23-07-17 20:33:04.272 [9292,9004]BPSvc:, 
23-07-17 20:33:04.273 [9292,9004]BPSvc:, СИСТЕМА "H:\Datastore\Programs\_Portable\IObit ASC Pro 16.5.0.237 Full Portable\App\IObitASC\ASCService.exe"
23-07-17 20:33:04.273 [9292,9004]BPSvc:, Ver 16:16.0.0.201,2022-08-19 10:49, Win:10.0.22621[real:10.0.22621],  x64, SystemUp:2023-07-17 19:14:47
23-07-17 20:33:06.280 [9292,9004]BPSvc:,  WTS Created ok.
23-07-17 20:33:06.280 [9292,9004]BPSvc:, WTS HandlerEx OK.
23-07-17 20:33:06.280 [9292,9004]BPSvc:, WTS Enum, 1, name:Services, user:, sid: 0, WTSDisconnected
23-07-17 20:33:06.280 [9292,9004]BPSvc:, WTS Enum, 2, name:Console, user:enabled2k, sid: 1, WTSActive
23-07-17 20:33:06.287 [9292,9004]BPSvc:, Explorer, NewSession[1]enabled2k, [logSame:False], sid:S-1-5-21-149648059-592167084-1509188699-1000
23-07-17 20:33:06.287 [9292,9004]BPSvc:, Exec: H:\Datastore\Programs\_Portable\IObit ASC Pro 16.5.0.237 Full Portable\App\IObitASC\smBootTime.exe /UpdateTaskschd
23-07-17 20:33:06.288 [9292,9364]BPSvc:, WatchExe, loop, found: firefox.exe[1,7800,parent:7780], 
23-07-17 20:33:06.327 [9292,9004]BPSvc:, WhiteList[05/29/2019] Count = 82
23-07-17 20:33:06.327 [9292,9004]BPSvc:, WhiteExeList[06/30/2020] Count = 14
23-07-17 20:33:06.327 [9292,9004]BPSvc:, UserWhiteList[no file] Count = 0
23-07-17 20:33:06.327 [9292,9004]BPSvc:, ie version:11.1.22621.0, def:9
23-07-17 20:33:06.369 [9292,9004]BPSvc:[1,enabled2k], TProtectIE: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"http://ru.msn.com/?ocid=U220DHP&pc=U220", LastPage:""
23-07-17 20:33:06.369 [9292,9004]BPSvc:[1,enabled2k], TProtectIE: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"{"DefaultScope":"{0633EE93-D776-472f-A0FF-E1416B8B2E3A}","{0633EE93-D776-472f-A0FF-E1416B8B2E3A}":{"DisplayName":"@ieframe.dll,-12512","URL":"http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC"}}", LastSearch:""
23-07-17 20:33:06.379 [9292,9004]BPSvc:[1,enabled2k], TProtectFF: New Profile Path "C:\Users\enabled2k\AppData\Roaming\Mozilla\Firefox\Profiles\k4mr27kp.dev-edition-default\" CA9422711AE1A81C

23-07-17 20:33:06.413 [9292,9004]BPSvc:[1,enabled2k], TProtectFF: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"startup=1", LastPage:""
23-07-17 20:33:06.413 [9292,9004]BPSvc:[1,enabled2k], TProtectFF: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"{"defaultengine":"Google","engine":{"id":"google@search.mozilla.orgdefault","_name":"Google","_isAppProvided":true,"_metaData":{"hideOneOffButton":false}}}", LastSearch:""
23-07-17 20:33:06.422 [9292,9004]BPSvc:[1,enabled2k], TProtectChrome: User Data Path_1 "C:\Users\enabled2k\AppData\Local\Google\Chrome\User Data"
23-07-17 20:33:06.422 [9292,9004]BPSvc:[1,enabled2k], TProtectChrome: Start, not have UserData [N/A]
23-07-17 20:33:06.459 [9292,9004]BPSvc:[1,enabled2k], TProtectChrome: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"", LastPage:""
23-07-17 20:33:06.459 [9292,9004]BPSvc:[1,enabled2k], TProtectChrome: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"", LastSearch:""
23-07-17 20:33:06.476 [9292,9004]BPSvc:[1,enabled2k], TProtectEdgeChrome: User Data Path_1 "C:\Users\enabled2k\AppData\Local\Microsoft\Edge\User Data"
23-07-17 20:33:06.476 [9292,9004]BPSvc:[1,enabled2k], TProtectEdgeChrome: Start, not have UserData [N/A]
23-07-17 20:33:06.541 [9292,9004]BPSvc:[1,enabled2k], TProtectEdgeChrome: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"", LastPage:""
23-07-17 20:33:06.541 [9292,9004]BPSvc:[1,enabled2k], TProtectEdgeChrome: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"", LastSearch:""
23-07-17 20:33:06.549 [9292,9004]BPSvc:[1,enabled2k], Default Browser: c:\program files\firefox developer edition\firefox.exe
23-07-17 20:33:06.550 [9292,9004]BPSvc:[1,enabled2k], Check Browser, default: IE[], Installed Browser:[ptIE], regFound: [ptIE]
23-07-17 20:33:06.550 [9292,9004]BPSvc:[1,enabled2k], Check Browser, new monitor: IE, Monitor:True
23-07-17 20:33:06.550 [9292,9004]BPSvc:[1,enabled2k], Check Browser, install to N/A: Firefox
23-07-17 20:33:06.550 [9292,9004]BPSvc:enabled2k, Session Driver_Startup:False, Add:True
