Publicité
Publicité
Format du document : text/plain
Prévisualisation
~ ZHPCleaner v2017.7.17.123 by Nicolas Coolman (2017/07/17)
~ Run by VULCAN (Administrator) (10/08/2017 00:14:50)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Illegal
~ Type : Repair
~ Report : C:\Users\VULCAN\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\VULCAN\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Pro, 64-bit (Build 15063)
---\\ Services (0)
---\\ Browser internet (0)
---\\ Hosts file (1)
~ The hosts file is legitimate (53)
---\\ Scheduled automatic tasks. (0)
~ No malicious or unnecessary items found.
---\\ Explorer ( File, Folder) (37)
MOVED file: C:\Users\VULCAN\Desktop\QQ旋风.lnk [Bad : C:\Program Files (x86)\Tencent\QQDownload\QQDownload.exe](.Tencent Technology (Shenzhen) Company Limited.) =>.Superfluous.Tencent
MOVED file: C:\Users\VULCAN\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\QQ旋风.lnk [Bad : C:\Program Files (x86)\Tencent\QQDownload\QQDownload.exe](.Tencent Technology (Shenzhen) Company Limited.) =>.Superfluous.Tencent
MOVED file: C:\Users\VULCAN\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\腾讯QQ.lnk [Bad : C:\Program Files (x86)\Tencent\QQ\Bin\QQScLauncher.exe](..) =>.Superfluous.Tencent
MOVED file: C:\Users\Public\Desktop\腾讯QQ.lnk [Bad : C:\Program Files (x86)\Tencent\QQ\Bin\QQScLauncher.exe](..) =>.Superfluous.Tencent
MOVED file: C:\Program Files (x86)\Tencent\QQDownload\Browser\769\npXFPlugin.dll [Tencent Technology (Shenzhen) Company Limited - QQDownload Plugin] =>.Superfluous.Tencent
MOVED file: C:\Program Files (x86)\QQMailPlugin\npQQMailWebKit.dll [Tencent - QQMail plugin for WebKit #1.0.0.22] =>.Superfluous.Tencent
MOVED file: C:\Program Files (x86)\QQMailPlugin\nptxftnWebKit.dll [Tencent Technology (Shenzhen) Company Limited - Tencent FTN plug-in] =>.Superfluous.Tencent
MOVED file: C:\Program Files (x86)\Tencent\QQDownload\QQIEHelper01.dll [Tencent Technology (Shenzhen) Company Limited - QQDownload Plugin DLL] =>.Superfluous.Tencent
MOVED file: C:\Users\VULCAN\AppData\Roaming\cbcq_Y_516334_37cs.exe [绵阳亿趣科技 - 超霸传奇微端] =>Adware.Pirrit
MOVED file: C:\Users\VULCAN\AppData\Roaming\gameboxsetup.exe [Copyright © 2014-2016 Oasgames,Inc - NarutoOnline] =>Adware.Pirrit
MOVED file: C:\Program Files (x86)\SogouInput\8.6.0.1423\SogouSvc.exe [Sogou.com Inc. - 搜狗拼音输入法核心服务程序] =>.Superfluous.Sogou
MOVED file: C:\WINDOWS\system32\TesSafe.sys [TENCENT - Loader64 NT Driver] =>.Superfluous.Tencent
MOVED file: C:\Windows\Prefetch\SOGOUCLOUD.EXE-53FD0EB5.pf =>.Superfluous.Sogou
MOVED file: C:\Windows\Prefetch\SOGOUSVC.EXE-667D9296.pf =>.Superfluous.Sogou
MOVED file: C:\Windows\Prefetch\SOGOUWIN10SETUP.EXE-C4FFBE4B.pf =>.Superfluous.Sogou
MOVED file: C:\Users\VULCAN\AppData\Roaming\Zk7FXYwoZdU8FEC.dat [Tencent - QQ电脑管家dll] =>.Superfluous.Tencent
MOVED file: C:\Users\VULCAN\AppData\Local\Temp\QBSET.EXE [Tencent - QQ浏览器] =>.Superfluous.Tencent
MOVED file: C:\Users\VULCAN\AppData\Local\Temp\QzoneMusic.exe [Tencent - QQ音乐播放控件] =>.Superfluous.Tencent
MOVED file: C:\Users\VULCAN\AppData\Local\Temp\SogouPinyin.ini =>.Superfluous.Sogou
MOVED file: C:\Users\VULCAN\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.hao123.com_0.localstorage-journal =>PUP.Optional.Browser
MOVED file: C:\Windows\SECOH-QAD.exe =>HackTool.KMSpico
MOVED folder*: C:\Program Files (x86)\10101966 =>Heuristic.Suspect
MOVED folder*: C:\Program Files (x86)\QQMailPlugin =>.Superfluous.Tencent
MOVED folder^: C:\Program Files (x86)\SogouInput =>.Superfluous.Sogou
MOVED folder^: C:\Program Files (x86)\Tencent =>.Superfluous.Tencent
MOVED folder*: C:\ProgramData\SogouInput =>.Superfluous.Sogou
MOVED folder*: C:\WINDOWS\System32\config\systemprofile\AppData\LocalLow\SogouPy =>.Superfluous.Sogou
MOVED folder*: C:\WINDOWS\System32\config\systemprofile\AppData\LocalLow\SogouPY.users =>.Superfluous.Sogou
MOVED folder*: C:\Users\VULCAN\Desktop\KMSpico Portable =>HackTool.KMSpico
