Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp

O38 - TASK: {36443BC0-454F-4F85-B8A6-897D19E88ACF}[\SparkUpdater] - (.Baidu.com, Inc. - spark.) -- C:\Program Files\baidu\Baidu Browser\SparkUpdate.exe [1372176] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\Quicklaunch [abc]: Baidu Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Baidu Browser\Spark.exe --bar=1016 =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\TaskBar [abc]: Baidu Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Baidu Browser\Spark.exe --bar=1016 =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\Quicklaunch [Administrateur]: Baidu Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Baidu Browser\Spark.exe --bar=1016 =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\TaskBar [Administrateur]: Baidu Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Baidu Browser\Spark.exe --bar=1016 =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
HKLM\SOFTWARE\Baidu =>.Baidu
HKLM\SOFTWARE\CloudOPTInfo =>.Baidu Technology
HKCU\SOFTWARE\Baidu =>.Baidu
O43 - CFD: 28/11/2017 - [] D -- C:\Program Files\baidu =>. Baidu Online Network Technology (Beijing) Co.,Ltd.®
O43 - CFD: 28/11/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Baidu Browser =>.Baidu Technology
O43 - CFD: 28/11/2017 - [] D -- C:\ProgramData\Baidu =>.Baidu
O43 - CFD: 28/11/2017 - [] D -- C:\Users\abc\AppData\Roaming\Baidu =>.Baidu
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Baidu Browser\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Baidu Browser\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Baidu Browser\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Baidu Browser\Spark.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Baidu Browser\Spark.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Baidu Browser\Spark.exe
O23 - Service: The Calendar Service (TheCalendarService) . (.Copyright (C) 2015 - The Calendar Service.) - C:\Program Files\CalendarTool\2.0.0.1000176\CalendarServ.exe =>PUP.Optional.ScreenSnapshot
SR - Auto [20/08/2017] [ 151696] The Calendar Service (TheCalendarService) . (.Copyright (C) 2015.) - C:\Program Files\CalendarTool\2.0.0.1000176\CalendarServ.exe =>PUP.Optional.ScreenSnapshot =>PUP.Optional.ScreenSnapshot
[MD5.47333D19E8DA47A6CDF23FC7A800983D] - (.Copyright (C) 2015 - The Calendar Service.) -- C:\Program Files\CalendarTool\2.0.0.1000176\CalendarServ.exe [151696] [PID.3736] =>PUP.Optional.ScreenSnapshot
[MD5.7079DC7371622B0515C6CCC147CF1FCC] - (.Copyright (C) 2015 - calendar Application.) -- C:\Program Files\CalendarTool\2.0.0.1000176\calendar.exe [2249360] [PID.3552] =>PUP.Optional.ScreenSnapshot
O42 - Logiciel: Advanced Calendar 2.0.0.1000176 - (.MEIXIAN XIE.) [HKLM] -- {D9BAB2C9-5236-48c3-AF02-67E799F09BBD} =>PUP.Optional.ScreenSnapshot
HKLM\SOFTWARE\DtsEncodeTools =>PUP.Optional.WeatherTool
HKLM\SYSTEM\CurrentControlSet\Services\TheCalendarService =>PUP.Optional.ScreenSnapshot
C:\Program Files\CalendarTool\2.0.0.1000176\CalendarServ.exe =>PUP.Optional.ScreenSnapshot
O38 - TASK: {D2A2EB2E-3C6A-4F83-9EA0-4A106192DD28}[\Microsoft\Windows\Media Center\mcupdate] - (...) -- C:\Windows\ehome\mcupdate (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {EB95EE97-5601-47D3-95A2-1C10379D8B19}[\Microsoft\Windows\Media Center\RecordingRestart] - (...) -- C:\Windows\ehome\ehrec (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O58 - SDL:2017/11/27 22:35:47 A . (...) -- C:\Windows\System32\drivers\vwifikerneldrv.sys [259] =>.Unknown