23-07-17 20:33:06.550 [9292,9004]BPSvc:, AddRemove Startup Driver:0, ChangeInc:1
23-07-17 20:33:06.550 [9292,9004]BPSvc:, WatchExeCreate, Msg: [1:enabled2k,firefox.exe]
23-07-17 20:33:06.839 [9292,9004]BPSvc:[1,enabled2k], Watch RegRunChange, jump disable:Steam
23-07-17 20:33:06.839 [9292,9004]BPSvc:[1,enabled2k], Watch RegRunChange, jump disable:EADM
23-07-17 20:33:06.839 [9292,9004]BPSvc:[1,enabled2k], Watch RegRunChange[Type=11], NewCount=3
23-07-17 20:33:06.839 [9292,9004]BPSvc:[1,enabled2k], Watch RegRunChange[Type=12], NewCount=1
23-07-17 20:33:06.839 [9292,9004]BPSvc:[1,enabled2k], Watch RegRunChange[Type=13], NewCount=0
23-07-17 20:33:06.950 [9292,9004]BPSvc:[1,enabled2k], Watch RegSvcChange, Count=-1 to 692
23-07-17 20:33:11.477 [9292,9004]BPSvc:[1,enabled2k], Watch RegSvcChange, Add:AscRegistryFilter
23-07-17 20:33:11.478 [9292,9004]BPSvc:[1,enabled2k], Watch RegSvcChange, Add:AscFileFilter
23-07-17 20:33:11.496 [9292,9004]BPSvc:[1,enabled2k], Watch RegSvcChange, Count=692 to 694
23-07-17 20:33:12.059 [9292,2524]OnData: 4|TICK|
23-07-17 20:33:12.059 [9292,2524]OnData: 11|LoadSetForm|1|1|51|{DB9C7453-7830-4C6E-8D49-4670A21E3453}/HPClient16/1|
23-07-17 20:33:12.060 [9292,9004]BPSvc:[1,enabled2k], Default Browser: c:\program files\firefox developer edition\firefox.exe
23-07-17 20:33:12.062 [9292,9004]BPSvc:[1,enabled2k], Check Browser, default: IE[], Installed Browser:[ptIE], regFound: [ptIE]
23-07-17 20:35:13.803 [9292,8360]BPSvc:[1,enabled2k], (1) TProtectStartup: File foAdded, Name1:"C:\windows\system32\Tasks\ASC_SkipUac_enabled2k", Name2:"", Terminat:False
23-07-17 20:35:15.615 [9292,9004]BPSvc:[1,enabled2k], Watch TaskJob, filename="C:\windows\system32\Tasks\ASC_SkipUac_enabled2k"
23-07-17 20:35:15.615 [9292,9004]BPSvc:, Exec: H:\Datastore\Programs\_Portable\IObit ASC Pro 16.5.0.237 Full Portable\App\IObitASC\smBootTime.exe /AddAutoRun /3 /43003A005C00770069006E0064006F00770073005C00730079007300740065006D00330032005C005400610073006B0073005C004100530043005F0053006B00690070005500610063005F0065006E00610062006C006500640032006B00
23-07-17 20:42:04.152 [9292,9004]BPSvc:[1,enabled2k], Watch RegSvcChange, Add:WireGuardTunnel$nl.verge.GE.enabled2k
23-07-17 20:42:04.153 [9292,9004]BPSvc:[1,enabled2k], Watch RegStartup, type=14, name=WireGuardTunnel$nl.verge.GE.enabled2k, cmd=""C:\Program Files\WireGuard\wireguard.exe" /tunnelservice "C:\Program Files\WireGuard\Data\Configurations\nl.verge.GE.enabled2k.conf.dpapi""
23-07-17 20:42:04.153 [9292,9004]BPSvc:, Exec: H:\Datastore\Programs\_Portable\IObit ASC Pro 16.5.0.237 Full Portable\App\IObitASC\smBootTime.exe /AddAutoRun /2 /570069007200650047007500610072006400540075006E006E0065006C0024006E006C002E00760065007200670065002E00470045002E0065006E00610062006C006500640032006B00 /220043003A005C00500072006F006700720061006D002000460069006C00650073005C005700690072006500470075006100720064005C007700690072006500670075006100720064002E00650078006500220020002F00740075006E006E0065006C0073006500720076006900630065002000220043003A005C00500072006F006700720061006D002000460069006C00650073005C005700690072006500470075006100720064005C0044006100740061005C0043006F006E00660069006700750072006100740069006F006E0073005C006E006C002E00760065007200670065002E00470045002E0065006E00610062006C006500640032006B002E0063006F006E0066002E00640070006100700069002200 /5700690072006500470075006100720064002000540075006E006E0065006C003A0020006E006C002E00760065007200670065002E00470045002E0065006E00610062006C006500640032006B00
23-07-17 20:42:04.289 [9292,9004]BPSvc:[1,enabled2k], Watch RegSvcChange, Count=694 to 695
23-07-17 20:55:48.147 [9292,2524]OnData: 4|TICK|
23-09-29 16:09:18.121 [2420,5740]BPSvc:, 
23-09-29 16:09:18.122 [2420,5740]BPSvc:, СИСТЕМА "G:\Datastore\Programs\_Portable\IObit ASC Pro 16.5.0.237 Full Portable\App\IObitASC\ASCService.exe"
23-09-29 16:09:18.122 [2420,5740]BPSvc:, Ver 16:16.0.0.201,2022-08-19 10:49, Win:10.0.19045[real:10.0.19045],  x64, SystemUp:2023-09-29 15:54:43
23-09-29 16:09:20.135 [2420,5740]BPSvc:,  WTS Created ok.
23-09-29 16:09:20.135 [2420,5740]BPSvc:, WTS HandlerEx OK.