MOVED folder*: C:\Users\VULCAN\Documents\Tencent Files =>.Superfluous.Tencent
MOVED folder^: C:\Users\VULCAN\AppData\LocalLow\SogouPY =>.Superfluous.Sogou
MOVED folder*: C:\Users\VULCAN\AppData\LocalLow\SogouPY.users =>.Superfluous.Sogou
MOVED folder: C:\WINDOWS\SysWOW64\config\systemprofile\AppData\LocalLow\SogouPy =>.Superfluous.Sogou
MOVED folder: C:\WINDOWS\SysWOW64\config\systemprofile\AppData\LocalLow\SogouPY.users =>.Superfluous.Sogou
MOVED folder*: C:\Users\VULCAN\AppData\Local\UCBrowser =>.Superfluous.UCBrowser
MOVED folder*: C:\Users\VULCAN\AppData\Local\Google\Chrome\User Data\Default\File System\008 =>PUP.Optional.DomaIQ
MOVED folder*: C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Local\UCBrowser =>.Superfluous.UCBrowser
---\\ Registry ( Key, Value, Data) (86)
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@qq.com/QQDownloadPlugin [Tencent] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@qq.com/QQMiniDLPlugin [Tencent] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tencent.com/npQQMailWebKit,version=1.0.0.1 [] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tencent.com/nptxftnWebKit,version=1.0.0.1 [] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00000000-12C9-4305-82F9-43058F20E8D2} [QQCycloneHelper] =>.Superfluous.Tencent
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00000000-12C9-4305-82F9-43058F20E8D2} [] =>.Superfluous.Tencent
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-12C9-4305-82F9-43058F20E8D2} [] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\Software\Classes\CLSID\{00000000-12C9-4305-82F9-43058F20E8D2} [QQDownload IE Left Helper] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{00000000-12C9-4305-82F9-43058F20E8D2} [QQDownload IE Left Helper] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00000000-12C9-4305-82F9-43058F20E8D2} [QQCycloneHelper] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C9C7334B-5657-41e1-8F79-F6AACECA05F4} [QQMiniDL Helper Class] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DDD362CF-523B-4BC9-8FDC-58F93B6BC945} [AccountProtect] =>.Superfluous.Tencent
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C9C7334B-5657-41e1-8F79-F6AACECA05F4} [] =>.Superfluous.Tencent
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C9C7334B-5657-41e1-8F79-F6AACECA05F4} [] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C9C7334B-5657-41e1-8F79-F6AACECA05F4} [QQMiniDL Helper Class] =>.Superfluous.Tencent
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DDD362CF-523B-4BC9-8FDC-58F93B6BC945} [] =>.Superfluous.Tencent
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DDD362CF-523B-4BC9-8FDC-58F93B6BC945} [] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DDD362CF-523B-4BC9-8FDC-58F93B6BC945} [AccountProtectBHO Class] =>.Superfluous.Tencent
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\SogouSvc [C:\Program Files (x86)\SogouInput\8.6.0.1423\SogouSvc.exe (Not File)] =>.Superfluous.Sogou
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\TesSafe [C:\WINDOWS\system32\TesSafe.sys (Not File)] =>.Superfluous.Tencent
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\MiniQQDownloader [] =>Trojan.GenericKD
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\SogouInput [] =>.Superfluous.Sogou
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\SogouInput.ppup [] =>.Superfluous.Sogou
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Tencent [] =>.Superfluous.Tencent
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\SogouInput.ppup.user [] =>.Superfluous.Sogou
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\SogouInput.user [] =>.Superfluous.Sogou
