirmwareVersion", "c:TelemetryLevel" ], "MLMOD": [ "ChassisTypeId", "t:DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "f:IsRetailOS", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale" ], "MTP": [ "+_WU_OS_CORE" ], "MUSE": [ "+_WU_FB", "ChassisTypeId", "deviceClass", "deviceId", "c:FlightIds", "locale", "ms", "os", "osVer", "ring", "sampleId", "sku", "r:DaysSince19H1FUOffer", "u:DisableDualScan", "u:UpdateServiceUrl", "c:CommercialId" ], "NOISYHAMMER": [ "+WU_OS" ], "SEDIMENTPACK": [ "+WU_OS" ], "SETUP360": [ "t:OSSkuId", "f:FlightRing" ], "STORAGEGROVELER": [ "a:Free", "c:TelemetryLevel", "f:FlightRing", "f:IsFlightingEnabled", "IsVM", "t:OSVersionFull" ], "UTC": [ "+UTC_STATIC", "osVer", "locale", "ring", "f:PilotRing", "f:IsRetailOS", "ms", "expId", "t:SMode" ], "UTC_STATIC": [ "os", "deviceId", "sampleId", "deviceClass", "sku", "OEMModel", "OEMName_Uncleaned", "c:PrimaryDiskType", "c:ProcessorModel", "c:TotalPhysicalRAM" ], "WAASASSESSMENT": [ "+WU_OS" ], "WOSC": [ "t:DeviceFamily", "f:FlightRing", "f:IsFlightingEnabled", "t:IsMsftOwned", "t:LocalDeviceID", "t:OSSkuId", "c:OSUILocale", "t:OSVersionFull", "c:TelemetryLevel", "r:IsHybridOrXGpu" ], "WPSHIFT": [ "+MTP" ], "WU": [ "+WU_OS", "r:DUInternal" ], "_WU_AV": [ "r:AvastReg", "r:AvastBlackScreen", "v:AvastVer", "r:AvgReg", "v:AvgVer", "r:EsetReg", "v:EsetVer", "r:KasperskyReg", "v:KasperskyVer", "v:SymantecVer", "r:TencentReg", "r:TencentType" ], "_WU_COMMON": [ "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "r:DriverPartnerRing", "r:FlightContent", "f:FlightingBranchName", "f:FlightRing", "HoloLens", "c:InstallationType", "c:InstallLanguage", "f:IsFlightingEnabled", "r:IsFlightingEnabled", "c:MobileOperatorCommercialized", "OEMModel", "OEMName_Uncleaned", "r:OemPartnerRing", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:OSUILocale", "c:ProcessorManufacturer", "r:ReleaseType", "v:SkypeRoomSystem", "t:SMode", "c:TelemetryLevel", "r:WindowsMixedReality", "v:WuClientVer", "p:DucPublisherId", "p:DucDeviceModelId", "p:DucOemPartnerRing", "p:DucCustomPackageId" ], "_WU_FB": [ "u:BranchReadinessLevel", "u:DeferQualityUpdatePeriodInDays", "u:DeferFeatureUpdatePeriodInDays", "r:PausedFeatureStatus", "r:PausedQualityStatus" ], "WU_OS": [ "+_WU_OS_CORE", "+_WU_FB" ], "_WU_OS_CORE": [ "+_WU_COMMON", "+_WU_AV", "r:AhnLabKeyboard", "a:Bios", "r:BlockFeatureUpdates", "c:CommercialId", "a:DataVer_RS5", "r:DisconnectedStandby", "r:DchuNvidiaGrfxExists", "r:DchuNvidiaGrfxVen", "r:DchuIntelGrfxExists", "r:DchuIntelGrfxVen", "r:DchuAmdGrfxExists", "r:DchuAmdGrfxVen", "c:FirmwareVersion", "a:Free", "a:GStatus_RS3", "a:GStatus_RS4", "a:GStatus_RS5", "r:HidOverGattReg", "r:InstallDate", "c:IsDeviceRetailDemo", "c:IsPortableOperatingSystem", "IsVM", "c:OEMModelBaseBoard", "r:OobeSeeker", "r:OSRollbackBuild", "r:OSRollbackCount", "r:OSRollbackDate", "PhoneTargetingName", "r:PonchAllow", "r:PonchBlock", "c:ProcessorIdentifier", "r:RecoveredFromBuild", "r:RecoveredOnDate", "r:Steam", "v:TobiiVer", "v:TrendMicroVer", "r:UninstallActive", "l:UpdateManagementGroup", "a:UpgEx_RS3", "a:UpgEx_RS4", "a:UpgEx_RS5", "a:Version_RS5", "r:DisableWUfBOfferBlock", "a:UpgEx_19H1", "a:SdbVer_19H1", "a:GStatus_19H1", "a:GStatus_19H1Setup", "a:TimestampEpochString_19H1Setup", "a:GenTelRunTimestamp_19H1", "a:DataExpDateEpoch_19H1", "r:EnableWUfBUpgradeGates", "r:GStatusBlockIDs_All", "TimestampDelta_19H1Subtract19H1Setup", "DataExpDateDelta_19H1Subtract19H1Setup", "a:DataExpDateEpoch_19H1Setup", "a:TimestampEpochString_19H1", "r:IsContainerMgrInstalled", "r:IsWDAGEnabled", "r:MTPTargetingInfo", "r:EKB19H2InstallCount", "r:EKB19H2UnInstallCount", "r:EKB19H2InstallTimeEpoch", "r:EKB19H2UnInstallTimeEpoch", "r:BlockEdgeWithChromiumUpdate", "r:IsWDATPEnabled", "r:IsAutopilotRegistered", "r:EdgeWithChromiumInstallVersion", "r:EdgeWithChromiumInstallFailureCount", "r:IsEdgeWithChromiumInstalled" ], "_WU_PTI": [ "c:FrontFacingCameraResolution", "c:RearFacingCameraResolution", "c:TotalPhysicalRAM", "c:NFCProximity", "c:Magnetometer", "c:Gyroscope", "c:D3DMaxFeatureLevel", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical" ], "WU_STORE": [ "+_WU_COMMON", "r:AppChannels", "r:AppRMIDs", "u:BranchReadinessLevel" ] }, "Required": [ "App", "AppVer", "AttrDataVer" ], "Aliases": { "ChassisTypeId": "c:ChassisType", "DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup", "deviceClass": "t:DeviceFamily", "deviceId": "t:LocalDeviceID", "DeviceId": "t:LocalDeviceID", "expId": "c:FlightIds", "FlightRing": "f:FlightRing", "IsVM": "a:ISVM", "locale": "c:OSUILocale", "ms": "t:IsMsftOwned", "OEMModel": "c:OEMModelNumber", "OEMName_Uncleaned": "c:OEMManufacturerName", "osVer": "t:OSVersionFull", "OSVersionFull": "t:OSVersionFull", "PhoneTargetingName": "c:OEMModelName", "ring": "f:FlightRing", "sampleId": "t:PopVal", "sku": "t:OSSkuId", "TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup" }, "Fallback": { "r:AvastBlackScreen": "r:AvgBlackScreen", "a:Bios": "a:Bios_RS3", "a:Bios_RS3": "a:Bios_RS4", "a:Bios_RS4": "a:Bios_RS5", "r:BlockFeatureUpdates": "r:BlockWUUpgrades", "r:BlockWUUpgrades": "r:BlockWUUpgradesWow", "r:BuildFID": "r:BuildFID_WCOS", "r:BuildFID_WCOS": "r:BuildFID_WCOS2", "r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2", "r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending", "r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2", "r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending", "r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2", "r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending", "r:DriverPartnerRing": "r:OSDataDriverPartnerRing", "r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow", "r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow", "f:FlightingBranchName": "c:FlightingBranchName", "a:Free": "a:Free_RS3", "a:Free_RS3": "a:Free_RS4", "a:Free_RS4": "a:Free_RS5", "HoloLens": "r:WindowsMixedReality", "r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow", "a:ISVM": "a:ISVM_RS3", "a:ISVM_RS3": "a:ISVM_RS4", "a:ISVM_RS4": "a:ISVM_RS5", "c:OEMModelBaseBoard": "r:OEMModelBaseBoard", "r:PonchAllow": "r:PonchAllowKey", "r:PonchAllowKey": "r:PonchAllowWow", "r:PonchAllowWow": "r:PonchAllowWowKey", "v:SymantecVer": "v:SymantecVer64", "v:TobiiVer": "v:TobiiVerx86", "v:TobiiVerx86": "v:TobiiVer1x86" }, "Transform": { "IsDomainJoined": { "Ignore": [ "0" ] }, "IsHybridOrXGpu": { "Ignore": [ "0" ] }, "IsMsftOwned": { "Ignore": [ "0" ] }, "IsPortableOperatingSystem": { "Ignore": [ "0" ] }, "IsTestLab": { "Ignore": [ "0" ] }, "IsVM": { "Ignore": [ "0" ] }, "OEMModel": { "SubLength": 100 }, "OEMName_Uncleaned": { "SubLength": 100 }, "PausedFeatureStatus": { "Ignore": [ "0" ] }, "PausedQualityStatus": { "Ignore": [ "0" ] }, "SMode": { "Ignore": [ "0" ] } }, "Registry": { "ActiveHoursEnd": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursEnd", "RegValueType": "REG_DWORD" }, "ActiveHoursStart": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursStart", "RegValueType": "REG_DWORD" }, "AhnLabKeyboard": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt", "ValueName": "NbTpMsExist" }, "AppChannels": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ChannelId", "EncodingType": "Json" }, "AppRMIDs": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ReleaseManagementId", "EncodingType": "Json" }, "AvastBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "Win10-1803" }, "AvastReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "QualityCompat" }, "AvgBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "Win10-1803" }, "AvgReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "QualityCompat" }, "BlockEdgeWithChromiumUpdate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "DoNotUpdateToEdgeWithChromium", "RegValueType": "REG_DWORD" }, "BlockFeatureUpdates": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade", "ValueName": "BlockFeatureUpdates", "RegValueType": "REG_DWORD" }, "BlockWUUpgrades": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BlockWUUpgradesWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BuildFID": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS2": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "CurrentBranch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "BuildBranch", "RegValueType": "REG_SZ" }, "DaysSince19H1FUOffer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin", "ValueName": "DaysSinceLastOffer", "RegValueType": "REG_QWORD" }, "DchuAmdGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdap", "ValueName": "DriverDelete" }, "DchuAmdGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdap", "IfExists": true }, "DchuAmdGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdap", "ValueName": "DCHUVen" }, "DchuAmdGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdap\\Parameters", "ValueName": "DCHUVen" }, "DchuIntelGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DriverDelete" }, "DchuIntelGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "IfExists": true }, "DchuIntelGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DCHUVen" }, "DchuIntelGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DriverDelete" }, "DchuNvidiaGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "IfExists": true }, "DchuNvidiaGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters", "ValueName": "DCHUVen" }, "DefaultUserRegion": { "HKey": "HKEY_USERS", "FullPath": ".DEFAULT\\Control Panel\\International\\Geo", "ValueName": "Nation", "RegValueType": "REG_SZ" }, "DisableWUfBOfferBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "DisableWUfBOfferBlock", "RegValueType": "REG_DWORD" }, "DisconnectedStandby": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power", "ValueName": "EnforceDisconnectedStandby", "RegValueType": "REG_DWORD" }, "DriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "DUInternal": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "DynamicUpdateInternalTest", "RegValueType": "REG_DWORD" }, "EdgeWithChromiumInstallFailureCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallFailureCountWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EdgeWithChromiumInstallVersionWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EKB19H2InstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Count" }, "EKB19H2InstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Timestamp" }, "EKB19H2UnInstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Count" }, "EKB19H2UnInstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Timestamp" }, "EnableWUfBUpgradeGates": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0", "ValueName": "DataRequireGatedScanForFeatureUpdates", "RegValueType": "REG_DWORD" }, "EsetReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters", "ValueName": "WindowsCompatibilityLevel", "RegValueType": "REG_DWORD" }, "FlightContent": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "ContentType", "RegValueType": "REG_SZ" }, "GStatusBlockIDs_All": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX", "ValueName": "SdbEntries", "RegValueType": "REG_SZ" }, "HidOverGattReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll", "ValueName": "Source", "RegValueType": "REG_SZ" }, "InstallDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "InstallDate", "RegValueType": "REG_DWORD" }, "IsAutopilotRegistered": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache", "ValueName": "ProfileAvailable", "RegValueType": "REG_DWORD" }, "IsFlightingEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "IsBuildFlightingEnabled", "RegValueType": "REG_DWORD" }, "IsContainerMgrInstalled": { "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService", "IfExists": true }, "IsEdgeWithChromiumInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsEdgeWithChromiumInstalledWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsHybridOrXGpu": { "FullPath": "SOFTWARE\\Microsoft\\DirectX", "ValueName": "HybridDeviceApplicableForDxDbGpuPreferences" }, "IsWDAGEnabled": { "FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics", "IfExists": true }, "IsWDATPEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status", "ValueName": "OnboardingState" }, "KasperskyReg": { "FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters", "ValueName": "UseVtHardware" }, "MTPTargetingInfo": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\MTPTargetingInfo", "ValueName": "TargetRing" }, "OEMModelBaseBoard": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "BaseBoardProduct", "RegValueType": "REG_SZ" }, "OemPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OobeSeeker": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates", "ValueName": "OOBEUpdateStarted" }, "OSDataDriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OSRollbackBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "BuildString", "RegValueType": "REG_SZ" }, "OSRollbackCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "Count", "RegValueType": "REG_DWORD" }, "OSRollbackDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "PausedFeatureStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedFeatureStatus" }, "PausedQualityStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedQualityStatus" }, "PonchAllow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc", "RegValueType": "REG_DWORD" }, "PonchAllowKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchAllowWow": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc" }, "PonchAllowWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9", "RegValueType": "REG_DWORD" }, "PreviewBuildsManagerEnabled": { "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager", "ValueName": "ArePreviewBuildsAllowed" }, "RecoveredFromBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "LastBuild", "RegValueType": "REG_DWORD" }, "RecoveredOnDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "ReleaseType": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo", "ValueName": "ReleaseType", "RegValueType": "REG_SZ" }, "SmartActiveHoursState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SmartActiveHoursState", "RegValueType": "REG_DWORD" }, "Steam": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Classes\\Steam", "ValueName": "", "RegValueType": "REG_SZ" }, "TencentReg": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "LoadStartTime" }, "TencentType": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "Type" }, "UninstallActive": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "System\\Setup", "ValueName": "UninstallActive", "RegValueType": "REG_DWORD" }, "WindowsMixedReality": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors", "ValueName": "WdfMajorVersion", "RegValueType": "REG_DWORD" } }, "FileInfo": { "AvastVer": { "Path": "\\system32\\Drivers\\aswVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "AvgVer": { "Path": "\\system32\\Drivers\\avgVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "CortanaAppVer": { "Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVerTest": { "Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "EsetVer": { "Path": "\\drivers\\ehdrv.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "KasperskyVer": { "Path": "\\system32\\Drivers\\klhk.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "SkypeRoomSystem": { "Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml", "IfExists": true }, "SymantecVer": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "SymantecVer64": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "TobiiVer": { "Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TobiiVer1x86": { "Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TobiiVerx86": { "Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TrendMicroVer": { "Path": "\\drivers\\TMUMH.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "WuClientVer": { "Path": "\\system32\\wuaueng.dll", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" } }, "Licensing": { "UpdateManagementGroup": { "Name": "UpdatePolicy-UpdateManagementGroup" } }, "Policy": { "DucCustomPackageId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId" }, "DucDeviceModelId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId" }, "DucOemPartnerRing": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing" }, "DucPublisherId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId" } }, "UpdatePolicy": { "BranchReadinessLevel": { "PolicyEnum": 5, "Enterprise": true }, "BranchReadinessLevelSource": { "PolicyEnum": 5, "Enterprise": true, "UseSource": true }, "DeferFeatureUpdatePeriodInDays": { "PolicyEnum": 9, "Enterprise": true }, "DeferQualityUpdatePeriodInDays": { "PolicyEnum": 7, "Enterprise": true }, "DisableDualScan": { "PolicyEnum": 42, "Enterprise": true }, "UpdateServiceUrl": { "PolicyEnum": 12 } } }" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\AVAST Software] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Avast] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Avast] "SetupLog"="C:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Update.log" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Avast] "ProgramFolder"="C:\Program Files\AVAST Software\Avast" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Avast] "SetupFolder"="C:\Program Files\AVAST Software\Avast\setup" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Avast] "DataFolder"="C:\ProgramData\AVAST Software\Avast" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Avast] "LicenseFile"="C:\ProgramData\AVAST Software\Subscriptions\license.avastlic" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Avast\Wsc] "IWscAVStatus4"="Avast Antivirus" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Avast\Wsc] "IWscASStatus"="Avast Antivirus" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Products] "AvastAntivirus"="" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\No Chrome Offer Until] "AVAST Software"="20200707" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\Outlook\Addins\Avast.AsOutExt] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\Outlook\Addins\Avast.AsOutExt] "FriendlyName"="Avast Add-in" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\Outlook\Addins\Avast.AsOutExt] "Description"="Avast Outlook Add-in" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\SystemCertificates\Avast Mail Scanner Trusted] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\SystemCertificates\Avast SSL Scanner Cache] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager] "PendingFileRenameOperations"="\??\C:\Program Files\AVAST Software\Avast\Setup\Reboot.txt \??\C:\Program Files\AVAST Software\Avast\setup\Reboot.txt \??\C:\Program Files\AVAST Software\Avast\setup \??\C:\Program Files\AVAST Software\Avast \??\C:\Program Files\AVAST Software \??\C:\Program Files \??\C:\WINDOWS\system32 " [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aswbIDSAgent] "ImagePath"=""C:\Program Files\AVAST Software\Avast\aswidsagent.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aswbidsdriver\Parameters] "ProgramFolder"="\??\C:\Program Files\AVAST Software\Avast" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aswbidsdriver\Parameters] "DataFolder"="\??\C:\ProgramData\AVAST Software\Avast" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aswbidsh\Parameters] "ProgramFolder"="\??\C:\Program Files\AVAST Software\Avast" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aswbidsh\Parameters] "DataFolder"="\??\C:\ProgramData\AVAST Software\Avast" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aswbuniv\Parameters] "ProgramFolder"="\??\C:\Program Files\AVAST Software\Avast" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aswbuniv\Parameters] "DataFolder"="\??\C:\ProgramData\AVAST Software\Avast" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aswRvrt\Parameters] "PermaBootTimeOperationsList"="LinkKey("\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\AVAST Software","\REGISTRY\MACHINE\SOFTWARE\AVAST Software",TRUE)" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aswRvrt\Parameters\Uupdate_157866059409301] "SetupOperations"="MoveFile("\??\C:\Program Files\AVAST Software\Avast\AvastUI.exe.157866059409301","\??\C:\Program Files\AVAST Software\Avast\AvastUI.exe",TRUE) MoveFile("\??\C:\Program Files\AVAST Software\Avast\AvastUI.exe.sum.157866059409301","\??\C:\Program Files\AVAST Software\Avast\AvastUI.exe.sum",TRUE)" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aswSnx\Parameters] "ProgramFolder"="\??\C:\Program Files\AVAST Software\Avast" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aswSnx\Parameters] "DataFolder"="\??\C:\ProgramData\AVAST Software\Avast" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aswSP\Parameters] "ProgramFolder"="\??\C:\Program Files\AVAST Software\Avast" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aswSP\Parameters] "DataFolder"="\??