image

[RESOLU]Ordinateur très lent , virus détectés

Réservé aux analyses ZHPDiag par un helpeur
Règles du forum
Vous ne devez poster ici que pour demander une analyse de désinfection de votre PC par un de nos helpeurs.

[RESOLU]Ordinateur très lent , virus détectés

Messagepar Flottille12F » Lun 23 Fév 2015 14:31

Bonjour Claude

Suite à conversation via skype , j'ai fait ce que tu m'as dit et je viens de réussir la première partie .

ZHPDiag a fonctionné cette fois ci et voici le lien du fichier ;http://www.partage-fichiers.com/upload/rvmk1r6h .

J'attends pour savoir quoi faire après .

@++
Avatar de l’utilisateur
Flottille12F
Administrateur
Administrateur
 
Messages: 84
Inscription: Lun 31 Mar 2014 10:06
Localisation: Finistère

Re: Ordinateur très lent , virus détectés

Messagepar Popeye40 » Lun 23 Fév 2015 15:30

Bonjour
Ta fille ne fait pas dans la dentelle, j'ai rarement vu un pc autant infecté.
- Ne télécharger QUE sur les sites des éditeurs (et surtout pas sur softonic ni 01.net entre autres merdes)
- Il faut désinstaller Avast avec IObit Uninstaller Portable > viewtopic.php?f=7&t=937 et réactiver Windows Defender qui est intégré.
- Il faut désinstaller, aussi avec IObit Uninstaller Portable, Google Chrome qui est un pourvoyeur de pub non désirées
- Lui installer Unchecky > viewtopic.php?f=7&t=1451&p=26490#p26490 qui bloquera la majeur partie des programmes parasites proposes avec les gratuiciels.
- Lui installer Wise Registry Cleaner > viewtopic.php?f=7&t=80 qui nettoie le registre en toute sécurité.


Attention à désactiver ton antivirus le temps des opérations de décontamination.

Applique le point 7 de la procédure :http://www.saamu.net/topic1545.html#p27406
c'est à dire ceci :

7°Recommandations pour une meilleure protection

- Le Fichier Hosts :
Il permet de bloquer les accès aux sites "dangereux" pour TOUTES les navigation.
Pour installer le fichier Hosts du saamu : http://www.saamu.net/topic3112.html
Pour en savoir plus sur le fichier hosts : http://assiste.com.free.fr/p/hosts/hosts_introduction_a_hosts.html

- Le Nettoyage des Dossiers Temps
Normalement ces dossiers devraient être vides lorsqu'on arrête l'ordinateur. Dans les faits il n'en est rien.
Pour l'installer regarde ceci : http://www.saamu.net/topic3704.html


