VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Čínský malware, vir - chová se jako správce, FRSTLauncher ne

https://forum.viry.cz:443/viewtopic.php?t=148378

Stránka 1 z 4

Čínský malware, vir - chová se jako správce, FRSTLauncher ne

Napsal: 17 bře 2016 12:42
od F7R
Zdravím
Dostal se mi do počítače čínský vir, malvare. Chová se jako správce počítače. Vyskakují nějaké čínské znaky, mám tu ikonu nakolik pracují jádra(což sem dříve neměl) Počítač se zpomalil.
Podle návodu jsem zkoušel špoustět FRSTLauncher od vyoska, ovšem napsalo mi to error že FRSTLaunxer.exe aplikace není platná pro Win32.
Ten Malware má ikonu takového modrého štítu a v něm jakoby silueta ptáka. Trochu to vypadá jak logo Mazda.

RSIT a DDS se spustilo, až dopracuje vložím log.

Re: Čínský malware, vir - chová se jako správce, FRSTLaunche

Napsal: 17 bře 2016 13:01
od F7R
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 9.0.8112.16749
Run by cesko at 12:49:41 on 2016-03-17
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3070.1254 [GMT 1:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {768124D7-F5F7-6D2F-DDC2-94DFA4017C95}
SP: Microsoft Security Essentials *Enabled/Updated* {CDE0C533-D3CD-62A1-E772-AFADDF863628}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\QQPCRTP.exe
C:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\QQPCTray.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\a95f8535-bd08-4370-a6e0-814924c0d5f0\updater.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Microsoft Security Client\NisSrv.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\QQPCTray.exe
C:\program files\common files\tencent\qqdownload\130\tencentdl.exe
C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe
C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\plugins\QMNetMon\QQPCNetFlow.exe
C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\QQPCRealTimeSpeedup.exe
C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugincontainer.exe
C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\2\plugin.exe
C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\3\plugin.exe
C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\5\plugin.exe
C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\6\plugin.exe
C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\8\plugin.exe
C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\12\plugin.exe
C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\7\plugin.exe
C:\Windows\system32\wuauclt.exe
C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\3\plugin.exe
C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\7\plugin.exe
C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\12\plugin.exe
C:\Program Files\Maxthon\Bin\Maxthon.exe
C:\Program Files\Maxthon\Bin\Maxthon.exe
C:\Program Files\Maxthon\Bin\Maxthon.exe
C:\Program Files\Maxthon\Bin\Maxthon.exe
C:\Program Files\Maxthon\Bin\Maxthon.exe
C:\Windows\system32\conime.exe
C:\Program Files\Maxthon\Bin\Maxthon.exe
C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\qmdl.exe
C:\Users\cesko\Desktop\RSIT.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService

Re: Čínský malware, vir - chová se jako správce, FRSTLaunche

Napsal: 17 bře 2016 13:03
od F7R
Logfile of random's system information tool 1.10 (written by random/random)
Run by cesko at 2016-03-17 12:44:02
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 5 GB (6%) free of 83 GB
Total RAM: 3070 MB (46% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:44:46, on 17.3.2016
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16749)
Boot mode: Normal

Running processes:
C:\Windows\Explorer.EXE
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\QQPCTray.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\QQPCTray.exe
C:\program files\common files\tencent\qqdownload\130\tencentdl.exe
C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe
C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\plugins\QMNetMon\QQPCNetFlow.exe
C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\QQPCRealTimeSpeedup.exe
C:\Windows\system32\wuauclt.exe
C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\3\plugin.exe
C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\7\plugin.exe
C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\12\plugin.exe
C:\Program Files\Maxthon\Bin\Maxthon.exe
C:\Program Files\Maxthon\Bin\Maxthon.exe
C:\Program Files\Maxthon\Bin\Maxthon.exe
C:\Program Files\Maxthon\Bin\Maxthon.exe
C:\Program Files\Maxthon\Bin\Maxthon.exe
C:\Windows\system32\conime.exe
C:\Program Files\Maxthon\Bin\Maxthon.exe
C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\qmdl.exe
C:\Users\cesko\Desktop\RSIT.exe
C:\Program Files\trend micro\cesko.exe
C:\Program Files\Maxthon\Bin\Maxthon.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hao123.com/?tn=95144889_hao_pg
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hao123.com/?tn=95144889_hao_pg
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: IEExtension.VDownloaderBHO - {7b523e7c-f096-4e36-a0cb-7efeb5c675c1} - mscoree.dll (file missing)
O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O4 - HKLM\..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [ QQPCTray] "C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\QQPCTRAY.EXE" /regrun /qqrepair
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKCU\..\Run: [uTorrent] "C:\Users\cesko\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: QQPCMgr RTP Service (QQPCRTP) - Tencent - C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\QQPCRTP.exe
O23 - Service: QQRepair3a0 - Unknown owner - C:\Program.exe (file missing)
O23 - Service: QQRepairFixSVC - Unknown owner - C:\Program.exe (file missing)
O23 - Service: Service Mgr CateredtoYou - Unknown owner - C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugincontainer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Search Module Update (SMUpd) - Motorola Inc. - (no file)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files\Sony\Sony PC Companion\PCCService.exe
O23 - Service: Update Mgr CateredtoYou - Unknown owner - C:\Program Files\Common Files\a95f8535-bd08-4370-a6e0-814924c0d5f0\updater.exe

--
End of file - 5714 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2012-06-05 425680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7b523e7c-f096-4e36-a0cb-7efeb5c675c1}]
IEExtension.VDownloaderBHO - C:\Windows\system32\mscoree.dll [2009-11-08 297808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2012-10-29 10996368]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2016-01-29 986872]
" QQPCTray"=C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\QQPCTRAY.EXE [2016-03-17 356464]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2015-09-16 6495144]
"uTorrent"=C:\Users\cesko\AppData\Roaming\uTorrent\uTorrent.exe [2016-03-09 2094080]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Apoint]
C:\Program Files\Apoint2K\Apoint.exe [2006-09-12 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BingSvc]
C:\Users\cesko\AppData\Local\Microsoft\BingSvc\BingSvc.exe [2015-11-12 144008]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner.exe [2015-09-16 6495144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\cesko\AppData\Roaming\Seznam.cz\szninstall.exe -c []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Users\cesko\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe -q []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]
C:\Windows\ehome\ehTray.exe [2008-01-21 125952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2006-12-10 49152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2007-06-20 451872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2012-10-29 10996368]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files\Seznam.cz\distribution\szninstall.exe -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2016-02-10 50599552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL]
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2012-11-01 1458176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Users\cesko\AppData\Roaming\uTorrent\uTorrent.exe [2016-03-09 2094080]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTox]
C:\Users\cesko\AppData\Roaming\uTox\uTox.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe [2007-01-02 210520]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\QQPCRTP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
"NoDriveTypeAutoRun"=221
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=serwvdrv.dll
"wave2"=serwvdrv.dll
"vidc.XVID"=xvidvfw.dll
"VIDC.VP80"=vp8vfw.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2016-03-17 12:44:02 ----D---- C:\rsit
2016-03-17 12:30:18 ----D---- C:\FRST
2016-03-17 12:13:46 ----A---- C:\Windows\system32\drivers\TS888.sys
2016-03-17 11:10:50 ----A---- C:\Users\cesko\AppData\Roaming\GiftBag.db
2016-03-17 11:10:01 ----A---- C:\Windows\system32\drivers\TAOKernel.sys
2016-03-17 11:10:01 ----A---- C:\Windows\system32\drivers\TAOAccelerator.sys
2016-03-17 11:09:44 ----A---- C:\Windows\system32\drivers\TSDefenseBt.sys
2016-03-17 11:09:36 ----D---- C:\ProgramData\TXQMPC
2016-03-17 11:08:32 ----D---- C:\Program Files\Common Files\Tencent
2016-03-17 11:08:29 ----A---- C:\Windows\system32\drivers\TFsFlt.sys
2016-03-17 11:08:26 ----A---- C:\Windows\system32\drivers\TsFltMgr.sys
2016-03-17 11:03:57 ----D---- C:\Program Files\Tencent
2016-03-17 11:03:39 ----D---- C:\Users\cesko\AppData\Roaming\Tencent
2016-03-17 11:03:18 ----D---- C:\ProgramData\Tencent
2016-03-17 11:00:03 ----D---- C:\ProgramData\SearchModule
2016-03-17 10:59:43 ----D---- C:\Program Files\Common Files\Goobzo
2016-03-10 10:12:26 ----A---- C:\Windows\system32\advapi32.dll
2016-03-10 10:12:22 ----A---- C:\Windows\system32\smss.exe
2016-03-10 10:12:22 ----A---- C:\Windows\system32\rpcrt4.dll
2016-03-10 10:12:22 ----A---- C:\Windows\system32\csrsrv.dll
2016-03-10 10:12:20 ----A---- C:\Windows\system32\ntdll.dll
2016-03-10 10:12:18 ----A---- C:\Windows\system32\ntkrnlpa.exe
2016-03-10 10:12:14 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-03-10 10:10:53 ----A---- C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-10 10:10:53 ----A---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-03-10 10:10:53 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-10 10:10:53 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-10 10:10:53 ----A---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-10 10:10:52 ----A---- C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-10 10:10:52 ----A---- C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-10 10:10:52 ----A---- C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-10 10:10:52 ----A---- C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-10 10:10:52 ----A---- C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-10 10:10:52 ----A---- C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-10 10:10:52 ----A---- C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-03-10 10:10:52 ----A---- C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-03-10 10:10:52 ----A---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-10 10:10:52 ----A---- C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-03-10 10:10:52 ----A---- C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-03-10 10:10:51 ----A---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-10 10:10:51 ----A---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-03-10 10:10:50 ----A---- C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-10 10:10:50 ----A---- C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-10 10:10:50 ----A---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-10 10:10:50 ----A---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-03-10 10:10:50 ----A---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-03-10 10:10:50 ----A---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-03-10 10:10:49 ----A---- C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-10 10:10:49 ----A---- C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-10 10:10:49 ----A---- C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-10 10:10:49 ----A---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-03-10 10:10:49 ----A---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-10 10:10:49 ----A---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-03-10 10:10:49 ----A---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-03-10 10:10:48 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-03-10 10:10:48 ----A---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-03-10 10:10:48 ----A---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-10 10:10:48 ----A---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-10 10:10:47 ----A---- C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-10 10:10:47 ----A---- C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-10 10:10:47 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-03-10 10:10:47 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-03-10 10:10:47 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-03-10 10:10:46 ----A---- C:\Windows\system32\ucrtbase.dll
2016-03-10 10:10:46 ----A---- C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-10 10:08:50 ----A---- C:\Windows\system32\seclogon.dll
2016-03-10 10:07:55 ----A---- C:\Windows\system32\atmlib.dll
2016-03-10 10:07:55 ----A---- C:\Windows\system32\atmfd.dll
2016-03-10 08:23:34 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2016-03-10 08:22:06 ----A---- C:\Windows\system32\olepro32.dll
2016-03-10 08:22:06 ----A---- C:\Windows\system32\oleaut32.dll
2016-03-10 08:22:06 ----A---- C:\Windows\system32\asycfilt.dll
2016-03-10 08:08:09 ----A---- C:\Windows\system32\win32k.sys
2016-03-09 16:08:59 ----A---- C:\Windows\system32\vbscript.dll
2016-03-09 16:08:59 ----A---- C:\Windows\system32\msfeedsbs.dll
2016-03-09 16:08:58 ----A---- C:\Windows\system32\msfeeds.dll
2016-03-09 16:08:58 ----A---- C:\Windows\system32\jscript.dll
2016-03-09 16:08:57 ----A---- C:\Windows\system32\urlmon.dll
2016-03-09 16:08:57 ----A---- C:\Windows\system32\mshta.exe
2016-03-09 16:08:57 ----A---- C:\Windows\system32\ieUnatt.exe
2016-03-09 16:08:57 ----A---- C:\Windows\system32\iertutil.dll
2016-03-09 16:08:55 ----A---- C:\Windows\system32\jsproxy.dll
2016-03-09 16:08:52 ----A---- C:\Windows\system32\wininet.dll
2016-03-09 16:08:52 ----A---- C:\Windows\system32\mshtmled.dll
2016-03-09 16:08:52 ----A---- C:\Windows\system32\msfeedssync.exe
2016-03-09 16:08:51 ----A---- C:\Windows\system32\dxtmsft.dll
2016-03-09 16:08:49 ----A---- C:\Windows\system32\url.dll
2016-03-09 16:08:47 ----A---- C:\Windows\system32\jscript9.dll
2016-03-09 16:08:46 ----A---- C:\Windows\system32\ieui.dll
2016-03-09 16:08:46 ----A---- C:\Windows\system32\dxtrans.dll
2016-03-09 16:08:45 ----A---- C:\Windows\system32\ieframe.dll
2016-03-09 16:08:41 ----A---- C:\Windows\system32\mshtml.dll
2016-02-18 20:30:49 ----D---- C:\Program Files\AllTubeDownloader

======List of files/folders modified in the last 1 month======

2016-03-17 12:44:46 ----D---- C:\Program Files\trend micro
2016-03-17 12:44:37 ----D---- C:\Windows\Temp
2016-03-17 12:30:33 ----D---- C:\Windows
2016-03-17 12:18:31 ----D---- C:\Windows\System32
2016-03-17 12:18:31 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-03-17 12:17:18 ----D---- C:\Users\cesko\AppData\Roaming\uTorrent
2016-03-17 12:13:46 ----D---- C:\Windows\system32\drivers
2016-03-17 12:03:19 ----SHD---- C:\System Volume Information
2016-03-17 12:01:31 ----D---- C:\Program Files\Seznam.cz
2016-03-17 11:35:09 ----D---- C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0
2016-03-17 11:09:36 ----D---- C:\ProgramData
2016-03-17 11:08:47 ----RSD---- C:\Windows\Fonts
2016-03-17 11:08:32 ----D---- C:\Program Files\Common Files
2016-03-17 11:07:04 ----D---- C:\Windows\system32\Tasks
2016-03-17 11:03:57 ----RD---- C:\Program Files
2016-03-17 11:03:21 ----D---- C:\Windows\Prefetch
2016-03-17 09:29:15 ----D---- C:\Program Files\Common Files\a95f8535-bd08-4370-a6e0-814924c0d5f0
2016-03-16 08:22:03 ----D---- C:\Users\cesko\AppData\Roaming\Skype
2016-03-15 09:46:48 ----D---- C:\KMPlayer
2016-03-14 10:28:10 ----D---- C:\Windows\system32\catroot2
2016-03-11 10:17:59 ----D---- C:\Windows\Microsoft.NET
2016-03-10 21:17:59 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2016-03-10 12:37:01 ----D---- C:\Windows\system32\MRT
2016-03-10 12:35:35 ----RSD---- C:\Windows\assembly
2016-03-10 12:27:01 ----D---- C:\Windows\Debug
2016-03-10 12:27:01 ----A---- C:\Windows\system32\mrt.exe
2016-03-10 10:19:58 ----D---- C:\Windows\system32\en-US
2016-03-10 10:19:57 ----D---- C:\Windows\system32\XPSViewer
2016-03-10 10:19:57 ----D---- C:\Windows\system32\migration
2016-03-10 10:19:57 ----D---- C:\Program Files\Windows Mail
2016-03-10 10:19:57 ----D---- C:\Program Files\Internet Explorer
2016-03-10 10:19:57 ----D---- C:\Program Files\Common Files\System
2016-03-10 10:18:48 ----D---- C:\Windows\inf
2016-03-10 10:13:49 ----D---- C:\Windows\winsxs
2016-03-10 10:13:45 ----D---- C:\Windows\system32\catroot
2016-03-10 10:10:44 ----SHD---- C:\Windows\Installer
2016-03-10 10:10:43 ----HD---- C:\Config.Msi
2016-03-09 15:34:44 ----D---- C:\Users\cesko\AppData\Roaming\Image Zone Express
2016-02-24 09:48:06 ----D---- C:\Program Files\Microsoft Security Client
2016-02-22 13:07:53 ----D---- C:\Users\cesko\AppData\Roaming\uTox
2016-02-22 13:07:27 ----D---- C:\Program Files\xStation

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-11-13 253704]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2006-09-27 36560]
R1 cpuidlep;CpuIdle Pro System Driver; C:\Windows\system32\drivers\cpuidlep.sys [2013-03-08 4484]
R1 MpKsl3cf013bc;MpKsl3cf013bc; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{42ECC718-8889-4BCA-884E-637789AB2EAB}\MpKsl3cf013bc.sys [2016-03-17 39168]
R1 QMIEProtect;QMIEProtect; \??\C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\QMIEProtect.sys [2016-01-12 50488]
R1 QMUdisk;tencent QMUdisk; \??\C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\QMUdisk.sys [2016-02-28 104152]
R1 softaal;softaal; \??\C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\softaal.sys [2016-03-17 36216]
R1 SRepairDrv;SRepairDrv; \??\C:\Program Files\Tencent\QQPCMGR\Plugins\SRepairDrv [2016-03-17 165624]
R1 TAOKernelDriver;Tencent Auto Optimize Platform.; \??\C:\Windows\system32\Drivers\TAOKernel.sys [2016-03-17 100088]
R1 TSDefenseBt;TSDefenseBt; C:\Windows\system32\DRIVERS\TSDefenseBt.sys [2016-03-17 14008]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2006-08-30 140800]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-09-05 1183744]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-07-27 2929664]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-06-17 30208]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2012-10-29 3240400]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2012-11-01 38864]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2012-11-01 37328]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\Windows\system32\drivers\MODEMCSA.sys [2008-01-21 18432]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2007-07-31 7680]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-11-13 104664]
R3 pmkbdfltr;PenMount Keyboard Device Filter Driver; C:\Windows\system32\DRIVERS\pmkbdfltr.sys [2012-11-01 15248]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2012-11-01 363112]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\Windows\system32\DRIVERS\seehcri.sys [2011-11-01 27632]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2012-11-01 1095936]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2007-05-25 1743232]
R3 TAOAccelerator;Tencent TAOAccelerator driver.; \??\C:\Windows\system32\Drivers\TAOAccelerator.sys [2016-03-17 116408]
R3 TFsFlt;TFsFlt; C:\Windows\system32\Drivers\TFsFlt.sys [2016-03-17 150008]
R3 TS888;TS888; \??\C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\TS888.sys [2016-03-17 39928]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
S0 TsFltMgr;tencent TsFltMgr; C:\Windows\system32\drivers\TsFltMgr.sys [2016-03-17 128216]
S1 9704792drv;9704792drv; C:\Windows\system32\DRIVERS\9704792drv.sys [2013-01-29 489048]
S1 QQPCHelper;QQPCHelper; \??\C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\QQPCHelper.sys [2016-03-17 25336]
S1 TSKSP;TSKSP; \??\C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\TSKsp.sys [2016-03-17 210616]
S2 QQSysMon;QQSysMon; \??\C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\QQSysMon.sys [2016-03-17 108920]
S2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2012-11-01 48128]
S2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2012-11-01 44544]
S2 risdptsk;risdptsk; C:\Windows\system32\DRIVERS\risdptsk.sys [2012-11-01 46592]
S2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2012-11-01 38400]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-21 508416]
S3 Dot4;Ovladač MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-21 131584]
S3 Dot4Print;Ovladač třídy tiskárny standardu IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-21 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-21 36864]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2013-03-20 12400]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2013-03-20 25200]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys []
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 RimUsb;zařízení BlackBerry Smartphone; C:\Windows\System32\Drivers\RimUsb.sys [2011-07-25 64512]
S3 RimVSerPort;RIM Virtual Serial Port v2; C:\Windows\system32\DRIVERS\RimSerial.sys [2011-07-20 35328]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2008-01-21 8192]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM); C:\Windows\system32\DRIVERS\s0016bus.sys [2008-05-16 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s0016mdfl.sys [2008-05-16 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s0016mdm.sys [2008-05-16 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s0016mgmt.sys [2008-05-16 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS); C:\Windows\system32\DRIVERS\s0016nd5.sys [2008-05-16 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s0016obex.sys [2008-05-16 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM); C:\Windows\system32\DRIVERS\s0016unic.sys [2008-05-16 115752]
S3 s0017bus;Sony Ericsson Device 0017 driver (WDM); C:\Windows\system32\DRIVERS\s0017bus.sys [2008-10-21 86824]
S3 s0017mdfl;Sony Ericsson Device 0017 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s0017mdfl.sys [2008-10-21 15016]
S3 s0017mdm;Sony Ericsson Device 0017 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s0017mdm.sys [2008-10-21 114600]
S3 s0017mgmt;Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s0017mgmt.sys [2008-10-21 108328]
S3 s0017nd5;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS); C:\Windows\system32\DRIVERS\s0017nd5.sys [2008-10-21 26024]
S3 s0017obex;Sony Ericsson Device 0017 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s0017obex.sys [2008-10-21 104616]
S3 s0017unic;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM); C:\Windows\system32\DRIVERS\s0017unic.sys [2008-10-21 109736]
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM); C:\Windows\system32\DRIVERS\s1018bus.sys [2009-03-25 86824]
S3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s1018mdfl.sys [2009-03-25 15016]
S3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s1018mdm.sys [2009-03-25 114728]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s1018mgmt.sys [2009-03-25 106208]
S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS); C:\Windows\system32\DRIVERS\s1018nd5.sys [2009-03-25 26024]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s1018obex.sys [2009-03-25 104744]
S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM); C:\Windows\system32\DRIVERS\s1018unic.sys [2009-03-25 109864]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
S3 SMUpdd;Search Module UpdateD; \??\C:\Program Files\Common Files\Goobzo\GBUpdate\smw.sys [2016-03-13 25600]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 35328]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2013-07-12 134272]
S3 WinUsb;WinUSB Driver; C:\Windows\system32\DRIVERS\WinUSB.sys [2009-07-14 34944]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2009-04-11 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 TSSysKit;TSSysKit; \??\C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\TSSysKit.sys [2016-03-17 102136]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2007-07-27 610304]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2016-01-29 22216]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R2 Service Mgr CateredtoYou;Service Mgr CateredtoYou; C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugincontainer.exe [2016-03-17 1414888]
R2 Update Mgr CateredtoYou;Update Mgr CateredtoYou; C:\Program Files\Common Files\a95f8535-bd08-4370-a6e0-814924c0d5f0\updater.exe [2016-03-17 1273064]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R3 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2016-01-29 292816]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 QQPCRTP;QQPCMgr RTP Service; C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\QQPCRTP.exe [2016-03-17 301656]
S2 QQRepair3a0;QQRepair3a0; C:\Program Files\Tencent\QQPCMGR\Plugins\QQRepair3a0 [2016-03-17 136512]
S2 QQRepairFixSVC;QQRepairFixSVC; C:\Program Files\Tencent\QQPCMGR\Plugins\QQRepairFixSVC [2016-03-17 136512]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-10 269504]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-11 45744]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-06-28 79136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [2015-06-10 155520]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2014-04-11 772296]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

Re: Čínský malware, vir - chová se jako správce, FRSTLaunche

Napsal: 17 bře 2016 13:03
od F7R
Ten malware je myslím Tencent

Re: Čínský malware, vir - chová se jako správce, FRSTLaunche

Napsal: 17 bře 2016 14:24
od Márty84
Zdravim :)

:arrow: Priste si pri zalozeni noveho tematu neodpovidejte. Snadno se pak stane, ze bude vase tema prehlednuto, protoze to vypda, ze uz tema nekdo resi. Hledame prednostne temata bez odpovedi.

:arrow: Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\Program Files (x86)\AdwCleaner\AdwCleaner[C?].txt ). Ten mi sem zkopirujte.

Re: Čínský malware, vir - chová se jako správce, FRSTLaunche

Napsal: 17 bře 2016 16:12
od F7R
Márty84 píše:Zdravim :)

:arrow: Priste si pri zalozeni noveho tematu neodpovidejte. Snadno se pak stane, ze bude vase tema prehlednuto, protoze to vypda, ze uz tema nekdo resi. Hledame prednostne temata bez odpovedi.

