Script ZHPFix
EmptyFlash
EmptyTemp
EmptyCLSID
EmptyPrefetch
CreateRestorePoint
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastBrowserAutoLaunch_6A300799F9297378AD551FA0A684B331 =>PUP.Optional.MyBrowser
[HKEY_USERS\S-1-5-21-3708913199-91308732-823027974-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastBrowserAutoLaunch_6A300799F9297378AD551FA0A684B331 =>PUP.Optional.MyBrowser
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:Elite Unzip AppIntegrator 32-bit =>Adware.MyWebSearch
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:Elite Unzip AppIntegrator 64-bit =>Adware.MyWebSearch
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:Elite Unzip EPM Support =>Adware.MyWebSearch
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:Elite Unzip Search Scope Monitor =>Adware.MyWebSearch
HKLM\SOFTWARE\71858651-6442-5a51-8131-e85c863c9f27 =>Adware.CrossRider
O42 - Logiciel: AVG Secure Browser - (.Auteurs de AVG Secure Browser.) [HKLM][64Bits] -- AVG Secure Browser {0435603F7A888AE16C05B00F153CC6FC}.
O42 - Logiciel: AVG Update Helper - (.AVG Technologies.) [HKLM][64Bits] -- {EDB7AEE7-E932-4836-AE50-D3B0B7766CB5} [Unsigned] =>.AVG Technologies (Hidden)
O42 - Logiciel: Glary Utilities 5.200 - (.Glarysoft Ltd.) [HKLM][64Bits] -- Glary Utilities 5 =>.Glarysoft LTD®
O23 - Service: GUBootService (GUBootService) . (.Glarysoft Ltd - Glary Startup Manager Boot Service.) - C:\Program Files (x86)\Common Files\Glarysoft\StartupManager\1.0\GUBootService.exe =>.Glarysoft LTD®
SR - Auto [15/01/2023] [ 886528] GUBootService (GUBootService) . (.Glarysoft Ltd.) - C:\Program Files (x86)\Common Files\Glarysoft\StartupManager\1.0\GUBootService.exe =>.Glarysoft LTD®
SR - System [03/10/2022] [ 45056] GUBootStartup (GUBootStartup) . (.Glarysoft Ltd.) - C:\WINDOWS\System32\drivers\GUBootStartup.sys =>.Microsoft®
SS - Demand [15/01/2023] [ 73984] GUPMService (GUPMService) . (.Glarysoft Ltd.) - C:\Program Files (x86)\Glary Utilities 5\GUPMService.exe =>.Glarysoft LTD®
O4 - HKCU\..\Run: [GUDelayStartup] . (.Glarysoft Ltd - Glary Utilities StartupManager.) -- C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe =>.Glarysoft LTD®
O4 - HKCU\..\Run: [AVGBrowserAutoLaunch_7EBD08E50922A855DFF67D2CC2234627] . (.AVG Technologies - AVG Secure Browser.) -- C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe {0435603F7A888AE16C05B00F153CC6FC}. =>.AVG Technologies
O4 - HKUS\S-1-5-21-3708913199-91308732-823027974-1001\..\Run: [GUDelayStartup] . (.Glarysoft Ltd - Glary Utilities StartupManager.) -- C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe =>.Glarysoft LTD®
O4 - HKUS\S-1-5-21-3708913199-91308732-823027974-1001\..\Run: [AVGBrowserAutoLaunch_7EBD08E50922A855DFF67D2CC2234627] . (.AVG Technologies - AVG Secure Browser.) -- C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe {0435603F7A888AE16C05B00F153CC6FC}. =>.AVG Technologies
[MD5.3E248DDE77BDB7FBD367BC26532546B2] - (.Glarysoft Ltd - Glary Startup Manager Boot Service.) -- C:\Program Files (x86)\Common Files\Glarysoft\StartupManager\1.0\GUBootService.exe [886528] [PID.4240] =>.Glarysoft LTD®
O4 - GS\ProgramsCommon [Public]: Glary Utilities 5.lnk . (.Glarysoft Ltd - Glary Utilities 5.) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe =>.Glarysoft LTD®
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:GUDelayStartup =>.GlarySoft
[HKEY_USERS\S-1-5-21-3708913199-91308732-823027974-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:GUDelayStartup =>.GlarySoft
HKLM\SOFTWARE\WOW6432Node\GlarySoft =>.GlarySoft
HKCU\SOFTWARE\Google =>.Google
HKU\S-1-5-21-3708913199-91308732-823027974-1001\SOFTWARE\Glarysoft =>.GlarySoft
O43 - CFD: 31/01/2023 - [] D -- C:\Program Files (x86)\Glary Utilities 5 =>.GlarySoft
O43 - CFD: 29/09/2022 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5 =>.GlarySoft
O43 - CFD: 27/10/2021 - [] DC -- C:\ProgramData\GlarySoft =>.GlarySoft
O43 - CFD: 15/04/2022 - [] D -- C:\Program Files (x86)\Common Files\Glarysoft =>.GlarySoft
