clark02121992

Thank you for your help and effort and also my part searching some fixes on the internet you may now close this thread

its upon opening every magnet links on torrent and im using google chrome in that post

which link sir?

Users shortcut scan result (x64) Version: 10.10.2018 Ran by Marc (15-10-2018 13:39:16) Running from C:\Users\Marc\Desktop Boot Mode: Normal ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\MSACCESS.EXE (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk -> C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\SC_Reader.ico (Flexera Software LLC) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk -> C:\Program Files (x86)\Adobe\Adobe Help\Adobe Help.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop Elements 10.lnk -> C:\Program Files (x86)\Adobe\Elements 10 Organizer\Photoshop Elements 10.0.exe (Adobe Systems Incorporated) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk -> C:\Windows\Installer\{52D87F32-70E4-4348-8148-C0B9F35B1314}\AppleSoftwareUpdateIco.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVE.EXE (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTE.EXE (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home.lnk -> C:\Program Files (x86)\Sony\PlayMemories Home\PMBBrowser.exe (Sony Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\MSPUB.EXE (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trend Micro Install.lnk -> C:\Program Files\Trend Micro\TM\TMInstall.exe (Sony Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UC Browser.lnk -> C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe (UCWeb Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care (Desktop).lnk -> C:\Program Files\Sony\VAIO Care\VAIOCare.exe (Sony Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Data Restore Tool.lnk -> C:\Program Files (x86)\Sony\VAIO Data Restore Tool\Restore.exe (Sony Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Gate.lnk -> C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe (Sony Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Manual.lnk -> C:\Program Files (x86)\Sony\VAIO Manual\ManualLauncher.exe (Sony Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Media Server Settings.lnk -> C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHS.exe (Sony Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Transfer.lnk -> C:\Program Files (x86)\Sony\VAIO Transfer Support\VAIOTransfer.exe (Sony Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk -> C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe (Sony Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Store.lnk -> C:\Windows\WinStore\WinStore.htm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark Legacy.lnk -> C:\Program Files (x86)\Wireshark\Wireshark-gtk.exe (The Wireshark developer community, hxxp://www.wireshark.org/) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk -> C:\Program Files (x86)\Wireshark\Wireshark.exe (The Wireshark developer community, hxxp://www.wireshark.org/) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZetaRO\ZetaRO.lnk -> C:\GAMES\Zeta\ZetaRO.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap\Uninstall WinPcap 4.1.3.lnk -> C:\Program Files (x86)\WinPcap\uninstall.exe (Riverbed Technology, Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VOWSoft iPod Software\iBackupBot for iTunes\iBackupBot for iTunes.lnk -> C:\Program Files (x86)\VOWSoft iPod Software\iBackupBot for iTunes\iBackupBot.exe (VOW Software, Ltd.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VOWSoft iPod Software\iBackupBot for iTunes\Uninstall.lnk -> C:\Program Files (x86)\VOWSoft iPod Software\iBackupBot for iTunes\uninst.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VOWSoft iPod Software\iBackupBot for iTunes\Website.lnk -> C:\Program Files (x86)\VOWSoft iPod Software\iBackupBot for iTunes\iBackupBot.url () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VOWSoft iPod Software\iBackupBot for iPad iPhone\iBackupBot for iPad iPhone.lnk -> C:\Program Files\VOW Software\iBackupBot for iPad iPhone\iBackupBot.exe (VOW Software, Ltd.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VOWSoft iPod Software\iBackupBot for iPad iPhone\Uninstall.lnk -> C:\Program Files\VOW Software\iBackupBot for iPad iPhone\uninst.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VOWSoft iPod Software\iBackupBot for iPad iPhone\Website.lnk -> C:\Program Files\VOW Software\iBackupBot for iPad iPhone\iBackupBot.url () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VirtViewer\Remote viewer.lnk -> C:\Program Files\VirtViewer v5.0-256\bin\remote-viewer.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk -> C:\Program Files\VideoLAN\VLC\Documentation.url () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk -> C:\Program Files\VideoLAN\VLC\NEWS.txt () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk -> C:\Program Files\VideoLAN\VLC\VideoLAN Website.url () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk -> C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care\VAIO Care (Desktop).lnk -> C:\Program Files\Sony\VAIO Care\VAIOCare.exe (Sony Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unchecky\Unchecky.lnk -> C:\Program Files (x86)\Unchecky\unchecky.exe (Reason Software Company Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unchecky\Uninstall.lnk -> C:\Program Files (x86)\Unchecky\uninstall.exe (Reason Software Company Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UC Browser\UC Browser.lnk -> C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe (UCWeb Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows Easy Transfer Reports.lnk -> C:\Windows\System32\migwiz\PostMig.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows Easy Transfer.lnk -> C:\Windows\System32\migwiz\migwiz.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk -> C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SolarWinds Response Time Viewer\SolarWinds Response Time Viewer.lnk -> C:\Program Files (x86)\SolarWinds\ResponseTimeViewer\ResponseTimeViewer.exe (SolarWinds) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SHAREit\SHAREit.lnk -> C:\Program Files (x86)\SHAREit Technologies\SHAREit\SHAREit.exe (SHAREit Technologies Co.Ltd) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Securely File Shredder\Securely File Shredder.lnk -> C:\Program Files\Securely File Shredder\FileShredder.exe (Reason Software Company Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent\qBittorrent.lnk -> C:\Program Files\qBittorrent\qbittorrent.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent\Uninstall.lnk -> C:\Program Files\qBittorrent\uninst.exe (The qBittorrent project) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home\PlayMemories Home Settings Initialization Tool.lnk -> C:\Program Files (x86)\Sony\PlayMemories Home\PMBInit.exe (Sony Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home\PlayMemories Home.lnk -> C:\Program Files (x86)\Sony\PlayMemories Home\PMBBrowser.exe (Sony Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++\Notepad++.lnk -> C:\Program Files (x86)\Notepad++\notepad++.exe (Don HO don.h@free.fr) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2010 Express\Microsoft Visual Basic 2010 Express.lnk -> C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\vbexpress.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools\Office 2016 Language Preferences.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\SETLANG.EXE (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools\Skype for Business Recording Manager.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\OcPubMgr.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools\Telemetry Dashboard for Office 2016.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\msotd.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools\Telemetry Log for Office 2016.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\msoev.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MCShield\MCShield Control Center.lnk -> C:\Program Files (x86)\MCShield\MCShieldCC.exe (MyCity) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MCShield\MCShield Real-Time Monitor.lnk -> C:\Program Files (x86)\MCShield\MCShieldRTM.exe (MyCity) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configure Java.lnk -> C:\Program Files\Java\jre1.8.0_181\bin\javacpl.exe (Oracle Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes\About iTunes.lnk -> C:\Program Files\iTunes\iTunes.Resources\en.lproj\About iTunes.rtf () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes\iTunes.lnk -> C:\Program Files\iTunes\iTunes.exe (Apple Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GRF Editor\GRF Editor.lnk -> C:\Program Files (x86)\GRF Editor\GRF Editor.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GNS3\Dynamips Hypervisor.lnk -> C:\Program Files\GNS3\dynamips-start.cmd () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GNS3\GNS3.lnk -> C:\Program Files\GNS3\gns3.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GNS3\Loopback Manager.lnk -> C:\Program Files\GNS3\loopback-manager.cmd () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GNS3\Network device list.lnk -> C:\Program Files\GNS3\network-device-list.cmd () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GNS3\Uninstall.lnk -> C:\Program Files\GNS3\Uninstall.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GNS3\VMnet Manager.lnk -> C:\Program Files\GNS3\vmnet-manager.cmd () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GNS3\VPCS.lnk -> C:\Program Files\GNS3\vpcs-start.cmd () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GNS3\Website.lnk -> C:\Program Files\GNS3\GNS3.url () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileASSASSIN\FileASSASSIN.lnk -> C:\Program Files (x86)\FileASSASSIN\FileASSASSIN.exe (Malwarebytes) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileASSASSIN\Uninstall.lnk -> C:\Program Files (x86)\FileASSASSIN\uninst.