VIRY.CZ

Prosím o kontrolu logu, objevují se mi vyskakovací okna, v online hrách mám vysoký ping a v internetovém prohlížeci se mi přesměrovávají otevřené okna. Přikládám RSIT log.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Admin at 2015-12-26 13:06:07
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 11 GB (11%) free of 92 GB
Total RAM: 2046 MB (11% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:06:53, on 26.12.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Users\Admin\AppData\Local\MyComGames\MyComGames.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\SpeedFan\speedfan.exe
C:\Users\Admin\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
E:\Instal\AtomTime Pro\AtomTime.EXE
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Admin.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=16194
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: 486f39d5be3842d1a5b143880bdcbae60069063 - {11111111-1111-1111-1111-110611901163} - C:\Program Files (x86)\HDQ-1.2cV03.01\HDQ-1.2cV03.01-bho.dll (file missing)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll
O4 - HKLM\..\Run: [AtomTime] "E:\Instal\AtomTime Pro\AtomTime.EXE"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [$Volumouse$] "E:\Instal\volumouse\volumouse.exe" /nodlg
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [MyComGames] "C:\Users\Admin\AppData\Local\MyComGames\MyComGames.exe" -autostart
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Admin\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Admin\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - Global Startup: speedfan.lnk = C:\Program Files (x86)\SpeedFan\speedfan.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files (x86)\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files (x86)\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) - MAGIX AG - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10870 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files (x86)\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"taskhost.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\Windows\System32\svchost.exe -k utcsvc
taskeng.exe {C65D7B3D-9A15-43D2-895E-1425852A4785}
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe"
C:\Windows\SysWOW64\IoctlSvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"E:\Instal\volumouse\volumouse.exe" /nodlg
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
WLIDSvcM.exe 2444
"C:\Users\Admin\AppData\Local\MyComGames\MyComGames.exe" -autostart
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files (x86)\SpeedFan\speedfan.exe"
"C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe"
szndesktop.exe default start
"C:\Users\Admin\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "1098195376-1273467492-613555872133066634-1488747301-421783193797792199-1235431687
"E:\Instal\AtomTime Pro\AtomTime.EXE"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-2495506510-2711303153-126332315-10001_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-2495506510-2711303153-126332315-10001 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="6040.0.1056240084\1702659554" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,12,23,51,61 --gpu-vendor-id=0x10de --gpu-device-id=0x0615 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.3788 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/14DaySingleProfile/*DomRel-Enable/enable/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Control/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterExe/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-PeerConnectionDTLS1.2/Control/ --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="6040.2.546448120\1558475474" --font-cache-shared-handle=2404 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/14DaySingleProfile/*DomRel-Enable/enable/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Control/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterExe/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-PeerConnectionDTLS1.2/Control/ --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="6040.3.1167987853\1605292670" --font-cache-shared-handle=2396 /prefetch:673131151
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/14DaySingleProfile/*DomRel-Enable/enable/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Control/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterExe/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-PeerConnectionDTLS1.2/Control/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="6040.5.1919339621\2071012291" --font-cache-shared-handle=5232 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="6040.6.1956972748\358890718" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --device-scale-factor=1 --font-cache-shared-handle=5740 --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe" /DisableUI
ctfmon.exe
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cachedir="C:\Users\Admin\AppData\Local\Steam\htmlcache" -steampid=2768 -buildid=1450127196 -steamid="0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-widevine-cdm --enable-direct-write
"C:\Program Files\Internet Explorer\IEXPLORE.EXE" -noframemerging about:blank
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5164 CREDAT:275457 /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/14DaySingleProfile/*DomRel-Enable/enable/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Control/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterExe/*SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-PeerConnectionDTLS1.2/Control/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="6040.10.1090004485\961422004" --font-cache-shared-handle=7044 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/14DaySingleProfile/*DomRel-Enable/enable/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Control/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterExe/*SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-PeerConnectionDTLS1.2/Control/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="6040.11.1711395476\75803909" --font-cache-shared-handle=1884 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/14DaySingleProfile/*DomRel-Enable/enable/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Control/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterExe/*SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-PeerConnectionDTLS1.2/Control/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="6040.12.1664062692\1045227957" --font-cache-shared-handle=7892 /prefetch:673131151
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\sppsvc.exe
"C:\Windows\system32\SearchFilterHost.exe" 0 860 864 872 65536 868
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"E:\Dokumenty\_Stažené soubory\RSITx64.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "--user-data-dir=C:\Users\Admin\AppData\Roaming\Seznam.cz\bin\..\data\libchinst\chromeprofile" "http://software.seznam.cz/listicka?browser=chrome#auto"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3108.0.1812689367\399589635" --user-data-dir="C:\Users\Admin\AppData\Roaming\Seznam.cz\bin\..\data\libchinst\chromeprofile" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,12,23,51,61 --gpu-vendor-id=0x10de --gpu-device-id=0x0615 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.3788 --user-data-dir="C:\Users\Admin\AppData\Roaming\Seznam.cz\bin\..\data\libchinst\chromeprofile" --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/CrossDevicePromo/28DaySingleProfile/*DomRel-Enable/enable/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/InstanceID/Enabled/IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/PP_Ethersuggest_A3_Stable_R8/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterExe/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-PeerConnectionDTLS1.2/Control/ --user-data-dir="C:\Users\Admin\AppData\Roaming\Seznam.cz\bin\..\data\libchinst\chromeprofile" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3108.1.370503157\857800941" --font-cache-shared-handle=2380 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/28DaySingleProfile/*DomRel-Enable/enable/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/PP_Ethersuggest_A3_Stable_R8/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterExe/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-PeerConnectionDTLS1.2/Control/ --user-data-dir="C:\Users\Admin\AppData\Roaming\Seznam.cz\bin\..\data\libchinst\chromeprofile" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3108.2.2125075960\1708177762" --font-cache-shared-handle=3232 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/28DaySingleProfile/*DomRel-Enable/enable/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/PP_Ethersuggest_A3_Stable_R8/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterExe/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-PeerConnectionDTLS1.2/Control/ --user-data-dir="C:\Users\Admin\AppData\Roaming\Seznam.cz\bin\..\data\libchinst\chromeprofile" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3108.3.1882512865\81521905" --font-cache-shared-handle=3284 /prefetch:673131151
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/28DaySingleProfile/*DomRel-Enable/enable/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/PP_Ethersuggest_A3_Stable_R8/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterExe/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-PeerConnectionDTLS1.2/Control/ --user-data-dir="C:\Users\Admin\AppData\Roaming\Seznam.cz\bin\..\data\libchinst\chromeprofile" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3108.7.70449398\1852232556" --font-cache-shared-handle=3768 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/28DaySingleProfile/*DomRel-Enable/enable/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/PP_Ethersuggest_A3_Stable_R8/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterExe/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-PeerConnectionDTLS1.2/Control/ --user-data-dir="C:\Users\Admin\AppData\Roaming\Seznam.cz\bin\..\data\libchinst\chromeprofile" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3108.8.1448376952\827335974" --font-cache-shared-handle=2584 /prefetch:673131151

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz"
prefs.js - "keyword.URL" - "http://us.search.yahoo.com/search?fr=ytff-comodo&p="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.235 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.66.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.66.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.235 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll


C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\
1435092085_xpi
AxFEKI@gmail.com
cookiemgr@jayapal.com
guiconfig@slosd.net
{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB}
{20291fcc-1471-46c8-8213-5911f5ce6d67}
{60984d64-3925-4636-a8c2-1b22a35f133f}
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12 2134656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611901163}]
HDQ-1.2cV03.01 - C:\Program Files (x86)\HDQ-1.2cV03.01\HDQ-1.2cV03.01-bho.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-10-30 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12 1725056]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-10-30 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-06-11 12503184]
"COMODO Internet Security"=C:\Program Files (x86)\COMODO\COMODO Internet Security\cistray.exe [2015-10-30 1427648]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"$Volumouse$"=E:\Instal\volumouse\volumouse.exe [2013-07-15 88576]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]
"MyComGames"=C:\Users\Admin\AppData\Local\MyComGames\MyComGames.exe [2015-12-25 4735944]
"cz.seznam.software.autoupdate"=C:\Users\Admin\AppData\Roaming\Seznam.cz\szninstall.exe [2015-11-17 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Admin\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-11-17 103080]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-12-15 3013712]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AtomTime"=E:\Instal\AtomTime Pro\AtomTime.EXE [2004-12-03 396316]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-10-30 596528]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2015-11-12 5565448]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2015-11-17 1062472]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
speedfan.lnk - C:\Program Files (x86)\SpeedFan\speedfan.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw64.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"vidc.tscc"=C:\Windows\SysWOW64\tsccvid64.dll
"vidc.tsc2"=C:\Windows\SysWOW64\tsc2_codec64.dll
"msacm.vorbis"=vorbis.acm

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2015-12-26 13:06:08 ----D---- C:\Program Files\trend micro
2015-12-26 13:06:07 ----D---- C:\rsit
2015-12-22 21:25:13 ----D---- C:\Users\Admin\AppData\Roaming\skszcecj
2015-12-22 16:10:17 ----D---- C:\Users\Admin\AppData\Roaming\ojqnxysp
2015-12-21 20:27:40 ----D---- C:\Users\Admin\AppData\Roaming\lyfzxxnt
2015-12-20 14:02:15 ----D---- C:\Users\Admin\AppData\Roaming\abiemfeb
2015-12-14 14:51:36 ----D---- C:\Users\Admin\AppData\Roaming\pzouphrg
2015-12-09 15:47:25 ----D---- C:\Users\Admin\AppData\Roaming\obbhrgkz
2015-12-09 14:43:33 ----A---- C:\Windows\SYSWOW64\tzres.dll
2015-12-09 14:43:33 ----A---- C:\Windows\system32\tzres.dll
2015-12-09 14:42:59 ----A---- C:\Windows\SYSWOW64\usp10.dll
2015-12-09 14:42:59 ----A---- C:\Windows\system32\usp10.dll
2015-12-09 14:42:57 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-12-09 14:42:57 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-12-09 14:42:57 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-12-09 14:42:57 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-12-09 14:42:57 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-12-09 14:42:57 ----A---- C:\Windows\system32\wuwebv.dll
2015-12-09 14:42:57 ----A---- C:\Windows\system32\wups2.dll
2015-12-09 14:42:57 ----A---- C:\Windows\system32\wups.dll
2015-12-09 14:42:57 ----A---- C:\Windows\system32\wudriver.dll
2015-12-09 14:42:57 ----A---- C:\Windows\system32\wucltux.dll
2015-12-09 14:42:57 ----A---- C:\Windows\system32\wuaueng.dll
2015-12-09 14:42:57 ----A---- C:\Windows\system32\wuauclt.exe
2015-12-09 14:42:57 ----A---- C:\Windows\system32\wuapp.exe
2015-12-09 14:42:57 ----A---- C:\Windows\system32\wuapi.dll
2015-12-09 14:42:57 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-12-09 14:42:57 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-12-09 14:42:41 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2015-12-09 14:42:41 ----A---- C:\Windows\SYSWOW64\kbdgeoqw.dll
2015-12-09 14:42:41 ----A---- C:\Windows\SYSWOW64\KBDAZEL.DLL
2015-12-09 14:42:41 ----A---- C:\Windows\SYSWOW64\KBDAZE.DLL
2015-12-09 14:42:41 ----A---- C:\Windows\system32\nlsbres.dll
2015-12-09 14:42:41 ----A---- C:\Windows\system32\kbdgeoqw.dll
2015-12-09 14:42:41 ----A---- C:\Windows\system32\KBDAZEL.DLL
2015-12-09 14:42:41 ----A---- C:\Windows\system32\KBDAZE.DLL
2015-12-09 14:42:27 ----A---- C:\Windows\system32\DWrite.dll
2015-12-09 14:42:26 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2015-12-09 14:42:26 ----A---- C:\Windows\system32\win32k.sys
2015-12-09 14:42:26 ----A---- C:\Windows\system32\user32.dll
2015-12-09 14:42:26 ----A---- C:\Windows\system32\FntCache.dll
2015-12-09 14:42:25 ----A---- C:\Windows\SYSWOW64\user32.dll
2015-12-09 14:42:22 ----A---- C:\Windows\system32\drivers\rmcast.sys
2015-12-09 14:42:21 ----A---- C:\Windows\SYSWOW64\wshrm.dll
2015-12-09 14:42:21 ----A---- C:\Windows\system32\wshrm.dll
2015-12-09 14:42:20 ----A---- C:\Windows\SYSWOW64\comsvcs.dll
2015-12-09 14:42:20 ----A---- C:\Windows\SYSWOW64\catsrvut.dll
2015-12-09 14:42:20 ----A---- C:\Windows\system32\comsvcs.dll
2015-12-09 14:42:20 ----A---- C:\Windows\system32\catsrvut.dll
2015-12-09 14:42:14 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-12-09 14:42:14 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-12-09 14:42:14 ----A---- C:\Windows\system32\iertutil.dll
2015-12-09 14:42:14 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-12-09 14:42:13 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-12-09 14:42:13 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-12-09 14:42:13 ----A---- C:\Windows\SYSWOW64\occache.dll
2015-12-09 14:42:13 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-12-09 14:42:13 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-12-09 14:42:13 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-12-09 14:42:13 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-12-09 14:42:13 ----A---- C:\Windows\system32\iernonce.dll
2015-12-09 14:42:13 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-12-09 14:42:13 ----A---- C:\Windows\system32\ie4uinit.exe
2015-12-09 14:42:12 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-12-09 14:42:12 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-12-09 14:42:12 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-12-09 14:42:12 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-12-09 14:42:12 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-12-09 14:42:11 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-12-09 14:42:11 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-12-09 14:42:11 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-12-09 14:42:11 ----A---- C:\Windows\system32\urlmon.dll
2015-12-09 14:42:11 ----A---- C:\Windows\system32\occache.dll
2015-12-09 14:42:11 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-12-09 14:42:11 ----A---- C:\Windows\system32\iedkcs32.dll
2015-12-09 14:42:10 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-12-09 14:42:10 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-12-09 14:42:10 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-12-09 14:42:10 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-12-09 14:42:10 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-12-09 14:42:10 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-12-09 14:42:10 ----A---- C:\Windows\system32\msfeeds.dll
2015-12-09 14:42:10 ----A---- C:\Windows\system32\dxtrans.dll
2015-12-09 14:42:09 ----A---- C:\Windows\system32\iesetup.dll
2015-12-09 14:42:09 ----A---- C:\Windows\system32\ieapfltr.dll
2015-12-09 14:42:08 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-12-09 14:42:08 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2015-12-09 14:42:08 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-12-09 14:42:08 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-12-09 14:42:08 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-12-09 14:42:08 ----A---- C:\Windows\system32\vbscript.dll
2015-12-09 14:42:08 ----A---- C:\Windows\system32\jsproxy.dll
2015-12-09 14:42:07 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-12-09 14:42:06 ----A---- C:\Windows\system32\dxtmsft.dll
2015-12-09 14:42:05 ----A---- C:\Windows\system32\mshtmled.dll
2015-12-09 14:42:05 ----A---- C:\Windows\system32\ieui.dll
2015-12-09 14:42:05 ----A---- C:\Windows\system32\ieframe.dll
2015-12-09 14:42:04 ----A---- C:\Windows\system32\webcheck.dll
2015-12-09 14:42:04 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-12-09 14:42:04 ----A---- C:\Windows\system32\ieUnatt.exe
2015-12-09 14:42:03 ----A---- C:\Windows\system32\jscript9diag.dll
2015-12-09 14:42:03 ----A---- C:\Windows\system32\jscript9.dll
2015-12-09 14:42:03 ----A---- C:\Windows\system32\jscript.dll
2015-12-09 14:42:02 ----A---- C:\Windows\system32\wininet.dll
2015-12-09 14:42:01 ----A---- C:\Windows\system32\msrating.dll
2015-12-09 14:42:01 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-12-09 14:42:00 ----A---- C:\Windows\system32\mshtml.dll
2015-12-09 14:39:06 ----A---- C:\Windows\SYSWOW64\els.dll
2015-12-09 14:39:06 ----A---- C:\Windows\system32\els.dll
2015-12-07 16:25:41 ----D---- C:\Users\Admin\AppData\Roaming\ybedevks
2015-12-05 23:24:05 ----D---- C:\Users\Admin\AppData\Roaming\sfpukllc
2015-12-05 19:06:00 ----D---- C:\Users\Admin\AppData\Roaming\lqhrchqm
2015-12-04 21:33:10 ----D---- C:\Users\Admin\AppData\Roaming\mncwyxni
2015-12-01 18:25:37 ----D---- C:\Users\Admin\AppData\Roaming\mtmnotzn
2015-11-28 16:33:32 ----D---- C:\Users\Admin\AppData\Roaming\qtaqjusa
2015-11-28 00:03:46 ----D---- C:\Users\Admin\AppData\Roaming\akhekdnc