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\.downlist [Xunlei.LSTFile.6] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\.td [Xunlei.TDFile.6] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\.thunderskin [Xunlei.ThunderSkin.6] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\.torrent [Xunlei.Bittorrent.6] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\.xlb [Xunlei.XLB.6] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\.xltd [Xunlei.TDFile.6] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\Tencent [] =>.Superfluous.Tencent
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\Xunlei.Bittorrent.6 [BT种子文件] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\Xunlei.LSTFile.6 [迅雷专有下载文件] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\Xunlei.TDFile.6 [迅雷临时数据文件] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\Xunlei.ThunderSkin.6 [迅雷9皮肤文件] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\Xunlei.XLB.6 [迅雷下载合集文件] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\.DEFAULT\Software\SogouInput [] =>.Superfluous.Sogou
DELETED key*: HKEY_USERS\.DEFAULT\Software\Tencent [] =>.Superfluous.Tencent
DELETED key: HKCU\Software\MiniQQDownloader [] =>Trojan.GenericKD
DELETED key*: HKCU\Software\SogouInput [] =>.Superfluous.Sogou
DELETED key: HKCU\Software\SogouInput.ppup [] =>.Superfluous.Sogou
DELETED key: HKCU\Software\Tencent [] =>.Superfluous.Tencent
DELETED key: HKCU\Software\SogouInput.ppup.user [] =>.Superfluous.Sogou
DELETED key: HKCU\Software\SogouInput.user [] =>.Superfluous.Sogou
DELETED key*: HKCU\Software\AppDataLow\Tencent [] =>.Superfluous.Tencent
DELETED key*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\atwola.com [] =>.Superfluous.Atwola
DELETED key*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\ol.uk.at.atwola.com [] =>.Superfluous.Atwola
DELETED key*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\atwola.com [] =>.Superfluous.Atwola
DELETED key*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\ol.uk.at.atwola.com [301] =>.Superfluous.Atwola
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6796F670-BE24-4540-9D38-33A512C30F4A} [C:\Users\VULCAN\AppData\Roaming\Tencent\WebGamePlugin\1.0.4.3 (Not File)] =>.Superfluous.Tencent
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\static.audienceinsights.net [43] =>.Superfluous.AudienceInsights
DELETED key*: HKLM\SOFTWARE\Wow6432Node\UCBrowserPID [] =>.Superfluous.UCBrowser
DELETED key: HKLM\SOFTWARE\UCBrowserPID [] =>.Superfluous.UCBrowser
DELETED key*: [X64] HKLM\SOFTWARE\Classes\Tencent [TencentProtocol] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0A6E682E-614C-4fda-BBAD-9C71DB6C1B2C} [C:\Program Files (x86)\SogouInput\8.6.0.1423] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4D6DE936-912B-4aa1-A167-38A29A691337} [C:\Program Files (x86)\SogouInput\SogouExe (Not File)] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7AF645B2-3F1F-4639-81A1-39D794DC8A7D} [C:\Program Files (x86)\SogouInput\Components] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7F9CD7C-5AC6-470b-A50F-F7CC28D0771B} [C:\Program Files (x86)\SogouInput\8.6.0.1423] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7F9CD7C-5AC6-470b-A50F-F7CC28D0771C} [c:\windows\syswow64\IME\SogouPY] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AppStore.exe [C:\Program Files (x86)\Tencent\AppStore\Bin\AppStore.exe (Not File)] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\029AB1D033707234FAD100A0EAB4A227 [C:\Program Files (x86)\Microleaves\Traffic Exchange\Traffic Exchange Updater.exe (Not File)] =>.Superfluous.Microleaves
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\36100FB6A9BEACE4B964360B35351D6E [02:\Software\Microleaves\Online.io Application\Version (Not File)] =>.Superfluous.Microleaves
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\SogouComponents [C:\Program Files (x86)\SogouInput\Components] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\SogouInput [C:\Program Files (x86)\SogouInput] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Tencent [] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\QQMailPlugin [Tencent QQMail Plugin] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\英雄联盟 [Tencent] =>.Superfluous.Tencent
