~ ZHPCleaner v2017.6.26.105 by Nicolas Coolman (2017/06/26)
~ Run by SERGE (Administrator) (28/06/2017 14:16:08)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Illegal
~ Type : Nettoyer
~ Report : D:\Users\SERGE\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\SERGE\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit (Build 15063)


---\\ Service. (1)
ARRETÉ : Service KMSELDI =>HackTool.KMSpico


---\\ Navigateur internet. (1)
REMPLACÉ Google Chrome Preferences: "http://d36s9hlc2vimc.cloudfront.net/" =>.Superfluous.CloudfrontNet


---\\ Fichier hôte. (1)
~ Le fichier hôte est légitime. (138)


---\\ Tâche planifiée. (1)
SUPPRIMÉ tâche: [AutoPico Daily Restart] [C:\Program Files\KMSpico\AutoPico.exe (Not File) ] =>HackTool.KMSpico


---\\ Explorateur ( Dossiers, Fichiers ). (65)
DEPLACÉ fichier: C:\Users\SERGE\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_nahhmpbckpgdidfnmfkfgiflpjijilce_0.localstorage =>.Superfluous.SearchManager
DEPLACÉ fichier: C:\Program Files\KMSpico\Service_KMS.exe [@ByELDI - Service_KMS] =>HackTool.KMSpico
DEPLACÉ fichier**: C:\Program Files\KMSpico\AutoPico.exe [@ByELDI - AutoPico] =>HackTool.KMSpico
DEPLACÉ fichier**: C:\Windows\SECOH-QAD.exe =>HackTool.KMSpico
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce =>.Superfluous.SearchManager
DEPLACÉ dossier*: C:\Program Files\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier*: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign0be55e38bc269389 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign0dff0a72ae82e29f =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign17ef3e513826f472 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign193c4b49c797c2cb =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign1aa8c08f7fa9bd97 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign21d1d85ee3c5e33c =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign237353c8a001ba63 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign2805a057da0db68e =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign2b32c6975166251c =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign2f03e5e7f79768ed =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign35f719ca101fc832 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign37576090ed2f345d =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign41bbb52d295f199b =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign45fc450e86e18494 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign48ac4326f2dbde02 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign48af452d533f826d =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign49829edfa9b7d5fe =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign4f233653410e21b1 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign5148c02d131902fb =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign605d7312c3eefa2f =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign641f22534a507826 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign65e739ab86f023d3 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign6696da3c35b5e0c7 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign6dfa7474b3faba6d =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign712082a6efb480d7 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign7448b9dbb9cca58d =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign7c39c65eb19b9bd9 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign815efbff59b39768 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign85b6d63141117ad6 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign88580050d6990db4 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign8e6ae884f6cd8af6 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign913a8de2962d0378 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign9300319338a13101 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign94ee8f6b6b008531 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign9a68a4d79ac507be =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsigna008566e85162377 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignac75144c628d85d0 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignb26448c7189a6cdd =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignb61b00de977f8181 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignbd3a4b1010fbf99f =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignbdcef22ca2ad80e3 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignbf0ef8358fbe28fc =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignc6915940f67aaf2c =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsigncacb5ce5598c74dc =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsigncdf591f80dc55234 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsigncf1afcb479f8534a =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsigne1424b51c8a465f0 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsigne243adc6e8ae5d91 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsigne3644ca9b68afaa4 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsigne528c3ae08c7e6b8 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsigneb6947ff3498876b =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignf4aa6e358acea6a0 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignfabcde4ec166d2f2 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignfb1aabe88e4dee78 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignfb3e2e6efffd8670 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignfcba710ec176d040 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignfd5f57607ddada52 =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Program Files (x86)\QuickTime =>Riskware.QuickTime


---\\ Base de Registres ( Clés, Valeurs, Données ). (7)
SUPPRIMÉ clé*: HKCU\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce [] =>.Superfluous.SearchManager
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce [] =>.Superfluous.SearchManager
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce [] =>.Superfluous.SearchManager
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Service KMSELDI [C:\Program Files\KMSpico\Service_KMS.exe (Not File)] =>HackTool.KMSpico
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASAPI32 [] =>.Superfluous.ByteFence
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASMANCS [] =>.Superfluous.ByteFence
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1 [KMSpico] =>HackTool.KMSpico


---\\ Récapitulatif des éléments trouvés sur votre station. (6)
https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/ =>HackTool.KMSpico
https://nicolascoolman.eu/2017/02/02/superfluous-cloudfrontnet/ =>.Superfluous.CloudfrontNet
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.SearchManager
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Temporary
https://nicolascoolman.eu/2017/01/15/riskware-quicktime/ =>Riskware.QuickTime
https://nicolascoolman.eu/2017/03/13/superfluous-bytefence/ =>.Superfluous.ByteFence


---\\ Nettoyage Additionnel. (12)
~ Suppression des Clés de registre Tracing. (12)
~ Suppression des anciens rapports ZHPCleaner. (0)


---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent (Mozilla Firefox)
~ Ce navigateur est absent (Opera Software)


---\\ Statistiques
~ Items scannés : 785
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 75


~ End of clean in 00h00mn24s
~====================
ZHPCleaner-[R]-28062017-14_16_32.txt
ZHPCleaner-[S]-28062017-12_22_47.txt
ZHPCleaner-[S]-28062017-14_14_34.txt