Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp
EmptyFlash

Advisor (Powered by Pa.) - C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe =>PUP.Optional.StartSearch
SR - Auto [06/11/2015] [ 287752] panda_url_filtering Service (panda_url_filtering) . (.Visicom Media Inc..) - C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe =>PUP.Optional.StartSearch
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1
[MD5.8DA469883AD06FA8016475B5EC3BE639] - (.Visicom Media Inc. - Anti-phishing Domain Advisor (Powered by Pa.) -- C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe [287752] [PID.3408] =>PUP.Optional.StartSearch
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.43.1 =>.Local IP Adress
HKLM\SOFTWARE\Wow6432Node\Chedot =>PUP.Optional.ChedotBrowser
HKCU\SOFTWARE\Chedot =>PUP.Optional.ChedotBrowser
O43 - CFD: 21/07/2016 - [] D -- C:\Program Files\Panda Security URL Filtering =>PUP.Optional.StartSearch
O43 - CFD: 21/07/2016 - [] D -- C:\Users\GE\AppData\Roaming\Search The Web =>PUP.Optional.IMBooster
HKLM\SOFTWARE\Wow6432Node\Chedot =>PUP.Optional.ChedotBrowser
HKCU\SOFTWARE\Chedot =>PUP.Optional.ChedotBrowser
C:\Users\GE\AppData\Roaming\Search The Web =>PUP.Optional.IMBooster
O39 - APT: Orphan - (...) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] =>.Superfluous.Orphan
O39 - APT: Orphan - (...) -- C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job [1190] =>.Superfluous.Orphan
O39 - APT: Orphan - (...) -- C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job [1194] =>.Superfluous.Orphan
O39 - APT: Orphan - (...) -- C:\Windows\Tasks\HPCeeScheduleForGE.job [336] =>.Superfluous.Orphan
O39 - APT: Orphan - (...) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3890] =>.Superfluous.Orphan
O39 - APT: Orphan - (...) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2782] =>.Superfluous.Orphan
O39 - APT: Orphan - (...) -- C:\Windows\System32\Tasks\DropboxUpdateTaskMachineCore [3930] =>.Superfluous.Orphan
O39 - APT: Orphan - (...) -- C:\Windows\System32\Tasks\DropboxUpdateTaskMachineUA [4166] =>.Superfluous.Orphan
O39 - APT: Orphan - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3828] =>.Superfluous.Orphan
O39 - APT: Orphan - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [4064] =>.Superfluous.Orphan
O39 - APT: Orphan - (...) -- C:\Windows\System32\Tasks\HPCeeScheduleForGE [3144] =>.Superfluous.Orphan
O39 - APT: Orphan - (...) -- C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for MOSTAFA-GE Mostafa [4942] =>.Superfluous.Orphan
O39 - APT: Orphan - (...) -- C:\Windows\System32\Tasks\Norton WSC Integration [3216] =>.Superfluous.Orphan
O39 - APT: Orphan - (...) -- C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1451417920 [3870] =>.Superfluous.Orphan
O39 - APT: Orphan - (...) -- C:\Windows\System32\Tasks\smadav [3138] =>.Superfluous.Orphan
O39 - APT: Orphan - (...) -- C:\Windows\System32\Tasks\TechSmith Updater [3796] =>.Superfluous.Orphan
O39 - APT: Orphan - (...) -- C:\Windows\System32\Tasks\{7155F380-2150-4A24-ADE6-7C9FF950C970} [3022] =>.Superfluous.Orphan
O39 - APT: Orphan - (...) -- C:\Windows\System32\Tasks\{CAFBEE06-0B88-4415-839C-53568FFAC8AB} [3110] =>.Superfluous.Orphan
O39 - APT: Orphan - (...) -- C:\Windows\System32\Tasks\{CE9612CC-73A4-4447-8A7D-FF4B2DE77D74} [3234] =>.Superfluous.Orphan

O45 - LFCP:[MD5.50B4518214FB670C5CD306F3B9658246] 10/10/2016 A -- C:\Windows\Prefetch\TORCH.EXE-CB86F82F.pf =>.Superfluous.Torch

C:\Windows\Prefetch\TORCH.EXE-CB86F82F.pf =>.Superfluous.Torch
O42 - Logiciel: KMSpico - (...) [HKLM][64Bits] -- {8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1 =>HackTool.KMSpico
O43 - CFD: 12/10/2016 - [] D -- C:\Program Files\KMSpico =>HackTool.KMSpic
O43 - CFD: 12/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1 =>HackTool.KMSpico
C:\Program Files\KMSpico =>HackTool.KMSpico
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico