Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp
EmptyFlash
G2 - EXT: C:\Users\Anne Sophie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aflbfhfpnnffgamnmnajappkdmmhmlpl [Edu App]
O4 - HKLM\..\RunOnce: [ZHPCleaner_Folder1] CMD /c DEL "C:\Program Files (x86)\Edu App" /F /Q 
O4 - HKLM\..\RunOnce: [ZHPCleaner_Folder2] CMD /c DEL "C:\Program Files (x86)\gmsd_fr_579" /F /Q
O4 - HKLM\..\RunOnce: [ZHPCleaner_Folder3] CMD /c DEL "C:\Users\Anne Sophie\AppData\Local\gmsd_fr_579" /F /Q
O4 - HKLM\..\RunOnce: [ZHPCleaner_Folder4] CMD /c DEL "C:\Users\Anne Sophie\AppData\Local\SmartWeb" /F /Q
O4 - HKLM\..\Wow6432Node\Run: [gmsd_fr_579] . (...) -- C:\Program Files (x86)\gmsd_fr_579\gmsd_fr_579.exe
O4 - HKLM\..\Wow6432Node\RunOnce: [upgmsd_fr_579.exe] . (...) -- C:\Users\Anne Sophie\AppData\Local\gmsd_fr_579\upgmsd_fr_579.exe
O41 - Driver:  ({a3f28269-ad17-41a8-b032-3e0313ef8979}w64) . (. - .) - C:\Windows\System32\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}w64.sys (.not file.)    => Fichier absent  
O42 - Logiciel: Edu App - (.Edu App.) [HKLM][64Bits] -- Edu App
[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}]
[HKCU\Software\Edu App]
[HKCU\Software\Tutorials]
[HKCU\Software\mdqtOFfkrnTjKlt49xEumDGKqi]
[HKLM\Software\Wow6432Node\Edu App]
O43 - CFD: 29/05/2015 - 18:20:15 - [] ----D C:\Program Files (x86)\Edu App
O43 - CFD: 29/05/2015 - 18:05:55 - [] ----D C:\Program Files (x86)\gmsd_fr_579
O43 - CFD: 29/05/2015 - 12:43:05 - [] ----D C:\ProgramData\Emilojok
O43 - CFD: 29/05/2015 - 12:50:16 - [] ----D C:\Users\Anne Sophie\AppData\Roaming\One System Care
O43 - CFD: 29/05/2015 - 18:05:57 - [] ----D C:\Users\Anne Sophie\AppData\Local\gmsd_fr_579
O61 - LFC: 23/05/2015 - 18:34:22 ---A- . (...) -- C:\Users\Anne Sophie\AppData\Local\Temp\jrt\firefox.bat
O61 - LFC: 23/05/2015 - 18:34:22 ---A- . (...) -- C:\Users\Anne Sophie\AppData\Local\Temp\jrt\iexplore.bat
O61 - LFC: 23/05/2015 - 18:34:22 ---A- . (...) -- C:\Users\Anne Sophie\AppData\Local\Temp\jrt\medfos.bat
O61 - LFC: 24/05/2015 - 18:34:22 ---A- . (...) -- C:\Users\Anne Sophie\AppData\Local\Temp\jrt\mws.bat
O61 - LFC: 25/05/2015 - 18:34:22 ---A- . (...) -- C:\Users\Anne Sophie\AppData\Local\Temp\jrt\runvalues.bat
O61 - LFC: 26/05/2015 - 18:34:20 ---A- . (...) -- C:\Users\Anne Sophie\AppData\Local\gmsd_fr_579\upgmsd_fr_579.exe
O61 - LFC: 26/05/2015 - 18:34:22 ---A- . (...) -- C:\Users\Anne Sophie\AppData\Local\Temp\jrt\chrome.bat
O61 - LFC: 26/05/2015 - 18:34:22 ---A- . (...) -- C:\Users\Anne Sophie\AppData\Local\Temp\jrt\chrome_pref.bat
O61 - LFC: 29/05/2015 - 18:34:21 ---A- . (.BrowserV28.05.) -- C:\Users\Anne Sophie\AppData\Local\Temp\1210.exe
O61 - LFC: 29/05/2015 - 18:34:21 ---A- . (.BrowserV28.05.) -- C:\Users\Anne Sophie\AppData\Local\Temp\4292.exe
O61 - LFC: 29/05/2015 - 18:34:22 ---A- . (.Web Bar Media.) -- C:\Users\Anne Sophie\AppData\Local\Temp\76f47d31-ef3d-4d4d-8c3e-89fb84189394\web_bar_setup.exe
O87 - FAEL: "TCP Query User{BECFC57E-15A7-45D6-90C5-87E3F48E78B9}C:\users\anne sophie\appdata\roaming\utorrent\utorrent.exe" | In - Private - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\users\anne sophie\appdata\roaming\utorrent\utorrent.exe
O87 - FAEL: "UDP Query User{CA2F5223-F178-4C8F-8A01-C54F81B0FA51}C:\users\anne sophie\appdata\roaming\utorrent\utorrent.exe" | In - Private - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\users\anne sophie\appdata\roaming\utorrent\utorrent.exe
O87 - FAEL: "TCP Query User{9B1E1474-FBD4-494D-9556-D5608C976B78}C:\users\anne sophie\downloads\torrent_3-4-1-build-30888_fr_18245.exe" | In - Private - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\users\anne sophie\downloads\torrent_3-4-1-build-30888_fr_18245.exe
O87 - FAEL: "UDP Query User{D6932199-25A0-4B3B-BB52-08302B1C8170}C:\users\anne sophie\downloads\torrent_3-4-1-build-30888_fr_18245.exe" | In - Private - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\users\anne sophie\downloads\torrent_3-4-1-build-30888_fr_18245.exe
O87 - FAEL: "TCP Query User{3B212483-986E-4BFD-9566-2B31F7758DDF}C:\users\anne sophie\downloads\torrent_3-4-1-build-30888_fr_18245.exe" | In - Public - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\users\anne sophie\downloads\torrent_3-4-1-build-30888_fr_18245.exe
O87 - FAEL: "UDP Query User{2C3ADA63-81B8-4F2C-A594-9D1857AFD7F7}C:\users\anne sophie\downloads\torrent_3-4-1-build-30888_fr_18245.exe" | In - Public - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\users\anne sophie\downloads\torrent_3-4-1-build-30888_fr_18245.exe
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Edu App]
[HKCU\Software\Tutorials]
[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}]
[HKLM\Software\Wow6432Node\{1146AC44-2F03-4431-B4FD-889BC837521F}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E95E6C2F69DE1E4449ECD2AA116D329A] 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]:ZHPCleaner_Folder1
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:gmsd_fr_579
C:\Program Files (x86)\Edu App
C:\Program Files (x86)\gmsd_fr_579
C:\Users\Anne Sophie\AppData\Local\gmsd_fr_579
[HKCU\Software\Edu App]
[HKLM\Software\Wow6432Node\Edu App]