O43 - CFD: 27/10/2021 - [] DC -- C:\Users\danie\AppData\Roaming\GlarySoft =>.GlarySoft
O108 - CMH1: Glary Utilities [64Bits] - {B3C418F8-922B-4faf-915E-59BC14448CF7} . (.Glarysoft Ltd - Context Menu Handler.) -- C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll =>.Glarysoft LTD®
O108 - CMH6: Glary Utilities [64Bits] - {B3C418F8-922B-4faf-915E-59BC14448CF7} . (.Glarysoft Ltd - Context Menu Handler.) -- C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll =>.Glarysoft LTD®
O108 - CMH7: Glary Utilities [64Bits] - {B3C418F8-922B-4faf-915E-59BC14448CF7} . (.Glarysoft Ltd - Context Menu Handler.) -- C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll =>.Glarysoft LTD®
O58 - SDL:2022/10/03 15:38:09 A . (.Glarysoft Ltd - The driver for the Startup Manager tool.) -- C:\WINDOWS\System32\drivers\GUBootStartup.sys [45056] =>.Microsoft®
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\Users\danie\Glary_Utilities_v5.198.0.227 (1).exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\Users\danie\Glary_Utilities_v5.198.0.227 (1).exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-3708913199-91308732-823027974-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\Users\danie\Glary_Utilities_v5.198.0.227 (1).exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-3708913199-91308732-823027974-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\Users\danie\Glary_Utilities_v5.198.0.227 (1).exe.ApplicationCompany =>.SUP.Orphan.MUICache
[0F05AE21CDC17B9F3CF09D7BFC659BA3] [13/01/2023] (.Glarysoft LTD.) - C:\Program Files (x86)\Glary Utilities 5\uninst.exe =>.Glarysoft LTD
[0F05AE21CDC17B9F3CF09D7BFC659BA3] [15/01/2023] (.Glarysoft LTD.) - C:\Program Files (x86)\Common Files\Glarysoft\StartupManager\1.0\GUBootService.exe =>.Glarysoft LTD
[0F05AE21CDC17B9F3CF09D7BFC659BA3] [15/01/2023] (.Glarysoft LTD.) - C:\Program Files (x86)\Glary Utilities 5\GUPMService.exe =>.Glarysoft LTD
[0F05AE21CDC17B9F3CF09D7BFC659BA3] [15/01/2023] (.Glarysoft LTD.) - C:\Program Files (x86)\Glary Utilities 5\Integrator.exe =>.Glarysoft LTD
[0F05AE21CDC17B9F3CF09D7BFC659BA3] [15/01/2023] (.Glarysoft LTD.) - C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe =>.Glarysoft LTD
[0F05AE21CDC17B9F3CF09D7BFC659BA3] [27/10/2021] (.Glarysoft LTD.) - C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll =>.Glarysoft LTD
HKCU\SOFTWARE\Glarysoft =>.GlarySoft
O23 - Service: Service AVG Browser Update (avg) (avg) . (.AVG Technologies - AVG Browser.) - C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe {0435603F7A888AE16C05B00F153CC6FC}. =>.AVG Technologies
SR - Auto [13/12/2022] [ 209224] Service AVG Browser Update (avg) (avg) . (.AVG Technologies.) - C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe {0435603F7A888AE16C05B00F153CC6FC}. =>.AVG Technologies
SS - Demand [13/12/2022] [ 209224] Service AVG Browser Update (avgm) (avgm) . (.AVG Technologies.) - C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe {0435603F7A888AE16C05B00F153CC6FC}. =>.AVG Technologies
SS - Demand [11/01/2023] [ 1803368] AVG Secure Browser Elevation Service (AVGSecureBrowserEleva (AVGSecureBrowserElevationService) . (.AVG Technologies.) - C:\Program Files (x86)\AVG\Browser\Application\109.0.19817.76\elevation_service.exe {0435603F7A888AE16C05B00F153CC6FC}. =>.AVG Technologies
O38 - TASK: {92DE8C7B-DA9D-40F2-833C-459C981FEFFB} [64Bits][\AVG Secure Browser Heartbeat Task (Logon)] - (.AVG Technologies - AVG Secure Browser.) -- C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe [3263576] =>.AVG Technologies
O38 - TASK: {946237D3-341D-4C4F-8639-E1D2281924C2} [64Bits][\AVGUpdateTaskMachineCore] - (.AVG Technologies - AVG Browser.) -- C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe [209224] =>.AVG Technologies
O38 - TASK: {A71DA66C-A68F-4CBF-A92A-4EDD73718DD1} [64Bits][\AVGUpdateTaskMachineUA] - (.AVG Technologies - AVG Browser.) -- C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe [209224] =>.AVG Technologies
