Script Zhpfix

HKEY_USERS\S-1-5-21-217323868-1710923349-3544940522-1001\Software\csastats
HKCU\Software\csastats
HKCU\Software\ProductSetup
HKCU\SOFTWARE\nuevos-programas.com
HKU\S-1-5-21-217323868-1710923349-3544940522-1001\SOFTWARE\nuevos-programas.com
C:\Program Files\7z1801.exe
HKEY_USERS\S-1-5-21-217323868-1710923349-3544940522-1001\Software\csastats
HKCU\Software\csastats
HKCU\Software\ProductSetup
G2 - GCE: Preference [ALAIN][User Data\Default] [jmengapaekgmapkcophhdmppmjinpogo] Ask Web Search
C:\Users\ALAIN\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jmengapaekgmapkcophhdmppmjinpogo
O43 - CFD: 25/06/2018 - [] AD -- C:\ProgramData\Reprise
O43 - CFD: 26/11/2018 - [] D -- C:\ProgramData\Uninstall
O43 - CFD: 22/11/2016 - [] D -- C:\Users\ALAIN\AppData\Local\Crashpad
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
O4 - GS\Programs [Administrateur]: Fonctionnalités optionnelles.lnk . (...) C:\Windows.old\Windows\System32\fodhelper.exe  
O4 - GS\Programs [ALAIN]: Fonctionnalités optionnelles.lnk . (...) C:\Windows.old\Windows\System32\fodhelper.exe  
O4 - GS\Programs [WDAGUtilityAccount]: Fonctionnalités optionnelles.lnk . (...) C:\Windows.old\Windows\System32\fodhelper.exe  
O4 - GS\CommonDesktop [Public]: Canon TS5000 series Manuel à l'écran.lnk . (...) C:\Program Files\Canon\IJ Manual\TS5000 series\French\CDM\Top.html  
O4 - GS\CommonDesktop [Public]: Condor 2.lnk . (.UBSoft d.o.o. - .) C:\Condor2\Condor.exe   {00ED6AF3AEF6AF0C86A14180FF6ADFF4F2}
O4 - GS\CommonDesktop [Public]: IGC Flight Replay.lnk . (...) C:\Program Files (x86)\ywtw\IGCGeFlight.exe  
O4 - GS\CommonDesktop [Public]: Pochette Express 2.lnk . (...) C:\Program Files (x86)\Pochette Express 2\Pochette express 2.exe  
O4 - GS\CommonDesktop [Public]: VideoStudio MyDVD.lnk . (...) C:\Program Files (x86)\VideoStudio MyDVD 2018\MyDVDApp.exe  
O4 - GS\Programs [Public]: Fonctionnalités optionnelles.lnk . (...) C:\Windows.old\Windows\System32\fodhelper.exe  
O4 - GS\ProgramsCommon [Public]: VideoStudio Notification.lnk . (...) C:\Program Files (x86)\Corel\Corel VideoStudio 2018\VSComServer.exe  
G2 - GCE: Preference [ALAIN][User Data\Default] [nahhmpbckpgdidfnmfkfgiflpjijilce] Search Manager
HKU\.DEFAULT\Software\ByteFence
HKU\S-1-5-18\Software\ByteFence
HKCU\Software\undefined
HKLM\System\CurrentControlSet\Services\EventLog\Reason\ReasonByteFence
HKLM\SOFTWARE\ParetoLogic
HKLM\SOFTWARE\WOW6432Node\ParetoLogic
HKCU\SOFTWARE\ParetoLogic
HKCU\SOFTWARE\SecuredDownload
HKU\S-1-5-21-217323868-1710923349-3544940522-1001\SOFTWARE\ParetoLogic
HKU\S-1-5-21-217323868-1710923349-3544940522-1001\SOFTWARE\SecuredDownload
O43 - CFD: 28/10/2016 - [] D -- C:\Users\ALAIN\AppData\Roaming\ParetoLogic
O108 - CMH1: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Orphan.)
O108 - CMH4: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Orphan.)
O108 - CMH6: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Orphan.)
O87 - FAEL: "{544E77B7-E19A-4E10-B71C-15933F0CB755}" [In-None-P6-TRUE] .(...) -- E:\win\MSetup64.exe (.not file.)
[MD5.4D64DE5B41C39FA6192C22CBCD826FBA] [WIS][2016/10/10 08:29:03] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\19a9b86c.msp   [36499456]
[MD5.B9997DD7FC9720B22BF5EC3870D1DD4D] [WIS][2016/05/03 17:23:59] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\345a02bd.msp   [69607424]
[MD5.BD4423645209FA4CE380C43C1633F4E4] [WIS][2016/07/12 04:25:29] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\852ed032.msp   [39538688]
[MD5.BCD625BA9A27EB27FECE6352AD3196E3] [WIS][2016/06/02 05:48:52] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\bc8a6.msp   [69611520]
[MD5.339631DF934AFC2BE35E2B27A6F7DB06] [WIS][2016/11/03 08:25:06] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\ce2e5c.msp   [1642496]
[MD5.F9FD1AB516C661D9938213AA661350B7] [WIS][2016/08/02 12:49:06] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\eea7da7.msp   [1511424]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:ByteFence.exe
C:\Users\ALAIN\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nahhmpbckpgdidfnmfkfgiflpjijilce
C:\Users\ALAIN\AppData\Roaming\ParetoLogic
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\7-Zip
C:\WINDOWS\Installer\19a9b86c.msp
C:\WINDOWS\Installer\345a02bd.msp
C:\WINDOWS\Installer\852ed032.msp
C:\WINDOWS\Installer\bc8a6.msp
C:\WINDOWS\Installer\ce2e5c.msp
C:\WINDOWS\Installer\eea7da7.msp
HKU\.DEFAULT\Software\ByteFence
HKU\S-1-5-18\Software\ByteFence
HKCU\Software\undefined
HKLM\System\CurrentControlSet\Services\EventLog\Reason\ReasonByteFence



EmptyPrefetch
ShortcutFix
Emptytemp
EmptyClsid
FirewallRaz
PROXYFix
EmptyFlash 
SysRestore