Continuatuion of SEARCH.txt and at the end the esetscan.
SEARCH.txt Continued:
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{57DE7416-A3EB-47C8-B44D-72F79539A360}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImViewU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{5B1E73D3-F6DB-406E-AE7F-20FAB0AD4732}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImServU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{687F8E94-45D6-4685-A63D-1C7A140EF847}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImSpoolU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{697DF023-B24E-11D3-B57C-00105AA461D0}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\dten600.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{697DF027-B24E-11D3-B57C-00105AA461D0}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\dten600.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{697DF02B-B24E-11D3-B57C-00105AA461D0}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\dten600.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{6D587C7F-27A0-4416-A90D-FB337F9B406C}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImComUtlU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{7198EEC1-4364-4cd2-ABD0-A7914E032332}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImParserU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{798CBE35-B27D-11D3-B57C-00105AA461D0}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\dten600.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{7E58CC0F-BC50-11D3-855B-0050DA2761C4}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImViewU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{805FB5B9-6344-11D6-B7AF-005004C0C6BA}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImSuppU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{84566316-EC70-11D5-881D-0050DA2761C4}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImFeatU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{8BACC255-A3CF-4e27-BAF1-D531B1AE02FD}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImToolsU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{9401BFDA-2F5C-4978-8075-7D8AFEC3AEE5}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImFeatU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{995F48E8-131F-4630-9FBE-98D9DBDABB05}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImSpoolU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{A0C301D9-59A5-45EB-90E8-D60D8149F5A5}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImParserU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{A8D94870-BEA6-11D3-BB92-0050DA276194}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImSuppU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{A967E5D6-B0E1-11D3-B57C-00105AA461D0}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\dten600.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{B385A628-C100-11D3-BB95-0050DA276194}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImNotfyU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{BF1F5DE8-E9ED-421e-93EE-E0783D18AAF6}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImImprtU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{C697956A-8C70-4EBD-9CC1-92218BC296B2}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImFeatU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{C7681ACB-27AD-4025-8F53-643549159658}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImFeatU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{CB382C7A-8852-458A-8900-C456C96FDB8C}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImViewU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{CBF9925D-3C19-4F33-9DE4-446978645EBB}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImFeatU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{D5C040B6-64BE-4855-BB40-7D4DD98B093A}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImToolsU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{DA12A268-0ACB-11D4-859D-0050DA2761C4}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImFeatU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{E1B6DE2A-F997-11D3-BBDB-0050DA276194}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImImprtU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{E9BC70A8-D70C-11D3-BBAE-0050DA276194}\LocalServer32]
""=""C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe""
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{E9BC70A8-D70C-11D3-BBAE-0050DA276194}\VersionIndependentProgID]
""="IncrediMail.Kernel"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{EC8717B6-F660-11D3-ADE2-0050DA744DF1}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImImprtU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{EC8717C9-F660-11D3-ADE2-0050DA744DF1}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImImprtU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{F1B4B6F1-55D1-11d6-B7AD-005004C0C6BA}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImImprtU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{F648D80F-2409-4EDA-847D-8E820B03451F}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImServU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{F9F135B6-F421-4259-AB7E-33E37641AD3C}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImNotfyU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{FEBD6230-F4F6-4E79-89CD-4BEBDC4A96AE}\InprocServer32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImFeatU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{133483C3-5BAB-45DD-94EE-1857CB47C6E5}]
""="IIncrediMailImporter"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\AppID\{FCA7EB04-D708-11D3-BBAE-0050DA276194}]
""="IncrediMail"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\TypeLib\{00E677A7-A7A5-4819-9580-1681BE30E28E}\1.0\0\win32]
""="C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\TypeLib\{07A52AE8-B6F0-11D3-BB7E-0050DA276194}\1.0\0\win32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImParserU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\TypeLib\{0B9A0841-1EC3-11D5-B75C-005004C0C6BA}\1.0\0\win32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImFeatU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\TypeLib\{60BE6CEF-036C-4440-9847-7A32006DCF4B}\1.0\0\win32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImNotfy.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\TypeLib\{6D293D13-C375-11D3-BB98-0050DA276194}\1.0\0\win32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImSuppU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\TypeLib\{7E58CC01-BC50-11D3-855B-0050DA2761C4}\1.0\0\win32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImViewU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\TypeLib\{815F81B9-E268-489D-883A-B5BC5BED9F03}\1.0\HELPDIR]
""="C:\Program Files (x86)\IncrediMail\Bin\"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\TypeLib\{A967E5C4-B0E1-11D3-B57C-00105AA461D0}\1.0\0\win32]
""="C:\Program Files (x86)\IncrediMail\Bin\dten600.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\TypeLib\{C762F735-0863-4E91-B46F-3F6C303778FE}\1.0\0\win32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImJunkU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\TypeLib\{CB073674-BD1F-11D3-BB90-0050DA276194}\1.0\0\win32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImMangrU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\TypeLib\{F8984103-38B6-11D5-8725-0050DA2761C4}\1.0\0\win32]
""="C:\Program Files (x86)\IncrediMail\Bin\ImShExtU.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Clients\Mail\IncrediMail]
""="IncrediMail"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Clients\Mail\IncrediMail\Capabilities]
"ApplicationDescription"="IncrediMail"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Clients\Mail\IncrediMail\Protocols\mailto\DefaultIcon]
""="C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe,0"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Clients\Mail\IncrediMail\Shell\Open\Command]
""="C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\RegisteredApplications]
"IncrediMail"="SOFTWARE\Clients\Mail\IncrediMail\Capabilities"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{F87CE4B3-5E73-445A-9FAD-33736C38B352}"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|App=C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe|Name=IncrediMail|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{7CB0035A-ADE9-44F3-A764-82CFD8FA90EE}"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|App=C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe|Name=IncrediMail|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{94C225B7-5462-4D70-BF08-0D630E3B40BF}"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|App=C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe|Name=IncrediMail|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{F87CE4B3-5E73-445A-9FAD-33736C38B352}"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|App=C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe|Name=IncrediMail|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{7CB0035A-ADE9-44F3-A764-82CFD8FA90EE}"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|App=C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe|Name=IncrediMail|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{94C225B7-5462-4D70-BF08-0D630E3B40BF}"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|App=C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe|Name=IncrediMail|"
[HKEY_USERS\.DEFAULT\Software\IncrediMail]
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\Clients\Mail]
""="IncrediMail"
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\IncrediMail\Identities\{67B30E2F-D407-42E0-94B2-321DB2374BA4}\IMSys\{A71D1748-FEC9-43E2-8294-228D96CF1B59}]
"IPA"="-script_url www5l.incredimail.com/im/setup/201004211555/test/installer/setupscript_bc.cab -ROOT www5l.incredimail.com/im/setup/201004211555/test/installer/ -skip_dialog info -skip_dialog language -language english -product IncrediMail -msc 74123 -ffmsc 654654 -cluster 575 -report -au -ggmsc 333444"
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\IncrediMail\Identities\{67B30E2F-D407-42E0-94B2-321DB2374BA4}\SSCE]
"UserLexFiles"="C:\ProgramData\IncrediMail\Data\Lex\userdic.tlx,{DATA}\Lex\correct.tlx,private.tlx"
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\IncrediMail\Identities\{E8946668-D62D-4188-8C74-24458CA065EC}\IMSys\{A71D1748-FEC9-43E2-8294-228D96CF1B59}]
"IPA"="-script_url
http://www5l.incredimail.com/im/setup/2 ... ipt_bc.cab -ROOT
http://www5l.incredimail.com/im/setup/2 ... installer/ -skip_dialog info -skip_dialog language -product IncrediMail -ffmsc 12345"
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\IncrediMail\Identities\{E8946668-D62D-4188-8C74-24458CA065EC}\IMSys\{A7C6A0A8-CCC1-41C2-B74B-88A495077CFD}\7]
"ACDATA"="http://www.incredimail.com/app/?tag=page_incredigames_link_9"
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\IncrediMail\Identities\{E8946668-D62D-4188-8C74-24458CA065EC}\SSCE]
"MainLexPath"="C:\ProgramData\IncrediMail\Data\Lex"
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\24c3dc18_0]
""="{0.0.0.00000000}.{c1e8de0b-3961-48a6-9be3-55f2d0f880b4}|\Device\HarddiskVolume3\Program Files (x86)\IncrediMail\Bin\IncMail.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\75898fc1_0]
""="{0.0.0.00000000}.{c1e8de0b-3961-48a6-9be3-55f2d0f880b4}|\Device\HarddiskVolume3\Program Files (x86)\IncrediMail\Bin\ImNotfy.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\b80e2534_0]
""="{0.0.0.00000000}.{c1e8de0b-3961-48a6-9be3-55f2d0f880b4}|\Device\HarddiskVolume3\Users\Rick\AppData\Local\Temp\nss6356.tmp\MainOffer\incredimail_install_EN1033.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\feature_browser_emulation]
"IncrediMail_TSV4F34TN.exe"="11000"
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\ApplicationAssociationToasts]
"IncrediMail.Url.Mailto_mailto"="0"
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted]
"C:\Users\Rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3NPXELIL\incredimail_install
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted]
"C:\Users\Rick\AppData\Local\Temp\IncrediMail_MediaBar_2.exe"="1"
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted]
"C:\Users\Rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WBWNZTER\incredimail_install.exe"="1"
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted]
"C:\FRST\Quarantine\C\Program Files (x86)\IncrediMail\Bin\ImSetup.exe"="1"
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted]
"C:\Users\Rick\Downloads\IncrediMail_TSV3F3NBU.exe"="1"
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe.FriendlyAppName"="IncrediMail Application"
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe.ApplicationCompany"="IncrediMail, Ltd."
