~ ZHPFix v2018.10.24.186 by Nicolas Coolman (2018/10/24)
~ Run by Weloss (Administrator) (04/12/2018 16:55:16)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Certificate ZHPFix: Legal
~ State version : Version OK
~ Report : C:\Users\Weloss\Desktop\ZHPFix.txt
~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit (Build 17134)



---\\ SCRIPT DE L'UTILISATEUR. (33)
Script ZHPFix
O87 - FAEL: "TCP Query User{B8DB1DEC-CC8F-4AE0-896B-F928694F0331}E:\games\super mega baseball 2 red rock park\supermegabaseball.exe" [In-None-P6-TRUE] .(...) -- E:\games\super mega baseball 2 red rock park\supermegabaseball.exe (.not file.)
O87 - FAEL: "UDP Query User{035075B1-E2B3-4F55-9828-ED3E11BCFE32}E:\games\super mega baseball 2 red rock park\supermegabaseball.exe" [In-None-P17-TRUE] .(...) -- E:\games\super mega baseball 2 red rock park\supermegabaseball.exe (.not file.)
O87 - FAEL: "TCP Query User{1E56E9BE-AACA-44FD-B692-F505D400467F}E:\games\helldivers a new hell edition\binaries\x64\helldivers.exe" [In-None-P6-TRUE] .(...) -- E:\games\helldivers a new hell edition\binaries\x64\helldivers.exe (.not file.)
O87 - FAEL: "UDP Query User{C4D8F066-BE63-4A2D-9409-D8BA75AD8577}E:\games\helldivers a new hell edition\binaries\x64\helldivers.exe" [In-None-P17-TRUE] .(...) -- E:\games\helldivers a new hell edition\binaries\x64\helldivers.exe (.not file.)
O87 - FAEL: "TCP Query User{55247F63-7BE4-4B4F-BCBF-CB6F5AB14BA0}D:\games\life is strange before the storm farewell\life is strange - before the storm.exe" [In-None-P6-TRUE] .(...) -- D:\games\life is strange before the storm farewell\life is strange - before the storm.exe (.not file.)
O87 - FAEL: "UDP Query User{6547E959-C52A-4FD9-8FCB-E471B8A283F1}D:\games\life is strange before the storm farewell\life is strange - before the storm.exe" [In-None-P17-TRUE] .(...) -- D:\games\life is strange before the storm farewell\life is strange - before the storm.exe (.not file.)
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
O42 - Logiciel: qBittorrent 4.1.3 - (.The qBittorrent project.) [HKLM][64Bits] -- qBittorrent
O42 - Logiciel: SoulSeekkor's TQ Defiler - (.DemorTex Services.) [HKLM][64Bits] -- {A111D34B-7021-44CE-BEFB-3C17688F463B}
HKLM\SOFTWARE\qBittorrent
HKLM\SOFTWARE\WOW6432Node\qBittorrent
O43 - CFD: 28/09/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
O43 - CFD: 04/10/2018 - [] D -- C:\Users\Weloss\AppData\Roaming\qBittorrent
O43 - CFD: 06/04/2018 - [] D -- C:\Users\Weloss\AppData\Local\qBittorrent
O87 - FAEL: "{4A5AAA25-4A4C-400E-88BD-3D0F1D692ED4}" [In-None-P6-TRUE] .(...) -- D:\qBittorrent\qbittorrent.exe
O87 - FAEL: "{EA0FBC98-DB67-43AB-8E00-1980191F7C72}" [In-None-P17-TRUE] .(...) -- D:\qBittorrent\qbittorrent.exe
O87 - FAEL: "{CB407F7D-41D8-465C-AF0A-DE47EBD2DF3B}" [In-None-P6-TRUE] .(...) -- D:\qBittorrent\qbittorrent.exe
O87 - FAEL: "{350C8CCD-6380-4FAF-8520-ECFAA3903B9F}" [In-None-P17-TRUE] .(...) -- D:\qBittorrent\qbittorrent.exe
O90 - PUC: "B43D111A1207EC44EBBFC37186F864B3" [HKCU] . (.SoulSeekkor's TQ Defiler.)
O90 - PUC: "B43D111A1207EC44EBBFC37186F864B3" [HKU] . (.SoulSeekkor's TQ Defiler.)
O82 - LFC: 2016/01/27 21:37:10 A . (...) -- C:\Users\Weloss\Downloads\Minecraft 1.7.9 cracked.rar [155568610] =>.Crack,Keygen
HKLM\SOFTWARE\Yahoo
HKLM\SOFTWARE\WOW6432Node\Yahoo
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK]:YahooMusicEngine.exe
HKCU\SOFTWARE\AvastAdSDK
HKU\S-1-5-21-2701314721-994308290-3501443965-1000\SOFTWARE\AvastAdSDK
O43 - CFD: 07/02/2017 - [] D -- C:\ProgramData\AVAST Software
O43 - CFD: 07/02/2017 - [] D -- C:\ProgramData\Avg
O43 - CFD: 07/02/2017 - [] D -- C:\ProgramData\Avira
Fin


---\\ LOGICIEL. (2)
DESINSTALLER : qBittorrent
DESINSTALLER : {A111D34B-7021-44CE-BEFB-3C17688F463B}


---\\ SERVICE. (0)


---\\ TÂCHE PLANIFIÉE. (0)


---\\ NAVIGATEUR INTERNET. (0)


---\\ EXPLORATEUR ( Dossiers, Fichiers ). (0)


---\\ REGISTRE ( Clés, Valeurs, Données ). (11)
ABSENT Valeur FirewallRules: HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules [{B8DB1DEC-CC8F-4AE0-896B-F928694F0331}]
ABSENT Valeur FirewallRules: HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules [{035075B1-E2B3-4F55-9828-ED3E11BCFE32}]
ABSENT Valeur FirewallRules: HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules [{1E56E9BE-AACA-44FD-B692-F505D400467F}]
ABSENT Valeur FirewallRules: HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules [{C4D8F066-BE63-4A2D-9409-D8BA75AD8577}]
ABSENT Valeur FirewallRules: HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules [{55247F63-7BE4-4B4F-BCBF-CB6F5AB14BA0}]
ABSENT Valeur FirewallRules: HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules [{6547E959-C52A-4FD9-8FCB-E471B8A283F1}]
ABSENT Valeur FirewallRules: HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules [{4A5AAA25-4A4C-400E-88BD-3D0F1D692ED4}]
ABSENT Valeur FirewallRules: HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules [{EA0FBC98-DB67-43AB-8E00-1980191F7C72}]
ABSENT Valeur FirewallRules: HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules [{CB407F7D-41D8-465C-AF0A-DE47EBD2DF3B}]
ABSENT Valeur FirewallRules: HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules [{350C8CCD-6380-4FAF-8520-ECFAA3903B9F}]
SUPPRIMÉ Valeur: YahooMusicEngine.exe [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK]


---\\ COMMANDE. (0)


---\\ NON TRAITÉ. (0)

***** ~ Fin de rapport terminé en 00h00mn01s