Script ZHPFix 
FirewallRaz 
EmptyPrefetch 
EmptyTemp


O23 - Service: KMService (KMService) . (...) - C:\Windows\System32\srvany.exe (.not file.) =>PUP.Optional.Office
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer 
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2 

[HKLM\SYSTEM\CurrentControlSet\Services\KMService] =>PUP.Optional.Office 
[HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] =>.Superfluous.Orphan 
[HKLM\Software\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] =>.Superfluous.Orphan 
[HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] =>.Superfluous.Orphan 
[HKLM\Software\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}] =>.Superfluous.Orphan 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Free Shortcut Remover_is1] =>.Superfluous.TechEvolve 
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Free Shortcut Remover_is1] =>.Superfluous.TechEvolve 
[HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6] =>PUM.Misplaced.Certificate [Avast Software] 
[HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931] =>PUM.Misplaced.Certificate [Avast Software] 

[MD5.00000000000000000000000000000000] [APT] [{488487F1-71FD-44A0-BB16-C98924C13083}] (...) -- D:\ ©?ê¤\avast_premier_antivirus_setup_online.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty 
O39 - APT: {488487F1-71FD-44A0-BB16-C98924C13083} - (...) -- C:\Windows\System32\Tasks\{488487F1-71FD-44A0-BB16-C98924C13083} [3120] (.Orphan.) =>.Superfluous.Orphan 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://apis.google.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://clients5.google.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fonts.gstatic.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://lh3.googleusercontent.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://notifications.google.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ogs.google.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://play.google.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.gstatic.com =>.Google Inc.
O42 - Logiciel: Free Shortcut Remover 8.8.1 - (.FreeShortcutRemover Co., Ltd..) [HKLM][64Bits] -- Free Shortcut Remover_is1 =>.Superfluous.TechEvolve 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] -- C:\Program Files\Windows Sidebar\Sidebar.exe (.not file.) 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] -- C:\Program Files\Windows Sidebar\Sidebar.exe (.not file.) 
O53 - SMSR:HKLM\...\startupreg\BCSSync [Key] . (...) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe (.not file.) 
O61 - LFC: 2017/07/30 21:34:39 A . (.???? (C) 2011.) -- C:\Users\??????\AppData\Roaming\HaiYuInst\plugins\download\minizip.dll [19968] 
O39 - APT: Unknown - (.IObit.) -- C:\Windows\System32\Tasks\ASC10_SkipUac_?????? [2826] =>.IObit