Redémarre le PC


puis fixe avec zhpfix ceci :
Code: Tout sélectionner
Script ZHPFix
    ShortcutFix
    EmptyFlash
    EmptyTemp
    EmptyCLSID
G2 - EXT: C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\baflflhaeoafhbeiioodmdmjohkoalio [Music Notation Training]  =>Hijacker.Proxy
M3 - MFPP: Plugins - [Dom] -- C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\jbpnlet0.default\searchplugins\Web Search.xml  =>Parasite.Pugi
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = http://search.babylon.com  =>PUP.Babylon
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.helperbar.com  =>PUP.HelperBar
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.helperbar.com  =>PUP.HelperBar
O1 - Hosts: 127.0.0 sams.nikonimaging.com    => Infection Hosts (Hosts.Redirection)↓
O2 - BHO: (no name) - {31ad400d-1b06-4e33-a59a-90c2c140cba0} Clé orpheline    => Hijacker.SmartBar
O20 - AppInit_DLLs: . (...) - C:\Program Files\bitguard\271769~1.27\{c16c1~1\bitguard.dll (.not file.)  =>PUP.BitGuard
[MD5.82B2DA4DA5A5A6FE88CF9E7B1D960DF6] [APT] [AutoKMS] (...) -- C:\WINDOWS\AutoKMS\AutoKMS.exe   [3154432]  =>Trojan.AutoKMS
[HKCU\Software\5b08c8ab23aec48]  =>PUP.BitGuard
[HKCU\Software\DataMngr]  =>PUP.Datamngr
[HKCU\Software\DataMngr_Toolbar]  =>PUP.Datamngr
[HKCU\Software\Iminent]  =>Adware.IMBooster
[HKCU\Software\SmartbarBackup]  =>Hijacker.SmartBar
[HKCU\Software\SmartbarLog]  =>Hijacker.SmartBar
[HKCU\Software\Smartbar]  =>Hijacker.SmartBar
[HKCU\Software\WeDlMngr]  =>PUP.weDownloadManager
[HKLM\Software\5b08c8ab23aec48]  =>PUP.BitGuard
[HKLM\Software\DataMngr]  =>PUP.Datamngr
[HKLM\Software\Driver-Soft]  =>PUP.DriverSoft
[HKLM\Software\Iminent]  =>Adware.IMBooster
O43 - CFD: 28/10/2013 - 11:59:32 - [] ----D C:\Program Files\Pricora 1.4  =>Adware.Pricora
O43 - CFD: 20/08/2013 - 12:54:44 - [0] ----D C:\ProgramData\Babylon  =>PUP.Babylon
O43 - CFD: 22/02/2014 - 10:25:43 - [] ----D C:\ProgramData\BBrroWse2seaveo  =>Adware.Browse2Save
O43 - CFD: 28/10/2013 - 14:07:43 - [] ----D C:\ProgramData\BitGuard  =>PUP.BitGuard
O43 - CFD: 10/07/2014 - 14:41:37 - [0] ----D C:\ProgramData\boost_interprocess    => PUP.Boost
O43 - CFD: 08/10/2013 - 13:52:04 - [0] ----D C:\ProgramData\DriverGenius  =>PUP.DriverGenius
O43 - CFD: 22/05/2013 - 12:04:13 - [] ----D C:\ProgramData\InstallMate  =>PUP.Tarma
O43 - CFD: 22/05/2013 - 12:04:12 - [] ----D C:\ProgramData\StarApp  =>PUP.StarApp
O43 - CFD: 28/10/2013 - 15:23:53 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BBrroWse2seaveo    => Infection PUP (Adware.Browse2Save)
O43 - CFD: 19/04/2013 - 09:56:19 - [] ----D C:\Users\Dom\AppData\Roaming\B1Toolbar  =>Hijacker.SearchB1org
O43 - CFD: 22/02/2014 - 09:05:21 - [] ----D C:\Users\Dom\AppData\Roaming\newnext.me  =>PUP.NextLive
O43 - CFD: 16/12/2013 - 13:00:25 - [] ----D C:\Users\Dom\AppData\Roaming\OpenCandy  =>Adware.OpenCandy
O43 - CFD: 22/02/2014 - 10:27:35 - [0] ----D C:\Users\Dom\AppData\Local\genienext  =>PUP.NextLive
O43 - CFD: 17/12/2013 - 09:45:55 - [0] ----D C:\Users\Dom\AppData\Local\Mobogenie  =>PUP.Mobogenie
O43 - CFD: 16/12/2013 - 13:05:00 - [] ----D C:\Users\Dom\AppData\Local\Smartbar  =>Hijacker.SmartBar
O61 - LFC: 19/02/2015 - 14:11:53 ---A- . (...) -- C:\Users\Dom\AppData\Local\Temp\nszAF6F.tmp\UAC.dll   [30208]    => Infection Rootkit (Rootkit.Agent)
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.helperbar.DockingPositionDown", false);  =>PUP.HelperBar
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.helperbar.SmartbarDisabled", false);  =>PUP.HelperBar
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.helperbar.SmartbarStateMinimaized", false);  =>PUP.HelperBar
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.helperbar.Visibility", true);  =>PUP.HelperBar
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.helperbar.countryiso", "fr");  =>PUP.HelperBar
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.helperbar.downloadprovider", "yahoooc");  =>PUP.HelperBar
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.helperbar.installationid", "29abf86b-c338-d721-e7c9-da582de9919e");  =>PUP.HelperBar
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.helperbar.installdate", "16/12/2013");  =>PUP.HelperBar
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.helperbar.publisher", "yahoooc");  =>PUP.HelperBar
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.helperbar.type", "hp1000");  =>PUP.HelperBar
O69 - SBI: SearchScopes [HKCU] {006ee092-9658-4fd6-bd8e-a21a348e59f5} - (Web Search) - http://feed.helperbar.com  =>PUP.HelperBar
[HKCU\Software\5b08c8ab23aec48\2.7.1769.27\upd]:="upd="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1694.246]:dllName="BitGuard.dll"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1694.246]:exeName="BitGuard.exe"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1694.246]:folderName="BitGuard"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1694.246]:guid="{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}"  =>Hijacker.Eazel
[HKCU\Software\5b08c8ab23aec48\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1694.246]:serviceName="BitGuard"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1694.246]:version="2.6.1694.246"  =>Hijacker.Eazel
[HKCU\Software\5b08c8ab23aec48]:GUID="{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}"  =>Hijacker.Eazel
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPCHREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPFFREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:HPIEREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:INSTALL_FOLDER_NAME="BitGuard"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:KWFFREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTCHREGEXP0="FO81jovjQUF+5S6+haV7vGe3TMfw8oqWAhSaKzFS9OtdgZ1j5X+B4jW/459R"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTCHREGEXP1="FO81jovjQUF+5S6+hbF0tnG4Tc/u94SDBhydJTxS8+ldnZRi5niE4Dm49Yxb"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTCHREGEXP2="FO81jovjQUF+5S6+hbF/tG24SsHn9oyWDBuXLj1U8e1fjIJv8XSE4Dy75IlV"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:NTFFREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:PROTECTOR_DLL_NAME="BitGuard.dll"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:PROTECT_EXE_NAME="BitGuard.exe"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SECHREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEFFREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SEIEREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:SERVICE_NAME="BitGuard"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:usrcheckbox="1"  =>PUP.BitGuard
