Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp
EmptyFlash


HKLM\SOFTWARE\Wow6432Node\Yahoo =>.Yahoo!
HKCU\SOFTWARE\undefined =>.Superfluous.Downloader
HKCU\SOFTWARE\Yahoo =>.Yahoo!
O58 - SDL:2012/04/15 21:32:14 A . (.Windows (R) Win 7 DDK provider - WebcamMax Capture.) -- C:\Windows\System32\drivers\wcmvcam64.sys [1071032] =>.Superfluous.TenkiTechnology
HKCU\SOFTWARE\undefined =>.Superfluous.Downloader
C:\Users\mourad\AppData\Local\CrashRpt =>.Superfluous.CrashReports
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) . (...) - C:\Program Files\LSI SoftModem\agr64svc.exe (.not file.)
O23 - Service: OpenDHCPServer (OpenDHCPServer) . (...) - C:\Antamedia\HotSpot\DHCP\OpenDHCPServer.exe (.not file.)
O23 - Service: Microsoft32 (Service1) . (...) - C:\Windows\syswow64\dwm Service.exe (.not file.)
G0 - GCSP: Preferences [User Data\Default][HomePage] http://icm.avira.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://accounts.google.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://api.mixpanel.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://apis.google.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://download.avira.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://gc.kis.scr.kaspersky-labs.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://offers.avira.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://v2.auc.avira.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.nicolascoolman.com
G2 - GCE: Preference [User Data\Default] [fdjdjkkjoiomafnihnobkinnfjnnlhdg] ???????? ??????.???????
G2 - GCE: Preference [User Data\Default] [flliilndjeohchalpbbcdekjklbdgfkk] Avira Browser Safety
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer
O3 - Toolbar: 0x464CB804BB5A6B47A7D740435D9AE611 - [HKCU]{04B84C46-5ABB-476B-A7D7-40435D9AE611} . (...) -- (.not file.)
O4 - HKCU\..\Run: [Jump Connect] C:\Program Files (x86)\Phase Five Systems\Jump Desktop Connect\4.9.8.0\JumpConnect.exe (.not file.)
O4 - HKLM\..\Wow6432Node\Run: [Antamedia DBServer] C:\Antamedia\DBServer\ADBServer.exe (.not file.)
O4 - HKLM\..\Wow6432Node\Run: [Antamedia DBServer AsService] (Orphan)
O4 - HKLM\..\Wow6432Node\Run: [DFX] . (...) -- C:\Program Files (x86)\DFX\DFX.exe
O4 - HKUS\S-1-5-21-454156101-2345760694-676353058-1000\..\Run: [Jump Connect] C:\Program Files (x86)\Phase Five Systems\Jump Desktop Connect\4.9.8.0\JumpConnect.exe (.not file.)
O4 - HKUS\S-1-5-21-454156101-2345760694-676353058-1000\..\Run: [AdobeBridge] (Orphan)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\Opera\Launcher.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\Opera\Launcher.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\Opera\Launcher.exe (.not file.)
O87 - FAEL: "{60AFFE9E-29AD-48F4-8CD6-0B7A33631F69}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RtWLan.exe (.not file.)
O87 - FAEL: "{146802C4-F29F-4CD8-BFAC-2C9158B93F59}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RtWLan.exe (.not file.)
O87 - FAEL: "{10100E84-10C2-491F-9E85-DBD2F362A089}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\MediatekWiFi\Common\RaUI.exe (.not file.)
O87 - FAEL: "TCP Query User{13D808EB-D301-4F0E-A2C3-3F7F607C0A9D}C:\program files (x86)\city car driving\bin\win32\starter.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\city car driving\bin\win32\starter.exe (.not file.)
O87 - FAEL: "UDP Query User{09049424-252A-4F13-9DC8-09F533CEA362}C:\program files (x86)\city car driving\bin\win32\starter.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\city car driving\bin\win32\starter.exe (.not file.)
O87 - FAEL: "{BEA8AECD-7FD4-4CC0-9AFE-E67E572E7A60}" [In-None-P6-TRUE] .(...) -- C:\Users\mourad\AppData\Local\Temp\Rar$EXb0.555\ipts.exe (.not file.)
