HKLM\...\Run: [] => [X] HKLM-x32\...\Run: [] => [X] Startup: C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3E822CF3E.lnk ShortcutTarget: 3E822CF3E.lnk -> C:\ProgramData\E3FC228E3.cpp (Newera Software) S2 Winmgmt; C:\ProgramData\3E822CF3E.zot [353792 2015-01-27] () C:\ProgramData\3E822CF3E.zot C:\ProgramData\E3FC228E3.cpp C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3E822CF3E.lnk