1 \DrWebLwf 4 3 \Dr.Web Security Space 4 1 \Doctor Web 4 3 \Doctor Web 4 3 \Microsoft Antimalware 4 3 \Local\Mozilla\Firefox 4 3 \Roaming\Mozilla\Firefox 4 1 \Software\Classes\Local Settings\MuiCache 4 1 \Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify 4 1 \Software\Classes\Local Settings\Software\Microsoft\Windows\Shell 4 1 \Software\Microsoft\Direct3D\MostRecentApplication 4 1 \Software\Microsoft\DirectInput\MostRecentApplication 4 1 \Software\Microsoft\Internet Explorer\International\CpMRU 4 1 \Software\Microsoft\Internet Explorer\TypedUrls 4 1 \Software\Microsoft\Windows Mail 4 1 \Software\Microsoft\Windows NT\CurrentVersion\TaskManager 4 1 \Software\Microsoft\Windows\CurrentVersion\Action Center\Checks 4 1 \Software\Microsoft\Windows\CurrentVersion\Action Center\Providers\EventLog 4 1 \Software\Microsoft\Windows\CurrentVersion\Applets 4 1 \Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable 4 1 \Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder 4 1 \Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs 4 1 \Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU 4 1 \Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo 4 1 \Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage 4 1 \Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU 4 1 \Software\Microsoft\Windows\CurrentVersion\Explorer\Streams 4 1 \Software\Microsoft\Windows\CurrentVersion\Explorer\TrayNotify 4 1 \Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist 4 1 \Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached 4 1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\UpdateExeVolatile 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\PROVIDERS\Performance 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Superfetch 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics 4 0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kmixer 4 0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS 4 0 HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices 4 0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum 4 0 HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices 4 0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CMF 4 0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase 4 0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses 4 0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Diagnostics 4 0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\hivelist 4 0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nsi 4 0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCompatCache 4 0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCompatibility 4 0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters 4 0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Power 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Search 4 0 HKEY_LOCAL_MACHINE\SYSTEM\LastKnownGoodRecovery 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender 4 0 HKEY_LOCAL_MACHINE\SYSTEM\Software\Comodo 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\COMODO 4 0 \SOFTWARE\Agnitum 4 1 \Software\ChemTable Software\ 4 1 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet00 4 1 \Software\Microsoft\RestartManager 4 1 \Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32 4 1 \KasperskyLab 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Reliability Analysis 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\RNG 4 0 HKEY_LOCAL_MACHINE\SYSTEM\RNG 4 0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces 4 1 \Software\Microsoft\Windows\CurrentVersion\Ext\Stats 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SchedulingAgent 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM 4 1 \Windows NT\CurrentVersion\ProfileList\ 4 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform 4 1 \Software\Microsoft\Search Assistant\ 4 1 \SessionInformation\ 4 4 C:\RECYCLER 4 4 C:\$RECYCLE.BIN 4 4 C:\System Volume Information 4 4 C:\Windows\system32\config 4 4 C:\Windows\system32\LogFiles 4 4 C:\Windows\system32\SMI\Store\Machine 4 4 C:\Windows\system32\WDI 4 4 C:\Windows\system32\wbem 4 4 C:\Windows\system32\winevt\Logs 4 4 C:\Windows\Prefetch 4 4 C:\Windows\SoftwareDistribution 4 4 C:\Windows\winsxs 4 5 \Microsoft\Windows Live\Services\Cache 4 5 \Microsoft\Windows\Temporary Internet Files 4 5 \Microsoft\Windows\Cookies 4 5 \Microsoft\Search 4 5 \Microsoft\Network\Downloader 4 5 \Microsoft\RAC 4 5 \Microsoft\Windows Defender 4 5 \Microsoft\WER 4 5 \Agnitum\ 4 5 \COMODO\ 4 5 \Kaspersky Lab\ 4 5 \ChemTable Software\ 4 2 C:\pagefile.sys 4 0 HKEY_LOCAL_MACHINE\BCD00000000 4 0 HKEY_LOCAL_MACHINE\COMPONENTS 4 0 HKEY_LOCAL_MACHINE\Schema 4 0 HKEY_LOCAL_MACHINE\Drivers 4 0 HKEY_LOCAL_MACHINE\HARDWARE 4 0 HKEY_LOCAL_MACHINE\SAM 4 0 HKEY_LOCAL_MACHINE\SECURITY 4 4 C:\Boot 4 4 C:\ProgramData\Microsoft\Network\Downloader 4 4 C:\ProgramData\Microsoft\Windows\WER 4 4 C:\ProgramData\Microsoft\Search 4 4 C:\ProgramData\Microsoft\Debug 4 4 C:\WINDOWS\LastGood 4 4 C:\WINDOWS\Logs 4 4 C:\WINDOWS\Registration 4 5 \system32\CatRoot 4 5 \NTUSER.dat 4 4 \Microsoft\CryptnetUrlCache\Content 4 3 \WindowsUpdate.log 4 2 C:\Windows\System32\msiexec.exe 2 5 \Windows Sidebar 2