~ ZHPCleaner v2016.8.20.109 by Nicolas Coolman (2016/08/20) ~ Run by Mohameed&Nuha (Administrator) (20/08/2016 17:56:23) ~ Site : https://www.nicolascoolman.com ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : ~ Type : Repair ~ Report : C:\Users\Mohameed&Nuha\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\Mohameed&Nuha\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt ~ UAC : Deactivate ~ Boot Mode : Normal (Normal boot) Windows 7 Home Basic, 64-bit Service Pack 1 (Build 7601) ---\\ Services (0) ~ No malicious or unnecessary items found. ---\\ Browser internet (0) ~ No malicious or unnecessary items found. ---\\ Hosts file (0) ~ No malicious or unnecessary items found. ---\\ Scheduled automatic tasks. (0) ~ No malicious or unnecessary items found. ---\\ Explorer ( File, Folder) (61) MOVED file: C:\Windows\AutoKMS\AutoKMS.log =>HackTool.AutoKMS MOVED folder: C:\Program Files (x86)\SystemPlus =>PUP.Optional.SystemPlus MOVED folder: C:\Windows\AutoKMS =>HackTool.AutoKMS MOVED folder: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\CrashRpt =>.Superfluous.CrashReports MOVED folder: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\LavasoftTcpService =>PUP.Optional.LavasoftWebCompanion MOVED folder: C:\ProgramData\QuickTime =>Riskware.QuickTime MOVED folder: C:\Windows\Installer\MSI14A4.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI1711.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI2299.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI25E0.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI2E0C.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI36C4.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI39E2.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI3B4E.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI4401.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI4779.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI48BF.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI4AC.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI531C.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI56C3.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI5CCD.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI5F9D.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI64E1.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI6C18.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI6CB6.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI6DCF.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI7640.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI7696.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI7D7A.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI7D8A.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI7F3.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI819F.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI88FD.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI890F.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI8A3E.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI8C89.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI8F76.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI919F.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI999B.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI9A8E.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI9D4E.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI9D49.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSI9EAB.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSIA308.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSIAB04.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSIACB6.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSIACB.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSIB14C.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSIB424.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSIBD5D.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSIBD87.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSIC724.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSICCDF.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSIE026.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSIE24B.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSIE98D.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSIEE1.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSIF1D6.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSIF4DF.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSIFB8E.tmp- =>Empty MOVED folder: C:\Windows\Installer\MSIFDDF.tmp- =>Empty ---\\ Registry ( Key, Value, Data) (7) DELETED data: [X64] HKLM\SOFTWARE\Classes\.html\\Default [Bad : CRSBRWSHTML] =>PUP.Optional.CrossBrowse DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\GoogleChromeAutoLaunch_20E46419AC0D62B70C0C9F1E96A6FC89 ["C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window (Not File)] =>PUP.Optional.CrossBrowse DELETED key*: [X64] HKLM\SOFTWARE\Classes\TorntvDownloader [] =>PUP.Optional.TornTV DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SaferBrowserIsDefault ["C:\Program Files (x86)\Safer Technologies\Safer Browser\Application\SaferBrowserProtector.exe" --force-protect (Not File)] =>PUP.Optional.Eazel DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\shopperz04082015 [C:\Program Files\shopperz04082015\Sfval.exe (Not File)] =>PUP.Optional.Shopperz DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\shopperz0408201564 [C:\Program Files\shopperz04082015\Sfval64.exe (Not File)] =>PUP.Optional.Shopperz DELETED key*: [X64] HKLM\SOFTWARE\Messenger_Plus_LATAM [] =>.Superfluous.Conduit ---\\ Summary of the elements found (10) https://www.anti-malware.top/2016/05/04/hacktool-autokms/ =>HackTool.AutoKMS https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>PUP.Optional.SystemPlus https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.CrashReports https://www.anti-malware.top/2016/04/26/superfluous-lavasoftwebcompanion/ =>PUP.Optional.LavasoftWebCompanion https://www.anti-malware.top/2016/04/21/riskware-quicktime/ =>Riskware.QuickTime https://www.nicolascoolman.com/fr/pup-optional-crossbrowse =>PUP.Optional.CrossBrowse https://www.nicolascoolman.com/fr/hijacker-torntv/ =>PUP.Optional.TornTV https://www.nicolascoolman.com/fr/hijacker-eazel/ =>PUP.Optional.Eazel https://www.anti-malware.top/2016/04/21/pup-optional-shopperz/ =>PUP.Optional.Shopperz https://www.nicolascoolman.com/fr/toolbar-conduit/ =>.Superfluous.Conduit ---\\ Other deletions. (24) ~ Registry Keys Tracing deleted (23) ~ Remove the old reports ZHPCleaner. (1) ---\\ Result of repair ~ Repair carried out successfully ~ Browser not found (Opera Software) ---\\ Statistics ~ Items scanned : 1078 ~ Items found : 0 ~ Items cancelled : 0 ~ Items repaired : 68 ~ End of clean in 00h00mn29s ~==================== ZHPCleaner-[R]-20082016-17_56_52.txt ZHPCleaner-[S]-08012015-12_17_19.txt ZHPCleaner-[S]-20082016-17_54_01.txt