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe.FriendlyAppName"="IncrediMail Application"
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe.ApplicationCompany"="IncrediMail, Ltd."
[HKEY_USERS\S-1-5-18\Software\IncrediMail]
===================== Search result for "protector" ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ProtectorExe.EXE]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{96FBC13C-8214-4100-88E0-FF74D7A1CB4D}]
""="protector_dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{706A79C0-1AC4-4E25-B311-93B643C1E499}]
""="WinMsoIrmProtector Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{84798B8E-69F8-4846-9516-373C2996E2F7}]
""="ProtectorLib Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{84798B8E-69F8-4846-9516-373C2996E2F7}\VersionIndependentProgID]
""="protector_dll.ProtectorLib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B6FFEC3A-07F7-42D0-8829-B722F46DB533}\InprocServer32]
""="%systemroot%\system32\WinOpcIrmProtector.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FBA44040-BD27-4A09-ACC8-C08B7C723DCD}\ProgID]
""="ProtectorExe.ProtectorHost.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{17484B9D-89FA-484F-912E-017D06C41FE0}]
""="IProtectorLib7"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2212951C-1623-4095-906B-AC50B8F91016}]
""="IProtector2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{235317AD-6EF4-4209-9354-F88869E1A3BB}]
""="IProtectorLib5"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{315A0BBF-D55B-4FCE-833E-8BAA5B6344F6}]
""="IProtector11"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5D358B5C-3415-42BB-A606-E1089B674F41}]
""="IProtector7"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6EACF525-5F81-4381-9E46-DC316C39E0D2}]
""="IProtector6"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{91F39C2A-95E7-497A-A539-0AC715DC66D2}]
""="IProtector3"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9D932020-700E-4F0D-8446-2872ABD8B4FA}]
""="IProtectorLib3"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A45CDEEB-65F5-49AE-AA3E-9376F4806075}]
""="IProtector8"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BACAB2F3-7213-4865-96E9-B6B06BF49192}]
""="IProtectorLib8"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DD65ABB2-2628-425B-86F5-825E4A3D3AD9}]
""="IProtectorLib4"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectorExe.ProtectorHost]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectorExe.ProtectorHost\CurVer]
""="ProtectorExe.ProtectorHost.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ProtectorExe.ProtectorHost.1]
""="ProtectorHost Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\protector_dll.Protector]
""="Protector Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\protector_dll.Protector.1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\protector_dll.ProtectorLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\protector_dll.ProtectorLib\CurVer]
""="protector_dll.ProtectorLib.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\protector_dll.ProtectorLib.1]
""="ProtectorLib Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C7CB459A-7261-4AE6-A87A-17041EE98A40}\14.0]
""="protector_dllLib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C7CB459A-7261-4AE6-A87A-17041EE98A40}\16.0]
""="protector_dllLib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C7CB459A-7261-4AE6-A87A-17041EE98A40}\18.0]
""="protector_dllLib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6134CEA9-DD6E-495C-A0D1-4F232027D7D7}]
""="Protector Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6134CEA9-DD6E-495C-A0D1-4F232027D7D7}\VersionIndependentProgID]
""="protector_dll.Protector"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{706A79C0-1AC4-4E25-B311-93B643C1E499}]
""="WinMsoIrmProtector Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{84798B8E-69F8-4846-9516-373C2996E2F7}]
""="ProtectorLib Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{84798B8E-69F8-4846-9516-373C2996E2F7}\VersionIndependentProgID]
""="protector_dll.ProtectorLib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B6FFEC3A-07F7-42D0-8829-B722F46DB533}]
""="WinOpcIrmProtector Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FBA44040-BD27-4A09-ACC8-C08B7C723DCD}]
""="ProtectorHost Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FBA44040-BD27-4A09-ACC8-C08B7C723DCD}\VersionIndependentProgID]
""="ProtectorExe.ProtectorHost"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{17484B9D-89FA-484F-912E-017D06C41FE0}]
""="IProtectorLib7"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2212951C-1623-4095-906B-AC50B8F91016}]
""="IProtector2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{235317AD-6EF4-4209-9354-F88869E1A3BB}]
""="IProtectorLib5"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{315A0BBF-D55B-4FCE-833E-8BAA5B6344F6}]
""="IProtector11"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5D358B5C-3415-42BB-A606-E1089B674F41}]
