Script ZHPFix
O38 - TASK: {2B181CA5-3A79-4008-838E-138BB674039A} [64Bits][\update-sys] - (.TODO: <Company name> - TODO: <File description>.) -- C:\Program Files (x86)\Skillbrains\Updater\Updater.exe  [414872]
O38 - TASK: {935FF250-9251-4EDC-8B90-3B6D6951ADAA} [64Bits][\CareCenter\Lightshot_Reg_HKLMWow6432Run] - (.Copyright 2009 - Starter Module.) -- C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe  [225944]   =>.SUP.Skillbrains 
O38 - TASK: {935FF250-9251-4EDC-8B90-3B6D6951ADAA} [64Bits][\CareCenter\Lightshot_Reg_HKLMWow6432Run] - (.Copyright 2009 - Starter Module.) -- C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe  [225944] 
O38 - TASK: {A87E965A-01B3-4900-B082-C7A271BCC8BC} [64Bits][\Intel\Thunderbolt\Start Thunderbolt service when hardware is detected] - (.Intel(R) - Start Thunderbolt service when hardware is .) -- C:\Program Files (x86)\Intel\Thunderbolt Software\sc.exe (.not file.)  [0]  (.Orphan.)
O38 - TASK: {FC2513D5-04DC-45B8-ADA3-0BF4533D8BCD} [64Bits][\update-S-1-5-21-4218331518-3624626746-1147748713-1001] - (.TODO: <Company name> - TODO: <File description>.) -- C:\Program Files (x86)\Skillbrains\Updater\Updater.exe  [414872] 
O4 - HKCU\..\Run: [CyberGhost] . (. - .) --  (.Orphan.)
O4 - HKUS\S-1-5-21-4218331518-3624626746-1147748713-1001\..\Run: [CyberGhost] . (. - .) --  (.Orphan.)
O2 - BHO: The Amazon Assistant for Internet Explorer [64Bits] - {0ddcea2a-7b00-4349-8acb-af7ba6da251f}  (.Orphan.)
HKLM\SOFTWARE\Skillbrains
HKLM\SOFTWARE\WOW6432Node\Skillbrains
HKCU\SOFTWARE\SkillBrains
HKLM\SOFTWARE\McAfee  =>.McAfee Inc.
HKLM\SOFTWARE\OldTimer Tools  =>.OldTimer Tools
HKLM\SOFTWARE\Skillbrains  =>.SUP.Skillbrains
HKLM\SOFTWARE\WOW6432Node\McAfee  =>.McAfee Inc.
HKLM\SOFTWARE\WOW6432Node\OldTimer Tools  =>.OldTimer Tools
HKCU\SOFTWARE\Chromium  =>.Chromium
HKCU\SOFTWARE\SkillBrains  =>.SUP.Skillbrains
O43 - CFD: 01/02/2017 - [] D -- C:\Program Files (x86)\Skillbrains  =>.SUP.Skillbrains
O43 - CFD: 09/08/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightshot  =>..SUP.Skillbrains
O43 - CFD: 23/12/2017 - [] D -- C:\ProgramData\McAfee  =>.McAfee
O43 - CFD: 21/12/2017 - [] D -- C:\ProgramData\RogueKiller  =>.Adlice Software
O43 - CFD: 14/01/2017 - [] D -- C:\Users\Léo\AppData\Local\Chromium  =>.Chromium
O42 - Logiciel: Lightshot-5.4.0.10 - (.Skillbrains.) [HKLM][64Bits] -- {30A5B3C9-2084-4063-A32A-628A98DE512B}_is1  =>.SUP.Skillbrains
O108 - CMH1: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
O108 - CMH5: igfxcui [64Bits] - {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} . (.Orphan.)
O108 - CMH6: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
C:\WINDOWS\System32\Tasks\update-sys
C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
C:\WINDOWS\System32\Tasks\CareCenter\Lightshot_Reg_HKLMWow6432Run
C:\WINDOWS\System32\Tasks\update-S-1-5-21-4218331518-3624626746-1147748713-1001
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0ddcea2a-7b00-4349-8acb-af7ba6da251f}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0ddcea2a-7b00-4349-8acb-af7ba6da251f}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0ddcea2a-7b00-4349-8acb-af7ba6da251f}
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\MEGA (Context menu)
HKLM\Software\Classes\CLSID\{0229E5E7-09E9-45CF-9228-0228EC7D5F17}
HKLM\Software\Wow6432Node\Classes\CLSID\{0229E5E7-09E9-45CF-9228-0228EC7D5F17}
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\MEGA (Context menu)
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\MEGA (Context menu)
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\MEGA (Context menu)
O23 - Service: Avast SecureLine (SecureLine) . (...) - C:\Program Files\AVAST Software\SecureLine\vpnsvc.exe  =>.AVAST Software a.s.®
SR - Auto   [14/01/2017] [  592392]  Avast SecureLine (SecureLine) . (...) - C:\Program Files\AVAST Software\SecureLine\vpnsvc.exe  =>.AVAST Software a.s.®
O38 - TASK: {2A3C5D29-963B-4D6C-AE04-BED13B1ADC38} [64Bits][\Avast SecureLine] - (.AVAST Software - SecureLine.) -- C:\Program Files\AVAST Software\SecureLine\SecureLine.exe  [3438680]   =>.AVAST Software
O38 - TASK: {37E69BD2-C277-4F7F-94A4-20261DA4FF39} [64Bits][\avast! SL Update] - (.AVAST Software - avast! SecureLine Update.) -- C:\Program Files\AVAST Software\SecureLine\slupdate.exe  [863040]   =>.AVAST Software
[MD5.EA160DB2589350DFF52C7ACCD7763187] - (...) -- C:\Program Files\AVAST Software\SecureLine\vpnsvc.exe [592392] [PID.3812]  =>.AVAST Software a.s.®
[MD5.DBA34666ADB6ECA5197C6E727F9EF2F9] - (.AVAST Software - SecureLine.) -- C:\Program Files\AVAST Software\SecureLine\SecureLine.exe [3438680] [PID.480]  =>.AVAST Software a.s.®
O42 - Logiciel: Avast SecureLine - (.AVAST Software.) [HKLM][64Bits] -- {2CD3C92F-EDC5-4B02-9B0A-9C1D37C58EF5}_is1  =>.AVAST Software a.s.®
HKLM\SOFTWARE\AVAST Software  =>.AVAST Software
HKLM\SOFTWARE\WOW6432Node\AVAST Software  =>.AVAST Software
O43 - CFD: 13/01/2017 - [] D -- C:\Program Files\AVAST Software  =>.AVAST Software a.s.®
O43 - CFD: 13/01/2017 - [] D -- C:\ProgramData\AVAST Software  =>.AVAST Software
O43 - CFD: 14/01/2017 - [] D -- C:\Users\Léo\AppData\Roaming\AVAST Software  =>.AVAST Software
SysRestore
FirewallRaz
EmptyPrefetch
EmptyCLSID
EmptyFlash
Emptytemp
ShortcutFix