:arrow: Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\Program Files (x86)\AdwCleaner\AdwCleaner[C?].txt ). Ten mi sem zkopirujte.
Díky za ochotu!
Zde log(y) (po restartu se sami nespustili, tak jsem se je snažil vyhledat jak jste psal. Byly tam dva textové soubory:

# AdwCleaner v5.102 - Logfile created 17/03/2016 at 15:04:24
# Updated 13/03/2016 by Xplode
# Database : 2016-03-16.1 [Server]
# Operating system : Windows Vista (TM) Home Premium Service Pack 2 (x86)
# Username : cesko - CESKO-PC
# Running from : C:\Users\cesko\Desktop\adwcleaner_5.102.exe
# Option : Clean
# Support : http://toolslib.net/forum

***** [ Services ] *****

[!] Service Not Deleted : QQPCRTP
[-] Service Deleted : SMUpd
[-] Service Deleted : SMUpdd
[-] Service Deleted : TS888
[-] Service Deleted : TAOAccelerator
[-] Service Deleted : TSDefenseBt
[!] Service Not Deleted : TSSysKit
[-] Service Deleted : QMUdisk
[-] Service Deleted : TFsFlt
[!] Service Not Deleted : tsksp
[!] Service Not Deleted : QQSysMon
[!] Service Not Deleted : TsFltMgr
[-] Service Deleted : TAOKernelDriver
[-] Service Deleted : QQPCHelper
[-] Service Deleted : QMIEProtect
[-] Service Deleted : softaal
[-] Service Deleted : Service Mgr CateredtoYou
[-] Service Deleted : Update Mgr CateredtoYou

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files\Ask.com
[-] Folder Deleted : C:\Program Files\globalUpdate
[-] Folder Deleted : C:\Program Files\HulaToo
[-] Folder Deleted : C:\Program Files\PacFunction
[-] Folder Deleted : C:\Program Files\PANDORA.TV
[-] Folder Deleted : C:\Program Files\SafeWeb
[-] Folder Deleted : C:\Program Files\SerialTrunc
[-] Folder Deleted : C:\Program Files\simplitec
[-] Folder Deleted : C:\Program Files\SNT
[-] Folder Deleted : C:\Program Files\Surftastic
[#] Folder Deleted : C:\Program Files\tencent
[-] Folder Deleted : C:\Program Files\Uniblue
[-] Folder Deleted : C:\Program Files\Zrychleni Pocitace
[-] Folder Deleted : C:\Program Files\Catered to You
[J] Folder Not Deleted : C:\Program Files\HulaToo
[-] Folder Deleted : C:\Program Files\NextCouap
[J] Folder Not Deleted : C:\Program Files\PacFunction
[J] Folder Not Deleted : C:\Program Files\Surftastic
[-] Folder Deleted : C:\Program Files\Wiebbinng
[J] Folder Not Deleted : C:\Program Files\NextCouap
[J] Folder Not Deleted : C:\Program Files\Wiebbinng
[-] Folder Deleted : C:\Program Files\Common Files\Goobzo
[-] Folder Deleted : C:\Program Files\Common Files\Spigot
[#] Folder Deleted : C:\Program Files\Common Files\tencent
[-] Folder Deleted : C:\Program Files\Common Files\a95f8535-bd08-4370-a6e0-814924c0d5f0
[J] Folder Not Deleted : C:\Program Files\Common Files\a95f8535-bd08-4370-a6e0-814924c0d5f0
[-] Folder Deleted : C:\ProgramData\apn
[-] Folder Deleted : C:\ProgramData\Babylon
[-] Folder Deleted : C:\ProgramData\ParetoLogic
[-] Folder Deleted : C:\ProgramData\SafeWeb
[-] Folder Deleted : C:\ProgramData\SearchModule
[-] Folder Deleted : C:\ProgramData\simplitec
[-] Folder Deleted : C:\ProgramData\SNT
[-] Folder Deleted : C:\ProgramData\SuperbApp
[#] Folder Deleted : C:\ProgramData\tencent
[-] Folder Deleted : C:\ProgramData\TXQMPC
[-] Folder Deleted : C:\ProgramData\NextCouap
[-] Folder Deleted : C:\ProgramData\Wiebbinng
[-] Folder Deleted : C:\ProgramData\597e718b2e11269a
[-] Folder Deleted : C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0
[J] Folder Not Deleted : C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0
[J] Folder Not Deleted : C:\ProgramData\NextCouap
[J] Folder Not Deleted : C:\ProgramData\Wiebbinng
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\腾讯软件
[-] Folder Deleted : C:\Users\cesko\AppData\Local\Babylon
[-] Folder Deleted : C:\Users\cesko\AppData\Local\BrowserAir
[-] Folder Deleted : C:\Users\cesko\AppData\Local\genienext
[-] Folder Deleted : C:\Users\cesko\AppData\Local\globalUpdate
[-] Folder Deleted : C:\Users\cesko\AppData\Local\Mobogenie
[-] Folder Deleted : C:\Users\cesko\AppData\Local\Oxy
[-] Folder Deleted : C:\Users\cesko\AppData\Local\PackageAware
[-] Folder Deleted : C:\Users\cesko\AppData\Local\TNT2
[-] Folder Deleted : C:\Users\cesko\AppData\Local\torch
[-] Folder Deleted : C:\Users\cesko\AppData\Local\visi_coupon
[-] Folder Deleted : C:\Users\cesko\AppData\Local\29360
[-] Folder Deleted : C:\Users\cesko\AppData\Local\32054
[-] Folder Deleted : C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj
[-] Folder Deleted : C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
[J] Folder Not Deleted : C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj
[-] Folder Deleted : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\acfoobbgoakpihljnfedbcfaipcdlfhk
[-] Folder Deleted : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj
[-] Folder Deleted : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
[-] Folder Deleted : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
[-] Folder Deleted : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp
[-] Folder Deleted : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
[J] Folder Not Deleted : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\acfoobbgoakpihljnfedbcfaipcdlfhk
[J] Folder Not Deleted : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj
[J] Folder Not Deleted : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
[J] Folder Not Deleted : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
[J] Folder Not Deleted : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
[J] Folder Not Deleted : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp
[-] Folder Deleted : C:\Users\cesko\AppData\LocalLow\Simple Adblock
[-] Folder Deleted : C:\Users\cesko\AppData\Roaming\Babylon
[-] Folder Deleted : C:\Users\cesko\AppData\Roaming\DriverCure
[-] Folder Deleted : C:\Users\cesko\AppData\Roaming\ExpressFiles
[-] Folder Deleted : C:\Users\cesko\AppData\Roaming\GrabPro
[-] Folder Deleted : C:\Users\cesko\AppData\Roaming\Oxy
[-] Folder Deleted : C:\Users\cesko\AppData\Roaming\ParetoLogic
[-] Folder Deleted : C:\Users\cesko\AppData\Roaming\ProgSense
[-] Folder Deleted : C:\Users\cesko\AppData\Roaming\RHEng
[-] Folder Deleted : C:\Users\cesko\AppData\Roaming\SkypEmoticons
[-] Folder Deleted : C:\Users\cesko\AppData\Roaming\Systweak
[#] Folder Deleted : C:\Users\cesko\AppData\Roaming\tencent
[-] Folder Deleted : C:\Users\cesko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件
[-] Folder Deleted : C:\Users\cesko\AppData\Roaming\Mozilla\Firefox\Profiles\qedlxvcc.default\extensions\toolbar@ask.com
[-] Folder Deleted : C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}

***** [ Files ] *****

[-] File Deleted : C:\Users\cesko\daemonprocess.txt
[-] File Deleted : C:\Users\cesko\AppData\Roaming\LiveSupport.exe_log.txt
[-] File Deleted : C:\Users\cesko\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
[-] File Deleted : C:\Users\cesko\AppData\Roaming\regsvr32.exe_log.txt
[-] File Deleted : C:\Windows\system32\roboot.exe
[!] File Not Deleted : C:\Windows\system32\drivers\TsFltMgr.sys
[!] File Not Deleted : C:\Windows\system32\drivers\TSDefenseBt.sys
[!] File Not Deleted : C:\Windows\system32\drivers\TFsFlt.sys
[-] File Deleted : C:\Windows\system32\drivers\TAOKernel.sys
[-] File Deleted : C:\Windows\system32\drivers\TS888.sys
[-] File Deleted : C:\Windows\system32\drivers\TAOAccelerator.sys

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : Scheduled Update for Ask Toolbar
[-] Task Deleted : simplitec Power Suite
[-] Task Deleted : IBUpd2
[-] Task Deleted : SMW_UpdateTask_Time_323138393933393931332d3437415a556c2a3223346c41

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\DownloadProxy.EXE
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\NCTAudioCompress3.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\NCTAudioFormatSettings3.DLL
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\smu.exe
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\.QMDeskTopGCIcon
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@qq.com/QQPCMgr
[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP
[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\QQPCRTP
[-] Key Deleted : HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenuHandlers\QMContextUninstall
[-] Key Deleted : HKEY_CLASSES_ROOT\Folder\ShellEx\ContextMenuHandlers\QMContextUninstall
[-] Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{F54A0D21-6A53-460C-8301-C694EC9E1033}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{F7BCCFD4-2FA6-477D-A1B0-EF7500B3C49E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{51BEE30D-EEC8-4BA3-930B-298B8E759EB1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{d5848f09-fbb0-430a-9386-edaeafc3ea35}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{fa5b4fd5-caf8-499a-a4a0-52378a48978a}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{03F14321-8FED-4CBC-B01A-4B57FC199062}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0EEDB912-C5FA-486F-8334-57288578C627}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2C6F7E96-73BC-47A5-9F51-B67F0BAFE24D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4C58EB04-7B72-4D3D-A36E-66167A99BC31}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4EE0B011-604C-47F3-8F2B-39F79640B85E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{70DE12EA-79F4-46BC-9812-86DB50A2FD64}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B853E835-9F24-4F4B-B55C-E554D15CCCD2}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{50F4150A-48B2-417A-BE4C-C83F580FB904}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6BC38BF4-E84D-46E1-920B-42D31AEA617E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B7667919-3765-4815-A66D-98A09BE662D6}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{920D873D-05AB-4574-AD3A-872DD173658A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CBDECEF7-7A29-4CBF-A009-2673D82C7BF9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{754DF2CE-51E8-4895-B53C-6381418B84AE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D4801E96-E7A1-45F6-B124-7A36DFB40B81}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{29B6CFD5-0064-411A-8C42-9890C83F9921}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D4801E96-E7A1-45F6-B124-7A36DFB40B81}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6C9945B7-1D19-46CB-88C0-45A24DF6CD6E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{84B9B044-17C0-48FB-A300-C9747D5DF29C}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{50F4150A-48B2-417A-BE4C-C83F580FB904}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7854F00C-DC77-477E-A10E-603F48442D3B}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{50F4150A-48B2-417A-BE4C-C83F580FB904}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{29B6CFD5-0064-411A-8C42-9890C83F9921}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{16EE6530-8649-4F42-A9E4-F6A3295AF975}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved [{CBDECEF7-7A29-4CBF-A009-2673D82C7BF9}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved [{63332668-8CE1-445D-A5EE-25929176714E}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved [{754DF2CE-51E8-4895-B53C-6381418B84AE}]
[-] Key Deleted : HKCU\Software\APN PIP
[-] Key Deleted : HKCU\Software\Ask.com
[-] Key Deleted : HKCU\Software\Escolade
[-] Key Deleted : HKCU\Software\ExpressFiles
[-] Key Deleted : HKCU\Software\GlobalUpdate
[-] Key Deleted : HKCU\Software\ParetoLogic
[-] Key Deleted : HKCU\Software\ProgSense
[-] Key Deleted : HKCU\Software\Softonic
[-] Key Deleted : HKCU\Software\TNT2
[-] Key Deleted : HKCU\Software\Yahoo\Companion
[-] Key Deleted : HKCU\Software\Yahoo\YFriendsBar
[-] Key Deleted : HKCU\Software\YahooPartnerToolbar
[-] Key Deleted : HKCU\Software\Mail.Ru
[-] Key Deleted : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
[-] Key Deleted : HKCU\Software\AppDataLow\Software\AskToolbar
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Yahoo\Companion
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Mail.Ru
[-] Key Deleted : HKLM\SOFTWARE\ExpressFiles
[-] Key Deleted : HKLM\SOFTWARE\ICQ\ICQToolbar
[-] Key Deleted : HKLM\SOFTWARE\ParetoLogic
[-] Key Deleted : HKLM\SOFTWARE\PIP
[-] Key Deleted : HKLM\SOFTWARE\SearchModule
[-] Key Deleted : HKLM\SOFTWARE\simplitec
[-] Key Deleted : HKLM\SOFTWARE\Uniblue
[-] Key Deleted : HKLM\SOFTWARE\Yahoo\Companion
[-] Key Deleted : HKLM\SOFTWARE\Mail.Ru
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{5BF593B3-9AC9-44E5-8AC4-92BD3F4DFBD8}_is1
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{D2E9FE6A-7003-42A0-96F6-5569DFC2A3A8}_is1
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BrowserAir
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\inethnfd
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Search module
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AppHelper
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Catered to You
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\AskToolbar
[-] Key Deleted : HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\SavePass
[-] Key Deleted : HKU\S-1-5-19\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
[-] Key Deleted : HKU\S-1-5-20\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3613717200-223133842-2651324926-1000\Software\SweetIM
[-] Key Deleted : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\SavePass
[#] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[#] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[#] Data Restored : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{41BD21F1-516D-4F26-B4F8-E618ECEC59F3}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{AF12B316-CCED-440E-A62D-B12EAF37D3D4}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{4D886D58-D901-4E61-AA57-2DC5672ADB4B}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{0FABAC3B-DFF5-4B40-BB50-D50B5A59F147}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{2EA95CD5-89E9-467A-B51D-AAE553AD13B0}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{F91AE32B-2A4E-4706-8F94-F11069D53D11}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{B9A92135-7505-4041-8D41-6CB2A493A09A}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{CD215F6B-8730-49BA-B895-CBEADA828446}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{8996FE54-1822-4DC4-8A45-FFE6DF003162}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{A056A869-BE55-4C01-AD03-C4D942FBEEF7}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{C66543CB-45A1-47DA-85EB-8E855A6D334A}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{76C095EE-FE66-48D4-A6C9-953F7CB59170}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{04168BE7-8CDF-445C-B6EB-969C03A9D2B0}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{92F42278-560F-4405-AA96-F88E946FD2D8}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{8B4071EB-A443-4841-88E2-F5AD60BBC5B4}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{0C206B60-98FC-4EE4-BEBA-41B58224F0D3}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{7D12EDB4-6CFC-4784-A45A-8564E96AEA15}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{C836A490-2D8D-4D4A-84BC-E2C4D25EA6A0}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{0470BFED-CFC5-4FC6-9678-B42A1B9E89A2}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{0BB7B71D-68C6-4835-91E9-9EC24C24E5D3}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{C29065A9-4AA4-4AE6-81F4-E58A6B13B221}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{9BD73E68-58BA-4214-A0FC-0B0F6CCD7EC3}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{040E2A3B-72EF-4557-BB35-CAE05D6CBC7F}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{9DED7901-E370-4060-828F-F3FCA7ED2355}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{AD4EF059-8128-4263-BEDF-B0BE82018D9F}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{6709AA45-C509-4351-A1C1-FCFBC99B94FB}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{50C2F245-B01A-4194-B0E2-9788557FB827}]
[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DoNotAskAgain]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0AFD384C-9476-4B17-B517-D432E4646718}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F}
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEF06B7A-28A6-4683-BEDD-F80D52B91011}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DoNotAskAgain]
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F}
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[#] Value Deleted : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Microsoft\Internet Explorer\SearchScopes [DoNotAskAgain]
[-] Data Restored : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\akamaihd.net
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www-searching.com

***** [ Web browsers ] *****

[-] [C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : hbcennhacfaagdopikcegfcobcadeocj
[-] [C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : hbcennhacfaagdopikcegfcobcadeocj
[-] [C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : icdlfehblmklkikfigmjhbmmpmkmpooj
[-] [C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : icdlfehblmklkikfigmjhbmmpmkmpooj
[-] [C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : icdlfehblmklkikfigmjhbmmpmkmpooj
[-] [C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : mhkaekfpcppmmioggniknbnbdbcigpkk
[-] [C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : mhkaekfpcppmmioggniknbnbdbcigpkk
[-] [C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : pacgpkgadgmibnhpdidcnfafllnmeomc
[-] [C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : pfndaklgolladniicklehhancnlgocpp
[-] [C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : pfndaklgolladniicklehhancnlgocpp

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

*************************

C:\Program Files\AdwCleaner\AdwCleaner[C1].txt - [24451 bytes] - [17/03/2016 15:04:24]
C:\Program Files\AdwCleaner\AdwCleaner[S1].txt - [27139 bytes] - [17/03/2016 14:59:48]

########## EOF - C:\Program Files\AdwCleaner\AdwCleaner[C1].txt - [24627 bytes] ##########

_______________


# AdwCleaner v5.102 - Logfile created 17/03/2016 at 14:59:48
# Updated 13/03/2016 by Xplode
# Database : 2016-03-16.1 [Server]
# Operating system : Windows Vista (TM) Home Premium Service Pack 2 (x86)
# Username : cesko - CESKO-PC
# Running from : C:\Users\cesko\Desktop\adwcleaner_5.102.exe
# Option : Scan
# Support : http://toolslib.net/forum

***** [ Services ] *****

Service Found : QQPCRTP
Service Found : SMUpd
Service Found : SMUpdd
Service Found : TS888
Service Found : TAOAccelerator
Service Found : TSDefenseBt
Service Found : TSSysKit
Service Found : QMUdisk
Service Found : TFsFlt
Service Found : tsksp
Service Found : QQSysMon
Service Found : TsFltMgr
Service Found : TAOKernelDriver
Service Found : QQPCHelper
Service Found : QMIEProtect
Service Found : softaal
Service Found : Service Mgr CateredtoYou
Service Found : Update Mgr CateredtoYou

***** [ Folders ] *****

Folder Found : C:\Program Files\Ask.com
Folder Found : C:\Program Files\globalUpdate
Folder Found : C:\Program Files\HulaToo
Folder Found : C:\Program Files\PacFunction
Folder Found : C:\Program Files\PANDORA.TV
Folder Found : C:\Program Files\SafeWeb
Folder Found : C:\Program Files\SerialTrunc
Folder Found : C:\Program Files\simplitec
Folder Found : C:\Program Files\SNT
Folder Found : C:\Program Files\Surftastic
Folder Found : C:\Program Files\tencent
Folder Found : C:\Program Files\Uniblue
Folder Found : C:\Program Files\Zrychleni Pocitace
Folder Found : C:\Program Files\Catered to You
Folder Found : C:\Program Files\HulaToo
Folder Found : C:\Program Files\NextCouap
Folder Found : C:\Program Files\PacFunction
Folder Found : C:\Program Files\Surftastic
Folder Found : C:\Program Files\Wiebbinng
Folder Found : C:\Program Files\NextCouap
Folder Found : C:\Program Files\Wiebbinng
Folder Found : C:\Program Files\Common Files\Goobzo
Folder Found : C:\Program Files\Common Files\Spigot
Folder Found : C:\Program Files\Common Files\tencent
Folder Found : C:\Program Files\Common Files\a95f8535-bd08-4370-a6e0-814924c0d5f0
Folder Found : C:\Program Files\Common Files\a95f8535-bd08-4370-a6e0-814924c0d5f0
Folder Found : C:\ProgramData\apn
Folder Found : C:\ProgramData\Babylon
Folder Found : C:\ProgramData\ParetoLogic
Folder Found : C:\ProgramData\SafeWeb
Folder Found : C:\ProgramData\SearchModule
Folder Found : C:\ProgramData\simplitec
Folder Found : C:\ProgramData\SNT
Folder Found : C:\ProgramData\SuperbApp
Folder Found : C:\ProgramData\tencent
Folder Found : C:\ProgramData\TXQMPC
Folder Found : C:\ProgramData\NextCouap
Folder Found : C:\ProgramData\Wiebbinng
Folder Found : C:\ProgramData\597e718b2e11269a
Folder Found : C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0
Folder Found : C:\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0
Folder Found : C:\ProgramData\NextCouap
Folder Found : C:\ProgramData\Wiebbinng
Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\腾讯软件
Folder Found : C:\Users\cesko\AppData\Local\Babylon
Folder Found : C:\Users\cesko\AppData\Local\BrowserAir
Folder Found : C:\Users\cesko\AppData\Local\genienext
Folder Found : C:\Users\cesko\AppData\Local\globalUpdate
Folder Found : C:\Users\cesko\AppData\Local\Mobogenie
Folder Found : C:\Users\cesko\AppData\Local\Oxy
Folder Found : C:\Users\cesko\AppData\Local\PackageAware
Folder Found : C:\Users\cesko\AppData\Local\TNT2
Folder Found : C:\Users\cesko\AppData\Local\torch
Folder Found : C:\Users\cesko\AppData\Local\visi_coupon
Folder Found : C:\Users\cesko\AppData\Local\29360
Folder Found : C:\Users\cesko\AppData\Local\32054
Folder Found : C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj
Folder Found : C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Folder Found : C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj
Folder Found : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\acfoobbgoakpihljnfedbcfaipcdlfhk
Folder Found : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj
Folder Found : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
Folder Found : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
Folder Found : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp
Folder Found : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Folder Found : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\acfoobbgoakpihljnfedbcfaipcdlfhk
Folder Found : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj
Folder Found : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
Folder Found : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
Folder Found : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
Folder Found : C:\Users\cesko\AppData\Local\Chromium\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp
Folder Found : C:\Users\cesko\AppData\LocalLow\Simple Adblock
Folder Found : C:\Users\cesko\AppData\Roaming\Babylon
Folder Found : C:\Users\cesko\AppData\Roaming\DriverCure
Folder Found : C:\Users\cesko\AppData\Roaming\ExpressFiles
Folder Found : C:\Users\cesko\AppData\Roaming\GrabPro
Folder Found : C:\Users\cesko\AppData\Roaming\Oxy
Folder Found : C:\Users\cesko\AppData\Roaming\ParetoLogic
Folder Found : C:\Users\cesko\AppData\Roaming\ProgSense
Folder Found : C:\Users\cesko\AppData\Roaming\RHEng
Folder Found : C:\Users\cesko\AppData\Roaming\SkypEmoticons
Folder Found : C:\Users\cesko\AppData\Roaming\Systweak
Folder Found : C:\Users\cesko\AppData\Roaming\tencent
Folder Found : C:\Users\cesko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件
Folder Found : C:\Users\cesko\AppData\Roaming\Mozilla\Firefox\Profiles\qedlxvcc.default\extensions\toolbar@ask.com
Folder Found : C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}

***** [ Files ] *****

File Found : C:\Users\cesko\daemonprocess.txt
File Found : C:\Users\cesko\AppData\Roaming\LiveSupport.exe_log.txt
File Found : C:\Users\cesko\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
File Found : C:\Users\cesko\AppData\Roaming\regsvr32.exe_log.txt
File Found : C:\Windows\system32\roboot.exe
File Found : C:\Windows\system32\drivers\TsFltMgr.sys
File Found : C:\Windows\system32\drivers\TSDefenseBt.sys
File Found : C:\Windows\system32\drivers\TFsFlt.sys
File Found : C:\Windows\system32\drivers\TAOKernel.sys
File Found : C:\Windows\system32\drivers\TS888.sys
File Found : C:\Windows\system32\drivers\TAOAccelerator.sys

***** [ DLL ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

Task Found : Scheduled Update for Ask Toolbar
Task Found : simplitec Power Suite
Task Found : IBUpd2
Task Found : SMW_UpdateTask_Time_323138393933393931332d3437415a556c2a3223346c41

