Script ZHPFix EmptyFlash EmptyTemp EmptyCLSID EmptyPrefetch CreateRestorePoint O4 - HKLM\..\Run: [WindowsDefender] . (. - .) -- C:\Program Files\Windows Defender\MSASCuiL.exe (.Not File.) O4 - HKCU\..\Run: [AudialsNotifier] . (. - .) -- C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe (.Not File.) O4 - HKCU\..\Run: [GoogleDriveSync] . (. - .) -- C:\Program Files\Google\Drive\googledrivesync.exe (.Not File.) O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] . (. - .) -- C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe (.Not File.) O4 - HKLM\..\Wow6432Node\Run: [Nero BackItUp] . (. - .) -- C:\Program Files (x86)\Nero\Nero 2018\Nero BackItup\BackItUp.exe (.Not File.) O4 - HKUS\S-1-5-21-2322450934-1859837209-1215402500-1001\..\Run: [AudialsNotifier] . (. - .) -- C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe (.Not File.) O4 - HKUS\S-1-5-21-2322450934-1859837209-1215402500-1001\..\Run: [GoogleDriveSync] . (. - .) -- C:\Program Files\Google\Drive\googledrivesync.exe (.Not File.) O4 - HKUS\S-1-5-21-2322450934-1859837209-1215402500-1001\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] . (. - .) -- C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe (.Not File.) E:\55 SUPER LOGICIEL\DriverUpdate-setup.exe [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\55 SUPER LOGICIEL\DriverUpdate-setup.exe.FriendlyAppName =>.SUP.SlimWareUtilities [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\55 SUPER LOGICIEL\DriverUpdate-setup.exe.ApplicationCompany =>.SUP.SlimWareUtilities [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\aquitaine\AppData\Roaming\ZHP\ZHPCleaner.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\aquitaine\AppData\Roaming\ZHP\ZHPCleaner.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Malwarebytes\Anti-Malware\mbuns.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Malwarebytes\Anti-Malware\mbuns.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\58 SUPER PAPIERS IMPORTANT\Videos\Firefox Installer.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\58 SUPER PAPIERS IMPORTANT\Videos\Firefox Installer.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Norton Security\Engine\22.21.8.62\uiStub.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Norton Security\Engine\22.21.8.62\uiStub.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Norton Security\Engine\22.21.5.44\NortonSecurity.exe [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\aquitaine\Downloads\ZHPFix2.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\aquitaine\Downloads\ZHPFix2.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\aquitaine\Downloads\NRnR(1).exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\aquitaine\Downloads\NRnR(1).exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\aquitaine\Downloads\NRnR.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\aquitaine\Downloads\NRnR.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.21.9.25\InstStub.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.21.9.25\InstStub.exe.ApplicationCompany [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\55 SUPER LOGICIEL\DriverUpdate-setup.exe.FriendlyAppName =>.SUP.SlimWareUtilities [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\55 SUPER LOGICIEL\DriverUpdate-setup.exe.ApplicationCompany =>.SUP.SlimWareUtilities [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\aquitaine\AppData\Roaming\ZHP\ZHPCleaner.exe.FriendlyAppName [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE.FriendlyAppName [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE.ApplicationCompany [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\aquitaine\AppData\Roaming\ZHP\ZHPCleaner.exe.ApplicationCompany [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Malwarebytes\Anti-Malware\mbuns.exe.FriendlyAppName [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Malwarebytes\Anti-Malware\mbuns.exe.ApplicationCompany [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\58 SUPER PAPIERS IMPORTANT\Videos\Firefox Installer.exe.FriendlyAppName [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\58 SUPER PAPIERS IMPORTANT\Videos\Firefox Installer.exe.ApplicationCompany [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe.FriendlyAppName [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe.ApplicationCompany [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Norton Security\Engine\22.21.8.62\uiStub.exe.FriendlyAppName [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Norton Security\Engine\22.21.8.62\uiStub.exe.ApplicationCompany [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Norton Security\Engine\22.21.5.44\NortonSecurity.exe [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\aquitaine\Downloads\ZHPFix2.exe.FriendlyAppName [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\aquitaine\Downloads\ZHPFix2.exe.ApplicationCompany [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\aquitaine\Downloads\NRnR(1).exe.FriendlyAppName [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\aquitaine\Downloads\NRnR(1).exe.ApplicationCompany [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\aquitaine\Downloads\NRnR.exe.FriendlyAppName [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\aquitaine\Downloads\NRnR.exe.ApplicationCompany [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.21.9.25\InstStub.exe.FriendlyAppName [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.21.9.25\InstStub.exe.ApplicationCompany C:\WINDOWS\capicom.dll SS - Demand [15/12/2020] [ 335416] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Inc.® HKCU\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o HKCU\SOFTWARE\Bitdefender Device Management =>.Bitdefender HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\SOFTWARE\Bitdefender Device Management =>.Bitdefender HKLM\SOFTWARE\BitdefenderSavedSettings =>.RSA Security HKU\.DEFAULT\SOFTWARE\Bitdefender =>.Bitdefender HKU\.DEFAULT\SOFTWARE\SetID =>.Bitdefender O43 - CFD: 24/08/2017 - [] D -- C:\ProgramData\BDLogging =>.Bitdefender O43 - CFD: 29/10/2017 - [0] D -- C:\Users\aquitaine\AppData\Roaming\QuickScan =>.Bitdefender P2 - EXT FILE: (.Avira Software.) -- C:\Program Files\Mozilla Firefox\browser\features\doh-rollout@mozilla.org.xpi [Unsigned] =>.Avira Software P2 - EXT FILE: (.Avira Software.) -- C:\Program Files\Mozilla Firefox\browser\features\formautofill@mozilla.org.xpi [Unsigned] =>.Avira Software P2 - EXT FILE: (.Avira Software.) -- C:\Program Files\Mozilla Firefox\browser\features\pictureinpicture@mozilla.org.xpi [Unsigned] =>.Avira Software P2 - EXT FILE: (.Avira Software.) -- C:\Program Files\Mozilla Firefox\browser\features\screenshots@mozilla.org.xpi [Unsigned] =>.Avira Software P2 - EXT FILE: (.Avira Software.) -- C:\Program Files\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi [Unsigned] =>.Avira Software P2 - EXT FILE: (.Avira Software.) -- C:\Program Files\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi [Unsigned] =>.Avira Software HKCU\SOFTWARE\Norton =>.Symantec Corporation HKCU\SOFTWARE\AppDataLow\Software\Norton =>.Symantec Corporation HKU\.DEFAULT\SOFTWARE\Norton =>.Symantec Corporation HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\SOFTWARE\Norton =>.Symantec Corporation O43 - CFD: 25/10/2021 - [] D -- C:\ProgramData\Norton =>.Symantec Corporation O43 - CFD: 24/10/2021 - [] D -- C:\ProgramData\NortonInstaller =>.Symantec O43 - CFD: 05/10/2021 - [] D -- C:\Users\aquitaine\AppData\LocalLow\Norton =>.Symantec Corporation O69 - SBI: SearchScopes [HKCU] [64Bits]{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} - (Norton Safe Search) - http://nortonsafe.search.ask.com/ =>.Symantec Corporation [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Norton Security\Engine\22.21.8.62\uiStub.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Norton Security\Engine\22.21.8.62\uiStub.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Norton Security\Engine\22.21.5.44\NortonSecurity.exe =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.21.9.25\InstStub.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Norton Security\Engine\22.21.8.62\uiStub.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Norton Security\Engine\22.21.8.62\uiStub.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\Norton Security\Engine\22.21.5.44\NortonSecurity.exe =>.SUP.Orphan.MUICache [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.21.9.25\InstStub.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.21.9.25\InstStub.exe.ApplicationCompany =>.SUP.Orphan.MUICache C:\WINDOWS\capicom.dll =>Adware.Suspect [07CDEBAB5B7E39F2BC726A75B9BC4307] [24/10/2021] (.NortonLifeLock Inc..) - C:\Users\aquitaine\Downloads\NRnR(2).exe =>.NortonLifeLock Inc. [07CDEBAB5B7E39F2BC726A75B9BC4307] [24/10/2021] (.NortonLifeLock Inc..) - C:\Users\aquitaine\Music\Downloads\NRnR(1).exe =>.NortonLifeLock Inc. [07CDEBAB5B7E39F2BC726A75B9BC4307] [25/10/2021] (.NortonLifeLock Inc..) - C:\Users\aquitaine\Music\Downloads\NRnR(3).exe =>.NortonLifeLock Inc. [07CDEBAB5B7E39F2BC726A75B9BC4307] [27/09/2021] (.NortonLifeLock Inc..) - C:\Users\aquitaine\Music\Downloads\TRES DIVERS DS TELECHARGEMENT\NRnR.exe =>.NortonLifeLock Inc. [0A1BF751AC034F7F37541B804CDAF1B7] [24/10/2021] (.NortonLifeLock Inc..) - C:\Users\aquitaine\Music\Downloads\N360Downloader(1).exe =>.Not verified [0A1BF751AC034F7F37541B804CDAF1B7] [24/10/2021] (.NortonLifeLock Inc..) - C:\Users\aquitaine\Music\Downloads\N360Downloader(2).exe =>.Not verified [0A1BF751AC034F7F37541B804CDAF1B7] [24/10/2021] (.NortonLifeLock Inc..) - C:\Users\aquitaine\Music\Downloads\N360Downloader.exe =>.Not verified [0A9AF08A37D0C2AE0948331F8B8A0F80] [24/10/2021] (.NortonLifeLock Inc..) - C:\Users\aquitaine\Music\Downloads\NRnR.exe =>.NortonLifeLock Inc. [0A9AF08A37D0C2AE0948331F8B8A0F80] [25/10/2021] (.NortonLifeLock Inc..) - C:\Users\aquitaine\Music\Downloads\NRnR(2).exe =>.NortonLifeLock Inc. O43 - CFD: 24/02/2018 - [] D -- C:\ProgramData\McAfee =>.McAfee HKLM\SOFTWARE\WOW6432Node\KasperskyLab =>.Kaspersky Labs HKCU\SOFTWARE\KasperskyLab =>.Kaspersky Labs HKCU\SOFTWARE\KasperskyLabSetup =>.Kaspersky Labs HKCU\SOFTWARE\Lavasoft =>.Lavasoft HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\SOFTWARE\KasperskyLab =>.Kaspersky Labs HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\SOFTWARE\KasperskyLabSetup =>.Kaspersky Labs HKU\S-1-5-21-2322450934-1859837209-1215402500-1001\SOFTWARE\Lavasoft =>.Lavasoft O43 - CFD: 01/01/2019 - [] D -- C:\ProgramData\Kaspersky Lab Setup Files =>.Kaspersky Lab HKLM\SOFTWARE\WOW6432Node\Lavasoft =>.Lavasoft HKU\.DEFAULT\SOFTWARE\Lavasoft =>.Lavasoft O43 - CFD: 21/03/2018 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Lavasoft =>.Lavasoft