Script ZHPFix
[MD5.00000000000000000000000000000000] [APT] [AutoPico Daily Restart] (...) -- C:\Program Files\KMSpico\AutoPico.exe (.not file.)   [0] (.Activate.)  =>HackTool.KMSpico
[MD5.00000000000000000000000000000000] [APT] [{F89934EA-14AF-4299-A51E-F839C0D363DB}] (...) -- F:\Driver\Setup_Afterburner.exe (.not file.)   [0] (.Deactivate.)  =>.Superfluous.Empty
O39 - APT: AutoPico Daily Restart - (...) -- C:\WINDOWS\System32\Tasks\AutoPico Daily Restart  [3470]  (.Orphan.)  =>HackTool.KMSpico
O39 - APT: {F89934EA-14AF-4299-A51E-F839C0D363DB} - (...) -- C:\WINDOWS\System32\Tasks\{F89934EA-14AF-4299-A51E-F839C0D363DB}  [2292]  (.Orphan.)  =>.Superfluous.Orphan
R3 - URLSearchHook: (no name) - {f4ef4468-9bbb-45a1-a2ce-f0c430a9a7e5} Orphan  =>.Superfluous.Orphan
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan  =>.Microsoft Internet Explorer
HKLM\SOFTWARE\Wow6432Node\Eset  =>.ESET
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
HKCU\SOFTWARE\Bitdefender  =>.Bitdefender
O43 - CFD: 20/12/2016 - [] D -- C:\Program Files (x86)\AdAware  =>.adaware
O43 - CFD: 20/12/2016 - [] D -- C:\Users\Famille\AppData\Local\chromium  =>.Chromium
O43 - CFD: 11/05/2017 - [] D -- C:\Users\Famille\AppData\Local\ESET  =>.ESET
O43 - CFD: 11/08/2016 - [0] D -- C:\Program Files (x86)\GUM4E92.tmp
O43 - CFD: 09/08/2016 - [0] D -- C:\ProgramData\SetupTemp
O43 - CFD: 28/11/2016 - [0] SHD -- C:\Users\Famille\AppData\Local\icsxml
C:\WINDOWS\System32\Tasks\AutoPico Daily Restart  =>HackTool.KMSpico
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}  =>.Superfluous.Orphan
FirewallRaz
EmptyPrefetch
EmptyTemp
EmptyFlash