23-09-29 16:09:20.135 [2420,5740]BPSvc:, WTS Enum, 1, name:Services, user:, sid: 0, WTSDisconnected
23-09-29 16:09:20.135 [2420,5740]BPSvc:, WTS Enum, 2, name:Console, user:enabled2k, sid: 1, WTSActive
23-09-29 16:09:20.135 [2420,5740]BPSvc:, Explorer, NewSession[1]enabled2k, [logSame:False], sid:S-1-5-21-2906524980-3860680256-2964525690-1000
23-09-29 16:09:20.135 [2420,5740]BPSvc:, Exec: G:\Datastore\Programs\_Portable\IObit ASC Pro 16.5.0.237 Full Portable\App\IObitASC\smBootTime.exe /UpdateTaskschd
23-09-29 16:09:20.151 [2420,5740]BPSvc:, WhiteList[05/29/2019] Count = 82
23-09-29 16:09:20.151 [2420,5740]BPSvc:, WhiteExeList[06/30/2020] Count = 14
23-09-29 16:09:20.151 [2420,5740]BPSvc:, UserWhiteList[07/17/2023 20:33:08:000] Count = 0
23-09-29 16:09:20.151 [2420,5740]BPSvc:, ie version:11.789.19041.0, def:9
23-09-29 16:09:20.151 [2420,5740]BPSvc:[1,enabled2k], TProtectIE: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"https://google.com", LastPage:""
23-09-29 16:09:20.151 [2420,5740]BPSvc:[1,enabled2k], TProtectIE: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"{"DefaultScope":"{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}","{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}":{"DisplayName":"Яндекс","URL":"https://yandex.ru/search/?text={searchTerms}&clid=2233627"}}", LastSearch:""
23-09-29 16:09:20.151 [2420,5740]BPSvc:[1,enabled2k], TProtectFF: New Profile Path "C:\Users\enabled2k\AppData\Roaming\Mozilla\Firefox\Profiles\fms495tr.dev-edition-default\" CA9422711AE1A81C

23-09-29 16:09:20.167 [2420,5740]BPSvc:[1,enabled2k], TProtectFF: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"startup=1", LastPage:""
23-09-29 16:09:20.167 [2420,5740]BPSvc:[1,enabled2k], TProtectFF: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"{"defaultengine":"Google","engine":{"id":"google@search.mozilla.orgdefault","_name":"Google","_isAppProvided":true,"_metaData":{}}}", LastSearch:""
23-09-29 16:09:20.167 [2420,5740]BPSvc:[1,enabled2k], TProtectChrome: User Data Path_1 "C:\Users\enabled2k\AppData\Local\Google\Chrome\User Data"
23-09-29 16:09:20.167 [2420,5740]BPSvc:[1,enabled2k], TProtectChrome: Start, not have UserData [N/A]
23-09-29 16:09:20.167 [2420,5740]BPSvc:[1,enabled2k], TProtectChrome: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"", LastPage:""
23-09-29 16:09:20.167 [2420,5740]BPSvc:[1,enabled2k], TProtectChrome: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"", LastSearch:""
23-09-29 16:09:20.167 [2420,5740]BPSvc:[1,enabled2k], TProtectEdgeChrome: User Data Path_1 "C:\Users\enabled2k\AppData\Local\Microsoft\Edge\User Data"
23-09-29 16:09:20.167 [2420,5740]BPSvc:[1,enabled2k], TProtectEdgeChrome: Start, not have UserData [N/A]
23-09-29 16:09:20.167 [2420,5740]BPSvc:[1,enabled2k], TProtectEdgeChrome: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"", LastPage:""
23-09-29 16:09:20.167 [2420,5740]BPSvc:[1,enabled2k], TProtectEdgeChrome: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"", LastSearch:""
23-09-29 16:09:20.167 [2420,5740]BPSvc:[1,enabled2k], Default Browser: c:\program files\firefox developer edition\firefox.exe
23-09-29 16:09:20.167 [2420,5740]BPSvc:[1,enabled2k], Check Browser, default: IE[], Installed Browser:[ptIE], regFound: [ptIE]
23-09-29 16:09:20.167 [2420,5740]BPSvc:[1,enabled2k], Check Browser, new monitor: IE, Monitor:True
23-09-29 16:09:20.167 [2420,5740]BPSvc:[1,enabled2k], Check Browser, install to N/A: Firefox
23-09-29 16:09:20.167 [2420,5740]BPSvc:enabled2k, Session Driver_Startup:False, Add:True
23-09-29 16:09:20.167 [2420,5740]BPSvc:, AddRemove Startup Driver:0, ChangeInc:1
23-09-29 16:09:20.652 [2420,5740]BPSvc:[1,enabled2k], Watch RegRunChange[Type=11], NewCount=1
23-09-29 16:09:20.652 [2420,5740]BPSvc:[1,enabled2k], Watch RegRunChange[Type=12], NewCount=0
23-09-29 16:09:20.652 [2420,5740]BPSvc:[1,enabled2k], Watch RegRunChange[Type=13], NewCount=1
23-09-29 16:09:20.762 [2420,5740]BPSvc:[1,enabled2k], Watch RegSvcChange, Count=-1 to 678
23-09-29 16:09:25.354 [2420,5740]BPSvc:[1,enabled2k], Watch RegSvcChange, Add:AscRegistryFilter
23-09-29 16:09:25.354 [2420,5740]BPSvc:[1,enabled2k], Watch RegSvcChange, Add:AscFileFilter
23-09-29 16:09:25.370 [2420,5740]BPSvc:[1,enabled2k], Watch RegSvcChange, Count=678 to 680
23-09-29 16:09:26.433 [2420,1484]OnData: 4|TICK|
23-09-29 16:09:26.433 [2420,1484]OnData: 11|LoadSetForm|1|1|51|{DB9C7453-7830-4C6E-8D49-4670A21E3453}/HPClient16/1|
23-09-29 16:09:26.433 [2420,5740]BPSvc:[1,enabled2k], Default Browser: c:\program files\firefox developer edition\firefox.exe
23-09-29 16:09:26.449 [2420,5740]BPSvc:[1,enabled2k], Check Browser, default: IE[], Installed Browser:[ptIE], regFound: [ptIE]
23-10-28 12:48:56.331 [10796,4112]BPSvc:, 
23-10-28 12:48:56.331 [10796,4112]BPSvc:, СИСТЕМА "G:\Datastore\Programs\_Portable\IObit ASC Pro 16.5.0.237 Full Portable\App\IObitASC\ASCService.exe"
23-10-28 12:48:56.331 [10796,4112]BPSvc:, Ver 16:16.0.0.201,2022-08-19 10:49, Win:10.0.19045[real:10.0.19045],  x64, SystemUp:2023-10-27 20:12:47
23-10-28 12:48:58.336 [10796,4112]BPSvc:,  WTS Created ok.