[HKCU\Software\5b08c8ab23aec48]:version="2.7.1769.27"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:GUID="{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}"  =>Hijacker.Eazel
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPCHREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPFFREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:HPIEREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:INSTALL_FOLDER_NAME="BitGuard"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:KWFFREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTCHREGEXP0="FO81jovjQUF+5S6+haV7vGe3TMfw8oqWAhSaKzFS9OtdgZ1j5X+B4jW/459R"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTCHREGEXP1="FO81jovjQUF+5S6+hbF0tnG4Tc/u94SDBhydJTxS8+ldnZRi5niE4Dm49Yxb"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTCHREGEXP2="FO81jovjQUF+5S6+hbF/tG24SsHn9oyWDBuXLj1U8e1fjIJv8XSE4Dy75IlV"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:NTFFREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:PROTECTOR_DLL_NAME="BitGuard.dll"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:PROTECT_EXE_NAME="BitGuard.exe"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SECHREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEFFREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SEIEREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:SERVICE_NAME="BitGuard"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:usrcheckbox="1"  =>PUP.BitGuard
[HKLM\Software\5b08c8ab23aec48]:version="2.7.1769.27"  =>PUP.BitGuard
HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32  =>Adware.IMBooster
HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS  =>Adware.IMBooster
HKLM\SOFTWARE\Microsoft\Tracing\PerformanceOptimizer_RASAPI32  =>PUP.PerformanceOptimizer
HKLM\SOFTWARE\Microsoft\Tracing\PerformanceOptimizer_RASMANCS  =>PUP.PerformanceOptimizer
HKLM\SOFTWARE\Microsoft\Tracing\Smartbar_RASAPI32  =>Hijacker.SmartBar
HKLM\SOFTWARE\Microsoft\Tracing\Smartbar_RASMANCS  =>Hijacker.SmartBar
[HKCR\CLSID\{5266035F-65FC-4C51-9024-FB57ED8AEB1E}] (MP4Player.ShellContextMenu)  =>PUP.Sogou
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}]   =>Hijacker.SmartBar
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}]   =>Hijacker.SmartBar
[HKLM\Software\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}]   =>Adware.Agent
[HKLM\Software\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}]   =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}]   =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}]   =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}]   =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}]   =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{293A63F7-C3B6-423A-9845-901AC0A7EE6E}]   =>PUP.Eorezo
[HKLM\Software\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}]   =>Hijacker.SmartBar
[HKLM\Software\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}]   =>PUP.Whitesmoke
[HKLM\Software\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}]   =>PUP.Whitesmoke
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}]   =>Adware.IMBooster
[HKLM\Software\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}]   =>Hijacker.SmartBar
[HKLM\Software\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}]   =>Hijacker.SmartBar
[HKLM\Software\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}]   =>Hijacker.SmartBar
[HKLM\Software\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}]   =>PUP.Babylon
[HKLM\Software\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}]   =>Adware.CDNHelper
[HKLM\Software\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}]   =>Hijacker.SmartBar
[HKLM\Software\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}]   =>PUP.RewardsArcade
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}]   =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Prod.cap]   =>PUP.ClaroSearch
[HKLM\Software\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}]   =>PUP.RewardsArcade
[HKCU\Software\DataMngr]   =>Adware.Bandoo
[HKLM\Software\DataMngr]   =>Adware.Bandoo
[HKCU\Software\Iminent]   =>Adware.IMBooster
[HKLM\Software\Iminent]   =>Adware.IMBooster
[HKCU\Software\SmartbarBackup]   =>Hijacker.SmartBar
[HKCU\Software\SmartbarLog]   =>Hijacker.SmartBar
[HKLM\Software\Microsoft\Tracing\Iminent_RASAPI32]   =>Adware.Bandoo
[HKLM\Software\Microsoft\Tracing\Iminent_RASMANCS]   =>Adware.Bandoo
[HKLM\Software\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}]   =>PUP.Babylon
[HKLM\Software\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}]   =>PUP.Funmoods
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings]   =>PUP.BProtector
[HKLM\Software\Classes\AppID\secman.DLL]   =>PUP.Babylon
[HKLM\Software\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}]   =>Adware.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375]   =>PUP.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5]   =>PUP.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C3F3165C-74D3-6FDB-3274-14FDA8698CFA}]   =>Adware.Browse2Save
[HKLM\Software\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}]   =>Adware.MagniPic
C:\Program Files\Pricora 1.4   =>Adware.Pricora^
C:\ProgramData\Babylon   =>PUP.Babylon^
C:\ProgramData\BBrroWse2seaveo   =>Adware.Browse2Save^
C:\ProgramData\BitGuard   =>PUP.BitGuard^
C:\ProgramData\DriverGenius   =>PUP.DriverGenius^
C:\ProgramData\InstallMate   =>PUP.Tarma^
C:\ProgramData\StarApp   =>PUP.StarApp^
