Windows Registry Editor Version 5.00 [-HKEY_CURRENT_USER\Software\Acronis] [HKEY_CURRENT_USER\Software\BillP Studios\Detected\ActiveTasks] "C:\\PROGRAM FILES (X86)\\COMMON FILES\\Acronis\\SCHEDULE2\\schedhlp.exe"=- "C:\\PROGRAM FILES (X86)\\COMMON FILES\\Acronis\\CDP\\afcdpsrv.exe"=- "C:\\PROGRAM FILES (X86)\\Comodo\\Dragon\\DRAGON_UPDATER.EXE"=- "C:\\PROGRAM FILES (X86)\\Acronis\\TRUEIMAGEHOME\\ONLINEBACKUPSTANDALONE\\TRUEIMAGEMONITOR.EXE"=- "C:\\PROGRAM FILES (X86)\\Acronis\\TRUEIMAGEHOME\\TRUEIMAGEMONITOR.EXE"=- [HKEY_CURRENT_USER\Software\BillP Studios\Detected\Services] "C:\\Program Files (x86)\\Common Files\\Acronis\\Schedule2\\schedul2.exe"=- "C:\\Program Files (x86)\\Common Files\\Acronis\\CDP\\afcdpsrv.exe"=- "C:\\Program Files\\COMODO\\COMODO Internet Security\\cmdagent.exe"=- "C:\\Program Files (x86)\\Comodo\\Dragon\\dragon_updater.exe"=- "C:\\Program Files (x86)\\Common Files\\Portrait Displays\\Shared\\DTSRVC.exe"=- [HKEY_CURRENT_USER\Software\BillP Studios\Detected\Startup] "C:\\Program Files (x86)\\Common Files\\Acronis\\Schedule2\\schedhlp.exe"=- "C:\\Program Files\\COMODO\\COMODO Internet Security\\cfp.exe -h"=- "C:\\Program Files (x86)\\Acronis\\TrueImageHome\\OnlineBackupStandalone\\TrueImageMonitor.exe"=- "C:\\Program Files (x86)\\Acronis\\TrueImageHome\\TrueImageMonitor.exe"=- "C:\\Windows\\system32\\guard64.dll"=- [HKEY_CURRENT_USER\Software\BillP Studios\WinPatrol\ActiveRun] "C:\\PROGRAM FILES (X86)\\COMMON FILES\\ACRONIS\\SCHEDULE2\\SCHEDHLP.EXE"=- "C:\\PROGRAM FILES\\COMODO\\COMODO INTERNET SECURITY\\CFP.EXE"=- "C:\\PROGRAM FILES (X86)\\ACRONIS\\TRUEIMAGEHOME\\ONLINEBACKUPSTANDALONE\\TRUEIMAGEMONITOR.EXE"=- "C:\\PROGRAM FILES (X86)\\ACRONIS\\TRUEIMAGEHOME\\TRUEIMAGEMONITOR.EXE"=- [HKEY_CURRENT_USER\Software\BillP Studios\WinPatrol\Run] "C:\\Program Files (x86)\\Common Files\\Acronis\\Schedule2\\schedhlp.exe"=- "C:\\Program Files\\COMODO\\COMODO Internet Security\\cfp.exe -h"=- "C:\\Program Files (x86)\\Acronis\\TrueImageHome\\OnlineBackupStandalone\\TrueImageMonitor.exe"=- "C:\\Program Files (x86)\\Acronis\\TrueImageHome\\TrueImageMonitor.exe"=- "C:\\Windows\\system32\\guard64.dll"=- [HKEY_CURRENT_USER\Software\BillP Studios\WinPatrol\Services] "Acronis Scheduler2 Service"=- "Us³uga Acronis Nonstop Backup"=- "COMODO Internet Security Helper Service"=- "COMODO Dragon Update Service"=- [HKEY_CURRENT_USER\Software\BillP Studios\WinPatrol\UnInstall] "Comodo Dragon"=- "{04A3A6B0-8E19-49BB-82FF-65C5A55F917D}"=- "{9A5509EE-5579-46C1-B566-5065545547F9}"=- "{CD79CE4F-A5E5-11DF-AD00-005056C00008}"=- "{D4378A80-C713-11DF-9399-005056C00008}"=- [HKEY_CURRENT_USER\Software\BillP Studios\WinPatrol\UnInstall64] "{4EAB2511-0135-48CA-A47B-CE1E6836793A}"=- "{DBCF0030-9149-11DE-B8B6-005056C00008}"=- HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\\Program Files\\COMODO\\COMODO Internet Security\\cfp.exe"=- "C:\\Program Files (x86)\\Comodo\\Dragon\\dragon.exe"=- [-HKEY_CURRENT_USER\Software\ComodoGroup] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\NewShortcuts] "C:\\Users\\Zuza\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Acronis True Image Home.lnk"=- "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Acronis True Image Home.lnk"=- "C:\\Users\\Zuza\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Acronis One-Click Backup.lnk"=- "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Acronis One-Click Backup.lnk"=- "C:\\Users\\Zuza\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Acronis Online Backup.lnk"=- "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Acronis Online Backup.lnk"=- "C:\\Users\\Zuza\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Tools and Utilities\\Bootable Rescue Media Builder.lnk"=- "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Tools and Utilities\\Bootable Rescue Media Builder.lnk"=- "C:\\Users\\Zuza\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Tools and Utilities\\Clone Disk.lnk"=- "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Tools and Utilities\\Clone Disk.lnk"=- "C:\\Users\\Zuza\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Tools and Utilities\\Convert Acronis backup.lnk"=- "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Tools and Utilities\\Convert Acronis backup.lnk"=- "C:\\Users\\Zuza\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Tools and Utilities\\Convert Windows backup.lnk"=- "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Tools and Utilities\\Convert Windows backup.lnk"=- "C:\\Users\\Zuza\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Tools and Utilities\\File Shredder.lnk"=- "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Tools and Utilities\\File Shredder.lnk"=- "C:\\Users\\Zuza\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Tools and Utilities\\Mount Image.lnk"=- "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Tools and Utilities\\Mount Image.lnk"=- "C:\\Users\\Zuza\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Tools and Utilities\\System Clean-up.lnk"=- "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Tools and Utilities\\System Clean-up.lnk"=- "C:\\Users\\Zuza\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Tools and Utilities\\Try&Decide.lnk"=- "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Acronis\\Acronis True Image Home\\Tools and Utilities\\Try&Decide.lnk"=- "C:\\Users\\Zuza\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Babylon\\Babylon.lnk"=- "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Babylon\\Babylon.lnk"=- "C:\\Users\\Zuza\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\ThreatFire\\Deinstalacja programu ThreatFire.lnk"=- "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\ThreatFire\\Deinstalacja programu ThreatFire.lnk"=- "C:\\Users\\Zuza\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\ThreatFire\\ThreatFire.lnk"=- "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\ThreatFire\\ThreatFire.lnk"=- [-HKEY_CURRENT_USER\Software\Safer Networking Limited] [-HKEY_CURRENT_USER\Software\Symantec] [-HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}] [-HKEY_CURRENT_USER\Software\Zentimo\Drives\USB*VID_3538&PID_0054*1B82FFF5D89015\Volumes\**?*Volume{c084a884-8442-11df-8e0f-001966d302f4}*\AutoRun\Processes\OnAfterDeviceInsert\Process01]