Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp

[MD5.00000000000000000000000000000000] [APT] [Droqagegrowosy Reports] (...) -- C:\Program Files\Perdowardkesit\arantion.exe (.not file.) [324224] (.Activate.)
[MD5.00000000000000000000000000000000] [APT] [{3B38FA25-972D-4A7F-BAE2-D966C9325B53}] (...) -- C:\Program Files\SIMPLE~1\UNWISE.EXE (.not file.) [324224] (.Activate.)
O4 - HKUS\S-1-5-21-342121905-4264983168-326372114-1000\..\Run: [KSS] C:\Program Files\Kaspersky Lab\Kaspersky Security Scan\kss.exe (.not file.)
G0 - GCSP: Preferences [User Data\Default][HomePage] http://bdimg.share.baidu.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://dz.adloads.net
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fanli90.cn
G0 - GCSP: Preferences [User Data\Default][HomePage] http://pagead2.googlesyndication.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://s95.cnzz.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://yxyj59.cn
G0 - GCSP: Preferences [User Data\Default][HomePage] http://googleads.g.doubleclick.net =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com =>.Google Inc.
O2 - BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} . (...) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\OnlineBanking\online_banking_bho.dll (.not file.)
O17 - HKLM\System\CCS\Services\Tcpip\..\{2F1660E6-116B-45D0-9D3E-C1EA6B4F9068}: DhcpNameServer = 192.168.148.10 =>.Local IP Adress
HKLM\SOFTWARE\Eset =>.ESET
O39 - APT: Unknown - (.Microsoft Corporation.) -- C:\Windows\System32\Tasks\SidebarExecute [324224] =>.Microsoft Corporation
O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{52CE3E39-82A8-4574-973F-C085B307FFA0} [324224]
O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{ADFDE060-0816-44A4-A97F-29CF3A07E503} [324224]
O4 - HKCU\..\Run: [BingSvc] . (.© 2015 Microsoft Corporation - Microsoft Bing Service.) -- C:\Users\byc-info\AppData\Local\Microsoft\BingSvc\BingSvc.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-21-342121905-4264983168-326372114-1000\..\Run: [BingSvc] . (.© 2015 Microsoft Corporation - Microsoft Bing Service.) -- C:\Users\byc-info\AppData\Local\Microsoft\BingSvc\BingSvc.exe =>.Microsoft Corporation®
[MD5.CC436BB2A26391F3DEBE316F6FB0474F] - (.© 2015 Microsoft Corporation - Microsoft Bing Service.) -- C:\Users\byc-info\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008] [PID.4292] =>.Microsoft Corporation®