Script Zhpfix O23 - Service: Avira Protection e-mail (AntiVirMailService) . (.Avira Operations GmbH & Co. KG - Antivirus MailScanner WFP Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe =>.Avira Operations GmbH & Co. KG® O23 - Service: Avira Service protégé (AntivirProtectedService) . (.Avira Operations GmbH & Co. KG - Avira Protected Antimalware Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\ProtectedService.exe =>.Avira Operations GmbH & Co. KG® O23 - Service: Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe =>.Avira Operations GmbH & Co. KG® O23 - Service: Avira Protection temps réel (AntiVirService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe =>.Avira Operations GmbH & Co. KG® O23 - Service: Avira Protection Web (AntiVirWebService) . (.Avira Operations GmbH & Co. KG - AntiVir WebGuard WFP Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe =>.Avira Operations GmbH & Co. KG® O23 - Service: Avira Service Host (Avira.ServiceHost) . (.Avira Operations GmbH & Co. KG - Avira Service Host.) - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe =>.Avira Operations GmbH & Co. KG® SR - Auto [07/12/2019] [ 1210168] Avira Protection e-mail (AntiVirMailService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe =>.Avira Operations GmbH & Co. KG® SR - Auto [15/11/2019] [ 535352] Avira Service protégé (AntivirProtectedService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\ProtectedService.exe =>.Avira Operations GmbH & Co. KG® SR - Auto [15/11/2019] [ 484768] Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe =>.Avira Operations GmbH & Co. KG® SR - Auto [15/11/2019] [ 484768] Avira Protection temps réel (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe =>.Avira Operations GmbH & Co. KG® SR - Auto [21/11/2019] [ 567872] Avira Protection Web (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe =>.Avira Operations GmbH & Co. KG® SR - Boot [12/06/2019] [ 78936] avdevprot (avdevprot) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avdevprot.sys =>.Avira Operations GmbH & Co. KG® SR - Boot [26/02/2019] [ 22336] avelam (avelam) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\drivers\avelam.sys =>.Microsoft® SR - Auto [07/12/2019] [ 207784] avgntflt (avgntflt) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avgntflt.sys =>.Avira Operations GmbH & Co. KG® SR - System [27/09/2019] [ 197176] avipbb (avipbb) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avipbb.sys =>.Avira Operations GmbH & Co. KG® SR - Auto [05/11/2019] [ 591264] Avira Service Host (Avira.ServiceHost) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe =>.Avira Operations GmbH & Co. KG® SR - System [26/02/2019] [ 46704] avkmgr (avkmgr) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avkmgr.sys =>.Avira Operations GmbH & Co. KG® SR - Auto [26/02/2019] [ 89736] avnetflt (avnetflt) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avnetflt.sys =>.Avira Operations GmbH & Co. KG® O38 - TASK: {662FEFF6-EA2F-403A-8E8A-CF7859B25E34} [64Bits][\Avira_Antivirus_Systray] - (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2757672] =>.Avira Operations GmbH & Co. KG C:\WINDOWS\System32\Tasks\Avira_Antivirus_Systray - (.Avira Operations GmbH & Co. KG.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [/min] =>.Avira Operations GmbH & Co. KG O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe =>.Apple Inc.® O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® O4 - HKUS\.DEFAULT\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® O4 - HKUS\S-1-5-18\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation® O4 - HKLM\..\Wow6432Node\Run: [Avira SystrayStartTrigger] . (.Avira Operations GmbH & Co. KG - Avira.) -- C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe =>.Avira Operations GmbH & Co. KG® O4 - HKUS\S-1-5-21-3532920603-1982751957-2911084255-1001\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® O4 - HKUS\.DEFAULT\..\StartupApproved\Run: [CCleaner Monitoring] . (. - .) -- 0x020000000000000000000000 O4 - HKUS\S-1-5-18\..