DELETED key: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\AppStore.exe [C:\Program Files (x86)\Tencent\AppStore\Bin\AppStore.exe (Not File)] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0A6E682E-614C-4fda-BBAD-9C71DB6C1B2C} [C:\Program Files (x86)\SogouInput\8.6.0.1423] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1FA39976-7194-44E8-8DD9-A9781D289934} [C:\Program Files (x86)\Tencent\QQ\Plugin\Com.Tencent.QQPet\bin\QQPet (Not File)] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4D6DE936-912B-4aa1-A167-38A29A691337} [C:\Program Files (x86)\SogouInput\SogouExe (Not File)] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7AF645B2-3F1F-4639-81A1-39D794DC8A7D} [C:\Program Files (x86)\SogouInput\Components] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BB32E0A4-AC96-4e85-8B8F-D7A90FDF715D} [C:\Users\VULCAN\AppData\Roaming\Tencent\QQ\QQAntiPhishing (Not File)] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7F9CD7C-5AC6-470b-A50F-F7CC28D0771B} [C:\Program Files (x86)\SogouInput\8.6.0.1423] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7F9CD7C-5AC6-470b-A50F-F7CC28D0771C} [c:\windows\syswow64\IME\SogouPY] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E8A77722-17C3-451a-88D0-D5F01DA120AE} [C:\Program Files (x86)\Tencent\QQMusic\QzoneMusic (Not File)] =>.Superfluous.Tencent
DELETED key*: HKCU\SOFTWARE\A6A369FD6E6EEC393047AD36DC01A180 [] =>Hijacker.Browser
DELETED key: [X64] HKLM\SOFTWARE\Classes\CLSID\{00000000-12C9-4305-82F9-43058F20E8D2}\InprocServer32 [C:\Program Files (x86)\Tencent\QQDownload\QQIEHelper64.dll (Not File)] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Classes\CLSID\{4836C333-208E-4BCE-B30B-00B9545B0F6E} [QQDownload IE RightClick Helper] =>.Superfluous.Tencent
DELETED key: [X64] HKLM\SOFTWARE\Classes\CLSID\{4836C333-208E-4BCE-B30B-00B9545B0F6E}\InprocServer32 [C:\Program Files (x86)\Tencent\QQDownload\QQIEHelper64.dll (Not File)] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Classes\CLSID\{53D2405C-48AB-4C8A-8F59-CE0610F13BBC} [QQShellExtension Class] =>.Superfluous.Tencent
DELETED key: [X64] HKLM\SOFTWARE\Classes\CLSID\{53D2405C-48AB-4C8A-8F59-CE0610F13BBC}\InprocServer32 [C:\Program Files (x86)\Tencent\QQ\ShellExt\QQShellExt64.dll] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Classes\CLSID\{8AC3BC28-E145-4385-A694-8AAC128ACB16} [QQDownload Class] =>.Superfluous.Tencent
DELETED key: [X64] HKLM\SOFTWARE\Classes\CLSID\{8AC3BC28-E145-4385-A694-8AAC128ACB16}\InprocServer32 [C:\Program Files (x86)\Tencent\QQDownload\QQIEHelper64.dll (Not File)] =>.Superfluous.Tencent
---\\ Summary of the elements found (14)
https://nicolascoolman.eu/2017/02/23/tencentadressbar/ =>.Superfluous.Tencent
https://nicolascoolman.eu/2017/02/25/adware-pirrit/ =>Adware.Pirrit
https://www.nicolascoolman.com/fr/pup-sogou/ =>.Superfluous.Sogou
https://nicolascoolman.eu/2017/01/26/hijacker-browser/ =>PUP.Optional.Browser
https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/ =>HackTool.KMSpico
https://nicolascoolman.eu/2017/01/28/heuristic-suspect/ =>Heuristic.Suspect
https://nicolascoolman.eu/2017/03/04/superfluous-ucbrowser/ =>.Superfluous.UCBrowser
https://www.nicolascoolman.com/fr/adware-domaiq/ =>PUP.Optional.DomaIQ
https://nicolascoolman.eu/2017/04/25/trojan-generickd/ =>Trojan.GenericKD
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Xunlei
https://nicolascoolman.eu/2017/02/04/superfluous-atwola/ =>.Superfluous.Atwola
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.AudienceInsights
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Microleaves
https://nicolascoolman.eu/2017/02/02/hijacker-browser-2/ =>Hijacker.Browser
---\\ Other deletions. (20)
~ Registry Keys Tracing deleted (20)
~ Remove the old reports ZHPCleaner. (0)
---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Opera Software)
~ The system has been restarted.