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo\CrystalDiskInfo.lnk -> C:\Program Files (x86)\CrystalDiskInfo\DiskInfo32.exe (Crystal Dew World) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Packet Tracer\Cisco Packet Tracer Help.lnk -> C:\GAMES\Packet Tracer\Cisco Packet Tracer 7.1\help\default\index.htm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Packet Tracer\Cisco Packet Tracer.lnk -> C:\GAMES\Packet Tracer\Cisco Packet Tracer 7.1\bin\PacketTracer7.exe (Cisco Systems, Inc) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Packet Tracer\Qt Linguist.lnk -> C:\GAMES\Packet Tracer\Cisco Packet Tracer 7.1\bin\linguist.exe (Digia Plc and/or its subsidiary(-ies)) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Packet Tracer\Saves.lnk -> C:\GAMES\Packet Tracer\Cisco Packet Tracer 7.1\saves () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Packet Tracer\Uninstall Cisco Packet Tracer.lnk -> C:\GAMES\Packet Tracer\Cisco Packet Tracer 7.1\unins000.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AxCrypt\AxCrypt.lnk -> C:\Windows\Installer\{93BEFCCD-77A3-24E9-015B-A175869B8927}\axcrypt.ico () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software\Avast Free Antivirus.lnk -> C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (32-bit).lnk -> C:\Windows\SysWOW64\odbcad32.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (64-bit).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\Windowspowershell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk -> C:\Windows\System32\SoundRecorder.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Steps Recorder.lnk -> C:\Windows\System32\psr.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip File Manager.lnk -> C:\Program Files\7-Zip\7zFM.exe (Igor Pavlov) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip Help.lnk -> C:\Program Files\7-Zip\7-zip.chm () Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30 Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Libraries () Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Help.lnk -> C:\Windows\HelpPane.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Windows.Defender.lnk -> C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc () Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) Shortcut: C:\Users\Guest.Serquina\Links\Desktop.lnk -> C:\Users\Marc\Desktop () Shortcut: C:\Users\Guest.Serquina\Links\Downloads.lnk -> C:\Users\Marc\Downloads () Shortcut: C:\Users\Guest.Serquina\Links\RecentPlaces.lnk -> [::{22877A6D-37A1-461A-91B0-DBDA5AAEBC99}] Shortcut: C:\Users\Guest.Serquina\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30 Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation) Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Libraries () Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Help.lnk -> C:\Windows\HelpPane.exe (Microsoft Corporation) Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation) Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Windows.Defender.lnk -> C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation) Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation) Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation) Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation) Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation) Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -> C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Libraries () Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) Shortcut: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) Shortcut: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () Shortcut: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc () Shortcut: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation) Shortcut: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation) Shortcut: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\Links\Desktop.lnk -> C:\Users\Marc\Desktop () Shortcut: C:\Users\Marc\Links\Downloads.lnk -> C:\Users\Marc\Downloads () Shortcut: C:\Users\Marc\Links\Music.lnk -> C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms () Shortcut: C:\Users\Marc\Links\RecentPlaces.lnk -> [::{22877A6D-37A1-461A-91B0-DBDA5AAEBC99}] Shortcut: C:\Users\Marc\Downloads\Download\Tor Browser\Start Tor Browser.lnk -> C:\Users\Marc\Downloads\Download\Tor Browser\Browser\firefox.exe (Mozilla Corporation) Shortcut: C:\Users\Marc\Documents\Trend Micro Titanium Maximum Security Install.lnk -> C:\Program Files\Trend Micro\TM\TMInstall.exe (Sony Corporation) Shortcut: C:\Users\Marc\Desktop\Cisco Packet Tracer.lnk -> C:\Program Files\Cisco Packet Tracer 7.2\bin\PacketTracer7.exe (Cisco Systems, Inc) Shortcut: C:\Users\Marc\Desktop\Multi-Drive.lnk -> C:\Program Files (x86)\Nox\bin\MultiPlayerManager.exe () Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\backup.lnk -> C:\Users\Marc\AppData\Roaming\Notepad++\backup () Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk -> C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe (Malwarebytes) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobile Applications.lnk -> C:\Users\Marc\Music\iTunes\iTunes Media\Mobile Applications () Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Moobee.lnk -> C:\Users\Marc\Downloads\Moobee () Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\mrt.lnk -> C:\Windows\System32\MRT.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Podcasts.lnk -> C:\Users\Marc\Music\iTunes\iTunes Media\Podcasts () Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC media player.lnk -> C:\Program Files (x86)\VideoLAN\VLC\vlc.exe (VideoLAN) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\wnetwatcher.lnk -> C:\Users\Marc\Downloads\Download\exe\wnetwatcher.zip () Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30 Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Libraries () Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Help.lnk -> C:\Windows\HelpPane.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Windows.Defender.lnk -> C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Nox\Nox.lnk -> C:\Program Files (x86)\Nox\bin\Nox.exe (Duodian Technology Co. Ltd.) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Nox\Nox_unload.lnk -> C:\Program Files (x86)\Nox\bin\Nox_unload.exe (Duodian Technology Co. Ltd.) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\AMD Quick Stream.lnk -> C:\Program Files\AMD Quick Stream\AppexAcceleratorUI.exe (AppEx Networks Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\UC Browser.lnk -> C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe (UCWeb Inc.) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Wireshark Legacy.lnk -> C:\Program Files (x86)\Wireshark\Wireshark-gtk.exe (The Wireshark developer community, hxxp://www.wireshark.org/) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Wireshark.lnk -> C:\Program Files (x86)\Wireshark\Wireshark.exe (The Wireshark developer community, hxxp://www.wireshark.org/) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Cisco Packet Tracer (2).lnk -> C:\GAMES\Packet Tracer\Cisco Packet Tracer 7.1\bin\PacketTracer7.exe (Cisco Systems, Inc) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Cisco Packet Tracer.lnk -> C:\Program Files\Cisco Packet Tracer 7.2\bin\PacketTracer7.exe (Cisco Systems, Inc) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\GNS3.lnk -> C:\Program Files\GNS3\gns3.exe () Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mp3tag.lnk -> C:\Program Files (x86)\Mp3tag\Mp3tag.exe (Florian Heidenreich) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Nox.lnk -> C:\Program Files (x86)\Nox\bin\Nox.exe (Duodian Technology Co. Ltd.) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\qbittorrent.lnk -> C:\Program Files\qBittorrent\qbittorrent.exe () Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\SHAREit.lnk -> C:\Program Files (x86)\SHAREit Technologies\SHAREit\SHAREit.exe (SHAREit Technologies Co.Ltd) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Start Tor Browser.lnk -> C:\Users\Marc\Downloads\Download\Tor Browser\Browser\firefox.exe (Mozilla Corporation) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Thor Patcher.lnk -> C:\GAMES\DarksideRO\DarksideRO.exe () Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\UC Browser.lnk -> C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe (UCWeb Inc.) Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\ZetaRO Patcher.lnk -> C:\GAMES\Zeta\ZetaRO Patcher.exe () Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc () Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\WoodenPlankStudios.Kattenkwaad_thmrmrbk7g9bj\App.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\ShazamEntertainmentLtd.Shazam_pqbynwjfrbcg4\App.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\NekkiGmbH.ShadowFight2forWindows_9ea1ktvsjkm1c\App.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.ZuneVideo_8wekyb3d8bbwe\Microsoft.ZuneVideo.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.ZuneMusic_8wekyb3d8bbwe\Microsoft.ZuneMusic.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.XboxLIVEGames_8wekyb3d8bbwe\Microsoft.XboxLIVEGames.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\microsoft.windowsphotos_8wekyb3d8bbwe\Microsoft.WindowsLive.ModernPhotos.