***** [ Registry ] *****

Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Value Found : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Key Found : HKLM\SOFTWARE\Classes\AppID\DownloadProxy.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\NCTAudioCompress3.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\NCTAudioFormatSettings3.DLL
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\smu.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\.QMDeskTopGCIcon
Key Found : HKLM\SOFTWARE\MozillaPlugins\@qq.com/QQPCMgr
Key Found : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP
Key Found : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\QQPCRTP
Key Found : HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenuHandlers\QMContextUninstall
Key Found : HKEY_CLASSES_ROOT\Folder\ShellEx\ContextMenuHandlers\QMContextUninstall
Key Found : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Found : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Found : HKLM\SOFTWARE\Classes\AppID\{F54A0D21-6A53-460C-8301-C694EC9E1033}
Key Found : HKLM\SOFTWARE\Classes\AppID\{F7BCCFD4-2FA6-477D-A1B0-EF7500B3C49E}
Key Found : HKLM\SOFTWARE\Classes\AppID\{51BEE30D-EEC8-4BA3-930B-298B8E759EB1}
Key Found : HKLM\SOFTWARE\Classes\AppID\{d5848f09-fbb0-430a-9386-edaeafc3ea35}
Key Found : HKLM\SOFTWARE\Classes\AppID\{fa5b4fd5-caf8-499a-a4a0-52378a48978a}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{03F14321-8FED-4CBC-B01A-4B57FC199062}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{0EEDB912-C5FA-486F-8334-57288578C627}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{2C6F7E96-73BC-47A5-9F51-B67F0BAFE24D}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4C58EB04-7B72-4D3D-A36E-66167A99BC31}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4EE0B011-604C-47F3-8F2B-39F79640B85E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{70DE12EA-79F4-46BC-9812-86DB50A2FD64}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B853E835-9F24-4F4B-B55C-E554D15CCCD2}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{50F4150A-48B2-417A-BE4C-C83F580FB904}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6BC38BF4-E84D-46E1-920B-42D31AEA617E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B7667919-3765-4815-A66D-98A09BE662D6}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{920D873D-05AB-4574-AD3A-872DD173658A}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{CBDECEF7-7A29-4CBF-A009-2673D82C7BF9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{754DF2CE-51E8-4895-B53C-6381418B84AE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D4801E96-E7A1-45F6-B124-7A36DFB40B81}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{29B6CFD5-0064-411A-8C42-9890C83F9921}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D4801E96-E7A1-45F6-B124-7A36DFB40B81}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6C9945B7-1D19-46CB-88C0-45A24DF6CD6E}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{84B9B044-17C0-48FB-A300-C9747D5DF29C}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{50F4150A-48B2-417A-BE4C-C83F580FB904}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7854F00C-DC77-477E-A10E-603F48442D3B}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{50F4150A-48B2-417A-BE4C-C83F580FB904}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{29B6CFD5-0064-411A-8C42-9890C83F9921}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{16EE6530-8649-4F42-A9E4-F6A3295AF975}
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved [{CBDECEF7-7A29-4CBF-A009-2673D82C7BF9}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved [{63332668-8CE1-445D-A5EE-25929176714E}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved [{754DF2CE-51E8-4895-B53C-6381418B84AE}]
Key Found : HKCU\Software\APN PIP
Key Found : HKCU\Software\Ask.com
Key Found : HKCU\Software\Escolade
Key Found : HKCU\Software\ExpressFiles
Key Found : HKCU\Software\GlobalUpdate
Key Found : HKCU\Software\ParetoLogic
Key Found : HKCU\Software\ProgSense
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\TNT2
Key Found : HKCU\Software\Yahoo\Companion
Key Found : HKCU\Software\Yahoo\YFriendsBar
Key Found : HKCU\Software\YahooPartnerToolbar
Key Found : HKCU\Software\Mail.Ru
Key Found : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Found : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKCU\Software\AppDataLow\Software\AskToolbar
Key Found : HKCU\Software\AppDataLow\Software\Yahoo\Companion
Key Found : HKCU\Software\AppDataLow\Software\Mail.Ru
Key Found : HKLM\SOFTWARE\ExpressFiles
Key Found : HKLM\SOFTWARE\ICQ\ICQToolbar
Key Found : HKLM\SOFTWARE\ParetoLogic
Key Found : HKLM\SOFTWARE\PIP
Key Found : HKLM\SOFTWARE\SearchModule
Key Found : HKLM\SOFTWARE\simplitec
Key Found : HKLM\SOFTWARE\Uniblue
Key Found : HKLM\SOFTWARE\Uniblue\DriverScanner
Key Found : HKLM\SOFTWARE\Yahoo\Companion
Key Found : HKLM\SOFTWARE\Mail.Ru
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{5BF593B3-9AC9-44E5-8AC4-92BD3F4DFBD8}_is1
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{D2E9FE6A-7003-42A0-96F6-5569DFC2A3A8}_is1
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BrowserAir
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\inethnfd
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Search module
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AppHelper
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Catered to You
Key Found : HKU\.DEFAULT\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKU\.DEFAULT\Software\AppDataLow\Software\AskToolbar
Key Found : HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\SavePass
Key Found : HKU\S-1-5-19\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKU\S-1-5-20\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\APN PIP
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Ask.com
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Escolade
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\ExpressFiles
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\GlobalUpdate
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\ParetoLogic
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\ProgSense
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Softonic
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\TNT2
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Yahoo\Companion
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Yahoo\YFriendsBar
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\YahooPartnerToolbar
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Mail.Ru
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\AppDataLow\Software\AskToolbar
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\AppDataLow\Software\Yahoo\Companion
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\AppDataLow\Software\Mail.Ru
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{5BF593B3-9AC9-44E5-8AC4-92BD3F4DFBD8}_is1
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{D2E9FE6A-7003-42A0-96F6-5569DFC2A3A8}_is1
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BrowserAir
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\inethnfd
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Search module
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AppHelper
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Catered to You
Key Found : HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3613717200-223133842-2651324926-1000\Software\SweetIM
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\SavePass
Key Found : HKU\S-1-5-18\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKU\S-1-5-18\Software\AppDataLow\Software\AskToolbar
Key Found : HKU\S-1-5-18\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\SavePass
Data Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.hao123.com/?tn=95144889_hao_pg
Data Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.hao123.com/?tn=95144889_hao_pg
Data Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.hao123.com/?tn=95144889_hao_pg
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{41BD21F1-516D-4F26-B4F8-E618ECEC59F3}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{AF12B316-CCED-440E-A62D-B12EAF37D3D4}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{4D886D58-D901-4E61-AA57-2DC5672ADB4B}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{0FABAC3B-DFF5-4B40-BB50-D50B5A59F147}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{2EA95CD5-89E9-467A-B51D-AAE553AD13B0}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{F91AE32B-2A4E-4706-8F94-F11069D53D11}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{B9A92135-7505-4041-8D41-6CB2A493A09A}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{CD215F6B-8730-49BA-B895-CBEADA828446}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{8996FE54-1822-4DC4-8A45-FFE6DF003162}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{A056A869-BE55-4C01-AD03-C4D942FBEEF7}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{C66543CB-45A1-47DA-85EB-8E855A6D334A}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{76C095EE-FE66-48D4-A6C9-953F7CB59170}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{04168BE7-8CDF-445C-B6EB-969C03A9D2B0}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{92F42278-560F-4405-AA96-F88E946FD2D8}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{8B4071EB-A443-4841-88E2-F5AD60BBC5B4}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{0C206B60-98FC-4EE4-BEBA-41B58224F0D3}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{7D12EDB4-6CFC-4784-A45A-8564E96AEA15}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{C836A490-2D8D-4D4A-84BC-E2C4D25EA6A0}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{0470BFED-CFC5-4FC6-9678-B42A1B9E89A2}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{0BB7B71D-68C6-4835-91E9-9EC24C24E5D3}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{C29065A9-4AA4-4AE6-81F4-E58A6B13B221}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{9BD73E68-58BA-4214-A0FC-0B0F6CCD7EC3}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{040E2A3B-72EF-4557-BB35-CAE05D6CBC7F}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{9DED7901-E370-4060-828F-F3FCA7ED2355}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{AD4EF059-8128-4263-BEDF-B0BE82018D9F}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{6709AA45-C509-4351-A1C1-FCFBC99B94FB}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{50C2F245-B01A-4194-B0E2-9788557FB827}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DoNotAskAgain]
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0AFD384C-9476-4B17-B517-D432E4646718}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F}
Data Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - {E9410C70-B6AE-41FF-AB71-32F4B279EA5F}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEF06B7A-28A6-4683-BEDD-F80D52B91011}
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DoNotAskAgain]
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F}
Data Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - {E9410C70-B6AE-41FF-AB71-32F4B279EA5F}
Value Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Microsoft\Internet Explorer\SearchScopes [DoNotAskAgain]
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0AFD384C-9476-4B17-B517-D432E4646718}
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Microsoft\Internet Explorer\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F}
Data Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - {E9410C70-B6AE-41FF-AB71-32F4B279EA5F}
Key Found : HKU\S-1-5-21-3613717200-223133842-2651324926-1000\Software\Microsoft\Internet Explorer\SearchScopes\{EEF06B7A-28A6-4683-BEDD-F80D52B91011}
Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\akamaihd.net
Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www-searching.com

***** [ Web browsers ] *****

[C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Found : hbcennhacfaagdopikcegfcobcadeocj
[C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Found : hbcennhacfaagdopikcegfcobcadeocj
[C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Found : icdlfehblmklkikfigmjhbmmpmkmpooj
[C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Found : icdlfehblmklkikfigmjhbmmpmkmpooj
[C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Found : icdlfehblmklkikfigmjhbmmpmkmpooj
[C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Found : mhkaekfpcppmmioggniknbnbdbcigpkk
[C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Found : mhkaekfpcppmmioggniknbnbdbcigpkk
[C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Found : pacgpkgadgmibnhpdidcnfafllnmeomc
[C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Found : pfndaklgolladniicklehhancnlgocpp
[C:\Users\cesko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Found : pfndaklgolladniicklehhancnlgocpp

*************************

C:\Program Files\AdwCleaner\AdwCleaner[S1].txt - [26957 bytes] - [17/03/2016 14:59:48]

########## EOF - C:\Program Files\AdwCleaner\AdwCleaner[S1].txt - [27045 bytes] ##########



___

Koukám že v logu je spousta věcí které jsem odinstaloval, jako yahoo věci, ask.com, uniblue, simplitec, nejaký mail.ru a spamový AirBrowser který se nainstaloval s tímto malvarem. Vidím tam i cosi s Google Chrome - ten vůbec v počítači nemám a je odinstalován.

Pokud píšu nesmysly tak se omlouvám :)

Re: Čínský malware, vir - chová se jako správce, FRSTLaunche

Napsal: 17 bře 2016 17:38
od Márty84
:arrow: Ne vsechno se da tak snadno odinstalovat, nektere veci, zvlast ty nechtene, se zazerou hodne hluboko a obycejna odinstalace je uplne neodstrani.

:arrow: Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu (cili Vlastni sken vsech disku) http://forum.viry.cz/viewtopic.php?f=29&t=144868 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

Re: Čínský malware, vir - chová se jako správce, FRSTLaunche

Napsal: 18 bře 2016 06:36
od F7R
Program mi našel 1039 infikovaných položek malwaru :)

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 17.3.2016
Čas skenování: 18:50:59
Protokol: Scan Malwarebytes.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2016.03.17.04
Databáze rootkitů: v2016.03.12.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows Vista Service Pack 2
CPU: x86
Souborový systém: NTFS
Uživatel: cesko

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 657870
Uplynulý čas: 6 hod, 13 min, 19 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 143
PUP.Optional.CateredToYou, HKLM\SOFTWARE\CateredtoYou, , [74644a3e6a2fdc5a9ac3b08d08fc05fb],
PUP.Optional.RichMediaView, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\NAIIHMCCFEJGDFBKDAMKINJODDFHOGIP, , [45933e4a8e0b4fe7570c36f0897bed13],
PUP.Optional.Booster, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\SW-Booster-S-1095609242, , [7860a8e01b7e211546786f8d699afa06],
PUP.Optional.SearchModule, HKLM\SOFTWARE\WOW6432NODE\SEARCHMODULE\SMUpd, , [805834546f2a5bdb7d7265c3bf45fa06],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1451CAAA-EF5A-4980-87DA-7FC042C22889}, , [c90f56324e4bbd79d65996715ba92ad6],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{153875BD-57D0-459B-B4FD-A3F71795F4B2}, , [ddfb3157762351e5a38db057e91bd52b],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{159AA9CA-7AFD-4497-BAF8-D3AB896A837D}, , [fddb4840e3b64aecbc7438cf07fd2cd4],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{18476452-85B1-4C3E-B58B-8477AFF4E295}, , [e2f6c4c476230d29181820e7b351df21],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{18CF24DF-49BD-48C3-AEEC-8D5ACB625787}, , [a33515734851a09637f836d1f212629e],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1988A11F-C53B-4013-97D6-EF6622DD4BDA}, , [03d54048acedd363d85782850400f907],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1ABA4298-DEE2-4658-86C3-552BCCBCC822}, , [a1370484bbdec86e8ba43ec9da2a04fc],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1D56D93D-9023-42CF-B14B-60CC1BA58957}, , [6b6ddeaafa9f063088a77790010328d8],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1D7F4190-7BC7-4FBB-8E77-371F5345ABEA}, , [02d694f4f1a85ed83af6a85fa75d9868],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1E63A430-A58B-42E6-9BC3-FBCF1DABBBB5}, , [d9ffddab7b1e71c5c9674dbaf212df21],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{223A8E01-BC92-4F63-8D73-19953F8EBBF2}, , [7f59385038616acc32fd4bbcba4ab749],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{23590670-5117-43AF-B8AF-5775C84BF8EF}, , [d305b1d76f2a0f27ed43af5813f1da26],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{238F09B2-468A-4656-BF20-E3F0D498EA84}, , [35a375133168a3937cb409fe808401ff],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2416ECC9-7399-4AA9-96B0-DB97F261D44B}, , [20b8bacef3a68ea8a68acd3ab94be41c],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{268121DB-22EE-4D75-8127-7E16B1101D3F}, , [e1f75a2ebbdee74f78b79e69a55f31cf],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{29AEB0AC-50C5-438C-9CFF-FE3C4ADC589B}, , [61777b0da1f8162039f7897ed82c32ce],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2C414664-C162-4984-B2CE-594AC7EC99EB}, , [0eca0a7eadecf24487a8e720b94b5aa6],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{327038B7-CD87-40E1-BE6E-6062342EF2CB}, , [c90fe3a57f1a0c2a60cfac5b3dc721df],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{335A5861-E3A1-4B8C-82C7-33D4A8CA1756}, , [5e7a11776e2b4ee8cf6058af3cc806fa],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{34013BD5-D76B-4FC4-9A61-B2D22782328A}, , [0bcda2e64b4ed165909fa562b54f639d],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3477B526-C71E-4B9C-B1A7-E2E9886DF4A0}, , [7464acdc6f2a2a0c84ab838432d24db3],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{367E939A-6CA3-45D2-9280-55F73A982353}, , [78607711c1d81d19d45c798ee123d22e],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3A15E6FC-997F-4353-8B73-CED3F5379EB6}, , [00d88602376292a4c56b9a6d768e966a],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3BCC40A7-BF44-4D92-97BC-2419DDCF16FA}, , [489001875f3a0630ab842bdcd3319d63],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3CA4B845-FFAF-4E84-9AC5-D1FD508A6975}, , [449433554b4ef64006292ddaa55f966a],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3FB0D8C2-B5E9-42AF-A785-EA2AED4AD9B0}, , [ce0a8dfbb7e2d75fc669e5224eb609f7],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4032D86D-4CF3-458B-A021-383FFCAD5B2D}, , [27b1a8e06831b5812b043bcc8480827e],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40485453-BE91-4872-8AAF-FC2A1BD65DFE}, , [8d4b7810a2f7bd7964cbb94e41c33ec2],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{406255AB-5875-40CE-9A42-62AFBA914C36}, , [c61270180099082e41ef86815aaa26da],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{409F5C81-B76A-4A64-944E-A8A6E6AE2C98}, , [2bad5038e0b9f73fa09032d543c111ef],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{41CAF1A6-C636-40C2-981E-8965F8E01BD3}, , [29af1870297072c41e11d532d03458a8],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{429418C3-B191-4454-901E-9E529B2673D6}, , [2aae7b0ddfba81b553dd35d2c73ddf21],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4472E936-790A-4052-B79E-365BFFA1C82F}, , [ce0a1672019871c55cd4cb3c00043ec2],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{44F5B2FD-8592-401F-92FF-3479B5DB9FEA}, , [27b16e1aebaef14533fdda2d19eb36ca],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4AC9DF80-DEC6-4030-B9DD-44E95846D414}, , [14c450384a4f58de44ec7d8afe06f907],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BAAD7A8-35E8-4DE1-A2CC-EDD5829F7CEC}, , [45932464bddc63d38ba5a166fb0906fa],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4CA569D0-B059-4900-9C53-1F41A9A8C67E}, , [4a8e64248910ab8b979858afdd27b848],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4D28BD12-9E1A-4D73-BB10-E37C17A6A156}, , [5682c9bf584184b2ad8330d742c2a55b],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4D581188-FC17-4A3D-9C40-EA938FDECB56}, , [b91f3a4ebadfb38342ede6214cb849b7],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4DB6B59B-78D1-4BC2-B610-4E44E0C57FD4}, , [597f8206e4b5033362cdcf38ed17ec14],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{509AFB7A-BA78-4392-8F53-4075B2EA5495}, , [4593fb8d5f3a1026cb65b156996b55ab],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{50AAB027-7147-44AB-B374-F1AAD441D8E2}, , [eeea2a5e2f6a71c57fb058af9b6929d7],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5108313D-381F-4A13-9840-D8EB76B38ED2}, , [9b3da7e1900915217db3af5818ec56aa],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{52071106-E7E5-40E6-ADC3-1C4D4E95AC95}, , [bc1c82064c4d96a02c03ef1827dd7e82],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{531DF315-7BCB-4F62-A677-E249739EC827}, , [bb1dfd8bfb9ec4723df3e126a262c13f],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5345AEAD-1E02-4322-8E20-90134E854AD8}, , [dbfd1d6bdabf5bdb161a7097e61e2ad6],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{54C4C64E-BD94-4C16-91F7-ED7BE1A472FA}, , [578155336237fa3c49e77f880ff59868],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{55443BA9-32F2-4AD3-B73B-9D49B63B9A9F}, , [36a2f5930a8f8aacc56afa0d9d674fb1],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{576DD317-916B-4653-B5E0-7A405024FD71}, , [a73173151c7d72c4161a7394c73d8977],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5B34E12A-626E-4D80-B869-7CBA40617C2A}, , [ecec2b5d6f2ac17507288f78db296f91],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5BF56420-57C9-49D2-BDD5-6A22F0F7454B}, , [14c40f793861f93d8fa1c542e024c23e],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5D0A046A-7440-4F3A-884A-CBAD4ACCA2F1}, , [b622790f2b6eee482c0363a4788cc33d],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5E426F89-5E7E-4CB9-9F40-EEA3434ED742}, , [74648800b2e7b97dad83f413e222e020],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{63FFF964-3D6C-4B74-9126-D09ADD4A5B2D}, , [ab2d117756430234d45b0cfb848031cf],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{64401F28-3833-4888-9BF9-8F1B6FC01BBE}, , [1eba9cec4a4fc472ce617b8c32d240c0],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6972A7FB-3B6D-477A-89EF-C6C5AED19BC9}, , [31a75038b6e380b6999612f505ffb749],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6A2F56FA-6DCE-43E2-ADD7-D0CFC049B8C8}, , [6e6acfb98613f93ddb5448bfc044857b],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6E7ED89B-388E-4858-AC9E-4A9E683E581C}, , [6a6e0484039675c1ea4625e27b896f91],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6EA71C4B-1C95-4B0D-B553-935F75EA20C1}, , [37a110783762a98d50e09176877d29d7],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6EDD120E-AC8C-4F33-9C34-9C9C2DB2D7B7}, , [fbdd6b1dacedd1650f2153b49f657e82],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F613151-AA77-489F-BA84-40324313716A}, , [b1275236e3b670c6b27ec5428c781ce4],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6FF3E64D-B640-48D9-819F-EB4F66F327CF}, , [8a4e394f1683f541cc63818627dd39c7],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{71D00233-3600-43FB-9CE9-BEFD54767138}, , [12c6701872277eb84fe0927536ce43bd],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7350D749-EB6C-4DA9-94D9-F99020F9A481}, , [67719eea6b2e9c9a57d8996eb64e58a8],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7D86057A-5CBA-4EFF-B11B-976B6F1DBF3E}, , [cb0d6a1edebbad8917199c6ba75d7a86],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7DBDE8F9-20AB-408E-A1E6-4FE1D7E8EE9A}, , [dafe3a4ebbde5cdad45bfb0c4fb5926e],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7DDD8F9D-AAD9-40A8-BC9E-EB27597C2D70}, , [d107cbbd7f1aa591d15f7a8d758f0af6],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7F28D152-2BB6-4797-9D3F-CFF5DF2BFECF}, , [f7e121673c5dd264f33c7493f90bd22e],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{80FC4314-FA82-4ECC-A04D-A5AA33CB79AC}, , [894f127651484beb68c7887fb94b956b],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{82004C4C-D4D8-4BF0-BA4A-A818373A16C5}, , [27b14d3b3069e05651de7592b2528977],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{84544FCF-1E58-4938-9667-8774A01AD65F}, , [498f60285a3fe25451dfcc3b9e665ba5],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{857624BE-2175-461E-B174-CBB544CBB6DB}, , [5b7ded9bb7e2de58fa36c443f50f38c8],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{86189222-D6E9-4CE0-B6C5-3F9AF9E8884E}, , [c315fa8e841561d56fc026e17b898080],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8857F871-A96B-4AF7-8296-6FB1443A644A}, , [9147cdbb5d3cb87edf516b9c49bb1ee2],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8A5285FA-5209-4D22-AF3E-9DCD80B7C287}, , [4494fc8c356431059a95c6416f9533cd],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8AEF9322-38A8-45E3-951E-F778DCD1E646}, , [9345c7c1fb9ecb6b34fb49be788cfc04],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8B953B2B-67E8-449B-AB63-C47E6F64B039}, , [cc0cd5b38c0d1c1a4de30205cb398080],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C416A0D-F32F-4887-8D8A-7312C44541C0}, , [cd0be5a3e9b08caad15ed1365ba93dc3],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8DDAE5ED-3D67-4F92-8E88-18831F62E2B7}, , [7563216703968aac1f11f61126de768a],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{939D4835-4370-4B07-8898-F02783B2A3F1}, , [fddb88005346c76f0b25e225ce3605fb],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{943F5BDB-F2C6-4277-91B9-29CB42983A7E}, , [c711701897021323c7689f68986c5aa6],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{94913CCA-EC90-44A2-9CA2-A444E991BAFA}, , [85530781bbde280e0f2110f79371916f],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{94F6B8A2-8960-40FF-A7BA-D843B3631B13}, , [6870f29627727db94ae5fc0b59ab0bf5],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{985E068B-F45D-4C95-8112-551F6DE2898A}, , [e6f2691fe5b455e145ea848314f0e31d],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A169E6C1-945B-4B2D-8E9C-AB4C31EB66F9}, , [4692038523762e08ac838d7a7d877c84],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A37761F2-64FB-44D1-A146-DA7C7911AD21}, , [f9dfd5b3d6c394a26fc1df28d52f41bf],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A37C69F3-CE4C-4B9B-AC1C-FA85A6EAEF5F}, , [0bcd682072275bdbed43858205ff847c],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A4214B8E-7841-42C3-ACD7-FC898B96C020}, , [e6f23850fb9e65d1f63a4dbab450a25e],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A4EFE794-3611-4292-9012-AF441AD05330}, , [7e5aafd9b3e690a689a7fb0c5fa5b14f],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A78731B3-8F07-4E98-9283-8A86C8E56F9A}, , [aa2eb7d167322016f23d84834cb830d0],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AA0E8FC6-7BAC-49D9-BBF8-18F279CE4622}, , [01d74a3e7e1b0333e64a1aed59ab659b],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AA6CA286-173A-445A-965E-A6A773E0BA40}, , [d107a7e1bddcd66060cf060184805aa6],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AA8F978B-23CF-43E9-9EB4-1CBF207C9A7E}, , [e1f761274a4fb284e9471fe8bb499d63],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AC392745-710F-4389-B24B-C72E80FD6A72}, , [74643e4ae2b7a39373bdf413d92bc23e],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AD52B9A6-1092-4DA7-B63E-84B085542A89}, , [7563c4c4e9b08aac210e18ef40c48e72],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AE340266-8911-4404-A13A-D9999C9B45DB}, , [31a70682f3a68aacb77927e0986c669a],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B0DE71FE-E6C6-49AC-80F2-35892950D9EE}, , [4b8dc5c39009b87ee54b6a9d986c639d],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B37B5FAC-CA48-4C7F-9E50-43B2601AE01C}, , [3f9933550693fe3889a6f4131be9629e],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B3B02149-D62F-4E92-93B5-641CA0D15FC9}, , [d206a6e2f1a80d2973bda067887c3bc5],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B8CBE04A-BE76-49B2-A612-A3FC71BD7EAC}, , [b22674142c6d69cde94758af37cd1be5],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B948DF73-6855-4577-AB6C-221D911556C6}, , [02d63f499405c274f9364cbbf311e51b],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BA590438-E6BB-4761-8DBD-51E6F230652C}, , [a23632561a7f7eb8dd5351b648bc7a86],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BC3E34BB-15BD-4B9B-9283-7837E47D94D7}, , [42962f59d6c3e254012faa5df41016ea],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BC8C9F78-D8CF-46F6-A284-2131E943903C}, , [e2f6b8d09ffa082e29062bdc1de7e41c],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BCC6B369-82FC-40F4-B967-3AE0F14677C6}, , [558356321980db5bb8781cebf212ff01],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BD9735CA-815F-44C4-8247-D0E99BFFA46A}, , [8c4c7a0eaaef0d29af8015f2e91b8080],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C030A77F-D436-4931-BC88-95C726A5D34C}, , [91472266c3d67cba85aae4230103ef11],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C1494361-5F62-48A5-BFCB-D86AF2C629E5}, , [9a3ee99fe5b4de58131c9374f410926e],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7B96334-82B5-4338-B3CB-5B73B1B61C45}, , [f9df4444f3a688aef9370ff8fb09926e],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CA234620-DCA5-47F5-8184-70E84A4014F8}, , [2eaa32566930bb7b6ac6dd2a976d21df],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CDE72E77-8F34-4308-B05E-F3CF54F8D5F6}, , [9e3a0e7a5940c472fb34c740ca3afc04],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D05CC11A-B396-40D1-9175-1852AF2FBF29}, , [4e8a18707b1e9c9a1a15b453996b29d7],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D659E36D-1D88-4D1B-8E13-15AE2567BBC5}, , [4098e7a1554495a109264fb8bb49c838],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D69B4488-AC77-4A31-86CC-83E1A5FDDF9F}, , [a533eb9d58410b2b0e21c93e669ea957],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D76B415B-F25E-4FA2-9C52-5DDA72AA4877}, , [9246a3e51d7c59ddd25e95729f657090],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D85A8205-939D-4F3E-97B8-AE909FE99E26}, , [f2e651379dfc49edbc73ca3d0df78977],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DB620F18-6296-483C-B36E-753A7B1232C0}, , [7464a8e03f5a62d4ee425ea9bc48c937],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E0C57F03-9157-4A09-9E58-9275588A8B48}, , [439548405c3df5418da38780b94bcb35],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E1E41C09-9D35-4747-8232-7787CF84C73F}, , [16c245437425d16532fd2addc44001ff],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E3E4FAE8-9755-4ACB-BEFE-967ED5DCD877}, , [b3256028d8c1b77fdb55f01756ae0af6],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E40E0625-B4B4-48A0-AF79-C19737CEA43E}, , [399fc2c6475296a0ed437a8d5ea6ea16],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6FC1BDD-8A33-4A18-B611-63DB7F11DCB4}, , [934584040c8d96a0ff304bbcde2621df],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E788935C-69B9-4F15-ADC0-1C30ED4CB862}, , [c90fa5e3d7c2c472230c8087fa0aa759],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E7B480DC-3D46-4D7B-9F9D-728631619510}, , [3b9db3d552475ed835fb7d8a33d1e719],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E8393463-5736-47E5-9C26-845447B8A883}, , [498f20680297132380b0bf48897b738d],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EBF69133-F487-4652-AA78-7EC74EB8CD54}, , [f7e1bace86130c2a9997060142c2bf41],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ED766E92-870F-4F64-99B2-17C349E9DCE6}, , [a632008817828ea877b92fd8b74d7e82],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F075B91A-656F-45F0-8589-B0F2A2357236}, , [88507216c9d0191da88845c224e0cc34],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F10A1C6B-512F-4B64-A197-BB7A1C105361}, , [7a5e17716d2c59ddf93608ff83812ad6],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F10B530F-2B5D-4D95-AB85-BE7C7F238D81}, , [f4e450385d3c9a9c3ff0ff08db2940c0],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F4488379-8E9B-4BFD-AB7F-945C90C9548F}, , [13c5a7e1ff9ad85e1e12c1464fb57a86],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F6541563-B93A-468F-9488-7FF48DBE88D4}, , [bb1d6226debb7cbac26edf28778d48b8],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F8246D4F-ABD8-4EA1-AE1A-5188F8E678B0}, , [6375fc8c3366a393121df0178e7609f7],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F851D0A9-4377-423A-B2A0-2825315AFFEB}, , [b721daae8f0aa39332fd0205b2529b65],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FA768B5B-5153-4E9B-BB36-D42B7B3BA17F}, , [12c6c9bf2b6e95a1c66a8c7b0bf9d32d],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FB18B09C-3979-4357-BBCA-FE5593A38567}, , [3d9b137553466bcb76b98582798b5aa6],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FB4D9403-F377-46C4-90AA-8BFA60506634}, , [627633557d1ce05685abf116659fc43c],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FBAACBEE-29F4-47B4-9061-B0615B20997D}, , [15c3d5b3fc9d76c040ef65a24eb615eb],
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FC1568D6-4806-4545-B530-53DD444E833F}, , [6f697513afeab6806fc10cfbd1331fe1],

