~ ZHPCleaner v2018.7.15.149 by Nicolas Coolman (2018/07/15)
~ Run by silas (Administrator) (18/07/2018 15:15:05)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version KO
~ Certificate ZHPCleaner: Legal
~ Type : Repair
~ Report : C:\Users\silas\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\silas\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home Single Language, 64-bit (Build 17134)


---\\ Alternate Data Stream (ADS). (0)
~ No malicious or unnecessary items found.


---\\ Services (0)
~ No malicious or unnecessary items found.


---\\ Browser internet (0)
~ No malicious or unnecessary items found.


---\\ Hosts file (1)
~ The hosts file is legitimate (1)


---\\ Scheduled automatic tasks. (0)
~ No malicious or unnecessary items found.


---\\ Explorer ( File, Folder) (70)
MOVED file: C:\Users\silas\Downloads\uTorrent.exe [BitTorrent Inc. - µTorrent] =>BitTorrent (P2P)
MOVED folder: C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\langpack-pt-BR@firefox.mozilla.org =>Adware.Babylon
MOVED folder: C:\Program Files (x86)\Dashlane =>.SUP.Empty
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign091bc03fa5483a45 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign120180eb8d96bf57 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign1a74d21155136c6c =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign1d6f1184d0b1bcdf =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign1f7244e9674a4625 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign269f8eddc0fdf873 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign2b76d2ae2620f176 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign2e88e232a47faa60 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign34b06bb3d04b6878 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign361002ec90b3152e =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign396177c72082ff63 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign3f1a8538391c4612 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign43b923c910a9e0f8 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign46926d7e01404469 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign4850b590fa94070f =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign4c53ea02c3a13b97 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign4d9352ca34dba5aa =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign4f9d58c1899646f6 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign51ec6044351b63ff =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign5a9b0234599d167f =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign5b7521f950822cea =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign5bc23586f6efc661 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign669cc10b6d620538 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign6ce4dd0fb52c859c =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign7117f2c23058a4f4 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign73fbe36765dfb66a =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign802d781d427f4a48 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign84ad149c5e4aca75 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign84f18e431c2c7c2d =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign8569bc0719cb15bd =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsign9f77d6ab3d745016 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsigna5083fbeff69cf8b =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsigna5ff7b571af57b38 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsigna8aa3d7032e4c019 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsigna8c4f83ffbefdc67 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsigna9566db19a9afa7b =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignadf1223caeeae7ee =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignae566435e337b87c =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignb217077603b02818 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignb3e6dda45fe85942 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignb49095ea2dbf4216 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignb68da905dded37df =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignbb8393a67a4804f8 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignbeffadb0e0ad84c3 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignc2b2064f63d05c0d =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignc3579a266b783a7c =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignc920eae36144a4a2 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignc9860f5212c44bb5 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsigncd418d54c07813a0 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignd076c9586df03045 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignd27ccba872d0c382 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignd675f714cb34fde5 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignd74bd10fdee5b13d =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsigndcd547d864ac27d3 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsigndfa1ac22f96a5739 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsigne1f686371188609a =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsigne2e175bc6a427a66 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsigne7d7455d4bebf061 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsigneccf9888a04779fc =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignef2813b7fda90b41 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignef48f8b3de11d01a =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignf0cf5d5222c70263 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignf2b03f07005af5b2 =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignf3a662f3614de79a =>.SUP.Temporary
MOVED folder: C:\Users\silas\AppData\Local\Tempzxpsignfb70b27617f4847a =>.SUP.Temporary
MOVED folder: C:\Program Files (x86)\QuickTime =>Riskware.QuickTime
MOVED folder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime =>Riskware.QuickTime


---\\ Registry ( Key, Value, Data) (14)
DELETED key*: HKEY_USERS\S-1-5-21-2181840671-3561481943-960450070-1002\SOFTWARE\App Host Service [] =>.SUP.SweetLabs
DELETED key: HKCU\Software\App Host Service [] =>.SUP.SweetLabs
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Host App Service [SweetLabs] =>.SUP.SweetLabs
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent [BitTorrent Inc.] =>BitTorrent (P2P)
DELETED key*: HKCU\Software\Lavasoft\Web Companion [] =>PUP.Optional.LavasoftWebCompanion
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com [] =>PUP.Optional.LavasoftWebCompanion
DELETED key*: HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion [] =>PUP.Optional.LavasoftWebCompanion
DELETED key*: HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5} [] =>PUP.Optional.Legacy
DELETED key: HKLM\SOFTWARE\Lavasoft\Web Companion [] =>PUP.Optional.LavasoftWebCompanion
DELETED key: HKLM\SOFTWARE\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5} [] =>PUP.Optional.Legacy
DELETED key*: [X64] HKLM\SOFTWARE\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474} [IMyOverlayIcon] =>PUP.Optional.Legacy
DELETED key*: [X64] HKLM\SOFTWARE\Classes\AppID\OverlayIcon.DLL [] =>PUP.Optional.BonanzaDeals
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474} [IMyOverlayIcon] =>PUP.Optional.Legacy
DELETED key: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\OverlayIcon.DLL [] =>PUP.Optional.BonanzaDeals


---\\ Summary of the elements found (9)
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>BitTorrent (P2P)
https://nicolascoolman.eu/2017/03/03/adware-babylon/ =>Adware.Babylon
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Empty
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Temporary
https://nicolascoolman.eu/2017/01/15/riskware-quicktime/ =>Riskware.QuickTime
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.SweetLabs
https://nicolascoolman.eu/2017/03/12/superfluous-lavasoftwebcompanion/ =>PUP.Optional.LavasoftWebCompanion
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Legacy
https://www.anti-malware.top/2016/04/28/pup-optional-bonanzadeals/ =>PUP.Optional.BonanzaDeals


---\\ Other deletions. (21)
~ Registry Keys Tracing deleted (21)
~ Remove the old reports ZHPCleaner. (0)


---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Mozilla Firefox)
~ Browser not found (Opera Software)


---\\ Statistics
~ Items scanned : 603
~ Items found : 0
~ Items cancelled : 0
~ Items options : 0/7
~ Space saving (bytes) : 0


~ End of clean in 00h00mn33s

---\\ Reports (2)
ZHPCleaner-[S]-18072018-15_11_43.txt
ZHPCleaner-[R]-18072018-15_15_38.txt