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Microsoft.WindowsLive.Calendar.lnk -> [LFY1SPSOYMGm=Microsoft Corporation1SPSMԆi<D*T=Mms-resource:calendarAppTitleQ3]%ModernCalendar\CalendarSmallLogo.pngQ ModernCalendar\CalendarLogo.pngU!ModernCalendar\CalendarBadge.pngY$ModernCalendar\CalendarWideLogo.png1SPSwlE[([8װi1SPS0%G`Mms-resource:calendarAppTitle1SPSU(Ly9K-u2microsoft.windowscommunicationsapps_8wekyb3d8bbweQmicrosoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.CalendarbC:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbweEmicrosoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe] (No File) Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Microsoft.WindowsLive.Chat.lnk -> [LFkY1SPSOYMGm=Microsoft Corporation1SPSU(Ly9K-Emicrosoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbweu2microsoft.windowscommunicationsapps_8wekyb3d8bbweMmicrosoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.ChatbC:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe1SPSwlE[([8װa1SPS0%G`Ems-resource:chatAppTitle1SPSMԆi<D*TEms-resource:chatAppTitleQModernChat\messaging_small.pngEModernChat\messaging.pngQModernChat\messaging_badge.pngMModernChat\messaging_wide.png9] (No File) Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Microsoft.WindowsLive.Mail.lnk -> [LFsY1SPSOYMGm=Microsoft Corporation1SPSU(Ly9K-Emicrosoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbweu2microsoft.windowscommunicationsapps_8wekyb3d8bbweMmicrosoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.MailbC:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe1SPSwlE[([8װa1SPS0%G`Ems-resource:mailAppTitle1SPSMԆi<D*TEms-resource:mailAppTitleU!ModernMail\Res\MailSmallLogo.pngIModernMail\Res\MailLogo.pngMModernMail\Res\MailBadge.pngQ ModernMail\Res\MailWideLogo.png;] (No File) Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Microsoft.WindowsLive.People.lnk -> [LFBY1SPSOYMGm=Microsoft Corporation1SPSMԆi<D*T#]%ms-resource:///strings/peopleAppNameG&MModernPeople\PeopleSmall.pngAModernPeople\People.pngIModernPeople\PeopleWide.png1SPSwlE[([8װy1SPS0%G`]%ms-resource:///strings/peopleAppName1SPSU(Ly9K-u2microsoft.windowscommunicationsapps_8wekyb3d8bbweOmicrosoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.PeoplebC:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbweEmicrosoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe] (No File) Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.ShuffleParty_8wekyb3d8bbwe\App.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.Reader_8wekyb3d8bbwe\Microsoft.Reader.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.MusicDeals_8wekyb3d8bbwe\App.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.MonstersLoveCandy_8wekyb3d8bbwe\App.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.Camera_8wekyb3d8bbwe\Microsoft.Camera.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.BingWeather_8wekyb3d8bbwe\App.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.BingSports_8wekyb3d8bbwe\AppexSports.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.BingNews_8wekyb3d8bbwe\AppexNews.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.BingFinance_8wekyb3d8bbwe\AppexFinance.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\GAMETROOPERS.TinyTroopers_334sksj6ker18\App.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\GAMETROOPERS.Overkill3_334sksj6ker18\App.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\GAMELOFTSA.Six-Guns_0pp20fcewvvtj\App.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\GAMELOFTSA.Asphalt8Airborne_0pp20fcewvvtj\App.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Fingersoft.HillClimbRacing_r6rtpscs7gwyg\App.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\ElectronicArtsMobile.FIFA15_q5ha1ztykcgvj\FIFA.App.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\Disney.51510C9CF2813_6rarf9sa4v8jt\App.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\BigDuckGamesLLC.Flow_1eenntbmr0etw\App.lnk -> Tile and icon assets Shortcut: C:\Users\Marc\AppData\Local\Microsoft\Windows\Application Shortcuts\BD9B8345.VAIOCare_05bme2bjq6sag\App.lnk -> Tile and icon assets Shortcut: C:\Users\Public\Desktop\FileASSASSIN.lnk -> C:\Program Files (x86)\FileASSASSIN\FileASSASSIN.exe (Malwarebytes) Shortcut: C:\Users\Public\Desktop\VLC media player.lnk -> C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN) ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Control Center.lnk -> C:\Program Files (x86)\Sony\VAIO Control Center\VAIO Control Center.exe (Sony Corporation) -> /VCC ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Gesture Control.lnk -> C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\VCGU.exe (Sony Corporation) -> -Setting ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player - reset preferences and cache files.lnk -> C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN) -> --reset-config --reset-plugins-cache vlc://quit ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk -> C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN) -> -Iskins ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UC Browser\Uninstall UC Browser.lnk -> C:\Program Files (x86)\UCBrowser\Application\Uninstall.exe (UCWeb Inc.) -> --uninstall --system-level ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Default Programs.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DefaultPrograms ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /7 ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home\PlayMemories Home Help.lnk -> C:\Program Files (x86)\Sony\PlayMemories Home\PMBBrowser.exe (Sony Corporation) -> /Help ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools\Database Compare.lnk -> C:\Program Files (x86)\Microsoft Office\root\Client\AppVLP.exe (Microsoft Corporation) -> "C:\Program Files (x86)\Microsoft Office\Root\Office16\DCF\DATABASECOMPARE.EXE" ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools\Office Upload Center.lnk -> C:\Program Files (x86)\Microsoft Office\root\Client\AppVLP.exe (Microsoft Corporation) -> "C:\Program Files (x86)\Microsoft Office\Root\Office16\MSOUC.EXE" ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools\Spreadsheet Compare.lnk -> C:\Program Files (x86)\Microsoft Office\root\Client\AppVLP.exe (Microsoft Corporation) -> "C:\Program Files (x86)\Microsoft Office\Root\Office16\DCF\SPREADSHEETCOMPARE.EXE" ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\About Java.lnk -> C:\Program Files\Java\jre1.8.0_181\bin\javacpl.exe (Oracle Corporation) -> -tab about ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Check For Updates.lnk -> C:\Program Files\Java\jre1.8.0_181\bin\javacpl.exe (Oracle Corporation) -> -tab update ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1 ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\06 - System.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.System ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\08 - Power Options.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.PowerOptions ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\10 - Programs and Features.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.ProgramsAndFeatures ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0} ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0} ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> /e,::{20D04FE0-3AEA-1069-A2D8-08002B30309D} ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0 ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257} ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\VAIO Control Center.lnk -> C:\Program Files (x86)\Sony\VAIO Control Center\VAIO Control Center.exe (Sony Corporation) -> /VCC ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\06 - System.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.System ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\08 - Power Options.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.PowerOptions ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group3\10 - Programs and Features.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.ProgramsAndFeatures ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0} ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0} ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> /e,::{20D04FE0-3AEA-1069-A2D8-08002B30309D} ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0 ShortcutWithArgument: C:\Users\Guest.Serquina\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257} ShortcutWithArgument: C:\Users\Marc\Downloads\Download\flush dns.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /k ipconfig /flushdns ShortcutWithArgument: C:\Users\Marc\Downloads\Download\ping 8.8.8.8.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /k ping 8.8.8.8 -t ShortcutWithArgument: C:\Users\Marc\Desktop\clear clipboard.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /c "echo off | clip" ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yahoo! Inc\Yahoo Messenger.lnk -> C:\Users\Marc\AppData\Local\yahoomessenger\Update.exe (GitHub) -> --processStart "Yahoo Messenger.exe" ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc\Discord.lnk -> C:\Users\Marc\AppData\Local\Discord\Update.exe (GitHub) -> --processStart Discord.exe ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Discord.lnk -> C:\Users\Marc\AppData\Local\Discord\Update.exe (GitHub) -> --processStart Discord.exe ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\flush dns.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /k ipconfig /flushdns ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\ping 8.8.8.8.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /k ping 8.8.8.8 -t ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /7 ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1" ShortcutWithArgument: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager ShortcutWithArgument: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\06 - System.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.System ShortcutWithArgument: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\08 - Power Options.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.PowerOptions ShortcutWithArgument: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group3\10 - Programs and Features.