[Résolu] Gros problème de pub... rapport ZHPDiag

sylvainj2 · le 20 mai 2015

Salut à tous,

J’ai des gros problème avec le pc de ma fille ( Windows 7), je n’ai plus accès à internet ,je suis envahis par des pub de toutes part.

J’ai pu faire un peu de ménage en démarrant sans échec avec ZHPCleaner, Roguekiller, mais je n’ai pas pu tout nettoyer, voici le rapport ZHP (copier sur une clef USB et envoyé depuis mon pc portable).

http://cjoint.com/?EEukEqRjuG2

http://cjoint.com/?EEukFLrsavy

http://cjoint.com/?EEukGHBbFhf

Merci de votre aide

Sylvainj2

Modifié le 21 mai 2015 par sylvainj2

pear · le 20 mai 2015

Bonjour,

Suivez cette procédure attentivement, point par point, et postez en les rapports dans l'ordre
Veuillez noter que la désinfection, qui peut demander du temps, ne sera terminée que lorsqu'on vous le dira

1)Certains outils sont parfois détectés par votre Anti-virus ou votre Anti-Malware comme étant un "RiskTool", un virus ou un "Trojan", or ce n'est pas le cas.
Autorisez l'outil dans les exceptions de votre antivirus ou antimalware.
ou
Comment désactiver les protections résidentes
Bien évidemment, vous les rétablirez ensuite.
Votre navigateur peut bloquer un programme parce qu'il le croit dangereux.
Dans ce cas décochez le blocage provisoirement
Sous Firefox ,
Options->Sécurité
décocher : "Bloquer les sites signalés comme site d'attaque" .

Sous Chrome
Appuyer sur Ctrl+J (Downloads) -> "Récupérer le fichier malveillant" -> "Récupérer malgré tout"

Sous IE désactiver le filtre Smart Screen

Et si besoin,en cas de blocage:
Télécharger CTR.exe de Pierre 13 sur le bureau.
Sous Vista, Windows 7 et 8:
Faire un clic droit sur le fichier et choisir Exécuter en tant qu'administrateur.
Sous XP:
Double cliquer sur le fichier pour le lancer.
Après l'analyse, réparation, un rapport va s'ouvrir sur le bureau(CTR.txt)
Poster le contenu.

Comment poster les rapports
Aller sur le site Cijoint
Appuyer sur Parcourir et chercher les rapports sur le disque,
Cliquer sur Ouvrir
Cliquer sur Créer le lien CJoint,
>> dans la page suivante --> ,,
une adresse http//.. sera créée
Copier /coller cette adresse dans votre prochain message.
Sous Firefox, clic droit sur l'URL et, dans le menu contextuel qui s'ouvre, choisir « Copier l'adresse du lien »
Copier /coller cette adresse dans votre prochain message.

Ne postez jamais vos réponses dans un message antérieur mais dans un nouveau message sinon nous ne sommes pas avertis de votre nouvelle réponse

2)Si vous avez Adwcleaner depuis quelque temps, désinstallez le et téléchargez la dernière version sur Toolslib ou Bleepingcomputer et pas ailleurs

Télécharger AdwCleaner
Sous Vista et Windows 7_ 8-> Exécuter en tant qu'administrateur
Afin de ne pas fausser les rapports,Scanner et Nettoyer ne doivent être lancés qu'une seule fois
Cliquez sur Scanner

Nettoyage A faire sans délai
Cliquez sur Nettoyer
Après redémarrage , un rapport à poster sera sur le bureau
Postez le rapport C:\AdwCleaner[s?].txt

3)Télécharger Junkware Removal Tool de thisisu
OS:Windows XP/Vista/7/8
Utilisable sur systèmes 32-bits et 64-bits

Clilquez sur Jrt.exe avec droits administrateur.
Si votre antvirus râle,Vous le signalez comme acceptable dans les exceptions de votre antivirus
Une fenêtre noire s'ouvre qui vous dit de cliquer une touche pour lancer le scan.

L'outil va prendre quelques minutes pour fouiller votre machine.
Patientez jusqu'à l'apparition de Jrt.txt dont vous posterez le contenu.

4)Téléchargez Malwarebytes Anti-Malware
Sur ce lien

ou celui là
et enregistrez-le sur le Bureau.
Cliquer Setting pour le mettre en Français
vérifiez que cette cases Lancer Malwarebytes Anti-Malware est bien cochée.
Un essai gratuit de 14 jours des fonctions de la version Premium(payante) est pré-sélectionné, décochez le.
Cela ne diminuera pas les capacités d'analyse et de suppression du programme.
Cliquez sur Terminer.

Sur le Tableau de bord, cliquez sur le lien Mettre à jour .
Si , par la suite, vos bases de données sont obsolètes vous en serez averti et invtié à Corriger maintenant.
Dans l'onglet Paramètres > Sous-onglet Détection et Protection, Options de détection, cochez la case située devant Recherche de Rootkits

Après la mise à jour,Connecter les supports amovibles (USB) et cliquer sur Examen-> Examen personnalisé
Cochez tout
cliquez sur le bouton Examiner maintenant .

Si Malewarebytes ne se lançait pas utilisez Chameleon
et
Si Mbam renacle ou plante, lancez Lancer Mbam-clean.exe
et réinstallez le

Si des éléments sont détectés, cliquez sur Appliquer les actions pour que MBAM nettoye ce qu'il a détecté.
Dans la plupart des cas, un redémarrage sera nécessaire.
Attendez l'affichage du message vous invitant à faire redémarrer le PC, puis cliquez sur Oui

(Copier dans le Presse-papiers pour coller dans une réponse sur le forum)
Après le redémarrage, quand vous êtes de retour sur le Bureau, ouvrez de nouveau MBAM.
Cliquez sur l'onglet Historique > Journaux de l'application.
Faites un double clic sur le Journal d'examen dont les date et heure correspondent à l'analyse qui vient d'être effectuée.
Cliquez sur Afficher puis Copier dans le Presse-papiers
les rapports sont également stockés dans l'emplacement suivant par défaut:
pour Vista/Win7/8 : C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Logs
pour Windows XP : C:\Documents et Settings\All Users\Application Malwarebytes Malwarebytes Anti-Malware\Logs
Collez le contenu du Presse-papiers dans votre prochaine réponse.

5)Il faut Réinitialiser votre Navigateur
en cliquant ici

Cela désinstallera plugins et extensions que vous pourrez réinstaller avec la prudence nécessaire

6)Lancer Shortcut Cleaner
Cet utilitaire va chercher sur votre ordinateur les raccourcis détournés par des logiciels indésirables.
Les raccourcis défectueux seront automatiquement nettoyés.

7)Nouveau rapport Zhpdiag

Il devrait y avoir 2 icônes sur le bureau ou dans le fichier d'installation de Zhpdiag.

633672AshampooSnap2014032608h35m23s001.p
Sous XP, double clic sur l'icône ZhpDiag
Sous Vista et +, faire un clic droit et Exécuter en tant qu'administrateur

Cliquez sur le bouton Complet

Patientez quelques instants
Le rapport ZhpDiag.txt apparaitra sur le bureau

Il arrive que Zhpdiag bloque à 80%
Dans ce cas relancez le en cliquant Rechercher

sylvainj2 · le 20 mai 2015

salut pear,

merci de votre réponse

je ne peux télécharger aucun logiciel que vous demandez, j'ai désactivé provisoirement Avast, mais rien de se passe

merci pour la suite

pear · le 20 mai 2015

Relisez et appliquez le point1) de la procédure pour éliminer les blocages

et si cela bloque encore:

Essayez en mode sans échec.

Modifié le 20 mai 2015 par pear

sylvainj2 · le 20 mai 2015

je peux télécharger AdwCleaner mais lors de l'exécution, j'ai un message d'erreur

error: line 17 103 une fenetre s'ouvre et ferme Adwcleaner, je ne peux aller plus loin

pear · le 20 mai 2015

Avez vous fait tout cela :

Certains outils sont parfois détectés par votre Anti-virus ou votre Anti-Malware comme étant un "RiskTool", un virus ou un "Trojan", or ce n'est pas le cas.
Autorisez l'outil dans les exceptions de votre antivirus ou antimalware.
ou
Comment désactiver les protections résidentes
Bien évidemment, vous les rétablirez ensuite.
Votre navigateur peut bloquer un programme parce qu'il le croit dangereux.
Dans ce cas décochez le blocage provisoirement
Sous Firefox ,
Options->Sécurité
décocher : "Bloquer les sites signalés comme site d'attaque" .

Sous Chrome
Appuyer sur Ctrl+J (Downloads) -> "Récupérer le fichier malveillant" -> "Récupérer malgré tout"

Sous IE désactiver le filtre Smart Screen

Et si besoin,en cas de blocage:
Télécharger CTR.exe de Pierre 13 sur le bureau.
Sous Vista, Windows 7 et 8:
Faire un clic droit sur le fichier et choisir Exécuter en tant qu'administrateur.
Sous XP:
Double cliquer sur le fichier pour le lancer.
Après l'analyse, réparation, un rapport va s'ouvrir sur le bureau(CTR.txt)
Poster le contenu.

sylvainj2 · le 20 mai 2015

oui j'ai suivi votre procédure mais j'ai toujours le message suivant

http://cjoint.com/?EEuqJwDGUXm

le pc va un peu mieux mais des pages de pub s'ouvrent à chaque clic

pear · le 20 mai 2015

On va changer de méthode.

