~ ZHPCleaner v2018.4.5.57 by Nicolas Coolman (2018/04/05)
~ Run by pierr (Administrator) (07/04/2018 19:03:22)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Legal
~ Type : Nettoyer
~ Report : C:\Users\pierr\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\pierr\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Pro, 64-bit (Build 16299)


---\\ ALTERNATE DATA STREAM (ADS). (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ SERVICE. (0)


---\\ NAVIGATEUR INTERNET. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ FICHIER HÔTE. (1)
~ Le fichier hôte est légitime. (21)


---\\ TÂCHE PLANIFIÉE. (1)
SUPPRIMÉ tâche: [AutoPico Daily Restart] [C:\Program Files\KMSpico\AutoPico.exe (Not File) ] =>HackTool.KMSpico


---\\ EXPLORATEUR ( Dossiers, Fichiers ). (16)
DEPLACÉ fichier: C:\Users\pierr\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\µTorrent.lnk [Bad : C:\Users\pierr\AppData\Roaming\uTorrent\uTorrent.exe](.BitTorrent Inc..) =>BitTorrent (P2P)
DEPLACÉ fichier: C:\Users\Public\Desktop\Popcorn Time.lnk [Bad : C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exe](..) =>.SUP.PopcornTime
DEPLACÉ fichier: C:\Program Files\KMSpico\Service_KMS.exe [ - Service_KMS] =>HackTool.KMSpico
DEPLACÉ fichier: C:\Program Files\KMSpico\AutoPico.exe [ - AutoPico] =>HackTool.KMSpico
DEPLACÉ fichier: C:\Windows\Prefetch\FASTDATAX.TMP-2CBA642A.pf =>Adware.FastDataX
DEPLACÉ fichier: C:\Windows\Prefetch\FASTDATAX.TMP-E4A4B2E9.pf =>Adware.FastDataX
DEPLACÉ fichier: C:\Windows\Prefetch\ONESYSTEMCARE.TMP-7D71C347.pf =>PUP.Optional.OneSystemCare
DEPLACÉ fichier: C:\Windows\Prefetch\SPEEDOWNLOADER.TMP-2F007889.pf =>Adware.SpeeDownloader
DEPLACÉ fichier: C:\Users\pierr\AppData\Local\Temp\setuplb.exe [My Company, Inc. - Browser Setup] =>.SUP.MyCompanyInc
DEPLACÉ fichier: C:\Users\pierr\AppData\Local\Temp\The Wire Season 4 S04 (1080p Bluray x265 HEVC 10bi [BitTorrent Inc. - µTorrent] =>BitTorrent (P2P)
DEPLACÉ fichier: C:\Users\pierr\AppData\Local\Temp\uninstall.exe =>PUP.Optional.Generic
DEPLACÉ fichier: C:\Windows\SECOH-QAD.dll =>HackTool.KMSpico
DEPLACÉ dossier*: C:\Program Files (x86)\Popcorn Time =>.SUP.PopcornTime
DEPLACÉ dossier*: C:\Program Files\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier*: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier*: C:\Users\pierr\AppData\Local\PopcornTime =>.SUP.PopcornTime


---\\ BASE DE REGISTRES ( Clés, Valeurs, Données ). (18)
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Service KMSELDI [C:\Program Files\KMSpico\Service_KMS.exe (Not File)] =>HackTool.KMSpico
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-870739227-962491652-328656873-1001\SOFTWARE\Popcorn Time [] =>.SUP.PopcornTime
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-870739227-962491652-328656873-1001\SOFTWARE\PopcornTime [] =>.SUP.PopcornTime
SUPPRIMÉ clé: HKCU\Software\Popcorn Time [] =>.SUP.PopcornTime
SUPPRIMÉ clé: HKCU\Software\PopcornTime [] =>.SUP.PopcornTime
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent [BitTorrent Inc.] =>BitTorrent (P2P)
SUPPRIMÉ clé*: HKCU\Software\webservice [] =>PUP.Optional.BitCoinMiner
SUPPRIMÉ clé*: HKLM\SOFTWARE\Wow6432Node\Firefox [] =>Adware.GhokswaBrowser
SUPPRIMÉ clé: HKLM\SOFTWARE\Firefox [] =>Adware.GhokswaBrowser
SUPPRIMÉ clé*: [X64] HKLM\Software\Classes\Installer\Products\E19AB2E32184B8745B4989678A80C1DC [WinSnare] =>.SUP.WinSnare
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KMSpico_is1 [KMSpico v9.1.3] =>HackTool.KMSpico
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15869D2EF44B7B8ABE8303D0CC29D116 [C:\Program Files (x86)\WinSnare(4.4.3)\stopweb.bat (Not File)] =>.SUP.WinSnare
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\180537C143CA9C177AB05F1DC38942F5 [C:\Program Files (x86)\WinSnare(4.4.3)\WinSnare64.dll (Not File)] =>.SUP.WinSnare
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Popcorn Time_is1 [Popcorn Time] =>.SUP.PopcornTime
SUPPRIMÉ clé*: HKCU\SOFTWARE\9AC889B833F3E6B11E26E438B5C85986 [] =>Hijacker.Browser
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\9AC889B833F3E6B11E26E438B5C85986 [] =>Hijacker.Browser
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{10B98150-9213-4E9E-A640-B5BE20988ADD} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{8DE94DC9-FF97-4AB5-92F1-A9D96F9C59BC} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico


---\\ RÉCAPITULATIF DES ÉLÉMENTS TROUVÉS SUR VOTRE STATION. (12)
https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/ =>HackTool.KMSpico
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>BitTorrent (P2P)
https://nicolascoolman.eu/2017/02/26/superfluous-popcorntime/ =>.SUP.PopcornTime
https://nicolascoolman.eu/2017/06/21/adware-fastdatax/ =>Adware.FastDataX
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.OneSystemCare
https://nicolascoolman.eu/2017/04/11/adware-speedownloader/ =>Adware.SpeeDownloader
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.MyCompanyInc
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Generic
https://nicolascoolman.eu/2017/09/14/pup-optional-bitcoinminer/ =>PUP.Optional.BitCoinMiner
https://nicolascoolman.eu/2017/02/19/adware-ghokswabrowser/ =>Adware.GhokswaBrowser
https://nicolascoolman.eu/2017/01/12/superfluous-winsnare/ =>.SUP.WinSnare
https://nicolascoolman.eu/2017/11/10/hijacker-browser-3/ =>Hijacker.Browser


---\\ NETTOYAGE ADDITIONNEL. (40)
~ Suppression des Clés de registre Tracing. (40)
~ Suppression des anciens rapports ZHPCleaner. (0)


---\\ BILAN DE LA REPARATION
~ Réparation réalisée avec succès.
~ Ce navigateur est absent (Mozilla Firefox)
~ Ce navigateur est absent (Opera Software)


---\\ STATISTIQUES
~ Items scannés : 733
~ Items trouvés : 0
~ Items annulés : 0
~ Items options : 0/7
~ Gain de place (Octets) : 0


~ End of clean in 00h00mn51s

---\\ LISTE DES RAPPORTS (2)
ZHPCleaner-[S]-07042018-19_00_43.txt
ZHPCleaner-[R]-07042018-19_04_13.txt