======List of files/folders modified in the last 1 month======

2015-12-26 13:06:52 ----D---- C:\Windows\temp
2015-12-26 13:06:24 ----D---- C:\Windows\Prefetch
2015-12-26 13:06:08 ----RD---- C:\Program Files
2015-12-26 12:51:43 ----D---- C:\Users\Admin\AppData\Roaming\Seznam.cz
2015-12-26 12:46:20 ----D---- C:\Program Files (x86)\Steam
2015-12-26 12:46:20 ----D---- C:\Program Files (x86)\SpeedFan
2015-12-25 10:29:00 ----D---- C:\Windows\system32\config
2015-12-24 20:38:51 ----D---- C:\Users\Admin\AppData\Roaming\Skype
2015-12-24 20:35:57 ----SHD---- C:\Windows\Installer
2015-12-24 20:35:56 ----D---- C:\ProgramData\Skype
2015-12-24 20:35:55 ----SHD---- C:\Config.Msi
2015-12-24 20:35:44 ----RD---- C:\Program Files (x86)\Skype
2015-12-24 20:35:44 ----D---- C:\Program Files (x86)\Common Files
2015-12-23 10:49:58 ----D---- C:\Users\Admin\AppData\Roaming\.minecraft
2015-12-19 12:49:36 ----D---- C:\Users\Admin\AppData\Roaming\Mp3tag
2015-12-19 01:40:48 ----D---- C:\Windows\winsxs
2015-12-19 01:40:35 ----SD---- C:\Windows\SYSWOW64\GWX
2015-12-19 01:40:35 ----SD---- C:\Windows\system32\GWX
2015-12-19 01:40:16 ----SHD---- C:\System Volume Information
2015-12-12 14:32:55 ----RSD---- C:\Windows\assembly
2015-12-12 14:32:37 ----D---- C:\Windows
2015-12-12 14:30:27 ----D---- C:\Windows\Logs
2015-12-11 17:33:56 ----D---- C:\Windows\system32\catroot2
2015-12-10 08:29:02 ----D---- C:\Windows\rescache
2015-12-10 08:08:28 ----D---- C:\Windows\SysWOW64
2015-12-10 08:08:25 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-12-10 07:40:10 ----D---- C:\Windows\Microsoft.NET
2015-12-09 20:04:41 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-12-09 20:04:41 ----D---- C:\Windows\system32\cs-CZ
2015-12-09 20:04:41 ----D---- C:\Windows\System32
2015-12-09 20:04:40 ----RSD---- C:\Windows\Fonts
2015-12-09 20:04:39 ----D---- C:\Windows\system32\drivers
2015-12-09 20:04:39 ----D---- C:\Windows\inf
2015-12-09 20:04:39 ----D---- C:\Windows\ehome
2015-12-09 20:04:38 ----D---- C:\Windows\SYSWOW64\en-US
2015-12-09 20:04:38 ----D---- C:\Program Files\Internet Explorer
2015-12-09 20:04:37 ----D---- C:\Windows\system32\en-US
2015-12-09 20:04:37 ----D---- C:\Program Files (x86)\Internet Explorer
2015-12-09 17:52:21 ----D---- C:\ProgramData\Microsoft Help
2015-12-09 17:49:46 ----D---- C:\Program Files\Microsoft Silverlight
2015-12-09 17:49:46 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-12-09 17:46:33 ----D---- C:\Windows\system32\MRT
2015-12-09 17:38:40 ----A---- C:\Windows\system32\MRT.exe
2015-12-09 14:44:14 ----SD---- C:\ProgramData\Shared Space
2015-12-04 19:42:29 ----RD---- C:\Program Files (x86)
2015-12-04 19:42:02 ----D---- C:\Windows\Tasks
2015-12-01 20:09:01 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-11-29 13:57:27 ----D---- C:\Program Files (x86)\foobar2000
2015-11-28 23:24:09 ----D---- C:\Counter-Strike 1.6

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2012-10-18 213848]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2013-11-26 276576]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2012-12-29 28664]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-11-26 381440]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2015-08-05 21184]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2015-08-05 806032]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2015-08-05 45856]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2012-10-18 516096]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2015-08-05 105096]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2012-10-18 60416]
R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312};Power Control [2013/11/26 19:29:51]; \??\C:\Program Files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [2011-11-16 148976]
R2 ntk_PowerDVD;ntk_PowerDVD; \??\C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD_64.sys [2011-12-08 75248]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2015-11-12 34720]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-06-19 4065296]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-09-29 646248]
S3 a4qfxgbt;a4qfxgbt; C:\Windows\system32\drivers\a4qfxgbt.sys []
S3 asusgsb;ASUS Virtual Video Capture Device Driver; C:\Windows\system32\drivers\asusgsb.sys [2009-02-17 17792]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 netr7364;ASUS USB - ovladač karty pro bezdrátovou síť LAN pro systém Windows Vista; C:\Windows\system32\DRIVERS\netr7364.sys [2009-06-10 707072]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-11-01 82128]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-10-14 1433216]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-10-14 1773696]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files (x86)\COMODO\COMODO Internet Security\cmdagent.exe [2015-10-30 5542472]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2012-10-18 27136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2012-10-18 27136]
R2 Fabs;FABS - Helping agent for MAGIX media database; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [2015-09-12 1858048]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2015-11-12 2546184]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2015-11-12 417552]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-05-20 927520]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [2006-12-19 81920]
R2 Správce výběru OS;Aktivátor Správce výběru OS Acronis; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2010-07-07 2156952]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-10 269504]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2012-10-18 27136]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files (x86)\COMODO\COMODO Internet Security\cmdvirth.exe [2015-10-30 2265792]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2015-09-12 2702848]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-12-09 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-03-21 148080]
S3 NBService;NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [2008-04-08 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2008-01-22 275752]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2012-10-18 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-12-15 836176]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2012-10-18 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2012-10-18 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-11-26 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 CLHNServiceForPowerDVD;CLHNServiceForPowerDVD; C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [2011-12-08 83240]
S4 CyberLink PowerDVD 11.0 Monitor Service;CyberLink PowerDVD 11.0 Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [2011-12-07 75048]
S4 CyberLink PowerDVD 11.0 Service;CyberLink PowerDVD 11.0 Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe [2011-12-07 292136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-05-20 413128]

-----------------EOF-----------------

Přikládám ještě FRST log

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:25-12-2015
Ran by Admin (administrator) on PENTIUM-E6500 (26-12-2015 13:23:12)
Running from E:\Dokumenty\_Stažené soubory
Loaded Profiles: Admin (Available Profiles: Admin)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(COMODO) C:\Program Files (x86)\COMODO\COMODO Internet Security\cmdagent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Prolific Technology Inc.) C:\Windows\SysWOW64\IoctlSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(NirSoft) E:\Instal\volumouse\volumouse.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(MY.COM B.V.) C:\Users\Admin\AppData\Local\MyComGames\MyComGames.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Almico Software (www.almico.com)) C:\Program Files (x86)\SpeedFan\speedfan.exe
() C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
() C:\Users\Admin\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\Admin\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Naissan Innovations, LLC) E:\Instal\AtomTime Pro\AtomTime.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(COMODO) C:\Program Files (x86)\COMODO\COMODO Internet Security\cavwp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files (x86)\COMODO\COMODO Internet Security\cistray.exe [1427648 2015-10-30] (COMODO)
HKLM-x32\...\Run: [AtomTime] => E:\Instal\AtomTime Pro\AtomTime.EXE [396316 2004-12-03] (Naissan Innovations, LLC)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-10-30] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565448 2015-11-12] (LogMeIn Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2015-11-17] ()
HKU\S-1-5-21-2495506510-2711303153-126332315-1000\...\Run: [$Volumouse$] => E:\Instal\volumouse\volumouse.exe [88576 2013-07-15] (NirSoft)
HKU\S-1-5-21-2495506510-2711303153-126332315-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-2495506510-2711303153-126332315-1000\...\Run: [MyComGames] => C:\Users\Admin\AppData\Local\MyComGames\MyComGames.exe [4735944 2015-12-25] (MY.COM B.V.)
HKU\S-1-5-21-2495506510-2711303153-126332315-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Admin\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2015-11-17] ()
HKU\S-1-5-21-2495506510-2711303153-126332315-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Admin\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-11-17] ()
HKU\S-1-5-21-2495506510-2711303153-126332315-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3013712 2015-12-15] (Valve Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\speedfan.lnk [2013-11-26]
ShortcutTarget: speedfan.lnk -> C:\Program Files (x86)\SpeedFan\speedfan.exe (Almico Software (www.almico.com))

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\..\Interfaces\{10D69B5C-D21C-4DDA-A2C5-1B88144C6927}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{74F7DAEA-F708-44BA-BFF9-2148EF51B779}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{AFAA0D27-D024-4978-B5AE-C7AC3FA55D06}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2495506510-2711303153-126332315-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2495506510-2711303153-126332315-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/?clid=16194
SearchScopes: HKU\S-1-5-21-2495506510-2711303153-126332315-1000 -> ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKU\S-1-5-21-2495506510-2711303153-126332315-1000 -> {20207072-53AA-4C31-8CB6-F8186AC1DFF2} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-2495506510-2711303153-126332315-1000 -> {3FCC89C7-7579-4813-BC1D-E56BB9930E35} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_16194
SearchScopes: HKU\S-1-5-21-2495506510-2711303153-126332315-1000 -> {4A3CE131-99E5-405F-B826-B366A93DFD7B} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-2495506510-2711303153-126332315-1000 -> {637DE939-74FB-470E-84DD-548A1288CC00} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-2495506510-2711303153-126332315-1000 -> {772DDFAC-474B-437B-9F6B-3251CC07B928} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-2495506510-2711303153-126332315-1000 -> {A80D5FBE-45E3-480C-8D09-C9273F613FBA} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_16194
SearchScopes: HKU\S-1-5-21-2495506510-2711303153-126332315-1000 -> {C61DAF95-A41E-4C6D-8168-DAEEC8B55179} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_16194
SearchScopes: HKU\S-1-5-21-2495506510-2711303153-126332315-1000 -> {E689CED1-8502-438D-963A-B6BDB80D1173} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_16194
SearchScopes: HKU\S-1-5-21-2495506510-2711303153-126332315-1000 -> {FE38EE04-CB8E-4C07-AE05-8B4B346BCB63} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_16194
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: HDQ-1.2cV03.01 -> {11111111-1111-1111-1111-110611901163} -> C:\Program Files (x86)\HDQ-1.2cV03.01\HDQ-1.2cV03.01-bho.dll => No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-10-30] (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-10-30] (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default
FF Homepage: hxxp://www.seznam.cz
FF Keyword.URL: hxxp://us.search.yahoo.com/search?fr=ytff-comodo&p=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-10] ()
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-11-26] (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-10] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-10-30] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-10-30] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-11-26] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-05-20] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-05-20] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2495506510-2711303153-126332315-1000: @my.com/Games -> C:\Users\Admin\AppData\Local\MyComGames\NPMyComDetector.dll [2015-11-07] (My.com, Inc)
FF Extension: 20291fcc147146c882135911f5ce6d67 - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\{20291fcc-1471-46c8-8213-5911f5ce6d67} [2015-04-03] [not signed]
FF Extension: fun4us - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\AxFEKI@gmail.com [2015-04-04] [not signed]
FF Extension: cookiemgrjayapalcom - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\cookiemgr@jayapal.com [2015-04-04] [not signed]
FF Extension: guiconfigslosdnet - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\guiconfig@slosd.net [2015-04-22] [not signed]
FF Extension: IE Tab 2 (FF 3.6+) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} [2015-06-18]
FF Extension: Google Translator for Firefox - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\translator@zoli.bod.xpi [2015-07-08]
FF Extension: Ultra Finder - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\{60984d64-3925-4636-a8c2-1b22a35f133f} [2015-02-27] [not signed]
FF Extension: QuickSearch - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\Extensions\1435092085_xpi [2015-06-23] [not signed]
FF Extension: Video DownloadHelper - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2015-10-30]
FF Extension: Adblock Plus - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-09-24]
FF Extension: Seznam lištička - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2015-12-11]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\browser\defaults\preferences\my-prefs.js [2015-04-04] <==== ATTENTION (Points to *.cfg file)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (flmfagndkngjknjjcoejaihmibcfcjdh) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\flmfagndkngjknjjcoejaihmibcfcjdh [2015-04-12]
CHR Extension: (gomekmidlodglbbmalcneegieacbdmki) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-04]
CHR Extension: (Skype) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-12-18]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-28]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-10-12]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-14] (Microsoft Corporation)
S4 CLHNServiceForPowerDVD; C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [83240 2011-12-08] ()
R2 cmdAgent; C:\Program Files (x86)\COMODO\COMODO Internet Security\cmdagent.exe [5542472 2015-10-30] (COMODO)
S3 cmdvirth; C:\Program Files (x86)\COMODO\COMODO Internet Security\cmdvirth.exe [2265792 2015-10-30] (COMODO)
S4 CyberLink PowerDVD 11.0 Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [75048 2011-12-07] (CyberLink)
S4 CyberLink PowerDVD 11.0 Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe [292136 2011-12-07] (CyberLink)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2015-09-12] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2015-09-12] (MAGIX®) [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-11-12] (LogMeIn, Inc.)
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [275752 2008-01-22] (Nero AG)
R2 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
R2 Správce výběru OS; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2156952 2010-07-07] ()
S3 Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [836176 2015-12-15] (Valve Corporation) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 asusgsb; C:\Windows\System32\drivers\asusgsb.sys [17792 2009-02-17] (ASUSTeK Computer Inc.) [File not signed]
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [21184 2015-08-05] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [806032 2015-08-05] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [45856 2015-08-05] (COMODO)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [105096 2015-08-05] (COMODO)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-11-26] (Duplex Secure Ltd.)
R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312}; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [148976 2011-11-16] (CyberLink Corp.)
U3 a4qfxgbt; C:\Windows\System32\Drivers\a4qfxgbt.sys [0 ] (Advanced Micro Devices) <==== ATTENTION (zero byte File/Folder)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-26 13:24 - 2015-12-26 13:24 - 00000000 ____D C:\Users\Admin\AppData\Roaming\ffjvvnbo
2015-12-26 13:22 - 2015-12-26 13:23 - 00000000 ____D C:\FRST
2015-12-26 13:06 - 2015-12-26 13:07 - 00000000 ____D C:\rsit
2015-12-26 13:06 - 2015-12-26 13:06 - 00000000 ____D C:\Program Files\trend micro
2015-12-25 23:17 - 2015-12-25 23:17 - 00014848 ___SH C:\Users\Admin\Thumbs.db
2015-12-24 20:35 - 2015-12-24 20:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-22 21:25 - 2015-12-22 21:25 - 00000000 ____D C:\Users\Admin\AppData\Roaming\skszcecj
2015-12-22 16:10 - 2015-12-22 16:10 - 00000000 ____D C:\Users\Admin\AppData\Roaming\ojqnxysp
2015-12-21 20:27 - 2015-12-21 20:27 - 00000000 ____D C:\Users\Admin\AppData\Roaming\lyfzxxnt
2015-12-20 14:02 - 2015-12-20 14:02 - 00000000 ____D C:\Users\Admin\AppData\Roaming\abiemfeb
2015-12-14 14:51 - 2015-12-14 14:51 - 00000000 ____D C:\Users\Admin\AppData\Roaming\pzouphrg
2015-12-12 11:34 - 2015-12-12 11:34 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-12-09 15:47 - 2015-12-09 15:47 - 00000000 ____D C:\Users\Admin\AppData\Roaming\obbhrgkz
2015-12-09 14:43 - 2015-12-09 14:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-12-09 14:43 - 2015-12-09 14:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 04514816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 03215360 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-12-09 14:42 - 2015-12-09 14:42 - 03170304 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 02609152 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-12-09 14:42 - 2015-12-09 14:42 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-12-09 14:42 - 2015-12-09 14:42 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-12-09 14:42 - 2015-12-09 14:42 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-12-09 14:42 - 2015-12-09 14:42 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00709632 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00571392 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00387792 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2015-12-09 14:42 - 2015-12-09 14:42 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-12-09 14:42 - 2015-12-09 14:42 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-12-09 14:42 - 2015-12-09 14:42 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-12-09 14:42 - 2015-12-09 14:42 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-12-09 14:42 - 2015-12-09 14:42 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-12-09 14:42 - 2015-12-09 14:42 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-12-09 14:42 - 2015-12-09 14:42 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL
2015-12-09 14:42 - 2015-12-09 14:42 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2015-12-09 14:42 - 2015-12-09 14:42 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2015-12-09 14:42 - 2015-12-09 14:42 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll
2015-12-09 14:42 - 2015-12-09 14:42 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL
2015-12-09 14:42 - 2015-12-09 14:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-12-09 14:42 - 2015-11-10 01:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-12-09 14:42 - 2015-11-10 01:12 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-12-09 14:42 - 2015-11-08 23:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-12-09 14:42 - 2015-11-08 23:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-12-09 14:42 - 2015-10-08 20:13 - 00419928 _____ C:\Windows\SysWOW64\locale.nls
2015-12-09 14:42 - 2015-10-08 19:52 - 00419928 _____ C:\Windows\system32\locale.nls
2015-12-09 14:39 - 2015-12-09 14:39 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2015-12-09 14:39 - 2015-12-09 14:39 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2015-12-07 16:25 - 2015-12-07 16:25 - 00000000 ____D C:\Users\Admin\AppData\Roaming\ybedevks
2015-12-05 23:24 - 2015-12-05 23:24 - 00000000 ____D C:\Users\Admin\AppData\Roaming\sfpukllc
2015-12-05 19:06 - 2015-12-05 19:06 - 00000000 ____D C:\Users\Admin\AppData\Roaming\lqhrchqm
2015-12-04 21:33 - 2015-12-04 21:33 - 00000000 ____D C:\Users\Admin\AppData\Roaming\mncwyxni
2015-12-01 18:25 - 2015-12-01 18:25 - 00000000 ____D C:\Users\Admin\AppData\Roaming\mtmnotzn
2015-11-28 23:12 - 2015-11-28 23:12 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6 Fusion
2015-11-28 23:12 - 2015-11-28 23:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6 Fusion
2015-11-28 16:33 - 2015-11-28 16:33 - 00000000 ____D C:\Users\Admin\AppData\Roaming\qtaqjusa
2015-11-28 00:03 - 2015-11-28 00:03 - 00000000 ____D C:\Users\Admin\AppData\Roaming\akhekdnc