Vous devez trouver les 2 icônes Zhpdiag, Zhpfix,
Sur le bureau ou sinon dans le dossier où vous avez installé Zhpdiag (Program files ->Zhpdiag ->Zhpfix)

Cliquer sur l'icône Zhpfix
Sous Vista et + clic-droit, "Exécuter En tant qu'Administrateur
Copiez/Collez les lignes vertes dans le cadre ci dessous:
pour cela;
Clic gauche maintenu enfoncé, Balayer l'ensemble du texte à copier avec la souris pour le mettre en surbrillance ,de gauche à droite et de haut en bas
Ctrl+c mettre le tout en mémoire
Cliquer sur Importer
pour inscrire le texte dans la fenêtre vide qui s'ouvre

Script ZHPFix
MD5.CFAE2CF318E9521FA604F9E46CD3219E] - (.Pas de propriétaire - ASP.) -- C:\Program Files (x86)\ASP\AdvancedSystemProtector.exe [6715176] [PID.2288]
[MD5.125ABDA8B2831F8C273066D873BFD1C6] - (.zik.mu - 3D bubbleSound.) -- C:\Program Files\BubbleSound\3D BubbleSound.exe [14115328] [PID.2200]
[MD5.79FC37F692F76BD9762AB02F52AC0222] - (.ClaraLabs - ClaraUpdater.) -- C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe [887376] [PID.2304]
[MD5.D1AFCCBC2BC504F9F0C70B058EBE344B] - (.Infonaut - Infonaut Client Service.) -- C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe [278600] [PID.2664]
M2 - MFEP: RegExtension {9583699A-B9DF-4E6E-9178-8D4FE91A13C2} . (...) -- C:\Program Files (x86)\LyricsFriend\128.xpi
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs =
O4 - GS\Program [Public]: Opera.lnk . (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe
O4 - GS\SendTo [adeline]: Desk 365.lnk . (.337 Technology Limited. - Desk 365 application.) -- C:\Program Files (x86)\Desk 365\desk365.exe
O4 - HKLM\..\Run: [3D BubbleSound] . (.zik.mu - 3D bubbleSound.) -- C:\Program Files\BubbleSound\3D BubbleSound.exe
O23 - Service: ClaraUpdater (ClaraUpdater) . (.ClaraLabs - ClaraUpdater.) - C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe
O23 - Service: Infonaut 1.10.0.14 Client Service (insvc_1.10.0.14) . (.Infonaut - Infonaut Client Service.) - C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe
O23 - Service: Web Bar Service (wbsvc) (wbsvc) . (.Web Bar Media - Web Bar Service.) - C:\Program Files\WebBar\wbsvc.exe
[MD5.CFAE2CF318E9521FA604F9E46CD3219E] [APT] [Advanced-System Protector_startup] (...) -- C:\Program Files (x86)\ASP\AdvancedSystemProtector.exe [6715176]
[MD5.0516EC9A60AD9735C0FBA7702C0348C2] [APT] [avabvyxvdy] (...) -- C:\Users\adeline\AppData\Local\avabvyxvdy\avabvyxvdy.exe [2135552]
[MD5.88C511BE2C6649DAA9DABA888BBDA77E] [APT] [DealPly] (...) -- C:\Users\adeline\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.exe [91704]
[MD5.4EE862402A5ECEE9A6F291E08B79F2C7] [APT] [DealPlyUpdate] (.DealPly.) -- C:\Program Files (x86)\DealPly\DealPlyUpdate.exe [78024]
[MD5.A6E68809BD3B6D0CE8F8782CC1626F12] [APT] [Desk 365 RunAsStdUser] (.337 Technology Limited..) -- C:\Program Files (x86)\Desk 365\desk365.exe [1011792]
[MD5.E412DE53DD9AC2EE3DE6EDF5474B9DCE] [APT] [LaunchApp] (.MyPCBackup.com.) -- C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe [3143264]
[MD5.92CAFDB6AB2B475D04AF0C64E57DCEDB] [APT] [Plus-HD-2.2-chromeinstaller] (.Plus HD.) -- C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-chromeinstaller.exe [464232]
[MD5.64D3E0E09E7E5C0B151EE9EA422E25AD] [APT] [Plus-HD-2.2-codedownloader] (.Plus HD.) -- C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-codedownloader.exe [478568]
[MD5.CC2288923E902CC062B2CBF6095ABE48] [APT] [Plus-HD-2.2-firefoxinstaller] (.Plus HD.) -- C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-firefoxinstaller.exe [725352]
[MD5.E064878D80769D5E72DF4DD1C90C7116] [APT] [Plus-HD-2.2-updater] (.Plus HD.) -- C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-updater.exe [364392]
[MD5.1B7263F59C7AEB95664B338846BC5F3E] [APT] [Run_Bobby_Browser] (.The BoBrowser Authors.) -- C:\Users\adeline\AppData\Local\BoBrowser\Application\bobrowser.exe [7353992]
[MD5.998C279948759C00A4277C49141E3049] [APT] [WebBarLaunchTask] (.Web Bar Media.) -- C:\Program Files\WebBar\wbsvc.exe [37144]
[MD5.998C279948759C00A4277C49141E3049] [APT] [WebBarUpdateTask] (.Web Bar Media.) -- C:\Program Files\WebBar\wbsvc.exe [37144]
O39 - APT: Plus-HD-2.2-chromeinstaller - (.Plus HD.) -- C:\Windows\Tasks\Plus-HD-2.2-chromeinstaller.job [1910]
O39 - APT: Plus-HD-2.2-chromeinstaller - (.Plus HD.) -- C:\Windows\System32\Tasks\Plus-HD-2.2-chromeinstaller [1910]
O39 - APT: Plus-HD-2.2-codedownloader - (.Plus HD.) -- C:\Windows\Tasks\Plus-HD-2.2-codedownloader.job [1202]
O39 - APT: Plus-HD-2.2-codedownloader - (.Plus HD.) -- C:\Windows\System32\Tasks\Plus-HD-2.2-codedownloader [1202]
O39 - APT: Plus-HD-2.2-firefoxinstaller - (.Plus HD.) -- C:\Windows\Tasks\Plus-HD-2.2-firefoxinstaller.job [1834]
O39 - APT: Plus-HD-2.2-firefoxinstaller - (.Plus HD.) -- C:\Windows\System32\Tasks\Plus-HD-2.2-firefoxinstaller [1834]
O39 - APT: Plus-HD-2.2-updater - (.Plus HD.) -- C:\Windows\Tasks\Plus-HD-2.2-updater.job [1198]
O39 - APT: Plus-HD-2.2-updater - (.Plus HD.) -- C:\Windows\System32\Tasks\Plus-HD-2.2-updater [1198]
O41 - Driver: (innfd_1_10_0_14) . (.Infonaut - Infonaut Driver x64.) - C:\Windows\System32\drivers\innfd_1_10_0_14.sys
O42 - Logiciel: Advanced-System Protector - (.systweak.com.) [HKLM][64Bits] -- 00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~4A5BE654_is1
O42 - Logiciel: Babylon toolbar - (.BabylonToolbar.) [HKLM][64Bits] -- BabylonToolbar
O42 - Logiciel: BoBrowser - (.BoBrowser.) [HKCU][64Bits] -- BoBrowser
O42 - Logiciel: BubbleSound - (.BubbleSound.) [HKLM][64Bits] -- BubbleSound
O42 - Logiciel: Claro LTD toolbar - (.Claro LTD.) [HKLM][64Bits] -- claro
O42 - Logiciel: DealPly - (.DealPly Technologies Ltd.) [HKLM][64Bits] -- DealPly
O42 - Logiciel: Desk 365 - (.337 Technology Limited..) [HKLM][64Bits] -- Desk 365
O42 - Logiciel: FreeHDSport TV - (.installdaddy.) [HKLM][64Bits] -- FreeHDSport TV
O42 - Logiciel: Funmoods Web Search - (...) [HKLM][64Bits] -- funmoods
O42 - Logiciel: Gameo - (.IronSource Ltd..) [HKCU][64Bits] -- Gameo
O42 - Logiciel: Iminent - (.Iminent.) [HKLM][64Bits] -- IMBoosterARP
O42 - Logiciel: Iminent - (.Iminent.) [HKLM][64Bits] -- {89B5DFCA-81E0-4EA4-8A0A-4F4087A1DD00}
O42 - Logiciel: Infonaut 1.10.0.14 - (.Infonaut.) [HKLM][64Bits] -- Infonaut_1.10.0.14
O42 - Logiciel: MyPC Backup - (.MyPC Backup.) [HKLM][64Bits] -- MyPC Backup
O42 - Logiciel: Plus-HD-2.2 - (.Plus HD.) [HKLM][64Bits] -- Plus-HD-2.2
O42 - Logiciel: Search Protect - (.Client Connect LTD.) [HKLM][64Bits] -- SearchProtect
O42 - Logiciel: Soft2PC 1.4 - (.Soft2PC.) [HKLM][64Bits] -- Soft2PC_is1
O42 - Logiciel: SweetIM Bundle by SweetPacks - (.SweetPacks LTD.) [HKLM][64Bits] -- SweetIM Bundle by SweetPacks
O42 - Logiciel: SweetPacks Updater - (...) [HKLM][64Bits] -- WNLT
O42 - Logiciel: TUTO4PC_FR_5-v1.0 - (.TUTO4PC.) [HKLM][64Bits] -- TUTO4PC_FR_5_is1
O42 - Logiciel: Vosteran - (.Vosteran.) [HKCU][64Bits] -- Vosteran
O42 - Logiciel: WSE_Vosteran - (.WSE_Vosteran.) [HKCU][64Bits] -- WSE_Vosteran
O42 - Logiciel: Wajam - (.Wajam.) [HKLM][64Bits] -- Wajam
O42 - Logiciel: Web Bar 2.0.5574.22315 - (.Web Bar Media.) [HKLM][64Bits] -- {0BCE8B0A-1E76-44E5-9909-3CF804D92E4D}_is1
O42 - Logiciel: Yontoo 1.12.02 - (.Yontoo LLC.) [HKLM][64Bits] -- {889DF117-14D1-44EE-9F31-C5FB5D47F68B}
O42 - Logiciel: luckysearches uninstall - (.luckysearches.) [HKLM][64Bits] -- luckysearches uninstall
O42 - Logiciel: tuto4pc_fr_37 - (.TUTO4PC.) [HKLM][64Bits] -- tuto4pc_fr_37_is1
[HKCU\Software\1ClickDownload]
[HKCU\Software\2.6.1123.78]
[HKCU\Software\2.6.1125.80]
[HKCU\Software\2.6.1339.144]
[HKCU\Software\595588d8e56dba14]
[HKCU\Software\BabSolution]
[HKCU\Software\BabylonToolbar]
[HKCU\Software\Blabbers ]
[HKCU\Software\Blabbers]
[HKCU\Software\Claro LTD]
[HKCU\Software\DealPly]
[HKCU\Software\Iminent]
[HKCU\Software\InstallCore]
[HKCU\Software\InstalledBrowserExtensions]
[HKCU\Software\ProductSetup]
[HKCU\Software\Soft2PC]
[HKCU\Software\Store]
[HKCU\Software\SweetIM]
[HKCU\Software\TutoTag]
[HKCU\Software\Tutorials]
[HKCU\Software\V9]
[HKCU\Software\Vosteran Browser]
[HKCU\Software\WNLT]
[HKCU\Software\Wajam]
[HKCU\Software\freesofttoday]
[HKCU\Software\tuto4pc]
[HKCU\Software\wse_vosteran]
[HKLM\Software\Iminent]
[HKLM\Software\Tarma Installer]
[HKLM\Software\WNLT]
[HKLM\Software\WebBar]
[HKLM\Software\Wow6432Node\595588d8e56dba14]
[HKLM\Software\Wow6432Node\Babylon]
[HKLM\Software\Wow6432Node\Claro LTD]
[HKLM\Software\Wow6432Node\Iminent]
[HKLM\Software\Wow6432Node\SPPDCOM]
[HKLM\Software\Wow6432Node\SupDp]
[HKLM\Software\Wow6432Node\SweetIM]
[HKLM\Software\Wow6432Node\TUTO4PC]
[HKLM\Software\Wow6432Node\Umbrella]
[HKLM\Software\Wow6432Node\V9]
[HKLM\Software\Wow6432Node\deskSvc]
[HKLM\Software\Wow6432Node\eSafeSecControl]
[HKLM\Software\Wow6432Node\soft2PC]
[HKLM\Software\Wow6432Node\supTab]
O43 - CFD: 06/09/2013 - 21:20:02 - [] ----D C:\Program Files (x86)\BabylonToolbar
O43 - CFD: 05/11/2012 - 17:00:33 - [] ----D C:\Program Files (x86)\Claro LTD
O43 - CFD: 04/03/2015 - 23:40:17 - [] ----D C:\Program Files (x86)\DealPly
O43 - CFD: 20/05/2015 - 08:49:28 - [] ----D C:\Program Files (x86)\Desk 365
O43 - CFD: 11/05/2015 - 19:51:00 - [] ----D C:\Program Files (x86)\FreeHDSport TV
O43 - CFD: 25/08/2013 - 20:31:30 - [] ----D C:\Program Files (x86)\FreeHDSport.TV
O43 - CFD: 23/11/2012 - 23:39:07 - [] ----D C:\Program Files (x86)\Funmoods
O43 - CFD: 22/02/2014 - 12:22:30 - [] ----D C:\Program Files (x86)\Iminent
O43 - CFD: 12/05/2015 - 16:47:56 - [] ----D C:\Program Files (x86)\Infonaut_1.10.0.14
O43 - CFD: 07/12/2014 - 17:28:03 - [] ----D C:\Program Files (x86)\MyPC Backup
O43 - CFD: 11/05/2015 - 19:51:00 - [] ----D C:\Program Files (x86)\Plus-HD-2.2
O43 - CFD: 30/06/2010 - 10:26:44 - [] ----D C:\Program Files (x86)\Soft2PC
O43 - CFD: 20/06/2013 - 23:02:16 - [] ----D C:\Program Files (x86)\sweetpacks bundle uninstaller
O43 - CFD: 28/09/2014 - 17:43:38 - [] ----D C:\Program Files (x86)\TUTO4PC
O43 - CFD: 28/09/2014 - 17:43:35 - [] ----D C:\Program Files (x86)\tuto4pc_fr_37
O43 - CFD: 05/11/2012 - 17:01:01 - [] ----D C:\Program Files (x86)\Wajam
O43 - CFD: 24/04/2015 - 12:11:26 - [] ----D C:\Program Files (x86)\XTab
O43 - CFD: 02/02/2013 - 23:40:24 - [] ----D C:\Program Files (x86)\Yontoo
O43 - CFD: 25/08/2013 - 20:41:02 - [] ----D C:\Program Files (x86)\Common Files\337
O43 - CFD: 20/05/2015 - 08:59:18 - [] ----D C:\Program Files (x86)\Common Files\ClaraUpdater
O43 - CFD: 05/01/2015 - 23:04:10 - [] ----D C:\Program Files (x86)\Common Files\Umbrella
O43 - CFD: 05/11/2012 - 17:00:19 - [0] ----D C:\ProgramData\Babylon
O43 - CFD: 23/04/2013 - 15:53:19 - [] ----D C:\ProgramData\Iminent
O43 - CFD: 02/02/2013 - 23:40:21 - [] ----D C:\ProgramData\Tarma Installer
O43 - CFD: 24/04/2015 - 12:11:12 - [] ----D C:\ProgramData\WindowsMangerProtect
O43 - CFD: 13/01/2015 - 21:42:42 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector
O43 - CFD: 26/09/2013 - 18:00:08 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Desk 365
O43 - CFD: 14/06/2013 - 08:45:24 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent
O43 - CFD: 20/06/2013 - 20:07:04 - [] ----D C:\Users\adeline\AppData\Roaming\BabSolution
O43 - CFD: 05/11/2012 - 17:00:19 - [] ----D C:\Users\adeline\AppData\Roaming\Babylon
O43 - CFD: 02/02/2013 - 23:40:21 - [] ----D C:\Users\adeline\AppData\Roaming\DealPly
O43 - CFD: 02/09/2013 - 20:16:31 - [] ----D C:\Users\adeline\AppData\Roaming\Desk 365
O43 - CFD: 25/08/2013 - 20:31:49 - [] ----D C:\Users\adeline\AppData\Roaming\eIntaller
O43 - CFD: 06/04/2015 - 18:25:16 - [] ----D C:\Users\adeline\AppData\Roaming\Gameo
O43 - CFD: 23/04/2013 - 15:53:33 - [] ----D C:\Users\adeline\AppData\Roaming\Iminent