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.ProgramsAndFeatures ShortcutWithArgument: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0} ShortcutWithArgument: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0} ShortcutWithArgument: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> /e,::{20D04FE0-3AEA-1069-A2D8-08002B30309D} ShortcutWithArgument: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0 ShortcutWithArgument: C:\Users\Marc\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257} InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap\WinPcap Web Site.url -> URL: hxxp://www.winpcap.org/ InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam Support Center.url -> URL: hxxp://support.steampowered.com/ InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2010 Express\Try Visual Studio 2010 Professional.url -> URL: hxxp://go.microsoft.com/fwlink/?LinkId=166206&clcid=409 InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MCShield\MCShield website.url -> URL: hxxp://www.mcshield.net/ InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Get Help.url -> URL: hxxp://java.com/help InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Visit Java.com.url -> URL: hxxp://java.com/ InternetURL: C:\Users\Default\Favorites\The Berliner Philharmoniker's Digital Concert Hall.url -> URL: hxxp://www.digitalconcerthall.com/?a=sonyvaio&c=true InternetURL: C:\Users\Default\Favorites\Sony\Sony Asia Pacific.url -> URL: hxxp://www.sony-asia.com/ InternetURL: C:\Users\Default\Favorites\Sony\VAIO Online Support.url -> URL: hxxp://www.sony-asia.com/support/vaio InternetURL: C:\Users\Default\Favorites\Sony\VAIO Online.url -> URL: hxxp://vaio-online.sony.com/ InternetURL: C:\Users\Guest.Serquina\Favorites\Bing.url -> URL: hxxp://go.microsoft.com/fwlink/p/?LinkId=255142 InternetURL: C:\Users\Guest.Serquina\Favorites\The Berliner Philharmoniker's Digital Concert Hall.url -> URL: hxxp://www.digitalconcerthall.com/?a=sonyvaio&c=true InternetURL: C:\Users\Guest.Serquina\Favorites\Sony\Sony Asia Pacific.url -> URL: hxxp://www.sony-asia.com/ InternetURL: C:\Users\Guest.Serquina\Favorites\Sony\VAIO Online Support.url -> URL: hxxp://www.sony-asia.com/support/vaio InternetURL: C:\Users\Guest.Serquina\Favorites\Sony\VAIO Online.url -> URL: hxxp://vaio-online.sony.com/ InternetURL: C:\Users\Marc\Music\younha_-_you_who_came_from_the_stars_ost_part.3_[www.k2nblog.com]\Younha - You Who Came From The Stars OST Part.3 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Yoon Mi Rae - The Legend Of The Blue Sea OST Part.2 - Single (iTunes) [www.k2nblog.com]\Yoon Mi Rae - The Legend Of The Blue Sea OST Part.2 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Yoon Gun - Angel Eyes OST Part.3 [www.k2nblog.com]\Yoon Gun - Angel Eyes OST Part.3 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Yook Sung Jae (BTOB) - Scholar Who Walks The Night OST Part.3 [www.k2nblog.com]\Yook Sung Jae (BTOB) - Scholar Who Walks The Night OST Part.3 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\wax_-__i_miss_you_ost_part.1__www.k2nblog.com_\Wax - I Miss You OST Part.1 [www.k2nblog.com]\K2NBLOG.com !!! Download K-Pop, J-Pop, C-Pop & Us-Uk Music.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\TAEYEON - Moon Lovers Scarlet Heart Ryo OST Part.5 [www.k2nblog.com]\TAEYEON - Moon Lovers Scarlet Heart Ryo OST Part.5 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\TaeYang - Ringa Linga - Single (iTunes) [www.k2nblog.com]\TaeYang - Ringa Linga - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Sunhae Im - Moon Lovers Scarlet Heart Ryo OST Part.9 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Sung Si Kyung - The Legend of the Blue Sea OST Part. 5 - Single (iTunes) [www.k2nblog.com]\Sung Si Kyung - The Legend of the Blue Sea OST Part. 5 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Sung Si Kyung - My Love From the Star OST Pt. 7 - Single (iTunes) [www.k2nblog.com]\Sung Si Kyung - My Love From the Star OST Pt. 7 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Soyou - Goblin OST Part 7 - Single (iTunes) [www.k2nblog.com]\Soyou - Goblin OST Part 7 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Sejeong (gugudan) - The Legend Of The Blue Sea OST Part.10 [www.k2nblog.com]\Sejeong (gugudan) - The Legend Of The Blue Sea OST Part.10 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Park Yoon Ha - The Legend of The Blue Sea OST Part. 9 [www.k2nblog.com]\Park Yoon Ha - The Legend of The Blue Sea OST Part. 9 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Min Chae - The Legend Of The Blue Sea OST Part.11 [www.k2nblog.com]\Min Chae - The Legend Of The Blue Sea OST Part.11 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\lyn_-_you_who_came_from_the_stars_ost_part.1_[www.k2nblog.com]\LYn - You Who Came From The Stars OST Part.1 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\LYn - The Legend of the Blue Sea OST Part.1 - Single (iTunes) [www.k2nblog.com]\LYn - The Legend of the Blue Sea OST Part.1 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Loco, Punch - Moon Lovers Scarlet Heart Ryo OST Part.2 [www.k2nblog.com]\Loco, Punch - Moon Lovers Scarlet Heart Ryo OST Part.2 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Lim Do Hyuk - Moon Lovers Scarlet Heart Ryo OST Part.13 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\LEE HI - Moon Lovers Scarlet Heart Ryo OST Part.10 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Lasse Lindh - Goblin OST Part. 3 [www.k2nblog.com]\Lasse Lindh - Goblin OST Part. 3 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Lasse Lindh - Angel Eyes OST Special Track [www.k2nblog.com]\Lasse Lindh - Angel Eyes OST Special Track [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Lasse Lindh - Angel Eyes OST Part.1 [www.k2nblog.com]\Lasse Lindh - Angel Eyes OST Part.1 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Kim Tae Hyun (Dickpunks) - Angel Eyes OST Part.2 [www.k2nblog.com]\Kim Tae Hyun (Dickpunks) - Angel Eyes OST Part.2 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Kim Soo Hyun - You Who Came From The Stars OST Part.8 [www.k2nblog.com]\Kim Soo Hyun - You Who Came From The Stars OST Part.8 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Ken (VIXX) - The Legend of The Blue Sea OST Part.7 [www.k2nblog.com]\Ken (VIXX) - The Legend of The Blue Sea OST Part.7 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Kang Ha Neul - Angel Eyes OST Part.5 [www.k2nblog.com]\Kang Ha Neul - Angel Eyes OST Part.5 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\k.will_-_you_who_came_from_the_stars_ost_part.2_[www.k2nblog.com]\K.Will - You Who Came From The Stars OST Part.2 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\JUST - You Who Came From The Stars OST Part.5 [www.k2nblog.com]\JUST - You Who Came From The Stars OST Part.5 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Jung Yup - The Legend Of The Blue Sea OST Part.3 - Single (iTunes) [www.k2nblog.com]\Jung Yup - The Legend Of The Blue Sea OST Part.3 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Jung Joonil - Goblin OST Part. 8 [www.k2nblog.com]\Jung Joonil - Goblin OST Part. 8 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Jo Jung Hee - Angel Eyes OST Part.7 [www.k2nblog.com]\Jo Jung Hee - Angel Eyes OST Part.7 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\jessica__krystal__j-min_-_to_the_beautiful_you_ost_part.1__www.k2nblog.com_\Jessica, Krystal, J-Min - To The Beautiful You OST Part.1 [www.k2nblog.com]\K2NBLOG.com !!! Download K-Pop, J-Pop, C-Pop & Us-Uk Music.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Jang Jane - Scholar Who Walks the Night OST Part.1 [www.k2nblog.com]\Jang Jane - Scholar Who Walks the Night OST Part.1 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\I.O.I - Moonlovers Scarlet Heart Ryeo (Original Television Soundtrack), Pt. 3 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\hyolyn_-__my_love_from_the_star_pt._4_-_single_(itunes)_[www.k2nblog.com]\Hyolyn - My Love From The Star Pt. 4 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Huh Gak - You Who Came From The Stars OST Part.6 [k2nblog.com]\Huh Gak - You Who Came From The Stars OST Part.6 [k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\hellovenus_-_wiggle_wiggle_(itunes)_[www.k2nblog.com]\HELLOVENUS - Wiggle Wiggle (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Han Soo Ji - Angel Eyes OST Part.6 [www.k2nblog.com]\Han Soo Ji - Angel Eyes OST Part.6 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Ha Hyun Woo (Guckkasten) - Legend Of The Blue Sea OST Part. 4 [www.k2nblog.com]\Ha Hyun Woo (Guckkasten) - Legend Of The Blue Sea OST Part. 4 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Eun Gaeun - Scholar Who Walks the Night OST Part.2 [www.k2nblog.com]\Eun Gaeun - Scholar Who Walks the Night OST Part.2 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Epik High - Moon Lovers Scarlet Heart Ryeo OST Part 6 [iTunes]\Epik High - Moon Lovers Scarlet Heart Ryeo OST Part 6 [iTunes]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Davichi - Moon Lovers Scarlet Heart Ryo OST Part.4 [www.k2nblog.com]\Davichi - Moon Lovers Scarlet Heart Ryo OST Part.4 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Crush - Goblin OST Part. 4 - Single (iTunes) [www.k2nblog.com]\Crush - Goblin OST Part. 4 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Chanyeol, Punch - Goblin (Original Television Soundtrack) Pt. 1 - Single (iTunes) [www.k2nblog.com]\Chanyeol & Punch - Goblin (Original Television Soundtrack) Pt. 1 - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> InternetURL: C:\Users\Marc\Music\BEAST - Scholar Who Walks The Night OST Part.5 [www.k2nblog.com]\BEAST - Scholar Who Walks The Night OST Part.5 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Baek Ah Yeon - Angel Eyes OST Part.4 [www.k2nblog.com]\Baek Ah Yeon - Angel Eyes OST Part.4 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Baek