Script ZHPFix 
FirewallRaz 
EmptyPrefetch 
EmptyTemp 
EmptyFlash 


[MD5.00000000000000000000000000000000] [APT] [AutoKMS] (...) -- C:\WINDOWS\AutoKMS\AutoKMS.exe (.not file.) [0] (.Activate.) =>HackTool.AutoKMS
O39 - APT: AutoKMS - (...) -- C:\WINDOWS\System32\Tasks\AutoKMS [2736] (.Orphan.) =>HackTool.AutoKMS
G0 - GCSP: Preferences [User Data\Default][HomePage] http://api.mywot.com 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.clasicooo.com 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.mywot.com 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.startimes.com 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://cmp-cdn.ghostery.com 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://portail-crous.crous-nancy-metz.fr 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://secure.mywot.com 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.google-analytics.com 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.facebook.com 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.googleapis.com 
P2 - EXT FILE: (.Zotero - .) -- C:\Users\Othman\AppData\Roaming\Mozilla\Firefox\Profiles\z9tjp1wr.default\extensions\zotero@chnm.gmu.edu.xpi =>.Zotero 
O17 - HKLM\System\CCS\Services\Tcpip\..\{ddf50640-26fd-4bdf-82c2-75ca2cd23176}: DhcpNameServer = 193.50.27.66 193.50.27.67 
O17 - HKLM\System\CCS\Services\Tcpip\..\{24dffe29-2fd5-4312-9d20-f3e360f200f9}: DhcpDomain = crous-nancy-metz.
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = crous-nancy-metz.fr 
O43 - CFD: 08/06/2016 - [] D -- C:\ProgramData\KMSAuto =>HackTool.WinActivator 
O43 - CFD: 15/08/2016 - [] D -- C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS 
O87 - FAEL: "{14EC18EC-A3EB-4C2E-A9C4-A83CD884055C}" [Out-None-P6-TRUE] .(...) -- C:\Windows\KMS-R@1n.exe (.not file.) =>HackTool.WinActivator 
O87 - FAEL: "{235D978B-3B96-4D63-8FA1-ADFA5447A19F}" [In-None-P6-TRUE] .(...) -- C:\Windows\KMS-R@1n.exe (.not file.) =>HackTool.WinActivator
C:\WINDOWS\System32\Tasks\AutoKMS =>HackTool.AutoKMS 
C:\ProgramData\KMSAuto =>HackTool.WinActivator 
C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS 


O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Othman\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] C:\Users\Othman\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64 (.not file.) 
O4 - HKUS\S-1-5-21-2908828130-2765186903-4166498546-1001\..\RunOnce: [Uninstall C:\Users\Othman\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] C:\Users\Othman\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64 (.not file.)