C:\Users\Dom\AppData\Roaming\B1Toolbar   =>Hijacker.SearchB1org^
C:\Users\Dom\AppData\Roaming\newnext.me   =>PUP.NextLive^
C:\Users\Dom\AppData\Roaming\OpenCandy   =>Adware.OpenCandy^
C:\Users\Dom\AppData\Local\genienext   =>PUP.NextLive^
C:\Users\Dom\AppData\Local\Mobogenie   =>PUP.Mobogenie^
C:\Users\Dom\AppData\Local\Smartbar   =>Hijacker.SmartBar^
C:\Users\Dom\AppData\LocalLow\Smartbar   =>Hijacker.SmartBar
C:\Users\Dom\AppData\Local\Temp\Smartbar   =>Hijacker.SmartBar
C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\jbpnlet0.default\bprotector_extensions.sqlite   =>PUP.BProtector
C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\jbpnlet0.default\bprotector_prefs.js   =>PUP.BProtector
C:\WINDOWS\AutoKMS\AutoKMS.exe   =>Trojan.AutoKMS^
[HKCU\Software\DataMngr_Toolbar]   =>PUP.Datamngr^
[HKCU\Software\Smartbar]   =>Hijacker.SmartBar^
[HKCU\Software\WeDlMngr]   =>PUP.weDownloadManager^
[HKLM\Software\Driver-Soft]   =>PUP.DriverSoft^
[HKCU\Software\5b08c8ab23aec48\history\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}2.6.1694.246]:dllName="BitGuard.dll"   =>PUP.BitGuard^
[HKCU\Software\5b08c8ab23aec48]:GUID="{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}"   =>Hijacker.Eazel^
[HKLM\Software\5b08c8ab23aec48]:GUID="{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}"   =>Hijacker.Eazel^
[HKCR\CLSID\{5266035F-65FC-4C51-9024-FB57ED8AEB1E}] (MP4Player.ShellContextMenu)   =>PUP.Sogou^
G2 - EXT: C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\mamnihopcnbfnbfnnneplcohmnkkpipb [Illimitux]    => CrackStreaming.Illimitux
[MD5.00000000000000000000000000000000] [APT] [{DACE95C6-2AC2-456F-B7CB-454ABD70F962}] (...) -- C:\Users\Dom\Downloads\netlorstudio3158.exe (.not file.)   [0]    => Fichier absent
O43 - CFD: 13/08/2014 - 15:46:15 - [] ----D C:\Program Files\Emoticon
O43 - CFD: 30/03/2014 - 19:37:29 - [] ----D C:\Program Files\GUM967B.tmp    => Google Inc - Google Update Manager
O43 - CFD: 06/03/2013 - 16:39:47 - [] ----D C:\ProgramData\SoftSafe
O43 - CFD: 08/10/2013 - 13:52:04 - [0] --H-D C:\ProgramData\{F6B20F57-7502-4A83-84B4-99A321FAC175}    => Empty Folder not necessary
O43 - CFD: 15/03/2013 - 12:54:46 - [0] ----D C:\Users\Dom\AppData\Roaming\DVDVideoSoftIEHelpers
O43 - CFD: 08/01/2013 - 11:34:07 - [0] ----D C:\Users\Dom\AppData\Local\PackageAware    => InstallAware Software Corp.
O43 - CFD: 16/06/2014 - 10:31:41 - [] ----D C:\Users\Dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Emoticon
O61 - LFC: 16/02/2015 - 14:12:33 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI51402\gdi32.dll   [287744]    => Temporary file not necessary
O61 - LFC: 16/02/2015 - 14:12:33 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI51402\kernel32.dll   [990208]    => Temporary file not necessary
O61 - LFC: 16/02/2015 - 14:12:34 ---A- . (...) -- C:\Users\Dom\AppData\Local\Temp\_MEI51402\PyWinTypes27.dll   [110080]    => Temporary file not necessary
O61 - LFC: 16/02/2015 - 14:12:34 ---A- . (...) -- C:\Users\Dom\AppData\Local\Temp\_MEI51402\pythoncom27.dll   [364544]    => Temporary file not necessary
O61 - LFC: 16/02/2015 - 14:12:34 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI51402\mfc90.dll   [1156600]    => Temporary file not necessary
O61 - LFC: 16/02/2015 - 14:12:34 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI51402\mfc90u.dll   [1162744]    => Temporary file not necessary
O61 - LFC: 16/02/2015 - 14:12:34 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI51402\mfcm90.dll   [59904]    => Temporary file not necessary
O61 - LFC: 16/02/2015 - 14:12:34 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI51402\mfcm90u.dll   [59904]    => Temporary file not necessary
O61 - LFC: 16/02/2015 - 14:12:34 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI51402\msvcp100.dll   [421200]    => Temporary file not necessary
O61 - LFC: 16/02/2015 - 14:12:34 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI51402\msvcr100.dll   [773968]    => Temporary file not necessary
O61 - LFC: 16/02/2015 - 14:12:34 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI51402\psapi.dll   [23040]    => Temporary file not necessary
O61 - LFC: 16/02/2015 - 14:12:34 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI51402\shell32.dll   [8462848]    => Temporary file not necessary
O61 - LFC: 17/02/2015 - 14:12:11 ---A- . (...) -- C:\Users\Dom\AppData\Local\Temp\_MEI44683\PyWinTypes27.dll   [110080]    => Temporary file not necessary
O61 - LFC: 17/02/2015 - 14:12:11 ---A- . (...) -- C:\Users\Dom\AppData\Local\Temp\_MEI44683\pythoncom27.dll   [364544]    => Temporary file not necessary
O61 - LFC: 17/02/2015 - 14:12:11 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI44683\gdi32.dll   [287744]    => Temporary file not necessary
O61 - LFC: 17/02/2015 - 14:12:11 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI44683\kernel32.dll   [990208]    => Temporary file not necessary
O61 - LFC: 17/02/2015 - 14:12:11 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI44683\mfc90.dll   [1156600]    => Temporary file not necessary
O61 - LFC: 17/02/2015 - 14:12:11 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI44683\mfc90u.dll   [1162744]    => Temporary file not necessary
O61 - LFC: 17/02/2015 - 14:12:11 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI44683\mfcm90.dll   [59904]    => Temporary file not necessary
O61 - LFC: 17/02/2015 - 14:12:11 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI44683\mfcm90u.dll   [59904]    => Temporary file not necessary
O61 - LFC: 17/02/2015 - 14:12:11 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI44683\msvcp100.dll   [421200]    => Temporary file not necessary
O61 - LFC: 17/02/2015 - 14:12:11 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI44683\msvcr100.dll   [773968]    => Temporary file not necessary
O61 - LFC: 17/02/2015 - 14:12:11 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI44683\psapi.dll   [23040]    => Temporary file not necessary