---\\ Statistics
~ Items scanned : 3404
~ Items found : 0
~ Items cancelled : 0
~ Items repaired : 124
~ End of clean in 00h02mn03s
~====================
ZHPCleaner-[R]-10082017-00_16_53.txt
ZHPCleaner-[S]-10082017-00_12_31.txt
~ Run by VULCAN (Administrator) (10/08/2017 00:14:50)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Illegal
~ Type : Repair
~ Report : C:\Users\VULCAN\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\VULCAN\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Pro, 64-bit (Build 15063)
---\\ Services (0)
---\\ Browser internet (0)
---\\ Hosts file (1)
~ The hosts file is legitimate (53)
---\\ Scheduled automatic tasks. (0)
~ No malicious or unnecessary items found.
---\\ Explorer ( File, Folder) (37)
MOVED file: C:\Users\VULCAN\Desktop\QQ旋风.lnk [Bad : C:\Program Files (x86)\Tencent\QQDownload\QQDownload.exe](.Tencent Technology (Shenzhen) Company Limited.) =>.Superfluous.Tencent
MOVED file: C:\Users\VULCAN\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\QQ旋风.lnk [Bad : C:\Program Files (x86)\Tencent\QQDownload\QQDownload.exe](.Tencent Technology (Shenzhen) Company Limited.) =>.Superfluous.Tencent
MOVED file: C:\Users\VULCAN\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\腾讯QQ.lnk [Bad : C:\Program Files (x86)\Tencent\QQ\Bin\QQScLauncher.exe](..) =>.Superfluous.Tencent
MOVED file: C:\Users\Public\Desktop\腾讯QQ.lnk [Bad : C:\Program Files (x86)\Tencent\QQ\Bin\QQScLauncher.exe](..) =>.Superfluous.Tencent
MOVED file: C:\Program Files (x86)\Tencent\QQDownload\Browser\769\npXFPlugin.dll [Tencent Technology (Shenzhen) Company Limited - QQDownload Plugin] =>.Superfluous.Tencent
MOVED file: C:\Program Files (x86)\QQMailPlugin\npQQMailWebKit.dll [Tencent - QQMail plugin for WebKit #1.0.0.22] =>.Superfluous.Tencent
MOVED file: C:\Program Files (x86)\QQMailPlugin\nptxftnWebKit.dll [Tencent Technology (Shenzhen) Company Limited - Tencent FTN plug-in] =>.Superfluous.Tencent
MOVED file: C:\Program Files (x86)\Tencent\QQDownload\QQIEHelper01.dll [Tencent Technology (Shenzhen) Company Limited - QQDownload Plugin DLL] =>.Superfluous.Tencent
MOVED file: C:\Users\VULCAN\AppData\Roaming\cbcq_Y_516334_37cs.exe [绵阳亿趣科技 - 超霸传奇微端] =>Adware.Pirrit
MOVED file: C:\Users\VULCAN\AppData\Roaming\gameboxsetup.exe [Copyright © 2014-2016 Oasgames,Inc - NarutoOnline] =>Adware.Pirrit
MOVED file: C:\Program Files (x86)\SogouInput\8.6.0.1423\SogouSvc.exe [Sogou.com Inc. - 搜狗拼音输入法核心服务程序] =>.Superfluous.Sogou
MOVED file: C:\WINDOWS\system32\TesSafe.sys [TENCENT - Loader64 NT Driver] =>.Superfluous.Tencent
MOVED file: C:\Windows\Prefetch\SOGOUCLOUD.EXE-53FD0EB5.pf =>.Superfluous.Sogou
MOVED file: C:\Windows\Prefetch\SOGOUSVC.EXE-667D9296.pf =>.Superfluous.Sogou
MOVED file: C:\Windows\Prefetch\SOGOUWIN10SETUP.EXE-C4FFBE4B.pf =>.Superfluous.Sogou
MOVED file: C:\Users\VULCAN\AppData\Roaming\Zk7FXYwoZdU8FEC.dat [Tencent - QQ电脑管家dll] =>.Superfluous.Tencent
MOVED file: C:\Users\VULCAN\AppData\Local\Temp\QBSET.EXE [Tencent - QQ浏览器] =>.Superfluous.Tencent
MOVED file: C:\Users\VULCAN\AppData\Local\Temp\QzoneMusic.exe [Tencent - QQ音乐播放控件] =>.Superfluous.Tencent
MOVED file: C:\Users\VULCAN\AppData\Local\Temp\SogouPinyin.ini =>.Superfluous.Sogou
MOVED file: C:\Users\VULCAN\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.hao123.com_0.localstorage-journal =>PUP.Optional.Browser
MOVED file: C:\Windows\SECOH-QAD.exe =>HackTool.KMSpico
MOVED folder*: C:\Program Files (x86)\10101966 =>Heuristic.Suspect
MOVED folder*: C:\Program Files (x86)\QQMailPlugin =>.Superfluous.Tencent
MOVED folder^: C:\Program Files (x86)\SogouInput =>.Superfluous.Sogou
MOVED folder^: C:\Program Files (x86)\Tencent =>.Superfluous.Tencent
MOVED folder*: C:\ProgramData\SogouInput =>.Superfluous.Sogou
MOVED folder*: C:\WINDOWS\System32\config\systemprofile\AppData\LocalLow\SogouPy =>.Superfluous.Sogou
MOVED folder*: C:\WINDOWS\System32\config\systemprofile\AppData\LocalLow\SogouPY.users =>.Superfluous.Sogou
MOVED folder*: C:\Users\VULCAN\Desktop\KMSpico Portable =>HackTool.KMSpico
