~ ZHPCleaner v2015.11.13.378 by Nicolas Coolman (2015/11/13)
~ Run by Daniel (Administrator) (14/11/2015 11:11:09)
~ Site : http://www.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Pas de fichier réseau
~ Type : Nettoyer
~ Report : C:\Users\Daniel\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Daniel\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Deactivate
~ Boot Mode : Normal (Normal boot)
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)


---\\ Service. (0)


---\\ Navigateur internet. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Fichier hôte. (1)
~ Le fichier hôte est légitime. (21)


---\\ Tâche planifiée. (3)
SUPPRIMÉ tâche: [AutoPico Daily Restart] [C:\Program Files\KMSpico\AutoPico.exe (Not File) ] =>HackTool.KMSpico
SUPPRIMÉ tâche: [SpeedUpMyPC Maintenance] [C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe (Not File) ] =>PUP.Optional.SpeedUpMyPC
SUPPRIMÉ tâche: [SpeedUpMyPC Startup] [C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe (Not File) ] =>PUP.Optional.SpeedUpMyPC


---\\ Explorateur ( Dossiers, Fichiers ). (21)
DEPLACÉ fichier: C:\Users\Daniel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\SpeedUpMyPC.lnk [Bad : C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe] =>.Superfluous.Uniblue
DEPLACÉ fichier: C:\Users\Public\Desktop\SpeedUpMyPC.lnk [Bad : C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe] =>.Superfluous.Uniblue
DEPLACÉ fichier: C:\Program Files\KMSpico\Service_KMS.exe [ - Service_KMS] =>HackTool.KMSpico
DEPLACÉ fichier: C:\Program Files\KMSpico\AutoPico.exe [ - AutoPico] =>HackTool.KMSpico
DEPLACÉ fichier: C:\WINDOWS\Tasks\SpeedUpMyPC Maintenance.job =>PUP.Optional.SpeedUpMyPC
DEPLACÉ fichier: C:\WINDOWS\Tasks\SpeedUpMyPC Startup.job =>PUP.Optional.SpeedUpMyPC
DEPLACÉ fichier: C:\WINDOWS\Prefetch\SPEEDUPMYPC.EXE-E9FC9CD7.pf =>PUP.Optional.SpeedUpMyPC
DEPLACÉ fichier: C:\ProgramData\Citrix\CLSK\Application Data\Uniblue\SpeedUpMyPC\_temp\ub.exe [Uniblue Systems Limited - SpeedUpMyPC Setup] =>.Superfluous.Uniblue
DEPLACÉ fichier: C:\Program Files\KMSpico\KMSELDI.exe [ - KMS GUI ELDI] =>HackTool.KMSpico
DEPLACÉ dossier: C:\Program Files (x86)\Uniblue =>.Superfluous.Uniblue
DEPLACÉ dossier: C:\Program Files\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier: C:\ProgramData\Browser =>PUP.Optional.SpeedBrowser
DEPLACÉ dossier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue =>.Superfluous.Uniblue
DEPLACÉ dossier: C:\Users\Daniel\AppData\Roaming\Uniblue =>.Superfluous.Uniblue
DEPLACÉ dossier: C:\Windows\Installer\MSI1AB5.tmp- =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI215B.tmp- =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI3A04.tmp- =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIA3B4.tmp- =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIC965.tmp- =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIE431.tmp- =>Empty


---\\ Base de Registres ( Clés, Valeurs, Données ). (21)
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Service KMSELDI [C:\Program Files\KMSpico\Service_KMS.exe (Not File)] =>HackTool.KMSpico
SUPPRIMÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\Service KMSELDI [C:\Program Files\KMSpico\Service_KMS.exe (Not File)] =>HackTool.KMSpico
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-2929760543-198568865-1541212242-1000\Software\PennyBee [] =>PUP.Optional.PaybyAds
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-2929760543-198568865-1541212242-1000\Software\PerforMax Cleaner [] =>PUP.Optional.PerforMaxCleaner
SUPPRIMÉ clé: HKCU\Software\PennyBee [] =>PUP.Optional.PaybyAds
SUPPRIMÉ clé: HKCU\Software\PerforMax Cleaner [] =>PUP.Optional.PerforMaxCleaner
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\SpeedUpMyPC [URL:SpeedUpMyPC Protocol] =>PUP.Optional.SpeedUpMyPC
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} [ITool] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KMSpico_is1 [KMSpico v9.1.3] =>HackTool.KMSpico
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Uniblue [] =>.Superfluous.Uniblue
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1 [Uniblue Systems Limited] =>.Superfluous.Uniblue
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{4733AC51-3476-4F30-99C5-4B99BE7398BE} [C:\Program Files\KMSpico\KMSELDI.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{0BD2ED45-A461-4BA3-83C2-9070DB0108BC} [C:\Program Files\KMSpico\KMSELDI.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{AC8B5894-C544-4299-8574-D699E6C11176} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{A20EF8DF-15FF-4C5B-A337-8EB140BAEE41} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{DBCC5248-B97D-49C5-A09C-F38D290FA56F} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{732C5AAF-3F98-4348-B246-9AD1E0944C9F} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{B3703E58-67E1-4B40-B375-680FB5CDB180} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{53C2C23E-D121-43C0-B5AC-09529F7ED8C8} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{C9CC3E78-6245-4A9E-BB27-6AD2B19EEA02} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{D48E82B1-1B0D-48D5-A5C0-6684F0464F9B} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico


---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent (Mozilla Firefox)
~ Ce navigateur est absent (Opera Software)


---\\ Statistiques
~ Items scannés : 310
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 46


~ End of clean in 0 minutes
===================
ZHPCleaner-[R]-14112015-11_11_41.txt
ZHPCleaner-[S]-14112015-11_00_03.txt
ZHPCleaner-[S]-14112015-11_10_41.txt