Код:
PUP.Optional.Yontoo, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{4E2D2BF0-159F-4257-ACF0-B1F29B376FA0}, , [072936eb6535e056771ec4d262a04eb2],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, , [e54b63be7228092d3789d3c37c862dd3],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}, , [59d75fc2e5b52412bf03c9cd6a98bf41],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, , [1d1399889dfdb284e2e87d1909f9a45c],
PUP.Optional.Smeazymo, HKLM\SOFTWARE\MICROSOFT\TRACING\Care-lane_RASAPI32, , [151b978a0a908caa2e4f4a86fb07fc04],
PUP.Optional.Smeazymo, HKLM\SOFTWARE\MICROSOFT\TRACING\Care-lane_RASMANCS, , [141c210091090f27dba208c8679b5ea2],
PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\mtZitenop, , [2010ad74efabe55155a1fdf9fa09c53b],
PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\Zitenop_RASAPI32, , [28083ee37327ab8bf58346b02ed57e82],
PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\Zitenop_RASMANCS, , [7ab64fd2158560d6621605f13bc8f20e],
PUP.Optional.CinemaPlus, HKU\S-1-5-18\SOFTWARE\CinemaPlus-3.2cV25.10-nv-ie, , [2b05f22f970366d0a60a94079073b24e],
PUP.Optional.SavePass, HKU\S-1-5-18\SOFTWARE\SavePass 1.1-nv-ie, , [dc54da470f8b8aac97aac8eb4eb5e41c],
PUP.Optional.CinemaPlus, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\CinemaPlus-3.2cV25.10-nv-ie, , [929e3be63f5bab8b00b00398aa598779],
PUP.Optional.CinemaPlus, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\CinemaPlus-4.2vV23.10-nv-ie, , [4de3ca57a1f957df8c243566f80b6c94],
PUP.Optional.HighDefAction, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\HighDefAction, , [c66a69b858421125a7f77a2b2ed5c13f],
PUP.Optional.SavePass, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\SavePass 1.1-nv-ie, , [ff3164bdcdcd082eca77c6ed62a17b85],
PUP.Optional.Tuto4PC, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\TutoTag, , [082872afe5b54cea579d1c9d6c97b44c],
PUP.Optional.YorkNewCin, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\YorkNewCin, , [c26efb26415991a535458f2e9e65758b],
PUP.Optional.CrossRider, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [959bbc651585d36349bc0699f112b050],
PUP.Optional.CinemaPlus, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\ARENAHD, , [0d236bb66c2e62d4e2c79cff000336ca],
PUP.Optional.GamesDesktop, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\GAMESDESKTOP, , [46eab56c405adb5b6095049f18eb2dd3],
PUP.Optional.GlobalUpdate, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY, , [79b73ae7207a73c34738cbd9659e36ca],
PUP.Optional.Linkury, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{IELNKSRCH}, , [fe32160b8a100b2bd8e008ec897aec14],
PUP.Optional.YahooVNM, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C0C3A6C6-03BC-4195-8FCB-AEA091301353}, , [33fdc75acecc61d56ef515a84ab9bb45],
PUP.Optional.OutBrowse, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\OB, , [86aaf72a5248c27450b2dbd48083af51],
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-18\ENVIRONMENT|SNP, http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D?publisher=APSFRec&co=UA&userid=40624bfc-8534-5d78-ac49-1fc59cf2b73d&searchtype=sc&installDate=30.10.2015&barcodeid=50045888&channelid=888, , [c0700c155248092d94f12acbc2413fc1]
PUP.Optional.CinemaPlus, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\ARENAHD|value, 1, , [0d236bb66c2e62d4e2c79cff000336ca]
PUP.Optional.GamesDesktop, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\GAMESDESKTOP|mj, 15.10.28.0, , [46eab56c405adb5b6095049f18eb2dd3]
PUP.Optional.GlobalUpdate, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY|source, IE, , [79b73ae7207a73c34738cbd9659e36ca]
PUP.Optional.PCTuner, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\HIGHDEFACTION|value, 1, , [0d232cf5c7d36dc93378cfe007fc0cf4]
PUP.Optional.Linkury, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{ielnksrch}|DisplayName, Search the web, , [fe32160b8a100b2bd8e008ec897aec14]
PUP.Optional.YahooVNM, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C0C3A6C6-03BC-4195-8FCB-AEA091301353}|URL, https://search.yahoo.com/search?fr=vmn&type=vmn__webcompa__1_0__ya__ch_WCYID10099_swoc_campaign_151030__yaie&p={searchTerms}, , [33fdc75acecc61d56ef515a84ab9bb45]
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{ielnksrch}|URL, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B220d2-X1GHc82FI0fSgOAFJkvo67SEoHP_yqNr0g7n8D4IVzABHZ_TGpi8Z2-8CqM_9nG1AsLBB_9-SWFTSkoalyzYSf8gBRKJzsF8wBV-p88oFcZjIl5JBedhAXrOhuardgy5nN4eKhvqZxDf96KbtIOHjd&q={searchTerms}, , [dd539e83dbbfef470159e90e6e9501ff]
PUM.Optional.LowRiskFileTypes, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\ASSOCIATIONS|LowRiskFileTypes, .zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;.mdb;, , [161a37eaaeecf6403c53a43214ef48b8]
PUP.Optional.OutBrowse, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\OB|monitype25, 10/28/15 22:22:13, , [86aaf72a5248c27450b2dbd48083af51]
PUP.Optional.OutBrowse, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\OB|monitype21, 10/28/15 22:22:59, , [ba76928f316970c642c07d326f947f81]
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|SearchAssistant, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B220d2-X1GHc82FI0fSgOAFJkvo67SEoHP_yqNr0g7n8D4IVzABHZ_TGpi8Z2-8CqM_9nG1AsLBB_9-SWFTSkoalyzYSf8gBRKJzsF8wBV-p88oFcZjIl5JBedhAXrOhuardgy5nN4eKhvqZxDf96KbtIOHjd&q={searchTerms}, Хорошо: (www.google.com), Плохо: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B220d2-X1GHc82FI0fSgOAFJkvo67SEoHP_yqNr0g7n8D4IVzABHZ_TGpi8Z2-8CqM_9nG1AsLBB_9-SWFTSkoalyzYSf8gBRKJzsF8wBV-p88oFcZjIl5JBedhAXrOhuardgy5nN4eKhvqZxDf96KbtIOHjd&q={searchTerms}),,[64cce9384e4c7fb7bc5efe7c2dd78f71]
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-3071442191-385875884-4178315854-500\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B220d2-X1GHc82FI0fSgOAFJkvo67SEoHP_yqNr0g7n8D4IVzABHZ_TGpi8Z2-8CqM_9nG1AsLBB_9-SWFTSkoalyzYSf8gBRKJzsF8wBV-p88oFcZjIl5JBedhAXrOhuardgy5nN4eKhvqZxDf96KbtIOHjd&q={searchTerms}, Хорошо: (www.google.com), Плохо: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B220d2-X1GHc82FI0fSgOAFJkvo67SEoHP_yqNr0g7n8D4IVzABHZ_TGpi8Z2-8CqM_9nG1AsLBB_9-SWFTSkoalyzYSf8gBRKJzsF8wBV-p88oFcZjIl5JBedhAXrOhuardgy5nN4eKhvqZxDf96KbtIOHjd&q={searchTerms}),,[77b9d74a84165fd7e734a8d29a6a728e]