Script Zhpfix O23 - Service: McAfee Service Controller (mfemms) . (.McAfee, Inc. - McAfee Management Service.) - C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe =>.McAfee, Inc.® O23 - Service: McAfee Validation Trust Protection Service (mfevtp) . (.McAfee, Inc. - McAfee Process Validation Service.) - C:\Windows\system32\mfevtps.exe =>.McAfee, Inc SR - Demand [29/01/2016] [ 422184] McAfee Inc. mfeaack (mfeaack) . (.McAfee, Inc..) - C:\Windows\System32\drivers\mfeaack.sys =>.McAfee, Inc.® SR - Demand [29/01/2016] [ 351656] McAfee Inc. mfeavfk (mfeavfk) . (.McAfee, Inc..) - C:\Windows\System32\drivers\mfeavfk.sys =>.McAfee, Inc.® SR - Boot [29/01/2016] [ 83608] McAfee Inc. mfeelamk (mfeelamk) . (.McAfee, Inc..) - C:\Windows\System32\drivers\mfeelamk.sys =>.Microsoft Windows Early Launch Anti-malware Publisher® SS - Demand [25/01/2016] [ 234192] McAfee Firewall Core Service (mfefire) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe =>.McAfee, Inc.® SR - Demand [29/01/2016] [ 496368] McAfee Inc. mfefirek (mfefirek) . (.McAfee, Inc..) - C:\Windows\System32\drivers\mfefirek.sys =>.McAfee, Inc.® SR - Boot [29/01/2016] [ 847608] McAfee Inc. mfehidk (mfehidk) . (.McAfee, Inc..) - C:\Windows\System32\drivers\mfehidk.sys =>.McAfee, Inc.® SR - Auto [19/02/2016] [ 382456] McAfee Service Controller (mfemms) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe =>.McAfee, Inc.® SR - Auto [25/01/2016] [ 279488] McAfee Validation Trust Protection Service (mfevtp) . (.McAfee, Inc..) - C:\Windows\system32\mfevtps.exe =>.McAfee, Inc.® SR - Boot [29/01/2016] [ 245096] McAfee Inc. mfewfpk (mfewfpk) . (.McAfee, Inc..) - C:\Windows\System32\drivers\mfewfpk.sys =>.McAfee, SR - Demand [29/01/2016] [ 422184] McAfee Inc. mfeaack (mfeaack) . (.McAfee, Inc..) - C:\Windows\System32\drivers\mfeaack.sys =>.McAfee, Inc.® SR - Demand [29/01/2016] [ 351656] McAfee Inc. mfeavfk (mfeavfk) . (.McAfee, Inc..) - C:\Windows\System32\drivers\mfeavfk.sys =>.McAfee, Inc.® SR - Boot [29/01/2016] [ 83608] McAfee Inc. mfeelamk (mfeelamk) . (.McAfee, Inc..) - C:\Windows\System32\drivers\mfeelamk.sys =>.Microsoft Windows Early Launch Anti-malware Publisher® SS - Demand [25/01/2016] [ 234192] McAfee Firewall Core Service (mfefire) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe =>.McAfee, Inc.® SR - Demand [29/01/2016] [ 496368] McAfee Inc. mfefirek (mfefirek) . (.McAfee, Inc..) - C:\Windows\System32\drivers\mfefirek.sys =>.McAfee, Inc.® SR - Boot [29/01/2016] [ 847608] McAfee Inc. mfehidk (mfehidk) . (.McAfee, Inc..) - C:\Windows\System32\drivers\mfehidk.sys =>.McAfee, Inc.® SR - Auto [19/02/2016] [ 382456] McAfee Service Controller (mfemms) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe =>.McAfee, Inc.® SR - Auto [25/01/2016] [ 279488] McAfee Validation Trust Protection Service (mfevtp) . (.McAfee, Inc..) - C:\Windows\system32\mfevtps.exe =>.McAfee, Inc.® SR - Boot [29/01/2016] [ 245096] McAfee Inc. mfewfpk (mfewfpk) . (.McAfee, Inc..) - C:\Windows\System32\drivers\mfewfpk.sys =>.McAfee, Inc.