Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp


O38 - TASK: {59DAE2BA-BE52-4F48-B7FE-065D97213AD2} [64Bits][\Microsoft\Windows\Media Center\RecordingRestart] - (...) -- C:\Windows\ehome\ehrec (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {F314DC8F-2820-4E50-A596-043E6044B78C} [64Bits][\Microsoft\Windows\Media Center\mcupdate] - (...) -- C:\Windows\ehome\mcupdate (.not file.) [0] (.Orphan.) =>.SUP.Orphan
R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\System32\ieframe.dll =>.Microsoft Corporation
C:\ProgramData\KMSAutoS =>HackTool.WinActivator
C:\Users\M'Amin\AppData\Local\MSfree Inc =>HackTool.WinActivator
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
O38 - TASK: {8C62516A-A9B8-4ED2-889C-4A5E38D3947B} [64Bits][\KMSAutoNet] - (.MSFree Inc. - KMSAuto Net.) -- C:\ProgramData\KMSAutoS\KMSAuto Net.exe [8987424] =>HackTool.AutoKMS

O43 - CFD: 29/11/2017 - [] D -- C:\ProgramData\KMSAutoS =>HackTool.WinActivator

O43 - CFD: 10/10/2017 - [] D -- C:\Users\M'Amin\AppData\Local\MSfree Inc =>HackTool.WinActivator
[MD5.8A109D806AC0E67932BA6C97A6E4D172] [WIS][2016/10/06 12:24:12] (.Kaspersky Lab - ????????.) -- C:\Windows\Installer\22f73e.msi [6713344] =>.Kaspersky Lab
O23 - Service: Conexant SmartAudio service (SAService) . (...) - C:\Windows\System32\SASrv.exe (.not file.)