~ ZHPCleaner v2016.12.24.222 by Nicolas Coolman (2016/12/24)
~ Run by Thomas (Administrator) (21/02/2017 21:45:46)
~ Web: https://www.nicolascoolman.com
~ Blog: https://www.anti-malware.top
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Repair
~ Report : C:\Users\Thomas\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Thomas\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit (Build 14393)


---\\ Services (0)
~ No malicious or unnecessary items found.


---\\ Browser internet (0)
~ No malicious or unnecessary items found.


---\\ Hosts file (1)
~ The hosts file is legitimate (21)


---\\ Scheduled automatic tasks. (0)
~ No malicious or unnecessary items found.


---\\ Explorer ( File, Folder) (43)
MOVED folder: C:\WINDOWS\Installer\MSIDE52.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIE067.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIE098.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIE1C2.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIE232.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIE2DB.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIE5C8.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIE646.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIE68A.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIE6F3.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIE85C.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIEAC2.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIEB29.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIEBFB.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIEC24.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIECC7.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIED1B.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIED55.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIEDE2.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIEF23.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIEFFB.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIF02E.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIF098.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIF135.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIF149.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIF15.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIF1C3.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIF213.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIF27F.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIF32C.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIF438.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIF4BA.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIF524.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIF930.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIFB11.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIFB54.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIFC5A.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIFC6E.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIFCB5.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIFD69.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIFE5C.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIFEDA.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIFF95.tmp- =>.Superfluous.Empty


---\\ Registry ( Key, Value, Data) (18)
DELETED key*: HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Plus-HD-4.2 [] =>PUP.Optional.CrossRider
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Popcorn Time [Popcorn Official] =>.Superfluous.PopcornTime
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{17d13aa7-27b8-4d2b-b919-06e5dd609301} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B062E28-C2DE-4367-B690-6671584536AB} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5B2DB4E2-3C63-44FB-99F1-1E854C8D3F75} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{808926E7-ED05-4F6E-9E9C-805DBCFA473} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9BFB5C68-C476-46CB-9576-95ECED51ED1F} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A51023CA-FF5F-40B3-A2DA-7FD2D5BF2A7} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ac69b020-b8c1-40c7-afa9-95d635a355fc} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFFA6B7E-62B0-4098-A18A-A66399A3A04} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1C21671-3584-45C4-B748-A1102B19EB2E} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F2BA5C8D-89C7-4519-9B1-6D4A8F94E06D} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider
DELETED key*: [X64] HKLM\SOFTWARE\Classes\Nosibay.SurfMatch [Bubble Dock SurfMatch Class] =>PUP.Optional.BubbleDock
DELETED key*: [X64] HKLM\SOFTWARE\Classes\Nosibay.SurfMatch.1 [Bubble Dock SurfMatch Class] =>PUP.Optional.BubbleDock
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\TCP Query User{A034B842-FA7F-4980-85B9-FCEDF4D879FA}C:\users\thomas\appdata\local\popcorn time\node-webkit\popcorn time.exe [C:\users\thomas\appdata\local\popcorn time\node-webkit\popcorn time.exe] =>.Superfluous.PopcornTime
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\UDP Query User{D0E82083-FBB2-41ED-A74C-C0CF6B522073}C:\users\thomas\appdata\local\popcorn time\node-webkit\popcorn time.exe [C:\users\thomas\appdata\local\popcorn time\node-webkit\popcorn time.exe] =>.Superfluous.PopcornTime
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\TCP Query User{B47856D8-FDDD-4EA6-A043-0FC5FE125647}C:\users\thomas\appdata\local\popcorn time\nw.exe [C:\users\thomas\appdata\local\popcorn time\nw.exe] =>.Superfluous.PopcornTime
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\UDP Query User{83AAB515-F1EE-4D7A-A159-A82647B5A0B4}C:\users\thomas\appdata\local\popcorn time\nw.exe [C:\users\thomas\appdata\local\popcorn time\nw.exe] =>.Superfluous.PopcornTime


---\\ Summary of the elements found (4)
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.Empty
https://www.anti-malware.top/2016/04/30/pup-optional-crossrider/ =>PUP.Optional.CrossRider
https://www.anti-malware.top/2016/09/28/superfluous-popcorntime/ =>.Superfluous.PopcornTime
https://www.nicolascoolman.com/fr/pup-bubbledock/ =>PUP.Optional.BubbleDock


---\\ Other deletions. (25)
~ Registry Keys Tracing deleted (25)
~ Remove the old reports ZHPCleaner. (0)


---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Google Chrome)
~ Browser not found (Opera Software)


---\\ Statistics
~ Items scanned : 925
~ Items found : 0
~ Items cancelled : 0
~ Items repaired : 61


~ End of clean in 00h00mn34s
~====================
ZHPCleaner-[R]-21022017-21_46_20.txt
ZHPCleaner-[S]-21022017-21_23_18.txt
ZHPCleaner-[S]-21022017-21_33_32.txt