Script ZHPFix
 FirewallRaz
 EmptyPrefetch
 EmptyTemp
 EmptyFlash

[MD5.00000000000000000000000000000000] [APT] [AutoKMS] (...) -- C:\Windows\AutoKMS\AutoKMS.exe (.not file.)   [0] (.Activate.)  =>HackTool.AutoKMS
[MD5.00000000000000000000000000000000] [APT] [AutoKMSDaily] (...) -- C:\Windows\AutoKMS\AutoKMS.exe (.not file.)   [0] (.Activate.)  =>HackTool.AutoKMS
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-3725999733-2038806077-4073579426-1000Core] (.Facebook Inc..) -- C:\Users\MandyQueen\AppData\Local\Facebook\Update\FacebookUpdate.exe   [138096] (.Activate.)  =>.Facebook, Inc.®
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-3725999733-2038806077-4073579426-1000UA] (.Facebook Inc..) -- C:\Users\MandyQueen\AppData\Local\Facebook\Update\FacebookUpdate.exe   [138096] (.Activate.)  =>.Facebook, Inc.®
[MD5.00000000000000000000000000000000] [APT] [{D32C10F7-CABC-4ACB-B116-68696385E9B2}] (...) -- C:\Program Files (x86)\YouTube Accelerator\YTAUninstall.exe (.not file.)   [0] (.Activate.)  =>PUP.Optional.Goobzo
[MD5.00000000000000000000000000000000] [APT] [OfficeSoftwareProtectionPlatform\] (...) -- -200) (.not file.)   [0] (.Activate.)  =>.Superfluous.Empty
O39 - APT: AutoKMS - (...) -- C:\Windows\Tasks\AutoKMS.job  [226]  (.Orphean.)  =>HackTool.AutoKMS
O39 - APT: AutoKMSDaily - (...) -- C:\Windows\Tasks\AutoKMSDaily.job  [226]  (.Orphean.)  =>HackTool.AutoKMS
O39 - APT: AutoKMS - (...) -- C:\Windows\System32\Tasks\AutoKMS  [2458]  (.Orphean.)  =>HackTool.AutoKMS
O39 - APT: AutoKMSDaily - (...) -- C:\Windows\System32\Tasks\AutoKMSDaily  [2764]  (.Orphean.)  =>HackTool.AutoKMS
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll  =>.Google Inc®
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\MandyQueen\AppData\Local\Facebook\Update\FacebookUpdate.exe  =>.Facebook, Inc.®
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe  =>.Google Inc®
O4 - HKCU\..\Run: [AdobeBridge]  (Orphean)
O4 - HKUS\S-1-5-21-3725999733-2038806077-4073579426-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\MandyQueen\AppData\Local\Facebook\Update\FacebookUpdate.exe  =>.Facebook, Inc.®
O4 - HKUS\S-1-5-21-3725999733-2038806077-4073579426-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe  =>.Google Inc®
HKLM\SOFTWARE\Wow6432Node\Baidu
HKLM\SOFTWARE\Wow6432Node\Baidu Security
HKLM\SOFTWARE\Wow6432Node\Baidu_Drp_pos
HKCU\SOFTWARE\Avira
HKCU\SOFTWARE\Baidu
HKCU\SOFTWARE\Baidu Security
O87 - FAEL: "TCP Query User{DE1D62A8-5D78-4753-AA17-6CD20647293D}C:\windows\kmsemulator.exe" [In-None-P6-TRUE] .(...) -- C:\windows\kmsemulator.exe  =>HackTool.AutoKMS
O87 - FAEL: "UDP Query User{23C8E72F-A569-4607-8A46-B377B10FD26F}C:\windows\kmsemulator.exe" [In-None-P17-TRUE] .(...) -- C:\windows\kmsemulator.exe  =>HackTool.AutoKMS
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32  =>PUP.Optional.MyPCBackup
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS  =>PUP.Optional.MyPCBackup