~ ZHPCleaner v2017.7.17.123 by Nicolas Coolman (2017/07/17)
~ Run by asus (Administrator) (10/08/2017 21:14:57)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Illegal
~ Type : Repair
~ Report : C:\Users\asus\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\asus\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Pro, 64-bit (Build 14393)


---\\ Services (1)
CLOSED : KMSEmulator =>HackTool.AutoKMS


---\\ Browser internet (4)
REPLACED Quicklaunch: C:\Users\asus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [Bad : https://launchpage.org/?uid=oTlKBKjdhx0cXu%2FWPIQ3ejrqxdqdUE1pR8xkuJd%2Fb0XpWbd%2FokHw3ceQWPlm4HlNB964](.Google Inc..) =>Hijacker.Browser
REPLACED TaskBar: C:\Users\asus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk [Bad : https://launchpage.org/?uid=oTlKBKjdhx0cXu%2FWPIQ3ejrqxdqdUE1pR8xkuJd%2Fb0XpWbd%2FokHw3ceQWPlm4HlNB964](.Mozilla Corporation.) =>Hijacker.Browser
REPLACED Accessories: C:\Users\asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk [Bad : https://launchpage.org/?uid=oTlKBKjdhx0cXu%2FWPIQ3ejrqxdqdUE1pR8xkuJd%2Fb0XpWbd%2FokHw3ceQWPlm4HlNB964](.Microsoft Corporation.) =>PUP.Optional.Salus
REPLACED Accessories: C:\Users\asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk [Bad : https://launchpage.org/?uid=oTlKBKjdhx0cXu%2FWPIQ3ejrqxdqdUE1pR8xkuJd%2Fb0XpWbd%2FokHw3ceQWPlm4HlNB964](.Microsoft Corporation.) =>Hijacker.Browser


---\\ Hosts file (1)
~ The hosts file is legitimate (23)


---\\ Scheduled automatic tasks. (1)
DELETED task: [KMSAutoNet] [C:\ProgramData\KMSAutoS\KMSAuto Net.exe (Not File) ] =>HackTool.AutoKMS


---\\ Explorer ( File, Folder) (7)
MOVED file: C:\ProgramData\KMSAutoS\bin\KMSSS.exe [MDL Forum, mod by Ratiborus - KMS Server Emulator Service (XP)] =>HackTool.AutoKMS
MOVED file**: C:\ProgramData\KMSAutoS\KMSAuto Net.exe [MSFree Inc. - KMSAuto Net] =>HackTool.AutoKMS
MOVED file**: C:\Windows\SECOH-QAD.exe =>HackTool.KMSpico
MOVED file^: C:\Users\asus\AppData\Local\Akamai\netsession_win.exe [Akamai Technologies, Inc. - Akamai NetSession Client] =>.Superfluous.AkamaiHD
MOVED folder*: C:\ProgramData\KMSAutoS =>HackTool.WinActivator
MOVED folder^: C:\Users\asus\AppData\Local\Akamai =>.Superfluous.AkamaiHD
MOVED folder*: C:\Users\asus\AppData\Local\MSfree Inc =>HackTool.WinActivator


---\\ Registry ( Key, Value, Data) (8)
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\KMSEmulator [C:\ProgramData\KMSAutoS\bin\KMSSS.exe (Not File)] =>HackTool.AutoKMS
DELETED key*: HKEY_USERS\S-1-5-21-3077491925-2672696224-801911577-1001\SOFTWARE\Akamai [] =>.Superfluous.AkamaiHD
DELETED key: HKCU\Software\Akamai [] =>.Superfluous.AkamaiHD
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Akamai [Akamai Technologies, Inc] =>.Superfluous.AkamaiHD
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} [ITool] =>Toolbar.Ask
DELETED value: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Akamai NetSession Interface ["C:\Users\asus\AppData\Local\Akamai\netsession_win.exe"] =>.Superfluous.AkamaiHD
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\UDP Query User{A3D9FBF3-53DC-43FE-9C81-B6D7D78DD46A}C:\users\asus\appdata\local\akamai\netsession_win.exe [C:\users\asus\appdata\local\akamai\netsession_win.exe] =>.Superfluous.AkamaiHD
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\TCP Query User{B41E0935-FB95-4D56-AE94-7F96055D3E30}C:\users\asus\appdata\local\akamai\netsession_win.exe [C:\users\asus\appdata\local\akamai\netsession_win.exe] =>.Superfluous.AkamaiHD


---\\ Summary of the elements found (7)
https://nicolascoolman.eu/2017/02/02/hacktool-autokms/ =>HackTool.AutoKMS
https://nicolascoolman.eu/2017/02/02/hijacker-browser-2/ =>Hijacker.Browser
https://www.nicolascoolman.com/fr/pup-salus/ =>PUP.Optional.Salus
https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/ =>HackTool.KMSpico
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.AkamaiHD
https://nicolascoolman.eu/2017/01/13/hacktool-winactivator/ =>HackTool.WinActivator
https://nicolascoolman.eu/2017/02/28/toolbar-ask/ =>Toolbar.Ask


---\\ Other deletions. (17)
~ Registry Keys Tracing deleted (17)
~ Remove the old reports ZHPCleaner. (0)


---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Opera Software)
~ The system has been restarted.


---\\ Statistics
~ Items scanned : 3197
~ Items found : 0
~ Items cancelled : 0
~ Items repaired : 21


~ End of clean in 00h01mn10s
~====================
ZHPCleaner-[R]-10082017-21_16_07.txt
ZHPCleaner-[S]-10082017-21_12_16.txt