Script Zhpfix O23 - Service: McAfee AP Service (McAPExe) . (.McAfee, Inc. - McAfee Access Protection.) - C:\Program Files\Common Files\mcafee\VSCore_15_7\mcapexe.exe =>.McAfee, Inc.® O23 - Service: McAfee Service Controller (mfemms) . (.McAfee, Inc. - McAfee Management Service.) - C:\Program Files\Common Files\mcafee\SystemCore\mfemms.exe =>.McAfee, Inc.® O23 - Service: McAfee Validation Trust Protection Service (mfevtp) . (.McAfee, Inc. - McAfee Process Validation Service.) - C:\Windows\system32\mfevtps.exe =>.McAfee, Inc. SR - Demand [26/06/2017] [ 77800] McAfee Inc. cfwids (cfwids) . (.McAfee, Inc..) - C:\Windows\System32\drivers\cfwids.sys =>.McAfee, Inc.® SR - Auto [07/08/2017] [ 993256] McAfee AP Service (McAPExe) . (.McAfee, Inc..) - C:\Program Files\Common Files\mcafee\VSCore_15_7\mcapexe.exe =>.McAfee, Inc.® SR - Demand [26/06/2017] [ 487408] McAfee Inc. mfeaack (mfeaack) . (.McAfee, Inc..) - C:\Windows\System32\drivers\mfeaack.sys =>.McAfee, Inc.® SR - Demand [26/06/2017] [ 355312] McAfee Inc. mfeavfk (mfeavfk) . (.McAfee, Inc..) - C:\Windows\System32\drivers\mfeavfk.sys =>.McAfee, Inc.® SR - Boot [26/06/2017] [ 84544] McAfee Inc. mfeelamk (mfeelamk) . (.McAfee, Inc..) - C:\Windows\System32\drivers\mfeelamk.sys =>.Microsoft Windows Early Launch Anti-malware Publisher® SS - Demand [21/06/2017] [ 242640] McAfee Firewall Core Service (mfefire) . (.McAfee, Inc..) - C:\Program Files\Common Files\mcafee\SystemCore\mfefire.exe =>.McAfee, Inc.® SR - Demand [26/06/2017] [ 506352] McAfee Inc. mfefirek (mfefirek) . (.McAfee, Inc..) - C:\Windows\System32\drivers\mfefirek.sys =>.McAfee, Inc.® SR - Boot [26/06/2017] [ 933360] McAfee Inc. mfehidk (mfehidk) . (.McAfee, Inc..) - C:\Windows\System32\drivers\mfehidk.sys =>.McAfee, Inc.® SR - Auto [21/06/2017] [ 394704] McAfee Service Controller (mfemms) . (.McAfee, Inc..) - C:\Program Files\Common Files\mcafee\SystemCore\mfemms.exe =>.McAfee, Inc.® SR - Demand [26/06/2017] [ 116208] McAfee Inc. mfeplk (mfeplk) . (.McAfee, Inc..) - C:\Windows\System32\drivers\mfeplk.sys =>.McAfee, Inc.® SR - Auto [21/06/2017] [ 350160] McAfee Validation Trust Protection Service (mfevtp) . (.McAfee, Inc..) - C:\Windows\system32\mfevtps.exe =>.McAfee, Inc.® SR - Boot [26/06/2017] [ 253424] McAfee Inc. mfewfpk (mfewfpk) . (.McAfee, Inc..) - C:\Windows\System32\drivers\mfewfpk.sys =>.McAfee, Inc.® [MD5.45C7BCD80C7EB24F29059010D91A314F] - (.McAfee, Inc. - McAfee Management Service.) -- C:\Program Files\Common Files\mcafee\SystemCore\mfemms.exe [394704] [PID.1556] =>.McAfee, Inc.® [MD5.743D25ADB0642DAD832E02BB2D3A1077] - (.McAfee, Inc. - McAfee Process Validation Service.) -- C:\Windows\system32\mfevtps.exe [350160] [PID.1980] =>.McAfee, Inc. [MD5.743D25ADB0642DAD832E02BB2D3A1077] - (.McAfee, Inc. - McAfee Process Validation Service.) -- C:\Windows\system32\mfevtps.exe [350160] [PID.1472] =>.McAfee, Inc. [MD5.761019374B62A037A3E782927ADC55F8] - (.McAfee, Inc. - McAfee Core Firewall Service.) -- C:\Program Files\Common Files\mcafee\SystemCore\mfefire.exe [242640] [PID.3484] =>.McAfee, Inc.