RogueKiller Anti-Malware V14.8.0.0 (x64) [Nov 17 2020] (Free) by Adlice Software mail : https://adlice.com/contact/ Website : https://adlice.com/download/roguekiller/ Operating System : Windows 10 (10.0.19042) 64 bits Started in : Normal mode User : Dorota [Administrator] Started from : C:\Program Files\RogueKiller\RogueKiller64.exe Signatures : 20201215_112755, Driver : Loaded Mode : Standard Scan, Delete -- Date : 2020/12/15 20:59:10 (Duration : 00:12:02) ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Delete ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ [PUP.Gen1 (Potentially Malicious)] HKEY_LOCAL_MACHINE\Software\simplitec -- -> Deleted [PUP.Popcorn (Potentially Malicious)] HKEY_USERS\S-1-5-21-530551183-1267474143-722841221-1001\Software\Popcorn Time -- -> Deleted [PUP.Popcorn (Potentially Malicious)] HKEY_USERS\S-1-5-21-530551183-1267474143-722841221-1001\Software\PopcornTime -- -> Deleted [PUM.Policies (Potentially Malicious)] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System|ConsentPromptBehaviorAdmin -- -> Replaced (2) [PUP.HackTool (Potentially Malicious)] AutoKMS -- %SystemRoot%\AutoKMS -> Deleted => AutoKMS.log -- C:\Windows\AutoKMS\AutoKMS.log -> Deleted [PUP.HackTool (Potentially Malicious)] KMSpico -- %ProgramFiles%\KMSpico -> Deleted => Keys.txt -- C:\PROGRA~1\KMSpico\TOKENS~1\Keys.txt -> Deleted => cache.dat -- C:\PROGRA~1\KMSpico\TOKENS~1\Windows\cache\cache.dat -> Deleted => cache -- C:\PROGRA~1\KMSpico\TOKENS~1\Windows\cache -> Deleted => data.dat -- C:\PROGRA~1\KMSpico\TOKENS~1\Windows\data.dat -> Deleted => pkeyconfig.xrm-ms -- C:\PROGRA~1\KMSpico\TOKENS~1\Windows\PKEYCO~1.XRM -> Deleted => tokens.dat -- C:\PROGRA~1\KMSpico\TOKENS~1\Windows\tokens.dat -> Deleted => Windows -- C:\PROGRA~1\KMSpico\TOKENS~1\Windows -> Deleted => TokensBackup -- C:\PROGRA~1\KMSpico\TOKENS~1 -> Deleted