Hodnoty registru: 141
PUP.Optional.RichMediaView, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\naiihmccfejgdfbkdamkinjoddfhogip|path, C:\Program Files\RichMediaViewV1\RichMediaViewV1release5533\ch\RichMediaViewV1release5533.crx, , [45933e4a8e0b4fe7570c36f0897bed13]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1451CAAA-EF5A-4980-87DA-7FC042C22889}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [c90f56324e4bbd79d65996715ba92ad6]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{153875BD-57D0-459B-B4FD-A3F71795F4B2}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [ddfb3157762351e5a38db057e91bd52b]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{159AA9CA-7AFD-4497-BAF8-D3AB896A837D}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [fddb4840e3b64aecbc7438cf07fd2cd4]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{18476452-85B1-4C3E-B58B-8477AFF4E295}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [e2f6c4c476230d29181820e7b351df21]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{18CF24DF-49BD-48C3-AEEC-8D5ACB625787}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [a33515734851a09637f836d1f212629e]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1988A11F-C53B-4013-97D6-EF6622DD4BDA}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [03d54048acedd363d85782850400f907]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1ABA4298-DEE2-4658-86C3-552BCCBCC822}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [a1370484bbdec86e8ba43ec9da2a04fc]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1D56D93D-9023-42CF-B14B-60CC1BA58957}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [6b6ddeaafa9f063088a77790010328d8]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1D7F4190-7BC7-4FBB-8E77-371F5345ABEA}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [02d694f4f1a85ed83af6a85fa75d9868]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1E63A430-A58B-42E6-9BC3-FBCF1DABBBB5}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [d9ffddab7b1e71c5c9674dbaf212df21]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{223A8E01-BC92-4F63-8D73-19953F8EBBF2}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [7f59385038616acc32fd4bbcba4ab749]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{23590670-5117-43AF-B8AF-5775C84BF8EF}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [d305b1d76f2a0f27ed43af5813f1da26]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{238F09B2-468A-4656-BF20-E3F0D498EA84}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [35a375133168a3937cb409fe808401ff]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2416ECC9-7399-4AA9-96B0-DB97F261D44B}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [20b8bacef3a68ea8a68acd3ab94be41c]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{268121DB-22EE-4D75-8127-7E16B1101D3F}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [e1f75a2ebbdee74f78b79e69a55f31cf]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{29AEB0AC-50C5-438C-9CFF-FE3C4ADC589B}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [61777b0da1f8162039f7897ed82c32ce]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2C414664-C162-4984-B2CE-594AC7EC99EB}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [0eca0a7eadecf24487a8e720b94b5aa6]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{327038B7-CD87-40E1-BE6E-6062342EF2CB}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [c90fe3a57f1a0c2a60cfac5b3dc721df]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{335A5861-E3A1-4B8C-82C7-33D4A8CA1756}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [5e7a11776e2b4ee8cf6058af3cc806fa]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{34013BD5-D76B-4FC4-9A61-B2D22782328A}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [0bcda2e64b4ed165909fa562b54f639d]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3477B526-C71E-4B9C-B1A7-E2E9886DF4A0}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [7464acdc6f2a2a0c84ab838432d24db3]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{367E939A-6CA3-45D2-9280-55F73A982353}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [78607711c1d81d19d45c798ee123d22e]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3A15E6FC-997F-4353-8B73-CED3F5379EB6}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [00d88602376292a4c56b9a6d768e966a]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3BCC40A7-BF44-4D92-97BC-2419DDCF16FA}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [489001875f3a0630ab842bdcd3319d63]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3CA4B845-FFAF-4E84-9AC5-D1FD508A6975}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [449433554b4ef64006292ddaa55f966a]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3FB0D8C2-B5E9-42AF-A785-EA2AED4AD9B0}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [ce0a8dfbb7e2d75fc669e5224eb609f7]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4032D86D-4CF3-458B-A021-383FFCAD5B2D}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [27b1a8e06831b5812b043bcc8480827e]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40485453-BE91-4872-8AAF-FC2A1BD65DFE}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [8d4b7810a2f7bd7964cbb94e41c33ec2]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{406255AB-5875-40CE-9A42-62AFBA914C36}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [c61270180099082e41ef86815aaa26da]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{409F5C81-B76A-4A64-944E-A8A6E6AE2C98}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [2bad5038e0b9f73fa09032d543c111ef]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{41CAF1A6-C636-40C2-981E-8965F8E01BD3}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [29af1870297072c41e11d532d03458a8]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{429418C3-B191-4454-901E-9E529B2673D6}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [2aae7b0ddfba81b553dd35d2c73ddf21]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4472E936-790A-4052-B79E-365BFFA1C82F}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [ce0a1672019871c55cd4cb3c00043ec2]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{44F5B2FD-8592-401F-92FF-3479B5DB9FEA}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [27b16e1aebaef14533fdda2d19eb36ca]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4AC9DF80-DEC6-4030-B9DD-44E95846D414}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [14c450384a4f58de44ec7d8afe06f907]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BAAD7A8-35E8-4DE1-A2CC-EDD5829F7CEC}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [45932464bddc63d38ba5a166fb0906fa]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4CA569D0-B059-4900-9C53-1F41A9A8C67E}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [4a8e64248910ab8b979858afdd27b848]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4D28BD12-9E1A-4D73-BB10-E37C17A6A156}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [5682c9bf584184b2ad8330d742c2a55b]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4D581188-FC17-4A3D-9C40-EA938FDECB56}|AppName, Torntv V9.0-enabler.exe-buttonutil.exe, , [b91f3a4ebadfb38342ede6214cb849b7]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4DB6B59B-78D1-4BC2-B610-4E44E0C57FD4}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [597f8206e4b5033362cdcf38ed17ec14]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{509AFB7A-BA78-4392-8F53-4075B2EA5495}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [4593fb8d5f3a1026cb65b156996b55ab]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{50AAB027-7147-44AB-B374-F1AAD441D8E2}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [eeea2a5e2f6a71c57fb058af9b6929d7]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5108313D-381F-4A13-9840-D8EB76B38ED2}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [9b3da7e1900915217db3af5818ec56aa]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{52071106-E7E5-40E6-ADC3-1C4D4E95AC95}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [bc1c82064c4d96a02c03ef1827dd7e82]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{531DF315-7BCB-4F62-A677-E249739EC827}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [bb1dfd8bfb9ec4723df3e126a262c13f]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5345AEAD-1E02-4322-8E20-90134E854AD8}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [dbfd1d6bdabf5bdb161a7097e61e2ad6]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{54C4C64E-BD94-4C16-91F7-ED7BE1A472FA}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [578155336237fa3c49e77f880ff59868]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{55443BA9-32F2-4AD3-B73B-9D49B63B9A9F}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [36a2f5930a8f8aacc56afa0d9d674fb1]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{576DD317-916B-4653-B5E0-7A405024FD71}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [a73173151c7d72c4161a7394c73d8977]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5B34E12A-626E-4D80-B869-7CBA40617C2A}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [ecec2b5d6f2ac17507288f78db296f91]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5BF56420-57C9-49D2-BDD5-6A22F0F7454B}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [14c40f793861f93d8fa1c542e024c23e]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5D0A046A-7440-4F3A-884A-CBAD4ACCA2F1}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [b622790f2b6eee482c0363a4788cc33d]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5E426F89-5E7E-4CB9-9F40-EEA3434ED742}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [74648800b2e7b97dad83f413e222e020]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{63FFF964-3D6C-4B74-9126-D09ADD4A5B2D}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [ab2d117756430234d45b0cfb848031cf]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{64401F28-3833-4888-9BF9-8F1B6FC01BBE}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [1eba9cec4a4fc472ce617b8c32d240c0]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6972A7FB-3B6D-477A-89EF-C6C5AED19BC9}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [31a75038b6e380b6999612f505ffb749]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6A2F56FA-6DCE-43E2-ADD7-D0CFC049B8C8}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [6e6acfb98613f93ddb5448bfc044857b]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6E7ED89B-388E-4858-AC9E-4A9E683E581C}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [6a6e0484039675c1ea4625e27b896f91]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6EA71C4B-1C95-4B0D-B553-935F75EA20C1}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [37a110783762a98d50e09176877d29d7]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6EDD120E-AC8C-4F33-9C34-9C9C2DB2D7B7}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [fbdd6b1dacedd1650f2153b49f657e82]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F613151-AA77-489F-BA84-40324313716A}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [b1275236e3b670c6b27ec5428c781ce4]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6FF3E64D-B640-48D9-819F-EB4F66F327CF}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [8a4e394f1683f541cc63818627dd39c7]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{71D00233-3600-43FB-9CE9-BEFD54767138}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [12c6701872277eb84fe0927536ce43bd]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7350D749-EB6C-4DA9-94D9-F99020F9A481}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [67719eea6b2e9c9a57d8996eb64e58a8]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7D86057A-5CBA-4EFF-B11B-976B6F1DBF3E}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [cb0d6a1edebbad8917199c6ba75d7a86]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7DBDE8F9-20AB-408E-A1E6-4FE1D7E8EE9A}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [dafe3a4ebbde5cdad45bfb0c4fb5926e]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7DDD8F9D-AAD9-40A8-BC9E-EB27597C2D70}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [d107cbbd7f1aa591d15f7a8d758f0af6]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7F28D152-2BB6-4797-9D3F-CFF5DF2BFECF}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [f7e121673c5dd264f33c7493f90bd22e]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{80FC4314-FA82-4ECC-A04D-A5AA33CB79AC}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [894f127651484beb68c7887fb94b956b]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{82004C4C-D4D8-4BF0-BA4A-A818373A16C5}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [27b14d3b3069e05651de7592b2528977]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{84544FCF-1E58-4938-9667-8774A01AD65F}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [498f60285a3fe25451dfcc3b9e665ba5]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{857624BE-2175-461E-B174-CBB544CBB6DB}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [5b7ded9bb7e2de58fa36c443f50f38c8]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{86189222-D6E9-4CE0-B6C5-3F9AF9E8884E}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [c315fa8e841561d56fc026e17b898080]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8857F871-A96B-4AF7-8296-6FB1443A644A}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [9147cdbb5d3cb87edf516b9c49bb1ee2]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8A5285FA-5209-4D22-AF3E-9DCD80B7C287}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [4494fc8c356431059a95c6416f9533cd]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8AEF9322-38A8-45E3-951E-F778DCD1E646}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [9345c7c1fb9ecb6b34fb49be788cfc04]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8B953B2B-67E8-449B-AB63-C47E6F64B039}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [cc0cd5b38c0d1c1a4de30205cb398080]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C416A0D-F32F-4887-8D8A-7312C44541C0}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [cd0be5a3e9b08caad15ed1365ba93dc3]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8DDAE5ED-3D67-4F92-8E88-18831F62E2B7}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [7563216703968aac1f11f61126de768a]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{939D4835-4370-4B07-8898-F02783B2A3F1}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [fddb88005346c76f0b25e225ce3605fb]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{943F5BDB-F2C6-4277-91B9-29CB42983A7E}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [c711701897021323c7689f68986c5aa6]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{94913CCA-EC90-44A2-9CA2-A444E991BAFA}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [85530781bbde280e0f2110f79371916f]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{94F6B8A2-8960-40FF-A7BA-D843B3631B13}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [6870f29627727db94ae5fc0b59ab0bf5]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{985E068B-F45D-4C95-8112-551F6DE2898A}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [e6f2691fe5b455e145ea848314f0e31d]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A169E6C1-945B-4B2D-8E9C-AB4C31EB66F9}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [4692038523762e08ac838d7a7d877c84]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A37761F2-64FB-44D1-A146-DA7C7911AD21}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [f9dfd5b3d6c394a26fc1df28d52f41bf]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A37C69F3-CE4C-4B9B-AC1C-FA85A6EAEF5F}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [0bcd682072275bdbed43858205ff847c]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A4214B8E-7841-42C3-ACD7-FC898B96C020}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [e6f23850fb9e65d1f63a4dbab450a25e]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A4EFE794-3611-4292-9012-AF441AD05330}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [7e5aafd9b3e690a689a7fb0c5fa5b14f]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A78731B3-8F07-4E98-9283-8A86C8E56F9A}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [aa2eb7d167322016f23d84834cb830d0]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AA0E8FC6-7BAC-49D9-BBF8-18F279CE4622}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [01d74a3e7e1b0333e64a1aed59ab659b]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AA6CA286-173A-445A-965E-A6A773E0BA40}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [d107a7e1bddcd66060cf060184805aa6]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AA8F978B-23CF-43E9-9EB4-1CBF207C9A7E}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [e1f761274a4fb284e9471fe8bb499d63]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AC392745-710F-4389-B24B-C72E80FD6A72}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [74643e4ae2b7a39373bdf413d92bc23e]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AD52B9A6-1092-4DA7-B63E-84B085542A89}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [7563c4c4e9b08aac210e18ef40c48e72]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AE340266-8911-4404-A13A-D9999C9B45DB}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [31a70682f3a68aacb77927e0986c669a]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B0DE71FE-E6C6-49AC-80F2-35892950D9EE}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [4b8dc5c39009b87ee54b6a9d986c639d]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B37B5FAC-CA48-4C7F-9E50-43B2601AE01C}|AppName, Torntv V9.0-enabler.exe-buttonutil.exe, , [3f9933550693fe3889a6f4131be9629e]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B3B02149-D62F-4E92-93B5-641CA0D15FC9}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [d206a6e2f1a80d2973bda067887c3bc5]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B8CBE04A-BE76-49B2-A612-A3FC71BD7EAC}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [b22674142c6d69cde94758af37cd1be5]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B948DF73-6855-4577-AB6C-221D911556C6}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [02d63f499405c274f9364cbbf311e51b]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BA590438-E6BB-4761-8DBD-51E6F230652C}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [a23632561a7f7eb8dd5351b648bc7a86]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BC3E34BB-15BD-4B9B-9283-7837E47D94D7}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [42962f59d6c3e254012faa5df41016ea]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BC8C9F78-D8CF-46F6-A284-2131E943903C}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [e2f6b8d09ffa082e29062bdc1de7e41c]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BCC6B369-82FC-40F4-B967-3AE0F14677C6}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [558356321980db5bb8781cebf212ff01]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BD9735CA-815F-44C4-8247-D0E99BFFA46A}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [8c4c7a0eaaef0d29af8015f2e91b8080]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C030A77F-D436-4931-BC88-95C726A5D34C}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [91472266c3d67cba85aae4230103ef11]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C1494361-5F62-48A5-BFCB-D86AF2C629E5}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [9a3ee99fe5b4de58131c9374f410926e]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7B96334-82B5-4338-B3CB-5B73B1B61C45}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [f9df4444f3a688aef9370ff8fb09926e]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CA234620-DCA5-47F5-8184-70E84A4014F8}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [2eaa32566930bb7b6ac6dd2a976d21df]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CDE72E77-8F34-4308-B05E-F3CF54F8D5F6}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [9e3a0e7a5940c472fb34c740ca3afc04]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D05CC11A-B396-40D1-9175-1852AF2FBF29}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [4e8a18707b1e9c9a1a15b453996b29d7]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D659E36D-1D88-4D1B-8E13-15AE2567BBC5}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [4098e7a1554495a109264fb8bb49c838]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D69B4488-AC77-4A31-86CC-83E1A5FDDF9F}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [a533eb9d58410b2b0e21c93e669ea957]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D76B415B-F25E-4FA2-9C52-5DDA72AA4877}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [9246a3e51d7c59ddd25e95729f657090]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D85A8205-939D-4F3E-97B8-AE909FE99E26}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [f2e651379dfc49edbc73ca3d0df78977]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DB620F18-6296-483C-B36E-753A7B1232C0}|AppName, Torntv V9.0-enabler.exe-codedownloader.exe, , [7464a8e03f5a62d4ee425ea9bc48c937]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E0C57F03-9157-4A09-9E58-9275588A8B48}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [439548405c3df5418da38780b94bcb35]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET

Re: Čínský malware, vir - chová se jako správce, FRSTLaunche

Napsal: 18 bře 2016 06:37
od F7R
EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E1E41C09-9D35-4747-8232-7787CF84C73F}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [16c245437425d16532fd2addc44001ff]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E3E4FAE8-9755-4ACB-BEFE-967ED5DCD877}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [b3256028d8c1b77fdb55f01756ae0af6]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E40E0625-B4B4-48A0-AF79-C19737CEA43E}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [399fc2c6475296a0ed437a8d5ea6ea16]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6FC1BDD-8A33-4A18-B611-63DB7F11DCB4}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [934584040c8d96a0ff304bbcde2621df]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E788935C-69B9-4F15-ADC0-1C30ED4CB862}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [c90fa5e3d7c2c472230c8087fa0aa759]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E7B480DC-3D46-4D7B-9F9D-728631619510}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [3b9db3d552475ed835fb7d8a33d1e719]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E8393463-5736-47E5-9C26-845447B8A883}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [498f20680297132380b0bf48897b738d]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EBF69133-F487-4652-AA78-7EC74EB8CD54}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [f7e1bace86130c2a9997060142c2bf41]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ED766E92-870F-4F64-99B2-17C349E9DCE6}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [a632008817828ea877b92fd8b74d7e82]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F075B91A-656F-45F0-8589-B0F2A2357236}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [88507216c9d0191da88845c224e0cc34]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F10A1C6B-512F-4B64-A197-BB7A1C105361}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [7a5e17716d2c59ddf93608ff83812ad6]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F10B530F-2B5D-4D95-AB85-BE7C7F238D81}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [f4e450385d3c9a9c3ff0ff08db2940c0]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F4488379-8E9B-4BFD-AB7F-945C90C9548F}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [13c5a7e1ff9ad85e1e12c1464fb57a86]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F6541563-B93A-468F-9488-7FF48DBE88D4}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [bb1d6226debb7cbac26edf28778d48b8]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F8246D4F-ABD8-4EA1-AE1A-5188F8E678B0}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [6375fc8c3366a393121df0178e7609f7]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F851D0A9-4377-423A-B2A0-2825315AFFEB}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [b721daae8f0aa39332fd0205b2529b65]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FA768B5B-5153-4E9B-BB36-D42B7B3BA17F}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [12c6c9bf2b6e95a1c66a8c7b0bf9d32d]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FB18B09C-3979-4357-BBCA-FE5593A38567}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [3d9b137553466bcb76b98582798b5aa6]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FB4D9403-F377-46C4-90AA-8BFA60506634}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [627633557d1ce05685abf116659fc43c]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FBAACBEE-29F4-47B4-9061-B0615B20997D}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-buttonutil.exe, , [15c3d5b3fc9d76c040ef65a24eb615eb]
PUP.Optional.CrossRider, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FC1568D6-4806-4545-B530-53DD444E833F}|AppName, 5aa3d933-32c7-4b03-9bcf-13d56020c4b9-2.exe-codedownloader.exe, , [6f697513afeab6806fc10cfbd1331fe1]
PUP.Optional.DeskBar, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION|DeskBar.exe, 8888, , [5b7d5a2eb6e3092df89bf48641c3718f]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 1
PUP.Optional.SafeWeb, C:\Program Files\safeiweuBB, , [c7113a4eb3e6e94d7b9f71b6739135cb],

