~ ZHPCleaner v2017.12.11.214 by Nicolas Coolman (2017/12/11)
~ Run by fadi (Administrator) (11/12/2017 16:43:50)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Legal
~ Type : Repair
~ Report : C:\Users\fadi\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\fadi\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 7 Ultimate, 32-bit Service Pack 1 (Build 7601)


---\\ Services (1)
CLOSED : KingoSoftService =>PUP.Optional.Youndoo


---\\ Browser internet (0)
~ No malicious or unnecessary items found.


---\\ Hosts file (1)
~ The hosts file is legitimate (21)


---\\ Scheduled automatic tasks. (0)
~ No malicious or unnecessary items found.


---\\ Explorer ( File, Folder) (12)
MOVED file: C:\Users\fadi\Desktop\QQ影音.lnk [Bad : C:\Program Files\Tencent\QQPlayer\QQPlayer.exe](..) =>.SUP.Tencent
MOVED file: C:\Users\fadi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\QQ影音.lnk [Bad : C:\Program Files\Tencent\QQPlayer\QQPlayer.exe](..) =>.SUP.Tencent
MOVED file: C:\Users\fadi\AppData\Roaming\Mozilla\Firefox\Profiles\hrjczfpd.default\storage\default\https+++en.softonic.com\.metadata =>.SUP.Softonic
MOVED file: C:\Users\fadi\AppData\Roaming\Mozilla\Firefox\Profiles\hrjczfpd.default\storage\default\https+++en.softonic.com\.metadata-v2 =>.SUP.Softonic
MOVED file: C:\Users\fadi\AppData\Roaming\Mozilla\Firefox\Profiles\hrjczfpd.default\storage\default\https+++en.softonic.com\idb\993782502OBNDE__KSDISG_NLA.sqlite =>.SUP.Softonic
MOVED file: C:\Users\fadi\AppData\Local\Kingosoft\Kingo Root\update_54326\bin\KingoSoftService.exe =>PUP.Optional.Youndoo
MOVED file**: C:\Windows\Prefetch\TENCENTDL.EXE-1CF0713F.pf =>.SUP.Tencent
MOVED file**: C:\program files\common files\Tencent\qqdownload\118\tencentdl.exe [Tencent - 腾讯高速下载引擎] =>.SUP.Tencent
MOVED folder*: C:\Program Files\Common Files\Tencent =>.SUP.Tencent
MOVED folder*: C:\ProgramData\Tencent =>.SUP.Tencent
MOVED folder*: C:\Users\fadi\AppData\Roaming\Tencent =>.SUP.Tencent
MOVED folder*: C:\Users\fadi\AppData\Roaming\IObit\Advanced SystemCare =>.SUP.AdvancedSystemCare


---\\ Registry ( Key, Value, Data) (11)
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\KingoSoftService [C:\Users\fadi\AppData\Local\Kingosoft\Kingo Root\update_54326\bin\KingoSoftService.exe (Not File)] =>PUP.Optional.Youndoo
DELETED key*: HKEY_USERS\S-1-5-21-3402908396-3170721023-3399320330-1000\SOFTWARE\Tencent [] =>.SUP.Tencent
DELETED key: HKCU\Software\Tencent [] =>.SUP.Tencent
DELETED key*: HKLM\SOFTWARE\Tencent [] =>.SUP.Tencent
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\tencentdl_RASAPI32 [] =>.SUP.Tencent
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\tencentdl_RASMANCS [] =>.SUP.Tencent
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{DB43B405-43AA-4f01-82D8-D84D47E6019C} [Haali OGM Parser] =>.SUP.Tencent
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{DB43B405-43AA-4f01-82D8-D84D47E6019C}\InprocServer32 [C:\Program Files\Tencent\QQPlayer\ogm.dll (Not File)] =>.SUP.Tencent
DELETED value: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Web Companion [C:\Program Files\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize ] =>PUP.Optional.LavasoftWebCompanion
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\TCP Query User{93DD03AC-5755-451D-A6EF-C8FA2853E79D}C:\program files\common files\tencent\qqdownload\118\tencentdl.exe [C:\program files\common files\tencent\qqdownload\118\tencentdl.exe] =>.SUP.Tencent
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\UDP Query User{101B08F7-6BEF-4D3C-B352-389EBA897556}C:\program files\common files\tencent\qqdownload\118\tencentdl.exe [C:\program files\common files\tencent\qqdownload\118\tencentdl.exe] =>.SUP.Tencent


---\\ Summary of the elements found (5)
https://nicolascoolman.eu/2017/03/11/superfluous-youndoo/ =>PUP.Optional.Youndoo
https://nicolascoolman.eu/2017/02/23/tencentadressbar/ =>.SUP.Tencent
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Softonic
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.AdvancedSystemCare
https://nicolascoolman.eu/2017/03/12/superfluous-lavasoftwebcompanion/ =>PUP.Optional.LavasoftWebCompanion


---\\ Other deletions. (53)
~ Registry Keys Tracing deleted (53)
~ Remove the old reports ZHPCleaner. (0)


---\\ Result of repair
~ Repair carried out successfully


---\\ Statistics
~ Items scanned : 671
~ Items found : 0
~ Items cancelled : 0
~ Items repaired : 24


~ End of clean in 00h00mn37s
~====================
ZHPCleaner-[R]-11122017-16_44_27.txt
ZHPCleaner-[S]-11122017-16_43_05.txt