1Windows Registry Editor Version 5.00 2; Remove unexpected processes from autorun: 3; https://superuser.com/a/1314468/572069 4 5 6; All third-party schedules of Task Scheduler: 7; https://stackoverflow.com/a/334208/5951529 8; https://superuser.com/a/1213207/572069 9[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree]101112; Windows registry keys:13; https://msdn.microsoft.com/en-us/library/windows/desktop/aa376977(v=vs.85).aspx14[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]15"AceStream"=-16"CCleaner Monitoring"=-17"Discord"=-18"Docker for Windows"=-19"Kite"=-20"ManicTimeC34F57B2DA6E6758"=-21"Unified Remote V3"=-22"MP3 Skype Recorder"=-23"Rambox"=-24"Skype"=-25"SoftMiner"=-26"Synapse3"=-27"SyncManPath"=-28"Unified Remote V3"=-29"uTorrent"=-3031; Keys from Autoruns program:32[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run]33"Acrobat Assistant 8.0"=-34"chrome"=-35"RazerCortex"=-36"SunJavaUpdateSched"=-37"Wondershare Helper Compact.exe"=-3839; http://smallvoid.com/article/winnt-services-regedit.html40; [WARNING] Needs “dword” type; “dword:4” — service disabled:41; https://www.laptopmag.com/articles/create-reg-file-for-registry-hacks42; http://smallvoid.com/article/winnt-services-regedit.html#comment-4489643[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AdobeARMservice]44"Start"=dword:445[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AdobeFlashPlayerUpdateSvc]46"Start"=dword:447[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Apache]48"Start"=dword:449[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\com.docker.service]50"Start"=dword:451[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdate]52"Start"=dword:453[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdatem]54"Start"=dword:455[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SkypeUpdate]56"Start"=dword:457[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vmcompute]58"Start"=dword:459[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vmms]60"Start"=dword:4