A Yeon - Moon Lovers Scarlet Heart Ryo OST Part.7 [www.k2nblog.com]\Baek A Yeon - Moon Lovers Scarlet Heart Ryo OST Part.7 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\apink_-__secret_garden_[www.k2nblog.com]\APINK - Secret Garden [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\AKMU - Moon Lovers Scarlet Heart Ryo OST Part.12 [www.k2nblog.com]\AKMU - Moon Lovers Scarlet Heart Ryo OST Part.12 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\AKMU - Moon Lovers Scarlet Heart Ryo OST Part.12 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Music\Ailee - Goblin OST Part. 9 [www.k2nblog.com]\Ailee - Goblin OST Part. 9 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Favorites\Bing.url -> URL: hxxp://go.microsoft.com/fwlink/p/?LinkId=255142 InternetURL: C:\Users\Marc\Favorites\The Berliner Philharmoniker's Digital Concert Hall.url -> URL: hxxp://www.digitalconcerthall.com/?a=sonyvaio&c=true InternetURL: C:\Users\Marc\Favorites\YouTube.url -> URL: hxxp://www.youtube.com/?gl=US InternetURL: C:\Users\Marc\Favorites\Sony\Sony Asia Pacific.url -> URL: hxxp://www.sony-asia.com/ InternetURL: C:\Users\Marc\Favorites\Sony\VAIO Online Support.url -> URL: hxxp://www.sony-asia.com/support/vaio InternetURL: C:\Users\Marc\Favorites\Sony\VAIO Online.url -> URL: hxxp://vaio-online.sony.com/ InternetURL: C:\Users\Marc\Downloads\OST\You're Beautiful\[HULKPOP.COM][Album] Various Artists - You're Beautiful OST Part 2\[HULKPOP.COM][Album] Various Artists - You're Beautiful OST Part 2\Visit Hul Kpop.url -> URL: hxxp://www.hulkpop.com/ InternetURL: C:\Users\Marc\Downloads\OST\you who came from the stars\Various Artists - My Love From the Star (Original Television Soundtrack) (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\you who came from the stars\Kim Soo Hyun - You Who Came From The Stars OST Special [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Suzy - While You Were Sleeping OST Part.4 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Suzy - While You Were Sleeping OST Part 13 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Roy Kim - While You Were Sleeping OST Part.3 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Monogram - While You Were Sleeping OST Part.6 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Lee Jong Suk – While You Were Sleeping OST Part.12 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Lee Jong Suk - While You Were Sleeping OST Part.9 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Kim Na Young - While You Were Sleeping OST Part.8 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Jung Joon Il - While You Were Sleeping OST Part.10 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Jang Da Bin - While You Were Sleeping OST Part.11 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\HENRY - While You Were Sleeping OST Part.2 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\Eddy Kim - While You Were Sleeping OST Part.1 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\DAVICHI - While You Were Sleeping OST Part.7 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\While You Were Sleeping\BrotherSu, SE O - While You Were Sleeping OST Part.5 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\when a man loves\[kpop-download-free.blogspot.com][Album] Various Artists - When A Man's In Love OST\[kpop-download-free.blogspot.com][Album] Various Artists - When A Man's In Love OST\Visit Kpop Download Free.url -> URL: hxxp://kpop-download-free.blogspot.com/ InternetURL: C:\Users\Marc\Downloads\OST\to the beautiful you\To The Beautiful You OST [www.k2nblog.com]\K2NBLOG.com !!! Download K-Pop, J-Pop, C-Pop & Us-Uk Music.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\to the beautiful you\Tae Yeon, Dana - To The Beautiful You OST Part. 4 - Closer\KpopExplorer.net - Download All Genre of Kpop For Free.url -> URL: hxxp://kpopexplorer.net/ InternetURL: C:\Users\Marc\Downloads\OST\to the beautiful you\Super Junior K.R.Y & Kyu Hyun & Tiffany - To The Beautiful You OST Part3 [kpopexplorer.net]\KpopExplorer.net - Download All Genre of Kpop For Free.url -> URL: hxxp://kpopexplorer.net/ InternetURL: C:\Users\Marc\Downloads\OST\to the beautiful you\Sunny, Luna, Onew - To the Beautiful You OST It s Me [www.k2nblog.com]\K2NBLOG.com !!! Download K-Pop, J-Pop, C-Pop & Us-Uk Music.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\to the beautiful you\Kyu Hyun, Tiffany, Super Junior K.R.Y - To The Beautiful You OST Part. 3 [www.k2nblog.com]\K2NBLOG.com !!! Download K-Pop, J-Pop, C-Pop & Us-Uk Music.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\The Bride of the Habaek\Yang Da Il - The Bride of Habaek 2017 OST Part.1 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\The Bride of the Habaek\Savina _ Drones - The Bride of Habaek 2017 OST Part.2 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\The Bride of the Habaek\Lucia - The Bride of Habaek 2017 OST Part.6 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\The Bride of the Habaek\Kim E-Z (Ggotjam Project) - The Bride of Habaek 2017 OST Part.4 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\The Bride of the Habaek\Kassy - The Bride of Habaek 2017 OST Part.3 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\The Bride of the Habaek\Junggigo - The Bride Of Habaek 2017 OST Part.5 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Sistar\[HULKPOP.COM][Single] SISTAR19 - Ma Boy\Visit Hul Kpop.url -> URL: hxxp://www.hulkpop.com/ InternetURL: C:\Users\Marc\Downloads\OST\Sistar\sistar19_-_gone_not_around_any_longer_[www.k2nblog.com]\SISTAR19 - Gone Not Around Any Longer [www.k2nblog.com]\K2NBLOG.com !!! Download K-Pop, J-Pop, C-Pop & Us-Uk Music.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Scholar who walks the night\Various Artists - Scholar Who Walks The Night OST [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Scarlet Heart\V.A - Moonlovers Scarlet Heart Ryeo (Original Television Soundtrack) (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\PSY\00 WWW.HULUSUK.COM.url -> URL: hxxp://hulusuk.com/ InternetURL: C:\Users\Marc\Downloads\OST\PSY\[HULKPOP.COM][Mini Album] PSY - Gangnam Style (강남스타일) [Remix Style] [iTunes]\00 WWW.HULUSUK.COM.url -> URL: hxxp://hulusuk.com/ InternetURL: C:\Users\Marc\Downloads\OST\PSY\PSY 8th 4X2=8 (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\PSY\PSY - Psy 7th Album (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Pinocchio\Zion.T - Pinocchio OST Part.6 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Pinocchio\Younha - Pinocchio OST Part.7 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Pinocchio\Various Artists - Pinocchio OST (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Pinocchio\Tiger J.K - Pinocchio OST Part.1 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Pinocchio\Roy Kim - Pinocchio OST Part.2 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Pinocchio\Park Shin Hye - Pinocchio OST Part.4 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Pinocchio\Kim Bo Kyung - Pinocchio OST Part.8 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Pinocchio\K.Will - Pinocchio OST Part.5 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Pinocchio\Every Single Day - Pinocchio OST Part.3 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\My Lovely Girl\krystal_[f(x)]_-_my_lovely_girl_ost_part.2_[www.k2nblog.com]\Krystal [f(x)] - My Lovely Girl OST Part.2 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\My Girlfriend is a Nine Tailed Fox\[hulkpop.com][Album] Various Artists - My Girlfriend is a Gumiho OST\Visit Kpop Download Free.url -> URL: hxxp://kpop-download-free.blogspot.com/ InternetURL: C:\Users\Marc\Downloads\OST\MOMOLAND\MOMOLAND - Great! - EP (iTunes Plus) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\MOMOLAND\MOMOLAND - Fun to the World - EP (iTunes Plus) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Missing you\Various Artists - Missing You OST [www.k2nblog.com]\K2NBLOG.com !!! Download K-Pop, J-Pop, C-Pop & Us-Uk Music.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Let's Fight Ghost\Various Artists - Lets Fight Ghost OST [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Let's Fight Ghost\SUMIN - Lets Fight Ghost OST Part.6 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Let's Fight Ghost\Rocoberry - Lest Fight Ghost OST Part.4 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Let's Fight Ghost\PIA - Lets Fight Ghost OST Part.2 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Let's Fight Ghost\Kim So Hyun - Let s Fight Ghost OST Part.5 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Let's Fight Ghost\Kim So Hee, Song Yu Vin - Lets Fight Ghost OST Part.3 [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Legend of the blue sea\Various Artists - The Legend of the Blue Sea OST (CD 2) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\kpopexplorer.net\City Hunter\Yim Jae Bum - City Hunter OST Part.1 [kpopexplorr.net]\KpopExplorer.net - Download All Genre of Kpop For Free.url -> URL: hxxp://kpopexplorer.net/ InternetURL: C:\Users\Marc\Downloads\OST\kpopexplorer.net\City Hunter\Rainbow - City Hunter OST Part.6 [kpopexplorer.net]\KpopExplorer.net - Download All Genre of Kpop For Free.url -> URL: hxxp://kpopexplorer.net/ InternetURL: C:\Users\Marc\Downloads\OST\kpopexplorer.net\City Hunter\Park Gyu Ri (Kara) - City Hunter OST Part.5 [kpopexplorer.net]\KpopExplorer.net - Download All Genre of Kpop For Free.url -> URL: hxxp://kpopexplorer.net/ InternetURL: C:\Users\Marc\Downloads\OST\kpopexplorer.net\City Hunter\Kim Bo Kyung - City Hunter OST Part 4 [kpopexplorer.net]\KpopExplorer.net - Download All Genre of Kpop For Free.url -> URL: hxxp://kpopexplorer.net/ InternetURL: C:\Users\Marc\Downloads\OST\kpopexplorer.net\City Hunter\Jonghyun (SHINee) & Yanghwajin - City Hunter