PUP.TorrentSearch
*file
C:\Windows\Tasks\PED_Torrent_Search.job
C:\Windows\Tasks\Update Service for Torrent Search.job
C:\Windows\Tasks\Update Service for Torrent Search2.job
C:\Windows\System32\Tasks\PED_Torrent_Search
C:\Windows\System32\Tasks\Update Service for Torrent Search
C:\Windows\System32\Tasks\Update Service for Torrent Search2
C:\ProgramData\Torrent_Search_PED\Chromium.dll
C:\ProgramData\Torrent_Search_PED\f9MVAhy.dll
C:\ProgramData\Torrent_Search_PED\freebl3.dll
C:\ProgramData\Torrent_Search_PED\nspr4.dll
C:\ProgramData\Torrent_Search_PED\nss3.dll
C:\ProgramData\Torrent_Search_PED\nssutil3.dll
C:\ProgramData\Torrent_Search_PED\plc4.dll
C:\ProgramData\Torrent_Search_PED\plds4.dll
C:\ProgramData\Torrent_Search_PED\softokn3.dll
C:\ProgramData\Torrent_Search_PED\sqlite3.dll
*reg_key
HKLM\SOFTWARE\Classes\SOFTWARE\Classes\CLSID\{03AE1B7B-A9E7-4D5A-9D34-89999C31B659}
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6844740F-5EC8-4AA3-8C4C-3BD7F94BFD7F}
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9DB70871-1978-4D9F-8E63-5FD5C93C8350}
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C2F0A487-2176-47E0-A5A0-FE762082EC59}
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PED_Torrent_Search
*reg_val
HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted | C:\Program Files\Torrent Search\uninstall.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures | PED_Torrent_Search.job
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures | PED_Torrent_Search.job.fp
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures | Update Service for Torrent Search.job
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures | Update Service for Torrent Search.job.fp
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures | Update Service for Torrent Search2.job
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures | Update Service for Torrent Search2.job.fp
PUP.RegEasy
*file
C:\Users\{USERNAME}\Desktop\Registry Easy.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\registry easy\Registry Easy.lnk
C:\Program Files\Registry Easy\RegEasyCleaner.exe
*reg_key
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Registry Easy_is1