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-26 13:25 - 2013-11-26 19:25 - 01474832 _____ C:\Windows\system32\Drivers\sfi.dat
2015-12-26 13:22 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2015-12-26 13:09 - 2009-07-14 05:45 - 00036960 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-26 13:09 - 2009-07-14 05:45 - 00036960 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-26 13:08 - 2015-10-30 13:29 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-12-26 12:57 - 2015-11-21 16:09 - 00000000 ____D C:\Users\Admin\AppData\Local\Steam
2015-12-26 12:51 - 2014-05-31 22:09 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Seznam.cz
2015-12-26 12:47 - 2014-10-18 12:29 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-26 12:46 - 2015-11-21 16:02 - 00000000 ____D C:\Program Files (x86)\Steam
2015-12-26 12:46 - 2015-11-07 11:58 - 00000000 ____D C:\Users\Admin\AppData\Local\MyComGames
2015-12-26 12:46 - 2014-10-18 12:33 - 00000000 ____D C:\Users\Admin\AppData\Local\LogMeIn Hamachi
2015-12-26 12:46 - 2014-10-18 12:29 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-26 12:46 - 2013-11-26 19:52 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2015-12-26 12:46 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-25 23:17 - 2013-11-26 18:28 - 00000000 ____D C:\Users\Admin
2015-12-25 12:52 - 2014-06-27 21:52 - 00000000 ____D C:\Users\Admin\AppData\Local\CrashDumps
2015-12-24 20:38 - 2013-11-26 20:00 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Skype
2015-12-24 20:35 - 2014-03-17 16:13 - 00000000 ____D C:\Users\Admin\AppData\Local\Skype
2015-12-24 20:35 - 2014-03-17 16:12 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-12-24 20:35 - 2013-11-26 19:59 - 00000000 ____D C:\ProgramData\Skype
2015-12-23 10:49 - 2015-09-28 12:21 - 00000000 ____D C:\Users\Admin\AppData\Roaming\.minecraft
2015-12-19 12:49 - 2015-11-17 14:01 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Mp3tag
2015-12-19 01:40 - 2015-11-03 16:41 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-12-19 01:40 - 2015-11-03 16:41 - 00000000 ___SD C:\Windows\system32\GWX
2015-12-10 08:29 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2015-12-10 08:08 - 2015-10-30 13:29 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-12-10 08:08 - 2015-10-30 13:29 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-10 08:08 - 2015-10-30 13:29 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-12-09 20:06 - 2009-07-14 05:45 - 00499296 _____ C:\Windows\system32\FNTCACHE.DAT
2015-12-09 20:04 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2015-12-09 17:52 - 2013-11-26 19:47 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-09 17:50 - 2015-11-03 08:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-09 17:49 - 2015-11-03 08:33 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-09 17:49 - 2015-11-03 08:33 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-09 17:46 - 2013-11-26 22:02 - 00000000 ____D C:\Windows\system32\MRT
2015-12-09 17:38 - 2013-11-26 22:02 - 140158008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-12-09 14:44 - 2013-11-26 19:24 - 00000000 ___SD C:\ProgramData\Shared Space
2015-12-04 19:42 - 2014-10-18 12:29 - 00003948 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-04 19:42 - 2014-10-18 12:29 - 00003696 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-01 20:09 - 2010-11-21 10:27 - 00807734 _____ C:\Windows\system32\perfh005.dat
2015-12-01 20:09 - 2010-11-21 10:27 - 00187680 _____ C:\Windows\system32\perfc005.dat
2015-12-01 20:09 - 2009-07-14 06:13 - 01771438 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-29 13:57 - 2013-11-26 19:36 - 00000000 ____D C:\Program Files (x86)\foobar2000
2015-11-28 23:24 - 2014-11-22 15:37 - 00000000 ____D C:\Counter-Strike 1.6
2015-11-28 17:34 - 2014-03-27 17:25 - 00000000 ____D C:\Users\Admin\AppData\Local\ElevatedDiagnostics

==================== Files in the root of some directories =======

2014-10-18 12:43 - 2014-10-18 12:43 - 0009354 _____ () C:\Users\Admin\AppData\Roaming\msmmmjc.dat
2014-10-18 12:43 - 2015-01-25 11:42 - 0000028 _____ () C:\Users\Admin\AppData\Roaming\msrflf.dat
2014-06-26 18:29 - 2014-06-26 18:29 - 0004608 _____ () C:\Users\Admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-10-14 13:22 - 2015-10-14 13:22 - 0000102 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Files to move or delete:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat


Some files in TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\amiupdater1924.exe
C:\Users\Admin\AppData\Local\Temp\Opera_NI_stable.exe
C:\Users\Admin\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Admin\AppData\Local\Temp\sfareca00001.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-12-20 13:39

==================== End of FRST.txt ============================

Zdravim

Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner[C?].txt ). Ten mi sem zkopirujte.

Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu (cili Vlastni sken vsech disku) http://forum.viry.cz/viewtopic.php?f=29&t=144868 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

AdwCleaner log :

# AdwCleaner v5.026 - Logfile created 26/12/2015 at 20:27:26
# Updated 21/12/2015 by Xplode
# Database : 2015-12-23.1 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : Admin - PENTIUM-E6500
# Running from : E:\Dokumenty\_Stažené soubory\adwcleaner_5.026.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\CinemaP-1.9cV09.11
[-] Folder Deleted : C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}

***** [ Files ] *****

[-] File Deleted : C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
[-] File Deleted : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.bestpriceninja.com_0.localstorage
[-] File Deleted : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.bestpriceninja.com_0.localstorage-journal
[-] File Deleted : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_pstatic.bestpriceninja.com_0.localstorage
[-] File Deleted : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_pstatic.bestpriceninja.com_0.localstorage-journal
[-] File Deleted : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage
[-] File Deleted : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage-journal
[-] File Deleted : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_hdapp1008-a.akamaihd.net_0.localstorage
[-] File Deleted : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_hdapp1008-a.akamaihd.net_0.localstorage-journal
[-] File Deleted : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_cdn.reimagenetwork.com_0.localstorage
[-] File Deleted : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_cdn.reimagenetwork.com_0.localstorage-journal
[-] File Deleted : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_magix-music-maker-premium.en.softonic.com_0.localstorage
[-] File Deleted : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_magix-music-maker-premium.en.softonic.com_0.localstorage-journal
[-] File Deleted : C:\Users\Admin\AppData\Local\Temp\task.vbs

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : amiupdaterExd
[-] Task Deleted : amiupdaterExi

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\InstalledBrowserExtensions
[-] Key Deleted : HKCU\Software\YorkNewCin
[-] Key Deleted : HKCU\Software\HighDefAction
[-] Key Deleted : HKCU\Software\ArenaHD
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\Crossrider
[-] Key Deleted : HKLM\SOFTWARE\GlobalUpdate
[-] Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : HKLM\SOFTWARE\YorkNewCin
[-] Key Deleted : HKLM\SOFTWARE\HighDefAction
[-] Key Deleted : HKLM\SOFTWARE\ArenaHD
[-] Key Deleted : HKLM\SOFTWARE\CinemaP-1.9cV09.11
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9563BC59-9556-4805-8CD4-886781779D8D}
[-] Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : [x64] HKLM\SOFTWARE\YorkNewCin
[-] Key Deleted : [x64] HKLM\SOFTWARE\HighDefAction
[-] Key Deleted : [x64] HKLM\SOFTWARE\ArenaHD

***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [3807 bytes] ##########

Fajn, pokracujte s MBAM

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 26.12.2015
Čas skenování: 20:55
Protokol: mbam.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2015.12.26.04
Databáze rootkitů: v2015.12.26.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Admin

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 366341
Uplynulý čas: 22 min, 24 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 2
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\ffjvvnbo\colers.dll, , [6a42496069225fd7c841c05a7b864ab6],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\ffjvvnbo\colers.dll, , [6a42496069225fd7c841c05a7b864ab6],

