Script ZHPFix 
FirewallRaz 
EmptyPrefetch 
EmptyTemp 

O23 - Service: Aticuentreqoly Cloud (AticuentreqolyCloudAjeing.exe) . (...) - C:\Program Files\Ghertetherprozph\AticuentreqolyCloudAjeing.exe (.not file.) 
[MD5.00000000000000000000000000000000] [APT] [Aticuentreqoly Cloud] (...) -- C:\Program Files\Ghertetherprozph\AticuentreqolyCloudReukucultphefaly.exe (.not file.) [327296] (.Activate.) 
[MD5.00000000000000000000000000000000] [APT] [{688DC3BA-122B-45A1-B772-38EF8977887D}] (...) -- C:\Program Files\Konami\Kitserver\setup.exe (.not file.) [327296] (.Activate.) 
[MD5.00000000000000000000000000000000] [APT] [{916205DD-3C28-4F11-835B-7460D323CE32}] (...) -- C:\Program Files\DkZ Studio\DKZStudio.exe (.not file.) [327296] (.Activate.) 
[MD5.00000000000000000000000000000000] [APT] [{B3E45EAB-599F-46AC-931F-A3244C2F66CB}] (...) -- C:\Users\QUSAI BARKA\Desktop\mbt-503-02-03\Setup.exe (.not file.) [327296] (.Activate.) 
[MD5.00000000000000000000000000000000] [APT] [{CFB0F004-49D8-4B6D-9DDC-8643C99DFD56}] (...) -- C:\Program Files\DkZ Studio\DKZStudio.exe (.not file.) [327296] (.Activate.) 
O39 - APT: Unknown - (.Adobe Inc..) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [327296] =>.Adobe Inc. 
O39 - APT: Unknown - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1087414920-4244440857-1596309313-1000Core.job [327296] =>.Google Inc.
O39 - APT: Unknown - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1087414920-4244440857-1596309313-1000UA.job [327296] =>.Google Inc. 
O39 - APT: Unknown - (.Adobe Inc..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [327296] =>.Adobe Inc. 
O39 - APT: Unknown - (.IObit.) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [327296] =>.IObit 
O39 - APT: Unknown - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1087414920-4244440857-1596309313-1000Core [327296] =>.Google Inc. 
O39 - APT: Unknown - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1087414920-4244440857-1596309313-1000UA [327296] =>.Google Inc. 
O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\RealDownloader Update Check [327296] 
O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1087414920-4244440857-1596309313-1000 [327296] 
O39 - APT: Unknown - (.Alcatel Lucent.) -- C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1087414920-4244440857-1596309313-1000 [327296] 
O39 - APT: Unknown - (.Alcatel Lucent.) -- C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1087414920-4244440857-1596309313-1000 [327296] 
O39 - APT: Unknown - (.Alcatel Lucent.) -- C:\Windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1087414920-4244440857-1596309313-1000 [327296] 
O39 - APT: Unknown - (.Alcatel Lucent.) -- C:\Windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1087414920-4244440857-1596309313-1000 [327296] 
O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\{8EF9DE6D-A8E2-40B2-8747-738ED7162657} [327296] 
O39 - APT: Aticuentreqoly Cloud - (...) -- C:\Windows\System32\Tasks\Aticuentreqoly Cloud [327296] (.Orphan.) =>.Superfluous.Orphan
O39 - APT: {688DC3BA-122B-45A1-B772-38EF8977887D} - (...) -- C:\Windows\System32\Tasks\{688DC3BA-122B-45A1-B772-38EF8977887D} [327296] (.Orphan.) =>.Superfluous.Orphan
O39 - APT: {916205DD-3C28-4F11-835B-7460D323CE32} - (...) -- C:\Windows\System32\Tasks\{916205DD-3C28-4F11-835B-7460D323CE32} [327296] (.Orphan.) =>.Superfluous.Orphan 
O39 - APT: {B3E45EAB-599F-46AC-931F-A3244C2F66CB} - (...) -- C:\Windows\System32\Tasks\{B3E45EAB-599F-46AC-931F-A3244C2F66CB} [327296] (.Orphan.) =>.Superfluous.Orphan 
O39 - APT: {CFB0F004-49D8-4B6D-9DDC-8643C99DFD56} - (...) -- C:\Windows\System32\Tasks\{CFB0F004-49D8-4B6D-9DDC-8643C99DFD56} [327296] (.Orphan.) =>.Superfluous.Orphan 

O17 - HKLM\System\CCS\Services\Tcpip\..\{DBAA8176-6B45-4413-A1FE-516D90A68D85}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 =>.Google Inc
P2 - EXT: (.Avira - Segurança do navegador Avira.) -- C:\Users\QUSAI BARKA\AppData\Roaming\Mozilla\Firefox\Profiles\5ae4tgo3.default\extensions\abs@avira.com =>.Avira 
HKCU\SOFTWARE\Avira =>.Avira 
O43 - CFD: 12/06/2016 - [] D -- C:\Program Files\Avira =>.Avira Software 
O43 - CFD: 12/06/2016 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Avira =>.Avira Software 
O58 - SDL:2016/03/17 13:53:35 A . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\Windows\System32\drivers\avgntflt.sys [327296] =>.Avira Operations GmbH & Co. KG® 
O58 - SDL:2016/06/02 12:04:48 A . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\Windows\System32\drivers\avipbb.sys [327296] =>.Avira Operations GmbH & Co. KG®