Soubory: 754
PUP.Optional.CateredToYou, C:\Program Files\AdwCleaner\FileQuarantine\C\Program Files\Common Files\a95f8535-bd08-4370-a6e0-814924c0d5f0\updater.exe.vir, , [b226592fb7e240f68db55105e51ce51b],
PUP.Optional.Goobzo, C:\Program Files\AdwCleaner\FileQuarantine\C\Program Files\Common Files\Goobzo\GBUpdate\sma.exe.vir, , [07d174146138fe387d891ef09d65a55b],
PUP.Optional.SearchModule, C:\Program Files\AdwCleaner\FileQuarantine\C\Program Files\Common Files\Goobzo\GBUpdate\smci32.dll.vir, , [54849cec7425d75fed7ee925fd0558a8],
PUP.Optional.SearchModule, C:\Program Files\AdwCleaner\FileQuarantine\C\Program Files\Common Files\Goobzo\GBUpdate\smi32.exe.vir, , [6e6adfa99efb39fd465ed33c20e2ba46],
PUP.Optional.SearchModule, C:\Program Files\AdwCleaner\FileQuarantine\C\Program Files\Common Files\Goobzo\GBUpdate\smu.exe.vir, , [03d5cbbdcdcc7db998d324ea1ce6966a],
PUP.Optional.SearchModule, C:\Program Files\AdwCleaner\FileQuarantine\C\Program Files\Common Files\Goobzo\GBUpdate\smw.sys.vir, , [05d3d6b2bfda63d3f9aa7897020049b7],
Backdoor.PcClient, C:\Program Files\AdwCleaner\FileQuarantine\C\Program Files\tencent\QQPCMgr\Plugins\PluginsSetupBak\QQPhoneManager-5.5.1_710201.4892.pa.exe.vir, , [73657d0bdcbdf343068440933dc75ca4],
PUP.Optional.CateredToYou, C:\Program Files\AdwCleaner\FileQuarantine\C\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugincontainer.exe.vir, , [70684a3e7b1e42f4d969441280819e62],
PUP.Optional.CateredToYou, C:\Program Files\AdwCleaner\FileQuarantine\C\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\12\Plugin.exe.vir, , [d305cdbba9f09c9a40021343847d7f81],
PUP.Optional.CateredToYou, C:\Program Files\AdwCleaner\FileQuarantine\C\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\12\resources\plugin.dll.vir, , [14c45f29a2f7092dfe440254679abc44],
PUP.Optional.CateredToYou, C:\Program Files\AdwCleaner\FileQuarantine\C\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\2\Plugin.exe.vir, , [f6e2b8d00d8c2016024088ce7e830af6],
PUP.Optional.CateredToYou, C:\Program Files\AdwCleaner\FileQuarantine\C\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\3\Plugin.exe.vir, , [399f691fdbbe0432db67015557aab64a],
PUP.Optional.CateredToYou, C:\Program Files\AdwCleaner\FileQuarantine\C\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\5\Plugin.exe.vir, , [4f89ee9a5247a4922b17fe5829d830d0],
PUP.Optional.CateredToYou, C:\Program Files\AdwCleaner\FileQuarantine\C\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\6\Plugin.exe.vir, , [5a7e24645940fd39db6778de02ffe020],
PUP.Optional.CateredToYou, C:\Program Files\AdwCleaner\FileQuarantine\C\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\7\Plugin.exe.vir, , [e4f43355683148ee2a185204e71ae917],
PUP.Optional.CateredToYou, C:\Program Files\AdwCleaner\FileQuarantine\C\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\7\resources\40.0.0.dll.vir, , [7a5e11770e8bd66062e01244df22f40c],
PUP.Optional.CateredToYou, C:\Program Files\AdwCleaner\FileQuarantine\C\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\7\resources\45.0.1.dll.vir, , [4c8c5a2ebddcb680132f70e610f1847c],
PUP.Optional.CateredToYou, C:\Program Files\AdwCleaner\FileQuarantine\C\ProgramData\a95f8535-bd08-4370-a6e0-814924c0d5f0\plugins\8\Plugin.exe.vir, , [e7f1ea9e5049de58d86a78de3ec33bc5],
PUP.Optional.NextLive, C:\Program Files\AdwCleaner\FileQuarantine\C\Users\cesko\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie2.2.0.zip.vir, , [677188006d2c83b30d106cd90cf59b65],
Adware.MoboGenie, C:\Program Files\AdwCleaner\FileQuarantine\C\Users\cesko\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\CrashReport.exe.vir, , [dcfc96f23a5f79bdcfcc13f3c141fe02],
PUP.Optional.TNT2, C:\Program Files\AdwCleaner\FileQuarantine\C\Users\cesko\AppData\Local\TNT2\2.0.0.2010\TNT2User.exe.vir, , [9c3c89ffc1d8b0867b438f6706fbe917],
PUP.Optional.RegCleanPro, C:\Program Files\AdwCleaner\FileQuarantine\C\Windows\system32\roboot.exe.vir, , [b62258300c8def47aeb295a321e49f61],
Backdoor.PcClient, C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\Plugin\QQPhoneManager-5.5.1_710201.4892.pa.exe, , [61779eea8514d264e6a4fad9e123d729],
Backdoor.PcClient, C:\Program Files\Tencent\QQPCMgr\11.4.17339.217\plugins\QQPCB1AndroidJmp\uninstall.exe, , [bd1be4a46831e551b4d6ca0907fdc838],
Trojan.Dropper, C:\Users\cesko\Desktop\FAR Manager\Plugins\jdflasher\2020_52\qamaker.exe, , [97417810217852e4f2ce99d2728e649c],
PUP.Optional.CateredToYou, C:\Users\cesko\AppData\Local\temp\{17EF689F-D415-4DF4-A727-B65925D7CE71}.dll, , [cf09ff89326778be0939a7afb1500af6],
PUP.Optional.CateredToYou, C:\Users\cesko\AppData\Local\temp\{1C52A157-122C-4A8A-B846-5268A10AD7F0}.dll, , [27b13751f1a89f97251dde78629f08f8],
PUP.Optional.CateredToYou, C:\Users\cesko\AppData\Local\temp\{EA527358-832A-473B-93B7-A6AF890CE815}.dll, , [498f8afe6237d16550f2e86e0bf63bc5],
RiskWare.TOR, C:\Users\cesko\Contacts\bin\Tor\tor.exe, , [c31517717d1c1f179b313131d230ee12],
Trojan.Agent.Gen, C:\Users\cesko\AppData\Roaming\cesko-wchelper.dll, , [8e4ab2d68a0ff83ee7f38b3e35cef907],
PUP.Optional.SafeWeb, C:\Program Files\safeiweuBB\vE.tlb, , [c7113a4eb3e6e94d7b9f71b6739135cb],
PUP.Optional.SafeWeb, C:\Program Files\safeiweuBB\vE.dat, , [c7113a4eb3e6e94d7b9f71b6739135cb],
PUP.Optional.LSHAREit.Trace, C:\awh1209.tmp, , [dbfd70182e6b16202adb4d2d11f3d729],
PUP.Optional.LSHAREit.Trace, C:\awh15D0.tmp, , [c5137018d4c5ab8b1ce9a7d3d33103fd],
PUP.Optional.LSHAREit.Trace, C:\awh16F9.tmp, , [6e6a7e0a3762f3431fe6b3c716eeb24e],
PUP.Optional.LSHAREit.Trace, C:\awh17E3.tmp, , [d9ffe8a0cbceef47669f82f8af550bf5],
PUP.Optional.LSHAREit.Trace, C:\awh1802.tmp, , [57814c3cfd9ccd6957aeb4c6cc387e82],
PUP.Optional.LSHAREit.Trace, C:\awh1821.tmp, , [c5133850cbcecb6b64a10f6ba16302fe],
PUP.Optional.LSHAREit.Trace, C:\awh186.tmp, , [19bf73152d6c5bdb867f087209fb8c74],
PUP.Optional.LSHAREit.Trace, C:\awh18BD.tmp, , [97415434f0a9142220e5cdad15ef41bf],
PUP.Optional.LSHAREit.Trace, C:\awh1978.tmp, , [bc1c00880594cf67d530bcbe18ec01ff],
PUP.Optional.LSHAREit.Trace, C:\awh1979.tmp, , [9246b8d085141b1b6a9b3b3f9470bb45],
PUP.Optional.LSHAREit.Trace, C:\awh1AEF.tmp, , [68703157edac6dc99f665a20b84c669a],
PUP.Optional.LSHAREit.Trace, C:\awh1B0E.tmp, , [22b6e6a2f6a355e1ee1779019d67837d],
PUP.Optional.LSHAREit.Trace, C:\awh1B3D.tmp, , [9147cfb97f1ac076798ca7d3bd47ef11],
PUP.Optional.LSHAREit.Trace, C:\awh1BAA.tmp, , [67718206277239fdaf56eb8fb94b1ce4],
PUP.Optional.LSHAREit.Trace, C:\awh1BAB.tmp, , [dbfdb5d3702942f4c441adcd699ba060],
PUP.Optional.LSHAREit.Trace, C:\awh1BD9.tmp, , [e8f00c7ce9b0fd3908fd03775ba923dd],
PUP.Optional.LSHAREit.Trace, C:\awh1C56.tmp, , [6870394f48515ed848bd7703cb39d62a],
PUP.Optional.LSHAREit.Trace, C:\awh1C84.tmp, , [c90fe0a8d8c1c86ecd386e0cab595ea2],
PUP.Optional.LSHAREit.Trace, C:\awh1D20.tmp, , [95430781f5a44ee857aec4b6a85c53ad],
PUP.Optional.LSHAREit.Trace, C:\awh1D21.tmp, , [7365bace6039cf67ad5885f55da74bb5],
PUP.Optional.LSHAREit.Trace, C:\awh1DEB.tmp, , [c5132662eeabdd59f015c7b3e42059a7],
PUP.Optional.LSHAREit.Trace, C:\awh1DFB.tmp, , [6672097fd0c9d95d0203e3970bf90af6],
PUP.Optional.LSHAREit.Trace, C:\awh1E39.tmp, , [9444c1c7f9a0b87edc29384284807789],
PUP.Optional.LSHAREit.Trace, C:\awh1E4A.tmp, , [45936028badf79bd5fa6285243c18f71],
PUP.Optional.LSHAREit.Trace, C:\awh1EA6.tmp, , [fedab5d39702c472c441b2c83aca12ee],
PUP.Optional.LSHAREit.Trace, C:\awh1EB6.tmp, , [5385a2e632670f27a3621f5b24e057a9],
PUP.Optional.LSHAREit.Trace, C:\awh1F62.tmp, , [0dcb30584356dc5a61a4b9c17193f40c],
PUP.Optional.LSHAREit.Trace, C:\awh1F71.tmp, , [e0f805831881fd397a8b99e18084b54b],
PUP.Optional.LSHAREit.Trace, C:\awh1F90.tmp, , [16c2cfb987127bbbc5401367a65eac54],
PUP.Optional.LSHAREit.Trace, C:\awh1FCF.tmp, , [b91ff395c0d96fc720e50a70d03417e9],
PUP.Optional.LSHAREit.Trace, C:\awh1FD0.tmp, , [feda0682cbcee74f32d35c1ec044dd23],
PUP.Optional.LSHAREit.Trace, C:\awh1FDE.tmp, , [b82082069405c76f6b9a314906fe7f81],
PUP.Optional.LSHAREit.Trace, C:\awh200D.tmp, , [7b5dd0b89cfd81b59e670476df25da26],
PUP.Optional.LSHAREit.Trace, C:\awh201D.tmp, , [a137acdc2e6b06309c6936440afacb35],
PUP.Optional.LSHAREit.Trace, C:\awh204C.tmp, , [5484d2b6b6e3989ec24366148381837d],
PUP.Optional.LSHAREit.Trace, C:\awh20C8.tmp, , [6474addb2f6a5adc8283bac07391b54b],
PUP.Optional.LSHAREit.Trace, C:\awh20C9.tmp, , [02d65d2b4d4cc67075900377fb096a96],
PUP.Optional.LSHAREit.Trace, C:\awh20F7.tmp, , [19bf78107722ed4995704337c24215eb],
PUP.Optional.LSHAREit.Trace, C:\awh2174.tmp, , [5583daae792087af8184f08a36ce3dc3],
PUP.Optional.LSHAREit.Trace, C:\awh2175.tmp, , [edeb1078217872c44abb9ae07391966a],
PUP.Optional.LSHAREit.Trace, C:\awh2176.tmp, , [21b7a8e0c5d464d2a2635822e91b9769],
PUP.Optional.LSHAREit.Trace, C:\awh2210.tmp, , [a63224643465ac8a5da8c4b615ef659b],
PUP.Optional.LSHAREit.Trace, C:\awh2211.tmp, , [95431b6d1584ff37ec192e4c699b38c8],
PUP.Optional.LSHAREit.Trace, C:\awh224E.tmp, , [84540d7bb4e5f73fc2436b0f2fd516ea],
PUP.Optional.LSHAREit.Trace, C:\awh226E.tmp, , [65733d4b21782610fa0b3e3c42c2d52b],
PUP.Optional.LSHAREit.Trace, C:\awh22DB.tmp, , [f1e71c6cedacd660db2af48662a2a45c],
PUP.Optional.LSHAREit.Trace, C:\awh2319.tmp, , [7563d4b44a4ff83ebc492b4f699b9769],
PUP.Optional.LSHAREit.Trace, C:\awh2367.tmp, , [33a5f0988316092d4fb67bfff410b14f],
PUP.Optional.LSHAREit.Trace, C:\awh23A6.tmp, , [8e4a30583a5f6ec8d5308bef7d87fb05],
PUP.Optional.LSHAREit.Trace, C:\awh23D4.tmp, , [5e7aea9e702957dfd233c9b1cf3522de],
PUP.Optional.LSHAREit.Trace, C:\awh2403.tmp, , [548497f1ecad082e778e28528480ff01],
PUP.Optional.LSHAREit.Trace, C:\awh241.tmp, , [8b4d5b2d5b3ef73f18eddf9bdd278d73],
PUP.Optional.LSHAREit.Trace, C:\awh2413.tmp, , [d00893f5a2f7cb6b7f867dfd976d22de],
PUP.Optional.LSHAREit.Trace, C:\awh2461.tmp, , [5f7952360a8f61d514f1b4c6818360a0],
PUP.Optional.LSHAREit.Trace, C:\awh2480.tmp, , [28b0fc8c425770c66f961d5df60ed32d],
PUP.Optional.LSHAREit.Trace, C:\awh2490.tmp, , [2fa9a4e46e2b87af4cb9601a43c18b75],
PUP.Optional.LSHAREit.Trace, C:\awh24CE.tmp, , [9e3a43453564ea4cff06daa00cf81ae6],
PUP.Optional.LSHAREit.Trace, C:\awh24CF.tmp, , [607856327e1b3df9bb4abdbde81c966a],
PUP.Optional.LSHAREit.Trace, C:\awh24ED.tmp, , [28b05a2e33662c0a877e691148bced13],
PUP.Optional.LSHAREit.Trace, C:\awh24EE.tmp, , [cc0c1e6ad4c51a1c42c3d4a65fa556aa],
PUP.Optional.LSHAREit.Trace, C:\awh24FD.tmp, , [9840ef99aaefdc5ad035e09aa95b8c74],
PUP.Optional.LSHAREit.Trace, C:\awh252C.tmp, , [29af5c2ce9b0db5b36cf681254b07789],
PUP.Optional.LSHAREit.Trace, C:\awh255A.tmp, , [dbfdc3c53960e84ebb4a394124e0a65a],
PUP.Optional.LSHAREit.Trace, C:\awh255B.tmp, , [6771107836639f97ec19473346bec43c],
PUP.Optional.LSHAREit.Trace, C:\awh256A.tmp, , [3a9e800891086ccade27dc9e6f958f71],
PUP.Optional.LSHAREit.Trace, C:\awh256B.tmp, , [0ecaf8901e7ba690ec1902784cb89f61],
PUP.Optional.LSHAREit.Trace, C:\awh2616.tmp, , [74644345d7c27db91ee70f6b1fe54ab6],
PUP.Optional.LSHAREit.Trace, C:\awh2625.tmp, , [b91f4e3a930669cdd92c7bff0df7ed13],
PUP.Optional.LSHAREit.Trace, C:\awh2635.tmp, , [b3252b5d39603006f4116317956f4bb5],
PUP.Optional.LSHAREit.Trace, C:\awh2654.tmp, , [a434c5c35a3fb18563a2f387c3411be5],
PUP.Optional.LSHAREit.Trace, C:\awh2664.tmp, , [2dabf4940990191dcc3982f8c341619f],
PUP.Optional.LSHAREit.Trace, C:\awh26B2.tmp, , [4e8a533590098fa7a362f486d62e26da],
PUP.Optional.LSHAREit.Trace, C:\awh26C1.tmp, , [07d14c3c2f6a320460a501790ef6b64a],
PUP.Optional.LSHAREit.Trace, C:\awh26D1.tmp, , [9b3da2e6c1d8280efd08abcffb0944bc],
PUP.Optional.LSHAREit.Trace, C:\awh26F0.tmp, , [a33530583960dc5aef165327d82ceb15],
PUP.Optional.LSHAREit.Trace, C:\awh270F.tmp, , [a4347117bfda8ea81de81169a36126da],
PUP.Optional.LSHAREit.Trace, C:\awh2710.tmp, , [21b75632d7c286b011f4215941c3c43c],
PUP.Optional.LSHAREit.Trace, C:\awh271F.tmp, , [ac2cec9c74259b9bd0359cde8084ab55],
PUP.Optional.LSHAREit.Trace, C:\awh273E.tmp, , [a43478109bfebf778085e4961be9d62a],
PUP.Optional.LSHAREit.Trace, C:\awh273F.tmp, , [4d8b9cec9bfe4fe71ee757238e76d52b],
PUP.Optional.LSHAREit.Trace, C:\awh274E.tmp, , [9d3b078182173bfb57ae661457adea16],
PUP.Optional.LSHAREit.Trace, C:\awh275D.tmp, , [974141473f5a0e2819ecbebcf70db54b],
PUP.Optional.LSHAREit.Trace, C:\awh276D.tmp, , [c1172e5addbc8da9b05588f29e66867a],
PUP.Optional.LSHAREit.Trace, C:\awh277C.tmp, , [2aae96f25247da5cb2536d0d38ccde22],
PUP.Optional.LSHAREit.Trace, C:\awh279C.tmp, , [82567612128739fd8b7a02785aaa867a],
PUP.Optional.LSHAREit.Trace, C:\awh27DA.tmp, , [f0e86f19801977bf986d0b6f34d023dd],
PUP.Optional.LSHAREit.Trace, C:\awh27EA.tmp, , [a434dbadaeeb79bdad588af0e02437c9],
PUP.Optional.LSHAREit.Trace, C:\awh27EB.tmp, , [f5e35f296b2e6fc74fb6582248bcdd23],
PUP.Optional.LSHAREit.Trace, C:\awh2828.tmp, , [1cbc493f59405fd739cc1862c1439967],
PUP.Optional.LSHAREit.Trace, C:\awh2866.tmp, , [a236c6c2ddbc0531cc393248e91bef11],
PUP.Optional.LSHAREit.Trace, C:\awh2867.tmp, , [25b3a2e62574d85ef80d2456b54f17e9],
PUP.Optional.LSHAREit.Trace, C:\awh2876.tmp, , [defa02869009ba7ccf368ceed92b9c64],
PUP.Optional.LSHAREit.Trace, C:\awh2886.tmp, , [71672b5d7e1b7cba38cd17632adaf20e],
PUP.Optional.LSHAREit.Trace, C:\awh2895.tmp, , [c4143b4d8b0eef47c93cbfbb06fe44bc],
PUP.Optional.LSHAREit.Trace, C:\awh28A5.tmp, , [c3151e6adbbe3402cf36ea9001034eb2],
PUP.Optional.LSHAREit.Trace, C:\awh28F3.tmp, , [29af20684158b97df60f0179788c0af6],
PUP.Optional.LSHAREit.Trace, C:\awh2931.tmp, , [8b4dec9c2d6cd75fb5501c5e11f3c937],
PUP.Optional.LSHAREit.Trace, C:\awh2950.tmp, , [08d01474acedbf776c99cfabac58817f],
PUP.Optional.LSHAREit.Trace, C:\awh297F.tmp, , [a92f5137aeeb3ff70bfa99e1db2926da],
PUP.Optional.LSHAREit.Trace, C:\awh2980.tmp, , [8a4e11775d3c0e2835d077038c78639d],
PUP.Optional.LSHAREit.Trace, C:\awh2981.tmp, , [00d8642457423ff738cdb0ca758fc937],
PUP.Optional.LSHAREit.Trace, C:\awh299E.tmp, , [96421e6a0b8eab8b3fc651291de73cc4],
PUP.Optional.LSHAREit.Trace, C:\awh2A0C.tmp, , [6276a0e8821761d54db8eb8fc73dc937],
PUP.Optional.LSHAREit.Trace, C:\awh2A0D.tmp, , [63757315a2f75dd9ee177208cc387789],
PUP.Optional.LSHAREit.Trace, C:\awh2A2B.tmp, , [f1e7196fc5d4c571d5309ae09f65e51b],
PUP.Optional.LSHAREit.Trace, C:\awh2A88.tmp, , [4395394f128787af1aeb7bff59ab9070],
PUP.Optional.LSHAREit.Trace, C:\awh2AA8.tmp, , [ddfb1b6d1a7f0b2b0cf9a9d117eda759],
PUP.Optional.LSHAREit.Trace, C:\awh2AF6.tmp, , [71676f19e2b7c96db64f1268a65eeb15],
PUP.Optional.LSHAREit.Trace, C:\awh2B24.tmp, , [e8f05137eaaf84b28085770322e255ab],
PUP.Optional.LSHAREit.Trace, C:\awh2B25.tmp, , [a73157314f4ae254c045cab0f50f5aa6],
PUP.Optional.LSHAREit.Trace, C:\awh2B53.tmp, , [d4046325900932045aab3644af557888],
PUP.Optional.LSHAREit.Trace, C:\awh2B63.tmp, , [dcfcbbcd3e5be3534abb2f4b21e3cc34],
PUP.Optional.LSHAREit.Trace, C:\awh2B64.tmp, , [ebed3b4d920788aec342fa80d72d42be],
PUP.Optional.LSHAREit.Trace, C:\awh2B92.tmp, , [36a2b5d311887eb857aee99160a4768a],
PUP.Optional.LSHAREit.Trace, C:\awh2B93.tmp, , [08d0e3a54851a98d689d1c5ed232e21e],
PUP.Optional.LSHAREit.Trace, C:\awh2B94.tmp, , [d1076d1becadd56158adcfabb351c040],
PUP.Optional.LSHAREit.Trace, C:\awh2BA1.tmp, , [75632f59a0f9ed4926df5c1ea65efd03],
PUP.Optional.LSHAREit.Trace, C:\awh2BB1.tmp, , [a92f0a7e2a6f57dfbb4ae5956f9509f7],
PUP.Optional.LSHAREit.Trace, C:\awh2BB2.tmp, , [e7f1592fb0e9989e93721f5b34d003fd],
PUP.Optional.LSHAREit.Trace, C:\awh2BC0.tmp, , [c90f1f690198241259aca3d7af5543bd],
PUP.Optional.LSHAREit.Trace, C:\awh2C4D.tmp, , [38a093f55841ec4a9f6690ea8b79867a],
PUP.Optional.LSHAREit.Trace, C:\awh2C7C.tmp, , [8454b7d1c5d464d265a00b6f4bb92dd3],
PUP.Optional.LSHAREit.Trace, C:\awh2C7D.tmp, , [03d5d0b8ddbc76c013f2215906fe669a],
PUP.Optional.LSHAREit.Trace, C:\awh2C8B.tmp, , [3f999eea38611521b0559bdf966e9a66],
PUP.Optional.LSHAREit.Trace, C:\awh2C9B.tmp, , [7b5dbbcdc1d88bab46bf7bffa65ea759],
PUP.Optional.LSHAREit.Trace, C:\awh2C9C.tmp, , [70684840e0b957dfe322c2b813f1ce32],
PUP.Optional.LSHAREit.Trace, C:\awh2D18.tmp, , [1bbd33551188ac8a00054f2b17ed7789],
PUP.Optional.LSHAREit.Trace, C:\awh2D37.tmp, , [b028c1c7cbceca6c2adb53278f754bb5],
PUP.Optional.LSHAREit.Trace, C:\awh2D66.tmp, , [10c84444fc9d59dd7d88aecc20e44ab6],
PUP.Optional.LSHAREit.Trace, C:\awh2DA4.tmp, , [b91f6e1a5e3b3006c243dc9e45bf46ba],
PUP.Optional.LSHAREit.Trace, C:\awh2DB4.tmp, , [d602a2e6cacf4de935d07ffb1be918e8],
PUP.Optional.LSHAREit.Trace, C:\awh2DC3.tmp, , [7f595d2b4257f83e43c23d3dd82cfd03],
PUP.Optional.LSHAREit.Trace, C:\awh2DF2.tmp, , [76622365dbbe5cda7a8b38428183c040],
PUP.Optional.LSHAREit.Trace, C:\awh2E11.tmp, , [b424acdcd3c6e84e34d143378a7a9e62],
PUP.Optional.LSHAREit.Trace, C:\awh2E12.tmp, , [fcdcaade6435e056cc39d1a94bb914ec],
PUP.Optional.LSHAREit.Trace, C:\awh2E40.tmp, , [825694f44554290d62a385f5be46847c],
PUP.Optional.LSHAREit.Trace, C:\awh2E50.tmp, , [ae2a0f795346e5512fd6d1a95ca842be],
PUP.Optional.LSHAREit.Trace, C:\awh2E6F.tmp, , [e2f68efac5d487afcb3af783de26f709],
PUP.Optional.LSHAREit.Trace, C:\awh2E7E.tmp, , [4c8c5f296c2d93a320e5e5958a7a916f],
PUP.Optional.LSHAREit.Trace, C:\awh2E8E.tmp, , [22b66226079260d654b19fdb46be8a76],
PUP.Optional.LSHAREit.Trace, C:\awh2EAD.tmp, , [6c6c5632d9c0f1455aabc3b76d975aa6],
PUP.Optional.LSHAREit.Trace, C:\awh2EBD.tmp, , [8454117771283cfa8d78daa053b1dc24],
PUP.Optional.LSHAREit.Trace, C:\awh2ECC.tmp, , [6e6a6b1d3e5b6ccacf368af017eddc24],
PUP.Optional.LSHAREit.Trace, C:\awh2FB6.tmp, , [6a6e592f3d5c42f4a85d592136ce9e62],
PUP.Optional.LSHAREit.Trace, C:\awh2FC6.tmp, , [2aae2f591c7d02343ec7aeccf311946c],
PUP.Optional.LSHAREit.Trace, C:\awh3033.tmp, , [696f7b0da9f0280e4fb6ff7be91b4ab6],
PUP.Optional.LSHAREit.Trace, C:\awh3043.tmp, , [edeb2761ebae75c11aeb4a30699bba46],
PUP.Optional.LSHAREit.Trace, C:\awh30C0.tmp, , [5b7d5236a1f8a98d798c6c0ec044ce32],
PUP.Optional.LSHAREit.Trace, C:\awh30CF.tmp, , [77617d0b990065d190750c6e53b129d7],
PUP.Optional.LSHAREit.Trace, C:\awh310E.tmp, , [3b9de0a842572f076f9681f912f21de3],
PUP.Optional.LSHAREit.Trace, C:\awh311D.tmp, , [dff9bbcd3a5ffa3c49bc106a4bb9669a],
PUP.Optional.LSHAREit.Trace, C:\awh313C.tmp, , [f6e27a0e623790a651b49cdefa0aff01],
PUP.Optional.LSHAREit.Trace, C:\awh314C.tmp, , [06d23256badfd066f90c572317ed738d],
PUP.Optional.LSHAREit.Trace, C:\awh317B.tmp, , [54845d2babee5fd74abba8d2bd4701ff],
PUP.Optional.LSHAREit.Trace, C:\awh31E8.tmp, , [7662493fabee0a2c07fefd7d38ccfb05],
PUP.Optional.LSHAREit.Trace, C:\awh3236.tmp, , [f9dffd8babeed36326df1c5eb54fde22],
PUP.Optional.LSHAREit.Trace, C:\awh3255.tmp, , [19bf44442f6a0c2ab0555525a85c6e92],
PUP.Optional.LSHAREit.Trace, C:\awh3284.tmp, , [87514f39079268cef015b9c1d034639d],
PUP.Optional.LSHAREit.Trace, C:\awh32B.tmp, , [cc0c9deb3465cf67be470b6f6e9648b8],
PUP.Optional.LSHAREit.Trace, C:\awh32E2.tmp, , [6e6ad7b14653d85e8a7b5a200bf9ae52],
PUP.Optional.LSHAREit.Trace, C:\awh32E3.tmp, , [8355f494f0a9ff37c44155258e764eb2],
PUP.Optional.LSHAREit.Trace, C:\awh3301.tmp, , [38a052360495f244788d6b0fd034ef11],
PUP.Optional.LSHAREit.Trace, C:\awh339D.tmp, , [f3e55f2905942214689d9bdf10f4748c],
PUP.Optional.LSHAREit.Trace, C:\awh33BC.tmp, , [eeea3e4ab9e0003685809fdb4fb51ee2],
PUP.Optional.LSHAREit.Trace, C:\awh33EB.tmp, , [efe93b4d48513ff7838289f11aeaa65a],
PUP.Optional.LSHAREit.Trace, C:\awh33FA.tmp, , [36a22a5ecdcc4fe7ee1713671fe5e818],
PUP.Optional.LSHAREit.Trace, C:\awh3429.tmp, , [6d6ba0e85346ce687f863e3cc63ec43c],
PUP.Optional.LSHAREit.Trace, C:\awh3439.tmp, , [eeeac4c45e3bd561b94c74061be90ff1],
PUP.Optional.LSHAREit.Trace, C:\awh3496.tmp, , [0fc9d8b0a7f287afb74eb3c756aedb25],
PUP.Optional.LSHAREit.Trace, C:\awh34A6.tmp, , [3e9ab4d4dcbdb0862adb413943c17c84],
PUP.Optional.LSHAREit.Trace, C:\awh34E4.tmp, , [ddfba1e7bfda1224ff065e1c0202ba46],
PUP.Optional.LSHAREit.Trace, C:\awh3513.tmp, , [0bcd15734d4c00361de8c0ba50b4e917],
PUP.Optional.LSHAREit.Trace, C:\awh3552.tmp, , [f2e696f29405181e47be71091de7e818],
PUP.Optional.LSHAREit.Trace, C:\awh3571.tmp, , [41976e1a9306a2949372c4b608fcbd43],
PUP.Optional.LSHAREit.Trace, C:\awh35EE.tmp, , [83551d6ba6f3b48265a047332dd72dd3],
PUP.Optional.LSHAREit.Trace, C:\awh365B.tmp, , [4a8e038533663afc5baa2258f90b26da],
PUP.Optional.LSHAREit.Trace, C:\awh368A.tmp, , [73650b7dfb9e1e18c540a4d6c3416e92],
PUP.Optional.LSHAREit.Trace, C:\awh3699.tmp, , [6474fe8a41588babc0451664867efc04],
PUP.Optional.LSHAREit.Trace, C:\awh36E7.tmp, , [1fb9fd8b4554d95d5ea7532733d1bc44],
PUP.Optional.LSHAREit.Trace, C:\awh3716.tmp, , [2cac2e5ad6c32f07c5407208877d0ef2],
PUP.Optional.LSHAREit.Trace, C:\awh3764.tmp, , [439538500693a19537ce5228b94bbb45],
PUP.Optional.LSHAREit.Trace, C:\awh3793.tmp, , [37a1cfb9bfda2c0a06ffd9a1f80c4eb2],
PUP.Optional.LSHAREit.Trace, C:\awh37A2.tmp, , [93453058247539fd50b5b1c9d331e61a],
PUP.Optional.LSHAREit.Trace, C:\awh37D1.tmp, , [6276bbcd3960181e8481cdade71d44bc],
PUP.Optional.LSHAREit.Trace, C:\awh37E1.tmp, , [a731fb8dc4d5c47273928eece91b12ee],
PUP.Optional.LSHAREit.Trace, C:\awh38AC.tmp, , [cc0c4e3afe9b37ff63a281f929db0cf4],
PUP.Optional.LSHAREit.Trace, C:\awh38CB.tmp, , [25b33f495e3b3bfb0cf9aad023e141bf],
PUP.Optional.LSHAREit.Trace, C:\awh3909.tmp, , [a23655336336b4825da85228ed1738c8],
PUP.Optional.LSHAREit.Trace, C:\awh3919.tmp, , [77616c1c980175c1a0656b0ffa0a9c64],
PUP.Optional.LSHAREit.Trace, C:\awh3938.tmp, , [18c0394f6c2dae88f510ed8d758fb848],
PUP.Optional.LSHAREit.Trace, C:\awh3948.tmp, , [18c0137503963ef8d5305a2012f2f010],
PUP.Optional.LSHAREit.Trace, C:\awh3976.tmp, , [0cccb4d442571422e025a8d21fe5fe02],
PUP.Optional.LSHAREit.Trace, C:\awh39B5.tmp, , [6f691a6e079254e2e61fdd9d857f40c0],
PUP.Optional.LSHAREit.Trace, C:\awh39C5.tmp, , [8e4a44441f7a270f798cbfbb8084ed13],
PUP.Optional.LSHAREit.Trace, C:\awh39E4.tmp, , [e7f1a4e417820333f1145a20b450c838],
PUP.Optional.LSHAREit.Trace, C:\awh3A03.tmp, , [b523e6a2c6d3e45226dffb7ff410bc44],
PUP.Optional.LSHAREit.Trace, C:\awh3A04.tmp, , [ae2ae5a36f2ac571d92cdd9d64a06997],
PUP.Optional.LSHAREit.Trace, C:\awh3A12.tmp, , [9f3971179dfcf3432bda592164a0b24e],
PUP.Optional.LSHAREit.Trace, C:\awh3A60.tmp, , [08d0b1d742574de9e0250a701ce8d828],
