~ ZHPCleaner v2018.4.8.60 by Nicolas Coolman (2018/04/08)
~ Run by DiDaN (Administrator)  (08/04/2018 23:26:08)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Legal
~ Type : Repair
~ Report : C:\Users\DiDaN\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\DiDaN\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Pro, 64-bit  (Build 16299)


---\\  Alternate Data Stream (ADS). (0)
~ No malicious or unnecessary items found.


---\\  Services (0)
~ No malicious or unnecessary items found.


---\\  Browser internet (3)
DELETED data: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride [Bad : <-loopback>]  =>Hijacker.Proxy
DELETED data: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride [Bad : <-loopback>]  =>Hijacker.Proxy
DELETED data: [X64] HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxySettingsPerUser [Bad : 0]  =>.SUP.ProxyRestriction


---\\  Hosts file (1)
~ The hosts file is legitimate (21)


---\\  Scheduled automatic tasks. (1)
DELETED task: [update-S-1-5-21-3555456109-1735637794-955960373-1002] [C:\Program Files (x86)\Skillbrains\Updater\Updater.exe (Not File) ]  =>.SUP.Skillbrains


---\\  Explorer ( File, Folder) (5)
MOVED file: C:\Users\DiDaN\Desktop\µTorrent.lnk  [Bad : C:\Users\DiDaN\AppData\Roaming\uTorrent\uTorrent.exe](.BitTorrent Inc..)  =>BitTorrent (P2P)
MOVED file: C:\Users\DiDaN\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk  [Bad : C:\Users\DiDaN\AppData\Roaming\uTorrent\uTorrent.exe](.BitTorrent Inc..)  =>BitTorrent (P2P)
MOVED file: C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [ - TODO: <File description>]  =>.SUP.Skillbrains
MOVED folder^: C:\Program Files (x86)\Skillbrains  =>.SUP.Skillbrains
MOVED folder*: C:\Program Files\KMSpico  =>HackTool.KMSpico


---\\  Registry ( Key, Value, Data) (12)
DELETED key*: HKEY_USERS\S-1-5-21-3555456109-1735637794-955960373-1002\SOFTWARE\Magicbit []  =>.SUP.Magicbit
DELETED key*: HKEY_USERS\S-1-5-21-3555456109-1735637794-955960373-1002\SOFTWARE\SkillBrains []  =>.SUP.Skillbrains
DELETED key: HKCU\Software\Magicbit []  =>.SUP.Magicbit
DELETED key: HKCU\Software\SkillBrains []  =>.SUP.Skillbrains
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent [BitTorrent Inc.]  =>BitTorrent (P2P)
DELETED key*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\officialkmspico.com []  =>HackTool.KMSpico
DELETED key*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.officialkmspico.com []  =>HackTool.KMSpico
DELETED key*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\officialkmspico.com []  =>HackTool.KMSpico
DELETED key*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.officialkmspico.com [2003]  =>HackTool.KMSpico
DELETED key*: [X64] HKLM\SOFTWARE\Classes\S []  =>Toolbar.Agent
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Skillbrains []  =>.SUP.Skillbrains
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1 [Skillbrains]  =>.SUP.Skillbrains


---\\  Summary of the elements found (7)
https://nicolascoolman.eu/2017/04/03/hijacker-proxy/  =>Hijacker.Proxy
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.ProxyRestriction
https://www.anti-malware.top/2016/04/30/superfluous-skillbrains/  =>.SUP.Skillbrains
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>BitTorrent (P2P)
https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/  =>HackTool.KMSpico
https://nicolascoolman.eu/2017/12/23/sup-magicbit/  =>.SUP.Magicbit
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>Toolbar.Agent


---\\  Other deletions. (22)
~ Registry Keys Tracing deleted (22)
~ Remove the old reports ZHPCleaner. (0)


---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Mozilla Firefox)
~ Browser not found (Opera Software)
~ The system has been restarted.


---\\ Statistics
~ Items scanned : 487
~ Items found : 0
~ Items cancelled : 0
~ Items options : 0/7
~ Space saving (bytes) : 0


~ End of clean in 00h00mn24s

---\\  Reports (2)
ZHPCleaner-[S]-08042018-23_25_31.txt
ZHPCleaner-[R]-08042018-23_26_32.txt