Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp
EmptyFlash


[MD5.00000000000000000000000000000000] [APT] [AutoKMS] (...) -- C:\WINDOWS\AutoKMS\AutoKMS.exe (.not file.) [0] (.Activate.) =>HackTool.AutoKMS
O39 - APT: AutoKMS - (...) -- C:\WINDOWS\System32\Tasks\AutoKMS [2736] (.Orphan.) =>HackTool.AutoKMS
G0 - GCSP: Preferences [User Data\Default][HomePage] http://api.mywot.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.clasicooo.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.mywot.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.startimes.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://cmp-cdn.ghostery.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://portail-crous.crous-nancy-metz.fr
G0 - GCSP: Preferences [User Data\Default][HomePage] http://secure.mywot.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.google-analytics.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.facebook.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.googleapis.com
P2 - EXT FILE: (.Zotero - .) -- C:\Users\Othman\AppData\Roaming\Mozilla\Firefox\Profiles\z9tjp1wr.default\extensions\zotero@chnm.gmu.edu.xpi =>.Zotero
O17 - HKLM\System\CCS\Services\Tcpip\..\{ddf50640-26fd-4bdf-82c2-75ca2cd23176}: DhcpNameServer = 193.50.27.66 193.50.27.67
O17 - HKLM\System\CCS\Services\Tcpip\..\{24dffe29-2fd5-4312-9d20-f3e360f200f9}: DhcpDomain = crous-nancy-metz.
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = crous-nancy-metz.fr
O43 - CFD: 08/06/2016 - [] D -- C:\ProgramData\KMSAuto =>HackTool.WinActivator
O43 - CFD: 15/08/2016 - [] D -- C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS
O87 - FAEL: "{14EC18EC-A3EB-4C2E-A9C4-A83CD884055C}" [Out-None-P6-TRUE] .(...) -- C:\Windows\KMS-R@1n.exe (.not file.) =>HackTool.WinActivator
O87 - FAEL: "{235D978B-3B96-4D63-8FA1-ADFA5447A19F}" [In-None-P6-TRUE] .(...) -- C:\Windows\KMS-R@1n.exe (.not file.) =>HackTool.WinActivator
C:\WINDOWS\System32\Tasks\AutoKMS =>HackTool.AutoKMS
C:\ProgramData\KMSAuto =>HackTool.WinActivator
C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS


O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Othman\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] C:\Users\Othman\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64 (.not file.)
O4 - HKUS\S-1-5-21-2908828130-2765186903-4166498546-1001\..\RunOnce: [Uninstall C:\Users\Othman\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] C:\Users\Othman\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64 (.not file.)