Script ZHPFix
O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM][64Bits] -- {FF59BD75-466A-4D5A-AD23-AAD87C5FD44C} =>Riskware.QuickTime
HKLM\SOFTWARE\Wow6432Node\632B3860E528E8A47379E2B45AC07B93 =>Adware.CrossRider
HKCU\SOFTWARE\IM =>Adware.InstallCore
[MD5.] [WIS][2016/11/16 11:11:05] (.amuleC - Windows Installer.) -- C:\WINDOWS\Installer\967e6ed.msi [4252672] =>Adware.aMULEcustom
[MD5.] [WIS][2016/12/07 07:33:19] (.amuleC - Windows Installer.) -- C:\WINDOWS\Installer\dc5b57f.msi [4252672] =>Adware.aMULEcustom
[MD5.] [WIS][2016/11/16 11:11:05] (.amuleC - Windows Installer.) -- C:\WINDOWS\Installer\dc5b5b6.msi [4252672] =>Adware.aMULEcustom
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}] =>Riskware.QuickTime
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}] =>Riskware.QuickTime
C:\WINDOWS\Installer\967e6ed.msi =>Adware.aMULEcustom
C:\WINDOWS\Installer\dc5b57f.msi =>Adware.aMULEcustom
C:\WINDOWS\Installer\dc5b5b6.msi =>Adware.aMULEcustom
HKCU\SOFTWARE\BitTorrent
O43 - CFD: 23/04/2017 - [] D -- C:\Users\Francois\AppData\Roaming\uTorrent
O23 - Service: (MEmusvc) . (...) - C:\Program Files (x86)\Microvirt\MEmu\MemuService.exe (.not file.)
O23 - Service: Service Microsoft Office (OfficeSvc) . (...) - C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [a727803075331874d5e2a34a4136b849] (...) -- C:\Program Files (x86)\Uninstall Information\s0bke4.dll (.not file.) [0] (.Activate.) =>.Superfluous.Empty
[MD5.00000000000000000000000000000000] [APT] [OneDrive Standalone Update Task v2] (...) -- C:\Users\Francois\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty
[MD5.00000000000000000000000000000000] [APT] [PDVDServ12 Task] (...) -- C:\Program Files (x86)\Lenovo\PowerDVD12\PDVD12Serv.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty
[MD5.00000000000000000000000000000000] [APT] [Pherhidombuition Collector] (...) -- C:\Program Files (x86)\Aterlutthikile\sjergh.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty
[MD5.00000000000000000000000000000000] [APT] [{0FBBD7DD-48C0-45A5-838F-04ACFD450478}] (...) -- C:\Program Files (x86)\Arc\ArcLauncher.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty
[MD5.00000000000000000000000000000000] [APT] [{209D851E-E9ED-439C-904B-EB1E5CD0684D}] (...) -- C:\Users\Francois\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828\SkyDriveSetup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty
[MD5.00000000000000000000000000000000] [APT] [{C8B00090-991E-49F9-9E44-A4B031FC6EAD}] (...) -- C:\Users\Francois\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828_6\SkyDriveSetup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty
[MD5.00000000000000000000000000000000] [APT] [Microsoft\Office\Office Automatic Updates] (...) -- C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty
O39 - APT: 6618682a2bf2241e324d26e97e390200 - (...) -- C:\WINDOWS\System32\Tasks\6618682a2bf2241e324d26e97e390200 [3292] (.Orphan.) =>.Superfluous.Orphan
O39 - APT: a727803075331874d5e2a34a4136b849 - (...) -- C:\WINDOWS\System32\Tasks\a727803075331874d5e2a34a4136b849 [3676] (.Orphan.) =>.Superfluous.Orphan
O39 - APT: OneDrive Standalone Update Task v2 - (...) -- C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2 [3286] (.Orphan.) =>.Superfluous.Orphan
O39 - APT: PDVDServ12 Task - (...) -- C:\WINDOWS\System32\Tasks\PDVDServ12 Task [2212] (.Orphan.) =>.Superfluous.Orphan
O39 - APT: Pherhidombuition Collector - (...) -- C:\WINDOWS\System32\Tasks\Pherhidombuition Collector [6132] (.Orphan.) =>.Superfluous.Orphan
O39 - APT: {0FBBD7DD-48C0-45A5-838F-04ACFD450478} - (...) -- C:\WINDOWS\System32\Tasks\{0FBBD7DD-48C0-45A5-838F-04ACFD450478} [3310] (.Orphan.) =>.Superfluous.Orphan
O39 - APT: {209D851E-E9ED-439C-904B-EB1E5CD0684D} - (...) -- C:\WINDOWS\System32\Tasks\{209D851E-E9ED-439C-904B-EB1E5CD0684D} [3354] (.Orphan.) =>.Superfluous.Orphan
O39 - APT: {C8B00090-991E-49F9-9E44-A4B031FC6EAD} - (...) -- C:\WINDOWS\System32\Tasks\{C8B00090-991E-49F9-9E44-A4B031FC6EAD} [3358] (.Orphan.) =>.Superfluous.Orphan
O4 - HKCU\..\Run: [AdobeBridge] (.Orphan.) =>.Superfluous.Orphan
O4 - HKCU\..\Run: [UUR57CZDVY77NGF] -- C:\Program Files\B3KANBQD7E\B3KANBQD7.exe (.not file.)
O4 - HKCU\..\Run: [1AR8L94D1H1VOMI] -- C:\Program Files\KBA6DMXH0V\KBA6DMXH0.exe (.not file.)