Klíče registru: 265
PUP.Optional.CrossRider, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220622902263}, , [ddcf9415fb90a78f2c6b8f202fd513ed],
PUP.Optional.CrossRider, HKLM\SOFTWARE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.Sandbox.1, , [ddcf9415fb90a78f2c6b8f202fd513ed],
PUP.Optional.CrossRider, HKLM\SOFTWARE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.Sandbox, , [ddcf9415fb90a78f2c6b8f202fd513ed],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.Sandbox, , [ddcf9415fb90a78f2c6b8f202fd513ed],
PUP.Optional.CrossRider, HKLM\SOFTWARE\CLASSES\WOW6432NODE\486f39d5be3842d1a5b143880bdcbae60069063.Sandbox, , [ddcf9415fb90a78f2c6b8f202fd513ed],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.Sandbox.1, , [ddcf9415fb90a78f2c6b8f202fd513ed],
PUP.Optional.CrossRider, HKLM\SOFTWARE\CLASSES\WOW6432NODE\486f39d5be3842d1a5b143880bdcbae60069063.Sandbox.1, , [ddcf9415fb90a78f2c6b8f202fd513ed],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{22222222-2222-2222-2222-220622902263}, , [ddcf9415fb90a78f2c6b8f202fd513ed],
PUP.Optional.CrossRider, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{22222222-2222-2222-2222-220622902263}, , [ddcf9415fb90a78f2c6b8f202fd513ed],
Adware.Hicosmea, HKCU\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{33C53A50-F456-4884-B049-85FD643ECFED}, , [b6f63f6af299300601ef10a614eec040],
Adware.Hicosmea, HKCU\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{56FDF344-FD6D-11d0-958A-006097C9A090}, , [2d7faffa404b54e2d50816f2dc281ce4],
PUP.Optional.CrossRider, HKLM\SOFTWARE\HDQ-1.2cV03.01-nv, , [a00c65445338241223c676269f6456aa],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{907E8020-81FD-4A4A-B870-DFD510BB96BE}, , [bbf1f9b012792f0732d19409a85b8977],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\HDQ-1.2cV03.01, , [9616c2e77d0edd59c425fe9e867de31d],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\HDQ-1.2cV03.01-nv, , [f1bba0098506fd392ebb029ad92a60a0],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{907E8020-81FD-4A4A-B870-DFD510BB96BE}, , [e8c4535675167eb83fc4a3fa2fd4bf41],
PUP.Optional.PCSpeedUp, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PCSUUCDRV, , [3b715f4a5b30ab8b5e1dfdba57ac669a],
PUP.Optional.CrossRider, HKU\S-1-5-18\SOFTWARE\HDQ-1.2cV03.01-nv, , [7e2e1495c6c582b41d9d95069172f907],
PUP.Optional.CrossRider, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\HDQ-1.2cV03.01, , [53597732b5d6ca6ccdfc95062ad9946c],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\HDQ-1.2cV03.01-nv, , [5557852498f3e25419a1e5b671926997],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\APPDATALOW\SOFTWARE\HDQ-1.2cV03.01, , [6c401e8b7615ec4af3d6f3a8f60d9f61],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1050DD26-8559-4661-8BC4-DEFEA012F095}, , [36760d9c2e5dac8a558fc0dc13f0f30d],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{10EAF7B0-9F2D-4BCE-9CDB-A056F7E380E9}, , [55573277a8e3dc5a974ddac2a063c937],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{13771F2D-81FF-4DD2-8D90-4C11E981235B}, , [e2ca5e4bb0dbb58105dee1bb020122de],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{141DD92E-BDDB-401D-ABC6-78F2FD179475}, , [9418c2e73a517db9b82b5745e221c13f],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1492D9E1-F381-4C82-8BE7-F5BAEB8A8121}, , [416b1198cfbc38fee4ff2f6d917231cf],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{14E1EB57-6102-4558-89B0-813E5034EFC3}, , [36760a9f137894a2b92bff9d9a69d22e],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{160148B0-9E2E-4D9D-AFFC-1AB0B8BD2B96}, , [a80404a512799a9c5c87b6e6798a55ab],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1695B34E-FEAE-4F33-AB55-9CA677D373E0}, , [8a225950a9e28bab2fb50993669dfb05],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{16AA6128-8E2F-480A-94E0-CC25499FB292}, , [26862485810ae056f1f3eeaeef148878],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{17E59BA1-67B3-434C-AAA9-58BA6025D23F}, , [4d5f9118731872c407dc15879172d729],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{18305D58-8261-4C7A-AB3D-D2CAE548D2D6}, , [cbe13b6e513a90a6697b386450b33ac6],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1AD9AC84-32E1-4A34-ACC0-494624106510}, , [c3e966432368e155875d2b71986b8080],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1AE540A1-7C9E-4DFF-B6B4-1E14D666ED50}, , [8329affa0289f442d31096068a799d63],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1B26C330-5AC1-4EAF-A976-609E6B58D3B3}, , [5557367303883df98b59dac29b6853ad],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1B9F7175-182A-43B5-BD6E-56FC70FECC38}, , [8f1d03a691faf93dd0145b41a55ebf41],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1CCA2266-F1E0-41F4-97B8-F65210338CB2}, , [565682279af1191d37ac88143dc6c53b],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1CE60DCC-EC18-4849-A635-711B6E39DDB0}, , [4b6188212e5dbc7abb28dac2c53e13ed],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1D3B03C2-DED7-498D-84FA-1C22FD6B86FC}, , [b7f54960ee9d43f3da0a2478f11255ab],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1E2B6F61-715E-48DE-94C0-5F2ED8CFBE30}, , [6844ccdd58336acc489ccece3dc6d828],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1FBAA5D9-52C5-4617-B4B4-67AD39EA6DBC}, , [e0cc56535833c37320c37923c0438c74],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{207CE0AD-DC2D-4FB5-B143-259755F2958D}, , [3b71b0f98308bf7701e2f9a3659e02fe],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{20EE212C-F96B-4BAA-B3BC-93C5727E90A9}, , [9f0df1b8f2993303e103eeaefe057789],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21D4FADE-EBA7-4272-BFF0-31374DB27ED4}, , [981445641e6d3402aa3a7b21a95a52ae],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{23208C3E-F99C-4B89-B8CE-12DD7F94D341}, , [4666ecbd5437d46230b3fe9e8c77e719],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{236325D5-A311-46C9-BE3E-6BADF940A912}, , [28843e6bbad133034a99cece41c2cf31],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{25946A40-CDF6-4CF6-8936-777388882017}, , [29835257e2a92f0738ab1e7e56ad1ee2],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{25C85F2F-2AA6-4444-9968-51B739CB2E5E}, , [1b911099a2e9181e5d87108c82816898],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{260C830D-FFEB-4B19-99F3-952E5F3057FD}, , [1498d1d81e6d51e51ec6079512f125db],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2796A3B3-D34A-4414-8C70-7094754326C5}, , [f2bad4d54b404ceae8fbd7c5bb48718f],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{285BC9CD-2E0C-41DF-B2EA-A1D3EA5C1833}, , [7933ffaa8803f73f6c78d7c5c04344bc],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2BBFD76F-AE76-431F-B6CF-BFEAC0F9E25F}, , [eac250597a11261022c18b11eb1835cb],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2D1FD615-FE92-449B-9C60-6CE64341D08C}, , [4d5fa5044f3c1f17cd17326a877c59a7],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2E8C3506-1980-446D-8D2F-2EA5AFF1A9D2}, , [f9b36742cac161d51cc7d6c6c93a50b0],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{30139CE9-D9C2-46FD-8FC6-5D2835FE46FA}, , [0e9e8e1b1b70cf677e660597b54edc24],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{30D20BA6-A50A-419D-9D6C-10A2ADACF528}, , [f8b4e2c73c4f9c9af6edb1eb50b3da26],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3315DB7A-30DE-4766-B64A-52F5CD11B351}, , [96168d1ca4e7aa8cd60de4b8c142f010],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3399E82B-3FDD-430C-987A-F9FBD3589D92}, , [53595653cebd59ddc81b118ba261e21e],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{34D2AE73-B4B7-4F91-8337-B46179A4382A}, , [0ca0edbc385340f6677c3567dd2660a0],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{35361B3A-ED10-478C-9C95-3910D45AFB85}, , [6e3e6e3b0f7cb6801bc8bfdd897a0bf5],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{36D4D817-314B-4E56-BAD8-3E95FB299E8C}, , [ffadc6e33c4f122407dc0e8e0af915eb],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3C87F97D-4074-4DE2-867B-425B4EF4434C}, , [ebc12c7deba0f73f5b8813895ea5a55b],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3E28598B-A266-4527-9177-EE4B6B67D141}, , [05a7d7d269221f1724c03f5db84b8c74],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3EDC8E29-809E-4E9F-A072-7F70578D34FA}, , [decef6b3fb903ef8d80b7329748f34cc],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{43850B72-D826-49EC-BDCF-4AC1ECB6DA26}, , [f8b41297107b21152aba5d3f08fb8c74],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{438C5CA6-8DD7-4857-A8B5-3FB93D6BA6E2}, , [affdf4b5f19abe7843a1801cac576f91],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4395C581-A28D-4F04-A418-F3F4563B7DAC}, , [f4b88326f7941e18e8fbacf0a45fcf31],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{448B6585-8E73-4FEE-89FE-61461AC791BB}, , [b7f53772513a5adc875d504c8d76e31d],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{44C1425F-97FF-4320-A038-B5123EE412E1}, , [baf2a108cbc09d99ebf8e8b4ee15748c],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{450D1FB7-4E06-47CE-B0EC-90A7DCB151F2}, , [b0fc6e3b18736bcbe7fdcece08fb7090],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4660FDB9-200F-4DD5-92D3-A74A96F1E059}, , [b6f68029ff8c44f27a6924786d9602fe],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{479AF704-395D-4831-BE1D-DED218777242}, , [f3b9bdecdcaf2a0c7c68a7f5ba49d828],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{489291DB-1C95-400F-8F9D-D23BB81FA4F1}, , [b1fbc9e0e8a38fa7c023148803009070],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4995E38A-8393-4C2A-9555-F0B6DD7A3E73}, , [d1db0d9c7d0e89ad7c67940818eba35d],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4A2C01A5-8F6A-4FB1-8529-AD15E5863A6A}, , [882494150883fb3bf0f4910b93705da3],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4A65D10A-A4E6-47DD-ACE3-15488B10421F}, , [f8b45a4fe2a937ff11d2a3f9e221669a],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4A6AD9F3-423B-4E5A-81F1-B1DE5F2CCB84}, , [08a46e3b820938feb0335b41fc07b44c],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4AFEC24F-C3A0-4E63-8258-E826FF88353B}, , [bcf0f8b1414a5adcdb0904983cc71be5],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4C2B3511-96EE-437B-A83A-143D654BBD1E}, , [921a1a8fa8e369cdd80c4e4eb54e6e92],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4DC85851-2927-4F81-B16C-5CBFE2D75541}, , [822a1594c9c27bbb954e504c35cea759],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4E394A0A-2920-4297-9486-533325971AE6}, , [67459514305be55111d34f4dbf4448b8],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4E48C9D1-BFBA-49DB-8F93-E5CCD928CC6D}, , [cfdde5c4206b6bcb3aaabbe18c7709f7],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F55FBBC-B95E-48D3-91D9-7864765AA59B}, , [1498beebbad15cda5d87f7a57093d22e],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{501296CD-ED06-4128-9260-475DA32A8EFD}, , [109cf0b99af18aacb3312d6f1ee5de22],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{50509F75-E48C-4063-85BA-7B4AEE4954B5}, , [5755c4e57d0e41f5e3009804669de61a],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{508A9549-BB2F-43CF-80DC-33E97D5948C5}, , [edbf3d6cf9920531f5ee643813f06997],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{51E2EC9F-412C-49BE-8E77-8AFAE1935C31}, , [4765ffaaa0ebe650b82bf8a4fd06857b],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5356EF7D-AEBA-4E39-9DA4-B4B5E5AEB254}, , [78346247f4971c1aedf6a4f8649ff20e],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{556EDD9D-1AE5-455B-92EE-3FA714593D63}, , [07a536732f5cbd79eff5405ccd36e61a],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{59A4C4D9-D864-4432-9664-69659CB976D5}, , [5a52ddcc117a60d6855e4b5116eda759],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5A1732BC-7E66-485D-8BCD-74CE1A8022B8}, , [941800a9206b79bd0cd70a92e122ab55],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5A419E03-BC8F-4452-B773-E4DD2934C5B7}, , [e1cbb2f77714aa8c6c7766362bd8e41c],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5AE8EE75-21B1-440B-8E5D-CAA49CDCEE57}, , [2c80f2b7d8b322147a6a7824f70c22de],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5B13F4EE-9D4D-406B-832A-6219A1119BCA}, , [baf2d2d77c0fc76fb1332676cf34cb35],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5DD97AFC-E845-4A49-ADD0-8D4290A76758}, , [c4e83178f299ef472bb8415b7093e818],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{601A0537-C223-4E52-A271-3E122C4C18D5}, , [3c70d0d948436ec89b49702c000328d8],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6114CB5A-937B-4BE3-A9F8-C24FD93A2A64}, , [6e3ef0b9f5962016b2310e8ea65d619f],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{626B631F-84DA-4FC0-92BA-47AC67FF544D}, , [2983fcad8dfe8aac1ec6a8f44bb80ff1],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{634F6CFC-EDD8-4F4B-8BE0-441034F8DF2F}, , [4963baefb7d460d6cb18bede9172ba46],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{63AF8E74-AF67-4621-B844-1A2FCFC69322}, , [f7b58227662516205c877c20ed16be42],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{63D8D900-A927-4B2D-9D2F-C175E155F619}, , [3c70ddcc0487c175f9ea5c404bb8a55b],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6405B474-205B-44B9-AD76-C8D5367B2FC4}, , [c7e5beeb503b6ccaaa391389e81b8977],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{64077308-B2FF-4264-B6C9-FEA54EE9A7A0}, , [6b41ebbea2e9a4928460326a02011ce4],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{65280AC1-4056-4FC3-82BC-B058A268BA5E}, , [e4c8e1c891fa063004e005970ff4b44c],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{65CEEB18-7E4A-40C2-AB4B-10C475FACA6F}, , [4c60f1b8ccbf46f0796b9507e71c15eb],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6668B1B8-9E7D-4C3D-AB39-74AA44B4EC30}, , [a5075d4c800b76c00fd46c3051b2f808],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6842CECE-1142-476E-ABF7-AC1CC1FD7A97}, , [83292a7fb5d6e0567e6655474eb504fc],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B07661-6CFB-4023-A8F5-F8F1DD7C207F}, , [09a35455d4b70333b2321a82db28738d],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68C948C1-BB98-4227-9927-75F18BF36060}, , [88249910b8d3dc5a3fa5306cf70c12ee],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6C0F25BE-71C0-4E27-AFBB-665F8F76D3B3}, , [33798f1a7b10fb3bcd17990314ef3cc4],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6C123A40-1756-471A-A769-67E18C1BD36E}, , [04a81d8c5635ac8aebf9247800039868],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6DE3196B-F1EC-4D0B-8DDB-5C8DDEB13EF0}, , [3577f4b5dbb0f3430bd8e9b3030050b0],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6DF1E947-FABC-4877-AB5C-BCC0BBABA824}, , [6844a7026a210f2734b0534956ada858],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{706810E3-65FE-4676-A7F0-8C12D95C47FD}, , [604c75348dfe37ffdd06cece33d0748c],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{70ABF5C1-B748-432E-9B26-5D7B17814577}, , [c9e3c2e7a7e481b53ca76537798a867a],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{712819D2-49B3-404A-AC73-991946861144}, , [2f7d8227f4970135b034594314ef9f61],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7255BD10-7649-4639-B358-D997D2B8A640}, , [872518918ffcb77f14d03d5f4eb5728e],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7383B8E5-87D0-49EE-8024-A49ED3DAEEC0}, , [3a723d6c91fa280e9a4a3468986b946c],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7412368F-FD78-4156-AFC6-D4684DE69432}, , [604ce6c3f09b7cba2ab9cfcd1ce7db25],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{75B2F3B9-1B04-4CF7-BF6C-2240D832145A}, , [0d9f85241e6d96a0578cebb1966df907],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{77FC50A5-9D42-4010-BC63-1525B3F8D637}, , [73390c9dc2c9c67008dce2ba3cc705fb],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7806EBB5-1F90-4A42-9C68-B94E63BC179F}, , [46667138cdbebc7a1cc8762621e2f30d],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{78340806-E046-4436-802D-8217BCC2B91F}, , [7a32b3f697f41f171bc9fe9e12f1d42c],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{797747B1-D01C-4455-A21B-BE8044E6267B}, , [b2fa5b4e79128fa75f8433690ff44cb4],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7990BAAD-FF54-4F2E-8D6B-781848F26AC8}, , [5b518a1fdfacc6702db78814937002fe],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{799FC345-1A5E-477D-AE83-365991D616DC}, , [159738717c0fa88ed310bae2eb18f808],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7AB7A8A6-407C-4076-B1DE-3880CEA272FB}, , [cbe1b2f79deea393d80c514b3bc8d42c],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7AD6DDBF-E94E-4EDC-A837-20F281D19DF7}, , [8428acfd1774b185855fcbd1ba4902fe],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7D08CA35-8253-4F16-A55F-4767897CE8A4}, , [dad21990c6c5ad892eb57c20be456c94],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7DF5706F-CE7B-4800-A496-E28A84621F7D}, , [5b5150596526023415ceb6e642c125db],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7E5A7801-DA67-4902-B8B6-665A5CCC5C3E}, , [6e3ed0d9a5e6eb4b657f6d2f32d155ab],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{80DB6D54-1AB5-4703-8AD7-56C51B14FBC0}, , [cae22c7d3f4c053190531389f40f7d83],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{81F52364-3623-4218-984C-F47AAA64BBE7}, , [199336734c3f3204cb19e0bcf60d2fd1],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{82112C39-10D4-4F9D-87E1-5EEAE0C9C4AD}, , [a606d1d895f643f3c81c0993a06335cb],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{82FF73B6-28C2-4084-9F78-1C76CE105B88}, , [f1bbe0c99fec9b9b677d821a976c2dd3],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{840C916A-157E-479F-A796-E66C209CA6DD}, , [3775ffaa4f3c63d3ba2abddf4bb8dc24],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{84789AE7-8F5B-40BA-9A31-F1D9BF6C1B9C}, , [b8f40b9e751638fec221980411f26f91],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8606F35D-61DC-4AFD-B9BB-524314363DA0}, , [307cc0e93b5042f4b52ec4d8d62d8e72],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{86081EB3-9EB3-4918-80D3-534E3F73B740}, , [614b03a6b5d6053124bf3e5ece35b050],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{88B100E5-F444-4F1E-AD17-A7F7DE48F0C6}, , [b6f6cddc5932eb4b1bc95646da29758b],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8928E4C6-3DC2-42B6-895F-F31AC8BABE5E}, , [1a9224858a01053111d3b1ebe41fdc24],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8A81A3AE-E93E-4E1B-AEA3-BF4E18837891}, , [eac27732bccf93a38361d0cc17eced13],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8D98FE04-FBC6-4CF7-A8A8-714A25168871}, , [7e2eb3f6bbd077bf766ebce07f84eb15],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{907E8020-81FD-4A4A-B870-DFD510BB96BE}, , [04a88d1c216ab185934faaf2d62daa56],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{925304E6-576C-4F81-B880-CD19C2E0325D}, , [f4b82d7cb8d3a492f0f345573dc642be],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{927DEBBF-4AC5-4C80-AE24-89B13A2AED32}, , [d5d7feabfc8f74c206ddfca0cc376997],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{93884DFC-87F4-4037-9A94-BA673C20D9C5}, , [d5d7fbae77143ff7e6fe920a5ea5a35d],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{94BDB155-9155-46D9-8146-1378172DC09D}, , [3379723757342115e3019ffd7390c43c],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{951913BA-78A6-4963-B18A-F9F6E39CC885}, , [e1cbcddc632874c203e0bce05ea5946c],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{964F9A7B-E429-4032-8CE7-5A4F63A63FDE}, , [5b510b9e95f664d2a53f7b21f80bf010],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9755866D-206E-4ADD-95D2-33CC95CBFA17}, , [812b8e1b137888ae1bc92c700ff435cb],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{97D541F2-B7B0-4D70-8F8A-91B5C3E67E3F}, , [228abbeed7b493a3a043f3a9fc0739c7],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{98139B3E-C95C-4CF8-9520-9962EAE66984}, , [0ca02f7a2665c670a24114887291d729],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{98EC1016-C178-47A8-90F1-9294F9B650B7}, , [a20a71380b8065d1f8ec8e0e41c2e020],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9A571E08-5BB5-40B4-B0A3-47579B8E7996}, , [4963d6d365268fa7f3f06339aa5956aa],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9A7EB146-5AF4-4E41-B297-163CD7C7C8C1}, , [8f1dffaa8b00de588162158723e0b34d],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9A88A95B-4AA5-47AB-AF11-BEC04FF3319C}, , [f8b44d5c3f4c082e766e5448b74c16ea],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9AC99CAB-3EAB-4AD6-B0C7-6F454A2F2C4C}, , [88249a0ff6950f27786cd6c6c73c7f81],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9B26ECB6-B097-4659-813A-98EA68A27AEA}, , [6349bbee06850234568e8d0f3ec50cf4],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9DAD5DE8-B76C-4B7A-B8CF-E7FDBEA8AC88}, , [7a327336cebdb77f974c009c758e15eb],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9FD92986-74EA-4F60-856A-30F25B86FFF6}, , [7735e3c6fc8fea4cc91b7824d92ac63a],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A0B7A824-C361-4AEB-A9F9-FE7FC87B3F65}, , [0aa208a1bccf86b0b034e5b709fa7b85],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A3A2362A-6B13-4D62-9F95-EA12D672D0FF}, , [406c2485f2998caa1ac9e3b9e41ffe02],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A6F744B9-9ABB-42EE-9465-9C5CCD5072DD}, , [46663574177449eddc07702ced1601ff],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A7D11EB8-E4C7-4AA6-9892-1C83AE74718E}, , [24887237c9c22a0ca0431983d82b9070],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A802A1BE-9CDF-4292-83E9-CE2383859E88}, , [a00cb2f7c8c38aac2db79efe748fcd33],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ADDBFB8A-53FD-4EAA-BC40-446DB57E879A}, , [fab2adfc8ffc48eee6fe9ffd976c748c],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AF2F1591-9E6E-4A19-9DBD-F84A6EDCCF86}, , [83297c2df596d561fde7336936cd857b],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B195A210-6329-4EA9-B1DF-23CB4C318A15}, , [5a5203a6deadd4629c47e5b749ba48b8],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B1A98CA5-E3B6-44F6-B28F-E0864B76F54F}, , [9418decb2d5eed4917cd0795f50e6898],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B1DD2E19-B929-4A70-93AE-F380353C1283}, , [1b910f9a305b0e289b49ecb0b74c55ab],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B2C579BD-A693-4387-8DF4-3D6F6C40AD22}, , [1696c7e253380c2acf15e3b95fa4ec14],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B3502088-793F-4D0E-9955-49F4CC241446}, , [1993abfe2467c07606de1d7fbb48dc24],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B43BD77E-E117-4904-90FC-EE523E3F30D4}, , [b4f88e1b1378a0965c87f1abcf34b34d],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B4F2169C-5008-4831-BC3E-A46749DE6F5C}, , [8428c3e656350f27ca1a8616649fca36],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B52E880F-E799-45C0-9EAF-477CDF437033}, , [7b31d1d81c6f082e11d317856e956c94],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B5454064-E8A9-4D5C-B7D5-4A9E93FE8ED9}, , [a20a82272863d85e677dc2da6d96e41c],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B5B699B1-1E6C-4CF1-B78A-8A5F81896490}, , [56561c8dc4c7fc3ad50fefad32d1926e],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B5F922CD-C97D-4C2E-B96D-7AC0B274E0DE}, , [3d6f8920692268ce80634953c53e8b75],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B642AF87-F7D3-48C9-BF31-1FDB14472A63}, , [2f7db9f0890254e20bd876262dd6c63a],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B669032F-A4EC-4B2D-A23F-556B1B8859B3}, , [7f2d0a9f32597bbbcf1473297c87d42c],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B81FBB39-153D-48D2-84D8-2F44CDEF3711}, , [1c90bbee5833290d8a59ccd021e22fd1],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B9749C4D-8423-4D92-A0AF-C1AA3AB0B5D2}, , [2389268373189b9b7370f9a3b84bf30d],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BA7B6CA0-93A2-46B3-BD2A-98C794122EE4}, , [8a2210997813122433b13b61ba49f010],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BD541735-EBB6-4B96-A494-4138A3D6B221}, , [9715a7027813db5bfee5603c07fcf709],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BD763330-2367-4391-A3E5-C43E93AAE24A}, , [d5d71198c9c267cf499b336955ae08f8],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BDBACA0D-45C6-4115-9F2E-F6F48CD0EE70}, , [2785bcedc8c355e15f8469330300bc44],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BEE6D032-422E-4AAF-9352-ECA9E7736B8F}, , [f0bcf8b1860562d41ac9009c09fa7e82],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BF2D2E92-8BCA-43A3-9A2D-423659ABF147}, , [dfcd872293f8ef476381b8e4956ea65a],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BFD4AFA5-F861-414D-AABE-7AE56FFEC3A8}, , [dece94154348ac8a2fb59309a06354ac],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C0E298A7-F4FB-46E4-A18F-39335D104B14}, , [dfcdaffa236869cd994b3369a65dc43c],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C1EBC5B4-51FA-4007-849B-51277E282A69}, , [9517edbcf299ec4a33b14656de2554ac],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C213F67F-5670-4DA7-9B2C-5CAF1A6313AE}, , [3a7290192d5e88aee8fb534963a0c838],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C4AA28A6-9B1F-4C9C-9E20-8D6CE8DDB2E9}, , [822aa6030a81aa8c37ac6e2e54af7b85],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C6F27AA9-E9CB-4AFD-9E4A-8A16217C246D}, , [f9b3773248433600776dbfdde22132ce],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C8F460FA-4202-46F9-96B5-74E5B3742127}, , [e6c6e2c7cebdca6cc2215d3f56ad4eb2],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CACC26E8-EC66-4720-B8B1-D1579D9315F1}, , [02aa9c0d5734043216ce425a73900cf4],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CBE8983A-403D-4649-968C-2FB1D2CE5E94}, , [ebc1f4b5c3c8b87ec0248e0e45bedd23],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CC263480-1B7C-4E3B-A34D-10B8942DD5A6}, , [0aa2ffaac3c844f23ea6f0ace221be42],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CC32A0C9-EBF2-4E86-8DFE-295EEA58A99E}, , [6b41c3e65d2e9b9bdc08673512f1ec14],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CCD113CC-CA2D-4825-877B-144DC7E19C53}, , [ac0002a77e0df83eb62e0e8e2dd6867a],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CD02E04C-D38D-491C-A0A9-9297C1FD3724}, , [e0cc5d4cd7b486b0568d118b44bf5ba5],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CD84FD5B-EF38-496B-959C-2D3C817548E1}, , [d3d97d2c9eed1620b430abf1af54d62a],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CD9E4650-D1D9-4684-AC8A-2F227BBD492E}, , [aefe5c4d4c3fe056bf251e7ec93a9868],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CDF8E0B8-53F5-4083-B223-93FF3D1FFF74}, , [6f3d1792dfacc96d27bdacf0ba49b14f],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CEDBAEEA-BF1C-454F-97E7-2ED54AE6654F}, , [7a32dbce45463501b033f0ac05fee31d],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D058A6B0-BD98-4A27-85DD-21E7EF5EB7FA}, , [b5f796135f2c93a3aa39bede61a2fb05],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D110FF73-BC08-4314-9C79-163020DF751A}, , [7e2ea60390fb0c2a1dc69ffd3fc4ca36],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D1F33B3D-8B38-4D57-B236-22D665D7431D}, , [a5074465b2d9999d35aeb7e54ab905fb],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D2ADA604-E8E6-4755-B290-C61C6BA1199B}, , [e6c60f9aadde3df9a53f782412f1cf31],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D38FAC31-A2CD-43F5-B4E9-B24F17D32EC8}, , [deced9d0e6a5fa3cfbe8396315ee659b],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D41E430A-B028-4060-B92B-BDC059F88190}, , [713b9b0e3655b383f7ed5e3ecf34b050],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D73FA672-A006-4A8B-B3A4-F5741E9A9647}, , [aa02c2e76f1c12240bd8b3e980838878],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D8591D8B-CE9D-486F-8973-F9DDE59E5BED}, , [0f9d02a7c4c74fe7b033cad219ea36ca],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D8DA2B52-6FEF-45E9-A419-688345FB3FF3}, , [208ca0096c1f6ec8d50fff9d0ff4669a],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D8EFBD90-9B67-4B8D-9682-6E8E2462D4D6}, , [5c50cedbdcaf280ea93b801c29da05fb],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D98995BE-BD32-4782-93B2-11399067E1BE}, , [723a8d1ccac1191d07ddefad0201eb15],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DA2504D8-7F68-4195-95E3-D2AD428DAEFF}, , [802c5a4fb5d6ca6ceaf96f2d56ad0ff1],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DAEB7F39-E48C-4AA6-ACA3-861BC79155F7}, , [842860499fec4beb26bd217ba95a4fb1],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DD421695-836E-4C4B-8E76-4D43E699DDCF}, , [7a32e0c9c6c5e94da83b8d0fab5830d0],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DE26488B-F639-4CAA-8FA2-3FFCC675681D}, , [e2cac8e17b1055e1ca196537f013e51b],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DE6698C8-7740-492E-AFFF-ED43DA9410CD}, , [4369e1c8d8b30c2a1bc9297332d1f50b],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DEAA32C0-B275-461E-ABFF-9CA46D762B7A}, , [fdaf2584f893b97d4c972e6e44bfc63a],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DF53DC15-AC0B-4344-803E-7A84981B58F0}, , [5c503574711a80b6a73d6735c043cf31],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DF75243E-92FA-4D1A-8DF6-4E742B168AEC}, , [7735ddcc711a2c0ab3311d7f20e3c23e],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E01C8AC4-15B9-47D2-914B-924C70E689F9}, , [9d0f07a26724be78a63ee3b97390629e],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E3E7C438-A4AE-4D1A-B151-8540CB6CF37A}, , [58544861a3e836004d96b2ea4fb4de22],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E47F02B1-5D11-46D1-94A9-69D9E973A9AE}, , [119b4a5f9deef93dd40f4854dd264fb1],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E4E80E13-6040-464E-B1FB-5345C545AC6C}, , [d6d63e6b8605dd59c91b8418ee157b85],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E5101231-17EF-478B-8BF5-BA61B640DDD4}, , [25872683305ba591bd26069659aa11ef],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E5205001-90F2-4CE3-95D7-87DD379591CA}, , [5755affafa91270fb72c6b316d969f61],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E5446024-F92B-4464-93AD-495C16494BD2}, , [f2babaefee9da78f7b69b4e808fbac54],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E5DEB21B-4EDC-4D7A-B58B-E3AAC9779E96}, , [3b7100a9503bf73f4b981785b0538779],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6589B35-51E2-48FB-998F-FD37857B394F}, , [7339eebbd2b971c5776d15870df657a9],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E7D6D40D-7982-4C3C-8DC7-54D55FAEF32C}, , [5656b0f9d7b449ed21c2cecea55ea060],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E83E12E6-11B4-4DCE-8F62-2C4A914E18C1}, , [14984a5f117a0c2a0bd8cfcdba49e11f],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E8764531-F8B4-4C13-B4C5-FB978221DEAF}, , [aefe52573754e74f944f198318ebae52],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E934AFF0-1C19-4837-905C-5BC1AB9ABA22}, , [4b6152578efd68ceecf85e3e63a09769],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EA9F097E-94A1-4606-B54E-A3A5ADEAC313}, , [a4089415642744f235af910bd2314ab6],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EB006735-E6D8-4622-AF45-69D1F783DC11}, , [dfcd9d0c8efdd264588c4359847fa65a],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ECC9B6A8-492A-446A-8616-2F855BA16E1F}, , [a408edbc42497fb792527b21de2505fb],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ED3FB08E-A5BD-423E-8C52-6BA368F073BF}, , [f5b7edbc6d1ed95dab395e3ebb487d83],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ED503025-E9BF-4F08-B4C0-554B8C41DEC0}, , [228a49601378fe38c3207c2026dded13],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EE6F55E7-8EE3-4C9E-B4D3-4667D52EF622}, , [3874e3c6701bb284b52fb1ebc340e818],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EFF80F9D-F495-4B20-ACC8-BE4ED1B2B7EC}, , [e2ca9f0a454673c32eb5c0dcc43f47b9],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F0584A39-DC38-487C-9294-1DA674C32AFF}, , [a9037d2c7417251120c3e8b4c14240c0],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F0D8EDD9-90A6-47BF-942A-E7A44D722AAF}, , [5c50c3e64942ee48dd06f5a704ff38c8],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F296008A-B23F-46EE-A713-7D262B451D42}, , [f8b407a2612a12247a693f5df310867a],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F33FD590-CBFA-43D3-AF3A-88351A5B1D70}, , [e2cab1f838534de9c71c108c25debc44],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F40BB9C7-63A6-45DB-BACF-A7AF7ED89919}, , [ebc1cadfbdce73c3b82b06965ba801ff],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F40C878F-6891-433F-A372-45DC43C55BD5}, , [f4b8b5f49eeddf57ce15a0fc857e55ab],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F688EB92-101F-4245-8E2F-2B9176E5DE42}, , [18944960216a52e47f6466361be83cc4],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F8021364-B989-47C1-9CE5-D3CBFAF5AEF1}, , [5c500c9dd1bab581737178248b78936d],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F82C0429-624A-4B0E-8B3E-3ABE3FFE7EC4}, , [6f3d6544c3c875c17b68adef0201f40c],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F905E142-7FBF-4CCD-BB15-6592923BA98B}, , [ac001495711a50e610d33864887b9868],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F94028E6-34F3-4B09-93CC-EBE2792744DA}, , [44686049395276c0687bbddf679ca759],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F973D82F-B464-4CEB-8D3E-232243E8B648}, , [713becbdcfbc5ed86f75336936cd46ba],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FA9369F3-4A5C-4414-BE0A-13FE101A9194}, , [ecc0eabf692286b0e301821a36cda25e],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FD03C41C-F198-4751-9150-F544ABC93A50}, , [8e1e3e6bfd8edb5b83614e4e699ada26],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FE2FEF03-AE3A-4205-9B8B-601DF24A6C29}, , [1399bced1675fa3cc61ea7f5fe05926e],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FF0B2CF7-4E94-4AC2-BBFE-F929156EE852}, , [b1fb83261873e5519251514ba162a858],
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{9563BC59-9556-4805-8CD4-886781779D8D}, , [3f6df7b28605da5c3576aa5b45bf5da3],
PUP.Optional.Hicosmea, HKU\S-1-5-21-2495506510-2711303153-126332315-1000_Classes\CLSID\{56FDF344-FD6D-11d0-958A-006097C9A090}, , [9715c6e3305b4fe77e124c3edb284bb5],
PUP.Optional.Hicosmea, HKU\S-1-5-21-2495506510-2711303153-126332315-1000_Classes\WOW6432NODE\CLSID\{33C53A50-F456-4884-B049-85FD643ECFED}, , [7b31dccdbbd059dd850a4c3e57ac01ff],
PUP.Optional.Hicosmea, HKU\S-1-5-21-2495506510-2711303153-126332315-1000_Classes\WOW6432NODE\CLSID\{56FDF344-FD6D-11d0-958A-006097C9A090}, , [c8e41f8a7a11a88e96fa2b5ff60d12ee],

