Script ZHPFix SysRestore EmptyPrefetch ShortcutFix P2 - EXT FILE: (.Email - __MSG_extDesc__.) -- C:\Users\titi\AppData\Roaming\Mozilla\Firefox\Profiles\tg8xzr00.default-1420057660923-1498404510389\extensions\web@Email.xpi C:\Users\titi\AppData\Roaming\Mozilla\Firefox\Profiles\tg8xzr00.default-1420057660923-1498404510389\extensions\web@Email.xpi HKLM\Software\Wow6432Node\Classes\CLSID\{38FB5F89-9641-413E-86EA-2F804A88762C} HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\OIShellExt HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\OIShellExt HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\OIShellExt C:\Windows\Installer\1028e0dc.msp C:\Windows\Installer\1063b9.msp C:\Windows\Installer\1aacd87.msp C:\Windows\Installer\1bfe1802.msp C:\Windows\Installer\205a57.msp C:\Windows\Installer\35e10.msp C:\Windows\Installer\394ae11.msp C:\Windows\Installer\443d4bc.msp C:\Windows\Installer\4e49a.msp C:\Windows\Installer\57bac.msp O4 - HKUS\S-1-5-21-2268749393-2175397998-2779803410-1001\..\Run: [Google Update] . (. - .) -- C:\Users\titi\AppData\Local\Google\Update\1.3.33.7\GoogleUpdateCore.exe (.Not File.) =>.SUP.Orphan R3 - URLSearchHook: (no name)[HKCU] - {51a86bb3-6602-4c85-92a5-130ee4864f13} Orphan =>.SUP.Orphan O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (.Orphan.) O2 - BHO: AVG Web TuneUp - {95B7759C-8C7F-4BF1-B163-73684A933233} . (...) -- C:\Program Files\AVG Web TuneUp\4.3.5.160\AVG Web TuneUp.dll (.not file.) O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} (.Orphan.) O3 - Toolbar: 0x8E818B59F1716E48A0BE9952B5851367 - [HKCU]{598B818E-71F1-486E-A0BE-9952B5851367} . (...) -- (.not file.) O3 - Toolbar: 0xB36BA8510266854C92A5130EE4864F13 - [HKCU]{51A86BB3-6602-4C85-92A5-130EE4864F13} . (...) -- (.not file.) O87 - FAEL: "TCP Query User{FCFED6FC-8E4F-4430-A32B-0898D6F08C12}C:\program files\emule\emule.exe" [In-None-P6-TRUE] .(...) -- C:\program files\emule\emule.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "UDP Query User{4F95DA76-E2C2-47C3-B726-507D0AA3BF59}C:\program files\emule\emule.exe" [In-None-P17-TRUE] .(...) -- C:\program files\emule\emule.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "{5585B619-6C13-4BB3-9317-6BE04017C2C3}" [In-None-P6-TRUE] .(...) -- E:\fscommand\CKSocketServer.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "{FEE1144A-2F03-4BC4-828E-859050FAC5A3}" [In-None-P17-TRUE] .(...) -- E:\fscommand\CKSocketServer.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "TCP Query User{9FA035BE-D9AD-4E49-B155-F468227E8ED8}C:\program files\emule\emule.exe" [In-None-P6-TRUE] .(...) -- C:\program files\emule\emule.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "UDP Query User{09033DE5-3479-46D7-8140-E19F6FEBD12B}C:\program files\emule\emule.exe" [In-None-P17-TRUE] .(...) -- C:\program files\emule\emule.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "{19130FE2-ECBE-4E9F-9637-692E6EF9776A}" [In-None-P6-TRUE] .(...) -- C:\Program Files\AVG\Av\avgmfapx.exe (.not file.) =>.SUP.Orphan O87 - FAEL: "{664627F5-BEE4-44FF-A26F-DA9F314296CE}" [In-None-P17-TRUE] .(...) -- C:\Program Files\AVG\Av\avgmfapx.exe (.not file.) =>.SUP.Orphan C:\Users\titi\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkljlnkimgcfmiklhilenokeckdiiepf =>.SUP.PCProtect C:\Users\titi\AppData\Roaming\Mozilla\Firefox\Profiles\tg8xzr00.default-1420057660923-1498404510389\extensions\web@Email.xpi =>PUP.Optional.Agent HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} =>.SUP.Orphan HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\jZip =>.SUP.Orphan HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\00avg =>.SUP.Orphan HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\OIShellExt =>.SUP.Orphan HKLM\Software\Classes\CLSID\{38FB5F89-9641-413E-86EA-2F804A88762C} =>.SUP.Orphan HKLM\Software\Wow6432Node\Classes\CLSID\{38FB5F89-9641-413E-86EA-2F804A88762C} =>.SUP.Orphan HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\OIShellExt =>.SUP.Orphan HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\OIShellExt =>.SUP.Orphan HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\OIShellExt =>.SUP.Orphan Emptytemp Emptyclsid FirewallRaz