O43 - CFD: 24/04/2015 - 12:10:44 - [] ----D C:\Users\adeline\AppData\Roaming\luckysearches
O43 - CFD: 15/04/2010 - 19:04:58 - [] ----D C:\Users\adeline\AppData\Roaming\Soft2PC
O43 - CFD: 14/01/2015 - 13:47:30 - [] ----D C:\Users\adeline\AppData\Roaming\WSE_Vosteran
O43 - CFD: 20/05/2015 - 08:59:27 - [] ----D C:\Users\adeline\AppData\Local\BoBrowser
O43 - CFD: 21/05/2013 - 21:39:35 - [] ----D C:\Users\adeline\AppData\Local\eorezo
O43 - CFD: 20/05/2015 - 08:53:35 - [] ----D C:\Users\adeline\AppData\Local\Gameo
O43 - CFD: 15/04/2010 - 19:04:57 - [] ----D C:\Users\adeline\AppData\Local\Soft2PC
O43 - CFD: 21/05/2013 - 21:39:36 - [] ----D C:\Users\adeline\AppData\Local\supt4pc_fr_37
O43 - CFD: 21/05/2013 - 21:39:37 - [] ----D C:\Users\adeline\AppData\Local\tuto4pc_fr_37
O43 - CFD: 20/05/2015 - 08:54:18 - [] ----D C:\Users\adeline\AppData\Local\tuto4pc_fr_5
O43 - CFD: 14/01/2015 - 14:40:48 - [] ----D C:\Users\adeline\AppData\Local\Vosteran
O43 - CFD: 05/11/2012 - 17:00:53 - [] ----D C:\Users\adeline\AppData\Local\Wajam
O43 - CFD: 20/05/2015 - 08:58:30 - [] ----D C:\Users\adeline\AppData\Local\WebBar
O43 - CFD: 14/01/2015 - 13:47:16 - [] ----D C:\Users\adeline\AppData\Local\WSE_Vosteran
O43 - CFD: 21/11/2013 - 18:30:54 - [] ----D C:\Users\adeline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
O43 - CFD: 12/05/2015 - 16:47:53 - [] ----D C:\Users\adeline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BubbleSound 1.0
O43 - CFD: 14/06/2013 - 08:45:28 - [] ----D C:\Users\adeline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly
O43 - CFD: 14/01/2015 - 13:47:11 - [] ----D C:\Users\adeline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gameo
O43 - CFD: 14/06/2013 - 08:45:28 - [] ----D C:\Users\adeline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
O43 - CFD: 14/01/2015 - 13:49:17 - [] ----D C:\Users\adeline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vosteran
O43 - CFD: 05/11/2012 - 17:00:57 - [] ----D C:\Users\adeline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
O58 - SDL:10/04/2015 - 20:56:56 ---A- . (.Infonaut - Infonaut Driver x64.) -- C:\Windows\System32\Drivers\innfd_1_10_0_14.sys [58224]
O61 - LFC: 20/05/2015 - 10:11:42 ---A- . (.The Chromium Authors.) -- C:\Users\adeline\AppData\Local\BoBrowser\Application\36.0.1985.136\Installer\setup.exe [1027720]
O61 - LFC: 20/05/2015 - 10:11:47 ---A- . (...) -- C:\Users\adeline\AppData\Local\tuto4pc_fr_5\Download\majmp_gentleeu.exe [9682290]
O64 - Services: CurCS - 10/04/2015 - C:\Windows\System32\drivers\innfd_1_10_0_14.sys (innfd_1_10_0_14) .(.Infonaut - Infonaut Driver x64.) - LEGACY_INNFD_1_10_0_14
O68 - StartMenuInternet: <BoBrowser.2NYFQI4SOCH4LEL2C2HJKGOVU4> <BoBrowser>[HKLM\..\Shell\open\Command] (.The BoBrowser Authors - BoBrowser.) -- C:\Users\adeline\AppData\Local\BoBrowser\Application\bobrowser.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <Vosteran.2NYFQI4SOCH4LEL2C2HJKGOVU4> <Vosteran>[HKLM\..\Shell\open\Command] (...) -- C:\Users\adeline\AppData\Local\Vosteran\APPLIC~1\vosteran.exe"
O69 - SBI: SearchScopes [HKCU] {0633EE93-1111-472f-A0FF-E1416B8B2EAA} - (Search) -
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Search the web) -
O69 - SBI: SearchScopes [HKCU] {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - (Ask Search) -
O69 - SBI: SearchScopes [HKCU] {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} - (e) -
O69 - SBI: SearchScopes [HKCU] {67A2568C-7A0A-4EED-AECC-B5405DE63B64} - (Google) -
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) -
O69 - SBI: SearchScopes [HKCU] {822F376C-5A88-4819-9F53-F842127D9234} - (Bing) -
O69 - SBI: SearchScopes [HKCU] {B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B} - (Funmoods) -
O69 - SBI: SearchScopes [HKCU] {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} - (StartWeb) -
O69 - SBI: SearchScopes [HKCU] {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} - (searchplusnetwork) -
O69 - SBI: SearchScopes [HKCU] {E54EB100-CC3F-4B78-9500-FF6EDD8699EB} - (Recherche sécurisée) -
O69 - SBI: SearchScopes [HKCU] {E733165D-CBCF-4FDA-883E-ADEF965B476C} - (Google) -
O87 - FAEL: "{0A6DBAC5-D21A-4C37-942D-22EB7ADBDE8C}" | In - None - P17 - TRUE | .(.Iminent - Iminent.) -- C:\Program Files (x86)\Iminent\Iminent.exe
O87 - FAEL: "{7A75E560-DEBA-4E48-8B1A-DA3C9216D62C}" | In - None - P17 - TRUE | .(.Iminent - Iminent.) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe
O87 - FAEL: "{12619539-9D71-470A-BFE5-65AD7E21AC1F}" | In - None - P17 - TRUE | .(.The BoBrowser Authors - BoBrowser.) -- C:\Users\adeline\AppData\Local\BoBrowser\Application\bobrowser.exe
O90 - PUC: "ACFD5B980E184AE4A8A0F404781ADD00" . (.Iminent.) -- C:\Windows\Installer\{89B5DFCA-81E0-4EA4-8A0A-4F4087A1DD00}\imbooster.ico
[HKCU\Software\595588d8e56dba14\2.6.1339.144\upd]:="upd=1"
[HKCU\Software\595588d8e56dba14\2.6.1519.190\upd]:="upd=1"
[HKCU\Software\595588d8e56dba14\2.6.1673.238\upd]:="upd=1"
[HKCU\Software\595588d8e56dba14\2.6.1694.246\upd]:="upd="
[HKCU\Software\595588d8e56dba14\2.7.1769.27\upd]:="upd="
[HKCU\Software\595588d8e56dba14\2.7.1832.68\upd]:="upd="
[HKCU\Software\595588d8e56dba14\history\{16cdff19-861d-48e3-a751-d99a27784753}2.3.796.11]:guid="{16cdff19-861d-48e3-a751-d99a27784753}"
[HKCU\Software\595588d8e56dba14\history\{16cdff19-861d-48e3-a751-d99a27784753}2.3.796.11]:version="2.3.796.11"
[HKCU\Software\595588d8e56dba14\history\{16cdff19-861d-48e3-a751-d99a27784753}2.6.1123.78]:guid="{16cdff19-861d-48e3-a751-d99a27784753}"
[HKCU\Software\595588d8e56dba14\history\{16cdff19-861d-48e3-a751-d99a27784753}2.6.1123.78]:version="2.6.1123.78"
[HKCU\Software\595588d8e56dba14\history\{16cdff19-861d-48e3-a751-d99a27784753}2.6.1125.80]:guid="{16cdff19-861d-48e3-a751-d99a27784753}"
[HKCU\Software\595588d8e56dba14\history\{16cdff19-861d-48e3-a751-d99a27784753}2.6.1125.80]:version="2.6.1125.80"
[HKCU\Software\595588d8e56dba14\history\{16cdff19-861d-48e3-a751-d99a27784753}2.6.1249.132]:guid="{16cdff19-861d-48e3-a751-d99a27784753}"
[HKCU\Software\595588d8e56dba14\history\{16cdff19-861d-48e3-a751-d99a27784753}2.6.1249.132]:version="2.6.1249.132"
[HKCU\Software\595588d8e56dba14\history\{16cdff19-861d-48e3-a751-d99a27784753}2.6.1339.144]:guid="{16cdff19-861d-48e3-a751-d99a27784753}"
[HKCU\Software\595588d8e56dba14\history\{16cdff19-861d-48e3-a751-d99a27784753}2.6.1339.144]:version="2.6.1339.144"
[HKCU\Software\595588d8e56dba14\history\{16cdff19-861d-48e3-a751-d99a27784753}2.6.1519.190]:guid="{16cdff19-861d-48e3-a751-d99a27784753}"
[HKCU\Software\595588d8e56dba14\history\{16cdff19-861d-48e3-a751-d99a27784753}2.6.1519.190]:version="2.6.1519.190"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1562.220]:dllName="BrowserDefender.dll"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1562.220]:exeName="BrowserDefender.exe"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1562.220]:folderName="BrowserDefender"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1562.220]:guid="{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1562.220]:serviceName="BrowserDefendert"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1562.220]:version="2.6.1562.220"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1673.238]:dllName="BitGuard.dll"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1673.238]:exeName="BitGuard.exe"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1673.238]:folderName="BitGuard"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1673.238]:guid="{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1673.238]:serviceName="BitGuard"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1673.238]:version="2.6.1673.238"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1694.246]:dllName="BitGuard.dll"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1694.246]:exeName="BitGuard.exe"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1694.246]:folderName="BitGuard"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1694.246]:guid="{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1694.246]:serviceName="BitGuard"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1694.246]:version="2.6.1694.246"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.7.1769.27]:SERVICE_NAME="BitGuard"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.7.1769.27]:dllName="BitGuard.dll"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.7.1769.27]:exeName="BitGuard.exe"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.7.1769.27]:folderName="BitGuard"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.7.1769.27]:guid="{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.7.1769.27]:version="2.7.1769.27"
[HKCU\Software\595588d8e56dba14]:GUID="{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
[HKCU\Software\595588d8e56dba14]:HPCHREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
[HKCU\Software\595588d8e56dba14]:HPFFREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
[HKCU\Software\595588d8e56dba14]:HPIEREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:INSTALL_FOLDER_NAME="BitGuard"
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
[HKCU\Software\595588d8e56dba14]:KWFFREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:NTCHREGEXP0="FO81jovjQUF+5S6+haV7vGe3TMfw8oqWAhSaKzFS9OtdgZ1j5X+B4jW/459R"
[HKCU\Software\595588d8e56dba14]:NTCHREGEXP1="FO81jovjQUF+5S6+hbF0tnG4Tc/u94SDBhydJTxS8+ldnZRi5niE4Dm49Yxb"
[HKCU\Software\595588d8e56dba14]:NTCHREGEXP2="FO81jovjQUF+5S6+hbF/tG24SsHn9oyWDBuXLj1U8e1fjIJv8XSE4Dy75IlV"
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
[HKCU\Software\595588d8e56dba14]:NTFFREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:PROTECTOR_DLL_NAME="BitGuard.dll"
[HKCU\Software\595588d8e56dba14]:PROTECT_EXE_NAME="BitGuard.exe"
[HKCU\Software\595588d8e56dba14]:SECHREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
[HKCU\Software\595588d8e56dba14]:SECHREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:SECHREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
[HKCU\Software\595588d8e56dba14]:SECHREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
[HKCU\Software\595588d8e56dba14]:SECHREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
[HKCU\Software\595588d8e56dba14]:SECHREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
[HKCU\Software\595588d8e56dba14]:SECHREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
[HKCU\Software\595588d8e56dba14]:SECHREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
[HKCU\Software\595588d8e56dba14]:SECHREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
[HKCU\Software\595588d8e56dba14]:SECHREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
[HKCU\Software\595588d8e56dba14]:SECHREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:SECHREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
[HKCU\Software\595588d8e56dba14]:SECHREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:SECHREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:SECHREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
[HKCU\Software\595588d8e56dba14]:SECHREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:SECHREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:SECHREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
[HKCU\Software\595588d8e56dba14]:SECHREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
[HKCU\Software\595588d8e56dba14]:SECHREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
[HKCU\Software\595588d8e56dba14]:SECHREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