Hodnoty registru: 242
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{907e8020-81fd-4a4a-b870-dfd510bb96be}|AppName, HDQ-1.2cV03.01-bg.exe, , [bbf1f9b012792f0732d19409a85b8977]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{907e8020-81fd-4a4a-b870-dfd510bb96be}|AppName, HDQ-1.2cV03.01-bg.exe, , [e8c4535675167eb83fc4a3fa2fd4bf41]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1050DD26-8559-4661-8BC4-DEFEA012F095}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [36760d9c2e5dac8a558fc0dc13f0f30d]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{10EAF7B0-9F2D-4BCE-9CDB-A056F7E380E9}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [55573277a8e3dc5a974ddac2a063c937]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{13771F2D-81FF-4DD2-8D90-4C11E981235B}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [e2ca5e4bb0dbb58105dee1bb020122de]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{141DD92E-BDDB-401D-ABC6-78F2FD179475}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [9418c2e73a517db9b82b5745e221c13f]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1492D9E1-F381-4C82-8BE7-F5BAEB8A8121}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [416b1198cfbc38fee4ff2f6d917231cf]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{14E1EB57-6102-4558-89B0-813E5034EFC3}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [36760a9f137894a2b92bff9d9a69d22e]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{160148B0-9E2E-4D9D-AFFC-1AB0B8BD2B96}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [a80404a512799a9c5c87b6e6798a55ab]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1695B34E-FEAE-4F33-AB55-9CA677D373E0}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [8a225950a9e28bab2fb50993669dfb05]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{16AA6128-8E2F-480A-94E0-CC25499FB292}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [26862485810ae056f1f3eeaeef148878]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{17E59BA1-67B3-434C-AAA9-58BA6025D23F}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [4d5f9118731872c407dc15879172d729]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{18305D58-8261-4C7A-AB3D-D2CAE548D2D6}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [cbe13b6e513a90a6697b386450b33ac6]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1AD9AC84-32E1-4A34-ACC0-494624106510}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [c3e966432368e155875d2b71986b8080]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1AE540A1-7C9E-4DFF-B6B4-1E14D666ED50}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [8329affa0289f442d31096068a799d63]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1B26C330-5AC1-4EAF-A976-609E6B58D3B3}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [5557367303883df98b59dac29b6853ad]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1B9F7175-182A-43B5-BD6E-56FC70FECC38}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [8f1d03a691faf93dd0145b41a55ebf41]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1CCA2266-F1E0-41F4-97B8-F65210338CB2}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [565682279af1191d37ac88143dc6c53b]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1CE60DCC-EC18-4849-A635-711B6E39DDB0}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [4b6188212e5dbc7abb28dac2c53e13ed]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1D3B03C2-DED7-498D-84FA-1C22FD6B86FC}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [b7f54960ee9d43f3da0a2478f11255ab]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1E2B6F61-715E-48DE-94C0-5F2ED8CFBE30}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [6844ccdd58336acc489ccece3dc6d828]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1FBAA5D9-52C5-4617-B4B4-67AD39EA6DBC}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [e0cc56535833c37320c37923c0438c74]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{207CE0AD-DC2D-4FB5-B143-259755F2958D}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [3b71b0f98308bf7701e2f9a3659e02fe]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{20EE212C-F96B-4BAA-B3BC-93C5727E90A9}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [9f0df1b8f2993303e103eeaefe057789]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21D4FADE-EBA7-4272-BFF0-31374DB27ED4}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [981445641e6d3402aa3a7b21a95a52ae]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{23208C3E-F99C-4B89-B8CE-12DD7F94D341}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [4666ecbd5437d46230b3fe9e8c77e719]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{236325D5-A311-46C9-BE3E-6BADF940A912}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [28843e6bbad133034a99cece41c2cf31]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{25946A40-CDF6-4CF6-8936-777388882017}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [29835257e2a92f0738ab1e7e56ad1ee2]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{25C85F2F-2AA6-4444-9968-51B739CB2E5E}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [1b911099a2e9181e5d87108c82816898]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{260C830D-FFEB-4B19-99F3-952E5F3057FD}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [1498d1d81e6d51e51ec6079512f125db]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2796A3B3-D34A-4414-8C70-7094754326C5}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [f2bad4d54b404ceae8fbd7c5bb48718f]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{285BC9CD-2E0C-41DF-B2EA-A1D3EA5C1833}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [7933ffaa8803f73f6c78d7c5c04344bc]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2BBFD76F-AE76-431F-B6CF-BFEAC0F9E25F}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [eac250597a11261022c18b11eb1835cb]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2D1FD615-FE92-449B-9C60-6CE64341D08C}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [4d5fa5044f3c1f17cd17326a877c59a7]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2E8C3506-1980-446D-8D2F-2EA5AFF1A9D2}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [f9b36742cac161d51cc7d6c6c93a50b0]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{30139CE9-D9C2-46FD-8FC6-5D2835FE46FA}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [0e9e8e1b1b70cf677e660597b54edc24]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{30D20BA6-A50A-419D-9D6C-10A2ADACF528}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [f8b4e2c73c4f9c9af6edb1eb50b3da26]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3315DB7A-30DE-4766-B64A-52F5CD11B351}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [96168d1ca4e7aa8cd60de4b8c142f010]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3399E82B-3FDD-430C-987A-F9FBD3589D92}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [53595653cebd59ddc81b118ba261e21e]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{34D2AE73-B4B7-4F91-8337-B46179A4382A}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [0ca0edbc385340f6677c3567dd2660a0]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{35361B3A-ED10-478C-9C95-3910D45AFB85}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [6e3e6e3b0f7cb6801bc8bfdd897a0bf5]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{36D4D817-314B-4E56-BAD8-3E95FB299E8C}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [ffadc6e33c4f122407dc0e8e0af915eb]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3C87F97D-4074-4DE2-867B-425B4EF4434C}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [ebc12c7deba0f73f5b8813895ea5a55b]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3E28598B-A266-4527-9177-EE4B6B67D141}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [05a7d7d269221f1724c03f5db84b8c74]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3EDC8E29-809E-4E9F-A072-7F70578D34FA}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [decef6b3fb903ef8d80b7329748f34cc]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{43850B72-D826-49EC-BDCF-4AC1ECB6DA26}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [f8b41297107b21152aba5d3f08fb8c74]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{438C5CA6-8DD7-4857-A8B5-3FB93D6BA6E2}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [affdf4b5f19abe7843a1801cac576f91]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4395C581-A28D-4F04-A418-F3F4563B7DAC}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [f4b88326f7941e18e8fbacf0a45fcf31]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{448B6585-8E73-4FEE-89FE-61461AC791BB}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [b7f53772513a5adc875d504c8d76e31d]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{44C1425F-97FF-4320-A038-B5123EE412E1}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [baf2a108cbc09d99ebf8e8b4ee15748c]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{450D1FB7-4E06-47CE-B0EC-90A7DCB151F2}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [b0fc6e3b18736bcbe7fdcece08fb7090]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4660FDB9-200F-4DD5-92D3-A74A96F1E059}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [b6f68029ff8c44f27a6924786d9602fe]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{479AF704-395D-4831-BE1D-DED218777242}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [f3b9bdecdcaf2a0c7c68a7f5ba49d828]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{489291DB-1C95-400F-8F9D-D23BB81FA4F1}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [b1fbc9e0e8a38fa7c023148803009070]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4995E38A-8393-4C2A-9555-F0B6DD7A3E73}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [d1db0d9c7d0e89ad7c67940818eba35d]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4A2C01A5-8F6A-4FB1-8529-AD15E5863A6A}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [882494150883fb3bf0f4910b93705da3]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4A65D10A-A4E6-47DD-ACE3-15488B10421F}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [f8b45a4fe2a937ff11d2a3f9e221669a]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4A6AD9F3-423B-4E5A-81F1-B1DE5F2CCB84}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [08a46e3b820938feb0335b41fc07b44c]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4AFEC24F-C3A0-4E63-8258-E826FF88353B}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [bcf0f8b1414a5adcdb0904983cc71be5]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4C2B3511-96EE-437B-A83A-143D654BBD1E}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [921a1a8fa8e369cdd80c4e4eb54e6e92]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4DC85851-2927-4F81-B16C-5CBFE2D75541}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [822a1594c9c27bbb954e504c35cea759]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4E394A0A-2920-4297-9486-533325971AE6}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [67459514305be55111d34f4dbf4448b8]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4E48C9D1-BFBA-49DB-8F93-E5CCD928CC6D}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [cfdde5c4206b6bcb3aaabbe18c7709f7]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F55FBBC-B95E-48D3-91D9-7864765AA59B}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [1498beebbad15cda5d87f7a57093d22e]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{501296CD-ED06-4128-9260-475DA32A8EFD}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [109cf0b99af18aacb3312d6f1ee5de22]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{50509F75-E48C-4063-85BA-7B4AEE4954B5}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [5755c4e57d0e41f5e3009804669de61a]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{508A9549-BB2F-43CF-80DC-33E97D5948C5}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [edbf3d6cf9920531f5ee643813f06997]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{51E2EC9F-412C-49BE-8E77-8AFAE1935C31}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [4765ffaaa0ebe650b82bf8a4fd06857b]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5356EF7D-AEBA-4E39-9DA4-B4B5E5AEB254}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [78346247f4971c1aedf6a4f8649ff20e]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{556EDD9D-1AE5-455B-92EE-3FA714593D63}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [07a536732f5cbd79eff5405ccd36e61a]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{59A4C4D9-D864-4432-9664-69659CB976D5}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [5a52ddcc117a60d6855e4b5116eda759]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5A1732BC-7E66-485D-8BCD-74CE1A8022B8}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [941800a9206b79bd0cd70a92e122ab55]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5A419E03-BC8F-4452-B773-E4DD2934C5B7}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [e1cbb2f77714aa8c6c7766362bd8e41c]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5AE8EE75-21B1-440B-8E5D-CAA49CDCEE57}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [2c80f2b7d8b322147a6a7824f70c22de]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5B13F4EE-9D4D-406B-832A-6219A1119BCA}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [baf2d2d77c0fc76fb1332676cf34cb35]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5DD97AFC-E845-4A49-ADD0-8D4290A76758}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [c4e83178f299ef472bb8415b7093e818]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{601A0537-C223-4E52-A271-3E122C4C18D5}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [3c70d0d948436ec89b49702c000328d8]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6114CB5A-937B-4BE3-A9F8-C24FD93A2A64}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [6e3ef0b9f5962016b2310e8ea65d619f]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{626B631F-84DA-4FC0-92BA-47AC67FF544D}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [2983fcad8dfe8aac1ec6a8f44bb80ff1]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{634F6CFC-EDD8-4F4B-8BE0-441034F8DF2F}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [4963baefb7d460d6cb18bede9172ba46]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{63AF8E74-AF67-4621-B844-1A2FCFC69322}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [f7b58227662516205c877c20ed16be42]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{63D8D900-A927-4B2D-9D2F-C175E155F619}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [3c70ddcc0487c175f9ea5c404bb8a55b]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6405B474-205B-44B9-AD76-C8D5367B2FC4}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [c7e5beeb503b6ccaaa391389e81b8977]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{64077308-B2FF-4264-B6C9-FEA54EE9A7A0}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [6b41ebbea2e9a4928460326a02011ce4]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{65280AC1-4056-4FC3-82BC-B058A268BA5E}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [e4c8e1c891fa063004e005970ff4b44c]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{65CEEB18-7E4A-40C2-AB4B-10C475FACA6F}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [4c60f1b8ccbf46f0796b9507e71c15eb]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6668B1B8-9E7D-4C3D-AB39-74AA44B4EC30}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [a5075d4c800b76c00fd46c3051b2f808]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6842CECE-1142-476E-ABF7-AC1CC1FD7A97}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [83292a7fb5d6e0567e6655474eb504fc]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B07661-6CFB-4023-A8F5-F8F1DD7C207F}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [09a35455d4b70333b2321a82db28738d]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68C948C1-BB98-4227-9927-75F18BF36060}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [88249910b8d3dc5a3fa5306cf70c12ee]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6C0F25BE-71C0-4E27-AFBB-665F8F76D3B3}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [33798f1a7b10fb3bcd17990314ef3cc4]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6C123A40-1756-471A-A769-67E18C1BD36E}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [04a81d8c5635ac8aebf9247800039868]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6DE3196B-F1EC-4D0B-8DDB-5C8DDEB13EF0}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [3577f4b5dbb0f3430bd8e9b3030050b0]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6DF1E947-FABC-4877-AB5C-BCC0BBABA824}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [6844a7026a210f2734b0534956ada858]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{706810E3-65FE-4676-A7F0-8C12D95C47FD}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [604c75348dfe37ffdd06cece33d0748c]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{70ABF5C1-B748-432E-9B26-5D7B17814577}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [c9e3c2e7a7e481b53ca76537798a867a]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{712819D2-49B3-404A-AC73-991946861144}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [2f7d8227f4970135b034594314ef9f61]

PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7255BD10-7649-4639-B358-D997D2B8A640}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [872518918ffcb77f14d03d5f4eb5728e]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7383B8E5-87D0-49EE-8024-A49ED3DAEEC0}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [3a723d6c91fa280e9a4a3468986b946c]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7412368F-FD78-4156-AFC6-D4684DE69432}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [604ce6c3f09b7cba2ab9cfcd1ce7db25]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{75B2F3B9-1B04-4CF7-BF6C-2240D832145A}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [0d9f85241e6d96a0578cebb1966df907]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{77FC50A5-9D42-4010-BC63-1525B3F8D637}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [73390c9dc2c9c67008dce2ba3cc705fb]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7806EBB5-1F90-4A42-9C68-B94E63BC179F}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [46667138cdbebc7a1cc8762621e2f30d]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{78340806-E046-4436-802D-8217BCC2B91F}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [7a32b3f697f41f171bc9fe9e12f1d42c]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{797747B1-D01C-4455-A21B-BE8044E6267B}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [b2fa5b4e79128fa75f8433690ff44cb4]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7990BAAD-FF54-4F2E-8D6B-781848F26AC8}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [5b518a1fdfacc6702db78814937002fe]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{799FC345-1A5E-477D-AE83-365991D616DC}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [159738717c0fa88ed310bae2eb18f808]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7AB7A8A6-407C-4076-B1DE-3880CEA272FB}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [cbe1b2f79deea393d80c514b3bc8d42c]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7AD6DDBF-E94E-4EDC-A837-20F281D19DF7}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [8428acfd1774b185855fcbd1ba4902fe]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7D08CA35-8253-4F16-A55F-4767897CE8A4}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [dad21990c6c5ad892eb57c20be456c94]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7DF5706F-CE7B-4800-A496-E28A84621F7D}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [5b5150596526023415ceb6e642c125db]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7E5A7801-DA67-4902-B8B6-665A5CCC5C3E}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [6e3ed0d9a5e6eb4b657f6d2f32d155ab]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{80DB6D54-1AB5-4703-8AD7-56C51B14FBC0}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [cae22c7d3f4c053190531389f40f7d83]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{81F52364-3623-4218-984C-F47AAA64BBE7}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [199336734c3f3204cb19e0bcf60d2fd1]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{82112C39-10D4-4F9D-87E1-5EEAE0C9C4AD}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [a606d1d895f643f3c81c0993a06335cb]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{82FF73B6-28C2-4084-9F78-1C76CE105B88}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [f1bbe0c99fec9b9b677d821a976c2dd3]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{840C916A-157E-479F-A796-E66C209CA6DD}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [3775ffaa4f3c63d3ba2abddf4bb8dc24]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{84789AE7-8F5B-40BA-9A31-F1D9BF6C1B9C}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [b8f40b9e751638fec221980411f26f91]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8606F35D-61DC-4AFD-B9BB-524314363DA0}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [307cc0e93b5042f4b52ec4d8d62d8e72]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{86081EB3-9EB3-4918-80D3-534E3F73B740}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [614b03a6b5d6053124bf3e5ece35b050]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{88B100E5-F444-4F1E-AD17-A7F7DE48F0C6}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [b6f6cddc5932eb4b1bc95646da29758b]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8928E4C6-3DC2-42B6-895F-F31AC8BABE5E}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [1a9224858a01053111d3b1ebe41fdc24]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8A81A3AE-E93E-4E1B-AEA3-BF4E18837891}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [eac27732bccf93a38361d0cc17eced13]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8D98FE04-FBC6-4CF7-A8A8-714A25168871}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [7e2eb3f6bbd077bf766ebce07f84eb15]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{907e8020-81fd-4a4a-b870-dfd510bb96be}|AppName, HDQ-1.2cV03.01-bg.exe, , [04a88d1c216ab185934faaf2d62daa56]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{925304E6-576C-4F81-B880-CD19C2E0325D}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [f4b82d7cb8d3a492f0f345573dc642be]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{927DEBBF-4AC5-4C80-AE24-89B13A2AED32}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [d5d7feabfc8f74c206ddfca0cc376997]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{93884DFC-87F4-4037-9A94-BA673C20D9C5}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [d5d7fbae77143ff7e6fe920a5ea5a35d]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{94BDB155-9155-46D9-8146-1378172DC09D}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [3379723757342115e3019ffd7390c43c]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{951913BA-78A6-4963-B18A-F9F6E39CC885}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [e1cbcddc632874c203e0bce05ea5946c]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{964F9A7B-E429-4032-8CE7-5A4F63A63FDE}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [5b510b9e95f664d2a53f7b21f80bf010]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9755866D-206E-4ADD-95D2-33CC95CBFA17}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [812b8e1b137888ae1bc92c700ff435cb]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{97D541F2-B7B0-4D70-8F8A-91B5C3E67E3F}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [228abbeed7b493a3a043f3a9fc0739c7]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{98139B3E-C95C-4CF8-9520-9962EAE66984}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [0ca02f7a2665c670a24114887291d729]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{98EC1016-C178-47A8-90F1-9294F9B650B7}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [a20a71380b8065d1f8ec8e0e41c2e020]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9A571E08-5BB5-40B4-B0A3-47579B8E7996}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [4963d6d365268fa7f3f06339aa5956aa]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9A7EB146-5AF4-4E41-B297-163CD7C7C8C1}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [8f1dffaa8b00de588162158723e0b34d]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9A88A95B-4AA5-47AB-AF11-BEC04FF3319C}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [f8b44d5c3f4c082e766e5448b74c16ea]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9AC99CAB-3EAB-4AD6-B0C7-6F454A2F2C4C}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [88249a0ff6950f27786cd6c6c73c7f81]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9B26ECB6-B097-4659-813A-98EA68A27AEA}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [6349bbee06850234568e8d0f3ec50cf4]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9DAD5DE8-B76C-4B7A-B8CF-E7FDBEA8AC88}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [7a327336cebdb77f974c009c758e15eb]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9FD92986-74EA-4F60-856A-30F25B86FFF6}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [7735e3c6fc8fea4cc91b7824d92ac63a]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A0B7A824-C361-4AEB-A9F9-FE7FC87B3F65}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [0aa208a1bccf86b0b034e5b709fa7b85]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A3A2362A-6B13-4D62-9F95-EA12D672D0FF}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [406c2485f2998caa1ac9e3b9e41ffe02]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A6F744B9-9ABB-42EE-9465-9C5CCD5072DD}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [46663574177449eddc07702ced1601ff]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A7D11EB8-E4C7-4AA6-9892-1C83AE74718E}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [24887237c9c22a0ca0431983d82b9070]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A802A1BE-9CDF-4292-83E9-CE2383859E88}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [a00cb2f7c8c38aac2db79efe748fcd33]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ADDBFB8A-53FD-4EAA-BC40-446DB57E879A}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [fab2adfc8ffc48eee6fe9ffd976c748c]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AF2F1591-9E6E-4A19-9DBD-F84A6EDCCF86}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [83297c2df596d561fde7336936cd857b]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B195A210-6329-4EA9-B1DF-23CB4C318A15}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [5a5203a6deadd4629c47e5b749ba48b8]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B1A98CA5-E3B6-44F6-B28F-E0864B76F54F}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [9418decb2d5eed4917cd0795f50e6898]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B1DD2E19-B929-4A70-93AE-F380353C1283}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [1b910f9a305b0e289b49ecb0b74c55ab]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B2C579BD-A693-4387-8DF4-3D6F6C40AD22}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [1696c7e253380c2acf15e3b95fa4ec14]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B3502088-793F-4D0E-9955-49F4CC241446}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [1993abfe2467c07606de1d7fbb48dc24]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B43BD77E-E117-4904-90FC-EE523E3F30D4}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [b4f88e1b1378a0965c87f1abcf34b34d]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B4F2169C-5008-4831-BC3E-A46749DE6F5C}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [8428c3e656350f27ca1a8616649fca36]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B52E880F-E799-45C0-9EAF-477CDF437033}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [7b31d1d81c6f082e11d317856e956c94]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B5454064-E8A9-4D5C-B7D5-4A9E93FE8ED9}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [a20a82272863d85e677dc2da6d96e41c]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B5B699B1-1E6C-4CF1-B78A-8A5F81896490}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [56561c8dc4c7fc3ad50fefad32d1926e]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B5F922CD-C97D-4C2E-B96D-7AC0B274E0DE}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [3d6f8920692268ce80634953c53e8b75]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B642AF87-F7D3-48C9-BF31-1FDB14472A63}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [2f7db9f0890254e20bd876262dd6c63a]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B669032F-A4EC-4B2D-A23F-556B1B8859B3}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [7f2d0a9f32597bbbcf1473297c87d42c]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B81FBB39-153D-48D2-84D8-2F44CDEF3711}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [1c90bbee5833290d8a59ccd021e22fd1]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B9749C4D-8423-4D92-A0AF-C1AA3AB0B5D2}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [2389268373189b9b7370f9a3b84bf30d]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BA7B6CA0-93A2-46B3-BD2A-98C794122EE4}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [8a2210997813122433b13b61ba49f010]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BD541735-EBB6-4B96-A494-4138A3D6B221}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [9715a7027813db5bfee5603c07fcf709]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BD763330-2367-4391-A3E5-C43E93AAE24A}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [d5d71198c9c267cf499b336955ae08f8]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BDBACA0D-45C6-4115-9F2E-F6F48CD0EE70}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [2785bcedc8c355e15f8469330300bc44]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BEE6D032-422E-4AAF-9352-ECA9E7736B8F}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [f0bcf8b1860562d41ac9009c09fa7e82]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BF2D2E92-8BCA-43A3-9A2D-423659ABF147}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [dfcd872293f8ef476381b8e4956ea65a]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BFD4AFA5-F861-414D-AABE-7AE56FFEC3A8}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [dece94154348ac8a2fb59309a06354ac]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C0E298A7-F4FB-46E4-A18F-39335D104B14}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [dfcdaffa236869cd994b3369a65dc43c]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C1EBC5B4-51FA-4007-849B-51277E282A69}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [9517edbcf299ec4a33b14656de2554ac]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C213F67F-5670-4DA7-9B2C-5CAF1A6313AE}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [3a7290192d5e88aee8fb534963a0c838]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C4AA28A6-9B1F-4C9C-9E20-8D6CE8DDB2E9}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [822aa6030a81aa8c37ac6e2e54af7b85]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C6F27AA9-E9CB-4AFD-9E4A-8A16217C246D}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [f9b3773248433600776dbfdde22132ce]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C8F460FA-4202-46F9-96B5-74E5B3742127}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [e6c6e2c7cebdca6cc2215d3f56ad4eb2]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CACC26E8-EC66-4720-B8B1-D1579D9315F1}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [02aa9c0d5734043216ce425a73900cf4]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CBE8983A-403D-4649-968C-2FB1D2CE5E94}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [ebc1f4b5c3c8b87ec0248e0e45bedd23]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CC263480-1B7C-4E3B-A34D-10B8942DD5A6}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [0aa2ffaac3c844f23ea6f0ace221be42]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CC32A0C9-EBF2-4E86-8DFE-295EEA58A99E}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [6b41c3e65d2e9b9bdc08673512f1ec14]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CCD113CC-CA2D-4825-877B-144DC7E19C53}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [ac0002a77e0df83eb62e0e8e2dd6867a]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CD02E04C-D38D-491C-A0A9-9297C1FD3724}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [e0cc5d4cd7b486b0568d118b44bf5ba5]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CD84FD5B-EF38-496B-959C-2D3C817548E1}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [d3d97d2c9eed1620b430abf1af54d62a]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CD9E4650-D1D9-4684-AC8A-2F227BBD492E}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [aefe5c4d4c3fe056bf251e7ec93a9868]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CDF8E0B8-53F5-4083-B223-93FF3D1FFF74}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [6f3d1792dfacc96d27bdacf0ba49b14f]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CEDBAEEA-BF1C-454F-97E7-2ED54AE6654F}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [7a32dbce45463501b033f0ac05fee31d]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D058A6B0-BD98-4A27-85DD-21E7EF5EB7FA}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [b5f796135f2c93a3aa39bede61a2fb05]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D110FF73-BC08-4314-9C79-163020DF751A}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [7e2ea60390fb0c2a1dc69ffd3fc4ca36]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D1F33B3D-8B38-4D57-B236-22D665D7431D}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [a5074465b2d9999d35aeb7e54ab905fb]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D2ADA604-E8E6-4755-B290-C61C6BA1199B}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [e6c60f9aadde3df9a53f782412f1cf31]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D38FAC31-A2CD-43F5-B4E9-B24F17D32EC8}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [deced9d0e6a5fa3cfbe8396315ee659b]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D41E430A-B028-4060-B92B-BDC059F88190}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [713b9b0e3655b383f7ed5e3ecf34b050]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D73FA672-A006-4A8B-B3A4-F5741E9A9647}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [aa02c2e76f1c12240bd8b3e980838878]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D8591D8B-CE9D-486F-8973-F9DDE59E5BED}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [0f9d02a7c4c74fe7b033cad219ea36ca]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D8DA2B52-6FEF-45E9-A419-688345FB3FF3}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [208ca0096c1f6ec8d50fff9d0ff4669a]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D8EFBD90-9B67-4B8D-9682-6E8E2462D4D6}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [5c50cedbdcaf280ea93b801c29da05fb]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D98995BE-BD32-4782-93B2-11399067E1BE}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [723a8d1ccac1191d07ddefad0201eb15]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DA2504D8-7F68-4195-95E3-D2AD428DAEFF}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [802c5a4fb5d6ca6ceaf96f2d56ad0ff1]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DAEB7F39-E48C-4AA6-ACA3-861BC79155F7}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [842860499fec4beb26bd217ba95a4fb1]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DD421695-836E-4C4B-8E76-4D43E699DDCF}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [7a32e0c9c6c5e94da83b8d0fab5830d0]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DE26488B-F639-4CAA-8FA2-3FFCC675681D}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [e2cac8e17b1055e1ca196537f013e51b]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DE6698C8-7740-492E-AFFF-ED43DA9410CD}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [4369e1c8d8b30c2a1bc9297332d1f50b]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DEAA32C0-B275-461E-ABFF-9CA46D762B7A}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [fdaf2584f893b97d4c972e6e44bfc63a]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DF53DC15-AC0B-4344-803E-7A84981B58F0}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [5c503574711a80b6a73d6735c043cf31]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DF75243E-92FA-4D1A-8DF6-4E742B168AEC}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [7735ddcc711a2c0ab3311d7f20e3c23e]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E01C8AC4-15B9-47D2-914B-924C70E689F9}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [9d0f07a26724be78a63ee3b97390629e]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E3E7C438-A4AE-4D1A-B151-8540CB6CF37A}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [58544861a3e836004d96b2ea4fb4de22]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E47F02B1-5D11-46D1-94A9-69D9E973A9AE}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [119b4a5f9deef93dd40f4854dd264fb1]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E4E80E13-6040-464E-B1FB-5345C545AC6C}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [d6d63e6b8605dd59c91b8418ee157b85]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E5101231-17EF-478B-8BF5-BA61B640DDD4}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [25872683305ba591bd26069659aa11ef]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E5205001-90F2-4CE3-95D7-87DD379591CA}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [5755affafa91270fb72c6b316d969f61]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E5446024-F92B-4464-93AD-495C16494BD2}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [f2babaefee9da78f7b69b4e808fbac54]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E5DEB21B-4EDC-4D7A-B58B-E3AAC9779E96}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [3b7100a9503bf73f4b981785b0538779]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6589B35-51E2-48FB-998F-FD37857B394F}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [7339eebbd2b971c5776d15870df657a9]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E7D6D40D-7982-4C3C-8DC7-54D55FAEF32C}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [5656b0f9d7b449ed21c2cecea55ea060]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E83E12E6-11B4-4DCE-8F62-2C4A914E18C1}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [14984a5f117a0c2a0bd8cfcdba49e11f]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E8764531-F8B4-4C13-B4C5-FB978221DEAF}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [aefe52573754e74f944f198318ebae52]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E934AFF0-1C19-4837-905C-5BC1AB9ABA22}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [4b6152578efd68ceecf85e3e63a09769]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EA9F097E-94A1-4606-B54E-A3A5ADEAC313}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [a4089415642744f235af910bd2314ab6]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EB006735-E6D8-4622-AF45-69D1F783DC11}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [dfcd9d0c8efdd264588c4359847fa65a]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ECC9B6A8-492A-446A-8616-2F855BA16E1F}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [a408edbc42497fb792527b21de2505fb]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ED3FB08E-A5BD-423E-8C52-6BA368F073BF}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [f5b7edbc6d1ed95dab395e3ebb487d83]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ED503025-E9BF-4F08-B4C0-554B8C41DEC0}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [228a49601378fe38c3207c2026dded13]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EE6F55E7-8EE3-4C9E-B4D3-4667D52EF622}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [3874e3c6701bb284b52fb1ebc340e818]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EFF80F9D-F495-4B20-ACC8-BE4ED1B2B7EC}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [e2ca9f0a454673c32eb5c0dcc43f47b9]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F0584A39-DC38-487C-9294-1DA674C32AFF}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [a9037d2c7417251120c3e8b4c14240c0]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F0D8EDD9-90A6-47BF-942A-E7A44D722AAF}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [5c50c3e64942ee48dd06f5a704ff38c8]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F296008A-B23F-46EE-A713-7D262B451D42}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [f8b407a2612a12247a693f5df310867a]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F33FD590-CBFA-43D3-AF3A-88351A5B1D70}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [e2cab1f838534de9c71c108c25debc44]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F40BB9C7-63A6-45DB-BACF-A7AF7ED89919}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [ebc1cadfbdce73c3b82b06965ba801ff]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F40C878F-6891-433F-A372-45DC43C55BD5}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [f4b8b5f49eeddf57ce15a0fc857e55ab]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F688EB92-101F-4245-8E2F-2B9176E5DE42}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [18944960216a52e47f6466361be83cc4]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F8021364-B989-47C1-9CE5-D3CBFAF5AEF1}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [5c500c9dd1bab581737178248b78936d]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F82C0429-624A-4B0E-8B3E-3ABE3FFE7EC4}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [6f3d6544c3c875c17b68adef0201f40c]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F905E142-7FBF-4CCD-BB15-6592923BA98B}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [ac001495711a50e610d33864887b9868]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F94028E6-34F3-4B09-93CC-EBE2792744DA}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [44686049395276c0687bbddf679ca759]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F973D82F-B464-4CEB-8D3E-232243E8B648}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [713becbdcfbc5ed86f75336936cd46ba]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{fa9369f3-4a5c-4414-be0a-13fe101a9194}|AppName, HDQ-1.2cV03.01-codedownloader.exe, , [ecc0eabf692286b0e301821a36cda25e]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FD03C41C-F198-4751-9150-F544ABC93A50}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [8e1e3e6bfd8edb5b83614e4e699ada26]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FE2FEF03-AE3A-4205-9B8B-601DF24A6C29}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-codedownloader.exe, , [1399bced1675fa3cc61ea7f5fe05926e]
PUP.Optional.CrossRider, HKU\S-1-5-21-2495506510-2711303153-126332315-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FF0B2CF7-4E94-4AC2-BBFE-F929156EE852}|AppName, 57a8df63-03eb-4588-b605-02b5ec0a584e-2.exe-buttonutil.exe, , [b1fb83261873e5519251514ba162a858]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 43
PUP.Optional.CrossRider, C:\Program Files (x86)\HDQ-1.2cV03.01, , [3379a405b4d795a15e564c4f729122de],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\net_search, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\skin, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.GlobalUpdate, C:\Users\Admin\AppData\Local\Temp\comh.436442, , [b1fb3e6b5d2e83b350ca3266b74bae52],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\include, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\include\tools, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\js\lib, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\js\module, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\js\pack, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\en, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\en-US, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\es, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\es-419, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\fr, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\fr-BE, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\fr-CA, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\fr-CH, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\fr-LU, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\it, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\it-CH, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\pl, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\pt-BR, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\ru, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\ru-MO, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\tr, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\vi, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\zh-CN, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\zh-TW, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\skin, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\defaults, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\defaults\preferences, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\modules, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.Fun4U, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\AxFEKI@gmail.com, , [25875455dbb01620e830d6e6689c28d8],
PUP.Optional.Fun4U, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\AxFEKI@gmail.com\chrome, , [25875455dbb01620e830d6e6689c28d8],
PUP.Optional.Fun4U, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\AxFEKI@gmail.com\chrome\content, , [25875455dbb01620e830d6e6689c28d8],
PUP.Optional.Fun4U, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\AxFEKI@gmail.com\defaults, , [25875455dbb01620e830d6e6689c28d8],
PUP.Optional.Fun4U, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\AxFEKI@gmail.com\defaults\preferences, , [25875455dbb01620e830d6e6689c28d8],