OST Part.2 [kpopexplorer.net]\KpopExplorer.net - Download All Genre of Kpop For Free.url -> URL: hxxp://kpopexplorer.net/ InternetURL: C:\Users\Marc\Downloads\OST\IU\IU - Chat-Shire (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\IU\HIGH4 & IU - Not Spring, Love, or Cherry Blossoms [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Goblin\Various Artists - Goblin The Lonely and Great God (CD 1) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Girl who see smells\V.A - Girl Who Sees Smell OST (CD 2) (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Girl who see smells\V.A - Girl Who Sees Smell OST (CD 1) (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Exo\EXO - XOXO (Kiss & Hug) [Repackage] (CD 1 iTunes) [k2nblog.com] edited\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Exo\EXO - THE WAR - The 4th Album (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Boys Over Flowers\[Album] Various Artists - Boys Over Flowers OST\Visit Kpop Download Free.url -> URL: hxxp://kpop-download-free.blogspot.com/ InternetURL: C:\Users\Marc\Downloads\OST\BLANKPINK\BLACKPINK - SQUARE UP - EP (iTunes Plus) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\BLANKPINK\BLACKPINK - Square Two - EP (iTunes) [www.k2nblog.com]\BLACKPINK - Square Two - EP (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\BLANKPINK\BLACKPINK - Square One - Single (iTunes) [www.k2nblog.com]\BLACKPINK - Square One - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\BLANKPINK\BLACKPINK - As If It's Your Last - Single (iTunes) [www.k2nblog.com]\BLACKPINK - As If It's Your Last - Single (iTunes) [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Blademan\Various Artists - Iron Man OST [www.k2nblog.com]\K2NBLOG.com - visit for more albums, singles, MVs.url -> URL: hxxp://k2nblog.com/ InternetURL: C:\Users\Marc\Downloads\OST\Bigbang\BIG BANG - 4th Mini Album (Special Edition)\KpopExplorer.net - Download All Genre of Kpop For Free.url -> URL: hxxp://kpopexplorer.net/ InternetURL: C:\Users\Marc\Downloads\OST\2NE1\BigBang, 2NE1 - Lollipop [kpopexplorer.net]\KPOP Explorer • Download Kpop Albums, Singles, OSTs.url -> URL: hxxp://kpopexplorer.net/ InternetURL: C:\Users\Marc\Downloads\OST\2NE1\2NE1 - I Love You [05.07.2012]\KPOP Explorer • Download Kpop Albums, Singles, OSTs.url -> URL: hxxp://kpopexplorer.net/ InternetURL: C:\Users\Marc\Downloads\OST\2NE1\2NE1 - I Don't Care (Reggae Remix) [03.09.2009]\KPOP Explorer • Download Kpop Albums, Singles, OSTs.url -> URL: hxxp://kpopexplorer.net/ InternetURL: C:\Users\Marc\Downloads\OST\2NE1\2NE1 - Follow Me [09.02.2010]\KPOP Explorer • Download Kpop Albums, Singles, OSTs.url -> URL: hxxp://kpopexplorer.net/ InternetURL: C:\Users\Marc\Downloads\OST\2NE1\2NE1 - Fire [kpopexplorer.net]\KPOP Explorer • Download Kpop Albums, Singles, OSTs.url -> URL: hxxp://kpopexplorer.net/ ==================== End of Shortcut.txt =============================

Yes sir

Addition.txt

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06.10.2018 Ran by Marc (administrator) on SERQUINA (09-10-2018 22:29:46) Running from C:\Users\Marc\Desktop Loaded Profiles: Marc (Available Profiles: Marc & Guest) Platform: Windows 8 Single Language (X64) Language: English (United States) Internet Explorer Version 10 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) Failed to access process -> csrss.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe () C:\Program Files (x86)\UCBrowser\Application\UCService.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe Failed to access process -> dllhost.exe (Reason Software Company Inc.) C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe Failed to access process -> csrss.exe Failed to access process -> dwm.exe (Microsoft Corporation) C:\Windows\System32\Taskmgr.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe Failed to access process -> WmiPrvSE.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe () C:\Program Files (x86)\UCBrowser\Application\7.0.185.1002\UCAgent.exe (AxCrypt AB) C:\Program Files\AxCrypt\AxCrypt\AxCrypt.exe (ALCPU) C:\Users\Marc\AppData\Local\Temp\Temp2_CoreTemp64.zip\Core Temp.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Failed to access process -> WmiPrvSE.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Farbar) C:\Users\Marc\Desktop\FRST64(2).exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-08-03] (Realtek Semiconductor) HKLM\...\Run: [BtPreLoad] => C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-12-29] () HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-17] (Adobe Systems Incorporated) HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2013-04-10] (Pixart Imaging Inc) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242392 2018-08-27] (AVAST Software) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [303928 2017-07-14] (Apple Inc.) HKLM\...\Run: [Everything] => C:\Users\Marc\AppData\Local\Temp\Temp1_Everything-1.4.1.877.x64.zip\Everything.exe [2197608 2018-05-22] () <==== ATTENTION HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [68776 2012-08-18] (Sony Corporation) HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-28] (Sony Corporation) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-10-11] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-07-07] (Oracle Corporation) HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [129664 2012-12-29] (Qualcomm Atheros Commnucations) HKU\S-1-5-21-3892480582-283260505-3703768022-1002\...\Run: [MCShield Monitor] => C:\Program Files (x86)\MCShield\mcshieldrtm.exe [650816 2014-04-12] (MyCity) HKU\S-1-5-21-3892480582-283260505-3703768022-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3199776 2018-04-03] (Valve Corporation) HKU\S-1-5-21-3892480582-283260505-3703768022-1002\...\Run: [Yahoo Messenger Updater] => C:\Users\Marc\AppData\Roaming\Yahoo Messenger\YMUpdater\YMUpdater.exe [115656 2018-06-13] (Yahoo!, Inc.) HKU\S-1-5-21-3892480582-283260505-3703768022-1002\...\MountPoints2: {a602ff5a-c3ae-11e7-8139-5453edb958c3} - "D:\AutoRun.exe" HKU\S-1-5-21-3892480582-283260505-3703768022-1002\...\MountPoints2: {a602ff94-c3ae-11e7-8139-5453edb958c3} - "D:\AutoRun.exe" Startup: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Document.rtf [2018-06-25] () GroupPolicy: Restriction ? <==== ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{04019896-BCE5-4426-BB38-190918CF5A01}: [NameServer] 1.1.1.1,1.0.0.1 Tcpip\..\Interfaces\{04019896-BCE5-4426-BB38-190918CF5A01}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{72EB4B26-9A7B-4DC8-991D-78DAA8365216}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKU\S-1-5-21-3892480582-283260505-3703768022-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://sony13.msn.com/ HKU\S-1-5-21-3892480582-283260505-3703768022-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://sony13.msn.com HKU\S-1-5-21-3892480582-283260505-3703768022-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://vaio-online.sony.com/ SearchScopes: HKLM -> DefaultScope value is missing SearchScopes: HKLM-x32 -> DefaultScope value is missing BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-09-23] (Microsoft Corporation) BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-12-29] (Qualcomm Atheros Commnucations) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2018-09-23] (Microsoft Corporation) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2018-07-23] (Microsoft Corporation) BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2018-09-23] (Microsoft Corporation) Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-07-23] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-07-23] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-07-23] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-07-23] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\z9vwbn5j.default-1456659576382 [2018-10-08] FF Homepage: Mozilla\Firefox\Profiles\z9vwbn5j.default-1456659576382 -> about:home FF Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\z9vwbn5j.default-1456659576382\Extensions\firefox@ghostery.com.xpi [2018-10-08] FF Extension: (Adblock Plus) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\z9vwbn5j.default-1456659576382\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-10-08] FF Extension: (Telemetry coverage) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\z9vwbn5j.default-1456659576382\features\{075f4929-84a1-4be7-b9cd-0942856b7268}\telemetry-coverage-bug1487578@mozilla.org.xpi [2018-10-08] [Legacy] FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-08-10] (VideoLAN) FF Plugin-x32: @java.com/DTPlugin,version=10.5.0 -> C:\Windows\SysWOW64\npDeployJava1.dll [2012-12-12] (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-07-23] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-07-23] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-03] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-03] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-30] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.5.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-30] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-09-20] (Adobe Systems Inc.) FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\itms.js [2017-07-05] Chrome: ======= CHR DefaultProfile: Profile 1 CHR HomePage: Profile 1 -> hxxps://learningnetwork.cisco.com/thread/16414 CHR Profile: C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Guest Profile [2018-10-04] CHR Profile: C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1 [2018-10-09] CHR Extension: (Pop up blocker for Chrome™ - Poper Blocker) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bkkbcggnhapdmkeljlodobbkopceiche [2018-05-15] CHR Extension: (Adblock Plus) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2018-09-19] CHR Extension: (Google Search) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-06] CHR Extension: (No Coin - Block miners on the web!) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gojamcfopckidlocpkbelmpjcgmbgjcl [2018-04-27] CHR Extension: (Disconnect) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jeoacafpbcihiomhlakheieifhpjdfeo [2018-03-04] CHR Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2018-08-23] CHR Extension: (Save to Pocket) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2018-07-03] CHR Extension: (Chrome Web Store Payments) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-05] CHR Extension: (Data Saver) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pfmgfdlgomnbgkofeojodiodmgpgmkac [2018-08-27] CHR Extension: (Chrome Media Router) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-09-23] CHR Profile: C:\Users\Marc\AppData\Local\Google\Chrome\User Data\System Profile [2018-10-04] CHR HKLM\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - <no Path/update_url> CHR HKLM-x32\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - <no Path/update_url> ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S4 AdobeActiveFileMonitor10.0; c:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [169624 2011-09-01] (Adobe Systems Incorporated) S4 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-10-11] (Advanced Micro Devices, Inc.) [File not signed] S3 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-04-03] (Apple Inc.) S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7994520 2018-08-27] (AVAST Software) S3 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [226944 2012-12-29] (Qualcomm Atheros Commnucations) [File not signed] R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [322464 2018-08-27] (AVAST Software) S2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8522832 2018-09-06] (Microsoft Corporation) S3 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [413336 2015-08-27] () R3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes) S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [625240 2013-09-28] (Sony Corporation) S4 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-28] (Sony Corporation) S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.) R2 UCBrowserSvc; C:\Program Files (x86)\UCBrowser\Application\UCService.exe [656784 2018-01-02] () <==== ATTENTION R2 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [297240 2018-04-14] (Reason Software Company Inc.) S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [413336 2015-08-27] () S3 uSHAREitSvc; C:\Program Files (x86)\SHAREit Technologies\SHAREit\SHAREit.Service.exe [33224 2017-09-11] (SHAREit Technologies Co.Ltd) S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2012-11-08] (Sony Corporation) S4 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1653272 2015-08-01] (Sony Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2015-07-07] (Microsoft Corporation) S3 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-12-29] (Atheros) [File not signed] S4 NOBU; "C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE [X] ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [199008 2012-06-23] (AppEx Networks Corporation) R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [199712 2018-08-27] (AVAST Software) R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [229384 2018-08-27] (AVAST Software) R0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [201320 2018-08-27] (AVAST Software) R0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [346664 2018-08-27] (AVAST Software) R0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [59568 2018-08-27] (AVAST Software) R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [249016 2018-08-27] (AVAST Software) S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [46968 2018-08-27] (AVAST Software) R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [163392 2018-09-19] (AVAST Software) R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [111864 2018-08-27] (AVAST Software) R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [87904 2018-08-30] (AVAST Software) R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1027720 2018-08-27] (AVAST Software) R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [467320 2018-09-19] (AVAST Software) R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [215920 2018-09-19] (AVAST Software) S3 aswTap; C:\Windows\system32\DRIVERS\aswTap.sys [44640 2014-03-10] (The OpenVPN Project) R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [381560 2018-08-27] (AVAST Software) R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [91648 2012-08-21] (Advanced Micro Devices) S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2012-12-29] (Qualcomm Atheros) R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00D\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation) R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253664 2018-10-09] (Malwarebytes) R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.) R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-16] (Corel Corporation) R3 SmbDrv; C:\Windows\system32\DRIVERS\Smb_driver_AMDASF.sys [28400 2013-01-30] (Synaptics Incorporated) R3 SOWS; C:\Windows\System32\drivers\sows.sys [24280 2012-06-11] (Sony Corporation) R3 t_mouse.sys; C:\Windows\system32\DRIVERS\t_mouse.sys [6144 2013-04-10] () S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [281944 2015-07-06] (Microsoft Corporation) R1 YSDrv; C:\Program Files (x86)\Bignox\BigNoxVM\RT\YSDrv.sys [310536 2018-07-06] (BigNox Corporation) R3 ALSysIO; \??\C:\Users\Marc\AppData\Local\Temp\ALSysIO64.sys [X] <==== ATTENTION S3 atillk64; \??\C:\Program Files (x86)\AMD\System Monitor\atillk64.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2018-10-09 22:29 - 2018-10-09 22:31 - 000019250 _____ C:\Users\Marc\Desktop\FRST.txt 2018-10-09 22:29 - 2018-10-09 22:29 - 000000000 ____D C:\FRST 2018-10-09 22:28 - 2018-10-09 22:28 - 002414592 _____ (Farbar) C:\Users\Marc\Desktop\FRST64(2).exe 2018-10-09 22:27 - 2018-10-09 22:27 - 000004807 _____ C:\Users\Marc\Desktop\AdwCleaner[S09].txt 2018-10-09 22:16 - 2018-10-09 22:16 - 000001285 _____ C:\Users\Marc\Desktop\malwarebyteslog.txt 2018-10-09 21:15 - 2018-10-09 21:15 - 000253664 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys 2018-10-08 12:57 - 2018-10-09 21:47 - 000000000 ____D C:\Users\Marc\Downloads\Ant-Man And The Wasp (2018) [WEBRip] [720p] [YTS.AM] 2018-10-07 21:52 - 2018-10-07 22:12 - 000004935 _____ C:\Users\Marc\Desktop\test E.7z 2018-10-07 21:48 - 2018-10-07 21:50 - 000000000 ____D C:\Users\Marc\Desktop\test E 2018-10-07 19:02 - 2018-10-07 19:02 - 000000000 ____D C:\Users\Marc\Downloads\The.Commuter.2018.BRRip.XViD-ETRG 2018-10-05 20:58 - 2018-10-05 20:58 - 000005353 _____ C:\Users\Marc\Desktop\zeta quest-txt.axx 2018-10-05 20:50 - 2018-10-05 20:50 - 007280637 _____ C:\Users\Marc\Documents\M7309v2.0-zip.axx 2018-10-05 20:44 - 2018-10-05 20:44 - 020650805 _____ C:\Users\Marc\Documents\09_thehackernews_w_wile257_NaDnG35wI_JUYRocFxhEFA-pdf.axx 2018-10-05 20:44 - 2018-10-05 20:44 - 015749823 _____ C:\Users\Marc\Documents\46-thehackernews-w_pacb46-E8SF4NxGrhr5PR_eBwN2Gg-pdf.axx 2018-10-05 20:43 - 2018-10-05 20:43 - 023830453 _____ C:\Users\Marc\Documents\72-thehackernews-w_wile234-6wZ5Ka9H7F0fKMsAyjNKNw-pdf.axx 2018-10-05 20:43 - 2018-10-05 20:43 - 000009715 _____ C:\Users\Marc\Documents\Emblem-7z.axx 2018-10-05 20:42 - 2018-10-05 20:42 - 010929886 _____ C:\Users\Marc\Documents\Humbug-mp3.axx 2018-10-05 20:42 - 2018-10-05 20:42 - 000063413 _____ C:\Users\Marc\Documents\None (20130219 160244)-m4a.axx 2018-10-05 20:16 - 2018-10-05 20:17 - 000001247 _____ C:\Users\Marc\Desktop\clear clipboard.lnk 2018-10-03 16:49 - 2018-10-07 21:52 - 000000000 ____D C:\Users\Marc\AppData\Local\AxCrypt 2018-10-03 16:48 - 2018-10-03 16:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AxCrypt 2018-10-03 16:48 - 2018-10-03 16:48 - 000000000 ____D C:\Program Files\AxCrypt 2018-10-01 21:14 - 2018-10-01 21:14 - 000000000 ____D C:\Users\Marc\Downloads\VA - Now That's What I Call Merry Christmas (2017) Mp3 (320kbps) [Hunter] 2018-09-30 12:57 - 2018-09-30 12:57 - 000000831 _____ C:\Users\Public\Desktop\VLC media player.lnk 2018-09-30 12:57 - 2018-09-30 12:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2018-09-24 11:22 - 2018-09-27 20:40 - 000000516 _____ C:\Windows\system32\Drivers\etc\hosts.ics 2018-09-19 13:21 - 2018-09-19 13:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2018-10-09 21:49 - 2018-06-10 17:45 - 000000000 ____D C:\Users\Marc\AppData\Roaming\vlc 2018-10-09 21:47 - 2018-05-23 20:56 - 000000000 ____D C:\Users\Marc\AppData\Roaming\qBittorrent 2018-10-09 21:08 - 2014-11-30 20:56 - 000002784 _____ C:\Windows\System32\Tasks\Core Temp Autostart Marc 2018-10-09 18:04 - 2018-09-02 18:26 - 000000000 ____D C:\Users\Marc\Documents\ROM 2018-10-09 17:25 - 2016-02-16 10:15 - 000000988 _____ C:\Users\Marc\.packettracer 2018-10-09 17:18 - 2018-08-18 21:37 - 000000308 _____ C:\Windows\Tasks\UCBrowserUpdaterCore.job 2018-10-08 13:47 - 2016-12-01 19:10 - 000000000 ____D C:\Users\Marc\AppData\LocalLow\Mozilla 2018-10-07 23:06 - 2018-07-06 15:48 - 000000000 ____D C:\Users\Marc\.BigNox 2018-10-07 23:06 - 2018-07-06 15:46 - 000000000 ____D C:\Users\Marc\AppData\Local\Nox 2018-10-07 22:33 - 2015-06-25 16:54 - 000000000 ____D C:\Users\Marc\.android 2018-10-07 22:32 - 2018-07-06 15:49 - 000000000 ____D C:\Users\Marc\vmlogs 2018-10-07 20:29 - 2017-09-15 17:12 - 000000000 ____D C:\Users\Marc\Cisco Packet Tracer 7.1 2018-10-07 20:24 - 2017-09-15 17:12 - 000000000 ____D C:\Users\Marc\AppData\Local\PacketTracer7 2018-10-05 22:51 - 2014-09-20 15:50 - 000000000 ____D C:\Users\Marc\Documents\ios 4.2.1 shsh blobs 2018-10-05 22:25 - 2015-06-11 12:38 - 000000000 ____D C:\Users\Marc\Documents\wpgames 2018-10-05 21:12 - 2013-03-11 13:01 - 000000000 ____D C:\Users\Marc\AppData\Local\CrashDumps 