Script ZHPFix
EmptyFlash
EmptyTemp
Prefetcher
Sysrestore

O23 - Service: Service Installer TrueKey (InstallerService) . (...) - C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe (.not file.)

G0 - GCSP: Preferences [User Data\Default][HomePage] http://pagead2.googlesyndication.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ttczmd.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://zz3d3.ru
G0 - GCSP: Preferences [User Data\Default][HomePage] http://1087072589.rsc.cdn77.org
G0 - GCSP: Preferences [User Data\Default][HomePage] http://cse.google.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://googleads.g.doubleclick.net =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://s2.googleusercontent.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com =>.Google Inc.
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.iheartradio.ca/

G2 - GCE: Preference [User Data\Default] [fabhkdeopjkcpkmofliimbjckmocfiom]
G2 - GCE: Preference [User Data\Default] [hdjmlecbadpbakmifkdnheieafponiao] CoolText
G2 - GCE: Preference [User Data\Default] [hhlofehpfphecjpboiiejcjjgmkgcmnn] url params
G2 - GCE: Preference [User Data\Default] [idimebjnbdepjllaongdhgnekjobbmci] Copy Link URL
G2 - GCE: Preference [User Data\Default] [kpdmjodecdegfglgaapafjleomjjlpnh] __MSG_newtab_chrome_extension_name__

P2 - EXT: (. - Ebay Shopping Assistant.) -- C:\Users\Wizzard\AppData\Roaming\Mozilla\Firefox\Profiles\k14phpkb.default\extensions\{2aa2594a-b561-4302-991c-987e7b7defc2}
P2 - EXT: (. - Start Page.) -- C:\Users\Wizzard\AppData\Roaming\Mozilla\Firefox\Profiles\k14phpkb.default\extensions\{c27b59ba-0917-46d1-aaf6-165528a99a3d}
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies []

O42 - Logiciel: Browser Extensions - (.Spigot, Inc..) [HKCU][64Bits] -- {3A787631-66A2-4634-B928-A37E73B58FB6} =>PUP.Optional.Dealio

HKCU\SOFTWARE\AppDataLow\Software\Browser Extensions =>PUP.Optional.Dealio

O43 - CFD: 18/12/2016 - [] D -- C:\Users\Wizzard\AppData\Roaming\BrowserExtensions =>PUP.Optional.BrowserExtensions
O43 - CFD: 06/09/2016 - [0] D -- C:\Users\Wizzard\AppData\Roaming\{766140DA-5333-2DAC-3805-0A7EE4D7F740}
O43 - CFD: 04/12/2016 - [] D -- C:\Users\Wizzard\AppData\Local\CrashReportClient =>.Superfluous.CrashReports
O43 - CFD: 17/09/2016 - [] D -- C:\Users\Wizzard\AppData\Local\MalwareProtectionLive =>.Superfluous.MalwareProtection
O43 - CFD: 05/09/2016 - [0] D -- C:\Users\Wizzard\AppData\Local\{B5F70934-5E12-42d2-882D-62D42EA1FA67} =>.Superfluous.Empty

O69 - SBI: prefs.js [Wizzard - k14phpkb.default] user_pref("startpage.ntsearch_url", "https://search.yahoo.com/search?fr=spigot-nt-ff&ei=utf-8&ilc=12&type=994519&p={searchTerms}")[...] =>PUP.Optional.Dealio