Soubory: 244
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\ffjvvnbo\colers.dll, , [6a42496069225fd7c841c05a7b864ab6],
PUP.Optional.CrossRider, C:\ProgramData\Comodo\Cis\Quarantine\data\{00DE8A1F-FC56-4CDC-BDE3-EC2A0292CCBF}, , [7f2d08a1117a0d29587e81ad649db14f],
PUP.Optional.CrossRider, C:\ProgramData\Comodo\Cis\Quarantine\data\{012AF8B6-7101-418A-87EE-0A8519CE3D82}, , [6943575209822610bcdbaa052ada15eb],
PUP.Optional.CrossRider, C:\ProgramData\Comodo\Cis\Quarantine\data\{08D3436F-28E3-466A-98F7-97695F960226}, , [4666bceda5e6360031be6353827fe818],
PUP.Optional.CrossRider, C:\ProgramData\Comodo\Cis\Quarantine\data\{0C24BFFD-DC38-4425-B584-AB1C3312B3F0}, , [7c30cddc8704a294bcdbaf00e71d738d],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{13E97967-C2C8-47A4-90F8-E01EC366AA0B}, , [aa024861ddae3600a9a392a121e017e9],
Trojan.BitCoinMiner, C:\ProgramData\Comodo\Cis\Quarantine\data\{191C7F2A-8F51-4492-BF34-FA1690EB8BF6}, , [a70539707417bf77429127ec5da57a86],
PUP.Optional.MultiPlug, C:\ProgramData\Comodo\Cis\Quarantine\data\{66610AF6-6F01-43DD-A98E-B74C03AF3432}, , [5a52783198f3d363ef42e7b8fc058d73],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{6B532D67-FC10-485D-905B-CADDF6E6C964}, , [08a4d4d53556aa8c222ab2811ce5d22e],
Backdoor.Bot.MSIL, C:\ProgramData\Comodo\Cis\Quarantine\data\{6C5BBFA3-7710-4540-ACEA-FF475FD2E61B}, , [bfed8524cfbc69cd69e5b5fdff01fd03],
PUP.Optional.CrossRider, C:\ProgramData\Comodo\Cis\Quarantine\data\{701A7D80-87B4-4902-B23D-EA5DCE7AAC9B}, , [7339f7b2cbc068ce4d9a33c16898cf31],
PUP.Optional.CrossRider, C:\ProgramData\Comodo\Cis\Quarantine\data\{72A856F9-F52F-40BC-B899-039CDC74B21A}, , [c1ebe6c32f5cd75fcfc8802f56ae36ca],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{A4A3211D-11DF-4633-A225-E1AF0EF784F6}, , [5d4fbfea5338bb7b0e3e171cc041d62a],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{A6EE0FBF-AE0E-4714-B6DE-39FCCC11FCBD}, , [2f7d2c7d533879bd9ab2ba792bd6669a],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{ADFA90AB-66B0-4F80-B690-966BDED7CFBE}, , [5359b0f9e5a661d5e16bc76ca1600ff1],
PUP.Optional.SofTonic, C:\ProgramData\Comodo\Cis\Quarantine\data\{B5A72A8C-E2AF-4646-BBC9-DA645705B539}, , [2f7d6f3a513a0a2cbb76af7c718fef11],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{B9B75AB8-B647-4AAF-B79B-0252A76E7ADF}, , [d3d91d8ca4e7bc7a3b11f0437f821ee2],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{2E125D80-136B-4C1D-BF6C-68B90043CDC6}, , [b3f98b1e91fa112572da47ec61a0649c],
PUP.Optional.InstallRex, C:\ProgramData\Comodo\Cis\Quarantine\data\{31D7DF6B-E1C4-44EE-9B94-318096B3D8FE}, , [3d6f4465395276c0dc9b200c5aa723dd],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{DE9D219F-5051-4883-A1B4-7C80426DEA24}, , [05a7aefbe7a443f33913171cce33fb05],
PUP.Optional.InstallCore, C:\ProgramData\Comodo\Cis\Quarantine\data\{DF316758-7394-4A77-B487-29C0B15B9475}, , [7e2e6049028921156264bdf97490c43c],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{E6DA6BAC-571A-4AB1-99F2-007ABF127585}, , [5e4e0b9ea7e493a3d47870c34bb66b95],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{E78CCEFB-ACBF-43C0-BD6B-F7BAD8B27382}, , [24886f3a1d6e003607451a197d847789],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{1AF4F959-8489-4099-951E-C1E822C7425C}, , [44689712afdc0b2b301cde5589789967],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{3EF6A802-09C9-4FE2-BE57-3057182A58F3}, , [a804f6b3741712248cc0ae8530d142be],
PUP.Optional.InstallRex, C:\ProgramData\Comodo\Cis\Quarantine\data\{63673738-7FF8-408B-8D47-CDF0A9A5D865}, , [8527fcad99f27db913642705f30edc24],
PUP.Optional.Giner, C:\ProgramData\Comodo\Cis\Quarantine\data\{7C7F4F75-4C9E-4FC7-9D97-91B9A28D68AF}, , [852773361279fb3bd6ffbdf812f2619f],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{923DF28D-E30E-4918-A79C-846E03C4B68F}, , [adff42672f5c3402ad9f02317c853bc5],
PUP.Optional.Giner, C:\ProgramData\Comodo\Cis\Quarantine\data\{BC52D650-5BCD-41DF-8042-1F7DDE23F78A}, , [773575345c2ff44219bcf0c51be9ca36],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{DA6DBAF3-E597-48CF-B071-8B7F17ADC4A8}, , [901c8029741773c3fe4e979c8c75cd33],
Trojan.BitCoinMiner, C:\ProgramData\Comodo\Cis\Quarantine\data\{E7E110C6-386C-4160-9FE2-7037FE963A29}, , [7537cadf4744d165f0067e1915ebef11],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{9515B8BA-9EE5-425A-8090-DF316F45E738}, , [367687224843e84ec48839fad72a46ba],
PUP.Optional.CrossRider, C:\ProgramData\Comodo\Cis\Quarantine\data\{9602F156-B334-41FF-936C-3C6EF0B8DA2D}, , [218b1198c6c5082e2473327d0bf947b9],
PUP.Optional.AztecMedia, C:\ProgramData\Comodo\Cis\Quarantine\data\{9BBA5F5C-90CD-49A9-A7EA-0E18ECE65F93}, , [96168128c1ca3600f85e46702dd7d52b],
PUP.Optional.XTab, C:\ProgramData\Comodo\Cis\Quarantine\data\{9D1BA33F-BFB0-43A9-AB60-11820812F168}, , [4b61decb345761d5503b9c98a65ba55b],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{40E6B89C-66E9-4E75-9881-85AC3DF36D02}, , [44687435cac159dd024a54df60a1a759],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{480F1BFA-E572-43E1-BD55-0432EC14D42A}, , [a60646636a21e94dd67634ffbf42dd23],
PUP.Optional.CrossRider, C:\ProgramData\Comodo\Cis\Quarantine\data\{486B832B-E9EE-4789-B82D-43508C24930E}, , [c0ec1891dcaf41f544ab5d5922dfab55],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{523CE585-8D9A-4612-A2E7-F58354E09A3F}, , [921aacfd305b7eb8a2aa48eb639e946c],
PUP.Optional.CrossRider, C:\ProgramData\Comodo\Cis\Quarantine\data\{5EC58D8F-3E79-4B22-A89C-07EFCB858C00}, , [8626525797f40e2814db5d59d130d32d],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{C05DEA58-B053-4378-AB74-E3A58BF30730}, , [f0bce5c4cbc03204e666fc3719e82ed2],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{C60480F9-28C2-438D-B78C-148D29EC586B}, , [129a27822962e6503616de5528d952ae],
PUP.Optional.CrossRider, C:\ProgramData\Comodo\Cis\Quarantine\data\{D3AC6045-6D6C-4E4F-9338-B64460021C4B}, , [5d4fa8012f5ce74faee9387710f431cf],
PUP.Optional.CrossRider, C:\ProgramData\Comodo\Cis\Quarantine\data\{D3AFCF40-A723-4E9C-81B1-23CCC397A6F2}, , [218b7d2c2368be78b0e75b549c68cc34],
PUP.Optional.MultiPlug, C:\ProgramData\Comodo\Cis\Quarantine\data\{D481F9E1-EAB4-41AE-B2EB-ADCCA7D710D8}, , [86263a6f8a01f541ec73217da25fc63a],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{D7CF9B89-CE04-4535-9D45-80CE7E361145}, , [b1fbddcc90fbec4a460692a19e63837d],
PUP.Optional.Linkey, C:\ProgramData\Comodo\Cis\Quarantine\data\{EAA9B3F5-294F-4D74-909D-ED978352BFFA}, , [802c8722d6b56dc98ed5e74a35cc7b85],
PUP.Optional.MultiPlug, C:\ProgramData\Comodo\Cis\Quarantine\data\{EBEAA816-0BF2-4549-9BBD-9158B8670173}, , [9a122f7a7e0d78be665d943cbc447090],
Trojan.Agent.BCM, C:\ProgramData\Comodo\Cis\Quarantine\data\{F24E086D-7CBA-49B1-9BAE-CBA71FBD5BCA}, , [02aac6e3e1aa45f1d9d6e5c36c94926e],
Trojan.BitCoinMiner, C:\ProgramData\Comodo\Cis\Quarantine\data\{F82E1103-A2CB-4133-888F-7C0E94D1B316}, , [6745e6c39cef67cfca0950c37191ca36],
Trojan.Agent.BCM, C:\ProgramData\Comodo\Cis\Quarantine\data\{FCBEE5F6-4F85-4764-9959-29663B00650F}, , [99132485d6b569cddbd412969d63e11f],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{FF31AE5A-24F0-4E92-B8F9-0A3716480133}, , [efbdadfc2962e94ddb713300f0119967],
PUP.Optional.CrossRider, C:\ProgramData\Comodo\Cis\Quarantine\data\{7F46EC6E-53B1-4768-A20E-4D1803861405}, , [54588227a9e266d0b4e3feb1f410cf31],
PUP.Optional.CrossRider, C:\ProgramData\Comodo\Cis\Quarantine\data\{813E72B2-8348-48DC-ACF9-CD3143021A21}, , [d5d701a8a5e671c55e37951a24e029d7],
PUP.Optional.AztecMedia, C:\ProgramData\Comodo\Cis\Quarantine\data\{84F2CA8A-00DD-4B75-9481-E6C1A7C4D7DC}, , [4c60b5f4f893a98d72e45f57b84c9a66],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{87D911F6-AEFE-4DEC-B210-773BFE2FB973}, , [24883a6f1b7092a4ba923201f50c5fa1],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{87F94B6C-CDC2-4AF7-AAFB-C9A3201DFA1F}, , [0ba19514a5e69f973d0fb57e9b660ff1],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{8BCA9ABD-568A-436D-AB03-5277831C24C2}, , [e3c9fcad4a4190a69bb12a0931d02ad6],
PUP.Optional.MultiPlug, C:\ProgramData\Comodo\Cis\Quarantine\data\{8E784CBE-15A4-4FB7-9B67-6BD817526AAB}, , [a80424850f7c2016a535cd938879768a],
PUP.Optional.CrossRider, C:\ProgramData\Comodo\Cis\Quarantine\data\{22293144-0212-4492-B443-A7C74F6889F0}, , [69433e6b8b00d75fca66dd175ea29d63],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{2311D2FC-DF07-42B8-948F-216127A7147A}, , [ebc17633bad17cbabd8f5ad9bc456e92],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{2A4672C3-1428-4638-B0F8-043C228232A5}, , [5a528128dbb078bec6866cc7bb46c937],
PUP.Optional.SettingsManager, C:\ProgramData\Comodo\Cis\Quarantine\data\{35C37F45-56E9-4C85-8A9E-D4E817649A08}, , [b4f87633c8c32e08a7a5161dfe0325db],
PUP.Optional.CrossRider, C:\ProgramData\Comodo\Cis\Quarantine\data\{36DBDA87-1FD0-404C-8FAE-52356819C42A}, , [85272683e4a7a3930a8d2788a460be42],
PUP.Optional.SearchProtect.AppFlsh, C:\ProgramData\Comodo\Cis\Quarantine\data\{38093C1E-4B4E-4B00-B924-C07371EA4BE0}, , [c4e82188c9c28fa70a34d1db40c1b14f],
Trojan.Agent.MSIL, C:\ProgramData\Comodo\Cis\Quarantine\data\{38E130A4-31E6-4B08-929A-BC4013C99861}, , [5656d0d914772313f4431b5c0bf6ff01],
PUP.Optional.Ilivid, C:\ProgramData\Comodo\Cis\Quarantine\data\{3B257859-5466-4306-BCF0-33DD6F6F40E7}, , [ebc1e3c66b201d19b32d9240cb358a76],
PUP.Optional.CrossRider, C:\ProgramData\Comodo\Cis\Quarantine\data\{3D562485-DA46-4A6A-9644-21D6EDEAA443}, , [f6b62f7afc8fb87ed2c59619cc38669a],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\abiemfeb\colers.dll, , [1399cddc3358bd7929e07aa0ca372ed2],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\abiemfeb\tivesen.dll, , [d9d3ecbda1ea9b9b14c353d2a55cf60a],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\admcgnuq\colers.dll, , [b5f79019f8932016010863b7a65b37c9],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\admcgnuq\tivesen.dll, , [d4d89d0c66254aec9f38f035fc051ce4],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\afkyhmhn\colers.dll, , [cbe15752f7947bbb10f9d644758ce61a],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\afkyhmhn\tivesen.dll, , [64482a7f0f7ce3539e394ed7a16034cc],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\akhekdnc\colers.dll, , [1c90a900e1aa231342c72eec837e817f],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\akhekdnc\tivesen.dll, , [f5b7f0b9aae1b284686f899c28d945bb],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\bqylxadu\colers.dll, , [c8e422873c4f00368d7c3cde41c09f61],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\bqylxadu\tivesen.dll, , [b6f68d1c612a06309344b37221e0f60a],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\ffjvvnbo\tivesen.dll, , [3c705f4ac2c964d2b225959004fd9868],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\fizqobir\colers.dll, , [4666cbdecfbc5cda21e841d917ea4fb1],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\fizqobir\tivesen.dll, , [06a619906a218aac498ec065cd3434cc],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\fwvztoag\colers.dll, , [b7f5b1f83853af87af5ac951ce331de3],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\fwvztoag\tivesen.dll, , [6f3d3970fc8ff83e3f98081dbf42df21],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\mncwyxni\colers.dll, , [7933446554377eb89c6d9e7c17eaf907],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\mncwyxni\tivesen.dll, , [842834750d7e270f22b5da4b768bff01],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\mtmnotzn\colers.dll, , [adff2d7c1477ec4a868340dafe038977],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\mtmnotzn\tivesen.dll, , [19932f7a2368191d983fa184827fa858],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\obbhrgkz\colers.dll, , [b1fba3067e0d62d454b50713f60b22de],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\obbhrgkz\tivesen.dll, , [7339abfe3f4cb77fcf0847de15ecb947],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\ojqnxysp\colers.dll, , [56564762fa91a690b455e2386d94f40c],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\ojqnxysp\tivesen.dll, , [cce0beeb3754b08619bee54040c1c53b],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\pzouphrg\colers.dll, , [1d8f5f4aed9e66d0c9400e0cec15ef11],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\pzouphrg\tivesen.dll, , [5a52e6c3325900365b7ca4817d841ae6],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\qtaqjusa\colers.dll, , [44688a1f2566d066f81146d43fc204fc],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\qtaqjusa\tivesen.dll, , [85272089dab12115cd0a74b1c23f0cf4],
PUP.Optional.OpenCandy, C:\Users\Admin\AppData\Roaming\rmi\offer_downloader.exe, , [911b04a54744c67038667f95e121bf41],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\sagxummc\colers.dll, , [c9e30d9c1e6da0963acfe43632cf24dc],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\sagxummc\tivesen.dll, , [505c8e1b2a61c1755780f62fab56dc24],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\sfpukllc\colers.dll, , [fdaf9118a9e28fa7e8213edc0001e818],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\sfpukllc\tivesen.dll, , [0aa2d4d58209ee48795ed74eb34e827e],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\skszcecj\colers.dll, , [6d3f4267a2e900361eeb2befe120b749],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\skszcecj\tivesen.dll, , [c2eaf3b67c0f4aec2daa1b0a90713ec2],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\smplonuy\colers.dll, , [8d1fd0d9ccbfb97d5aaf79a130d1ff01],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\smplonuy\tivesen.dll, , [94183f6a206b9d99d8ff49dce918936d],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\vpimshlv\colers.dll, , [723a8b1e5b3070c66c9d9783b44dfd03],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\wnssnfzy\colers.dll, , [2686eabfbad1a98d1deccf4b04fdc53b],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\wnssnfzy\tivesen.dll, , [1b918f1aaae1af87ce096fb66e9311ef],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\xjkvormf\colers.dll, , [ac006a3fe5a6e84e96732bef5ba68f71],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\xjkvormf\tivesen.dll, , [efbd1b8ef497350187508b9a38c90ef2],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\ybedevks\colers.dll, , [f4b83772aeddfe38b9505bbfd72a42be],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\ybedevks\tivesen.dll, , [eebec8e175169c9a8a4def36b54c8c74],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\ymdsiixs\colers.dll, , [a7054a5f3b5058defd0c6cae0bf617e9],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\ymdsiixs\tivesen.dll, , [634974356823d1654592a87d60a19a66],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\iannjses\colers.dll, , [04a86e3bddaea4926c9d1dfddc256799],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\iannjses\tivesen.dll, , [6b4101a88efd251129aeeb3acb36ac54],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\jutyakvt\colers.dll, , [d4d8a702e6a543f3060334e6ec153cc4],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\jutyakvt\tivesen.dll, , [d5d7d5d47c0ff2446d6a2ff6ad546898],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\khupxrzr\colers.dll, , [14986d3c0685b77f898061b930d1a060],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\khupxrzr\tivesen.dll, , [8f1d5e4bdbb0f34383546db858a933cd],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\lqhrchqm\colers.dll, , [6349cfdaafdc053153b67d9db74ab54b],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\lqhrchqm\tivesen.dll, , [8626d8d1e4a769cd617632f331d0d22e],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\lyfzxxnt\colers.dll, , [208cf2b7addeb77f23e670aa639ee020],
PUP.Optional.Hicosmea, C:\Users\Admin\AppData\Roaming\lyfzxxnt\tivesen.dll, , [baf22a7fe9a25adcd6013de8eb16a35d],
PUP.Optional.Nova, C:\Program Files (x86)\Adobe\2156e6a9-cb3d-42aa-b705-a7e27d4e7e04.dll, , [d1db58513a5143f355c391a1907138c8],
PUP.Optional.InstallCore, C:\Program Files (x86)\Adobe\7a21ea8d-f424-4b69-a394-ff141ac715c7.dll, , [713bcddc7813bf774a7c6c4a58ac926e],
PUP.Optional.CrossRider, C:\Program Files (x86)\HDQ-1.2cV03.01\57a8df63-03eb-4588-b605-02b5ec0a584e-6.exe, , [24885c4dec9f4beba6f1e4cbf41025db],
PUP.Optional.InstallCore, C:\Program Files (x86)\HDQ-1.2cV03.01\a552066d-112e-48bc-aa30-970b16329104.dll, , [4d5f76335c2fc1757551348234d00bf5],
PUP.Optional.Nova, C:\Program Files (x86)\HDQ-1.2cV03.01\f5ab6499-4bee-4ff9-9ec3-f6dab9b36057.dll, , [14987a2fe2a935010a0e0f23da270df3],
PUP.Optional.CrossRider, C:\Program Files (x86)\HDQ-1.2cV03.01\HDQ-1.2cV03.01-bho64.dll, , [ddcf9415fb90a78f2c6b8f202fd513ed],
PUP.Optional.BitCoinMiner, C:\Windows\SysWOW64\acumncbnqmbi.exe, , [208c6d3c850672c4e0d1749f43bfb14f],
PUP.Optional.BitCoinMiner, C:\Windows\SysWOW64\acumncbufvl.exe, , [38748a1fcfbc1c1ac3ee898a778ba858],
PUP.Optional.Amonetize, C:\Users\Admin\AppData\Local\Temp\amiupdater1924.exe, , [f6b64b5e018a36001d86e4c045bc25db],
PUP.Optional.Hicosmea, C:\Windows\Installer\2d40ed.msi, , [228a9d0ce3a872c4b851eb2ffd04fd03],
Trojan.Script, C:\Windows\SysWOW64\msmmmjc.vbe, , [9c103c6dc8c396a08454d7fd6b9727d9],
Trojan.Script, C:\Windows\SysWOW64\msqnbu.vbe, , [65473772fd8e75c17068f3e147bb34cc],
PUP.Optional.CrossRider, C:\Program Files (x86)\HDQ-1.2cV03.01\bgNova.html, , [3379a405b4d795a15e564c4f729122de],
PUP.Optional.CrossRider, C:\Program Files (x86)\HDQ-1.2cV03.01\background.html, , [3379a405b4d795a15e564c4f729122de],
PUP.Optional.CrossRider, C:\Program Files (x86)\HDQ-1.2cV03.01\57a8df63-03eb-4588-b605-02b5ec0a584e.xpi, , [3379a405b4d795a15e564c4f729122de],
PUP.Optional.CrossRider, C:\Program Files (x86)\HDQ-1.2cV03.01\f5ab6499-4bee-4ff9-9ec3-f6dab9b36057.crx, , [3379a405b4d795a15e564c4f729122de],
PUP.Optional.CrossRider, C:\Program Files (x86)\HDQ-1.2cV03.01\HDQ-1.2cV03.01.ico, , [3379a405b4d795a15e564c4f729122de],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\config.ini, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\everything.dll, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\everything.exe, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\SearchBase.db, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\SearchHand.dll, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\ServiceEverything.exe, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\SFKEX.exe, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\uninst.exe, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\net_search\bing.png, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\net_search\google.png, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\net_search\search_config.ini, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\net_search\SFK.ini, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\net_search\SFKEX.ini, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\net_search\yahoo.png, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\skin\bing.png, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\skin\caret.png, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\skin\FileListItem.xml, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\skin\FileListItem_bing.xml, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\skin\FileListItem_google.xml, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\skin\frame.png, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\skin\frame2.png, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\skin\google.png, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\skin\guide.png, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\skin\icon_search.png, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\skin\mainpanel.png, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\skin\MainPannel.xml, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\skin\panel_base.xml, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\skin\search_content_list.png, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\skin\WndMask.xml, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.Everything, C:\Users\Admin\AppData\Everything\skin\yahoo.png, , [317bbdecb9d2bf77b891871ae023659b],
PUP.Optional.BestPriceNinja, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.bestpriceninja.com_0.localstorage, , [0ba108a1a7e46ccab4447b9524e058a8],
PUP.Optional.BestPriceNinja, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.bestpriceninja.com_0.localstorage-journal, , [fbb1dacfbccf082eb2469878fd0708f8],
PUP.Optional.BestPriceNinja, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.bestpriceninja.com_0.localstorage, , [129a911890fb15210cecc44c6a9ac23e],
PUP.Optional.BestPriceNinja, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.bestpriceninja.com_0.localstorage-journal, , [b9f32782bccf7db9728638d8ce364ab6],
PUP.Optional.AdNetworkPerformance, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.adnetworkperformance.com_0.localstorage, , [f1bbb8f1afdc04327130f02129dbdf21],
PUP.Optional.AdNetworkPerformance, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.adnetworkperformance.com_0.localstorage-journal, , [bdef2a7f99f2171f1f82eb2651b3d030],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome.manifest, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\install.rdf, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\awesome.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\awesome.xul, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\index.html, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\quick_start.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\quick_start.xul, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\include\speed_dial.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\include\tools\about_blank_hook.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\include\tools\misc.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\include\tools\popup_image_helper.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\include\tools\urlrequestor.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\js\js.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\js\lib\doT.min.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\js\lib\jquery-2.1.0.min.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\js\lib\jquery.autocomplete.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\js\module\hotSearch.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\js\module\mostgrid.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\js\module\search.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\js\module\stat.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\js\pack\common.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\js\pack\ga.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\content\js\pack\xagainit.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\en\locale.properties, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\en-US\locale.properties, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\es\locale.properties, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\es-419\locale.properties, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\fr\locale.properties, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\fr-BE\locale.properties, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\fr-CA\locale.properties, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\fr-CH\locale.properties, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\fr-LU\locale.properties, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\it\locale.properties, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\it-CH\locale.properties, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\pl\locale.properties, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\pt-BR\locale.properties, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\ru\locale.properties, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\ru-MO\locale.properties, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\tr\locale.properties, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\vi\locale.properties, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\zh-CN\locale.properties, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\locale\zh-TW\locale.properties, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\skin\default_logo.png, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\skin\googlelogo.png, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\skin\google_trends.png, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\skin\icon.png, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\skin\loading.gif, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\skin\logo.png, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\skin\luck.png, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\skin\newtab.ico, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\skin\simple.css, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\chrome\skin\style.css, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\defaults\preferences\fvd.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\defaults\preferences\preferences.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\modules\addonmanager.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\modules\aes.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\modules\config.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\modules\dialogs.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\modules\last_tab.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\modules\misc.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\modules\properties.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\modules\remoterequest.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\modules\restoreprefs.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.FastSearch, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\1435092085_xpi\modules\settings.js, , [228aa20728639d9994877d3259a934cc],
PUP.Optional.Fun4U, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\AxFEKI@gmail.com\chrome.manifest, , [25875455dbb01620e830d6e6689c28d8],
PUP.Optional.Fun4U, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\AxFEKI@gmail.com\install.rdf, , [25875455dbb01620e830d6e6689c28d8],
PUP.Optional.Fun4U, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\AxFEKI@gmail.com\chrome\content\browser.xul, , [25875455dbb01620e830d6e6689c28d8],
PUP.Optional.Fun4U, C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\AxFEKI@gmail.com\chrome\content\main.js, , [25875455dbb01620e830d6e6689c28d8],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Vsechny nalezy nechte odstranit. Po odstraneni a restartu pc test s MBAM zopakujte (ale tentokrat opravdu se spravnym nastavenim, tohle byl jen sken hrozeb, ten nekontroluje cely pocitac, ja chtel vlastni sken), at vime, jestli se to nevraci. Napiste vysledek testu a podle nej zvolim dalsi postup.

