~ ZHPCleaner v2017.6.26.105 by Nicolas Coolman (2017/06/26)
~ Run by SERGE (Administrator)  (28/06/2017 14:16:08)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Illegal
~ Type : Nettoyer
~ Report : D:\Users\SERGE\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\SERGE\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit  (Build 15063)


---\\  Service. (1)
ARRETÉ : Service KMSELDI  =>HackTool.KMSpico


---\\  Navigateur internet. (1)
REMPLACÉ Google Chrome Preferences: "http://d36s9hlc2vimc.cloudfront.net/"  =>.Superfluous.CloudfrontNet


---\\  Fichier hôte. (1)
~ Le fichier hôte est légitime. (138)


---\\  Tâche planifiée. (1)
SUPPRIMÉ tâche: [AutoPico Daily Restart] [C:\Program Files\KMSpico\AutoPico.exe (Not File) ]  =>HackTool.KMSpico


---\\  Explorateur  ( Dossiers, Fichiers ). (65)
DEPLACÉ fichier: C:\Users\SERGE\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_nahhmpbckpgdidfnmfkfgiflpjijilce_0.localstorage    =>.Superfluous.SearchManager
DEPLACÉ fichier: C:\Program Files\KMSpico\Service_KMS.exe [@ByELDI - Service_KMS]  =>HackTool.KMSpico
DEPLACÉ fichier**: C:\Program Files\KMSpico\AutoPico.exe [@ByELDI - AutoPico]  =>HackTool.KMSpico
DEPLACÉ fichier**: C:\Windows\SECOH-QAD.exe    =>HackTool.KMSpico
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce  =>.Superfluous.SearchManager
DEPLACÉ dossier*: C:\Program Files\KMSpico  =>HackTool.KMSpico
DEPLACÉ dossier*: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico  =>HackTool.KMSpico
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign0be55e38bc269389  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign0dff0a72ae82e29f  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign17ef3e513826f472  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign193c4b49c797c2cb  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign1aa8c08f7fa9bd97  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign21d1d85ee3c5e33c  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign237353c8a001ba63  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign2805a057da0db68e  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign2b32c6975166251c  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign2f03e5e7f79768ed  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign35f719ca101fc832  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign37576090ed2f345d  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign41bbb52d295f199b  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign45fc450e86e18494  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign48ac4326f2dbde02  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign48af452d533f826d  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign49829edfa9b7d5fe  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign4f233653410e21b1  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign5148c02d131902fb  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign605d7312c3eefa2f  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign641f22534a507826  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign65e739ab86f023d3  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign6696da3c35b5e0c7  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign6dfa7474b3faba6d  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign712082a6efb480d7  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign7448b9dbb9cca58d  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign7c39c65eb19b9bd9  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign815efbff59b39768  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign85b6d63141117ad6  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign88580050d6990db4  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign8e6ae884f6cd8af6  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign913a8de2962d0378  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign9300319338a13101  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign94ee8f6b6b008531  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsign9a68a4d79ac507be  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsigna008566e85162377  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignac75144c628d85d0  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignb26448c7189a6cdd  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignb61b00de977f8181  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignbd3a4b1010fbf99f  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignbdcef22ca2ad80e3  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignbf0ef8358fbe28fc  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignc6915940f67aaf2c  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsigncacb5ce5598c74dc  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsigncdf591f80dc55234  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsigncf1afcb479f8534a  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsigne1424b51c8a465f0  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsigne243adc6e8ae5d91  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsigne3644ca9b68afaa4  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsigne528c3ae08c7e6b8  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsigneb6947ff3498876b  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignf4aa6e358acea6a0  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignfabcde4ec166d2f2  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignfb1aabe88e4dee78  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignfb3e2e6efffd8670  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignfcba710ec176d040  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Users\SERGE\AppData\Local\Tempzxpsignfd5f57607ddada52  =>.Superfluous.Temporary
DEPLACÉ dossier*: C:\Program Files (x86)\QuickTime  =>Riskware.QuickTime


---\\  Base de Registres ( Clés, Valeurs, Données ). (7)
SUPPRIMÉ clé*: HKCU\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce []  =>.Superfluous.SearchManager
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce []  =>.Superfluous.SearchManager
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce []  =>.Superfluous.SearchManager
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Service KMSELDI [C:\Program Files\KMSpico\Service_KMS.exe (Not File)]  =>HackTool.KMSpico
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASAPI32 []  =>.Superfluous.ByteFence
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASMANCS []  =>.Superfluous.ByteFence
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1 [KMSpico]  =>HackTool.KMSpico


---\\  Récapitulatif des éléments trouvés sur votre station. (6)
https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/  =>HackTool.KMSpico
https://nicolascoolman.eu/2017/02/02/superfluous-cloudfrontnet/  =>.Superfluous.CloudfrontNet
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.SearchManager
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.Temporary
https://nicolascoolman.eu/2017/01/15/riskware-quicktime/  =>Riskware.QuickTime
https://nicolascoolman.eu/2017/03/13/superfluous-bytefence/  =>.Superfluous.ByteFence


---\\  Nettoyage Additionnel. (12)
~ Suppression des Clés de registre Tracing. (12)
~ Suppression des anciens rapports ZHPCleaner. (0)


---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent  (Mozilla Firefox)
~ Ce navigateur est absent  (Opera Software)


---\\ Statistiques
~ Items scannés : 785
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 75


~ End of clean in 00h00mn24s
~====================
ZHPCleaner-[R]-28062017-14_16_32.txt
ZHPCleaner-[S]-28062017-12_22_47.txt
ZHPCleaner-[S]-28062017-14_14_34.txt