23-10-28 12:48:58.336 [10796,4112]BPSvc:, WTS HandlerEx OK.
23-10-28 12:48:58.336 [10796,4112]BPSvc:, WTS Enum, 1, name:Services, user:, sid: 0, WTSDisconnected
23-10-28 12:48:58.336 [10796,4112]BPSvc:, WTS Enum, 2, name:Console, user:enabled2k, sid: 1, WTSActive
23-10-28 12:48:58.341 [10796,4112]BPSvc:, Explorer, NewSession[1]enabled2k, [logSame:False], sid:S-1-5-21-2906524980-3860680256-2964525690-1000
23-10-28 12:48:58.341 [10796,4112]BPSvc:, Exec: G:\Datastore\Programs\_Portable\IObit ASC Pro 16.5.0.237 Full Portable\App\IObitASC\smBootTime.exe /UpdateTaskschd
23-10-28 12:48:58.341 [10796,10928]BPSvc:, WatchExe, loop, found: firefox.exe[1,7216,parent:4964], 
23-10-28 12:48:58.366 [10796,4112]BPSvc:, WhiteList[05/29/2019] Count = 82
23-10-28 12:48:58.366 [10796,4112]BPSvc:, WhiteExeList[06/30/2020] Count = 14
23-10-28 12:48:58.366 [10796,4112]BPSvc:, UserWhiteList[07/17/2023 20:33:08:000] Count = 0
23-10-28 12:48:58.366 [10796,4112]BPSvc:, ie version:11.789.19041.0, def:9
23-10-28 12:48:58.370 [10796,4112]BPSvc:[1,enabled2k], TProtectIE: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"https://google.com", LastPage:""
23-10-28 12:48:58.370 [10796,4112]BPSvc:[1,enabled2k], TProtectIE: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"{"DefaultScope":"{0633EE93-D776-472f-A0FF-E1416B8B2E3A}","{0633EE93-D776-472f-A0FF-E1416B8B2E3A}":{"DisplayName":"@ieframe.dll,-12512","URL":"http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC"}}", LastSearch:""
23-10-28 12:48:58.372 [10796,4112]BPSvc:[1,enabled2k], TProtectFF: New Profile Path "C:\Users\enabled2k\AppData\Roaming\Mozilla\Firefox\Profiles\fms495tr.dev-edition-default\" CA9422711AE1A81C

23-10-28 12:48:58.372 [10796,4112]BPSvc:[1,enabled2k], TProtectFF: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"startup=1", LastPage:""
23-10-28 12:48:58.372 [10796,4112]BPSvc:[1,enabled2k], TProtectFF: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"{"defaultengine":"Google","engine":{"id":"google@search.mozilla.orgdefault","_name":"Google","_isAppProvided":true,"_metaData":{}}}", LastSearch:""
23-10-28 12:48:58.375 [10796,4112]BPSvc:[1,enabled2k], TProtectChrome: User Data Path_1 "C:\Users\enabled2k\AppData\Local\Google\Chrome\User Data"
23-10-28 12:48:58.375 [10796,4112]BPSvc:[1,enabled2k], TProtectChrome: Start, not have UserData [N/A]
23-10-28 12:48:58.376 [10796,4112]BPSvc:[1,enabled2k], TProtectChrome: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"", LastPage:""
23-10-28 12:48:58.376 [10796,4112]BPSvc:[1,enabled2k], TProtectChrome: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"", LastSearch:""
23-10-28 12:48:58.378 [10796,4112]BPSvc:[1,enabled2k], TProtectEdgeChrome: User Data Path_1 "C:\Users\enabled2k\AppData\Local\Microsoft\Edge\User Data"
23-10-28 12:48:58.378 [10796,4112]BPSvc:[1,enabled2k], TProtectEdgeChrome: Start, not have UserData [N/A]
23-10-28 12:48:58.378 [10796,4112]BPSvc:[1,enabled2k], TProtectEdgeChrome: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"", LastPage:""
23-10-28 12:48:58.378 [10796,4112]BPSvc:[1,enabled2k], TProtectEdgeChrome: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"", LastSearch:""
23-10-28 12:48:58.380 [10796,4112]BPSvc:[1,enabled2k], Default Browser: c:\program files\firefox developer edition\firefox.exe
23-10-28 12:48:58.380 [10796,4112]BPSvc:[1,enabled2k], Check Browser, default: IE[], Installed Browser:[ptIE], regFound: [ptIE]
23-10-28 12:48:58.380 [10796,4112]BPSvc:[1,enabled2k], Check Browser, new monitor: IE, Monitor:True
23-10-28 12:48:58.380 [10796,4112]BPSvc:[1,enabled2k], Check Browser, install to N/A: Firefox
23-10-28 12:48:58.380 [10796,4112]BPSvc:enabled2k, Session Driver_Startup:False, Add:True
23-10-28 12:48:58.380 [10796,4112]BPSvc:, AddRemove Startup Driver:0, ChangeInc:1
23-10-28 12:48:58.380 [10796,4112]BPSvc:, WatchExeCreate, Msg: [1:enabled2k,firefox.exe]
23-10-28 12:48:58.876 [10796,4112]BPSvc:[1,enabled2k], Watch RegRunChange[Type=11], NewCount=1
23-10-28 12:48:58.876 [10796,4112]BPSvc:[1,enabled2k], Watch RegRunChange[Type=12], NewCount=0
23-10-28 12:48:58.876 [10796,4112]BPSvc:[1,enabled2k], Watch RegRunChange[Type=13], NewCount=1
23-10-28 12:48:59.018 [10796,4112]BPSvc:[1,enabled2k], Watch RegSvcChange, Count=-1 to 690
23-10-28 12:49:01.628 [10796,4744]OnData: 4|TICK|
23-10-28 12:49:01.628 [10796,4744]OnData: 11|LoadSetForm|1|1|51|{DB9C7453-7830-4C6E-8D49-4670A21E3453}/HPClient16/1|
23-10-28 12:49:01.628 [10796,4112]BPSvc:[1,enabled2k], Default Browser: c:\program files\firefox developer edition\firefox.exe
23-10-28 12:49:01.631 [10796,4112]BPSvc:[1,enabled2k], Check Browser, default: IE[], Installed Browser:[ptIE], regFound: [ptIE]
23-10-28 12:49:03.526 [10796,4112]BPSvc:[1,enabled2k], Watch RegSvcChange, Add:AscRegistryFilter
23-10-28 12:49:03.526 [10796,4112]BPSvc:[1,enabled2k], Watch RegSvcChange, Add:AscFileFilter
23-10-28 12:49:03.548 [10796,4112]BPSvc:[1,enabled2k], Watch RegSvcChange, Count=690 to 692
23-12-16 19:22:23.917 [6676,8360]BPSvc:, 
23-12-16 19:22:23.927 [6676,8360]BPSvc:, СИСТЕМА "G:\Datastore\Programs\_Portable\IObit ASC Pro 16.5.0.237 Full Portable\App\IObitASC\ASCService.exe"
23-12-16 19:22:23.927 [6676,8360]BPSvc:, Ver 16:16.0.0.201,2022-08-19 10:49, Win:10.0.19045[real:10.0.19045],  x64, SystemUp:2023-12-16 08:16:08
23-12-16 19:22:25.939 [6676,8360]BPSvc:,  WTS Created ok.
