Script ZHPFix EmptyFlash EmptyTemp EmptyCLSID EmptyPrefetch CreateRestorePoint O4 - HKUS\S-1-5-19\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000 O4 - HKUS\S-1-5-20\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000 HKLM\SOFTWARE\POLICIES\Mozilla\Firefox HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\CLVDShellExt HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\CLVDShellExt HKLM\SOFTWARE\POLICIES\Mozilla\Firefox [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\winkey.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\winkey.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\avast_free_antivirus_setup_offline.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\avast_free_antivirus_setup_offline.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\RunSanDiskSecureAccess_Win.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\RunSanDiskSecureAccess_Win.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\winkey.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\winkey.exe.ApplicationCompany [HKU\S-1-5-21-1832536132-1699719009-4064222045-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\winkey.exe.FriendlyAppName [HKU\S-1-5-21-1832536132-1699719009-4064222045-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\winkey.exe.ApplicationCompany [HKU\S-1-5-21-1832536132-1699719009-4064222045-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\avast_free_antivirus_setup_offline.exe.FriendlyAppName [HKU\S-1-5-21-1832536132-1699719009-4064222045-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\avast_free_antivirus_setup_offline.exe.ApplicationCompany [HKU\S-1-5-21-1832536132-1699719009-4064222045-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\RunSanDiskSecureAccess_Win.exe.FriendlyAppName [HKU\S-1-5-21-1832536132-1699719009-4064222045-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\RunSanDiskSecureAccess_Win.exe.ApplicationCompany [HKU\S-1-5-21-1832536132-1699719009-4064222045-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\winkey.exe.FriendlyAppName [HKU\S-1-5-21-1832536132-1699719009-4064222045-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\winkey.exe.ApplicationCompany [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastUI.exe =>.Avast Software s.r.o [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:AvastUI.exe =>.Avast Software s.r.o HKLM\SOFTWARE\WOW6432Node\Avast Software =>.AVAST Software HKCU\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o HKCU\SOFTWARE\Browser Cleanup =>.Avast Software s.r.o HKU\.DEFAULT\SOFTWARE\Avast Software =>.AVAST Software HKU\.DEFAULT\SOFTWARE\Browser Cleanup =>.Avast Software s.r.o HKU\S-1-5-21-1832536132-1699719009-4064222045-1001\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o HKU\S-1-5-21-1832536132-1699719009-4064222045-1001\SOFTWARE\Browser Cleanup =>.Avast Software s.r.o [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\avast_free_antivirus_setup_offline.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\avast_free_antivirus_setup_offline.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1832536132-1699719009-4064222045-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\avast_free_antivirus_setup_offline.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1832536132-1699719009-4064222045-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\avast_free_antivirus_setup_offline.exe.FriendlyAppName =>.SUP.Orphan.MUICache O58 - SDL:2021/12/15 14:50:38 A . (...) -- C:\WINDOWS\System32\drivers\lpsport.sys [61304] =>.AVG Technologies CZ, s.r.o.® [266D333EDE17A8B472053E4FA3934572] [15/12/2021] (.AVG Technologies CZ, s.r.o..) - C:\WINDOWS\System32\drivers\lpsport.sys =>.AVG Technologies CZ, s.r.o.