~ ZHPCleaner v2017.2.12.26 by Nicolas Coolman (2017/02/12)
~ Run by FERHAT (Administrator)  (12/02/2017 22:53:35)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Repair
~ Report : C:\Users\FERHAT\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\FERHAT.FERHAT-PC\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows Seven Black Edition, 32-bit Service Pack 1 (Build 7601)


---\\  Services (0)
~ No malicious or unnecessary items found.


---\\  Browser internet (0)
~ No malicious or unnecessary items found.


---\\  Hosts file (2)
REPLACED:     ::1                         localhost
Number of found redirections 1/16


---\\  Scheduled automatic tasks. (0)
~ No malicious or unnecessary items found.


---\\  Explorer ( File, Folder) (7)
MOVED folder: C:\ProgramData\WindowsPerformanceRecorder  =>Adware.Kazy
MOVED folder: C:\ProgramData\QuickTime  =>Riskware.QuickTime
MOVED folder: C:\ProgramData\Microsoft\Blend  =>Adware.Suspect
MOVED folder: C:\Windows\Installer\MSI62C0.tmp-  =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSIA73C.tmp-  =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSIC8E4.tmp-  =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSIECD4.tmp-  =>.Superfluous.Empty


---\\  Registry ( Key, Value, Data) (7)
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\gamesbarq.com [24]  =>PUP.Optional.GamesBar
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\savefrom.net []  =>PUP.Optional.SaverOn
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\soundcloud.com [140]  =>PUP.Optional.SoundCloud
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\gamesbarq.com [43]  =>PUP.Optional.GamesBar
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\gamingwonderland.com [26]  =>PUP.Optional.Browser
DELETED key*: HKLM\SOFTWARE\Messenger_Plus_LATAM []  =>.Superfluous.Conduit
DELETED key*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} [Google Inc.]  =>Heuristic.Suspect


---\\  Summary of the elements found (10)
https://www.anti-malware.top/2016/08/09/adware-kazy/  =>Adware.Kazy
https://nicolascoolman.eu/2017/01/15/riskware-quicktime/  =>Riskware.QuickTime
https://www.anti-malware.top/2016/05/01/definition-dun-logiciel-pup-lpi/  =>Adware.Suspect
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.Empty
https://www.nicolascoolman.com/fr/adware-gamesbar/  =>PUP.Optional.GamesBar
https://www.nicolascoolman.com/fr/pup-saveron/  =>PUP.Optional.SaverOn
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>PUP.Optional.SoundCloud
https://nicolascoolman.eu/2017/01/26/hijacker-browser/  =>PUP.Optional.Browser
https://nicolascoolman.eu/2017/02/06/superfluous-conduit/  =>.Superfluous.Conduit
https://nicolascoolman.eu/2017/01/28/heuristic-suspect/  =>Heuristic.Suspect


---\\  Other deletions. (3)
~ Registry Keys Tracing deleted (3)
~ Remove the old reports ZHPCleaner. (0)


---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Google Chrome)
~ Browser not found (Mozilla Firefox)


---\\ Statistics
~ Items scanned : 299
~ Items found : 1
~ Items cancelled : 0
~ Items repaired : 14


~ End of clean in 00h00mn14s
~====================
ZHPCleaner-[R]-12022017-22_53_49.txt
ZHPCleaner-[S]-12022017-22_51_21.txt