~ ZHPCleaner v2016.12.24.222 by Nicolas Coolman (2016/12/24)
~ Run by Tarik (Administrator) (11/01/2017 22:13:52)
~ Web: https://www.nicolascoolman.com
~ Blog: https://www.anti-malware.top
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version :
~ Type : Nettoyer
~ Report : C:\Users\Tarik\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Tarik\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 7 Professional, 64-bit Service Pack 1 (Build 7601)


---\\ Service. (0)


---\\ Navigateur internet. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Fichier hôte. (1)
~ Le fichier hôte est légitime. (13)


---\\ Tâche planifiée. (1)
SUPPRIMÉ tâche: [AutoKMS] [C:\Windows\AutoKMS\AutoKMS.exe (Not File) ] =>HackTool.AutoKMS


---\\ Explorateur ( Dossiers, Fichiers ). (34)
DEPLACÉ fichier: C:\Program Files\KMSpico\Service_KMS.exe [ - Service_KMS] =>HackTool.KMSpico
DEPLACÉ fichier: C:\Windows\AutoKMS\AutoKMS.exe [CODYQX4 - AutoKMS] =>HackTool.AutoKMS
DEPLACÉ fichier: C:\Windows\Installer\wix{0F48C84E-8DFE-48DB-A93F-AB122AAD616D}.SchedServiceConfig.rmi =>.Superfluous.Empty
DEPLACÉ fichier: C:\Windows\Installer\wix{B6DCCCD3-520D-4485-B642-FCC136CE12C3}.SchedServiceConfig.rmi =>.Superfluous.Empty
DEPLACÉ fichier: C:\Windows\AutoKMS\AutoKMS.log =>HackTool.AutoKMS
DEPLACÉ fichier: C:\Program Files\KMSpico\KMSELDI.exe [ - KMS GUI ELDI] =>HackTool.KMSpico
DEPLACÉ fichier: C:\Program Files\KMSpico\AutoPico.exe [ - AutoPico] =>HackTool.KMSpico
DEPLACÉ dossier: C:\Program Files\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier: C:\ProgramData\KMSAutoS =>HackTool.WinActivator
DEPLACÉ dossier: C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS
DEPLACÉ dossier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier: C:\Windows\AutoKMS =>HackTool.AutoKMS
DEPLACÉ dossier: C:\Windows\System32\config\systemprofile\AppData\Local\CrashRpt =>.Superfluous.CrashReports
DEPLACÉ dossier: C:\Windows\System32\config\systemprofile\AppData\Local\LavasoftTcpService =>PUP.Optional.LavasoftWebCompanion
DEPLACÉ dossier: C:\Users\Tarik\AppData\Local\CrashRpt =>.Superfluous.CrashReports
DEPLACÉ dossier: C:\Users\Tarik\AppData\Local\MSfree Inc =>HackTool.WinActivator
DEPLACÉ dossier: C:\Users\Tarik\AppData\Local\PackageAware =>PUP.Optional.BearShare
DEPLACÉ dossier: C:\Users\Tarik\AppData\Local\Popcorn-Time-CE =>.Superfluous.PopcornTime
DEPLACÉ dossier: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\CrashRpt =>.Superfluous.CrashReports
DEPLACÉ dossier: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\LavasoftTcpService =>PUP.Optional.LavasoftWebCompanion
DEPLACÉ dossier: C:\Program Files (x86)\QuickTime =>Riskware.QuickTime
DEPLACÉ dossier: C:\ProgramData\Microsoft\Blend =>Adware.Suspect
DEPLACÉ dossier: C:\Windows\Installer\MSI2E05.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI30D5.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI3D34.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI3DA0.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI5F7D.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI91CB.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI9600.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI9814.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI9AF2.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI9B3D.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI9DB1.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIFB33.tmp- =>.Superfluous.Empty


