~ ZHPCleaner v2016.12.24.222 by Nicolas Coolman (2016/12/24) ~ Run by Thomas (Administrator) (21/02/2017 21:45:46) ~ Web: https://www.nicolascoolman.com ~ Blog: https://www.anti-malware.top ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Type : Repair ~ Report : C:\Users\Thomas\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\Thomas\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Home, 64-bit (Build 14393) ---\\ Services (0) ~ No malicious or unnecessary items found. ---\\ Browser internet (0) ~ No malicious or unnecessary items found. ---\\ Hosts file (1) ~ The hosts file is legitimate (21) ---\\ Scheduled automatic tasks. (0) ~ No malicious or unnecessary items found. ---\\ Explorer ( File, Folder) (43) MOVED folder: C:\WINDOWS\Installer\MSIDE52.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIE067.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIE098.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIE1C2.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIE232.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIE2DB.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIE5C8.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIE646.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIE68A.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIE6F3.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIE85C.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIEAC2.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIEB29.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIEBFB.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIEC24.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIECC7.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIED1B.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIED55.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIEDE2.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIEF23.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIEFFB.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIF02E.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIF098.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIF135.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIF149.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIF15.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIF1C3.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIF213.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIF27F.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIF32C.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIF438.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIF4BA.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIF524.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIF930.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIFB11.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIFB54.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIFC5A.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIFC6E.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIFCB5.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIFD69.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIFE5C.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIFEDA.tmp- =>.Superfluous.Empty MOVED folder: C:\WINDOWS\Installer\MSIFF95.tmp- =>.Superfluous.Empty ---\\ Registry ( Key, Value, Data) (18) DELETED key*: HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Plus-HD-4.2 [] =>PUP.Optional.CrossRider DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Popcorn Time [Popcorn Official] =>.Superfluous.PopcornTime DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{17d13aa7-27b8-4d2b-b919-06e5dd609301} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B062E28-C2DE-4367-B690-6671584536AB} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5B2DB4E2-3C63-44FB-99F1-1E854C8D3F75} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{808926E7-ED05-4F6E-9E9C-805DBCFA473} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9BFB5C68-C476-46CB-9576-95ECED51ED1F} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A51023CA-FF5F-40B3-A2DA-7FD2D5BF2A7} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ac69b020-b8c1-40c7-afa9-95d635a355fc} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFFA6B7E-62B0-4098-A18A-A66399A3A04} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1C21671-3584-45C4-B748-A1102B19EB2E} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider DELETED key*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F2BA5C8D-89C7-4519-9B1-6D4A8F94E06D} [C:\Program Files (x86)\Plus-HD-4.2 (Not File)] =>PUP.Optional.CrossRider DELETED key*: [X64] HKLM\SOFTWARE\Classes\Nosibay.SurfMatch [Bubble Dock SurfMatch Class] =>PUP.Optional.BubbleDock DELETED key*: [X64] HKLM\SOFTWARE\Classes\Nosibay.SurfMatch.1 [Bubble Dock SurfMatch Class] =>PUP.Optional.BubbleDock DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\TCP Query User{A034B842-FA7F-4980-85B9-FCEDF4D879FA}C:\users\thomas\appdata\local\popcorn time\node-webkit\popcorn time.exe [C:\users\thomas\appdata\local\popcorn time\node-webkit\popcorn time.exe] =>.Superfluous.PopcornTime DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\UDP Query User{D0E82083-FBB2-41ED-A74C-C0CF6B522073}C:\users\thomas\appdata\local\popcorn time\node-webkit\popcorn time.exe [C:\users\thomas\appdata\local\popcorn time\node-webkit\popcorn time.exe] =>.Superfluous.PopcornTime DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\TCP Query User{B47856D8-FDDD-4EA6-A043-0FC5FE125647}C:\users\thomas\appdata\local\popcorn time\nw.exe [C:\users\thomas\appdata\local\popcorn time\nw.exe] =>.Superfluous.PopcornTime DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\UDP Query User{83AAB515-F1EE-4D7A-A159-A82647B5A0B4}C:\users\thomas\appdata\local\popcorn time\nw.exe [C:\users\thomas\appdata\local\popcorn time\nw.exe] =>.Superfluous.PopcornTime ---\\ Summary of the elements found (4) https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.Empty https://www.anti-malware.top/2016/04/30/pup-optional-crossrider/ =>PUP.Optional.CrossRider https://www.anti-malware.top/2016/09/28/superfluous-popcorntime/ =>.Superfluous.PopcornTime https://www.nicolascoolman.com/fr/pup-bubbledock/ =>PUP.Optional.BubbleDock ---\\ Other deletions. (25) ~ Registry Keys Tracing deleted (25) ~ Remove the old reports ZHPCleaner. (0) ---\\ Result of repair ~ Repair carried out successfully ~ Browser not found (Google Chrome) ~ Browser not found (Opera Software) ---\\ Statistics ~ Items scanned : 925 ~ Items found : 0 ~ Items cancelled : 0 ~ Items repaired : 61 ~ End of clean in 00h00mn34s ~==================== ZHPCleaner-[R]-21022017-21_46_20.txt ZHPCleaner-[S]-21022017-21_23_18.txt ZHPCleaner-[S]-21022017-21_33_32.txt