O4 - HKCU\..\Run: [eaxmoamza2i] -- C:\Users\Francois\AppData\Roaming\05vflujtaaj\2dnctgsvsie.exe (.not file.)
O4 - HKCU\..\Run: [yn1uyysqiyc] -- C:\Users\Francois\AppData\Roaming\go40w3vy3d1\selnkjhomlr.exe (.not file.)
O4 - HKCU\..\Run: [nlfjla1pr3c] -- C:\Users\Francois\AppData\Roaming\lg15dm3sjj2\tcooeydfbw3.exe (.not file.)
O4 - HKCU\..\Run: [9PSBMMP9KMLG8T8] -- C:\Program Files\8CWK6GAF2H\8CWK6GAF2.exe (.not file.)
O4 - HKCU\..\Run: [XYCQLO3B4SMVHKJ] -- C:\Program Files (x86)\c04b0ki5ptr\53OI8.exe (.not file.)
O4 - HKCU\..\Run: [6VHNTCER011J1P3] -- C:\Program Files (x86)\wjtc2dpoccd\HJS01.exe (.not file.)
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Francois\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828_6\amd64] -- C:\Users\Francois\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828_6\amd64 (.not file.)
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Francois\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828\amd64] -- C:\Users\Francois\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828\amd64 (.not file.)
O4 - HKUS\S-1-5-21-1288880404-4155176319-3141220653-1001\..\Run: [AdobeBridge] (.Orphan.) =>.Superfluous.Orphan
O4 - HKUS\S-1-5-21-1288880404-4155176319-3141220653-1001\..\Run: [UUR57CZDVY77NGF] -- C:\Program Files\B3KANBQD7E\B3KANBQD7.exe (.not file.)
O4 - HKUS\S-1-5-21-1288880404-4155176319-3141220653-1001\..\Run: [1AR8L94D1H1VOMI] -- C:\Program Files\KBA6DMXH0V\KBA6DMXH0.exe (.not file.)
O4 - HKUS\S-1-5-21-1288880404-4155176319-3141220653-1001\..\Run: [eaxmoamza2i] -- C:\Users\Francois\AppData\Roaming\05vflujtaaj\2dnctgsvsie.exe (.not file.)
O4 - HKUS\S-1-5-21-1288880404-4155176319-3141220653-1001\..\Run: [yn1uyysqiyc] -- C:\Users\Francois\AppData\Roaming\go40w3vy3d1\selnkjhomlr.exe (.not file.)
O4 - HKUS\S-1-5-21-1288880404-4155176319-3141220653-1001\..\Run: [nlfjla1pr3c] -- C:\Users\Francois\AppData\Roaming\lg15dm3sjj2\tcooeydfbw3.exe (.not file.)
O4 - HKUS\S-1-5-21-1288880404-4155176319-3141220653-1001\..\Run: [9PSBMMP9KMLG8T8] -- C:\Program Files\8CWK6GAF2H\8CWK6GAF2.exe (.not file.)
O4 - HKUS\S-1-5-21-1288880404-4155176319-3141220653-1001\..\Run: [XYCQLO3B4SMVHKJ] -- C:\Program Files (x86)\c04b0ki5ptr\53OI8.exe (.not file.)
O4 - HKUS\S-1-5-21-1288880404-4155176319-3141220653-1001\..\Run: [6VHNTCER011J1P3] -- C:\Program Files (x86)\wjtc2dpoccd\HJS01.exe (.not file.)
O4 - HKUS\S-1-5-21-1288880404-4155176319-3141220653-1001\..\RunOnce: [Uninstall C:\Users\Francois\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828_6\amd64] -- C:\Users\Francois\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828_6\amd64 (.not file.)
O4 - HKUS\S-1-5-21-1288880404-4155176319-3141220653-1001\..\RunOnce: [Uninstall C:\Users\Francois\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828\amd64] -- C:\Users\Francois\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828\amd64 (.not file.)
O46 - SEH:ShellExecuteHooks - (no name) - [HKLM] [64Bits] - {73538FB6-AB7F-11E6-9B77-64006A5CFC23} . (...) -- (.not file.)
O87 - FAEL: "UDP Query User{25135950-6CA2-40A0-B56A-A4D1A157DE94}C:\users\francois\desktop\terraria-server-1311\dedicated server\windows\terrariaserver.exe" [In-None-P17-TRUE] .(...) -- C:\users\francois\desktop\terraria-server-1311\dedicated server\windows\terrariaserver.exe (.not file.)
O87 - FAEL: "TCP Query User{56248068-129F-424F-98DC-69D2D92B9B04}C:\users\francois\desktop\terraria-server-1311\dedicated server\windows\terrariaserver.exe" [In-None-P6-TRUE] .(...) -- C:\users\francois\desktop\terraria-server-1311\dedicated server\windows\terrariaserver.exe (.not file.)
O87 - FAEL: "{17853A75-F461-4A27-8C4F-45444D611939}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (.not file.)
O87 - FAEL: "{0925DBC8-C92E-4883-97D6-F3BB47280622}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (.not file.)
O87 - FAEL: "{B137140F-7B0C-405A-AB2E-115788CF41E3}" [In-None-P6-TRUE] .(...) -- C:\WINDOWS\CRMSvc.exe (.not file.)
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] =>.Superfluous.Orphan
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] =>.Superfluous.Orphan
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] =>.Superfluous.Orphan



SysRestore
FirewallRaz
EmptyPrefetch
EmptyCLSID
EmptyFlash
Emptytemp
ShortcutFix