~ ZHPCleaner v2017.8.15.140 by Nicolas Coolman (2017/08/15)
~ Run by Micaele (Administrator)  (19/08/2017 10:02:15)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Legal
~ Type : Reparo
~ Report : C:\Users\Micaele\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Micaele\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home Single Language, 64-bit  (Build 14393)


---\\  Serviços (1)
PAROU : WeatherLiteService  =>PUP.Optional.WeatherTool


---\\  Navegadores de Internet (0)
~ Nenhum ítem malicioso o desnecessários foi encontrado.


---\\  Arquivo hosts (1)
~ O arquivo hosts é legítimo (63)


---\\  Tarefas automáticas agendadas. (0)
~ Nenhum ítem malicioso o desnecessários foi encontrado.


---\\  Explorer ( Arquivos, Pastas) (12)
MOVIDO pasta: C:\Program Files (x86)\WeatherTool\2.0.1.5000183\WeatherService.exe [Copyright (C) 2015 - Weather Lite Service]  =>PUP.Optional.WeatherTool
MOVIDO pasta**: C:\Windows\AutoKMS\AutoKMS.exe [CODYQX4 - AutoKMS]  =>HackTool.AutoKMS
MOVIDO pasta**: C:\Windows\AutoKMS\AutoKMS.log    =>HackTool.AutoKMS
MOVIDO arquivo^: C:\Program Files (x86)\WeatherTool  =>PUP.Optional.WeatherTool
MOVIDO arquivo^: C:\Program Files\ByteFence  =>.SUP.ByteFence
MOVIDO arquivo*: C:\ProgramData\Microsoft Toolkit  =>HackTool.AutoKMS
MOVIDO arquivo*: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ByteFence Anti-Malware  =>.SUP.ByteFence
MOVIDO arquivo*: C:\WINDOWS\AutoKMS  =>HackTool.AutoKMS
MOVIDO arquivo*: C:\WINDOWS\System32\config\systemprofile\AppData\Roaming\WeatherTool  =>PUP.Optional.WeatherTool
MOVIDO arquivo*: C:\Users\Micaele\AppData\Roaming\Solvusoft  =>.SUP.Solvusoft
MOVIDO arquivo*: C:\Users\Micaele\AppData\Roaming\WeatherTool  =>PUP.Optional.WeatherTool
MOVIDO arquivo: C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Roaming\WeatherTool  =>PUP.Optional.WeatherTool


---\\  Registro ( Chaves, Valores, Dados ) (20)
SUPRIMIDO dados: HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8d9f5b78-3eae-4233-83bd-bbab4767e52d}\\DhcpNameServer [Bad : 187.36.192.33 187.36.192.28]  =>Hijacker.Browser
SUPRIMIDO chave*: HKLM\SYSTEM\CurrentControlSet\Services\ByteFenceService [C:\Program Files\ByteFence\ByteFenceService.exe (Not File)]  =>.SUP.ByteFence
SUPRIMIDO chave*: HKLM\SYSTEM\CurrentControlSet\Services\WeatherLiteService [C:\Program Files (x86)\WeatherTool\2.0.1.5000183\WeatherService.exe (Not File)]  =>PUP.Optional.WeatherTool
SUPRIMIDO chave*: HKEY_USERS\S-1-5-21-14380496-3129006202-516063525-1001\SOFTWARE\WeatherTool []  =>PUP.Optional.WeatherTool
SUPRIMIDO chave: HKCU\Software\WeatherTool []  =>PUP.Optional.WeatherTool
SUPRIMIDO chave*: HKCU\Software\csastats []  =>Adware.InstallCore
SUPRIMIDO chave*: HKCU\Software\ProductSetup []  =>Adware.InstallCore
SUPRIMIDO chave*: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\ByteFenceService []  =>.SUP.ByteFence
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\ByteFence []  =>.SUP.ByteFence
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\DtsEncodeTools []  =>PUP.Optional.WeatherTool
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\WeatherTool []  =>PUP.Optional.WeatherTool
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASAPI32 []  =>.SUP.ByteFence
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASMANCS []  =>.SUP.ByteFence
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WeatherTool [ShenZhen Qianhailewang Technology Co,.Ltd]  =>PUP.Optional.WeatherTool
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\ByteFence []  =>.SUP.ByteFence
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ByteFence [Byte Technologies LLC]  =>.SUP.ByteFence
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ByteFenceScan_RASAPI32 []  =>.SUP.ByteFence
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ByteFenceScan_RASMANCS []  =>.SUP.ByteFence
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\bytefenceupdater-csb_RASAPI32 []  =>.SUP.ByteFence
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\bytefenceupdater-csb_RASMANCS []  =>.SUP.ByteFence


---\\  Resumo dos elementos encontrados na sua estação de trabalho (6)
https://www.nicolascoolman.com/fr/pup-optional-weathertool  =>PUP.Optional.WeatherTool
https://nicolascoolman.eu/2017/02/02/hacktool-autokms/  =>HackTool.AutoKMS
https://nicolascoolman.eu/2017/03/13/superfluous-bytefence/  =>.SUP.ByteFence
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.Solvusoft
https://nicolascoolman.eu/2017/02/02/hijacker-browser-2/  =>Hijacker.Browser
https://nicolascoolman.eu/2017/03/12/adware-installcore-2/  =>Adware.InstallCore


---\\  Dodatkowe oczyszczenie. (22)
~ Chave de registro Tracing Supprimido (22)
~ Remover os relatórios antigos ZHPCleaner. (0)


---\\ Resultado de reparação
Reparação efectuada com sucesso
~ Este navegador está faltando ! (Mozilla Firefox)
~ Este navegador está faltando ! (Opera Software)
~ O sistema foi reiniciado.


---\\ Estatísticas
~ Items scan : 756
~ Items encontrado : 0
~ items cancelados : 0
~ Items réparo : 34


~ End of clean in 00h10mn18s
~====================
ZHPCleaner-[R]-19082017-10_12_33.txt
ZHPCleaner-[S]-19082017-09_56_13.txt