PUP.Optional.LSHAREit.Trace, C:\awh3A8F.tmp, , [0ccc05835148191d3acb4238f212fe02],
PUP.Optional.LSHAREit.Trace, C:\awh3B89.tmp, , [21b72d5b524780b691749bdf857fcb35],
PUP.Optional.LSHAREit.Trace, C:\awh3B8A.tmp, , [cf09b3d5f3a6a78fa85d5c1eac582dd3],
PUP.Optional.LSHAREit.Trace, C:\awh3B98.tmp, , [1abeacdccbcefe380ff673073fc528d8],
PUP.Optional.LSHAREit.Trace, C:\awh3BC7.tmp, , [6c6c8afe04956ccaa560a9d1659f52ae],
PUP.Optional.LSHAREit.Trace, C:\awh3BF6.tmp, , [8a4e48409cfd88ae7392afcb6c98f40c],
PUP.Optional.LSHAREit.Trace, C:\awh3C73.tmp, , [03d50a7e15840b2bce37ccae09fb03fd],
PUP.Optional.LSHAREit.Trace, C:\awh3CD0.tmp, , [a632097fd9c013237392c3b7689c1be5],
PUP.Optional.LSHAREit.Trace, C:\awh3CD1.tmp, , [b4245e2a0792c76fd03514661aea1ee2],
PUP.Optional.LSHAREit.Trace, C:\awh3CFF.tmp, , [fddb6d1b079272c4ed18bbbfbf4502fe],
PUP.Optional.LSHAREit.Trace, C:\awh3D3E.tmp, , [c2162662f1a896a07d880a7050b452ae],
PUP.Optional.LSHAREit.Trace, C:\awh3DCA.tmp, , [85535e2a5a3f4beb788dd7a3739155ab],
PUP.Optional.LSHAREit.Trace, C:\awh3DF9.tmp, , [af29691f8d0cc0760ff6fa80f212ce32],
PUP.Optional.LSHAREit.Trace, C:\awh3E57.tmp, , [b91f7810aced5adc7c89314953b1dc24],
PUP.Optional.LSHAREit.Trace, C:\awh3E66.tmp, , [3a9e0583b4e5f73fb94cbebc8a7a7c84],
PUP.Optional.LSHAREit.Trace, C:\awh3E85.tmp, , [6a6e305838612c0a0cf98eec2fd5a55b],
PUP.Optional.LSHAREit.Trace, C:\awh3ED3.tmp, , [12c62f59ebae1d192adbe595996b03fd],
PUP.Optional.LSHAREit.Trace, C:\awh3EE3.tmp, , [d404bdcb3366fe3862a32654ff0508f8],
PUP.Optional.LSHAREit.Trace, C:\awh3F12.tmp, , [65732365b8e1c76f9c6937436f956c94],
PUP.Optional.LSHAREit.Trace, C:\awh3F21.tmp, , [e8f05533019868cebb4ab7c3c4407090],
PUP.Optional.LSHAREit.Trace, C:\awh3F22.tmp, , [8a4e98f0fc9d2b0b947143372ed66997],
PUP.Optional.LSHAREit.Trace, C:\awh3F50.tmp, , [e2f6f1971d7cb48240c51565cd37b947],
PUP.Optional.LSHAREit.Trace, C:\awh3F6F.tmp, , [ab2dff897e1b7eb8d62fb4c6be46e818],
PUP.Optional.LSHAREit.Trace, C:\awh3F70.tmp, , [6e6a45430495a492f1140476f60e15eb],
PUP.Optional.LSHAREit.Trace, C:\awh3F8F.tmp, , [b6226e1ae7b241f5fa0b691106fe45bb],
PUP.Optional.LSHAREit.Trace, C:\awh3F9E.tmp, , [fddb63256138bc7af015007afb09956b],
PUP.Optional.LSHAREit.Trace, C:\awh3FBD.tmp, , [01d70088e0b968ce62a3077347bd47b9],
PUP.Optional.LSHAREit.Trace, C:\awh3FDD.tmp, , [9b3d08804d4cd363ac59ff7b966eb64a],
PUP.Optional.LSHAREit.Trace, C:\awh403A.tmp, , [07d12d5be4b53df955b0205a4cb830d0],
PUP.Optional.LSHAREit.Trace, C:\awh404A.tmp, , [c1176820584155e152b3d3a7e81c46ba],
PUP.Optional.LSHAREit.Trace, C:\awh4098.tmp, , [9d3b47415148da5cd3329dddce36cd33],
PUP.Optional.LSHAREit.Trace, C:\awh40B7.tmp, , [894fe3a59405c76fb154007a1aea6b95],
PUP.Optional.LSHAREit.Trace, C:\awh4115.tmp, , [e3f522665b3e39fd8184572329db2ad6],
PUP.Optional.LSHAREit.Trace, C:\awh4134.tmp, , [a731295fdfbada5c8481d4a69e66f010],
PUP.Optional.LSHAREit.Trace, C:\awh41B1.tmp, , [22b64543e5b462d41aeb9ae0c440d52b],
PUP.Optional.LSHAREit.Trace, C:\awh41C0.tmp, , [d701b4d4cecb261040c5c7b356ae3cc4],
PUP.Optional.LSHAREit.Trace, C:\awh424D.tmp, , [6a6e5533ddbc44f2f41187f3cd37b24e],
PUP.Optional.LSHAREit.Trace, C:\awh427B.tmp, , [9f395335c6d37cba63a27bff669ef010],
PUP.Optional.LSHAREit.Trace, C:\awh428B.tmp, , [13c5c2c69dfc45f18d78d9a19f65837d],
PUP.Optional.LSHAREit.Trace, C:\awh4308.tmp, , [34a40c7c0990b77f12f3f88234d0cd33],
PUP.Optional.LSHAREit.Trace, C:\awh4327.tmp, , [5c7ccfb92c6d4cea7491bbbf996beb15],
PUP.Optional.LSHAREit.Trace, C:\awh43A4.tmp, , [af298305d6c3e55149bcf882848023dd],
PUP.Optional.LSHAREit.Trace, C:\awh43D3.tmp, , [12c61e6ac9d0ca6c7d883f3bcb39946c],
PUP.Optional.LSHAREit.Trace, C:\awh43F2.tmp, , [f1e794f47227fb3b6c995822a75dd828],
PUP.Optional.LSHAREit.Trace, C:\awh4430.tmp, , [d50399ef6a2f2b0bc93cd0aadb29b848],
PUP.Optional.LSHAREit.Trace, C:\awh444F.tmp, , [08d063258118a09616ef7efc8f750cf4],
PUP.Optional.LSHAREit.Trace, C:\awh446F.tmp, , [0fc9b8d04d4c73c3768f43370afa9868],
PUP.Optional.LSHAREit.Trace, C:\awh44AD.tmp, , [3e9a9debe5b42b0b09fcf6842fd5c23e],
PUP.Optional.LSHAREit.Trace, C:\awh44BD.tmp, , [8256b4d40f8a4ee87b8abcbe0202a65a],
PUP.Optional.LSHAREit.Trace, C:\awh44EB.tmp, , [96427c0cb9e0f3437194afcb58ac0df3],
PUP.Optional.LSHAREit.Trace, C:\awh452A.tmp, , [2aae8008fc9d2b0bbd481c5ee51f9b65],
PUP.Optional.LSHAREit.Trace, C:\awh4597.tmp, , [3c9c484093067bbbfc09ef8b5fa502fe],
PUP.Optional.LSHAREit.Trace, C:\awh4614.tmp, , [6c6cee9ad0c9a78fad5894e634d038c8],
PUP.Optional.LSHAREit.Trace, C:\awh4691.tmp, , [37a16b1d4c4d63d3cb3a146606fef907],
PUP.Optional.LSHAREit.Trace, C:\awh479A.tmp, , [984085038019d660bb4adaa0b25214ec],
PUP.Optional.LSHAREit.Trace, C:\awh47F7.tmp, , [ba1e3850cfcad660867ffe7c62a2e31d],
PUP.Optional.LSHAREit.Trace, C:\awh4807.tmp, , [2eaa7018d9c0f34330d5f38743c1a55b],
PUP.Optional.LSHAREit.Trace, C:\awh4817.tmp, , [e5f3295fbfda5dd9ec19db9f8a7ae21e],
PUP.Optional.LSHAREit.Trace, C:\awh48A3.tmp, , [fddbf494d7c2db5b0ef74535cd3749b7],
PUP.Optional.LSHAREit.Trace, C:\awh48B3.tmp, , [6672f791a4f53402897c3347fd07fa06],
PUP.Optional.LSHAREit.Trace, C:\awh48C2.tmp, , [637599ef1188aa8c7293ef8b27ddc838],
PUP.Optional.LSHAREit.Trace, C:\awh48F1.tmp, , [706862264059ff3704013347f60ea858],
PUP.Optional.LSHAREit.Trace, C:\awh4901.tmp, , [20b8addb415888ae768f2654a75d7d83],
PUP.Optional.LSHAREit.Trace, C:\awh4920.tmp, , [eeea1d6b3c5d7db9ac5999e119eb44bc],
PUP.Optional.LSHAREit.Trace, C:\awh493F.tmp, , [e8f09bedc0d9a49243c2c6b4ea1a07f9],
PUP.Optional.LSHAREit.Trace, C:\awh494F.tmp, , [29afdcac7a1f1224e61f97e3d62e7c84],
PUP.Optional.LSHAREit.Trace, C:\awh499D.tmp, , [498f7018d1c81a1c7c89700a2ada28d8],
PUP.Optional.LSHAREit.Trace, C:\awh4A0A.tmp, , [98408008e4b52313fd089edcd034fe02],
PUP.Optional.LSHAREit.Trace, C:\awh4A96.tmp, , [37a1b0d8851448eeca3b364417ed966a],
PUP.Optional.LSHAREit.Trace, C:\awh4AD5.tmp, , [07d1c7c1bfda58de56af0c6eb54f46ba],
PUP.Optional.LSHAREit.Trace, C:\awh4AF4.tmp, , [b91fb5d3831649ed42c36e0c956f15eb],
PUP.Optional.LSHAREit.Trace, C:\awh4B23.tmp, , [a6326325dcbd4beb91740b6f30d4eb15],
PUP.Optional.LSHAREit.Trace, C:\awh4B32.tmp, , [25b34a3e0b8eab8be0256b0f3dc78c74],
PUP.Optional.LSHAREit.Trace, C:\awh4B71.tmp, , [a434a1e7fa9f8da9a85d98e2fc08cd33],
PUP.Optional.LSHAREit.Trace, C:\awh4B90.tmp, , [ce0a95f30c8d999d2adb87f335cf54ac],
PUP.Optional.LSHAREit.Trace, C:\awh4C2C.tmp, , [bb1d38504257241258ad4a30bd4750b0],
PUP.Optional.LSHAREit.Trace, C:\awh4C3B.tmp, , [e4f480082a6f2d09f70e6515699b36ca],
PUP.Optional.LSHAREit.Trace, C:\awh4C5B.tmp, , [d70147414e4b8ea84db8512958ac08f8],
PUP.Optional.LSHAREit.Trace, C:\awh4C89.tmp, , [c90fdaae0198082e8481166450b4e31d],
PUP.Optional.LSHAREit.Trace, C:\awh4C99.tmp, , [1abe2068c6d388ae7b8a8eec986c2cd4],
PUP.Optional.LSHAREit.Trace, C:\awh4D06.tmp, , [63759fe9c0d966d09075b9c127dd56aa],
PUP.Optional.LSHAREit.Trace, C:\awh4D73.tmp, , [6276a2e682170c2a0104f1899c68e41c],
PUP.Optional.LSHAREit.Trace, C:\awh4DE1.tmp, , [1fb9aeda4554de58cf3693e7a4602ed2],
PUP.Optional.LSHAREit.Trace, C:\awh4E.tmp, , [e4f4d4b4643558de2cd9bfbb20e41ce4],
PUP.Optional.LSHAREit.Trace, C:\awh4E00.tmp, , [ad2b790f1b7e9a9c14f1bbbf1aea916f],
PUP.Optional.LSHAREit.Trace, C:\awh4E01.tmp, , [e7f195f3b4e5ee4827dede9ca95bdd23],
PUP.Optional.LSHAREit.Trace, C:\awh4E1F.tmp, , [4a8ec2c61f7a6dc9e1245426fe06936d],
PUP.Optional.LSHAREit.Trace, C:\awh4E2F.tmp, , [c21653354c4d54e241c49dddc044c040],
PUP.Optional.LSHAREit.Trace, C:\awh4E4E.tmp, , [c018f296c6d3b97df015601a42c2b44c],
PUP.Optional.LSHAREit.Trace, C:\awh4E5D.tmp, , [05d36c1c89107db9c5405d1d0cf8946c],
PUP.Optional.LSHAREit.Trace, C:\awh4E6D.tmp, , [e9effa8e663360d6e61fabcf0301e917],
PUP.Optional.LSHAREit.Trace, C:\awh4E6E.tmp, , [b1279fe942577db946bfdb9f8d776997],
PUP.Optional.LSHAREit.Trace, C:\awh4F09.tmp, , [8a4ec6c2c6d3fa3c43c2c7b38a7aea16],
PUP.Optional.LSHAREit.Trace, C:\awh4F57.tmp, , [4d8bea9e8019dc5a6a9b601a33d131cf],
PUP.Optional.LSHAREit.Trace, C:\awh4F86.tmp, , [34a48503fc9d2016d62f86f40afa1fe1],
PUP.Optional.LSHAREit.Trace, C:\awh5012.tmp, , [bc1c5e2a8e0baa8c11f45723b054e11f],
PUP.Optional.LSHAREit.Trace, C:\awh5022.tmp, , [7761e6a216835adc9a6b0c6ed62e33cd],
PUP.Optional.LSHAREit.Trace, C:\awh5041.tmp, , [6870394ffc9d81b515f0592120e47d83],
PUP.Optional.LSHAREit.Trace, C:\awh5051.tmp, , [b91fcbbdd5c4e650f213ed8db450639d],
PUP.Optional.LSHAREit.Trace, C:\awh5052.tmp, , [0dcb0f79742562d450b587f38c78a65a],
PUP.Optional.LSHAREit.Trace, C:\awh50ED.tmp, , [934550384455ca6c8a7baecc48bc3cc4],
PUP.Optional.LSHAREit.Trace, C:\awh510C.tmp, , [7f5924645e3bd95d3ec71961669e33cd],
PUP.Optional.LSHAREit.Trace, C:\awh511B.tmp, , [8b4d2860c7d2ed49c045a1d917ed6c94],
PUP.Optional.LSHAREit.Trace, C:\awh513B.tmp, , [1fb925634c4dd066a0659ae010f4b64a],
PUP.Optional.LSHAREit.Trace, C:\awh515A.tmp, , [a434167284157cbaa2631466a65e52ae],
PUP.Optional.LSHAREit.Trace, C:\awh5189.tmp, , [04d4fd8b9306d75f28dd6c0e14f06f91],
PUP.Optional.LSHAREit.Trace, C:\awh51B7.tmp, , [e4f4a4e47e1b10261ce94c2e0ef625db],
PUP.Optional.LSHAREit.Trace, C:\awh51E6.tmp, , [90484642fb9e191d1aeb067405ff1de3],
PUP.Optional.LSHAREit.Trace, C:\awh51F6.tmp, , [31a7bbcdcdcccf672bdaaad06b9914ec],
PUP.Optional.LSHAREit.Trace, C:\awh5205.tmp, , [29afe5a34752af87bc49b1c96c9825db],
PUP.Optional.LSHAREit.Trace, C:\awh5273.tmp, , [8850e3a5336680b671947efc35cfeb15],
PUP.Optional.LSHAREit.Trace, C:\awh5274.tmp, , [e9efa3e50a8fe155a4614d2dde26c43c],
PUP.Optional.LSHAREit.Trace, C:\awh5292.tmp, , [7365f6927326ce68996cacced62e50b0],
PUP.Optional.LSHAREit.Trace, C:\awh52D0.tmp, , [b12780080297df57ed18007ad62ebc44],
PUP.Optional.LSHAREit.Trace, C:\awh52EF.tmp, , [2aae8bfdf9a0a98d0104e99149bb18e8],
PUP.Optional.LSHAREit.Trace, C:\awh530F.tmp, , [09cfff892376280e82837dfd8a7ab14f],
PUP.Optional.LSHAREit.Trace, C:\awh533D.tmp, , [2fa95f299405ce683fc66119a460946c],
PUP.Optional.LSHAREit.Trace, C:\awh536C.tmp, , [e5f3256353463006966f334740c4c040],
PUP.Optional.LSHAREit.Trace, C:\awh536D.tmp, , [449423650b8ec076e124afcbd23206fa],
PUP.Optional.LSHAREit.Trace, C:\awh53CA.tmp, , [a8302167fd9c8caad134235710f402fe],
PUP.Optional.LSHAREit.Trace, C:\awh5408.tmp, , [eeea4345f0a935014bba0e6cdf259b65],
PUP.Optional.LSHAREit.Trace, C:\awh5427.tmp, , [8256ec9ccdccf54117ee413913f1f50b],
PUP.Optional.LSHAREit.Trace, C:\awh5456.tmp, , [65734d3b2f6ab6801ee7304a49bbe020],
PUP.Optional.LSHAREit.Trace, C:\awh5475.tmp, , [6276e8a06a2f082e2cd98ceec93b9a66],
PUP.Optional.LSHAREit.Trace, C:\awh5476.tmp, , [a038addba8f12f07768fa5d5986c30d0],
PUP.Optional.LSHAREit.Trace, C:\awh5485.tmp, , [9048097f0a8f11258085245656ae8080],
PUP.Optional.LSHAREit.Trace, C:\awh5486.tmp, , [617792f667328ea85fa695e50afa659b],
PUP.Optional.LSHAREit.Trace, C:\awh5495.tmp, , [4e8a93f53465bd798a7ba2d83fc542be],
PUP.Optional.LSHAREit.Trace, C:\awh54E3.tmp, , [5b7d1672cacf2f07b55091e915efc13f],
PUP.Optional.LSHAREit.Trace, C:\awh54E4.tmp, , [b0289debadecac8a24e1542607fd51af],
PUP.Optional.LSHAREit.Trace, C:\awh5502.tmp, , [9741f593c2d774c245c0403a6c98de22],
PUP.Optional.LSHAREit.Trace, C:\awh5540.tmp, , [399f16720c8d0531da2b15650004fb05],
PUP.Optional.LSHAREit.Trace, C:\awh5550.tmp, , [c7111573e4b5db5b53b2fc7e9d676799],
PUP.Optional.LSHAREit.Trace, C:\awh556F.tmp, , [eaee2f5921789e98eb1a6812e51f738d],
PUP.Optional.LSHAREit.Trace, C:\awh559E.tmp, , [1bbd97f1c1d8b97d0afb443658ac629e],
PUP.Optional.LSHAREit.Trace, C:\awh55DC.tmp, , [1dbbfb8dabee5cdaaa5bfa8047bd6997],
PUP.Optional.LSHAREit.Trace, C:\awh55FB.tmp, , [c0187513e2b7e94da4610b6f16ee28d8],
PUP.Optional.LSHAREit.Trace, C:\awh563A.tmp, , [32a6ef99fb9e4ee864a1304aeb19a55b],
PUP.Optional.LSHAREit.Trace, C:\awh5649.tmp, , [37a1bace0c8de056fc09e8920ff515eb],
PUP.Optional.LSHAREit.Trace, C:\awh5697.tmp, , [4098dbadbcdd122462a3b5c550b4a35d],
PUP.Optional.LSHAREit.Trace, C:\awh56B7.tmp, , [9a3ed8b034659d997d88b7c36c985ea2],
PUP.Optional.LSHAREit.Trace, C:\awh56D6.tmp, , [ce0aa6e2d0c954e2e421f48629dbf808],
PUP.Optional.LSHAREit.Trace, C:\awh56D7.tmp, , [76625c2c2b6e44f263a2b2c8bf458e72],
PUP.Optional.LSHAREit.Trace, C:\awh5714.tmp, , [6375503888112016867f106aee16827e],
PUP.Optional.LSHAREit.Trace, C:\awh5772.tmp, , [ae2a86025d3cc96d3dc882f82bd959a7],
PUP.Optional.LSHAREit.Trace, C:\awh57DF.tmp, , [5088592f326705310ef70f6b59aba65a],
PUP.Optional.LSHAREit.Trace, C:\awh57E0.tmp, , [bc1c295f7f1a75c1679e186228dcaa56],
PUP.Optional.LSHAREit.Trace, C:\awh580E.tmp, , [f3e5fa8ecacf79bd4fb6106a9e66c739],
PUP.Optional.LSHAREit.Trace, C:\awh583D.tmp, , [4c8c8afe3e5bab8bb25398e233d127d9],
PUP.Optional.LSHAREit.Trace, C:\awh583E.tmp, , [fedaf296d7c270c6c44197e315efc43c],
PUP.Optional.LSHAREit.Trace, C:\awh588B.tmp, , [5286e3a50e8bf244f5105b1f16eed22e],
PUP.Optional.LSHAREit.Trace, C:\awh58C9.tmp, , [9b3de3a5b0e9d75f17ee88f2e61e06fa],
PUP.Optional.LSHAREit.Trace, C:\awh58D9.tmp, , [0ccc850317825dd99a6b6614f70d817f],
PUP.Optional.LSHAREit.Trace, C:\awh58E8.tmp, , [b028dcac0a8f290d6f964c2ec93b7f81],
PUP.Optional.LSHAREit.Trace, C:\awh58F8.tmp, , [cf094d3b39608ea89d6889f10103c937],
PUP.Optional.LSHAREit.Trace, C:\awh5907.tmp, , [edeb4c3c33668da9e91c681240c457a9],
PUP.Optional.LSHAREit.Trace, C:\awh5927.tmp, , [a533cabe49503ff71aebb1c9f311d32d],
PUP.Optional.LSHAREit.Trace, C:\awh5936.tmp, , [d800addbb6e3d75f23e2ceac1ce8df21],
PUP.Optional.LSHAREit.Trace, C:\awh5965.tmp, , [fcdcc5c3bcdd62d4cd3866144db7758b],
PUP.Optional.LSHAREit.Trace, C:\awh5994.tmp, , [9c3c03851f7a082e35d0a5d58d77e719],
PUP.Optional.LSHAREit.Trace, C:\awh59A3.tmp, , [e0f86e1a603972c4fa0b601ac242c739],
PUP.Optional.LSHAREit.Trace, C:\awh59B3.tmp, , [d4045a2e9affe94d0df83b3f45bfe41c],
PUP.Optional.LSHAREit.Trace, C:\awh59F1.tmp, , [5f79f5931f7a1521788d4f2bb054de22],
PUP.Optional.LSHAREit.Trace, C:\awh5A30.tmp, , [a2364444c7d277bfb45182f8d52fa060],
PUP.Optional.LSHAREit.Trace, C:\awh5A8D.tmp, , [4b8df593cacf63d3e2231a60d1331be5],
PUP.Optional.LSHAREit.Trace, C:\awh5A9D.tmp, , [ab2dfb8dd8c19d9990751c5e0202f010],
PUP.Optional.LSHAREit.Trace, C:\awh5B58.tmp, , [f9df5830138637ff54b14634857fa957],
PUP.Optional.LSHAREit.Trace, C:\awh5B97.tmp, , [ab2d34548415fc3ac243532761a37789],
PUP.Optional.LSHAREit.Trace, C:\awh5BA6.tmp, , [ecec5e2a1089c96d64a10f6b52b23ec2],
PUP.Optional.LSHAREit.Trace, C:\awh5BE5.tmp, , [f1e75e2aff9ae94dd92c205a55af6b95],
PUP.Optional.LSHAREit.Trace, C:\awh5C23.tmp, , [a92f9cec3a5f6ccaaa5b0971020241bf],
PUP.Optional.LSHAREit.Trace, C:\awh5C42.tmp, , [c513d6b2a3f63ef852b33941d034f010],
PUP.Optional.LSHAREit.Trace, C:\awh5C81.tmp, , [af29a2e6d6c3ce6814f13b3f23e1b848],
PUP.Optional.LSHAREit.Trace, C:\awh5CFD.tmp, , [2dabbdcb8b0e1d19c63fe09ac53f07f9],
PUP.Optional.LSHAREit.Trace, C:\awh5D1D.tmp, , [0ccc94f43a5f5ed8bc49bbbf49bbe61a],
PUP.Optional.LSHAREit.Trace, C:\awh5D5B.tmp, , [795f5f291386241208fdc8b209fbee12],
PUP.Optional.LSHAREit.Trace, C:\awh5D5C.tmp, , [75635236d9c072c40500d0aa64a07987],
PUP.Optional.LSHAREit.Trace, C:\awh5DD8.tmp, , [d9ffc4c4c5d40d2909fc9edc897b24dc],
PUP.Optional.LSHAREit.Trace, C:\awh5DE7.tmp, , [0bcdd7b1762306302dd884f6788c9967],
PUP.Optional.LSHAREit.Trace, C:\awh5EC2.tmp, , [18c077114059c3739e678befcc387c84],
PUP.Optional.LSHAREit.Trace, C:\awh5EF1.tmp, , [ce0a00881584c3738f7695e51fe5b54b],
PUP.Optional.LSHAREit.Trace, C:\awh5F1F.tmp, , [1abe5731b4e5063024e14c2e2bd920e0],
PUP.Optional.LSHAREit.Trace, C:\awh5F20.tmp, , [edeb80080c8da98d30d529515ba9e41c],
PUP.Optional.LSHAREit.Trace, C:\awh5F7D.tmp, , [6375bccc29706ec8ed188feb3fc5ed13],
PUP.Optional.LSHAREit.Trace, C:\awh5F8D.tmp, , [cc0cf98ff8a1bb7b04015228669efa06],
PUP.Optional.LSHAREit.Trace, C:\awh5FBB.tmp, , [2cacc5c3d2c7201643c2f387986c30d0],
PUP.Optional.LSHAREit.Trace, C:\awh6048.tmp, , [cf097d0b5742bb7bcb3a2b4f9e66d729],
PUP.Optional.LSHAREit.Trace, C:\awh60A5.tmp, , [8553cfb91782cc6ac441a8d2a65e837d],
PUP.Optional.LSHAREit.Trace, C:\awh60D4.tmp, , [e7f152365b3eda5ce5204a301be9e11f],
PUP.Optional.LSHAREit.Trace, C:\awh60E4.tmp, , [ae2ae2a6c8d13cfa1aebd4a60202fa06],
PUP.Optional.LSHAREit.Trace, C:\awh60F3.tmp, , [498ffc8c6f2a11252dd8126839cb0000],
PUP.Optional.LSHAREit.Trace, C:\awh6103.tmp, , [9642a9dfafea8fa708fdaccee81cad53],
PUP.Optional.LSHAREit.Trace, C:\awh6151.tmp, , [33a56028d6c38caa7f865129f60eb34d],
PUP.Optional.LSHAREit.Trace, C:\awh6152.tmp, , [c90f6a1e3564270f8085bebc47bdc53b],
PUP.Optional.LSHAREit.Trace, C:\awh6180.tmp, , [b8207810287180b69e674e2ca85c0ef2],
PUP.Optional.LSHAREit.Trace, C:\awh61DD.tmp, , [af29d2b622770f27ce376f0bca3a36ca],
PUP.Optional.LSHAREit.Trace, C:\awh6299.tmp, , [9b3def996633be7831d445359a6a5ca4],
PUP.Optional.LSHAREit.Trace, C:\awh62C7.tmp, , [b721f5931485ef470afbee8c06fe926e],
PUP.Optional.LSHAREit.Trace, C:\awh6325.tmp, , [fbdd8efa4455e94d61a482f858acc23e],
PUP.Optional.LSHAREit.Trace, C:\awh6344.tmp, , [1cbc592f78211620887dd8a2758f53ad],
PUP.Optional.LSHAREit.Trace, C:\awh6373.tmp, , [cc0c7513bbded95dab5a8bef7a8a659b],
PUP.Optional.LSHAREit.Trace, C:\awh63B1.tmp, , [459376121f7aa09660a5c6b4937126da],
PUP.Optional.LSHAREit.Trace, C:\awh63E0.tmp, , [46923b4d3267a6902fd60a70e81c9a66],
PUP.Optional.LSHAREit.Trace, C:\awh63E1.tmp, , [27b19fe9e2b736008c79fd7d8b796a96],
PUP.Optional.LSHAREit.Trace, C:\awh640F.tmp, , [dff92a5ef2a70a2c4eb782f8bd47748c],
PUP.Optional.LSHAREit.Trace, C:\awh648C.tmp, , [875163254950350115f05f1b5fa5d828],
PUP.Optional.LSHAREit.Trace, C:\awh64BB.tmp, , [9b3d93f53168a195867f3b3ff60e60a0],
PUP.Optional.LSHAREit.Trace, C:\awh64BC.tmp, , [3f990a7eebaecb6b03027bffd52f5fa1],
PUP.Optional.LSHAREit.Trace, C:\awh6547.tmp, , [6771ea9e66336cca59accbaf34d0d729],
PUP.Optional.LSHAREit.Trace, C:\awh6585.tmp, , [8e4a4e3abcdd092dfa0b12689b699b65],
PUP.Optional.LSHAREit.Trace, C:\awh65A5.tmp, , [5880c9bf980174c22cd9d9a132d23fc1],
PUP.Optional.LSHAREit.Trace, C:\awh65C4.tmp, , [73658cfcbbdecf675da8fb7fb3518779],
PUP.Optional.LSHAREit.Trace, C:\awh6631.tmp, , [954305832d6c9c9a56afd3a744c050b0],
PUP.Optional.LSHAREit.Trace, C:\awh6641.tmp, , [defa345402972214c63fd9a10103b14f],
PUP.Optional.LSHAREit.Trace, C:\awh668F.tmp, , [46926e1a61386bcbef162357877d4bb5],
PUP.Optional.LSHAREit.Trace, C:\awh669E.tmp, , [5d7b6622a5f45ed857ae700abf45b14f],
PUP.Optional.LSHAREit.Trace, C:\awh669F.tmp, , [b028097f4d4c1b1b679e9edc18ec23dd],
PUP.Optional.LSHAREit.Trace, C:\awh66A0.tmp, , [1dbb6e1a7a1ff54123e2b6c49d67d828],
PUP.Optional.LSHAREit.Trace, C:\awh66A1.tmp, , [e0f836521584b97dc1447406e81c2cd4],
PUP.Optional.LSHAREit.Trace, C:\awh66BD.tmp, , [c117c7c1f0a9de58679e56240ef65aa6],
PUP.Optional.LSHAREit.Trace, C:\awh66BE.tmp, , [5583e5a3653445f1fc097cfeed17946c],
PUP.Optional.LSHAREit.Trace, C:\awh66DD.tmp, , [7a5e0583059495a119ec1268966e13ed],
PUP.Optional.LSHAREit.Trace, C:\awh66FC.tmp, , [8553d5b32c6d201662a3e2987490ba46],
PUP.Optional.LSHAREit.Trace, C:\awh66FD.tmp, , [4c8c1e6a0d8cf0465ea7c6b431d3c838],
PUP.Optional.LSHAREit.Trace, C:\awh670B.tmp, , [696fa9df9900f44214f19edcd33124dc],
PUP.Optional.LSHAREit.Trace, C:\awh671B.tmp, , [d8008dfb5049f442ba4b176316ee847c],
PUP.Optional.LSHAREit.Trace, C:\awh673A.tmp, , [9b3dbace544541f5bb4a3f3bc044d828],
PUP.Optional.LSHAREit.Trace, C:\awh674A.tmp, , [e9efc5c34c4dea4c0302ff7bd0343ec2],
PUP.Optional.LSHAREit.Trace, C:\awh6759.tmp, , [fcdc31573d5c211562a31c5e8e76619f],
PUP.Optional.LSHAREit.Trace, C:\awh6769.tmp, , [96429eeac2d78da965a05a2029dbc838],
PUP.Optional.LSHAREit.Trace, C:\awh6798.tmp, , [08d0f4941188270f0afbe793897b2bd5],
PUP.Optional.LSHAREit.Trace, C:\awh67B7.tmp, , [b226a7e16831e5514abb671325df50b0],
PUP.Optional.LSHAREit.Trace, C:\awh67F5.tmp, , [5187583036632c0ab74e88f2ba4a9c64],
PUP.Optional.LSHAREit.Trace, C:\awh6815.tmp, , [835563252178a3936f96acce778df60a],
PUP.Optional.LSHAREit.Trace, C:\awh6834.tmp, , [7f591177d5c4d75fa85dd7a38b79fb05],
PUP.Optional.LSHAREit.Trace, C:\awh6853.tmp, , [38a0b6d2b1e8cd69dd282b4fad57d42c],
PUP.Optional.LSHAREit.Trace, C:\awh6872.tmp, , [af2921673e5b999dd62f3149bc4817e9],
PUP.Optional.LSHAREit.Trace, C:\awh68C0.tmp, , [09cf95f333666dc957ae35452fd5a858],
PUP.Optional.LSHAREit.Trace, C:\awh68D0.tmp, , [a33525636138da5c29dc0d6d08fccb35],
PUP.Optional.LSHAREit.Trace, C:\awh68DF.tmp, , [924655333a5f83b39372156560a42fd1],
PUP.Optional.LSHAREit.Trace, C:\awh68FF.tmp, , [10c833557623da5c7b8a0f6b976d19e7],
PUP.Optional.LSHAREit.Trace, C:\awh693D.tmp, , [d800e6a2d0c93cfa9b6ac7b3b74d758b],
PUP.Optional.LSHAREit.Trace, C:\awh694D.tmp, , [cf09aedab5e4023456afb0caa460cd33],
PUP.Optional.LSHAREit.Trace, C:\awh696C.tmp, , [d008d8b05445a294bd4890ea61a310f0],
PUP.Optional.LSHAREit.Trace, C:\awh699B.tmp, , [9a3e8503c8d1a29457ae27538d77e41c],
PUP.Optional.LSHAREit.Trace, C:\awh699C.tmp, , [01d7a8e05d3cef47df26b0cad331a45c],
PUP.Optional.LSHAREit.Trace, C:\awh69BA.tmp, , [15c35d2b7326ef47a560641662a2936d],
PUP.Optional.LSHAREit.Trace, C:\awh69C9.tmp, , [cd0b7d0b0a8fea4c7c89afcbf0147b85],
PUP.Optional.LSHAREit.Trace, C:\awh69D9.tmp, , [efe90187227790a6f60fa5d5d72d55ab],
PUP.Optional.LSHAREit.Trace, C:\awh69E9.tmp, , [6771cabe9504191df60f1d5dc1437888],
PUP.Optional.LSHAREit.Trace, C:\awh6A08.tmp, , [fcdc7612a3f68da93cc9b9c1020205fb],
PUP.Optional.LSHAREit.Trace, C:\awh6A37.tmp, , [12c61a6e7821ae88bf46fc7ecc380000],
PUP.Optional.LSHAREit.Trace, C:\awh6A56.tmp, , [c90f64246b2e43f3c73ef18932d2629e],
PUP.Optional.LSHAREit.Trace, C:\awh6A57.tmp, , [5781e0a8d3c65dd9fe07c8b25ea61ae6],
PUP.Optional.LSHAREit.Trace, C:\awh6A65.tmp, , [ebeddfa9c5d4ce680ef786f4699bad53],
PUP.Optional.LSHAREit.Trace, C:\awh6A94.tmp, , [b7218cfcafea22148c79a6d4dd275ba5],
PUP.Optional.LSHAREit.Trace, C:\awh6AA4.tmp, , [5c7ce99fdbbebc7a35d0a1d927dd04fc],
PUP.Optional.LSHAREit.Trace, C:\awh6AF2.tmp, , [11c78107dfbaf640d82d5723fa0ab44c],
PUP.Optional.LSHAREit.Trace, C:\awh6B11.tmp, , [a6328305257447ef9b6a5426e4200df3],
PUP.Optional.LSHAREit.Trace, C:\awh6B21.tmp, , [32a6ec9cb2e7af8765a0e298c4400df3],
PUP.Optional.LSHAREit.Trace, C:\awh6B40.tmp, , [1bbd5f295b3e1c1a9570c3b7bb4921df],
PUP.Optional.LSHAREit.Trace, C:\awh6B5F.tmp, , [50888dfb91082214838239419e66d62a],