23-12-16 19:22:25.939 [6676,8360]BPSvc:, WTS HandlerEx OK.
23-12-16 19:22:25.939 [6676,8360]BPSvc:, WTS Enum, 1, name:Services, user:, sid: 0, WTSDisconnected
23-12-16 19:22:25.939 [6676,8360]BPSvc:, WTS Enum, 2, name:Console, user:enabled2k, sid: 1, WTSActive
23-12-16 19:22:25.948 [6676,8360]BPSvc:, Explorer, NewSession[1]enabled2k, [logSame:False], sid:S-1-5-21-2906524980-3860680256-2964525690-1000
23-12-16 19:22:25.948 [6676,8360]BPSvc:, Exec: G:\Datastore\Programs\_Portable\IObit ASC Pro 16.5.0.237 Full Portable\App\IObitASC\smBootTime.exe /UpdateTaskschd
23-12-16 19:22:25.948 [6676,6048]BPSvc:, WatchExe, loop, found: firefox.exe[1,1636,parent:2852], 
23-12-16 19:22:26.028 [6676,8360]BPSvc:, WhiteList[05/29/2019] Count = 82
23-12-16 19:22:26.028 [6676,8360]BPSvc:, WhiteExeList[06/30/2020] Count = 14
23-12-16 19:22:26.028 [6676,8360]BPSvc:, UserWhiteList[07/17/2023 20:33:08:000] Count = 0
23-12-16 19:22:26.028 [6676,8360]BPSvc:, ie version:11.789.19041.0, def:9
23-12-16 19:22:26.029 [6676,8360]BPSvc:[1,enabled2k], TProtectIE: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"https://google.com", LastPage:""
23-12-16 19:22:26.029 [6676,8360]BPSvc:[1,enabled2k], TProtectIE: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"{"DefaultScope":"{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}","{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}":{"DisplayName":"Яндекс","URL":"https://yandex.ru/search/?text={searchTerms}&clid=2233627"}}", LastSearch:""
23-12-16 19:22:26.031 [6676,8360]BPSvc:[1,enabled2k], TProtectFF: New Profile Path "C:\Users\enabled2k\AppData\Roaming\Mozilla\Firefox\Profiles\fms495tr.dev-edition-default\" CA9422711AE1A81C

23-12-16 19:22:26.033 [6676,8360]BPSvc:[1,enabled2k], TProtectFF: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"startup=1", LastPage:""
23-12-16 19:22:26.033 [6676,8360]BPSvc:[1,enabled2k], TProtectFF: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"{"defaultengine":"Google","engine":{"id":"google@search.mozilla.orgdefault","_name":"Google","_isAppProvided":true,"_metaData":{}}}", LastSearch:""
23-12-16 19:22:26.034 [6676,8360]BPSvc:[1,enabled2k], TProtectChrome: User Data Path_1 "C:\Users\enabled2k\AppData\Local\Google\Chrome\User Data"
23-12-16 19:22:26.034 [6676,8360]BPSvc:[1,enabled2k], TProtectChrome: Start, not have UserData [N/A]
23-12-16 19:22:26.035 [6676,8360]BPSvc:[1,enabled2k], TProtectChrome: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"", LastPage:""
23-12-16 19:22:26.035 [6676,8360]BPSvc:[1,enabled2k], TProtectChrome: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"", LastSearch:""
23-12-16 19:22:26.037 [6676,8360]BPSvc:[1,enabled2k], TProtectEdgeChrome: User Data Path_1 "C:\Users\enabled2k\AppData\Local\Microsoft\Edge\User Data"
23-12-16 19:22:26.037 [6676,8360]BPSvc:[1,enabled2k], TProtectEdgeChrome: Start, not have UserData [N/A]
23-12-16 19:22:26.037 [6676,8360]BPSvc:[1,enabled2k], TProtectEdgeChrome: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"", LastPage:""
23-12-16 19:22:26.037 [6676,8360]BPSvc:[1,enabled2k], TProtectEdgeChrome: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"", LastSearch:""
23-12-16 19:22:26.038 [6676,8360]BPSvc:[1,enabled2k], Default Browser: c:\program files\firefox developer edition\firefox.exe
23-12-16 19:22:26.039 [6676,8360]BPSvc:[1,enabled2k], Check Browser, default: IE[], Installed Browser:[ptIE,ptChrome], regFound: [ptIE,ptChrome]
23-12-16 19:22:26.039 [6676,8360]BPSvc:[1,enabled2k], Check Browser, new monitor: IE, Monitor:True