O61 - LFC: 17/02/2015 - 14:12:11 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI44683\shell32.dll   [8462848]    => Temporary file not necessary
O61 - LFC: 18/02/2015 - 14:12:20 ---A- . (...) -- C:\Users\Dom\AppData\Local\Temp\_MEI47443\PyWinTypes27.dll   [110080]    => Temporary file not necessary
O61 - LFC: 18/02/2015 - 14:12:20 ---A- . (...) -- C:\Users\Dom\AppData\Local\Temp\_MEI47443\pythoncom27.dll   [364544]    => Temporary file not necessary
O61 - LFC: 18/02/2015 - 14:12:20 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47443\gdi32.dll   [287744]    => Temporary file not necessary
O61 - LFC: 18/02/2015 - 14:12:20 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47443\kernel32.dll   [990208]    => Temporary file not necessary
O61 - LFC: 18/02/2015 - 14:12:20 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47443\mfc90.dll   [1156600]    => Temporary file not necessary
O61 - LFC: 18/02/2015 - 14:12:20 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47443\mfc90u.dll   [1162744]    => Temporary file not necessary
O61 - LFC: 18/02/2015 - 14:12:20 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47443\mfcm90.dll   [59904]    => Temporary file not necessary
O61 - LFC: 18/02/2015 - 14:12:20 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47443\mfcm90u.dll   [59904]    => Temporary file not necessary
O61 - LFC: 18/02/2015 - 14:12:20 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47443\msvcp100.dll   [421200]    => Temporary file not necessary
O61 - LFC: 18/02/2015 - 14:12:20 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47443\msvcr100.dll   [773968]    => Temporary file not necessary
O61 - LFC: 18/02/2015 - 14:12:20 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47443\psapi.dll   [23040]    => Temporary file not necessary
O61 - LFC: 18/02/2015 - 14:12:21 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47443\shell32.dll   [8462848]    => Temporary file not necessary
O61 - LFC: 19/02/2015 - 14:11:53 ---A- . (...) -- C:\Users\Dom\AppData\Local\Temp\nszAF6F.tmp\DropboxNSISTools.dll   [68096]    => Temporary file not necessary
O61 - LFC: 19/02/2015 - 14:12:07 ---A- . (...) -- C:\Users\Dom\AppData\Local\Temp\_MEI43843\PyWinTypes27.dll   [110080]    => Temporary file not necessary
O61 - LFC: 19/02/2015 - 14:12:07 ---A- . (...) -- C:\Users\Dom\AppData\Local\Temp\_MEI43843\pythoncom27.dll   [364544]    => Temporary file not necessary
O61 - LFC: 19/02/2015 - 14:12:07 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI43843\gdi32.dll   [287744]    => Temporary file not necessary
O61 - LFC: 19/02/2015 - 14:12:07 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI43843\kernel32.dll   [990208]    => Temporary file not necessary
O61 - LFC: 19/02/2015 - 14:12:07 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI43843\mfc90.dll   [1156600]    => Temporary file not necessary
O61 - LFC: 19/02/2015 - 14:12:07 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI43843\mfc90u.dll   [1162744]    => Temporary file not necessary
O61 - LFC: 19/02/2015 - 14:12:07 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI43843\mfcm90.dll   [59904]    => Temporary file not necessary
O61 - LFC: 19/02/2015 - 14:12:07 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI43843\mfcm90u.dll   [59904]    => Temporary file not necessary
O61 - LFC: 19/02/2015 - 14:12:07 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI43843\msvcp100.dll   [421200]    => Temporary file not necessary
O61 - LFC: 19/02/2015 - 14:12:07 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI43843\msvcr100.dll   [773968]    => Temporary file not necessary
O61 - LFC: 19/02/2015 - 14:12:07 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI43843\psapi.dll   [23040]    => Temporary file not necessary
O61 - LFC: 19/02/2015 - 14:12:07 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI43843\shell32.dll   [8462848]    => Temporary file not necessary
O61 - LFC: 20/02/2015 - 14:12:21 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47562\gdi32.dll   [287744]    => Temporary file not necessary
O61 - LFC: 20/02/2015 - 14:12:21 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47562\kernel32.dll   [990208]    => Temporary file not necessary
O61 - LFC: 20/02/2015 - 14:12:21 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47562\mfc90.dll   [1156600]    => Temporary file not necessary
O61 - LFC: 20/02/2015 - 14:12:21 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47562\mfc90u.dll   [1162744]    => Temporary file not necessary
O61 - LFC: 20/02/2015 - 14:12:21 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47562\mfcm90.dll   [59904]    => Temporary file not necessary
O61 - LFC: 20/02/2015 - 14:12:21 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47562\mfcm90u.dll   [59904]    => Temporary file not necessary
O61 - LFC: 20/02/2015 - 14:12:21 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47562\msvcp100.dll   [421200]    => Temporary file not necessary
O61 - LFC: 20/02/2015 - 14:12:21 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47562\msvcr100.dll   [773968]    => Temporary file not necessary
O61 - LFC: 20/02/2015 - 14:12:22 ---A- . (...) -- C:\Users\Dom\AppData\Local\Temp\_MEI47562\PyWinTypes27.dll   [110080]    => Temporary file not necessary
O61 - LFC: 20/02/2015 - 14:12:22 ---A- . (...) -- C:\Users\Dom\AppData\Local\Temp\_MEI47562\pythoncom27.dll   [364544]    => Temporary file not necessary
O61 - LFC: 20/02/2015 - 14:12:22 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47562\psapi.dll   [23040]    => Temporary file not necessary
O61 - LFC: 20/02/2015 - 14:12:22 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI47562\shell32.dll   [8462848]    => Temporary file not necessary
O61 - LFC: 21/02/2015 - 14:12:24 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI48442\gdi32.dll   [287744]    => Temporary file not necessary
O61 - LFC: 21/02/2015 - 14:12:24 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI48442\kernel32.dll   [990208]    => Temporary file not necessary
