Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp

O4 - HKLM\..\Run: [VEFLSQM] . (. - .) -- //B //E:vbs "C:\Users\OMAR\AppData\Roaming\VEFLSQM
O4 - HKCU\..\Run: [VEFLSQM] . (. - Internet Download Manager (IDM).) -- //B //E:vbs "C:\Users\OMAR\AppData\Roaming\VEFLSQM
O4 - HKUS\S-1-5-21-1605170623-815738551-1496236026-1000\..\Run: [VEFLSQM] . (. - Internet Download Manager (IDM).) -- //B //E:vbs "C:\Users\OMAR\AppData\Roaming\VEFLSQM
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.cjoint.com =>.cjoint.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://facebook.com =>.Facebook
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fonts.gstatic.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://lh6.googleusercontent.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://s.youtube.com =>.Youtube
G0 - GCSP: Preferences [User Data\Default][HomePage] http://scontent-mrs1-1.xx.fbcdn.net
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.avito.ma
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.facebook.com =>.Facebook
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google-analytics.com =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] http://www.youtube.com =>.Youtube {Youtube}
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 149.56.36.54:80
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
O17 - HKLM\System\CCS\Services\Tcpip\..\{1802DE92-8B44-48BA-A7BD-1FC1EF048A8E}: DhcpNameServer = 192.168.8.1 192.168.8.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{F1462733-6865-46AB-9248-8A60D2DAD422}: DhcpNameServer = 192.168.8.1 192.168.8.1 =>.Local IP Adress
HKLM\SOFTWARE\S3R521
HKLM\SOFTWARE\Software =>.Unknown
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6 =>PUM.Misplaced.Certificate [Avast Software]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931 =>PUM.Misplaced.Certificate [Avast Software]

HKLM\SOFTWARE\Baidu_Drp_pos =>.Baidu Technology
HKCU\SOFTWARE\Baidu Security =>.Baidu Technology
HKCU\SOFTWARE\Baidu WiFiHotspot

O43 - CFD: 31/10/2016 - [] D -- C:\Users\OMAR\AppData\Roaming\Baidu =>.Baidu