23-12-16 19:22:26.039 [6676,8360]BPSvc:[1,enabled2k], Check Browser, install to N/A: Firefox
23-12-16 19:22:26.039 [6676,8360]BPSvc:[1,enabled2k], Check Browser, N/A try to install: Chrome
23-12-16 19:22:26.040 [6676,8360]BPSvc:[1,enabled2k], TProtectChrome: User Data Path_1 "C:\Users\enabled2k\AppData\Local\Google\Chrome\User Data"
23-12-16 19:22:26.040 [6676,8360]BPSvc:[1,enabled2k], TProtectChrome: Start, not have UserData [N/A]
23-12-16 19:22:26.041 [6676,8360]BPSvc:[1,enabled2k], TProtectChrome: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"", LastPage:""
23-12-16 19:22:26.041 [6676,8360]BPSvc:[1,enabled2k], TProtectChrome: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"", LastSearch:""
23-12-16 19:22:26.043 [6676,8360]BPSvc:[1,enabled2k], TProtectChrome: User Data Path_1 "C:\Users\enabled2k\AppData\Local\Google\Chrome\User Data"
23-12-16 19:22:26.043 [6676,8360]BPSvc:[1,enabled2k], Check Browser, new monitor: Chrome, Monitor:True
23-12-16 19:22:26.043 [6676,8360]BPSvc:enabled2k, Session Driver_Startup:False, Add:True
23-12-16 19:22:26.043 [6676,8360]BPSvc:, AddRemove Startup Driver:0, ChangeInc:1
23-12-16 19:22:26.043 [6676,8360]BPSvc:, WatchExeCreate, Msg: [1:enabled2k,firefox.exe]
23-12-16 19:22:26.543 [6676,8360]BPSvc:[1,enabled2k], Watch RegRunChange[Type=11], NewCount=2
23-12-16 19:22:26.543 [6676,8360]BPSvc:[1,enabled2k], Watch RegRunChange[Type=12], NewCount=0
23-12-16 19:22:26.543 [6676,8360]BPSvc:[1,enabled2k], Watch RegRunChange[Type=13], NewCount=1
23-12-16 19:22:26.656 [6676,8360]BPSvc:[1,enabled2k], Watch RegSvcChange, Count=-1 to 695
23-12-16 19:22:31.708 [6676,8360]BPSvc:[1,enabled2k], Watch RegSvcChange, Add:AscRegistryFilter
23-12-16 19:22:31.708 [6676,8360]BPSvc:[1,enabled2k], Watch RegSvcChange, Add:AscFileFilter
23-12-16 19:22:31.730 [6676,8360]BPSvc:[1,enabled2k], Watch RegSvcChange, Count=695 to 697
23-12-16 19:22:34.131 [6676,7852]OnData: 4|TICK|
23-12-16 19:22:34.132 [6676,7852]OnData: 11|LoadSetForm|1|1|51|{DB9C7453-7830-4C6E-8D49-4670A21E3453}/HPClient16/1|
23-12-16 19:22:34.132 [6676,8360]BPSvc:[1,enabled2k], Default Browser: c:\program files\firefox developer edition\firefox.exe
23-12-16 19:22:34.133 [6676,8360]BPSvc:[1,enabled2k], Check Browser, default: IE[], Installed Browser:[ptIE,ptChrome], regFound: [ptIE,ptChrome]
23-12-16 19:22:34.133 [6676,8360]BPSvc:[1,enabled2k], Check Browser, N/A try to install: Chrome
23-12-16 19:22:34.136 [6676,8360]BPSvc:[1,enabled2k], TProtectChrome: User Data Path_1 "C:\Users\enabled2k\AppData\Local\Google\Chrome\User Data"
23-12-16 19:22:34.136 [6676,8360]BPSvc:[1,enabled2k], TProtectChrome: Start, not have UserData [N/A]
23-12-16 19:22:34.136 [6676,8360]BPSvc:[1,enabled2k], TProtectChrome: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"", LastPage:""
23-12-16 19:22:34.137 [6676,8360]BPSvc:[1,enabled2k], TProtectChrome: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"", LastSearch:""
23-12-16 19:27:08.473 [6676,8360]BPSvc:[1,enabled2k], Watch RegSvcChange, Remove:zghsdiag
23-12-16 19:27:08.477 [6676,8360]BPSvc:[1,enabled2k], Watch RegSvcChange, Count=697 to 696
23-12-21 21:49:24.714 [5532,6432]BPSvc:, 
23-12-21 21:49:24.714 [5532,6432]BPSvc:, СИСТЕМА "D:\Datastore\Programs\_Portable\IObit ASC Pro 16.5.0.237 Full Portable\App\IObitASC\ASCService.exe"
23-12-21 21:49:24.714 [5532,6432]BPSvc:, Ver 16:16.0.0.201,2022-08-19 10:49, Win:10.0.19045[real:10.0.19045],  x64, SystemUp:2023-12-21 21:43:17
23-12-21 21:49:26.715 [5532,6432]BPSvc:,  WTS Created ok.
23-12-21 21:49:26.715 [5532,6432]BPSvc:, WTS HandlerEx OK.