PUP.Optional.LSHAREit.Trace, C:\awh6B6F.tmp, , [2badfe8a2a6f43f337cea1d9b3510bf5],
PUP.Optional.LSHAREit.Trace, C:\awh6B70.tmp, , [31a7c4c45544b97db84d0a70af5521df],
PUP.Optional.LSHAREit.Trace, C:\awh6B71.tmp, , [ab2de1a7b4e56bcb93723e3c0004926e],
PUP.Optional.LSHAREit.Trace, C:\awh6BBD.tmp, , [9b3d5d2b5445290df312abcf976d54ac],
PUP.Optional.LSHAREit.Trace, C:\awh6BCC.tmp, , [2aaef5936f2aff37867fd7a3f50f8c74],
PUP.Optional.LSHAREit.Trace, C:\awh6BEB.tmp, , [6c6c1c6c2673b185d72ebbbf47bd25db],
PUP.Optional.LSHAREit.Trace, C:\awh6BFB.tmp, , [d4042d5bd7c250e62dd84931c93b07f9],
PUP.Optional.LSHAREit.Trace, C:\awh6C0B.tmp, , [c513f296673250e660a5304a44c0e818],
PUP.Optional.LSHAREit.Trace, C:\awh6C39.tmp, , [9a3e4a3e6237a3939d68d9a1ef15c040],
PUP.Optional.LSHAREit.Trace, C:\awh6C49.tmp, , [93456721940538fee5203f3b2bd958a8],
PUP.Optional.LSHAREit.Trace, C:\awh6C59.tmp, , [ad2be8a00e8b72c4d0357efc10f4a858],
PUP.Optional.LSHAREit.Trace, C:\awh6CA7.tmp, , [50884e3acacf94a235d06c0e54b09d63],
PUP.Optional.LSHAREit.Trace, C:\awh6CD5.tmp, , [5484aedaedac9d990500403a60a4d42c],
PUP.Optional.LSHAREit.Trace, C:\awh6D33.tmp, , [0ace33551386dc5ad62feb8f62a27090],
PUP.Optional.LSHAREit.Trace, C:\awh6D43.tmp, , [538571174d4c86b074918af0c3417c84],
PUP.Optional.LSHAREit.Trace, C:\awh6D71.tmp, , [4b8d295facedc274897cc9b140c407f9],
PUP.Optional.LSHAREit.Trace, C:\awh6D72.tmp, , [f5e3295fc9d066d008fd2159b64e916f],
PUP.Optional.LSHAREit.Trace, C:\awh6D81.tmp, , [8058cdbb55443ff7c73e1c5e7c8809f7],
PUP.Optional.LSHAREit.Trace, C:\awh6D82.tmp, , [9c3c60286732102638cdd1a90004a858],
PUP.Optional.LSHAREit.Trace, C:\awh6DDF.tmp, , [eeeaec9cebae7bbb83827802cd37c43c],
PUP.Optional.LSHAREit.Trace, C:\awh6DE0.tmp, , [36a22b5d2079ee48fa0b384223e1a65a],
PUP.Optional.LSHAREit.Trace, C:\awh6DFE.tmp, , [4296daaef7a21f1746bfb1c9dc285ea2],
PUP.Optional.LSHAREit.Trace, C:\awh6E4C.tmp, , [4a8e3a4ee9b00f2759ac9cde52b29d63],
PUP.Optional.LSHAREit.Trace, C:\awh6E5B.tmp, , [b127cfb9c3d68da9ca3bcbafa163db25],
PUP.Optional.LSHAREit.Trace, C:\awh6E7B.tmp, , [5b7d0b7d6f2ab086ee17f981d430dd23],
PUP.Optional.LSHAREit.Trace, C:\awh6E7C.tmp, , [d701ff89fe9bf73f51b44a307b896997],
PUP.Optional.LSHAREit.Trace, C:\awh6E8A.tmp, , [7c5cb0d8e7b23df913f2b7c3e71d9b65],
PUP.Optional.LSHAREit.Trace, C:\awh6E8B.tmp, , [e1f7fd8beeab4cea46bfa8d2ee16c739],
PUP.Optional.LSHAREit.Trace, C:\awh6EB9.tmp, , [24b464247722eb4b09fc43376c982cd4],
PUP.Optional.LSHAREit.Trace, C:\awh6EC9.tmp, , [efe9295fc9d06acc28dd2357937126da],
PUP.Optional.LSHAREit.Trace, C:\awh6F07.tmp, , [5f79f98f7a1fcd6907feb8c2b252cd33],
PUP.Optional.LSHAREit.Trace, C:\awh6F17.tmp, , [75635e2a8910e5511aeb6c0e5ca803fd],
PUP.Optional.LSHAREit.Trace, C:\awh6F26.tmp, , [b7215b2d46537fb70005067433d13dc3],
PUP.Optional.LSHAREit.Trace, C:\awh6F27.tmp, , [1fb9abdd70290d298e77a2d87292c43c],
PUP.Optional.LSHAREit.Trace, C:\awh6F55.tmp, , [2daba4e46831d75f93727406b05442be],
PUP.Optional.LSHAREit.Trace, C:\awh6F74.tmp, , [e2f6295f0b8eb2847b8a98e2dd270bf5],
PUP.Optional.LSHAREit.Trace, C:\awh6F75.tmp, , [22b6aeda5d3cfb3bc93c453554b053ad],
PUP.Optional.LSHAREit.Trace, C:\awh6F93.tmp, , [9345f39522772f0750b5d3a7a262a35d],
PUP.Optional.LSHAREit.Trace, C:\awh6F94.tmp, , [b820ee9a6d2cf442be471f5b5aaaaf51],
PUP.Optional.LSHAREit.Trace, C:\awh6FA3.tmp, , [31a799efd1c871c58580592154b044bc],
PUP.Optional.LSHAREit.Trace, C:\awh6FB3.tmp, , [35a391f73b5e6ec8fd086c0e9b69fb05],
PUP.Optional.LSHAREit.Trace, C:\awh6FC2.tmp, , [4a8e5f2949501b1b9c6996e412f2758b],
PUP.Optional.LSHAREit.Trace, C:\awh6FC3.tmp, , [993f6e1a6c2dc472e81d304a8c78c040],
PUP.Optional.LSHAREit.Trace, C:\awh6FD2.tmp, , [28b078106435270f81840d6d54b00cf4],
PUP.Optional.LSHAREit.Trace, C:\awh6FF1.tmp, , [38a099ef2b6eea4c63a2710939cb14ec],
PUP.Optional.LSHAREit.Trace, C:\awh6FF2.tmp, , [defa4d3b5544ca6c768fbac0c93bd828],
PUP.Optional.LSHAREit.Trace, C:\awh705E.tmp, , [ffd983051c7dfb3b53b24436996b9868],
PUP.Optional.LSHAREit.Trace, C:\awh706E.tmp, , [a4344d3b0099a98d7b8a0476c341b947],
PUP.Optional.LSHAREit.Trace, C:\awh706F.tmp, , [4b8d751368312313ea1b0a70e71d0000],
PUP.Optional.LSHAREit.Trace, C:\awh709D.tmp, , [34a4790f96034aeced18e09a05ff36ca],
PUP.Optional.LSHAREit.Trace, C:\awh70AC.tmp, , [f5e32662f4a5c47230d5bbbf6e96e51b],
PUP.Optional.LSHAREit.Trace, C:\awh70BC.tmp, , [b523691f9504cc6a1de844362ed65ea2],
PUP.Optional.LSHAREit.Trace, C:\awh70DB.tmp, , [defa00882772a69042c3ef8bff050bf5],
PUP.Optional.LSHAREit.Trace, C:\awh70EB.tmp, , [9f390385ddbcb680778e8af08c78cf31],
PUP.Optional.LSHAREit.Trace, C:\awh7129.tmp, , [61772563eeab270f03027406887c0bf5],
PUP.Optional.LSHAREit.Trace, C:\awh7158.tmp, , [3f993f49d2c71b1be025007abe467987],
PUP.Optional.LSHAREit.Trace, C:\awh7159.tmp, , [7860434529703501976e621811f33ec2],
PUP.Optional.LSHAREit.Trace, C:\awh71A6.tmp, , [c7116b1d8b0e7fb732d32f4be1237090],
PUP.Optional.LSHAREit.Trace, C:\awh71B5.tmp, , [7860107817821c1acc3908723cc88779],
PUP.Optional.LSHAREit.Trace, C:\awh7213.tmp, , [e1f7d6b2821715214eb7394122e2d62a],
PUP.Optional.LSHAREit.Trace, C:\awh7261.tmp, , [6e6aaeda0d8cef47bf46f981956f639d],
PUP.Optional.LSHAREit.Trace, C:\awh7290.tmp, , [647465239cfd191d7a8b8feb4eb69b65],
PUP.Optional.LSHAREit.Trace, C:\awh72CE.tmp, , [0ccc5c2c5e3b4ee810f546341ce8b14f],
PUP.Optional.LSHAREit.Trace, C:\awh731C.tmp, , [4890c2c6b9e0171f1ee7a4d6d62e8b75],
PUP.Optional.LSHAREit.Trace, C:\awh731D.tmp, , [defaaeda1485999dfe073941986cd42c],
PUP.Optional.LSHAREit.Trace, C:\awh732C.tmp, , [4098e8a0bedbcc6a9075f1894db730d0],
PUP.Optional.LSHAREit.Trace, C:\awh733B.tmp, , [1fb968200a8f66d022e3562449bb7b85],
PUP.Optional.LSHAREit.Trace, C:\awh736A.tmp, , [ebeddaae17826bcbab5ab4c612f26898],
PUP.Optional.LSHAREit.Trace, C:\awh736B.tmp, , [b325196fdfba42f4b253f08a0103c13f],
PUP.Optional.LSHAREit.Trace, C:\awh7399.tmp, , [9444f39515847abc9c690377c0440df3],
PUP.Optional.LSHAREit.Trace, C:\awh73C8.tmp, , [70681078fb9e93a3867fb7c3d72d8c74],
PUP.Optional.LSHAREit.Trace, C:\awh73E7.tmp, , [cd0b05833c5d3df950b5e7934aba21df],
PUP.Optional.LSHAREit.Trace, C:\awh7425.tmp, , [439523656336d066887df882fe06b14f],
PUP.Optional.LSHAREit.Trace, C:\awh74C1.tmp, , [6c6cc7c19cfdd95dee17e69447bdf50b],
PUP.Optional.LSHAREit.Trace, C:\awh74D1.tmp, , [77614a3e4f4a13237d881466a06425db],
PUP.Optional.LSHAREit.Trace, C:\awh74D2.tmp, , [62762e5a673255e1d72edc9eb84c3ac6],
PUP.Optional.LSHAREit.Trace, C:\awh74F0.tmp, , [bb1d4a3e08918ea841c4f08a18ecbb45],
PUP.Optional.LSHAREit.Trace, C:\awh750F.tmp, , [38a093f5cacf3ff77f866a10e42052ae],
PUP.Optional.LSHAREit.Trace, C:\awh752F.tmp, , [f2e68cfce5b452e443c21a6046be6997],
PUP.Optional.LSHAREit.Trace, C:\awh754E.tmp, , [15c38ff9fc9dd85e9a6ba4d6897b8f71],
PUP.Optional.LSHAREit.Trace, C:\awh758C.tmp, , [45934840811880b6c1441d5da55f0df3],
PUP.Optional.LSHAREit.Trace, C:\awh75DA.tmp, , [5e7a66223e5b063030d5a3d735cf0ff1],
PUP.Optional.LSHAREit.Trace, C:\awh75F9.tmp, , [d10792f6158482b4bc4948326e9643bd],
PUP.Optional.LSHAREit.Trace, C:\awh7609.tmp, , [ffd9e7a13f5a69cdb055e595b84ca45c],
PUP.Optional.LSHAREit.Trace, C:\awh760A.tmp, , [795ff0987d1c32044bba12685ba9cf31],
PUP.Optional.LSHAREit.Trace, C:\awh7619.tmp, , [e6f2ea9ef6a3261009fc7a00bd4709f7],
PUP.Optional.LSHAREit.Trace, C:\awh7628.tmp, , [ca0e4e3a5b3e4ee83cc9c3b7749021df],
PUP.Optional.LSHAREit.Trace, C:\awh7647.tmp, , [5d7b1b6d98011b1b2bdafc7e867eec14],
PUP.Optional.LSHAREit.Trace, C:\awh7648.tmp, , [dff93b4d0d8c80b6ee17a8d2b74d817f],
PUP.Optional.LSHAREit.Trace, C:\awh7676.tmp, , [b721aade4257fc3ad3326515966eb44c],
PUP.Optional.LSHAREit.Trace, C:\awh76B5.tmp, , [02d627619bfe1b1b8a7b75058b798977],
PUP.Optional.LSHAREit.Trace, C:\awh76E3.tmp, , [2dab7e0a2e6b043205008ded44c0e31d],
PUP.Optional.LSHAREit.Trace, C:\awh76F3.tmp, , [696f97f1960359ddd035502aa163758b],
PUP.Optional.LSHAREit.Trace, C:\awh7712.tmp, , [a137eb9d48512c0a788d88f28c78a25e],
PUP.Optional.LSHAREit.Trace, C:\awh7722.tmp, , [2caca2e61188be78c4416713b351c838],
PUP.Optional.LSHAREit.Trace, C:\awh7751.tmp, , [d404295f9504ab8bcd380c6e778dd12f],
PUP.Optional.LSHAREit.Trace, C:\awh7760.tmp, , [21b789ff3a5fb77f42c39edc34d0936d],
PUP.Optional.LSHAREit.Trace, C:\awh7770.tmp, , [f7e13d4bd2c7ad89a56013672ed630d0],
PUP.Optional.LSHAREit.Trace, C:\awh77BE.tmp, , [29afb8d0bedb75c17c89e6942dd70ff1],
PUP.Optional.LSHAREit.Trace, C:\awh77CD.tmp, , [26b2691ff7a2280ea85dcdad47bdfc04],
PUP.Optional.LSHAREit.Trace, C:\awh77DD.tmp, , [9345d7b14554b77fed184139f50f55ab],
PUP.Optional.LSHAREit.Trace, C:\awh784A.tmp, , [35a37612ddbc77bfed188cee0bf9728e],
PUP.Optional.LSHAREit.Trace, C:\awh7869.tmp, , [fddbea9e8415f145a461e793808412ee],
PUP.Optional.LSHAREit.Trace, C:\awh78A8.tmp, , [a6328008aaefed4926dfea9013f1f10f],
PUP.Optional.LSHAREit.Trace, C:\awh78B7.tmp, , [19bfaaded2c7bc7aa0650674659fba46],
PUP.Optional.LSHAREit.Trace, C:\awh78B8.tmp, , [8652b0d892070f2750b5ea9007fdad53],
PUP.Optional.LSHAREit.Trace, C:\awh78F6.tmp, , [d20670181b7e74c2966f4b2fbb49738d],
PUP.Optional.LSHAREit.Trace, C:\awh7905.tmp, , [dcfcbccc13867bbb8184daa027dd8c74],
PUP.Optional.LSHAREit.Trace, C:\awh7906.tmp, , [7d5b7216c1d80234cb3a037755af8a76],
PUP.Optional.LSHAREit.Trace, C:\awh7915.tmp, , [00d800883a5faf873bca6d0d857fea16],
PUP.Optional.LSHAREit.Trace, C:\awh7925.tmp, , [0ccc3157debbb6805fa69edcd4307888],
PUP.Optional.LSHAREit.Trace, C:\awh7944.tmp, , [00d83d4bf6a30432996c463436ce14ec],
PUP.Optional.LSHAREit.Trace, C:\awh7963.tmp, , [23b5fe8a8b0ee551798c8ded9f6544bc],
PUP.Optional.LSHAREit.Trace, C:\awh7973.tmp, , [5187ccbca4f54de9c1444f2bba4ac23e],
PUP.Optional.LSHAREit.Trace, C:\awh79A1.tmp, , [5385cebacfcaa78f976e7703de265ba5],
PUP.Optional.LSHAREit.Trace, C:\awh79C1.tmp, , [a4344f394e4b2f0736cf453531d308f8],
PUP.Optional.LSHAREit.Trace, C:\awh79FF.tmp, , [f8e0b7d15940ab8b36cf7604fd0719e7],
PUP.Optional.LSHAREit.Trace, C:\awh7A4D.tmp, , [d206a2e69ffa47efe91c96e40ff52ad6],
PUP.Optional.LSHAREit.Trace, C:\awh7A6C.tmp, , [6771f89029704de9877e07733bc9827e],
PUP.Optional.LSHAREit.Trace, C:\awh7A7C.tmp, , [8f49dfa9f4a593a35ea7d1a99371f10f],
PUP.Optional.LSHAREit.Trace, C:\awh7A8B.tmp, , [34a42b5dc1d879bd4db85b1f8e76bc44],
PUP.Optional.LSHAREit.Trace, C:\awh7A9B.tmp, , [13c5f59330695fd7729385f58084f010],
PUP.Optional.LSHAREit.Trace, C:\awh7ACA.tmp, , [f0e83a4e3e5b8aac3cc999e18381aa56],
PUP.Optional.LSHAREit.Trace, C:\awh7AE9.tmp, , [4197daaea5f46ec871946c0e6d974cb4],
PUP.Optional.LSHAREit.Trace, C:\awh7B18.tmp, , [fcdc3e4a6b2e2e087392cdad669ef907],
PUP.Optional.LSHAREit.Trace, C:\awh7B75.tmp, , [17c16b1d8415e35310f5a7d350b49070],
PUP.Optional.LSHAREit.Trace, C:\awh7B76.tmp, , [46925137207978bef4114d2dd13330d0],
PUP.Optional.LSHAREit.Trace, C:\awh7BE3.tmp, , [e8f060289cfda294689d86f435cf7c84],
PUP.Optional.LSHAREit.Trace, C:\awh7BF2.tmp, , [538571173f5a0f272bda3743d034659b],
PUP.Optional.LSHAREit.Trace, C:\awh7C11.tmp, , [7167870174257cbac540abcf877d9967],
PUP.Optional.LSHAREit.Trace, C:\awh7C50.tmp, , [cb0df197d7c289ad23e29bdf74900000],
PUP.Optional.LSHAREit.Trace, C:\awh7C61.tmp, , [2fa998f0ddbc50e6848187f315ef3dc3],
PUP.Optional.LSHAREit.Trace, C:\awh7C6F.tmp, , [c61251375445d95dc342e09a7094dd23],
PUP.Optional.LSHAREit.Trace, C:\awh7C7F.tmp, , [73656b1d2277072f3ec7a7d35ea6966a],
PUP.Optional.LSHAREit.Trace, C:\awh7C80.tmp, , [3f9997f11a7fec4a699c0179808419e7],
PUP.Optional.LSHAREit.Trace, C:\awh7C8E.tmp, , [95435d2bc3d693a343c2df9bfe060000],
PUP.Optional.LSHAREit.Trace, C:\awh7C8F.tmp, , [ffd91474a8f1de589c690f6b55afbf41],
PUP.Optional.LSHAREit.Trace, C:\awh7CCD.tmp, , [c8108bfd643576c0a65f72084db79b65],
PUP.Optional.LSHAREit.Trace, C:\awh7D3A.tmp, , [53852860bcdd1f17f60fdc9ebe4639c7],
PUP.Optional.LSHAREit.Trace, C:\awh7D69.tmp, , [f5e35d2bf9a0ec4a778eb5c58282966a],
PUP.Optional.LSHAREit.Trace, C:\awh7D78.tmp, , [eaee6424287158deae5711692dd77f81],
PUP.Optional.LSHAREit.Trace, C:\awh7D79.tmp, , [66720682f7a2ae88c73e5723788c837d],
PUP.Optional.LSHAREit.Trace, C:\awh7D7A.tmp, , [8c4c662293061c1a1aeb631752b20ef2],
PUP.Optional.LSHAREit.Trace, C:\awh7DA7.tmp, , [ffd93355d0c9d75fb253e397fc08fd03],
PUP.Optional.LSHAREit.Trace, C:\awh7DC6.tmp, , [00d8c6c25e3bef4712f3f981bb4913ed],
PUP.Optional.LSHAREit.Trace, C:\awh7E05.tmp, , [d206295fcccd280e0cf9bbbfd82cde22],
PUP.Optional.LSHAREit.Trace, C:\awh7E06.tmp, , [c90ff197970246f0c0451e5c18ecb848],
PUP.Optional.LSHAREit.Trace, C:\awh7E14.tmp, , [c612dcac415864d265a0730764a0cb35],
PUP.Optional.LSHAREit.Trace, C:\awh7E33.tmp, , [3c9c8ff9e7b2b680ba4bf486709446ba],
PUP.Optional.LSHAREit.Trace, C:\awh7E53.tmp, , [55834b3d2f6a8caa877e3545e321f10f],
PUP.Optional.LSHAREit.Trace, C:\awh7E62.tmp, , [a7310b7d7c1dad89768f7307669e7d83],
PUP.Optional.LSHAREit.Trace, C:\awh7E63.tmp, , [1abe3553d2c72b0bae57b6c413f1da26],
PUP.Optional.LSHAREit.Trace, C:\awh7E81.tmp, , [03d5e99fc7d2c86edd28c6b490749f61],
PUP.Optional.LSHAREit.Trace, C:\awh7F4C.tmp, , [875148400990da5c947144364abaf808],
PUP.Optional.LSHAREit.Trace, C:\awh7FAA.tmp, , [7e5aee9a8514999d8481473371938d73],
PUP.Optional.LSHAREit.Trace, C:\awh7FC9.tmp, , [dbfddcac0891ee487194661455af14ec],
PUP.Optional.LSHAREit.Trace, C:\awh7FE8.tmp, , [defac2c6cacf67cfb74e76046b99be42],
PUP.Optional.LSHAREit.Trace, C:\awh7FF8.tmp, , [409825633e5b65d10ef712684eb6ef11],
PUP.Optional.LSHAREit.Trace, C:\awh8017.tmp, , [9741cabe445538fe05006218f90b49b7],
PUP.Optional.LSHAREit.Trace, C:\awh8018.tmp, , [b7218206564336009372f5856b99cf31],
PUP.Optional.LSHAREit.Trace, C:\awh8055.tmp, , [a632a6e2158484b26f96c5b511f3748c],
PUP.Optional.LSHAREit.Trace, C:\awh813F.tmp, , [2aaec9bfafea69cdd035295151b346ba],
PUP.Optional.LSHAREit.Trace, C:\awh818D.tmp, , [6177dbadfc9d37ff21e47a00ae56f50b],
PUP.Optional.LSHAREit.Trace, C:\awh819D.tmp, , [fddb36520c8d40f6af5686f4b054857b],
PUP.Optional.LSHAREit.Trace, C:\awh81DB.tmp, , [cc0c1f6952476dc9f510eb8f3dc76799],
PUP.Optional.LSHAREit.Trace, C:\awh820A.tmp, , [01d74b3d4c4d9e9833d243375ca843bd],
PUP.Optional.LSHAREit.Trace, C:\awh820B.tmp, , [78604f39c5d4db5b65a0275315ef44bc],
PUP.Optional.LSHAREit.Trace, C:\awh821A.tmp, , [ab2d1f69a1f8e353c83d1a60c44017e9],
PUP.Optional.LSHAREit.Trace, C:\awh8249.tmp, , [c315becac9d042f45ca995e542c2fe02],
PUP.Optional.LSHAREit.Trace, C:\awh8287.tmp, , [d602ccbc4356ef4706ffc7b3d3311ae6],
PUP.Optional.LSHAREit.Trace, C:\awh82A6.tmp, , [48905731fd9c4de91bea88f27c88b54b],
PUP.Optional.LSHAREit.Trace, C:\awh82B6.tmp, , [7e5a5632cccd87afec195c1ebf4511ef],
PUP.Optional.LSHAREit.Trace, C:\awh8507.tmp, , [f6e2d2b6a3f6b1852bda79012ed67f81],
PUP.Optional.LSHAREit.Trace, C:\awh8526.tmp, , [7b5d61278f0aa78fff068dedf311d12f],
PUP.Optional.LSHAREit.Trace, C:\awh85A3.tmp, , [f7e183051e7b82b4a1640971689c21df],
PUP.Optional.LSHAREit.Trace, C:\awh85C2.tmp, , [7d5bc7c113862214897c06747d8760a0],
PUP.Optional.LSHAREit.Trace, C:\awh85C3.tmp, , [f4e49deb48518da92dd8433762a21ee2],
PUP.Optional.LSHAREit.Trace, C:\awh867D.tmp, , [f8e0cabef2a7ad892fd63f3b1ce8e61a],
PUP.Optional.LSHAREit.Trace, C:\awh8729.tmp, , [d6022e5a7623082edb2a790110f450b0],
PUP.Optional.LSHAREit.Trace, C:\awh872A.tmp, , [1dbb92f6d6c34beb26dfe2984bb93ac6],
PUP.Optional.LSHAREit.Trace, C:\awh8796.tmp, , [c018eb9d48510a2cbe47186258aca55b],
PUP.Optional.LSHAREit.Trace, C:\awh8861.tmp, , [7860cfb9e8b14aec2bda3e3ceb19fe02],
PUP.Optional.LSHAREit.Trace, C:\awh8880.tmp, , [e4f42a5e39609d995da81f5b857fe917],
PUP.Optional.LSHAREit.Trace, C:\awh890C.tmp, , [40987f090e8b9a9cb154ccae02021ae6],
PUP.Optional.LSHAREit.Trace, C:\awh891C.tmp, , [af294048b7e2fe38c1443644a262b24e],
PUP.Optional.LSHAREit.Trace, C:\awh892B.tmp, , [a43494f41d7c3df9a5602654030156aa],
PUP.Optional.LSHAREit.Trace, C:\awh892C.tmp, , [6a6ed7b1eeabdd594abbc0ba32d2619f],
PUP.Optional.LSHAREit.Trace, C:\awh89F6.tmp, , [3d9b2a5ea8f1ae88986da9d1bc4833cd],
PUP.Optional.LSHAREit.Trace, C:\awh8A15.tmp, , [9d3b5c2ccecb3105719497e38d77f709],
PUP.Optional.LSHAREit.Trace, C:\awh8A73.tmp, , [4b8d5a2e514873c321e411698480d030],
PUP.Optional.LSHAREit.Trace, C:\awh8AB1.tmp, , [37a184049504d363798c9ae063a1867a],
PUP.Optional.LSHAREit.Trace, C:\awh8AF0.tmp, , [588091f71d7c152153b25a2017eda65a],
PUP.Optional.LSHAREit.Trace, C:\awh8BE9.tmp, , [b2261e6a4a4f999dbf460e6c996bc43c],
PUP.Optional.LSHAREit.Trace, C:\awh8C09.tmp, , [f2e69eea653492a41bea1b5f6a9acc34],
PUP.Optional.LSHAREit.Trace, C:\awh8CB4.tmp, , [e8f013757821082e59ac5f1b32d27f81],
PUP.Optional.LSHAREit.Trace, C:\awh8CB5.tmp, , [ddfb8206f6a3b77f59aca2d8768e4db3],
PUP.Optional.LSHAREit.Trace, C:\awh8D60.tmp, , [a5331276485186b013f26c0e778d50b0],
PUP.Optional.LSHAREit.Trace, C:\awh8D8F.tmp, , [41975e2aa7f2bf779f66a1d919eb08f8],
PUP.Optional.LSHAREit.Trace, C:\awh8DCD.tmp, , [5d7bfc8c5b3e2412f60ff387b45039c7],
PUP.Optional.LSHAREit.Trace, C:\awh8E0B.tmp, , [7c5cf791376284b260a5f684a361e719],
PUP.Optional.LSHAREit.Trace, C:\awh8E3A.tmp, , [a236bccc9bfe93a30bfa3644a85ce41c],
PUP.Optional.LSHAREit.Trace, C:\awh8E4A.tmp, , [34a40088cbce0b2b897c2c4e15efdb25],
PUP.Optional.LSHAREit.Trace, C:\awh8E59.tmp, , [20b8ddabcacf2f07d62f2258a4605ea2],
PUP.Optional.LSHAREit.Trace, C:\awh8F82.tmp, , [d80086021b7e61d5689d4d2d7094ea16],
PUP.Optional.LSHAREit.Trace, C:\awh9108.tmp, , [459307810d8cc274b84d6c0eeb198a76],
PUP.Optional.LSHAREit.Trace, C:\awh9146.tmp, , [28b021678b0ecf6704016c0e1ee60bf5],
PUP.Optional.LSHAREit.Trace, C:\awh9221.tmp, , [40985f29debbc37341c44e2c877d60a0],
PUP.Optional.LSHAREit.Trace, C:\awh9368.tmp, , [dcfcddabdfbae74f6b9ac2b8788ca060],
PUP.Optional.LSHAREit.Trace, C:\awh9397.tmp, , [9444afd90f8ae05650b5e496709452ae],
PUP.Optional.LSHAREit.Trace, C:\awh9404.tmp, , [fcdcbbcd029742f4a1644b2f3dc74cb4],
PUP.Optional.LSHAREit.Trace, C:\awh9414.tmp, , [30a8503841580234f60f2852e81c629e],
PUP.Optional.LSHAREit.Trace, C:\awh9452.tmp, , [03d502860a8f3bfbf5101f5b8b797a86],
PUP.Optional.LSHAREit.Trace, C:\awh9453.tmp, , [e4f4d7b13861de58f90cbcbe7b897d83],
PUP.Optional.LSHAREit.Trace, C:\awh950D.tmp, , [32a692f6a5f448ee74918dedbf45f30d],
PUP.Optional.LSHAREit.Trace, C:\awh950E.tmp, , [e1f74543b3e6d066d233fb7f7490a65a],
PUP.Optional.LSHAREit.Trace, C:\awh957B.tmp, , [4a8e91f78712ce68b1542357709405fb],
PUP.Optional.LSHAREit.Trace, C:\awh9607.tmp, , [6276bace8a0f1224e0251d5d3cc86e92],
PUP.Optional.LSHAREit.Trace, C:\awh962.tmp, , [7266acdc158481b5e02555259272aa56],
PUP.Optional.LSHAREit.Trace, C:\awh9636.tmp, , [548450380c8d42f4f3128bef53b1a55b],
PUP.Optional.LSHAREit.Trace, C:\awh97AC.tmp, , [0bcd6424b6e38babe0252e4c82820df3],
PUP.Optional.LSHAREit.Trace, C:\awh97AD.tmp, , [7761a4e4c6d357df8481c8b209fb649c],
PUP.Optional.LSHAREit.Trace, C:\awh9A3B.tmp, , [e5f36e1aadec51e545c097e3a55f26da],
PUP.Optional.LSHAREit.Trace, C:\awh9AA9.tmp, , [5c7ce3a532670b2bd134c5b58c783bc5],
PUP.Optional.LSHAREit.Trace, C:\awh9D19.tmp, , [ebede3a5a4f5b18590756614b94b7b85],
PUP.Optional.LSHAREit.Trace, C:\awh9EED.tmp, , [588050388c0d310525e0205a8a7a2bd5],
PUP.Optional.LSHAREit.Trace, C:\awhA015.tmp, , [1fb90e7a8811989ec4416c0ecc38ed13],
PUP.Optional.LSHAREit.Trace, C:\awhA0E0.tmp, , [d602e1a7c7d24de9ba4b2e4ce42050b0],
PUP.Optional.LSHAREit.Trace, C:\awhA16C.tmp, , [786088006039f93daa5bf387ee164fb1],
PUP.Optional.LSHAREit.Trace, C:\awhA256.tmp, , [f3e50880f2a746f0a560b8c229dbd729],
PUP.Optional.LSHAREit.Trace, C:\awhA2A4.tmp, , [ecec236599007cbaf5106d0dd72d3fc1],
PUP.Optional.LSHAREit.Trace, C:\awhA340.tmp, , [25b354342970f145b64fa0da0ff5827e],
PUP.Optional.LSHAREit.Trace, C:\awhA717.tmp, , [ab2d24649bfe44f29b6a4c2ee81c25db],
PUP.Optional.LSHAREit.Trace, C:\awhA86E.tmp, , [ac2c8dfb63369a9c6e97acce48bc4cb4],
PUP.Optional.LSHAREit.Trace, C:\awhA8AD.tmp, , [0dcbacdcf4a514222bda4c2e7391ab55],
PUP.Optional.LSHAREit.Trace, C:\awhA9B6.tmp, , [f1e71672564370c656af5d1dc83c48b8],
PUP.Optional.LSHAREit.Trace, C:\awhAA90.tmp, , [f9dfd8b09cfdbf7764a1f08a35cf10f0],
PUP.Optional.LSHAREit.Trace, C:\awhAB3C.tmp, , [37a13157dbbeac8a50b5d5a548bcc23e],
PUP.Optional.LSHAREit.Trace, C:\awhAED4.tmp, , [18c0fc8c74259f97f510eb8fe22223dd],
PUP.Optional.LSHAREit.Trace, C:\awhB0E7.tmp, , [993fe99fecadcb6b966f2753d62ecf31],
PUP.Optional.LSHAREit.Trace, C:\awhB20F.tmp, , [36a24147861336004abbe3977490d927],
PUP.Optional.LSHAREit.Trace, C:\awhB25D.tmp, , [61776b1dcbced36392733f3b28dc7987],
PUP.Optional.LSHAREit.Trace, C:\awhB6FF.tmp, , [4d8b0682b6e31620d62f1961fc08c739],
PUP.Optional.LSHAREit.Trace, C:\awhB79B.tmp, , [627691f79207a88eb84d2654cb3923dd],
PUP.Optional.LSHAREit.Trace, C:\awhB818.tmp, , [b424aadee1b860d680855f1bd52f0000],
PUP.Optional.LSHAREit.Trace, C:\awhBA78.tmp, , [c117a0e8eeab68ce0afb97e3a95bac54],
PUP.Optional.LSHAREit.Trace, C:\awhBC3C.tmp, , [07d11f69d1c8dc5ad0353149679dec14],
PUP.Optional.LSHAREit.Trace, C:\awhC199.tmp, , [ad2b0286a9f05bdbdb2ac2b85da71be5],
PUP.Optional.LSHAREit.Trace, C:\awhCCB0.tmp, , [62765b2d1e7b33031bea0a708084ca36],
PUP.Optional.LSHAREit.Trace, C:\awhCE84.tmp, , [cb0df1972e6bb68001043446669e1de3],
PUP.Optional.LSHAREit.Trace, C:\awhD114.tmp, , [09cfafd9c2d7ab8b56af4f2bb74d50b0],
PUP.Optional.LSHAREit.Trace, C:\awhD2A9.tmp, , [cb0d43459dfcb77f19ec95e59e66ec14],
PUP.Optional.LSHAREit.Trace, C:\awhD9DA.tmp, , [f0e8fd8b7029f541c54083f79173cf31],
PUP.Optional.LSHAREit.Trace, C:\awhDAF3.tmp, , [7860aade138635015ea7adcd28dc19e7],
PUP.Optional.LSHAREit.Trace, C:\awhDBCD.tmp, , [32a691f78f0aca6c29dca4d682821fe1],
PUP.Optional.LSHAREit.Trace, C:\awhE021.tmp, , [58803058b4e5bb7b59ac5f1b18ecb050],
PUP.Optional.LSHAREit.Trace, C:\awhE71.tmp, , [9d3b50389306b77fd035502a0df707f9],
PUP.Optional.LSHAREit.Trace, C:\awhE82C.tmp, , [fcdc95f380196ccaa95c5b1f3dc7c23e],
PUP.Optional.LSHAREit.Trace, C:\awhEC41.tmp, , [23b5bbcdb4e5c76f24e1d1a973914bb5],
PUP.Optional.LSHAREit.Trace, C:\awhF362.tmp, , [7e5ac2c6e1b885b12adb3c3e5ba901ff],
PUP.Optional.LSHAREit.Trace, C:\awhF391.tmp, , [07d13c4c7e1bca6c51b40b6ff2122bd5],
PUP.Optional.LSHAREit.Trace, C:\awhF41E.tmp, , [30a8097faced26109471ff7bbf45bb45],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)