[HKCU\Software\595588d8e56dba14]:SECHREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:SECHREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:SECHREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
[HKCU\Software\595588d8e56dba14]:SECHREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
[HKCU\Software\595588d8e56dba14]:SECHREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
[HKCU\Software\595588d8e56dba14]:SECHREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
[HKCU\Software\595588d8e56dba14]:SECHREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
[HKCU\Software\595588d8e56dba14]:SEFFREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
[HKCU\Software\595588d8e56dba14]:SEIEREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
[HKCU\Software\595588d8e56dba14]:SEREGEXP=""
[HKCU\Software\595588d8e56dba14]:SERVICE_NAME="BitGuard"
[HKCU\Software\595588d8e56dba14]:usrcheckbox="1"
[HKCU\Software\595588d8e56dba14]:version="2.7.1832.68"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:GUID="{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPCHREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPFFREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:HPIEREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:INSTALL_FOLDER_NAME="BitGuard"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:KWFFREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTCHREGEXP0="FO81jovjQUF+5S6+haV7vGe3TMfw8oqWAhSaKzFS9OtdgZ1j5X+B4jW/459R"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTCHREGEXP1="FO81jovjQUF+5S6+hbF0tnG4Tc/u94SDBhydJTxS8+ldnZRi5niE4Dm49Yxb"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTCHREGEXP2="FO81jovjQUF+5S6+hbF/tG24SsHn9oyWDBuXLj1U8e1fjIJv8XSE4Dy75IlV"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:NTFFREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:PROTECTOR_DLL_NAME="BitGuard.dll"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:PROTECT_EXE_NAME="BitGuard.exe"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SECHREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEFFREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEIEREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SEREGEXP=""
[HKLM\Software\Wow6432Node\595588d8e56dba14]:SERVICE_NAME="BitGuard"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:usrcheckbox="1"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:version="2.7.1832.68"
[MD5.8DD3503A28BD7EB7BEC3FDF67844CD63] [WIS][23/04/2013] (.Iminent - Iminent.) -- C:\Windows\Installer\fbc51.msi [10190848]
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS
HKLM\SOFTWARE\Microsoft\Tracing\MyPC Backup_RASAPI32
HKLM\SOFTWARE\Microsoft\Tracing\MyPC Backup_RASMANCS
HKLM\SOFTWARE\Microsoft\Tracing\Signup Wizard_RASAPI32
HKLM\SOFTWARE\Microsoft\Tracing\Signup Wizard_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\desk365_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\desk365_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\funmoods_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\funmoods_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\gameo_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\gameo_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\IminentSetup_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\IminentSetup_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Iminent_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Iminent_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\majt4pcfr_im_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\majt4pcfr_im_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\majt4pc_fr_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\majt4pc_fr_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\tuto4pc_fr_5_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\tuto4pc_fr_5_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\upt4pc_fr_5_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\upt4pc_fr_5_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WajamUpdater_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WajamUpdater_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\yontoo-C4-1824_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\yontoo-C4-1824_RASMANCS
[HKCR\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}] (IMinent WebBooster (BHO))
SS - | Auto 06/04/2015 37144 | (wbsvc) . (.Web Bar Media.) - C:\Program Files\WebBar\wbsvc.exe
SR - | Auto 20/05/2015 887376 | (ClaraUpdater) . (.ClaraLabs.) - C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe
SR - | Auto 10/04/2015 278600 | (insvc_1.10.0.14) . (.Infonaut.) - C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe
[HKLM\SYSTEM\CurrentControlSet\Services\ClaraUpdater]
[HKLM\SYSTEM\CurrentControlSet\Services\insvc_1.10.0.14]
[HKLM\SYSTEM\CurrentControlSet\Services\wbsvc) (wbsvc]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~4A5BE654_is1]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BoBrowser]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\BubbleSound]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\claro]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\DealPly]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Desk 365]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\FreeHDSport TV]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\funmoods]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Gameo]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{89B5DFCA-81E0-4EA4-8A0A-4F4087A1DD00}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Infonaut_1.10.0.14]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-2.2]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SweetIM Bundle by SweetPacks]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\WNLT]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\TUTO4PC_FR_5_is1]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\WSE_Vosteran]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Wajam]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0BCE8B0A-1E76-44E5-9909-3CF804D92E4D}_is1]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\luckysearches uninstall]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\tuto4pc_fr_37_is1]
[HKLM\Software\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}]
[HKLM\Software\Wow6432Node\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}]
[HKLM\Software\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}]
[HKLM\Software\Wow6432Node\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{000F18F2-09EB-4A59-82B2-5AE4184C39C3}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{000F18F2-09EB-4A59-82B2-5AE4184C39C3}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00CBB66B-1D3B-46D3-9577-323A336ACB50}]
[HKLM\Software\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}]
[HKLM\Software\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}]
[HKLM\Software\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}]
[HKLM\Software\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}]
[HKLM\Software\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}]
[HKLM\Software\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}]
[HKLM\Software\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}]
[HKLM\Software\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}]
[HKLM\Software\Wow6432Node\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}]
[HKLM\Software\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}]
[HKLM\Software\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}]
[HKLM\Software\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}]
[HKLM\Software\Wow6432Node\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}]
[HKLM\Software\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}]
[HKLM\Software\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}]
[HKLM\Software\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}]
[HKLM\Software\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}]
[HKLM\Software\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}]
[HKLM\Software\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}]
[HKLM\Software\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}]
[HKLM\Software\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}]
[HKLM\Software\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}]
[HKLM\Software\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}]
[HKLM\Software\Classes\TypeLib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3}]
[HKLM\Software\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}]
[HKLM\Software\Wow6432Node\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}]
[HKLM\Software\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}]
[HKLM\Software\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}]
[HKLM\Software\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}]
[HKLM\Software\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}]
[HKLM\Software\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}]
[HKLM\Software\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}]
[HKLM\Software\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}]
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3475D2C4-BBD1-4255-A70D-4125A4D30956}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3475D2C4-BBD1-4255-A70D-4125A4D30956}]
[HKLM\Software\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}]
[HKLM\Software\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}]
[HKLM\Software\Wow6432Node\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}]
[HKLM\Software\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}]
[HKLM\Software\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}]
[HKLM\Software\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}]
[HKLM\Software\Wow6432Node\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}]
[HKLM\Software\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}]
[HKLM\Software\Wow6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}]
[HKLM\Software\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}]
[HKLM\Software\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}]
[HKLM\Software\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}]
[HKLM\Software\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}]
[HKLM\Software\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}]
[HKLM\Software\Wow6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}]
[HKLM\Software\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}]
[HKLM\Software\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}]
[HKLM\Software\Wow6432Node\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}]
[HKLM\Software\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}]
[HKLM\Software\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}]
[HKLM\Software\Classes\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}]
[HKLM\Software\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}]
[HKLM\Software\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{60295942-9E5F-4EE8-B785-3A655904D24F}]
[HKLM\Software\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}]
[HKLM\Software\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}]
[HKLM\Software\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}]
[HKLM\Software\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}]
[HKLM\Software\Wow6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}]
[HKLM\Software\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}]
[HKLM\Software\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}]
[HKLM\Software\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}]