MOVED folder*: C:\Users\VULCAN\Documents\Tencent Files =>.Superfluous.Tencent
MOVED folder^: C:\Users\VULCAN\AppData\LocalLow\SogouPY =>.Superfluous.Sogou
MOVED folder*: C:\Users\VULCAN\AppData\LocalLow\SogouPY.users =>.Superfluous.Sogou
MOVED folder: C:\WINDOWS\SysWOW64\config\systemprofile\AppData\LocalLow\SogouPy =>.Superfluous.Sogou
MOVED folder: C:\WINDOWS\SysWOW64\config\systemprofile\AppData\LocalLow\SogouPY.users =>.Superfluous.Sogou
MOVED folder*: C:\Users\VULCAN\AppData\Local\UCBrowser =>.Superfluous.UCBrowser
MOVED folder*: C:\Users\VULCAN\AppData\Local\Google\Chrome\User Data\Default\File System\008 =>PUP.Optional.DomaIQ
MOVED folder*: C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Local\UCBrowser =>.Superfluous.UCBrowser
---\\ Registry ( Key, Value, Data) (86)
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@qq.com/QQDownloadPlugin [Tencent] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@qq.com/QQMiniDLPlugin [Tencent] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tencent.com/npQQMailWebKit,version=1.0.0.1 [] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tencent.com/nptxftnWebKit,version=1.0.0.1 [] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00000000-12C9-4305-82F9-43058F20E8D2} [QQCycloneHelper] =>.Superfluous.Tencent
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00000000-12C9-4305-82F9-43058F20E8D2} [] =>.Superfluous.Tencent
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-12C9-4305-82F9-43058F20E8D2} [] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\Software\Classes\CLSID\{00000000-12C9-4305-82F9-43058F20E8D2} [QQDownload IE Left Helper] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{00000000-12C9-4305-82F9-43058F20E8D2} [QQDownload IE Left Helper] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00000000-12C9-4305-82F9-43058F20E8D2} [QQCycloneHelper] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C9C7334B-5657-41e1-8F79-F6AACECA05F4} [QQMiniDL Helper Class] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DDD362CF-523B-4BC9-8FDC-58F93B6BC945} [AccountProtect] =>.Superfluous.Tencent
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C9C7334B-5657-41e1-8F79-F6AACECA05F4} [] =>.Superfluous.Tencent
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C9C7334B-5657-41e1-8F79-F6AACECA05F4} [] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C9C7334B-5657-41e1-8F79-F6AACECA05F4} [QQMiniDL Helper Class] =>.Superfluous.Tencent
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DDD362CF-523B-4BC9-8FDC-58F93B6BC945} [] =>.Superfluous.Tencent
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DDD362CF-523B-4BC9-8FDC-58F93B6BC945} [] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DDD362CF-523B-4BC9-8FDC-58F93B6BC945} [AccountProtectBHO Class] =>.Superfluous.Tencent
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\SogouSvc [C:\Program Files (x86)\SogouInput\8.6.0.1423\SogouSvc.exe (Not File)] =>.Superfluous.Sogou
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\TesSafe [C:\WINDOWS\system32\TesSafe.sys (Not File)] =>.Superfluous.Tencent
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\MiniQQDownloader [] =>Trojan.GenericKD
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\SogouInput [] =>.Superfluous.Sogou
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\SogouInput.ppup [] =>.Superfluous.Sogou
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Tencent [] =>.Superfluous.Tencent
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\SogouInput.ppup.user [] =>.Superfluous.Sogou
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\SogouInput.user [] =>.Superfluous.Sogou
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\.downlist [Xunlei.LSTFile.6] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\.td [Xunlei.TDFile.6] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\.thunderskin [Xunlei.ThunderSkin.6] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\.torrent [Xunlei.Bittorrent.6] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\.xlb [Xunlei.XLB.6] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\.xltd [Xunlei.TDFile.6] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\Tencent [] =>.Superfluous.Tencent