23-12-21 21:49:26.715 [5532,6432]BPSvc:, WTS Enum, 1, name:Services, user:, sid: 0, WTSDisconnected
23-12-21 21:49:26.715 [5532,6432]BPSvc:, WTS Enum, 2, name:Console, user:User, sid: 1, WTSActive
23-12-21 21:49:26.720 [5532,6432]BPSvc:, Explorer, NewSession[1]User, [logSame:False], sid:S-1-5-21-236192108-2613549287-1177551634-1001
23-12-21 21:49:26.720 [5532,6432]BPSvc:, Exec: D:\Datastore\Programs\_Portable\IObit ASC Pro 16.5.0.237 Full Portable\App\IObitASC\smBootTime.exe /UpdateTaskschd
23-12-21 21:49:26.793 [5532,6432]BPSvc:, WhiteList[05/29/2019] Count = 82
23-12-21 21:49:26.793 [5532,6432]BPSvc:, WhiteExeList[06/30/2020] Count = 14
23-12-21 21:49:26.794 [5532,6432]BPSvc:, UserWhiteList[07/17/2023 20:33:08:000] Count = 0
23-12-21 21:49:26.794 [5532,6432]BPSvc:, ie version:11.789.19041.0, def:9
23-12-21 21:49:26.795 [5532,6432]BPSvc:[1,User], TProtectIE: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"http://go.microsoft.com/fwlink/?LinkId=625119&clocalename=ru-RU", LastPage:""
23-12-21 21:49:26.795 [5532,6432]BPSvc:[1,User], TProtectIE: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"{"DefaultScope":"{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}","{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}":{"DisplayName":"Яндекс","URL":"https://yandex.ru/search/?text={searchTerms}&clid=2233627"}}", LastSearch:""
23-12-21 21:49:26.798 [5532,6432]BPSvc:[1,User], TProtectFF: New Profile Path "C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qu1fote2.default-release\" 308046B0AF4A39CB

23-12-21 21:49:26.800 [5532,6432]BPSvc:[1,User], TProtectFF: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"startup=1", LastPage:""
23-12-21 21:49:26.800 [5532,6432]BPSvc:[1,User], TProtectFF: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"{"defaultengine":"Google","engine":{"id":"google@search.mozilla.orgdefault","_name":"Google","_isAppProvided":true,"_metaData":{"hideOneOffButton":false}}}", LastSearch:""
23-12-21 21:49:26.802 [5532,6432]BPSvc:[1,User], TProtectChrome: User Data Path_1 "C:\Users\User\AppData\Local\Google\Chrome\User Data"
23-12-21 21:49:26.802 [5532,6432]BPSvc:[1,User], TProtectChrome: Start, not have UserData [N/A]
23-12-21 21:49:26.803 [5532,6432]BPSvc:[1,User], TProtectChrome: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"", LastPage:""
23-12-21 21:49:26.803 [5532,6432]BPSvc:[1,User], TProtectChrome: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"", LastSearch:""
23-12-21 21:49:26.806 [5532,6432]BPSvc:[1,User], TProtectEdgeChrome: [114.0.1823.58-64]User Data Path_2 "C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\"
23-12-21 21:49:26.964 [5532,6432]BPSvc:[1,User], TProtectEdgeChrome: Read Page[N/A],[Crc fail], LastAllow:-1, NowPage:"restore_on_startup=5#13#11|restore_on_startup_migrated=1", LastPage:""
23-12-21 21:49:26.964 [5532,6432]BPSvc:[1,User], TProtectEdgeChrome: Read Search[N/A],[Crc fail], LastAllowSearch:-1, NowSearch:"{"id":"3","keyword":"bing.com","name":"Bing","search_url":"{bing:baseURL}search?q={searchTerms}&{bing:cvid}{bing:msb}{google:assistedQueryStats}"}", LastSearch:""
23-12-21 21:49:26.964 [5532,6432]BPSvc:[1,User], Default Browser: c:\program files\mozilla firefox\firefox.exe
23-12-21 21:49:26.966 [5532,6432]BPSvc:[1,User], Check Browser, default: Firefox[], Installed Browser:[ptIE,ptFirefox], regFound: [ptIE,ptFirefox]
23-12-21 21:49:26.966 [5532,6432]BPSvc:[1,User], Check Browser, new monitor: IE, Monitor:True
23-12-21 21:49:26.968 [5532,6432]BPSvc:[1,User], TProtectFF: New Profile Path "C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qu1fote2.default-release\" 308046B0AF4A39CB

23-12-21 21:49:26.968 [5532,6432]BPSvc:[1,User], Check Browser, new monitor: Firefox, Monitor:True
23-12-21 21:49:26.968 [5532,6432]BPSvc:[1,User], Check Browser, install to N/A: EdgeChrome
23-12-21 21:49:26.968 [5532,6432]BPSvc:User, Session Driver_Startup:False, Add:True
23-12-21 21:49:26.968 [5532,6432]BPSvc:, AddRemove Startup Driver:0, ChangeInc:1
23-12-21 21:49:27.313 [5532,6432]BPSvc:[1,User], Watch RegRunChange, jump disable:Discord
23-12-21 21:49:27.313 [5532,6432]BPSvc:[1,User], Watch RegRunChange[Type=11], NewCount=2
23-12-21 21:49:27.313 [5532,6432]BPSvc:[1,User], Watch RegRunChange[Type=12], NewCount=0
23-12-21 21:49:27.313 [5532,6432]BPSvc:[1,User], Watch RegRunChange[Type=13], NewCount=1
23-12-21 21:49:27.442 [5532,6432]BPSvc:[1,User], Watch RegSvcChange, Count=-1 to 755
23-12-21 21:49:31.883 [5532,6432]BPSvc:[1,User], Watch RegSvcChange, Add:AscRegistryFilter
23-12-21 21:49:31.883 [5532,6432]BPSvc:[1,User], Watch RegSvcChange, Add:AscFileFilter
23-12-21 21:49:31.901 [5532,6432]BPSvc:[1,User], Watch RegSvcChange, Count=755 to 757
23-12-21 21:49:33.116 [5532,5444]OnData: 4|TICK|
23-12-21 21:49:33.116 [5532,5444]OnData: 11|LoadSetForm|1|1|51|{DB9C7453-7830-4C6E-8D49-4670A21E3453}/HPClient16/1|
23-12-21 21:49:33.116 [5532,6432]BPSvc:[1,User], Default Browser: c:\program files\mozilla firefox\firefox.exe
23-12-21 21:49:33.118 [5532,6432]BPSvc:[1,User], Check Browser, default: Firefox[], Installed Browser:[ptIE,ptFirefox], regFound: [ptIE,ptFirefox]
23-12-21 21:53:24.194 [5532,720]BPSvc:[1,User], (1) TProtectFF: File foModified, Name1:"prefs.js", Name2:"", Terminat:False
23-12-21 21:53:24.197 [5532,720]BPSvc:[1,User], (2) TProtectFF: File foModified, Name1:"prefs.js", Name2:"", Terminat:False
23-12-21 21:53:26.008 [5532,6432]BPSvc:[1,User], TProtectFF: New Profile Path "C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qu1fote2.default-release\" 308046B0AF4A39CB

23-12-21 21:53:26.010 [5532,6432]BPSvc:[1,User], TProtectFF, [res=2], No UserPage:False , No UserSearch:False
23-12-21 21:53:26.010 [5532,6432]BPSvc:[1,User], TProtectFF, Same_Page:startup=1
23-12-21 21:53:26.010 [5532,6432]BPSvc:[1,User], TProtectFF, Same_Search:{"defaultengine":"Google","engine":{"id":"google@search.mozilla.orgdefault","_name":"Google","_isApp..
