~ ZHPCleaner v2017.8.15.140 by Nicolas Coolman (2017/08/15) ~ Run by Netels (Administrator) (19/08/2017 17:51:13) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Certificate ZHPCleaner: Illegal ~ Type : Nettoyer ~ Report : C:\Users\Netels\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\Netels\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Home, 64-bit (Build 15063) ---\\ Service. (0) ---\\ Navigateur internet. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Fichier hôte. (1) ~ Le fichier hôte est légitime. (21) ---\\ Tâche planifiée. (1) SUPPRIMÉ tâche: [AutoPico Daily Restart] [C:\Program Files\KMSpico\AutoPico.exe (Not File) ] =>HackTool.KMSpico ---\\ Explorateur ( Dossiers, Fichiers ). (15) DEPLACÉ fichier: C:\Program Files\KMSpico\Service_KMS.exe [ - Service_KMS] =>HackTool.KMSpico DEPLACÉ fichier: C:\Program Files\KMSpico\WinDivert.sys [Basil Projects - WinDivert network packet capture and (re)in] =>HackTool.KMSpico DEPLACÉ fichier: C:\Program Files\KMSpico\AutoPico.exe [ - AutoPico] =>HackTool.KMSpico DEPLACÉ fichier: C:\Windows\Prefetch\CACAOWEB.EXE-0CBE1190.pf =>.SUP.CacaoWeb DEPLACÉ fichier: C:\Users\Netels\AppData\Local\Akamai\netsession_win.exe [Akamai Technologies, Inc. - Akamai NetSession Client] =>.SUP.AkamaiHD DEPLACÉ fichier**: C:\Program Files (x86)\Popcorn Time\Updater.exe [Popcorn Time - Updater] =>.SUP.PopcornTime DEPLACÉ fichier**: C:\Program Files\KMSpico\KMSELDI.exe [ - KMS GUI ELDI] =>HackTool.KMSpico DEPLACÉ dossier*: C:\Program Files (x86)\DLL-Files.com Client =>PUP.Optional.DllFilesFixer DEPLACÉ dossier*: C:\Program Files (x86)\Popcorn Time =>.SUP.PopcornTime DEPLACÉ dossier*: C:\Program Files\KMSpico =>HackTool.KMSpico DEPLACÉ dossier*: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DLL-Files.com Client =>PUP.Optional.DllFilesFixer DEPLACÉ dossier*: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico DEPLACÉ dossier*: C:\Users\Netels\AppData\Roaming\DLL-files.com =>PUP.Optional.DllFilesFixer DEPLACÉ dossier^: C:\Users\Netels\AppData\Local\Akamai =>.SUP.AkamaiHD DEPLACÉ dossier*: C:\Users\Netels\AppData\Local\PopcornTimeDesktop =>.SUP.PopcornTime ---\\ Base de Registres ( Clés, Valeurs, Données ). (30) SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Service KMSELDI [C:\Program Files\KMSpico\Service_KMS.exe (Not File)] =>HackTool.KMSpico SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\WinDivert1.1 [C:\Program Files\KMSpico\WinDivert.sys (Not File)] =>HackTool.KMSpico SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1256413727-3789574366-1623718322-1001\SOFTWARE\Akamai [] =>.SUP.AkamaiHD SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1256413727-3789574366-1623718322-1001\SOFTWARE\DLL-Files.com [] =>PUP.Optional.DllFilesFixer SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1256413727-3789574366-1623718322-1001\SOFTWARE\Popcorn Time [] =>.SUP.PopcornTime SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1256413727-3789574366-1623718322-1001\SOFTWARE\PopcornTime [] =>.SUP.PopcornTime SUPPRIMÉ clé: HKCU\Software\Akamai [] =>.SUP.AkamaiHD SUPPRIMÉ clé: HKCU\Software\DLL-Files.com [] =>PUP.Optional.DllFilesFixer SUPPRIMÉ clé: HKCU\Software\Popcorn Time [] =>.SUP.PopcornTime SUPPRIMÉ clé: HKCU\Software\PopcornTime [] =>.SUP.PopcornTime SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Akamai [Akamai Technologies, Inc] =>.SUP.AkamaiHD SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KMSpico_is1 [KMSpico v9.1.3] =>HackTool.KMSpico SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\DLL-Files.com [] =>PUP.Optional.DllFilesFixer SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DA71BA65-680A-4212-9150-6239217B53DC_DLL-Files.c~79141F26_is1 [DLL-Files.com Client] =>PUP.Optional.DllFilesFixer SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\UDP Query User{48F62FAD-FE61-4BE9-B0F3-940F7F75CD37}C:\users\netels\appdata\local\akamai\netsession_win.exe [C:\users\netels\appdata\local\akamai\netsession_win.exe] =>.SUP.AkamaiHD SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\TCP Query User{72D095A1-1A57-4ADD-BD3C-16B911024D67}C:\users\netels\appdata\local\akamai\netsession_win.exe [C:\users\netels\appdata\local\akamai\netsession_win.exe] =>.SUP.AkamaiHD SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\UDP Query User{DC852A8B-942D-4C9D-9A80-5A99FC5F051D}C:\users\netels\appdata\local\akamai\netsession_win.exe [C:\users\netels\appdata\local\akamai\netsession_win.exe] =>.SUP.AkamaiHD SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\TCP Query User{4EE11ECA-301C-431E-9066-3A79987E7579}C:\users\netels\appdata\local\akamai\netsession_win.exe [C:\users\netels\appdata\local\akamai\netsession_win.exe] =>.SUP.AkamaiHD SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{7D28BB7F-4213-4907-8044-D2B50FDDF644} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{0327B58C-C8D4-4636-8DD7-63DEBC456D98} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{9AAFA9C7-41B8-477F-BE97-E4D9DCEE6D36} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{A43DC487-5C76-4FE8-81C9-6F6FAAD02304} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{2C881299-35E3-457B-8445-F9E91C631657} [C:\Program Files (x86)\Popcorn Time\Updater.exe] =>.SUP.PopcornTime SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{442FABE3-DF09-4160-A5BE-617AD2203BB7} [C:\Program Files (x86)\Popcorn Time\Updater.exe] =>.SUP.PopcornTime SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{BE2E06FB-05B4-45E1-891E-8A6252529F53} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{767E9F1E-158A-4E7C-9D9F-7534AE28A1B5} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{C5F94A7F-9ED6-4E2B-80B3-08995BB7486B} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{E2868AA8-B94E-4B17-A167-AB2B8E1F3468} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{377CF690-FB88-4C5D-9CA8-EF2F74F986B5} [C:\Program Files\KMSpico\KMSELDI.exe] =>HackTool.KMSpico SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{29B2315F-FEAD-46C9-8212-A5640913E96B} [C:\Program Files\KMSpico\KMSELDI.exe] =>HackTool.KMSpico ---\\ Récapitulatif des éléments trouvés sur votre station. (5) https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/ =>HackTool.KMSpico https://nicolascoolman.eu/2017/01/15/superfluous-cacaoweb/ =>.SUP.CacaoWeb https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.AkamaiHD https://nicolascoolman.eu/2017/02/26/superfluous-popcorntime/ =>.SUP.PopcornTime https://www.nicolascoolman.com/fr/pup-optional-dllfilesfixer/ =>PUP.Optional.DllFilesFixer ---\\ Nettoyage Additionnel. (12) ~ Suppression des Clés de registre Tracing. (12) ~ Suppression des anciens rapports ZHPCleaner. (0) ---\\ Bilan de la réparation ~ Réparation réalisée avec succès. ~ Ce navigateur est absent (Opera Software) ~ Le système a été redémarré. ---\\ Statistiques ~ Items scannés : 1091 ~ Items trouvés : 0 ~ Items annulés : 0 ~ Items réparés : 47 ~ End of clean in 00h00mn45s ~==================== ZHPCleaner-[R]-19082017-17_51_58.txt ZHPCleaner-[S]-19082017-17_37_19.txt ZHPCleaner-[S]-19082017-17_50_23.txt