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\Xunlei.Bittorrent.6 [BT种子文件] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\Xunlei.LSTFile.6 [迅雷专有下载文件] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\Xunlei.TDFile.6 [迅雷临时数据文件] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\Xunlei.ThunderSkin.6 [迅雷9皮肤文件] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\S-1-5-21-3795826015-3801581077-2544062959-1001\SOFTWARE\Classes\Xunlei.XLB.6 [迅雷下载合集文件] =>PUP.Optional.Xunlei
DELETED key*: HKEY_USERS\.DEFAULT\Software\SogouInput [] =>.Superfluous.Sogou
DELETED key*: HKEY_USERS\.DEFAULT\Software\Tencent [] =>.Superfluous.Tencent
DELETED key: HKCU\Software\MiniQQDownloader [] =>Trojan.GenericKD
DELETED key*: HKCU\Software\SogouInput [] =>.Superfluous.Sogou
DELETED key: HKCU\Software\SogouInput.ppup [] =>.Superfluous.Sogou
DELETED key: HKCU\Software\Tencent [] =>.Superfluous.Tencent
DELETED key: HKCU\Software\SogouInput.ppup.user [] =>.Superfluous.Sogou
DELETED key: HKCU\Software\SogouInput.user [] =>.Superfluous.Sogou
DELETED key*: HKCU\Software\AppDataLow\Tencent [] =>.Superfluous.Tencent
DELETED key*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\atwola.com [] =>.Superfluous.Atwola
DELETED key*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\ol.uk.at.atwola.com [] =>.Superfluous.Atwola
DELETED key*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\atwola.com [] =>.Superfluous.Atwola
DELETED key*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\ol.uk.at.atwola.com [301] =>.Superfluous.Atwola
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6796F670-BE24-4540-9D38-33A512C30F4A} [C:\Users\VULCAN\AppData\Roaming\Tencent\WebGamePlugin\1.0.4.3 (Not File)] =>.Superfluous.Tencent
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\static.audienceinsights.net [43] =>.Superfluous.AudienceInsights
DELETED key*: HKLM\SOFTWARE\Wow6432Node\UCBrowserPID [] =>.Superfluous.UCBrowser
DELETED key: HKLM\SOFTWARE\UCBrowserPID [] =>.Superfluous.UCBrowser
DELETED key*: [X64] HKLM\SOFTWARE\Classes\Tencent [TencentProtocol] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0A6E682E-614C-4fda-BBAD-9C71DB6C1B2C} [C:\Program Files (x86)\SogouInput\8.6.0.1423] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4D6DE936-912B-4aa1-A167-38A29A691337} [C:\Program Files (x86)\SogouInput\SogouExe (Not File)] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7AF645B2-3F1F-4639-81A1-39D794DC8A7D} [C:\Program Files (x86)\SogouInput\Components] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7F9CD7C-5AC6-470b-A50F-F7CC28D0771B} [C:\Program Files (x86)\SogouInput\8.6.0.1423] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7F9CD7C-5AC6-470b-A50F-F7CC28D0771C} [c:\windows\syswow64\IME\SogouPY] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AppStore.exe [C:\Program Files (x86)\Tencent\AppStore\Bin\AppStore.exe (Not File)] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\029AB1D033707234FAD100A0EAB4A227 [C:\Program Files (x86)\Microleaves\Traffic Exchange\Traffic Exchange Updater.exe (Not File)] =>.Superfluous.Microleaves
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\36100FB6A9BEACE4B964360B35351D6E [02:\Software\Microleaves\Online.io Application\Version (Not File)] =>.Superfluous.Microleaves
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\SogouComponents [C:\Program Files (x86)\SogouInput\Components] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\SogouInput [C:\Program Files (x86)\SogouInput] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Tencent [] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\QQMailPlugin [Tencent QQMail Plugin] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\英雄联盟 [Tencent] =>.Superfluous.Tencent