\StartupApproved\Run: [CCleaner Monitoring] . (. - .) -- 0x020000000000000000000000 O4 - HKUS\S-1-5-19\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000 O4 - HKUS\S-1-5-20\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000 [MD5.719F1998D74156F1CD404CCF677CB531] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [484768] [PID.3364] =>.Avira Operations GmbH & Co. KG® [MD5.A7D98CC99692F9F976410304FA0E9967] - (.Avira Operations GmbH & Co. KG - Avira Service Host.) -- C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [591264] [PID.4132] =>.Avira Operations GmbH & Co. KG® [MD5.719F1998D74156F1CD404CCF677CB531] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [484768] [PID.12572] =>.Avira Operations GmbH & Co. KG® [MD5.2734438AEF98ACB511642BE162C6A044] - (.Avira Operations GmbH & Co. KG - AntiVir shadow copy service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe [457784] [PID.932] =>.Avira Operations GmbH & Co. KG® [MD5.3913F6E386394C50B85FF2CED2EB04B0] - (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2757672] [PID.20764] =>.Avira Operations GmbH & Co. KG® [MD5.83BAFFA80B0282B75956D4AD065FC065] - (.Avira Operations GmbH & Co. KG - Avira.) -- C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [571728] [PID.7228] =>.Avira Operations GmbH & Co. KG® G2 - GCE: Preference [KLEIN Eliane][User Data\Default\Extensions] [flliilndjeohchalpbbcdekjklbdgfkk] Avira Operations GmbH & Co. KG =>.Avira Software P2 - EXT: (.Avira - Avira Browser Safety.) -- C:\Users\KLEIN Eliane\AppData\Roaming\Mozilla\Firefox\Profiles\3zyRNNiB.default\extensions\abs@avira.com =>.Avira [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:PCPrivacyShield2018 [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastBrowserAutoLaunch_8B431C6E1A7214644B0AE1C91A3554E5 [HKEY_USERS\S-1-5-21-3532920603-1982751957-2911084255-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:PCPrivacyShield2018 [HKEY_USERS\S-1-5-21-3532920603-1982751957-2911084255-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastBrowserAutoLaunch_8B431C6E1A7214644B0AE1C91A3554E5 [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:QuickTime Task HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\staticimgfarm.com HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ak.staticimgfarm.com [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:avgnt =>.Avira Software [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:Avira SystrayStartTrigger =>.Avira Software O42 - Logiciel: Avira Antivirus v15.0.1912.1683 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- Avira Antivirus =>.Avira Operations GmbH & Co. KG® O42 - Logiciel: Avira v1.2.139.5840 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {2F177249-7B33-4501-BBC8-3091F6079B35} =>.Avira Operations GmbH & Co. KG (Hidden) O42 - Logiciel: Avira v1.2.139.5840 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {8489ad9e-2c28-4aaf-97f7-d97424e9e4dc} =>.Avira Operations GmbH & Co. KG® HKLM\SOFTWARE\McAfee.com =>.McAfee Inc. HKLM\SOFTWARE\WOW6432Node\Avira =>.Avira HKLM\SOFTWARE\WOW6432Node\X-AVCSD =>.Avira Software HKCU\SOFTWARE\Avira =>.Avira HKCU\SOFTWARE\ESET =>.ESET HKU\.DEFAULT\SOFTWARE\Avira =>.Avira HKU\.DEFAULT\SOFTWARE\McAfee =>.McAfee Inc. HKU\S-1-5-21-3532920603-1982751957-2911084255-1001\SOFTWARE\Avira =>.Avira O43 - CFD: 08/07/2015 - [] D -- C:\Program Files (x86)\Avira =>.Avira Software O43 - CFD: 26/11/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira =>.Avira Software O43 - CFD: 03/01/2019 - [] D -- C:\ProgramData\Avira =>.Avira Software O43 - CFD: 01/01/2013 - [] D -- C:\ProgramData\McAfee =>.McAfee O43 - CFD: 08/04/2015 - [] D -- C:\Users\KLEIN Eliane\AppData\Roaming\Avira =>.Avira Software O43 - CFD: 11/06/2015 - [0] SHD -- C:\Users\KLEIN Eliane\AppData\Local\EmieBrowserModeList =>.ATTENTION O43 - CFD: 11/06/2015 - [0] SHD -- C:\Users\KLEIN Eliane\AppData\Local\EmieSiteList =>.ATTENTION O43 - CFD: 11/06/2015 - [0] SHD -- C:\Users\KLEIN Eliane\AppData\Local\EmieUserList =>.ATTENTION O43 - CFD: 11/06/2015 - [0] SHD -- C:\Users\KLEIN Eliane\AppData\LocalLow\EmieBrowserModeList =>.ATTENTION O43 - CFD: 11/06/2015 - [0] SHD -- C:\Users\KLEIN Eliane\AppData\LocalLow\EmieSiteList =>.ATTENTION O43 - CFD: 11/06/2015 - [0] SHD -- C:\Users\KLEIN Eliane\AppData\LocalLow\EmieUserList =>.ATTENTION O108 - CMH1: Shell Extension for Malware scanning [64Bits] - {45AC2688-0253-4ED8-97DE-B5370FA7D48A} . (.Avira Operations GmbH & Co. KG - AntiVirus context menu.