Start
CloseProcesses:
HKU\S-1-5-21-2935849915-2414251437-2821027110-1001\...\MountPoints2: {1e394d65-1e5d-11ea-9337-8c164594f53f} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2935849915-2414251437-2821027110-1001\...\MountPoints2: {55d24426-f3c8-11eb-9392-8c164594f53f} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2935849915-2414251437-2821027110-1001\...\MountPoints2: {cbcd0552-9c28-11eb-9382-8c164594f53f} - "F:\HiSuiteDownLoader.exe"
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {403A4DE1-D6D0-4176-9316-0F437686DCE0} - \Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask -> No File <==== ATTENTION
Task: {625BF416-5CE7-4769-86D2-8F5FFEACB101} - \Lenovo\ImController\TimeBasedEvents\75a830d5-70be-4fe8-9488-5585d6a9a4ea -> No File <==== ATTENTION
Task: {630EAE3C-D442-4753-8B39-E78106BC8386} - \Lenovo\ImController\TimeBasedEvents\12b27909-72cc-49a1-bc85-cc0ef10145fd -> No File <==== ATTENTION
Task: {669FB4A3-7566-498A-AD6A-C777A1E75253} - \Lenovo\ImController\Lenovo iM Controller Monitor -> No File <==== ATTENTION
Task: {819C1161-9163-45F5-A449-4140352052F7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-02-09] (Google Inc -> Google Inc.)
Task: {86BF3218-085D-4831-95F7-EF7D86D683E0} - \Lenovo\ImController\TimeBasedEvents\b7d01b04-31b9-4b01-8227-bdae97aa7caa -> No File <==== ATTENTION
Task: {A0DC5C82-7A10-4939-B080-67D4FD3853F0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-02-09] (Google Inc -> Google Inc.)
Task: {A831A88E-8716-440C-82B7-9BC545413E17} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe (No File)
Task: {E645AE20-DEE6-4B0B-A51C-AC9556B301CF} - \Lenovo\ImController\TimeBasedEvents\8b7ac464-3617-4264-ba5a-90da06aed1b2 -> No File <==== ATTENTION
Task: {ECD6C756-959F-45BD-927F-E7950936D2CA} - \Lenovo\ImController\TimeBasedEvents\6a8afae6-60f0-4561-aa58-d95d194afe25 -> No File <==== ATTENTION
Task: {F859C873-C903-46FD-93E8-85F4253E6DBE} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> No File <==== ATTENTION
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
HKU\S-1-5-21-2935849915-2414251437-2821027110-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
SearchScopes: HKLM -> DefaultScope {D0EF7975-B66F-490C-86C6-E269E1C1B858} URL = hxxp://
www.bing.com/search?q={SearchTerms}&for ... TR&pc=LCTE
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://
www.bing.com/search?q={searchTerms}&FORM=IE8SRC
SearchScopes: HKLM -> {D0EF7975-B66F-490C-86C6-E269E1C1B858} URL = hxxp://
www.bing.com/search?q={SearchTerms}&for ... TR&pc=LCTE
SearchScopes: HKLM-x32 -> DefaultScope {D0EF7975-B66F-490C-86C6-E269E1C1B858} URL = hxxp://
www.bing.com/search?q={SearchTerms}&for ... TR&pc=LCTE
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://
www.bing.com/search?q={searchTerms}&FORM=IE8SRC
SearchScopes: HKLM-x32 -> {D0EF7975-B66F-490C-86C6-E269E1C1B858} URL = hxxp://
www.bing.com/search?q={SearchTerms}&for ... TR&pc=LCTE
SearchScopes: HKU\S-1-5-21-2935849915-2414251437-2821027110-1001 -> DefaultScope {D0EF7975-B66F-490C-86C6-E269E1C1B858} URL =
SearchScopes: HKU\S-1-5-21-2935849915-2414251437-2821027110-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://
www.bing.com/search?q={searchTerms}&src ... ORM=IESR02
FirewallRules: [{B0FD01B1-F9BA-4963-A71D-BB1C0C0A8857}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe => No File
FirewallRules: [{F3A29651-558F-4D6B-BA9D-F841F0C5E5B8}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe => No File
FirewallRules: [{03FBCC34-0377-4591-B5B6-FC1A5758C046}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe => No File
FirewallRules: [{76A3D43B-5131-43A8-91A1-27199C5BA71D}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe => No File
EmptyTemp:
End