DELETED key: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\AppStore.exe [C:\Program Files (x86)\Tencent\AppStore\Bin\AppStore.exe (Not File)] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0A6E682E-614C-4fda-BBAD-9C71DB6C1B2C} [C:\Program Files (x86)\SogouInput\8.6.0.1423] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1FA39976-7194-44E8-8DD9-A9781D289934} [C:\Program Files (x86)\Tencent\QQ\Plugin\Com.Tencent.QQPet\bin\QQPet (Not File)] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4D6DE936-912B-4aa1-A167-38A29A691337} [C:\Program Files (x86)\SogouInput\SogouExe (Not File)] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7AF645B2-3F1F-4639-81A1-39D794DC8A7D} [C:\Program Files (x86)\SogouInput\Components] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BB32E0A4-AC96-4e85-8B8F-D7A90FDF715D} [C:\Users\VULCAN\AppData\Roaming\Tencent\QQ\QQAntiPhishing (Not File)] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7F9CD7C-5AC6-470b-A50F-F7CC28D0771B} [C:\Program Files (x86)\SogouInput\8.6.0.1423] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7F9CD7C-5AC6-470b-A50F-F7CC28D0771C} [c:\windows\syswow64\IME\SogouPY] =>.Superfluous.Sogou
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E8A77722-17C3-451a-88D0-D5F01DA120AE} [C:\Program Files (x86)\Tencent\QQMusic\QzoneMusic (Not File)] =>.Superfluous.Tencent
DELETED key*: HKCU\SOFTWARE\A6A369FD6E6EEC393047AD36DC01A180 [] =>Hijacker.Browser
DELETED key: [X64] HKLM\SOFTWARE\Classes\CLSID\{00000000-12C9-4305-82F9-43058F20E8D2}\InprocServer32 [C:\Program Files (x86)\Tencent\QQDownload\QQIEHelper64.dll (Not File)] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Classes\CLSID\{4836C333-208E-4BCE-B30B-00B9545B0F6E} [QQDownload IE RightClick Helper] =>.Superfluous.Tencent
DELETED key: [X64] HKLM\SOFTWARE\Classes\CLSID\{4836C333-208E-4BCE-B30B-00B9545B0F6E}\InprocServer32 [C:\Program Files (x86)\Tencent\QQDownload\QQIEHelper64.dll (Not File)] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Classes\CLSID\{53D2405C-48AB-4C8A-8F59-CE0610F13BBC} [QQShellExtension Class] =>.Superfluous.Tencent
DELETED key: [X64] HKLM\SOFTWARE\Classes\CLSID\{53D2405C-48AB-4C8A-8F59-CE0610F13BBC}\InprocServer32 [C:\Program Files (x86)\Tencent\QQ\ShellExt\QQShellExt64.dll] =>.Superfluous.Tencent
DELETED key*: [X64] HKLM\SOFTWARE\Classes\CLSID\{8AC3BC28-E145-4385-A694-8AAC128ACB16} [QQDownload Class] =>.Superfluous.Tencent
DELETED key: [X64] HKLM\SOFTWARE\Classes\CLSID\{8AC3BC28-E145-4385-A694-8AAC128ACB16}\InprocServer32 [C:\Program Files (x86)\Tencent\QQDownload\QQIEHelper64.dll (Not File)] =>.Superfluous.Tencent
---\\ Summary of the elements found (14)
https://nicolascoolman.eu/2017/02/23/tencentadressbar/ =>.Superfluous.Tencent
https://nicolascoolman.eu/2017/02/25/adware-pirrit/ =>Adware.Pirrit
https://www.nicolascoolman.com/fr/pup-sogou/ =>.Superfluous.Sogou
https://nicolascoolman.eu/2017/01/26/hijacker-browser/ =>PUP.Optional.Browser
https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/ =>HackTool.KMSpico
https://nicolascoolman.eu/2017/01/28/heuristic-suspect/ =>Heuristic.Suspect
https://nicolascoolman.eu/2017/03/04/superfluous-ucbrowser/ =>.Superfluous.UCBrowser
https://www.nicolascoolman.com/fr/adware-domaiq/ =>PUP.Optional.DomaIQ
https://nicolascoolman.eu/2017/04/25/trojan-generickd/ =>Trojan.GenericKD
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Xunlei
https://nicolascoolman.eu/2017/02/04/superfluous-atwola/ =>.Superfluous.Atwola
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.AudienceInsights
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Microleaves
https://nicolascoolman.eu/2017/02/02/hijacker-browser-2/ =>Hijacker.Browser
---\\ Other deletions. (20)
~ Registry Keys Tracing deleted (20)
~ Remove the old reports ZHPCleaner. (0)
---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Opera Software)
~ The system has been restarted.
---\\ Statistics
~ Items scanned : 3404
~ Items found : 0
~ Items cancelled : 0
~ Items repaired : 124
~ End of clean in 00h02mn03s
~====================
ZHPCleaner-[R]-10082017-00_16_53.txt
ZHPCleaner-[S]-10082017-00_12_31.txt