O61 - LFC: 21/02/2015 - 14:12:24 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI48442\mfc90.dll   [1156600]    => Temporary file not necessary
O61 - LFC: 21/02/2015 - 14:12:24 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI48442\mfc90u.dll   [1162744]    => Temporary file not necessary
O61 - LFC: 21/02/2015 - 14:12:24 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI48442\mfcm90.dll   [59904]    => Temporary file not necessary
O61 - LFC: 21/02/2015 - 14:12:24 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI48442\mfcm90u.dll   [59904]    => Temporary file not necessary
O61 - LFC: 21/02/2015 - 14:12:24 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI48442\msvcp100.dll   [421200]    => Temporary file not necessary
O61 - LFC: 21/02/2015 - 14:12:24 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI48442\msvcr100.dll   [773968]    => Temporary file not necessary
O61 - LFC: 21/02/2015 - 14:12:25 ---A- . (...) -- C:\Users\Dom\AppData\Local\Temp\_MEI48442\PyWinTypes27.dll   [110080]    => Temporary file not necessary
O61 - LFC: 21/02/2015 - 14:12:25 ---A- . (...) -- C:\Users\Dom\AppData\Local\Temp\_MEI48442\pythoncom27.dll   [364544]    => Temporary file not necessary
O61 - LFC: 21/02/2015 - 14:12:25 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI48442\psapi.dll   [23040]    => Temporary file not necessary
O61 - LFC: 21/02/2015 - 14:12:25 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI48442\shell32.dll   [8462848]    => Temporary file not necessary
O61 - LFC: 22/02/2015 - 14:12:31 ---A- . (...) -- C:\Users\Dom\AppData\Local\Temp\_MEI50442\PyWinTypes27.dll   [110080]    => Temporary file not necessary
O61 - LFC: 22/02/2015 - 14:12:31 ---A- . (...) -- C:\Users\Dom\AppData\Local\Temp\_MEI50442\pythoncom27.dll   [364544]    => Temporary file not necessary
O61 - LFC: 22/02/2015 - 14:12:31 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI50442\gdi32.dll   [287744]    => Temporary file not necessary
O61 - LFC: 22/02/2015 - 14:12:31 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI50442\kernel32.dll   [990208]    => Temporary file not necessary
O61 - LFC: 22/02/2015 - 14:12:31 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI50442\mfc90.dll   [1156600]    => Temporary file not necessary
O61 - LFC: 22/02/2015 - 14:12:31 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI50442\mfc90u.dll   [1162744]    => Temporary file not necessary
O61 - LFC: 22/02/2015 - 14:12:31 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI50442\mfcm90.dll   [59904]    => Temporary file not necessary
O61 - LFC: 22/02/2015 - 14:12:31 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI50442\mfcm90u.dll   [59904]    => Temporary file not necessary
O61 - LFC: 22/02/2015 - 14:12:31 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI50442\msvcp100.dll   [421200]    => Temporary file not necessary
O61 - LFC: 22/02/2015 - 14:12:31 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI50442\msvcr100.dll   [773968]    => Temporary file not necessary
O61 - LFC: 22/02/2015 - 14:12:31 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI50442\psapi.dll   [23040]    => Temporary file not necessary
O61 - LFC: 22/02/2015 - 14:12:31 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\_MEI50442\shell32.dll   [8462848]    => Temporary file not necessary
O61 - LFC: 23/02/2015 - 14:11:53 ---A- . (...) -- C:\Users\Dom\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpphl1by.dll   [43008]    => Temporary file not necessary
G2 - EXT: C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [Avast SafePrice]
O3 - Toolbar: (no name) - [HKLM]{ae07101b-46d4-4a98-af68-0333ea26e113} Clé orpheline
[HKCU\Software\softonicToolbar]
O43 - CFD: 19/04/2013 - 09:58:34 - [] ----D C:\Users\Dom\AppData\Local\B1E
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.admin", false);
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.aflt", "babsst");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.autoRvrt", "false");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.bbDpng", "26");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.cntry", "FR");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.dfltLng", "fr");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.excTlbr", false);
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.ffxUnstlRst", true);
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.hdrMd5", "EB4733C05115E7B32E1D023FEE52F323");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.id", "06bc6609000000000000001d72bb3f1f");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.instlDay", "15937");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.instlRef", "sst");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.lastVrsnTs", "1.8.24.513:55:07");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.newTab", false);
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.prdct", "delta");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.prtnrId", "delta");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.rvrt", "false");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.sg", "azb");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.smplGrp", "none");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.tlbrId", "base");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.tlbrSrchUrl", "");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.vrsn", "1.8.24.5");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.vrsnTs", "1.8.24.513:55:07");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta.vrsni", "1.8.24.5");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta_i.babExt", "");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta_i.babTrack", "affID=123706&tt=200813_245&tsp=4980");
O69 - SBI: prefs.js [Dom - jbpnlet0.default] user_pref("extensions.delta_i.srcExt", "ss");
[HKLM\Software\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}]
[HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}]
C:\Users\Dom\AppData\Local\B1E
[HKCU\Software\softonicToolbar]