2018-10-05 21:03 - 2018-03-04 14:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo 2018-10-05 21:03 - 2018-03-04 14:38 - 000000000 ____D C:\Program Files (x86)\CrystalDiskInfo 2018-10-05 20:49 - 2017-01-14 19:36 - 000000000 ____D C:\Users\Marc\Documents\IT316 2018-10-05 20:41 - 2015-05-07 17:29 - 000000000 ___RD C:\Users\Marc\Downloads\Download 2018-10-05 19:47 - 2018-05-13 14:46 - 000000000 ____D C:\Users\Marc\Downloads\Moobee 2018-10-05 18:24 - 2017-11-12 15:40 - 000004168 _____ C:\Windows\System32\Tasks\Avast Emergency Update 2018-10-04 20:29 - 2013-02-06 22:13 - 000003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3892480582-283260505-3703768022-1002 2018-10-04 19:58 - 2018-08-18 21:37 - 000000472 _____ C:\Windows\Tasks\UCBrowserUpdater.job 2018-10-04 19:58 - 2012-07-26 15:22 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2018-10-04 19:57 - 2012-07-26 13:26 - 001310720 ___SH C:\Windows\system32\config\BBI 2018-10-04 19:55 - 2018-08-18 21:37 - 000003446 _____ C:\Windows\System32\Tasks\UCBrowserUpdater 2018-10-04 19:54 - 2017-12-18 18:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BDAntiRansomware 2018-10-04 14:11 - 2018-04-07 23:06 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2018-10-04 14:08 - 2018-04-07 23:07 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2018-10-04 13:53 - 2012-07-26 15:28 - 000848230 _____ C:\Windows\system32\PerfStringBackup.INI 2018-10-04 13:53 - 2012-07-26 13:37 - 000000000 ____D C:\Windows\Inf 2018-10-03 22:26 - 2012-07-26 16:12 - 000000000 ____D C:\Windows\system32\NDF 2018-10-03 16:48 - 2017-05-29 19:27 - 000000000 ____D C:\ProgramData\Package Cache 2018-10-01 18:05 - 2018-06-26 18:23 - 000000000 ____D C:\Users\Marc\Downloads\Dragon Ball Super - Season 4 2018-09-30 12:56 - 2017-05-24 19:55 - 000000000 ____D C:\Program Files\VideoLAN 2018-09-30 12:32 - 2018-07-31 12:22 - 1125738042 _____ C:\Users\Marc\Downloads\Railroad.Tigers.2016.720p.BRRip.1GB.MkvCage.mkv 2018-09-28 20:27 - 2018-08-31 22:26 - 000000804 _____ C:\Users\Marc\Desktop\unsaved.txt 2018-09-28 14:42 - 2018-04-27 14:54 - 000241882 ____N C:\Windows\Minidump\092818-153520-01.dmp 2018-09-28 14:42 - 2013-04-25 10:57 - 000000000 ____D C:\Windows\Minidump 2018-09-23 19:00 - 2012-07-26 16:12 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2018-09-23 18:56 - 2012-12-12 12:35 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2018-09-19 13:38 - 2014-03-10 05:54 - 000215920 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2018-09-19 13:37 - 2013-05-26 07:31 - 000163392 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2018-09-19 13:26 - 2015-04-11 10:22 - 000002224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2018-09-19 13:21 - 2018-05-28 07:49 - 000000000 ____D C:\Program Files\qBittorrent 2018-09-19 13:06 - 2013-05-26 07:32 - 000467320 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys ==================== Files in the root of some directories ======= 2013-02-13 10:20 - 2013-02-13 10:20 - 000000036 _____ () C:\Users\Marc\AppData\Local\housecall.guid.cache 2013-02-17 10:45 - 2015-02-04 19:26 - 000007632 _____ () C:\Users\Marc\AppData\Local\resmon.resmoncfg 2016-07-29 01:23 - 2017-01-17 12:01 - 000019456 _____ () C:\Users\Marc\AppData\Local\WebpageIcons.db Files to move or delete: ==================== C:\Users\Marc\AppData\Local\Temp\Temp1_Everything-1.4.1.877.x64.zip\Everything.exe Some files in TEMP: ==================== 2018-09-19 13:06 - 2018-09-19 13:06 - 000006656 _____ () C:\Users\Marc\AppData\Local\Temp\1xknwnhb.dll 2018-08-18 22:18 - 2018-08-18 22:18 - 001906040 _____ (Oracle Corporation) C:\Users\Marc\AppData\Local\Temp\jre-8u181-windows-au.exe 2018-08-04 13:32 - 2018-08-04 13:41 - 004264384 _____ (Don HO don.h@free.fr) C:\Users\Marc\AppData\Local\Temp\npp.7.5.8.Installer.exe 2018-08-13 20:04 - 2018-08-13 20:04 - 015301240 _____ (Microsoft Corporation) C:\Users\Marc\AppData\Local\Temp\vc_redist.x64.exe ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2018-10-07 19:38 ==================== End of FRST.txt ============================

# ------------------------------- # Malwarebytes AdwCleaner 7.2.4.0 # ------------------------------- # Build: 09-25-2018 # Database: 2018-10-08.2 (Cloud) # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Scan # ------------------------------- # Start: 10-09-2018 # Duration: 00:01:02 # OS: Windows 8 Single Language # Scanned: 31955 # Detected: 32 ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** PUP.Optional.UCBrowser C:\Program Files (x86)\UCBrowser PUP.Optional.UCBrowser C:\Windows\SysWOW64\config\systemprofile\AppData\Local\UCBrowser PUP.Optional.UCBrowser C:\Users\Marc\AppData\Local\UCBrowser ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** PUP.Optional.Legacy C:\Windows\Tasks\UCBrowserUpdaterCore.job PUP.Optional.Legacy C:\Windows\System32\Tasks\UCBrowserUpdaterCore ***** [ Registry ] ***** PUP.Adware.Heuristic HKLM\SOFTWARE\Classes\UCHTML.AssocFile.XHTML PUP.Adware.Heuristic HKLM\SOFTWARE\Classes\UCHTML.AssocFile.XHT PUP.Adware.Heuristic HKLM\SOFTWARE\Classes\UCHTML.AssocFile.WEBP PUP.Adware.Heuristic HKLM\SOFTWARE\Classes\UCHTML.AssocFile.SHTML PUP.Adware.Heuristic HKLM\SOFTWARE\Classes\UCHTML.AssocFile.SHTM PUP.Adware.Heuristic HKLM\SOFTWARE\Classes\UCHTML.AssocFile.MHT PUP.Adware.Heuristic HKLM\SOFTWARE\Classes\UCHTML.AssocFile.HTML PUP.Adware.Heuristic HKLM\SOFTWARE\Classes\UCHTML.AssocFile.HTM PUP.Adware.Heuristic HKLM\SOFTWARE\Classes\UCHTML.AssocFile.CRX PUP.Adware.Heuristic HKLM\SOFTWARE\Classes\UCHTML PUP.Optional.Legacy HKLM\SOFTWARE\Classes\.xhtml\OpenWithProgids|UCHTML.AssocFile.XHTML PUP.Optional.Legacy HKLM\SOFTWARE\Classes\.xht\OpenWithProgids|UCHTML.AssocFile.XHT PUP.Optional.Legacy HKLM\SOFTWARE\Classes\.webp\OpenWithProgids|UCHTML.AssocFile.WEBP PUP.Optional.Legacy HKLM\SOFTWARE\Classes\.shtml\OpenWithProgids|UCHTML.AssocFile.SHTML PUP.Optional.Legacy HKLM\SOFTWARE\Classes\.shtm\OpenWithProgids|UCHTML.AssocFile.SHTM PUP.Optional.Legacy HKLM\SOFTWARE\Classes\.mht\OpenWithProgids|UCHTML.AssocFile.MHT PUP.Optional.Legacy HKLM\SOFTWARE\Classes\.html\OpenWithProgids|UCHTML.AssocFile.HTML PUP.Optional.Legacy HKLM\SOFTWARE\Classes\.htm\OpenWithProgids|UCHTML.AssocFile.HTM PUP.Optional.Legacy HKLM\Software\Wow6432Node\Microsoft\MediaPlayer\ShimInclusionList\UCBrowser.exe PUP.Optional.Legacy HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\UCBrowser.exe PUP.Optional.Legacy HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\UCBrowser.exe PUP.Optional.Legacy HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FE48B5D7-1E97-49A4-B6F4-995200E58F3C} PUP.Optional.Legacy HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UCBrowserUpdaterCore PUP.Optional.UCBrowser HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{F3745085-011F-4A64-A400-DA560552C601} PUP.Optional.UCBrowser HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{72B1D74A-4F43-4EEF-9FC6-59E0D3CB0425} ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries found. ***** [ Chromium URLs ] ***** PUP.Optional.Legacy Ask PUP.Optional.Legacy AOL ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries found. ***** [ Firefox URLs ] ***** No malicious Firefox URLs found. AdwCleaner[S00].txt - [2839 octets] - [23/05/2018 10:47:52] AdwCleaner[S01].txt - [2839 octets] - [23/05/2018 11:28:40] AdwCleaner[C01].txt - [2631 octets] - [23/05/2018 11:29:23] AdwCleaner[S02].txt - [1771 octets] - [23/05/2018 15:14:41] AdwCleaner[S03].txt - [1771 octets] - [24/05/2018 06:06:07] AdwCleaner[S04].txt - [1771 octets] - [01/06/2018 01:23:55] AdwCleaner[S05].txt - [2175 octets] - [07/06/2018 13:05:23] AdwCleaner[C05].txt - [2246 octets] - [07/06/2018 15:02:19] AdwCleaner[S06].txt - [1779 octets] - [28/07/2018 19:48:09] AdwCleaner[C06].txt - [1908 octets] - [28/07/2018 20:29:37] AdwCleaner[S07].txt - [1862 octets] - [28/07/2018 21:45:06] AdwCleaner[S08].txt - [4746 octets] - [08/10/2018 13:31:58] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S09].txt ##########

Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 10/9/18 Scan Time: 9:27 PM Log File: 159d017e-cbc7-11e8-a712-5453edb958c3.json Administrator: Yes -Software Information- Version: 3.5.1.2522 Components Version: 1.0.365 Update Package Version: 1.0.7267 License: Free -System Information- OS: Windows 8 CPU: x64 File System: NTFS User: Serquina\Marc -Scan Summary- Scan Type: Threat Scan Scan Initiated By: Manual Result: Completed Objects Scanned: 319836 Threats Detected: 0 (No malicious items detected) Threats Quarantined: 0 (No malicious items detected) Time Elapsed: 46 min, 31 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 0 (No malicious items detected) Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected) (end)

Hello Everyone i do not know where to post this but i marked this as a malware on my own so i post this in this forum So i managed to uninstall Torch Web browser i guess but i cant remove or change remove or set to nothing when opening magnet links on google chrome and another attached file that i included i cannot also unchecked it or set to nothing

i was going to borrow my sister's usb drive and saw this drive.bat file and i dont have any info where did she got it or accidentally run the file if she run it perhaps i didn't know the behavior i run mbam but it didn't quarantine the file and avast says it's clean

Hello Everyone, I was about to install malwarebytes anti malware on my laptop and a pop up error appears "Application has generated an exception that could not be handled." process id=0xef7e4f(15695439), thread id=0xef3ea8(15679144). Click Ok to terminate the application Click CANCEL to debug the application i really dont know what really happen here. btw i have windows 10 build 1511 i hope you help me with this thanks in advance

what do reset system setting resets on windows?

no pop ups now.