Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp
EmptyFlash

O23 - Service: Kaspersky Anti-Virus Service 17.0.0 (AVP17.0.0) . (.AO Kaspersky Lab - Kaspersky Anti-Virus.) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\avp.exe =>.Kaspersky Lab®
O23 - Service: Kaspersky Secure Connection Service 1.0.0 (KSDE1.0.0) . (.AO Kaspersky Lab - Kaspersky Secure Connection.) - C:\Program Files\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe =>.Kaspersky Lab®
SR - Auto [28/06/2016] [ 241544] Kaspersky Anti-Virus Service 17.0.0 (AVP17.0.0) . (.AO Kaspersky Lab.) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\avp.exe =>.Kaspersky Lab®
SR - Auto [28/06/2016] [ 241544] Kaspersky Secure Connection Service 1.0.0 (KSDE1.0.0) . (.AO Kaspersky Lab.) - C:\Program Files\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe =>.Kaspersky Lab®
MD5.03B45C52179E8DAE51A0F685C30D06D6] - (.AO Kaspersky Lab - Kaspersky Anti-Virus.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\avp.exe [241544] [PID.2016] =>.Kaspersky Lab®
[MD5.EFF5EA6088DB81C6EF6EDCDA5EE79909] - (.AO Kaspersky Lab - Kaspersky Secure Connection.) -- C:\Program Files\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [241544] [PID.5164] =>.Kaspersky Lab®
[MD5.BDB3D8437752EBCD11DB04082B1FE8A5] - (.AO Kaspersky Lab - Kaspersky Secure Connection.) -- C:\Program Files\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe [480216] [PID.6140] =>.Kaspersky Lab®
G0 - GCSP: Preferences [User Data\Default][HomePage] http://192.168.1.1
G0 - GCSP: Preferences [User Data\Default][HomePage] http://gc.kis.v2.scr.kaspersky-labs.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://me-cdn.effectivemeasure.net
G0 - GCSP: Preferences [User Data\Default][HomePage] http://s.effectivemeasure.net
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google-analytics.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.startimes.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://stats.g.doubleclick.net
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.dz
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.googleapis.com
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2

O2 - BHO: ScriptInjectionPluginBrowserHelperObject - {2E38825B-8815-42CF-9126-C58BC28D4591} . (.AO Kaspersky Lab - Kaspersky Protection plugins.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\IEExt\ie_plugin.dll =>.Kaspersky Lab®