[HKLM\Software\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}]
[HKLM\Software\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}]
[HKLM\Software\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}]
[HKLM\Software\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}]
[HKLM\Software\Wow6432Node\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}]
[HKLM\Software\Classes\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}]
[HKLM\Software\Classes\protector_dll.protectorbho.1]
[HKLM\Software\Classes\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833}]
[HKLM\Software\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}]
[HKLM\Software\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}]
[HKLM\Software\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}]
[HKLM\Software\Wow6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}]
[HKLM\Software\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}]
[HKLM\Software\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}]
[HKLM\Software\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}]
[HKLM\Software\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}]
[HKLM\Software\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}]
[HKLM\Software\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}]
[HKLM\Software\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}]
[HKLM\Software\Wow6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}]
[HKLM\Software\Classes\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A}]
[HKLM\Software\Classes\AppID\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706}]
[HKLM\Software\Classes\TypeLib\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706}]
[HKLM\Software\Wow6432Node\Classes\AppID\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{963B125B-8B21-49A2-A3A8-E37092276531}]
[HKLM\Software\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}]
[HKLM\Software\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9E131A93-EED7-4BEB-B015-A0ADB30B5646}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9E131A93-EED7-4BEB-B015-A0ADB30B5646}]
[HKLM\Software\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}]
[HKLM\Software\Wow6432Node\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}]
[HKLM\Software\Classes\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}]
[HKLM\Software\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}]
[HKLM\Software\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}]
[HKLM\Software\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}]
[HKLM\Software\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}]
[HKLM\Software\Classes\TypeLib\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}]
[HKLM\Software\Classes\AppID\{ab67d16d-3824-4683-b81a-d66dba61b1af}]
[HKLM\Software\Wow6432Node\Classes\AppID\{ab67d16d-3824-4683-b81a-d66dba61b1af}]
[HKLM\Software\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}]
[HKLM\Software\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}]
[HKLM\Software\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}]
[HKLM\Software\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}]
[HKLM\Software\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}]
[HKLM\Software\Wow6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}]
[HKLM\Software\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}]
[HKLM\Software\Wow6432Node\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}]
[HKLM\Software\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}]
[HKLM\Software\Wow6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}]
[HKLM\Software\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}]
[HKLM\Software\Wow6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}]
[HKLM\Software\Classes\TypeLib\{b52f3553-49fa-4599-81a4-f98951e0b53b}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B}]
[HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}]
[HKLM\Software\Wow6432Node\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}]
[HKLM\Software\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}]
[HKLM\Software\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}]
[HKLM\Software\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}]
[HKLM\Software\Wow6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}]
[HKLM\Software\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}]
[HKLM\Software\Wow6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}]
[HKLM\Software\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}]
[HKLM\Software\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}]
[HKLM\Software\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}]
[HKLM\Software\Wow6432Node\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}]
[HKLM\Software\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}]
[HKLM\Software\Wow6432Node\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}]
[HKLM\Software\Classes\Interface\{cc883f50-95bb-4a25-9dbf-b801506f1bc4}]
[HKLM\Software\Wow6432Node\Classes\Interface\{cc883f50-95bb-4a25-9dbf-b801506f1bc4}]
[HKLM\Software\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}]
[HKLM\Software\Wow6432Node\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}]
[HKLM\Software\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}]
[HKLM\Software\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}]
[HKLM\Software\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}]
[HKLM\Software\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}]
[HKLM\Software\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}]
[HKLM\Software\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}]
[HKLM\Software\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}]
[HKLM\Software\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}]
[HKLM\Software\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}]
[HKLM\Software\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}]
[HKLM\Software\Wow6432Node\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}]
[HKLM\Software\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}]
[HKLM\Software\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}]
[HKLM\Software\Wow6432Node\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}]
[HKLM\Software\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}]
[HKLM\Software\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}]
[HKLM\Software\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}]
[HKLM\Software\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}]
[HKLM\Software\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}]
[HKLM\Software\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}]
[HKLM\Software\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}]
[HKLM\Software\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}]
[HKLM\Software\Wow6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}]
[HKLM\Software\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}]
[HKLM\Software\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}]
[HKLM\Software\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}]
[HKLM\Software\Wow6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}]
[HKLM\Software\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}]
[HKLM\Software\Wow6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}]
[HKLM\Software\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}]
[HKLM\Software\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}]
[HKLM\Software\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}]
[HKLM\Software\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}]
[HKLM\Software\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}]
[HKLM\Software\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}]
[HKLM\Software\Classes\Prod.cap]
[HKLM\Software\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}]
[HKLM\Software\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}]
[HKLM\Software\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}]
[HKLM\Software\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
[HKLM\Software\Classes\AppID\escort.dll]
[HKLM\Software\Classes\AppID\escortapp.dll]
[HKLM\Software\Classes\AppID\escorteng.dll]
[HKLM\Software\Classes\AppID\esrv.EXE]
[HKLM\Software\Classes\protector_dll.protectorbho]
[HKLM\Software\Classes\AppID\Soft2PCBHO.DLL]
[HKLM\Software\Classes\b]
[HKLM\Software\Classes\Babylon.dskBnd]
[HKLM\Software\Classes\Babylon.dskBnd.1]
[HKLM\Software\Classes\bbylnApp.appCore]
[HKLM\Software\Classes\bbylnApp.appCore.1]
[HKLM\Software\Classes\escort.escortIEPane]
[HKLM\Software\Classes\escort.escortIEPane.1]
[HKLM\Software\Classes\esrv.BabylonESrvc]
[HKLM\Software\Classes\esrv.BabylonESrvc.1]
[HKLM\Software\Classes\esrv.funmoodsESrvc]
[HKLM\Software\Classes\esrv.funmoodsESrvc.1]
[HKLM\Software\Classes\f]
[HKLM\Software\Classes\funmoods.dskBnd]
[HKLM\Software\Classes\funmoods.dskBnd.1]
[HKLM\Software\Classes\updatebho.TimerBHO]
[HKLM\Software\Classes\updatebho.TimerBHO.1]
[HKLM\Software\Classes\wit4ie.WitBHO]
[HKLM\Software\Classes\wit4ie.WitBHO.2]
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje]
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp]
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj]
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater]
[HKCU\Software\1ClickDownload]
[HKCU\Software\BabylonToolbar]
[HKLM\Software\Wow6432Node\BabylonToolbar]
[HKCU\Software\Blabbers]
[HKCU\Software\DataMngr]
[HKLM\Software\Wow6432Node\DataMngr]
[HKCU\Software\Iminent]
[HKLM\Software\Iminent]
[HKLM\Software\Wow6432Node\Iminent]
[HKCU\Software\Softonic]
[HKCU\Software\SweetIM]
[HKLM\Software\Wow6432Node\SweetIM]
[HKLM\Software\Tarma Installer]
[HKCU\Software\Tuto4pc]
[HKLM\Software\Wow6432Node\Tuto4pc]
[HKCU\Software\Tutorials]
[HKCU\Software\WNLT]
[HKLM\Software\WNLT]
[HKCU\Software\DealPly]
[HKLM\Software\Wow6432Node\DealPly]
[HKLM\Software\Wow6432Node\Microsoft\Tracing\Iminent_RASAPI32]
[HKLM\Software\Wow6432Node\Microsoft\Tracing\Iminent_RASMANCS]
[HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASAPI32]
[HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASMANCS]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\claro]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DealPly]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\soft2pc_is1]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\software_is1]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WNLT]
[HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\base64]
[HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\Chrome]
[HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\Prox]
[HKLM\Software\Classes\AppID\priam_bho.DLL]
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\bodddioamolcibagionmmobehnbhiakf]
[HKCU\Software\InstallCore]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\GinyasBrowserCompanion]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload]
[HKLM\Software\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}]
[HKLM\Software\Wow6432Node\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5]
[HKLM\Software\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}]
[HKLM\Software\Wow6432Node\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}]
[HKLM\Software\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}]
[HKLM\Software\Wow6432Node\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}]
[HKLM\Software\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}]
[HKLM\Software\Wow6432Node\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}]
[HKLM\Software\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}]
[HKLM\Software\Wow6432Node\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}]
[HKLM\Software\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}]
[HKLM\Software\Wow6432Node\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}]
[HKLM\Software\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}]
[HKLM\Software\Wow6432Node\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}]
[HKLM\Software\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}]
[HKLM\Software\Wow6432Node\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}]
[HKLM\Software\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}]
[HKLM\Software\Wow6432Node\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}]
[HKLM\Software\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}]
[HKLM\Software\Wow6432Node\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}]
[HKLM\Software\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}]
[HKLM\Software\Wow6432Node\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}]
[HKLM\Software\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}]
[HKLM\Software\Wow6432Node\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}]
[HKLM\Software\Classes\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}]
[HKLM\Software\Wow6432Node\Classes\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}]
[HKLM\Software\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}]
[HKLM\Software\Wow6432Node\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Desk 365]
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\desksvc]
[HKLM\Software\Classes\AppID\{CCC3E766-7BA9-4629-AC1A-7F4B7F362E65}]
[HKLM\Software\Classes\TypeLib\{CCC3E766-7BA9-4629-AC1A-7F4B7F362E65}]
[HKLM\Software\Wow6432Node\Classes\AppID\{CCC3E766-7BA9-4629-AC1A-7F4B7F362E65}]
[HKLM\Software\Classes\TypeLib\{A903AC15-686E-4D67-A355-86FCBE9F60DA}]
[HKLM\Software\Classes\Interface\{16466D47-74A8-4928-B8B2-07CD79ABFC9F}]
[HKLM\Software\Wow6432Node\Classes\Interface\{16466D47-74A8-4928-B8B2-07CD79ABFC9F}]
[HKLM\Software\Classes\Interface\{26D5CC0A-7A46-4D86-AF45-2EFA320B0C54}]
[HKLM\Software\Wow6432Node\Classes\Interface\{26D5CC0A-7A46-4D86-AF45-2EFA320B0C54}]
[HKLM\Software\Classes\Interface\{2D13AC8F-037E-40C5-ADA6-231BA74EA2F4}]
[HKLM\Software\Wow6432Node\Classes\Interface\{2D13AC8F-037E-40C5-ADA6-231BA74EA2F4}]
[HKLM\Software\Classes\Interface\{322EDCF5-9E7D-4021-8C67-F3FFE4961A38}]
[HKLM\Software\Wow6432Node\Classes\Interface\{322EDCF5-9E7D-4021-8C67-F3FFE4961A38}]
[HKLM\Software\Classes\Interface\{3E254398-828F-4D51-A39E-3F6B6D96A12C}]
[HKLM\Software\Wow6432Node\Classes\Interface\{3E254398-828F-4D51-A39E-3F6B6D96A12C}]
[HKLM\Software\Classes\Interface\{442DAF0C-7EAD-48D9-ABEA-E0036470D6D5}]
[HKLM\Software\Wow6432Node\Classes\Interface\{442DAF0C-7EAD-48D9-ABEA-E0036470D6D5}]
[HKLM\Software\Classes\Interface\{58EB187D-24F8-4423-BD6C-655CE4C416BD}]
[HKLM\Software\Wow6432Node\Classes\Interface\{58EB187D-24F8-4423-BD6C-655CE4C416BD}]
[HKLM\Software\Classes\Interface\{6BEB066C-A791-4A21-B934-7783533FE888}]
[HKLM\Software\Wow6432Node\Classes\Interface\{6BEB066C-A791-4A21-B934-7783533FE888}]
[HKLM\Software\Classes\Interface\{A07612DF-B1DD-484F-A1C3-36CA4CE919D2}]
[HKLM\Software\Wow6432Node\Classes\Interface\{A07612DF-B1DD-484F-A1C3-36CA4CE919D2}]
[HKLM\Software\Classes\Interface\{A76F97B2-2C56-456A-A29E-72741595C2E8}]
[HKLM\Software\Wow6432Node\Classes\Interface\{A76F97B2-2C56-456A-A29E-72741595C2E8}]
[HKLM\Software\Classes\Interface\{B19D9D96-E59C-4936-B283-8A831CDB3A53}]
[HKLM\Software\Wow6432Node\Classes\Interface\{B19D9D96-E59C-4936-B283-8A831CDB3A53}]
[HKLM\Software\Classes\Interface\{DC8AAABA-3F8B-4866-8B3A-D9368133A478}]
[HKLM\Software\Wow6432Node\Classes\Interface\{DC8AAABA-3F8B-4866-8B3A-D9368133A478}]
[HKLM\Software\Classes\Interface\{E15519AE-99BE-42DD-BE60-FFC3C183F443}]
[HKLM\Software\Wow6432Node\Classes\Interface\{E15519AE-99BE-42DD-BE60-FFC3C183F443}]
[HKLM\Software\Classes\esrv.claroESrvc.1]
[HKLM\Software\Classes\esrv.claroESrvc]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4D6A9BBF-402C-4301-B1EF-28D04F71D761}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D6A9BBF-402C-4301-B1EF-28D04F71D761}]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\mixidj]
[HKCU\Software\mixidj]
[HKLM\Software\Wow6432Node\mixidj]
[HKLM\Software\Wow6432Node\qvo6Software]
[HKLM\Software\Wow6432Node\eSafeSecControl]
[HKCU\Software\AppDataLow\Software\Crossrider]
[HKCU\Software\InstalledBrowserExtensions\]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F1057DD419AED0B468AD8888429E139A]
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo]
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\kpepfkjapeclaafmhoelccknpfedainn]
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc]
[HKCU\Software\InstalledBrowserExtensions]
[HKLM\Software\Classes\Interface\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}]
[HKLM\Software\Wow6432Node\Classes\Interface\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}]
[HKLM\Software\Classes\CrossriderApp0033036.BHO]
[HKLM\Software\Classes\CrossriderApp0033036.BHO.1]
[HKLM\Software\Classes\CrossriderApp0033036.Sandbox]
[HKLM\Software\Classes\CrossriderApp0033036.Sandbox.1]
[HKLM\Software\Classes\CrossriderApp0035336.BHO]
[HKLM\Software\Classes\CrossriderApp0035336.BHO.1]
[HKLM\Software\Classes\CrossriderApp0035336.Sandbox]
[HKLM\Software\Classes\CrossriderApp0035336.Sandbox.1]
[HKLM\Software\Classes\funmoods.funmoodsHlpr]
[HKLM\Software\Classes\funmoods.funmoodsHlpr.1]
[HKLM\Software\Classes\funmoodsApp.appCore]
[HKLM\Software\Classes\funmoodsApp.appCore.1]
[HKLM\Software\Classes\iminent]
[HKLM\Software\Classes\Iminent.Business.Tinyfying.DownloadArgs]
[HKLM\Software\Classes\Iminent.Business.Tinyfying.LinkToPromoteArgs]
[HKLM\Software\Classes\Iminent.Business.Tinyfying.RawDataArgs]
[HKLM\Software\Classes\Iminent.Business.Tinyfying.TinyUrlArgs]
[HKLM\Software\Classes\Iminent.Business.Tinyfying.ViralLinkArgs]
[HKLM\Software\Classes\Iminent.Mediator.Communication.ClientCallback]
[HKLM\Software\Classes\Iminent.Mediator.Communication.ContractBase]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.CleanCacheCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GameOverCallback]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GetCreditCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableResult]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.InstallationContextResult]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.LoginCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.LogoutCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.MyAccountCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.PlayContentCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.PostContentCallback]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.SetVariableCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.TestContentCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.VariableChangedCallback]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.WarmUpCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.WelcomeCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.ServerCommand]
[HKLM\Software\Classes\Iminent.Mediator.Communication.ServerResult]
[HKLM\Software\Classes\Iminent.Mediator.LightContent]
[HKLM\Software\Classes\Iminent.Mediator.LightUri]
[HKLM\Software\Classes\Iminent.Mediator.MediatorServiceProxy]
[HKLM\Software\Classes\IminentWebBooster.BrowserHelperObject]
[HKLM\Software\Classes\IminentWebBooster.BrowserHelperObject.1]
[HKLM\Software\Classes\IminentWebBooster.ScriptExtender]
[HKLM\Software\Classes\IminentWebBooster.ScriptExtender.1]
[HKLM\Software\Classes\wajam.WajamBHO]
[HKLM\Software\Classes\wajam.WajamBHO.1]
[HKLM\Software\Classes\wajam.WajamDownloader]
[HKLM\Software\Classes\wajam.WajamDownloader.1]
[HKLM\Software\Classes\YontooIEClient.Api]
[HKLM\Software\Classes\YontooIEClient.Api.1]
[HKLM\Software\Classes\YontooIEClient.Layers]
[HKLM\Software\Classes\YontooIEClient.Layers.1]
[HKLM\Software\Classes\AppID\escorTlbr.DLL]
[HKLM\Software\Classes\AppID\Iminent.WebBooster.InternetExplorer.DLL]
[HKLM\Software\Classes\AppID\YontooIEClient.DLL]
[HKLM\Software\Wow6432Node\Classes\CrossriderApp0033036.BHO]
[HKLM\Software\Wow6432Node\Classes\CrossriderApp0033036.BHO.1]
[HKLM\Software\Wow6432Node\Classes\CrossriderApp0033036.Sandbox]
[HKLM\Software\Wow6432Node\Classes\CrossriderApp0033036.Sandbox.1]
[HKLM\Software\Wow6432Node\Classes\CrossriderApp0035336.BHO]
[HKLM\Software\Wow6432Node\Classes\CrossriderApp0035336.BHO.1]
[HKLM\Software\Wow6432Node\Classes\CrossriderApp0035336.Sandbox]
[HKLM\Software\Wow6432Node\Classes\CrossriderApp0035336.Sandbox.1]
[HKLM\Software\Wow6432Node\Classes\escort.escortIEPane]
[HKLM\Software\Wow6432Node\Classes\escort.escortIEPane.1]
[HKLM\Software\Wow6432Node\Classes\esrv.funmoodsESrvc]
[HKLM\Software\Wow6432Node\Classes\esrv.funmoodsESrvc.1]
[HKLM\Software\Wow6432Node\Classes\funmoods.dskBnd]
[HKLM\Software\Wow6432Node\Classes\funmoods.dskBnd.1]
[HKLM\Software\Wow6432Node\Classes\funmoods.funmoodsHlpr]
[HKLM\Software\Wow6432Node\Classes\funmoods.funmoodsHlpr.1]
[HKLM\Software\Wow6432Node\Classes\funmoodsApp.appCore]
[HKLM\Software\Wow6432Node\Classes\funmoodsApp.appCore.1]
[HKLM\Software\Wow6432Node\Classes\iminent]
[HKLM\Software\Wow6432Node\Classes\Iminent.Business.Tinyfying.DownloadArgs]
[HKLM\Software\Wow6432Node\Classes\Iminent.Business.Tinyfying.LinkToPromoteArgs]
[HKLM\Software\Wow6432Node\Classes\Iminent.Business.Tinyfying.RawDataArgs]
[HKLM\Software\Wow6432Node\Classes\Iminent.Business.Tinyfying.TinyUrlArgs]
[HKLM\Software\Wow6432Node\Classes\Iminent.Business.Tinyfying.ViralLinkArgs]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.ClientCallback]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.ContractBase]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.CleanCacheCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.GameOverCallback]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.GetCreditCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableResult]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.InstallationContextResult]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.LoginCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.LogoutCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.MyAccountCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.PlayContentCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.PostContentCallback]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.SetVariableCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.TestContentCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.VariableChangedCallback]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.WarmUpCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.WelcomeCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.ServerCommand]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.ServerResult]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.LightContent]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.LightUri]
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.MediatorServiceProxy]
[HKLM\Software\Wow6432Node\Classes\IminentWebBooster.BrowserHelperObject]
[HKLM\Software\Wow6432Node\Classes\IminentWebBooster.BrowserHelperObject.1]
[HKLM\Software\Wow6432Node\Classes\IminentWebBooster.ScriptExtender]
[HKLM\Software\Wow6432Node\Classes\IminentWebBooster.ScriptExtender.1]
[HKLM\Software\Wow6432Node\Classes\wajam.WajamBHO]
[HKLM\Software\Wow6432Node\Classes\wajam.WajamBHO.1]
[HKLM\Software\Wow6432Node\Classes\wajam.WajamDownloader]
[HKLM\Software\Wow6432Node\Classes\wajam.WajamDownloader.1]
[HKLM\Software\Wow6432Node\Classes\YontooIEClient.Api]
[HKLM\Software\Wow6432Node\Classes\YontooIEClient.Api.1]
[HKLM\Software\Wow6432Node\Classes\YontooIEClient.Layers]
[HKLM\Software\Wow6432Node\Classes\YontooIEClient.Layers.1]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311301136}]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311531136}]
[HKLM\Software\Wow6432Node\Classes\CLSID\{11111111-1111-1111-1111-110311301136}]
[HKLM\Software\Wow6432Node\Classes\CLSID\{11111111-1111-1111-1111-110311531136}]
[HKLM\Software\Wow6432Node\Classes\CLSID\{22222222-2222-2222-2222-220322302236}]
[HKLM\Software\Wow6432Node\Classes\CLSID\{22222222-2222-2222-2222-220322532236}]
[HKLM\Software\Wow6432Node\Classes\AppID\escort.DLL]
[HKLM\Software\Wow6432Node\Classes\AppID\escortApp.DLL]
[HKLM\Software\Wow6432Node\Classes\AppID\escortEng.DLL]
[HKLM\Software\Wow6432Node\Classes\AppID\escorTlbr.DLL]
[HKLM\Software\Wow6432Node\Classes\AppID\Iminent.WebBooster.InternetExplorer.DLL]
[HKLM\Software\Wow6432Node\Classes\AppID\YontooIEClient.DLL]
[HKLM\Software\Classes\claro.claroappCore]
[HKLM\Software\Classes\claro.claroappCore.1]
[HKLM\Software\Classes\claro.clarodskBnd]
[HKLM\Software\Classes\claro.clarodskBnd.1]
[HKLM\Software\Classes\claro.claroHlpr]
[HKLM\Software\Classes\claro.claroHlpr.1]
[HKLM\Software\Classes\CLSID\{2097A1B6-E86A-4072-A32D-2249A3ECBC5A}]
[HKLM\Software\Classes\CLSID\{F03955F1-309E-34E9-A021-1399C3532273}]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:3D BubbleSound
C:\Program Files (x86)\BabylonToolbar
C:\Program Files (x86)\Claro LTD
C:\Program Files (x86)\DealPly
C:\Program Files (x86)\Desk 365
C:\Program Files (x86)\FreeHDSport TV
C:\Program Files (x86)\FreeHDSport.TV
C:\Program Files (x86)\Funmoods
C:\Program Files (x86)\Iminent
C:\Program Files (x86)\Infonaut_1.10.0.14
C:\Program Files (x86)\MyPC Backup
C:\Program Files (x86)\Plus-HD-2.2
C:\Program Files (x86)\sweetpacks bundle uninstaller
C:\Program Files (x86)\TUTO4PC
C:\Program Files (x86)\tuto4pc_fr_37
C:\Program Files (x86)\Wajam
C:\Program Files (x86)\Yontoo
C:\Program Files (x86)\Common Files\337
C:\Program Files (x86)\Common Files\ClaraUpdater
C:\ProgramData\Babylon
C:\ProgramData\Iminent
C:\ProgramData\Tarma Installer
C:\ProgramData\WindowsMangerProtect
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Desk 365
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent
C:\Users\adeline\AppData\Roaming\BabSolution
C:\Users\adeline\AppData\Roaming\Babylon
C:\Users\adeline\AppData\Roaming\DealPly
C:\Users\adeline\AppData\Roaming\Desk 365
C:\Users\adeline\AppData\Roaming\Gameo
C:\Users\adeline\AppData\Roaming\Iminent
C:\Users\adeline\AppData\Roaming\luckysearches
C:\Users\adeline\AppData\Roaming\WSE_Vosteran
C:\Users\adeline\AppData\Local\BoBrowser
C:\Users\adeline\AppData\Local\eorezo
C:\Users\adeline\AppData\Local\Gameo
C:\Users\adeline\AppData\Local\supt4pc_fr_37
C:\Users\adeline\AppData\Local\tuto4pc_fr_37
C:\Users\adeline\AppData\Local\tuto4pc_fr_5
C:\Users\adeline\AppData\Local\Vosteran
C:\Users\adeline\AppData\Local\Wajam
C:\Users\adeline\AppData\Local\WebBar
C:\Users\adeline\AppData\Local\WSE_Vosteran
C:\Users\adeline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
C:\Users\adeline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BubbleSound 1.0
C:\Users\adeline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly
C:\Users\adeline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gameo
C:\Users\adeline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
C:\Users\adeline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vosteran
C:\Users\adeline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
C:\Program Files (x86)\SearchProtect
C:\Program Files (x86)\Soft2PC
C:\Program Files (x86)\GinyasBrowserCompanion
C:\Program Files (x86)\Common Files\Umbrella
C:\Users\adeline\AppData\Roaming\Soft2PC
C:\Users\adeline\AppData\Roaming\GinyasBrowserCompanion
C:\Users\adeline\AppData\Roaming\eIntaller
C:\Users\adeline\AppData\Local\SearchProtect
C:\Users\adeline\AppData\Local\Soft2PC
C:\Users\adeline\AppData\LocalLow\BabylonToolbar
C:\Users\adeline\AppData\LocalLow\bbrs_002.tb
C:\Users\adeline\AppData\LocalLow\Claro LTD
C:\Users\adeline\AppData\LocalLow\mixidj
C:\Users\adeline\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
C:\Program Files (x86)\ASP\AdvancedSystemProtector.exe
C:\Program Files\BubbleSound\3D BubbleSound.exe
C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe
C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe
C:\Users\adeline\AppData\Local\avabvyxvdy\avabvyxvdy.exe
C:\Users\adeline\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.exe
C:\Program Files (x86)\DealPly\DealPlyUpdate.exe
C:\Program Files (x86)\Desk 365\desk365.exe
C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-chromeinstaller.exe
C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-codedownloader.exe
C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-firefoxinstaller.exe
C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-updater.exe
C:\Users\adeline\AppData\Local\BoBrowser\Application\bobrowser.exe
C:\Program Files\WebBar\wbsvc.exe
C:\Windows\Tasks\Plus-HD-2.2-chromeinstaller.job
C:\Windows\System32\Tasks\Plus-HD-2.2-chromeinstaller
C:\Windows\Tasks\Plus-HD-2.2-codedownloader.job
C:\Windows\System32\Tasks\Plus-HD-2.2-codedownloader
C:\Windows\Tasks\Plus-HD-2.2-firefoxinstaller.job
C:\Windows\System32\Tasks\Plus-HD-2.2-firefoxinstaller
C:\Windows\Tasks\Plus-HD-2.2-updater.job
C:\Windows\System32\Tasks\Plus-HD-2.2-updater
[HKCU\Software\BabSolution]
[HKCU\Software\Blabbers ]
[HKCU\Software\Claro LTD]
[HKCU\Software\ProductSetup]
[HKCU\Software\Store]
[HKCU\Software\TutoTag]
[HKCU\Software\Vosteran Browser]
[HKCU\Software\Wajam]
[HKCU\Software\freesofttoday]
[HKCU\Software\tuto4pc]
[HKCU\Software\wse_vosteran]
[HKLM\Software\WebBar]
[HKLM\Software\Wow6432Node\Babylon]
[HKLM\Software\Wow6432Node\Claro LTD]
[HKLM\Software\Wow6432Node\SPPDCOM]
[HKLM\Software\Wow6432Node\SupDp]
[HKLM\Software\Wow6432Node\TUTO4PC]
[HKLM\Software\Wow6432Node\deskSvc]
[HKLM\Software\Wow6432Node\supTab]
[HKCU\Software\595588d8e56dba14\history\{16cdff19-861d-48e3-a751-d99a27784753}2.3.796.11]:guid="{16cdff19-861d-48e3-a751-d99a27784753}"
[HKCU\Software\595588d8e56dba14\history\{16cdff19-861d-48e3-a751-d99a27784753}2.6.1123.78]:guid="{16cdff19-861d-48e3-a751-d99a27784753}"
[HKCU\Software\595588d8e56dba14\history\{16cdff19-861d-48e3-a751-d99a27784753}2.6.1125.80]:guid="{16cdff19-861d-48e3-a751-d99a27784753}"
[HKCU\Software\595588d8e56dba14\history\{16cdff19-861d-48e3-a751-d99a27784753}2.6.1249.132]:guid="{16cdff19-861d-48e3-a751-d99a27784753}"
[HKCU\Software\595588d8e56dba14\history\{16cdff19-861d-48e3-a751-d99a27784753}2.6.1339.144]:guid="{16cdff19-861d-48e3-a751-d99a27784753}"
[HKCU\Software\595588d8e56dba14\history\{16cdff19-861d-48e3-a751-d99a27784753}2.6.1519.190]:guid="{16cdff19-861d-48e3-a751-d99a27784753}"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1562.220]:dllName="BrowserDefender.dll"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1673.238]:dllName="BitGuard.dll"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1694.246]:dllName="BitGuard.dll"
[HKCU\Software\595588d8e56dba14\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.7.1769.27]:SERVICE_NAME="BitGuard"
[HKCU\Software\595588d8e56dba14]:GUID="{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}"
[HKLM\Software\Wow6432Node\595588d8e56dba14]:GUID="{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}"
C:\Windows\Installer\fbc51.msi
[HKCR\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}] (IMinent WebBooster (BHO))
C:\Users\adeline\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\prefs.js (.not file.)
[MD5.00000000000000000000000000000000] [APT] [PostPoneInstall] (...) -- C:\Users\adeline\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe (.not file.) [0]
O41 - Driver: (ofkkdxdp) . (. - .) - C:\Windows\system32\drivers\ofkkdxdp.sys (.not file.)
[HKCU\Software\Hoolapp]
[HKCU\Software\IM]
[HKCU\Software\IncrediMail]
O43 - CFD: 10/07/2013 - 13:00:27 - [0] ----D C:\Program Files (x86)\GUMF1C.tmp
[MD5.5F685973740F289BE3C809952DB8408B] - (.Microsoft Corporation. - BingBar Service.) -- C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe [193696] [PID.2160]
O3 - Toolbar: avast! Online Security - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} . (...) -- (.not file.)
O3 - Toolbar: Bing Bar - [HKLM]{8dcb7100-df86-4384-8842-8fa844297b3f} . (.Microsoft Corporation. - Bing Client Extensions.) -- C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
O42 - Logiciel: MixiDJ Toolbar - (.mixidj.) [HKLM][64Bits] -- mixidj
[HKCU\Software\Softonic]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\mixidj]
O43 - CFD: 08/07/2011 - 19:13:18 - [] ----D C:\Program Files (x86)\Ask.com
O43 - CFD: 23/04/2013 - 15:51:39 - [] ----D C:\Program Files (x86)\mixidj
O90 - PUC: "537E56336A8449149988EC95CAA55E30" . (.Bing Bar.) -- C:\Windows\Installer\{3365E735-48A6-4194-9988-CE59AC5AE503}\icon_installer_ico
[MD5.5D3A30ADD585A102F1B60C0BA313ECEE] [WIS][11/03/2014] (.Microsoft Corporation - Bing Bar.) -- C:\Windows\Installer\36c61.msi [741376]
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AskPartnerCobrandingTool_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AskPartnerCobrandingTool_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_pour_free-media-converter_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_pour_free-media-converter_RASMANCS
[HKCR\CLSID\{8dcb7100-df86-4384-8842-8fa844297b3f}] (Bing Bar)
[HKCR\CLSID\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}] (Bing Bar Helper)
SS - | Auto 11/03/2014 193696 | (BBSvc) . (.Microsoft Corporation..) - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe
SR - | Demand 11/03/2014 247968 | (BBUpdate) . (.Microsoft Corporation..) - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\mixidj]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}]
[HKLM\Software\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}]
[HKLM\Software\Wow6432Node\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}]
[HKLM\Software\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}]
[HKLM\Software\Wow6432Node\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}]
[HKLM\Software\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}]
[HKLM\Software\Wow6432Node\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}]
[HKLM\Software\Classes\AppID\tdataprotocol.DLL]
[HKLM\Software\Classes\AppID\updatebho.DLL]
[HKLM\Software\Classes\AppID\wit4ie.DLL]
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS]
[HKLM\Software\Wow6432Node\Microsoft\Tracing\askpartnercobrandingtool_rasmancs]
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32]
[HKLM\Software\Wow6432Node\Microsoft\Tracing\askpartnercobrandingtool_rasapi32]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CA9B9C89-4662-4ADC-9C23-A452BECD5D19}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CA9B9C89-4662-4ADC-9C23-A452BECD5D19}]
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{8dcb7100-df86-4384-8842-8fa844297b3f}
C:\Program Files (x86)\mixidj
C:\Program Files (x86)\Ask.com
C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe
C:\Windows\Installer\36c61.msi
[HKCR\CLSID\{8dcb7100-df86-4384-8842-8fa844297b3f}] (Bing Bar)
[HKCR\CLSID\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}] (Bing Bar Helper)

