Script ZHPFix FirewallRaz EmptyPrefetch EmptyTemp G0 - GCSP: Preferences [User Data\Default][HomePage] http://captive.apple.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://detectportal.firefox.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://g.cn G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.airport.us G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.thinkdifferent.us G0 - GCSP: Preferences [User Data\Default][HomePage] http://api.zcdn.de G0 - GCSP: Preferences [User Data\Default][HomePage] http://ask.fm G0 - GCSP: Preferences [User Data\Default][HomePage] http://crm.zenguard.biz R4 - HKLM\Software\WOW6432Node\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 O2 - BHO: (no name) [64Bits] - {00C6482D-C502-44C8-8409-FCE54AD9C208} (.Orphan.) O2 - BHO: ExplorerWnd Helper [64Bits] - {10921475-03CE-4E04-90CE-E2E7EF20C814} (.Orphan.) O58 - SDL:2015/09/23 03:06:46 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\41A87648.sys [113880] =>.Malwarebytes Corporation® (.SUP.Orphan) HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00C6482D-C502-44C8-8409-FCE54AD9C208} =>.SUP.Orphan HKLM\Software\Classes\CLSID\{00C6482D-C502-44C8-8409-FCE54AD9C208} =>.SUP.Orphan HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00C6482D-C502-44C8-8409-FCE54AD9C208} =>.SUP.Orphan HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00C6482D-C502-44C8-8409-FCE54AD9C208} =>.SUP.Orphan HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814} =>.SUP.Orphan HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10921475-03CE-4E04-90CE-E2E7EF20C814} =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\IObitUnstaler =>.SUP.Orphan HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\IObitUnstaler =>.SUP.Orphan HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\IObitUnstaler =>.SUP.Orphan HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\IObitUnstaler =>.SUP.Orphan O108 - CMH1: IObitUnstaler [64Bits] - {B19ED566-D419-470b-B111-3C89040BC027} . (.Orphan.) O108 - CMH2: IObitUnstaler [64Bits] - {B19ED566-D419-470b-B111-3C89040BC027} . (.Orphan.) O108 - CMH4: IObitUnstaler [64Bits] - {B19ED566-D419-470b-B111-3C89040BC027} . (.Orphan.) O108 - CMH6: IObitUnstaler [64Bits] - {B19ED566-D419-470b-B111-3C89040BC027} . (.Orphan.)