Redémarre le PC


Ensuite mettre ici les liens :
- du rapport, zhpfix
- du rapport zhpdiag
Cordialement - Claude
---------------------------------------------------------------------------
Loin d'être le meilleur, je ne suis pas le plus mauvais...quoi que
---------------------------------------------------------------------------

http://papy40.wordpress.com - http://saamu.net - http://www.gigatribe.com/ultimate/29/default
Avatar de l’utilisateur
Popeye40
Administrateur
Administrateur
 
Messages: 464
Inscription: Ven 1 Fév 2013 19:08
Localisation: Mont de Marsan - FRANCE -

Re: Ordinateur très lent , virus détectés

Messagepar Flottille12F » Lun 23 Fév 2015 15:38

Ok , je fais ça demain car là je vais partir à l'aide aux devoirs , je suis bénévole .

Merci pour ton aide .

@++
Avatar de l’utilisateur
Flottille12F
Administrateur
Administrateur
 
Messages: 84
Inscription: Lun 31 Mar 2014 10:06
Localisation: Finistère

Re: Ordinateur très lent , virus détectés

Messagepar Flottille12F » Lun 23 Fév 2015 17:18

Voici les deux fichiers demandés

---http://www.partage-fichiers.com/upload/uea48pkp ZHPDiag.text

---http://www.partage-fichiers.com/upload/nvs83wdv ZHPFix.text

Par contre je me demande si j'aurai du vérifier mes 3 disques durs que j'utilise sur linux et windows , ils sont en FAT32.

@++
Avatar de l’utilisateur
Flottille12F
Administrateur
Administrateur
 
Messages: 84
Inscription: Lun 31 Mar 2014 10:06
Localisation: Finistère

Re: Ordinateur très lent , virus détectés

Messagepar Popeye40 » Lun 23 Fév 2015 20:01

- Le fichier hosts n'est pas installé
- Avast n'est pas désinstallé - Il faut d'abord le désactiver afin de pouvoir le désinstaller-
- Par conséquence Windows Defender n'est pas actif
- La partition C est trop chargée il ne reste que 4% de libre, il faut lui redonner de l'oxygène, pour cela il faut désinstaller ce qui n'est pas utilisé.
Cordialement - Claude
---------------------------------------------------------------------------
Loin d'être le meilleur, je ne suis pas le plus mauvais...quoi que
---------------------------------------------------------------------------

http://papy40.wordpress.com - http://saamu.net - http://www.gigatribe.com/ultimate/29/default
Avatar de l’utilisateur
Popeye40
Administrateur
Administrateur
 
Messages: 464
Inscription: Ven 1 Fév 2013 19:08
Localisation: Mont de Marsan - FRANCE -

Re: Ordinateur très lent , virus détectés

Messagepar Flottille12F » Mar 24 Fév 2015 10:11

Bonjour

Je vais refaire l'installation du fichier HOST .

Chrome est désinstallé , Windows Défender est actif .

Je suis en train de désinstaller des dossiers pour augmenter le disque C.

Je te dis quand j'ai tout fini .

