Script ZHPFix

[HKEY_CLASSES_ROOT\AppID\DuuquUpdate.exe]
[HKEY_CLASSES_ROOT\CLSID\{3279E34D-3F0F-4EE4-99FA-7141B82DB0A8}\InprocHandler32]
""="C:\Program Files\Duuqu\Update\1.3.37.0\psmachine.dll"
[HKEY_CLASSES_ROOT\CLSID\{35047074-2A04-4CE9-BE91-8D2D02DC58E6}\ProgID]
""="DuuquUpdate.Update3COMClassService.1.0"
[HKEY_CLASSES_ROOT\Duuqu.OneClickCtrl.9]
[HKEY_CLASSES_ROOT\Duuqu.OneClickProcessLauncherMachine]
[HKEY_CLASSES_ROOT\Duuqu.Update3WebControl.3]
[HKEY_CLASSES_ROOT\DuuquUpdate.CoCreateAsync]
[HKEY_CLASSES_ROOT\DuuquUpdate.CoreClass]
[HKEY_CLASSES_ROOT\DuuquUpdate.CoreMachineClass]
[HKEY_CLASSES_ROOT\DuuquUpdate.CredentialDialogMachine]
[HKEY_CLASSES_ROOT\DuuquUpdate.OnDemandCOMClassMachine]
[HKEY_CLASSES_ROOT\DuuquUpdate.OnDemandCOMClassSvc]
[HKEY_CLASSES_ROOT\DuuquUpdate.ProcessLauncher]
[HKEY_CLASSES_ROOT\DuuquUpdate.Update3COMClassService]
[HKEY_CLASSES_ROOT\DuuquUpdate.Update3WebMachine]
[HKEY_CLASSES_ROOT\DuuquUpdate.Update3WebSvc]
[HKEY_CLASSES_ROOT\Interface\{23E2AAB8-DF63-4A6F-AB08-287D23F374FF}]
""="IDuuquUpdate3WebSecurity"
[HKEY_CLASSES_ROOT\Interface\{414A428D-BB4B-40B0-88EC-D21AFEF37CB4}]
""="IDuuquUpdate3Web"
[HKEY_CLASSES_ROOT\Interface\{5516DBF3-8B85-4A9E-A2A8-D393A938BD58}]
""="IDuuquUpdateCore"
[HKEY_CLASSES_ROOT\Interface\{61E7C4F0-2579-4C25-9189-8EC876B97ED1}]
""="IDuuquUpdate"
[HKEY_CLASSES_ROOT\Interface\{DED54547-5E5E-402A-83A9-14F5D3DE3B8D}]
""="IDuuquUpdate3"
[HKEY_CLASSES_ROOT\MIME\Database\Content Type\application/x-vnd.duuqu.oneclickctrl.9]
[HKEY_CLASSES_ROOT\MIME\Database\Content Type\application/x-vnd.duuqu.update3webcontrol.3]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1b8a2294-cfc4-4244-b48d-f94ff75ae50b}]
"AppName"="Feven 1.7-bg.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2b58d434-8b7e-475c-b28e-58fb20850edf}]
"AppName"="Feven 1.7-buttonutil.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{346b7610-4842-4105-9be9-67691753cd47}]
"AppName"="Feven 1.7-codedownloader.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d5b64d78-e069-42da-9b36-5a5a455e0a45}]
"AppName"="Feven 1.7-helper.exe"
[HKEY_LOCAL_MACHINE\Software\Classes\AppID\DuuquUpdate.exe]
[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{35047074-2A04-4CE9-BE91-8D2D02DC58E6}\ProgID]
""="DuuquUpdate.Update3COMClassService.1.0"
[HKEY_LOCAL_MACHINE\Software\Classes\Duuqu.OneClickCtrl.9]
[HKEY_LOCAL_MACHINE\Software\Classes\Duuqu.OneClickProcessLauncherMachine]
[HKEY_LOCAL_MACHINE\Software\Classes\Duuqu.Update3WebControl.3]
[HKEY_LOCAL_MACHINE\Software\Classes\DuuquUpdate.CoCreateAsync]
[HKEY_LOCAL_MACHINE\Software\Classes\DuuquUpdate.CoreClass]
[HKEY_LOCAL_MACHINE\Software\Classes\DuuquUpdate.CoreMachineClass]
[HKEY_LOCAL_MACHINE\Software\Classes\DuuquUpdate.CredentialDialogMachine]
[HKEY_LOCAL_MACHINE\Software\Classes\DuuquUpdate.OnDemandCOMClassMachine]
[HKEY_LOCAL_MACHINE\Software\Classes\DuuquUpdate.OnDemandCOMClassSvc]
[HKEY_LOCAL_MACHINE\Software\Classes\DuuquUpdate.ProcessLauncher]
[HKEY_LOCAL_MACHINE\Software\Classes\DuuquUpdate.Update3COMClassService]
[HKEY_LOCAL_MACHINE\Software\Classes\DuuquUpdate.Update3WebMachine]
[HKEY_LOCAL_MACHINE\Software\Classes\DuuquUpdate.Update3WebSvc]
