Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp
EmptyFlash


G2 - GCE: Preference [User Data\Default] [khnhgcdeffjkecekhlohglfcpfepdlli] MySearch DS-1 =>PUP.Optional.MyWebSearch
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1

O43 - CFD: 30/08/2016 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\LavasoftTcpService =>PUP.Optional.LavasoftWebCompanion
O90 - PUC: "D24574350535A600677A7A857BC06200" . (.Search App by Ask.) -- C:\Windows\Installer\{5347542D-5350-006A-76A7-A758B70C2600}\ToolbarIcon.exe =>PUP.Optional.BrowserTabSearch
O90 - PUC: "D445C42535D20005677A7A857BC04210" . (.Search App by Ask.) -- C:\Windows\Installer\{524C544D-2D53-5000-76A7-A758B70C2401}\ToolbarIcon.exe =>PUP.Optional.BrowserTabSearch


C:\Users\toshiba\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmgdapiklnfpdonfeopollmlpfjaphcb =>.Superfluous.MuzikFury
C:\Users\toshiba\AppData\Local\Google\Chrome\User Data\Default\Extensions\khnhgcdeffjkecekhlohglfcpfepdlli =>PUP.Optional.MyWebSearch
HKCU\SOFTWARE\GreenTree Applications =>.Superfluous.GreenTreeApp
C:\WINDOWS\System32\Config\systemprofile\AppData\Local\LavasoftTcpService =>PUP.Optional.LavasoftWebCompanion
C:\Windows\Installer\{5347542D-5350-006A-76A7-A758B70C2600}\ToolbarIcon.exe =>PUP.Optional.BrowserTabSearch
HKLM\Software\Classes\Installer\Products\D24574350535A600677A7A857BC06200 =>PUP.Optional.BrowserTabSearch
HKLM\Software\Classes\Installer\Features\D24574350535A600677A7A857BC06200 =>PUP.Optional.BrowserTabSearch
C:\Windows\Installer\{524C544D-2D53-5000-76A7-A758B70C2401}\ToolbarIcon.exe =>PUP.Optional.BrowserTabSearch
HKLM\Software\Classes\Installer\Products\D445C42535D20005677A7A857BC04210 =>PUP.Optional.BrowserTabSearch
HKLM\Software\Classes\Installer\Features\D445C42535D20005677A7A857BC04210 =>PUP.Optional.BrowserTabSearch

[MD5.00000000000000000000000000000000] [APT] [{55E0BC91-71C5-4C76-A943-41B6FD5E80BB}] (...) -- C:\Users\toshiba\Downloads\Programs\IomegaWare_-francais-_4.0_9598MeNT42000XP_2.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty
[MD5.00000000000000000000000000000000] [APT] [{69DEA7AF-92B3-40D2-9A58-1953E0B3C0D6}] (...) -- C:\Users\toshiba\Desktop\AlJazira\setup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty
G2 - GCE: Preference [User Data\Default] [hmgdapiklnfpdonfeopollmlpfjaphcb] Muzik Fury =>.Superfluous.MuzikFury
HKCU\SOFTWARE\GreenTree Applications =>.Superfluous.GreenTreeApp
O87 - FAEL: "{E48EC322-DC80-443A-AA71-A104190DCEE7}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Steam\bin\steamwebhelper.exe (.not file.)
O87 - FAEL: "{529C6769-5BE1-48C0-B6C8-9E03EFA05904}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Steam\bin\steamwebhelper.exe (.not file.)
O87 - FAEL: "{DC85BFA8-D3E2-4880-BA45-54A48885A850}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Steam\Steam.exe (.not file.)
O87 - FAEL: "{81197C77-D980-41CE-8781-F03BC7C4A00C}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Steam\Steam.exe (.not file.)
O87 - FAEL: "{FD5EE7C9-B6BC-4D32-9334-DE406AADB9EA}" [In-None-P6-TRUE] .(...) -- C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe (.not file.)
O87 - FAEL: "{8811961D-8345-4D48-BA25-4896E97D2493}" [In-None-P17-TRUE] .(...) -- C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe (.not file.)

G0 - GCSP: Preferences [User Data\Default][HomePage] http://ui.ff.avast.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://accounts.google.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://scontent-mad1-1.xx.fbcdn.net
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.google-analytics.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://video-mad1-1.xx.fbcdn.net
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.facebook.com
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\amazon-france.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\bing.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\cnrtl-tlfi-fr.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\ddg.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\eBay-france.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\google.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\wikipedia-fr.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\yahoo-france.xml
O17 - HKLM\System\CCS\Services\Tcpip\..\{a964f8f9-4493-43ee-8212-23808c7a52cc}: NameServer = 212.217.0.12 212.217.1.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{c4793b76-b349-4965-9eed-603d06346699}: NameServer = 212.217.0.12 212.217.1.12
HKLM\SOFTWARE\F-Secure =>.F-Secure
HKCU\SOFTWARE\F-Secure =>.F-Secure
O43 - CFD: 08/08/2016 - [] D -- C:\ProgramData\F-Secure =>.F-Secure
O43 - CFD: 09/07/2016 - [] D -- C:\Users\toshiba\AppData\Local\F-Secure =>.F-Secure
O58 - SDL:2016/06/21 05:32:01 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver (NDIS 6..) -- C:\WINDOWS\System32\drivers\fsfreedometap.sys [32736] =>.F-Secure Corporation®