| Node |
Caption |
Command |
Description |
Location |
SettingID |
User |
| LAURA |
SearchProtection. |
"C:\Users\LAURA\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart. |
SearchProtection. |
HKU\S-1-5-21-2223729553-846640056-2650134759-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
LAURA\Claire. |
| LAURA |
IgfxTray. |
"C:\WINDOWS\system32\igfxtray.exe". |
IgfxTray. |
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
Public. |
| LAURA |
HotKeysCmds. |
"C:\WINDOWS\system32\hkcmd.exe". |
HotKeysCmds. |
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
Public. |
| LAURA |
Persistence. |
"C:\WINDOWS\system32\igfxpers.exe". |
Persistence. |
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
Public. |
| LAURA |
BtTray. |
"C:\Program Files (x86)\Bluetooth Suite\BtTray.exe". |
BtTray. |
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
Public. |
| LAURA |
BtvStack. |
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe". |
BtvStack. |
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
Public. |
| LAURA |
ACMON. |
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe. |
ACMON. |
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
Public. |
| LAURA |
BCSSync. |
"C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices. |
BCSSync. |
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
Public. |
| LAURA |
AdobeAAMUpdater-1.0. |
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe". |
AdobeAAMUpdater-1.0. |
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
Public. |
| LAURA |
RTHDVCPL. |
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s. |
RTHDVCPL. |
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
Public. |
| LAURA |
RtHDVBg. |
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX3. |
RtHDVBg. |
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
. |
Public. |