~ ZHPCleaner v2017.1.17.15 by Nicolas Coolman (2017/01/17) ~ Run by 16917947 (Administrator) (19/01/2017 15:13:33) ~ Web: https://www.nicolascoolman.com ~ Blog: https://www.anti-malware.top ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Type : Repair ~ Report : C:\Users\16917947\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\16917947\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 7 Enterprise, 64-bit Service Pack 1 (Build 7601) ---\\ Services (0) ~ No malicious or unnecessary items found. ---\\ Browser internet (0) ~ No malicious or unnecessary items found. ---\\ Hosts file (1) ~ The hosts file is legitimate (21) ---\\ Scheduled automatic tasks. (0) ~ No malicious or unnecessary items found. ---\\ Explorer ( File, Folder) (28) MOVED file: C:\Windows\Prefetch\UPDATETRUSTEDSITES.EXE-AB8F50B6.pf =>PUP.Optional.SimpleSearches MOVED file: C:\Windows\Installer\wix{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}.SchedServiceConfig.rmi =>.Superfluous.Empty MOVED file: C:\Windows\Installer\wix{5A1C366F-31AC-48CA-BF13-0504FF31D6A3}.SchedServiceConfig.rmi =>.Superfluous.Empty MOVED file: C:\Windows\Installer\wix{6313DBA3-0CA9-4CD8-93B3-373534146B7B}.SchedServiceConfig.rmi =>.Superfluous.Empty MOVED file: C:\Windows\Installer\wix{D5783B51-00A6-4991-B6C3-88B35BA45E94}.SchedServiceConfig.rmi =>.Superfluous.Empty MOVED file: C:\Users\16917947\AppData\Local\Temp\wct7610.tmp =>.Superfluous.Temporary.OneDrive MOVED file: C:\Users\16917947\AppData\Local\Temp\wctCD8B.tmp =>.Superfluous.Temporary.OneDrive MOVED file: C:\Users\16917947\Downloads\AdwCleaner\quarantine\files\ljdnxuxbpypmyewuhnitjyzzvrsqsqba\rlservice.exe [TMRG, Inc. - Relevant-Knowledge] =>PUP.Optional.RelevantKnowledge MOVED file: C:\Users\16917947\Downloads\AdwCleaner\quarantine\files\ljdnxuxbpypmyewuhnitjyzzvrsqsqba\rlvknlg.exe [TMRG, Inc. - Relevant-Knowledge] =>PUP.Optional.RelevantKnowledge MOVED file: C:\Users\16917947\Downloads\AdwCleaner\quarantine\files\ljdnxuxbpypmyewuhnitjyzzvrsqsqba\rlvknlg32.exe [TMRG, Inc. - Relevant-Knowledge] =>PUP.Optional.RelevantKnowledge MOVED file: C:\Users\16917947\Downloads\AdwCleaner\quarantine\files\ljdnxuxbpypmyewuhnitjyzzvrsqsqba\rlvknlg64.exe [TMRG, Inc. - Relevant-Knowledge] =>PUP.Optional.RelevantKnowledge MOVED file: C:\Users\16917947\AppData\Local\Temp\spstub.exe [ClientConnect - Search Protect] =>PUP.Optional.SearchProtect MOVED file: C:\Users\16917947\AppData\Local\Temp\uttF7EB.tmp.exe [ClientConnect Ltd. - Custom Installer] =>.Superfluous.ClientConnect MOVED folder: C:\Users\16917947\AppData\Local\Temp\scoped_dir_3888_26202 =>.Superfluous.Temporary.Steam MOVED folder: C:\Program Files (x86)\QuickTime =>Riskware.QuickTime MOVED folder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime =>Riskware.QuickTime MOVED folder: C:\Windows\Installer\MSI1315.tmp- =>.Superfluous.Empty MOVED folder: C:\Windows\Installer\MSI23BF.tmp- =>.Superfluous.Empty MOVED folder: C:\Windows\Installer\MSI4C20.tmp- =>.Superfluous.Empty MOVED folder: C:\Windows\Installer\MSI4E16.tmp- =>.Superfluous.Empty MOVED folder: C:\Windows\Installer\MSI4EEC.tmp- =>.Superfluous.Empty MOVED folder: C:\Windows\Installer\MSI5DB.tmp- =>.Superfluous.Empty MOVED folder: C:\Windows\Installer\MSI61BE.tmp- =>.Superfluous.Empty MOVED folder: C:\Windows\Installer\MSI64BD.tmp- =>.Superfluous.Empty MOVED folder: C:\Windows\Installer\MSIB8E.tmp- =>.Superfluous.Empty MOVED folder: C:\Windows\Installer\MSICEAB.tmp- =>.Superfluous.Empty MOVED folder: C:\Windows\Installer\MSIE6FB.tmp- =>.Superfluous.Empty MOVED folder: C:\Users\16917947\AppData\Local\Temp\chrome_BITS_8012_30212 =>.Superfluous.Empty ---\\ Registry ( Key, Value, Data) (5) DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0220D03E4356C0654A37F1553557CDEE [C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\ProjectTemplates\VisualBasic\Windows\1033\WPFBrowserApplication\Settings.settings] =>PUP.Optional.CrossRider DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{FBE1C48F-1A8F-420F-8AAA-E2B84A42CF61} [C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe] =>PUP.Optional.RelevantKnowledge DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{0013EF04-2BE0-4767-9451-29567103065F} [C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe] =>PUP.Optional.RelevantKnowledge DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{980EFC71-8C7F-4332-893D-9E22429DE10B} [C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe] =>PUP.Optional.RelevantKnowledge DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{FE2FDB96-E741-44AA-89EB-1266B1BFE9CE} [C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe] =>PUP.Optional.RelevantKnowledge ---\\ Summary of the elements found (9) https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>PUP.Optional.SimpleSearches https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.Empty https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.Temporary.OneDrive https://www.nicolascoolman.com/fr/adware-relevantknowledge/ =>PUP.Optional.RelevantKnowledge https://www.nicolascoolman.com/fr/pup-searchprotect/ =>PUP.Optional.SearchProtect https://www.anti-malware.top/2016/06/15/superfluous-clientconnect/ =>.Superfluous.ClientConnect https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.Temporary.Steam https://nicolascoolman.eu/2017/01/15/riskware-quicktime/ =>Riskware.QuickTime https://www.anti-malware.top/2016/04/30/pup-optional-crossrider/ =>PUP.Optional.CrossRider ---\\ Other deletions. (7) ~ Registry Keys Tracing deleted (7) ~ Remove the old reports ZHPCleaner. (0) ---\\ Result of repair ~ Repair carried out successfully ~ Browser not found (Opera Software) ---\\ Statistics ~ Items scanned : 636 ~ Items found : 0 ~ Items cancelled : 0 ~ Items repaired : 33 ~ End of clean in 00h00mn18s ~==================== ZHPCleaner-[R]-19012017-15_13_51.txt ZHPCleaner-[S]-19012017-15_09_57.txt