---\\ Base de Registres ( Clés, Valeurs, Données ). (23)
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Service KMSELDI [C:\Program Files\KMSpico\Service_KMS.exe (Not File)] =>HackTool.KMSpico
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-312584841-1094485216-218829181-1000\SOFTWARE\APN PIP [] =>.Superfluous.Conduit
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-312584841-1094485216-218829181-1000\SOFTWARE\Distromatic [] =>PUP.Optional.AlexaTB
SUPPRIMÉ clé: HKCU\Software\APN PIP [] =>.Superfluous.Conduit
SUPPRIMÉ clé: HKCU\Software\Distromatic [] =>PUP.Optional.AlexaTB
SUPPRIMÉ clé*: HKCU\Software\AppDataLow\Software\WinToFlash Suggestor [] =>PUP.Optional.WinToFlash
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi [ScriptHelperApi Class] =>Toolbar.Agent
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1 [ScriptHelperApi Class] =>Toolbar.Agent
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} [secman] =>PUP.Optional.Camec
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\KMService [] =>PUP.Optional.Office
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KMSpico_is1 [KMSpico v9.2.3] =>HackTool.KMSpico
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\PIP [] =>Toolbar.Ask
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} [secman] =>PUP.Optional.Camec
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{F20936B2-EB69-4BEB-B996-C955215BF381} [C:\Program Files\KMSpico\KMSELDI.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{085C1504-B910-4638-A8FC-049901D7D58B} [C:\Program Files\KMSpico\KMSELDI.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{1887425A-1F30-49F4-BF3C-1DA69ADB3FE7} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{FE24C69E-C1FE-4DC2-89F1-7473F200E04E} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{982651A3-AB8A-41D9-A3A9-79E1F3F39D9A} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{6ADBF0A6-74B7-488A-9986-7786B76A6207} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{47D60DC1-3EF2-49B9-A38B-CEE7707DDE5A} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{E4DB4E7A-C3A4-4F4F-A57C-93D9A24401A4} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{61669B71-734F-4317-82DF-08A7E487C411} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{87BF6448-6524-4798-A197-CCBBF9DD94B3} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico


---\\ Récapitulatif des éléments trouvés sur votre station. (17)
https://www.anti-malware.top/2016/05/04/hacktool-autokms/ =>HackTool.AutoKMS
https://www.anti-malware.top/2016/09/08/hacktool-kmspico/ =>HackTool.KMSpico
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.Empty
https://www.nicolascoolman.com/fr/hijacker-windows/ =>HackTool.WinActivator
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.CrashReports
https://www.anti-malware.top/2016/04/26/superfluous-lavasoftwebcompanion/ =>PUP.Optional.LavasoftWebCompanion
https://www.nicolascoolman.com/fr/pup-bearshare/ =>PUP.Optional.BearShare
https://www.anti-malware.top/2016/09/28/superfluous-popcorntime/ =>.Superfluous.PopcornTime
https://www.anti-malware.top/2016/04/21/riskware-quicktime/ =>Riskware.QuickTime
https://www.anti-malware.top/2016/05/01/definition-dun-logiciel-pup-lpi/ =>Adware.Suspect
https://www.nicolascoolman.com/fr/toolbar-conduit/ =>.Superfluous.Conduit
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>PUP.Optional.AlexaTB
https://www.nicolascoolman.com/fr/spyware-wintoflash/ =>PUP.Optional.WinToFlash
https://www.nicolascoolman.com/fr/?p=5143 =>Toolbar.Agent
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>PUP.Optional.Camec
https://www.nicolascoolman.com/fr/hijacker-office/ =>PUP.Optional.Office
https://www.anti-malware.top/2016/09/22/toolbar-ask/ =>Toolbar.Ask


---\\ Nettoyage Additionnel. (80)
~ Suppression des Clés de registre Tracing. (80)
~ Suppression des anciens rapports ZHPCleaner. (0)


---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent (Opera Software)


---\\ Statistiques
~ Items scannés : 771
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 59


~ End of clean in 00h00mn46s
~====================
ZHPCleaner-[R]-11012017-22_14_38.txt
ZHPCleaner-[S]-11012017-22_13_07.txt