\C:\ProgramData\AVAST Software\Avast" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aswSP\Parameters] "SubscriptionsFolder"="\??\C:\ProgramData\AVAST Software\Subscriptions" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aswSP\Parameters] "LimitedFolders"="\??\C:\Program Files\Common Files\AVAST Software\Overseer" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\avast! Antivirus] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\avast! Antivirus] "ImagePath"=""C:\Program Files\AVAST Software\Avast\AvastSvc.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\avast! Antivirus] "DisplayName"="Avast Antivirus" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\avast! Antivirus] "FailureCommand"=""C:\Program Files\AVAST Software\Avast\setup\Instup.exe" /instop:repair /wait" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\avast! Antivirus] "Description"="Gère et met en œuvre les services d'Avast antivirus pour cet ordinateur. Cela inclut les agents en temps réel, la zone de quarantaine et le planificateur." [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-21-138209428-2991154311-671476239-1000] "\Device\HarddiskVolume3\Program Files\AVAST Software\Avast\setup\instup.exe"="0x0B2BF13809C7D50100000000000000000000000002000000" [HKEY_USERS\S-1-5-21-138209428-2991154311-671476239-1000\Software\Avast Software] [HKEY_USERS\S-1-5-21-138209428-2991154311-671476239-1000\Software\Avast Software\Avast] [HKEY_USERS\S-1-5-21-138209428-2991154311-671476239-1000\Software\Avast Software\Avast Browser Cleanup] [HKEY_USERS\S-1-5-21-138209428-2991154311-671476239-1000\Software\Microsoft\Windows\CurrentVersion\Applets\Paint\Recent File List] "File1"="C:\Users\Benjamin\Desktop\Capture d’écran AVAST Software.jpg" [HKEY_USERS\S-1-5-21-138209428-2991154311-671476239-1000\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit] "LastKey"="Ordinateur\HKEY_LOCAL_MACHINE\SOFTWARE\AVAST Software" [HKEY_USERS\S-1-5-21-138209428-2991154311-671476239-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched] "avast! Antivirus"="1" [HKEY_USERS\S-1-5-21-138209428-2991154311-671476239-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched] "{6D809377-6AF0-444B-8957-A3773F02200E}\AVAST Software\Avast\setup\instup.exe"="1" [HKEY_USERS\S-1-5-21-138209428-2991154311-671476239-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\ShowJumpView] "{6D809377-6AF0-444B-8957-A3773F02200E}\AVAST Software\Avast\setup\instup.exe"="2" [HKEY_USERS\S-1-5-21-138209428-2991154311-671476239-1000\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store] "C:\Users\Benjamin\Desktop\avastclear.exe"="0x53414350010000000000000007000000280000005827A5004F75A50001000000000000000000000A00210000631F6E6F0EDED401000000000000000005000000100000000000000000000000000000000000000002000000280000000000000000000040000000000000000000000000000000001D590000000000000600000006000000" [HKEY_USERS\S-1-5-21-138209428-2991154311-671476239-1000\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store] "C:\Users\Benjamin\Desktop\avast_free_antivirus_setup_online.exe"="0x5341435001000000000000000700000028000000C07C0300B378040001000000000000000000000A00210000631F6E6F0EDED4010000000000000000020000002800000000000000000000400000000000000000000000000000000020BE0000000000000400000004000000" [HKEY_USERS\S-1-5-21-138209428-2991154311-671476239-1000\Software\VS Revo Group\Revo Uninstaller\Autoruns\HKLM\Run] "AvastUI.exe"=""C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui" [HKEY_USERS\S-1-5-21-138209428-2991154311-671476239-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Windows.Photos_8wekyb3d8bbwe\PersistedStorageItemTable\ManagedByApp\{CF3E532E-9293-4D51-AD3E-150B394FD942}] "Metadata"="7 C:\Users\Benjamin\Desktop\Capture d’écran AVAST Software.jpg" [HKEY_USERS\S-1-5-21-138209428-2991154311-671476239-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Windows.Photos_8wekyb3d8bbwe\PersistedStorageItemTable\ManagedByApp\{CF3E532E-9293-4D51-AD3E-150B394FD942}] "FilePath"="\\?\Volume{7C1277C5-8E15-11E4-B664-806E6F6E6963}\Users\Benjamin\Desktop\Capture d’écran AVAST Software.jpg" ====== Fin de Chercher ======