O38 - TASK: {E059A17C-1804-4FE6-8E69-35681E78F251} [64Bits][\AVG Secure Browser Heartbeat Task (Hourly)] - (.AVG Technologies - AVG Secure Browser.) -- C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe [3263576] =>.AVG Technologies
C:\WINDOWS\System32\Tasks\AVG Secure Browser Heartbeat Task (Logon) - (.AVG Technologies.) -- C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe [--type=heartbeat --logon.--type=heartbeat] =>.AVG Technologies
C:\WINDOWS\System32\Tasks\AVGUpdateTaskMachineCore - (.AVG Technologies.) -- C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe [/c] =>.AVG Technologies
C:\WINDOWS\System32\Tasks\AVGUpdateTaskMachineUA - (.AVG Technologies.) -- C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe [/ua ./ua] =>.AVG Technologies
C:\WINDOWS\System32\Tasks\AVG Secure Browser Heartbeat Task (Hourly) - (.AVG Technologies.) -- C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe [--type=heartbeat --hourly.--type=heartbeat] =>.AVG Technologies
O4 - GS\Quicklaunch [danie]: AVG Secure Browser.lnk . (.AVG Technologies - AVG Secure Browser.) C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe --check-run=src=quicklaunch {0435603F7A888AE16C05B00F153CC6FC}. =>.AVG Technologies
O4 - GS\ProgramsCommon [Public]: AVG Secure Browser.lnk . (.AVG Technologies - AVG Secure Browser.) C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe --check-run=src=tile {0435603F7A888AE16C05B00F153CC6FC}. =>.AVG Technologies
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AVGBrowserAutoLaunch_7EBD08E50922A855DFF67D2CC2234627
[HKEY_USERS\S-1-5-21-3708913199-91308732-823027974-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AVGBrowserAutoLaunch_7EBD08E50922A855DFF67D2CC2234627
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AVGUI.exe =>.AVG Software
.O40 - ASIC: AVG Secure Browser [64Bits] - {48F69C39-1356-4A7B-A899-70E3539D4982} . (.AVG Technologies - AVG Secure Browser Installer.) -- C:\Program Files (x86)\AVG\Browser\Application\109.0.19817.76\Installer\chrmstp.exe {0435603F7A888AE16C05B00F153CC6FC}. =>.AVG Technologies
HKLM\SOFTWARE\AVG =>.AVG Software
HKLM\SOFTWARE\WOW6432Node\AVG =>.AVG Software
HKLM\SOFTWARE\WOW6432Node\Avira =>.Avira
HKCU\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o
HKCU\SOFTWARE\AVG =>.AVG Software
HKCU\SOFTWARE\Bitdefender =>.Bitdefender
HKU\.DEFAULT\SOFTWARE\AVG =>.AVG Software
HKU\S-1-5-21-3708913199-91308732-823027974-1001\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o
HKU\S-1-5-21-3708913199-91308732-823027974-1001\SOFTWARE\AVG =>.AVG Software
HKU\S-1-5-21-3708913199-91308732-823027974-1001\SOFTWARE\Bitdefender =>.Bitdefender
HKU\S-1-5-21-3708913199-91308732-823027974-1001\SOFTWARE\Browser Cleanup =>.Avast Software s.r.o
O43 - CFD: 23/04/2022 - [] D -- C:\Program Files (x86)\AVG =>.AVG Software
O43 - CFD: 19/05/2021 - [0] DC -- C:\Program Files (x86)\Avira =>.Avira Software
O43 - CFD: 02/02/2023 - [] D -- C:\ProgramData\AVG =>.AVG Software
O43 - CFD: 19/05/2021 - [0] DC -- C:\ProgramData\Avira =>.Avira Software
O43 - CFD: 02/02/2023 - [] D -- C:\Users\danie\AppData\Local\AVG =>.AVG Software
O43 - CFD: 19/05/2021 - [] DC -- C:\Users\danie\AppData\Local\Avira =>.Avira Software
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.AVG Technologies - AVG Secure Browser.) -- C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe {0435603F7A888AE16C05B00F153CC6FC}. =>.AVG Technologies
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.AVG Technologies - AVG Secure Browser.) -- C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe {0435603F7A888AE16C05B00F153CC6FC}. =>.AVG Technologies
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.AVG Technologies - AVG Secure Browser.) -- C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe =>.AVG Technologies
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.AVG Technologies - AVG Secure Browser.) -- C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe =>.AVG Technologies
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.AVG Technologies - AVG Secure Browser.) -- C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe =>.AVG Technologies