® [MD5.C1B9AC58CDBF33276D565ABCC2662034] - (.McAfee, Inc. - McAfee Access Protection.) -- C:\Program Files\Common Files\mcafee\VSCore_15_7\mcapexe.exe [993256] [PID.5592] =>.McAfee, Inc.® O4 - HKCU\..\Run: [Web Companion] . (. - .) -- C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe (.Not File.) O4 - HKUS\S-1-5-21-2278047434-2576369140-3653972468-1001\..\Run: [Web Companion] . (. - .) -- C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe (.Not File.) IE Restricted Site Good: webcompanion.com HKLM\SOFTWARE\McAfee =>.McAfee Inc. HKLM\SOFTWARE\WOW6432Node\McAfee =>.McAfee Inc. HKU\.DEFAULT\SOFTWARE\McAfee =>.McAfee Inc. O43 - CFD: 19/11/2017 - [] D -- C:\Program Files (x86)\McAfee =>.McAfee O43 - CFD: 19/11/2017 - [] D -- C:\ProgramData\McAfee =>.McAfee O43 - CFD: 19/11/2017 - [] D -- C:\Program Files (x86)\Common Files\mcafee =>.McAfee O58 - SDL:2017/06/26 09:25:56 A . (.McAfee, Inc. - McAfee Personal Firewall IDS Plugin.) -- C:\Windows\System32\drivers\cfwids.sys [77800] =>.McAfee, Inc.® O58 - SDL:2017/06/26 09:25:56 A . (.McAfee, Inc. - McAfee Arbitrary Access Control Driver.) -- C:\Windows\System32\drivers\mfeaack.sys [487408] =>.McAfee, Inc.® O58 - SDL:2017/06/26 09:25:56 A . (.McAfee, Inc. - Anti-Virus File System Filter Driver.) -- C:\Windows\System32\drivers\mfeavfk.sys [355312] =>.McAfee, Inc.® O58 - SDL:2017/06/26 09:25:56 A . (.McAfee, Inc. - McAfee ELAM Driver.) -- C:\Windows\System32\drivers\mfeelamk.sys [84544] =>.Microsoft Windows Early Launch Anti-malware Publisher® O58 - SDL:2017/06/26 09:25:56 A . (.McAfee, Inc. - McAfee Core Firewall Engine Driver.) -- C:\Windows\System32\drivers\mfefirek.sys [506352] =>.McAfee, Inc.® O58 - SDL:2017/06/26 09:25:56 A . (.McAfee, Inc. - McAfee Link Driver.) -- C:\Windows\System32\drivers\mfehidk.sys [933360] =>.McAfee, Inc.® O58 - SDL:2017/06/26 09:25:56 A . (.McAfee, Inc. - AAC Protected Launch Plugin Driver.) -- C:\Windows\System32\drivers\mfeplk.sys [116208] =>.McAfee, Inc.® O58 - SDL:2017/06/26 09:25:56 A . (.McAfee, Inc. - Anti-Virus Mini-Firewall Driver.) -- C:\Windows\System32\drivers\mfewfpk.sys [253424] =>.McAfee, Inc.® HKU\S-1-5-21-2278047434-2576369140-3653972468-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com HKCU\Software\Lavasoft\Web Companion HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion HKLM\SOFTWARE\WOW6432Node\Conduit HKCU\SOFTWARE\Conduit HKU\S-1-5-21-2278047434-2576369140-3653972468-1001\SOFTWARE\Conduit C:\Users\antoine\AppData\Local\Temp\tmp-5u4.xpi C:\Users\antoine\AppData\Local\Temp\tmp-iqp.xpi C:\Users\antoine\AppData\Local\Temp\tmp-wwi.xpi HKU\S-1-5-21-2278047434-2576369140-3653972468-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com HKCU\Software\Lavasoft\Web Companion HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion EmptyPrefetch Emptytemp EmptyClsid