~ ZHPCleaner v2017.1.17.15 by Nicolas Coolman (2017/01/17)
~ Run by 16917947 (Administrator) (19/01/2017 15:13:33)
~ Web: https://www.nicolascoolman.com
~ Blog: https://www.anti-malware.top
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Repair
~ Report : C:\Users\16917947\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\16917947\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 7 Enterprise, 64-bit Service Pack 1 (Build 7601)


---\\ Services (0)
~ No malicious or unnecessary items found.


---\\ Browser internet (0)
~ No malicious or unnecessary items found.


---\\ Hosts file (1)
~ The hosts file is legitimate (21)


---\\ Scheduled automatic tasks. (0)
~ No malicious or unnecessary items found.


---\\ Explorer ( File, Folder) (28)
MOVED file: C:\Windows\Prefetch\UPDATETRUSTEDSITES.EXE-AB8F50B6.pf =>PUP.Optional.SimpleSearches
MOVED file: C:\Windows\Installer\wix{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}.SchedServiceConfig.rmi =>.Superfluous.Empty
MOVED file: C:\Windows\Installer\wix{5A1C366F-31AC-48CA-BF13-0504FF31D6A3}.SchedServiceConfig.rmi =>.Superfluous.Empty
MOVED file: C:\Windows\Installer\wix{6313DBA3-0CA9-4CD8-93B3-373534146B7B}.SchedServiceConfig.rmi =>.Superfluous.Empty
MOVED file: C:\Windows\Installer\wix{D5783B51-00A6-4991-B6C3-88B35BA45E94}.SchedServiceConfig.rmi =>.Superfluous.Empty
MOVED file: C:\Users\16917947\AppData\Local\Temp\wct7610.tmp =>.Superfluous.Temporary.OneDrive
MOVED file: C:\Users\16917947\AppData\Local\Temp\wctCD8B.tmp =>.Superfluous.Temporary.OneDrive
MOVED file: C:\Users\16917947\Downloads\AdwCleaner\quarantine\files\ljdnxuxbpypmyewuhnitjyzzvrsqsqba\rlservice.exe [TMRG, Inc. - Relevant-Knowledge] =>PUP.Optional.RelevantKnowledge
MOVED file: C:\Users\16917947\Downloads\AdwCleaner\quarantine\files\ljdnxuxbpypmyewuhnitjyzzvrsqsqba\rlvknlg.exe [TMRG, Inc. - Relevant-Knowledge] =>PUP.Optional.RelevantKnowledge
MOVED file: C:\Users\16917947\Downloads\AdwCleaner\quarantine\files\ljdnxuxbpypmyewuhnitjyzzvrsqsqba\rlvknlg32.exe [TMRG, Inc. - Relevant-Knowledge] =>PUP.Optional.RelevantKnowledge
MOVED file: C:\Users\16917947\Downloads\AdwCleaner\quarantine\files\ljdnxuxbpypmyewuhnitjyzzvrsqsqba\rlvknlg64.exe [TMRG, Inc. - Relevant-Knowledge] =>PUP.Optional.RelevantKnowledge
MOVED file: C:\Users\16917947\AppData\Local\Temp\spstub.exe [ClientConnect - Search Protect] =>PUP.Optional.SearchProtect
MOVED file: C:\Users\16917947\AppData\Local\Temp\uttF7EB.tmp.exe [ClientConnect Ltd. - Custom Installer] =>.Superfluous.ClientConnect
MOVED folder: C:\Users\16917947\AppData\Local\Temp\scoped_dir_3888_26202 =>.Superfluous.Temporary.Steam
MOVED folder: C:\Program Files (x86)\QuickTime =>Riskware.QuickTime
MOVED folder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime =>Riskware.QuickTime
MOVED folder: C:\Windows\Installer\MSI1315.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI23BF.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI4C20.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI4E16.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI4EEC.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI5DB.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI61BE.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI64BD.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSIB8E.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSICEAB.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSIE6FB.tmp- =>.Superfluous.Empty
MOVED folder: C:\Users\16917947\AppData\Local\Temp\chrome_BITS_8012_30212 =>.Superfluous.Empty


---\\ Registry ( Key, Value, Data) (5)
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0220D03E4356C0654A37F1553557CDEE [C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\ProjectTemplates\VisualBasic\Windows\1033\WPFBrowserApplication\Settings.settings] =>PUP.Optional.CrossRider
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{FBE1C48F-1A8F-420F-8AAA-E2B84A42CF61} [C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe] =>PUP.Optional.RelevantKnowledge
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{0013EF04-2BE0-4767-9451-29567103065F} [C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe] =>PUP.Optional.RelevantKnowledge
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{980EFC71-8C7F-4332-893D-9E22429DE10B} [C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe] =>PUP.Optional.RelevantKnowledge
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{FE2FDB96-E741-44AA-89EB-1266B1BFE9CE} [C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe] =>PUP.Optional.RelevantKnowledge


---\\ Summary of the elements found (9)
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>PUP.Optional.SimpleSearches
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.Empty
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.Temporary.OneDrive
https://www.nicolascoolman.com/fr/adware-relevantknowledge/ =>PUP.Optional.RelevantKnowledge
https://www.nicolascoolman.com/fr/pup-searchprotect/ =>PUP.Optional.SearchProtect
https://www.anti-malware.top/2016/06/15/superfluous-clientconnect/ =>.Superfluous.ClientConnect
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.Temporary.Steam
https://nicolascoolman.eu/2017/01/15/riskware-quicktime/ =>Riskware.QuickTime
https://www.anti-malware.top/2016/04/30/pup-optional-crossrider/ =>PUP.Optional.CrossRider


---\\ Other deletions. (7)
~ Registry Keys Tracing deleted (7)
~ Remove the old reports ZHPCleaner. (0)


---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Opera Software)


---\\ Statistics
~ Items scanned : 636
~ Items found : 0
~ Items cancelled : 0
~ Items repaired : 33


~ End of clean in 00h00mn18s
~====================
ZHPCleaner-[R]-19012017-15_13_51.txt
ZHPCleaner-[S]-19012017-15_09_57.txt