Script ZHPFix 
FirewallRaz 
EmptyPrefetch 
EmptyTemp 

O40 - TASK: {39A09B80-053F-4CB0-B090-C9FA64E342DD}[\Microsoft\Windows\Media Center\mcupdate] - (...) -- C:\Windows\ehome\mcupdate (.not file.) [0] (.Orphan.) =>.SUP.Orphan 
O40 - TASK: {D43A3D59-AD8D-473D-A788-6AC2196A3F4C}[\Microsoft\Windows\Media Center\RecordingRestart] - (...) -- C:\Windows\ehome\ehrec (.not file.) [0] (.Orphan.) =>.SUP.Orphan 
O4 - HKCU\..\Run: [f.lux] . (.Flux Software LLC - f.lux.) -- C:\Users\hassan\AppData\Local\FluxSoftware\Flux\flux.exe =>.Michael Herf® 
O4 - HKUS\S-1-5-21-1796275782-4292205373-2313263118-1001\..\Run: [f.lux] . (.Flux Software LLC - f.lux.) -- C:\Users\hassan\AppData\Local\FluxSoftware\Flux\flux.exe =>.Michael Herf® 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://192.168.1.1 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://me-cdn.effectivemeasure.net 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google-analytics.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.startimes.com 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://apis.google.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://stats.g.doubleclick.net 
HKLM\SOFTWARE\Clozos
HKLM\SOFTWARE\Couhick 
HKLM\SOFTWARE\FlyingBird 
HKLM\SOFTWARE\Kudigegeway 
HKCU\SOFTWARE\8322898 =>.FastStone Soft
HKCU\SOFTWARE\DRP 
HKCU\SOFTWARE\msaver 
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files\Firefox\Firefox.exe (.not file.) 
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files\Firefox\Firefox.exe (.not file.) 
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files\Firefox\Firefox.exe (.not file.) 
O87 - FAEL: "{60A415CF-6946-47B8-ADE9-31C1A4A58A17}" [In-None-P6-TRUE] .(...) -- C:\Users\hassan\Desktop\EmbratoriaG7\EmbratoriaG7\libs.exe (.not file.) 
O87 - FAEL: "{A311B4C3-E9EB-4955-BFFA-B27077669FEE}" [In-None-P17-TRUE] .(...) -- C:\Users\hassan\Desktop\EmbratoriaG7\EmbratoriaG7\libs.exe (.not file.) 
O87 - FAEL: "{08A8D21F-0B0A-42CD-8659-AAA0BA8B8C3A}" [In-None-P17-TRUE] .(...) -- C:\Users\hassan\Desktop\DriverBoosterPROPortable_5.0.3.360.paf\DriverBoosterPROPortable\App\DriverBoosterPRO\AutoUpdate.exe (.not file.) 
O87 - FAEL: "{59FCA11E-DA39-4091-8B4D-A9614C859BE3}" [Out-None-P17-TRUE] .(...) -- C:\Users\hassan\Desktop\DriverBoosterPROPortable_5.0.3.360.paf\DriverBoosterPROPortable\App\DriverBoosterPRO\AutoUpdate.exe (.not file.) 
C:\Users\hassan\AppData\Local\AdvinstAnalytics =>.SUP.Various 
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6 =>PUM.Misplaced.Certificate [Avast Software] 
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931 =>PUM.Misplaced.Certificate [Avast Software] 
O43 - CFD: 22/09/2017 - [] D -- C:\Users\hassan\AppData\Local\AdvinstAnalytics =>.SUP.Various