@++
Avatar de l’utilisateur
Flottille12F
Administrateur
Administrateur
 
Messages: 84
Inscription: Lun 31 Mar 2014 10:06
Localisation: Finistère

Re: Ordinateur très lent , virus détectés

Messagepar Popeye40 » Mar 24 Fév 2015 10:30

A la fin tu remets le lien d'un nouveau Diag
Cordialement - Claude
---------------------------------------------------------------------------
Loin d'être le meilleur, je ne suis pas le plus mauvais...quoi que
---------------------------------------------------------------------------

http://papy40.wordpress.com - http://saamu.net - http://www.gigatribe.com/ultimate/29/default
Avatar de l’utilisateur
Popeye40
Administrateur
Administrateur
 
Messages: 464
Inscription: Ven 1 Fév 2013 19:08
Localisation: Mont de Marsan - FRANCE -

Re: Ordinateur très lent , virus détectés

Messagepar Flottille12F » Mar 24 Fév 2015 14:39

Voilà les deux fichier comme convenu

http://www.partage-fichiers.com/upload/v18s5gih ZHPDiag

http://www.partage-fichiers.com/upload/4ahex1ud ZHPFix

Tu me dis quand je pourrai remettre mon antivirus et lequel .

Bonne course .

@++
Avatar de l’utilisateur
Flottille12F
Administrateur
Administrateur
 
Messages: 84
Inscription: Lun 31 Mar 2014 10:06
Localisation: Finistère

Re: Ordinateur très lent , virus détectés

Messagepar Popeye40 » Mar 24 Fév 2015 16:22

Le fichier hosts n'est toujours pas en place, si tu as un problème contacte moi sur Skype.
Il reste des traces de Avast, passe leur karcher que tu trouveras ici > http://www.saamu.net/topic111.html

Ton antivirus est intégré à W8.1, c'est Windows Defender, il faut veiller à ce qu'il soit bien réactivé.
Pour en savoir plus sur w8, 8.1 c'est là > http://www.saamu.net/windows-f100.html
Cordialement - Claude
---------------------------------------------------------------------------
Loin d'être le meilleur, je ne suis pas le plus mauvais...quoi que
---------------------------------------------------------------------------

http://papy40.wordpress.com - http://saamu.net - http://www.gigatribe.com/ultimate/29/default
Avatar de l’utilisateur
Popeye40
Administrateur
Administrateur
 
Messages: 464
Inscription: Ven 1 Fév 2013 19:08
Localisation: Mont de Marsan - FRANCE -

Re: Ordinateur très lent , virus détectés

Messagepar Flottille12F » Mar 24 Fév 2015 16:31

C'est bizarre car il me dit que le fichier HOST est installé .

Je passe le karcher demain .

Je t'appelle sur skype demain car là je vais à l'aide aux devoirs .

A demain donc .

@++
Avatar de l’utilisateur
Flottille12F
Administrateur
Administrateur
 
Messages: 84
Inscription: Lun 31 Mar 2014 10:06
Localisation: Finistère

Re: Ordinateur très lent , virus détectés

Messagepar Flottille12F » Mer 25 Fév 2015 17:57

Merci Claude pour ton aide , c'est dur quand on ne connait pas son système .

Maintenant j'ai dit à tout le monde qu'il fallait faire attention , il ne reste plus que ma fille qui utilise windows , sinon cela fait longtemps que ce pc serait passé à linux .

Merci encore Claude .

@++
Avatar de l’utilisateur
Flottille12F
Administrateur
Administrateur
 
Messages: 84
Inscription: Lun 31 Mar 2014 10:06
Localisation: Finistère

Re: Ordinateur très lent , virus détectés

Messagepar Popeye40 » Mer 25 Fév 2015 18:28

De rien, il était important d'installer le fichier hosts car il empêche l'ouverture des adresses pourriels.
Pour parfaire ton installation je te recommande l'installation de :
Restore Point Creator, SUMo, Unchecky, Wise Registry Cleaner, tu les trouveras dans viewtopic.php?f=23&t=302 pour chacun tu as les explications.
et pour finir une visite complète des annonces W8-8.1 s'impose sur http://www.saamu.net/windows-f100.html
Cordialement - Claude
---------------------------------------------------------------------------
Loin d'être le meilleur, je ne suis pas le plus mauvais...quoi que
---------------------------------------------------------------------------

http://papy40.wordpress.com - http://saamu.net - http://www.gigatribe.com/ultimate/29/default
Avatar de l’utilisateur
Popeye40
Administrateur
Administrateur
 
Messages: 464
Inscription: Ven 1 Fév 2013 19:08
Localisation: Mont de Marsan - FRANCE -

Re: Ordinateur très lent , virus détectés

Messagepar Flottille12F » Mer 25 Fév 2015 20:01

Çà marche .
Avatar de l’utilisateur
Flottille12F
Administrateur
Administrateur
 
Messages: 84
Inscription: Lun 31 Mar 2014 10:06
Localisation: Finistère


Retourner vers Analyse ZHP

Qui est en ligne

Utilisateurs parcourant ce forum: Aucun utilisateur enregistré et 1 invité

cron