O87 - FAEL: "{82F4EB97-71AD-446A-B4F4-48EC282BE9D0}" [In-None-P17-TRUE] .(...) -- C:\Users\mourad\AppData\Local\Temp\Rar$EXb0.555\ipts.exe (.not file.)
O87 - FAEL: "TCP Query User{163CA4E7-CCB1-4B14-A54C-AA193CCE1231}D:\test drive unlimited gold\testdriveunlimited.exe" [In-None-P6-TRUE] .(...) -- D:\test drive unlimited gold\testdriveunlimited.exe (.not file.)
O87 - FAEL: "UDP Query User{498FDB65-2602-4E82-8B2A-AE665FA6EFF6}D:\test drive unlimited gold\testdriveunlimited.exe" [In-None-P17-TRUE] .(...) -- D:\test drive unlimited gold\testdriveunlimited.exe (.not file.)
O87 - FAEL: "{A3762890-D383-4737-B4FC-F6E6587A7F55}" [In-None-P6-TRUE] .(...) -- C:\Users\mourad\AppData\Local\Temp\Rar$EXb0.867\jingling.exe (.not file.)
O87 - FAEL: "{B042F640-8665-4EE4-BDB7-E78CCD060F2D}" [In-None-P17-TRUE] .(...) -- C:\Users\mourad\AppData\Local\Temp\Rar$EXb0.867\jingling.exe (.not file.)
O87 - FAEL: "{D4283125-70D8-4197-947A-99E909FD4ACB}" [In-None-P6-TRUE] .(...) -- C:\Users\mourad\Desktop\jingling.exe (.not file.)
O87 - FAEL: "{60259E04-DC48-48E3-B747-9DFFCCB3FD83}" [In-None-P17-TRUE] .(...) -- C:\Users\mourad\Desktop\jingling.exe (.not file.)
O87 - FAEL: "{88599324-46FE-48F8-8C5B-AAA4193F56B7}" [In-None-P6-TRUE] .(...) -- C:\Antamedia\HotSpot\AHotSpot.exe (.not file.)
O87 - FAEL: "{B7826208-663A-4E05-A74C-A6F029A42EFE}" [In-None-P17-TRUE] .(...) -- C:\Antamedia\HotSpot\AHotSpot.exe (.not file.)
O87 - FAEL: "{76BFB912-7A72-4CF7-A1E4-8A194012BA21}" [In-None-P6-TRUE] .(...) -- C:\Antamedia\HotSpot\DHCP\OpenDHCPServer.exe (.not file.)
O87 - FAEL: "{6E0A4835-2AD6-43C0-BE2A-253ADB6AACEB}" [In-None-P17-TRUE] .(...) -- C:\Antamedia\HotSpot\DHCP\OpenDHCPServer.exe (.not file.)
O87 - FAEL: "{8D3EBF78-2EAA-4B17-BF75-93771E34DFAE}" [In-None-P6-TRUE] .(...) -- C:\Antamedia\CLICK\HotSpotClick.exe (.not file.)
O87 - FAEL: "{C5EE1E88-CC7D-4507-A521-4EB00BA515A3}" [In-None-P17-TRUE] .(...) -- C:\Antamedia\CLICK\HotSpotClick.exe (.not file.)
O87 - FAEL: "{FEE79D8D-D17A-4430-B49D-330FB98FBF1D}" [In-None-P6-TRUE] .(...) -- C:\Antamedia\CLICK\CustomerPortal.exe (.not file.)
O87 - FAEL: "{61AE076D-CB22-4234-82FD-9DA52FABF77A}" [In-None-P17-TRUE] .(...) -- C:\Antamedia\CLICK\CustomerPortal.exe (.not file.)
O87 - FAEL: "{7FC9C91A-FF15-484A-9770-BBBBD9EF0068}" [In-None-P6-TRUE] .(...) -- C:\Antamedia\DBServer\ADBServer.exe (.not file.)
O87 - FAEL: "{6C2FB606-5B4E-4101-AC2E-8360E687634D}" [In-None-P17-TRUE] .(...) -- C:\Antamedia\DBServer\ADBServer.exe (.not file.)