® O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] . (. - .) -- C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64 (.Not File.) O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64] . (. - .) -- C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64 (.Not File.) O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] . (. - .) -- C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64 (.Not File.) O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64] . (. - .) -- C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64 (.Not File.) O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] . (. - .) -- C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64 (.Not File.) O4 - HKCU\..\RunOnce: [Delete Cached Update Binary] . (. - .) -- /q /c del /q "C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe (.Not File.) O4 - HKCU\..\RunOnce: [Delete Cached Standalone Update Binary] . (. - .) -- /q /c del /q "C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe (.Not File.) O4 - HKUS\S-1-5-21-1055000325-4193095063-1257145016-1001\..\RunOnce: [Uninstall C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] . (. - .) -- C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64 (.Not File.) O4 - HKUS\S-1-5-21-1055000325-4193095063-1257145016-1001\..\RunOnce: [Uninstall C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64] . (. - .) -- C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64 (.Not File.) O4 - HKUS\S-1-5-21-1055000325-4193095063-1257145016-1001\..\RunOnce: [Uninstall C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] . (. - .) -- C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64 (.Not File.) O4 - HKUS\S-1-5-21-1055000325-4193095063-1257145016-1001\..\RunOnce: [Uninstall C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64] . (. - .) -- C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64 (.Not File.) O4 - HKUS\S-1-5-21-1055000325-4193095063-1257145016-1001\..\RunOnce: [Uninstall C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] . (. - .) -- C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64 (.Not File.) O4 - HKUS\S-1-5-21-1055000325-4193095063-1257145016-1001\..\RunOnce: [Delete Cached Update Binary] . (. - .) -- /q /c del /q "C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe (.Not File.) O4 - HKUS\S-1-5-21-1055000325-4193095063-1257145016-1001\..\RunOnce: [Delete Cached Standalone Update Binary] . (. - .) -- /q /c del /q "C:\Users\Patrick\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe (.Not File.) O4 - GS\ProgramsCommon [Public]: Booking.com.lnk . (...) C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe http://www.booking.com/ [MD5.BD33A511702A03DEF58CA31584E1EFEB] - (.McAfee, Inc. - McAfee Process Validation Service.) -- C:\Windows\system32\mfevtps.exe [279488] [PID.1760] =>.McAfee, Inc. [MD5.0D5986FD9B12D2FA6DA76EEEB186C78A] - (.McAfee, Inc. - McAfee Management Service.) -- C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [382456] [PID.1836] =>.McAfee, Inc.® [MD5.BD33A511702A03DEF58CA31584E1EFEB] - (.McAfee, Inc. - McAfee Process Validation Service.) -- C:\Windows\System32\mfevtps.exe [279488] [PID.2864] =>.McAfee, Inc. [MD5.540C973370E07028C7DEDB79CD2B2463] - (.McAfee, Inc. - McAfee Core Firewall Service.) -- C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe [234192] [PID.3740] =>.McAfee, Inc.