Script ZHPFix [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: Modified [MD5.00000000000000000000000000000000] [APT] [{3E6903D8-88B8-42CC-B5E7-5E45E75FA3E1}] (...) -- C:\Users\patsong\Downloads\Campfire_Legends_The_Last_Act.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{F6956385-0442-477F-952C-E41BC74C48FA}] (...) -- C:\Users\patsong\Downloads\WS_GoldenSilence_CE.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.CD11D500328F07AE1666D046F94179E0] [APT] [AVAST Software\Avast settings backup] (.AVAST Software.) -- C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [702056] (.Activate.) =>.AVAST Software a.s.® [MD5.00000000000000000000000000000000] - (.Dropbox, Inc. - Dropbox Service.) -- C:\Windows\system32\DbxSvc.exe [0] [PID.2764] =>.Dropbox, Inc. R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer O39 - APT: {3E6903D8-88B8-42CC-B5E7-5E45E75FA3E1} - (...) -- C:\Windows\System32\Tasks\{3E6903D8-88B8-42CC-B5E7-5E45E75FA3E1} [2994] (.Orphan.) =>.Superfluous.Orphan O39 - APT: {F6956385-0442-477F-952C-E41BC74C48FA} - (...) -- C:\Windows\System32\Tasks\{F6956385-0442-477F-952C-E41BC74C48FA} [2974] (.Orphan.) =>.Superfluous.Orphan HKLM\SOFTWARE\Wow6432Node\Eset =>.ESET HKLM\SOFTWARE\Wow6432Node\KasperskyLab =>.KasperskyLab HKLM\SOFTWARE\Wow6432Node\Lavasoft =>.Lavasoft HKLM\SOFTWARE\Wow6432Node\Symantec =>.Symantec HKCU\SOFTWARE\Avira =>.Avira HKCU\SOFTWARE\Bitdefender =>.Bitdefender HKCU\SOFTWARE\ESET =>.ESET HKCU\SOFTWARE\KasperskyLabSetup =>.Kaspersky Labs HKCU\SOFTWARE\Symantec =>.Symantec O43 - CFD: 11/11/2016 - [0] D -- C:\Users\patsong\AppData\Local\Tempzxpsign039a10a8dbc85972 =>.Superfluous.Temporary O43 - CFD: 11/11/2016 - [0] D -- C:\Users\patsong\AppData\Local\Tempzxpsign0d727e5ccd5f493a =>.Superfluous.Temporary O43 - CFD: 11/11/2016 - [0] D -- C:\Users\patsong\AppData\Local\Tempzxpsign0f99fedc5b21c61c =>.Superfluous.Temporary O43 - CFD: 11/11/2016 - [0] D -- C:\Users\patsong\AppData\Local\Tempzxpsign12c1d498284a2a9b =>.Superfluous.Temporary O43 - CFD: 11/11/2016 - [0] D -- C:\Users\patsong\AppData\Local\Tempzxpsign2667747e6dad791c =>.Superfluous.Temporary O43 - CFD: 11/11/2016 - [0] D -- C:\Users\patsong\AppData\Local\Tempzxpsign3a44a55afc448b57 =>.Superfluous.Temporary O43 - CFD: 11/11/2016 - [0] D -- C:\Users\patsong\AppData\Local\Tempzxpsign3bcc77c867eba54b =>.Superfluous.Temporary O43 - CFD: 11/11/2016 - [0] D -- C:\Users\patsong\AppData\Local\Tempzxpsign6ca2b5c934cab1ff =>.Superfluous.Temporary O43 - CFD: 11/11/2016 - [0] D -- C:\Users\patsong\AppData\Local\Tempzxpsign76d84a1a4fdac2e9 =>.Superfluous.Temporary O43 - CFD: 11/11/2016 - [0] D -- C:\Users\patsong\AppData\Local\Tempzxpsign7e622791d91e27c3 =>.Superfluous.Temporary O43 - CFD: 11/11/2016 - [0] D -- C:\Users\patsong\AppData\Local\Tempzxpsign87617dbd182875ff =>.Superfluous.Temporary O43 - CFD: 11/11/2016 - [0] D -- C:\Users\patsong\AppData\Local\Tempzxpsignc6c3ed57d17fbc82 =>.Superfluous.Temporary O43 - CFD: 11/11/2016 - [0] D -- C:\Users\patsong\AppData\Local\Tempzxpsignec6db58de996e745 =>.Superfluous.Temporary O43 - CFD: 16/11/2016 - [] D -- C:\ProgramData\AVAST Software =>.AVAST Software O43 - CFD: 09/01/2013 - [] D -- C:\ProgramData\Norton =>.Norton O43 - CFD: 21/10/2011 - [] D -- C:\ProgramData\NortonInstaller =>.Symantec O43 - CFD: 09/10/2016 - [] D -- C:\Program Files (x86)\Common Files\AV =>.Avast O43 - CFD: 09/01/2013 - [0] D -- C:\Program Files (x86)\Common Files\Symantec Shared =>.Symantec O43 - CFD: 08/10/2016 - [] D -- C:\Users\patsong\AppData\Roaming\Avira =>.Avira Software O43 - CFD: 28/08/2013 - [] D -- C:\Users\patsong\AppData\Local\avgchrome O43 - CFD: 01/10/2016 - [] D -- C:\Users\patsong\AppData\Local\ESET =>.ESET O58 - SDL:2016/03/31 14:34:22 A . (.BitDefender S.R.L. - Trufos Kernel Module.) -- C:\Windows\System32\drivers\Trufos.sys [485512] =>.Bitdefender SRL® C:\Users\patsong\AppData\Local\Tempzxpsign039a10a8dbc85972 =>.Superfluous.Temporary C:\Users\patsong\AppData\Local\Tempzxpsign0d727e5ccd5f493a =>.Superfluous.Temporary C:\Users\patsong\AppData\Local\Tempzxpsign0f99fedc5b21c61c =>.Superfluous.Temporary C:\Users\patsong\AppData\Local\Tempzxpsign12c1d498284a2a9b =>.Superfluous.Temporary C:\Users\patsong\AppData\Local\Tempzxpsign2667747e6dad791c =>.Superfluous.Temporary C:\Users\patsong\AppData\Local\Tempzxpsign3a44a55afc448b57 =>.Superfluous.Temporary C:\Users\patsong\AppData\Local\Tempzxpsign3bcc77c867eba54b =>.Superfluous.Temporary C:\Users\patsong\AppData\Local\Tempzxpsign6ca2b5c934cab1ff =>.Superfluous.Temporary C:\Users\patsong\AppData\Local\Tempzxpsign76d84a1a4fdac2e9 =>.Superfluous.Temporary C:\Users\patsong\AppData\Local\Tempzxpsign7e622791d91e27c3 =>.Superfluous.Temporary C:\Users\patsong\AppData\Local\Tempzxpsign87617dbd182875ff =>.Superfluous.Temporary C:\Users\patsong\AppData\Local\Tempzxpsignc6c3ed57d17fbc82 =>.Superfluous.Temporary C:\Users\patsong\AppData\Local\Tempzxpsignec6db58de996e745 =>.Superfluous.Temporary FirewallRaz EmptyPrefetch EmptyTemp EmptyFlash