Script ZHPFix
EmptyFlash
EmptyTemp
EmptyCLSID
EmptyPrefetch
CreateRestorePoint
O23 - Service: DCIService (DCIService) . (.
O23 - Service: WC Assistant (WCAssistantService) . (.
SR - Auto   [24/07/2021] [ 3461040]  DCIService (DCIService) . (.
SR - Auto   [24/07/2021] [   22960]  WC Assistant (WCAssistantService) . (.
O4 - HKCU\..\Run: [Web Companion] . (.Lavasoft - Web Companion.) -- C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
O4 - HKUS\S-1-5-21-580550576-913536958-881648256-1001\..\Run: [Web Companion] . (.Lavasoft - Web Companion.) -- C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
[MD5.96C6B799DF47E5D4EE141CC207F9DA2F] - (. - SPWindowsService.) -- C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [22960] [PID.4664]
IE Restricted Site Good: webcompanion.com
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Web Companion
[HKEY_USERS\S-1-5-21-580550576-913536958-881648256-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Web Companion
O42 - Logiciel: Web Companion - (.Lavasoft.) [HKLM][64Bits] -- {a9c2cef6-5323-4a65-8a8b-e1f714f9e5ff}
HKU\S-1-5-21-580550576-913536958-881648256-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
HKCU\Software\Lavasoft\Web Companion
HKCU\Software\Local AppWizard-Generated Applications\Restoro
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion
HKLM\SOFTWARE\Lavasoft\Web Companion
HKLM\SOFTWARE\Restoro
HKCU\SOFTWARE\Restoro
HKU\S-1-5-21-580550576-913536958-881648256-1001\SOFTWARE\Restoro
HKLM\SYSTEM\CurrentControlSet\Services\DCIService
C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe
HKLM\SYSTEM\CurrentControlSet\Services\WCAssistantService
C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{a9c2cef6-5323-4a65-8a8b-e1f714f9e5ff}
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{a9c2cef6-5323-4a65-8a8b-e1f714f9e5ff}
HKU\S-1-5-21-580550576-913536958-881648256-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
HKCU\Software\Lavasoft\Web Companion
HKCU\Software\Local AppWizard-Generated Applications\Restoro
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion
HKLM\SOFTWARE\Lavasoft\Web Companion
C:\Program Files (x86)\lavasoft\web companion
C:\ProgramData\lavasoft\web companion
C:\Users\fract\AppData\Roaming\Lavasoft\Web Companion
C:\ProgramData\Application Data\lavasoft\web companion
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanion
[1B1EC21AE98AB29E1C15E384F1311011] [24/07/2021] (.Lavasoft Software Canada Inc..) - C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
[1B1EC21AE98AB29E1C15E384F1311011] [24/07/2021] (.Lavasoft Software Canada Inc..) - C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
[1B1EC21AE98AB29E1C15E384F1311011] [24/07/2021] (.Lavasoft Software Canada Inc..) - C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanionInstaller.exe
[1B1EC21AE98AB29E1C15E384F1311011] [24/07/2021] (.Lavasoft Software Canada Inc..) - C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe
HKCU\SOFTWARE\AvastAdSDK  =>.Avast Software s.r.o
HKCU\SOFTWARE\Avira  =>.Avira
HKCU\SOFTWARE\Lavasoft  =>.Lavasoft
HKU\S-1-5-21-580550576-913536958-881648256-1001\SOFTWARE\AvastAdSDK  =>.Avast Software s.r.o
HKU\S-1-5-21-580550576-913536958-881648256-1001\SOFTWARE\Avira  =>.Avira
O23 - Service: McAfee WebAdvisor (McAfee WebAdvisor) . (.McAfee, LLC - McAfee WebAdvisor(service).) - C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe  =>.McAfee, LLC®
SR - Auto   [26/10/2023] [  882136]  McAfee WebAdvisor (McAfee WebAdvisor) . (.McAfee, LLC.) - C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe  =>.McAfee, LLC®
[MD5.786DA7AE2B6CCFE4A6A15675EE687036] - (.McAfee, LLC - McAfee WebAdvisor(service).) -- C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [882136] [PID.11964]  =>.McAfee, LLC®
[MD5.12AC81D29928BF8B46E49A97AA9863C8] - (.McAfee, LLC - McAfee WebAdvisor(user level process).) -- C:\Program Files\McAfee\WebAdvisor\uihost.exe [855520] [PID.7640]  =>.McAfee, LLC®
O2 - BHO: McAfee WebAdvisor [64Bits] - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} . (.McAfee, LLC - McAfee WebAdvisor.) -- C:\Program Files\McAfee\WebAdvisor\x64\ieplugin.dll  =>.McAfee, LLC®
O42 - Logiciel: WebAdvisor par McAfee - (.McAfee, LLC.) [HKLM][64Bits] -- {35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}  =>.McAfee, LLC®
HKLM\SOFTWARE\McAfee  =>.McAfee Inc.
HKLM\SOFTWARE\WOW6432Node\McAfee NGI  =>.McAfee Inc.
HKLM\SOFTWARE\WOW6432Node\Lavasoft  =>.Lavasoft
HKCU\SOFTWARE\McAfee  =>.McAfee Inc.
HKCU\SOFTWARE\McAfeeDashboard  =>.McAfee Inc.
HKU\S-1-5-21-580550576-913536958-881648256-1001\SOFTWARE\McAfee  =>.McAfee Inc.
HKU\S-1-5-21-580550576-913536958-881648256-1001\SOFTWARE\McAfeeDashboard  =>.McAfee Inc.
O43 - CFD: 25/07/2021 - [] D -- C:\Program Files\McAfee  =>.McAfee
O43 - CFD: 03/06/2022 - [] D -- C:\ProgramData\McAfee  =>.McAfee
[7D9E9888D0F97A5432827A5E] [22/07/2022] (.McAfee, LLC.) - C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll  =>.McAfee, LLC
[7D9E9888D0F97A5432827A5E] [26/10/2023] (.McAfee, LLC.) - C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe  =>.McAfee, LLC
[7D9E9888D0F97A5432827A5E] [26/10/2023] (.McAfee, LLC.) - C:\Program Files\McAfee\WebAdvisor\uihost.exe  =>.McAfee, LLC
[7D9E9888D0F97A5432827A5E] [26/10/2023] (.McAfee, LLC.) - C:\Program Files\McAfee\WebAdvisor\Uninstaller.exe  =>.McAfee, LLC
O42 - Logiciel: Web Companion - (.Lavasoft.) [HKLM][64Bits] -- {a9c2cef6-5323-4a65-8a8b-e1f714f9e5ff}  =>PUP.Optional.LavasoftWebCompanion
HKCU\Software\Lavasoft\Web Companion  =>PUP.Optional.LavasoftWebCompanion
HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion  =>PUP.Optional.LavasoftWebCompanion
HKLM\SOFTWARE\Lavasoft\Web Companion  =>PUP.Optional.LavasoftWebCompanion