Script ZHPFix [HKCU\Software\AppDataLow\Software\Crossrider] =>PUP.CrossRider [HKCU\Software\PopCap] =>Adware.PopCap O43 - CFD: 18/02/2014 - 16:56:16 - [30,871] ----D C:\ProgramData\PopCap Games =>Adware.PopCap HKLM\SOFTWARE\Microsoft\Tracing\InstallManagerApp_RASAPI32 =>PUP.Manager HKLM\SOFTWARE\Microsoft\Tracing\InstallManagerApp_RASMANCS =>PUP.Manager HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iSafedl_RASAPI32 =>Trojan.Staser HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iSafedl_RASMANCS =>Trojan.Staser HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iSafeSvc_RASAPI32 =>Trojan.Staser HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iSafeSvc_RASMANCS =>Trojan.Staser HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\RewardsArcade_RASAPI32 =>PUP.RewardsArcade HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\RewardsArcade_RASMANCS =>PUP.RewardsArcade [HKCU\Software\AppDataLow\Software\Crossrider] =>PUP.CrossRider C:\ProgramData\PopCap Games =>Adware.PopCap^ [HKCU\Software\PopCap] =>Adware.PopCap^ O51 - MPSK:{3a43049d-21af-11e2-ace2-c89cdc2e4155}\AutoRun\command. (...) -- H:\Setup.exe (.not file.) [HKCU\Software\Conduit] =>Toolbar.Conduit [HKCU\Software\Softonic] =>Toolbar.Conduit [HKCU\Software\Softonic] =>Toolbar.Conduit [HKCU\Software\Conduit] =>Toolbar.Conduit^ C:\Program Files\Intel\AMT\UNS.exe O23 - Service: Intel Active Management Technology User Notification Service (UNS) - Intel Corporation - HKLM\SYSTEM\CurrentControlSet\Services\UNS C:\Windows\system32\wuaueng.dll SR - | Auto 21/01/2008 21504 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe FirewallRaz PROXYFix EmptyTemp EmptyFlash EmptyClsid SysRestore