O87 - FAEL: "{8370CAB4-1FB9-4B23-8D25-8BCAF717CFC2}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Steam\Steam.exe (.not file.)
O87 - FAEL: "{555D6F90-9B4B-43C3-A921-9E3F980C1E94}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Steam\Steam.exe (.not file.)
O87 - FAEL: "{5C1E0774-7785-491D-80B7-33BB6469647A}" [In-None-P6-TRUE] .(...) -- E:\Jeux\steam\bin\steamwebhelper.exe (.not file.)
O87 - FAEL: "{FE37CBC8-6F3E-44C2-B291-A9882B76C3B5}" [In-None-P17-TRUE] .(...) -- E:\Jeux\steam\bin\steamwebhelper.exe (.not file.)
O87 - FAEL: "TCP Query User{B18973B2-7C29-48D2-9CAA-9CD58AF9CCFE}C:\users\wizzard\appdata\local\temp\i1472753250\windows\resource\jre\bin\javaw.exe" [In-None-P6-TRUE] .(...) -- C:\users\wizzard\appdata\local\temp\i1472753250\windows\resource\jre\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "UDP Query User{086D66D8-C7EF-4502-B27F-3306FFFA9DE4}C:\users\wizzard\appdata\local\temp\i1472753250\windows\resource\jre\bin\javaw.exe" [In-None-P17-TRUE] .(...) -- C:\users\wizzard\appdata\local\temp\i1472753250\windows\resource\jre\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "{FB739F31-97C4-412C-A5ED-429BB1E895E7}" [In-None-P17-TRUE] .(...) -- C:\Users\Wizzard\Downloads\bin\BlackDesert32.exe (.not file.)
O87 - FAEL: "{87E394CD-7147-4F92-B5F2-AEEFFD40F626}" [In-None-P17-TRUE] .(...) -- C:\Users\Wizzard\Downloads\bin64\BlackDesert64.exe (.not file.)
O87 - FAEL: "{D20FBD67-D8EF-4EBE-8DCD-0705D3CDFCE6}" [In-None-P17-TRUE] .(...) -- C:\Users\Wizzard\Downloads\BlackDesert_Launcher.exe (.not file.)
O87 - FAEL: "{54E1C1BA-E767-4F8E-9275-2FA3964A4AB2}" [In-None-P17-TRUE] .(...) -- C:\Users\Wizzard\Downloads\BlackDesert_Downloader.exe (.not file.)
O87 - FAEL: "TCP Query User{25818FA1-B9FB-461A-8AE7-22074701031C}E:\jeux\battle.net\battle.net.8098\battle.net.exe" [In-None-P6-TRUE] .(...) -- E:\jeux\battle.net\battle.net.8098\battle.net.exe (.not file.)
O87 - FAEL: "UDP Query User{E8DC8801-5735-4451-8B0E-1EB8B3FB79EB}E:\jeux\battle.net\battle.net.8098\battle.net.exe" [In-None-P17-TRUE] .(...) -- E:\jeux\battle.net\battle.net.8098\battle.net.exe (.not file.)

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3A787631-66A2-4634-B928-A37E73B58FB6} =>PUP.Optional.Dealio
C:\Users\Wizzard\AppData\Roaming\BrowserExtensions =>PUP.Optional.BrowserExtensions
C:\Users\Wizzard\AppData\Local\CrashReportClient =>.Superfluous.CrashReports
C:\Users\Wizzard\AppData\Local\MalwareProtectionLive =>.Superfluous.MalwareProtection
C:\Users\Wizzard\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage =>.Superfluous.CloudfrontNet
C:\Users\Wizzard\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal =>.Superfluous.CloudfrontNet
C:\Users\Wizzard\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_ol.at.atwola.com_0.localstorage =>.Superfluous.Atwola
C:\Users\Wizzard\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_ol.at.atwola.com_0.localstorage-journal =>.Superfluous.Atwola
C:\Users\Wizzard\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.audienceinsights.net_0.localstorage =>.Superfluous.AudienceInsights
C:\Users\Wizzard\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.audienceinsights.net_0.localstorage-journal =>.Superfluous.AudienceInsights
C:\Users\Wizzard\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.re-markit00.re-markit.co_0.localstorage =>PUP.Optional.ReMarkIt
C:\Users\Wizzard\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.re-markit00.re-markit.co_0.localstorage-journal =>PUP.Optional.ReMarkIt
C:\Users\Wizzard\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_zynga2-a.akamaihd.net_0.localstorage =>.Superfluous.AkamaiHD
C:\Users\Wizzard\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_zynga2-a.akamaihd.net_0.localstorage-journal =>.Superfluous.AkamaiHD
C:\Users\Wizzard\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_free.onlinemapfinder.com_0.localstorage =>.Superfluous.MindSpark
C:\Users\Wizzard\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_free.onlinemapfinder.com_0.localstorage-journal =>.Superfluous.MindSpark
C:\Users\Wizzard\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_free.videodownloadconverter.com_0.localstorage =>.Superfluous.MindSpark
C:\Users\Wizzard\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_free.videodownloadconverter.com_0.localstorage-journal =>.Superfluous.MindSpark
C:\Users\Wizzard\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.audienceinsights.net_0.localstorage =>.Superfluous.AudienceInsights
C:\Users\Wizzard\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.audienceinsights.net_0.localstorage-journal =>.Superfluous.AudienceInsights
C:\Users\Wizzard\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.driverguide.com_0.localstorage =>PUP.Optional.DriverGuide
C:\Users\Wizzard\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.driverguide.com_0.localstorage-journal =>PUP.Optional.DriverGuide