O87 - FAEL: "{94CD7A66-8955-4649-B207-40AA8B7D75D6}" [In-None-P17-TRUE] .(.AVG Technologies - AVG Secure Browser.) -- C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe {0435603F7A888AE16C05B00F153CC6FC}. =>.AVG Technologies
O90 - PUC: "7EEA7BDE239E6384EA053D0B7B67C65B" [HKLM] . (.AVG Update Helper.) =>.AVG Software
[MD5.56ECA6288E18D063CDC420C413A3167D] [WIS][2022/12/13 17:16:32] (.AVG Technologies - AVG Update Helper.) -- C:\WINDOWS\Installer\2b20b760.msi [32768] =>.AVG Technologies
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\AVG\Antivirus\AVGUI.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\AVG\Antivirus\AVGUI.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\AVG\Antivirus\setup\instup.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\AVG\Antivirus\setup\instup.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-3708913199-91308732-823027974-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\AVG\Antivirus\AVGUI.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-3708913199-91308732-823027974-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\AVG\Antivirus\AVGUI.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-3708913199-91308732-823027974-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\AVG\Antivirus\setup\instup.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-3708913199-91308732-823027974-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\AVG\Antivirus\setup\instup.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[0435603F7A888AE16C05B00F153CC6FC] [08/12/2022] (.AVG Technologies USA, LLC.) - C:\Program Files (x86)\AVG\Browser\AVGBrowserUninstall.exe =>.Not verified
[0435603F7A888AE16C05B00F153CC6FC] [11/01/2023] (.AVG Technologies USA, LLC.) - C:\Program Files (x86)\AVG\Browser\Application\109.0.19817.76
[0435603F7A888AE16C05B00F153CC6FC] [11/01/2023] (.AVG Technologies USA, LLC.) - C:\Program Files (x86)\AVG\Browser\Application\AVGBrowser.exe =>.Not verified
[0435603F7A888AE16C05B00F153CC6FC] [13/12/2022] (.AVG Technologies USA, LLC.) - C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe =>.Not verified
[0435603F7A888AE16C05B00F153CC6FC] [25/01/2023] (.AVG Technologies USA, LLC.) - C:\Program Files (x86)\AVG\Browser\Application\109.0.19817.76\Installer\chrmstp.exe =>.Not verified
~ OBIE: AVG Secure Browser v109.0.19817.76
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastBrowserAutoLaunch_6A300799F9297378AD551FA0A684B331 =>PUP.Optional.MyBrowser
[HKEY_USERS\S-1-5-21-3708913199-91308732-823027974-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastBrowserAutoLaunch_6A300799F9297378AD551FA0A684B331 =>PUP.Optional.MyBrowser
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastUI.exe =>.Avast Software s.r.o
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:AvastUI.exe =>.Avast Software s.r.o
HKCU\SOFTWARE\Browser Cleanup =>.Avast Software s.r.o
O43 - CFD: 19/05/2021 - [] DC -- C:\Program Files (x86)\Common Files\AV =>.Avast
G2 - GCE: Preference [danie][User Data\Default\Extensions] [caljgklbbfbcjjanaijlacgncafpegll] Avira Password Manager =>.Avira Software
G2 - GCE: Preference [danie][User Data\Default\Extensions] [ccbpbkebodcjkknkfkpmfeciinhidaeh] Avira Operations GmbH & Co. KG =>.Avira Software
G2 - GCE: Preference [danie][User Data\Default\Extensions] [flliilndjeohchalpbbcdekjklbdgfkk] Avira Operations GmbH & Co. KG =>.Avira Software
HKLM\SOFTWARE\WOW6432Node\X-AVCSD =>.Avira Software
O43 - CFD: 19/05/2021 - [] DC -- C:\Users\danie\AppData\Roaming\QuickScan =>.Bitdefender
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder]:McAfee Security Scan Plus.lnk =>.McAfee Inc.
HKLM\SOFTWARE\McAfee =>.McAfee Inc.
HKLM\SOFTWARE\mcafeeupdater =>.McAfee Inc.
HKLM\SOFTWARE\WOW6432Node\McAfee =>.McAfee Inc.
HKLM\SOFTWARE\WOW6432Node\mcafeeupdater =>.McAfee Inc.
O43 - CFD: 19/05/2021 - [] DC -- C:\ProgramData\McAfee =>.McAfee
HKLM\SOFTWARE\KasperskyLab =>.Kaspersky Labs
HKLM\SOFTWARE\WOW6432Node\KasperskyLab =>.Kaspersky Labs