23-12-21 21:57:14.794 [5532,7796]BPSvc:[1,User], inc[3], Watch RegChange: id[2], group[0], code[1]
23-12-21 21:57:16.604 [5532,6432]BPSvc:[1,User], TProtectIE, [res=2], No UserPage:False , No UserSearch:False
23-12-21 21:57:16.604 [5532,6432]BPSvc:[1,User], TProtectIE, Same_Page:http://go.microsoft.com/fwlink/?LinkId=625119&clocalename=ru-RU
23-12-21 21:57:16.604 [5532,6432]BPSvc:[1,User], TProtectIE, Old_Search:{"DefaultScope":"{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}","{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}":{"DisplayName":"Яндекс","URL":"https://yandex.ru/search/?text={searchTerms}&clid=2233627"}}
23-12-21 21:57:16.604 [5532,6432]BPSvc:[1,User], TProtectIE, New_Search:{"DefaultScope":"{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}"}
23-12-21 21:57:16.604 [5532,6432]BPSvc:[1,User], TProtectIE: OnSearchChange, NowSearch:"{"DefaultScope":"{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}"}", OldSearch:"{"DefaultScope":"{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}","{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}":{"..
23-12-21 21:57:16.605 [5532,6432]BPSvc:, UserWhiteList[07/17/2023 20:33:08:000], NewCount = 0
23-12-21 21:57:16.605 [5532,6432]BPSvc:[1,User], ApiHook_LastLog[32] is null, LogSN:0, LogTime:00:00:00:000
23-12-21 21:57:16.606 [5532,6432]BPSvc:[1,User], Default Browser: c:\program files\mozilla firefox\firefox.exe
23-12-21 21:57:16.606 [5532,6432]BPSvc:[1,User], ChangeSearchStr Popup, Change Browser(IE is not working)
23-12-21 22:02:47.731 [5532,7796]BPSvc:[1,User], inc[4], Watch RegChange: id[7], group[11], code[1]
23-12-21 22:02:49.547 [5532,6432]BPSvc:[1,User], Watch RegRunChange, Type=11, Count=2
23-12-21 22:02:49.547 [5532,6432]BPSvc:[1,User], Watch RegRunChange, Remove:Viber
23-12-21 22:02:49.547 [5532,6432]BPSvc:[1,User], Watch RegRunChange[Type=11], NewCount=1
23-12-21 22:13:06.247 [5532,6432]BPSvc:[1,User], Watch RegSvcChange, Add:OODefragAgent
23-12-21 22:13:06.247 [5532,6432]BPSvc:[1,User], Watch RegStartup, type=14, name=OODefragAgent, cmd="D:\Datastore\Programs\_Portable\OODefragPortable\App\Defrag64\oodag.exe"
23-12-21 22:13:06.247 [5532,6432]BPSvc:, Exec: D:\Datastore\Programs\_Portable\IObit ASC Pro 16.5.0.237 Full Portable\App\IObitASC\smBootTime.exe /AddAutoRun /2 /4F004F004400650066007200610067004100670065006E007400 /44003A005C004400610074006100730074006F00720065005C00500072006F006700720061006D0073005C005F0050006F0072007400610062006C0065005C004F004F0044006500660072006100670050006F0072007400610062006C0065005C004100700070005C00440065006600720061006700360034005C006F006F006400610067002E00650078006500 /4F0026004F002000440065006600720061006700
23-12-21 22:13:06.327 [5532,6432]BPSvc:[1,User], Watch RegSvcChange, Count=757 to 758
23-12-21 22:13:32.096 [5532,5444]OnData: 4|TICK|
23-12-21 22:13:32.096 [5532,5444]OnData: 11|LoadSetForm|1|1|51|{DB9C7453-7830-4C6E-8D49-4670A21E3453}/HPClient16/1|
23-12-21 22:13:32.097 [5532,6432]BPSvc:[1,User], Default Browser: c:\program files\mozilla firefox\firefox.exe
23-12-21 22:13:32.098 [5532,6432]BPSvc:[1,User], Check Browser, default: Firefox[], Installed Browser:[ptIE,ptFirefox], regFound: [ptIE,ptFirefox]
23-12-21 22:13:56.553 [5532,7796]BPSvc:[1,User], inc[6], Watch RegChange: id[8], group[12], code[1]
23-12-21 22:13:56.553 [5532,1688]BPSvc:, 1|Pid:3536|Process:D:\Datastore\Programs\_Portable\OODefragPortable\App\Defrag64\oodag.exe|Path:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|OODefragTray
23-12-21 22:13:56.553 [5532,1688]BPSvc:, ApiHook_Notify[op], Last[32]: SN:0, Time:00:00:00:000, pid:0, exe:D:\Datastore\Programs\_Portable\OODefragPortable\App\Defrag64\oodag.exe, page:, search:
23-12-21 22:13:56.553 [5532,1688]BPSvc:, ApiHook_Notify[op], New[0]: SN:0, Time:22:13:56:553, pid:3536, exe:D:\Datastore\Programs\_Portable\OODefragPortable\App\Defrag64\oodag.exe, page:OODefragTray, search:
23-12-21 22:13:58.376 [5532,6432]BPSvc:[1,User], Watch RegRunChange, Type=12, Count=0
23-12-21 22:13:58.376 [5532,6432]BPSvc:[1,User], Watch RegRunChange[Type=12], NewCount=0
23-12-21 22:13:58.502 [5532,6432]BPSvc:[1,User], Watch RegSvcChange, Remove:OODefragAgent
23-12-21 22:13:58.503 [5532,6432]BPSvc:[1,User], Watch RegSvcChange, Count=758 to 757