~ ZHPCleaner v2018.8.24.166 by Nicolas Coolman (2018/08/24)
~ Run by lf_vi (Administrator) (26/08/2018 11:19:35)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Legal
~ Type : Repair
~ Report : C:\Users\lf_vi\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\lf_vi\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Pro, 64-bit (Build 17134)


---\\ Alternate Data Stream (ADS). (0)
~ No malicious or unnecessary items found.


---\\ Services (0)
~ No malicious or unnecessary items found.


---\\ Browser internet (0)
~ No malicious or unnecessary items found.


---\\ Hosts file (1)
~ The hosts file is legitimate (1)


---\\ Scheduled automatic tasks. (0)
~ No malicious or unnecessary items found.


---\\ Explorer ( File, Folder) (17)
MOVED file: C:\Users\lf_vi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Tencent Gaming Buddy.lnk [Bad : C:\Program Files\TxGameAssistant\AppMarket\AppMarket.exe](.Tencent.) =>.SUP.Tencent
MOVED file: C:\Users\lf_vi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk [Bad : C:\Users\lf_vi\AppData\Roaming\uTorrent\uTorrent.exe](.BitTorrent Inc..) =>BitTorrent (P2P)
MOVED file: C:\Users\lf_vi\AppData\Roaming\inst.exe =>Adware.Pirrit
MOVED file: C:\Windows\Prefetch\BROWSERPROTECT.EXE-C73693F7.pf =>PUP.Optional.Eazel
MOVED folder: C:\Users\lf_vi\AppData\Local\Google\Chrome\User Data\Default\Extensions\bidmloagildlhkkiabgfdhpgkmhmgjho =>.SUP.FromDocToPDF
MOVED folder: C:\Users\lf_vi\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bidmloagildlhkkiabgfdhpgkmhmgjho =>.SUP.FromDocToPDF
MOVED folder: C:\Users\lf_vi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgfehfbnofiffladdncogfobimealokp =>Adware.Bandoo
MOVED folder: C:\Users\lf_vi\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgfehfbnofiffladdncogfobimealokp =>Adware.Bandoo
MOVED folder: C:\Users\lf_vi\AppData\Roaming\PDAppFlex =>Trojan.Elpman
MOVED folder: C:\ProgramData\Tencent =>.SUP.Tencent
MOVED folder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tencent Software =>.SUP.Tencent
MOVED folder: C:\WINDOWS\System32\config\systemprofile\AppData\Roaming\Tencent =>.SUP.Tencent
MOVED folder: C:\Users\lf_vi\AppData\Roaming\Tencent =>.SUP.Tencent
MOVED folder: C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Roaming\Tencent =>.SUP.Tencent
MOVED folder: C:\Program Files (x86)\IObit\Advanced SystemCare =>.SUP.AdvancedSystemCare
MOVED folder: C:\ProgramData\IObit\ASCDownloader =>.SUP.AdvancedSystemCare
MOVED folder: C:\Users\lf_vi\AppData\Roaming\IObit\Advanced SystemCare =>.SUP.AdvancedSystemCare


---\\ Registry ( Key, Value, Data) (4)
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent [BitTorrent Inc.] =>BitTorrent (P2P)
DELETED key*: HKCU\Software\undefined [] =>.SUP.Downloader
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1 [Vitzo Limited] =>Adware.OpenCandy
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{24904964-4247-4EBE-BC79-21D7FF68C6A0}_is1 [My Company, Inc.] =>.SUP.MyCompanyInc


---\\ Summary of the elements found (11)
https://nicolascoolman.eu/2017/02/23/tencentadressbar/ =>.SUP.Tencent
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>BitTorrent (P2P)
https://nicolascoolman.eu/2017/02/25/adware-pirrit/ =>Adware.Pirrit
https://nicolascoolman.eu/2017/09/27/pup-optional-browserdefender/ =>PUP.Optional.Eazel
https://nicolascoolman.eu/2017/12/02/sup-fromdoctopdf/ =>.SUP.FromDocToPDF
https://nicolascoolman.eu/2017/02/23/adware-bandoo/ =>Adware.Bandoo
https://nicolascoolman.eu/2017/09/23/trojan-elpman/ =>Trojan.Elpman
https://nicolascoolman.eu/2017/12/26/sup-advancedsystemcare/ =>.SUP.AdvancedSystemCare
https://nicolascoolman.eu/2017/12/22/sup-downloader/ =>.SUP.Downloader
https://nicolascoolman.eu/2017/02/24/adware-opencandy/ =>Adware.OpenCandy
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.MyCompanyInc


---\\ Other deletions. (7)
~ Registry Keys Tracing deleted (7)
~ Remove the old reports ZHPCleaner. (0)


---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Opera Software)


---\\ Statistics
~ Items scanned : 1241
~ Items found : 0
~ Items cancelled : 0
~ Items options : 0/7
~ Space saving (bytes) : 0


~ End of clean in 00h00mn27s

---\\ Reports (2)
ZHPCleaner-[S]-26082018-11_18_54.txt
ZHPCleaner-[R]-26082018-11_20_02.txt