Script ZHPFix 
FirewallRaz 
EmptyPrefetch 
EmptyTemp 


O38 - TASK: {05641BF3-A233-4826-8926-BAF4824BA921} [64Bits][\Microsoft\Windows\Multimedia\FreeVPN] - (...) -- C:\Users\admin\AppData\Roaming\FreeVPN\FreeVPN.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://adservice.google.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ajax.googleapis.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://apis.google.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fonts.googleapis.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fonts.gstatic.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://lh3.googleusercontent.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.com =>.Google Inc. 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.googletagmanager.com 
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.gstatic.com =>.Google Inc. 
R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.15063.608 (WinBuild.160101.0800)) -- C:\Windows\System32\ieframe.dll =>.Microsoft Corporation 
R3 - URLSearchHook: (no name)[HKCU] - {04b84c46-5abb-476b-a7d7-40435d9ae611} Orphan =>.SUP.Orphan 
O3 - Toolbar: 0x00 - [HKLM]{C48581DF-CF3F-4B20-B5DA-E3CE419CE58D} . (...) -- (.not file.) 
HKLM\SOFTWARE\yc 
HKCU\SOFTWARE\yc 
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6} =>.SUP.Orphan 
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9421DD08-935F-4701-A9CA-22DF90AC4EA6} =>.SUP.Orphan 
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\MEGA (Context menu) =>.SUP.Orphan 
HKLM\Software\Classes\CLSID\{0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>.SUP.Orphan 
HKLM\Software\Wow6432Node\Classes\CLSID\{0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>.SUP.Orphan 
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\PdfGrabber7ContextMenu =>.SUP.Orphan 
HKLM\Software\Classes\CLSID\{F3B803FC-C8A6-437E-944E-DB0D3E45A6E6} =>.SUP.Orphan 
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan 
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan 
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\00avast =>.SUP.Orphan 
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\MEGA (Context menu) =>.SUP.Orphan 
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\MEGA (Context menu) =>.SUP.Orphan 
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\SOFTWARE\R-TT =>.Unknown
HKLM\SOFTWARE\WOW6432Node\R-TT =>.Unknown 
HKCU\SOFTWARE\R-TT =>.Unknown 
O108 - CMH1: MEGA (Context menu) [64Bits] - {0229E5E7-09E9-45CF-9228-0228EC7D5F17} . (...) -- C:\ProgramData\MEGAsync\ShellExtX64.dll (.not file.) 
O108 - CMH3: MEGA (Context menu) [64Bits] - {0229E5E7-09E9-45CF-9228-0228EC7D5F17} . (...) -- C:\ProgramData\MEGAsync\ShellExtX64.dll (.not file.) 
O108 - CMH4: MEGA (Context menu) [64Bits] - {0229E5E7-09E9-45CF-9228-0228EC7D5F17} . (...) -- C:\ProgramData\MEGAsync\ShellExtX64.dll (.not file.) 
O2 - BHO: (no name) [64Bits] - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} (.Orphan.) 
O108 - CMH1: PdfGrabber7ContextMenu [64Bits] - {F3B803FC-C8A6-437E-944E-DB0D3E45A6E6} . (.Orphan.) 
O108 - CMH1: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) 
O108 - CMH3: 00avast [64Bits] - {472083B0-C522-11CF-8763-00608CC02F24} . (.Orphan.) 
O108 - CMH6: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)