Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp
EmptyFlash

O4 - HKCU\..\Run: [SysinfY2X] C/c start wscript /e:VBScript.Encode %temp%\SysinfY2X.db
O4 - HKCU\..\Run: [Clen Temp] . (...) -- C:\ProgramData\Clen Temp.bat
O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program
O4 - HKUS\S-1-5-21-525230321-1030442030-2917515183-1000\..\Run: [SysinfY2X] C/c start wscript /e:VBScript.Encode %temp%\SysinfY2X.db
O4 - HKUS\S-1-5-21-525230321-1030442030-2917515183-1000\..\Run: [Clen Temp] . (...) -- C:\ProgramData\Clen Temp.bat
O43 - CFD: 17/09/2016 - [] D -- C:\Users\Marouan\AppData\Local\CrashRpt =>.Superfluous.CrashRepo
O43 - CFD: 17/09/2016 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\CrashRpt =>.Superfluous.CrashReports
C:\Users\Marouan\AppData\Local\CrashRpt =>.Superfluous.CrashReports
C:\Windows\System32\Config\systemprofile\AppData\Local\CrashRpt =>.Superfluous.CrashReports

G0 - GCSP: Preferences [User Data\Default][HomePage] http://startimes.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google-analytics.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.startimes.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://apis.google.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://clients5.google.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://lh3.googleusercontent.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://plus.google.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.gstatic.com

R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer

O61 - LFC: 2016/09/22 23:02:07 A . (..) -- C:\Users\Marouan\Desktop\Clen Temp.exe [436003]