Script Zhpfix
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (. - .) -- C:\Program Files\Windows Sidebar\Sidebar.exe (.Not File.)
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (. - .) -- C:\Program Files\Windows Sidebar\Sidebar.exe (.Not File.)
O4 - HKUS\S-1-5-19\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000
O4 - HKUS\S-1-5-19\..\StartupApproved\Run: [Sidebar] . (. - .) -- 0x020000000000000000000000
O4 - HKUS\S-1-5-20\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000
O4 - HKUS\S-1-5-20\..\StartupApproved\Run: [Sidebar] . (. - .) -- 0x020000000000000000000000
HKCU\SOFTWARE\Magicbit
HKU\S-1-5-21-3031221471-17513796-465078819-1001\SOFTWARE\Magicbit
HKLM\SOFTWARE\WOW6432Node\McAfee  =>.McAfee Inc.
O43 - CFD: 18/06/2018 - [] D -- C:\Program Files (x86)\McAfee Safe Connect  =>.McAfee Inc.
O43 - CFD: 18/06/2018 - [] D -- C:\ProgramData\McAfee  =>.McAfee
O43 - CFD: 14/05/2018 - [] D -- C:\ProgramData\Norton  =>.Symantec Corporation
O43 - CFD: 14/05/2018 - [] D -- C:\ProgramData\NortonInstaller  =>.Symantec
O43 - CFD: 18/06/2018 - [] D -- C:\Users\Ando Rakotomalala\AppData\Roaming\McAfee Safe Connect  =>.McAfee Inc.
O43 - CFD: 18/06/2018 - [] D -- C:\Users\Ando Rakotomalala\AppData\Local\McAfee_Inc  =>.McAfee Inc.
O53 - SMSR:HKLM\...\startupreg\AdobeAAMUpdater-1.0  [Key] [64Bits] . (...) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\AgentAntidote32  [Key] [64Bits] . (...) -- C:\Program Files (x86)\Druide\Antidote 9\Application\Bin32\AgentAntidote.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\AgentAntidote64  [Key] [64Bits] . (...) -- C:\Program Files (x86)\Druide\Antidote 9\Application\Bin64\AgentAntidote.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\BlueStacks Agent  [Key] [64Bits] . (...) -- C:\Program Files (x86)\BlueStacks\HD-Agent.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\McAfeeSafeConnect  [Key] [64Bits] . (...) -- C:\Program Files (x86)\McAfee Safe Connect\McAfee Safe Connect.exe (.not file.)
O108 - CMH1: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
O108 - CMH2: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
O108 - CMH5: Gadgets [64Bits] - {6B9228DA-9C15-419e-856C-19E768A13BDC} . (.Orphan.)
O108 - CMH6: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
C:\Program Files (x86)\dYQaDfyGOzqW.exe
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
C:\WINDOWS\Installer\4cd6f.msp
C:\WINDOWS\Installer\ebd127.msp
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\documents\Skype-8.34.0.78.exe.FriendlyAppName
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\documents\Skype-8.34.0.78.exe.ApplicationCompany
[HKU\S-1-5-21-3031221471-17513796-465078819-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\documents\Skype-8.34.0.78.exe.FriendlyAppName
[HKU\S-1-5-21-3031221471-17513796-465078819-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\documents\Skype-8.34.0.78.exe.ApplicationCompany
EmptyPrefetch
Emptytemp
EmptyClsid