_______

Je to tak obsáhlé že se log do jednoho příspěvku nevejde...

Re: Čínský malware, vir - chová se jako správce, FRSTLaunche

Napsal: 18 bře 2016 06:44
od Márty84
Vsechny nalezy nechte odstranit. Po odstraneni a restartu pc test s MBAM zopakujte, at vime, jestli se to nevraci. Napiste vysledek testu a podle nej zvolim dalsi postup.

Re: Čínský malware, vir - chová se jako správce, FRSTLaunche

Napsal: 18 bře 2016 07:42
od F7R
Vše jsem odstranil. Objevilo se 0 threats succesfully quarantined, dole bylo tlačítko "dokončit" avšak šedé a po kliknutí se nic nedělo. Provedl jsem restart a ten malwarový čínský program Tencent tu stále je. Po spuštění windows vyskočilo okno z řízení uživatelských účtu, že jestli jsem program Tencent spustil, jestli chci povolit nebo zamítnout...dal jsem zamítnout a stejně ho mám zas na dolní liště run...
Snažil jsem se složku Tencent smazat z Program files - nejde, k této operaci je nutné oprávnění...
On to totiž asi není čistě malware nebo vir, ale dobře zahnizděný program s ochranou proti smazání :( Ale nevím, jsem laik...

Spustím opětovný scan jak jste radil...
EDIT: Scan běží, ve dvě odpoledne bude snad zase hotovo

Re: Čínský malware, vir - chová se jako správce, FRSTLaunche

Napsal: 18 bře 2016 08:29
od Márty84
F7R píše:Objevilo se 0 threats succesfully quarantined, dole bylo tlačítko "dokončit" avšak šedé a po kliknutí se nic nedělo.
A byly u tech nalezu vlevo zatrzitka, jako ze je chcete odstranit?
F7R píše:On to totiž asi není čistě malware nebo vir, ale dobře zahnizděný program s ochranou proti smazání :( Ale nevím, jsem laik...
Jak jsem psal, je zazrany hluboko a nejde jen tak odinstalovat. Ale dame ho do pryc silou, jen to chce postupovat pekne postupne :-)

Re: Čínský malware, vir - chová se jako správce, FRSTLaunche

Napsal: 18 bře 2016 09:51
od F7R
Márty84 píše:A byly u tech nalezu vlevo zatrzitka, jako ze je chcete odstranit?
Ježiš já už teď nevím, ale myslím že ano...tak ted scanuji podruhé tak budu více pozorný

Re: Čínský malware, vir - chová se jako správce, FRSTLaunche

Napsal: 18 bře 2016 11:12
od Márty84
OK :)

Re: Čínský malware, vir - chová se jako správce, FRSTLaunche

Napsal: 18 bře 2016 18:37
od F7R
Nyní už jen 3 infikované...

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 18.3.2016
Čas skenování: 9:32:09
Protokol: scan3.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2016.03.18.02
Databáze rootkitů: v2016.03.12.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows Vista Service Pack 2
CPU: x86
Souborový systém: NTFS
Uživatel: cesko

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 653647
Uplynulý čas: 8 hod, 7 min, 43 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 2
PUP.Optional.Hao123, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.hao123.com/?tn=95144889_hao_pg, , [8caed5b45d3c6bcb2027b9d4bc48af51]
PUP.Optional.Hao123, HKU\S-1-5-21-3613717200-223133842-2651324926-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.hao123.com/?tn=95144889_hao_pg, , [41f9c8c1831625112f17523bfb095ba5]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 1
Backdoor.PcClient, C:\Program Files\Tencent\QQPCMgr\Plugins\PluginsSetupBak\QQPhoneManager-5.5.1_710201.4892.pa.exe, , [0a307910a0f98caa3d3415bfee16f010],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)
Všechny časy jsou v UTC+01:00
Stránka 1 z 4

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz