~ ZHPCleaner v2017.10.10.179 by Nicolas Coolman (2017/10/10) ~ Run by Talia (Administrator) (11/10/2017 20:27:19) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Certificate ZHPCleaner: Legal ~ Type : Scan ~ Report : C:\Users\Talia\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\Talia\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Home, 64-bit (Build 15063) ---\\ Services (0) ~ No malicious or unnecessary items found. ---\\ Browser internet (0) ~ No malicious or unnecessary items found. ---\\ Hosts file (1) ~ The hosts file is legitimate (21) ---\\ Scheduled automatic tasks. (0) ~ No malicious or unnecessary items found. ---\\ Explorer ( File, Folder) (3) FOUND folder: C:\Program Files (x86)\QuickTime =>Riskware.QuickTime FOUND folder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime =>Riskware.QuickTime FOUND folder: C:\Users\Talia\AppData\Local\CRE =>.SUP.Conduit ---\\ Registry ( Key, Value, Data) (3) FOUND key: HKEY_USERS\S-1-5-21-4199840147-4065578401-2946167339-1004\SOFTWARE\eSupport.com [] =>PUP.Optional.eSupport FOUND key: HKCU\Software\eSupport.com [] =>PUP.Optional.eSupport FOUND key: [X64] HKLM\SOFTWARE\Classes\Applications\mediaplayerplus.exe [] =>Adware.CrossRider ---\\ Summary of the elements found (4) https://nicolascoolman.eu/2017/01/15/riskware-quicktime/ =>Riskware.QuickTime https://nicolascoolman.eu/2017/02/06/superfluous-conduit/ =>.SUP.Conduit https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.eSupport https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/ =>Adware.CrossRider ---\\ Result of repair ~ Any repair made ~ Browser not found (Google Chrome) ~ Browser not found (Opera Software) ---\\ Statistics ~ Items scanned : 92978 ~ Items found : 6 ~ Items cancelled : 0 ~ Items repaired : 0 ~ End of search in 00h08mn32s ~==================== ZHPCleaner-[S]-11102017-20_35_51.txt