O4 - GS\CommonDesktop [Public]: Kaspersky Anti-Virus.lnk . (.AO Kaspersky Lab - Kaspersky Anti-Virus.) C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\avpui.exe =>.Kaspersky Lab®
O4 - GS\CommonDesktop [Public]: Kaspersky Secure Connection.lnk . (.AO Kaspersky Lab - Kaspersky Secure Connection.) C:\Program Files\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe -navigate ksde://mainwindow =>.Kaspersky Lab®
O42 - Logiciel: IObit Uninstaller - (.IObit.) [HKLM] -- IObitUninstall =>.IObit Information Technology®
O42 - Logiciel: Kaspersky Anti-Virus - (.Kaspersky Lab.) [HKLM] -- {E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2} =>.Kaspersky Lab
O42 - Logiciel: Kaspersky Anti-Virus - (.Kaspersky Lab.) [HKLM] -- InstallWIX_{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2} =>.Kaspersky Lab
O42 - Logiciel: Kaspersky Secure Connection - (.Kaspersky Lab.) [HKLM] -- {1CF84962-50F8-48CA-9082-B70F3A02C686} =>.Kaspersky Lab
O42 - Logiciel: Kaspersky Secure Connection - (.Kaspersky Lab.) [HKLM] -- InstallWIX_{1CF84962-50F8-48CA-9082-B70F3A02C686} =>.Kaspersky Lab
HKLM\SOFTWARE\KasperskyLab =>.KasperskyLab
HKCU\SOFTWARE\KasperskyLab =>.KasperskyLab
HKCU\SOFTWARE\?? ?? ???? ????? ??? ?? ????
O43 - CFD: 06/11/2016 - [] D -- C:\Program Files\Kaspersky Lab =>.Kaspersky Lab®
O43 - CFD: 06/11/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus =>.Kaspersky Labs
O43 - CFD: 06/11/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection =>.Kaspersky Lab
O43 - CFD: 08/11/2016 - [] D -- C:\ProgramData\Kaspersky Lab =>.Kaspersky Lab
O43 - CFD: 06/11/2016 - [] D -- C:\ProgramData\Kaspersky Lab Setup Files =>.Kaspersky Lab
O58 - SDL:2016/06/10 06:41:24 A . (.AO Kaspersky Lab - Cryptographic Module Driver x86 (56 bit).) -- C:\Windows\System32\drivers\cm_km.sys [170840] =>.Kaspersky Lab®
O58 - SDL:2016/06/02 03:43:36 A . (.AO Kaspersky Lab - Kaspersky Unified Driver.) -- C:\Windows\System32\drivers\kl1.sys [165296] =>.Kaspersky Lab®
O58 - SDL:2016/06/07 23:33:14 A . (.AO Kaspersky Lab - Backup Disk Filter [fre_wnet_x86].) -- C:\Windows\System32\drivers\klbackupdisk.sys [57264] =>.Kaspersky Lab®
O58 - SDL:2016/06/15 00:23:46 A . (.AO Kaspersky Lab - Backup File Filter [fre_win8_x86].) -- C:\Windows\System32\drivers\klbackupflt.sys [71512] =>.Kaspersky Lab®
O58 - SDL:2016/05/31 23:24:04 A . (.AO Kaspersky Lab - Virtual Disk [fre_wnet_x86].) -- C:\Windows\System32\drivers\kldisk.sys [69000] =>.Kaspersky Lab®
O58 - SDL:2016/03/31 00:09:02 A . (.AO Kaspersky Lab - Early Launch Anti-Malware Filter [fre_win8_.) -- C:\Windows\System32\drivers\klelam.sys [23168] =>.Microsoft Windows Early Launch Anti-malware Publisher®
O58 - SDL:2016/06/26 15:17:12 A . (.AO Kaspersky Lab - Filter Core [fre_win8_x86].) -- C:\Windows\System32\drivers\klflt.sys [151888] =>.Kaspersky Lab®
O58 - SDL:2016/11/06 08:14:16 A . (.AO Kaspersky Lab - klhk [fre_win8_x86].) -- C:\Windows\System32\drivers\klhk.sys [253272] =>.Kaspersky Lab®
O58 - SDL:2016/11/06 08:17:29 A . (.AO Kaspersky Lab - Core System Interceptors [fre_win8_x86].) -- C:\Windows\System32\drivers\klif.sys [786264] =>.Kaspersky Lab®
O58 - SDL:2016/11/06 08:15:52 A . (.AO Kaspersky Lab - Packet Network Filter [fre_win8_x86].) -- C:\Windows\System32\drivers\klim6.sys [43352] =>.Kaspersky Lab®
O58 - SDL:2016/05/19 00:57:34 A . (.AO Kaspersky Lab - Keyboard Device Filter [fre_win8_x86].) -- C:\Windows\System32\drivers\klkbdflt.sys [46000] =>.Kaspersky Lab®
O58 - SDL:2015/06/07 01:50:04 A . (.Kaspersky Lab ZAO - Mouse Device Filter [fre_win8_x86].) -- C:\Windows\System32\drivers\klmouflt.sys [37560] =>.Kaspersky Lab®
O58 - SDL:2016/05/31 23:31:20 A . (.AO Kaspersky Lab - Format Recognizer [fre_wnet_x86].) -- C:\Windows\System32\drivers\klpd.sys [41392] =>.Kaspersky Lab®
O58 - SDL:2016/06/07 01:31:04 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver (NDIS 6..) -- C:\Windows\System32\drivers\kltap.sys [48056] =>.AnchorFree Inc®
O58 - SDL:2016/11/06 08:10:59 A . (.AO Kaspersky Lab - Anti-Rootkit Monitor.) -- C:\Windows\System32\drivers\klupd_klif_arkmon.sys [226600] =>.Kaspersky Lab®
O58 - SDL:2016/11/06 08:19:25 A . (.AO Kaspersky Lab - Kaspersky Lab Anti-Rootkit.) -- C:\Windows\System32\drivers\klupd_klif_klark.sys [232800] =>.Kaspersky Lab®
O58 - SDL:2016/11/06 08:11:00 A . (.AO Kaspersky Lab - Kaspersky Lab Boot Guard Driver.) -- C:\Windows\System32\drivers\klupd_klif_klbg.sys [97192] =>.Kaspersky Lab®
O58 - SDL:2016/11/06 08:10:59 A . (.AO Kaspersky Lab - Anti-Rootkit Engine.) -- C:\Windows\System32\drivers\klupd_klif_mark.sys [153208] =>.Kaspersky Lab®
O58 - SDL:2016/06/18 01:36:26 A . (.AO Kaspersky Lab - WFP Network Filter [fre_win8_x86].) -- C:\Windows\System32\drivers\klwfp.sys [71504] =>.Kaspersky Lab®
O58 - SDL:2016/11/06 08:16:23 A . (.AO Kaspersky Lab - WFP Network Connection Filter Driver [fre_w.) -- C:\Windows\System32\drivers\klwtp.sys [108432] =>.Kaspersky Lab®
O58 - SDL:2016/06/14 17:47:52 A . (.AO Kaspersky Lab - Network Processor [fre_wnet_x86].) -- C:\Windows\System32\drivers\kneps.sys [161712] =>.Kaspersky Lab®
O45 - LFCP:[MD5.DD129CED93439FCE60353F7DDE40AC94] 08/11/2016 A -- C:\Windows\Prefetch\LENOVOSHAREIT-WIN.EXE-23062E1E.pf =>.Superfluous.SHAREit
O45 - LFCP:[MD5.2970D595C8DA873E6482C5B008A2870A] 08/11/2016 A -- C:\Windows\Prefetch\LENOVOSHAREIT-WIN.TMP-5CD11AD7.pf =>.Superfluous.SHAREit
O45 - LFCP:[MD5.FAA80415B4D868B0F9DBDA92757DF45B] 08/11/2016 A -- C:\Windows\Prefetch\LENOVOSHAREIT-WIN.TMP-DB08F20F.pf =>.Superfluous.SHAREit

