Script ZHPFix EmptyFlash EmptyTemp EmptyCLSID EmptyPrefetch CreateRestorePoint O4 - HKCU\..\Run: [HP ENVY 5000 (NET)] . (. - .) -- 1. O4 - HKUS\S-1-5-21-3527805858-1612855701-3656731452-1001\..\Run: [HP ENVY 5000 (NET)] . (. - .) -- 1. [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AutoHideDesktopIcons [HKEY_USERS\S-1-5-21-3527805858-1612855701-3656731452-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AutoHideDesktopIcons HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\PrivaZer HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\PrivaZer HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\WinRAR HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\WinRAR32 HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\PrivaZer C:\Users\gerar\AppData\Local\Google\Chrome\User Data\Default\File System\000 C:\Users\gerar\AppData\Local\Google\Chrome\User Data\Default\File System\001 C:\Users\gerar\AppData\Local\Google\Chrome\User Data\Default\File System\002 C:\Users\gerar\AppData\Local\Google\Chrome\User Data\Default\File System\003 C:\Users\gerar\AppData\Local\Google\Chrome\User Data\Default\File System\004 C:\Users\gerar\AppData\Local\Google\Chrome\User Data\Default\File System\005 [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\PC Gilles\MBSetup.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\PC Gilles\MBSetup.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\AUTORUN.EXE.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\AUTORUN.EXE.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Programmes Ajoutes\Thunderbird\thunderbird.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Programmes Ajoutes\Thunderbird\thunderbird.exe.ApplicationCompany [HKU\S-1-5-21-3527805858-1612855701-3656731452-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\PC Gilles\MBSetup.exe.FriendlyAppName [HKU\S-1-5-21-3527805858-1612855701-3656731452-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\PC Gilles\MBSetup.exe.ApplicationCompany [HKU\S-1-5-21-3527805858-1612855701-3656731452-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\AUTORUN.EXE.FriendlyAppName [HKU\S-1-5-21-3527805858-1612855701-3656731452-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\AUTORUN.EXE.ApplicationCompany [HKU\S-1-5-21-3527805858-1612855701-3656731452-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Programmes Ajoutes\Thunderbird\thunderbird.exe.FriendlyAppName [HKU\S-1-5-21-3527805858-1612855701-3656731452-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Programmes Ajoutes\Thunderbird\thunderbird.exe.ApplicationCompany HKU\S-1-5-21-3527805858-1612855701-3656731452-1001\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o HKU\S-1-5-21-3527805858-1612855701-3656731452-1001\SOFTWARE\Avira =>.Avira [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:Avira SystrayStartTrigger =>.Avira Software [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:avgnt =>.Avira Software HKLM\SOFTWARE\WOW6432Node\Avira =>.Avira HKU\.DEFAULT\SOFTWARE\Avira =>.Avira HKCU\SOFTWARE\AvastAdSDK HKCU\SOFTWARE\Avira O87 - FAEL: "{96917D0C-D5C6-4FB4-8FD0-40A4B7365DA1}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe [Unsigned] (.not file.) =>.SUP.Orphan O87 - FAEL: "{863DFFD1-CB0C-47BA-971B-C8FCB267127E}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe [Unsigned] (.not file.) =>.SUP.Orphan O87 - FAEL: "{C8AFE95B-5C99-43F7-A1D9-FB76AB7C05FF}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe [Unsigned] (.not file.) =>.SUP.Orphan O90 - PUC: "3C956F3E639712348B68D45A72AD27EF" [HKLM] . (.Avira.) =>.Avira Software