| Node |
Caption |
Command |
Description |
Location |
SettingID |
User |
| MAMDOUH |
Dropbox. |
Dropbox.lnk. |
Dropbox. |
Startup. |
. |
MAMDOUH\Mamdouh. |
| MAMDOUH |
Power2GoExpress8. |
"C:\Program Files (x86)\CyberLink\Power2Go8\Power2GoExpress8.exe". |
Power2GoExpress8. |
HKU\S-1-5-21-1308612826-2611245119-4017301193-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
MAMDOUH\Mamdouh. |
| MAMDOUH |
Google Update. |
"C:\Users\Mamdouh\AppData\Local\Google\Update\GoogleUpdate.exe" /c. |
Google Update. |
HKU\S-1-5-21-1308612826-2611245119-4017301193-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
MAMDOUH\Mamdouh. |
| MAMDOUH |
iCloudServices. |
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe. |
iCloudServices. |
HKU\S-1-5-21-1308612826-2611245119-4017301193-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
MAMDOUH\Mamdouh. |
| MAMDOUH |
HP ENVY 4500 series (NET). |
"C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN3AQ2R68805X4:NW" -scfn "HP ENVY 4500 series (NET)" -AutoStart 1. |
HP ENVY 4500 series (NET). |
HKU\S-1-5-21-1308612826-2611245119-4017301193-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
MAMDOUH\Mamdouh. |
| MAMDOUH |
uTorrent. |
"C:\Users\Mamdouh\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED. |
uTorrent. |
HKU\S-1-5-21-1308612826-2611245119-4017301193-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
MAMDOUH\Mamdouh. |
| MAMDOUH |
Raptr. |
C:\PROGRA~2\Raptr\raptrstub.exe --startup. |
Raptr. |
HKU\S-1-5-21-1308612826-2611245119-4017301193-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
MAMDOUH\Mamdouh. |
| MAMDOUH |
AdobeAAMUpdater-1.0. |
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe". |
AdobeAAMUpdater-1.0. |
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
Public. |
| MAMDOUH |
SynTPEnh. |
%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe. |
SynTPEnh. |
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
Public. |
| MAMDOUH |
SysTrayApp. |
C:\Program Files\IDT\WDM\sttray64.exe. |
SysTrayApp. |
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
Public. |