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll =>.Avira Operations GmbH & Co. KG® O108 - CMH6: Shell Extension for Malware scanning [64Bits] - {45AC2688-0253-4ED8-97DE-B5370FA7D48A} . (.Avira Operations GmbH & Co. KG - AntiVirus context menu.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll =>.Avira Operations GmbH & Co. KG® O58 - SDL:2019/06/12 09:46:17 A . (.Avira Operations GmbH & Co. KG - Avira USB Feature Driver.) -- C:\WINDOWS\System32\drivers\avdevprot.sys [78936] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2019/02/26 17:46:09 A . (.Avira Operations GmbH & Co. KG - Avira Early Launch Anti-Malware Driver.) -- C:\WINDOWS\System32\drivers\avelam.sys [22336] =>.Microsoft® O58 - SDL:2019/12/07 07:49:42 A . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\WINDOWS\System32\drivers\avgntflt.sys [207784] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2019/09/27 16:59:02 A . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\WINDOWS\System32\drivers\avipbb.sys [197176] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2019/02/26 17:46:09 A . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) -- C:\WINDOWS\System32\drivers\avkmgr.sys [46704] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2019/02/26 17:46:09 A . (.Avira Operations GmbH & Co. KG - Avira WFP Network Driver.) -- C:\WINDOWS\System32\drivers\avnetflt.sys [89736] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2019/02/26 17:46:09 A . (.Avira Operations GmbH & Co. KG - Avira USB Filter Driver.) -- C:\WINDOWS\System32\drivers\avusbflt.sys [45472] =>.Avira Operations GmbH & Co. KG® O90 - PUC: "FD7EE11154CF7C04897A57A34CB621BF" [HKLM] . (.QuickTime 7.) -- C:\windows\Installer\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}\Installer.ico O90 - PUC: "942771F233B71054BB8C03196F70B953" [HKLM] . (.Avira.) =>.Avira Software [MD5.5B487AAB94793ADCFDF10F6C1F10F5B8] [WIS][2019/11/05 18:56:52] (.Avira Operations GmbH & Co. KG - Avira.) -- C:\WINDOWS\Installer\1483ca90.msi [4960516] =>.Avira Operations GmbH & Co. KG [MD5.9498B94351DAE84D294622EA61FB131B] [WIS][2011/08/31 11:54:52] (.McAfee.) -- C:\WINDOWS\Installer\224b7.msi [1448448] =>.McAfee HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{111EE7DF-FC45-40C7-98A7-753AC46B12FB} HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{111EE7DF-FC45-40C7-98A7-753AC46B12FB} C:\Program Files (x86)\QuickTime C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime C:\Users\KLEIN Eliane\AppData\Roaming\PC Privacy Shield 2018 C:\WINDOWS\Installer\119b08.msp C:\WINDOWS\Installer\1292d4cd.msp C:\WINDOWS\Installer\13bab198.msp C:\WINDOWS\Installer\1742b4f3.msp C:\WINDOWS\Installer\1a2b56a5.msp C:\WINDOWS\Installer\244260b8.msp C:\WINDOWS\Installer\25fea199.msp C:\WINDOWS\Installer\35ec856a.msp C:\WINDOWS\Installer\3a14fce3.msp C:\WINDOWS\Installer\3a775e51.msp C:\WINDOWS\Installer\3de46e7e.msp C:\WINDOWS\Installer\4c24f352.msp C:\WINDOWS\Installer\52385572.msp C:\WINDOWS\Installer\5c1b3d.msp C:\WINDOWS\Installer\5f408de7.msp C:\WINDOWS\Installer\66bd79d.msp C:\WINDOWS\Installer\7337d2c6.msp C:\WINDOWS\Installer\7c50a8a5.msp C:\WINDOWS\Installer\8116d5ce.msp C:\WINDOWS\Installer\81dddc35.msp C:\WINDOWS\Installer\85f6af51.msp C:\WINDOWS\Installer\86b7d851.msp C:\WINDOWS\Installer\90b645ba.msp HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\staticimgfarm.com HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ak.staticimgfarm.com EmptyPrefetch EmptyClsid