Zdravím, udělal jsem , log zde :

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 27.12.2015
Čas skenování: 17:27
Protokol: sken.txt
Správce: Ano

Verze: 0.0.0.0000
Databáze malwaru: v2015.12.27.04
Databáze rootkitů: v2015.12.26.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Admin

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 716683
Uplynulý čas: 5 hod, 18 min, 39 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Sken hloubkových rootkitů: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

MBAM odinstalujte.


Postupujte podle navodu kolegy

vyosek píše: Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Postupujte podle navodu kolegy

vyosek píše: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  autoclean;
  resethosts;
  emptyclsid;
  IEdefaults;
  FFdefaults;
  CHRdefaults;
  emptyIEcache;
  emptyFFcache;
  emptyCHRcache;
  emptyalltemp;
  emptyflash;
  emptyjava;
  emptyrecycle.bin;

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

JRT log :

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.1 (11.24.2015)
Operating System: Windows 7 Professional x64
Ran by Admin (Administrator) on ne 27.12.2015 at 20:35:19,67
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 0




Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 27.12.2015 at 20:55:36,33
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

zoek-results log :

Zoek.exe v5.0.0.1 Updated 27-December-2015
Tool run by Admin on po 28.12.2015 at 14:55:20,00.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: E:\Dokumenty\Plocha\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2015-12-27-203437.log 3789 bytes

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.seznam.cz");
user_pref("browser.search.defaultengine", "Google");
user_pref("keyword.URL", "http://us.search.yahoo.com/search?fr=ytff-comodo&p=");
user_pref("browser.search.useDBForOrder", true);

Added to C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\prefs.js:

ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_28.12.2015_1657_.backup

==== Deleting Files \ Folders ======================

C:\windows\SysNative\Tasks\Image Touch deleted
C:\PROGRA~3\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Admin\AppData\LocalLow\Unity deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\Windows\SysWow64\AI_RecycleBin deleted
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\extensions\{60984d64-3925-4636-a8c2-1b22a35f133f} deleted
"C:\Users\Admin\AppData\Roaming\wld\7za.exe" deleted
"C:\Users\Admin\AppData\Roaming\wld" deleted
"C:\Users\Admin\AppData\Roaming\.technic" deleted
"C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default\jetpack" deleted

==== Orphaned Tasks deleted from Registry ======================

Image Touch deleted

==== Firefox Extensions ======================

ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default
- cookiemgrjayapalcom - %ProfilePath%\extensions\cookiemgr@jayapal.com
- guiconfigslosdnet - %ProfilePath%\extensions\guiconfig@slosd.net
- IE Tab 2 FF 3.6 - %ProfilePath%\extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB}
- 20291fcc147146c882135911f5ce6d67 - %ProfilePath%\extensions\{20291fcc-1471-46c8-8213-5911f5ce6d67}
- Google Translator for Firefox - %ProfilePath%\extensions\translator@zoli.bod.xpi
- Video DownloadHelper - %ProfilePath%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi
- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f62226gd.default
87132527E2256CF6683A18C4EB34DD3B - C:\Windows\system32\Wat\npWatWeb.dll - Windows Activation Technologies


==== Chromium Look ======================

Google Chrome Version: 46.0.2490.86

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[12.10.2015 08:31]

flmfagndkngjknjjcoejaihmibcfcjdh - Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\flmfagndkngjknjjcoejaihmibcfcjdh
gomekmidlodglbbmalcneegieacbdmki - Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Skype - Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl

==== Chromium Fix ======================

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_cdncache-a.akamaihd.net_0.localstorage deleted successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_cdncache-a.akamaihd.net_0.localstorage-journal deleted successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_hdapp1008-a.akamaihd.net_0.localstorage deleted successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_hdapp1008-a.akamaihd.net_0.localstorage-journal deleted successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adfoc.us_0.localstorage deleted successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adfoc.us_0.localstorage-journal deleted successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.ad4game.com_0.localstorage deleted successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.ad4game.com_0.localstorage-journal deleted successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adserver.adtech.de_0.localstorage deleted successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adserver.adtech.de_0.localstorage-journal deleted successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_advert.uloz.to_0.localstorage deleted successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_advert.uloz.to_0.localstorage-journal deleted successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage deleted successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage deleted successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage-journal deleted successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.bestpriceninja.com_0.localstorage deleted successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.bestpriceninja.com_0.localstorage-journal deleted successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.bestpriceninja.com_0.localstorage deleted successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.bestpriceninja.com_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/?clid=16194"
"Default_Search_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.seznam.cz/?clid=16194"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="about:newtab"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="about:newtab"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
HKCU\SearchScopes\{20207072-53AA-4C31-8CB6-F8186AC1DFF2} - http://encyklopedie.seznam.cz/search?q= ... arch_16194
HKCU\SearchScopes\{3FCC89C7-7579-4813-BC1D-E56BB9930E35} - http://www.mapy.cz/?query={searchTerms} ... arch_16194
HKCU\SearchScopes\{4A3CE131-99E5-405F-B826-B366A93DFD7B} - http://slovnik.seznam.cz/?q={searchTerm ... arch_16194
HKCU\SearchScopes\{637DE939-74FB-470E-84DD-548A1288CC00} - http://tv.seznam.cz/hledej?w={searchTer ... arch_16194
HKCU\SearchScopes\{A80D5FBE-45E3-480C-8D09-C9273F613FBA} - http://www.novinky.cz/hledej?w={searchT ... arch_16194
HKCU\SearchScopes\{C61DAF95-A41E-4C6D-8168-DAEEC8B55179} - http://www.firmy.cz/?q={searchTerms}&so ... arch_16194
HKCU\SearchScopes\{E689CED1-8502-438D-963A-B6BDB80D1173} - http://www.zbozi.cz/?q={searchTerms}&r= ... arch_16194
HKCU\SearchScopes\{FE38EE04-CB8E-4C07-AE05-8B4B346BCB63} - http://slovnik.seznam.cz/?q={searchTerm ... arch_16194

==== Reset Google Chrome ======================

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0podwepi.default\Cache emptied successfully
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\f62226gd.default\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=7132 folders=1184 2108593172 bytes)

==== Empty Temp Folders ======================

C:\Users\Admin\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Admin\AppData\Local\Temp successfully emptied

==== Deleting Files / Folders ======================

"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted

==== EOF on po 28.12.2015 at 18:34:49,85 ======================

Dejte novy log z RSIT

a k tomu

Dejte nove logy podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=13&t=133100 - vypnete na chvili antivir, je mozne, ze to bude blokovat jako skodnou, ale pouzivame to porad, jedna se o falesny poplach

Omlouvám se za pozdní odpověď, mezitím se problémy vyřešily, děkuji za pomoc.

OK, nemate tedy zac

Mejte se a treba zase nekdy