""="IProtector7"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6EACF525-5F81-4381-9E46-DC316C39E0D2}]
""="IProtector6"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{91F39C2A-95E7-497A-A539-0AC715DC66D2}]
""="IProtector3"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9D932020-700E-4F0D-8446-2872ABD8B4FA}]
""="IProtectorLib3"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A45CDEEB-65F5-49AE-AA3E-9376F4806075}]
""="IProtector8"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{BACAB2F3-7213-4865-96E9-B6B06BF49192}]
""="IProtectorLib8"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DD65ABB2-2628-425B-86F5-825E4A3D3AD9}]
""="IProtectorLib4"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\AppID\ProtectorExe.EXE]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\AppID\{96FBC13C-8214-4100-88E0-FF74D7A1CB4D}]
""="protector_dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\TypeLib\{C7CB459A-7261-4AE6-A87A-17041EE98A40}\14.0]
""="protector_dllLib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\TypeLib\{C7CB459A-7261-4AE6-A87A-17041EE98A40}\16.0]
""="protector_dllLib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\TypeLib\{C7CB459A-7261-4AE6-A87A-17041EE98A40}\18.0]
""="protector_dllLib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDRM\Protectors]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-r..t-office-protectors_31bf3856ad364e35_none_51f9fa7dd061de2a]
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\MSDRM\Protectors]
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{6134CEA9-DD6E-495C-A0D1-4F232027D7D7}]
""="Protector Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{6134CEA9-DD6E-495C-A0D1-4F232027D7D7}\VersionIndependentProgID]
""="protector_dll.Protector"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{706A79C0-1AC4-4E25-B311-93B643C1E499}]
""="WinMsoIrmProtector Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{84798B8E-69F8-4846-9516-373C2996E2F7}]
""="ProtectorLib Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{84798B8E-69F8-4846-9516-373C2996E2F7}\VersionIndependentProgID]
""="protector_dll.ProtectorLib"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{B6FFEC3A-07F7-42D0-8829-B722F46DB533}]
""="WinOpcIrmProtector Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{FBA44040-BD27-4A09-ACC8-C08B7C723DCD}]
""="ProtectorHost Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{FBA44040-BD27-4A09-ACC8-C08B7C723DCD}\VersionIndependentProgID]
""="ProtectorExe.ProtectorHost"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{17484B9D-89FA-484F-912E-017D06C41FE0}]
""="IProtectorLib7"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{2212951C-1623-4095-906B-AC50B8F91016}]
""="IProtector2"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{235317AD-6EF4-4209-9354-F88869E1A3BB}]
""="IProtectorLib5"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{315A0BBF-D55B-4FCE-833E-8BAA5B6344F6}]
""="IProtector11"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{5D358B5C-3415-42BB-A606-E1089B674F41}]
""="IProtector7"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{6EACF525-5F81-4381-9E46-DC316C39E0D2}]
""="IProtector6"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{91F39C2A-95E7-497A-A539-0AC715DC66D2}]
""="IProtector3"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{9D932020-700E-4F0D-8446-2872ABD8B4FA}]
""="IProtectorLib3"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{A45CDEEB-65F5-49AE-AA3E-9376F4806075}]
""="IProtector8"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{BACAB2F3-7213-4865-96E9-B6B06BF49192}]
""="IProtectorLib8"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{DD65ABB2-2628-425B-86F5-825E4A3D3AD9}]
""="IProtectorLib4"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\AppID\ProtectorExe.EXE]
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\AppID\{96FBC13C-8214-4100-88E0-FF74D7A1CB4D}]
""="protector_dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\TypeLib\{C7CB459A-7261-4AE6-A87A-17041EE98A40}\14.0]
""="protector_dllLib"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\TypeLib\{C7CB459A-7261-4AE6-A87A-17041EE98A40}\16.0]
""="protector_dllLib"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\TypeLib\{C7CB459A-7261-4AE6-A87A-17041EE98A40}\18.0]
""="protector_dllLib"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Cryptography\Providers\Windows Client Key Protection Provider]
"SessionLockProtectorProxy"="feclient.dll"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Cryptography\Providers\Windows Client Key Protection Provider]
"SessionLockProtectorProxy"="feclient.dll"
[HKEY_USERS\S-1-5-21-2324462236-1183297055-1014908895-1001\SOFTWARE\AppDataLow\Software\Freecorder\toolbar\Settings\FeatureProtector]
====== End of Search ======
ESETSCAN
C:\Users\Rick\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.01\agent\stub_data\askrt_en.cab a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application