EmptyClsid
EmptyFlash
EmptyPrefetch
FirewallRaz
Ifeofix
Proxyfix
ShortcutFix
Sysrestore

Cliquer sur "Go" en bas, à gauche

Redémarrer pour achever le nettoyage.

Copier-coller,dans la réponse, le contenu du rapport ZHPFixReport.txt qui s'affiche .
Si besoin; il est enregistré sous C:\ZHP\ZHPFixReport.txt

Modifié le 20 mai 2015 par pear

sylvainj2 · le 20 mai 2015

je ne peux plus rien faire

j'ai refais une analyse complète avec ZHP

http://cjoint.com/?EEursrWTNja

Malwarebytes bloque une intrusion toutes les secondes

je ne sais plus quoi faire

merci de votre aide

pear · le 20 mai 2015

j'ai refais une analyse complète avec ZHP

Ce n'était pas utile.

Vous n'avez pas pu lancer le script Zhpfix ?

et en mode sans échec ?

A propos de MalewaresBytes:

Si Malewarebytes ne se lançait pas utilisez Chameleon

et

Si Mbam renacle ou plante, lancez Lancer Mbam-clean.exe

et réinstallez le

Si des éléments sont détectés, cliquez sur Appliquer les actions pour que MBAM nettoye ce qu'il a détecté.

Dans la plupart des cas, un redémarrage sera nécessaire.

Attendez l'affichage du message vous invitant à faire redémarrer le PC, puis cliquez sur Oui

(Copier dans le Presse-papiers pour coller dans une réponse sur le forum)

Après le redémarrage, quand vous êtes de retour sur le Bureau, ouvrez de nouveau MBAM.

Cliquez sur l'onglet Historique > Journaux de l'application.

Faites un double clic sur le Journal d'examen dont les date et heure correspondent à l'analyse qui vient d'être effectuée.

Cliquez sur Afficher puis Copier dans le Presse-papiers

les rapports sont également stockés dans l'emplacement suivant par défaut:

pour Vista/Win7/8 : C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Logs

pour Windows XP : C:\Documents et Settings\All Users\Application Malwarebytes Malwarebytes Anti-Malware\Logs

Collez le contenu du Presse-papiers dans votre prochaine réponse.

J'ai aussi remarqué qu'après avoir lancé Zhpcleaner qui a trouvé de nombreuses saletés, vous avez oublié de lancer la réparation.

Il serait bon de recommencer avec toute l'attention voulue:

Téléchargez sur votre bureau. ZHPCleanerde Nicolas Coolman

Certains outils sont parfois détectés par votre Anti-virus ou votre Anti-Malware comme étant un "RiskTool", un virus ou un "Trojan", or ce n'est pas le cas.

Autorisez l'outil dans les exceptions de votre antivirus ou antimalware.

ou

Comment désactiver les protections résidentes

Bien évidemment, vous les rétablirez ensuite.

De même votre navigateur, dans ses options, peut bloquer un programme qu'il croit dangereux.

Dans ce cas décochez le blocage provisoirement

Ainsi Firefox->Options->Sécurité décochez "Bloquer les sites signalés comme étant des sites d'attaque"

Fermez toutes les applications en cours (notamment votre navigateur)

Double cliquer sur Scanner pour lancer l'application

Sous Windows Vista / 7 / 8 clic droit > Exécuter en tant qu'administrateur

Accepter "les conditions d'utilisation"

Cliquer sur Réparer (ou nettoyer)

En cas de présence d'un proxy, un message apparaît avec cette question suivie de l'adresse IP du proxy.:

Avez-vous installé ce proxy ?

Si vous n'avez pas installé de Proxy, cliquer sur Non pour en accepter la réparation.

Comment poster les rapports

Aller sur le site Cijoint

Appuyer sur Parcourir et chercher les rapports sur le disque,

Cliquer sur Ouvrir

Cliquer sur Créer le lien CJoint,

>> dans la page suivante --> ,,

une adresse http//.. sera créée

Copier /coller cette adresse dans votre prochain message.

Noter que le copier/coller de l'adresse ne fonctionne pas sous Firefox.

Dans ce cas, clic droit sur l'URL et, dans le menu contextuel qui s'ouvre, choisir « Copier l'adresse du lien »

Modifié le 20 mai 2015 par pear

Connexion

Pas encore inscrit ?

[Résolu] Gros problème de pub... rapport ZHPDiag

Messages recommandés

sylvainj2

Lien vers le commentaire

Partager sur d’autres sites

pear

Lien vers le commentaire

Partager sur d’autres sites

sylvainj2

Lien vers le commentaire

Partager sur d’autres sites

pear

Lien vers le commentaire

Partager sur d’autres sites

sylvainj2

Lien vers le commentaire

Partager sur d’autres sites

pear

Lien vers le commentaire

Partager sur d’autres sites

sylvainj2

Lien vers le commentaire

Partager sur d’autres sites

pear

Lien vers le commentaire

Partager sur d’autres sites

sylvainj2

Lien vers le commentaire

Partager sur d’autres sites

pear

Lien vers le commentaire

Partager sur d’autres sites

Rejoindre la conversation

En ligne récemment 0 membre est en ligne

Zebulon

Outils en ligne

Naviguer