® [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:mcpltui_exe =>.McAfee Inc. HKLM\SOFTWARE\McAfee =>.McAfee Inc. HKLM\SOFTWARE\WOW6432Node\McAfee =>.McAfee Inc. HKCU\SOFTWARE\McAfee =>.McAfee Inc. HKU\.DEFAULT\SOFTWARE\McAfee =>.McAfee Inc. HKU\S-1-5-21-1055000325-4193095063-1257145016-1001\SOFTWARE\McAfee =>.McAfee Inc. O43 - CFD: 03/10/2016 - [] D -- C:\ProgramData\mcafee =>.McAfee O43 - CFD: 03/10/2016 - [] D -- C:\Program Files (x86)\Common Files\McAfee =>.McAfee O43 - CFD: 12/02/2016 - [] DC -- C:\Users\Patrick\AppData\Roaming\AVAST Software =>.AVAST Software O58 - SDL:2016/01/29 07:01:56 A . (.McAfee, Inc. - McAfee Arbitrary Access Control Driver.) -- C:\Windows\System32\drivers\mfeaack.sys [422184] =>.McAfee, Inc.® O58 - SDL:2016/01/29 07:01:56 A . (.McAfee, Inc. - Anti-Virus File System Filter Driver.) -- C:\Windows\System32\drivers\mfeavfk.sys [351656] =>.McAfee, Inc.® O58 - SDL:2016/01/29 07:01:56 A . (.McAfee, Inc. - McAfee ELAM Driver.) -- C:\Windows\System32\drivers\mfeelamk.sys [83608] =>.Microsoft Windows Early Launch Anti-malware Publisher® O58 - SDL:2016/01/29 07:01:56 A . (.McAfee, Inc. - McAfee Core Firewall Engine Driver.) -- C:\Windows\System32\drivers\mfefirek.sys [496368] =>.McAfee, Inc.® O58 - SDL:2016/01/29 07:01:56 A . (.McAfee, Inc. - McAfee Link Driver.) -- C:\Windows\System32\drivers\mfehidk.sys [847608] =>.McAfee, Inc.® O58 - SDL:2016/01/29 07:01:56 A . (.McAfee, Inc. - Anti-Virus Mini-Firewall Driver.) -- C:\Windows\System32\drivers\mfewfpk.sys [245096] =>.McAfee, Inc.® [5DC98B9ADD1B30090983CBE53B9E6406] [19/02/2016] (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe =>.McAfee, Inc. [5DC98B9ADD1B30090983CBE53B9E6406] [25/01/2016] (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe =>.McAfee, Inc. [5DC98B9ADD1B30090983CBE53B9E6406] [25/01/2016] (.McAfee, Inc..) - C:\Windows\system32\mfevtps.exe =>.McAfee, Inc. [5DC98B9ADD1B30090983CBE53B9E6406] [29/01/2016] (.McAfee, Inc..) - C:\Windows\System32\drivers\cfwids.sys =>.McAfee, Inc. [5DC98B9ADD1B30090983CBE53B9E6406] [29/01/2016] (.McAfee, Inc..) - C:\Windows\System32\drivers\mfeaack.sys =>.McAfee, Inc. [5DC98B9ADD1B30090983CBE53B9E6406] [29/01/2016] (.McAfee, Inc..) - C:\Windows\System32\drivers\mfeavfk.sys =>.McAfee, Inc. [5DC98B9ADD1B30090983CBE53B9E6406] [29/01/2016] (.McAfee, Inc..) - C:\Windows\System32\drivers\mfefirek.sys =>.McAfee, Inc. [5DC98B9ADD1B30090983CBE53B9E6406] [29/01/2016] (.McAfee, Inc..) - C:\Windows\System32\drivers\mfehidk.sys =>.McAfee, Inc. [5DC98B9ADD1B30090983CBE53B9E6406] [29/01/2016] (.McAfee, Inc..) - C:\Windows\System32\drivers\mfewfpk.sys =>.McAfee, Inc. C:\Windows\Installer\10f5bd3.msp C:\Windows\Installer\19c994.msp C:\Windows\Installer\2d7bc8.msp C:\Windows\Installer\42c8bfb9.msp C:\Windows\Installer\61449f.msp C:\Windows\Installer\61fb1da7.msp C:\Windows\Installer\8cc8d.msp C:\Windows\Installer\b4c5c5.msp C:\Windows\Installer\c78be7f8.msp C:\Users\Patrick\AppData\Local\Temp\tmp-t0e.xpi [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\iTunes\iTunes.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\iTunes\iTunes.exe.ApplicationCompany [HKU\S-1-5-21-1055000325-4193095063-1257145016-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\iTunes\iTunes.exe.FriendlyAppName [HKU\S-1-5-21-1055000325-4193095063-1257145016-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\iTunes\iTunes.exe.ApplicationCompany C:\Windows\capicom.dll EmptyPrefetch EmptyClsid