Przed REMOVAL
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\eventlog\Kaspersky Event Log]

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\eventlog\Kaspersky Event Log\pure]
"EventMessageFile"=(REG_EXPAND_SZ):C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\safe_banking.dll


[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\038721B5-20668A9F]
"AppFullPath"=(REG_SZ):C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\avp.exe
"AppArgs"=(REG_SZ):-r
"PermittedLspCategories"=(REG_DWORD):-2147483644


[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\122F9800-20668A9F]
"AppFullPath"=(REG_SZ):C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan\kss.exe
"AppArgs"=(REG_SZ):-r
"PermittedLspCategories"=(REG_DWORD):-2147483644



PO REMOVAL

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\eventlog\Kaspersky Event Log]

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\eventlog\Kaspersky Event Log\pure]
"EventMessageFile"=(REG_EXPAND_SZ):C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\safe_banking.dll


[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\122F9800-20668A9F]
"AppFullPath"=(REG_SZ):C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan\kss.exe
"AppArgs"=(REG_SZ):-r
"PermittedLspCategories"=(REG_DWORD):-2147483644