C:\Windows\Prefetch\LENOVOSHAREIT-WIN.EXE-23062E1E.pf =>.Superfluous.SHAREit
C:\Windows\Prefetch\LENOVOSHAREIT-WIN.TMP-5CD11AD7.pf =>.Superfluous.SHAREit
C:\Windows\Prefetch\LENOVOSHAREIT-WIN.TMP-DB08F20F.pf =>.Superfluous.SHAREit
C:\Users\monir\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d10lpsik1i8c69.cloudfront.net_0.localstorage =>.Superfluous.CloudfrontNet
C:\Users\monir\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d10lpsik1i8c69.cloudfront.net_0.localstorage-journal =>.Superfluous.CloudfrontNet


O4 - GS\Quicklaunch [Administrateur]: Spark Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe --bar=1016 =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\TaskBar [Administrateur]: Spark Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe --bar=1015 =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\Quicklaunch [monir]: Spark Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe --bar=1016 =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\TaskBar [monir]: Spark Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe --bar=1015 =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\CommonDesktop [Public]: Google.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe --useraction=google =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\CommonDesktop [Public]: Spark Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe --bar=1014 =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
HKLM\SOFTWARE\Baidu =>.Baidu
HKCU\SOFTWARE\Baidu =>.Baidu

O43 - CFD: 15/05/2016 - [] D -- C:\Program Files\baidu =>.Baidu

O43 - CFD: 15/05/2016 - [] D -- C:\ProgramData\Baidu =>.Baidu

O43 - CFD: 15/05/2016 - [] D -- C:\Users\monir\AppData\Roaming\Baidu =>.Baidu
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®

O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\spark.exe

O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\spark.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\spark.exe

O43 - CFD: 07/09/2016 - [] D -- C:\ProgramData\Avg =>.AVG Software

O43 - CFD: 15/05/2016 - [] D -- C:\Users\monir\AppData\Local\Avg =>.AVG Software
O43 - CFD: 15/05/2016 - [] D -- C:\Users\monir\AppData\Local\AvgSetupLog =>.AVG
O43 - CFD: 07/09/2016 - [] D -- C:\ProgramData\AVAST Software =>.AVAST Software
HKCU\SOFTWARE\Avira =>.Avira
O43 - CFD: 06/11/2016 - [] D -- C:\Program Files\Common Files\AV =>.Avast