~ ZHPCleaner v2018.8.12.159 by Nicolas Coolman (2018/08/12) ~ Run by Administrator (Administrator) (14/08/2018 01:24:08) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Certificate ZHPCleaner: Legal ~ Type : Repair ~ Report : C:\Documents and Settings\Administrator\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Documents and Settings\Administrator\Application Data\ZHP\ZHPCleaner_Reg.txt ~ UAC : Deactivate ~ Boot Mode : Normal (Normal boot) Windows XP, 32-bit Service Pack 3 (Build 2600) ---\\ Alternate Data Stream (ADS). (0) ~ No malicious or unnecessary items found. ---\\ Services (0) ~ No malicious or unnecessary items found. ---\\ Browser internet (0) ~ No malicious or unnecessary items found. ---\\ Hosts file (1) ~ The hosts file is legitimate (19) ---\\ Scheduled automatic tasks. (0) ~ No malicious or unnecessary items found. ---\\ Explorer ( File, Folder) (2) MOVED folder: C:\Program Files\Fighters =>.SUP.Empty MOVED folder: C:\Documents and Settings\Administrator\Local Settings\Application Data\UCBrowser =>.SUP.UCBrowser ---\\ Registry ( Key, Value, Data) (10) DELETED data: HKLM\SOFTWARE\Classes\BaiduSparkHTML\Shell\Open\Command\\Default [Bad : [html] "C:\Program Files\baidu\Baidu Browser\Spark.exe" -- "%1"] =>Broken.OpenCommand DELETED key*: HKCU\Software\UCBrowserPID [] =>.SUP.UCBrowser DELETED key*: HKLM\SOFTWARE\UCBrowserPID [] =>.SUP.UCBrowser DELETED key*: HKLM\SOFTWARE\Classes\adbanner.adbanner [adbanner Class] =>Adware.adBanner DELETED key*: HKLM\SOFTWARE\Classes\adbanner.adbanner.1 [adbanner Class] =>Adware.adBanner DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{89643D21-7B2A-11d1-8271-00A0C91F9CA0} [adbanner Class] =>Adware.adBanner DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\UCBrowserSvc [] =>.SUP.UCBrowser DELETED key*: HKLM\SOFTWARE\DtsEncodeTools [] =>PUP.Optional.WeatherTool DELETED value: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\SMΔRT-Protection [C:\Program Files\Smadav\SMΔRTP.exe] =>Heuristic.Salus DELETED value: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck [C:\WINDOWS\System32\dumprep 0 -k.dumprep] =>Heuristic.Salus ---\\ Summary of the elements found (6) https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Empty https://nicolascoolman.eu/2017/03/04/superfluous-ucbrowser/ =>.SUP.UCBrowser https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>Broken.OpenCommand https://nicolascoolman.eu/2016/12/31/adware-adbanner/ =>Adware.adBanner https://www.nicolascoolman.com/fr/pup-optional-weathertool =>PUP.Optional.WeatherTool https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>Heuristic.Salus ---\\ Other deletions. (22) ~ Registry Keys Tracing deleted (22) ~ Remove the old reports ZHPCleaner. (0) ---\\ Result of repair ~ Repair carried out successfully ---\\ Statistics ~ Items scanned : 687 ~ Items found : 0 ~ Items cancelled : 0 ~ Items options : 0/7 ~ Space saving (bytes) : 0 ~ End of clean in 00h01mn37s ---\\ Reports (2) ZHPCleaner-[S]-14082018-01_13_21.txt ZHPCleaner-[R]-14082018-01_25_45.txt