~ ZHPCleaner v2016.3.13.40 by Nicolas Coolman (2016/03/13)
~ Run by hax (Administrator)  (13/03/2016 14:50:25)
~ Site : http://www.nicolascoolman.com
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Riparare
~ Report : C:\Users\hax\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\hax\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 8.1 Pro N, 32-bit  (Build 9600)


---\\  Servizi (0)


---\\  Browser Internet (0)
~ Nessun elemento malevolo o inutili trovato.


---\\  File hosts (3)
SOSTITUITO: 205.199.44.156 registeridm.com
SOSTITUITO: 205.199.44.16 registeridm.com
Numeri di redirect trovate 2/25


---\\  Operazioni pianificate automatiche. (0)
~ Nessun elemento malevolo o inutili trovato.


---\\  Esploratore ( File, Cartelle) (7)
SPOSTATO file: D:\KMSpico\Service_KMS.exe [@ByELDI - Service_KMS]  =>HackTool.KMSpico
SPOSTATO file: D:\KMSpico\WinDivert.sys [Basil Projects - WinDivert network packet capture and (re)in]  =>HackTool.KMSpico
SPOSTATO file: C:\Windows\System32\Tasks\060184C3-9766-46a0-B258-F4518A0B2633    =>PUP.Optional.CrossRider
SPOSTATO file: C:\Windows\SECOH-QAD.exe    =>HackTool.KMSpico
SPOSTATO file: D:\KMSpico\KMSELDI.exe [@ByELDI - KMS GUI ELDI]  =>HackTool.KMSpico
SPOSTATO file: D:\KMSpico\AutoPico.exe [@ByELDI - AutoPico]  =>HackTool.KMSpico
SPOSTATO cartelle: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico  =>HackTool.KMSpico


---\\  Registro ( Chiavi, Valori, Dati ) (15)
ELIMINATO chiave*: HKLM\SYSTEM\CurrentControlSet\Services\Service KMSELDI [D:\KMSpico\Service_KMS.exe (Not File)]  =>HackTool.KMSpico
ELIMINATO chiave: HKLM\SYSTEM\CurrentControlSet\Services\Service KMSELDI [D:\KMSpico\Service_KMS.exe (Not File)]  =>HackTool.KMSpico
ELIMINATO chiave*: HKLM\SYSTEM\CurrentControlSet\Services\WinDivert1.1 [D:\KMSpico\WinDivert.sys (Not File)]  =>HackTool.KMSpico
ELIMINATO chiave*: HKLM\SOFTWARE\DtsEncodeTools []  =>PUP.Optional.WeatherTool
ELIMINATO chiave*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KMSpico_is1 [KMSpico v9.3.1]  =>HackTool.KMSpico
ELIMINATO valore: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{28A19241-47F7-41F1-8012-68DCA075F458} [D:\KMSpico\KMSELDI.exe]  =>HackTool.KMSpico
ELIMINATO valore: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{9CA926DB-E81F-4CF2-91AE-667709FD6707} [D:\KMSpico\KMSELDI.exe]  =>HackTool.KMSpico
ELIMINATO valore: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{C7E48DDC-4676-48E1-9E95-676B8408B6D0} [D:\KMSpico\Service_KMS.exe]  =>HackTool.KMSpico
ELIMINATO valore: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{870875F2-1C6B-4EAE-88AF-E054E5402558} [D:\KMSpico\Service_KMS.exe]  =>HackTool.KMSpico
ELIMINATO valore: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{12F4118F-98EF-4C7C-9F13-B9EC58D348F3} [D:\KMSpico\AutoPico.exe]  =>HackTool.KMSpico
ELIMINATO valore: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{19D5A636-E3AC-4853-8A6B-D8801DB1BAA5} [D:\KMSpico\AutoPico.exe]  =>HackTool.KMSpico
ELIMINATO valore: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{FCB0DD93-99AA-4B42-93EF-CCB99C796D82} [D:\KMSpico\Service_KMS.exe]  =>HackTool.KMSpico
ELIMINATO valore: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{AF8007F2-D6A4-4208-A95A-613D2C21E5BF} [D:\KMSpico\Service_KMS.exe]  =>HackTool.KMSpico
ELIMINATO valore: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{B7CD9EBD-E1A5-4EF8-BC85-E123B9BC2BB1} [D:\KMSpico\AutoPico.exe]  =>HackTool.KMSpico
ELIMINATO valore: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{62A908E5-9724-4345-B816-9F533839F7C7} [D:\KMSpico\AutoPico.exe]  =>HackTool.KMSpico


---\\  Riepilogo dei elementi trovato sulla workstation (3)
http://www.nicolascoolman.fr/?p=989  =>HackTool.KMSpico
http://www.nicolascoolman.fr/?p=180  =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/pup-optional-weathertool  =>PUP.Optional.WeatherTool


---\\  Borrar otro. (14)
~ Chiave di registro Tracing éliminati (14)
~ Rimuovi vecchi report ZHPCleaner. (0)


---\\ Risultato di riparazione
~ Riparazione effettuata con successo
~ Browser non trovato (Google Chrome)
~ Browser non trovato (Mozilla Firefox)
~ Browser non trovato (Opera Software)


---\\ Statistiche
~ Elementi analizzati : 238
~ Elementi trovati : 2
~ Elementi cancellati : 0
~ Elementi riparati : 23


~ End of clean in 00h00mn19s
===================
ZHPCleaner-[R]-13032016-14_50_44.txt
ZHPCleaner-[S]-13032016-14_50_00.txt