[HKEY_LOCAL_MACHINE\Software\Classes\Interface\{23E2AAB8-DF63-4A6F-AB08-287D23F374FF}]
""="IDuuquUpdate3WebSecurity"
[HKEY_LOCAL_MACHINE\Software\Classes\Interface\{414A428D-BB4B-40B0-88EC-D21AFEF37CB4}]
""="IDuuquUpdate3Web"
[HKEY_LOCAL_MACHINE\Software\Classes\Interface\{5516DBF3-8B85-4A9E-A2A8-D393A938BD58}]
""="IDuuquUpdateCore"
[HKEY_LOCAL_MACHINE\Software\Classes\Interface\{61E7C4F0-2579-4C25-9189-8EC876B97ED1}]
""="IDuuquUpdate"
[HKEY_LOCAL_MACHINE\Software\Classes\Interface\{DED54547-5E5E-402A-83A9-14F5D3DE3B8D}]
""="IDuuquUpdate3"
[HKEY_LOCAL_MACHINE\Software\Classes\MIME\Database\Content Type\application/x-vnd.duuqu.oneclickctrl.9]
[HKEY_LOCAL_MACHINE\Software\Classes\MIME\Database\Content Type\application/x-vnd.duuqu.update3webcontrol.3]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1b8a2294-cfc4-4244-b48d-f94ff75ae50b}]
"AppName"="Feven 1.7-bg.exe"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2b58d434-8b7e-475c-b28e-58fb20850edf}]
"AppName"="Feven 1.7-buttonutil.exe"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{346b7610-4842-4105-9be9-67691753cd47}]
"AppName"="Feven 1.7-codedownloader.exe"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d5b64d78-e069-42da-9b36-5a5a455e0a45}]
"AppName"="Feven 1.7-helper.exe"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION]
"Feven 1.7-bg.exe"="8000"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DuuquUpdate.exe]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\Doudou\AppData\Local\Smartbar\"=""
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\32DF3C84BE725644F83A492D57170E27]
"00000000000000000000000000000000"="02:\Software\Duuqu\FrameFox\name"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\32DF3C84BE725644F83A492D57170E27]
"00000000000000000000000000000000"="02:\Software\Duuqu\FrameFox\name"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467]
"00000000000000000000000000000000"="01:\Software\Smartbar\version"
[HKEY_LOCAL_MACHINE\Software\Software\Update\ClientState\{5B54E9B6-D6C4-11E0-8E9D-92FB4824019B}]
"tttoken"="BoxoreToken"
[HKEY_USERS\S-1-5-21-1272441502-590139002-1988791709-1000\Software\Classes\MIME\Database\Content Type\application/x-bubbledock]
[HKEY_USERS\S-1-5-21-1272441502-590139002-1988791709-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1b8a2294-cfc4-4244-b48d-f94ff75ae50b}]
"AppName"="Feven 1.7-bg.exe"
[HKEY_USERS\S-1-5-21-1272441502-590139002-1988791709-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2b58d434-8b7e-475c-b28e-58fb20850edf}]
"AppName"="Feven 1.7-buttonutil.exe"
[HKEY_USERS\S-1-5-21-1272441502-590139002-1988791709-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{346b7610-4842-4105-9be9-67691753cd47}]
"AppName"="Feven 1.7-codedownloader.exe"
[HKEY_USERS\S-1-5-21-1272441502-590139002-1988791709-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d5b64d78-e069-42da-9b36-5a5a455e0a45}]
"AppName"="Feven 1.7-helper.exe"
[HKEY_USERS\S-1-5-21-1272441502-590139002-1988791709-1000_Classes\MIME\Database\Content Type\application/x-bubbledock]
EmptyPrefetch
FirewallRaz
PROXYFix
EmptyTemp
EmptyFlash
EmptyClsid
SysRestore